Back to index
4.9.0-0.ci-2023-09-09-042952 Download the installer for your operating system or run
oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.9.0-0.ci-2023-09-09-042952 Tests:
Blocking jobs Informing jobs Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Created: 2023-09-09 04:38:29 +0000 UTC
Image Digest: sha256:1460888acc136dafe3be0ac437b72f1223bff2188eee6816f0ae7013ee458b43
Components
New images
Rebuilt images without code change
OCPBUGS-31101 : UPSTREAM: 1966: Add missing instances to instance store volumes table #261 OCPBUGS-30468 : CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #259 OCPBUGS-23260 : UPSTREAM: 1919: Add reserved-volume-attachments #260 STOR-1575 : Rebase to v1.26.1 for OCP 4.16 #257 OCPBUGS-25500 : UPSTREAM: 1877: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #252 STOR-1688 : Chore: add .snyk file to ignore false positives #248 OCPBUGS-25549 : Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #250 OCPBUGS-25197 : UPSTREAM: 1858: Bump otelhttp to fix CVE-2023-45142 #249 OCPBUGS-25126 : Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #247 OCPBUGS-24867 : Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #246 OCPBUGS-24072 : Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #245 STOR-1400 : Rebase to v1.25.0 for OCP 4.15 #244 OCPBUGS-21593 : CVE-2023-44487: bump golang.org/x/net@v0.17.0 #237 OCPBUGS-19101 : Updating ose-aws-ebs-csi-driver images to be consistent with ART #235 OCPBUGS-16491 : UPSTREAM: <drop>: Bump goproxy to resolve CVE-2023-37788 #233 OCPBUGS-17280 : UPSTREAM: 1711: Bump golang.org/x/net/html to fix CVE-2023-3978 #229 OCPBUGS-16783 : Chore: Update OWNERS and OWNERS_ALIASES #228 STOR-1167 : Rebase to v1.18.0 for OCP 4.14 #222 OCPBUGS-10816 : Volume unmount repeats after successful unmount, preventing pod delete #224 Updating ose-aws-ebs-csi-driver images to be consistent with ART #220
OCPBUGS-12297 : UPSTREAM: 1505: bump go + golangci-lint #223 Updating ose-aws-ebs-csi-driver images to be consistent with ART #218
STOR-1019 : Pin k8s.io/dynamic-resource-allocation to v0.26.1 #217 OCPBUGS-6355 : Rebase to v1.15.0 for OCP 4.13 #215 Updating ose-aws-ebs-csi-driver images to be consistent with ART #214
UPSTREAM: <carry>: Remove .github files #212
STOR-860 : Rebase to v1.11.4 for OCP 4.12 #206 OCPBUGS-1574 : UPSTREAM: 1398: Add resolver to handle custom endpoints #208 Fix older dockerfile #207
Updating ose-aws-ebs-csi-driver images to be consistent with ART #202
Updating ose-aws-ebs-csi-driver images to be consistent with ART #201
Bug 2074279 : UPSTREAM: 1210: Update golang.org/x/crypto for CVE-2022-27191 #200 Bug 2050173 : Fix build on ARM after rebase #198 Updating ose-aws-ebs-csi-driver images to be consistent with ART #197
Rebase v1.5.1 #195
Updating ose-aws-ebs-csi-driver images to be consistent with ART #192
Full changelog
AGENT-863 : node-joiner cluster script #8242 OSASINFRA-3434 : Use cluster-api-provider-openstack v0.10 and CAPO v1beta1 manifests #8021 CORS-2893 : capi-aws: implement preserveBootstrapIgnition #8313 OCPBUGS-4466 : Add check for compact-cluster install on GCP, AWS & Azure #8226 CORS-3250 : images/altinfra: add etcd/kas binaries from containers #8309 CORS-2899 : AWS/CAPI Local Zones network provisioning #8173 OCPBUGS-32981 : baremetal: template the number of master nodes #8316 OCPBUGS-32519 : Fix appliance CI jobs #8297 OCPBUGS-31017 : fix ec2:DisassociateAddress requirement #8296 OCPBUGS-32292 : Remove deprecated replace directives #8271 no-jira: PowerVS: Update CAPI IBMcloud to 188d9e99 #8310
CORS-3076 : azure: Add additional tags to AzureCluster #8301 CORS-3294 : CAPA health check configuration for control plane ELBv2 #8223 CORS-3470 : capi/aws: add custom endpoint support. #8306 MULTIARCH-4111 : Updating CI image to include qemu-kvm #8312 MULTIARCH-4616 : Power VS: Add ServiceEndpoints for endpoint overrides #8292 no-jira: cluster-api/aws: bump capa to latest version #8288
OCPBUGS-32306 : GCP Destroy find regional and global addresses #8275 OCPBUGS-32517 : Ensure worker BMH’s get unpaused #8299 OCPBUGS-32591 : GCP Destroy target pools fix misleading log #8298 CORS-3260 : CAPI: Create GCP Internal LB #8151 OCPBUGS-15845 : Check host for compatibility with target cluster config #7566 no-jira: bump golangci lint to 1.54.2 #8291
OCPBUGS-32425 : Test for the presence of “provisioned” server #8289 SPLAT-1585 : capv - allow no auth to vcenter #8276 SPLAT-1208 : replace UPI terraform with powercli #7699 OCPBUGS-29765 : Fills CIS or DNS CRN in Metadata, never both #8057 OCPBUGS-32042 : fix usage of addtionalTrustBundle field #8253 METAL-872 : Remove terraform libvirt provider #8160 MULTIARCH-4549 : Logic for creating private DNS records for PowerVS CAPI #8246 OCPSTRAT-915 : Nutanix capi support #8211 OCPBUGS-32133 : GCP: Fixing GCP Bootstraping #8248 METAL-939 : baremetal: monitor bootstrap process #8181 no-jira: gather: replace deprecated errors package #8280
no-jira: azure: Update capz version to 1.14.2 #8268
OCPBUGS-31017 : aws: add ec2:DisassociateAddress permission #8247 OCPBUGS-31563 : sdk/aws: add ssh security group rule for compute #8229 MULTIARCH-4550 : Power VS: Use a custom resolver when publish strategy is Internal #8243 MULTIARCH-2678 , OCPBUGS-14478 : Refactored updateIgnitionImg to use NewIgnitionImageReader from isoeditor to support s390x #8205 CORS-3050 : capi/aws: copy AMI to target region, if needed #8157 SPLAT-1592 : bump capv to v1.9.3 #8267 OCPBUGS-30774 : always save serial logs if they were gathered #8263 CORS-3261 : GCP cluster api add disk encryption #8222 CORS-3419 , OCPBUGS-30941 : Include baremetal IPI in openshift-installer #8161 no-jira: PowerVS: Open port 10258 #8261
OCPBUGS-31711 : AWS update explain docs #8258 OCPBUGS-27965 : escape ‘%’ in proxy settings #8265 OCPBUGS-32174 : save correct bootstrap public IP #8264 CORS-3420 : Remove libvirt platform from openshift-baremetal-install #8244 no-jira: capi: replace deprecated --metrics-bind-addr arg #8251
CORS-3436 : capi: save log output to file #8218 no-jira: PowerVS: Add destroy Power Server subnets #8260
OCPBUGS-32091 : Add Top-level Context for Create Commands #8063 CORS-3063 : Support control plane disk encryption #8124 CORS-3269 : Azure CAPI Ignite Bootstrap #8255 no-jira: PowerVS: add AddIPToLoadBalancerPool #8257
SPLAT-1293 : Bump API version to promote vSphereStaticIPs from TechPreview. #7943 no-jira: capi/aws: bump controller log level to debug #8252
CORS-3254 : Update google.golang.org/api/cloudresourcemanager library version #8213 MULTIARCH-4111 : Update the CI image with virt-install #8259 CORS-3218 : GCP Remove the use case of users passing contents for json secret data #8234 OCPBUGS-27844 : Fix task for attaching IPv6 subnet to router. #8087 CORS-3270 : azure: tag installer-created LB resources #8236 OCPBUGS-31813 : AWS: bump CCO for permission fix #8233 CORS-3289 , CORS-3308 , CORS-3426 : Bump CAPA provider for various fixes #8232 OCPBUGS-32041 : update RHCOS 4.16 bootimage metadata to 416.94.202404101051-0 #8256 no-jira: docs: Fix typos #8245
no-jira:PowerVS: Wait for IPs #8239
CORS-3075 : Allow for installation in existing resource group #8123 CORS-3446 : Add instructions for obtaining correct binary #8230 AGENT-858 : Agent day2 ignition services #8093 CORS-3418 : images: move installer images to static builds #8215 CORS-3417 : capi/aws: support ignition proxy and CA bundle #8170 OSASINFRA-3365 : clusterapi: Add worker asset to PreProvision #8237 HIVE-2476 : OpenStack.MachineSets(): Allow nil Replicas #8227 CORS-3195 : Azure CAPI Supplemental Load Balancers #8115 no-jira: PowerVS: Set VPC service region #8217
OCPBUGS-12890 : Create bucket, signed url and use proxy info for installs #8056 no-jira: PowerVS: Fix COS region and VPC subnets #8219
OCPBUGS-31546 : azure: use filter when listing SKUs #8134 CORS-3245 : Azure CAPI rhcos image #8018 AGENT-874 : use AddNodesConfig asset #8080 no-jira: this clusterprofile isn’t actually used #8214
no-jira: pkg/asset/machines: remove static ip log lines #8190
CORS-2895 : aws/capi: setting zones to when creating cluster #8156 CORS-3071 : Create DNS entries for CAPZ implementation #8045 no-jira: PowerVS: Fix CAPI created service instance case #8212
AGENT-857 : Agent day2 use clusterinfo #8009 CORS-3431 : CAPI: Add firewall rule for worker nodes #8200 OSASINFRA-3421 : OpenStack: Customizable clientOpts for CheckNetworkEx… #8209 no-jira: infra: aws: move SDK provisioner to its own dir #8194
AGENT-868 : Generate ECDSA public private keys and pass it to assisted service #8105 MULTIARCH-4096 : PowerVS: Generate the cluster assets #8116 CORS-2901 , CORS-3428 : pkg/types/aws: limit additionalSecurityGroups to 10 #8184 OCPBUGS-27848 : If host is offline or disconnected don’t check ver #8206 METAL-855 : baremetal: remove ironic-inspector #8128 CORS-3280 : Bump cluster-api-provider-gcp to v1.6.0 #8153 OSASINFRA-3420 : openstack: Decouple OpenStack API calls from Machine generation #8187 CORS-2898 : capi/aws: configure IMDS #8152 CORS-2905 : capi/aws: destroy CAPA resources #8179 no-jira: capi/aws: reuse GenerateMachines for bootstrap #8193
OCPBUGS-31209 : CAPG - Fix setting ServiceAccount role bindings for GCP #8192 OCPBUGS-31050 : openstack: Honour worker server group policy #8180 OCPBUGS-26052 : aws: altinfra: fix role creation in C2S #7871 OCPBUGS-15941 : ABI - Validate release image arch, add cpu_architectures to RELEASE_IMAGES #7349 CORS-3256 : GCP destroy updates for CAPG #8113 Bug OCPBUGS-30154: OpenStack: enable 30000:32767 nodePort IPv6 traffic #8195
OCPBUGS-30882 : GCP capg distribute instances across zones #8176 CORS-3142 : capi: write manifests to disk during create manifests #8166 OCPBUGS-28870 : IBMCloud: Restrict CIS and DNS Service lookup #7987 OCPBUGS-31013 : Fix vsi image missing #8177 CNF-10170 : bootkube.sh: Render kernel boot arguments for SNO #8099 CORS-2894 , CORS-3051 : Create DNS resources and PHZ for CAPI/aws #8142 CORS-3417 : capa bump fallout #8169 CORS-3307 : add ‘A2’ as tested machine types on GCP #8148 CORS-2902 : capi/aws: add ext-LB as CAPA secondary LB #8149 CORS-3213 : Tweak GCPCluster Failure Domain Logic #8017 CORS-3215 : capi: implement bootstrap gather #8036 NO-JIRA: OWNERS: pkg/infrastructure/openstack #8165
OPNET-476 : GA Load balancer feature for vSphere and Baremetal #8101 no-jira: Power VS: Fix comment on default for wait_for_workspace #8158
OPNET-476 : GA Load balancer feature for Nutanix #8102 CORS-3303 : GCP: Add me-central2 (Dammam, Saudi Arabia, Middle East) region to the survey as supported region #8132 SPLAT-1390 : remove feature gate for vSphere control plane machinesets #7908 CORS-2892 : capi/aws: add user tags to CAPA cluster #8150 OCPBUGS-30836 : Power VS: Fix wait_for_workspace #8145 OCPBUGS-25462 : Validate control plane replicas #8082 OCPBUGS-30642 : pin google oauth2 version #8133 OCPBUGS-30600 : update RHCOS 4.16 bootimage metadata to 416.94.202403071059-0 #8121 CORS-3257 : Create GCP ServiceAccounts and assign to machines #8066 OCPBUGS-15861 : Use a static pure-go libvirt library #7252 OCPBUGS-29437 , OCPBUGS-30547 : Run kubelet directly #8131 METAL-871 : baremetal: remove ironic tf files #8117 OCPBUGS-30641 : Enable deploy by Service ID on PowerVS #8111 CORS-3288 : bump CAPA for LB scheme fix #8114 no-jira: machines/aws: fix subnet filter comment #8120
METAL-871 : baremetal: bootstrap: rename master label #8107 OCPBUGS-29388 : upi: aws: fix typo in worker templates #8112 OSASINFRA-3362 : Fix CAPI bootstrap deletion #8104 OCPBUGS-24415 , OCPVE-661 : bump openshift/api version #7546 MULTIARCH-4095 : Generate PowerVS machine manifests for CAPI #8020 CORS-2900 : CAPI AWS IAM #8031 OCPBUGS-30200 : Authn with platform-services-go-sdk for PowerVS #8025 CORS-3281 : IBMCloud: initial CAPI infrastructure #8090 CORS-2890 : Bump CAPA Dependencies for Secondary Load Balancers #8088 SPLAT-1460 : Make vSphere default ResourcePool formatting not contain double slash. #8044 CORS-3212 : CAPG Add ignition for CAPG machines #8027 METAL-871 : Remove terraform-provider-ironic #7649 SPLAT-1468 : Added log message for import vsphere ova progress during CAPI install. #8097 no-jira: capi: aws: report all conflicting user tags at once #8085
OCPBUGS-29469 : fix Azure API SKU calls timing out - part 2 #8070 SPLAT-1423 : Added static ip support to CAPI installer. #8081 MULTIARCH-4159 : Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8098 OCPBUGS-30058 : GCP: The CAPG bootstrap machine IP should be set according to the publish strategy #8079 OCPBUGS-30057 : Don’t auto create subnets for CAPG #8083 MULTIARCH-4153 : Incorporating Eltorito Boot Loader fix for Agent #8069 no-jira: Missing permission from vsphere docs #7789
OCPBUGS-30135 : fix “OpenShiftSDN deprecated” error message #8092 CORS-3274 : GCP: add africa-south1 region to the survey as supported region #8055 CORS-3251 : Create capz machine manifests #7969 CORS-3259 : GCP CAPI Infra: auth with service account #8077 CFE-857 : Apply user defined tags on created gcp resources #7279 AGENT-853 : Add ClusterInfo asset #7997 SPLAT-1173 : Enhance vSphere Installer to use IPAddressClaims for static IP #7501 CORS-3273 : capi system: don’t log env vars #8084 OCPBUGS-29860 : double looping of failuredomains breaks zonal #8059 no-jira: Remove v1alpha3 #8061
OCPBUGS-30005 : remove github.com/IBM-Cloud/bluemix-go/api/account/accountv2 #8072 OSASINFRA-3363 : ShiftStack CAPO integration #7939 MULTIARCH-4158 : pkg/infrastructure/powervs: add initial CAPI provider #8060 OCPBUGS-29469 : fix Azure API SKU calls timing out #8046 SPLAT-1459 : capv machines only full clone #8042 OCPBUGS-29895 : PowerVS: Add debugging to ServiceInstanceNameToGUID #8058 SPLAT-1434 : aws: add support of BYO public ipv4 pool #7983 no-jira: images: libvirt: add oc to libvirt CI image #8008
SPLAT-1465 : capv - add additional extra configs #8054 SPLAT-1462 : capv - Remove unneeded auth env vars #8053 OCPBUGS-29429 : feat: add check for SNO bootstrap condition #8004 Bug OCPBUGS-29084: OpenStack: Fix dualstack with external load-balancer #8028
CORS-3259 : GCP: Create DNS records and internal load balancer for CAPG Install #8014 SPLAT-1198 : migrate vSphere installation to CAPV #7962 OCPBUGS-29587 : Power VS: Fix service instance list #8033 OCPBUGS-22410 : vsphere-fix convert if only provided name #7931 OCPBUGS-29584 : PowerVS: handle composite_instance #8029 OCPBUGS-29482 : Bump terraform-provider-ibm to v1.61.0 #8023 CORS-2890 : pkg/infrastructure/aws: add initial CAPI provider #8012 CORS-3185 : update default release image #7874 OCPBUGS-28590 : gcp: better error msg when service accnt missing #8002 OCPBUGS-28203 : Power VS: Add sleep to allow workspace to configure PER #7889 CORS-3220 : Initiate CAPG installation #8011 CORS-3213 : Create the GCP cluster manifest #7917 OCPBUGS-29441 : update RHCOS 4.16 bootimage metadata to 416.94.202402130130-0 #8015 OCPBUGS-29425 : PowerVS Fix next start search #8010 Bug OCPBUGS-29198: OpenStack: fix controlPlanePort validation #7998
SPLAT-1447 : Move MCO imports to API; update library-go, api #8000 NO-ISSUE: integrationt tests support for env vars substitution #7992
OCPBUGS-29114 : Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. #7985 OCPBUGS-29068 : GCP: Skip validation of public and private zones for terraform vars #7986 OCPBUGS-29067 : Copy GCP manifests within MCO bootstrap to the correct location #7991 OCPBUGS-20085 : IBMCloud: Handle disk delete errors #7515 OCPBUGS-28827 : do not rename boot.catalog for arm64 iso #7972 OSASINFRA-3371 : Pass rhcosImage and manifests to the PreProvision hook #7967 SPLAT-1387 : enable additional tags to be associated with vsphere machines #7905 CORS-3242 : PowerVS: Replace deprecated primary_ipv4_address with primary_ip list item #7861 OPNET-357 : Populate network configuration at install-time #7604 CORS-3240 : add OWNERS_ALIASES madhu-pillai #7733 CNF-10170 : Revert “bootkube.sh: Render kernel boot arguments for SNO” #7979 CORS-3188 : Bump k8s deps #7970 OCPBUGS-2135 : Include CAPG objects in uninstall filter #7907 AGENT-848 : add node-joiner cli tool main #7958 CORS-3207 : Generate GCP machine manifests for CAPI #7944 OCPBUGS-24575 : ic: gcp: validate instance architecture #7850 CORS-3196 : capg: add infrastructure components #7968 CORS-3208 : Create the GCP infrastructure controller #7940 OCPBUGS-27156 : GCP Destroy cleanup correct zones/records #7932 OCPBUGS-27737 : aws-edge-zones preventing err before discovering #7945 OCPBUGS-28708 : update tested Azure Arm64 instance type on 4.15 #7965 OCPBUGS-28643 : PowerVS: Add dal12 region #7956 OCPBUGS-27263 : Bump golang 1.21 #7925 CNF-10170 : bootkube.sh: Render kernel boot arguments for SNO #7692 OCPBUGS-28705 : [azure] update tested x86 instance type on 4.15 #7961 CORS-3139 : Move CAPI behind infrastructure provider interface #7824 OCPBUGS-27507 : bump containerd for vulnerability fix #7942 NO-ISSUE: test fix to support slightly different nmstate error messages #7954
NO-JIRA: Minor fixes #7947
no-jira: azure: add metadata info to resource group tags #7725
OCPBUGS-25453 : duplicate failure domains in CMPS #7860 OCPBUGS-27788 : PowerVS: COS region configurable #7941 SPLAT-1345 : Remove alibaba #7832 OCPBUGS-27366 : set the –cluster-profile flag for openshift/api rendering #7924 OCPBUGS-27192 : remove retired serial NCv2 from azure tested instance type list on x86 #7911 no-jira: images/altinfra: allow CAPI ARG #7891
OCPBUGS-25835 : Validate baremetal capability is set for baremetal platform #7901 no-jira: Add AWS m6a to tested instance types #7851
OCPBUGS-24956 : Fix typo in CloudCredential validation #7915 OCPBUGS-24303 : Check provided sha for agent ISO download #7893 CORS-3203 : Fix depreciated typo #7834 OCPBUGS-14257 : normalize ISO files extensions to three chars #7896 OCPBUGS-26434 : Redact platform passwords in agent-gather output #7873 OCPBUGS-27092 : baremetal: gather all recently refactored services #7854 OCPBUGS-25996 : baremetal: correct external_http_url for v6-only BMCs #7898 CORS-2950 : Remove openshift-sdn as an install-time option #7720 OPNET-415 : Upgrade o/api to include extended network config #7869 METAL-829 : Set node cpu_arch from bmh #7814 OCPBUGS-26399 : Support singular VIP in ACI for BareMetal #7859 CORS-3190 : GCP: Add load balancer info to cluster infra #7888 MULTIARCH-4072 : Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones #7870 OCPBUGS-24956 : Add cloud credential capability validation #7884 OCPBUGS-25841 : preserve category name when trying to find tag category #7876 ARO-4744 : Do not run platform validation on ARO #7865 OCPBUGS-24956 : Add cloud credential capability validation #7875 OSASINFRA-3280 : OpenStack: clarify root volume size requirements #7698 OCPBUGS-26048 : Bump default channel to stable-4.16 #7867 OCPBUGS-24862 : Updating ose-installer-altinfra-container image to be … #7872 CORS-2852 : cmd/create: allow clean shutdown of resources #7864 OCPBUGS-24820 : Updating ose-baremetal-installer-container image to be consistent with ART #7817 OCPBUGS-24814 : Updating ose-installer-container image to be consistent with ART #7816 OCPBUGS-25600 : aws: validate instance arch #7835 OCPBUGS-25440 : ic: aws: add iam:TagInstanceProfile permission requirement #7843 OCPBUGS-25132 : Fixes for the OpensStack UPI playbooks. #7833 OCPBUGS-24853 : Updating ose-installer-artifacts-container image to be consistent with ART #7818 OCPBUGS-19054 : Warn that FeatureSet is not supported #7825 CORS-2315 : GCP: Skip populating Private/Public Zones within DNS manifest #7846 no-jira: build: drop vsphereprivate build workaround #7847
CORS-2870 : build: only rebuild terraform providers if needed #7688 OCPBUGS-24473 : IBMCloud: Set IBM TF visibility based on URLs #7805 CORS-3029 : GCP: Update DNSType within GCP PlatformStatus based on UserProvisionedDNS #7837 OCPBUGS-24241 : Pin openstack.cloud version. #7821 Revert “OCPBUGS-4038: bootstrap: Skip gatewayd units only on OKD agent-installer” #7651
no-jira: Revert “Merge pull request #7823 from patrickdillon/build-capi-altinfra” #7828
OCPBUGS-19303 : Changed OKD/FCOS workaround to also support Agent-based Installer #7484 OCPBUGS-25191 : ic: azure: fix retrieving marketplace image #7826 OCPBUGS-24995 : Revert “Merge pull request #7642 from AnnaZivkovic/azure_duplicate_im… #7822 CORS-2840 : images/altinfra: enable CAPI builds #7823 CORS-3003 : [ibmcloud] add key-protect plugin in ibmcloud cli #7811 CORS-2852 : Support installing OpenShift via Cluster API #7807 SPLAT-1272 : Modify the terraform variables to support Nutanix Failure Domains #7806 CORS-2934 : IBMCloud: Update MAPI for BYOK #7812 METAL-803 : Update vendoring for baremetal-operator #7809 no-jira: Fix base image reference #7810
CORS-2952 : GCP Set “ClusterHostedDNS” in the Infra CR based on the value of userProvisionedDNS #7796 CORS-2813 : Pass LB ConfigMap manifest as a parameter to MCO instance during bootstrap #7662 OCPBUGS-23140 , OCPBUGS-23305 : Soften VIP validations for external load-balancer #7803 AGENT-739 : Support for install-config baremetal host BMC fields #7645 AGENT-729 : Support generic platform name for external platform #7585 MULTIARCH-4042 : Reuse existing Transit Gateway in target Workspace, or create anew #7592 OCPBUGS-23473 : update RHCOS 4.15 bootimage metadata to 415.92.202311241643-0 #7770 AGENT-615 : Split create-cluster-and-infraenv.service #7364 no-jira: image: infra-providers: use base image instead of builder #7800
