Back to index
Download the installer for your operating system or run
oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.14.32-x86_64 Team Approvals:
Tests:
Blocking jobs Informing jobs Upgrades from:
Untested upgrades:
4.13.23 ,
4.13.25 ,
4.13.26 ,
4.13.27 ,
4.13.28 ,
4.13.29 ,
4.13.30 ,
4.13.31 ,
4.13.32 ,
4.13.33 ,
4.13.34 ,
4.13.35 ,
4.13.36 ,
4.13.38 ,
4.13.40 ,
4.13.41 ,
4.14.11 ,
4.14.12 ,
4.14.13 ,
4.14.14 ,
4.14.15 ,
4.14.17 ,
4.14.18 ,
4.14.19 ,
4.14.20 ,
4.14.22 ,
4.14.23 ,
4.14.24 ,
4.14.25 ,
4.14.26 ,
4.14.27 ,
4.14.28 ,
4.14.3 ,
4.14.4 ,
4.14.5 ,
4.14.6 ,
4.14.7 ,
4.14.8 ,
4.14.9 Upgrades to:
Loading changelog, this may take a while ...
Created: 2024-07-04 17:19:32 +0000 UTC
Image Digest: sha256:912d7c15e1d82ffc4aa1fc34d2b64c4c7b6670ecd11314c14ca2d6ffdcea22a3
Release 4.14.32 was created from registry.ci.openshift.org/ocp/release:4.14.0-0.nightly-2024-07-04-081327
Components
New images
Removed images
ovn-kubernetes-microshift-rhel-9
ovn-kubernetes-rhel-9
Rebuilt images without code change
apiserver-network-proxy git a3c0e6b7 sha256:5a6d596d4a3237143e56c6a098cf9c96c88dff032590798f24cc8403d07dd7f0
machine-os-content sha256:0383a7bdaf2f04a9f210ff17efef94f0d0e3fc344cb938cfb844dbc004be29ad
rhel-coreos sha256:75b90ce012613e1cdae255373a18956231437a346a8d015aa1a2ee35efd2cbc4
rhel-coreos-extensions sha256:9f958187ca2295ed4b15548f249f089fdbf7e8defe4f732aa01beef34ff1b5b3
OCPBUGS-34641 : Invalid Pull-Secret when using password which contains a colon character (#6416) #6416
OCPBUGS-31631 : Deploy dual stack with IPv6 on top of bond/vlan fails (#6322) #6322
MGMT-17594 : Bump x/net to v0.24.0 to mitigate CVE-2023-45288 (#6216) #6216
MGMT-17549 : Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#6203) #6203
MGMT-17541 : Replace broken golangci reference (#6197) #6197
NO-ISSUE: replace postgres images as current one disappeared from quay (#6134) #6134
MGMT-16950 : changing dnsmasq configuration for sno in order to meet single ip installation flow for ibu (#5973) #5973
MGMT-16494 : Move ip hint file creation to ignition in order to change it in IBI process (#5974) #5974
MGMT-16517 : Add Env Var Deployment Type & Set ABI (#5987) #5987
MGMT-15796 : set CloudControllerManager to External for OCI (#5877) #5877
OCPBUGS-23069 : Ignore hostPrefix validation for plugins other than OVN/SDN (#5676) #5676
MGMT-15704 : One typo and one missing piece of config, discovered after MGMT-15704 merged (#5465) #5465
Bump OCP versions: 4.12 (#5467) #5467
MGMT-15653 : Validate domain in one place (#5451) #5451
MGMT-15704 : Assisted service should create Day2 import CR for hub cluster. (#5459) #5459
MGMT-15340 : Ensure vlan interface names will be <= 15 characters (#5389) #5389
NO-ISSUE: Add subsystem tests to platform support level (#5460) #5460
Bump OCP versions: 4.10 (#5463) #5463
Bump OCP versions: 4.13 (#5457) #5457
Bump OCP versions: 4.13, 4.11, 4.12 (#5454) #5454
MGMT-11456 : Bugfix - remove redundant code (#5372) #5372
Bump OCP versions: 4.11, 4.12, 4.13 (#5452) #5452
AGENT-694 : Support external platform type for agent installer (#5438) #5438
MGMT-15100 : Remove unused feature-support-levels API endpoint (#5450) #5450
Update RHTAP references (#5410) #5410
Fix setup_env.sh failure handling (#5442) #5442
Add BMH annotation keys to docs (#5444) #5444
OCPBUGS-17992 day2 skip install config overrides (#5439) #5439
Bump OCP versions: 4.12, 4.10 (#5441) #5441
MGMT-14881 : return a valid error when no disks has been found (#5430) #5430
MGMT-15595 : Make client a separate go module (#5434) #5434
MGMT-15177 : Align feature support level to support platform as filterable feature (#5424) #5424
Bump OCP versions: 4.12 (#5432) #5432
Bump OCP versions: 4.11, 4.13 (#5431) #5431
Use go 1.18 when setting up environment (#5422) #5422
NO-ISSUE: Bump k8s.io/klog/v2 from 2.70.1 to 2.100.1 (#5428) #5428
MGMT-15356 : Ensure filenames are distinct between openshift and manifest (#5382) #5382
MGMT-15491 : Validate vSphere disk.EnableUUID ignoring cluster platform (#5416) #5416
NO-ISSUE: Extend waiting time to test DB container to be ready (#5425) #5425
Bump OCP versions: 4.10 (#5423) #5423
Bump OCP versions: 4.13, 4.12 (#5421) #5421
OCPBUGS-17415 : Bump golang.org/x/net (#5417) #5417
MGMT-14933 : Validate hosts running in OCI (#5413) #5413
Ensure inspection is disabled on day-2 spoke node BMHs (#5406) #5406
MGMT-15423 : Change the user message from: ‘Host is not compatible with cluster platform %s; either disable this host or choose a compatible cluster platform (%v)’ to ‘Host is not compatible with cluster platform %s; either disable this host or discover a new, compatible host.’ (#5412) #5412
Don’t set detached for BMHs without infraenv label (#5414) #5414
RHTAPBUGS-318 : Fetch tag in RHTAP build (#5333) #5333
MGMT-15424 : parametrize envoy configmap name (#5411) #5411
Bump OCP versions: 4.12 (#5409) #5409
Bump OCP versions: 4.11 (#5407) #5407
MGMT-15335 : Fix missing state when trying to update to not supported platform (#5399) #5399
Bump OCP versions: 4.14 (#5403) #5403
Update RHTAP references (#5387) #5387
MGMT-15389 : add feature flag to enable/disable OKD support (#5400) #5400
MGMT-11949 : MGMT-12278: Update libksba and libxml2 (#5398) #5398
MGMT-15388 : Remove unsupported platforms from the supported-platforms endpoint (#5394) #5394
AGENT-557 : Split register into registerCluster and registerInfraEnv (#5376) #5376
MGMT-15339 : Run network config before NetworkManager (#5375) #5375
MGMT-15128 : Remove control plane machine set so that control-plane-machine-set operator would not go degraded due to placeholder credentials on installation. (#5378) #5378
MGMT-15047 : use installer to deploy on external platform (#5381) #5381
MGMT-15343 : dependabot remove docker (#5392) #5392
Bump OCP versions: 4.13, 4.10 (#5391) #5391
Don’t attempt to contact spoke while unbinding a day2 host (#5383) #5383
Update RHTAP references (#5374) #5374
MGMT-15128 : Remove control plane machine set so that control-plane-machine-set operator would not go degraded due to placeholder credentials on installation. (#5364) #5364
Bump OCP versions: 4.12 (#5384) #5384
MGMT-14793 : Assisted discovery core and root user shell should have (#5373) #5373
MGMT-15215 : Allow setting of UI specific data for a cluster (#5358) #5358
MGMT-15343 : dependabot group updates (#5379) #5379
MGMT-14923 : add OSImageVersion to InfraEnvSpec (#5365) #5365
Bump OCP versions: 4.13 (#5377) #5377
Update RHTAP references (#5370) #5370
OCPBUGS-16077 : Fix DNS validation (#5371) #5371
MGMT-11456 : kube-api should allow user to specify infraenv additional trust bundle (#5357) #5357
Bump OCP versions: 4.11, 4.12 (#5369) #5369
MGMT-15295 : Fixc bug in list manifests (#5366) #5366
MGMT-14015 : Custom manifest feature usage is never turning off (#5363) #5363
MGMT-14491 : Invalid node label returns error 500 instead of 400 (#5362) #5362
Update RHTAP references (#5328) #5328
Bump OCP versions: 4.14 (#5360) #5360
MGMT-15243 : Skip any zero size manifests when applying (#5355) #5355
Bump OCP versions: 4.12 (#5356) #5356
MGMT-14656 : Sort disks by HCTL after the other options (#5354) #5354
No-ISSUE: Revert “MGMT-14634: Ensure that empty manifest may not be added. (#5348)” (#5353) #5348
MGMT-15213 : temporary disable release-domain-name-resolved-correctly validation (#5351) #5351
MGMT-15073 : Cluster reset - only system generated manifests to be deleted (#5338) #5338
MGMT-15070 : Unable to change machine-network with dual stack (#5349) #5349
MGMT-14634 : Ensure that empty manifest may not be added. (#5348) #5348
MGMT-15150 : Use same installer binary for all platform types (#5334) #5334
MGMT-14851 : Update docs for allowing automatedCleaningMode (#5343) #5343
Bump OCP versions: 4.14, 4.12 (#5345) #5345
MGMT-14726 : Ensure that manifest filename does not contain spaces. (#5342) #5342
MGMT-15064 : Update is_external API description (#5336) #5336
Bump OCP versions: 4.10, 4.11 (#5339) #5339
MGMT-14852 : Allow AutomatedCleaningMode to be set by user (#5319) #5319
MGMT-14374 : update day2 master docs (#5335) #5335
MGMT-14620 Only emit succesful host creation message for pre install hosts (#5296) #5296
MGMT-14704 : Provide info on custom/vs non custom manifest in manifest endpoint. (#5278) #5278
MGMT-15114 : remove event for cluster registration failed (#5330) #5330
MGMT-15126 : Add missing incompatible features in some of the feature-support feature (#5327) #5327
MGMT-15107 : Bump version for hacking LSO catalog (#5323) #5323
Create an override annotation for the ironic agent image (#5310) #5310
OCPBUGS-13621 : Fix singular Ingress and API cluster VIPs removal (#5216) #5216
Don’t require key encipherment usage for approving CSRs (#5322) #5322
MGMT-13284 : Check for BMH CRD before creating controller (#5284) #5284
MGMT-14937 : Deprecate user_managed_networking attribute (#5317) #5317
Bump OCP versions: 4.14 (#5320) #5320
Bump OCP versions: 4.13, 4.10, 4.12 (#5316) #5316
NO-ISSUE: parametrize template to enable switching secrets (#5313) #5313
MGMT-14240 : Specify connect-timeout on curl (#5314) #5314
MGMT-15034 : Fix patch of infrastructure CR with external platform (#5312) #5312
MGMT-14979 : add sasl/scraml auth method for kafka notifications (#5299) #5299
MGMT-15025 : Forbid register Z architecture cluster with OCI platform (#5309) #5309
MGMT-15015 Provider IsHostSupported panic if platform is not found (#5306) #5306
OCPBUGS-13738 enforce additional ntp sources added into chrony (#5295) #5295
MGMT-14992 : Fix Minimal ISO set as default in s390x (#5302) #5302
MGMT-14631 : Removing leftover of support for openshift 4.8 (#5301) #5301
Bump OCP versions: 4.14, 4.11 (#5300) #5300
MGMT-14973 : Fix misleading logs showing wrong platform and user_managed_networking combination (#5298) #5298
MGMT-14975 : Update MCE operator installation to use stable-2.3 channel (#5297) #5297
MGMT-14769 : Enable upgrade agent by default (#5276) #5276
MGMT-14165 : AgentClusterInstall Webhooks improvements and fixes (#5275) #5275
Bump OCP versions: 4.13, 4.12 (#5293) #5293
MGMT-14730 : Validate that manifest file size does not exceed 1MB (#5281) #5281
MGMT-14883 : Fix feature-support validation fail to validate openshift version (#5290) #5290
MGMT-14904 : fix error code for ignition size validation (#5291) #5291
MGMT-14631 : Remove support for openshift 4.8 (#5221) #5221
Add tls config for the service monitor (#5282) #5282
Bump OCP versions: 4.12, 4.10 (#5288) #5288
Red Hat Trusted App Pipeline update assisted-service-q2vh (#5270) #5270
Bump OCP versions: 4.13 (#5280) #5280
OCPBUGS-7076 : Copy Day2 BMH if Agent is installing (#5250) #5250
OCPBUGS-14405 : Avoid panic if pull secret contains non-string (#5267) #5267
MGMT-13746 : validate discovery ignition size (#5273) #5273
MGMT-14830 : Enable TechPreviewNoUpgrade when platform is external (#5279) #5279
MGMT-13431 : patching bug - ODF storage class not recognizing all device sets (#5268) #5268
MGMT-14803 : Fix cluster update won’t fail on incompatible OLM operator dependency (#5264) #5264
MGMT-14600 : Prevent installing dual-stack vSphere on OCP version smaller than 4.13 (#5271) #5271
MGMT-14750 : Allow FC, ECKD, FBA drive types on s390x (#5269) #5269
MGMT-12186 : Add MCE operator plugin (#5203) #5203
Bump OCP versions: 4.11, 4.12 (#5265) #5265
MGMT-14781 : Make LSO operator to support all CPU architectures (#5262) #5262
Bump OCP versions: 4.13 (#5261) #5261
MGMT-14582 : Set OCI platform behind a capability (#5249) #5249
MGMT-13997 : Issues when using multiple bonds with CIM Assisted Installer (#5233) #5233
MGMT-13685 : Make sure ingress and api vip are not broadcast address. (#5256) #5256
MGMT-14723 : Fix randomly failing subsystem test (#5259) #5259
MGMT-14649 : Add feature support for OCI platform (#5244) #5244
NO-ISSUE: fixed misleading error message, the order of the host status was reverse (#5257) #5257
MGMT-14306 : Update host role validation to accept AutoAssign in Day2 (#5247) #5247
Delete the spoke BMH before removing the finalizer (#5239) #5239
MGMT-14723 : Remove duplicate operator cpu architecture validation (#5254) #5254
MGMT-14734 : Fix failed to update Nutanix provider cluster when on multi architecture (#5253) #5253
MGMT-14728 : Escape the escape char () (#5252) #5252
Bump OCP versions: 4.14 (#5251) #5251
MGMT-14721 : Get icsp-file from registries.conf for oc extract command (#5245) #5245
Bump OCP versions: 4.10 (#5248) #5248
Docs fix: ensure kubeconfig secret is created with a kubeconfig key. (#5246) #5246
MGMT-13938 : support external platform (#5143) #5143
Bump OCP versions: 4.11, 4.12 (#5243) #5243
MGMT-8097 : masters schedulable kube-api (#5240) #5240
Remove the detached annotation when BMH is being deleted (#5228) #5228
MGMT-13643 : added MaxLength to additional_trust_bundle (#5226) #5226
Bump OCP versions: 4.11, 4.12 (#5232) #5232
MGMT-14356 : Set 4.13 to default (#5230) #5230
Fix cpu partitioning struct tag/field (#5227) #5227
Force a BMH reboot when the infraenv image changes (#5212) #5212
MGMT-14416 : VipDhcpAllocation from update params should take precedence (#5209) #5209
Bump OCP versions: 4.13 (#5225) #5225
MGMT-14526 : Possible issue with validateNoWildcardDNS resolution validation (#5198) #5198
MGMT-14648 : Make “sufficient-masters-count - failed” subsystem test tolerate extra event. (#5223) #5223
Don’t panic on BMH delete when agents are unbound (#5219) #5219
NO-ISSUE: Wait for hostedcontrolplane to be created (#5218) #5218
NO-ISSUE: Fix install customization doc (#5217) #5217
MGMT-14610 : Wait for the hostedcontrolplane CR ready status instead of watching the ready status of all pods in the namespace (#5215) #5215
OCPBUGS-13081 : Support by-path root device hints (#5185) #5185
MGMT-14526 : Allow trailing dot (.) to be appended to domain name (#5208) #5208
OCPBUGS-13310 support setting CPUPartitioningMode with install config overrides (#5207) #5207
Bump OCP versions: 4.12, 4.13 (#5205) #5205
Deprovision when using converged and unbinding (#5199) #5199
OCPBUGS-13356 : Fix ‘vendor’ root device hint evaluation (#5197) #5197
MGMT-13977 : Disallow single character base domain (#5196) #5196
Updating ose-agent-installer-api-server images to be consistent with ART (#5026) #5026
MGMT-14530 : Changing event message filtering to escape wildcards %,_ and not be case sensetive (#5194) #5194
OCPBUGS-13250 : Fix disk name in generated HardwareDetails (#5193) #5193
MGMT-14370 : add OCP 4.14.0-ec.0 images (#5190) #5190
Podman README-disconnected requires 4.2 and not 3.3 (#5191) #5191
Bump OCP versions: 4.13 (#5189) #5189
MGMT-14425 : Changing event counts behavior (#5186) #5186
MGMT-14226 : Upgrade moby to 20.10.24 (#5153) #5153
Remove all spoke resources when deleting the node (#5161) #5161
Bump OCP versions: 4.12, 4.10 (#5182) #5182
MGMT-14507 : Exposing event headers for scripts (#5179) #5179
MGMT-14509 return 404 if cluster not found when host try to register (#5180) #5180
NO-ISSUE: Check whether is defined (#5178) #5178
NO-ISSUE: Override the control plane operator image only if explicitly asked to (#5176) #5176
MGMT-11424 : added validations for ignition cert (#5145) #5145
Bump OCP versions: 4.11 (#5173) #5173
Bump OCP versions: 4.13 (#5170) #5170
NO-ISSUE: Fixes the UI deployment (#5169) #5169
Update state machine graphs (#5168) #5168
MGMT-14462 : Allow to deploy assisted-service with all available images (#5167) #5167
NO-ISSUE Remove Approvers that are not longer in the group (#5166) #5166
Handle ironic URLs in dual stack hub and IPv6 spoke (#5163) #5163
MGMT-14449 : change creation time for hosts to one minute ago instead of now, to avoid race conditions in tests (#5160) #5160
MGMT-13890 : Drain before deprovisioning spoke nodes (#5110) #5110
Bump OCP versions: 4.10, 4.11 (#5157) #5157
MGMT-13955 : Add known issue regarding ignoring disk size validations (#5158) #5158
MGMT-14315 : Allow to install P and Z architectures with Single Node Openshift on 4.13 (#5147) #5147
NO ISSUE: use literal for cpu limits, to enable nulliable value (#5155) #5155
Bump OCP versions: 4.12 (#5151) #5151
MGMT-14389 : Update operator bundle channel (#5148) #5148
MGMT-14108 : add readiness probe initialDelaySeconds for assisted-service and assisted-image-service (#5150) #5150
MGMT-14137 : Create test flow for ZTP for node labeling and avoiding reboot for custom role (#5086) #5086
Bump OCP versions: 4.13 (#5149) #5149
MGMT-14396 : Get correct path for binary from mirror (#5141) #5141
NO-ISSUE: Fix grammar mistakes (#5146) #5146
MGMT-14395 : Day-2 domain name resolution step shouldn’t include release image domain (#5139) #5139
Cache must-gather images by architecture (#5140) #5140
MGMT-14298 : Set full ISO as default for Z architecture (#5136) #5136
Improve inaccurate ODF validation message (#5137) #5137
MGMT-14338 : add missing stream notifications (#5132) #5132
Bump OCP versions: 4.11 (#5135) #5135
Bump OCP versions: 4.10, 4.12 (#5131) #5131
Use contexts in spoke client (#5130) #5130
MGMT-13083 : limit the size of release binaries (#5120) #5120
NO-ISSUE: Currently, while trying to fetch events using cluster_id
, host_ids
and severities
we don’t get severity filtered correctly because of the precedence of AND, OR in SQL
. (#5123) #5123
MGMT-14239 : Enable UMN as default for Power arch (ppc64le) (#5127) #5127
MGMT-14266 : Fix unclear message when creating a P/Z cluster with OCP ver 4.10 (#5122) #5122
MGMT-10977 : Validate DNS server connection (#5102) #5102
MGMT-14242 : MGMT-14017: MGMT-14239: MGMT-14300: Fix multiple bugs (feature support and feature usage) (#5119) #5119
Add private SELinux label for volume mount content (#5109) #5109
Bump OCP versions: 4.11, 4.12, 4.13 (#5118) #5118
MGMT-14283 : Ignored validations - validation id “all” does not work (#5117) #5117
MGMT-14125 : Use systemd unit instead of dracut hook to configure network (#5107) #5107
MGMT-12301 : refator the progress bar to use state machine (#5103) #5103
Bump OCP versions: 4.13, 4.9, 4.12, 4.11, 4.10 (#5115) #5115
MGMT-13178 : As part of events pagination epic, this commit is about adding ‘order’ parameter so the client can request the events in the desired order, and changing the counting of events by severity to apply after the filtering (#5106) #5106
Bump OCP versions: 4.12, 4.13 (#5105) #5105
MGMT-14195 : Use clusterIdMatcher instead of gomock.Any() in inventory_test (#5104) #5104
MGMT-14161 : removing multi cpu architecture for infra envs (#5098) #5098
MGMT-13846 : Reject UserManagedNetworking true when cluster VIPs are set (#5071) #5071
MGMT-13888 : Remove spoke node on BMH delete (#5028) #5028
MGMT-14190 : Allow installing Power architecture with CMN and MinimalISO (#5101) #5101
MGMT-14026 : Add validation to ensure ignored validation ID exists (#5074) #5074
MGMT-13918 : Modify ignored validation should not be possible post-install (#5077) #5077
NO-ISSUE: Make DB transaction terminate function only when error (#4946) #4946
NO-ISSUE: Wrap VIP update in the DB around transaction (#4943) #4943
MGMT-13916 : Update enhancement doc for ignoring validations feature (#5095) #5095
Bump OCP versions: 4.10, 4.11, 4.13 (#5100) #5100
Add a function for setting annotations (#5099) #5099
Presently, in the PreNetworkConfig script, we are removing the default network manager configuration for a host in every case. This should be altered so that the default configuration is deleted only if custom nmstate configuration has been provided for the host. (#5044) #5044
MGMT-14078 : Add “unavailable” option to the support-level enum (#5062) #5062
MGMT-14150 : Update install-config to support multi vSphere data-centers (#5090) #5090
MGMT-14133 : Fix P/Z support level allows cluster with OLM operators. (#5088) #5088
MGMT-14017 : report accurate P/Z feature usage if multi (#5079) #5079
MGMT-14074 : Don’t run nmcli
if not available (#5087) #5087
Bump OCP versions: 4.12, 4.9 (#5080) #5080
MGMT-13925 : Get the ironic URLs in reconcile rather than at startup (#5041) #5041
MGMT-14074 : Reload NM config after creation (#5066) #5066
Update cluster-baremetal-operator to 4.13 branch (#5078) #5078
NO-ISSUE: add release tag to notified events versions (#5068) #5068
MGMT-14109 : Set P and Z architectures support label as tech-preview on 4.12 (#5072) #5072
MGMT-13308 : Adding events pagination - Currently events are retrieved by the service as a list of events which match the query. This commit is implementing events pagination. (#4987) #4987
MGMT-14073 : Fix logging for event uploader (#5070) #5070
Remove README section about the assisted-service live iso (#5069) #5069
MGMT-14040 : Add log that shows event upload is running (#5054) #5054
Bump OCP versions: 4.11 (#5060) #5060
actually use the ENABLE_DATA_COLLECTION parameter (#5063) #5063
MGMT-14075 : Fix register cluster won’t fail when creating cluster with P or Z architectures on 4.12 (#5061) #5061
MGMT-14000 : Document support-level new API (#5053) #5053
Cleanup BMAC logging (#5055) #5055
Bump OCP versions: 4.12 (#5057) #5057
MGMT-13550 : Create day2 support for node labeling (#5042) #5042
OKD: bump to latest stable release (#5020) #5020
MGMT-14042 : Disable data collection for SaaS by default (#5056) #5056
Bump OCP versions: 4.13 (#5051) #5051
manifests: Add a shebang to NM dispatcher script (#5050) #5050
MGMT-12486 : Add ENABLE_DATA_COLLECTION environment variable to template.yaml (#5048) #5048
MGMT-13520 : filter out unnecessary validations for unbound host (#5023) #5023
MGMT-13862 : Return bed request on wrong feature-feature or feature-architecture combination. (#5039) #5039
MGMT-13947 : Revert assisted boot reporter service (#5035) #5035
Sparing the redirect for official k8s registry (#5033) #5033
MGMT-13596 : Add PATCH to the Manifests API (#5015) #5015
Bump OCP versions: 4.12, 4.13, 4.9, 4.8, 4.11, 4.10 (#5043) #5043
NO-ISSUE: remove the full ignition from log (#5032) #5032
OCPBUGS-8335 : Don’t wait for console if disabled (#5022) #5022
Update multi image names (#5016) #5016
ACM-4127 : Cache release images even if there is no matching OS image (#5027) #5027
MGMT-13957 : deny requests with query parameters matching node-boot. Directed at upload files (#5037) #5037
In case the converged flow is enabled and the assisted-service fails to get a valid ironic inspection URL it’s using the Ironic URL as default. (#5031) #5031
MGMT-13903 : Select inside machine CIDR for BMH (#5024) #5024
MGMT-13904 Add missing feature IDs. (#5030) #5030
MGMT-13913 : Fix empty features list when calling GET v2/support-levels/features (#5029) #5029
MGMT-13859 : notify when creating cluster and resources (#5013) #5013
Allow removing the agent when BMH is deleted (#4948) #4948
MGMT-13659 : Design a feature support mechanism that supports different feature-support criteria (#4989) #4989
MGMT-12486 : Implement data sending for on-prem deployments (#4880) #4880
Fix invalid character in feature-support enhancement (#5021) #5021
MGMT-13780 : Write a feature-support-level enhancement doc (#5000) #5000
MGMT-13398 omit BMH secret from day2 spoke worker (#5009) #5009
NO-ISSUE: display code coverage locally without mocks (#5011) #5011
Full changelog
MGMT-17594 : Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#834) #834
MGMT-17591 : Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#830) #830
MGMT-16843 : Ensure valid hostname during install (#794) #794
OCPBUGS-20049 : Remove uninitialized taint for agent-based installs (#753) #753
NO-ISSUE: dependabot exclude k8s (#706) #706
OCPBUGS-16482 : bump golangci-lint to 1.53.1 (#702) #702
OCPBUGS-4240 : allow controller to complete for agent-based installs (#700) #700
MGMT-15235 : Compile with CGO_ENABLED=1 for amd64 (#699) #699
Revert “MGMT-15235: Compile with CGO_ENABLED=1 for FIPS (#683)” (#693) #683
OCPBUGS-17252 : Bump golang.org/x/net/html (#695) #695
Updating ose-agent-installer-orchestrator images to be consistent with ART (#652) #652
MGMT-15343 : dependabot group updates (#692) #692
MGMT-15344 : Assisted-controller should not timeout on waiting cvo by itself (#688) #688
MGMT-15235 : Compile with CGO_ENABLED=1 for FIPS (#683) #683
MGMT-13586 : Wait for ETCD Bootstrap to complete (#670) #670
NO-ISSUE: Remove slaviered from project OWNERS (#669) #669
NO-ISSUE: Bump github.com/go-openapi/strfmt from 0.21.3 to 0.21.7 (#663) #663
Updating ose-agent-installer-csr-approver images to be consistent with ART (#651) #651
MGMT-14299 : Limit untaint nodes to vsphere/nutanix (#660) #660
NO-ISSUE: Add javipolo to approvers (#659) #659
MGMT-12967 : Create network policy in assisted-installer namespace (#658) #658
NO-ISSUE: Bump github.com/onsi/gomega from 1.24.2 to 1.27.5 (#656) #656
MGMT-14114 : Nutanix - uninitialized set on nodes (#653) #653
Full changelog
OCPBUGS-33404 : Make removable disks eligible (#725) #725
MGMT-17594 : Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#705) #705
MGMT-17591 : Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#703) #703
MGMT-17541 : Replace broken golangci reference (#698) #698
NO-ISSUE: Bump the go-dependencies group with 1 update (#597) #597
NO-ISSUE: Bump the go-dependencies group with 5 updates (#595) #595
MGMT-15661 : Update to latest ghw version (#594) #594
MGMT-15235 : Allow setting CGO_ENABLED flag (#589) #589
MGMT-15235 : Compile with CGO_ENABLED=1 for amd64 (#588) #588
Revert “MGMT-15235: Compile with CGO_ENABLED=1 for FIPS (#569)” (#582) #569
OCPBUGS-17251 : Bumping golang.org/x/net (#586) #586
MGMT-14933 : Detect if the host in running in OCI (#585) #585
MGMT-15359 : support appliance multipath virtual device (#584) #584
MGMT-13111 : Freeze on 404 Not Found
(#583) #583
MGMT-15343 : dependabot remove docker (#581) #581
MGMT-15343 : dependabot group updates (#579) #579
Updating ose-agent-installer-node-agent images to be consistent with ART (#575) #575
OCPBUGS-16373 : Ignore arping errors on RHEL 9 (#576) #576
NO-ISSUE: Bump github.com/coreos/ignition/v2 from 2.16.0 to 2.16.2 (#574) #574
NO-ISSUE: Bump github.com/PuerkitoBio/rehttp from 1.1.0 to 1.2.0 (#568) #568
MGMT-15235 : Compile with CGO_ENABLED=1 for FIPS (#569) #569
NO-ISSUE: Bump golang.org/x/sys from 0.9.0 to 0.10.0 (#566) #566
NO-ISSUE: Bump github.com/coreos/ignition/v2 from 2.15.0 to 2.16.0 (#564) #564
AGENT-594 : remove agent based installer code (#563) #563
NO-ISSUE: Bump golang.org/x/sync from 0.2.0 to 0.3.0 (#561) #561
MGMT-14540 : Mark Appliance disk(s) with a partition name prefix ‘agent’ as eligible (#554) #554
OCPBUGS-14848 : Filter out hidden devices (#558) #558
NO-ISSUE: Bump github.com/onsi/gomega from 1.27.7 to 1.27.8 (#555) #555
NO-ISSUE: Bump github.com/go-openapi/swag from 0.22.3 to 0.22.4 (#556) #556
MGMT-13009 : Auto rename host with VLAN (#553) #553
NO-ISSUE: Bump github.com/itchyny/gojq from 0.12.12 to 0.12.13 (#552) #552
NO-ISSUE: Bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#550) #550
MGMT-14751 : Detect DASD disks (s390x) (#549) #549
NO-ISSUE: Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 (#545) #545
NO-ISSUE: Bump github.com/onsi/gomega from 1.27.6 to 1.27.7 (#543) #543
NO-ISSUE: Bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#544) #544
