Back to index
4.9.0-0.ci-2023-09-09-042952 Download the installer for your operating system or run
oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.9.0-0.ci-2023-09-09-042952 Team Approvals:
Tests:
Blocking jobs Informing jobs Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Created: 2023-09-09 04:38:29 +0000 UTC
Image Digest: sha256:1460888acc136dafe3be0ac437b72f1223bff2188eee6816f0ae7013ee458b43
Components
New images
Rebuilt images without code change
OCPBUGS-46197 : CVE-2024-45337: bump golang.org/x/crypto from v0.30.0 to v0.31.0 #281 OCPBUGS-45562 : Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.19 #280 STOR-2016 : Rebase to upstream v1.34.0 for OCP 4.18 #276 OCPBUGS-40959 : Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.18 #277 OCPBUGS-37088 : UPSTREAM: 2108, 2115: Fix allocatable volumes count for vt1 and g4 #274 STOR-1598 : Rebase to v1.32.0 for OCP 4.17 #272 OCPBUGS-36943 : Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.17 #273 OCPBUGS-34232 : Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.17 #268 OCPBUGS-31101 : UPSTREAM: 1966: Add missing instances to instance store volumes table #261 OCPBUGS-30468 : CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #259 OCPBUGS-23260 : UPSTREAM: 1919: Add reserved-volume-attachments #260 STOR-1575 : Rebase to v1.26.1 for OCP 4.16 #257 OCPBUGS-25500 : UPSTREAM: 1877: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #252 STOR-1688 : Chore: add .snyk file to ignore false positives #248 OCPBUGS-25549 : Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #250 OCPBUGS-25197 : UPSTREAM: 1858: Bump otelhttp to fix CVE-2023-45142 #249 OCPBUGS-25126 : Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #247 OCPBUGS-24867 : Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #246 OCPBUGS-24072 : Updating ose-aws-ebs-csi-driver-container image to be consistent with ART #245 STOR-1400 : Rebase to v1.25.0 for OCP 4.15 #244 OCPBUGS-21593 : CVE-2023-44487: bump golang.org/x/net@v0.17.0 #237 OCPBUGS-19101 : Updating ose-aws-ebs-csi-driver images to be consistent with ART #235 OCPBUGS-16491 : UPSTREAM: <drop>: Bump goproxy to resolve CVE-2023-37788 #233 OCPBUGS-17280 : UPSTREAM: 1711: Bump golang.org/x/net/html to fix CVE-2023-3978 #229 OCPBUGS-16783 : Chore: Update OWNERS and OWNERS_ALIASES #228 STOR-1167 : Rebase to v1.18.0 for OCP 4.14 #222 OCPBUGS-10816 : Volume unmount repeats after successful unmount, preventing pod delete #224 Updating ose-aws-ebs-csi-driver images to be consistent with ART #220
OCPBUGS-12297 : UPSTREAM: 1505: bump go + golangci-lint #223 Updating ose-aws-ebs-csi-driver images to be consistent with ART #218
STOR-1019 : Pin k8s.io/dynamic-resource-allocation to v0.26.1 #217 OCPBUGS-6355 : Rebase to v1.15.0 for OCP 4.13 #215 Updating ose-aws-ebs-csi-driver images to be consistent with ART #214
UPSTREAM: <carry>: Remove .github files #212
STOR-860 : Rebase to v1.11.4 for OCP 4.12 #206 OCPBUGS-1574 : UPSTREAM: 1398: Add resolver to handle custom endpoints #208 Fix older dockerfile #207
Updating ose-aws-ebs-csi-driver images to be consistent with ART #202
Updating ose-aws-ebs-csi-driver images to be consistent with ART #201
Bug 2074279 : UPSTREAM: 1210: Update golang.org/x/crypto for CVE-2022-27191 #200 Bug 2050173 : Fix build on ARM after rebase #198 Updating ose-aws-ebs-csi-driver images to be consistent with ART #197
Rebase v1.5.1 #195
Updating ose-aws-ebs-csi-driver images to be consistent with ART #192
Full changelog
OCPBUGS-46470 : Power VS: ResourceManager also to override for Internal deploy #9317 OCPBUGS-46035 : fix skew support for node-joiner #9307 OCPBUGS-44560 : Add note about additional networks using IPv6 #9323 OCPBUGS-45280 : Allow more time for Service Account Creation #9299 OCPBUGS-46363 : Remove narrow timeout from etcd bootstrap member removal gate. #9295 OCPBUGS-44834 : aws: include permissions for edge compute #9230 OCPBUGS-45984 : IBMCloud Fix VPC-COS IAM Auth #9301 OCPBUGS-45317 : node-joiner PXE artifacts should be prefixed “node” #9280 OCPBUGS-45727 : Updating ose-installer-artifacts-container image to be consistent with ART for 4.19 #9284 OCPBUGS-44641 : GCP placing *.apps record in wrong managed zone #9216 OCPBUGS-45855 : If vCenter cluster has no esxi hosts fail with sane msg #9291 OCPBUGS-45807 : aws: fix sts:AssumeRole perm requirement #9287 OCPBUGS-43779 : Destroy all private cluster backend service resources #9270 OCPBUGS-45162 : Delete tagged disks #9274 OCPBUGS-45482 : Wait for etcd bootstrap member removal #9261 OCPBUGS-45685 : Power VS: Create region-zone-sysType hierarchy #9245 OCPBUGS-45289 : capi/aws: use LB name when finding Hosted Zone ID #9263 OCPBUGS-45678 : Updating ose-baremetal-installer-container image to be consistent with ART for 4.19 #9282 OCPBUGS-45656 : Updating ose-installer-container image to be consistent with ART for 4.19 #9279 OCPBUGS-44925 : aws: add ec2:AllocateAddress perm requirement. #9234 OCPBUGS-44523 : Remove unused variable from ASH arm template 06_workers.json #9204 OCPBUGS-45491 : Align vSphere UPI haproxy config with IPI #9273 OCPBUGS-44938 : Handle multiple mirror entries for source #9266 OCPBUGS-45286 : PowerVS: Listen to machineNetwork #9254 ARO-12457 : Include bootstrap docker config file in go module #9248 OCPBUGS-45175 : Ironic external url port should change based on protocol #9249 NO-ISSUE: imagebasedinstaller: support json files in extramanifests directory #9136
OCPBUGS-44924 : aws: add missing ec2:GetConsoleOutput perm requirement #9233 OCPBUGS-44193 : move GCP zone filtering client-side #9169 OCPBUGS-43561 : add zsh completion #9116 SPLAT-1851 : Bump API for Multi vCenter GA #9235 OCPBUGS-44922 : Power VS: SetDefaultPrivateServiceEndpoints mistakenly called for External deploys #9231 METAL-1136 : user defined additional provisioning NPT servers #8928 OCPBUGS-43625 : Bump Azure Machine Timeout #9226 OCPBUGS-44193 : Reduce Server Side Filtering of Resources #9202 MGMT-19292 : align image based extraPartitionlabel with var-lib-containers partition label #9217 AGENT-1022 : add node-joiner –config-iso flag #9214 AGENT-965 : add ClusterInfo report result #9213 AGENT-1028 : Day2 - Save and manage authentication tokens as cluster secrets #9210 CORS-3282 : IBMCloud: CAPI Machines #9200 CORS-2754 : ipv4.internalJoinSubnet Support #9212 OCPBUGS-44745 : aws: user right perm for untagging BYO IAM profiles #9222 OCPBUGS-43453 : permissions: add ec2:DescribeInstanceTypeOfferings req #9114 CORS-3741 : [Nutanix] support multiple subnets #9133 AGENT-901 : update agent docs for add-nodes workflow #9215 MULTIARCH-5161 : Power VS: Create VPEs as needed for Disconnected install #9165 CORS-3754 : AWS: With UserProvisionedDNS, keep resolv.conf on the bootstrap node updated #9207 CORS-3709 : GCP: Update Master pointer Ignition with API-Int IP #9085 CORS-3753 : Allow mocking of the Azure client everywhere #9201 CORS-3474 : IBMCloud: Add CAPI Ignition for bootstrap node. #9199 OPRUN-3588 : Add OperatorLifecycleManagerV1 capability #9196 OCPBUGS-34974 : IBMCloud: Add service overrides #9156 OCPBUGS-29067 : Prepend resolv.conf on the bootstrap node of GCP with custom-dns #8811 OCPBUGS-29109 : IBMCloud: RG delete failure details #8030 CORS-3282 : IBMCloud: CAPI Machines #9203 OCPBUGS-44312 : Power VS: Add new zones #9187 AGENT-950 : Implement Separate JWT Tokens for Different User Personas #9039 AGENT-999 : Agent doc changes for minimal ISO #9192 OCPBUGS-44580 : Agent handle IPv6 correctly in net.Dial #9208 CORS-3680 : update docs to include C4/C4A machine types #9193 AGENT-959 : iSCSI Boot #8886 CORS-3748 : IBMCloud: Setup IBM Cloud CAPI InfraReady step #9191 OCPBUGS-43439 : permissions: add ec2:DescribeInstanceTypes requirement #9106 OCPBUGS-44199 : Allow spaces in the aws tags #9197 No-Issue: Temporarily set none authenticator #9198
OCPBUGS-44171 : Validate aws userTags when supplied #9171 MULTIARCH-5162 : Power VS: Bump openshift/api to include https://github.com/openshift/api/pull/2076 #9190 AGENT-967 : Improve monitoring output for multi-node #9172 OCPBUGS-30292 : If agent proxy defined, add MachineNetwork to noProxy #9153 AGENT-965 : improve node-joiner create command troubleshooting #9146 AGENT-990 : Allow control planes with 5 and 4 replicas #9154 CORS-3571 : permissions: add new create command and asset #8704 AGENT-859 : Support for PXE files in day 2 #9097 OCPBUGS-39404 : Enable TLS by default between Metal3’s httpd server and the BMC (for serving virtual media images) #9170 MULTIARCH-5150 : Pass IAM endpoint override to PowerVS CloudProviderConfig #9143 OCPBUGS-43970 : bump CAPO to v0.11.1 #9151 OCPBUGS-42670 : Allow AdditionalTrustBundlePolicy to be set #9164 OCPBUGS-44167 : Ensure rendezvousIP is checked against host IP #9167 OCPBUGS-43048 : aws/capi: set CIDR block for Node Port Service ingress rule #9127 OSASINFRA-3516 : Document correlated observability #9046 AGENT-974 : Add integration test for agent minimal ISO #9139 MGMT-19191 : Provide a way to add coreos installer params for installation phase #9149 MGMT-19200 : Adding NodeLabels param for image-based-configuration iso #9161 OCPBUGS-39586 : Add C4A instance types #9122 OCPBUGS-36222 : OCPBUGS-35898: capi/aws: bump provider for LB DNS lookup fix #8927 NO-ISSUE: Add mresvanis to imagebased approvers #9168
OCPBUGS-44162 : PowerVS: Fix destroy persistent TG #9166 OCPBUGS-42544 : support additionalNTPSources in node-joiner tool #9108 no-jira: Collect bootstrap logs when control plane provisioning fails #9123
