4.20.0-0.ci-2025-04-03-145039

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.20.0-0.ci-2025-04-03-145039

Team Approvals:

Tests:

Blocking jobs
- aggregated-aws-ovn-upgrade-4.20-minor Succeeded periodic-ci-openshift-release-master-ci-4.20-upgrade-from-stable-4.19-e2e-aws-ovn-upgrade
- aggregated-azure-ovn-upgrade-4.20-minor Succeeded periodic-ci-openshift-release-master-ci-4.20-upgrade-from-stable-4.19-e2e-azure-ovn-upgrade
- aggregated-gcp-ovn-upgrade-4.20-micro Failed (2 retries) periodic-ci-openshift-release-master-ci-4.20-e2e-gcp-ovn-upgrade
- hypershift-e2e Pending (2 retries) periodic-ci-openshift-hypershift-release-4.20-periodics-e2e-aws-ovn

Upgrades from:

4.20.0-0.ci-2025-04-02-143700 - F F F F F F
4.19.0-0.ci-2025-04-03-053804 (changes) - Success Success

Loading changelog, this may take a while ...

Changes from 4.20.0-0.ci-2025-04-02-143700

Created: 2025-04-03 14:50:47 +0000 UTC

Image Digest: sha256:2bd54c9fbe51812267e31320fc771eb753e069075dbe88e9b2d9c3de0b88565f

Components

Kubectl 1.32.1
Kubernetes 1.32.3
Kubernetes Tests 1.32.3
Red Hat Enterprise Linux CoreOS upgraded from 419.96.202504020643-0 to 419.96.202504022024-0 (diff)

Rebuilt images without code change

rhel-coreos sha256:ab5064e53a3da91d918eb5b3c6a0f65fd93f5097d02b16c538b8b42b9429c1d9
rhel-coreos-extensions sha256:870c0f0593b0d92b4fe692243d094f851fb2ca98081ee2ba0d1d835f7aaa58bf

agent-installer-api-server

MGMT-20181: cleanup platform_oci and platform_external capabilities (#7464) #7464
Improve ostree cleanup service (#7490) #7490
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