MGMT-14526 : Refernce latest assisted service to reflect domain name pattern change (#542) #542
Updating ose-agent-installer-node-agent images to be consistent with ART (#516) #516
NO-ISSUE: Bump golang.org/x/sync (#541) #541
NO-ISSUE: Remove slaviered from project OWNERS (#539) #539
MGMT-14481 : journal logs are empty during installation on rhel9.2 (#538) #538
NO-ISSUE: Bump github.com/go-openapi/runtime from 0.25.0 to 0.26.0 (#537) #537
MGMT-14319 chronyc segfaulting (#534) #534
NO-ISSUE: Bump golang.org/x/sys from 0.6.0 to 0.7.0 (#533) #533
NO-ISSUE: Bump github.com/cenkalti/backoff/v4 from 4.1.3 to 4.2.1 (#532) #532
NO-ISSUE: Bump github.com/onsi/gomega from 1.27.5 to 1.27.6 (#530) #530
NO-ISSUE: Bump github.com/go-openapi/strfmt from 0.21.5 to 0.21.7 (#529) #529
Force update to pick up latest libs (#531) #531
NO-ISSUE: Bump github.com/go-openapi/strfmt from 0.21.3 to 0.21.5 (#525) #525
NO-ISSUE: Bump github.com/onsi/gomega from 1.27.3 to 1.27.5 (#528) #528
MGMT-13946 : Ignore Proliant Gen 11 serial (#522) #522
NO-ISSUE: Bump github.com/onsi/gomega from 1.27.1 to 1.27.3 (#520) #520
NO-ISSUE: Bump golang.org/x/sys from 0.5.0 to 0.6.0 (#519) #519
OCPBUGS-8695 : vendor agent-installer-utils to v0.0.0-20230310220517-8506fbb6a346 (#517) #517
OCPBUGS-8677 : vendor agent-installer-utils to v0.0.0-20230308101916-306b7995977e (#514) #514
OCPBUGS-8390 : vendor agent-installer-utils to v0.0.0-20230307094740-57807526b660 (#512) #512
NO-ISSUE: Bump github.com/itchyny/gojq from 0.12.11 to 0.12.12 (#511) #511
NO-ISSUE: Bump github.com/spf13/afero from 1.9.3 to 1.9.5 (#510) #510
Full changelog
OCPBUGS-21350 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #36
OCPBUGS-16783 : Chore: Update OWNERS #32
OCPBUGS-12544 : 4.14: UPSTREAM: 763: Bump (golang.org/x/net): to address CVE-2022-41723 #30
STOR-1159 : Rebase to v1.1.7 #29
Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #28
Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #27
Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #26
Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #25
Full changelog
OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #81
OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #71
OCPBUGS-21443 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #64
STOR-1439 : Restart controller Pods if metrics-serving-cert changed #56
OCPBUGS-16783 : Chore: Update OWNERS #54
OCPBUGS-14824 : Bump alibaba-disk-csi-driver-operator library-go #53
STOR-1168 : Bump common libraries #51
OCPBUGS-12545 : Bump golang.org/x/net@v0.9.0 #50
Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART #49
Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART #48
Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART #47
OCPBUGS-8683 : Add management workloads annotations #46
Updating ose-alibaba-disk-csi-driver-operator images to be consistent with ART #45
Full changelog
Updating ose-alibaba-machine-controllers images to be consistent with ART #42
OCPBUGS-10134 : Updating ose-alibaba-machine-controllers images to be consistent with ART #41
Full changelog
OCPBUGS-33078 : Explicitly reserve 1 attachment for the root disk #306
OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #302
OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #296
OCPBUGS-21057 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #280
STOR-1432 : hypershift: deploy controller with control plane release images #252
OCPBUGS-16783 : Chore: Update OWNERS #251
Bump k8s.io/apiextensions-apiserver from 0.27.1 to 0.27.4 #250
Bump k8s.io/component-base from 0.26.3 to 0.27.3 #240
OCPBUGS-15823 : Change CSI RPC call timeouts #248
STOR-1065 : Rework sidecar bindings to bind common ClusterRoles #244
OCPBUGS-14824 : Bump efs-ebs-driver-operator library-go #247
STOR-1168 : Bump common libraries #222
Bump Kubernetes libs to v0.27.1 #243
STOR-1167 : Enable extra-create-metadata to tag snapshots #223
STOR-1300 : Restart controller Pods if metrics-serving-cert changed #216
OCPBUGS-11882 : Added safe-to-evict-local-volume annotation from bound-sa-token to ebs-controller #232
OCPBUGS-11882 : Added safe-to-evict annotation to aws-ebs-csi-driver-controller pods #231
OCPBUGS-13017 : assets/hypershift/controller_sa: Set controller ServiceAccount imagePullSecrets #219
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #217
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #215
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #214
Bump github.com/spf13/cobra from 1.6.1 to 1.7.0 #207
OCPBUGS-8691 : Hypershift: set control plane operand properties #205
Bump k8s.io/apiextensions-apiserver from 0.26.2 to 0.26.3 #203
OCPBUGS-8752 : fix: typo #198
OCPBUGS-8752 : feat: add workload annotation to deployment and daemonset #194
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #195
Bump k8s.io/apiextensions-apiserver from 0.26.1 to 0.26.2 #189
Bump k8s.io/klog/v2 from 2.90.0 to 2.90.1 #190
Full changelog
OCPBUGS-32884 : Upgrade go-jose module to 2.6.3 #189
OCPBUGS-21761 : Backport the recent rebase to 4.14 #168
NO-ISSUE: Sync OWNERS with team members #176
snyk: exclude vendor/ #171
Bump to go 1.20 in go.mod #163
Updating ose-aws-pod-identity-webhook images to be consistent with ART #162
Updating ose-aws-pod-identity-webhook images to be consistent with ART #159
Full changelog
OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #120
OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #109
OCPBUGS-20784 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #101
OCPBUGS-16654 : Revert revert “STOR-1065: Rework sidecar bindings to b… #88
OCPBUGS-16496 : Bump library-go to remove dependency on goproxy #90
OCPBUGS-16783 : Chore: Update OWNERS #89
Revert “STOR-1065: Rework sidecar bindings to bind common ClusterRoles” #87
STOR-1065 : Rework sidecar bindings to bind common ClusterRoles #84
OCPBUGS-14824 : Bump azure-disk-csi-driver-operator library-go #85
CCO-324 : Unrevert “CCO-324: add support for workload identity” #83
Revert “CCO-324: add support for workload identity” #82
CCO-324 : add support for workload identity #78
STOR-1168 : Bump common libraries #81
OCPBUGS-12559 : Bump golang.org/x/net@v0.9.0 #80
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #79
OCPBUGS-8683 : Add management workloads annotations #74
OCPBUGS-10842 : Reorder static resources to create RBAC first #75
Updating ose-azure-disk-csi-driver-operator images to be consistent with ART #73
Full changelog
OCPBUGS-33039 : Rebase v1.29.5 for OCP 4.14 #66
OCPBUGS-20884 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #37
OCPBUGS-17285 : UPSTREAM: 1355: build(deps): bump golang.org/x/net from 0.12.0 to 0.14.0 #33
OCPBUGS-16783 : Chore: Update OWNERS #32
OCPBUGS-15657 : Update to 1.28.1 #31
STOR-1160 : Rebase to v1.28.0 for OCP 4.14 #29
Updating azure-file-csi-driver images to be consistent with ART #28
Updating azure-file-csi-driver images to be consistent with ART #27
Updating azure-file-csi-driver images to be consistent with ART #26
Updating azure-file-csi-driver images to be consistent with ART #25
Full changelog
OCPBUGS-33039 : add token audience for Azure File #104
OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #94
OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #83
OCPBUGS-20983 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #76
STOR-1434 : Restart controller Pods if metrics-serving-cert changed #68
OCPBUGS-16654 : Revert revert “STOR-1065: Rework sidecar bindings to b… #64
OCPBUGS-16783 : Chore: Update OWNERS #65
OCPBUGS-16498 : Bump library-go to remove dependency on goproxy #66
Revert “STOR-1065: Rework sidecar bindings to bind common ClusterRoles” #63
STOR-1065 : Rework sidecar bindings to bind common ClusterRoles #60
CCO-325 : Unrevert “CCO-325: add support for workload identity” #62
STOR-989 : Remove SC and manifest file for NFS backend #58
OCPBUGS-14824 : Bump azure-file-csi-driver-operator library-go #61
Revert “CCO-325: add support for workload identity” #59
CCO-325 : add support for workload identity #54
CCO-325 : Mount serviceaccount token into csi-driver container #53
STOR-1168 : Bump common libraries #57
OCPBUGS-12561 : Bump golang.org/x/net@v0.9.0 #56
Updating azure-file-csi-driver-operator images to be consistent with ART #55
Updating azure-file-csi-driver-operator images to be consistent with ART #52
Updating azure-file-csi-driver-operator images to be consistent with ART #51
OCPBUGS-10842 : Reorder static resources to create RBAC first #50
OCPBUGS-8683 : Add management workloads annotations #49
Updating azure-file-csi-driver-operator images to be consistent with ART #48
Full changelog
OCPBUGS-35827 : If host is offline or disconnected don’t check ver #8634
OCPBUGS-35826 : [release-4.14] bump github.com/containers/image for CVE fix #8633
OCPBUGS-35485 : [release-4.14] aws: terraform: add spot instance support for masters #8605
OCPBUGS-34024 : go.mod: bump aws-sdk-go for ca-west-1 support #8440
OCPBUGS-33401 : PowerVS: Add composite_instance to listServiceInstances #8479
CORS-2951 : Add deprecation notice for OpenShiftSDN for 4.14 users #8518
OCPBUGS-28611 : remove retired serial NCv2 from azure tested instance type list on x86 #7960
OCPBUGS-27394 : preserve category name when trying to find tag category #7926
OCPBUGS-33010 : escape ‘%’ in proxy settings #8318
OCPBUGS-31756 : openstack: Honour worker server group policy #8231
NO-ISSUE: test fix to support slightly different nmstate error messages #8286
OCPBUGS-32358 : Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8281
OCPBUGS-31885 : Validate control plane replicas #8241
OCPBUGS-31677 : coreos-installer iso kargs show broken on Agent ISO #8228
OCPBUGS-31338 : upi: aws: fix typo in worker templates #8203
Bug OCPBUGS-30187: OpenStack: fix controlPlanePort validation #8095
OCPBUGS-30027 : gcp: better error msg when service accnt missing #8078
OCPBUGS-30259 : PowerVS remove ibm cloud/bluemix go 4.14 #8103
OCPBUGS-29123 : IBMCloud: Handle disk delete errors #7988
OCPBUGS-29626 : update RHCOS 4.14 bootimage metadata to 414.92.202402130420-0 #8037
OCPBUGS-28929 : [release-4.14] Bump containerd for vulnerability fix #7981
OCPBUGS-27419 : Fix depreciated typo #7929
OCPBUGS-24521 : set vmType in azure cloud config [release-4.14] #7804
OCPBUGS-23738 : vSphere - when using RP network path is incorrect #7759
OCPBUGS-27241 : baremetal: correct external_http_url for v6-only BMCs #7914
OCPBUGS-22315 : bootstrap: Enable gatewayd units only on RHCOS #7628
OCPBUGS-23498 : update RHCOS 4.14 bootimage metadata to 414.92.202401110948-0 #7919
OCPBUGS-20860 : Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 #7887
OCPBUGS-22895 : Do not generate azure-cloud-provider in manual mode for aro builds #7670
OCPBUGS-22771 : aws: use security groups from defaultMachinePlatform #7658
OCPBUGS-24489 : baremetal: populate customDeploy in advance #7802
OCPBUGS-22770 : destroy: gcp: fix destroying regional disks #7657
Bug OCPBUGS-22776: OpenStack: Fix IPv6 address configuration for bootstrap #7660
OCPBUGS-22978 : IBMCloud: Add eu-es region #7684
OCPBUGS-23399 : Check if PER is enabled in the target PowerVS workspace #7736
OCPBUGS-22688 : Bump Fedora CoreOS to latest stable #7647
OCPBUGS-22774 : Add KMS encryption keys if provided #7659
OCPBUGS-21868 : vSphere,segfault on version check #7605
OCPBUGS-22945 : Update gcloud version to 447.0.0 #7681
OCPBUGS-22187 : azure: validation: validate defaultMachinePlatform #7615
OCPBUGS-22758 : update RHCOS 4.14 bootimage metadata to 414.92.202310210434-0 #7655
OCPBUGS-19922 : Release 4.14 skip agent tui on external oci platform #7599
OCPBUGS-21653 : Rectify GCP label key validation check #7606
OCPBUGS-20357 : update RHCOS 4.14 bootimage metadata to 414.92.202310170514-0 #7618
OCPBUGS-20396 : Unable to disable external CCM for platform external #7594
OCPBUGS-20522 : Use changes to AgentClusterInstall during loading #7588
Enforcing the serial execution of the integration tests #7598
OCPBUGS-20581 : enable cloud controller manager type to be defined #7581
OCPBUGS-20441 : Warn about host and target compatibility #7583
OCPBUGS-20345 : Enable serial console for external OCI platform #7569
OCPBUGS-20401 : always write AWS cloud.conf #7578
OCPBUGS-19922 : Do not start agent-tui if no graphical console available #7539
OCPBUGS-20103 : GCP default value for service account #7553
OCPBUGS-19953 : AWS terraform bootstrap destroy will not refresh state #7543
OCPBUGS-20066 : Use updated ansible-core for Openstack image #7551
OCPBUGS-19835 : Enable FIPS in agent ISO #7541
OCPBUGS-19846 : Graceful fail for AWS getUser on destroy #7532
OCPBUGS-19033 : Add Net capabilities to dnsmasq container #7489
OCPBUGS-19319 : Handle agent tui failure gracefully #7497
OCPBUGS-19738 : Remove warning about CPUPartitioning #7529
OCPBUGS-19300 : Implement workaround to allow SNO installations for OKD/FCOS #7479
OCPBUGS-19702 : Increase bootstrap timeout for vSphere platform by 30 mins #7528
OCPBUGS-19636 : Pass CPUPartitioning via install-config overrides if set #7521
OCPBUGS-18181 : update RHCOS 4.14 bootimage metadata to 414.92.202309201615-0 #7517
OCPBUGS-18719 : for vsphere ipi add cluster domain to the uploaded vm configs so that… #7477
OCPBUGS-18883 : Do not set FailureDomains on CPMS when in a single zone Azure region #7483
AGENT-702 : Generate minimal ISO for external platform #7478
OCPBUGS-18428 : Add ip=dhcp,dhcp6 kernel param for vSphere dual-stack #7467
OSDOCS-6999 : tested machine series ‘C3’, ‘C2D’ #7381
OCPBUGS-18450 : AWS permission missing for security group viewing. #7460
OCPBUGS-18365 : Fix defaulting of userManagedNetworking value #7458
integration tests: Swap order of diff arguments #7462
AGENT-693 : Support external platform #7442
OCPBUGS-18457 : Make extracting ISO kargs more robust #7463
OCPBUGS-18457 : Fix PXE integration tests #7461
OCPBUGS-17806 : gomod: bump openshift/api version #7421
OCPBUGS-17770 : azure: use marketplace image plan’s publisher #7426
OCPBUGS-7690 : azure: destroy: dns records leak if permissions missing #7433
OCPBUGS-17869 : azure: fix setting outboundType #7455
OSDOCS-6880 : Adding 64-bit ARM GCP instance types to documentation #7320
OCPBUGS-16204 : aws: attach additional security groups to controlPlane #7352
OCPBUGS-18046 : update govc version to v0.30.7 #7425
OCPBUGS-15659 : IPI pre-check for MachineAPI capability #7414
OCPBUGS-17860 : OpenStack: Remove NodePorts range 0.0.0.0/0 rules #7405
OCPBUGS-17073 : Revert “Merge pull request #7205 from rna-afk/azure_managed_by_tag” #7412
OCPBUGS-17940 : Add COS endpoint to proxy server (Power VS) #7430
AGENT-692 , OCPBUGS-3860 : Update assisted-service dependencies #7439
OCPBUGS-17227 : gcp: fix validation of custom instance types #7388
OCPBUGS-17869 : azure: put NAT gateway behind TechPreviewNoUpgrade #7434
Destroy startironic.sh forever #7250
CORS-2660 : GCP: deprecate the licenses field #7397
CFE-858 : Update google terraform provider to latest version #7201
MULTIARCH-3676 : PowerVS TG terraform changes #7389
CFE-686 : Generate Infrastructure CR with the GCP user defined tags & labels #7138
CFE-687 : Apply user defined labels on created gcp resources #7153
OCPBUGS-11999 : upkeep: updated description to remove techpreview #7313
CORS-2700 : Make bootstrap S3 bucket optional during bootstrap destroy #7288
CFE-688 : Update install-config CRD to support gcp labels and tags #7126
OCPBUGS-16776 : update RHCOS 4.14 bootimage metadata to 414.92.202308032115-0 #7409
Add baremetal capability validation #7394
azure: validation: machinepool: sort slice before comparing #7407
OCPBUGS-13408 : Log message and add integration test #7408
PowerVS: Update listCOSInstances to continue querying #7404
maintenance: update openshift/api #7401
MGMT-13628 : add support for confidential VMs on Azure #7312
openstack: Test zero replicas in worker machine-pool #7400
OpenStack: Fix user docs for additional network with IPv6 #7395
gather: Use journalctl -o with-unit
#7371
SPLAT-1123 : Revert Alibaba deprecation warning #7396
OCPBUGS-15994 : Update core password after loading config-image #7338
OpenStack: Remove SGS created by CPO on destroy #7378
data/data/coreos: bump FCOS to F38 stable #7311
OCPBUGS-16912 : Ensure DHCPv6 client sends Solicit with mac address #7384
Bug OCPBUGS-16249: Add ip=dhcp,dhcp6 option to Kernel args #7367
PowerVS: Check whether Machine pool CIDR is /24 #6903
OCPBUGS-16292 : GCP XPN: clarify service account support #7347
OCPBUGS-6759 : Fix discrepancy with disk size master #7100
OCPBUGS-16959 : openstack/upi: add missing modules namespaces + doc #7373
CORS-2719 : Remove service account user permission #7291
OCPBUGS-17064 : always create a MachineSet #7380
OpenStack: Fix default for openstack_worker_server_group_names #7359
OCPBUGS-16692 : OpenStack: fix crash with empty platform in machinepool #7363
CORS-2445 : GCP add bootimage override in install-config #7215
CORS-2503 : azure: use marketplace images for all nodes #6890
MULTIARCH-3676 : PowerVS add transit gateway destroy #7294
CORS-1770 : Support pd-balanced disk types for GCP deployments #7337
OCPBUGS-15989 : vSphere - bump terraform provider #7354
OWNERS_ALIASES: Add new user to owners_aliases #7348
OCPBUGS-16515 : gcp: use zones available for both instance and project #7317
OCPBUGS-15852 : Single node cannot be installed if etcd appears in the hostname #7304
OCPBUGS-14877 : Validate that number hosts does not exceed replicas #7268
CORS-2628 : Allow users to set ManagedBy tag to resource group #7205
OCPBUGS-16380 : Add /etc/containers volume on create-cluster-and-infraenv #7332
OCPBUGS-16207 : ic: aws: validate max security groups #7345
OpenStack: Add steps to enable dual-stack clusters #7269
Revert “Merge pull request #7096 from r4f4/gcp-instance-zones” #7360
SPLAT-657 : AWS Local Zones subnets automation for edge compute pool #7137
OSASINFRA-3193 : Update openstack/Dockerfile.ci for ansible-core #7346
Include start-cluster.env in agent-gather #7350
Fix the deployment on OpenStack for worker pools with no replicas. #7356
OCPBUGS-16219 : Fix timing issue between network services #7355
OCPBUGS-16415 : Sync nmstateconfig script with assisted-service changes #7353
Agent: Allow additional kernel args to be passed to ISO #7306
Remove mentions of use-octavia #7335
OCPCLOUD-2036 : introduce External platform type #7217
OCPBUGS-16395 : openstack/upi: update doc for CCPMSO #7351
OCPBUGS-16245 : Make nmstateconfig.yaml optional in config-drive #7333
OSASINFRA-3181 : Volume Types for OpenStack CPMS #7300
CORS-2445 : GCP: Add default values for arm64 #7258
PowerVS: Replace deprecated key_id attribute with name for ibm_pi_key resource #7256
PowerVS: Handle empty serviceInstanceID in metadata.json #7328
OpenStack: Dual stack support with BYON #6797
MULTIARCH-3667 : Add support for CPMSO for Power VS #7226
OCPBUGS-15421 : Allow different service account for xpn installs in gcp #7308
OCPBUGS-15997 : openstack: add root volume AZ validation #7309
aws: drop hostedZoneRole Feature Gate #7327
Agent: clear service status once all services started #7316
AGENT-660 Display insert config image message to console #7299
PowerVS: Create new newAuthenticator function #7321
OCPBUGS-9404 : azure: skip LB creation when not needed #7063
Revert “Merge pull request #7289 from r4f4/padillon-settle-ops” #7318
Agent: Log kernel params when generating pxe assets #7314
OCPBUGS-15238 : GCP: ic: client: use a higher context timeout #7290
AGENT-648 : Remove validation check limiting None platform to SNO #7236
Allow destroy for C2S isolated (us-iso and us-isob) partitions. #7086
OCPBUGS-15999 : update RHCOS 4.14 bootimage metadata to 414.92.202307070025-0 #7310
OCPBUGS-14900 : Use correct SELinux label. Make rename atomic. #7307
create: add check for cluster operator stability #7289
SPLAT-827 : support static IP assignments with vSphere IPI #7179
AGENT-562 : Load config from config image #7200
OCPBUGS-15825 : Fix agent gather tui logs #7293
OSASINFRA-3155 : OpenStack: Create ControlPlaneMachineSet CRDs #7280
ic: gcp: validate instances against user-configured zones #7096
AGENT-678 : Fix concurrency issue in agent integration tests #7303
OCPBUGS-14762 : Use the same names for public LB in IPI and UPI Azure #7292
OCPBUGS-2324 : terraform: aws: bump version to 5.4.0 #7274
tls/root: Document this more and change friendly name #7232
CORS-2572 : azure: implement egress via NAT gateway #6933
docs: Add note about not configuring allowed address pairs for day 2 manila configuration #7287
OCPBUGS-14932 : specify azure cli version #7297
OCPBUGS-14932 : Update azure cli to 2.40.0+ #7216
PowerVS Add support for Capped processors #7286
CORS-2645 : AWS Cross-Account Private Hosted Zone: Add Further Validations #7253
AGENT-624 : Allow override of networkType #7223
Update hack/go-test.sh to golang 1.20 #7270
AGENT-627 : Decompress kernel on ARM #7276
OWNERS_ALIASES: offboard ashcrow and bgilbert from CoreOS #7275
AGENT-558 Generate unconfigured agent ignition #7186
OWNERS: merge agent/installer #7278
OSASINFRA-3182 : openstack: remove portTargets #7239
AGENT-498 : Get iPXE script template kernel parameters from ISO #7150
OCPBUGS-15238 : GCP: ic: improve project validation #7267
Default dataStore is returned the name instead the inventoryPath #7261
Use the correct image name for agent-tui extraction #7266
OCPBUGS-13636 : new Aws secret regions support #6184
CORS-2372 : Azure: auth Installer with Managed Identity from VM #7108
OCPBUGS-11796 : azure: skip NSG creation when BYO vnet #7094
OCPBUGS-9435 : terraform: aws: secret regions now support ALIAS record #7184
SPLAT-1094 : warn users about deprecation of Alibaba Cloud #7257
OCPBUGS-14869 : Add timezone info in installer logs #7243
CORS-2656 : Remove context from cluster uninstaller struct #7169
openstack: document external LB #6920
bootkube: Drop cruft in MCO bootstrap #7244
Update OWNERS_ALIASES #7203
Agent: run shellcheck on start-cluster-installation.sh #7062
OSASINFRA-2168 : Docs: update OpenStack requirements #7015
OCPBUGS-15095 : Add kubevirt digest-ref in RHCOS boot images #7254
AGENT-563 : Create configuration image #7157
AGENT-510 : Support interactive network console when pxe booting #7185
Allow CustomNoUpgrade features via install-config #7246
MULTIARCH-3664 : enable multipath for powervs #7222
OCPBUGS-13960 : update RHCOS 4.14 bootimage metadata to 414.92.202306141028-0 #7247
CFE-829 : Remove Azure Tags TechPreview only indicators and checks #7187
CORS-2631 : Add additional security group ids in AWS #7151
AGENT-596 : use agent-installer-utils for agent-tui extraction #7212
AGENT-491 : Support pxe base url #6723
OCPBUGS-14917 : PowerVS: Cleanup service instances for destroy cluster #7173
OpenStack: add support to multiple subnets in the bootstrap #7111
Add ControlPlaneMachineSet for Nutanix #7119
OPNET-298 : Allow primary-v6 dual-stack on vSphere #7124
CORS-2613 : AWS: Cross-account Shared VPC Support #7225
OpenStack: support user provided dual-stack api and ingress Port #7133
OpenStack: configure IPv6 address in the bootstrap node #7128
SPLAT-995 : vSphere Add new template field #6995
OCPBUGS-14757 : images: installer: add xz to the container #7238
OCPBUGS-14818 : disable oVirt provider #7213
AGENT-556 : Wait for rendezvous host configuration #7068
OCPBUGS-13955 : support OPENSHIFT_INSTALL_OS_IMAGE_OVERRIDE #7211
OCPBUGS-14121 : Convert Rendezvous IPv6 address to canonical format #7234
OCPBUGS-14416 : Shorten SNO installation duration by releasing CPC lease #7219
OCPBUGS-14565 : Replace with govc docker image and fix ibmcli folder permission issue #7231
OCPBUGS-13108 : Log additional host info at warning level #7209
OCPBUGS-13662 : Ignore CPUPartitioning for ABI #7218
OCPBUGS-11736 : gcp use preconfigured private zone for installation #7155
Bump & vendor k8s 1.27 dependencies #7220
OCPBUGS-10342 : Check that number of replicas matches hosts #7059
OSASINFRA-3153 : move loadBalancer
API to GA for OpenStack #7127
OCPBUGS-10306 : [vSphere] Upi installation failed due to VMs for master and worker node creation failed #6999
AGENT-567 : Re-enable ‘create pxe-files’ command #7102
AGENT-555 : Move Rendezvous Host config to separate file #7061
OCPBUGS-13764 : Support /dev/disk/by-path root device hints #7192
OCPBUGS-1769 : Ignore IAM Roles that the Installer is not authorized to access #7180
OCPBUGS-14077 : MULTIARCH-3492: Avoid conflicting subnets #7145
OCPBUGS-14076 : PowerVS: Remove ClusterOSImage #6996
OCPBUGS-13094 : Use oc command in bootkube.service in a disconnected env #7178
OCPBUGS-7410 : Reject active VPC connections before service destroy #7101
OCPBUGS-7699 : CVE: go-getter vulnerable to denial of service via malicious compressed archive #6893
OCPBUGS-13552 : vSphere Add ova sha query; additional debugging #7171
OCPBUGS-13718 : ic: azure: validate diskTypes in AzureStack #7194
OCPBUGS-9378 : vSphere set bootstrap/master efi #7154
OCPBUGS-13535 : Set AdditionalTrustBundle in override when mirroring not enabled #7182
OCPBUGS-13547 : Ensure –payload-version is set for MCO on bootstrap #7160
OCPBUGS-13547 : remove special cases for featureset in rendering #7189
OCPBUGS-7978 : FCOS: bump to latest stable version #6902
OCPBUGS-13628 : Revert “remove special cases for featureset in rendering” #7183
OCPBUGS-13300 : masters on a single compute server group #7172
OCPBUGS-3542 : Add bootstrapExternalStaticDNS #6585
remove special cases for featureset in rendering #7158
OCPBUGS-13253 : update RHCOS 4.14 bootimage metadata to 414.92.202305090606-0 #7176
pass payload version and manifests to kas and kcm #7152
OCPBUGS-9081 : openstack destroy: account for BULK DELETE limits on object-storage #7168
OCPBUGS-7699 : terraform: google: bump provider for go-getter CVE fix #7051
OCPBUGS-13107 : openstack destroy: Limit Swift workers to 3 #7165
Updating ose-installer-artifacts images to be consistent with ART #7122
OCPBUGS-11921 : GCP XPN: Pass instance service acct in manual mode #7117
OCPBUGS-12964 : Bootstrap on aws should have same metadata service type as on other nodes #7149
OCPBUGS-11792 : update RHCOS 4.14 bootimage metadata to 414.92.202304252144-0 #7135
pass featuregate args to config-operator to get rendered featuregates #6990
OCPBUGS-12904 : openstack: Add netcat to the Installer image #7142
OCPBUGS-12776 : GCP XPN Private Cluster Fails with no Public Zone #7134
OCPBUGS-12869 : fix nmstate related unit tests #7089
Updating ose-baremetal-installer images to be consistent with ART #7121
Updating ose-installer images to be consistent with ART #7120
OCPBUGS-12748 : use python3 for cloud sdk #7118
OCPBUGS-12196 : bump CVO to stable-4.14 #7114
OCPBUGS-11999 : fix: remove feature flag for cpu partitioning no longer needed #7110
OCPBUGS-11801 : Fix agent-tui libnmstate dependency name #7095
OpenStack: enable ingress traffic for dual-stack installations #7099
OCPBUGS-10767 : Fix and improve locking session and AWS Metadata access #7070
OWNERS_ALIASES: offboard Sohan from CoreOS #7103
OCPBUGS-9081 : openstack: Bump Gophercloud #7098
OCPBUGS-11100 , OCPBUGS-11102 , OCPBUGS-11418 : CVE: bump hashicorp/vault version #7091