OCPBUGS-43513 : day2 set UserManageNetworking for none/external platforms #9129 OCPBUGS-44068 : PowerVS: Fix MissingSecurityGroupRules #9163 OCPBUGS-43768 : Log correct hostname for validation status #9137 OCPBUGS-44022 : PowerVS: Change CAPI verbosity level #9155 OCPBUGS-43923 : PowerVS: update capi ibmcloud 9b077049 #9148 OCPBUGS-43674 : ABI cluster installation fails for external OCI platform #9141 AGENT-1023 : support patch in curl_assisted_service #9061 CORS-3283 : IBMCloud: Add IBM Cloud CAPI Cluster manifest #9118 MGMT-19151 : Add ingress CN to cluster configuration for image-based installer #9128 CORS-3706 : allow to install an OCP Nutanix cluster using PC’s existing RHCOS image #9093 OCPBUGS-39585 : Add C4 instance validation #9121 OCPBUGS-43520 : Limit GCP API firewall rule for internal clusters #9113 OCPBUGS-43567 : pkg/asset/installconfig/azure: send full certifcate chain #9117 OCPBUGS-36670 : Update SecurityType for Image used by ConfidentialVMs #9101 CORS-3696 : Add AWS User Provisioned DNS option to install config #9069 OCPBUGS-43279 : Allow custom machine types #9094 AGENT-972 , AGENT-973 : Agent minimal ISO support for all platforms #9056 OCPBUGS-43518 : Power VS: Fix incorrect error handling for AddSecurityGroupRule #9107 OCPBUGS-39231 : add chrony.conf file when additional NTP sources are configured #9095 AGENT-966 : Reduce dependency from kube-system/cluster-config-v1 when generating the image #9066 OCPBUGS-41834 : Add agent installer checks for hosts interface table #9052 OCPBUGS-30292 : For agent installer, add RendezvousIP to NO_PROXY #9083 OCPBUGS-36532 : Agent installer wait-for, just test connectivity to host #9074 AGENT-988 : fix node-joiner integration tests #9100 OCPBUGS-42637 : Update RHCOS 4.18 bootimage metadata to 418.94.202410090804-0 #9088 OCPBUGS-36869 : Prevent race with provisioning-interface service #8985 OCPBUGS-36236 : IBMCloud: Handle pagination for subnets #8668 AGENT-904 : Output config-image from node-joiner tool #8321 OCPBUGS-43041 : fix slice init length #9072 CORS-3284 : IBMCloud: CAPI PreProvisioining #8235 CORS-3472 : Ensure that a region contains zones #9087 OCPBUGS-42717 : Power VS Ensure Metadata populated for CAPI/private cluster case on PowerVS #8826 OCPBUGS-42789 : Update forwarding rules destroy #9075 OCPBUGS-41785 : Validate MTU when controlPlanePort uses FixedIPs #9081 MGMT-18292 : in order to be able to import openshift installer we need to update assisted service as it requires new hive #9058 OCPBUGS-39339 : gather: simplify service regex for analyze #9073 OCPBUGS-33311 : aws: fix NLB creation in secret regions #8636 NO-JIRA: ignition/bootstrap/common: account for templated files when setting mode #8977
CORS-3601 : Bump api, client-go, library-go for k8s 1.31 #9067 AGENT-998 : allow node-joiner hack script to run in the CI #9064 no-jira: Capv bump to v1.11.1 #9059
OCPBUGS-42563 : machines: don’t sort mpool zones #9063 CORS-3702 : Add api and api-int ips to bootstrap node #9022 SPLAT-1829 : Removed usage of importx for ova upload #9062 OCPBUGS-42412 : add new tested azure instance types detected during QE 4.17 full function test #9057 OCPBUGS-41184 : GCP Validate Disk and Instance Type #9043 AGENT-889 : node-joiner integration tests #8976 no-jira: bump cluster-api version to 1.8.2 #9055
OCPBUGS-36670 : Azure CAPI: Provide Image ID while creating different image versions #9021 OSASINFRA-3615 : OpenStack: Add installation steps for single stack IPv6 clusters #9044 CORS-3598 : bump release image to 4.18 #9049 MULTIARCH-4813 : Make CPMS active by default for Power VS platform #8738 OSASINFRA-3614 : OpenStack: remove creation of IPv4 rules on Single stack IPv6 cluster #9038 OCPBUGS-37588 : PowerVS: Add support for persistent Transit Gateways #8774 OCPBUGS-42123 : Add GCP N4 Machine Series to tested instances for OCP #9029 CORS-3663 : Authentication tech debt for agent based installer #8902 OCPBUGS-42086 : update RHCOS 4.18 bootimage metadata to 418.94.202409162337-0 #9027 OCPBUGS-38498 : Set default release image to 4.17 #9017 OCPBUGS-39340 : Remove destroy search for regional target tcp proxies #9015 OCPBUGS-41538 : Remove bindings for XPN installs #8989 OCPBUGS-41184 : Add validation for gcp disk and instance types #8961 OCPBUGS-41895 : Log details when cluster validations fail #9004 OCPBUGS-41852 : add tested IBMCloud instance types in 4.17 test #8932 CORS-3457 : Remove pborman/uuid dependency #8250 OSASINFRA-3607 : OpenStack: validate combination of externalNetwotk with single stack v6 #9011 OCPBUGS-41938 : PowerVS update capi ibmcloud c6bcd313 #9010 OCPBUGS-38499 : Fix integration tests #8789 NO-ISSUE: docs/dev/dependencies: Mention install-config YAML generation #9014
OCPBUGS-36670 : Azure CAPI: Improve handling of security features configured on the MachinePools and OSDisk #9000 OCPBUGS-37506 : Azure CAPI: Update publicAccess for Blob Containers #9001 SPLAT-1750 : Add support for multiple NICs for vSphere day 0 #8890 CFE-1105 : Remove featureGate checks on GCP userLabels and userTags configs #8894 OCPBUGS-41776 : Add AWS c7g,m7g,r8g to tested instance types #8996 OCPBUGS-30811 : OpenStack: Install CI dependencies from rpm #8830 OCPBUGS-36861 : Updates GCP CAPI worker role #8938 OCPBUGS-32792 : update resolv.conf every time on bootstrap node #8430 OCPBUGS-41785 : Validate MTU for custom network #8988 OCPBUGS-41188 : Updating ose-baremetal-installer-container image to be consistent with ART for 4.18 #8962 OCPBUGS-38719 : Filter peering zones out #8978 OCPBUGS-36293 : aws: bump capa to fix EIP leak on bootstrap when BYOIP #8676 OCPBUGS-41174 : Updating ose-installer-container image to be consistent with ART for 4.18 #8960 OCPBUGS-36670 : Azure CAPI: Look for SecuirtyType in DefaultMachinePlatform #8982 OCPBUGS-37506 : Fix Azure storage account’s public access #8944 OCPBUGS-41257 : pass k8s version to kube-apiserver render during bootstrap #8973 OCPBUGS-40412 : Updating ose-installer-altinfra-container image to be consistent with ART for 4.18 #8957 OCPBUGS-37628 : vSphere conversion log when deprecated and support fields are used #8845 OCPBUGS-36670 : Azure CAPI: Set SecurityType as a Feature while creating Gallery Image #8967 OCPBUGS-41262 : Updating ose-installer-artifacts-container image to be consistent with ART for 4.18 #8965 OCPBUGS-41259 : update RHCOS 4.18 bootimage metadata to 418.94.202409050217-0 #8974 OCPBUGS-36196 : pkg/infrastructure/azure: set correct cloud for BYO vnet #8959 OCPBUGS-33324 : baremetal: wait before retrying ListWatch #8355 OSASINFRA-3571 : openstack: refactor ConfigDrive & add it for workers #8963 OCPBUGS-39402 : Fix IPv6 security group rule for schedulable master #8942 OCPBUGS-39081 : Bump extract-machine-os timout to 20m #8921 OCPBUGS-38070 : Azure: Add master and worker VM IPs to both the backend pools API LoadBalancer #8887 SPLAT-1744 : Bump capv #8956 OCPBUGS-37442 : azure: Pick the next available IP address for internal LB #8916 OCPBUGS-39431 : dropping this warning as the move from terraform is transparent to the end user #8945 OCPBUGS-19936 , OCPBUGS-20052 , OCPBUGS-23173 : update vault version to 1.13.10 #8941 OCPBUGS-38069 : Remove firewall rules created by CAPG #8869 OCPBUGS-36283 : Enable TLS for virtual media in initial ironic deployment #8819 OSASINFRA-3571 : OpenStack: enable config-drive for single-stack IPv6 #8940 OCPBUGS-35054 : capi/aws/byo-vpc/multi-cidr: fix group rules #8591 OSASINFRA-3559 : OpenStack: Enable single stack IPv6 install #8925 OCPBUGS-39285 : Fix var_files syntax to work on older version of ansible #8919 OCPBUGS-39299 : Fix to validation for GCP pre-created ServiceAccount #8930 OCPBUGS-36494 , OCPBUGS-38918 : vSphere - If template is defined skip downloading #8923 CORS-3599 : cvo: bump default channel to stable-4.18 #8907 OCPBUGS-38966 : Skip private managed zone creation for xpn installs #8908 OCPBUGS-38802 : Use infrastructure resource to retrieve platform type #8888 OCPBUGS-33308 : IngressController subnet selection in AWS #8906 CORS-3561 : Add new disk types GCP Control Plane nodes #8880 OCPBUGS-38235 : upi/aws: update lambda runtime python version #8820 OCPBUGS-38118 : failed to install Nutanix OCP 4.16 cluster with DHCP network #8806 OCPBUGS-38479 : ic: validate release arch is compatible with cluster arch #8842 OCPBUGS-38177 : install-status reflects day 2 services #8858 OCPBUGS-38722 : aws: validate public-only subnets configs #8883 OCPBUGS-37663 : azure: Fix empty route table being created. #8872 OCPBUGS-36196 : CAPZ USGovernmentCloud fixes #8876 NO-JIRA: Print the “export KUBECONFIG=…” command on its own line for easier cut-and-paste #8882
OCPBUGS-37543 : Azure: Disable shared key access when using managed identity #8844 OCPBUGS-38657 : upstream capv bug causes session timeout #8871 OCPBUGS-38070 : Azure CAPI: Add check for APIServer OperatorPublishingStrategy #8852 OCPBUGS-38571 : GCP Global Address failed to destroy #8860 OCPBUGS-38558 : Fix typo #8854 OCPBUGS-38599 : incorrect folder gen, workaround govmomi vm folder path bug #8861 OCPBUGS-38152 : Add roles needed for shared VPC #8815 OCPBUGS-38552 : Use ManifestListed Digest for multi payload installs #8850 SPLAT-1713 : Updated powercli configuration to allow multi vcenters #8853 OCPBUGS-37953 : pkg/infrastructure/azure: limit storage account to 24 characters or less #8835 OCPBUGS-38551 : only allow a single network in failure domain topology #8851 OCPBUGS-37945 : import failure when esxi config is not the same in the cluster #8799 OCPBUGS-37683 : Resource deletion is holding up deletion process #8810 OCPBUGS-35262 : Do not create firewall rules for xpn installs #8801 SPLAT-1713 : Enhanced vSphere UPI scripts for multi vcenter support #8829 OCPBUGS-38114 : aws: add support for clusters with public-only subnets #8807 no-jira: update vsphere owners locations #8833
OCPBUGS-37736 : vsphere, if secureboot is enabled, disable it in the template #8793 OCPBUGS-36327 : bump capa for instance register fix #8678 OCPBUGS-38436 : PowerVS: Fix mad system pool #8831 OCPBUGS-35947 : pkg/asset/machines: fix Azure zones #8817 OCPBUGS-37780 : aws: do not allow edge pools of different arch #8788 OCPBUGS-38241 : Update control plane tags to match CAPI networks #8822 SPLAT-1560 : set up ‘aicli’ & ‘qemu-img’ to use Assisted Installer to install OCP on Alibaba Cloud #8776 AGENT-938 : Enhance console logging to display node ISO expiry date during addNodes workflow #8804 CFE-920 : Update GCP userLabels and userTags configs description #8766 AGENT-944 : Enable assisted-service debug logging #8816 OCPBUGS-37770 : data/bootstrap/files/usr/local/bin/bootkube: Pass CVO render –feature-gate-manifest-path #8813 OCPBUGS-37821 : Remove timed context for gcp client #8792 CORS-3575 : Azure: remove azure terraform code and resources #8764 OCPBUGS-37540 : Gather Azure Logs through load balancer #8812 AGENT-937 : Check Authentication Token for Node Boot-Up on day2 #8802 Revert “Revert #8221 “SPLAT-1553: Added multi vCenter support for capi installer.”” #8638
MULTIARCH-4770 : MULTIARCH-4776: bump o/api for MultiArchInstall FGs #8808 MULTIARCH-4098 : Power VS: Make CAPI the default deployment method #8814 CORS-3617 : Make Azure CAPI the default (& only) install option #8809 no-jira: PowerVS: Block disconnected deploys in 4.17 #8798
CORS-3608 : aws: deprecate platform.aws.amiID field #8755 NO-ISSUE: Remove unnecessary code #8805