STOR-2126: Enable readOnlyFileSystem #370
Full changelog

aws-machine-controllers

OCPBUGS-52454: Add spotMarketRequest on marketType spot #126
Full changelog

baremetal-installer, installer

OCPBUGS-54232: Azure Move BYO VNET SG creation to InfraReady #9603
OCPEDGE-1701: fix: update tnf validation to account for tna install config #9629
OCPBUGS-52473: aarch64 kernel is no longer zipped #9617
NO-JIRA: Add jcapiitao to CoreOS approvers and reviewers #9631
OCPBUGS-53067: Updating the file names in generic.ins file for s390x ABI for pxe Artifacts #9586
NO-JIRA: OWNERS_ALIASES - Add user as coreos-approvers / coreos-reviewers #9628
CORS-3883: Remove user-assigned identity from ARM template #9625
OCPBUGS-53303: Revert: Power VS: Disallow platform.powervs.clusterOSImage in install-config #9577
OCPBUGS-42241: Update to cluster-api-provider-azure release-v1.17.5 #9596
OCPBUGS-53140: Validation for API and Ingress VIPs when using user-managed load balancer #9571
no-jira: Add Johan-Liebert1 to coreos-reviewers and coreos-approvers #9556
CORS-3923, CORS-3927: Support confidential cluster installation on SEV-SNP and TDX nodes on GCP #9395
AGENT-587: Support Nutanix in Agent-based Installer #9537
SPLAT-2000: Added vSphere provisioning mode support for data disks #9439
OCPEDGE-1496: [TNF] Collect pacemaker, pcsd, and corosync logs and journals in installer-masters-gather.sh #9546
OCPBUGS-52356: IBMCloud: Fix CAPI endpoint overrides #9540
OCPEDGE-1505: Enhance Platform none with Fencing Credentials #9521
OSASINFRA-3730: Add support for storing OpenStack CA bundles #9194
OCPBUGS-53258: IBMCloud: Bump TF provider for CIS fix #9589
NO-JIRA: update OWNER_ALIASES for azure and aws #9598
OCPBUGS-53106: Create ConfigMap to reference baremetal-installer image #9563
NO-JIRA: CVE-2025-22868 bump oauth2 pkg to v0.27.0 #9569
CORS-3918: Send service endpoint overrides to CAPG through cluster spec #9528
OCPBUGS-53465: Update RHCOS 4.19 bootimage metadata to 9.6.20250321-0 #9593
OCPEDGE-1513: Fixed topology logic for 2-node installs and added unit tests #9579
OCPBUGS-53379: Update RHCOS 4.19 bootimage metadata to 9.6.20250319-0 #9582
AGENT-467: show the agent ui url when available #9584
CORS-3861, CORS-3883, CORS-3937: Azure Machine Identity API #9538
AGENT-537: Run agent installer command to create certificates #9574
OCPBUGS-52959: Issue short lived certificates if ShortCertRotation featuregate is enabled #8784
OCPBUGS-53173: PowerVS: remove TF code #9568
no-jira: add dev docs for bumping CAPI provider version #9567
OCPBUGS-53183: Avoid adding duplicate entries to NO_PROXY #9573
SPLAT-2078: Removed VSphereStaticIPs feature gate #9560
OCPBUGS-53280: PowerVS: Re-enable disconnected installs #9551
AGENT-537: Add agent command to generate certificates #9557
OCPBUGS-39146: Validate sgdisk partition start in image based installer config #9541
AGENT-1113: additional refinement for loading the agent UI #9565
SPLAT-2072: Removed VSphereMultiVCenters feature gate #9553
OCPEDGE-1513: feat(topologies): add DualReplica topology mode #9534
OCPBUGS-45692: Modified ova template name to use failure domain name #9300
OCPBUGS-50552: Power VS: Disallow clusterOSImage install-configuration parameter #9417
NO-JIRA: OWNERS: add thuan #9555
OCPBUGS-51209: Changed kernelFileType name from kernel.img to vmlinuz for s390x #9533
OCPBUGS-6271: Adding VIPs Validation for agent based vsphere installation #9532
AGENT-1113: enhance the unconfigured-ignition command to support the interactive workflow #9529
OCPBUGS-33370: Improve baremetal gather error message #9120
OCPBUGS-36553: VSphere: add vips to machinenetwork #9526
OCPBUGS-49737: Custom-DNS: Update master and worker user data secrets #9451
CORS-2508: aws: remove unused autoscaling:DescribeAutoScalingGroups perm #9223
OCPBUGS-51378: Change vsphere conversion govmomi err to be clear #9524
CORS-3278: Bump IBM Cloud CAPI to v0.10.0 #9523
OCPBUGS-44840: Mount the user-ca-bundle into ICC #9227
OCPBUGS-50637: Remove error logging when determining image arch #9531
OCPBUGS-51171: aws: add ec2:ReplaceRoute permission #9525
OCPBUGS-47724: AWS: Copy static MCO resources needed for custom-dns #9489
OCPBUGS-49623: IBMCloud: Missing ca-mon region due to static region list #9421
OCPBUGS-47681: Support regions only available in v2 of the aws sdk #9383
OKD-235: Add stream metadata for scos to be used by OKD #9520
OCPEDGE-1635: Set default values for arbiter #9530
OCPBUGS-39583: Remove tmp directory used for agent pxe files #9527
No-ISSUE: (dep) Bump openshift/api #9522
CORS-3917: Add install config validation for service endpoints #9517
NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer #9515
OCPBUGS-51350: PowerVS: Extra network routes for disconnected install #9510
NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage #9508
OCPBUGS-50961: Power VS: Log accurate error when deploying Internal with no vpcName #9497
SPLAT-1995: vsphere on destroy remove cns volumes #9425
OCPBUGS-47459: IBMCloud: CAPI add permitted network #9397
OCPBUGS-47652: IBMCloud: Set CAPI boot volumes #9385
CORS-3869: static validation for new vpc.subnets field #9505
OSASINFRA-3695: openstack: Create security group rules in batches #9042
OCPBUGS-46051: IBMCloud: Fix CAPI AZ handling #9415
OCPBUGS-50534: Fix error messages in available IP code #9503
OCPBUGS-51204: bootstrap/node-image-pull.sh: handle PXE boots as well #9516
OCPEDGE-1310: feat: add arbiter node support to installer #9159
CORS-3919: Add GCP service endpoints to the infrastructure manifest #9518
OCPBUGS-51084: PowerVS: Specify chrony config for Disconnected deploy #9500
no-jira: Bump cluster-api to v1.9.4 #9411
OCPBUGS-49351: Add vSphere logic to check for max network count #9419
CORS-3843: Add Tech Preview Feature gate to Installer for GCP Custom API Endpoints #9501
OCPBUGS-50919: Fixes panic during GCP tags fetch due to unstable network #9495
OCPBUGS-49940: PowerVS: datacenter supported systems #9442
OCPBUGS-49953: PowerVS: support destroy tag 1 #9403
OCPBUGS-50574: Check for vmgroup when create capv machine fd name #9453
CNTRLPLANE-194: add auth-api-bootstrap stage to bootkube.sh template #9424