OCPBUGS-11788 : update RHCOS 4.14 bootimage metadata to 414.92.202304131328-0 #7092
OCPBUGS-8449 : Azure: don’t set default subscriptionID for disk encryption sets #7076
pkg: rhcos: use Errorf instead of Error #7074
OCPBUGS-4998 : Log additional info when status is pending-user-action #7060
OCPBUGS-10673 : [Alibaba] update the bandwidth value of EIP #7011
OCPBUGS-11636 : AWS - Remove ACLs from s3 ign #7081
OCPBUGS-11479 : Upgrade libnmstate version used #7075
OCPBUGS-10478 : gather: azure: fix collecting VM serial logs #6992
Add imageDigestSources, deprecate imageContentSources #6235
PowerVS: fix human readable group-id #7073
docs: gcp: upi: update obtaining RHCOS source image #7072
gcp: add confidential compute support for boostrap TF #7002
AGENT-275 : Add new agent graph command to output agent internal dependency graph #7066
OCPBUGS-7954 : openstack: Only check HTTPS certs on public endpoints #7057
MULTIARCH-2517 : PowerVS: create install-config improvements #6885
OCPBUGS-10845 : Use 100 GB as minimum disk size in validations #7025
openstack: Bump CI base image to v4.14 #7052
terraform: don’t run zip if building provider binary failed #7047
OCPBUGS-8449 : pkg/asset/installconfig: set subscriptionID #6975
OCPBUGS-11039 : remove container-runtime flag from kubelet config #7036
rhcos: Bump to 414.92.202303281555-0 #7038
update tested instance type on 4.13 #7042
OCPBUGS-11038 : GCP: add europe-west12 region to the survey as supported region #7033
OCPBUGS-7966 : Do not remove host default configuration unless network configuration is provided for it #6991
OCPBUGS-2130 : vSphere - finding networks use full path cluster #6973
OCPBUGS-7699 : bump terraform for go-getter CVE fix #6892
OCPBUGS-8349 : Kubelet Client Cert should include system:serviceaccounts group #7032
OCPBUGS-10728 add project filter to gcp usage api requests #7018
OCPBUGS-10638 : Properly handle invalid agent command #7005
OCPGUS-2363 : IBMCloud: Use direct COS endpoint #6952
OCPBUGS-9081 : openstack/destroy: BulkDelete more objects at once #7017
OCPBUGS-8035 : IBMCloud: Fix SSH Private bootstrap #6944
OCPBUGS-7973 : IBMCloud set dnsrecords offset #6924
OCPBUGS-8509 : baremetal: do not use port 80 for httpd #6945
OCPBUGS-9982 : bootstrap-pivot: skip pivot in SCOS Live ISO #6965
PowerVS: Add capacity checks before installation #6850
OCPBUGS-8237 : update terraform-provider-ironic to 0.4.0 #6956
OCPBUGS-6727 : Nutanix Hostname of the VM is not set when using DHCP network config #6981
AGENT-502 : add agent-tui it test #6978
openstack: Remove version info, update lb FIP -> API FIP #7001
OCPBUGS-10570 : openstack: No master primarySubnet control-plane if portTarget is set #6994
OSDOCS-5240 : doc/fix-aws-localzones: replace jq to aws –query #6993
OCPBUGS-10207 : Do not always output warning msg when releaseImage is digest #6971
OCPBUGS-7015 : vsphere, nutanix survey: relax vip in machine cidr #6967
OCPBUGS-9949 : Verify output file exists when oc image extract
is run #6960
OCPBUGS-7954 : openstack: Provide manual instructions for invalid certificates #6998
OCPBUGS-10313 : fix agent tui showing up multiple times #6977
Bump mongo-driver from 1.10 to 1.11.2 #6987
OCPBUGS-8540 : CVE: bump mongo-go-driver for fix #6950
OCPBUGS-10394 : Sort userTags in Machine and Machineset manifests #6976
Shorten SNO installation duration by releasing CVO lease #6757
OCPBUGS-2968 : bootstrap: Do not needlessly podman pull #6536
terraform: google: bump stringset dependency #6951
openstack-manifests: Export JUnit results #6966
Updating ose-installer-artifacts images to be consistent with ART #6968
quota: gcp: replace deprecated monitoring package and fix linting issues #6896
OCPBUGS-8119 : CVE-2023-25173: bump containerd #6949
OCPBUGS-8468 : aws: bump aws-sdk-go version #6943
data: libvirt: increase volume size to 32GB #6963
Updating ose-baremetal-installer images to be consistent with ART #6954
Updating ose-installer images to be consistent with ART #6953
refactor: replace github.com/ghodss/yaml
with sigs.k8s.io/yaml
#6935
OpenStack: support multiple API and ingress VIPs #6940
update RHCOS 4.13 bootimage metadata #6886
OCPBUGS-8094 : In agent ‘wait-for bootstrap’ command, test ssh to Node0 #6919
openstack-manifest: Show assets dir if persisted #6929
OCPBUGS-7262 : Disable systemd status while TUI showing #6925
OpenStack Failure domains #6917
OCPBUGS-8203 : Don’t log password values #6922
OCPBUGS-5129 : Pass Capabilites from install-config to cluster #6923
OCPBUGS-8305 : Power VS: Add resourceGroup to infrastructure manifest #6928
AGENT-356 : Disable ‘create pxe-files’ command #6927
OCPBUGS-8258 : Specify filename for default registries.conf #6926
openstack: consistent TechPreview-only feature validation #6916
RFE-2782 : Create edge compute pool to support AWS Local Zones #6371
Full changelog
OCPBUGS-35447 : bump go-git to 5.11.0 #1799
OCPBUGS-30287 : oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators #1699
OCPBUGS-25983 : Remove deprecated password defaulting in default config flag #1646
OCPBUGS-24197 : Add client version in must-gather summary #1607
OCPBUGS-24460 : Overwrite template’s namespace with the explicit one #1616
OCPBUGS-22702 : Reflect container’s exit code for long running tasks not attached to terminal #1592
OCPBUGS-20508 : regeneratemco: explicitly check for PlatformStatus field #1573
OCPBUGS-20527 : Set ImportPolicy to PreserveOriginal to honor –keep-manifest-list when mirroring a payload to an image stream #1574
OCPBUGS-21611 : Bump golang.org/x/net to v0.17.0 #1579
OCPBUGS-20258 : Updating excluded list of unsupported oc adm commands in MicroShift #1561
OCPBUGS-20269 : Use quay redis image instead docker mysql #1562
OCPBUGS-17925 : pkg/cli/admin/prune/images: omit not found error for deployment configs #1530
OCPBUGS-17253 : Bump go x/net library to 0.13.0 #1529
OTA-559 : Revert “Revert “pkg/cli/admin/release/extract: Add –included and –install-config”” #1528
OCPBUGS-17711 : Revert “pkg/cli/admin/release/extract: Add –included and –install-config” #1527
Update openshift/api #1525
OTA-559 : pkg/cli/admin/release/extract: Add –included and –install-config #1521
Stop using deprecated github.com/docker/docker go APIs #1514
OCPBUGS-16735 : Truncate existing files when writing from inspect #1520
introduce plugin and plugin shadowing tests for oc #1424
pkg/cli/admin/upgrade: Newlines after –allow-upgrade-with-warnings errors #1519
Add profiling functionality and flags in oc #1516
Fix typo in /var/log folder #1517
login: improve usage message for –web option #1513
Bump k8s packages to 1.27.4 #1515
OTA-994 : pkg/cli/admin/release/extract: Centralize manifest extraction #1404
OCPBUGS-16009 : reboot: set ignition version to 3.1 #1499
Add tls-server-name when property exists in kubeconfig #1456
OCPBUGS-15776 : mcs cert: account for environments that use IP directly #1497
OCPNODE-1656 : oc release info: Introduce –idms-file and deprecate –icsp-file #1465
AUTH-355 : Add OAuth2 Authorization Code Grant Flow for login #1402
upgrade distribution No 2 #1495
WRKLDS-700 : bump(k8s) to v1.27.2 #1420
OCPBUGS-15012 : oc image extract: idms-file flag map to IDMSFile field #1464
Correct incorrect command in observe command #1419
Clarify the use of the filter without keep-manifest-list #1414
OCPBUGS-10612 : make registry auth prefence default to podman config locations #1376
handle the error case of node retrieval while waiting for reboot #1482
Fix the output of error prompt #1433
pkg/cli/admin/upgrade: Surface Recommended=Unknown more prominently #1442
pkg/cli/admin/upgrade: Add post-period to space to some error messages #1330
Wait for reboot #1473
tweak output format #1471
OCPNODE-1580 : Add –print-mirror-instructions to oc adm release mirror to allow idms instructions #1341
add reboot-nodes #1468
Trust check #1469
fix directories for consistency #1467
ocpcertificates: add ability to rotate MCS CA/cert #1450
OCPNODE-1656 : oc image extract: Introduce IDMS as alternative source #1426
pernodepod: percent works like this #1463
ocpcertificates: don’t make assumptions on resources not to bring pip… #1462
allow running a command while the kubelet is off #1459
add command to create new bootstrap kubeconfig for kubelet #1458
ocpcertificates: fix handling resources by names explicitly + other cosmetic fixes #1460
tweaks needed for wait #1455
Add a command to remove older trust #1447
create command to create new adminkubeconfig #1452
add a command to copy content to every node #1454
Minor updates to CLI help text #1453
add command for regenerating OCP leaf certs #1443
add a new command to wait for all clusteroperators to go stable #1444
add command to produce an updated CA bundle for trusting the kube-apiserver #1446
add printing for new revisions #1445
add oc adm ocp-certificates regenerate-top-level #1439
OCPBUGS-11652 : Extend adm node-logs to new API #1403
OCPBUGS-12793 : adds a mapping for exposed ports to DockerConfig when manifest listed #1415
OCPBUGS-14340 : Name containers w/‘multi’ when mirroring a multi release image #1423
OCPBUGS-11123 : oc adm groups sync: all groups: print warning before caching #1436
OCPBUGS-11632 : Skip invalid events yamls and continue #1429
OCPBUGS-14082 : Remove closed centos7 registry from newapp unit tests #1430
OCPBUGS-12901 : preserve explicit release image in ClusterVersion #1416
OCPBUGS-11123 : oc adm groups sync: fix the annotation key #1427
OCPBUGS-11123 : oc adm groups sync: print a warning when two or more groups are mapped to the same ldap uid #1425
OCPBUGS-13355 : Use RequestToken functions from library-go #991
OCPBUGS-11632 : Improve error log messages in event filtering #1417
OCPBUGS-12143 : oc login: unwrap tls.CertificateVerificationError to use x509 errors #1406
pkg/cli/admin/upgrade: Clarify client-side vs. server-side docs #1181
replace trimLeft with trimPrefix #1400
Support OCI manifest lists in image mirror #1362
OCPBUGS-8004 : Fix bug when recreating an index with fewer images #1335
adm catalog mirror update example to idms #1401
OCPBUGS-10843 : oc debug unique pod name #1393
adm catalog mirror generates idms manifest #1389
OCPBUGS-1115 : Use linux/arch when user’s OS isn’t in manifests #1311
Remove already deprecated adm create-kubeconfig command #1367
append: expose keep-manifest-list option and preserve manifestlist when appending to specific arch images #1361
Updating ose-tools images to be consistent with ART #1369
OCPBUGS-8048 : pkg/cli/admin/upgrade: Client-side checks for –to-multi-arch #1359
IR-300 , IR-301 : generates ImageStreamTags with import-mode when using oc new-build and oc-new-app #1353
OCPBUGS-10879 : Fix deprecated oc command suggestion #1390
Exclude irrelevant commands from MicroShift documentation #1375
Test Fix: Allow submodule using file transport with newer git #1378
Updating openshift-enterprise-deployer images to be consistent with ART #1368
Updating openshift-enterprise-cli images to be consistent with ART #1364
OCPBUGS-3393 : Always copy the blobs if the target isn’t a registry #1355
Updating ose-cli-artifacts images to be consistent with ART #1370
OCPBUGS-1117 : The architecture of oc in the cli-artifacts’ /usr/bin folder should to the one of the built image #1374
OCPBUGS-10622 : bump repo sclorg/s2i-ruby-container location for newapp test #1377
Add microshift into generate-docs #1365
OCPBUGS-5949 : Add subrepository support for ICSP #1350
Full changelog
OCPBUGS-32899 : Upgrade go-jose module to 2.6.3 #697
OCPBUGS-29156 : Fix the ClusterOperator watch of the status controller #676
OCPBUGS-28231 : Guard upgrading GCP from 4.14 to 4.15 without RoleAdmin permissions #670
OCPBUGS-29199 : ccoctl - use proxy when validating CloudFront URL #678
OCPBUGS-27911 : Resolve all outstanding snyk vulnerabilities #650
OCPBUGS-28382 : Use cached clients to avoid client side throttling #666
OCPBUGS-27515 : Write manifests when AWS IAM roles already exist. #659
OCPBUGS-26512 : Use live client for metrics #647
OCPBUGS-25275 : Azure Workload Identity info in CredsRequests creates a Secret #643
OCPBUGS-24346 : Discover AWS dns suffix from partition and region. #635
OCPBUGS-23986 : Use per-project custom roles instead of per-cluster custom roles #631
OCPBUGS-23426 : Explicitly set the vsphere secret credential data on sync. #629
OCPBUGS-21388 : Upgrade golang/x/net for CVE-2023-39325 #622
NO-ISSUE: Removing andrew from OWNERS #617
snyk: exclude vendor/ #615
OCPBUGS-22651 : explicitly set azure oidc bucket to allow public blob access #612
OCPBUGS-21926 : azure create-managed-identites to add cloud controller manager to network resource group #608
OCPBUGS-19865 : Add networkResourceGroupName parameter for Azure #602
OCPBUGS-17719 : Double timeout delays for managed identity creation and role assignment from 2 to 4 minutes. #591
pkg/aws/actuator: Drop comment which suggested passthrough permission verification #590
CCO-363 : Adding azure identity webhook #559
OCPBUGS-16684 : Set cr.status.provisioned=false on syncErr path #583
OCPBUGS-17049 : update lastSyncGeneration in STS flow sync success #585
Revert “CCO-401: Add azure-workload-identity-webhook to image references.” #588
CCO-401 : Add azure-workload-identity-webhook to image references. #586
CCO-413 : Add dataPermissions to Azure credentials request. #584
CCO-402 : Create Azure AD pod identity webhook config secret manifest in create-all,create-oidc-issuer #573
OCPCLOUD-2012 : ccoctl: Plumb credreq.spec.cloudTokenPath override into Azure secret creation #580
OCPBUGS-16807 : ccoctl azure exit with error when OIDC and installation resource group names are the same #582
OCPCLOUD-2012 : ccoctl: Add –enable-tech-preview arg to azure create-all subcommand. #581
OCPBUGS-16614 : *: stop checking for the STS feature gate #579
Add DOCKER_CMD Makefile var to use podman when found. #577
OCPBUGS-16614 : go.mod: re-vendor openshift/api #578
CCO-233 : Add Azure AD Workload Identity doc. #566
*: use a global codec #576
OCPBUGS-16313 : pkg/operator: correctly fetch CA for AWS minter #575
OCPBUGS-16334 : Clarify updateActuatorConditions & update lastSync #568
OCPBUGS-16313 : manifests: allow list/watch globally on our config configmap #572
CCO-388 : manifests: add cloudcredentials.operator.openshift.io to HCP #571
Revert “manifests: manually amend resources that get laid down by CVO in HCP” #570
OCPBUGS-15365 : manifests: fix rbac #567
OCPBUGS-15906 : ccoctl azure delete to also delete role assignments #564
OCPBUGS-16088 : Adds [default] section header to STS Secrets #565
OCPBUGS-16036 : Set status on CR properly when STS provisioned #562
Revert “Merge pull request #398 from csrwng/exclude_config_ibmcloud” #561
OCPBUGS-15365 : *: use correct clients in the secretannotator #563
OCPBUGS-15365 : *: use a filtered LIST + WATCH on Secrets for AWS STS #545
reconcile status when the clusteroperator changes #560
CCO-353 : ccoctl to create azure custom roles #556
CCO-394 : Do not Add PodIdentityWebhook controller when InfraStatus.ControlPlaneToplogy is External. #547
CCO-366 Add ability to detect AWS STS and behave accordingly #542
Implement ccoctl command to create infrastructure required for Azure workload identity #523
PORTENABLE-526 : operator: use a partial metadata watch for Namespaces #546
manager: filter the cache of configmaps #544
Bump to go 1.20 in go.mod #536
OCPBUGS-13549 : Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. #537
Add a make target and stub for actuator e2e tests #535
Updating ose-cloud-credential-operator images to be consistent with ART #534
Updating ose-cloud-credential-operator images to be consistent with ART #533
Updating ose-cloud-credential-operator images to be consistent with ART #532
OCPBUGS-11671 : ccoctl: Enable public anon read access to default OIDC S3 bucket #526
Updating ose-cloud-credential-operator images to be consistent with ART #521
OCPBUGS-8666 : Correct pod-identity-webhook annotations for PreferredDuringScheduling. #522
SPLAT-950 : doc/aws-sts : steps to migrate from public bucket to private issuer URL #515
OCPBUGS-8666 : feat: add workload annotation to pod identity webhook deployment #520
Upgrade build-machinery-go: make vulncheck
#519
Bump golang.org/x/net from v0.5.0 to v0.7.0 #517
Full changelog
OCPBUGS-28649 : Add required PSa labels #403
NO-JIRA: add inert featuregate files to allow diff against later releases #398
OCPBUGS-21653 : Update openshift/api package to latest version #371
: OCPBUGS-21286: bump library-go to include switch to HTTP/1.1 #369
OCPBUGS-20439 : Remove Build CRD #363
OCPBUGS-16726 : psa - move into tech preview for 4.14 #354
Revert “Bump to enable ValidatingAdmissionPolicy in tech preview.” #346
Bump to enable ValidatingAdmissionPolicy in tech preview. #343
Bump openshift/api to add ValidatingAdmissionPolicy feature gate. #340
OCPVE-626 : bump(openshift/api@master) #341
CFE-689 : Update openshift/api package to latest version #335
OCPBUGS-16614 : go.mod: bump openshift/api #338
OCPBUGS-16614 : go.mod: update openshift/api #334
OCPBUGS-16507 : bump sigs.k8s.io/kube-storage-version-migrator #333
OCPCLOUD-2010 : Remove feature gate for external platform #331
SDN-4024 : Vendor openshift/api to get ANP feature-gate changes #330
Promote privateHostedZoneAWS from Tech Preview to Default #328
Update openshift/api #327
OCPBUGS-13547 : Promote Azure CCM from TPNU to default #307
OCPBUGS-15877 : go upgradeable=false when latencysensitive is used and not corrected #325
Enable feature gate for externalCertificate on Route API #326
stomp the latencysensitive featureset for equivalent default #324
WRKLDS-757 : Sync with openshift/api to drop MatchLabelKeysInPodTopologySpread from TechPreviewNoUpgrade #322
SPLAT-1099 : bump openshift/api for vSphere static IP feature gate and platform spec #323
remove dead flag for file #309
Changes to move to api@2d36f53 #321
OCPBUGS-12767 : Add CustomNoUpgrade CRD versions to payload #320
OCPCLOUD-2010 : Re-vendor api to support external platform #306
Update openshift/api to disable EventedPLEG featuregate in techpreview #317
update openshift/api for types and gates #316
Update github.com/openshift/api to pull in evented pleg and sigstore feature flags #312
Update github.com/openshift/api to pull in feature gates #311
OCPBUGS-6266 : Rename config-operator_00_namespace run level to 00 #303
Update library-go dependency #305
Add JoelSpeed to owners #302
Update API and library-go #301
Require consistency in rendered artifacts #299
specify all known featureGates in disabled #297
update render to handle directories of manifests #295
adjust to refined openshift/api types #296
update ordering and featuregates #294
add featuregate status #288
Updating ose-cluster-config-operator images to be consistent with ART #287
OCPBUGS-10037 : update openshift/api to get new apiserver schema #289
Full changelog
OCPBUGS-33147 : azure-path-fix: get client secret from k8s secret #1058
OCPBUGS-34668 : pkg/storage/s3: use force path style in favour of virtual hosted style config #1051
OCPBUGS-33409 : azurepathfix: check if platform status is nil before accessing it #1033
OCPBUGS-32450 : azure-path-fix: support auth via account key (without clientID) #1023
OCPBUGS-31857 : bump aws-sdk-go from v1.44 to v1.50 #1018
OCPBUGS-28989 : pkg/storage/s3: enable bucket key on encryption settings #995
OCPBUGS-29755 : azurepathfix: fix stack hub, government and workload identity setup #1005
OCPBUGS-29604 : move azure storage blobs from docker
back into /docker
#1001
OCPBUGS-22127 : increase storage account key cache expiration #941
OCPBUGS-20710 : mitigate effects of rapid reset #942
OCPBUGS-18794 : check if response is nil before using it #917
OCPVE-632 : add capability annotations to manifests #856
OCPBUGS-17882 : Add rbac permission IDMS, ITMS #891
TRT-1193 : Revert “IR-373: remove node-ca daemon” #899
CFE-846 : Add user defined tags to the GCP buckets created #873
IR-373 : remove node-ca daemon #867
build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 #877
build(deps): bump the k8s-dependencies group with 1 update #895
IR-363 : Update Azure Credentials Request manifest of the Cluster Image Registry Operator to use new API field for requesting permissions #890
build(deps): bump github.com/prometheus/common from 0.37.0 to 0.44.0 #878
CFE-682 : Add user defined labels to the GCP buckets created #872
CFE-682 : Update openshift/api package to latest version #887
IR-390 : Make a configmap for MCO to consume CAs #880
build(deps): bump github.com/aws/aws-sdk-go from 1.44.291 to 1.44.298 #879
build(deps): bump golang.org/x/net from 0.8.0 to 0.11.0 #871
build(deps): bump github.com/aliyun/aliyun-oss-go-sdk from 2.1.10+incompatible to 2.2.7+incompatible #869
.github/dependabot.yml: group certain dependencies #865
IR-389 : bump aws-sdk-go #860
.github: configure dependabot #861
IR-369 , IR-370 : support Azure workload identity #857
OCPBUGS-12132 : Updating ose-cluster-image-registry-operator images to be consistent with ART #854
Updating ose-cluster-image-registry-operator images to be consistent with ART #849
OCPBUGS-8224 : fix storage selection on IBM cloud #847
Full changelog
OCPBUGS-28247 : Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #791
OCPBUGS-27063 : bump(library-go)=release-4.14 #787
OCPBUGS-21088 : Bump deps to address CVE-2023-44487 [4.14] #764
OCPBUGS-21088 : Bump deps to address CVE-2023-44487 #756
OCPBUGS-19553 : Update static pod manifests perms #749
add roles for the new privileged namespaces PSa syncer controller #743
OCPBUGS-15256 : Sync openshift/api to reduce installerpod configmap based file permissions to 0600 #740
OCPCLOUD-2010 : Re-vendor api and library-go for external platform support #736
OCPBUGS-14323 : Change manifest directory permissions #739
OCPBUGS-13579 : remove RBAC for cluster-policy-controller CM leader election #738
OCPBUGS-13579 : Drop flags removed in k8s 1.26 #737
Remove featureset flag and use only the manifest #735
Update cloud provider tests with feature gate changes #731
STOR-1263 : Bump k8s 1.27 #713
Read feature manifest #733
Restricted featuregate reader #732
use new featuregate API #730
OCPBUGS-12709 : Reset library-go branch after Azure revert #729
OCPBUGS-12133 : Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #727
Revert azure out of tree provider change #724
OCPBUGS-11352 : AWS should not use external-cloud-volume-plugin post CSI migration #721
OCPBUGS-7440 : do not degrade KCM when when monitoring stack rollout is in progress #706
OCPBUGS-10568 : migrate to using lease objects for leader election #715
Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #709
OWNERS: remove ravi from the owners #714
Reset library-go to openshift fork #708
Update library-go dependency to move Azure to out of tree #705
Update library-go dependency to move AWS to out of tree #707
Full changelog
: OCPBUGS-21371: bump library-go to include switch to HTTP/1.1 #96
Revert “specify master node selector on migrator pod” #93
OCPBUGS-17170 : specify master node selector on migrator pod #92
OCPBUGS-16513 : bump(*): update to 1.27.1 #91
Fix operator doc in README #90
Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #89
Full changelog
OCPBUGS-34885 : [release-4.14] Fix 4.13->4.14 upgrade with ipsec enabled #2390
OCPBUGS-27925 , OCPBUGS-30579 : [release-4.14] tighten conditions for the state transitions in IC upgrade #2207
OCPBUGS-30021 : Fully disable network-node-identity on ROKS #2315
OCPBUGS-31669 : [release-4.14] ensure local networking deployments within hypershift use the client side load balancer to be resilient to control plane node failures #2311
OCPBUGS-31360 : Remove egressip write permissions from ovn-kubernetes-node #2320
OCPBUGS-30021 : [release-4.14] Disable network-node-identity on ROKS #2286
OCPBUGS-30100 : ipsec: fix openssl typo #2287
OCPBUGS-29168 : add env var in whereabouts-reconciler daemonset #2257
OCPBUGS-26573 : Improve troubleshooting IC upgrades #2076
OCPBUGS-29033 : network node identity: tolarate all taints #2248
OCPBUGS-18281 : only 2 master nodes are required for ovn-kubernetes #2154
OCPBUGS-29300 : Update ingressconfig_controller to use field Manager #2266
OCPBUGS-28608 : fix whereabouts conformance test failures #2235
NO-JIRA: add kyrtapz as reviewer and approver for release 4.14 #2228
OCPBUGS-27858 : [release-4.14] Add ConfigMap mount to the whereabouts-reconciler DaemonSet #2219
OCPBUGS-27013 : HyperShift, network-node-identity: Check the deployment in the management cluster #2195
OCPBUGS-24326 : adminpolicybasedexternalroutes CR accepts an invalid IP address #2196
OCPBUGS-24037 : remove all managed fields used by old manager #2112
OCPBUGS-24320 : Add apbroute/status patch rights for ovnkube-node to update status #2143
OCPBUGS-22787 , OCPBUGS-22788 , OCPBUGS-22789 : ovnkube: container scripts cleanup #2090
OCPBUGS-23371 : hypershift, hosted clusters: enable multi-homing and multi-net features #2117
OCPBUGS-21717 : Bump golang.org/x/net and github.com/openshift/library-go #2122
OCPBUGS-24633 : ipsec add pluto restart #2152
OCPBUGS-22363 : Added HCP label to CNO pods #2081
OCPBUGS-22286 : hypershift: adjust backoff on infrastructure name retry #2078
OCPBUGS-23011 : Block upgrades to 4.15 with Kuryr #2096
OCPBUGS-23315 : set automountServiceAccountToken to false for hypershift managed network-node-identity deploy #2107
OCPBUGS-19897 : HyperShift: Use the local konnectivity proxy when checking proxy readiness #2043
OCPBUGS-20472 : hosted cluster upgrade failure from 4.13 stable to 4.14 #2063
OCPBUGS-20254 : [release-4.14] Revert Kuryr MTU fixes #2046
OCPBUGS-20184 : [release-4.14]: Don’t run network node identity as root #2054
OCPBUGS-20064 : Multus should determine kubeconfig path [backport 4.14] #2050
OCPBUGS-19955 : get ipsecStatus from host daemonset #2045
OCPBUGS-19862 : Multus per-node certificates should have 24h duration [backport 4.14] #2040
OCPBUGS-19523 : use $CPE_NAME to find the OS major version #2017
OCPBUGS-19808 : remove prestop hooks for northd, sbdbd and nbdb #2036
OCPBUGS-19747 : [release-4.14] Use port 9108 for ovnkube-control-plane metrics #2033
OCPBUGS-19771 : Relax conditions to get IC upgrade started #2035
OCPBUGS-19748 : Fix config status MTU migration not being updated #2034
OCPBUGS-19725 : Do not enable node admission webhook if the CNI is not OVN-Kubernetes #2032
OCPBUGS-19686 : ipsec: remove preStop from host #2029
OCPBUGS-19627 : Multus per-node certificate request [backport 4.14] #2023
OCPBUGS-19461 : make ipsec.service required #2014
OCPBUGS-19649 : Network node identity: node-specific certificate in ovnkube-node, admission webhook #2011
OCPBUGS-19623 : multus: set MULTUS_NODE_NAME to filter pods to local node #2022
OCPBUGS-19481 : separate libovsdblogs from main ovnkube-master #2008
OCPBUGS-18728 : Kuryr: Set MTU on Bootstrap, not Render phase #1995
OCPBUGS-18871 : ipsec: fix oopsy from 2e3fc8e7a0 #1997
OCPBUGS-18874 : ovnkube: set northd backoff-interval and use a single thread to save CPU #1998
OCPBUGS-18135 : IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping #1955
move IPsec to host #1849