AGENT-890 : Simplify Agent ISO kargs setting #8513 CORS-3546 : Nutanix: add gpus and dataDisks support #8765 OCPBUGS-38055 : fix/aws/edge: IAM profile must be same of workers #8803 CORS-3594 : MOVE GCP CAPI to default feature set #8723 no-jira: doc: minor update to installation doc #8795
AGENT-870 : Update AUTH_TYPE #8108 OCPBUGS-37594 : pkg/infrastructure/azure: Set architecture when creating gallery image #8800 CORS-3609 : aws: support existing IAM instance profiles #8689 MULTIARCH-4828 : Pass ServiceEndpoints from install-config to CAPI for PowerVS #8781 MGMT-18364 : add image-based installation ISO integration tests #8797 CORS-3565 : CAPZ private clusters #8732 OCPBUGS-36361 : Azure: If credentialsMode is manual, pass the identity through #8786 CORS-3299 : Azure: Use Customer Managed Key to enable Storage Account Encryption #8736 MULTIARCH-4770 : bump o/api for MultiArchInstall TechPreview gates #8791 OCPBUGS-34953 : fix bogus analyze message when gather fails #8787 AGENT-928 : allow user to specify sshKey via config file #8779 OCPBUGS-35262 : Upgrade to latest cluster-api-provider-gcp #8780 AGENT-862 : Change day-2 monitor timeout back to 90 minutes #8783 AGENT-919 : Authenticate day2 operations #8717 OCPBUGS-35959 : azure: Fix Accelerated network enablement #8667 CORS-3209 : Set UserTags on CAPG resources #8691 no-jira: bootstrap: add shellcheck directives to follow sourced files #8741
CORS-3580 : Update GCP Disk Types #8773 no-jira: Azure: remove stale DNS migration images #8775
OCPBUGS-37217 : CAPI GCP - retry SetIAMPolicy #8763 OCPBUGS-37427 : bootstrap gather fails in vsphere, only ipv6 address used #8759 OCPBUGS-37356 : vSphere validation fails if dc is in a folder #8758 OCPBUGS-35366 : Update upi references to api-internal #8582 AGENT-862 : Extend monitor-add-nodes to support multiple nodes #8507 AGENT-854 : day2 add-nodes workflow validations #8740 AGENT-900 : enable fips for add-nodes workflow #8760 CORS-3568 : Support GCP pre-created Service Accounts for CAPG #8750 OCPBUGS-36302 : pkg/asset/machines/azure: Don’t set disk encryption set to nil #8756 OCPBUGS-36780 : ic: fix typo in warning message #8744 OCPBUGS-36913 : openstack: Fix security group tagging #8757 OCPBUGS-36390 : aws: do not require create permissions when BYO IAM role #8688 MULTIARCH-4814 : ic: add release arch validation for multi-arch clusters #8761 AGENT-922 : Remove misleading inClusterConfig warning #8715 OCPBUGS-36904 : aws: bump CAPA for subnet tagging fix #8730 no-jira: Replace Equal with ErrorContains for image-based nmstatectl unit tests #8762
OCPBUGS-37226 : Persist image-based config manifests from state instead of template #8752 MGMT-18364 : Add image-based config ISO integration tests #8737 OCPBUGS-36917 : openstack: Fix apiVIPs and ingressVIPs docs #8728 no-jira: docs/user/azure: fix byo vnet security groups #8485
CORS-3607 : Azure CAPI Installs within Tech Preview featureset #8754 MULTIARCH-4777 : gcp: support multi-arch nodes #8701 OCPBUGS-35406 : Use service CIDRs to determine bootstrap kubelet IP family #8681 AGENT-910 : node-joiner multi-arch support #8644 METAL-1039 : Allow baremetal platform without MAPI #8521 CORS-3569 : UDR for Capz #8731 MULTIARCH-4569 : aws: support multi-arch nodes #8698 no-jira: Revert “Merge pull request #8714 from r4f4/bump-default-release-4.17” #8753
OCPBUGS-37104 : openstack: Validate controlPlanePort has subnet #8739 OCPBUGS-37164 : Handle empty config for image-based create image #8745 OCPBUGS-37107 : Power VS: Disable SNAT when specifying imageContentSources #8697 STOR-1353 : Attempt to cleanup GCP Filestore instances on destroy #8699 CORS-3073 : azure: Allow for installs in existing vnets #8662 MGMT-17842 : Add image-based installer create config ISO #8514 MGMT-17226 : Add image-based installer create installation ISO #8679 OCPBUGS-35440 : capi/aws: bump provider for ingress rules fix #8596 OCPBUGS-34638 : destroy/gcp: set value for DiscardLocalSsd #8649 CORS-3302 : port forward SSH to bootstrap host #8669 OCPBUGS-36713 : CAPG use existing subnets and VPC #8722 MGMT-17226 : Add imagebased installer skeleton #8709 CORS-3485 : Azure: modify control plane outbound LB into submission as an API LB #8652 OCPBUGS-36378 : capi: start controllers after WaitGroup is created #8693 CORS-2775 : cmd: destroy: remove deprecated github.com/pkg/errors #8720 OCPBUGS-33973 : Openstack UPI - Reintroduce unique resource names. #8477 MULTIARCH-4568 : Print release image arch and default arch when the payload is multi #8515 CORS-3593 : go.mod: bump k8s dependencies #8713 OCPBUGS-35262 : Skip firewall rule creation if permission is missing #8706 OCPBUGS-36142 : azure: Fix HyperVGeneration for gen2 images. #8666 OCPBUGS-35542 : Cleanup capi artifacts #8599 CORS-3590 : releaseimage: update default version #8714 AGENT-875 : Authenticate agents #8395 OCPBUGS-34708 : CORS-3582: capi: remove unused feature gates #8703 OCPBUGS-36660 : CORS-3591: 4.17 default channel incorrectly points to stable-4.16 #8708 CORS-3296 : CAPG - configure Internal LoadBalancer in the provider #8421 CORS-3547 : Upgrade cluster-api-provider-gcp to v1.7 #8700 AGENT-876 : Authenticate systemd services and curl requests #8393 SPLAT-1670 : install pwsh from ci mirrored image #8643 OCPBUGS-36453 : PowerVS: add .ssh directory #8686 OCPBUGS-35262 : Fix shared vpc issues with capg installs #8583 AGENT-925 : retrieve ignition endpoint to add a new node #8650 OCPBUGS-35752 : capi/aws: disable EKS controller in CAPA #8628 OSASINFRA-3402 : Use Gophercloud v2.0.0 #8685 AGENT-871 : Authenticate wait for #8270 OCPBUGS-36318 : update RHCOS 4.17 bootimage metadata to 417.94.202407010929-0 #8690 OCPBUGS-36316 : Power VS: Allow pending network for internal publishing strategy #8677 OCPBUGS-36242 : vSphere - If the folder pre-exists do not tag #8671 OSASINFRA-3510 : Change ‘Generate’ to accept a context #8562 OCPBUGS-36284 : Remove etcd store when provisioning fails #8673 OCPBUGS-36092 : bump go-retryablehttp for CVE fix #8653 no-jira: Update documentation on libvirt installs for devs #8675
OCPBUGS-36176 : PowerVS: Add ibmcloud plugins #8661 OCPBUGS-35382 : CAPG marketplace image use for control plane nodes #8665 OCPBUGS-35852 : capi: shutdown local controlplane as the last step #8639 OCPBUGS-35188 : aws: remove terraform configs #8557 CORS-3435 : Create user assigned identity for Azure VM’s #8645 MULTIARCH-4515 : Add new files for agent-based installer (LPAR support for s390x) #8536 OCPBUGS-35420 : OSASINFRA-1962: openstack: Validate additionalNetworkIDs and additionalSecurityGroupIDs #8592 CORS-3483 : Update CAPI and CAPZ versions to set Machine DisableExtensionOperations #8627 OCPBUGS-34978 : Power VS: Ensure that VPC has prerequesite resources for private #8532 OCPBUGS-35547 : Configured logger for controller-runtime #8641 OSASINFRA-3465 : openstack: Update Gophercloud to v2 #8493 CORS-3562 : azure: Setting experimental MachinePool featuregate to false #8637 CORS-3434 : azure: Skip image upload if env var is set #8283 OCPBUGS-14963 : IBMCloud: Ignore failed VPC regions #8556 OCPBUGS-33735 : Remove GCP bootstrap ssh firewall rule #8523 OCPBUGS-31275 : gcp: Validate install-config examples #8198 no-jira: images: upi-installer image cleanup #8216
OCPBUGS-33702 : baremetal: bootstrap: bind icc to localhost #8445 Revert #8221 “SPLAT-1553: Added multi vCenter support for capi installer.” #8630
OCPBUGS-35426 : Update cluster-api-provider-openstack to v0.10.3 #8625 OCPBUGS-35523 : remove terraform libvirt from the installer #8610 OCPBUGS-30025 : fix: changed validation for olm and marketplace #8609 OCPBUGS-35430 : Support CAPI provider custom timeouts #8568 OCPBUGS-35533 : Fix ethertype for masters service router SG creation #8615 CORS-3265 : capz: Add Accelerated Networking #8418 OCPBUGS-35494 : capi/aws: allow 6443 for private cluster NLB #8620 OCPBUGS-35530 : capi/aws: retry SSH ingress rule removal #8616 OCPBUGS-35400 : For GCP, only configure kmsKeyServiceAccount if set #8597 SPLAT-1553 : Added multi vCenter support for capi installer. #8221 OCPBUGS-34037 : bump github.com/container/images for CVE fix #8564 OCPBUGS-35511 : capi aws: append random string in caller ref #8593 SPLAT-1437 : CAPI/AWS/BYOIP: supporting Public IPv4 Pool #8175 OCPBUGS-35467 : capi/aws: disable CAPA’s TagUnmanagedNetworkResources feature gate #8602 OCPBUGS-33745 : save etcd data to its own directory #8424 NO-JIRA: Remove dulek from openstack-{approvers,reviewers} #8413
OCPBUGS-34819 : capi/aws: bump provider for fixes #8545 OCPBUGS-34618 : vsphere - allow network selection on cluster name #8505 OCPBUGS-35037 : aws: delete ignition bucket on bootstrap destroy #8584 OCPBUGS-35293 : Add ELB V2 permission to set security groups on API server load balancer #8572 OCPBUGS-34712 : add tested instance type for IBMCloud #8549 OCPBUGS-35315 : capi: use polling instead of exponential backoff #8522 OCPBUGS-35197 : capi/aws: do not set proxy for masters #8570 OCPBUGS-34005 : openstack: Attach a bootstrap FIP to the cluster network port #8578 OCPBUGS-35309 : Add S3 permission to allow attaching S3 bucket policy #8573 OCPBUGS-33661 : capi/aws: rename preserveBootstrapIgnition #8460 OCPBUGS-35180 : Prevent multiple invocations on CAPI #8565 OCPBUGS-33681 : Cleanup bootstrap resources for capg install #8489 OCPBUGS-34713 : AWS remove extra tags from awsmachines for security groups and subnets #8567 OCPBUGS-35041 : capi: do not override KUBECONFIG #8542 OCPBUGS-34325 : Updating ose-baremetal-installer-container image to be consistent with ART for 4.17 #8559 OCPBUGS-35182 : write etcd and kube-apiserver logs #8441 OCPBUGS-34456 : bump envtest binaries version #8471 no-jira: hack: bump golangci-lint version #8535
OCPBUGS-34416 : Validate OnHostMaintenance and ConfidentialCompute #8541 OCPBUGS-35039 : PowerVS: Destroy DHCP in ERROR state #8544 OCPBUGS-34082 : baremetal: check if HardwareDetails is nil #8443 OCPBUGS-34368 : OCPBUGS-34325: OCPBUGS-34311: OCPBUGS-34221: Bump golang 1.22 #8473 OCPBUGS-34295 : wait for ip addresses to be present on machines #8450 OCPBUGS-35099 : OCPBUGS-4466: Prevent cluster installation with mismatched worker assets and worker replicas #8370 OCPBUGS-35038 : capi/aws: add BootstrapDestroyer guard #8543 OCPBUGS-34915 : Add network tags to capg control plane machines #8531 OCPBUGS-35020 : capi/aws: don’t use S3 stub for masters #8538 OCPBUGS-33662 : aws: don’t always require s3:Delete* permissions #8410 OCPBUGS-34969 : Power VS: Add ports needed for private clusters to security group #8530 OCPBUGS-34900 : Increase timeout for bootstrap complete #8534 no-jira: Minor updates to fix linting issues. #8529