no-jira: hack: drop hardcoded -j8 in make invocations. #7799
OCPBUGS-23458 : force destroy bootstrap ign #7791 OSASINFRA-3261 : OpenStack: support dualstack in UPI #7727 MULTIARCH-2678 : Patch for Agent Based Installer to support s390x as supported architecture. #7712 SPLAT-1218 : AWS BYO VPC support for Wavelength Zones #7652 CORS-2525 : Azure: remove storage account with bootstrap destroy #7642 AGENT-337 : Set VIPs directly in api, instead of install-config override #7574 OCPVE-648 : gomod: bump api version with CloudCredential cap #7466 CORS-2852 : cmd/create: ensure proper cleanup on exit #7693 OCPBUGS-9066 : Retry image download on failure #7106 NO-ISSUE: Remove dead code from ‘networking’ asset #7798
PowerVS: MULTIARCH-4030: Reintroduce serviceInstanceGUID install option #7795
OCPBUGS-24191 : set vmType in azure cloud config #7793 no-jira: pkg/asset: safety nets to keep installer from crashing #7792
CORS-2934 : IBMCloud: Add support for BYOK #7738 OCPBUGS-23539 : Keep Machine manifests out of OpenShift Manifests asset #7753 CORS-3020 : IBMCloud: Bump IBM TF provider #7784 MIXEDARCH-310 : Enable the use of the multi payload for agent installer #7595 CORS-2775 : ic: azure: remove deprecated errors package #7778 SPLAT-1126 : aws/clusterNetworkMTU config to change the MTU for overlay network #7765 CORS-2785 : images: decouple installer and installer-artifacts #7782 MULTIARCH-3793 : Power VS: Add mad and wdc assupported region #7773 CORS-2852 : Generate Cluster API Machine Manifests #7771 CORS-2854 : azure: Allow users to set visibility to components #7547 OCPBUGS-24008 : Remove sno_arm.txt integration test #7718 OCPBUGS-23947 : set client options when interacting with azure api #7768 CORS-2978 : enable AWS SDK Installation through feature gates #7715 CORS-2798 : GCP: User Configured DNS solution to update the bootstrap node with the Load Balancer Information #7631 CORS-2845 : azure: Enable storage account encryption #7520 SPLAT-1277 : unrevert PR 7418; implement vSphere control plane machinesets #7780 OSASINFRA-3303 : OpenStack: remove generation of trunks name #7772 AGENT-670 : Add assisted-db data to agent-gather #7719 SPLAT-1160 : AWS - Support Wavelength Zones with edge pool #7369 Skip cluster config #7666
OCPBUGS-24031 : Bump Fedora CoreOS to latest stable #7779 no-jira: destroy: azure: store session in the destroy object #7777
CORS-2975 : Add support for il-central-1 in AWS #7740 CORS-2428 : terraform: add build information to binaries #7763 OCPBUGS-24026 : Add owner for user provided client CA bundle #7749 SPLAT-1272 : Support Nutanix Failure Domains #7730 CORS-2775 : destroy: azure: remove deprecated errors package #7761 no-jira: cmd/openshift-install: Remove “migrate” command #7601
no-jira: go.mod: remove unused terraform-providers-nutanix import #7762
CORS-2835 : pkg/infrastructure: remove ARO build tag #7745 OCPBUGS-21777 : baremetal: populate customDeploy in advance #7674 CORS-2933 : IBMCloud: Basic service endpoint override #7632 CORS-2852 : Introduce Cluster API Infrastructure manifest generation #7672 OCPBUGS-22840 : ic/azure: validate field Plan when for marketplace images #7721 CORS-2604 : tag user-provided azure vnet #7611 MULTIARCH-3964 : Power VS: Control SMT level with machineconfig #7704 no-jira: destroy/azure: fix dropped negation from error comparison #7758
no-jira: destroy/azure: avoid cancelling main context #7750
OCPCLOUD-2130 : Fix Failuredomains check on manifests test #7617 OSASINFRA-3295 : OpenStack: fix client used to list flavors #7723 OSASINFRA-3294 : OpenStack: fix script to update bootstrap ignition shim #7743 no-jira: images: rename terraform- > infrastructure-providers #7716
OCPBUGS-23376 : vSphere - when using RP network path is incorrect #7737 no-jira: Stop rendering networks.config CRD #7732
OCPBUGS-22453 : Fixed systemd-resolved’s split dns config in OKD/FCOS #7634 SPLAT-1218 : upi/AWS: Templates to provision resources in Wavelength #7722 AGENT-337 : Support both VIP and VIPs in AgentClusterInstall #7724 OSASINFRA-3229 : Remove support for Kuryr #7675 CORS-2830 : Provision AWS Infrastructure with SDK #7676 MULTIARCH-4009 : Prepare for varying SysTypes for new datacenters #7717 MULTIARCH-3789 : Power VS: Remove cloud connection support #7696 CORS-2876 : images/installer-altinfra: initial Dockerfile #7711 Bug OCPBUGS-19462: OpenStack: Fix dual-stack machines Spec to contain network #7694
MULTIARCH-3965 : Check if PER is enabled in the target PowerVS workspace #7683 OSASINFRA-3280 : openstack: document etcd on local disk #7664 OCPBUGS-23170 : Revert #7418 “SPLAT-1141: implement vSphere control plane machinesets” #7708 MULTIARCH-2590 : PowerVS create service instance #7695 SPLAT-1141 : implement vSphere control plane machinesets #7418 CORS-2428 : images: add Dockerfile for a terraform-providers image #7687 OSASINFRA-3237 : move controlPlanePort API to GA #7570 CORS-2835 : use build tags to produce installer with alternate infrastructure providers #7656 CORS-2877 : Install Config Feature Gate Validation #7413 OCPBUGS-22772 : return Terraform statefile on error #7671 NO-JIRA: destroy/aws: replaced deprecated sets syntax #7680
OCPBUGS-19398 : IBMCloud: Add eu-es region #7668 OCPBUGS-22830 : fix google cli verson to 447.0.0 #7663 OCPBUGS-22113 : Do not generate azure-cloud-provider in manual mode for aro builds #7608 OCPBUGS-22757 : update RHCOS 4.15 bootimage metadata to 415.92.202310310037-0 #7654 CORS-2852 : Introduce pkg/clusterapi, system, and local control plane #7630 OCPBUGS-20403 : OpenStack: add SG rules for compact clusters on UPI #7576 OCPBUGS-17866 : check GOOGLE_APPLICATION_CREDENTIALS env var #6863 OCPBUGS-22773 : PowerVS: fix removeFromLoadBalancers #7653 OCPBUGS-13664 : Add KMS encryption keys if provided #7650 Bug OCPBUGS-22298: OpenStack: Fix IPv6 address configuration for bootstrap #7638
OCPBUGS-18387 : Add Azure ConfidentialVM capability and DiskEncryptionSet validations #7469 OCPBUGS-22489 : destroy: gcp: fix destroying regional disks #7643 OCPBUGS-22058 : Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 #7590 OCPBUGS-18986 : Skip the deletion of instance profiles marked shared #7537 hack/go-lint: update golanci-lint to v1.53.1 #7635
OCPBUGS-22655 : Bump Fedora CoreOS to latest stable #7644 bootkube.sh: drop final mention of machine-os-content #7636
update tested x86 instance type on 4.14 #7639
OCPBUGS-4038 : bootstrap: Skip gatewayd units only on OKD agent-installer #7629 CORS-2852 : Build and package Cluster API and providers #7620 AGENT-713 : Use BM hosts in install-config if not defined in agent-config #7531 MIXEDARCH-353 : Add yq-v4 to the upi-installer image for CI and copy yq3 from a previous stage’s manifest-list image #7567 openstack: dual stack UPI - create security group rules for IPv6 #7552
OCPVE-740 : bump openshift/api #7613 AGENT-718 : Add vSphere credentials to install-config overrides #7593 Revert #7428 “OCPBUGS-13664: Add KMS encryption keys if provided” #7625
OCPBUGS-10906 : check extracted base iso coreos version is in sync #7030 OCPBUGS-4038 : bootstrap: Enable gatewayd units only on RHCOS #7580 OCPBUGS-21720 : images/libvirt/Dockerfile.ci: Use centos stream instead centos:7 #6813 CORS-2836 : Refactor Stages, encapsulate terraform #7488 OCPBUGS-20356 : update RHCOS 4.15 bootimage metadata to 415.92.202310170229-0 #7616 OCPBUGS-20364 : azure: validation: validate defaultMachinePlatform #7584 OCPBUGS-20525 : aws: use security groups from defaultMachinePlatform #7589 OCPBUGS-13664 : Add KMS encryption keys if provided #7428 OCPBUGS-5471 : Try to select rendezvousIP among non-worker hosts #7443 OCPBUGS-21781 : Rectify GCP label key validation check #7596 Revert skipping integration test agent sno arm #7561
OCPBUGS-20350 : vSphere,segfault on version check #7575 OCPBUGS-19093 : skip agent-tui on OCI #7512 OCPVE-675 : feat: bump api to add OLM capability #7495 Enforcing the serial execution of the integration tests #7591
images: Cleanup CI Dockerfiles #7507
OCPBUGS-20440 : Warn about host and target compatibility #7582 OCPBUGS-19444 : Use changes to AgentClusterInstall during loading #7506 OpenStack: Adapt nodePorts range 0.0.0.0/0 sg rules #7577
Remove unused method #7438
PowerVS: MULTIARCH-3791 Remove cloud connection reuse functionality #7564
OCPBUGS-19552 : Fixed DNS issues in OKD/FCOS due to split dns in systemd-resolved #7516 docs: Described process of adding vGPU capable nodes. #6606
OCPBUGS-19086 : Check if nmstatectl executable exists in the system #7492 OCPBUGS-16666 : Change where AdditionalTrustBundle is set #7485 OCPBUGS-18455 : Unable to disable external CCM for platform external #7533 OCPBUGS-18552 : Truncate vlan names defined in nmstate if > 15 chars #7486 OpenStack: enable IPv6 primary dual-stack cluster #7259
OCPBUGS-20110 : Add an unit test - at least one interface must be defined for each node #7555 OSASINFRA-3199 : Configure User-Agent for OpenStack API calls #7548 OCPBUGS-17757 : check credentials type to handle different gcp authentication methods #7422 Docs: Fix openstack command for image update in upi installation #7556
PowerVS: MULTIARCH-3790 Remove zones that only have CCs with exceptions #7563
PowerVS: Remove deprecated errors package #7544
Disable pxe sno arm integration test #7557
Inefficient wait for all clusteroperators #7535
OCPBUGS-15844 : Enable FIPS in agent ISO #7540 OCPBUGS-20058 : Use updated ansible-core for Openstack image #7549 OWNERS: Remove obsolete agent reviewers #7545
OCPBUGS-5728 : Log “agent wait-for” commands to .openshift_install.log #7452 OCPBUGS-19092 : Enable serial console for external OCI platform #7511 OCPBUGS-18690 : ic: azure: validate NVMe-only family types #7500 CORS-2479 : agent: Ensure registries.conf is world readable #6745 add jbtrystram to coreOS approvers and reviewers #7464
OCPBUGS-19093 , OCPBUGS-19688 : Allow agent-tui to use serial console #7526 Tweaks to validateRendezvousIPNotWorker #7437
OCPBUGS-18986 : Tag aws instance profiles. #7510 OCPBUGS-19376 : GCP default value for service account #7519 MULTIARCH-3701 : Enable ppc64le for agent installer #7366 pkg/asset/installconfig/powervs: fix dropped error #7419
OCPBUGS-19699 : Remove warning about CPUPartitioning #7527 OCPBUGS-18187 : Increase bootstrap timeout for vSphere platform by 30 mins #7518 OCPBUGS-18830 : AWS terraform bootstrap destroy will not refresh state #7491 OCPBUGS-12707 : always write AWS cloud.conf #7514 AGENT-710 : Use invoker for bootstrap template generation #7508 OCPBUGS-18876 : Pass CPUPartitioning via install-config overrides if set #7513 OpenStack: fix IPv6 docs #7482
OCPBUGS-18945 : update RHCOS 4.15 bootimage metadata to 415.92.202309161058-0 #7499 LICENSE: Update #7502
OCPBUGS-19286 : Updating ose-installer-artifacts images to be consistent with ART #7496 SPLAT-1170 : enable cloud controller manager type to be defined #7457 OpenStack: Set external network for cloud-provider #7411
OCPBUGS-17724 : Graceful fail for AWS getUser on destroy #7429 AGENT: publish services diagrams #7323
OCPBUGS-19149 : Updating ose-baremetal-installer images to be consistent with ART #7494 OCPBUGS-19130 : Updating ose-installer images to be consistent with ART #7493 OCPBUGS-17218 : Warn when firewall rull missing. #7417 OSASINFRA-3236 : deps: Bump gophercloud to v1.6.0 #7208 OCPBUGS-19037 : Handle agent tui failure gracefully #7490 OCPBUGS-19017 : Add Net capabilities to dnsmasq container #7487 OCPBUGS-18113 : Do not set FailureDomains on CPMS when in a single zone Azure region #7448 AGENT-702 : Generate minimal ISO for external platform #7450 OCPBUGS-18304 : for vsphere ipi add cluster domain to the uploaded vm configs so that… #7451 Implement workaround to allow SNO installations for OKD/FCOS #7445
OCPBUGS-18428 : Add ip=dhcp,dhcp6 kernel param for vSphere dual-stack #7467 OSDOCS-6999 : tested machine series ‘C3’, ‘C2D’ #7381 OCPBUGS-18450 : AWS permission missing for security group viewing. #7460 OCPBUGS-18365 : Fix defaulting of userManagedNetworking value #7458 integration tests: Swap order of diff arguments #7462
AGENT-693 : Support external platform #7442 OCPBUGS-18457 : Make extracting ISO kargs more robust #7463 OCPBUGS-18457 : Fix PXE integration tests #7461 OCPBUGS-17806 : gomod: bump openshift/api version #7421 OCPBUGS-17770 : azure: use marketplace image plan’s publisher #7426 OCPBUGS-7690 : azure: destroy: dns records leak if permissions missing #7433 OCPBUGS-17869 : azure: fix setting outboundType #7455 OSDOCS-6880 : Adding 64-bit ARM GCP instance types to documentation #7320 OCPBUGS-16204 : aws: attach additional security groups to controlPlane #7352 OCPBUGS-18046 : update govc version to v0.30.7 #7425 OCPBUGS-15659 : IPI pre-check for MachineAPI capability #7414 OCPBUGS-17860 : OpenStack: Remove NodePorts range 0.0.0.0/0 rules #7405 OCPBUGS-17073 : Revert “Merge pull request #7205 from rna-afk/azure_managed_by_tag” #7412 OCPBUGS-17940 : Add COS endpoint to proxy server (Power VS) #7430 AGENT-692 , OCPBUGS-3860 : Update assisted-service dependencies #7439 OCPBUGS-17227 : gcp: fix validation of custom instance types #7388 OCPBUGS-17869 : azure: put NAT gateway behind TechPreviewNoUpgrade #7434 Destroy startironic.sh forever #7250
CORS-2660 : GCP: deprecate the licenses field #7397 CFE-858 : Update google terraform provider to latest version #7201 MULTIARCH-3676 : PowerVS TG terraform changes #7389 CFE-686 : Generate Infrastructure CR with the GCP user defined tags & labels #7138 CFE-687 : Apply user defined labels on created gcp resources #7153 OCPBUGS-11999 : upkeep: updated description to remove techpreview #7313 CORS-2700 : Make bootstrap S3 bucket optional during bootstrap destroy #7288 CFE-688 : Update install-config CRD to support gcp labels and tags #7126 OCPBUGS-16776 : update RHCOS 4.14 bootimage metadata to 414.92.202308032115-0 #7409 Add baremetal capability validation #7394
azure: validation: machinepool: sort slice before comparing #7407
OCPBUGS-13408 : Log message and add integration test #7408 PowerVS: Update listCOSInstances to continue querying #7404
maintenance: update openshift/api #7401
MGMT-13628 : add support for confidential VMs on Azure #7312 openstack: Test zero replicas in worker machine-pool #7400
OpenStack: Fix user docs for additional network with IPv6 #7395
gather: Use journalctl -o with-unit #7371
SPLAT-1123 : Revert Alibaba deprecation warning #7396 OCPBUGS-15994 : Update core password after loading config-image #7338 OpenStack: Remove SGS created by CPO on destroy #7378
data/data/coreos: bump FCOS to F38 stable #7311
OCPBUGS-16912 : Ensure DHCPv6 client sends Solicit with mac address #7384 Bug OCPBUGS-16249: Add ip=dhcp,dhcp6 option to Kernel args #7367
PowerVS: Check whether Machine pool CIDR is /24 #6903
OCPBUGS-16292 : GCP XPN: clarify service account support #7347 OCPBUGS-6759 : Fix discrepancy with disk size master #7100 OCPBUGS-16959 : openstack/upi: add missing modules namespaces + doc #7373 CORS-2719 : Remove service account user permission #7291 OCPBUGS-17064 : always create a MachineSet #7380 OpenStack: Fix default for openstack_worker_server_group_names #7359
OCPBUGS-16692 : OpenStack: fix crash with empty platform in machinepool #7363 CORS-2445 : GCP add bootimage override in install-config #7215 CORS-2503 : azure: use marketplace images for all nodes #6890 MULTIARCH-3676 : PowerVS add transit gateway destroy #7294 CORS-1770 : Support pd-balanced disk types for GCP deployments #7337 OCPBUGS-15989 : vSphere - bump terraform provider #7354 OWNERS_ALIASES: Add new user to owners_aliases #7348
OCPBUGS-16515 : gcp: use zones available for both instance and project #7317 OCPBUGS-15852 : Single node cannot be installed if etcd appears in the hostname #7304 OCPBUGS-14877 : Validate that number hosts does not exceed replicas #7268 CORS-2628 : Allow users to set ManagedBy tag to resource group #7205 OCPBUGS-16380 : Add /etc/containers volume on create-cluster-and-infraenv #7332 OCPBUGS-16207 : ic: aws: validate max security groups #7345 OpenStack: Add steps to enable dual-stack clusters #7269
Revert “Merge pull request #7096 from r4f4/gcp-instance-zones” #7360
SPLAT-657 : AWS Local Zones subnets automation for edge compute pool #7137 OSASINFRA-3193 : Update openstack/Dockerfile.ci for ansible-core #7346 Include start-cluster.env in agent-gather #7350
Fix the deployment on OpenStack for worker pools with no replicas. #7356
OCPBUGS-16219 : Fix timing issue between network services #7355 OCPBUGS-16415 : Sync nmstateconfig script with assisted-service changes #7353 Agent: Allow additional kernel args to be passed to ISO #7306
Remove mentions of use-octavia #7335
OCPCLOUD-2036 : introduce External platform type #7217 OCPBUGS-16395 : openstack/upi: update doc for CCPMSO #7351 OCPBUGS-16245 : Make nmstateconfig.yaml optional in config-drive #7333 OSASINFRA-3181 : Volume Types for OpenStack CPMS #7300 CORS-2445 : GCP: Add default values for arm64 #7258 PowerVS: Replace deprecated key_id attribute with name for ibm_pi_key resource #7256
PowerVS: Handle empty serviceInstanceID in metadata.json #7328
OpenStack: Dual stack support with BYON #6797
MULTIARCH-3667 : Add support for CPMSO for Power VS #7226 OCPBUGS-15421 : Allow different service account for xpn installs in gcp #7308 OCPBUGS-15997 : openstack: add root volume AZ validation #7309 aws: drop hostedZoneRole Feature Gate #7327
Agent: clear service status once all services started #7316
AGENT-660 Display insert config image message to console #7299
PowerVS: Create new newAuthenticator function #7321
OCPBUGS-9404 : azure: skip LB creation when not needed #7063 Revert “Merge pull request #7289 from r4f4/padillon-settle-ops” #7318
Agent: Log kernel params when generating pxe assets #7314
OCPBUGS-15238 : GCP: ic: client: use a higher context timeout #7290 AGENT-648 : Remove validation check limiting None platform to SNO #7236 Allow destroy for C2S isolated (us-iso and us-isob) partitions. #7086
OCPBUGS-15999 : update RHCOS 4.14 bootimage metadata to 414.92.202307070025-0 #7310 OCPBUGS-14900 : Use correct SELinux label. Make rename atomic. #7307 create: add check for cluster operator stability #7289
SPLAT-827 : support static IP assignments with vSphere IPI #7179 AGENT-562 : Load config from config image #7200 OCPBUGS-15825 : Fix agent gather tui logs #7293 OSASINFRA-3155 : OpenStack: Create ControlPlaneMachineSet CRDs #7280 ic: gcp: validate instances against user-configured zones #7096
AGENT-678 : Fix concurrency issue in agent integration tests #7303 OCPBUGS-14762 : Use the same names for public LB in IPI and UPI Azure #7292 OCPBUGS-2324 : terraform: aws: bump version to 5.4.0 #7274 tls/root: Document this more and change friendly name #7232
CORS-2572 : azure: implement egress via NAT gateway #6933 docs: Add note about not configuring allowed address pairs for day 2 manila configuration #7287
OCPBUGS-14932 : specify azure cli version #7297 OCPBUGS-14932 : Update azure cli to 2.40.0+ #7216 PowerVS Add support for Capped processors #7286
CORS-2645 : AWS Cross-Account Private Hosted Zone: Add Further Validations #7253 AGENT-624 : Allow override of networkType #7223 Update hack/go-test.sh to golang 1.20 #7270
AGENT-627 : Decompress kernel on ARM #7276 OWNERS_ALIASES: offboard ashcrow and bgilbert from CoreOS #7275
AGENT-558 Generate unconfigured agent ignition #7186
OWNERS: merge agent/installer #7278
OSASINFRA-3182 : openstack: remove portTargets #7239 AGENT-498 : Get iPXE script template kernel parameters from ISO #7150 OCPBUGS-15238 : GCP: ic: improve project validation #7267 Default dataStore is returned the name instead the inventoryPath #7261
Use the correct image name for agent-tui extraction #7266
OCPBUGS-13636 : new Aws secret regions support #6184 CORS-2372 : Azure: auth Installer with Managed Identity from VM #7108 OCPBUGS-11796 : azure: skip NSG creation when BYO vnet #7094 OCPBUGS-9435 : terraform: aws: secret regions now support ALIAS record #7184 SPLAT-1094 : warn users about deprecation of Alibaba Cloud #7257 OCPBUGS-14869 : Add timezone info in installer logs #7243 CORS-2656 : Remove context from cluster uninstaller struct #7169 openstack: document external LB #6920
bootkube: Drop cruft in MCO bootstrap #7244
Update OWNERS_ALIASES #7203
Agent: run shellcheck on start-cluster-installation.sh #7062
OSASINFRA-2168 : Docs: update OpenStack requirements #7015 OCPBUGS-15095 : Add kubevirt digest-ref in RHCOS boot images #7254 AGENT-563 : Create configuration image #7157 AGENT-510 : Support interactive network console when pxe booting #7185 Allow CustomNoUpgrade features via install-config #7246
MULTIARCH-3664 : enable multipath for powervs #7222 OCPBUGS-13960 : update RHCOS 4.14 bootimage metadata to 414.92.202306141028-0 #7247 CFE-829 : Remove Azure Tags TechPreview only indicators and checks #7187 CORS-2631 : Add additional security group ids in AWS #7151 AGENT-596 : use agent-installer-utils for agent-tui extraction #7212 AGENT-491 : Support pxe base url #6723 OCPBUGS-14917 : PowerVS: Cleanup service instances for destroy cluster #7173 OpenStack: add support to multiple subnets in the bootstrap #7111