OCPBUGS-17916 : Fix IC configmap lookup in pod_status.go #1954
OCPBUGS-17677 : [Azure]CNCC failed to assign egressIP to NIC for Azure Workload Identity Cluster #1980
OCPBUGS-18363 : Add ‘/etc/cni/multus/net.d’ into volumemount in multus pod #1979
OCPBUGS-18175 : Fix bond-cni’s default directory in multus manifest #1953
OCPBUGS-17782 , SDN-3664 : Join ovnkube-controller and ovnkube-node container for multizone setup #1971
OCPBUGS-16051 , OCPBUGS-3176 : Enables IP Forwarding config in CNO #1952
OCPBUGS-17257 : CVE-2023-3978: golang.org/x/net/html: Cross site scripting #1935
OCPBUGS-17677 : [Azure] Add granular permission for assigning egressIP to NIC to Azure CredentialsRequest for workload identity. #1949
OCPBUGS-17964 : ovn-k, managed: Align join subnet configuration #1962
SDN-4024 : Add ANP Feature Gate #1859
SDN-4057 : hypershift: Allow ovnkube-master and ovnkube-node to have different images #1942
Remove certificatesigningrequests/update permission from ovnkubenode #1934
Add rolling update for managed ovnkube-control-plane #1944
IC & openshift + hypershift #1874
OCPBUGS-16019 : prevent creation of multiple cni-sysctl-allowlist-ds pods #1904
OCPBUGS-10765 : make MAXLOGFILES a real variable and work for self-hosted #1931
Multus thick plugin support #1915
OVN-Kubernetes ipsec: create the CSR with a random name #1928
CCO-294 : Switch azure credentials request to use explicit permissions #1922
OVN-Kubernetes: Add status subresource permissions for setting labels and annotations #1896
SDN-3223 : Use encapsulation=true for IBM Cloud #1800
Bug 16136 : change whereabouts ip reconciler exec #1890
Add OpenStack platform to list of allowed dual-stack clusters #1697
OCPBUGS-15945 : Stop using utilruntime.PanicHandlers to handle reconciliation panics #1893
HOSTEDCP-1063 : allow webhooks in hosted clusters to reach multus-admission-controller service #1879
OCPBUGS-15961 : FIPS related CNO changes #1901
OCPBUGS-10765 : Revert “Revert “OCPBUGS-10765: Remove oldest ovn acl log files when f… #1876
ovn-k: Configure dns service namespace and name #1912
OCPBUGS-15544 : Enable multi-external-gateway feature by default for managed and hosted clusters #1887
OCPBUGS-15918 : Skip rendering 0.0.0.0/0 for cluster proxy status #1903
Change rhel7/8 to rhel8/9 #1870
Enable EgressService controller #1848
Edited multus-admission-controller deployment config to not add autom… #1767
OCPBUGS-15794 : fix: add missing annotation for workload partitioning #1866
OCPBUGS-15544 : Add adminpolicybasedexternalroutes rights for ovnkube-node. #1867
Revert “Remove oldest ovn acl log files when file limit exceeded” #1873 #1873
OCPBUGS-10765 : Remove oldest ovn acl log files when file limit exceeded #1868
kube-proxy config overriding updates #1831
OCPBUGS-15282 : Add release version annotation to whereabouts-reconciler #1851
CCO-356 : Add Infrastructures permission to CNCC cluster role #1843
Add multi-networkpolicies support for OVN #1796
Add support for AdminPolicyBasedExternalRoute CRD and controller’s RBAC #1765
OCPBUGS-15138 : Add kubernetes.io/os nodeSelector to wherebouts reconciler DS #1841
OCPBUGS-14988 , SDN-3901 : Rebase to kube 1.27 #1826
CCO-358 : Manifest changes necessary to support Azure Workload Identity #1755
OCPBUGS-14714 : Do not rely on ControlPlaneTopology do determine if running in HyperShift #1835
OCPBUGS-11882 : Added another volume to safe-to-evict-local-volume annotation #1830
OCPBUGS-14833 : Fixes lint issues #1834
OCPBUGS-14384 : Remove nodeSelector for architecture in whereabouts daemonset #1828
OCPBUGS-11882 : Added safe-to-evict annotation to ovnkube-master and multus admission controller components #1822
OCPBUGS-13922 : Revert “Do not set the operator as available before updating the network config” #1818
OCPBUGS-11448 : add Hypershift release-image annotation to multus #1770
OCPBUGS-10937 : multus-admission-controller mounts secret with mode 0640 #1752
OCPBUGS-13219 : Use IfNotPresent
instead of Always
in OVNK upgrades pre-puller #1803
OCPBUGS-5027 : Make the operator degraded on panic #1786
OCPBUGS-12856 : Support Device Plugin Resources For Smart NIC and DPU Hosts #1721
Updating cluster-network-operator images to be consistent with ART #1790
OCPBUGS-11565 : High API requests due to allowlist and operconfig reconcilers running too often #1788
OCPBUGS-8070 : Depreciate legacy field manager #1763
OCPBUGS-11550 : AUTH: update cluster-reader to include k8s.ovn.org #1791
OCPBUGS-10009 : HyperShift: Support HostedControlPlane node selector #1736
OCPBUGS-11046 : fix reconciliation process of the allowlist controller #1792
OCPBUGS-1341 : Enhance check controller to remove old check objects #1649
OCPBUGS-11046 : Fix allowlist ds template #1773
OCPBUGS-10647 : multus-admission-controller should not run as root under Hypershift #1745
OCPBUGS-9174 : The cluster-readers group should be able to get net-attach-defs #1343
Updating cluster-network-operator images to be consistent with ART #1768
OCPBUGS-9964 : Split out konnectivity certs #1734
SDN-3444 : Add runbook url for SBDB connectivity alert #1553
OCPBUGS-7777 : use –template instead of -a for ‘oc observe’ #1760
Fix tier label, privileged, HOSTNAME/NODENAME in whereabouts reconciler #1735
OCPBUGS-10433 : Hypershift: Add RollingUpdate parameters to multus-admission-controller #1740
ovn-kube: move back to unsuffixed RHEL9 images #1747
Updating cluster-network-operator images to be consistent with ART #1732
OCPBUGS-10649 : HyperShift: Add POD_NAME env to ovnkube-node #1748
OCPBUGS-10031 : operConfig reconcile can return nil error on failure #1744
Set OVN-K north/south bound stale alerts severity to critical #1668
OCPBUGS-8707 : Point libreswan to proper nss location #1727
Whereabouts should implement the reconciliation controller #1693
add/update some UTs around clusternetwork change #1725
OCPBUGS-9931 : Enable configuration of node healthz server on ovnkube #1715
OCPBUGS-8692 : HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO #1728
Cno 4.13 kubernetes 1.26 #1708
use annotation on the daemonset to update hybrid overlay #1709
Remove the ovn-kind-cno.sh script #1710
SDN-3597 : OVN-K alerts: add OVS overflow alerts #1630
Full changelog
OCPBUGS-33929 : Negative net interface name does not reduce queues (#1074) #1074
Add a ‘.snyk’ to silence static code analysis warnings (#1002) #1002
OCPBUGS-30153 : fix rendering extra ctrcfgs (#978) #978
fix extra-reboot on upgrade with paused mcp worker (#1053) #1053
OCPBUGS-31694 : E2E: Workload hints test cases fixes (#1012) (#1052) #1012
Systemd processes not being moved to cpuset/systemd.slice fix (#1040) #1040
Reduce number of reboots in offline tests (#1035) #1035
OCPBUGS-30507 : Add performance real time tuned template (#984) (#1025) #984
Report duplicate priority only for multiple matching profiles (#1018) #1018
Scheduler plugin: ignore IRQs (#1023) #1023
irqbalance: set banned cpus list to 0 (#994) #994
OCPBUGS-18640 : [release-4.14][manual] backport performance profile owner reference ehnancements (#989) #989
rps: fail silently when rps application failed (#901) #901
OCPBUGS-25982 : E2E: Add tests for Dynamic ovs pinning (#904) (#913) #904
OCPBUGS-26003 : E2E: PPC Test cases (#905) #905
Make MC names deterministic (#903) #903
OCPBUGS-25671 : rps: fix mask update for SR-IOV devices (#891) #891
OCPBUGS-18640 : Fix Racing Machine Configs and add Day 0 Support (#854) (#871) #854
OCPBUGS-24638 : Do not set default RPS sysctl twice (#880) #880
OCPBUGS-21845 : rps: trigger udev event per queue #832 (#832) #832
OCPBUGS-21845 : e2e:rps: improve logging (#831) #831
render: change dir path (#826) #826
Disable HTTP/2 for webhook and metrics servers (#841) #841
Remove obsolete protocols and weak ciphers (#835) #835
OCPBUGS-19459 : check for object being nil (#805) #805
OCPBUGS-19821 : e2e: perfprof: enhance the scheduling domain tests (#813) #813
nto: avoid timeout when there are too many CSV (#817) #817
Add kubeconfig path for IBM Managed OpenShift (#812) #812
OCPBUGS-18868 : [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) #788
Sync DaemonSet if operand image changes (#785) #785
OCPBUGS-18392 : Change the OVN trigger file name to adapt to OVN IC (#777) #777
OCPBUGS-15044 : e2e:irqloadbalance: wait for profile revert (#768) #768
Add SetLogger() prior to controller-runtime start (#779) #779
OCPBUGS-18052 : feat: added logic to handle legacy sno install (#778) #778
OCPBUGS-17943 : Add rtentsk plugin to pp tuned profile (#767) #767
Tighten the rules for modifying Tuned Profiles (#775) #775
Revert “Tighten the rules for modifying Tuned Profiles (#765)” (#771) #765
Tighten the rules for modifying Tuned Profiles (#765) #765
OCPBUGS-14026 : cgroup: Match the name of the cgroup to what is expected by kubelet (#758) #758
e2e: irqbalance: improve test troubleshooting (#753) #753
OCPBUGS-16348 : OSLAT latency spikes due to tsc karg setting (#756) #756
Makefile: hack: add helpers to compile testsuites (#751) #751
OCPBUGS-17219 : Render mode should not segfault w/ no matching MCP (#754) #754
Release leader election on manager exit (#745) #745
generate missing files (#752) #752
vendor: bump OCP dependencies 08082023 (#750) #750
OCPBUGS-7980 : e2e:ht-aware: exec on the correct worker node (#729) #729
bump k8s to 1.27.4 (#748) #748
e2e: wait for objects deletion (#749) #749
e2e:wait: return updated pod object explicitly (#744) #744
OCPBUGS-17258 : CVE-2023-3978: golang.org/x/net/html (#747) #747
e2e: remove image parameter from must gather (#743) #743
Update the config.openshift.io/node
object’s cgroupMode
to “v1” (#737) #737
Fix a race in e2e test rollback.go code (#739) #739
e2e:irqbalance: applied condition exists (#727) #727
Improve render error handling (#724) #724
e2e:irqbalance: wait for tuned profile to be ready (#721) #721
pao:status: do not take address of loop var (#720) #720
nto:tuned: remove sched_min_granularity_ns settings (#722) #722
Align TuneD with the latest shipped FDP version (#716) #716
E2E: update cpu load balancing test for latest cgroup related changes (#712) #712
Build gather-sysinfo (#714) #714
e2e: overhaul Performance-Addon-Operator tests (#590) #590
e2e: latency testing: increase the expected threshold (#706) #706
e2e: perf-prof: disable truncating gomega output (#702) #702
Configure OVS for dynamic cpu pinning (#559) #559
OCPVE-382 : fix: add default state for crio config (#700) #700
e2e: devmgr: fine tune kubelet restart test (#701) #701
e2e: RPS: fix expected cpu set (#703) #703
Switch to rslave/HostToContainer volume mount propagation (#692) #692
Do not rollback settings on TuneD exit (#699) #699
e2e: reboot: add kubelet restart test (#697) #697
remove conditional skip (#690) #690
e2e: memorymanager fix: check the hugepage size condition (#693) #693
Use RHEL9 as a base (#665) #665
Expose TuneD socket to host. (#651) #651
E2E: Use appropriate device path for rpsmask test (#691) #691
chore: replace github.com/ghodss/yaml
with sigs.k8s.io/yaml
(#628) #628
test: perfprof: devices: fix default test image (#672) #672
e2e: verify latency tests run with LATENCY_TEST_DELAY>120 (#662) #662
E2E: Add memory manager sanity test case (#573) #573
modify owners (#634) #634
Add minLength restriction to Tuned CR (#689) #689
OCPBUGS-14934 : consistent use of ginkgo flags in Makefile (#682) #682
OCPBUGS-14622 : Do not fail creating cgroups if they exist already (#683) #683
OCPBUGS-14193 : pao e2e: Split e2e PAO update lane to more lanes (#631) #631
OCPBUGS-4194 : rps: use default rps mask kernel API (#650) #650
OCPBUGS-14756 : [test] [e2e] Check ci lanes are executing the right test suites (#679) #679
check ocp version and export CNF_TEST_IMAGE variable with appropriate cluster version (#584) #584
OCPBUGS-5529 : Fix updating numa core siblings map in GetCpuSiblings function (#564) #564
Remove cpu-quota.crio.io: disable annotation (#663) #663
OCPBUGS-14137 : e2e: perfprof: add SNO device recovery test (#653) #653
Add PerformanceProfiles to ‘oc adm must-gather’ (#655) #655
Revert “Add PerformanceProfiles to ‘oc adm must-gather’ (#582)” (#654) #582
Add PerformanceProfiles to ‘oc adm must-gather’ (#582) #582
OCPBUGS-13148 : Configure cpu balancing cpu sets for all clusters (#646) #646
OCPBUGS-12978 use WatchNamespace() when deleting Profiles (#644) #644
Updating cluster-node-tuning-operator images to be consistent with ART (#579) #579
OCPBUGS-11083 : pao e2e: fix update test suit timeouts (#626) #626
e2e: Fix RPS test for multi-worker cluster (#641) #641
Revert PR558 and PR585 partially (#639) #639
e2e: add missing test id (#622) #622
OCPNODE-1539 : perf profile: add script for preparing cgroups for CPU load balance disabling (#601) #601
Remove subPaths, they are broken (#623) #623
OCPBUGS-10293 : performance-profile: enable crun for high-performance runtime (#588) #588
Revert #567 and cleanup PPC-generated TuneD config (#611) #611
Backup and revert profile when hugepages test completes (#597) #597
tuned: Handle UserLevelNetworking nil pointer gracefully (#608) #608
A new env var NO_BZ_CHECKS disables Bz and Jira status checks (#607) #607
OCPBUGS-9959 : check scheduler settings under /sys/kernel/debug/sched/ (#581) #581
workload-hints: disable stalld when rt disabled (#592) #592
render: remove uid from render-sync target (#594) #594
OCPBUGS-11083 : e2e: profile updates tests revised (#600) #600
Update to the latest k8s and OpenShift deps (#580) #580
Make the enable-leader-election option work (#586) #586
Update NTO-generated MC on MachineCount <= 1 (#585) #585
remove BZ 2181546 from skip list (#602) #602
Fix updating nodeSelector test (#595) #595
Remove the preStop hook for openshift-tuned (#587) #587
Skip tests depending on Jira or Bz issue status (#591) #591
kubectl explain to explicitly state workloadHint default values (#576) #576
Full changelog
OCPBUGS-28247 : Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #570
: OCPBUGS-20724: bump library-go to include switch to HTTP/1.1 #554
WRKLDS-728 : Capabilities: drop build/apps APIService when capabilities are not enabled #532
switch image-registry cert CM #545
OCPBUGS-16554 : update dependencies to get rid of goproxy #546
AUTH-408 : bindata: set required-scc #544
Plumb featuregates to the openshift-apiserver #542
allow etcd healthcheck timeout closer to probe timeouts to avoid failing on slower etcd #540
Add AES-GCM encryption tests #539
OCPBUGS-14010 : increase timeout for probes #536
OCPBUGS-2765 : Library go bump #538
OCPBUGS-12813 : Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #534
Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #525
OCPBUGS-10040 : update openshift/api to include aesgcm provider in the default apiserver schema #526
Full changelog
OCPBUGS-28951 : Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #328
OCPBUGS-23490 : Remove blockage of ConfigObserver by build informer has synced flag #318
OCPBUGS-20818 : bump(k8s,openshift) to address CVE-2023-44487 [4.14] #309
OCPBUGS-20439 : Include Build CRD in manifests #307
OCPBUGS-18992 : Always sort disabled controller list #303
OCPBUGS-18980 : Disable BuildConfigChange controller when Build cap is disabled #301
route-controller-manager deployment updates #295
OCPBUGS-16072 : Updating Kubernetes and other associated dependencies #296
OCPBUGS-13926 : change the operator log level to default normal in the deployment #289
BUILD-582 , OCPBUGS-14638 : bump(k8s): 1.27.1 #294
OCPBUGS-13926 : add loglevel controller for OCM-o #292
Revert “13895: [WRKLDS-730] route-controller-manager deployment updates” #293
OCPBUGS-13895 : [WRKLDS-730] route-controller-manager deployment updates #288
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #287
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #286
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #285
Bump golang.org/x/net from 0.5.0 to 0.7.0 #284
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #279
OCPBUGS-10568 : migrate to using lease objects for leader election #282
Add Divyanshu Agrawal as a reviewer #283
Full changelog
OCPBUGS-21759 : switch to bingo for dependency management (and bump golangci-lint@v1.51.0) #98
OCPBUGS-21019 : Bump golang.org/x/net to v0.17.0 #96
Merge rukpak updates into main + Required Fixes #88
Add ncdc to OWNERS #89
Temporarily remove from payload #90
Revert “Merge rukpak updates into main” #87
Merge rukpak updates into main #86
Updating ose-cluster-platform-operators-manager images to be consistent with ART #83
OCPBUGS-10333 : feat: add workload pinning annotations #82
Full changelog
OCPBUGS-21122 : bump(k8s,openshift) to address CVE-2023-44487 [4.14] #139
OCPBUGS-21122 : Bump deps to address CVE-2023-44487 #134
OCPBUGS-17989 : pkg/psalabelsyncer: enforce syncing in case label is set #129
AUTH-413 : ps syncer: only sync labels if noone else is managing them #127
ps syncer: add a controller for run-level 0 namespaces #128
Adjust logs per generic troubleshooting #126
OCPBUGS-15568 : Add timeout into cache sync wait to prevent hanging forever #124
OCPBUGS-15568 : Remove debugs logs in workqueuebucket #125
Add more logs for queue operations #122
OCPBUGS-15568 : Handle error if caches are not synced instead silently exit #121
Add ingvagabund to owners #120
Add logs for quota namespace syncing with verbosity level 2 #119
OCPBUGS-13649 : fix ClusterResourceQuotas to work for all api resources including custom resources #115
OCPBUGS-13579 : bump(k8s) to v0.27.1 #113
OCPBUGS-8271 : external template and route Informer #100
Updating cluster-policy-controller images to be consistent with ART #110
complete controller description #104
OCPBUGS-160 : psalabelsyncer: handle empty namespace of a rolebinding subject #107
Updating cluster-policy-controller images to be consistent with ART #105
Full changelog
OCPBUGS-21217 : CVE-2023-39325 ose-cluster-samples-operator-container:golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) #539
OCPBUGS-22257 : Sync library to remove invalid dockerhub references for OKD #520
manifests: Drop explicit runlevel from CRD manifest #515
OCPBUGS-16435 : Bump k8 to v0.27.2 for ocp 4.14 #514
OCPBUGS-16403 : Update Cluster Sample Operator dependencies and libraries for OCP 4.14 #511
reconcile status when clusteroperator changes #510
OCPBUGS-15754 : Update Jenkins and Jenkins Agent Base image versions #504
OCPBUGS-14491 : Updating to use Jenkins 4.13 images #502
OCPBUGS-12775 : Update Cluster Sample Operator dependencies and libraaies for OCP 4.14 #500
Updating ose-cluster-samples-operator images to be consistent with ART #499
OCPBUGS-10910 : Add network tools imagestreams #495
Updating ose-cluster-samples-operator images to be consistent with ART #493
Fix jira component #494
Full changelog
OCPBUGS-30878 : install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ #1040
OCPBUGS-27822 : Revert “[release-4.14] OCPBUGS-27175: clusterOperatorBuilder: Reconcile metadata on COs” #1028
OCPBUGS-27175 : clusterOperatorBuilder: Reconcile metadata on COs #1021
OCPBUGS-27048 : pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream #1018
OCPBUGS-26207 : pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1016
OCPBUGS-20762 : [4.14] Bump http-related deps #986
OCPBUGS-19921 : pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation #976
OCPBUGS-19737 : pkg/clusterconditions/promql: Warm cache with 1s delay #973
OCPBUGS-19465 : Properly reconcile SCC resources #972
OCPBUGS-13308 : Simplify user-facing messages on risk evaluation throttling #955
OCPBUGS-17418 : Really handle DeletedFinalStateUnknown correctly #954
CNF-9385 : add ImageRegistry capability #950
OCPBUGS-17418 : Handle cache.DeletedFinalStateUnknown #952
docs/user/tasks-*by-number-and-component.svg: Update to 4.13 #949
Dockerfile: bump to 1.19 and use public UBI pullspec #944
pkg/payload: De-noise ‘excluding …’ logs #945
bump api version to add new capability #941
pkg/cvo/metrics: Doc from_version semantics for cluster_version{type=“completed”} #929
Code cleanups for golangci-lint failures #942
OTA-559 : Migrate to (*Manifest).Include(…, overrides) #934
OCPBUGS-9070 : Fix hotlooping on Cronjob resources #910
Updating cluster-version-operator images to be consistent with ART #932
Updating cluster-version-operator images to be consistent with ART #930
Updating cluster-version-operator images to be consistent with ART #928
syncStatus: Reduce verbosity when syncing nothing of interest #922
Update dnsPolicy to allow consistent resolution of the internal LB #920
OTA-941 : pkg/payload/precondition/clusterversion/rollback: New precondition #918
Updating cluster-version-operator images to be consistent with ART #911
OCPBUGS-5469 : pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #909
Full changelog
OCPBUGS-33942 : make sure folder is encapsulated with quotas #13869
OCPBUGS-35723 : Upgrade Pipeline trigger resources to v1beta1 #13985
OCPBUGS-33558 : Display “With Data upload form” in Create PVC drop down once #13840
OCPBUGS-33064 : Fix PipelineRun Logs tab navigation #13673
OCPBUGS-33321 : Helm Plugin’s Catalog incorrectly renders a single index entry into multiple tiles #13824
OCPBUGS-33635 : restrict Masthead logo to max-height to 60px #13847
OCPBUGS-33640 : Add visual connector between VMs and non VMs workloads #13848
OCPBUGS-33462 : fix issues with Edit Route form #13831
OCPBUGS-33110 : change OperatorHub filter FIPS Mode to Designed for FIPS #13804
OCPBUGS-32697 : Routes created by devfiles do not always use HTTPS #13787
OCPBUGS-21799 : Fix empty editor error #13256
OCPBUGS-32168 : fix bug where paused MCPs were incorrectly unpausing w… #13753
OCPBUGS-20173 : Console should not panic when no response is retrieved for plugin assets #13217
OCPBUGS-31388 : Application creation fail when manually entering input scaling value in local setup #13697
OCPBUGS-31394 : PipelineRuns in Console show wrong status or load indefinitely #13698
OCPBUGS-31864 : Fix config ini format #13738
OCPBUGS-25145 : fix vCenter cluster being empty #13436
OCPBUGS-28746 : fix bug where Expand PVC modal assumes pvc.spec.resou… #13558
OCPBUGS-29783 : Fix operands list endpoint #13625
OCPBUGS-29813 : Release 4.14 backports #13646
OCPBUGS-29813 : Addition of optional chaining to prevent yaml crash #13541
OCPBUGS-25274 : Add support for Azure Workload Identity / Federated Identity based in… #13642
OCPBUGS-28972 : Add flags checks to hide Pipeline static plugin List and details pages #13572
OCPBUGS-27898 : Add support for custom segment domains (to load JS and make API calls) #13540
OCPBUGS-29349 : Error in displaying BuildRun logs in Console #13601
OCPBUGS-29100 : Pipeline Name gets changed to “new-pipeline” on the Edit Pipeline YAML/Builder #13585
OCPBUGS-29239 : Add a new allowInsecure option to the internet proxy #13592
OCPBUGS-28990 : update check for the ‘provider’ label on the PackageMa… #13573
OCPBUGS-27157 : add additional check to determine if file is binary #13507
OCPBUGS-28635 : Bump graphql-go to v1.3.0 #13553
OCPBUGS-27305 : Copy response code from proxied plugin requests #13517
OCPBUGS-27851 : fix bug where Clone PVC modal assumes pvc.spec.resourc… #13537
OCPBUGS-27350 : Add Pipeline metrics tab using plugin #13520
OCPBUGS-26171 : Set unlimited line width in YAML editor #13482
OCPBUGS-24640 : Strip ‘Server’ header from proxy response #13423
OCPBUGS-25997 : change Alertmanager form to create using matchers inst… #13478
OCPBUGS-24349 : Fix crash when ArtifactHub Task has no version #13399
OCPBUGS-25397 : fix runtime error on Node details Overview when Machin… #13446
OCPBUGS-23771 : Fix for yaml editor that crashes with MCE and ACM plugins enabled #13360
OCPBUGS-24667 : Fix plugin proxy handler #13425
OCPBUGS-24474 : S2I Build Wizard should check for Containerfile in addition to Dockerfile #13415
OCPBUGS-24432 : fix filtering issues on Events #13413
OCPBUGS-24352 : add access review for impersonate #13400
OCPBUGS-22240 : Save also the location.search and .hash values in localStorage to restore them after login #13270
OCPBUGS-24293 : ConsolePlugin metrics must no longer be grouped by the vendor #13391
OCPBUGS-24423 : Searching for items in quick search is confusing #13412
OCPBUGS-22375 : Delete results.tekton.dev annotations before rerun the pipelineRun #13278
OCPBUGS-22478 : Extra space is in the translation text(Chinese) of ‘Create rolebinding’ and ‘replicate rolebinding’ #13290
OCPBUGS-24196 : ApiVersion displayed on console is v1alpha1 whereas we support v1beta1 #13402
OCPBUGS-23423 : Cannot Edit Shipwright Build #13343
OCPBUGS-22980 : remove expandable toggle for conditional update risk d… #13308
OCPBUGS-22374 : Telemetry- Current page was sometimes not tracked when reloading the current page #13277
OCPBUGS-22177 : Channel page shows “Required” message for the default name when navigate to create channel page #13262
OCPBUGS-19371 : Upgrade DomainMapping apiVersion to v1beta1 #13165
OCPBUGS-19416 : Correct logout process #13173
OCPBUGS-22285 : updating doc links for 4.14 GA #13273
OCPBUGS-19845 : mock apis for git repo in test serverless function tests #13199
OCPBUGS-22460 : Fix the forms when BC is not installed in the cluster #13288
OCPBUGS-21877 : add support for new features annotations while preserv… #13258
OCPBUGS-22377 : Fixed Edit Application form for Knative Services #13279
OCPBUGS-21784 : hide page-specific doc links for ROSA and OSD #13254
OCPBUGS-19898 : fix ResourceLog permissions when impersonating #13203
OCPBUGS-19899 : change resource icon for FenceAgentRemediationTemplate… #13204
OCPBUGS-19878 : show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart #13202
OCPBUGS-19776 : 404 - not found will show on Knative-serving Details page #13193
OCPBUGS-19526 : fetch TaskRuns without selector and reduces the get TaskRuns requests #13178
OCPBUGS-18997 : fix issues with refactored “Create StorageClass” form #13170
OCPBUGS-19664 : Check if filtered object contains name property #13187
OCPBUGS-19380 : Hide the Builds NavItem if BuildConfig is not installed in the cluster #13167
OCPBUGS-19337 : Unhide the Import From Git Tab on the Add page if Pipelines Operator is installed and BuildConfig is not installed in the cluster #13160
OCPBUGS-19336 : Added React Icon #13159
OCPBUGS-18881 : use active namespace in Create cta href of create action for operator backed #13150
OCPBUGS-19362 : Hide the DeploymentConfig option in the User Preferences if that resource type isn’t available #13164
OCPBUGS-19338 : Hide DeploymentConfig option from forms when it’s not installed in the cluster #13161
OCPBUGS-18987 : Monitoring: Fix display of silenced alerts in dev console #13152
OCPBUGS-18727 : bump @patternfly/react-core to v4.276.11 to pick up Sele… #13146
OCPBUGS-18686 : Fix incorrect export of useLabelsModal in dynamic plug… #13142
OCPBUGS-18604 : [knative] Don’t rely on openshift/hello-openshift as a sample image #13134
OCPBUGS-18094 : Remove cluster filter and menu group title #13137
OCPBUGS-18348 : Add deprecation alert for DeploymentConfig #12968
OCPBUGS-13359 : Fix crash when filtering the quick start catalog #13126
OCPBUGS-18306 : fix useDeleteModal Example formatting #13117