OCPBUGS-34869 : PowerVS: fix AddIPToLoadBalancerPool #8508 MULTIARCH-4640 : Add 4 new regions for PowerVS #8484 OCPBUGS-34493 : baremetal: Don’t always enable provisioning-interface.service #8491 No-jira: Revert “Cleanup GCP Filestore instances on destroy” #8527
OCPBUGS-33793 : Make Ingress capability required for all baselines #8525 OCPBUGS-34692 : update RHCOS 4.17 bootimage metadata to 417.94.202405291927-0 #8516 OCPBUGS-33789 : [Nutanix] installer intermittent failed at uploading the bootstrap image to PC when CAPI enabled #8468 STOR-1353 : Cleanup GCP Filestore instances on destroy #7251 OSASINFRA-3456 : OpenStack: do not use trunk for the Machines by default #8497 OCPBUGS-33508 : capi/aws: fix setting custom AMI #8466 OCPBUGS-33793 : Make Ingress capability required for standalone OpenShift #8502 CORS-3523 , CORS-3524 : aws: terraform: add spot instance support for masters #8349 OCPBUGS-33410 : attach tag to folder,fix folder destroy #8373 OCPQE-22479 : add machine series ‘A3’ and ‘C3D’ to ‘Tested instance types for GCP’ #8504 OCPBUGS-33840 : Warn before trimming cluster name #8367 OCPBUGS-33234 : azure: bump profile used for network #8351 OCPBUGS-33925 : tfvars: change asset’s name #8464 OCPBUGS-33561 , OCPBUGS-33615 : capv - missing cores/socket,disk type #8446 no-jira: Removing unused users from owners aliases #8498
OCPBUGS-30860 : Use infrastructure API to detect cluster topology #8429 MGMT-17468 : Detect Release Image Arch in a Disconnected Env. #8378 MULTIARCH-4076 : PowerVS: Default region bug fix #7862 OCPBUGS-34243 : unique AWS HostedZone Caller Ref #8453 OCPBUGS-30516 : bump golang-protobuf for CVE fix #8379 no-jira: images: delete Dockerfile.upi.ci.rhel8 #8377
OCPBUGS-33570 : Nutanix IPI install with capi failed to set bootType #8454 OCPBUGS-34389 : aws/cluster: restrict SSH on private clusters #8462 OCPBUGS-34368 : Updating ose-installer-artifacts-container image to be consistent with ART for 4.17 #8459 OCPBUGS-34354 : PowerVS: update capi ibmcloud to release 0 8 0 #8458 OCPBUGS-33926 : capi/aws: don’t modify BYO role’s policy #8457 OCPBUGS-33912 : PowerVS: Use random subnet #8420 OCPBUGS-34221 : Updating ose-installer-altinfra-container image to be consistent with ART for 4.17 #8449 OCPBUGS-34311 : Updating ose-installer-container image to be consistent with ART for 4.17 #8455 OCPBUGS-34040 : Add –dir /tmp to node-joiner-monitor.sh #8444 OCPBUGS-30860 : bootstrap: hit readyz when checking LB status #8400 OCPBUGS-33877 : bump aws bootstrap destroy timeout #8427 OCPBUGS-33995 : PowerVS: Also fill out PlatformSpec for custom endpoints #8439 TRT-1674 : 4.17 capi revert 1 #8433 OCPBUGS-33493 : Enable leader election for baremetal operator #8391 OCPBUGS-33890 : SPLAT-1469: Remove vsphere terraform #8254 CORS-2840 : promote capi-installers to default feature set #8416 OCPBUGS-33668 : Changed folder name to match cluster name instead of infra-id. #8414 AGENT-903 : monitor-add-nodes should only show CSRs matching node #8376 CORS-3480 : aws/sdk: remove sdk provisioner #8358 CORS-3460 : Always collect clusterapi manifests #8411 OCPBUGS-33709 : GCP mixup when using the ignition shim vs the signed url #8342 CORS-3297 : Add GCP firewall rule to access bootstrap node via ssh #8374 CORS-2905 : capi-aws delete bootstrap ssh rule #8359 OCPBUGS-33370 : baremetal: always write masters file #8365 OCPBUGS-33531 : update RHCOS 4.16 bootimage metadata to 416.94.202405132047-0 #8409 no-jira: Vendor api changes for tech preview with capg #8407
CORS-3269 : Azure ignite control plane machines #8126 OCPBUGS-31017 : aws: add missing permission for IPv4 pools #8408 OCPBUGS-33649 : add quota support to ca-west-1 #8406 CORS-3460 : capi: collect generated assets in hidden dir and save into log bundle #8387 OCPBUGS-33006 : baremetal: aarch64-related fixes #8385 OCPBUGS-33610 : fix API detection, azure bootstrap disk size, and use get to verify endpoint #8371 no-jira: Removing unused terraform variables #8360
OCPBUGS-33502 : capi/aws: fix setting IMDSv2 value #8399 CORS-3516 : hack: do not execute cross-compiled binaries #8397 OCPBUGS-33578 : capi/aws: fix HostedZone ID lookup #8396 OCPBUGS-30860 : improve bootstrap logic to wait for at least 2 apiserver instances #8394 OKD-213 : Reference stream-coreos instead of centos-stream-coreos-9 #8356 OCPBUGS-33470 : use read/write cache on azure masters #8380 no-jira: AzureMachines: set disk caching to ReadWrite #8390
AGENT-863 : Change $@ to “$*” to fix shellcheck #8402 OCPBUGS-33481 : set the node tag used by CAPG for CloudProviderConfig #8386 OCPBUGS-23022 : Installer should not complain when API and API-INT are resolved. #7701 no-jira: vendor: capi-installer in tech preview #8372
CORS-2895 : capa/machines: fix zone placement for control planes #8347 OCPBUGS-32947 : Changed vsphere CPMS to not include fields controlled by failure domains. #8354 AGENT-872 : Generate JWT token #8110 no-jira: vSphere - update owners aliases #8384
AGENT-906 : Script to run monitor-add-nodes in cluster #8294 OCPBUGS-33430 : Fix CAPI installation typo #8375 CORS-3471 : standalone destroy bootstrap support with capi #8350 CORS-3477 : hack: build capi + providers by default #8357 OCPBUGS-33189 : OCPBUGS-33006: baremetal: correct libvirt defaults #8366 OCPBUGS-33157 : baremetal: pause provisioning #8346 NO-ISSUE: baremetal: disable bmo webhook on bootstrap #8340
OCPBUGS-33240 : avoid FAT32 error messages when generating the agent ISO #8353 no-jira: Private domains in survey for PowerVS #8303
CORS-3250 : images: use pre-built KAS/etcd binaries #8343 SPLAT-1599 : Convert storage policy id to SpbmStoragePolicy. #8352 no-jira: Power VS: Refactor InfraReady to use metadata client #8337
CORS-3466 : CAPG set instance group name #8314 MULTIARCH-4633 : Power VS: Configure load balancers for the private scenario #8331 OCPBUGS-26216 : Fix parameter used to disable smt for ppc64 systems #8178 COS-2744 : update RHCOS 4.16 bootimage metadata to 416.94.202404301731-0 #8335 METAL-872 : baremetal: write masters.json file #8336 no-jira: azure: Add securityProfile to control plane machines #8334
no-jira: CAPI-Install Feature Gates per Platform #8311
SPLAT-1599 : Added support for secure boot and storage policies to UPI pwsh. #8328 CORS-2797 : images: move container images to RHEL 9 #8196 AGENT-864 : cleanup dnf cache after installing node-joiner reqs #8329 OCPBUGS-32981 : baremetal: use ControlPlane.Replicas #8322 AGENT-863 : docs fix #8325 OCPBUGS-33006 : baremetal: set bootstrap domain arch #8317 OCPBUGS-33024 : agent: escape ‘%’ in proxy settings #8320 AGENT-863 : fix oc dependency in installer images #8326 OCPBUGS-29968 : Generate ZTP manifests with correct Group/Version/Kind metadata #8068 CORS-3437 : infra/capi: add provisioning timeout #8307 SPLAT-1596 : Created new function to workaround issue with Set-HardDisk. #8315 CORS-3214 : capi-aws - Wavelength Zones network provisioning #8174 AGENT-863 : node-joiner cluster script #8242 OSASINFRA-3434 : Use cluster-api-provider-openstack v0.10 and CAPO v1beta1 manifests #8021 CORS-2893 : capi-aws: implement preserveBootstrapIgnition #8313 OCPBUGS-4466 : Add check for compact-cluster install on GCP, AWS & Azure #8226 CORS-3250 : images/altinfra: add etcd/kas binaries from containers #8309 CORS-2899 : AWS/CAPI Local Zones network provisioning #8173 OCPBUGS-32981 : baremetal: template the number of master nodes #8316 OCPBUGS-32519 : Fix appliance CI jobs #8297 OCPBUGS-31017 : fix ec2:DisassociateAddress requirement #8296 OCPBUGS-32292 : Remove deprecated replace directives #8271 no-jira: PowerVS: Update CAPI IBMcloud to 188d9e99 #8310
CORS-3076 : azure: Add additional tags to AzureCluster #8301 CORS-3294 : CAPA health check configuration for control plane ELBv2 #8223 CORS-3470 : capi/aws: add custom endpoint support. #8306 MULTIARCH-4111 : Updating CI image to include qemu-kvm #8312 MULTIARCH-4616 : Power VS: Add ServiceEndpoints for endpoint overrides #8292 no-jira: cluster-api/aws: bump capa to latest version #8288
OCPBUGS-32306 : GCP Destroy find regional and global addresses #8275 OCPBUGS-32517 : Ensure worker BMH’s get unpaused #8299 OCPBUGS-32591 : GCP Destroy target pools fix misleading log #8298 CORS-3260 : CAPI: Create GCP Internal LB #8151 OCPBUGS-15845 : Check host for compatibility with target cluster config #7566 no-jira: bump golangci lint to 1.54.2 #8291
OCPBUGS-32425 : Test for the presence of “provisioned” server #8289 SPLAT-1585 : capv - allow no auth to vcenter #8276 SPLAT-1208 : replace UPI terraform with powercli #7699 OCPBUGS-29765 : Fills CIS or DNS CRN in Metadata, never both #8057 OCPBUGS-32042 : fix usage of addtionalTrustBundle field #8253 METAL-872 : Remove terraform libvirt provider #8160 MULTIARCH-4549 : Logic for creating private DNS records for PowerVS CAPI #8246 OCPSTRAT-915 : Nutanix capi support #8211 OCPBUGS-32133 : GCP: Fixing GCP Bootstraping #8248 METAL-939 : baremetal: monitor bootstrap process #8181 no-jira: gather: replace deprecated errors package #8280
no-jira: azure: Update capz version to 1.14.2 #8268
OCPBUGS-31017 : aws: add ec2:DisassociateAddress permission #8247 OCPBUGS-31563 : sdk/aws: add ssh security group rule for compute #8229 MULTIARCH-4550 : Power VS: Use a custom resolver when publish strategy is Internal #8243 MULTIARCH-2678 , OCPBUGS-14478 : Refactored updateIgnitionImg to use NewIgnitionImageReader from isoeditor to support s390x #8205 CORS-3050 : capi/aws: copy AMI to target region, if needed #8157 SPLAT-1592 : bump capv to v1.9.3 #8267 OCPBUGS-30774 : always save serial logs if they were gathered #8263 CORS-3261 : GCP cluster api add disk encryption #8222 CORS-3419 , OCPBUGS-30941 : Include baremetal IPI in openshift-installer #8161 no-jira: PowerVS: Open port 10258 #8261
OCPBUGS-31711 : AWS update explain docs #8258 OCPBUGS-27965 : escape ‘%’ in proxy settings #8265 OCPBUGS-32174 : save correct bootstrap public IP #8264 CORS-3420 : Remove libvirt platform from openshift-baremetal-install #8244 no-jira: capi: replace deprecated --metrics-bind-addr arg #8251
CORS-3436 : capi: save log output to file #8218 no-jira: PowerVS: Add destroy Power Server subnets #8260
OCPBUGS-32091 : Add Top-level Context for Create Commands #8063 CORS-3063 : Support control plane disk encryption #8124 CORS-3269 : Azure CAPI Ignite Bootstrap #8255 no-jira: PowerVS: add AddIPToLoadBalancerPool #8257