Add ControlPlaneMachineSet for Nutanix #7119
OPNET-298 : Allow primary-v6 dual-stack on vSphere #7124 CORS-2613 : AWS: Cross-account Shared VPC Support #7225 OpenStack: support user provided dual-stack api and ingress Port #7133
OpenStack: configure IPv6 address in the bootstrap node #7128
SPLAT-995 : vSphere Add new template field #6995 OCPBUGS-14757 : images: installer: add xz to the container #7238 OCPBUGS-14818 : disable oVirt provider #7213 AGENT-556 : Wait for rendezvous host configuration #7068 OCPBUGS-13955 : support OPENSHIFT_INSTALL_OS_IMAGE_OVERRIDE #7211 OCPBUGS-14121 : Convert Rendezvous IPv6 address to canonical format #7234 OCPBUGS-14416 : Shorten SNO installation duration by releasing CPC lease #7219 OCPBUGS-14565 : Replace with govc docker image and fix ibmcli folder permission issue #7231 OCPBUGS-13108 : Log additional host info at warning level #7209 OCPBUGS-13662 : Ignore CPUPartitioning for ABI #7218 OCPBUGS-11736 : gcp use preconfigured private zone for installation #7155 Bump & vendor k8s 1.27 dependencies #7220
OCPBUGS-10342 : Check that number of replicas matches hosts #7059 OSASINFRA-3153 : move loadBalancer API to GA for OpenStack #7127 OCPBUGS-10306 : [vSphere] Upi installation failed due to VMs for master and worker node creation failed #6999 AGENT-567 : Re-enable ‘create pxe-files’ command #7102 AGENT-555 : Move Rendezvous Host config to separate file #7061 OCPBUGS-13764 : Support /dev/disk/by-path root device hints #7192 OCPBUGS-1769 : Ignore IAM Roles that the Installer is not authorized to access #7180 OCPBUGS-14077 : MULTIARCH-3492: Avoid conflicting subnets #7145 OCPBUGS-14076 : PowerVS: Remove ClusterOSImage #6996 OCPBUGS-13094 : Use oc command in bootkube.service in a disconnected env #7178 OCPBUGS-7410 : Reject active VPC connections before service destroy #7101 OCPBUGS-7699 : CVE: go-getter vulnerable to denial of service via malicious compressed archive #6893 OCPBUGS-13552 : vSphere Add ova sha query; additional debugging #7171 OCPBUGS-13718 : ic: azure: validate diskTypes in AzureStack #7194 OCPBUGS-9378 : vSphere set bootstrap/master efi #7154 OCPBUGS-13535 : Set AdditionalTrustBundle in override when mirroring not enabled #7182 OCPBUGS-13547 : Ensure –payload-version is set for MCO on bootstrap #7160 OCPBUGS-13547 : remove special cases for featureset in rendering #7189 OCPBUGS-7978 : FCOS: bump to latest stable version #6902 OCPBUGS-13628 : Revert “remove special cases for featureset in rendering” #7183 OCPBUGS-13300 : masters on a single compute server group #7172 OCPBUGS-3542 : Add bootstrapExternalStaticDNS #6585 remove special cases for featureset in rendering #7158
OCPBUGS-13253 : update RHCOS 4.14 bootimage metadata to 414.92.202305090606-0 #7176 pass payload version and manifests to kas and kcm #7152
OCPBUGS-9081 : openstack destroy: account for BULK DELETE limits on object-storage #7168 OCPBUGS-7699 : terraform: google: bump provider for go-getter CVE fix #7051 OCPBUGS-13107 : openstack destroy: Limit Swift workers to 3 #7165 Updating ose-installer-artifacts images to be consistent with ART #7122
OCPBUGS-11921 : GCP XPN: Pass instance service acct in manual mode #7117 OCPBUGS-12964 : Bootstrap on aws should have same metadata service type as on other nodes #7149 OCPBUGS-11792 : update RHCOS 4.14 bootimage metadata to 414.92.202304252144-0 #7135 pass featuregate args to config-operator to get rendered featuregates #6990
OCPBUGS-12904 : openstack: Add netcat to the Installer image #7142 OCPBUGS-12776 : GCP XPN Private Cluster Fails with no Public Zone #7134 OCPBUGS-12869 : fix nmstate related unit tests #7089 Updating ose-baremetal-installer images to be consistent with ART #7121
Updating ose-installer images to be consistent with ART #7120
OCPBUGS-12748 : use python3 for cloud sdk #7118 OCPBUGS-12196 : bump CVO to stable-4.14 #7114 OCPBUGS-11999 : fix: remove feature flag for cpu partitioning no longer needed #7110 OCPBUGS-11801 : Fix agent-tui libnmstate dependency name #7095 OpenStack: enable ingress traffic for dual-stack installations #7099
OCPBUGS-10767 : Fix and improve locking session and AWS Metadata access #7070 OWNERS_ALIASES: offboard Sohan from CoreOS #7103
OCPBUGS-9081 : openstack: Bump Gophercloud #7098 OCPBUGS-11100 , OCPBUGS-11102 , OCPBUGS-11418 : CVE: bump hashicorp/vault version #7091 OCPBUGS-11788 : update RHCOS 4.14 bootimage metadata to 414.92.202304131328-0 #7092 OCPBUGS-8449 : Azure: don’t set default subscriptionID for disk encryption sets #7076 pkg: rhcos: use Errorf instead of Error #7074
OCPBUGS-4998 : Log additional info when status is pending-user-action #7060 OCPBUGS-10673 : [Alibaba] update the bandwidth value of EIP #7011 OCPBUGS-11636 : AWS - Remove ACLs from s3 ign #7081 OCPBUGS-11479 : Upgrade libnmstate version used #7075 OCPBUGS-10478 : gather: azure: fix collecting VM serial logs #6992 Add imageDigestSources, deprecate imageContentSources #6235
PowerVS: fix human readable group-id #7073
docs: gcp: upi: update obtaining RHCOS source image #7072
gcp: add confidential compute support for boostrap TF #7002
AGENT-275 : Add new agent graph command to output agent internal dependency graph #7066 OCPBUGS-7954 : openstack: Only check HTTPS certs on public endpoints #7057 MULTIARCH-2517 : PowerVS: create install-config improvements #6885 OCPBUGS-10845 : Use 100 GB as minimum disk size in validations #7025 openstack: Bump CI base image to v4.14 #7052
terraform: don’t run zip if building provider binary failed #7047
OCPBUGS-8449 : pkg/asset/installconfig: set subscriptionID #6975 OCPBUGS-11039 : remove container-runtime flag from kubelet config #7036 rhcos: Bump to 414.92.202303281555-0 #7038
update tested instance type on 4.13 #7042
OCPBUGS-11038 : GCP: add europe-west12 region to the survey as supported region #7033 OCPBUGS-7966 : Do not remove host default configuration unless network configuration is provided for it #6991 OCPBUGS-2130 : vSphere - finding networks use full path cluster #6973 OCPBUGS-7699 : bump terraform for go-getter CVE fix #6892 OCPBUGS-8349 : Kubelet Client Cert should include system:serviceaccounts group #7032 OCPBUGS-10728 add project filter to gcp usage api requests #7018
OCPBUGS-10638 : Properly handle invalid agent command #7005 OCPGUS-2363 : IBMCloud: Use direct COS endpoint #6952 OCPBUGS-9081 : openstack/destroy: BulkDelete more objects at once #7017 OCPBUGS-8035 : IBMCloud: Fix SSH Private bootstrap #6944 OCPBUGS-7973 : IBMCloud set dnsrecords offset #6924 OCPBUGS-8509 : baremetal: do not use port 80 for httpd #6945 OCPBUGS-9982 : bootstrap-pivot: skip pivot in SCOS Live ISO #6965 PowerVS: Add capacity checks before installation #6850
OCPBUGS-8237 : update terraform-provider-ironic to 0.4.0 #6956 OCPBUGS-6727 : Nutanix Hostname of the VM is not set when using DHCP network config #6981 AGENT-502 : add agent-tui it test #6978 openstack: Remove version info, update lb FIP -> API FIP #7001
OCPBUGS-10570 : openstack: No master primarySubnet control-plane if portTarget is set #6994 OSDOCS-5240 : doc/fix-aws-localzones: replace jq to aws –query #6993 OCPBUGS-10207 : Do not always output warning msg when releaseImage is digest #6971 OCPBUGS-7015 : vsphere, nutanix survey: relax vip in machine cidr #6967 OCPBUGS-9949 : Verify output file exists when oc image extract is run #6960 OCPBUGS-7954 : openstack: Provide manual instructions for invalid certificates #6998 OCPBUGS-10313 : fix agent tui showing up multiple times #6977 Bump mongo-driver from 1.10 to 1.11.2 #6987
OCPBUGS-8540 : CVE: bump mongo-go-driver for fix #6950 OCPBUGS-10394 : Sort userTags in Machine and Machineset manifests #6976 Shorten SNO installation duration by releasing CVO lease #6757
OCPBUGS-2968 : bootstrap: Do not needlessly podman pull #6536 terraform: google: bump stringset dependency #6951
openstack-manifests: Export JUnit results #6966
Updating ose-installer-artifacts images to be consistent with ART #6968
quota: gcp: replace deprecated monitoring package and fix linting issues #6896
OCPBUGS-8119 : CVE-2023-25173: bump containerd #6949 OCPBUGS-8468 : aws: bump aws-sdk-go version #6943 data: libvirt: increase volume size to 32GB #6963
Updating ose-baremetal-installer images to be consistent with ART #6954
Updating ose-installer images to be consistent with ART #6953
refactor: replace github.com/ghodss/yaml with sigs.k8s.io/yaml #6935
OpenStack: support multiple API and ingress VIPs #6940
update RHCOS 4.13 bootimage metadata #6886
OCPBUGS-8094 : In agent ‘wait-for bootstrap’ command, test ssh to Node0 #6919 openstack-manifest: Show assets dir if persisted #6929
OCPBUGS-7262 : Disable systemd status while TUI showing #6925 OpenStack Failure domains #6917
OCPBUGS-8203 : Don’t log password values #6922 OCPBUGS-5129 : Pass Capabilites from install-config to cluster #6923 OCPBUGS-8305 : Power VS: Add resourceGroup to infrastructure manifest #6928 AGENT-356 : Disable ‘create pxe-files’ command #6927 OCPBUGS-8258 : Specify filename for default registries.conf #6926 openstack: consistent TechPreview-only feature validation #6916
RFE-2782 : Create edge compute pool to support AWS Local Zones #6371 OPNET-199 : Allow v6-primary dual stack on baremetal #6881 Generate CSI driver manifests #6856
Azure: use managed storage account for boot logs #6848
OCPBUGS-7015 : Relax MachineCIDR check for vSphere, Nutanix #6915 ARMOCP-417 : enable arm64 for agent installer #6401 AGENT-502 : Enable agent tui #6898 GCP: conditionally create bootstrap service account #6853
vsphere: Remove bostrt from approver/reviewer group #6918
OCPBUGS-7860 : azure: session: fix unclear auth error messages #6901 OCPBUGS-7991 : vSphere - only create RP when cluster is not empty #6905 Support the new fields in NutanixMachineProviderConfig #6841
openstack-manifests: Option to run selected test cases #6908
AGENT-526 : Refactor Agent InstallConfig embedding #6796 OCPBUGS-7993 : hack/build-coreos-manifest: support OKD #6906 bump version of ovirt terraform provider #6883
OCPBUGS-7622 : Ignore CPMS file if not exist #6887 linter: enable reporting about exported names lacking comments #6880
CFE-757 : Fix issues reported by QE #6870 OCPBUGS-7579 : azure: fix certificate-based auth with passpharse #6871 Update alias for Metal Platform #6884
CORS-2496 : Default 2xlarge instead of xlarge in AWS when the control-plane is single-node #6814 OSASINFRA-3090 : External LB support for on-prem platforms #6812 Bug 1904573 : baremetal container modify /etc/passwd group writable #6872 SPLAT-823 : Zonal GA, single terraform, deprecate legacy platform spec #6770 openstack: Fix missing docs link #6852
OCPBUGS-7180 : update RHCOS 4.13 bootimage metadata #6861 Removes m1kola from azure-reviewers #6865
OCPBUGS-7495 : Convert platform type for AgentClusterInstall #6855 CFE-582 : Generate Infrastructure CR with the azure user defined tags #6310 AGENT-456 : Remove connectivity checks from bash script #6846 integration: Don’t pass host data in the install-config #6795
linter: bump version to sync with CI #6859
OCPBUGS-4954 : IBMCloud: Handle COS reclamations #6845 CFE-757 : Fix issues reported by QE #6820 CORS-2386 : IBMCloud: Add networkResourceGroupName #6613 IBMCloud: Add tests for installconfig metadata #6348
OCPBUGS-1048 : if tag categories don’t exist, the installation will fail to bootstrap #6327 CFE-586 : Apply user defined tags on created azure resources #6354 OCPBUGS-7356 : data/manifests/bootkube/cvo-overrides: Default to stable-4.13 #6689 OCPBUGS-6777 : Fix file check for loading openshift manifests #6821 AGENT-505 : Embed agent files in initrd #6842 installer dev build settings to enable delve #6835
OCPBUGS-7261 : Update AgentConfig template #6840 OCPBUGS-4549 : azure: fix MS Graph calls on Gov cloud #6844 openstack-manifests: Add a debug option #6839
OpenStack: Fix distribution of zones on 32-bit systems #6834
OCPBUGS-6422 : CVE-2022-41717: bump net/http for fix #6801 CNF-6357 : feat: add CPU Partitioning flag into the install config #6430 SPLAT-820 : multi-zone is no longer tech preview #6782 destroy: vsphere: move API calls to client abstraction and add unit tests #6604
Add support for confidential compute #6799
Add Adam #6824
OCPBUGS-5234 : azurestack: upi: fix compute scale up #6735 CNF-6362 : feat: add support for nto rendering during bootstrap #6691 OCPBUGS-4997 : Set the configured proxy settings for agent installer #6827 azure: Add error message when authorizer fails. #6551
OCPBUGS-6486 : fixing ovirt installation on iSCSI #6816 OCPBUGS-6270 : Don’t require vSphere details for agent installer #6793 OCPBUGS-6722 : bootimage: move secure execution artifact to separate artifact #6811 PowerVS: Check for potential network conflict in existing CCs #6798
OCPBUGS-6663 : Check platform baremetal settings against default values #6809 AGENT-455 : Check registry and rendezvous host access at startup #6767 OCPBUGS-4549 : destroy: azure: handle nil responses from msgraph sdk #6717 AGENT-505 : Embed agent-tui binary in the agent ISO #6786 PowerVS: Remove region requirement #6772
Bug 2072202 : Check for reachability of API and API-Int URLs later in bootkube #6611 Bug 2067847 : prometheus/client_golang: Denial of service using InstrumentHandlerCounter #6391 CORS-2479 : bootstrap: set 0644 mode for registries.conf #6789 GCP: Remove the BYOH code #6771
AGENT-453 : Create interactive console service for agent installer #6756 OCPBUGS-5959 : bump RHCOS 4.13 bootimage metadata #6790 CORS-2469 : upi: Document removal of CPMS for UPI installation #6727 Bug 2070744 : Fix infinite loop error #6515 CORS-1558 : Add uninstall complete after destroy code #6572 AGENT-504 : Agent extract binary #6777 OCPBUGS-5182 : validate additional confidential VM types #6733 OCPBUGS-5461 : Allow NO_PROXY to contain IPs #6776 OCPBUGS-3253 : Warn if agent assets detected when using non-agent waitfor #6740 OCPBUGS-4654 : azure: upi: use Image Gallery in ARM templates #6684 OCPBUGS-5184 : azure: validate Windows-only VM types #6734 CORS-2449 : gcp: Set pre-created CPMS to Active state #6752 OCPBUGS-1612 : vsphere: set default resource pool when missing failure domain topology #6409 Generate the cloudproviderconfig manifests for integration of nutanix-ccm to OCP #6269
CORS-2405 : Create ControlPlaneMachineSet CRDs #6632 OCPBUGS-5734 : make VIP 168.63.129.16 noProxy in all clouds except Public #6761 OCPBUGS-1695 : Update FCOS to latest 37.20221127.3.0 stable #6487 OCPBUGS-5770 : CVE-2021-4238: goutils: update for randomness fix #6763 BUG 2110982: GCP skip public loadbalancer ip addresses #6755
AGENT-501 : Make it easier to change node zero IP and SERVICE_BASE_URL #6747 MGMT-12839 : Add Shielded VMs options to gcp mpool and TF #6698 OCPBUGS-5324 : CVE-2021-4235 go-yaml: Denial of Service in go-yaml #6741 OCPBUGS-881 : fail to create install-config.yaml as apiVIP and ingress VIP are not in machine networks #6469 SPLAT-901 : set default for variables that are deprecated by failure_domains #6750 OCPBUGS-1769 : Check for AWS STS installation before trying to get all IAM Roles #6666 GCP XPN: remove tech preview feature gate #6754
Expose Azure useImageGallery parameter in the MachineSets() call #6737
OCPBUGS-2088 : Validate that the rendevousIP is assigned to a master #6716 ARO-1796 : Update Azure SDK for go to v63.1.0+incompatible #6746 openstack: Revert Gophercloud workaround #6663
SPLAT-900 : provision VMs in to failure domains #6738 OCPBUGS-4874 : Remove order dependency for agent CLI string #6739 CORS-2449 : Create CPMS manifest #6695 OCPBUGS-2881 : Destroy the service and host project dns records #6534 Bug OCPBUGS-3921: OpenStack: fix bootstrap destroy cmd #6617
OCPBUGS-3706 : Improve error reporting from agent wait-for install-complete #6730 Better logic to derive vpcRegion/Zone from vpcName/Subnets #6665
update tested instance types on 4.12 #6731
Updating ose-baremetal-installer images to be consistent with ART #6678
OCPBUGS-5151 : baremetal: Extra time for provisioning interface #6729 OCPBUGS-3032 : Report status on the console immediately #6697 Updating ose-installer images to be consistent with ART #6675
OSASINFRA-3057 : openstack: Document Image Registry migration to Swift #6710 openstack: Rely on Go’s stdlib for errors #6656
Updating ose-installer-artifacts images to be consistent with ART #6693
cmd: update import of deprecated terminal package #6594
GCP: Tfvars will determine the user has create firewall permissions #6679
OCPBUGS-4941 : OpenStack: Force JSON content-type in Swift object listing #6707 PowerVS: Defer cancel when calling contextWithTimeout #6700
linter: fix issues since revision 75173a17cf #6712
OCPBUGS-2996 : bump RHCOS 4.13 bootimage metadata #6703 CORS-2340 : hack: replace deprecated go-lint #6601 OCPBUGS-3706 : Wait longer for baremetal #6688 Fix import order using the gci tool #6643
Switch back to gp2 ebs volume type for bootstrap instance #6692
OCPBUGS-2891 : aws: destroy: delete ELB listeners #6528 Consolidate loadsdk debug statements #6686
OWNERS_ALIASES: Remove lucab #6696
OCPBUGS-4549 : azure: replace deprecated AD Graph API #6614 Save rendezvous IP in a file ‘rendezvousIP’ alongside the ISO #6683
OCPBUGS-3987 : Check nmstateconfig content in agent-config.yaml #6674 CORS-2147 : Add documentation for the client certs authentication #6505 OCPBUGS-4367 : Fix missing debug messages when getting baseISO #6662 Use backoff functions in PowerVS destroy logic #6591
OCPBUGS-3032 : Report agent installation problems on the console #6544 OCPBUGS-3668 : fully qualified username must be provided #6596 OCPBUGS-1560 : vsphere zonal, terraform depends on ova import #6498 Agent integration tests proposal #6598
CORS-2291 : terraform: save logs to a file #6532 OCPBUGS-3196 : Set ip=dhcp,dhcp6 for master nodes on dualstack #6626 OCPBUGS-2130 : import ova resource cluster path fix #6519 OCPBUGS-2498 : ose-installer-container: vault: insufficient certificate revocation list checking #6493 Wait longer for VM to obtain IP from DHCP in PowerVS #6651
platformprovisioncheck: fix shadowing of err variable #6595
Alibaba: add the tags of the machine nodes #6535
Azure: use azidentity with adapter #6003
OCPBUGS-4125 : Enable CVO unmanage overrides in bootstrap-in-place installations #6649 openstack: Refactor TFVars generation #6465
Update OpenStack spec dependencies #6382
OCPBUGS-3164 : hold bootkube service until bootstrap has pivoted #6488 OCPBUGS-4355 : Fix return value from execute() #6646 OCPBUGS-4328 : images: updating images to be consistent with ART #6641 vSphere Zonal: validate dns and external load balancer #6612
GCP: remove private zone manipulation #6610
Replace deprecated io/ioutil package #6602
ibmcloud plugin “permission denied” #6627
Bug 2105570 : out-of-bounds read in golang.org/x/text/language leads to DoS #6389 OCPBUGS-3524 : data: azurerm: restore RHCOS SA access configuration #6583 OCPBUGS-3405 : Redact pull secret from agent-gather #6574 Adding aarch64 instance types for azure #6531
OCPBUGS-2931 : Azure Stack: use managed images for compute nodes #6540 OCPBUGS-3985 : Pass featureset to kas #6579 mv ibmcloud to /bin folder #6624
OCPBUGS-3278 : (Agent) Do not require host data in platform baremetal section in installconfig #6573 OCPBUGS-3277 : Restart create-cluster-and-infraenv.service if it fails #6577 OCPBUGS-3933 : OpenStack: Force JSON content-type in Swift #6615 add ibmcloud cli to image #6600
Update vSphere Owner files #6607
OCPBUGS-2384 : [Alibaba] fix the creation of public record #5671 docs: fix broken link to default kubelet.service taint #6593
OCPBUGS-3186 : IBMCloud: Confirm Zones and BYON Subnets #6553 OCPBUGS-3123 : Pass FeatureSet to cluster config render #6576 OCPBUGS-2738 : Uplift terraform-provider-ironic to 0.3.0 #6511 OCPBUGS-3382 : Fix cluster wide proxy #6571 OCPBUGS-3280 : Automatically retry install #6567 OCPBUGS-3304 : Always use first matching mirror in assisted-service #6563 OCPBUGS-2841 : (AGENT) only support amd64 archs #6546 OCPBUGS-3214 : Always add router CAs to kubeconfig, even if console is not available #6557 Update apiVersion for lso operator group #6558
OCPBUGS-2513 : Set PublicContainerRegistries for entries in mirror #6545 OCPBUGS-1627 : [vsphere-zones] Fix user folders #6412 OCPBUGS-1704 : gcp: fail during validation if service usage is not enabled #6516 OCPBUGS-3287 : agent ased installation fix for dual stack vips #6530 OCPBUGS-3096 : Static linking the terraform and providers binaries #6548 OCPBUGS-2911 : Use project after creation #6552 OCPBUGS-3110 : azure: Fix client certs authentication #6527 OCPBUGS-2847 : GCP XPN Featuregates #6522 OCPBUGS-2758 : Provide datastore as full path #6547 Bug 2074299 : update golang.org/x/crypto to address security vulnerabilities #6388 OCPBUGS-2966 : Add GCP CreateFirewallRules to tech preview #6533 OCPBUGS-1791 : add bootstrap configmap during the SNO reboot #6521 OCPBUGS-2290 : Power VS Check for existing DNS permitted network and public gateway #6481 Add linux/arm64 binary to installer-artifacts #6514