OCPBUGS-18406 : Builds navigation item is missing in Developer perspective #13124
OCPBUGS-17341 : OCP console mandate secret for repository creation #13084
OCPBUGS-16108 : Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers #13118
CONSOLE-3126 : Update cluster paused alert message #13106
OCPBUGS-17864 : Web console slowness on Project>Project access page #13099
OCPBUGS-17981 : Remove DeploymentConfig, Build and BuildConfig sections from navigation and use flags so they can be enabled by cluster admins #13089
OCPBUGS-9182 : Enable default-container annotation to specify the default container for logs and terminal. #13098
OCPBUGS-17913 : Typo in the OCP console menu #13096
OCPBUGS-17948 : Fix that Devconsole plugin show essential features like add page and topology also when Builds and DeploymentConfigs capabilities are disabled #13097
OCPBUGS-13892 : Remove spaces from prometheus queries #13043
OCPBUGS-15927 : Error page when fresh normal user visiting BuildConfigs page of ‘default’ project #13091
OCPBUGS-16374 : Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn’t exists #13093
CONSOLE-3327 : Expose useActiveNamespace within dynamic-core-api #13033
OCPBUGS-17595 : Updating YAML from console shows error #13090
OU-206 : Merge monitoring alerts with alerts from other sources in the dev console #12940
CONSOLE-3681 : Convert storage-class-form.tsx from class component to … #13036
OCPBUGS-17496 : Bridge NAD should set “preserveDefaultVlan”: false #13076
CONSOLE-3126 : Remove paused state since its no longer relevant due to 4.14 changes … #13072
OCPBUGS-17515 : Console UI is broken due to patternfly/react-core version change #13086
OCPBUGS-17504 : Dev console: Remove checkboxes on Alert Details page Silenced By list #13085
OCPBUGS-16717 : Fix name validation regex #13075
OCPBUGS-17410 : Fix that “Delete application” doesn’t work in topology when Pipelines operator is not installed #13074
OCPBUGS-14138 : Console fix #13078
OCPBUGS-15458 : Links for console-dynamic-plugin-sdk markdown docs are not working #13062
OCPBUGS-129 : bump @patternfly/react-core to v4.276.11 to pick up Sel… #13052
OCPBUGS-17234 : change Command Line Tools text #13068
OCPBUGS-17347 : Fix “View alerting rule” action URL #13058
OCPBUGS-15419 : Title on Overview page has changed to “Cluster · Red Hat OpenShift” #12951
OCPBUGS-13387 , OCPBUGS-16693 : Import page create button is disabled due to PAC validation #13046
CONSOLE-3683 : Convert FireMan component in list-page.tsx from class c… #13024
OU-231 : Add jgbernalp and zhuje to OWNERS for monitoring #13069
OCPBUGS-17196 : Fix nad ovn type - annotation and netAttachName #13053
OCPBUGS-16844 : external link icon in resource added
toast notification not linked #13057
OCPBUGS-15310 : Helm Chart installation modal “Documentation” field is always N/A #13032
CONSOLE-3686 : Convert SecretFormWrapper component in create-secret.ts… #13017
OCPBUGS-15008 : update the KnativeServing API version to v1beta1 for global-config extension #13059
CONSOLE-3679 : Convert instantiate-template.tsx from class component t… #12947
CONSOLE-3568 : expose DeleteModal via useDeleteModal hook in @console/shared #12974
CONSOLE-3677 : Convert edit-yaml.jsx from class component to functiona… #12973
CONSOLE-3678 : Convert EventStream component in events.jsx from class … #12989
OCPBUGS-16093 , OCPBUGS-16270 , OCPBUGS-9409 : Creation of GH webhook and attaching it to repo while importing from git using PAC #13021
CONSOLE-3682 : Convert components in cluster-settings folder from clas… #13011
CONSOLE-3676 : Convert app.jsx from class component to functional comp… #12952
OU-175 : Monitoring: Add “Silences” tab to Developer console #12900
OCPBUGS-10884 : propagate mpath device type to request data #13022
OCPBUGS-16656 : Devfile import fails on master branch #13050
OCPBUGS-9355 : Fix translation bug #13049
OCPBUGS-3495 : Add cacheBuster query string when requesting plugin entry scripts #13035
OCPBUGS-16599 : allow creation of v1beta1 APIversion Pipeline in Pipeline builder YAML view #13034
OCPBUGS-9285 : Add note to the console.page/route extension regarding its usage #13044
OCPBUGS-14341 : Check operands deletionTimestamp to disable kebab action menu #13042
ODC-7336 : automation for customization-of-catalog-add-page-form feature file #12934
OCPBUGS-11285 : Dynamic plugin translation support for plurals broken #13028
chore(i18n): update translations: Completed Master Branch - Sprint 238 #12999
OCPBUGS-16433 : Fixes location update issues #13023
CONSOLE-3591 : Remove directory listing for /static/* #13001
CONSOLE-3694 : Convert tile-view-page.jsx from class component to func… #12942
ODC-7334 : Show ConsoleSamples resources in the samples catalog #12970
CONSOLE-3666 : Validate shared modules of dynamic plugins #12881
OCPBUGS-11971 : When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. #13016
OCPBUGS-13808 : Console SDK components should be using GroupVersionKin… #13029
OCPBUGS-14837 , OCPBUGS-16025 : Hide the Duplicate Pipelines Card in the DevConsole Add Page #13007
OCPBUGS-8274 : Fix copy login command regression #13003
CONSOLE-3687 : Convert components in utils folder from class component… #12925
OCPBUGS-11219 : Fix incorrectly nested css rule for print styles #12991
OCPBUGS-11620 : Fix stop PLR option #13020
CONSOLE-3706 : Remove custom history.pushPath alias function #12873
CONSOLE-3431 : Allow building dynamic plugins without any exposed modules #12530
HELM-502 : Bump Helm to 3.12.1 #13014
OCPBUGS-15359 : Enable namespace dropdown selection when all namespace installation mode selected by default and… #12975
OCPBUGS-16174 : Update the VSCode extension link and descriptions on Create Serverless function form #13015
OCPBUGS-13142 : InstallPlan info cannot shown on Subscription tab for … #13012
OCPBUGS-14907 : Fix operator backed catalog page when copied CSVs disabled #12932
CONSOLE-3684 : Convert components in modals folder from class componen… #12941
OCPBUGS-16148 : disable Save if Use existing claim is active and no … #13010
OCPBUGS-16150 : Fix Start last run action in Topology sidepanel #13009
OCPBUGS-15458 : Links for console-dynamic-plugin-sdk markdown docs are not working #12993
OU-218 : Monitoring: Use useResolvedExtensions
instead of useExtensions
#12987
CONSOLE-3680 : Convert row-filter.jsx from class component to function… #12957
OCPBUGS-13808 : Console SDK components should be using GroupVersionKin… #12946
CONSOLE-3685 : Convert components in RBAC folder from class component … #12933
CONSOLE-3611 : User can configure the install of Operators that authenticate using STS #12779
OCPBUGS-9991 : Most of contents are lack of i18n on “Command Line Tools” page #12995
OCPBUGS-15021 : Use FLAGS.CAN_GET_NS to decide whether to show Route details > Metrics tab #12944
ODC-7341 : Show Build output in Shipwright Build list and details page #12972
OCPBUGS-8005 : Fix broken upstream doc link for cluster channel upgrades #12998
OCPBUGS-10884 : add multipath device type to LocalVolumeSet #12723
OCPBUGS-14434 : Running yarn dev
results in the build running on a loop #12990
OCPBUGS-10844 : fix bug where binary secret values are corrupted on edit and add test coverage #12986
OCPBUGS-15011 : Upload JAR file does not work if the Cluster Samples Operator is disabled #12917
OCPBUGS-12891 : check for valid OLM selector in K8sResourceWidget to p… #12887
OCPBUGS-15896 : STS label not valid according to kube #12980
RHSTOR-4533 : added a mutator property for the storage class extension #12886
OCPBUGS-7416 : get Kamelets from the camel-k-operator namespace as well #12710
OCPBUGS-14548 : only show pipelines doc link for downstream #12979
CONSOLE-3565 : Expose annotations modal in dynamic plugins sdk #12843
CONSOLE-3610 : User can filter on STS enabled clusters for Operators that claim support for STS #12778
OCPBUGS-15773 : The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. #12966
ODC-7319 : correcting - missing package tag across gherkin files #12847
ODC-7313 : Run CI tests with non-admin user #12814
OCPBUGS-15427 : Remove access review check for PipelineResource from Pipeline section #12964
ODC-7325 : Improve BuildConfig and Shipwright Build list pages #12910
ODC-7340 : Remove Shipwright Tech Preview badges #12960
OCPBUGS-14548 : update pipelines doc links #12890
OCPBUGS-15572 : Fix bug where the install operator update approval radio button does … #12959
OCPBUGS-14959 : Error for DuplicateClusterRoleBinding and Edit ClusterRoleBinding subject in RHOCP4 Web Console #12939
OCPBUGS-14665 , OCPBUGS-14874 , OCPBUGS-14875 : Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions #12929
OU-198 : Revert “Disable broken monitoring-tests” #12943
ODC-7337 : Skip wait for authentication operator to start progressing when the secret already exists #12884
OCPBUGS-497 : frontend: fix kube-apiserver availability query #12928
OCPBUGS-15060 : “Duplicate RoleBinding” leads to “Unsupported value” error #12921
OCPBUGS-7794 : Image pull secret creation form doesn’t re-enable Create button once it is disabled #12609
CONSOLE-3616 : Revert multicluster server flags #12782
OCPBUGS-15299 : Create Serverless Function Form is Broken #12926
OCPBUGS-13120 : Serverless functions UI warning is misleading #12923
ODC-7329 : Subsequent PipelineRuns take initial PipelineRun name into account #12913
CONSOLE-3612 : User is warned when cluster is in STS mode #12777
ODC-7322 : Implement a proxy to hit the Artifacthub.io API end point #12905
MGMT-15023 : Add help text to vCenter cluster field #12912
OCPBUGS-11464 : Availability requirement update is initially disabled … #12918
OCPBUGS-15135 : Make knative routes copyable similar to openshift routes #12908
OCPBUGS-14909 : Disabling web-terminal tests in CI #12892
OCPBUGS-14015 : Create helm release page doesn’t show a YAML editor when schema isn’t available (httpd-imagestreams chart) #12914
CONSOLE-3372 , OCPBUGS-13648 , OCPBUGS-13833 : Console supports installing non-latest Operator versions #12743
OCPBUGS-7036 : Add Git Repository (PAC) doesn’t setup GitLab and Bitbucket configuration correct #12593
chore(i18n): update translations: Completed-7034-OCP 4.13/Master Branch UI Localization- Sprint 231 #12695
OCPBUGS-14354 : e2e: Enable Pipeline tests #12911
OCPBUGS-14915 : Remove entries from the menu that are now added by monitoring-plugin
#12893
ODC-7316 : Add discoverability of the IDE extensions from Create Serverless form #12846
OCPBUGS-14419 : Remove tech preview badge from Pipeline repository pages #12888
ODC-7326 : Align Build, BuildRun and PipelineRun details page #12898
OCPBUGS-14836 : Updated BuildConfig and Shipwright Build lists shows runs from another namespace #12896
OCPBUGS-14890 : Missing ‘View details’ link for several servicemonitors.spec.endpoints fields in YAML sidebar #12895
OCPBUGS-14002 : Correct the alignment of yaml toolbar links #12894
OCPBUGS-14660 : Helm Repository “Edit” button results in 404 #12891
OCPBUGS-14716 : add ROSA branding option #12889
OCPBUGS-13208 : Fix PVC metrics query #12867
OCPBUGS-12897 : Knative Route Details Page should show the URL of the route as it is shown in the Openshift Routes Details page #12853
OCPBUGS-8682 : Fix empty create dropdown on provided APIs page #12819
OCPBUGS-9214 : Create button is disabled in Git Import form when git repo url has hyphens in owner part of the url #12652
OCPBUGS-4496 : Fix Samples/Snippets tab #12642
OCPBUGS-7361 : support JSON schema 06 in the helm install/upgrade form #12644
OU-138 : Move QueryBrowser component to dynamic SDK #12841
OCPBUGS-9063 : Remove frontend validation from legacy operand form gen… #12788
ODC-7275 : Implement invoke serverless functions #12755
OCPBUGS-14964 : Disable broken monitoring-tests #12902
OCPBUGS-11219 : Include print styles to allow printout of full screen and … #12849
ODC-7306 : Show the latest Build status in the Build list view #12809
ODC-7277 : added v1 support for Pipeline #12729
CONSOLE-3660 : Introduce react-router v6 compatibility #12861
OCPBUGS-8274 : Do not request token URL if auth is disabled #12818
OCPBUGS-14668 : visiting Configurations page returns error Cannot read… #12882
OCPBUGS-14602 : selected project was not taking effect when searching … #12880
OCPBUGS-14550 : Use proxy with web socket connection and monitoring d… #12877
CONSOLE-3392 : Implement exact search for more precise result sets and add user prefs setting #12838
ODC-7288 : Add proxy to invoke knative services with a public route #12789
ODC-7320 : Gherkin for customisation of add page and developer catalog through customisation form view #12855
OCPBUGS-14424 : OVN Kubernetes multi-homing #12869
OCPBUGS-14262 : Fix Pipeline metrics page #12863
OCPBUGS-10411 : Edit deployment don’t enable save button if image stream is added #12673
OCPBUGS-14149 : account for single object in status.conditions instead… #12866
OCPBUGS-14352 : E2e tests fails because OpenShift Pipelines operator could not be found #12872
OCPBUGS-9909 : Could not import multiple resources via JSON (while YAML supports this) #12721
ODC-7317 : Update Terminal step of the Guided Tour to indicate that odo CLI is accessible #12848
ODC-7308 : Update test cases of web terminal configuration page #12825
ODC-7283 : Add Web Terminal tab in cluster configuration page #12718
OCPBUGS-6767 : Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount #12679
OCPBUGS-13782 : Surface the message from Operator developer #12840
OCPBUGS-12896 : Corrected Labels for resolving the bug related to the Create Route Checkbox #12834
ODC-7315 : Change help texts in initialize Terminal page #12824
OCPBUGS-11668 : Fix kebab actions on Installed Operators page #12822
OCPBUGS-13693 : Fix RTE in bridge. #12817
OCPBUGS-11256 : Topology UI doesn’t recognize Serverless Rust function for proper UI icon #12816
OCPBUGS-11996 : Fixed Make Serverless Form Error #12815
OCPBUGS-13257 : propagate labels to pipeline resources #12808
MGMT-14527 : Add vSphere cluster field. #12806
OCPBUGS-12783 : Remove “Action” type from OLM descriptor readme #12800
CONSOLE-3623 : Add X-CSRF token to console request headers #12719
OCPBUGS-5453 : Add Pipeline metrics unsupported empty page #12435
OCPBUGS-1829 : use service port name instead targetPort in the Pipeline Event listener route #12148
CONSOLE-2501 : Upgrade TypeScript version to 4.5 #12821
ODC-7318 : Update ODC owners, May 2023 edition #12839
CONSOLE-2501 : Update builder image #12828
OCPBUGS-13361 : Update plural string dynamic demo plugin locales #12799
ODC-7309 : Remove dev console integration-tests reviewers #12802
OCPBUGS-12244 : only copy workload annotations to debug pod #12794
ODC-7279 : Correcting CI failures of ODC Packages #12700
HELM-484 : Basic authentication documentation update #12768
CONSOLE-3615 : Mark multicluster code for removal #12754
ODC-7300 : Change method name for labelKeyForNodeKind to getTitleForNodeKind #12733
ODC-7296 : Rename all instances of YAMLEditor to CodeEditor #12708
Bug 2176216 : VMs are listed twice in cluster inventory #12795
OCPBUGS-12267 : Fix OLM k8sResourcePrefix descriptor dropdown behavior #12758
OCPBUGS-11099 : add support for minimal status of tekton #12724
OCPBUGS-12732 : fix buildconfig form ns #12771
OCPBUGS-12637 : update helm release empty state text #12767
OCPBUGS-12286 : Fix missing console plugin control on CSV details page. #12766
OCPBUGS-7692 : Fix that helm details page shows an inf. loading indicator when api call fails #12578
OCPBUGS-11057 : Importing a kn Service shows a non-working Open URL decorator also when the Add Route checkbox was unselected #12726
OCPBUGS-6581 : Serverless - Eventing - Channels: Conditions column i18n misses #12641
OCPBUGS-7485 : When Creating Sample Devfile from the Samples Page, Topology Icon is not set #12725
OCPBUGS-11596 : Do not fetch catalog sources on CSV or Subscription details pages. #12717
OCPBUGS-10224 : Multiple instances of tabs under ODF dashboard #12635
OCPBUGS-6770 : Pipeline doesn’t render correctly when displayed but looks fine in edit mode #12722
OCPBUGS-11869 : Pod Status Overlapping in Sidebar #12732
CONSOLE-3600 : Filter operators based on nodes OS type #12707
OCPBUGS-9329 : update dynamic plugin info for development mode #12666
OCPBUGS-10562 : disable operator-uninstall.ts as the uninstall test is… #12731
OCPBUGS-3036 : Do not list subscriptions in all namespaces on CSV details page. #12716
OCPBUGS-5548 : delete associated pipeline, triggertemplate and eventlistener when deleting app #12587
Add the possibility login with different IDP and user credentials #12709
ODC-7270 , ODC-7272 : Improve telemetry: Add resource and tab name to the page title #12669
Improve useModal docs example #12115
Improvements on Web Terminal Operator Installation functionality #12713
OCPBUGS-10956 : Reduce metrics cardinality by grouping well-known and other perspectives and plugins #12684
OCPBUGS-9305 : add missing readOnly conditions #12685
ODC-7280 : Add PipelineRun tab to Dev perspective Pipeline page #12672
OCPBUGS-10562 : re-enable and fix operator-uninstall.spec.ts #12678
ODC-7282 : Add webhook informations on Repository details and summary page #12690
OCPBUGS-11382 : Update Dockerfile to use latest builder images #12655
ODC-7274 : Prepare a page and modal to invoke a Serverless function #12686
OCPBUGS-103 : Move operator install status to it’s own route/page #12704
OCPBUGS-11020 : fix runtime error on OperatorHub details pages #12702
ODC-7281 : Provide Column management option for the TaskRuns list page #12689
Remove andybraren as dashboard reviewer #11807
OCPBUGS-11197 : Rephrase vCenter connection tooltips #12694
OCPBUGS-10961 : Fix description for BuildAdapter SDK extension #12683
CONSOLE-3577 : Remove deprecated metering endpoint from backend #12692
OCPBUGS-5940 : Wait with CRD/model translation until i18n bundles are loaded #12697
OCPBUGS-10916 : fix translation string for Image pull secret created alert #12681
OCPBUGS-10836 : fix All projects selection on Pipelines page in dev perspective #12676
OCPBUGS-10950 : use PipelineRun template from ‘pipelines-as-code-pipelinerun-go’ configMap for Go runtime #12682
ODC-7271 : add duration for PipelineRun and TaskRun on details page #12659
ODC-7276 : Add cancelled status color in Pipeline metrics page #12662
automation of edit build config feature file #12622
OCPBUGS-10619 : Enable modal scroll for uninstall operator instances #12680
OCPBUGS-10562 : disable operator-uninstall.spec.ts as the previous fix… #12677
PF Update 2023-2 #12664
OCPBUGS-10562 : re-enable and fix operator-uninstall.spec.ts #12661
OCPBUGS-10655 : Do not show builder ImageStreams without sampleRepo
as samples #12667
OCPBUGS-10509 : Sync Debug in Terminal feature availability with 3.x pods in web console #12657
OCPBUGS-9956 : update the default pipelineRun template name #12660
OCPBUGS-7620 : Edit Deployment (and DC) form doesn’t enable Save button when changing strategy type #12608
OCPBUGS-8086 : Visual fixes for list items #12619
OCPBUGS-9907 : Fix alerts source display values #12632
OU-110 : Observe > Dashboards : Code Consolidation Fixes #12588
OCPBUGS-7484 : When there are 2 pipelines displayed in the dropdown menu, selecting one, unchecks the Add Pipeline checkbox #12650
OCPBUGS-8268 : OpenShift pipeline TaskRun(s) column Duration is not present as column in UI #12633
OCPBUGS-7632 : comment out suspected problematic test #12647
OCPBUGS-10345 : Fix backend runtime error #12654
OCPBUGS-10269 : Fix grammatical error in feedback modal #12634
OCPBUGS-8299 : CronJobs table/details UI doesn’t have Suspend indication #12638
OCPBUGS-7801 : taskrun ui fails when using object type results #12626
OCPBUGS-10230 : Fixes card sizes not even issue when commit info is not available on Environments page #12550
OCPBUGS-5360 : re-enable operator-install-single-namespace.spec.ts test #12424
OCPBUGS-10232 : Fixes argocd link for non-KAM added application envs #12558
OCPBUGS-7232 : Fixes resource status alignment issue #12429
CONSOLE-3393 : Proxy managed cluster monitoring requests through MCE c… #12360
CONSOLE-3425 : Expose ‘nameFilter’ prop to ‘ListPageFilter’ component #12438
OU-117 : No response for duplicate query with default disabled status when click ‘Hide all queries’ #12621
Update dockerignore. #12538
CONSOLE-3452 : Add patternfly customer feedback extension mechanism to console #12611
OCPBUGS-7446 : Show type of sample on the samples view #12548
OCPBUGS-7395 : Users don’t know what type of resource is being created by Import from Git or Deploy Image flows #12615
OCPBUGS-7178 : Add page title to Devconsole pages #12591
Full changelog
OCPBUGS-33066 : macvlan enable ipv6 ndisc_notify #160
OCPBUGS-20374 : build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.14] #129
OCPBUGS-17681 : Default CNI binaries to RHEL 8 #116
Updating ose-containernetworking-plugins images to be consistent with ART #108
Updating ose-containernetworking-plugins images to be consistent with ART #107
Add rhel9 binary #106
OCPBUGS-14095 : Sync with upstream version v1.3.0 #98
Updating ose-containernetworking-plugins images to be consistent with ART #94
Updating ose-containernetworking-plugins images to be consistent with ART #93
Updating ose-containernetworking-plugins images to be consistent with ART #92
Updating ose-containernetworking-plugins images to be consistent with ART #80
Full changelog
OCPBUGS-28952 : Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #167
OCPBUGS-25069 , OCPBUGS-26309 , OCPBUGS-26323 : add snyk config file for SAST scan #163
OCPBUGS-23111 : Should reference configmaps instead of secrets #152
OCPBUGS-20734 : bump golang.org/x/net to v0.17.0 #146
OCPBUGS-16074 : Updating Kubernetes and other associated dependencies #141
OCPBUGS-14489 : Kubernetes 0.27 #139
OCPBUGS-12597 : bump(*): golang.org/x/net #138
Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART #136
Updating ose-csi-driver-shared-resource images to be consistent with ART #137
Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART #135
Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART #133
Add go-imports-organizer/goio to organize imports #132
OCPBUGS-10022 : add ‘system:serviceaccounts’ to SAR to allow group based RBAC #130
Updating ose-csi-driver-shared-resource-mustgather images to be consistent with ART #131
Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART #128
Updating ose-csi-driver-shared-resource images to be consistent with ART #129
Full changelog
OCPBUGS-28957 : Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #103
OCPBUGS-26312 : add snyk config file for SAST scank #97
OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #91
OCPBUGS-20825 : bump golang.org/x/net to v0.17.0 #86
STOR-1442 : Restart webhook Pods if webhook-serving-cert changed #83
STOR-1441 : Restart node Pods if metrics-serving-cert changed #82
OCPBUGS-16073 : Updating Kubernetes and other associated dependencies #81
OCPBUGS-14824 : Bump csi-driver-shared-resource-operator library-go #80
OCPBUGS-14488 : bumping kubernetes to 0.27.1 #79
Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #77
Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #76
Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #75
Updating ose-csi-driver-shared-resource-operator images to be consistent with ART #73
OCPBUGS-7906 : add openshift workload annotation to driver daemonset #72
Full changelog
OCPBUGS-21177 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #60
STOR-1169 : Rebase external-attacher
to v4.3.0 for OCP 4.14 #54
OCPBUGS-14815 : Chore: Update OWNERS and OWNERS_ALIASES #55
Updating csi-attacher images to be consistent with ART #53
Updating csi-attacher images to be consistent with ART #52
Updating csi-attacher images to be consistent with ART #51
Updating csi-attacher images to be consistent with ART #50
Full changelog
OCPBUGS-35112 : CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #99
OCPBUGS-20775 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #72
OCPBUGS-17264 : USPTREAM: 969: build(deps): bump golang.org/x/tools from 0.9.3 to 0.12.0 #68
OCPBUGS-14811 : Chore: Update OWNERS and OWNERS_ALIASES #66
STOR-1169 : Rebase external-provisioner
to v3.5.0 for OCP 4.14 #65
Updating csi-provisioner images to be consistent with ART #64
Updating csi-provisioner images to be consistent with ART #63
Updating csi-provisioner images to be consistent with ART #62
Updating csi-provisioner images to be consistent with ART #61
Full changelog
OCPBUGS-20929 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #147
STOR-1169 : Rebase external-resizer
to v1.8.0 for OCP 4.14 #141
OCPBUGS-14812 : Chore: Update OWNERS and OWNERS_ALIASES #142
Updating ose-csi-external-resizer images to be consistent with ART #140
Updating ose-csi-external-resizer images to be consistent with ART #139
Updating ose-csi-external-resizer images to be consistent with ART #138
Updating ose-csi-external-resizer images to be consistent with ART #137
Full changelog
OCPBUGS-29433 : cherry-pick:release-4.14: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch #142
OCPBUGS-21032 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #109
STOR-1169 : Rebase external-snapshotter
to v6.2.2 for OCP 4.14 #101
OCPBUGS-14813 : Chore: Update OWNERS and OWNERS_ALIASES #102
Updating csi-snapshot-validation-webhook images to be consistent with ART #100
Updating ose-csi-external-snapshotter images to be consistent with ART #99
Updating ose-csi-snapshot-controller images to be consistent with ART #98
Updating csi-snapshot-validation-webhook images to be consistent with ART #97
Updating ose-csi-external-snapshotter images to be consistent with ART #96
Updating ose-csi-snapshot-controller images to be consistent with ART #95
Updating csi-snapshot-validation-webhook images to be consistent with ART #94
Updating ose-csi-external-snapshotter images to be consistent with ART #93
Updating ose-csi-snapshot-controller images to be consistent with ART #92
Updating csi-snapshot-validation-webhook images to be consistent with ART #91
Updating ose-csi-snapshot-controller images to be consistent with ART #89
Updating ose-csi-external-snapshotter images to be consistent with ART #90
Full changelog
OCPBUGS-20640 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #50
STOR-1169 : Rebase livenessprobe
to v2.10.0 for OCP 4.14 #44
OCPBUGS-14810 : Chore: Update OWNERS and OWNERS_ALIASES #45
Updating csi-livenessprobe images to be consistent with ART #40
Updating csi-livenessprobe images to be consistent with ART #38
Full changelog
OCPBUGS-20697 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #52
STOR-1169 : Rebase node-driver-registrar
to v2.8.0 for OCP 4.14 #46
OCPBUGS-14814 : Chore: Update OWNERS and OWNERS_ALIASES #47
Updating csi-node-driver-registrar images to be consistent with ART #45
Updating csi-node-driver-registrar images to be consistent with ART #44
Updating csi-node-driver-registrar images to be consistent with ART #43
Updating csi-node-driver-registrar images to be consistent with ART #42
Full changelog
OCPBUGS-28949 : Replace ‘coreydaley’ with ‘sayan-biswas’ #379