CORS-3867, CORS-3868: deprecate platform.subnets and introduce platform.vpc.subnets field in install-config #9443
OCPBUGS-50899: PowerVS: COS eu-es hack #9490
OCPBUGS-50920: Rely on path declaration of base image #9491
OCPBUGS-45429: Set the right resource group in bootstrap destroy #9487
CORS-3835: Add gcp endpoints to the installer config #9363
OCPBUGS-46488: Validate Encryption Keys for GCP #9328
OCPBUGS-44507: Check public zone for stray record set #9365
OCPBUGS-50839: correct typo #9480
OCPBUGS-50657: PowerVS: destroy dhcp hack #9458
OCPBUGS-50534: Fix panic when there are no available IPs #9444
OCPBUGS-50649: vsphere - check if host is powered down or on standby before uploading template #9456
no-jira: Switch to go.uber.org/mock/gomock #9422
OCPBUGS-49319: IBMCloud: Drop CAPI metrics-bind-addr #9401
no-jira: Relax serviceEndpoint URL validation for IBMCloud platform #9416
OCPBUGS-50004: Add cluster:master_nodes metric retrieval in docs #9447
CORS-3825: pkg/infrastructure/azure: support nvme #9232
OCPBUGS-49737: Custom-DNS: GCP, AWS: Update worker pointer Ignition #9431
OCPBUGS-46656: validate configured networks to not overlap with OVNKubernetes default subnets #9428
MGMT-19545: add optional release registry field to the IBI installation config #9394
OCPBUGS-48044: [Nutanix] Install multi-NICs cluster failed with failureDomains #9376
OCPBUGS-49784: handle runtime panic when validating ovnKubernetesConfig #9432
OCPBUGS-48827: aws/edge/byovpc: subnets tag kube cluster tag to shared #9413
OCPBUGS-49594: aws/byo-ip added required permission ec2:ReleaseAddress #9420
OCPBUGS-46549: Update RHCOS 4.19 bootimage metadata to 9.6.20250121-0 #9392
OCPBUGS-48089: validate hostPrefix to be the same when multiple clusternetwork CIDRs are present #9398
SPLAT-1809: Added vSphere multi disk support #9035
OSASINFRA-2571: Add quota validation for server group #9326
OCPBUGS-48228: Envtest: Configure IPv6 service network for API Service #9361
CORS-3724: bump go v1.23 and k8s dependencies #9396
CORS-3637: OWNERS files for platform provider subdirectories #9407
OCPBUGS-47489: pkg/gcp/destroy: add waits to prevent leaks during heavy load #9384
MGMT-19771: Convert IDS to proper IDMS manifest #9391
OCPBUGS-47477: aws: skip dead zones on us-east-1 when discovering AZs #9333
OCPBUGS-48570: [Nutanix] Installation failed with timeout when uploading images to PC #9377
OCPBUGS-45551: Updating ose-installer-altinfra-container image to be consistent with ART for 4.19 #9275
no-jira: docs(user): fix grammer in upi install step #9292
OCPBUGS-48719: Add new tested azure arm instance type to doc #9387
OCPBUGS-46596: aws/permissions - defaults ec2:DescribeInstanceTypeOfferings #9341
COS-3013: overlay node image before bootstrapping if necessary #8742
OCPBUGS-48256: Run iscsiadm for agent-based iSCSI installations #9356
SPLAT-1742: vSphere - enable host group based zonal #8873
CORS-3722: bump default channel to stable-4.19 #9375
CORS-3721: bump default release image to 4.19 #9374
OCPBUGS-48437: PowerVS: limit by resourceGroupID #9359
OCPBUGS-46010: wait for at least 3 kube-apiserver instances #9302
no-jira: Remove myself from reviewers list #9358
no-jira: images: UPI: use ART repo dir #9360
OCPBUGS-47156: Bump golang.org/x/net to 0.33.0 #9343
NO-ISSUE: Fix owning component name in machine config templates #9353
NO-JIRA: remove the types which failed by RHEL-59521 and add the new gpu vm type #9337
OCPBUGS-29067: Update MCS Cert and Key files within bootstrap Ignition with UserProvisionedDNS #9238
NO-ISSUE: Deprecate node-joiner scripts #9304
MCO-1457: Clean up MCS CA & TLS cert objects for management #9309
OCPBUGS-45995: Always set AllowCrossTenantReplication parameter to false #9322
OCPBUGS-46571: Disable IP Forwarding for CAPG Machines #9332
OCPBUGS-46260: CVE-2024-45337 bump crypto pkg to v0.31.0 #9314
OCPBUGS-46605: Find instances by label GCP #9336
OCPBUGS-47504: Power VS: Private DNS service endpoint URL must end with /v1 #9335
METAL-1137: Enable TLS for ironic API in the bootstrap VM #9189
OCPBUGS-46144: azure: use separate /var to avoid growfs timeouts #9310
OCPBUGS-45218: aws: fix perm requirement for edge nodes #9256
OCPBUGS-46470: Power VS: ResourceManager also to override for Internal deploy #9317
OCPBUGS-46035: fix skew support for node-joiner #9307
OCPBUGS-44560: Add note about additional networks using IPv6 #9323
OCPBUGS-45280: Allow more time for Service Account Creation #9299
OCPBUGS-46363: Remove narrow timeout from etcd bootstrap member removal gate. #9295
OCPBUGS-44834: aws: include permissions for edge compute #9230
OCPBUGS-45984: IBMCloud Fix VPC-COS IAM Auth #9301
OCPBUGS-45317: node-joiner PXE artifacts should be prefixed “node” #9280
OCPBUGS-45727: Updating ose-installer-artifacts-container image to be consistent with ART for 4.19 #9284
OCPBUGS-44641: GCP placing *.apps record in wrong managed zone #9216
OCPBUGS-45855: If vCenter cluster has no esxi hosts fail with sane msg #9291
OCPBUGS-45807: aws: fix sts:AssumeRole perm requirement #9287
OCPBUGS-43779: Destroy all private cluster backend service resources #9270
OCPBUGS-45162: Delete tagged disks #9274
OCPBUGS-45482: Wait for etcd bootstrap member removal #9261
OCPBUGS-45685: Power VS: Create region-zone-sysType hierarchy #9245
OCPBUGS-45289: capi/aws: use LB name when finding Hosted Zone ID #9263
OCPBUGS-45678: Updating ose-baremetal-installer-container image to be consistent with ART for 4.19 #9282
OCPBUGS-45656: Updating ose-installer-container image to be consistent with ART for 4.19 #9279
OCPBUGS-44925: aws: add ec2:AllocateAddress perm requirement. #9234
OCPBUGS-44523: Remove unused variable from ASH arm template 06_workers.json #9204
OCPBUGS-45491: Align vSphere UPI haproxy config with IPI #9273
OCPBUGS-44938: Handle multiple mirror entries for source #9266
OCPBUGS-45286: PowerVS: Listen to machineNetwork #9254
ARO-12457: Include bootstrap docker config file in go module #9248
OCPBUGS-45175: Ironic external url port should change based on protocol #9249
NO-ISSUE: imagebasedinstaller: support json files in extramanifests directory #9136
OCPBUGS-44924: aws: add missing ec2:GetConsoleOutput perm requirement #9233
Full changelog