OCPBUGS-1033 : support multiple documents in the same extra manifest file #6492 OCPBUGS-3018 : Use result from List function after checking error #6541 OCPBUGS-2144 : Azure: Set appropriate architecture for gen v1 image #6517 go-fmt: apply formatting with golang 1.19 #6497
OCPBUGS-2895 : Azure: Fix DiskEncryptionSet regex validation #6513 AGENT-348 : Warn when information in install-config is ignored #6523 OCPBUGS-2837 : Reduce debug logs in agent wait-for commands #6520 Fix unexpected behavior from merging #6470 and #6500 #6526
AGENT-390 : Include CPU Architecture in ISO filename #6485 docs: feature sets #6506
Agent-321: Cluster and Host validations rework #6500
OCPBUGS-2327 : Add validation for releaseImage and registry.conf #6423 OCPBUGS-2086 : Detect failure in wait-for on transition back to ready #6470 OCPBUGS-2627 : agent-config: Generate missing AdditionalNTPSources in InfraEnv #6495 OCPBUGS-2338 : Don’t use error messages as default values #6486 OCPBUGS-1824 : enhance agent systemd service dependency #6408 OCPBUGS-1704 : Service Usage API is required, not optional #6504 Revert “create: add check for cluster operator stability” #6503
OCPBUGS-2301 : Search Network Project For resources #6499 OCPBUGS-2436 : Revert “Revert “[AWS] Add LB Type in the infrastructure cluster object via install-config yaml”” and fix OCPBUGS-2436 #6491 OCPBUGS-2174 : fix metadata tags not supported in certain regions #6475 Add initial support for OKD/SCOS #6443
Updating golang version to fix gofmt issues #6484
Bug 2117537 : validation rule for invalid rendezvousIP in AgentConfig #6474 create: add check for cluster operator stability #6124
Revert “[AWS] Add LB Type in the infrastructure cluster object via install-config yaml” #6490
Add LB Type in the infrastructure cluster object via install-config yaml #6478
Bug 2059491 : [Alibaba] fix the format of Name #5668 AGENT-284 : Allow user to choose platform type #6438 OCPBUGS-2262 : Update gcp explain for DNS zones #6483 OCPBUGS-1941 : bump RHCOS 4.12 bootimage metadata #6452 Bug 2072202 : Check for api and api-int resolution during cluster install #5816 OCPBUGS-2259 : Fix soft-anti-affinity known issue #6479 Removing jstuever from OWNERS #6480
OCPBUGS-1881 : vsphere/destroy: improve logs when folder is not empty #6456 Adding “syd05” as a choice for zones in PowerVS #6468
OCPBUGS-1856 : IBMCloud: Allow traffic to kube-api-lb #6458 update to release.openshift.io/feature-set to match OCP 4.12 #6476
AGENT-347 : generate OS_IMAGES dynamically #6441 OCPBUGS-1900 : Avoid SNO bootstrap jsonpath error #6463 OCPBUGS-1698 : multi-zone network slice validation #6422 OCPBUGSM-47893 : added validation rule for invalid mac address in AgentConfig #6473 populate vSphere infrastructure spec #6457
OCPBUGS-1896 : Validate Credentials Mode After Install Config step #6453 OCPBUGS-2029 : Fix agent installation InstallConfig proxy processing #6461 Add docs about IPv6 on the additional Networks #6435
AGENT-375 : generate FIPS annotation for ACI #6467 AGENT-349 : Allow console login to Agent ISO #6464 OCPBUGS-1913 : Agent Installer: Do not fail on deprecated apiVip and ingressVip values #6462 Power VS: Disconnected cluster support #6347
azure: create bootimages using image gallery #6304
CORS 2046: GCP Add base domain validation when DNS zone is specified #6300
Fixes tested_instance_types_aarch64.md #6451
pkg/types: add feature set support #6336
pkg/asset/releaseimage/pullspec: Include override pullspec in log message #6460
Bug 2104997 : Add additional fields to proxy manifest #6374 OCPBUGS-527 : Improve error message in case of failure during the agent image generation #6436 AGENT-271 : Generate kubeadmin-password with ISO #6313 AWS: destroy: move helper functions to their own file #6131
AGENT-369 : SNO validation #6444 Add host-config status to agent-gather #6442
AGENT-321 : Move validation failures to debug log level #6446 CORS-2073 : Remove terraform provider “random” #6387 Increase start timeouts for assisted services #6445
OCPBUGS-891 : aws: add explicit EIP dependency for nat gw #6379 images: UPI: update gcloud install on rhel8 container #6158
OCPBUGS-1490 : [vsphere-zones] Handle no set zones #6390 powervs: introduce manifest for OVNKubernetes configuration #6405
Power VS: Enable IBM DNS service for private cluster support #6228
AGENT-264 : validate agent-config macs #6434 Ensure installer created ControlPlaneMachineSets are active on install #6425
AGENT-330 : Add disconnected instructions to MCE integration doc #6424 OCPBUGS-561 : bump RHCOS 4.12 bootimage metadata #6403 Remove extra blank line in DHCP debugging #6439
Change PowerVS default machine CIDR #6428
Change error on execute() to a debug message #6427
fix agent-config-template emitted by agent create #6306
CORS 2040: [gcp] Adding Public and Private Managed zones #6288
Bug 2116904 : Base generated NMStateConfig on InstallConfig name #6244 AGENT-354 : script for gathering install data #6402 AGENT-364 : Validate network type for SNO clusters #6419 cleanup unused types and constants after platform spec refactor #6370
AGENT-351 : Add MachineNetwork to agent-cluster-install for dual stack #6364 AGENT-319 : Set agent-config version to v1beta1 #6416 OCPBUGS-816 : Check that cached base ISP matches hash in release payload #6318 AGENT-365 : Set install invoker to “agent-installer” #6418 Bug 2055247 : pkg/asset/installconfig/azure: standardDDv5Family is not currently supported #6203 Verifying yq is installed properly in libvirt installer containers #6319
Agent installer: try to make systemd services more robust #6312
OCPBUGSM-47737 : Do not enable pre-network-manager-config.service #6323 Add documentation for agent networking #6400
vsphere: prevent duplicate validation check in multi-zone #6398
AGENT-288 Log rendezvous host IP when creating agent ISO #6393
AGENT-309 Display the rendezvous IP in motd and issue #6386
Agent: Don’t pass AdminKubeConfigClientCertKey #6373
hack: Use golang-1.16 image of origin-release #6367
OCPBUGS-1231 : disconnected machine-os-images info #6339 AGENT-325 Set NetworkType in AgentClusterInstall #6287
Bug 2094716 : docs: fully air-gapped AWS IPI install #6076 OCPBUGS-1489 : [vsphere] Loop over all folders for destroy #6378 AWS: resolve subnet-related FIXMEs #6140
go getter update for terraform & terraform providers #6352
GCP: Add me-west1 region #6359
aws: replace deprecated object in terraform config #6383
powervs-delete-named-dhcp #6365
azure: validation: avoid specifying capabilities twice #5952
CORS-2280 : IBMCloud: Add DNS Record for internal public traffic #6375 OCPBUGS-729 : vSphere 6.7u3 failing privilege validation #6293 Agent: Increase bootstrap-complete timeout #6384
aws user tags: set limit == openshift/api #6368
OCPBUGS-927 : azure: add sleep between zone and link creation #6349 Update power-go-client #6229
Fix generating Machine objects for PowerVS #6366
AGENT-328 : Add documentation for agent mce integration #6358 aws: allow clusters with public only subnets #6342
AWS UPI docs: remove control plane machineset #6346
OCPBUGS-705 : vSphere privilege checking failing when providing user-defined folder and/or resource pool #6281 GCP: allow environmental authentication #6330
AGENT: add ipv6 support #6328
OCPBUGS-1234 : [CFE-580] Fixed error condition for user tag validation #6356 OCPBUGS-717 : Upgrade python3.7 to 3.8 for AWS UPI #6270 OCPBUGS-963 : OpenStack: Lift validation for 14 chars cluster names #6309 OCPBUGS-1234 : [CFE-580] Extend user tags limit to 40 based on AWS limits #6345 OCPBUGS-1226 : OpenStack UPI: Create server group for Computes #6340 Power VS: use the new name field for the dhcp nw #6294
Add AWS r6i into tested instance types table #6337
vsphere zonal: platform spec and terraform updates #6329
CORS-2280 : IBMCloud: Add DNS Service permitted VPC #6325 CORS-2280 : IBMCloud: Add DNS Service destroy #6321 OCPBUGSM-47740 : No networkconfig needed with DHCP agent config #6317 azure: add support for arm64 instances (Dps_v5 instances) #6298
azure: Add client certification to terraform #6250
pkg/asset/ignition/bootstrap/cvoignore: Add group/kind/name(space) collision detection #6247
Add additionalTrustBundlePolicy field to allow CA bundle propagation #6232
OCPBUGS-1247 : Restrict CPMS from being created with single node clusters #6331 GCP: Add createFirewallRules parameter to installconfig. #6338
CORS-2043 : GCP: Passsthrough installer service account to Terraform r… #6326 Bump Nutanix Prism Go Client dep to c8a2536 to include refactors. #6308
OCPBUGS-927 : Add depends to enforce order for azure terraform dependencies #6311 vSphere: Zonal Terraform #6064
Terraform go 1.18 #6257
Revert “AWS: Create ControlPlaneMachineSet CRDs” #6324
OCPBUGS-302 : bootstrap gather: fix panic when platform is “none” #6243 Add bind-utils in upi installer image #6277
download ‘aliyun’ #6265
AGENT-308 : Add 4.12 to OS_IMAGES #6315 OCPBUGS-889 : bump default channel to stable-4.12 #6302 vSphere: Add the ability to attach a tag to a mob #5357
Power VS: Machine CIDR #6264
AGENT-318 : Merge agent-based installer #6263 CORS-2280 : IBMCloud: Add TF support for private DNS #6282 vsphere: error checking while creating vsphere clients #6305
Correct the GCP machine series name #6296
add bind config for PowerVS publish==internal IPI #6227
Bug 2084471 : validate baremetal hosts names are lowercase RFC 1123 #6112 terraform: azurerm bump provider to v3.19.1 #6262
Power VS: Enable global routing for cloud connection and specify dns #6289
fix check for control plane suitability for default zones #6295
Bug 2070744 : Fix infinite loop when failing to untag resources #5995 AWS: Create ControlPlaneMachineSet CRDs #6172
Add dual stack API & Ingress VIP support for on-prem platforms #5798
OWNER_ALIASES: remove Saqib Ali from the coreos approvers and reviewers #6291
gcp: machines to use networkProjectID when defined #6284
Bump FCOS to latest stable #6290
Switch delete ordering of CloudConnect and VPCs #6280
gcp: specify network_project_id for network and subnets #6283
Bug 2117439 : Azure masters should publish on an internal load balancer #6230 Bug OCPBUGS-164: OpenStack: Update Kuryr storage requirements #6286
CORS-2271 : IBMCloud: Add DNS Service support - installconfig #6255 Bug OCPBUGS-164: OpenStack: Set minimum disk of a flavor to 100 GB #6268
validate vSphere privileges #5741
Add support for private DNS server to PowerVS #6157
GCP: Remove firewall rules when providing network project id #6219
GCP: Add missing regions #6259
manifests: Pass the NetworkProjectID to manifests #6242
support for multi-zone/region installation #5911
cmd/openshift-install/create: One shot console access #5336
IBMCloud: Pull in latest openshift/api changes #6056
OCPBUGS-268 : vSphere - enable steal time accounting #6215 Bug 2028474 : oVirt: Removed cluster name length limitation #6206 gcp: Add validation for Network Project Data #6207
Bug 2098072 : vsphere: fix default disk type when not speficied #6233 Bug 2061947 : IBMCloud: Handle missing RG #6152 CORS-1994 : Update Installer Dependencies #6175 Bug 2109538 : nutanix: allow creating manifests without Prism Central connection #6149 IBMCloud: Use unique mutex for Client retrieval #6241
OCPBUGS-262 : UPI image download govc rate limit failure #6047 Extract the image-references file from the release, pass it to machine-config-operator #6234
powervs: allow VPC, Cloud connection, and NW re-use #6217
Bug 2109800 : IBMCloud: Allow metrics traffic #6208 IBMCloud: BYON Enablement #6183
IBMCLOUD Power VS: Updated Max and Min machinepool resource limits #6147
GCP: Added user specified tags on control plane instances #6199
Azure Stack UPI Docs: Remove Feature Gate CRs #5657
Bug 2115790 : bump RHCOS 4.12 bootimage metadata #6212 terraform: ibmcloud: bump provider version #6210
Revendor with golang 1.18 #6077
Update installer images to use golang 1.18 #6163
GCP: Add networkProjectID parameter to install-config. #6166
powervs: default to tier1 storage #6211
Download yq in upi installer containers #6008
Remove LoadBalancer settings from cloud provider config #5834
Add SPLAT members to platform reviewer/approver aliases #6202
Alibaba: Use a static region list #6178
Power VS: Add Montreal as a supported region #6209
OWNERS_ALIASES: Add Adam Piasecki (c4rt0) #6181
Switch libvirt VM’s to vnc graphic mode #6062
GCP: Added user specified tags on compute instances in installconfig #6185
CORS-2009 : Update default release image #6180 Fix ineffassign #4866
Bug 2105933 : data/data/coreos: update FCOS to 36.20220716.3.1 #6108 Bug 2114754 : gather: properly delete serial log dir #6197 tls: only report error if one happened #6195
Updating ose-installer-artifacts images to be consistent with ART #6096
Revert “GCP: Revert Instance Type from N2 to N1” #6058
CORS-2167 : Remove UPI Metal TF references #6174 Change defaultNetworkType to ovn-kubernetes #6014
PowerVS: Add 60 sec wait time after VPC creation. #6162
updated terraform-provider-ovirt #6169
Update vsphere permissions file #5387
Update kube components to v0.24.0 #6165
IBMCloud: BYON Enablement - SG Rule Cleanup #6143
BUG 2105341: Remove required check for control planes in boostrap gather #6168
BUG 2109388: Add AWS S3 Bucket Permissions #6150
added soundcard_enabled field to tf resources for master vms #6148
Update Installer approvers list #6151
IBMCloud: Update RHCOS image for VSI #6142
Bug 2102324 : Fix validation errors for instance type #6127 Updating ose-baremetal-installer images to be consistent with ART #6085
As a developer I want to update installer to use propagateUserFlags for GA #5994
terraform: update azure provider to v3 #6000
Azure console logs gathering #5904
OWNERS_ALIASES: drop miabbott from coreos aliases #6123
Gcp console logs gathering #5902
IBMCloud: BYON Enablement - Terraform #6051
Bug 2095323 : Create security group rules for each MachineNetwork CIDR #6125 Bug 2106061 : bump RHCOS 4.12 bootimage metadata #6129 test: use T.TempDir to create temporary test directory #5730
IBMCloud: BYON Enablement - InstallConfig #6050
Bug 2097691 : vsphere installconfig: use full dc path in network validation #6105 Terraform: Remove azureprivatedns provider #5983
Update OWENRS-ALIASES after changes in the team #6113
Bug 2106667 : OpenStack UPI: Allow setting external DNS #6116 Bug 2061947 : IBMCloud: Skip DNS Record delete #6013 Bug 2102228 : rhcos: Move to rhcos.mirror.openshift.com #6109 Bug 2082395 : Make azure baseDomainResoureGroup optional for private c… #6049 cmd/openshift-install/gather: Errorf for Available=False #5985
Bug 2070318 : Allow setting bootstrap kubelet ip #6042 Updating ose-installer images to be consistent with ART #6083
Bug 2098299 : Switch to perform normal marshalling with unknown fields #6039 openstack: Update base images #6082
AWS Destroy: Clean up endpoint services #6089
openstack UPI: Remove Swift example, use Glance #6091
Bug 2104578 : Remove unnecessary SG rule #6086 Bug 2090836 : Fixes CFE-489 - AWS installer should go through proxy for s3 bootstrap ignition call #5973 OpenStack: prompt FIP description #6075
Bug 1944365 : openstack: validate that VIPs are outside DHCP pools #6069 openstack UPI: clarify naming of RHCOS image #6081
Bug 2102324 : Fix panic when unknown region is provided. #6065 Bug 2103144 : openstack: validate apiVIP and ingressVIP to be semantically different #6067 Bug 2103236 : Provide proper error message for empty projects list #6071 BUG 2102632: destroy/gcp: Use min length for destroying disks #6068
Bug 2099401 : IBMCloud: Set regional URL for ibmcloud client #6046 openstack: Prepare for a UPI CI job #6055
Bug 2100841 : Print the “export KUBECONFIG=…” command on its own line for easier cut-and-paste #6018 Bug 1997704 : [OpenStack] Document in-tree limitation for external LBs #6033 Bug 2100496 : oVirt VM creation fails on empty affinity group description #6044 Bug 2064693 : Restore ability to use local clouds.yaml #5947 Bug 2047732 : [IBM]Volume is not deleted after destroy cluster #5962 Bug 2076646 : destroy/gcp: Disk names are filtered using kubernetes name format #5976 Bug 2095226 : Added changes to verify cloud connection and dhcp serviceinstance details of a powervs instance #5899 Bug 2097940 : PowerVS: Handle optional VPCRegion #6020 Bug 2082283 : Transition to the oVirt Terraform provider v2 #5867 Bug 2096905 : Swap Nutanix Prism Client #6002 Bug 2094694 : Nutanix cluster name validation #5991 Bug 2098243 : Adding error handling to powervs platform #5958 Bug 2096605 : vsphere: validate diskType if supplied #6019 Bug 2049108 : Fix network interface not found error #6016 Bug 2097260 : Fixes openshift-install create manifest failure of Power VS Platform #6007 Bug 2092107 : Re-add Power VS install-config DNS validation tests #5938 Bug 2092296 : Changed DefaultMachineCIDR of PowerVS to 192.168.0.0/16 #5940 Bug 2097239 : Changed Lower limits of CPU for PowerVS Cloud #5929 Bug 2090816 : Increase bootstrap timeout, not k8s API timeout #6010 Bug 2095917 : Nutanix set osDisk with diskSizeGB rather than diskSizeMiB #5998 Bug 1859153 : IAM instance profile race condition #5982 OWNERS_ALIASES: update coreos aliases #5989
Bug 2096352 : Collect whole journal and netstat data #5988 Bug 2090816 : baremetal: wait longer for bootstrap to complete #5981 baremetal: static IP for bootstrap node #5787
Bug 2068180 : update doc for DNS and disconnected clusters #5974 Bug 2090049 : GCP Destroy resources that are owned by cluster #5965 Bug 2094902 : Simplify cross-compiling #5905 Bug 2085336 : based on 4.11 CORS-1916 add the vm family #5913 Bug 2089563 : Use Power VS machine provider spec from openshift/api #5873 Bug 2093368 : OpenStack: Fix LoadBalancer FIP deletion on destroy #5964 Bug 2057582 : Remove all occurances of packet_device from upi/metal #5969 Bug 2057582 : For metal upi update source and versions of terraform providers #5941 BUG 2075459: IOPS was not being set even when manually configured #5925
Bug 2084280 : Remove optional services from permissions check #5915 Bug 2085380 : azure: validate VM image and instance HyperV gen match #5918 Bug 2084580 : Add check to validate cluster name for dots #5931 Bug 2086791 : Azure: validate ultrassd instance types in multi-zone regions #5937 Bug 2090487 : SNO network type update #5927 Updating ose-installer images to be consistent with ART #5950
Updating ose-installer-artifacts images to be consistent with ART #5908
Bug 2085187 : terraform: revendor golang.org/x/sys #5896 Bug 2088660 : Fix for absence folder for bootstrap ignition iso #5935 Bug 2089682 : Ensure Presence of Overlay networks in cluster is handled gracefully #5939 Bug 1965468 : Revert “Bug 1909136: OpenStack: delete volume snapshots” #5923 Bug 1969794 : Correct typo #5922 Bug 2084441 : azure: proper premiumIO validation message #5924 Bug 2078431 : Set TF_DATA_DIR to the Terraform Dir. #5864 Bug 2086718 : Add destroy cluster support for PowerVS #5737 Bug 2086936 : vSphere: change socket back to cores #5914 Bug 2086056 : openstack: add doc for OVS HW offload #5886 Bug 2065893 : bump RHCOS 4.11 bootimage metadata #5887 Bug 2085721 : Fix name for customization controller image #5909 Power VS: Use bucket name from coreos stream rather than inferring it #5782
Increase Unit Testing Coverage of AWS Install Config to Include ValidateForProvisioning #5791
Added changes for validating the IBM Account Type for Provisioning Power VS resources #5734
Updating ose-installer images to be consistent with ART #5895
AGENT-40 : allow reading cert keys #5872 Power VS: Separating bootstrap resources to own stage for clean destroy #5901
Aws console logs #5807
GCP: Revert Instance Type from N2 to N1 #5898
Dynamic retrieval of GCP Regions for a Project #5815
Update to Golang v1.17 #5870
azure: move zones functionality to the client API #5844
azure: validation: dedup getting the capabilities #5893
update azure arm templates to support customer provided vnet #5880
machines: Set defaults for machine instance types #5841
Azure Provider: fix vmNetworkType defaults by checking vm capabilities #5846
OpenStack: fix SR-IOV documentation TOC #5881
Bug 2078875 : Delete all the ports from tagged Neutron networks. #5838 Bug 2082604 : Revert “image: set os name to red-coreos-stable-amd64” #5869 openstack: Add the Kuryr squad as approvers #5866
Update template for CloudProviderConfig #5875
Bump Azure Stack Terraform Provider for Go 1.18 #5865
Add -n argument to copy network config from install environment to install-to-disk.sh.template #5795
Update SR-IOV & DPDK doc for OpenStack #5712
Bug 2080054 : Add ‘ARG TAGS=“”’ line for each build step #5794 Pull the OS Image for Nutanix via URL #5868
Power VS: fix terraform vars #5863
Update TF Provider Version to 1.40.1 #5862
Use neutral pronoun in doc. #5384
Change the default machine pool config for Nutanix #5857
Bug 2074210 : Add new Regions to the GCP Installer configuration list #5811 Update os name to correct value #5860
Update the comment explaining vCPUs on Nutanix #5859
Bug 2064170 : Fixed duplicate strings in explain #5836 Bug 2077662 : Fix AWS Platform Provisioning Check #5831 Support RAID and BIOS configuration for master nodes of baremetal IPI deployments #5196
Power VS: Create Remaining TF Resources #5780
Handle the mapi-provider-nutanix types moving to openshift/api #5812