OCPBUGS-23006 : Add -p flag to cp command to preserve timestamps #370
OCPBUGS-20726 : [release-4.14] Bumping golang.org/x/net #362
OCPBUGS-20409 : drop the Overlay setting from transient mounts #360
BUILD-432 : mount secrets as “overlay” mounts #349
OCPBUGS-16070 : Updating Kubernetes and other associated dependencies #356
OCPBUGS-15497 : Add the git-lfs package #350
OCPBUGS-14798 : Adds reference to contributing.md #346
OCPBUGS-14484 : Kubernetes 0.27 #347
OCPBUGS-1973 : pass CPU limits for Docker strategy builds #341
Updating openshift-enterprise-builder images to be consistent with ART #345
Updating openshift-enterprise-builder images to be consistent with ART #344
Updating openshift-enterprise-builder images to be consistent with ART #343
OCPBUGS-3064 : normalize locations in pull/push secrets which might look like URLs #330
Bump golang.org/x/net from 0.5.0 to 0.7.0 #338
Bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 #337
OCPBUGS-7782 : bump(github.com/containers/common) to v0.51.2 #335
Adding Divyanshu Agrawal as a reviewer #334
Replacing openshift-goimports with goio #333
Updating development setup steps #331
Updating openshift-enterprise-builder images to be consistent with ART #332
Full changelog
Removing kernel[-rt]-core
packages from the image. (#132) #132
Upgrade glibc, use dnf (#131) #131
Fixing the regexp used to get the correct GCC version. (#127) #127
Updating the docs to use ubi9
instead of ubi8
. (#126) #126
Updating driver-toolkit images to be consistent with ART (#120) #120
Remove abi since it was not in 9.2 rpms (#121) #121
Full changelog
OCPBUGS-19850 : Ensure that IP forwarding is enabled #78
rework PR #74 to switch Dockerfile to use rhel9 #75
Updating egress-router-cni images to be consistent with ART #70
OCPBUGS-6553 : update go-yaml to v2.4.0 #67
Updating egress-router-cni images to be consistent with ART #66
Full changelog
OCPBUGS-20752 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #45
OCPBUGS-17367 : UPSTREAM: <carry>: Remove the static library linking flag #41
OCPBUGS-16783 : Chore: Update OWNERS #39
UPSTREAM: <carry>: Fix OWNERS_ALIASES #40
STOR-1163 : Rebase to upstream v1.10.1 #37
Updating ose-gcp-pd-csi-driver images to be consistent with ART #36
Updating ose-gcp-pd-csi-driver images to be consistent with ART #33
Full changelog
OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #107
OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #96
OCPBUGS-20847 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #87
CFE-878 : Add userLabels in Infrastructure to driver args list #74
OCPBUGS-16654 : Revert revert “STOR-1065: Rework sidecar bindings to b… #76
OCPBUGS-16569 : Bump library-go to remove dependency on goproxy #78
OCPBUGS-16783 : Chore: Update OWNERS #77
Revert “STOR-1065: Rework sidecar bindings to bind common ClusterRoles” #75
STOR-1065 : Rework sidecar bindings to bind common ClusterRoles #71
OCPBUGS-15823 : Change timeout of CSI sidecar #73
OCPBUGS-14824 : Bump gcp-pd-csi-driver-operator library-go #72
STOR-1301 : Restart controller Pods if metrics-serving-cert changed #68
STOR-1168 : Bump common libraries #70
OCPBUGS-12609 : Bump golang.org/x/net@v0.9.0 #69
Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART #67
Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART #66
Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART #65
OCPBUGS-8683 : Add management workloads annotations #64
Updating ose-gcp-pd-csi-driver-operator images to be consistent with ART #63
Full changelog
OCPBUGS-36159 : Generate default worker security group rules based on machineCIDR #4270
OCPBUGS-35549 : Restrict image registry overrides to control plane component #4223
OCPBUGS-35365 : fix router on 4.14 y-stream upgrade #4205
NO-JIRA: chore(deps): update konflux references (release-4.14) #4257
OCPBUGS-35401 : Fix disconnected metadata inspection for nodepool #4208
OCPBUGS-35482 : Add TrustedBundles to OAS container #4216
OCPBUGS-35290 : [release-4.14] Backport etcd defrag #4189
NO-JIRA: chore(deps): update konflux references (release-4.14) #4248
OCPBUGS-35183 : add AWS STS URL to OIDC provider audiences #4179
NO-JIRA: hack: make the e2e script generic #4201
chore(deps): update konflux references to 2be7c9c (release-4.14) #4225
NO-JIRA: Update Konflux references to 1025001 (release-4.14) #4181
NO-JIRA: chore(deps): update konflux references (release-4.14) #4168
OCPBUGS-34856 : [release-4.14] OCPBUGS-34855: Add new permission required in CAPA #4149
NO-JIRA: test/e2e: fix prometheus serviceaccount handling against 4.16+ #4159
NO-JIRA: chore(deps): update rhtap references (release-4.14) #4112
NO-JIRA: chore(deps): update rhtap references to 9aec3ae (release-4.14) #4073
NO-JIRA: Remove CLI inspection of release image #4061
OCPBUGS-33713 : Reconcile over ICSP/IDMS #4059
NO-JIRA: chore(deps): update rhtap references to 7cd8020 (release-4.14) #4065
OCPBUGS-33844 : Fix disconnected metadata inspection #4049
OCPBUGS-33843 : Recycler-pod image now points to the OCP Payload reference #4048
NO-JIRA: chore(deps): update rhtap references (release-4.14) #4040
HOSTEDCP-1480 : Update TLS cert hash creation with sha512 #4025
NO-JIRA: Update RHTAP references (release-4.14) #3995
HOSTEDCP-1552 : Update RHTAP tekton files for 0.3 -> 0.4 migration #3958
OCPBUGS-33105 : [release-4.14] remove PrivateIngressController cleanup #3960
OCPBUGS-32471 : Fix ICSP and IDMS inclusion as registriesOverrides #3912
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3920
OCPBUGS-32221 : Added support for OLM Disable default sources on HC creation #3882
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3903
NO-JIRA: [4.14] [e2e test framework] Add a flag to add an annotation to Hosted Cluster #3905
HOSTEDCP-1526 : [release-4.14] Support additional node selectors for request serving nodes #3898
chore(deps): update rhtap references (release-4.14) #3888
NO-JIRA: Update RHTAP references (release-4.14) #3874
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3869
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3858
NO-JIRA: Update RHTAP references (release-4.14) #3836
OCPBUGS-31657 : disable http2 for ignition server and proxy #3831
OCPBUGS-31605 : inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3826
HOSTEDCP-1322 : NodeUpgradeType defaulted by provider #3822
NO-JIRA: Update RHTAP references (release-4.14) #3813
OCPBUGS-31417 : honor HC image configuration #3806
OCPBUGS-23914 : Added OLMCatalogPlacement option to the CLI #3229
OCPBUGS-30211 : set Konnectivity cipher suites #3679
chore(deps): update rhtap references (release-4.14) #3792
OCPBUGS-31048 : [4.15] HCP deletion can get stuck if CPO is unable to delete the default worker security group #3771
HOSTEDCP-1488 : Use regionalized STS endpoints in AWS #3756
NO-JIRA: Update RHTAP references (release-4.14) #3755
chore(deps): update rhtap references (release-4.14) #3739
OCPBUGS-30596 : Bump golang.org/x/net to version v0.17.0 #3711
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3706
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3676
NO-JIRA: Update RHTAP references (release-4.14) #3672
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3651
OCPBUGS-29782 : use 2040 for apiserver svc in IBM provider #3594
”[release-4.14] OCPBUGS-29259: Fix default release image lookup” #3550
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3620
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3625
OCPBUGS-29094 : Make ControllerAvailabilityPolicy immutable #3534
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3604
NO-JIRA: Update RHTAP references (release-4.14) #3591
NO-JIRA: Update RHTAP references (release-4.14) #3519
NO-JIRA: Approvers update #3580
MULTIARCH-4084 : Reduce the policy access scope to specific instance #3530
OCPBUGS-29206 : Add GC knobs for KAS #3543
OCPBUGS-29187 : node spread anti-affinity for HA HCP #3541
OCPBUGS-19956 , OCPBUGS-28984 , OCPBUGS-28985 , OCPBUGS-28986 , OCPBUGS-29000 : Support Disconnected HCP #3520
OCPBUGS-29030 : Add ValidatingAdmissionPolicy to KAS config #3524
HOSTEDCP-1272 : Added CLI support to create DualStack clusters using default values #3514
OCPBUGS-28238 : consider HCP upgradeable if CVO has no upgradable condition #3468
OCPBUGS-26526 : Documented to disable UWM telemetry writer in disconnected envs #3389
OCPBUGS-26526 : Disable UWM Telemetry writer when telemeter-client cm not exists #3388
OCPBUGS-27072 : Apply Scheduling Configuration for kCCM #3418
NO-JIRA: Update RHTAP references (release-4.14) #3509
OCPBUGS-20180 , OCPBUGS-20547 : Added network validations #3096
OCPBUGS-23997 : add watch for HCP pullsecret to HCCO #3265
OCPBUGS-28249 : Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. #3485
NO-JIRA: Update RHTAP references (release-4.14) #3447
OCPBUGS-24315 : Add prestop to konnectiviy server #3268
OCPBUGS-24307 : Set shutdown-delay-duration to 15s #3264
OCPBUGS-21795 : change trusted bundle volume mount for CPO #3102
OCPBUGS-25217 : Konnectivity agent update strategy #3308
OCPBUGS-26574 : Set new condition on SG deletion. #3398
Update RHTAP references (release-4.14) #3402
Update RHTAP references (release-4.14) #3383
OCPBUGS-22360 : Validate accessTokenInactivityTimeout >= 300s #3175
OCPBUGS-23936 : Use correct kubeconfig in CCM and remove CCMs access t… #3232
OCPBUGS-12720 : Updating hypershift images to be consistent with ART #2467
OCPBUGS-24627 : unset ServiceAccount on ignition-server-proxy #3295
[Release 4.14] OCPBUGS-24556: Fix a bug on deletion of a hostedcluster #3290
OCPBUGS-24269 : add CLI oauthclient #3272
OCPBUGS-23569 : Added IPFamilyPolicy to services exposed at the HCP in DualStack mode #3224
HOSTEDCP-1318 : external OIDC enablement #3261
OCPBUGS-23747 : Added brackets to IPv6 KAS address on kubeconfig #3228
OCPBUGS-24063 : fix(cpo): Set restart annotation on network-node-identity #3248
release-4.14, HOSTEDCP-1315: Improve NodePool CPU arch & platform check #3236
OCPBUGS-22676 : Make the OLMCatalogPlacement field immutable #3143
OCPBUGS-23558 : Let router use svc ips 4.14 #3221
OCPBUGS-19678 : Remove cluster name validation from HCC #3040
”[release-4.14] CNV-35326: unsupported escape hatch mechanism custom HS/KV vms” #3202
OCPBUGS-23027 : Configure HSTS for kube-apiserver #3169
NO-JIRA: chore(deps): update rhtap references (release-4.14) #3085
OCPBUGS-23142 : adding permission to CNO RBAC Calico path for network-node-identity deploy #3182
OCPBUGS-22295 : Added brackets to the kubeconfig server address when IPv6 #3117
OCPBUGS-22690 : Use the same etcd snapshot for all replicas during etcd restore #3146
OCPBUGS-22959 : Update regex validation for nodepool.spec.taints.value #3165
HOSTEDCP-1280 : Adjustment cluster-cidr,service-cidr to support dualstack #3162
OCPBUGS-22898 : Stop exposing kas on 6443 private route service load balancer #3159
OCPBUGS-22898 : Stop defaulting aws private haproxy external port to 6443 #3160
OCPBUGS-19897 : Add konnectivity-proxy container to CNO #3058
OCPBUGS-22379 : Cluster-policy-controller: add missing RBAC for privileged namespaces PSA syncer controller #3131
OCPBUGS-20526 : Align PSA labels on guest cluster namespaces with standalone OCP #3111
OCPBUGS-21869 : Remove EnsurePSANotPrivileged #3107
OCPBUGS-21822 : Add ign proxy label selector for LabelTopologyZone PodAntiAffinity #3105
OCPBUGS-21587 : change required pod anti-affinity rule to preferred rule #3098
OCPBUGS-19794 : Upgrade Agent APIs to v1beta1 #3059
OCPBUGS-19797 : reconcile Authentication global config #3053
OCPBUGS-19794 : Upgrade agent APIs to v1beta1 #3051
OCPBUGS-20249 : Set KAS config pod security Enforce to privileged #3083
OCPBUGS-20163 : Report correct port when API exposed via route #3078
OCPBUGS-19796 : set accesstoken-inactivity-timeout flag to openshift-oauth-apiserver #3052
Update RHTAP references (release-4.14) #3060
Migrate deprecated-base-image-check pipeline #3057
chore(deps): update rhtap references (release-4.14) #2752
Update kubevirt csi driver deployment with proper timeouts #3046
OCPBUGS-19463 : set default deploymentconfig params on AWS CCM #3029
ACM-7278 : Remove marking pull secret as required in hcp cli #3023
OCPBUGS-18978 : add KAS endpoints to Except in router egress rule #3010
CNV-31919 : Validate KubeVirt platform required versioning #3026
OCPBUGS-19063 : amend OLM catalogs ImageStream according to annotation #3016
enable CGO_ENABLED for building FIPS compliant images #3006
OCPBUGS-18828 : tuned DS should not use controlPlaneReleaseImage #3005
Red Hat Trusted App Pipeline update hypershift-release-414 #2639
HOSTEDCP-1185 : Add flag to create a single NAT gateway #2984
Dump kubevirt external infra clusters #2992
OCPBUGS-18568 : Use MCO and CCO image references when looking up mappings #2985
HOSTEDCP-591 : Amend OLM catalog IS according to OpenShiftImageRegistryOverrides #2947
e2e: skip CNO pod restart check #2986
HOSTEDCP-1133 : Signal NodePool rolling upgrade because of platform changes #2973
OCPBUGS-18127 : Enable caching of Unstructured Objects in HO #2988
e2e: run Ensure functions after Main part of test #2983
OCPBUGS-18127 : Ensure machineTemplate name length respects RFC1123 spec #2975
ACM-6435 : add pausedUntil create cluster option in CLI #2965
OCPBUGS-7840 : Untangle kas port #2964
OCPBUGS-18399 : Preserve mirror order when serializing ICSP to env #2977
OCPBUGS-18336 : make konnectivity routes roundrobin #2971
Use the correct pull secret for HCP KubeVirt components #2919
Disable nto inplace test for kubevirt #2980
OCPBUGS-18438 : Properly format IPv6 address when proxying it through Konnectivity #2969
OCPBUGS-18127 : Trigger a rolling upgrade on NodePool .spec.platfrom changes #2956
HOSTEDCP-1156 : Add defaulting webhook to installation and notes #2922
HOSTEDCP-979 : Re-enable nodepool in-place upgrade tests #2960
Add a default value (32Gi) for nodepool in create nodepool kubevirt
command #2940
OCPBUGS-16221 : Adds trust bundle to ignition-server when configured in HC #2819
Avoid creating tar archive if –archive-dump=false #2963
OCPBUGS-3873 adding rbac for UserOAuthAccessToken #2962
HOSTEDCP-1178 fix limited support label key #2958
OCPBUGS-18065 : enable aws-pod-identity-webhook on AWS #2957
OCPBUGS-18308 : Do not use mgmt cluster ICSP to mutate CCO image in KAS pod #2966
OCPBUGS-18266 : fix Progressing condition when ControlPlaneRelease is set #2959
fix(ho): Restore match label selector behavior #2951
OCPBUGS-18072 : Set emptyDir storage for the image registry only on initial time for None and Kubevirt platform #2895
OCPBUGS-18024 : Set Arch to amd64 for HCP NodePool Create #2941
chore(deps): update rhtap references (main) #2920
OCPBUGS-16813 : switch konnectivity-server to additional container in KAS pods #2942
Updating hostedcluster controller to stop using deprecated flags #2946
OCPBUGS-17827 : e2e: remove private-router from NeedManagementKASAccessLabel allowlist #2939
MULTIARCH-3709 : PowerVS - Add reuse resource flags to e2e test #2902
MULTIARCH-3478 : Minor bug fix on PowerVS infra #2451
OCPBUGS-18069 : Ensure load balancers are not exist before declaring load balancers are cleaned up #2887
MULTIARCH-3708 : PowerVS - Fix cluster deletion when existing resources passed #2867
MGMT-15368 : Document scaling down NodePools #2944
OCPBUGS-13348 : Hypershift Audit configuration not working. #2945
TRT-1202 : set SkipReleaseImageValidation annotation properly on e2e clusters #2943
OCPBUGS-17678 : Reconcile cloud credentials configuration to hosted cluster #2937
Add e2e test for etcd member recovery #2930
OCPBUGS-17827 : remove NeedManagementKASAccessLabel from router pods #2934
OCPBUGS-17985 : Handle empty mirrorImage result for ignition disconnected registry #2935
OCPBUGS-17827 : e2e: refactor checkPodsHaveLabel to be allowlist rather than exact match #2928
OCPBUGS-16813 : do not hardcode ignition-server-proxy replicas #2933
fix(ho): Restore match label selector behavior #2893
TRT-1202 : add annotation to skip release image validation #2929
OCPBUGS-17812 : Update Etcd health check to mirror standalone etcd #2918
STOR-1443 : Sync 05_operator_role-hypershift.yaml
manifest from cluster-csi-snapsht-controller-operator #2915
HOSTEDCP-1065 : CNO deployed hosted-cluster-kubecfg-setup initContainers use CPR image #2917
HOSTEDCP-1001 : Image registryOverride included in the image metadata extraction flow #2909
OCPBUGS-17669 : Validate HostedCluster name against RFC1123 #2914
HOSTEDCP-1075 : Document how to recover single etcd member #2916
HOSTEDCP-1085 : Create a monitoring dashboard per HostedCluster #2907
chore(deps): update rhtap references (main) #2903
HOSTEDCP-1063 : Account for guest webhook URLs without a port #2898
OCPBUGS-17680 : Remove immutable note from PullSecret #2910
Revert “HOSTEDCP-1001: Image registryOverride included in the image metadata extraction flow” #2908
OCPBUGS-16076 : Validate HostedCluster name against RFC1123 in CLI #2906
OCPBUGS-15331 , OCPBUGS-16049 : Enable AdvertiseAddress dual stack and IPv6 support and added the changes to be included in the certificates #2779
HOSTEDCP-1081 : Perform etcd recovery when etcd member data is lost #2900
SDN-4057 : Pass ControlPlane image to OVN #2896
test: e2e: remove SingleReplica etcd chaos test #2901
Allow overriding pod security admission label #2886
HOSTEDCP-1146 : cpo: use CPO spec container image if it is a sha256 reference #2899
HOSTEDCP-1022 : Set Arch to amd64 #2897
Re-introducing defaulting webhook for self managed HCP #2892
fix-CNV-30260: KubeVirt: fix failed conformance test #2891
OCPBUGS-16298 : Prevent the kube-apiserver from connecting to the managment kas #2888
HOSTEDCP-1001 : Image registryOverride included in the image metadata extraction flow #2820
HOSTEDCP-1046 , HOSTEDCP-1102 : Follow-on Items #2847
Revert “[HOSTEDCP-1041] Defaulting webhook for self managed HCP” #2889
OCPBUGS-17446 : Set advertise-address in HCP etcd to resolvable name #2884
Defaulting webhook for self managed HCP #2864
STOR-1432 : cso: add envvars for CSI driver controller images #2882
HOSTEDCP-1025 : Add HCP CLI Command to Create a NodePool on AWS #2852
SDN-4042 : Increase upgrade rollout timers #2881
skip olm-collect-profiles in EnsureComponentsHaveNeedManagementKASAccessLabel #2874
HOSTEDCP-1064 : Add egress policy for private-router #2792
HOSTEDCP-1121 : Ensure SG reconciliation for aws endpoint #2872
chore(deps): update rhtap references #2865
HOSTEDCP-1065 : add ControlPlaneImage API for provider-side HCP updates #2848
HOSTEDCP-1063 : Disallow webhooks URLs targeting control plane services #2775
OCPBUGS-17374 : Fast specific dockerignore #2879
Kubevirt how-to docs updates #2875
Fix nodepool upgrade docs link #2880
OCPBUGS-17171 : Update OLM catalog image tags #2877
HOSTEDCP-1029 : Add HCP CLI Command to Destroy a Cluster on AWS #2853
Add workload management annotation to kubevirt-csi daemonset #2840
WRKLDS-730 : use default /healthz path for readiness probe in OCM and RCM #2873
Add api and cli validation for kubevirt volume mode #2862
HOSTEDCP-1079 : RHTAP HO Containerfile #2857
OCPBUGS-16770 : add need-management-kas-access label to olm-collect-profiles pods #2854
MULTIARCH-3684 : PowerVS - Upgrade capi to use v1beta2 APIs #2831
HOSTEDCP-1046 : Add ImageDigestMirrorSet to Config API comment #2868
MULTIARCH-3683 : Add dev flags in destroy cluster powervs command #2764
kubevirt: Reconcile EgressFirewall only for ovn-k #2849
HOSTEDCP-1046 : Add IDMS to the list of valid config manifests #2837
OCPBUGS-17059 : Add volume mode to kubevirt root volume api #2860
Update RHTAP references (main) #2832
OCPBUGS-16809 : Configured IgnitionProxy to support IPv4 and IPv6 #2850
OCPBUGS-14163 : Fixed ETCD to work in Ipv6 and Dual stack envs #2846
HOSTEDCP-1112 : Add config to set creation frequency of RHTAP PRs #2838
HOSTEDCP-1020 : Remove name as a persistent flag required field #2836
OCPBUGS-16232 : skip z-stream version check when upgrade is forced #2823
OCPBUGS-16033 : ClusterNetwork’s HostPrefix validation for dual stack #2795
OCPBUGS-14783 : Fix NetworkPolicy to work over IPv4 and IPv6 #2704
Revert “HOSTEDCP-710: Make ImageContentSource immutable” #2829
Update RHTAP references (main) #2814
HOSTEDCP-1062 : Make CAPI pod selector backward compatible #2825
HOSTEDCP-1093 : Add default flags to HCP create cluster CLI cmd #2802
Revert “HOSTEDCP-1094: e2e autoscaler balancing similar node groups” #2828
HOSTEDCP-1090 : Use statically configured haproxy for router #2778
HOSTEDCP-1046 : Allow HCP Specification to Support ICSP & IDMS #2720
HOSTEDCP-710 : Make ImageContentSource immutable #2815
OCPBUGS-11835 : Add missing probes to two services #2430
HOSTEDCP-1094 : e2e autoscaler balancing similar node groups #2808
OCPBUGS-16113 : unshare ignition-server reconciliation between HO and CPO #2817
OCPBUGS-11939 : Fix additional issues with OCPBUGS-11939 #2804
OCPBUGS-16135 : fix deletion bug when hostedzone is already deleted #2811
OCPBUGS-14862 Improve clarity around hypershift operator permissions #2782
HOSTEDCP-1062 : Management kas policy #2796
Revert “HOSTEDCP-1062: Add management cluster KAS network policy” #2793
HOSTEDCP-1020 : Add pullSecret & NodePool replica flags to HCP CLI #2774
HOSTEDCP-1101 : Add snyk-secret HO RHTAP scripts #2788
OCPBUGS-15991 : use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2787
OCPBUGS-15769 : Include hypershift specific labels to be ignored by similar autoscaler groups #2784
Add management cluster KAS network policy #2717
HOSTEDCP-1019 : Add create cluster for Agent for HCP CLI #2754
CNV-30407 : KubeVirt Platform: Support NetworkInterfaceMultiQueue #2760
HOSTEDCP-1030 : Add destroy cluster for Agent for HCP CLI #2756
OCPBUGS-15594 : Get valid arch image for cluster-config-operator #2753
kubevirt: Annotate VMs to be live migratable #2772
Revert “Merge pull request #2770 from dharaneeshvrd/upgrade-capi-ibmcloud #2776
MULTIARCH-3684 : PowerVS - Upgrade capi to use v1beta2 APIs #2770
OCPBUGS-14862 : Reject VPCE Connections during VPCE Service cleanup #2700
Update RHTAP references #2768
HOSTEDCP-1023 : Add create NodePool for Agent for HCP CLI #2755
HOSTEDCP-1061 : Implement dedicated request serving nodes for HostedClusters #2722
OCPBUGS-15769 : Set –balance-similar-node-groups for autoscaler #2769
Leader election config update. #2282
OCPBUGS-15723 : Let getMachinesForNodePool return machines ordered by creation Timestamp #2766
Fix KAS HealthCheck for non DNS-Based ingress points in LB service #2765
Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible #2741
Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible in /hack/tools #2740
Bump google.golang.org/protobuf from 1.29.0 to 1.29.1 in /hack/tools #2737
OCPBUGS-12208 ensureExists pullSecret resource reconciliation strategy #2732
Bump github.com/coreos/ignition/v2 from 2.10.1 to 2.14.0 #2739
Bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible in /hack/tools #2738
Remove hardcoded AWS CI References #2742
TRT-1118 : Remove DisableStrictZoneCheck from AWS CCM config #2757
Update RHTAP references #2750
add OWNERS for new ci-tooling area label #2743
Add production cli (hcp) to dockerfile #2747
feat: Enable priority class override #2661
test/e2e: retry configmap create in etcd chaos tests #2746
OCPBUGS-14578 : Set allocate-node-cidrs to false in the cluster-kube-controller-manager #2731
Revert “HOSTEDCP-1016: Validate publishing strategies” #2733
HOSTEDCP-1027 : Add Create kubeconfig for HCP CLI #2719
HOSTEDCP-1016 : Validate publishing strategies #2651
KubeVirt Platform documentation for Advanced Storage Configurations and External Infrastructure #2712
Follow up to PR comments on #2642 #2690
HOSTEDCP-1067 : Add dependabot dependency management #2708
HOSTEDCP-1073 : enforce blocked rollout of HCP #2726
Revert “HOSTEDCP-967: [Re-revert] Disable v1alpha1 and conversion webhook by default” #2705
Remove –service-publishing-strategy from production cli #2721
HOSTEDCP-1024 : Add Create NodePool for KubeVirt for HCP CLI #2718
HOSTEDCP-1032 : e2e: ensure default PSA policy is not privileged #2714
HOSTEDCP-1031 : Add Destroy Cluster Cmd for KubeVirt for HCP CLI #2673
Expose annotation to allow release image overrides #2595
HOSTEDCP-1060 : add ignition-server proxy #2668
OCPBUGS-14637 : Check OwningIngressController also in Labels #2706
HOSTEDCP-1020 : Add Create Cluster for KubeVirt for HCP CLI #2672
properly handle user CA bundle not existing #2703
OCPBUGS-15168 : fix(oauth): Do not proxy IBM Cloud IAM endpoints #2699
OCPBUGS-14859 : Skip AWS resource deletion for ‘Unknown’ OIDC state #2691
Whitelist access from virt-launchers to NodeIP if NodePort ServicePublishingStrategy is used #2688
OCPBUGS-13829 : cpo: oauth: honor AccessTokenInactivityTimeout #2693
Update NodePool docs to include data propagation #2687
HOSTEDCP-1008 : Add NodePoolTransitionSeconds metric #2631
HOSTEDCP-967 : [Re-revert] Disable v1alpha1 and conversion webhook by default #2685
Make NodePool arch input immutable #2689
Update autocaler RBAC to accomodate machinepools support added upstream #2663
Enforce Immutability of some KubeVirt Platform Values #2654
CNV-24818 : Add fsGroup support to kubevirt-csi-driver #2563
Let payload provider render feature gate yaml #2664
OCPBUGS-14633 : Check for OPENSHIFT_IMG_OVERRIDES before using #2660
HOSTEDCP-965 : Add impersonate feature to the CLI and document HC dump procedure #2653
OCPBUGS-11882 : Annotate HCP pods with the safe-to-evict-local-volume CA annotation #2647
Update RHTAP references #2657
Disable nodepool replace upgrade test #2665
OCPBUGS-14784 : Honor global ingress configuration LoadBalancer type on AWS #2669
OCPBUGS-14620 : Set DisableStrictZoneCheck = true
in the AWS Cloud Provider config #2659
HOSTEDCP-992 : refactor ignition-server reconcilation #2662
Minor fix in KAS LB HealthCheck #2656
HOSTEDCP-1036 : Create Makefile path to create productized CLI #2633
Extend np test timeout for KubeVirt platform #2655
HOSTEDCP-1003 : Set AWS conditions only for AWS platform #2604
Remove alsologtostderr flag form CAP* #2648
OCPBUGS-14575 : Check for IDMS only if mgmt cluster has req API #2650
Network isolation of VirtualMachines for KubeVirt provider #2622
OCPBUGS-14428 : remove OLM alerts from the HCCO #2636
KubeVirt Openstack image annotation override #2629
Red Hat Trusted App Pipeline update hypershift-operator-main #2638
Red Hat Trusted App Pipeline purge hypershift-azjx #2635
cli: Add release-stream flag #2644
OCPBUGS-13547 : Pass payload-version to MCS and MCC #2643
KubeVirt: Handle deletion of the cache DV on an edge case #2620
OCPBUGS-14087 : Enable HCCO to reconcile over the OperatorHub’s disableAllDefaultSources object #2632
HOSTEDCP-1009 : Allow external-dns image to be set in install cli #2623
Ensure FeatureGate is copied from cluster to MCO render source #2581
OCPBUGS-12972 : Use different ports for MCS in the ignition provider #2628
hypershift dump: use random local port for kas port-forwarding #2625
OCPBUGS-11939 : Initialize RegistryOverrides w/ mgmt cluster ICSP #2437
Revert “Merge pull request #2596 from muraee/disable-valpha1” #2627