cluster-capi-operator

OCPCLOUD-2895: Add AWS networkInterfaceType to conversion #280
Full changelog

cluster-config-api

NO-ISSUE: tools: bump openshift controller-tools to latest commit #2260
Full changelog

cluster-network-operator

SDN-5689: Rebase k8s v1.32 #2656
Full changelog

cluster-node-tuning-operator

Revert “e2e: skip RHEL-79032 jira issue in irqbalance (#1312)” (#1315) #1312
Remove pinning of all dependencies (#1309) #1309
e2e: arm: Add kernel page size e2e testing suite (#1307) #1307
e2e: skip RHEL-79032 jira issue in irqbalance (#1312) #1312
Full changelog

cluster-samples-operator

OCPBUGS-54471: Periodic sync of supported OCP samples #622
OCPBUGS-54479: Periodic sync of OKD samples #621
Full changelog

cluster-storage-operator

STOR-1878: Run operators without root user control #570
Full changelog

console

OCPBUGS-53167: Re-enable guided tour in admin perspective #14928
CONSOLE-4520: Further base token cleanup and fixes #14909
OCPBUGS-54265: Remove extra div in MultiTabListPage #14906
OCPBUGS-54477: Remove char limit for favourite names #14924
OCPBUGS-47723: always show ‘Plugin available’ button on CSV list no matter plugin enabled or not #14655
NO-JIRA: adding new reference plugin: kuadrant #14361
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPBUGS-54339: UPSTREAM: 129808: e2e: bump port-forward timeout #2257
Full changelog