SPLAT-1293 : Bump API version to promote vSphereStaticIPs from TechPreview. #7943 no-jira: capi/aws: bump controller log level to debug #8252
CORS-3254 : Update google.golang.org/api/cloudresourcemanager library version #8213 MULTIARCH-4111 : Update the CI image with virt-install #8259 CORS-3218 : GCP Remove the use case of users passing contents for json secret data #8234 OCPBUGS-27844 : Fix task for attaching IPv6 subnet to router. #8087 CORS-3270 : azure: tag installer-created LB resources #8236 OCPBUGS-31813 : AWS: bump CCO for permission fix #8233 CORS-3289 , CORS-3308 , CORS-3426 : Bump CAPA provider for various fixes #8232 OCPBUGS-32041 : update RHCOS 4.16 bootimage metadata to 416.94.202404101051-0 #8256 no-jira: docs: Fix typos #8245
no-jira:PowerVS: Wait for IPs #8239
CORS-3075 : Allow for installation in existing resource group #8123 CORS-3446 : Add instructions for obtaining correct binary #8230 AGENT-858 : Agent day2 ignition services #8093 CORS-3418 : images: move installer images to static builds #8215 CORS-3417 : capi/aws: support ignition proxy and CA bundle #8170 OSASINFRA-3365 : clusterapi: Add worker asset to PreProvision #8237 HIVE-2476 : OpenStack.MachineSets(): Allow nil Replicas #8227 CORS-3195 : Azure CAPI Supplemental Load Balancers #8115 no-jira: PowerVS: Set VPC service region #8217
OCPBUGS-12890 : Create bucket, signed url and use proxy info for installs #8056 no-jira: PowerVS: Fix COS region and VPC subnets #8219
OCPBUGS-31546 : azure: use filter when listing SKUs #8134 CORS-3245 : Azure CAPI rhcos image #8018 AGENT-874 : use AddNodesConfig asset #8080 no-jira: this clusterprofile isn’t actually used #8214
no-jira: pkg/asset/machines: remove static ip log lines #8190
CORS-2895 : aws/capi: setting zones to when creating cluster #8156 CORS-3071 : Create DNS entries for CAPZ implementation #8045 no-jira: PowerVS: Fix CAPI created service instance case #8212
AGENT-857 : Agent day2 use clusterinfo #8009 CORS-3431 : CAPI: Add firewall rule for worker nodes #8200 OSASINFRA-3421 : OpenStack: Customizable clientOpts for CheckNetworkEx… #8209 no-jira: infra: aws: move SDK provisioner to its own dir #8194
AGENT-868 : Generate ECDSA public private keys and pass it to assisted service #8105 MULTIARCH-4096 : PowerVS: Generate the cluster assets #8116 CORS-2901 , CORS-3428 : pkg/types/aws: limit additionalSecurityGroups to 10 #8184 OCPBUGS-27848 : If host is offline or disconnected don’t check ver #8206 METAL-855 : baremetal: remove ironic-inspector #8128 CORS-3280 : Bump cluster-api-provider-gcp to v1.6.0 #8153 OSASINFRA-3420 : openstack: Decouple OpenStack API calls from Machine generation #8187 CORS-2898 : capi/aws: configure IMDS #8152 CORS-2905 : capi/aws: destroy CAPA resources #8179 no-jira: capi/aws: reuse GenerateMachines for bootstrap #8193
OCPBUGS-31209 : CAPG - Fix setting ServiceAccount role bindings for GCP #8192 OCPBUGS-31050 : openstack: Honour worker server group policy #8180 OCPBUGS-26052 : aws: altinfra: fix role creation in C2S #7871 OCPBUGS-15941 : ABI - Validate release image arch, add cpu_architectures to RELEASE_IMAGES #7349 CORS-3256 : GCP destroy updates for CAPG #8113 Bug OCPBUGS-30154: OpenStack: enable 30000:32767 nodePort IPv6 traffic #8195
OCPBUGS-30882 : GCP capg distribute instances across zones #8176 CORS-3142 : capi: write manifests to disk during create manifests #8166 OCPBUGS-28870 : IBMCloud: Restrict CIS and DNS Service lookup #7987 OCPBUGS-31013 : Fix vsi image missing #8177 CNF-10170 : bootkube.sh: Render kernel boot arguments for SNO #8099 CORS-2894 , CORS-3051 : Create DNS resources and PHZ for CAPI/aws #8142 CORS-3417 : capa bump fallout #8169 CORS-3307 : add ‘A2’ as tested machine types on GCP #8148 CORS-2902 : capi/aws: add ext-LB as CAPA secondary LB #8149 CORS-3213 : Tweak GCPCluster Failure Domain Logic #8017 CORS-3215 : capi: implement bootstrap gather #8036 NO-JIRA: OWNERS: pkg/infrastructure/openstack #8165
OPNET-476 : GA Load balancer feature for vSphere and Baremetal #8101 no-jira: Power VS: Fix comment on default for wait_for_workspace #8158
OPNET-476 : GA Load balancer feature for Nutanix #8102 CORS-3303 : GCP: Add me-central2 (Dammam, Saudi Arabia, Middle East) region to the survey as supported region #8132 SPLAT-1390 : remove feature gate for vSphere control plane machinesets #7908 CORS-2892 : capi/aws: add user tags to CAPA cluster #8150 OCPBUGS-30836 : Power VS: Fix wait_for_workspace #8145 OCPBUGS-25462 : Validate control plane replicas #8082 OCPBUGS-30642 : pin google oauth2 version #8133 OCPBUGS-30600 : update RHCOS 4.16 bootimage metadata to 416.94.202403071059-0 #8121 CORS-3257 : Create GCP ServiceAccounts and assign to machines #8066 OCPBUGS-15861 : Use a static pure-go libvirt library #7252 OCPBUGS-29437 , OCPBUGS-30547 : Run kubelet directly #8131 METAL-871 : baremetal: remove ironic tf files #8117 OCPBUGS-30641 : Enable deploy by Service ID on PowerVS #8111 CORS-3288 : bump CAPA for LB scheme fix #8114 no-jira: machines/aws: fix subnet filter comment #8120
METAL-871 : baremetal: bootstrap: rename master label #8107 OCPBUGS-29388 : upi: aws: fix typo in worker templates #8112 OSASINFRA-3362 : Fix CAPI bootstrap deletion #8104 OCPBUGS-24415 , OCPVE-661 : bump openshift/api version #7546 MULTIARCH-4095 : Generate PowerVS machine manifests for CAPI #8020 CORS-2900 : CAPI AWS IAM #8031 OCPBUGS-30200 : Authn with platform-services-go-sdk for PowerVS #8025 CORS-3281 : IBMCloud: initial CAPI infrastructure #8090 CORS-2890 : Bump CAPA Dependencies for Secondary Load Balancers #8088 SPLAT-1460 : Make vSphere default ResourcePool formatting not contain double slash. #8044 CORS-3212 : CAPG Add ignition for CAPG machines #8027 METAL-871 : Remove terraform-provider-ironic #7649 SPLAT-1468 : Added log message for import vsphere ova progress during CAPI install. #8097 no-jira: capi: aws: report all conflicting user tags at once #8085
OCPBUGS-29469 : fix Azure API SKU calls timing out - part 2 #8070 SPLAT-1423 : Added static ip support to CAPI installer. #8081 MULTIARCH-4159 : Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility #8098 OCPBUGS-30058 : GCP: The CAPG bootstrap machine IP should be set according to the publish strategy #8079 OCPBUGS-30057 : Don’t auto create subnets for CAPG #8083 MULTIARCH-4153 : Incorporating Eltorito Boot Loader fix for Agent #8069 no-jira: Missing permission from vsphere docs #7789
OCPBUGS-30135 : fix “OpenShiftSDN deprecated” error message #8092 CORS-3274 : GCP: add africa-south1 region to the survey as supported region #8055 CORS-3251 : Create capz machine manifests #7969 CORS-3259 : GCP CAPI Infra: auth with service account #8077 CFE-857 : Apply user defined tags on created gcp resources #7279 AGENT-853 : Add ClusterInfo asset #7997 SPLAT-1173 : Enhance vSphere Installer to use IPAddressClaims for static IP #7501 CORS-3273 : capi system: don’t log env vars #8084 OCPBUGS-29860 : double looping of failuredomains breaks zonal #8059 no-jira: Remove v1alpha3 #8061
OCPBUGS-30005 : remove github.com/IBM-Cloud/bluemix-go/api/account/accountv2 #8072 OSASINFRA-3363 : ShiftStack CAPO integration #7939 MULTIARCH-4158 : pkg/infrastructure/powervs: add initial CAPI provider #8060 OCPBUGS-29469 : fix Azure API SKU calls timing out #8046 SPLAT-1459 : capv machines only full clone #8042 OCPBUGS-29895 : PowerVS: Add debugging to ServiceInstanceNameToGUID #8058 SPLAT-1434 : aws: add support of BYO public ipv4 pool #7983 no-jira: images: libvirt: add oc to libvirt CI image #8008
SPLAT-1465 : capv - add additional extra configs #8054 SPLAT-1462 : capv - Remove unneeded auth env vars #8053 OCPBUGS-29429 : feat: add check for SNO bootstrap condition #8004 Bug OCPBUGS-29084: OpenStack: Fix dualstack with external load-balancer #8028
CORS-3259 : GCP: Create DNS records and internal load balancer for CAPG Install #8014 SPLAT-1198 : migrate vSphere installation to CAPV #7962 OCPBUGS-29587 : Power VS: Fix service instance list #8033 OCPBUGS-22410 : vsphere-fix convert if only provided name #7931 OCPBUGS-29584 : PowerVS: handle composite_instance #8029 OCPBUGS-29482 : Bump terraform-provider-ibm to v1.61.0 #8023 CORS-2890 : pkg/infrastructure/aws: add initial CAPI provider #8012 CORS-3185 : update default release image #7874 OCPBUGS-28590 : gcp: better error msg when service accnt missing #8002 OCPBUGS-28203 : Power VS: Add sleep to allow workspace to configure PER #7889 CORS-3220 : Initiate CAPG installation #8011 CORS-3213 : Create the GCP cluster manifest #7917 OCPBUGS-29441 : update RHCOS 4.16 bootimage metadata to 416.94.202402130130-0 #8015 OCPBUGS-29425 : PowerVS Fix next start search #8010 Bug OCPBUGS-29198: OpenStack: fix controlPlanePort validation #7998
SPLAT-1447 : Move MCO imports to API; update library-go, api #8000 NO-ISSUE: integrationt tests support for env vars substitution #7992
OCPBUGS-29114 : Fixed control plane machine set handling of static IPs when AddressesFromPools is not in use. #7985 OCPBUGS-29068 : GCP: Skip validation of public and private zones for terraform vars #7986 OCPBUGS-29067 : Copy GCP manifests within MCO bootstrap to the correct location #7991 OCPBUGS-20085 : IBMCloud: Handle disk delete errors #7515 OCPBUGS-28827 : do not rename boot.catalog for arm64 iso #7972 OSASINFRA-3371 : Pass rhcosImage and manifests to the PreProvision hook #7967 SPLAT-1387 : enable additional tags to be associated with vsphere machines #7905 CORS-3242 : PowerVS: Replace deprecated primary_ipv4_address with primary_ip list item #7861 OPNET-357 : Populate network configuration at install-time #7604 CORS-3240 : add OWNERS_ALIASES madhu-pillai #7733 CNF-10170 : Revert “bootkube.sh: Render kernel boot arguments for SNO” #7979 CORS-3188 : Bump k8s deps #7970 OCPBUGS-2135 : Include CAPG objects in uninstall filter #7907 AGENT-848 : add node-joiner cli tool main #7958 CORS-3207 : Generate GCP machine manifests for CAPI #7944 OCPBUGS-24575 : ic: gcp: validate instance architecture #7850 CORS-3196 : capg: add infrastructure components #7968 CORS-3208 : Create the GCP infrastructure controller #7940 OCPBUGS-27156 : GCP Destroy cleanup correct zones/records #7932 OCPBUGS-27737 : aws-edge-zones preventing err before discovering #7945 OCPBUGS-28708 : update tested Azure Arm64 instance type on 4.15 #7965 OCPBUGS-28643 : PowerVS: Add dal12 region #7956 OCPBUGS-27263 : Bump golang 1.21 #7925 CNF-10170 : bootkube.sh: Render kernel boot arguments for SNO #7692 OCPBUGS-28705 : [azure] update tested x86 instance type on 4.15 #7961 CORS-3139 : Move CAPI behind infrastructure provider interface #7824 OCPBUGS-27507 : bump containerd for vulnerability fix #7942 NO-ISSUE: test fix to support slightly different nmstate error messages #7954