vsphere: upi ignition leak #5850
vSphere: ignore bootstrap eagerly scrub changes #5848
Bug 2078895 : ovirt: fixing incorrect ‘format’ value validation #5847 vsphere upi: missing etc resolv #5842
vsphere: remove unused namer interface #5824
Bug 2029438 : Set rc-manager=unmanaged on baremetal bootstrap #5482 Unpack to install dir #5825
baremetal: remove redundant proxy setting #5598
Determine Nic name in Bootstrap VM for ARM and x86 #5698
Add bootstrap directory for Nutanix platform #5828
Provider Azure: Enable accelerated networking on control plane nodes #5309
Ensure that the /bin/terraform-provider-matchbox binary is present #5829
Bug 2074659 : Fix empty string usage in ValidateForProvisioning #5801 vsphere: upi, use community ignition provider #5808
Bug 2076393 : vsphere: no longer logout of platform client before finished #5818 Bug 2076880 : for vsphere ipi add cluster domain to the uploaded vm configs so that 30-local-dns-prepender can use it #5788 Ensure Nutanix API VIP is populated in the SAN for the MCS Cert #5821
Bug 2048451 : Fix proxy dial to pick all proxies #5743 update the vm types OCPQE-8674 #5704
data/bootstrap/files/usr/local/bin/bootkube: –rm all Podman containers #5803
libvirt: use el8 repo for Google Cloud SDK #5467
AWS IMDSv2 support #5793
Bug 2075873 : data/data/coreos/fcos.json: update initial FCOS to 35.20220327.3.0 #5817 Changing the machine-config service name #5707
Ensure ignition host is set to API VIP for Nutanix platform #5813
Add Power VS-specific fields to cloud-provider config #5809
Check for CVO failing condition before exiting as success #5745
Add in-repo documentation for user-selectable capabilities #5732
vSphere session cleanup #5796
Power VS: Add basic install-config validation #5779
Adding public&private zones to DNS config on PowerVS #5749
Revert “cluster: unpack terraform binaries into install directory” #5810
Bug 2064170 : Fixed Azure punctuation installconfig.controlPlane.platf… #5802 Repin libvirt-version #5797
Add IBM Power VS: tf data #5614
cluster: unpack terraform binaries into install directory #5715
azure: Enable HyperVGeneration setting for Azure disks #5721
pkg/destroy/aws: Log unfiltered pagination #5775
terraform: fix module name of terraform providers #5727
remove platform.azure.osDisk #5785
Lower severity of ListAWSDefaultServiceQuotas warning msg #5747
images: Update terraform version in UPI image #5762
Bug 2033482 : vsphere: ensure terraform variables are defined #5778 Add VolumeID testscases for Power VS machinepool #5742
Power VS quota asset #5748
MGMT-9797 : Set single-node none-platform clusters Ingress DefaultPlacement to ControlPlane #5746 Added platform validation testcases for IBM PowerVS platform #5708
Add cluster destroy logic for Nutanix clusters #5638
Add IBM Power VS: tfvars #5615
pkg/asset/manifests/operators: Set kubernetes.io/description for cluster-config-v1 #5783
Updating ose-baremetal-installer images to be consistent with ART #5590
Add exit code for infra, bootstrip and install failures #5702
Bootstrap-in-place ignition creation should also create a worker.ign file #5786
Remove defaultStorageContainer from nutanix platform installconfig #5784
Update installconfig validation for Nutanix #5781
Re-update BMO vendor to use ipxe for iRMC #5662
Bug 2038774 : [IBM] add IPsec IKE UDP ports 500, 4500 to security group #5539 Update declarative assets for Nutanix #5636
Bug 2056460 : Preallocated disks for OCP nodes on oVirt #5594 gather: collect sssd journal logs #5771
Add nutanix-specific terraform variables #5637
Removing no-longer-needed DNS etcd stuff #5764
Add nutanix-specific customizations to installconfig #5633
Update default releaseimage to 4.11 #5774
collect machine state in bootstrap gather #5770
Refactor UltraSSD tfvars #5757
Bug 1918005 : vsphere: Use Managed Object ID for networks instead of potentially duplicate name. #5673 Azure: validate UltraSSD instance types #5759
OWNERS_ALIASES: Update current installer team #5766
Validate disk encryption sets #5692
vendor: update api to latest version to use AzureUltraSSDCapabilityEnabled #5756
vsphere: make cluster destroy more resilient to api failures #5556
Bug 2061891 : IBMCloud: Add br-sao region to static list #5760 Add Nutanix-specific customizations to manifests #5631
terraform: add terraform verification to ./hack/verify-vendor.sh #5675
Add nutanix-specific customizaitons to machines #5632
Bug 2047935 : bump RHCOS 4.11 bootimage metadata #5729 Bug 2066463 : IBMCloud: Patch IBM client auth #5736 Bug 2062998 : Update region check for coreos AMIs #5731 terraform: compress provider binaries faster #5739
Add nutanix-specific customizations for assorted assets #5634
Bug 2048067 : [Alibaba] fix location service endpoint #5664 Bug 2060687 : terraform: fix setting of zone in load balancers for non-zonal azure regions #5684 Doc: Update VIP number to 2 #5599
Updating ose-installer-artifacts images to be consistent with ART #5591
Add the terraform plugin for Nutanix #5635
Add IBM Power VS: cluster assets #5651
AlibabaCloud: fix for bootstrap teardown removing slb backends #5682
Use powervs NewClient in GetDNSZone #5723
vsphereprivate: update to v2 terraform sdk #5716
Bug 2064969 : terraform: upgrade aws provider to v4.5.0 #5719 Revert “Merge pull request #5665 from r4f4/azure-azid-adapter” #5722
vendor: upgrade aws sdk to v1.43.19 #5710
Azure: Add ultraSSDCapability to control plane instances. #5701
Bug 2061549 : azurestack: create the api DNS record when publishing internally #5691 Set ignition string to sensitive #5720
Bug 2047670 : aws: remove validation check for internal publish strategy #5695 baremetal: refresh owners list #5713
include conn timed out err for bootstrap collection #5677
Bump gophercloud #5686
Add Nutanix-specific platform types #5603
vSphere: Update terraform provider to current upstream #5694
Add IBM Power VS: machine assets #5611
Bug 2060617 : fix(ibmcloud): Properly match regex for DNS destroy #5679 Add IBM Power VS: manifest assets #5610
Azure azidentity adapter #5665
Validate BMC driver supported and requires provisioning network #5458
terraform: build binaries on go.mod changes #5672
Add IBM Power VS: installconfig assets #5612
Add VPCRegionForPowerVSRegion function #5700
Azure disk encryption support #5641
Bug 2060508 : azurestack: fix backend address pools for internal publishing #5678 azure/validation: Skip “resource group empty” check for ARO #5330
Bug 2061527 : IBMCloud: Missing infra providertype #5687 Bug 2061544 : azurestack: stop pinning to Standard_LRS for disk type #5688 Bug 2060970 : data/data/coreos/fcos.json: update initial FCOS to 35.20220213.3.0 #5680 doc: terraform maintenance document #5670
Updating ose-installer images to be consistent with ART #5589
remove stray tmp/simple_log.log file #5606
GCP may also return Forbidden status when trying to check quotas #5649
Bug 2026356 : Fix bootstrap disk instance type #5515 Bug 2034147 : Validate num cores with vcpus #5656 Bug 2059213 : build all terraform providers and terraform binary locally #5666 Add IBM Power VS: types #5609
point 06_workers.json to azurestack version #5661
Bug 2021041 : vsphere: Not found TagCategory when destroying ipi cluster #5558 Render the CVO manifest with user-specified capabilities from the install-config #5645
isolate terraform #5507
Bug 2046181 : baremetal: reduce API timeout to 15 minutes #5639 Check for DeletePlacementGroup permission before destroying cluster #5655
OWNERS_ALIASES: Drop wking from approvers #5644
data/manifests/bootkube/cvo-overrides: Default to stable-4.11 #5621
Updated owners to current OCP on RHV members #5654
baremetal: use combined Ironic, drop MariaDB #5553
Update OWNERS_ALIASES #5640
Bug 2047257 : openstack: Migration script should –force drain #5618 Tested instance type lists for AWS/Azure/GCP #5517
Bug 2047925 : Update BMO vendor #5588 cmd/openshift-install/create: Do not attempt analysis when we fail to gather logs #5582
Bug 2046181 : baremetal: wait for image-customization to come up #5579 aws: support the entirety of the secret partitions #5597
Bug 2050767 : vsphere: check that network exist in provisioning validation #5607 Bug 2048451 : Use proxy dial to validate endpoints #5600 Bug 2050146 : Don’t shortcut OpenStack scraping if quota is unavailable #5601 Bug 2048222 : Remove non-public AWS regions from list of regions #5595 Azure Stack: Add UPI Instructions for internal CA #5573
Remove Caleb Boylan from core installer reviewers #5593
Ensure removal of placement-groups during cluster destroy on AWS #5528
Bug 2047455 : Update custom image os type #5587 Bug 2047255 : [Alibaba] fix validation of resource group ID #5584 Bug 2046025 : [Alibaba] fix destory exist private zone #5583 Bug 2043003 : [Alibaba] fix destroy not exist security group #5580 Bug 2045916 : IBMCloud: Stop defaulting to dedicated storage profile #5578 Bug 2043297 : bump RHCOS 4.10 bootimage metadata #5577 Bug 2042370 : [Alibaba] fix installer index panic #5575 Bug 2042770 : [Alibaba] fix resource creation for existing network #5574 Bug 2040143 : [Alibaba] remove unsupport regions #5572 Bug 2035720 : [Alibaba] support internal publish strategy #5534 Bug 2025868 : Check HyperVGenerations for instance type #5509 Bug 2042036 : remove options for existing resources which are currently not supported #5568 Bug 2041765 : Adjust the startup order of httpd container #5541 Bug 2041750 : [Alibaba] fix endpoint error in some regions #5571 Bug 2047258 : Read GovCloud from RHCOS stream #5585 Bug 2045927 : Add proxy for ironic-agent.service #5569 Bug 2041694 : [Alibaba] fix system disk category of bootstrap #5564 Bug 2042655 : revert delay of bootstrap control plane teardown for alibaba #5550 Bug 2041319 : [Alibaba] fix VSwitch subnets overlap #5566 Bug 2041926 : [Alibaba] fix creating public record being skipped #5565 Bug 2023839 : Bump Fedora CoreOS to 35.20220116.2.0 #5567 Bug 2038166 : openstack: Fix invalid-https-certificate detection #5576 Bug 2037209 : update alibaba for provider spec api changes #5562 Bug 2037209 : vendor: update openshift/api to latest in preparation for alibaba machine provider changes #5563 Bug 2043731 : Add IP outputs for IBM terraform instances #5538 Bug 2037813 : [baremetal] networkConfig field now accepts yaml instead of string value #5545 Bug 2042315 : Fallback to External IP_OPTIONS when ProvisioningNetwork is Disabled #5548 Bug 2040160 : [Alibaba] fix EIP metering method #5547 Bug 2026321 : Remove allowed values for nodeVMsize #5532 Bug 2042438 : openstack/Dockerfile: add make and gettext #5546 Bug 2033271 : [Alibaba] fix deletion of resource group #5536 Bug 2041598 : Azure Stack remove CA bundle from CPC #5543 Bug 2017874 : Check quota for G and VT instances #5510 Bug 2038166 : openstack: Document legacy HTTPS cert validation #5544 Bug 2041361 : [Alibaba] fix load balance listener strategy #5540 Bug 2033524 : [Alibaba] support for list existing domains #5533 Bug 2035705 : Azure: Only attempt to destroy resourcegroups if present #5516 Bug 2039241 : [baremetal] use podman secret for image-customization server #5525 Bug 2035454 : [alibaba] fix deletion of the OSS bucket #5530 Bug 2039109 : Fix image-customization-controller image pull failure #5513 Bug 2039408 : Add northamerica-northeast-2 region to GCP validation #5531 Bug 2034527 : Pass different IP options to installed CoreOS image and IPA #5521 Bug 2039689 : Alibaba: fix payment method for NAT gateway #5529 Bug 1965969 : aws: Fix dns destroy logs #5494 Bug 2038384 : Azure: Update Default Instance Types #5519 Bug 2020480 : [vsphere] installation failure sometimes with error: the object ‘vim.Folder:group-v******’ has already been deleted or has not been completely created #5495 Bug 2033239 : Alibaba: fix the wrong default region #5490 Bug 2034537 : openstack: Update OWNERS #5503 Bug 2025788 : Check vCPUsAvailable for given instance type #5505 Bug 2019977 : Validate region provided in install config #5432 Bug 2028695 : Delete bootstrap profiles during cluster destroy #5506 Bug 2034245 : terraform: use the correct os for terraform providers #5501 Bug 2033749 : Azure Stack: Terraform Local Provider #5497 Baremetal: Deploy using CoreOS ISO from the release payload #5473
azurestack: Add a custom rhcos image field for ASH #5468
tf/stages: delete unused code around compat and gather, and improve comments #5476
Terraform: Unset TRACE-level debugging #5493
Azure Stack: fix versions for Terraform Upgrade #5492
Alibaba: fix: add the availability zone of worker #5438
AWS: Remove unused Instance Class Function #5335
tf/alibaba: fix name of alibaba tf provider #5489
azurestack upi : get VHD_URL with openshift-install coreos print-stream-json #5470
ibmcloud: remove resource group question from survey #5462
Remove GCP cluster api provider #5437
Bug 2032521 : vendor: address eventually consistency creating aws dhcp options associations #5488 machineconfig: Use KernelArguments field instead of kernel-args file #5439
asset/tfvars: use generic name for platform tfvars file #5477
Bug 1981941 : Upgrade terraform to 0.14.6 #4729 Azure Stack: add CA support in bootstrap ign stub #5430
pkg/asset/installconfig/aws: public DNS validation #5189
owners: refresh baremetal-approvers/reviewers #5485
tf/stages: add resolution to stages for openstack and ovirt #5484
Alibaba: support existing VPC, VSwitchs and PrivateZone #5379
images/libvirt: provide specific version of google cloud sdk #5486
aws: Update our local zone filtering code #5483
OpenStack: Instruction on how to deploy on ovs-dpk #5390
Bug 1921627 : Shorten instance group suffix to ig #4828 azurestack: Fix cluster tag check for A record destroy #5362
Openstack: Split terraform into stages #5078
Alibaba: fix the validation of instance type #5480
Baremetal: Split terraform into stages #5064
ovirt: split terraform into stages #5034
aws: changing default EBS type on masters to gp3. #5239
openstack: Document Control plane node migration #5475
Alibaba: refactor validation of machine pool #5426
Alibaba: format the log of the destroyer #5435
Cleanup machine references to ibmcloud SG #5472
Azure Stack Bootstrap Destroy Bug #5443
Bug 2025464 : aws: get ips for all control plane instances for bootstrap gather #5465 openstack: Document credential rotation #5471
Azure Stack availability set #5442
aws-gp3 support: update vendor aws-sdk-go and terraform-provider-aws #5373
Alibaba: fix: destroy the records of the current cluster #5421
azure upi: get VHD_URL with openshift-install coreos print-stream-json #5469
rhcos: ami regions from rhcos stream at runtime #5466
Alibaba: fix: replace the ic.ClusterName in the validateClusterName #5461
Bug 2025093 : Remove The Default Value For The Disk Provisioning Type of Vsphere #5416 close a verify-codegen ci failure loophole #5447
azure: Fix terraform cluster IP output #5448
Bug 1964380 : remove privateDNSZoneName #5459 Bug 2027501 : bump RHCOS 4.10 bootimage metadata #5452 bootstrap: remove support for certs lacking SAN #5464
Alibaba: fix: rename the bootstrap output variable #5460
docs/dev/pinned-coreos.md: update rhcos-stream.json example #5453
Bug 2020216 : replace public-access with sas token in bootstrap deployment #5457 pkg/types: Correct docs for deprecated options #5444
Revert “open cluster-policy-controller ports for metrics” #5451
Bug 1997059 : aws: Filter out local zones when generating a default list of zones #5392 Condense IBM Cloud SG names #5455
Bug 1968364 : azure: Update upi docs to remove mentions of sshKeyData #5456 Generate network config secrets for baremetal platform #5247
machines: Extract root disk sizes to constants #5169
Update URL from cloud.redhat.com to console.redhat.com #5137
azurestack: Fix gather bootstrap for azurestack #5382
installer-artifacts: add darwin/arm64 binary #5418
Alibaba: fix kubebuilder validation #5406
Bug 1999668 : Azure: Ensure destroy doesn’t panic when invalid credent… #5314 Bug 1964380 : azure upi: do not create etcd DNS records #5394 Alibaba: fix: remove the default value #5410
libvirt: add doc on a default load balancer configuration for libvirt #4930
vendor: update terraform-provider-google for rate limit fix #5417
Alibaba: fix: remove unused ResourceGroupID #5431
Bug 2027387 : fix(ibmcloud): Do not compute image file checksum #5436 Alibaba: fix: remove the master node records #5422
OpenStack: Parallelize port deletion #5429
Bug 1968364 : azure: fix upi bug preventing using ed25519 keys #5407 Add Kiran and Caleb into Installer reviewers #5433
Alibaba: fix: use EXACT search mode #5411
baremetal: add NetworkConfig field #5207
Alibaba: fix: update comment on ResourceGroupID #5415
fix/alibaba-slb: remove unused listeners, and set kube-apiserver to HTTP/6080 #5427
Alibaba: Update tag and API types to mirror other providers #5381
Alibaba: update tags for cloud resources #5385
Alibaba: fix: use the max function #5414
Revert “Workaround golang linux/arm64 link error” #5402
remove MCO manifests #5383
feat(ibmcloud): Support VPC dedicated hosts #5295
Alibaba: support to create a resource group #5378
Use openshift/api instead of machine-api-operator #5350
Bug 2015837 : openstack: unset OS_CLOUD for running Terraform #5398 Vendor: Bump API for Azure Marketplace Images #5393
alibaba: implement cluster destroy #5348
upi/aws/cloudformation: make bootstrap instance type configurable #5400
Alibaba Cloud Provider: remove the ingress record. #5396
vSphere: Set default disktype to thick not eager #5395
Update code and Dockerfiles for golang 1.17 #5397
update registry.ci.openshift.org/ocp and origin images to 4.10 #5358
Bug 1960378 : Relax the imageContentSource validation #5346 IPI for vSphere w/ existing resource pool #5136
Bug 2016008 : aws: add newly supported regions for arm64 #5377 Alibaba: add metadata server IP validation #5360
Update registry.ci.openshift.org/origin image to 4.9 #5237
Bug 2021607 : Relax vcenter hostname check #5367 update Packet UPI for Equinix Metal rename #5014
Bug 1965969 : aws: Output public zone id correctly when deleting hosted dns records #5343 docs: correct spelling in docs #5165
Bug 2003113 : Improve host role management during assets creation #5205 openstack: Add stephenfin to owners #5354
vSphere IPI: Enable thin provisioning via the OVA import #4664
OWNERS_ALIASES: Removing Etienne #5363
Bug 2021364 : aws: remove invalid s3 permission #5232 Bug 1956776 : Fix network validation for UPI #5340 validation: Enforce strict unmarshalling of config #5307
Implement WithCustomExtractHostAddresses to gather bootstrap in stages #5355
openstack: Fix install config for openstack manifests #5349
azurestack: Fix destroyer to delete A records #5351
Alibabacloud recommitted and fixed #5333
Use Openshift Cluster API instead of MachineAPIOperator #5331
Bug 2004313 : azure: Skip making azure bootstrap ignition temp file #5296 Remove old RHCOS metadata (not stream metadata) #5252
Removes mjudeikis from OWNERS_ALIASES #5345
Bug 2016955 : Set AWS Bootstrap Type == Master #5334 Bug 1960378 : Relax the imageContentSource validation #5297 Fix broken data/unpack_test.go #5332
aws-ec2: add m6i as preferred instance type #5327
baremetal: fail if apiVIP and ingressVIP are set to the same value #5186
Bug 2013877 : Validate OpenStack supports resource tagging #5323 Vendor: Unpin kube-openapi #5324
Update OWNERS #5326
Bug 1956776 : Fix network validation #5317 Bug 2009253 : Add validation to check APIVIP is IPv4 in dual-stack for Bare Metal #5284 Bug 2006291 : baremetal: Prevent ProvisioningNetworkCIDR with host bits set #5233 Bug 2004596 : bump RHCOS 4.10 boot image metadata #5280 Bug 1917893 : bump oVirt terraform provider version which fix “Disk is locked” bug #5313 Remove kubevirt platform #5301
Bug 2012326 : gather-bootstrap: execute dbginfo script to collect debugging info on IBM Z systems #5281 Bug 2010921 : Azure Stack: add trust bundle to cloud config #5248 data/manifests/bootkube/cvo-overrides: Default to stable-4.10 #5312
vSphere: Split terraform into stages #5094
Bug 1956776 : Check if network is valid in install-config #4906 Bug 2012235 : IBM Cloud: Add RG to CP config #5294 baremetal: Move Dockerfile.ci to 4.10 images #5290
docs/dev/pinned-coreos: pass --no-signatures to plume cosa2stream #5268
Bug 2011893 : baremetal: check that driver supports secure boot #5285 Bug 2012233 : IBMCloud: Handle 5 rule SG limit #5289 ovirt: update of upi playbook files #5222
aws: Remove shared tags from user specified IAM roles #5286
feat(VSphere): validation of cpus/coresPerSocket in config #5217
IBM Cloud: provider config zones #5275
ovirt: remove dougsland from OWNERS_ALIASES #5282
Bug 1999734 : fix(ibmcloud): Add CIS CRN to infrastructure manifest #5182 azurestack: Add subnet nsg group association in terraform #5150
openstack: Update affinity docs #5274
ibmcloud: fix terraform formatting error from #5147 #5273
Bug 2010665 : do not modify cvo ignores for bootstrap-in-place #5271 Remove instanceType option m4 from AWS IPI default deployment #5162
Record rpm-ostree status and history in log-bundle #5130
Bug 1949672 : Update UPI ignition version to 3.2.0 #5164 Bug 1992777 : ibmcloud: Possible fix for “ibm_iam_authorization_policy” error #5147 libvirt: split up tf files into stages #5119