hypershift

CNTRLPLANE-303: [CPOv2 Refactor] Refactor ignition into cpov2 #5868
NO-JIRA: Create token Secret for dev cluster explicitly #5523
OCPBUGS-52984: annotate AWSEndpointServices with HostedClusterAnnotation #5960
OCPBUGS-53403: Remove synced annotations from HCP when they are removed from HC #5879
NO-JIRA: set default expriationDate tag in AWS if not set #5951
NO-JIRA: chore: Remove Azure autorest dependency #5917
CNTRLPLANE-378: Run kas-bootstrap binary for cpov2 #5947
NO-JIRA: Add version check for CAPI flag #5911
ARO-15578: add disable cluster capabilities flag to cluster create cmd #5775
NO-JIRA: chore: Bump CAPZ to v1.19.1 #5916
CNTRLPLANE-378: Move bootstrap apply bash into kas-bootstrap binary #5937
NO-JIRA: Disabling flaking EnsureKubeAPIDNSName E2E test #5939
NO-JIRA: Remove ppc64le from HO tekton files #5924
CNTRLPLANE-366: Create Azure role assignments in the Azure HC CLI #5896
OCPBUGS-53904: bump golang-jwt v4 and v5 #5904
CNTRLPLANE-350: add NodePool minor version compatibility check #5873
NO-JIRA: fix(api): Adjust CRD validation rules to account for ignition server … #5782
ART-11792: update go mod dependency for konflux #5918
CNTRLPLANE-112: Enable MIv3 for azure file csi driver #5915
NO-JIRA: Revert “OCPBUGS-50915: Disable capi machineset preflights” #5910
CNTRLPLANE-112: Fix CNCC RG Permissions & RBAC #5903
NO-JIRA: Remove TODO comment for AzureProviderConfig #5838
OCPBUGS-46379: Kas bootstrap bin #5871
CNTRLPLANE-111: Enable MIv3 for CAPZ #5825
ARO-15229: add e2e tests for image registry capability #5810
CNTRLPLANE-336: [CPOv2 Refactor] Refactor konnectivity-agent into cpov2 #5856
OCPBUGS-50915: Disable capi machineset preflights #5653
CNTRLPLANE-111: Authenticate to Azure only once in CPO #5862
OCPBUGS-52190: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #5876
NO-JIRA: Make serve-containerised in docs not defaulting to a running Docker container when Podman is installed #5859
OCPBUGS-53263: Fixed cpov2 reconciliation making no-op calls to api-server #5861
OCPBUGS-53462: Check for availability of individual catalog images #5881
NO-JIRA: Improve error output msg for Azure CLI role cmds #5877
STOR-2281: Remove csi-snapshot-validation-webhook #5776
CNTRLPLANE-111: Fix KMS Azure credentials mount path #5857
CNTRLPLANE-348: Konflux tagged releases #5869
OCPBUGS-53407: chore(deps): update konflux references #5846
NO-JIRA: feat(builds): Add area labels and OWNERS #5872
OCPBUGS-52424: Set shutdown watch termination grace period on kube-apiserver #5760
NO-JIRA: Add Azure scheduler doc to mkdocs #5865
CNTRLPLANE-342: Add missing area for support #5864
OCPBUGS-53050: Handle multiple mirror entries for source #5827
OCPBUGS-52331: CPO v2: rollout workloads on any changes to mounted configmaps/secrets #5767
NO-JIRA: openstack: revert OpenStackImageRetentionPolicy + use a unique image name per Hosted Cluster #5853
Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure” #5860
OCPBUGS-53083: e2e: detect leader election failure in restarted pods #5830
CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure #5837
METAL-1240: Fix kube-controller-manager and openshift-route-controller-manager services’ ipFamilies wrt PreferDualStack policy #5829
OSASINFRA-3492: feat(openstack): leverage ORC to manage the release image #5139
CNTRLPLANE-325: rootless containerized builds #5835
CNTRLPLANE-265: Enable gosimple, govet, and errcheck in golangci-lint #5759
CNTRLPLANE-111: Fix Azure KMS SecretProviderClass volume name #5820
NO-JIRA: Bump msi-dataplane dependency #5796
OCPBUGS-52985: filter watch events for HO AWSEndpointService reconciler #5818
NO-JIRA: Update Konflux references #5799
ARO-14354, ARO-14355, ARO-14356: introduce image registry capability behind feature gate #5456
OCPBUGS-52819: CPO Overrides for OCPBUGS-48519 #5808
PODAUTO-324: PODAUTO-325: Allow autonode to run upstream karpenter core e2e tests #5680
OCPBUGS-51364: fix oc patch command on doc #5807
NO-JIRA: Fix-dependabot-bumps #5797
OCPBUGS-52655: Add flag to set etcd storage size #5795
CNTRLPLANE-111: Fix KMS MIv3 Issues #5793
NO-JIRA: Disable GitHub Actions #5812
OCPBUGS-52821: stop using dev mode for loggers #5801
HOSTEDCP-2237: Auto approve Karpenter serving CSRs #5708
OLS-1370: Add full aws permission list and point to it from “getting started” #5746
NO-JIRA: CPOv2 token-minter abstraction #5769
NO-JIRA: test/e2e: skip WaitForImageRollout in executeNodePoolTest on newer releases #5778
OCPBUGS-52323: Make managed-trust-bundle optional #5763
CNV-57648: document how to configure descheduler #5779
NO-JIRA: Remove WI step for cluster-image-registry-operator #5777
OTA-1405: Add the ClusterVersionOperator API #5569
OCPBUGS-52419: e2e: don’t call WaitForImageRollout in executeNodePoolTest #5771
OCPBUGS-50518: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5475
CNTRLPLANE-263: Remove unused CAPZ CRDs from HyperShift install #5756
NO-JIRA: speed up image builds #5766
NO-JIRA: go.mod updates from Konflux #5761
OSASINFRA-3733: (follow-up) deploy ORC on release payload >= 4.19 #5749
OCPBUGS-52223: refactor aws identity health check into new controller #5751
OCPBUGS-50523: Fix audit-logs container to properly handle SIGTERM #5491
NO-JIRA: Remove issues-exit flag for golangci-lint #5762
CNTRLPLANE-111: Enable MIv3 for CP/CCM in managed Azure HCP #5755
NO-JIRA: Add CPO container sync check to GitHub Actions #5753
OCPBUGS-52226, OCPBUGS-52227: CVE Fix for potential denial of service in upstream libs #5750
NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 #5719
HOSTEDCP-2242: [CPOv2 Refactor] Refactor image-registry-operator #5676
NO-JIRA: chore(deps): update konflux references #5527 #5747
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5424
OCPBUGS-51364: Remove scaledown APIs from Backup/Restore procedure #5745
CNTRLPLANE-244: Enable initial GitHub Action jobs #5706
OCPBUGS-49825: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5551
OSASINFRA-3733: deploy ORC on release payload >= 4.19 #5710
CNTRLPLANE-112: Enable MIv3 for azure disk csi driver #5703
HOSTEDCP-2262: Karpenter openshift ec2class #5600
NO-JIRA: chore(owners): Update IBM reviewers #5717
CNTRLPLANE-111: Enable MIv3 for Azure KMS #5704
NO-JIRA: doc: openstack: update go version #5716
CNTRLPLANE-112: Enable image registry to use managed identity v3 #5655
HOSTEDCP-2246: [CPOv2 Refactor] Refactor OLM #5663
HOSTEDCP-2247: [CPOv2 Refactor] Refactor control-plane-pki-operator #5694
OCPBUGS-51007: test/e2e: fix WaitForImageRollout to actually wait on upgrade case #5679
NO-JIRA: Bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.5 #5700
OCPBUGS-50907: Propagate Reason for Available condition from HCP to HC #5650
NO-JIRA: Reenable ibm network cel #5698
NO-JIRA: ho: watch AWSEndpointServices #5674
NO-JIRA: test/e2e: use test name for HC name #5665
OSASINFRA-3719: openstack: ORC deployed out of tree #5584
CNTRLPLANE-35: skip EnsureValidatingAdmissionPoliciesExists/EnsureVal… #5672
NO-JIRA: Update-precommit-docs #5678
HOSTEDCP-2248: [CPOv2 Refactor] Refactor snapshotcontroller #5632
OCPBUGS-50860: Skip hashing configuration.image.imageStreamImportMode #5651