NO-JIRA: Minor fixes #7947
no-jira: azure: add metadata info to resource group tags #7725
OCPBUGS-25453 : duplicate failure domains in CMPS #7860 OCPBUGS-27788 : PowerVS: COS region configurable #7941 SPLAT-1345 : Remove alibaba #7832 OCPBUGS-27366 : set the –cluster-profile flag for openshift/api rendering #7924 OCPBUGS-27192 : remove retired serial NCv2 from azure tested instance type list on x86 #7911 no-jira: images/altinfra: allow CAPI ARG #7891
OCPBUGS-25835 : Validate baremetal capability is set for baremetal platform #7901 no-jira: Add AWS m6a to tested instance types #7851
OCPBUGS-24956 : Fix typo in CloudCredential validation #7915 OCPBUGS-24303 : Check provided sha for agent ISO download #7893 CORS-3203 : Fix depreciated typo #7834 OCPBUGS-14257 : normalize ISO files extensions to three chars #7896 OCPBUGS-26434 : Redact platform passwords in agent-gather output #7873 OCPBUGS-27092 : baremetal: gather all recently refactored services #7854 OCPBUGS-25996 : baremetal: correct external_http_url for v6-only BMCs #7898 CORS-2950 : Remove openshift-sdn as an install-time option #7720 OPNET-415 : Upgrade o/api to include extended network config #7869 METAL-829 : Set node cpu_arch from bmh #7814 OCPBUGS-26399 : Support singular VIP in ACI for BareMetal #7859 CORS-3190 : GCP: Add load balancer info to cluster infra #7888 MULTIARCH-4072 : Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones #7870 OCPBUGS-24956 : Add cloud credential capability validation #7884 OCPBUGS-25841 : preserve category name when trying to find tag category #7876 ARO-4744 : Do not run platform validation on ARO #7865 OCPBUGS-24956 : Add cloud credential capability validation #7875 OSASINFRA-3280 : OpenStack: clarify root volume size requirements #7698 OCPBUGS-26048 : Bump default channel to stable-4.16 #7867 OCPBUGS-24862 : Updating ose-installer-altinfra-container image to be … #7872 CORS-2852 : cmd/create: allow clean shutdown of resources #7864 OCPBUGS-24820 : Updating ose-baremetal-installer-container image to be consistent with ART #7817 OCPBUGS-24814 : Updating ose-installer-container image to be consistent with ART #7816 OCPBUGS-25600 : aws: validate instance arch #7835 OCPBUGS-25440 : ic: aws: add iam:TagInstanceProfile permission requirement #7843 OCPBUGS-25132 : Fixes for the OpensStack UPI playbooks. #7833 OCPBUGS-24853 : Updating ose-installer-artifacts-container image to be consistent with ART #7818 OCPBUGS-19054 : Warn that FeatureSet is not supported #7825 CORS-2315 : GCP: Skip populating Private/Public Zones within DNS manifest #7846 no-jira: build: drop vsphereprivate build workaround #7847
CORS-2870 : build: only rebuild terraform providers if needed #7688 OCPBUGS-24473 : IBMCloud: Set IBM TF visibility based on URLs #7805 CORS-3029 : GCP: Update DNSType within GCP PlatformStatus based on UserProvisionedDNS #7837 OCPBUGS-24241 : Pin openstack.cloud version. #7821 Revert “OCPBUGS-4038: bootstrap: Skip gatewayd units only on OKD agent-installer” #7651
no-jira: Revert “Merge pull request #7823 from patrickdillon/build-capi-altinfra” #7828
OCPBUGS-19303 : Changed OKD/FCOS workaround to also support Agent-based Installer #7484 OCPBUGS-25191 : ic: azure: fix retrieving marketplace image #7826 OCPBUGS-24995 : Revert “Merge pull request #7642 from AnnaZivkovic/azure_duplicate_im… #7822 CORS-2840 : images/altinfra: enable CAPI builds #7823 CORS-3003 : [ibmcloud] add key-protect plugin in ibmcloud cli #7811 CORS-2852 : Support installing OpenShift via Cluster API #7807 SPLAT-1272 : Modify the terraform variables to support Nutanix Failure Domains #7806 CORS-2934 : IBMCloud: Update MAPI for BYOK #7812 METAL-803 : Update vendoring for baremetal-operator #7809 no-jira: Fix base image reference #7810
CORS-2952 : GCP Set “ClusterHostedDNS” in the Infra CR based on the value of userProvisionedDNS #7796 CORS-2813 : Pass LB ConfigMap manifest as a parameter to MCO instance during bootstrap #7662 OCPBUGS-23140 , OCPBUGS-23305 : Soften VIP validations for external load-balancer #7803 AGENT-739 : Support for install-config baremetal host BMC fields #7645 AGENT-729 : Support generic platform name for external platform #7585 MULTIARCH-4042 : Reuse existing Transit Gateway in target Workspace, or create anew #7592 OCPBUGS-23473 : update RHCOS 4.15 bootimage metadata to 415.92.202311241643-0 #7770 AGENT-615 : Split create-cluster-and-infraenv.service #7364 no-jira: image: infra-providers: use base image instead of builder #7800
no-jira: hack: drop hardcoded -j8 in make invocations. #7799
OCPBUGS-23458 : force destroy bootstrap ign #7791 OSASINFRA-3261 : OpenStack: support dualstack in UPI #7727 MULTIARCH-2678 : Patch for Agent Based Installer to support s390x as supported architecture. #7712 SPLAT-1218 : AWS BYO VPC support for Wavelength Zones #7652 CORS-2525 : Azure: remove storage account with bootstrap destroy #7642 AGENT-337 : Set VIPs directly in api, instead of install-config override #7574 OCPVE-648 : gomod: bump api version with CloudCredential cap #7466 CORS-2852 : cmd/create: ensure proper cleanup on exit #7693 OCPBUGS-9066 : Retry image download on failure #7106 NO-ISSUE: Remove dead code from ‘networking’ asset #7798
PowerVS: MULTIARCH-4030: Reintroduce serviceInstanceGUID install option #7795
OCPBUGS-24191 : set vmType in azure cloud config #7793 no-jira: pkg/asset: safety nets to keep installer from crashing #7792
CORS-2934 : IBMCloud: Add support for BYOK #7738 OCPBUGS-23539 : Keep Machine manifests out of OpenShift Manifests asset #7753 CORS-3020 : IBMCloud: Bump IBM TF provider #7784 MIXEDARCH-310 : Enable the use of the multi payload for agent installer #7595 CORS-2775 : ic: azure: remove deprecated errors package #7778 SPLAT-1126 : aws/clusterNetworkMTU config to change the MTU for overlay network #7765 CORS-2785 : images: decouple installer and installer-artifacts #7782 MULTIARCH-3793 : Power VS: Add mad and wdc assupported region #7773 CORS-2852 : Generate Cluster API Machine Manifests #7771 CORS-2854 : azure: Allow users to set visibility to components #7547 OCPBUGS-24008 : Remove sno_arm.txt integration test #7718 OCPBUGS-23947 : set client options when interacting with azure api #7768 CORS-2978 : enable AWS SDK Installation through feature gates #7715 CORS-2798 : GCP: User Configured DNS solution to update the bootstrap node with the Load Balancer Information #7631 CORS-2845 : azure: Enable storage account encryption #7520 SPLAT-1277 : unrevert PR 7418; implement vSphere control plane machinesets #7780 OSASINFRA-3303 : OpenStack: remove generation of trunks name #7772 AGENT-670 : Add assisted-db data to agent-gather #7719 SPLAT-1160 : AWS - Support Wavelength Zones with edge pool #7369 Skip cluster config #7666
OCPBUGS-24031 : Bump Fedora CoreOS to latest stable #7779 no-jira: destroy: azure: store session in the destroy object #7777
CORS-2975 : Add support for il-central-1 in AWS #7740 CORS-2428 : terraform: add build information to binaries #7763 OCPBUGS-24026 : Add owner for user provided client CA bundle #7749 SPLAT-1272 : Support Nutanix Failure Domains #7730 CORS-2775 : destroy: azure: remove deprecated errors package #7761 no-jira: cmd/openshift-install: Remove “migrate” command #7601
no-jira: go.mod: remove unused terraform-providers-nutanix import #7762
CORS-2835 : pkg/infrastructure: remove ARO build tag #7745 OCPBUGS-21777 : baremetal: populate customDeploy in advance #7674 CORS-2933 : IBMCloud: Basic service endpoint override #7632 CORS-2852 : Introduce Cluster API Infrastructure manifest generation #7672 OCPBUGS-22840 : ic/azure: validate field Plan when for marketplace images #7721 CORS-2604 : tag user-provided azure vnet #7611 MULTIARCH-3964 : Power VS: Control SMT level with machineconfig #7704 no-jira: destroy/azure: fix dropped negation from error comparison #7758
no-jira: destroy/azure: avoid cancelling main context #7750
OCPCLOUD-2130 : Fix Failuredomains check on manifests test #7617 OSASINFRA-3295 : OpenStack: fix client used to list flavors #7723 OSASINFRA-3294 : OpenStack: fix script to update bootstrap ignition shim #7743 no-jira: images: rename terraform- > infrastructure-providers #7716
OCPBUGS-23376 : vSphere - when using RP network path is incorrect #7737 no-jira: Stop rendering networks.config CRD #7732
OCPBUGS-22453 : Fixed systemd-resolved’s split dns config in OKD/FCOS #7634 SPLAT-1218 : upi/AWS: Templates to provision resources in Wavelength #7722 AGENT-337 : Support both VIP and VIPs in AgentClusterInstall #7724 OSASINFRA-3229 : Remove support for Kuryr #7675 CORS-2830 : Provision AWS Infrastructure with SDK #7676 MULTIARCH-4009 : Prepare for varying SysTypes for new datacenters #7717 MULTIARCH-3789 : Power VS: Remove cloud connection support #7696 CORS-2876 : images/installer-altinfra: initial Dockerfile #7711 Bug OCPBUGS-19462: OpenStack: Fix dual-stack machines Spec to contain network #7694
MULTIARCH-3965 : Check if PER is enabled in the target PowerVS workspace #7683 OSASINFRA-3280 : openstack: document etcd on local disk #7664 OCPBUGS-23170 : Revert #7418 “SPLAT-1141: implement vSphere control plane machinesets” #7708 MULTIARCH-2590 : PowerVS create service instance #7695 SPLAT-1141 : implement vSphere control plane machinesets #7418 CORS-2428 : images: add Dockerfile for a terraform-providers image #7687 OSASINFRA-3237 : move controlPlanePort API to GA #7570 CORS-2835 : use build tags to produce installer with alternate infrastructure providers #7656 CORS-2877 : Install Config Feature Gate Validation #7413 OCPBUGS-22772 : return Terraform statefile on error #7671 NO-JIRA: destroy/aws: replaced deprecated sets syntax #7680
OCPBUGS-19398 : IBMCloud: Add eu-es region #7668 OCPBUGS-22830 : fix google cli verson to 447.0.0 #7663 OCPBUGS-22113 : Do not generate azure-cloud-provider in manual mode for aro builds #7608 OCPBUGS-22757 : update RHCOS 4.15 bootimage metadata to 415.92.202310310037-0 #7654 CORS-2852 : Introduce pkg/clusterapi, system, and local control plane #7630 OCPBUGS-20403 : OpenStack: add SG rules for compact clusters on UPI #7576 OCPBUGS-17866 : check GOOGLE_APPLICATION_CREDENTIALS env var #6863 OCPBUGS-22773 : PowerVS: fix removeFromLoadBalancers #7653 OCPBUGS-13664 : Add KMS encryption keys if provided #7650 Bug OCPBUGS-22298: OpenStack: Fix IPv6 address configuration for bootstrap #7638