Bug 2009791 : Fix IBM Cloud config usage #5263 Make bootstrap image asset depend on rhcos image. #5267
Updating ose-installer-artifacts images to be consistent with ART #5221
openstack: Expose worker server group policy #5071
Bug 1955544 : Add ingress rules to master SG for compact clusters #5236 openstack: Move TFVars logic to own package #5264
Bug 2009699 : Fix RAM validation for openstack flavors #5260 Bug 2008119 : force cvo to ignore installer-provided resources #5258 Inject subnet names into IBM Cloud provider config #5234
open cluster-policy-controller ports for metrics #5105
vendor: Bump OpenShift API to Add Alibaba Platform #5216
Bug 2008599 : Azure Stack: Add Internal Load Balancer #5249 docs: libvirt: fix typo #5246
Bug 2000430 : bump cluster-api-provider-ovirt #5184 Block create cluster if bootstrapInPlace is set in install-config #5218
images: Fix jq not found error #5235
terraform/openstack: remove unused extra_tags #5226
pkg/destroy: log when writing quota for visibility #5204
Bug 2004600 : Remove duplicate ramdisk log container #5219 Updating ose-installer images to be consistent with ART #5194
fix(ibmcloud): Delete COS in recursive mode #5211
OWNERS: Prune crawford #5214
fix(ibmcloud): Allow NodePort access from all subnets #5188
Update baremetal approvers/reviewers #5213
Bug 2002567 : OpenStack: Fix links in SR-IOV workers doc #5201 baremetal: Specify entrypoint when starting inspector #5208
Typo fixing from Github to GitHub #5206
pkg/destroy/gcp: report cluster footprint in quota #5158
Bug 1994142 : fix(ibmcloud): Add more cloud config fields #5152 Bug 2001317 : openstack: Inaccurate MissingQuota error #5197 Bug 1993364 : Consider all Networks on Router clean up #5193 Bug 1993364 : openstack/destroy: fix Kuryr/BYON #5191 bring example in line with the default value #4971
Update OWNERS #5172
gcp upi: clarify ROUTER_IP needs to be set #5167
UPI: Add yq to images for ASH CI #5160
docs: fix broken link to CVO/operators.md in operators.md #5141
libvirt docs update when systemd-resolved is in use #5132
Add SRIOV Support for Kubevirt Provider #5088
Full changelog
OCPBUGS-31960 : Bump x/net to v.0.24.0 #318 OCPCLOUD-2493 : Update CAO to add upstream annotations #316 OCPCLOUD-2523 : add ExpanderOrderList api option #304 OCPBUGS-29863 : Apply hypershift cluster-profile for ibm-cloud-managed #314 OCPBUGS-28207 : update min/max memory limit documentation #313 MIXEDARCH-429 : Revert “OCPBUGS-18137: Provide the architecture of the control plane as argument to –scale-up-from-zero-default-arch” #311 OCPBUGS-28230 : add FallbackToLogsOnError for easier debugging #312 MIXEDARCH-429 : Add the environment variable value for CAPI_SCALE_ZERO_DEFAULT_ARCH #297 OCPCLOUD-2432 : Bump k8s packages to v1.29 #310 OCPBUGS-25559 : Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #305 OCPBUGS-25633 : Add Snyk file to exclude vendor directory on scan #306 OCPBUGS-24911 : Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #303 OCPBUGS-24102 : Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #302 OCPCLOUD-2137 : Check scale from zero annotations on MachineSets #294 OCPBUGS-21791 : Bump x/net package to v0.17.0 #295 Update OWNERS #296
OCPCLOUD-2196 : Update dependencies k8s 1.28 #293 OCPBUGS-18137 : Provide the architecture of the control plane as argument to –scale-up-from-zero-default-arch #284 OCPBUGS-18954 : Ensure status reporter caches exit if they don’t sync #285 OCPBUGS-19411 : cluster-autoscaler-operator: clusterrole add clusteroperators watch #287 OCPBUGS-19169 : Updating ose-cluster-autoscaler-operator images to be consistent with ART #286 OCPBUGS-18278 : Address long acquire times during upgrade #281 OCPBUGS-18338 : Fix CI by running tests natively by default #282 Reconcile when external process change the clusteroperator status #279
OCPBUGS-14356 : add nutanix labels that should be ignored #275 CNF-5642 make operator optional #269
OCPCLOUD-2061 : Rebase dependencies to k8s 1.27 #274 Updating ose-cluster-autoscaler-operator images to be consistent with ART #273
OCPBUGS-10105 : Updating ose-cluster-autoscaler-operator images to be consistent with ART #271 Bug 1943194 : update GPU resource limits type to have validation #268 Update OWNERS #270
revert GPU label changes from pr 223 #267
: Update tooling in Cluster Autoscaler Operator #266
Add infrastructures resource to config.openshift.io #265
Allow infrastructures.config.openshift.io to be listed #264
Register configv1 types to schemes #262
Updating ose-cluster-autoscaler-operator images to be consistent with ART #259
: Update CAO to ignore platform related zone labels #260
Update OWNERS #261
: Set default container for operator #258
Add client certificate and key to service monitor #249
Updating ose-cluster-autoscaler-operator images to be consistent with ART #248
OCPCLOUD-1677 : add flag for duplicated events #253 Bug 1997396 : fix an error with autoscaler alert rules #254 OCPBUGS-1411 : Bump k8s deps to 1.25 #252 Bug 1997396 : update alerts for resource limits #250 OCPCLOUD-1427 : Expose autoscaler “–balancing-ignore-label” flag through CRD #251 Add verbosity option to ClusterAutoscaler object #247
Bug 2087039 : update dependencies to K8s 1.24, go 1.18 #246 Bug 2067803 : Bump prometheus/client_golang #242 Bug 2063194 : add leader election flags to autoscaler deployment #241 add capi version to autoscaler deployment #240
Updating ose-cluster-autoscaler-operator images to be consistent with ART #238
Bug 2034484 : fix: missed rbac and latest library-go #236 Bug 2026178 : update alerts to match style guidance #233 Library go bump #235
Update makefile to support podman #234
OCPCLOUD-1278 : add scale-down-utilization-threshold to CAO #226 update to Golang1.17 #227
update owners file #231
Bug 2025230 : Change ClusterAutoscalerUnschedulablePods severity to info #228 Bug 1943194 : add logic to detect GPU capacity and update accordingly #223 Updating ose-cluster-autoscaler-operator images to be consistent with ART #222
Full changelog
WRKLDS-1168 : tolerate node-role.kubernetes.io/control-plane:NoExecute #539 OCPBUGS-30489 : bump(google.golang.org/protobuf)=v1.33.0 #538 WRKLDS-1071 : bump(library-go)=release-4.16 #536 OCPBUGS-29566 : Apply hypershift cluster-profile for ibm-cloud-managed #535 OCPBUGS-23900 : README: fix dynamicResourceAllocation field name #534 OCPBUGS-23900 : Profile customizations: dynamic resource allocation through TechPreviewNoUpgrade feature gate #532 AUTH-481 : add PSa labels to openshift-kube-scheduler-operator namespace #533 NO-JIRA: readme: describe mapping between logLevel and log level #531
NO-JIRA: README: add notes about dumping KS’s node cache #530
OCPBUGS-21846 : sync(library-go): revision_controller: update last revision only when a revision is completely rendered #526 OCPBUGS-23631 : Add .snyk file to exclude vendor and ignore unit tests #524 OCPBUGS-24915 : Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #522 TRT-1420 : Bump openshift/library-go to pick up revision_controller revert #521 OCPNODE-1890 : Bump k8s api to v0.29.0 #510 OCPBUGS-24915 : Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #519 OCPBUGS-24915 : Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #517 OCPBUGS-24106 : Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #513 OCPBUGS-24218 : Annotate serviceaccount-ca with ownership information #511 OCPBUGS-23463 : bump(library-go) #512 NO-JIRA: README.md: steps for enabling profiling, collecting heap and running go tool pprof #507
OCPNODE-1886 : Migrate from kubescheduler.config.k8s.io/v1beta3 to v1 #508 OCPBUGS-21734 : Bump openshift/library-go to disable http/2 by default #503 OCPBUGS-21734 : Bump deps to address CVE-2023-44487 #500 bump(openshift/client-go,library-go) #498
OCPBUGS-16794 : installerpod: change pod manifest mode to 0600 #496 OCPBUGS-19175 : Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #493 Bump openshift/* libs #492
Update to Kubernetes 1.28.2 #491
STOR-1425 : Update to Kubernetes 1.28.1 #490 OCPBUGS-14052 : KubeSchedulerDown: set runbook_url annotation #489 OCPBUGS-15256 : Sync openshift/api to reduce installerpod configmap based file permissions to 0600 #488 remove loglevel in deploy #487
OCPBUGS-14323 : Change manifest directory permissions #485 Remove featureset flag and use only the manifest #484
STOR-1263 : Bump k8s 1.27 #472 use standard featuregate library from API #483
OCPBUGS-12074 : Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #479 Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #466
OCPBUGS-10568 : migrate to using lease objects for leader election #476 disable debug pporf with unauthenticated port #468
WRKLDS-705 : Bump openshift/api to enable DynamicResourceAllocation through TechPreviewNoUpgrade #463 WRKLDS-649 : Guard pod set readiness probe endpoint explicitly #459 OCPBUGS-6261 : bump(k8s): 1.26.1 #460 Add client certificate and key to service monitor #434
remove use of deprecated klog flags #457
Revert “Drop log flags removed in k8s 1.26” #456
bump (openshift/api) for CSIMigration* feature gates #455
Drop log flags removed in k8s 1.26 #454
Drop flags removed in k8s 1.26 #453
OCPBUGS-3041 : guard controller: set an explicit hostname to avoid name collisions #446 bootstrap-kube-scheduler: specify resources.requests #445
library-go vendoring for installer cmd timeout #444
Bump openshift/api to bring the MatchLabelKeysInPodTopologySpread enabled in TPNoUpgrade #442
trt-589 bump library-go #441
Bump go.mod golang version to 1.19 #440
k8s 1.25.0 #438
Describe how to increase log level of kube-scheduler instances #436
Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #433
Update owners #432
Bug 2062459 : Introduce sync unit test #430 Bug 2086092 : bump to k8s v0.24.0 #420 Bug 2062459 : Fix bootstrap leader election config #428 Bug 2064024 : README: fix scheduler configuration formatting #427 Bug 2064024 : Update library-go to 80f9619c2 #425 Fix debugging information #424
manifests/deployment: comply to restricted pod security level #421
[rebase v1.24] remove –port flag from bootstrap #422
Update OWNERS #419
Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #406
Bug 2053582 : Track static pod lifecycle #417 Bug 2053582 : Track static pod lifecycle #415 Update resourcelock to configmapleases #412
Bump(openshift/api): to get CSI changes #411
Do not wait for a port which is no longer used by the scheduler #410
update cert injection annotations to beta #409
Bug 2029470 : update library-go to get rapid installer pod fixes #407 Bug 2035986 : Replace deprecated annotation #393 Bug 2042049 : Delete feature gates removed from k8s.io/kubernetes/pkg/features/kube_features.go #401 Bug 2039414 : Update KubeSchedulerConfig to v1beta3(default in 1.23) #395 Bug 2005901 : Sync the library-go #397 Bug 2033751 : Return Error when trying to use Scheduler Policy #390 Bug 2040132 : drop –port flag #398 Bug 2035927 : Replace NodeResourcesLeastAllocated/NodeResourcesMostAllocated plugins with NodeResourcesFit #392 Bug 2005901 : Bump library-go #396 Bug 2038968 : bump(openshift/api): to get CSI migration gates switched off #394 Bug 2005901 : Guard controller pdb #373 Bug 2034515 : bump library-go #388 Upgrade library-go version #387
Bump to k8s 1.23 #386
bump(library-go): to gather a fix for static pod UID version #384
Bug 2026352 : Sync with library-go to pick fixes for pruner panic #383 Bug 2002300 : Disable balancedAllocation and add weight for HighNodeUtilization profile #378 update scheduler metrics service selector #382
Fix gomod #377
Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #375
bump(*): library-go #376
bump(openshift/api): to get fix for typo in feature gate #374
Bug 2010354 : Make alert consistent with the alerting-consistency guidelines #372 podsecurity: enforce privileged for openshift-kube-scheduler namespace #371
Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #369
Bug 2001856 : bump libgo and related deps #368 Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #367
Full changelog
SO-121 : Syncing the library for only S2i Samples for OCP 4.16 #543 Revert “SO-121: Resync Libray for 4.16” #542
SO-121 : Resync Libray for 4.16 #540 OCPBUGS-31303 : bump K8s version to 29.2 #536 AUTH-482 : set required-scc for openshift workloads #535 OCPBUGS-26992 : Align builder and base for Dockerfile.okd with Dockerfile #531 OCPBUGS-28230 : add FallbackToLogsOnError for easier debugging #532 OCPBUGS-24787 : Updating ose-cluster-samples-operator-container image to be consistent with ART #530 OCPBUGS-24787 : Updating ose-cluster-samples-operator-container image to be consistent with ART #527 SO-119 : Fix mariadb import url in OKD #525 SO-118 : Bumping the K8s to 28.2 and golang to 1.20 #524 SO-117 : Library Sync for OCP release 4.15 #522 OCPBUGS-22225 : Sync library to remove invalid dockerhub references for OKD #519 Use latest tag for network-tools imagestream #518
OCPBUGS-18857 : Updating ose-cluster-samples-operator images to be consistent with ART #517 manifests: Drop explicit runlevel from CRD manifest #515
OCPBUGS-16435 : Bump k8 to v0.27.2 for ocp 4.14 #514 OCPBUGS-16403 : Update Cluster Sample Operator dependencies and libraries for OCP 4.14 #511 reconcile status when clusteroperator changes #510
OCPBUGS-15754 : Update Jenkins and Jenkins Agent Base image versions #504 OCPBUGS-14491 : Updating to use Jenkins 4.13 images #502 OCPBUGS-12775 : Update Cluster Sample Operator dependencies and libraaies for OCP 4.14 #500 Updating ose-cluster-samples-operator images to be consistent with ART #499
OCPBUGS-10910 : Add network tools imagestreams #495 Updating ose-cluster-samples-operator images to be consistent with ART #493
Fix jira component #494
update Jenkins to use v4.12 imagestreams #491
OCPBUGS-855 : When setting allowedRegistries urls the openshift-samples operator is degraded #487 OCPBUGS-6811 : Update Cluster Sample Operator dependencies and libraries for OCP 4.13 #485 Change importMode to preserveOriginal for Openshift imagestreams #482
OCPBUGS-6579 : update sample imagestreams with latest 4.11 image using specific image tag reference #483 OCPBUGS-4357 : Bump k8s master #476 OCPBUGS-4166 : Update Cluster Sample Operator dependencies and libraries for OCP 4.13 #474 OCPBUGS-3426 : Update Cluster Sample Operator dependencies and libraries for OCP 4.12 #471 Updating ose-cluster-samples-operator images to be consistent with ART #470
Updating ose-cluster-samples-operator images to be consistent with ART #465
Add client certificate and key to service monitor #464
Updating ose-cluster-samples-operator images to be consistent with ART #435
Bug 2086086 : Update Cluster Sample Operator dependencies and libraries for OCP 4.11 #433 update jenkins CPaaS image refs prior to 4.11 GA #432
Bug 2086086 : Update Cluster Sample Operator dependencies and libraries for OCP 4.11 #431 Bug 2095256 : Samples Owner needs to be Updated #429 Bug 2086086 : Update Cluster Sample Operator dependencies and libraries for OCP 4.11 #428 AUTH-133 : manifests/deployment: comply to restricted pod security level #425 Updating ose-cluster-samples-operator images to be consistent with ART #426
JNKS-289 : pull in jenkins imagestream updates (add back maven/nodejs streams) #422 Jira SO-19: Make sure template and imagestream api version is groupified #420
JNKS-287 : remove imagestream manifest refs; remove override of jenkins images with payload images #416 Bug 2010364 : OpenShift Alerting Rules Style-Guide Compliance #419 Bug 2067823 : Taking care of CVE-2022-21698 #418 Bug 2064610 : Remove duplicate v1 from cakephp-mysql templates #417 manifests: Add capability.openshift.io/name #414
Updating ose-cluster-samples-operator images to be consistent with ART #412
Bug 2027745 : Allowing ImageStream creation when config registry empty #406 Bug 2033720 : Synching SSO library #411 upd rhel7 Dockerfile in case still used for rhel7 worker nodes #410
Bug 2033720 : Bump k8 dependencies to v0.23.1 #409 Bug 2033720 : Library synchronization for OCP 4.10 #408 Bug 2027745 : Move openshift build-machinery-go dependency #407 Update OWNERS #402
Remove single node prod cluster profile annotation as it is not used #405
Bug 2007757 : Including Template in must-gather related objects. #399 Bug 2006947 : fix proxy portion of tbr inaccessible check #397 Updating ose-cluster-samples-operator images to be consistent with ART #396
Bug 2002368 : acccount for image api returning invalid on imagestream create based on allowed/blocked registry settings #394 Bug 2003683 : fix recently introduced panic when conflict errors occur #395 Bug 1993840 : more avoiding immediate degraded on intermittent API errors #391 Updating ose-cluster-samples-operator images to be consistent with ART #390
Full changelog
OCPBUGS-29570 : Apply hypershift cluster-profile for ibm-cloud-managed #54 OCPBUGS-24932 : Updating ose-cluster-update-keys-container image to be consistent with ART #53 OCPBUGS-24115 : Updating ose-cluster-update-keys-container image to be consistent with ART #52 OCPBUGS-19189 : Updating ose-cluster-update-keys images to be consistent with ART #51 Adding the new CI Signer public key #49
Clean up owners file as part of DPP-10343 #46
Updating ose-cluster-update-keys images to be consistent with ART #45
Updating ose-cluster-update-keys images to be consistent with ART #43
Update OWNERS #44
OWNERS: Prune crawford #42
Full changelog
OTA-1160 : pkg/cvo/reconciliation_issues: Publish ClusterOperator transitionStart #1044 NO-ISSUE: pkg/payload/task: Drop unused Requeued property #1043
NE-1318 : Add always-enable-capabilities flag and set Ingress as always enabled #946 OCPBUGS-9133 : pkg/cvo/metrics: Connect ClusterVersion to ClusterOperatorDown and ClusterOperatorDegraded #746 AUTH-482 : set required-scc for openshift workloads #1038 NO-ISSUE: docs/user/tasks-*by-number-and-component.svg: Update to 4.15 #1042
OTA-1159 : pkg/cvo: Render status.Failure in ReconciliationIssues #1041 OTA-1210 : *: Add –update-service command-line option #1035 OTA-1159 : [2 ⁄3 ] Maintain ReconciliationIssues condition #1032 OCPBUGS-29868 : Apply hypershift cluster-profile for ibm-cloud-managed #1037 NO-JIRA: Runbook URLs for ClusterOperatorDown and ClusterOperatorDegraded #1036
OCPVE-659 : bump openshift/api with new capability #979 OTA-1159 : [1/x] Refactor syncStatus for testability #1031 OCPBUGS-18454 : Avoid using risk names as condition reasons when invalid #962 OCPBUGS-7714 : yield lock while retrieving payload #1005 NO-JIRA: manifests: fix service manifest filename #1027
OCPBUGS-27468 : bump(openshift/api)=master to pick up new TechPreviewNoUpgrade features #1026 OCPBUGS-7714 : Refactor & improve SyncWorker lock code #1020 OTA-1169 : deps: bump openshift/api and k8s.io/client.go #1022 OCPBUGS-25862 : CO health: only track current in-progress upgrade start #1011 OCPBUGS-26014 : clusterOperatorBuilder: Reconcile metadata on COs #1012 OCPBUGS-25708 : pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1009 OCPBUGS-24535 : pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream #996 OCPBUGS-24963 : Updating cluster-version-operator-container image to be consistent with ART #1006 OCPBUGS-25055 : pkg/cvo/sync_worker: Verification-failure details for unforced updates too #1003 OCPBUGS-24963 : Updating cluster-version-operator-container image to be consistent with ART #1004 OTA-917 : pkg/customsignaturestore: Implement signatureStores customization #994 OCPVE-646 : add cloud credential capability #963 OTA-855 : Create GET requests to the Prometheus API server #999 OCPBUGS-23290 : install/0000_90_cluster-version-operator_02_servicemonitor: ‘oc get …’ for CannotRetrieveUpdates #995 OCPBUGS-24138 : NO-JIRA: Updating cluster-version-operator-container image to be consistent with ART #1000 OCPBUGS-23377 : to reduce log noise, only log sync_worker messages on retry or payload change #997 OCPBUGS-19391 : do not reconcile rules if aggregationRule is set #993 OCPBUGS-8079 : install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ #992 OCPVE-740 : vendor: bump openshift/api #984 OCPBUGS-21933 : Bump http-related deps #983 OCPVE-673 : Bump API to Add OLM Capability #971 Revert openshift/api bump PR merged by mistake (977) #978
OCPVE-659 : bump openshift/api #977 OCPBUGS-19868 : pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation #975 OCPBUGS-19512 : pkg/clusterconditions/promql: Warm cache with 1s delay #939 OCPBUGS-18386 : Properly reconcile SCC resources #966 OTA-854 : Add configurable CVO knobs for risk-evaluation PromQL target #926 OCPBUGS-18984 : pkg/payload/precondition/clusterversion/etcdbackup: Drop precondition #968 OCPBUGS-19222 : Updating cluster-version-operator images to be consistent with ART #970 OCPBUGS-18567 : lib/resourcemerge/apps: Cover paused and other spec properties in EnsureDeployment #965 OCPBUGS-13308 : Simplify user-facing messages on risk evaluation throttling #955 OCPBUGS-17418 : Really handle DeletedFinalStateUnknown correctly #954 CNF-9385 : add ImageRegistry capability #950 OCPBUGS-17418 : Handle cache.DeletedFinalStateUnknown #952 docs/user/tasks-*by-number-and-component.svg: Update to 4.13 #949
Dockerfile: bump to 1.19 and use public UBI pullspec #944
pkg/payload: De-noise ‘excluding …’ logs #945
bump api version to add new capability #941