NO-JIRA: Add omitempty to CredentialsSecretName #5656
OCPBUGS-51039: return marshalled dataplane even if assignprincipals is false #5610
HOSTEDCP-2241: [CPOv2 Refactor] Refactor ingress operator #5602
CNTRLPLANE-220: Update “Create an Azure Hosted Cluster on AKS” docs #5652
CNTRLPLANE-238: Bump k8s to v1.32.2 and CAPZ to v1.18.0 #5623
NO-JIRA: Fix hc hcp cel inconsistency #5661
NO-JIRA: add secretproviderclass to dump #5654
OCPBUGS-50606: Fix kubeadmin login failure #5631
NO-JIRA: bump Cluster API Provider OpenStack to v0.12 (for 4.19 only) #5622
NO-JIRA: update hypershift azure roles to use ids #5657
CNTRLPLANE-112: Add UserAssignedIdentityCredentials environment variable for OpenShift operators #5621
NO-JIRA: CPOv2 refactor self service sa kubeconfig #5607
CNTRLPLANE-111: Move CPO to use UserAssignedIdentityCredentials #5596
HOSTEDCP-2244: Refactor machine approver into cpov2 #5594
OCPBUGS-50578: add region to AWS creds passed to operators managed by CPO #5595
OCPBUGS-50014: Restart HCP on stale serving certs #5601
NO-JIRA: Remove ARO HCP Managed Identity Tech Preview #5604
HOSTEDCP-2171: add e2e test for aro scheduler #5568
NO-JIRA: Bump Golang to 1.23 #5466
NO-JIRA: Ensure ‘pull-secret’ is set properly on v2 serviceAccounts #5609
NO-JIRA: Bump to CAPI v1.9, CAPA v2.7 #5611
HOSTEDCP-2255: e2e: ensure custom tolerations on all HCP pods #5543
HOSTEDCP-2243: Refactor dns operator into cpov2 #5593
PODAUTO-318: Implement HCP karpenter deletion #5540
NO-ISSUE: docs/content/how-to/disaster-recovery/etcd-recovery: Explicitly delegate to admin #5515
NO-JIRA: Bump the golang-dependencies group with 2 updates #5582
PODAUTO-302: Relax cel rule for karpenter role to be required in an ec2NodeClass #5581
NO-JIRA: Remove haproxy generation error for normal flow #5583
OCPBUGS-49913: Honor proxy vars in the util insecure http client #5572
CNTRLPLANE-221: specify region in AWS credentials for operator-roles #5571
NO-JIRA: e2e: combine OpenStack advanced tests within one Nodepool #5579
OCPBUGS-49609: Split binary builds #5499
NO-JIRA: Apply additional labels to CollectProfilesCronJob #5580
HOSTEDCP-2231: Remove cloud connection, Set Transit Gateway as default #5293
CNTRLPLANE-209: Add shared-ingress docs #5564
HOSTEDCP-2257: Vendor karpenter CRDs #5522
ARO-14442: introduce capabilities api #5554
NO-JIRA: add optional step for creating release image using cluster b… #5578
CNTRLPLANE-109: Update Azure API for Phase 3 Managed Identity Work #5556
NO-JIRA: add watch permission to SecretProviderClass in ARO #5565
NO-JIRA: Update cpov2 docs #5560
NO-JIRA: e2e: don’t skip mirrorconfigs on OSP #5441
OCPBUGS-49791: Use /livez for kubernetes scheduler liveness probe #5546
CNTRLPLANE-111: Move secretproviderclass.go to support folder #5559
OCPBUGS-49838: Watch NodePools in HostedCluster controller #5553
HOSTEDCP-2120: Enable EnsureCustomLabels e2e test #5549
OCPBUGS-49724: remove passed in image matching desired image check fr… #5524
OCPBUGS-48619: Add HostedCluster additional trustbundles to konnectivity-https-proxy #5525
HOSTEDCP-2040: Add TestCreateClusterCustomConfigV2 #5401
OCPBUGS-49748: Duplicate hostDevices.name when hostDevices.deviceName has multiple types. #5535
OCPBUGS-49804: Revert “HOSTEDCP-2120: Enable EnsureCustomLabels e2e test” #5547
HOSTEDCP-2259: CLI: enable secure proxy creation #5526
CNTRLPLANE-172: cli: azure: allow assigning custom HCP roles #5541
OCPBUGS-49686: Add ObjectEncoding to the Azure API and SecretProviderClass Reconciliation in the CPO #5505
NO-JIRA: Bump github.com/Azure/go-autorest/autorest from 0.11.29 to 0.11.30 in the azure-github-dependencies group #5518
HOSTEDCP-2120: Enable EnsureCustomLabels e2e test #5511
OCPBUGS-48688: Remove Credentials from the Azure API #5510
HOSTEDCP-2249: Reconcile karpenter user-data secret programmatically instead of creating a mock nodePool #5439
NO-JIRA: Bump the misc-dependencies group with 6 updates #5519
MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #5508
OCPBUGS-49611: Konnectivity: add agent readiness #4829
NO-JIRA: cpov2: switch to resource.k8s.io/v1beta1 after kube 1.32 rebase #5514
HOSTEDCP-2226: Add ValidatingAdmissionPolicy for karpenter EC2NodeClass CRD #5395
HOSTEDCP-2256: [CPO Refactor] Delete component and its resources when predicate changes to false #5509
HOSTEDCP-2245: [CPO Refactor] Refactor cluster-node-tuning-operator #5473
NO-JIRA: add assignServicePrincipal check before assignign roles to WI #5498
HOSTEDCP-1706: feat: add a metric for cluster size override annotation #4825
NO-JIRA: Add instructions for ccoctl and fix minor issues #5490
OCPBUGS-48688: Add Tenant ID to Azure API & Remove Credentials from CPO #5495
OCPBUGS-48519: fix overwriting PKI operator HCP conditions #5493
HOSTEDCP-2169: Add aro scheduler #5417
OCPBUGS-48532: Fix IsProgressing condition in HostedClusters #5487
NO-JIRA: switch to resource.k8s.io/v1beta1 after kube 1.32 rebase #5496
CNTRLPLANE-187: Remove MachineIdentityID from Azure HyperShift API #5488
OCPBUGS-49370: openstack: update CAPI provider deployment spec #5483
NO-JIRA: Fix a few bugs in Azure Upstream Docs #5489
NO-JIRA: chore(deps): update konflux references (main) #5476
NO-JIRA: Update managed Azure/ARO HCP contrib and upstream documents #5474
HOSTEDCP-2061: [CPO Refactor] Refactor cluster-network-operator #5460
OCPBUGS-48626: openstack: add DNS option to CLI #5446
NO-JIRA: Bump google.golang.org/grpc from 1.69.4 to 1.70.0 in the misc-dependencies group #5472
NO-JIRA: Sync v2 code #5467
CNTRLPLANE-173: Assign known ARO roles for CP IDs for ARO HCP #5469
NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.5.0 to 1.6.0 in the azure-github-dependencies group #5471
PODAUTO-303: Re enable karpenter e2e #5462
OCPBUGS-48688: Remove client secret references now Workload Identity is supported #5455
OCPBUGS-48794: Adds contributor role over VNET for Cloud Provider #5468
HOSTEDCP-2232: Destroy DHCP Server before PowerVS Cloud Instance deletion #5227
NO-JIRA: [kubevirt] Skip KubeVirtAdvancedMultinetTest for v4.14 and below #5449
NO-JIRA: Remove OpenStack workaround for Ingress Floating IP #5176
OCPBUGS-48758: Revert #5404 “PODAUTO-303: Add the most basic e2e for autoNode via Karpenter” #5461
HOSTEDCP-2176: Enable unused & ineffassign linters in golangci-lint #5418
OCPBUGS-48708: correct aro azureFile config and permissions #5453
NO-JIRA: add command for retrieving user account id for AKS dev env s… #5436
PODAUTO-303: Add the most basic e2e for autoNode via Karpenter #5404
NO-JIRA: Bump the misc-dependencies group with 8 updates #5450
HOSTEDCP-1542: Implement Workload Identity in Azure for Data Plane Components Part 4 #5361
HOSTEDCP-2062: [CPO Refactor] Refactor kubevirt csi driver #5447
NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity #5440
HOSTEDCP-1971: HyperShift operator upgrade test for rollout validation #4999
NO-JIRA: Update Konflux references #5423
Revert “Revert “CNTRLPLANE-26: Disable building HO for s390x platform on PR”” #5422
OCPBUGS-48510: Allow ARM64 arch deployment on None platform type #5403
NO-JIRA: Fix dev docs for managed azure #5411