OCPBUGS-18387 : Add Azure ConfidentialVM capability and DiskEncryptionSet validations #7469 OCPBUGS-22489 : destroy: gcp: fix destroying regional disks #7643 OCPBUGS-22058 : Bump versions for golang modules to accommodate fixes for CVE-2023-39325 & CVE-2023-44487 #7590 OCPBUGS-18986 : Skip the deletion of instance profiles marked shared #7537 hack/go-lint: update golanci-lint to v1.53.1 #7635
OCPBUGS-22655 : Bump Fedora CoreOS to latest stable #7644 bootkube.sh: drop final mention of machine-os-content #7636
update tested x86 instance type on 4.14 #7639
OCPBUGS-4038 : bootstrap: Skip gatewayd units only on OKD agent-installer #7629 CORS-2852 : Build and package Cluster API and providers #7620 AGENT-713 : Use BM hosts in install-config if not defined in agent-config #7531 MIXEDARCH-353 : Add yq-v4 to the upi-installer image for CI and copy yq3 from a previous stage’s manifest-list image #7567 openstack: dual stack UPI - create security group rules for IPv6 #7552
OCPVE-740 : bump openshift/api #7613 AGENT-718 : Add vSphere credentials to install-config overrides #7593 Revert #7428 “OCPBUGS-13664: Add KMS encryption keys if provided” #7625
OCPBUGS-10906 : check extracted base iso coreos version is in sync #7030 OCPBUGS-4038 : bootstrap: Enable gatewayd units only on RHCOS #7580 OCPBUGS-21720 : images/libvirt/Dockerfile.ci: Use centos stream instead centos:7 #6813 CORS-2836 : Refactor Stages, encapsulate terraform #7488 OCPBUGS-20356 : update RHCOS 4.15 bootimage metadata to 415.92.202310170229-0 #7616 OCPBUGS-20364 : azure: validation: validate defaultMachinePlatform #7584 OCPBUGS-20525 : aws: use security groups from defaultMachinePlatform #7589 OCPBUGS-13664 : Add KMS encryption keys if provided #7428 OCPBUGS-5471 : Try to select rendezvousIP among non-worker hosts #7443 OCPBUGS-21781 : Rectify GCP label key validation check #7596 Revert skipping integration test agent sno arm #7561
OCPBUGS-20350 : vSphere,segfault on version check #7575 OCPBUGS-19093 : skip agent-tui on OCI #7512 OCPVE-675 : feat: bump api to add OLM capability #7495 Enforcing the serial execution of the integration tests #7591
images: Cleanup CI Dockerfiles #7507
OCPBUGS-20440 : Warn about host and target compatibility #7582 OCPBUGS-19444 : Use changes to AgentClusterInstall during loading #7506 OpenStack: Adapt nodePorts range 0.0.0.0/0 sg rules #7577
Remove unused method #7438
PowerVS: MULTIARCH-3791 Remove cloud connection reuse functionality #7564
OCPBUGS-19552 : Fixed DNS issues in OKD/FCOS due to split dns in systemd-resolved #7516 docs: Described process of adding vGPU capable nodes. #6606
OCPBUGS-19086 : Check if nmstatectl executable exists in the system #7492 OCPBUGS-16666 : Change where AdditionalTrustBundle is set #7485 OCPBUGS-18455 : Unable to disable external CCM for platform external #7533 OCPBUGS-18552 : Truncate vlan names defined in nmstate if > 15 chars #7486 OpenStack: enable IPv6 primary dual-stack cluster #7259
OCPBUGS-20110 : Add an unit test - at least one interface must be defined for each node #7555 OSASINFRA-3199 : Configure User-Agent for OpenStack API calls #7548 OCPBUGS-17757 : check credentials type to handle different gcp authentication methods #7422 Docs: Fix openstack command for image update in upi installation #7556
PowerVS: MULTIARCH-3790 Remove zones that only have CCs with exceptions #7563
PowerVS: Remove deprecated errors package #7544
Disable pxe sno arm integration test #7557
Inefficient wait for all clusteroperators #7535
OCPBUGS-15844 : Enable FIPS in agent ISO #7540 OCPBUGS-20058 : Use updated ansible-core for Openstack image #7549 OWNERS: Remove obsolete agent reviewers #7545
OCPBUGS-5728 : Log “agent wait-for” commands to .openshift_install.log #7452 OCPBUGS-19092 : Enable serial console for external OCI platform #7511 OCPBUGS-18690 : ic: azure: validate NVMe-only family types #7500 CORS-2479 : agent: Ensure registries.conf is world readable #6745 add jbtrystram to coreOS approvers and reviewers #7464
OCPBUGS-19093 , OCPBUGS-19688 : Allow agent-tui to use serial console #7526 Tweaks to validateRendezvousIPNotWorker #7437
OCPBUGS-18986 : Tag aws instance profiles. #7510 OCPBUGS-19376 : GCP default value for service account #7519 MULTIARCH-3701 : Enable ppc64le for agent installer #7366 pkg/asset/installconfig/powervs: fix dropped error #7419
OCPBUGS-19699 : Remove warning about CPUPartitioning #7527 OCPBUGS-18187 : Increase bootstrap timeout for vSphere platform by 30 mins #7518 OCPBUGS-18830 : AWS terraform bootstrap destroy will not refresh state #7491 OCPBUGS-12707 : always write AWS cloud.conf #7514 AGENT-710 : Use invoker for bootstrap template generation #7508 OCPBUGS-18876 : Pass CPUPartitioning via install-config overrides if set #7513 OpenStack: fix IPv6 docs #7482
OCPBUGS-18945 : update RHCOS 4.15 bootimage metadata to 415.92.202309161058-0 #7499 LICENSE: Update #7502
OCPBUGS-19286 : Updating ose-installer-artifacts images to be consistent with ART #7496 SPLAT-1170 : enable cloud controller manager type to be defined #7457 OpenStack: Set external network for cloud-provider #7411
OCPBUGS-17724 : Graceful fail for AWS getUser on destroy #7429 AGENT: publish services diagrams #7323
OCPBUGS-19149 : Updating ose-baremetal-installer images to be consistent with ART #7494 OCPBUGS-19130 : Updating ose-installer images to be consistent with ART #7493 OCPBUGS-17218 : Warn when firewall rull missing. #7417 OSASINFRA-3236 : deps: Bump gophercloud to v1.6.0 #7208 OCPBUGS-19037 : Handle agent tui failure gracefully #7490 OCPBUGS-19017 : Add Net capabilities to dnsmasq container #7487 OCPBUGS-18113 : Do not set FailureDomains on CPMS when in a single zone Azure region #7448 AGENT-702 : Generate minimal ISO for external platform #7450 OCPBUGS-18304 : for vsphere ipi add cluster domain to the uploaded vm configs so that… #7451 Implement workaround to allow SNO installations for OKD/FCOS #7445
OCPBUGS-18428 : Add ip=dhcp,dhcp6 kernel param for vSphere dual-stack #7467 OSDOCS-6999 : tested machine series ‘C3’, ‘C2D’ #7381 OCPBUGS-18450 : AWS permission missing for security group viewing. #7460 OCPBUGS-18365 : Fix defaulting of userManagedNetworking value #7458 integration tests: Swap order of diff arguments #7462
AGENT-693 : Support external platform #7442 OCPBUGS-18457 : Make extracting ISO kargs more robust #7463 OCPBUGS-18457 : Fix PXE integration tests #7461 OCPBUGS-17806 : gomod: bump openshift/api version #7421 OCPBUGS-17770 : azure: use marketplace image plan’s publisher #7426 OCPBUGS-7690 : azure: destroy: dns records leak if permissions missing #7433 OCPBUGS-17869 : azure: fix setting outboundType #7455 OSDOCS-6880 : Adding 64-bit ARM GCP instance types to documentation #7320 OCPBUGS-16204 : aws: attach additional security groups to controlPlane #7352 OCPBUGS-18046 : update govc version to v0.30.7 #7425 OCPBUGS-15659 : IPI pre-check for MachineAPI capability #7414 OCPBUGS-17860 : OpenStack: Remove NodePorts range 0.0.0.0/0 rules #7405 OCPBUGS-17073 : Revert “Merge pull request #7205 from rna-afk/azure_managed_by_tag” #7412 OCPBUGS-17940 : Add COS endpoint to proxy server (Power VS) #7430 AGENT-692 , OCPBUGS-3860 : Update assisted-service dependencies #7439 OCPBUGS-17227 : gcp: fix validation of custom instance types #7388 OCPBUGS-17869 : azure: put NAT gateway behind TechPreviewNoUpgrade #7434 Destroy startironic.sh forever #7250
CORS-2660 : GCP: deprecate the licenses field #7397 CFE-858 : Update google terraform provider to latest version #7201 MULTIARCH-3676 : PowerVS TG terraform changes #7389 CFE-686 : Generate Infrastructure CR with the GCP user defined tags & labels #7138 CFE-687 : Apply user defined labels on created gcp resources #7153 OCPBUGS-11999 : upkeep: updated description to remove techpreview #7313 CORS-2700 : Make bootstrap S3 bucket optional during bootstrap destroy #7288 CFE-688 : Update install-config CRD to support gcp labels and tags #7126 OCPBUGS-16776 : update RHCOS 4.14 bootimage metadata to 414.92.202308032115-0 #7409 Add baremetal capability validation #7394
azure: validation: machinepool: sort slice before comparing #7407
OCPBUGS-13408 : Log message and add integration test #7408 PowerVS: Update listCOSInstances to continue querying #7404
maintenance: update openshift/api #7401
MGMT-13628 : add support for confidential VMs on Azure #7312 openstack: Test zero replicas in worker machine-pool #7400
OpenStack: Fix user docs for additional network with IPv6 #7395
gather: Use journalctl -o with-unit #7371
SPLAT-1123 : Revert Alibaba deprecation warning #7396 OCPBUGS-15994 : Update core password after loading config-image #7338 OpenStack: Remove SGS created by CPO on destroy #7378
data/data/coreos: bump FCOS to F38 stable #7311
OCPBUGS-16912 : Ensure DHCPv6 client sends Solicit with mac address #7384 Bug OCPBUGS-16249: Add ip=dhcp,dhcp6 option to Kernel args #7367
PowerVS: Check whether Machine pool CIDR is /24 #6903
OCPBUGS-16292 : GCP XPN: clarify service account support #7347 OCPBUGS-6759 : Fix discrepancy with disk size master #7100 OCPBUGS-16959 : openstack/upi: add missing modules namespaces + doc #7373 CORS-2719 : Remove service account user permission #7291 OCPBUGS-17064 : always create a MachineSet #7380 OpenStack: Fix default for openstack_worker_server_group_names #7359
OCPBUGS-16692 : OpenStack: fix crash with empty platform in machinepool #7363 CORS-2445 : GCP add bootimage override in install-config #7215 CORS-2503 : azure: use marketplace images for all nodes #6890 MULTIARCH-3676 : PowerVS add transit gateway destroy #7294 CORS-1770 : Support pd-balanced disk types for GCP deployments #7337 OCPBUGS-15989 : vSphere - bump terraform provider #7354 OWNERS_ALIASES: Add new user to owners_aliases #7348
OCPBUGS-16515 : gcp: use zones available for both instance and project #7317 OCPBUGS-15852 : Single node cannot be installed if etcd appears in the hostname #7304 OCPBUGS-14877 : Validate that number hosts does not exceed replicas #7268 CORS-2628 : Allow users to set ManagedBy tag to resource group #7205 OCPBUGS-16380 : Add /etc/containers volume on create-cluster-and-infraenv #7332 OCPBUGS-16207 : ic: aws: validate max security groups #7345 OpenStack: Add steps to enable dual-stack clusters #7269
Revert “Merge pull request #7096 from r4f4/gcp-instance-zones” #7360