pkg/cvo/metrics: Doc from_version semantics for cluster_version{type=“completed”} #929
Code cleanups for golangci-lint failures #942
OTA-559 : Migrate to (*Manifest).Include(…, overrides) #934 OCPBUGS-9070 : Fix hotlooping on Cronjob resources #910 Updating cluster-version-operator images to be consistent with ART #932
Updating cluster-version-operator images to be consistent with ART #930
Updating cluster-version-operator images to be consistent with ART #928
syncStatus: Reduce verbosity when syncing nothing of interest #922
Update dnsPolicy to allow consistent resolution of the internal LB #920
OTA-941 : pkg/payload/precondition/clusterversion/rollback: New precondition #918 Updating cluster-version-operator images to be consistent with ART #911
OCPBUGS-5469 : pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #909 pkg/cvo: code cleanups #902
OCPBUGS-7419 : Trigger new sync round on ClusterOperator Available changes #904 install/0000_90_cluster-version-operator_02_servicemonitor: Add ClusterReleaseNotAccepted #906
OCPBUGS-6097 : CVO hotloops on ImageStream and logs the information incorrectly #894 OCPBUGS-6292 : Update golang.org/x/net/http2 for CVE-2022-41717 #901 Bug 2090680 : RetrievePayload: Improve timeouts and cover behavior with tests #896 pkg/cvo: Set ‘controller’ in our ownerReferences #900
pkg/cvo/sync_worker: Fix “The sync worker already has a pending notification” formatting #898
vendor: update openshift/api for NodeTuning capability #883
Bug 2089138 : CVO hotloops on ValidatingWebhookConfiguration #893 logging: consistently use RFC3339 in log messages #889
OCPBUGS-702 : Fix removing caBundle field of CRDs when ...inject-cabundle=true #870 lib/validation: Drop “a previous version” from desiredUpdate validation #888
Adding David to approvers list and removing Jack #891
upgradeable: improve logging and refactor #886
start.go: simplify code for computing sync period #887
OCPBUGS-5505 : Set upgradeability check throttling period to 2m #882 Revert “pkg/cvo/updatepayload.go: timeout payload retrieval” #881
pkg/cincinnati: Set User-Agent for Cincinnati requests #839
Bug 2090680 : pkg/cvo/updatepayload.go: timeout payload retrieval #846 tests: fix rare nil dereference in TestCache #875
pkg/payload: code cleanups #877
OTA-817 : Support ClusterVersion spec DesiredUpdate Architecture field #860 OCPBUGS-4986 : pkg/payload/precondition: Do not claim warnings would have blocked #876 OTA-844 : pkg/cvo/metrics: Add ‘reason’ to cluster_operator_up #868 OTA-560 : Improve developer-oriented docs #871 Updating cluster-version-operator images to be consistent with ART #873
OCPBUGS-1443 : Avoid using a lister before client caches sync #874 OTA-560 : Modernize README.md to be user-centered #869 Build CVO from UBI8 instead of obsolete origin-v4.0:base #872
Bug 2089093 : CVO hotloops on OperatorGroup due to the diff of “upgradeStrategy” #862 update library-go to pick up feature-set annotation change #853
Add myself as approver and David Hurta as a reviewer #864
OCPBUGS-1458 : Allow CVO to update KUBERNETES_SERVICE_HOST with LB address #851 pkg/cvo/cvo_scenarios_test.go: Remove status check from TestCVO_UpgradeFailedPayloadLoadWithCapsChanges #857
resourcemerge: cleanup deprecated function calls #858
OCPBUGS-2727 : Do not fail precondition check for UnknownUpdate #856 Bug 2033499 : Don’t overwrite accepted risks if local payload #852 OCPBUGS-2125 : Allow unknown capabilities during payload load and implicitl enablement checking #850 bump api version to add new capability #835
Bug 2033499 : Populate acceptedRisks in ClusterVersion History #841 Dockerfile: Bump to Go 1.18 #845
Fix ups from gofmt 1.19 #849
Revert “Fix ups from gofmt 1.19 and yamllint” #848
Fix ups from gofmt 1.19 and yamllint #844
Updating cluster-version-operator images to be consistent with ART #842
OCPBUGS-1636 : pkg/cvo/sync_worker: Pre-create ClusterOperator in reconciling-mode too #840 Bug 1951835 : Handle report only sync errors #837 OCPBUGS-1402 : pkg/cvo/sync_worker.go: remove Lock/Unlock #832 OWNERS: Prune vrutkovs #838
pkg/cvo: add test utility functions #833
allow more than one featureset #821
OCPBUGS-575 : lib/resourcemerge/core: Reconcile seccompProfile in ensurePodSecurityContext #830 Bug 2006611 : Upgrade takes too much time when upgrading via –to-image #808 OCPBUGS-569 : CVO History Pruner return not assigned to config.Status.History #828 bump api version to add new capability #801
lib/capability: Sort all slices after building them #827
Bug 1951835 : Propagate Degraded to update status #662 Bug 2010365 : OpenShift Alerting Rules Style-Guide Compliance #800 Restore ‘Pull arch from payload’ and fix #813
/pkg/cvo: improve CV history pruning #805
Bug 2117033 : pkg/cvo/sync_worker: Trigger new sync round on ClusterOperator versions[name=operator] changes #818 pkg/cvo/status.go: sort implicitly enabled caps #814
pkg/cvo/sync_worker: Consolidate all ClusterOperator errors by reason #577
Revert “Pull arch from payload” #810
Pull arch from payload #796
Bug 2110590 : pkg/cvo/updatepayload: Set ‘readOnlyRootFilesystem: false’ #807 Bug 2109374 : pkg/clusterconditions/promql: Cap PromQL queries at 5 minutes #806 Bug 2094174 : pkg/cvo: reset payload load status #788 Bug 2108858 : lib/resourcemerge: change SecurityContext reconcile #804 Updating cluster-version-operator images to be consistent with ART #797
Bug 2100533 : remove local golang lint #792 Bug 2097067 : pkg/cvo: retain initial completed update history entry #791 Updating cluster-version-operator images to be consistent with ART #779
Bug 2091770 : pkg/cvo/updatepayload: Guard against ‘rm -fR -whatever’ with ./* #783 Bug 2071998 : pkg/cvo/updatepayload: Event when forcing through a sig-verification failure #763 Bug 2081895 : lib/resourcebuilder: Drop Get from check*Health functions #780 Bug 2079789 : capability: Init prior known from CV status #773 Bug 2084331 : vendor: Bump library-go to pick up manifest checkResourceEnablement fix #781 Bug 2081895 : lib/resourcebuilder/apiext: Restore check for Established=True CRDs #771 Revert “admin-gates: Add ack-4.11-kube-1.25-api-removals-in-4.12 gate” #775
Bug 2080429 : pkg/cvo/sync_worker.go: Save overrides and capabilities #770 admin-gates: Add ack-4.11-kube-1.25-api-removals-in-4.12 gate #772
Bug 2079789 : pkg/cvo/sync_worker.go: Initialize implicitlyEnabledCaps #768 Bug 2072389 : Do not save desired update on load failures #766 Bug 2070805 : pkg/cvo/updatepayload: Restore shell for rm globbing #767 Bug 2070805 : pkg/cvo/updatepayload: Shift previous-download removal into the job #765 Bug 2070854 : syncWorkerStatus: Avoid saving stale status values #759 Implicitly enable capabilities on updates #758
Bug 2070887 : pkg/cvo/sync_worker.go: set implicitly enabled caps earlier #761 pkg/cvo/sync_worker: Log only changed enabled capabilities #762
Bug 2070805 : pkg/cvo/updatepayload: Prune previous payload downloads #760 capability: disallow disabling, add enabling capabilities #754
Bump openshift/api to include new marketplace capability #757
pkg/cvo/metrics: Add a cluster_version_capability metric #755
vendor: update openshift/api #751
lib/capability: Sort status.capabilities arrays #752
pkg/cvo/sync_worker.go: ensure all of SyncWorkerStatus copied #750
pkg/payload: Log load-time manifest exclusion at V(2) #749
Consume post install static spec capabilities #744
Bug 2062568 : lib/resourcebuilder/batch: Stop waiting on Job deadline exceeded #748 Get cluster version object earlier in startup #741
Bug 1822752 : pkg/cvo: Fix ups from separating load from apply #683 #745 Bug 1822752 : pkg/cvo: Separate payload load from payload apply #683 Bug 2050946 : Fix wrong informer for feature-gate-stopper #739 pkg/payload: Log manifest exclusion #712
vendor: Bump openshift/api to pick up capabilities #737
Updating cluster-version-operator images to be consistent with ART #732
Bug 2050946 : pkg/featurechangestopper: Seed queue to guard against incorrect startingTechPreviewState #736 Bug 2009845 : pkg/cvo/sync_worker: Use current state, not suggested state, for guarding Initializing->Updating #733 pkg/cvo: Drop unused ‘workers’ argument from Operator.Run #719
Bug 2009845 : pkg/cvo/sync_worker: Log transition to updating #730 Bug 2027342 : Add notification for certificate changes #726 Bug 2009845 : pkg/cvo/sync_worker: Do not cancel sync workers on install-time target-version change #729 Bug 2009845 : Respect overrides changes during install (second round) #728 Revert “Bug 2009845: Respect overrides changes during install” #727
Bug 2009845 : Respect overrides changes during install #713 Bug 2034484 : Library go bump #716 Bug 2000938 : lib/resourcemerge/apps: Avoid hotlooping on implicit strategy #722 Bug 2034493 : *: Use –v=2 logging to drop client-side throttling noise #721 Bug 2033745 : pkg/cvo/availableupdates: Acount for default upstream in recent-change throttling #718 pkg/payload/precondition: File shuffling, drop ClusterVersion argument, etc. #708
Bug 2029785 : pkg/cincinnati: Fix panic for conditional edges overlapping with unconditional edges #707 pkg/start: Log and continue when we fail to retrieve the feature gate #706
pkg/featurechangestopper: Refactor to allow declaring work completion #704
Exclude featuregate.release.openshift/tech-preview=true manifests #694
Bug 2026560 : lib/resourcemerge/core: Merge volumeMounts by mountPath #703 Bug 2020107 : Remove run-level label #623 Bug 2028217 : lib/resourcemerge/apps: Default Deployment replicas to one #698 Bug 2027585 : pkg/cincinnati: Fix panic for conditional edges with risks after an invalid risk #697 Bumping the GOLANGCI_LINT_VERSION to v1.43.0 #695
Targeted edge blocking #663
Bug 2005407 : Changing the ClusterNotUpgradeable alert to info #659 install: Add description annotations to manifests #686
Bug 2022509 : cvo: Compare manifest group in getOverrideForManifest #689 Updating cluster-version-operator images to be consistent with ART #687
Bug 1990635 : Fixing the sync issue when desired version and channel changed at the same time #669 install/0000_00_cluster-version-operator_03_deployment: Set dnsPolicy: ClusterFirstWithHostNet #646
install: Drop single-node-developer profile #685
Adding docs to test CVO with custom update graph #681
Bug 1878925 : pkg/cvo/updatepayload: Drop history from target pullspec lookup #684 Adding seed to make rand.Float64() return random values #653
vendor: Bump openshift/api for targeted edge blocking #680
Bug 2014071 : lib/resourcemerge/imagestream.go: remove TagReference field dependency #677 Bug 2014071 : lib/resourcemerge/imagestream.go: Copy all data for new tag reference #674 Bug 2000938 : Ensure CVO applies appropriate Deployment strategy on update #650 podsecurity: enforce privileged for openshift-cluster-version namespace #668
Bug 2011896 : pkg/cvo/upgradeable: Include messages for multiple-reason Upgradeable=False #670 Unset listen option while running CVO locally [doc/dev] #667
.ci-operator: Bump to Go 1.16 #665
Bug 2005581 : install/0000_00_cluster-version-operator_03_deployment: Explicit kube-api-access #660 OWNERS: Prune crawford #656
Bug 2002834 : lib/resourcemerge/core: Remove unrecognized volumes and mounts #654 Updating cluster-version-operator images to be consistent with ART #655
pkg/cvo: Drop the explicit ‘upstream’ from our replacement ClusterVersion #640
Full changelog
MON-3671 : add machine424 and rexagod to OWNERS #55 OCPBUGS-24912 : Updating configmap-reload-container image to be consistent with ART #58 Updating configmap-reload-container image to be consistent with ART #57
OCPBUGS-19171 : Updating configmap-reload images to be consistent with ART #56 Updating configmap-reload images to be consistent with ART #52
OCPBUGS-10106 : Updating openshift-state-metrics images to be consistent with ART #51 Updating configmap-reload images to be consistent with ART #48
Updating configmap-reload images to be consistent with ART #47
OWNERS: Add Joao and myself, and move former team members to emeritus #46
Updating configmap-reload images to be consistent with ART #45
Bug 2067745 : Merge Upstream Master Branch #44 Updating configmap-reload images to be consistent with ART #42
Updating configmap-reload images to be consistent with ART #41
Updating configmap-reload images to be consistent with ART #40
OWNERS: cleanup #39
Updating configmap-reload images to be consistent with ART #38
Updating configmap-reload images to be consistent with ART #37
OWNERS: update #36
Full changelog
OCPBUGS-28230 : enforce termination message policy on all platform pods #229 STOR-1574 : Bump all deps #226 OCPBUGS-28934 : Updating csi-driver-manila-operator-container image to be consistent with ART for 4.16 #227 NO-ISSUE: Remove local manifests #208
STOR-1574 : Bump library-go #225 OCPBUGS-23809 : Bump opentelemetry libs #220 STOR-1714 : Release leadership on SIGTERM #223 STOR-1688 : Chore: add .snyk file to ignore false positives #218 OCPBUGS-24226 : setting TLSSecurityProfile with no minTLSVersion crashes controller #217 OCPBUGS-23306 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #214 OCPBUGS-24824 : Updating csi-driver-manila-operator-container image to be consistent with ART #213 STOR-1402 , STOR-1453 : update libraries and specify TLS_MIN_VERSION #212 OCPBUGS-9331 : Fix selector for manila-csi-driver-controller-metrics service #210 OCPBUGS-22357 : CVE-2023-44487: bump github.com/openshift/library-go to master #207 OCPBUGS-21940 : Update k8s.io/apimachinery and k8s.io/apiserver #206 OCPBUGS-21593 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #205 OCPBUGS-19166 : Updating csi-driver-manila-operator images to be consistent with ART #204 Configure User Agent #191
STOR-1440 : Restart controller Pods if metrics-serving-cert changed #198 OCPBUGS-12499 : Bump dependencies #197 Remove unused Dockerfile.openshift.ci file #193
Rework how we build the container image #194
OCPBUGS-14049 : Don’t cache OpenStack client #184 Revert “OCPBUGS-14049: Add secret informer” #192
OCPBUGS-16453 : Bump library-go #190 OCPBUGS-16783 : Chore: Update OWNERS #189 OCPBUGS-14049 : Add secret informer #187 STOR-1065 : Rework sidecar bindings to bind common ClusterRoles #186 OCPBUGS-14824 : Bump csi-driver-manila-operator library-go #183 STOR-1168 : Bump common libraries #182 Updating csi-driver-manila-operator images to be consistent with ART #181
Updating csi-driver-manila-operator images to be consistent with ART #180
Updating csi-driver-manila-operator images to be consistent with ART #179
OCPBUGS-8683 : Add management workloads annotations #175 OCPBUGS-8628 : Bump go.mongodb.org/mongo-driver to v1.5.1 #173 Updating csi-driver-manila-operator images to be consistent with ART #172
STOR-1019 : Bump to k8s 1.26 libs for OCP 4.13 #167 OCPBUGS-6301 : Address CVE-2022-41717 #165 Bug 2106736 : Add multiplePVsSameID capability #164 STOR-1078 : Add hostPaths necessary for SELinux mounts #162 Updating csi-driver-manila-operator images to be consistent with ART #161
OCPBUGS-4347 : set TLS cipher suites in Kube RBAC sidecars #160 OCPBUGS-1904 : Only deploy VolumeSnapshotClass when CRD exists #159 Updating csi-driver-manila-operator images to be consistent with ART #157
Ensure files follow go 1.19 formatting #158
Bug 2057637 : Include secrets to VolumeSnapshotClass #156 STOR-858 : Bump github.com/openshift/* and k8s.io/* #155 Bug OCPBUGS-944: Fix RBAC race during initial deployment #154
Expose CSI_FSGROUP_POLICY as an operator option #142
Updating csi-driver-manila-operator images to be consistent with ART #151
Bug 2090662 : SWEET32: Improve TLS configuration for Kube RBAC Proxy (cont) #149 Bug 2083153 : Fetch application credentials #148 Bug 2090662 : SWEET32: Improve TLS configuration for Kube RBAC Proxy #145 Bug 2089973 : bump libs to k8s 1.24 for OCP 4.11 #144 Updating csi-driver-manila-operator images to be consistent with ART #143
Bug 2074274 : Address CVE-2022-27191 #141 Bug 2067749 : Address CVE-2022-21698 #140 ci: enable more tests #138
Updating csi-driver-manila-operator images to be consistent with ART #137
shiftstack: Update OWNERS #135
Bug 2043130 : csi-driver-manila: Add external-snapshotter permissions to patch snapshots #136 Bug 2038934 : Add custom CA bundle support #134 Bug 2038053 : Bump k8s to 1.23 #133 Bug 2034537 : OWNERS: Update ShiftStack members #132 Normalize the storage class name when ShareType has invalid characters #131
Updating csi-driver-manila-operator images to be consistent with ART #130
Updating csi-driver-manila-operator images to be consistent with ART #128
Updating csi-driver-manila-operator images to be consistent with ART #121
Bug 2001620 : Do not degrade cluster on failure to reach Manila #120 Full changelog
STOR-1573 : Rebase external-attacher to v4.5.1 for OCP 4.16 #72 OCPBUGS-30437 : CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #71 OCPBUGS-27242 : fix or ignore snyk errors for ocp storage repos #70 OCPBUGS-25576 : Updating csi-attacher-container image to be consistent with ART #69 STOR-1688 : Chore: add .snyk file to ignore false positives #68 OCPBUGS-25053 : Updating csi-attacher-container image to be consistent with ART #67 OCPBUGS-24966 : Updating csi-attacher-container image to be consistent with ART #66 OCPBUGS-24139 : Updating csi-attacher-container image to be consistent with ART #65 OCPBUGS-21593 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #59 STOR-1404 : Rebase external-attacher to v4.4.0 for OCP 4.15 #58 OCPBUGS-19225 : Updating csi-attacher images to be consistent with ART #57 STOR-1169 : Rebase external-attacher to v4.3.0 for OCP 4.14 #54 OCPBUGS-14815 : Chore: Update OWNERS and OWNERS_ALIASES #55 Updating csi-attacher images to be consistent with ART #53
Updating csi-attacher images to be consistent with ART #52
Updating csi-attacher images to be consistent with ART #51
Updating csi-attacher images to be consistent with ART #50
STOR-1020 : Rebase external-attacher to v4.1.0 for OCP 4.13 #49 Updating csi-attacher images to be consistent with ART #48
Update to go v1.19 #45
UPSTREAM: <carry>: Remove .github files #43
Updating csi-attacher images to be consistent with ART #42
STOR-859 : Rebase to v4.0.0 for OCP 4.12 #41 Updating csi-attacher images to be consistent with ART #40
Bug 2097284 : Rebase to v3.5.0 for OCP 4.11 #39 Updating csi-attacher images to be consistent with ART #38
Bug 2043130 : Rebase to v3.4.0 for OCP 4.10 #37 Updating csi-attacher images to be consistent with ART #35
Full changelog
STOR-1573 : Rebase external-provisioner to v4.0.1 for OCP 4.16 #95 OCPBUGS-30442 : CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #94 OCPBUGS-29971 : Updating csi-provisioner-container image to be consistent with ART for 4.16 #93 OCPBUGS-27242 : fix or ignore snyk errors for ocp storage repos #88 OCPBUGS-25492 : UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #85 OCPBUGS-25532 : Updating csi-provisioner-container image to be consistent with ART #84 STOR-1688 : Chore: add .snyk file to ignore false positives #83 OCPBUGS-22528 , OCPBUGS-23812 : UPSTREAM: 1124: Bump OpenTelemetry to fix CVEs #81 OCPBUGS-25082 : Updating csi-provisioner-container image to be consistent with ART #80 OCPBUGS-24804 : Updating csi-provisioner-container image to be consistent with ART #79 OCPBUGS-23062 : UPSTREAM: 1047: Revert bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 #78 OCPBUGS-22528 : UPSTREAM: 1047: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 #77 OCPBUGS-21593 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #71 STOR-1404 : Rebase external-provisioner to v3.6.0 for OCP 4.15 #70 OCPBUGS-19114 : Updating csi-provisioner images to be consistent with ART #69 OCPBUGS-17264 : USPTREAM: 969: build(deps): bump golang.org/x/tools from 0.9.3 to 0.12.0 #68 OCPBUGS-14811 : Chore: Update OWNERS and OWNERS_ALIASES #66 STOR-1169 : Rebase external-provisioner to v3.5.0 for OCP 4.14 #65 Updating csi-provisioner images to be consistent with ART #64
Updating csi-provisioner images to be consistent with ART #63
Updating csi-provisioner images to be consistent with ART #62
Updating csi-provisioner images to be consistent with ART #61
STOR-1020 : Rebase external-provisioner to v3.4.0 for OCP 4.13 #60 Updating csi-provisioner images to be consistent with ART #59
Updating csi-provisioner images to be consistent with ART #58
UPSTREAM: <carry>: Remove .github files #57
STOR-859 : Rebase to v3.3.0 for OCP 4.12 #55 Updating csi-provisioner images to be consistent with ART #54
Bug 2101343 : UPSTREAM: 2101343: fix: changed the csistoragecapacity check namespace #52 Bug 2097282 : Rebase to v3.2.0 for OCP 4.11 #51 Updating csi-provisioner images to be consistent with ART #50
Bug 2043130 : Rebase to v3.1.0 for OCP 4.10 #49 Updating csi-provisioner images to be consistent with ART #48
Updating csi-provisioner images to be consistent with ART #47
Updating csi-provisioner images to be consistent with ART #46
Full changelog