NO-JIRA: Drop openstack create rejection validation #5410
HOSTEDCP-1542: Implement Workload Identity in Azure for Data Plane Components Part 3 #4587
NO-JIRA: Add GOWORK=off to clients in Makefile #5421
OCPBUGS-45511: Compare contents of user-ca-bundle-config.yaml to the correct configmap #5420
NO-JIRA: doc/openstack: improve index layout #5412
AUTH-482: set required-scc for openshift workloads #5310
OCPBUGS-48506: Set ownership annotations for TLS artifacts #5355
NO-JIRA: add information about checking HO and e2e are from main on latest release branch #5419
CNTRLPLANE-129: Move Microsoft Repo to CI dir in e2e dockerfile #5416
Revert “CNTRLPLANE-26: Disable building HO for s390x platform on PR” #5406
NO-JIRA: chore(deps): update konflux references (main) #5383
OCPBUGS-44960: (OSASINFRA-3643) bump k8s and dependencies #4927
NO-JIRA: Bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 in /hack/tools #5400
NO-JIRA: Bump golang.org/x/net from 0.31.0 to 0.33.0 in /hack/tools #5399
NO-JIRA: test/e2e: move pre-removal metrics validation out teardown path #5234
NO-JIRA: Add make lint-fix to pre-commit hook #5387
NO-JIRA: Enforce EnsurePSANotPrivileged for 4.19 and later #5362
NO-JIRA: Update Create Azure HC document #5396
OCPBUGS-48216: use rm -f in all CVO cmds for idempotency #5390
NO-JIRA: Bump the golang-dependencies and github.com/Azure/azure-sdk-for-go/sdk/azcore #5373
HOSTEDCP-2233: [CPO Refactor] Refactor cluster-storage-operator #5312
NO-JIRA: docs/nit: fix missing spaces in md breaking rendered html #5392
OSASINFRA-3670: doc/openstack: etcd on LVM #5391
NO-JIRA: cmd: dump: include ValidatingAdmissionPolicies in guest cluster dump #5165
HOSTEDCP-1542: Introduce e2e flags for Workload Identity #5363
NO-JIRA: e2e: don’t check the KV’s LiveMigratable condition for <4.17 #5389
OCPBUGS-48152: Fix mirror reference image name when ID is set #5353
OSASINFRA-3681: improve the doc on OpenStack #5243
Revert “OCPBUGS-45265: Use /livez/ping endpoint rather than /version” #5381
NO-JIRA: test/e2e: improve VAP test assertions #5375
OCPBUGS-45265: Use /livez/ping endpoint rather than /version #5211
NO-JIRA: Reoncile karpenter aws creds before running the operator #5360
NO-JIRA: Bump golang.org/x/crypto and golang.org/x/net #5357
HOSTEDCP-2176: Introduce golangci-lint to make verify and only turn on gci linter #5322
CNTRLPLANE-68: add flags for setting azure marketplace images in e2e #5356
HOSTEDCP-2234: Karpenter auto machine approver #5349
OCPBUGS-47715: fix disconnected via CLI #5341
chore(deps): update dependency mkdocs-material to v9.5.49 #5247
NO-JIRA: Move oauth kubeadminsecret hash annotation logic from HCCO to CPO #5286
HOSTEDCP-2199: [CPO Refactor] Refactor cloud-credential-operator #5203
NO-JIRA: Update Konflux references (main) #5325
OCPBUGS-46354: fix(ho): Add all supported config schemas for NodePool NTO reconcile #5280
NO-JIRA: Revert E2E test change which validates the CVO Image propagation #5323
NO-JIRA: Fix oauth-v2 and kcm-v2 #5306
CNTRLPLANE-26: Disable building HO for s390x platform on PR #5314
OCPBUGS-46529: kubevirt, Don’t break on hostname NodePort.Address #5313
CNTRLPLANE-25: Fix valid release image update issue #5316
OCPBUGS-46483: Correctly Reconcile CSO CSI Secrets for Managed Azure Deployments #5311
OCPBUGS-43083, OCPBUGS-44655: Fix IPv6 Disconnected HCP deployments #5168
HOSTEDCP-2220: Autonode karpenter #5279
CNTRLPLANE-10: Konflux build CPO only when needed #5287
NO-JIRA: Only use public IPs for 4.16 and above #5304
OSASINFRA-3685: openstack: tag CAPI resources with InfraID #5262
STOR-2136: Give delete permissions to snapshot-operator role #5277
NO-JIRA: chore(deps): update konflux references (main) #5288
NO-JIRA: set diskStorageAccountType in aks e2e #5273
CNTRLPLANE-9: Red Hat Konflux update control-plane-operator-main #5282
OCPBUGS-44314: Consistently look up and dial cloud API hostnames #5281
OCPBUGS-45595: Updating ose-hypershift-container image to be consistent with ART for 4.19 #5272
NO-JIRA: test/e2e: detect rapidly updating deployments #5229
OCPBUGS-45322: consolidating upgradingConfig/Version nodepool status update from CAPI controller to Conditions controller #5222
OCPBUGS-46342: Allow ARM64 arch deployment on Agent platform #5276
OCPBUGS-44438: Remove non-matching feature-gated CVO manifests from payload #5093
NO-JIRA: Fix expected AWS HC conditions during e2e tests #5266
NO-JIRA: Allow multiple yaml def in a file for pre-commit #5271
HOSTEDCP-2203: Create e2e clusters with public IP instances only #5269
NO-JIRA: Fix spelling mistakes from PR #5265 #5270
HOSTEDCP-2215: Expand pre-commit hooks to check on commit and push #5245
HOSTEDCP-2203: Add support for public only AWS clusters #5242
NO-JIRA: contrib: update route53 zone cleaning utility #5265
NO-JIRA: Fix pre-commit hook issues #5264
HOSTEDCP-2193: documenting –managed-identities-file flag #5199
NO-JIRA: Update Konflux References and Perform Migration #5260
HOSTEDCP-2206: Improve Unit Test Runtime #5257
OCPBUGS-42320: Prevent IgnitionServer from flooding the API server with patch requests #5220
NO-JIRA: Remove SP creation/deletion in the HyperShift CLI #5240
NO-JIRA: Relax networking cel validation for IBMCloud #5258
NO-JIRA: openstack/e2e: allow to change AZ name #5138
OCPBUGS-42338: Update KCM node monitor grace period #5166
NO-JIRA: e2e: followup cleanup for OpenStack Manila #5221
HOSTEDCP-2181: bump base images in dockerfiles to 4.19 #5195
HOSTEDCP-1958: Integrate codespell in Makefile #4700
OCPBUGS-44236: Use system trust bundle in CPO IDP https client #5241
HOSTEDCP-2204: adding contributor role to nodepoolManagement SP #5244
HOSTEDCP-2201: add DNS RG to contributor role assignments and add new flag for skipping role assignments #5230
NO-JIRA: openstack/doc: add a requirement for Octavia #5223
NO-JIRA: updating ocp release task notes #5239
OCPBUGS-44967: Pass only the certificate name for CNO deployment #5216
OCPBUGS-45182, OCPBUGS-45189: e2e/openstack: adjustments for missing manila apps & pods #5202
OCPBUGS-42434: Enable Managed Identity w/ Certificates in HyperShift Control Plane Components #5160
HOSTEDCP-2197: Fix TLS config documentation for disconnected #5212
NO-JIRA: cpov2: revert oauth reconciliation #5217
OCPBUGS-44968: Reconcile SecretProvider for CSO on ARO HCP #4904
NO-JIRA: chore(deps): update konflux references (main) #5205
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.5.46 (main) #5206
HOSTEDCP-2193: allow reuse of SP for e2e #5194
OCPBUGS-44380: Reconcile proxy CA bundle into hosted cluster #5197
HOSTEDCP-2075: Dns cel e2e #5171
OCPBUGS-44934: Fix error message when kas is route and hostname is not set #5192
NO-JIRA: CPO V2 cleanup #5188
HOSTEDCP-2075: Nodeport address cel #5172
OCPBUGS-44967: Reconcile SecretProvider for CNCC on ARO HCP #4903
OCPBUGS-44910: openstack: don’t reconcile image registry config during bootstrap #5178
OCPBUGS-44957: Use fleet manager configmaps to determine placeholder pod node antiaffinity #5191
OCPBUGS-44698: Create AWS clients on every reconcile instead of at initialization #5179
OCPBUGS-44964: Reconcile SecretProviderClass for Ingress on ARO HCP #4884
Full changelog