Add ‘Creating Arm NodePools Through the API’ Section #2587
HOSTEDCP-967 : Disable v1alpha1 and conversion webhook by default #2596
OCPBUGS-13113 : Add ClusterUpgradeDuration metric #2566
chore(deps): update rhtap references #2612
OCPBU-609 : agent infrastructure docs #2618
OCPBUGS-14169 : Remove external-dns –events flag #2616
OCPBUGS-13970 : Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2593
cmd: infra: aws: retry on AuthorizeSecurityGroup failure #2605
Fix dump for Kubevirt #2589
Kubevirt CSI StorageClass mapping API #2528
Remove Arm e2e test #2591
HOSTEDCP-947 : Set ETCD Storage Size as immutable field and equalised the default size among both api versions #2588
OCPBUGS-13735 : Fixed revoking some permissions to CAPI Manager Clusterrole #2586
HOSTEDCP-445 : Add script to migrate hosted control plane #2598
Use newly introduced KubeVirt Platform rhcos Image #2576
OCPBUGS-13168 : Include default ingress CA in root CA bundle #2584
HOSTEDCP-975 : Add new grafana panels for nodepools SLOs #2592
HOSTEDCP-926 : Send metric when HO/CPO decide to skip cloud resource deletion #2531
Update RHTAP references #2420
OCPBUGS-13897 : Use cluster-config-operator to render featuregate status on KAS bootstrap #2585
HOSTEDCP-975 : Add cluster_name label to nodepools metrics #2580
Fix broken tests for non-aws platforms #2577
Updated secret permissions for openshift-route-controller-manager #2575
HOSTEDCP-987 : Update go version and dependencies in /hack/tools/go.mod #2551
remove flags set by CI env var #2521
HOSTEDCP-975 : Add NodePool DeletionDuration and InitialRolloutDuration metrics #2558
ARMOCP-412 : Add ARM nodepool to AWS x86 Hosted Cluster #1594
OCPBUGS-11939 : Fix minor codebase nits #2502
control-plane-operator/controllers/hostedcontrolplane: Align reconcileCloudControllerManager error strings #2500
HOSTEDCP-960 : Add e2e to validate HC/NP conditions expected status #2482
HOSTEDCP-830 : Update auto scaler role to get and list agentmachinetemplates #2564
HOSTEDCP-445 : Included how to fix image-registry clusteroperator after a disaster recovery migration #2481
OCPBUGS-13547 : Pass release image version to MCO bootstrap via –payload-version #2572
Cache KubeVirt Boot Image #1918
contrib: ci: increase HC quota in clusters namespace #2547
HOSTEDCP-996 : CLI: enable guest cluster dump for private clusters #2571
MULTIARCH-3205 : Support IBM COS as storage for PowerVS in image registry operator #2207
fix nil deref in DefaultWorkerSecurityGroupID check #2573
remove unused OLM catalog rollout code #2568
OCPBUGS-13034 : Cluster-api SA can’t create events #2565
ACM-4277 : docs: Add L2Advertisement CR to the Handling Ingress section in the agent docs #2470
HOSTEDCP-947 : Increases default etcd PV size to 8Gi #2549
Add a new e2e option for the ETCD storage class #2560
Red Hat Trusted App Pipeline update hypershift-azjx #2555
HOSTEDCP-975 : Revised nodePoolSize metric and added AvailableReplicasMetric #2532
OCPBUGS-11383 : Sync proxy TrustedCA to guest cluster #2550
Removed unused KMS permissions for nodePool role #2456
Lock down kubevirt csi storageclass mappings #2534
OCPBUGS-13021 : Add internal/external elb tags to subnets #2541
HOSTEDCP-918 : Add validation for NodePool security Group condition when using default SG #2498
HOSTEDCP-981 : Minor updates to Getting Started & Contribute pages #2527
OCPBUGS-13111 : Fix errors from HCP controller removeServiceCAAnnotationAndSecret() #2513
Stop triggering rollout on labels/taint change #2533
Validate HO private platform input #2536
OCPBUGS-13021 : Health check load balancers only on public clusters #2535
OCPBUGS-13309 : set FeatureGate global config #2543
Add audit-log-maxbackup setting for openshift-api-server #2509
OCPBUGS-11894 : Let the aws endpoint to use the hypershift owned SG #2475
HOSTEDCP-980 : Include HostedClusterDegraded in hypershift_hostedclusters_failure_conditions metric #2523
HOSTEDCP-788 : Configurable SRE MetricsSet #2505
OCPBUGS-13112 : Add timeout to KAS health check client #2522
HOSTEDCP-978 : Bump openshift/api version and fixed KCM flags (k8s 1.27) #2519
OCPBUGS-7841 : Account for expectedState == false when capturing hostedClustersWithFailureCondition #2507
OCPBUGS-11719 : Ensure ingress controllers are removed before load balancers #2444
Fixed assignment to entry in nil map #2508
Add new –featuregate-manifest to /usr/bin/cluster-config-operator render #2506
ACM-5116 : Increase KubeVirt default Mem and Root Volume Sizes #2471
HOSTEDCP-937 : New metric to expose Hypershift operator info #2443
HOSTEDCP-969 : Consolidate labels for metrics #2494
HOSTEDCP-969 : Move proxy, silence alerts and limited support metrics into HC controller #2489
HOSTEDCP-969 : Only track available metric once #2479
OCPBUGS-11738 : Delete kubeadmin secret when an idp is defined #2452
Add PollImmediate for e2e metrics to avoid race with prom scrape interval #2483
HOSTEDCP-969 : Move HC creation metrics #2477
OCPBUGS-12153 : fix(hcco): Get OLM CatalogSource images from defined map #2454
HOSTEDCP-917 : Add publicAndPrivate <-> Private e2e test #2383
add hyperv1.SilenceClusterAlertsLabel to HostedCluster on deletion #2476
HOSTEDCP-969 : Move guest cluster resource deletion metric #2463
OCPBUGS-11450 : Pass OPENSHIFT_RELEASE_IMAGE env variable to CNO #2384
HOSTEDCP-972 : Add pre-commit command to Make file #2465
HOSTEDCP-969 : Move cluster deletion duration metric into controller #2459
Fix kubevirt csi daemonset reconcile loop #2466
Fixes loop between HC controller and pod security label syncer #2460
docs: update OIDC bucket create with bucket policy #2461
OCPBUGS-11946 : Add new OCP 4.13 storage admission plugin #2445
OCPBUGS-11773 : remove ACL for aws bucket #2423
OCPBUGS-7841 : Set metrics to 0 when needed to keep time series honest #2440
OCPBUGS-11930 : Clean up existing VPC endpoint connections #2438
Revert “Add validation for default Security Group conditions during N… #2453
HOSTEDCP-918 : Add validation for default Security Group conditions during NodePool upgrade test #2342
OCPBUGS-11649 : Always requeue AWSEndpointService controllers #2424
Add IBMers as reviewers #2436
e2e: Cleanup shared OIDC provider on SIGTERM #2435
HOSTEDCP-950 : Fix haproxy image name in ignition server #2441
OCPBUGS-7091 : Restart kube-scheduler when its configuration changes #2421
OCPBUGS-11749 : Add pod security labels to hcp namespace #2415
HOSTEDCP-950 : Validate release payload images #2368
kubevirt: Block metadata server egress #2399
Bring latest MCO API #2434
Relax MCO API strict decoding #2433
docs: update OIDC s3 bucket creation procedure #2425
json export for a common grafana dashboard for SLOs #2422
Enable monitoring for hypershift namespace #2419
MULTIARCH-3449 : set priority class for cloud controller manager pod for PowerVS #2390
Fixes HCCO reconcile error for kubevirt csi driver #2259
Add monitoring label to HCP namespace #2393
Update tekton references #2308
add OWNERS for new area labels #2414
fix typo #2411
HOSTEDCP-807 : Requeue HCP always #2408
OCPBUGS-11640 : Update HostedCluster oauthCallbackURLTemplate #2400
e2e: Fixed idp test conflict error on HosterCluster update #2389
dump: Store guest worker node logs and increase kubevirt logs verbosity #2317
HOSTEDCP-568 : Update Konnectiviy socks5 proxy for IBM exception #2366
OCPBUGS-11442 : properly reconcile with user specified changes for in proxy configuration #2382
Updated kubevirt docs #2318
OCPBUGS-11439 : allow z-stream upgrade even if CVO Upgradeable is false #2381
HOSTEDCP-954 : Remove ec2:ReleaseAddress #2379
HOSTEDCP-802 : add cli flag to enable upgrade type #2367
e2e: Fix oauth idp e2e test #2377
HOSTEDCP-951 : Let install apply to aggregate errors #2372
Revert “Create a second scheme that always registers prometheusoperatorv1 GVKs” #2374
HOSTEDCP-807 : Check KAS loadbalancer health #2264
e2e: fix for non-AWS platform #2360
HOSTEDCP-445 : Fix the storage ClusterOperator during a DR migration #2358
HOSTEDCP-850 : Fix nodepool autoscaler logic #2354
support/releaseinfo/pod_provider: Drop unused legacy PodProvider #2341
Fix nodepool upgrade e2e test #2359
HOSTEDCP-806 : Fix ValidAWSKMSConfig condition #2322
HOSTEDCP-939 : Setup shared OIDC provider for e2e clusters #2335
OCPBUGS-10227 : Preserve false status of ValidAWSIdentityProvider condition #2344
ACM-4615 get pull secret instead of dockerconfigjson from mce credentials #2338
Slo alerts #2049
HOSTEDCP-943 : Add hypershift_hosted_cluster_transition_seconds histogram #2348
HOSTEDCP-944 : Add more expectedHCConditionStates metrics #2347
OCPBUGS-10227 : Create new EC2 client for AWS identity provider health check #2346
OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2321
SDA-8609 : No more specifying the scrape interval at servicemonitors & podmonitors level #2327
OCPBUGS-10807 : Pass runAsUser to CNO so it can run its managed services with proper security context #2319
Appstudio update hypershift-azjx #2332
Revert “cpo: cno: follow image name change in release payload” #2345
support/supportedversion: Include the problematic version strings in error messages #2334
OCPBUGS-10864 : fix external APIServer address selection based on endpointAccess #2328
OCPBUGS-8073 : Do not proxy when guest cluster resolution fails #2261
MULTIARCH-3028 : handle PowerVS instance which goes to failed state during infra create and destroy process. #2088
HOSTEDCP-938 : Added PSA default profile to RunTimeDefault in operator deployment #2333
HOSTEDCP-934 : Validate PublishingStrategyMapping #2324
OCPBUGS-7091 : Honor scheduler profile in HostedCluster configuration #2330
HOSTEDCP-736 : Docs on how we handle aws permissions #2311
Add support for external infra clusters in KubeVirt platform #2017
Create a second scheme that always registers prometheusoperatorv1
GVKs #2292
OCPBUGS-10504 : Deletion of the VPCEnpoint on conflicting service names #2290
HOSTEDCP-801 : Expose external DNS for private cluster endpoints #2286
HOSTEDCP-903 : Propagate AWSEndpointService conditions #2278
Appstudio update hypershift-azjx #2287
OCPBUGS-8691 : Add storage operators perms. to watch HostedControlPlane #2301
OCPBUGS-10423 : Add validation for taint.value in nodePool #2298
HOSTEDCP-839 : Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver #2232
Route to kubevirt VMs using infra id as service label selector #2092
Force controleplane upgrade always #2288
HOSTEDCP-900 : Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field #2265
HOSTEDCP-919 : Clean up and API doc #2280
HOSTEDCP-688 : E2E Test NodePool Upgrade #2256
HOSTEDCP-445 : Documented the possible issues found during a HostedCluster migration #2276
OCPBUGS-10227 : Ensure identity provider health check condition is persisted and remove awsendpoint control plane finalizer if invalid aws creds #2281
OCPBUGS-8040 : Switch NTO metrics auth to certs generated by HCP controller #2050
OCPBUGS-8381 : Use appropriate serving certificate for OAuth #2279
HOSTEDCP-501 : Added detailed documentation about Hypershift release process #2272
HOSTEDCP-919 : Add AWS cloud controller manager #2271
Update PowerVS prereq doc with install and authorization details #2172
Remove webhook validation #2217
HOSTEDCP-809 : Clone CA key/cert to TLS key/cert #2246
Refactor e2e nodepool tests #2228
Update HCP version in capi cluster ref #2119
Validate etcd KMS config #2174
OCPBUGS-8421 : fix API documentation for audit webhook field #2258
Add a debug section to the Node Tuning docs #2254
Destroy cloud resources by default #2224
Add e2e test for identity providers #2166
HOSTEDCP-638 : Add latest ocp supported info to -v command for cli and operator #2233
OCPBUGS-8231 : Fix cleanup of volumes on cluster deletion #2243
fix(cpo): Delete multus validatingwebhookconfiguration on CNO init #2231
add pull-secret to imagePullSecrets for NTO, CNO, and olm-collect-profiles #2248
Update images and hypershift operator to 4.14 #2249
Full changelog
OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #104
OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #91
OCPBUGS-21339 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #81
OCPBUGS-18105 : [IBM VPC] failed provisioning volume in proxy cluster #74
OCPBUGS-16654 : Revert revert “STOR-1065: Rename node-driver-registrar… #69
OCPBUGS-16571 : Bump library-go to remove dependency on goproxy #71
OCPBUGS-16783 : Chore: Update OWNERS #70
Revert “STOR-1065: Rename node-driver-registrar RBAC and Rework sidecar bindings to bind common ClusterRoles” #68
STOR-1065 : Rename node-driver-registrar RBAC and Rework sidecar bindings to bind common ClusterRoles #64
OCPBUGS-14824 : Bump ibm-vpc-block-csi-driver-operator library-go #65
OCPBUGS-12614 , STOR-1168 : Bump common libraries #57
Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #56
Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #55
Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #54
OCPBUGS-8683 : Add management workloads annotations #53
Updating ose-ibm-vpc-block-csi-driver-operator images to be consistent with ART #52
Full changelog
OCPBUGS-21451 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #27
OCPBUGS-12510 : UPSTREAM: 20: Bump (golang.org/x/net): to address CVE-2022-41723 #23
Updating ibm-vpc-node-label-updater images to be consistent with ART #22
Updating ibm-vpc-node-label-updater images to be consistent with ART #21
Updating ibm-vpc-node-label-updater images to be consistent with ART #20
Updating ibm-vpc-node-label-updater images to be consistent with ART #19
Full changelog
Update dependencies to match machine-api-operator #22
OCPCLOUD-2054 : Update k8s to 1.27 #21
Updating ose-ibmcloud-machine-controllers images to be consistent with ART #19
OCPBUGS-10149 : Updating ose-ibmcloud-machine-controllers images to be consistent with ART #18
Full changelog
Binary should be compiled on rhel9 #89
Updating ironic-rhcos-downloader images to be consistent with ART #88
Updating ironic-rhcos-downloader images to be consistent with ART #87
Updating ironic-rhcos-downloader images to be consistent with ART #86
Updating ironic-rhcos-downloader images to be consistent with ART #85
Full changelog
OCPBUGS-10176 : 15143307: Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #132
OCPBUGS-10163 : Updating openshift-enterprise-egress-router images to be consistent with ART #131
OCPBUGS-10181 : 15143312: Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #133
NE-1304 : container builds: switch to haproxy26 package #141
OCPBUGS-11385 : Removed chroot setting #137
egress: update owners #139
OCPBUGS-11595 : Revert “[NE-1267] container builds: switch to haproxy26 package” #138
egress/dns-proxy/Dockerfile: switch to haproxy26 package #136
OCPBUGS-10003 : Revert “bump RHEL8 egress-dns-proxy image to haproxy26” #134
Updating ose-egress-http-proxy images to be consistent with ART #130
Updating openshift-enterprise-base-rhel9 images to be consistent with ART #129
Updating openshift-enterprise-base images to be consistent with ART #128
Full changelog
OCPBUGS-23866 : deps, bump opentelemetry #38
OCPBUGS-21174 : Bump golang.org/x/net to v0.18.0 #37
OCPBUGS-30861 : Bump golang.org/x/net to v0.18.0 #36
OCPBUGS-19020 : Auto sync upstream 2023 09 15 20 36 #26
Auto sync upstream 2023 05 15 20 44 #22
Updating ose-kubevirt-cloud-controller-manager images to be consistent with ART #21
Updating ose-kubevirt-cloud-controller-manager images to be consistent with ART #20
Updating ose-kubevirt-cloud-controller-manager images to be consistent with ART #19
Updating ose-kubevirt-cloud-controller-manager images to be consistent with ART #18
Full changelog
OCPBUGS-19926 : [release-4.14] Don’t force use of virtio console #269
OCPBUGS-18338 : Fix CI by running tests natively by default #261
Updating ose-libvirt-machine-controllers images to be consistent with ART #259
Updating ose-libvirt-machine-controllers images to be consistent with ART #258
Updating ose-libvirt-machine-controllers images to be consistent with ART #257
Updating ose-libvirt-machine-controllers images to be consistent with ART #254
Remove myself (frobware) from OWNERS #253
refactor: replace github.com/ghodss/yaml
with sigs.k8s.io/yaml
#252
Full changelog
OCPBUGS-36356 : daemon/update: disable systemd unit before overwriting #4447
OCPBUGS-32472 : Delete state files on reboot only #4331
OCPBUGS-33590 : ovs-configure: fix vlan_parent
calculation #4361
OCPBUGS-34716 : If multiple hostnames are returned, use the first one for the Node name #4385
OCPBUGS-17658 : Controller pod is spamming unknown field “spec.dns.spec.platform” message #4383
OCPBUGS-33643 : Don’t error if the certs.d dir doesn’t exist yet #4362
OCPBUGS-32341 : Remove the condition for checking the multiple ovs-if-br-ex profiles #4325
OCPBUGS-27030 : Log network service output to console #4114
: OCPBUGS-31731: kubelet: restorecon necessary files on kubelet’s prestart #4307
OCPBUGS-32260 : fix: resources were in the wrong indentation level #4322
OCPBUGS-27108 : Add \n in cert_writer for old cert methods and skip cloudCA validation #4117
OCPBUGS-31487 : Prevent OVS-configuration to run before kdump #4291
OCPBUGS-29400 : Run resolv-prepender entirely async #4182
OCPBUGS-31681 : make verify should use MCO’s kube version #4305
OCPBUGS-30992 : add preferredduringscheduling annotation to kube-rbac-proxy-crio #4266
OCPBUGS-30872 : add static pods for rbacproxy #4258
OCPBUGS-30107 : annotate on-prem static pods for workload partitioning #4230
OCPBUGS-30225 : set nodeStatusReportFrequency #4242
OCPBUGS-29290 : AWS: Always persist the existing node name on 4.14 #4215
OCPBUGS-20039 : Add v6-primary dual stack support to VSphere UPI #3956
OCPBUGS-29457 : Add existing kubeletconfig/ctrcfg mc-name-suffix annotation #4187
OCPBUGS-26072 : Fix bootstrap with NTO Operator and duplicate MachineConfigs #4098
OCPBUGS-28379 : fix nodeStatusUpdateFrequency #4149
OCPBUGS-28384 : daemon: allow the user to override drains on IR changes #4150
OCPBUGS-27759 : Add Image Credential Provider flags for Kubelet on AWS #4144
[OCP 4.14] OCPBUGS-24660: daemon: Add support for new nmstate logic #4066
OCPBUGS-27178 : use *resource.Quantity to not automatically set 0 #4121
OCPBUGS-23089 : Don’t retry node-ip show in resolv-prepender #4022
OCPBUGS-27362 : Fix typo in AWS node env unit #4131
OCPBUGS-26500 : crio: drop automatic image cleanup on upgrades #4105
OCPBUGS-26559 : Azure Run ovs-configuration.service before dnsmasq.service #4109
OCPBUGS-26551 : kubelet: fix kubelet labels #4107
OCPBUGS-24596 : [release-4.14] execute cert related processes to ensure proper rotation #4063
OCPBUGS-24397 : gcp-routes: don’t exit on crictl failures #4056
OCPBUGS-20554 : Ensure gcp-routes hack for internalLB hairpin traffic works for SGW #3973
OCPBUGS-23474 : Use shorter IP label for keepalived VIP #4041
OCPBUGS-23208 : workaround nmstate bug by configuring ipv{4,6} addresses #4031
OCPBUGS-22275 : support icsp and idms objects #3995
OCPBUGS-22391 : Require a hostname override for AWS #4001
OCPBUGS-20418 : Introduce kubelet-dependencies.target and firstboot-osupdate.target #3967
OCPBUGS-20051 : Support to append the duplicate kernel arguments to the rendered MC #3957
OCPBUGS-21065 : Update library-go and k8s dependencies to latest version #3994
OCPBUGS-20025 : Consider ingress VIPs when selecting node IP #3951
OCPBUGS-21841 : CRI-O: Use 127.0.0.1 for stream server with random port #3984
OCPBUGS-20358 : dashboard should detect unknown and not ready for not ready dashboard #3966
OCPBUGS-19657 : After dual-stack conversion reconcile IPFamilies #3934
OCPBUGS-19430 : [release-4.14] resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … #3925
OCPBUGS-19703 : Internal Registry Secrets merge causing excessive API calls #3941
OCPBUGS-19662 : fix merged image registry CA behavior #3937
OCPBUGS-19701 : Remove dependency on k8s.io/kubernetes packages #3940
OCPBUGS-19344 : Ignore invoking nbctl calls if its SDN #3928
OCPBUGS-19535 : daemon: always use podman cp
to copy extensions container content #3932
OCPBUGS-19357 : install: Recreate and delayed default ServiceAccount deletion #3920
OCPBUGS-9972 : Fix azure routes hack for ovnk pods towards internalLB on master nodes in SGW mode #3878
OCPBUGS-18442 : MCO is degraded if not install image registry operator #3901
OCPBUGS-18097 : ensure cconfig is not updated too frequently #3891
OCPBUGS-18086 : Quiet controller noisiness #3886
OCPBUGS-16035 : daemon: create /etc/systemd/network directory on node #3883
Revert “fix nodeStatusUpdateFrequency” #3887
OCPBUGS-17787 : Fix sysctl breaking dots in paths #3870
OCPBUGS-16733 : on-prem: run resolv-prepender on NM reapply event #3827
OCPBUGS-15583 : fix nodeStatusUpdateFrequency #3784
OCPBUGS-17810 : temporarily remove cert observability fields, add storageversionmigration for machineconfigpools,controllerconfig #3866
OCPBUGS-11832 : SSHkeys fails to write on upgrade to 4.13.rc3 #3810
MCO-564 : Make MCD aware of on-cluster builds #3848
MCO 566: MCO 662 Wire up productionalized BuildController in Machine OS Builder binary and choosing backend image builder #3861
MCO-605 : MCO-550: Remove Certificates from MachineConfig #3787
MCO-573 : Wire up security/trust/pull secrets between rpm-ostree and internal registry #3806
OCPBUGS-17701 : daemon: igmore mounting MCD pod content when target is “/” #3860
mcs: Use certwatcher #3744
MCO-729 : BuildController should allow cluster admins to provide a custom Dockerfile #3847
MCO-564 : Make NodeController aware of BuildController #3817
OCPBUGS-17568 : Agent-based install process the container machine-config-controller will be oom #3862
OPNET-343 : Restore node-ip for kubelet in dual-stack vSphere #3859
OCPBUGS-17683 replace .. with : on registry CA file paths #3854
operator: remove metrics related log #3855
MCO-565 : MCO-568: MCO-659: MCO-660 On-cluster build opt-in function, building machine-os-builder stub, RBAC and service acct inclusions. Deletes deployment rather than scale down to 0 without label #3834
MCO-588 : Update ignition spec to 3.4, disallow ignition KernelArguments for now #3814
OCPBUGS-17433 : Sync featuregate controller during the node config controller sync #3846
OCPBUGS-8938 : OCPBUGS-15202: MCO-555: kube-rbac-proxy addition #3663
MCO-654 : forcefile should always trigger an OS update #3790
OCPBUGS-14945 : add HostToContainer propagation to all hostPath volume mounts #3792
MCO-532 : Finish lease type migration #3842
OCPBUGS-13825 : The machine-config-controller pod restart in SNO+1 causing daemonsets to restart #3838
OCPBUGS-14965 : Run hostnamectl with systemd-run #3746
install: Fix dash-to-hyhen for 04_kube_rbac_proxy_config.yaml prefix #3837
OCPNODE-1714 : files: add skip_mount_home to storage.conf #3777
OCPBUGS-16227 : make sure sshKey are not emptied out on firstboot #3829
daemon: Two minor fixes for reexec #3835
daemon: Remove even more dead legacy OS update code #3820
MCO-552 : implement the ability for the MCO to handle image registry certificates #3770
OCPBUGS-17156 : daemon: Always replace binary #3832
Revert “daemon: Make binary writing idempotent” #3831
OCPBUGS-16921 : daemon: Make binary writing idempotent #3825
Revert “MCO-565: MCO-568: MCO-659: MCO-660 On-cluster build opt-in function, building machine-os-builder stub, RBAC and service acct inclusions” #3830
Revert “ add Passwd to bootstrap served ignition” #3828
OCPBUGS-15367 : The kubeconfig copied on to each node has 644 permissions #3808
MCO-597 : Remove the MCO’s dependency on journal reads #3822
fix certExpiry description #3823
OCPBUGS-16227 : add Passwd to bootstrap served ignition #3811
MCO-565 : MCO-568: MCO-659: MCO-660 On-cluster build opt-in function, building machine-os-builder stub, RBAC and service acct inclusions #3763
OCPNODE-1717 : Make cgroupsv2 default in OCP-4.14 #3789
OCPNODE-1655 : Apply node-cluster dashboard as a config map #3708
MCO-607 : MCO-237: Keep track of certs in ControllerConfigStatus #3756
MCO-687 : Fix metrics e2e test #3813
MCO-585 : MCO-569: MCO-563: MCO-586: Introduces BuildController #3731
MCO MCO-424: daemon: Remove old legacy OS update path #3583
MGMT-14843 : ovs-configuration service should copy the statically configured address even if the method isn’t manual. #3774
OCPBUGS-16128 : daemon: Copy matching binary to host, re-exec with it #3799
MCO-596 : Deprecate the login monitor #3791
kubevirt: Configure IPv6 arp proxy default gw #3780
operator: Stop mounting /etc/kubernetes/ca.crt #3730
OCPBUGS-15613 : Soften grep pattern for ingress default router #3775
Bug OCPBUGS-15233: OpenStack: fix IPv6 configuration #3785
OCPBUGS-11997 : Prevent NM from unsetting the hostname #3794
add wasm extension #3776
set MCO namespace on all events #3767
OpenStack: restrict IPv6 configuration #3781
Update 0000_90_machine-config-operator_01_prometheus-rules.yaml #3779
OCPBUGS-14674 : set pool alert back to zero in more default scenarios. #3733
OCPBUGS-10115 : update image to use golang-1.20 #3766
OCPBUGS-15728 : Fix machine config drifts when deploying with platform external #3773
faq: Talk about “no enabled repositories” #3772
OCPBUGS-14185 : change the message annotation to description #3721
OKD-174 : Dockerfile: OKD: Reenable extensions image on SCOS #3741
OCPBUGS-15575 : Dockerfile: pin to nmstate-2.2.9 #3769
OCPBUGS-10924 : Switch default SA to machine-config-operator #3740
trivial: Fix namespace for kube api server operator #3762
OCPBUGS-8403 Deleting SSH keys / password hashes should not degrade MachineConfigPool / node #3606
OWNERS: Update onwer list #3761
OCPBUGS-4820 : Controller version mismatch causing degradation during upgrades #3738
MCO-640 : Move all log functions to klog #3734
OCPBUGS-14399 : Minor fix to support protectKernelDefaults
field in Kubelet Config #3736
MCO-595 : Remove MCO’s pending config workflow #3700
OCPCLOUD-2010 : Re-vendor api and library-go for external platform support #3745
bootstrap: Clarify that “root ca” is really “MCS CA” #3728
add ipsec extension #3726
OpenStack: configure ipv6 addresses #3705
OCPBUGS-13656 : MCO-632: Update kube deps to 1.27.2 #3735
OCPBUGS-14612 : Improve logging for IPI deployments #3725
OCPBUGS-4370 : Add label to VIP via keepalived #3683
OCPBUGS-14793 : Allow userfaultfd syscall to be used by unprivileged users #3724
OCPBUGS-14272 : Race condition in TestMCDRotatesCertsOnPausedPool #3718
OCPBUGS-13547 : [OCPCLOUD-2034] Update Library-go and API for new featuregate changes #3688
OCPBUGS-2177 : MCO-634: add support for a node pool hierarchy #3505
OCPBUGS-13860 : Fix missing apiVersion and kind fields for embedded resources #3713
OCPBUGS-3176 : Disable global ipv4 and ipv6 forwarding for OVN deployments #3676
OCPBUGS-8447 : MCO-496: Support ignition versions 3.3 + 3.4 but keep version 3.2 as default #3576
OCPBUGS-13547 : Use payload-version flag to set release version consistently across components #3701
OCPBUGS-12885 : daemon: stop using nmstatectl persist-nic-names --inspect
on el9 #3685
OCPBUGS-11304 : daemon: event only on actual OS updates #3695
OCPBUGS-11652 : kubelet: add enableSystemLogQuery #3645
OCPBUGS-12980 : daemon: write certs in firstboot-complete path #3694