OCPBUGS-31746 : Backport volumegroupsnapshot fixes to OCP 4.16 #148 OCPBUGS-31439 : Backport volumegroupsnapshot fixes to OCP 4.16 #146 STOR-1573 : Rebase external-snapshotter to v7.0.1 for OCP 4.16 #145 OCPBUGS-30503 : CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #144 STOR-1700 : Rebase external-snapshotter to v7.0.0 to get VolumeGroupSnapshot #139 OCPBUGS-24996 : Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #137 STOR-1688 : Chore: add .snyk file to ignore false positives #133 OCPBUGS-25548 : Updating ose-csi-snapshot-controller-container image to be consistent with ART #135 OCPBUGS-25575 : Updating ose-csi-external-snapshotter-container image to be consistent with ART #136 OCPBUGS-24996 : Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #132 OCPBUGS-25052 : Updating ose-csi-external-snapshotter-container image to be consistent with ART #131 OCPBUGS-25124 : Updating ose-csi-snapshot-controller-container image to be consistent with ART #130 OCPBUGS-24996 : Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #129 OCPBUGS-24964 : Updating ose-csi-external-snapshotter-container image to be consistent with ART #128 OCPBUGS-24866 : Updating ose-csi-snapshot-controller-container image to be consistent with ART #127 OCPBUGS-24330 : Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #124 OCPBUGS-24338 : Updating ose-csi-external-snapshotter-container image to be consistent with ART #123 OCPBUGS-24329 : Updating ose-csi-snapshot-controller-container image to be consistent with ART #121 OCPBUGS-24244 : Updating ose-csi-external-snapshotter-container image to be consistent with ART #118 OCPBUGS-24160 : Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #116 OCPBUGS-24244 : Updating ose-csi-external-snapshotter-container image to be consistent with ART #117 OCPBUGS-24071 : Updating ose-csi-snapshot-controller-container image to be consistent with ART #115 OCPBUGS-23010 : UPSTREAM: 958: Re-queue SnapshotContents that are readyToUse: false #114 OCPBUGS-21593 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #108 STOR-1404 : Rebase external-snapshotter to v6.3.0 for OCP 4.15 #107 OCPBUGS-19260 : Updating csi-snapshot-validation-webhook images to be consistent with ART #106 OCPBUGS-19223 : Updating ose-csi-external-snapshotter images to be consistent with ART #105 OCPBUGS-19100 : Updating ose-csi-snapshot-controller images to be consistent with ART #104 STOR-1169 : Rebase external-snapshotter to v6.2.2 for OCP 4.14 #101 OCPBUGS-14813 : Chore: Update OWNERS and OWNERS_ALIASES #102 Updating csi-snapshot-validation-webhook images to be consistent with ART #100
Updating ose-csi-external-snapshotter images to be consistent with ART #99
Updating ose-csi-snapshot-controller images to be consistent with ART #98
Updating csi-snapshot-validation-webhook images to be consistent with ART #97
Updating ose-csi-external-snapshotter images to be consistent with ART #96
Updating ose-csi-snapshot-controller images to be consistent with ART #95
Updating csi-snapshot-validation-webhook images to be consistent with ART #94
Updating ose-csi-external-snapshotter images to be consistent with ART #93
Updating ose-csi-snapshot-controller images to be consistent with ART #92
Updating csi-snapshot-validation-webhook images to be consistent with ART #91
Updating ose-csi-snapshot-controller images to be consistent with ART #89
Updating ose-csi-external-snapshotter images to be consistent with ART #90
STOR-1020 : Rebase external-snapshotter to v6.2.1 for OCP 4.13 #88 Updating csi-snapshot-validation-webhook images to be consistent with ART #87
Updating ose-csi-external-snapshotter images to be consistent with ART #86
Updating ose-csi-snapshot-controller images to be consistent with ART #85
Updating csi-snapshot-validation-webhook images to be consistent with ART #84
Updating ose-csi-external-snapshotter images to be consistent with ART #83
Updating ose-csi-snapshot-controller images to be consistent with ART #82
UPSTREAM: <carry>: Remove .github files #81
Updating csi-snapshot-validation-webhook images to be consistent with ART #80
Updating ose-csi-external-snapshotter images to be consistent with ART #79
Updating ose-csi-snapshot-controller images to be consistent with ART #78
STOR-859 : Rebase to v6.1.0 for OCP 4.12 #77 Updating csi-snapshot-validation-webhook images to be consistent with ART #76
Updating ose-csi-external-snapshotter images to be consistent with ART #75
Updating ose-csi-snapshot-controller images to be consistent with ART #74
Bug 2097283 : Rebase to v6.0.1 for OCP 4.11 #73 Updating ose-csi-snapshot-controller images to be consistent with ART #70
Updating csi-snapshot-validation-webhook images to be consistent with ART #72
Updating ose-csi-external-snapshotter images to be consistent with ART #71
Updating ose-csi-external-snapshotter images to be consistent with ART #68
Updating csi-snapshot-validation-webhook images to be consistent with ART #69
Updating ose-csi-snapshot-controller images to be consistent with ART #67
Bug 2043130 : Update CSI sidecars to the latest release for 4.10 #66 Updating csi-snapshot-validation-webhook images to be consistent with ART #60
Updating ose-csi-snapshot-controller images to be consistent with ART #61
Updating ose-csi-external-snapshotter images to be consistent with ART #59
Updating ose-csi-snapshot-controller images to be consistent with ART #58
Full changelog
STOR-1573 : Rebase node-driver-registrar to v2.10.0 for OCP 4.16 #70 OCPBUGS-30441 : CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #69 OCPBUGS-29987 : Updating csi-node-driver-registrar-container image to be consistent with ART for 4.16 #68 OCPBUGS-27242 : fix or ignore snyk errors for ocp storage repos #64 OCPBUGS-25544 : Updating csi-node-driver-registrar-container image to be consistent with ART #62 STOR-1688 : Chore: add .snyk file to ignore false positives #61 OCPBUGS-25117 : Updating csi-node-driver-registrar-container image to be consistent with ART #59 OCPBUGS-23811 : UPSTREAM: 354: Bump Bump OpenTelemetry to fix CVEs #58 OCPBUGS-24856 : Updating csi-node-driver-registrar-container image to be consistent with ART #57 OCPBUGS-21593 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51 STOR-1404 : Rebase node-driver-registrar to v2.9.0 for OCP 4.15 #50 OCPBUGS-19247 : Updating csi-node-driver-registrar images to be consistent with ART #49 STOR-1169 : Rebase node-driver-registrar to v2.8.0 for OCP 4.14 #46 OCPBUGS-14814 : Chore: Update OWNERS and OWNERS_ALIASES #47 Updating csi-node-driver-registrar images to be consistent with ART #45
Updating csi-node-driver-registrar images to be consistent with ART #44
Updating csi-node-driver-registrar images to be consistent with ART #43
Updating csi-node-driver-registrar images to be consistent with ART #42
STOR-1020 : Rebase csi-node-driver-registrar to v2.7.0 for OCP 4.13 #41 Updating csi-node-driver-registrar images to be consistent with ART #40
Updating csi-node-driver-registrar images to be consistent with ART #39
UPSTREAM: <carry>: Remove .github files #38
Updating csi-node-driver-registrar images to be consistent with ART #37
Bug 2097286 : Rebase to v2.5.1 for OCP 4.12 #36 Updating csi-node-driver-registrar images to be consistent with ART #35
Updating csi-node-driver-registrar images to be consistent with ART #34
Updating csi-node-driver-registrar images to be consistent with ART #33
Updating csi-node-driver-registrar images to be consistent with ART #32
Full changelog
OCPBUGS-30532 : upgrade github.com/golang/protobuf to v1.5.4 for bette… #101 OCPBUGS-25583 : Updating ose-prometheus-adapter-container image to be consistent with ART #100 OCPBUGS-24986 : Updating ose-prometheus-adapter-container image to be consistent with ART #99 OCPBUGS-24986 : Updating ose-prometheus-adapter-container image to be consistent with ART #98 MON-3584 : Remove trailing spaces from Dockerfile.ocp #97 OCPBUGS-24155 : Updating ose-prometheus-adapter-container image to be consistent with ART #95 MON-3489 : Bump openshift/k8s-prometheus-adapter to v0.11.2 #94 OCPBUGS-21621 : Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 #88 add machine424 and rexagod to OWNERS #73
OCPBUGS-21621 : upgrade golang.org/x/net to 0.17.0 to address CVE-2023… #80 OCPBUGS-18971 : limit number of simultaneous client requests #76 OCPBUGS-19251 : Updating ose-prometheus-adapter images to be consistent with ART #74 Bump openshift/k8s-prometheus-adapter to v0.11.0 #72
OCPBUGS-12659 : bump golang.org/x/net version #71 Updating ose-prometheus-adapter images to be consistent with ART #69
OCPBUGS-10172 : Updating ose-prometheus-adapter images to be consistent with ART #68 OCPBUGS-6458 : Bump golang.org/x/net to v0.4.0 for GO-2022-1144 #67 Updating ose-prometheus-adapter images to be consistent with ART #66
Bump openshift/k8s-prometheus-adapter to v0.10.0 #64
OWNERS: Add Joao and myself, and move former team members to emeritus #63
Updating ose-prometheus-adapter images to be consistent with ART #62
Updating ose-prometheus-adapter images to be consistent with ART #61
Updating ose-prometheus-adapter images to be consistent with ART #60
Bump openshift/k8s-prometheus-adapter to v0.9.1 #59
Updating ose-prometheus-adapter images to be consistent with ART #58
OWNERS: cleanup #57
Updating ose-prometheus-adapter images to be consistent with ART #56
Full changelog
NO-ISSUE: remove bparees from owners #169
OCPBUGS-29484 : update unit tests in egress/dns-proxy #165 NE-1444 : egress/dns-proxy: switch to haproxy28 RPM package #160 OCPBUGS-24861 : Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART #158 OCPBUGS-24751 : Updating openshift-enterprise-base-rhel9-container image to be consistent with ART #155 OCPBUGS-24723 : Updating openshift-enterprise-base-container image to be consistent with ART #154 OCPBUGS-19261 : Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #153 OCPBUGS-19107 : Updating ose-egress-http-proxy images to be consistent with ART #150 OCPBUGS-19239 : Updating openshift-enterprise-egress-router images to be consistent with ART #151 OCPBUGS-18860 : Updating openshift-enterprise-base-rhel9 images to be consistent with ART #149 OCPBUGS-18853 : Updating openshift-enterprise-base images to be consistent with ART #148 OCPBUGS-10176 : 15143307: Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #132 OCPBUGS-10163 : Updating openshift-enterprise-egress-router images to be consistent with ART #131 OCPBUGS-10181 : 15143312: Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #133 NE-1304 : container builds: switch to haproxy26 package #141 OCPBUGS-11385 : Removed chroot setting #137 egress: update owners #139
OCPBUGS-11595 : Revert “[NE-1267] container builds: switch to haproxy26 package” #138 egress/dns-proxy/Dockerfile: switch to haproxy26 package #136
OCPBUGS-10003 : Revert “bump RHEL8 egress-dns-proxy image to haproxy26” #134 Updating ose-egress-http-proxy images to be consistent with ART #130
Updating openshift-enterprise-base-rhel9 images to be consistent with ART #129
Updating openshift-enterprise-base images to be consistent with ART #128
Add jupierce as approver / remove Clayton #127
rhel9 base image: Fix build failure #126
Dockerfile: add RHEL9 base image dockerfile #124
bump RHEL8 egress-dns-proxy image to haproxy26 #125
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #122
Updating ose-egress-http-proxy images to be consistent with ART #120
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #123
Updating openshift-enterprise-base images to be consistent with ART #119
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #117
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #116
Add bparees as approver #118
Updating openshift-enterprise-base images to be consistent with ART #113
Updating ose-egress-http-proxy images to be consistent with ART #105
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #108
Updating openshift-enterprise-egress-router images to be consistent with ART #106
Bug 2062126 : ipfailover: Autodetect the “ens3” NIC #111 Updating openshift-enterprise-base images to be consistent with ART #109
Bug 2018188 : VRRP ID conflict between keepalived-ipfailover and cluster VIPs #104 Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #107
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #101
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #102
Updating openshift-enterprise-egress-router images to be consistent with ART #100
Add jupierce to OWNERS #103
Updating ose-egress-http-proxy images to be consistent with ART #99
Full changelog
AUTH-486 : Add tests for the hardcoded-authorizer feature #90 OCPBUGS-29974 : Updating kube-rbac-proxy-container image to be consistent with ART for 4.16 #91 OCPBUGS-24818 : Updating kube-rbac-proxy-container image to be consistent with ART #88 OCPBUGS-21672 : http2: trim connetions and buffers #80 OCPBUGS-21672 : go.mod: bump golang.org/x/net to v0.17.0 #73 OCPBUGS-19143 : Updating kube-rbac-proxy images to be consistent with ART #72 AUTH-362 : v0.14.2 downstream #70 OCPBUGS-12313 : Update 4.14 kube-rbac-proxy image to be consistent with ART #66 : OCPBUGS-12777: Downstream merge v0.14.1 #67
OCPBUGS-10089 : Update 4.14 kube-rbac-proxy image to be consistent with ART #64 Merge upstream v0.14.0 on downstream #63
Merg upstream into downstream #60
OWNERS: add myself (ibihim) #57
Updating kube-rbac-proxy images to be consistent with ART #54
Updating kube-rbac-proxy images to be consistent with ART #52
Full changelog
Updating ose-mdns-publisher images to be consistent with ART #43
Updating ose-mdns-publisher images to be consistent with ART #42
Updating ose-mdns-publisher images to be consistent with ART #38
Full changelog
Updating ose-network-metrics-daemon images to be consistent with ART #62
Full changelog
NO-ISSUE: openapiconfig: generate base config using DefaultOpenAPIConfig #111
OCPBUGS-30319 : bump lib-go to fix SAs acting as OAuth2 clients #108 NO-ISSUE: oauth-apiserver: allow disabling PriorityAndFairness #106
NO-ISSUE: oauth-apiserver: apply GenericServerRunOptions to the server configuration #105
OCPBUGS-29176 : Updating ose-oauth-apiserver-container image to be consistent with ART for 4.16 #101 OCPBUGS-28658 : bump k8s.io and others (master) #98 OCPBUGS-24954 : Updating ose-oauth-apiserver-container image to be consistent with ART #94 OCPBUGS-27094 : UPSTREAM: <carry>: retry etcd Unavailable errors #95 OCPBUGS-19214 : Updating ose-oauth-apiserver images to be consistent with ART #90 bump k8s to 1.27.3 #89
Updating ose-oauth-apiserver images to be consistent with ART #87
bump kube to 1.24.4 #81
bump kube to 1.23.1 #75
Bug 2049155 : fix printers to avoid panic from DeepCopy #71 bump golang to 1.17 #65
Bug 1986504 : bump openshift/api #63 registry: audit deleted access/authorize tokens #62
Updating ose-oauth-apiserver images to be consistent with ART #59
Full changelog
OCPBUGS-24791 : Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART #270 OCPBUGS-21718 : go.mod: bump golang.org/x/net to v0.17.0 #266 OCPBUGS-18858 : Updating golang-github-openshift-oauth-proxy images to be consistent with ART #265 OCPBUGS-16459 : bump kube and lib-go to get rid of goproxy dep #260 fix route apiVersion #257
Updating golang-github-openshift-oauth-proxy images to be consistent with ART #251
APPSRE-7970 : Add support for configuring upstream timeout #258 OCPBUGS-14033 : Handle TERM signal gracefully #255 AUTH-373 : add audit-ID headers to TokenReview and SAR requests #252 Update logo #245
fix json examples for –openshift-delegate-urls #203
Use resourceName in Openshift SAR rule #243
Updating golang-github-openshift-oauth-proxy images to be consistent with ART #241
Bug 2026860 : ocp provider: don’t fail client creation if oauth-server cert is not present #238 Golang bump 1.17 #235
Full changelog
OCPBUGS-32331 : Updating oauth-server-container image to be consistent with ART for 4.16 #145 OCPBUGS-24987 , OCPBUGS-30319 : bump lib-go to fix SAs acting as OAuth2 clients #142 OCPBUGS-21671 : go.mod: bump golang.org/x/net to v0.17.0 #137 OCPBUGS-5233 : update osin to latest version #128 OCPBUGS-10887 : bump kube to 1.26 and lib-go for the groupcache fix #123 AUTH-357 : update osin to latest version #121 Updating oauth-server images to be consistent with ART #119
OCPBUGS-2457 : don’t log request query and fragment on failed authn request #118 OCPBUGS-2457 : don’t log request query and fragment on failed authn request #115 OCPBUGS-6238 : update art image #116 Updating oauth-server images to be consistent with ART #109
Bump library-go to b2073c41366aae78868b24e86d99021b79d754cb #112
fix linter findings #98
Bug 2086505 : Updating oauth-server images to be consistent with ART #108 Bug 2086465 : External OAuth: create audit logs for auth events #103 AUTH-100 : Add request header authn auditing #106 Update external dependencies #105
osin: Import from the new openshift module path #104
AUTH-66 : turn on audit on oauth-server with PW-based flow #92 Bug 2038691 : groupsync: create annotations if not present before writing to them #96 Golang bump 1.17 #94
Bug 2020625 : oidc: allocate claims slice to 0 len to prevent empty groups #93 Updating oauth-server images to be consistent with ART #84
oidc handler: add remote OIDC URLs to error logs #74
AUTH-8 : Add group synchronization from OIDC providers #87 Updating oauth-server images to be consistent with ART #83
Full changelog
OCPBUGS-28230 : enforce termination message policy on all platform pods #559 OCPBUGS-29575 : Apply hypershift cluster-profile for ibm-cloud-managed #556 OPECO-3031 : Update community index to 4.16 #558 synching dco policy across v0 repos #557
OPECO-3029 : Update image tag to 4.16 for all indexes except community-operators #555 Delete deploy dir #529
OPRUN-3130 : use content extraction in default catalog sources #540 OCPBUGS-19710 : Update image tag to 4.15 for all but community operators #541 OCPBUGS-21592 : [release-4.15] bump golang.org/x/net to 0.17.0 #546 Update image tag to 4.15 for community operators #534
OCPBUGS-19230 : Updating marketplace-operator images to be consistent with ART #539 Dockerfile: Align OKD and OCP #531
OCPBUGS-15158 : Scope Marketplace Operator RBAC #528 OCPBUGS-17157 : defaults: add memory targets to CatalogSources #527 OCPBUGS-17157 : manifests: tune memory use #526 OCPBUGS-17157 : bump controller-runtime, expose pprof, watch only one configmap #525 OCPBUGS-13910 : update community-operator-index to 4.14 tag #524 Update owners #517
OCPBUGS-9357 : remove a race condition #520 OCPBUGS-13921 : Update image tag to 4.14 for all but community operators #523 OCPBUGS-12794 : update community index to 4.13 tag #514 OCPBUGS-12341 : Updating marketplace-operator images to be consistent with ART #515 OCPBUGS-10926 : update image tag to 4.13 for all but community operators #513 Updating marketplace-operator images to be consistent with ART #508
Update OWNERS #509
OCPBUGS-5466 : Default CatalogSource aren’t always reverted to default settings #504 OCPBUGS-6232 : Updating marketplace-operator images to be consistent with ART #493 OCPBUGS-6323 : Upgrade golang/x/net to v0.4.0 to fix CVE-2022-41717 #505 OCPBUGS-5423 : Remove PSA audit and warnings #502 OCPBUGS-5423 : Run Default CatalogSource in Restricted mode #498 OCPBUGS-4873 : Add audit-version and warn-version labels #495 Remove duplicate gprcPodConfig field in defaults #496
OCPBUGS-4758 : Unenforce PSA Restrictions #491 OCPBUGS-2223 : Update Default CatalogSource Images to 4.12 tag #487 Updating marketplace-operator images to be consistent with ART #479
OCPBUGS-441 : Dockerfile.okd: include custom OperatorHub manifest #481 (psa) make marketplace namespace restricted #484
(namespace) remove PSA baseline enforcement #483
Add PSA enforcement label #480
Bug 2010375 : Clarify reason/steps to diagnose in *CatalogError prom alert #469 Bug 2088541 : Add psa anotations to namespace to suppress warnings #478 Updating marketplace-operator images to be consistent with ART #473
Bug 2092464 : Update default catalogsource to use 4.11 images #477 Bug 2079610 : Fix operatorHub status #470 Revert “Bug 2092464: shift marketplace operator catalogs default to v4.11” #476
Bug 2092464 : shift marketplace operator catalogs default to v4.11 #474 manifests/deployment: comply to restricted pod security level #471
chore(modules): bump openshift/api for new operatorhub crd #472
Bug 2057558 : increase polling time of status report to reduce log spam #461 fix(manifests): add singleton operatorhub cr #468
fix(capabilities): add operatorhub crd manifest #467
Bug 2070792 : chore(manifests): add missing capabilities annotation #465 manifests/10_clusteroperator: Drop the unused namespace property #401
chore(manifests): add openshift capability annotation #462
Bug 2067909 : Bump github.com/prometheus/client_golang to v0.12.1 #463 Update OWNERS #464
Bump repository to Go 1.17 and k8s v0.23.x #460
Updating marketplace-operator images to be consistent with ART #459
Bug 1927478 : Add catalog source pod spec overrides #457 Bug 2034409 : Update defaults to point to 4.10 images #456 Bug 1996928 : Revert “Start without defaults on ARM” #420 Updating marketplace-operator images to be consistent with ART #428
Update OWNERS #430
Add summary and description for prometheus alerts #429
Updating marketplace-operator images to be consistent with ART #427
Remove the marketplace v1 and v2 APIs #426
Remove unused packages #424
Bump the k8s dependencies to 1.22.1 and controller-runtime to 0.10.0 #422
Makefile,test: Fix flaky e2e tests #425
Full changelog
Source code for this page located on github