ibm-vpc-block-csi-driver-operator

STOR-2252: Bump all deps for 4.19 #141
Full changelog

installer-altinfra, installer-artifacts

OCPBUGS-54232: Azure Move BYO VNET SG creation to InfraReady #9603
OCPEDGE-1701: fix: update tnf validation to account for tna install config #9629
OCPBUGS-52473: aarch64 kernel is no longer zipped #9617
NO-JIRA: Add jcapiitao to CoreOS approvers and reviewers #9631
OCPBUGS-53067: Updating the file names in generic.ins file for s390x ABI for pxe Artifacts #9586
Full changelog

machine-config-operator

OCPBUGS-54570: Drop broken feature which statically configures DHCP addresses #4965
CORENET-5524: Modify regex for ipsec showstates command #4959
OCPBUGS-49894: Ensure proxy config exists when reverting from OCL to non-OCL #4833
OCPNODE-3020: Remove cgroupv1 references #4964
Full changelog

monitoring-plugin

OU-724: remove dependency on deleted image #375
OU-660: Remove console CSS and Align with Patternfly components #362
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-45741: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.19 #2380
Full changelog

powervs-block-csi-driver-operator

NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #83
Full changelog

tests

OCPBUGS-53249: feat: support platform type external #29623
MCO-1631: Remove “[sig-arch][Early] CRDs for openshift.io should have a status in the CRD schema” #29643
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github