OCPBUGS-11670 : mcc_drain_err metric should not be served for removed nodes #3689
OCPBUGS-12456 : fix duplicate RotateKubeletServerCertificate setting #3686
OCPBUGS-12951 : daemon: Don’t traverse /run/ostree/auth.json
symlink #3691
OCPBUGS-11702 , OCPBUGS-4476 : keepalived/ingress: change healthcheck script #3441
OCPBUGS-11992 : ControllerConfig’s Proxy field should not be marked as embedded resource #3682
OCPBUGS-11162 : Do not trigger openshift-azure-routes/openshift-alibaba-routes service based on file existence #3643
OCPBUGS-10235 : Add quotes to variable with -z #3679
OCPBUGS-11280 : Fixing forcedns dispatcher script permission issue for assisted sno rhel9 upgrade #3648
OCPBUGS-7836 : The MCD has a non-functional pivot command that should be removed #3666
Test Revert “Block RHCOS gcp-routes service on both masters and workers” #3672
Accomodate ART limitation in parsing [[]] bash #3669
Block RHCOS gcp-routes service on both masters and workers #3619
OCPBUGS-10787 : Persist static IP addressed NIC names from rhel8 #3650
OCPBUGS-5356 : changed error handling so no runtime error #3651
OCPBUGS-4877 : End the operator’s “unknown field” logspam by marking controllerconfig embedded fields as embedded so they validate #3662
MCO-407 : add support for operator metrics #3537
Updating openshift-proxy-pull-test images to be consistent with ART #3593
OCPBUGS-4122 : Do not add deep nested scope to atomic transport #3653
OCPBUGS-10414 : Fix regex dot in coredns config file #3626
OCPBUGS-11092 : daemon: write certificate in OnceFrom and HyperShift #3654
remove container runtime flag #3640
OCPBUGS-4963 : Enable base nodeip-configuration for vsphere upi #3460
configure-ovs: would not retry on some errors #3625
OCPBUGS-10598 : Splitting NetworkManager-onprem.conf.yaml to 2 files: #3620
OCPBUGS-10379 : configure-ovs: support UUID in vlan.parent #3623
OCPBUGS-8676 : Fix kubelet.service node-ip for v6-primary dual-stack #3592
getPoolsForNode: Use constant MachineConfigPoolWorker instead of “worker” string #3635
MCO-423 : Adds OS image override test #3558
OCPBUGS-9969 : daemon: Drop duplicate --authfile
used in run
#3611
OCPBUGS-8446 : MCO-503: daemon: have a special path to sync in certs #3575
OCPBUGS-7559 : Remove hard requirement for the afterburn from early-running aws-related services #3585
Removing jstuever from OWNERS_ALIASES #3554
OCPBUGS-8113 : daemon: Only switchkernel if we are doing an OS update or kernel change #3600
OCPBUGS-9685 : daemon: Always remove pending deployment before we do updates #3599
Make OKD/SCOS Dockerfile regexes match again after rhel-coreos
image name change #3597
Switch to rhel-coreos (9) #3596
OCPBUGS-8113 : daemon: Make switchKernel less stateful #3580
OCPBUGS-8523 : Revert “daemon: Temporarily copy auth file with more open perms on FCOS” #3591
Update library go to promote AWS CCM to out of tree #3590
machineconfigpool: Clarify status.configuration
description #3371
daemon: Remove noisy log message #3588
OCPBUGS-5872 : Wrap podman commands in a while loop #3581
configure-ovs: permanent retry on failure #3544
OCPNODE-1495 : Default the cgroup version to “v1” via base template controller #3563
OCPBUGS-1662 : mcd_update_state metric should have a single time-series per node #3571
Full changelog
Force rebuild of CI image #31
Fix condition check for logging #29
Force updating main rhcos image to version 414.92.202303281555-0 #28
Updating ose-machine-os-images images to be consistent with ART #26
Full changelog
OCPBUGS-21372 : Update go.mod for CVE-2023-39325 [Release-4.14] #71
OCPBUGS-12640 : Bump golang.org/x/net from 0.0.0-20211209124913-491a49abca63 to 0.7.0 #67
Updating ose-multus-admission-controller images to be consistent with ART #65
Updating ose-multus-admission-controller images to be consistent with ART #64
Updating ose-multus-admission-controller images to be consistent with ART #62
Updating ose-multus-admission-controller images to be consistent with ART #57
Full changelog
OCPBUGS-33478 : Fix CNI cache update function to prevent nil access #232
OCPBUGS-26331 : Fix SAST scan issues for multus-cni-container [4.14] #220
OCPBUGS-21099 : Update go.mod for CVE-2023-39325 [Release-4.14] #194
OCPBUGS-19860 : Multus annotation permissions: Certificate duration should be configurable [backport 4.14] #192
OCPBUGS-19679 : Move chroot from multus main process to its child processes #189
OCPBUGS-19375 : Per node certification cherry-pick #185
OCPBUGS-19074 : Performance and efficiency improvements in daemon/server mode #181
Use container base image’s /etc/os-release to copy multus binary #179
Change /usr/src/multus-cni/bin to rhel8 based one #178
Cherry pick upstream fix #177
Upstream sync 202308 #176
This change introduces wait to generate config until API is ready #175
Upstream sync to 202307, 99c4481 #168
Add rhel9 binary for multus #173
OCPBUGS-13815 : Fix multus to support CNI plugin which does not create interface #162
OCPBUGS-12519 : Bump golang.org/x/net from 0.1.0 to 0.7.0 (#1039) #160
Updating multus-cni images to be consistent with ART #159
Updating multus-cni images to be consistent with ART #158
Updating multus-cni images to be consistent with ART #157
Updating multus-cni images to be consistent with ART #148
Multus entrypoint should regenerate kubeconfig if secret changes #153
Full changelog
Update vendor package (#40) #40
OCPBUGS-21454 : Update go.mod for CVE-2023-39325 (#33) #33
OCPBUGS-974 : Sync upstream (#30) #30
Updating multus-networkpolicy images to be consistent with ART (#27) #27
Updating multus-networkpolicy images to be consistent with ART (#26) #26
Updating multus-networkpolicy images to be consistent with ART (#25) #25
Updating multus-networkpolicy images to be consistent with ART (#24) #24
Full changelog
15393552: Updating ose-multus-route-override-cni images to be consistent with ART #47
15393552: Updating ose-multus-route-override-cni images to be consistent with ART #45
Revert ART changes to fix rhel9 base binary #44
Updating ose-multus-route-override-cni images to be consistent with ART #43
Fix Dockerfile to use rhel9 #42
Updating ose-multus-route-override-cni images to be consistent with ART #41
Add rhel9 binary #40
Updating ose-multus-route-override-cni images to be consistent with ART #36
Updating ose-multus-route-override-cni images to be consistent with ART #35
Updating ose-multus-route-override-cni images to be consistent with ART #34
Updating ose-multus-route-override-cni images to be consistent with ART #33
Full changelog
OCPBUGS-35263 : Use IP to identify orphaned allocation to be deleted #289
OCPBUGS-27858 : Enable reconciler configuration 4.14 #240
OCPBUGS-26553 : Cherry pick fix assignment 4.14 #230
OCPBUGS-21518 : update golang.org/x/net to v0.17.0 #207
Bug 16002 : Change default binary to RHEL8 image #172
OCPBUGS-15905 : Denormalize IP name before checking if pod is alive [Backport 4.14] #167
Bug 16136 : Introduce entrypoint.sh to call ip-control-loop based on RHEL ver #147
Downstream sync july23 #137
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #150
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #149
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #148
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #146
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #143
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #142
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #141
Restores RHEL specific binary copy and updates to rhel9/8 #140
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #136
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #130
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #129
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #128
OCPBUGS-11324 : respect requested allocation range when exluding ranges [backport 4.14] #121
Upstream sync 2023 03 29 #119
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #115
Full changelog
OCPBUGS-20429 : Revert “Add must gather script for network observability” #391
OCPBUGS-20354 : Removed workload partitioning annotation from ppc script #388
Use oc get daemonset to identify the NTO image #378
OCPBUGS-17907 : Revert “Added gathering script for SNOs with workload partitioning” #376
Split gather_network_logs into basics and extras #375
Added gathering script for SNOs with workload partitioning #373
Add csi-proxy logs collection in must-gather for Windows nodes #374
SDN-3687 : Support gathering DBs for OVNK-Interconnect mode #370
Collect information relevant to PerformanceProfile and low latency tuning #345
gather_network_logs: multus: Fix typo in error redirection #371
Collect leases.coordination.k8s.io from each namesapce #366
Create a generic “get_operator_ns” util function #368
Assert that only one subscription exists #367
MCO-608 : Gather MCO’s on-disk configs from degraded nodes #361
Gather ostree related bits #353
OCPBUGS-14984 : Collect Mellanox firmware information #365
OCPBUGS-14025 : Add gather_vsphere #363
NETOBSERV-987 : Add must gather script for network observability #357
Updating ose-must-gather images to be consistent with ART #358
OCPBUGS-10798 : Gather CSIStorageCapacity objects #356
OCPBUGS-11147 : network_logs: Gather multus resource yamls for namespaces #354
Updating ose-must-gather images to be consistent with ART #352
Full changelog
Add rhel9 binary #57
Updating ose-network-interface-bond-cni images to be consistent with ART #54
OCPBUGS-12327 : Updating ose-network-interface-bond-cni images to be consistent with ART #52
Updating ose-network-interface-bond-cni images to be consistent with ART #51
Updating ose-network-interface-bond-cni images to be consistent with ART #50
OCPBUGS-11190 : Ignore missing links during delete command #48
Update owners file #46
Align with upstream 14-04-2023 #45
Updating ose-network-interface-bond-cni images to be consistent with ART #44
Full changelog
Added METRIC_TEST_IMAGE var (#88) #88
Update the k8s dependencies to 1.27.7 (#82) #82
OCPBUGS-16594 : Update the dependencies to 0.27 (#79) #79
Revert “Remove e2e tests that consistently fail in 4.13 (#65)” (#76) #65
Updating ose-network-metrics-daemon images to be consistent with ART (#73) #73
Updating ose-network-metrics-daemon images to be consistent with ART (#72) #72
Updating ose-network-metrics-daemon images to be consistent with ART (#71) #71
Updating ose-network-metrics-daemon images to be consistent with ART (#70) #70
Full changelog
OCPBUGS-31862 : replace wireshark with wireshark-cli #122
OCPBUGS-22172 : Move commands to the function to avoid them being executed on -h. #94
OCPBUGS-20520 : Update scripts in network-tools to reflect the changes in IC model #92
ovn-db-run-locally: gracefully handle non-clustered dbs #84
Updating ose-network-tools images to be consistent with ART #81
Updating ose-network-tools images to be consistent with ART #78
Updating ose-network-tools images to be consistent with ART #76
Full changelog
Bump version to include v5.11.0 of go-git (#822) #822
Fix to ensure operator not found error exits with correct status (#797) #797
OCPBUGS-28871 : Capability to override default channel (#749) (#790) #749
OCPBUGS-19429 : Fix cross EUS channel upgrade path calculation (#769) #769
OCPBUGS-23327 : Fix MirrorToDisk of oci catalogs in hidden folders (#766) #766
skipping prune failure if manifest not found (#735) #735
OCPBUGS-21472 : fix: CVE-2023-39325 (#711) #711
Fixes HTTP 401 issues when several catalogs are being mirrored and need to be rendered using operator-registry (#704) (#706) #704
Fix OCPBUGS-17546: pod catalogsource generated by oc-mirror will crashloopBackOff randomly (#699) #699
OCPBUGS-17545 : Improve extracting opm binary from catalogs (#676) #676
OCPBUGS-7465 : Fix 401 Unauthorized due to stale auth token (#678) #678
Fix OCPBUGS-14402 - case where catalog is on a mirror from registries.conf (#682) #682
OCPBUGS-17998 : fix: ICSP with incorrect mirror path (#681) #681
OCPBUGS-17714 : Ensure errors are nil before closing registry to avoid… (#680) #680
CFE-825 : As a oc-mirror user, I would like mirrored operator catalogs to have valid caches (#651) #651
CFE-902 feat: removes go workspace due to incompatibility on ART builds (#672) #672
CFE-902 feat: adds go workspace to support multi-module (#670) #670
add go.mod files to testdata directories (#669) #669
fixing oc-mirror version
when run from read-only fs (#660) #660
Make local storage port configurable via command line (#668) #668
Fix unit tests for local storage collector implementation (#667) #667
CFE-904 : Create AdditionalImage Collector implem. based on registry as localStore (#666) #666
v2 initial commit (#664) #664
OCPBUGS-13871 docs: changes the help message for oci-registries-config flag (#663) #663
OCPBUGS-11754 : add cleanup of /tmp directories (#655) #655
CFE-875 : Unlock MirrorToDisk and DiskToMirror workflows for local oci catalogs (#662) #662
Fix OCPBUGS-15329 - OCI index found, but accept header does not support OCI indexes (#658) #658
Enable mirroring of the multi release image (#657) #657
revendor to the latest oc (#656) #656
Replacing the hard coded path with graphDataMountPath (#585) #585
CFE-859 : Removing flag use-oci-feature starting release-4.14 (#622) #622
CFE-783 : A variety of changes needed for correct operation with multi architecture catalogs (#611) #611
MULTIARCH-3440 : refine multiarch support for test-unit and test-e2e using dockerfile and add ppc64le build to Makefile (#624) #624
Add ImageSetConfig examples (#610) #610
OCPBUGS-13871 : fix: changes on help info content (#653) #653
OCPBUGS-588 : minVersion in ImageSetConfiguration seems to be ignored (#603) #603
Fix OCPBUGS-14194 (#649) #649
Fix OCPBUGS-14402 (#652) #652
OCPBUGS-13332 : Create rfc 1035 compliant catalog source name (#636) #636
fix validateMapping OCPBUGS-13962 (#640) #640
adds Jeremy Peterson to OWNERS file (#644) #644
Chore: Remove Ross from OWNERS (#639) #639
OCPBUGS-13762 : make addRelatedImageToMapping multithreaded (#638) #638
Fix OCPBUGS-11840: ParseImageReference supports cases where both tag and digest are present in a ref (#633) #633
OCPBUGS-11922 : paths not needed in ICSPBuilder interface (#634) #634
OCPBUGS-11910 , OCPBUGS-11922 : Limit the nested repository path while mirroring the images (#623) #623
CFE-658 : Implementation of filtering by channel for OCI catalog (#627) #627
OCPBUGS-4959 : oc-mirror error on second synchronisation with no change (#605) #605
Deprecate –use-oci-feature in favor of –include-local-oci-catalogs (#620) #620
Updating oc-mirror-plugin images to be consistent with ART (#619) #619
Update OWNERS for CFE team (#614) #614
Revert adding ‘–cache-dir /tmp/cache’ to catalog images (#613) #613
OCPBUGS-11371 : fix: skips bundles with ‘skips’ field on head bundle (#608) #608
fix: work around OCPBUGS-6741 by explicitly setting –cache-dir (#604) #604
OCPBUGS-2633 : Fix (#601) #601
OCPBUGS-7845 fix: changes the way the version is shown (#599) #599
OCPBUGS-10348 fix: changes to include the registry path (#600) #600
OCPBUGS-1060 fix: changes confusing error message (#598) #598
Fix OCPBUGS-8156: Upgrade to containerd v1.6.18 (#593) #593
Bugfix check imagesetconfig for valid oci protocol when oci feature is used (#573) #573
Remove “unsupported” wording from info on console (#577) #577
Fix OCPBUGS-5168: Upgrade helm.sh/helm/v3 to v3.11.2 fixing CVE-2022-23526 and CVE-2022-23525 (#580) #580
OCPBUGS-10051 : fix: remove catalog reference from ImageContentSourcePolicy.yaml (#586) #586
Updating oc-mirror-plugin images to be consistent with ART (#575) #575
Bugfix for destination registry nested paths length (#572) #572
fix extract dir for cincinnati-graph-data container (#582) #582
OCPBUGS-8216 : fix: remove an unecessary error message (#579) #579
docs: add information about unsupported scenario (#574) #574
Full changelog
: OCPBUGS-27680,OCPBUGS-27595: UPSTREAM: <carry>: Update go-git to v5.11.0 #73
OCPBUGS-23358 : [release-4.14] Address http2 vulnerability #53
OCPBUGS-21379 : Bump golang.org/x/net from 0.15.0 to 0.17.0 #39
OCPBUGS-16793 : openshift/Dockerfile: exclude unpack binary from FIPS build overrides #33
Rename downstream overlay from service-ca-operator to openshift #32
UPSTREAM: <carry>: add manifests to image #31
Makefile,manifests: Add skeleton of default rukpak resources #18
Introduce barebones build and unit testing GH actions #14
Skeleton - k8s provisioner #7
update README to include latest APIs #5
Introduce a sanity github action check #3
Init API defs #1
Add barebones OWNERS file #2
Full changelog
OCPBUGS-28950 : Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #286
OCPBUGS-18980 : Disable Build and DeploymentConfig Informers if their caps are disabled #271
use constant controller names #265
OCPBUGS-16071 : Updating Kubernetes and other associated dependencies #263
update runtime-utils for idms migrations #243
OCPBUGS-14461 : Kubernetes 0.27 #261
Updating ose-openshift-controller-manager images to be consistent with ART #260
Updating ose-openshift-controller-manager images to be consistent with ART #259
Updating ose-openshift-controller-manager images to be consistent with ART #258
Updating ose-openshift-controller-manager images to be consistent with ART #253
OCPBUGS-10588 : mount build.Spec.Source.ConfigMaps for custom builder images #254
Add Divyanshu Agrawal as a reviewer #256
Full changelog
OCPBUGS-35337 : Correct out-of-bounds check #173
OCPBUGS-34792 : Make Cinder CSI Driver Topology feature configurable #162
OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #153
OCPBUGS-26460 , OCPBUGS-26461 : [release-4.14] CVE-2023-45142,CVE-2023-47108: bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to v0.46.1 #156
OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #142
OCPBUGS-21573 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #135
STOR-1436 : Restart openstack-cinder-csi-driver-controller
Pods if metrics-serving-cert changed #128
Remove Dockerfile.rhel7 #126
Configure User Agent #123
OCPBUGS-16654 : Revert revert “STOR-1065: Rework sidecar bindings to b… #119
OCPBUGS-16783 : Chore: Update OWNERS and OWNERS_ALIASES #121
OCPBUGS-16526 : Bump library-go to remove dependency on goproxy #122
OCPBUGS-16678 : Fix SCC admission failure race during initial deployment #120
Revert “STOR-1065: Rework sidecar bindings to bind common ClusterRoles” #118
STOR-1065 : Rework sidecar bindings to bind common ClusterRoles #117
OCPBUGS-14824 : Bump cinder-csi-driver-operator library-go #116
STOR-1168 : Bump common libraries #115
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #113
OCPBUGS-12651 : Bump golang.org/x/net@v0.9.0 #114
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #112
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #111
OSASINFRA-3000 Prefer a Cinder CSI-specific config map #82
OCPBUGS-8683 : Add management workloads annotations #109
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #108
Full changelog
OCPBUGS-32428 : Ensure portSecurity is correctly set in the Instance Ports #109
OCPBUGS-23202 : Don’t build InstanceSpec during delete operations #95
Bug OCPBUGS-18806: Set controller’s SyncPeriod to 1 hour #81
Bump CAPO to match branch release-0.7 #80
Configure User Agent #75
Update README #77
OCPBUGS-16586 : Bump goproxy #74
Rework how we build the container image #76
go.mod: Upgrade Gophercloud to v1.5.0 #73
OSASINFRA-3063 : Bump CAPO to v0.7.2 #72
Updating ose-machine-api-provider-openstack images to be consistent with ART #70
Updating ose-machine-api-provider-openstack images to be consistent with ART #69
Updating ose-machine-api-provider-openstack images to be consistent with ART #68
OCPBUGS-8687 : machineset_controller: Stop caching clouds credentials #63
OCPBUGS-2153 : Use TenantID if ProjectID is empty #61
Updating ose-machine-api-provider-openstack images to be consistent with ART #60
Full changelog
15143237: Updating ose-ovirt-machine-controllers images to be consistent with ART #174
Full changelog
OCPBUGS-33637 : Fix CVE2023-45288 by bumping x/net to v0.24.0 - 4.14 #81
OCPBUGS-25980 : Rebase with upstream: Fix snyk code issue: Path Traversal #72
OCPBUGS-24713 : synk: ignore vendor dir #60
OCPBUGS-21112 : CVE-2023-39325 - Update net dependencies - 4.14 #51
cherry-pick: Improve delete device failure logs in driver node #48
OCPBUGS-17309 : Updated golang.org/x/net/html dependency. #43
Rebase with upstream: v0.4.0 changes #42
Rebase: upgrading go modules #40
Rebase with upstream: reduce multipathd usage (OCPBUGS-16878) #39
Rebase with upstream: removed panic and some cleanup #38
Rebase with upstream #37
Package device-mapper-multipath added #36
Merging upstream code with downstream #33
OCPBUGS-12922 : Updated net dependencies #29
OCPBUGS-12716 : Updating ose-powervs-block-csi-driver images to be consistent with ART #30
Updating ose-powervs-block-csi-driver images to be consistent with ART #26
Full changelog
OCPBUGS-25657 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #58
OCPBUGS-25715 : snyk: ignore vendor dir #60
OCPBUGS-23078 : CVE-2023-44487: bump github.com/openshift/library-go to release-4.14 #48
OCPBUGS-21203 : CVE-2023-39325 - Update net dependencies - 4.14 #40
Update OWNERS add yussufsh #44
STOR-1438 : Restart controller Pods if metrics-serving-cert changed #36
OCPBUGS-16531 : Upgraded openshift/library-go to remove indirect references to goproxy. #35
OCPBUGS-16654 : Rename sidecar binding RBACs #32
OCPBUGS-16783 : Chore: Update OWNERS #33
STOR-1065 : Rework sidecar bindings to bind common ClusterRoles #31
OCPBUGS-14824 : Bump ibm-powervs-block-csi-driver-operator library-go #30
OCPBUGS-12925 : Updated net dependencies #26
Updating ose-powervs-block-csi-driver-operator images to be consistent with ART #25
Updating ose-powervs-block-csi-driver-operator images to be consistent with ART #24
Updating ose-powervs-block-csi-driver-operator images to be consistent with ART #23
Adding storage team to OWNERS so they can perform lib-go updates. #21
OCPBUGS-8683 : Add management workloads annotations #20
Updating ose-powervs-block-csi-driver-operator images to be consistent with ART #19
Full changelog
OCPBUGS-24727 : UPSTREAM: <carry>: snyk code scan exclude vendor directory #54
OCPBUGS-21299 : CVE-2023-39325 - Update net dependencies - 4.14 #45
UPSTREAM: <carry>: Add check for valid Power VS instance id #42
Manual rebase to k8s 1.27 and go 1.20 #40
Revert images golang 1.18 #38
Updating ose-powervs-cloud-controller-manager images to be consistent with ART #37
Revert build_image to the one currently specified in release repo #36
OCPBUGS-12921 : Updated net dependencies #33
Updating ose-powervs-cloud-controller-manager images to be consistent with ART #31
Updating ose-powervs-cloud-controller-manager images to be consistent with ART #30
Full changelog
Bump openshift/prom-label-proxy to v0.7.0 #356
OCPBUGS-12293 : Update 4.14 prom-label-proxy image to be consistent with ART #355
Updating prom-label-proxy images to be consistent with ART #353
Full changelog
OCPBUGS-22531 : bump otel dependencies #183
OCPBUGS-21262 : update golang.org/x/net to v0.17.0 [4.14] #176
Bump openshift/prometheus to v2.46.0 #167
Bump openshift/prometheus to v2.45.0 #166
Bump openshift/prometheus to v2.44.0 #164
Dockerfile.ocp: update note about UI assets after switching to embed #165
OCPBUGS-12996 : Add missing assets after manual merge #162
OCPBUGS-12825 : Updating golang-github-prometheus-prometheus images to be consistent with ART #160
Bump openshift/prometheus to v2.43.0 #158
Updating golang-github-prometheus-prometheus images to be consistent with ART #156
Full changelog
OCPBUGS-30015 : fix: convert continue
field between v1beta1 and v1alpha1 #279
OCPBUGS-20881 : fix: disable HTTP2 connections by default #253
OCPBUGS-20881 : Bump golang.org/x/net to v0.17.0 #247
Bump openshift/prometheus-operator to v0.67.1 #240
Bump openshift/prometheus-operator to v0.67.0 #239
OCPBUGS-14466 : bump openshift/prometheus-operator to v0.66.0 #236
OCPBUGS-14033 : cmd/prometheus-config-reloader: add SIGTERM handler #234
OCPBUGS-1626 : [bot] Bump openshift/prometheus-operator to v0.65.1 #233
OCPBUGS-12324 : Update 4.14 prometheus-config-reloader image to be consistent with ART #230
Updating prometheus-operator images to be consistent with ART #229
Updating prometheus-config-reloader images to be consistent with ART #227
Updating prometheus-operator-admission-webhook images to be consistent with ART #226
Updating prometheus-config-reloader images to be consistent with ART #225
OCPBUGS-10109 : Updating openshift-state-metrics images to be consistent with ART #221
OCPBUGS-10137 : Updating openshift-state-metrics images to be consistent with ART #222
Updating prometheus-operator images to be consistent with ART #220
Full changelog
OCPBUGS-21162 : (4.14) upgrade golang.org/x/net to v0.17.0 #134
Bump openshift/node_exporter to v1.6.1 #130
OCPBUGS-12714 : Bump openshift/node_exporter to v1.6.0 #129
OCPBUGS-12507 : Upgrade golang.org/x/net to v0.10.0 to fix the CVE #128
Updating golang-github-prometheus-node_exporter images to be consistent with ART #122
Updating golang-github-prometheus-node_exporter images to be consistent with ART #120
Full changelog
OCPBUGS-21576 : bump(k8s,openshift) to address CVE-2023-44487 [4.14] #34
refactor route controller manager to use library-go server and ControlerCommand for generic setup #28
add dummy flags needed for a switch to library-go server and ControlerCommand #29
Revert “[WRKLDS-730] refactor route controller manager to use library-go server and ControlerCommand for generic setup” #25
refactor route controller manager to use library-go server and ControlerCommand for generic setup #22
WRKLDS-700 : bump(k8s) to v0.27.1 #21
Updating ose-route-controller-manager images to be consistent with ART #19
Updating ose-route-controller-manager images to be consistent with ART #18
Updating ose-route-controller-manager images to be consistent with ART #17
Full changelog
OCPBUGS-34830 : fix issuer check during JWT authentication 4.14 #539
OCPBUGS-32888 : update gopkg.in/square/go-jose.v2 to fix CVE-2024-28180 #535
OCPBUGS-22647 : go.mod: bump go.opentelemetry.io/contrib/instrumentation/net/http/ote… #494
OCPBUGS-21349 : [release-4.14]: Bump golang.org/x/net to v0.17.0 #484
OCPBUGS-16397 : Nutanix OCP cluster telemetry data “host_type” shows “virt-unknown” #474
chore: bump github.com/prometheus/prometheus to v0.45.0 #475
: fix mtls secret generation #473
Revert wrong cert name change of #455 #472
: add secret for external mtls connection #470
MON-3230 : Add TLS auth to telemeter-client #455
jsonnet: Add config to support rhelemeter #468
Improve debug roundtripper logs #467
Fix integration test documentation #461
Fix path benchmark #466
Add RHEL POC server #465
OCPBUGS-12345 : tools: update to golangci-lint v1.51 #464
OCPBUGS-12678 : Update golang.org/x/net to lastest version #462
add thibaultmg in OWNERS file #459
Update OWNERS #456
Use receive handler logger #450
OCPBUGS-10169 : Updating telemeter images to be consistent with ART #452
Filter noisy logs from TCP probes #453
Add douglascamata
as reviewer and approver #454
Full changelog