SPLAT-657 : AWS Local Zones subnets automation for edge compute pool #7137 OSASINFRA-3193 : Update openstack/Dockerfile.ci for ansible-core #7346 Include start-cluster.env in agent-gather #7350
Fix the deployment on OpenStack for worker pools with no replicas. #7356
OCPBUGS-16219 : Fix timing issue between network services #7355 OCPBUGS-16415 : Sync nmstateconfig script with assisted-service changes #7353 Agent: Allow additional kernel args to be passed to ISO #7306
Remove mentions of use-octavia #7335
OCPCLOUD-2036 : introduce External platform type #7217 OCPBUGS-16395 : openstack/upi: update doc for CCPMSO #7351 OCPBUGS-16245 : Make nmstateconfig.yaml optional in config-drive #7333 OSASINFRA-3181 : Volume Types for OpenStack CPMS #7300 CORS-2445 : GCP: Add default values for arm64 #7258 PowerVS: Replace deprecated key_id attribute with name for ibm_pi_key resource #7256
PowerVS: Handle empty serviceInstanceID in metadata.json #7328
OpenStack: Dual stack support with BYON #6797
MULTIARCH-3667 : Add support for CPMSO for Power VS #7226 OCPBUGS-15421 : Allow different service account for xpn installs in gcp #7308 OCPBUGS-15997 : openstack: add root volume AZ validation #7309 aws: drop hostedZoneRole Feature Gate #7327
Agent: clear service status once all services started #7316
AGENT-660 Display insert config image message to console #7299
PowerVS: Create new newAuthenticator function #7321
OCPBUGS-9404 : azure: skip LB creation when not needed #7063 Revert “Merge pull request #7289 from r4f4/padillon-settle-ops” #7318
Agent: Log kernel params when generating pxe assets #7314
OCPBUGS-15238 : GCP: ic: client: use a higher context timeout #7290 AGENT-648 : Remove validation check limiting None platform to SNO #7236 Allow destroy for C2S isolated (us-iso and us-isob) partitions. #7086
OCPBUGS-15999 : update RHCOS 4.14 bootimage metadata to 414.92.202307070025-0 #7310 OCPBUGS-14900 : Use correct SELinux label. Make rename atomic. #7307 create: add check for cluster operator stability #7289
SPLAT-827 : support static IP assignments with vSphere IPI #7179 AGENT-562 : Load config from config image #7200 OCPBUGS-15825 : Fix agent gather tui logs #7293 OSASINFRA-3155 : OpenStack: Create ControlPlaneMachineSet CRDs #7280 ic: gcp: validate instances against user-configured zones #7096
AGENT-678 : Fix concurrency issue in agent integration tests #7303 OCPBUGS-14762 : Use the same names for public LB in IPI and UPI Azure #7292 OCPBUGS-2324 : terraform: aws: bump version to 5.4.0 #7274 tls/root: Document this more and change friendly name #7232
CORS-2572 : azure: implement egress via NAT gateway #6933 docs: Add note about not configuring allowed address pairs for day 2 manila configuration #7287
OCPBUGS-14932 : specify azure cli version #7297 OCPBUGS-14932 : Update azure cli to 2.40.0+ #7216 PowerVS Add support for Capped processors #7286
CORS-2645 : AWS Cross-Account Private Hosted Zone: Add Further Validations #7253 AGENT-624 : Allow override of networkType #7223 Update hack/go-test.sh to golang 1.20 #7270
AGENT-627 : Decompress kernel on ARM #7276 OWNERS_ALIASES: offboard ashcrow and bgilbert from CoreOS #7275
AGENT-558 Generate unconfigured agent ignition #7186
OWNERS: merge agent/installer #7278
OSASINFRA-3182 : openstack: remove portTargets #7239 AGENT-498 : Get iPXE script template kernel parameters from ISO #7150 OCPBUGS-15238 : GCP: ic: improve project validation #7267 Default dataStore is returned the name instead the inventoryPath #7261
Use the correct image name for agent-tui extraction #7266
OCPBUGS-13636 : new Aws secret regions support #6184 CORS-2372 : Azure: auth Installer with Managed Identity from VM #7108 OCPBUGS-11796 : azure: skip NSG creation when BYO vnet #7094 OCPBUGS-9435 : terraform: aws: secret regions now support ALIAS record #7184 SPLAT-1094 : warn users about deprecation of Alibaba Cloud #7257 OCPBUGS-14869 : Add timezone info in installer logs #7243 CORS-2656 : Remove context from cluster uninstaller struct #7169 openstack: document external LB #6920
bootkube: Drop cruft in MCO bootstrap #7244
Update OWNERS_ALIASES #7203
Agent: run shellcheck on start-cluster-installation.sh #7062
OSASINFRA-2168 : Docs: update OpenStack requirements #7015 OCPBUGS-15095 : Add kubevirt digest-ref in RHCOS boot images #7254 AGENT-563 : Create configuration image #7157 AGENT-510 : Support interactive network console when pxe booting #7185 Allow CustomNoUpgrade features via install-config #7246
MULTIARCH-3664 : enable multipath for powervs #7222 OCPBUGS-13960 : update RHCOS 4.14 bootimage metadata to 414.92.202306141028-0 #7247 CFE-829 : Remove Azure Tags TechPreview only indicators and checks #7187 CORS-2631 : Add additional security group ids in AWS #7151 AGENT-596 : use agent-installer-utils for agent-tui extraction #7212 AGENT-491 : Support pxe base url #6723 OCPBUGS-14917 : PowerVS: Cleanup service instances for destroy cluster #7173 OpenStack: add support to multiple subnets in the bootstrap #7111
Add ControlPlaneMachineSet for Nutanix #7119
OPNET-298 : Allow primary-v6 dual-stack on vSphere #7124 CORS-2613 : AWS: Cross-account Shared VPC Support #7225 OpenStack: support user provided dual-stack api and ingress Port #7133
OpenStack: configure IPv6 address in the bootstrap node #7128
SPLAT-995 : vSphere Add new template field #6995 OCPBUGS-14757 : images: installer: add xz to the container #7238 OCPBUGS-14818 : disable oVirt provider #7213 AGENT-556 : Wait for rendezvous host configuration #7068 OCPBUGS-13955 : support OPENSHIFT_INSTALL_OS_IMAGE_OVERRIDE #7211 OCPBUGS-14121 : Convert Rendezvous IPv6 address to canonical format #7234 OCPBUGS-14416 : Shorten SNO installation duration by releasing CPC lease #7219 OCPBUGS-14565 : Replace with govc docker image and fix ibmcli folder permission issue #7231 OCPBUGS-13108 : Log additional host info at warning level #7209 OCPBUGS-13662 : Ignore CPUPartitioning for ABI #7218 OCPBUGS-11736 : gcp use preconfigured private zone for installation #7155 Bump & vendor k8s 1.27 dependencies #7220
OCPBUGS-10342 : Check that number of replicas matches hosts #7059 OSASINFRA-3153 : move loadBalancer API to GA for OpenStack #7127 OCPBUGS-10306 : [vSphere] Upi installation failed due to VMs for master and worker node creation failed #6999 AGENT-567 : Re-enable ‘create pxe-files’ command #7102 AGENT-555 : Move Rendezvous Host config to separate file #7061 OCPBUGS-13764 : Support /dev/disk/by-path root device hints #7192 OCPBUGS-1769 : Ignore IAM Roles that the Installer is not authorized to access #7180 OCPBUGS-14077 : MULTIARCH-3492: Avoid conflicting subnets #7145 OCPBUGS-14076 : PowerVS: Remove ClusterOSImage #6996 OCPBUGS-13094 : Use oc command in bootkube.service in a disconnected env #7178 OCPBUGS-7410 : Reject active VPC connections before service destroy #7101 OCPBUGS-7699 : CVE: go-getter vulnerable to denial of service via malicious compressed archive #6893 OCPBUGS-13552 : vSphere Add ova sha query; additional debugging #7171 OCPBUGS-13718 : ic: azure: validate diskTypes in AzureStack #7194 OCPBUGS-9378 : vSphere set bootstrap/master efi #7154 OCPBUGS-13535 : Set AdditionalTrustBundle in override when mirroring not enabled #7182 OCPBUGS-13547 : Ensure –payload-version is set for MCO on bootstrap #7160 OCPBUGS-13547 : remove special cases for featureset in rendering #7189 OCPBUGS-7978 : FCOS: bump to latest stable version #6902 OCPBUGS-13628 : Revert “remove special cases for featureset in rendering” #7183 OCPBUGS-13300 : masters on a single compute server group #7172 OCPBUGS-3542 : Add bootstrapExternalStaticDNS #6585 remove special cases for featureset in rendering #7158
OCPBUGS-13253 : update RHCOS 4.14 bootimage metadata to 414.92.202305090606-0 #7176 pass payload version and manifests to kas and kcm #7152
OCPBUGS-9081 : openstack destroy: account for BULK DELETE limits on object-storage #7168 OCPBUGS-7699 : terraform: google: bump provider for go-getter CVE fix #7051 OCPBUGS-13107 : openstack destroy: Limit Swift workers to 3 #7165 Updating ose-installer-artifacts images to be consistent with ART #7122
OCPBUGS-11921 : GCP XPN: Pass instance service acct in manual mode #7117 OCPBUGS-12964 : Bootstrap on aws should have same metadata service type as on other nodes #7149 OCPBUGS-11792 : update RHCOS 4.14 bootimage metadata to 414.92.202304252144-0 #7135 pass featuregate args to config-operator to get rendered featuregates #6990
OCPBUGS-12904 : openstack: Add netcat to the Installer image #7142 OCPBUGS-12776 : GCP XPN Private Cluster Fails with no Public Zone #7134 OCPBUGS-12869 : fix nmstate related unit tests #7089 Updating ose-baremetal-installer images to be consistent with ART #7121
Updating ose-installer images to be consistent with ART #7120
OCPBUGS-12748 : use python3 for cloud sdk #7118 OCPBUGS-12196 : bump CVO to stable-4.14 #7114 OCPBUGS-11999 : fix: remove feature flag for cpu partitioning no longer needed #7110 OCPBUGS-11801 : Fix agent-tui libnmstate dependency name #7095 OpenStack: enable ingress traffic for dual-stack installations #7099
OCPBUGS-10767 : Fix and improve locking session and AWS Metadata access #7070 OWNERS_ALIASES: offboard Sohan from CoreOS #7103
OCPBUGS-9081 : openstack: Bump Gophercloud #7098 OCPBUGS-11100 , OCPBUGS-11102 , OCPBUGS-11418 : CVE: bump hashicorp/vault version #7091 OCPBUGS-11788 : update RHCOS 4.14 bootimage metadata to 414.92.202304131328-0 #7092 OCPBUGS-8449 : Azure: don’t set default subscriptionID for disk encryption sets #7076 pkg: rhcos: use Errorf instead of Error #7074
OCPBUGS-4998 : Log additional info when status is pending-user-action #7060 OCPBUGS-10673 : [Alibaba] update the bandwidth value of EIP #7011 OCPBUGS-11636 : AWS - Remove ACLs from s3 ign #7081 OCPBUGS-11479 : Upgrade libnmstate version used #7075 OCPBUGS-10478 : gather: azure: fix collecting VM serial logs #6992 Add imageDigestSources, deprecate imageContentSources #6235
PowerVS: fix human readable group-id #7073
docs: gcp: upi: update obtaining RHCOS source image #7072
gcp: add confidential compute support for boostrap TF #7002
AGENT-275 : Add new agent graph command to output agent internal dependency graph #7066 OCPBUGS-7954 : openstack: Only check HTTPS certs on public endpoints #7057 MULTIARCH-2517 : PowerVS: create install-config improvements #6885 OCPBUGS-10845 : Use 100 GB as minimum disk size in validations #7025 openstack: Bump CI base image to v4.14 #7052
terraform: don’t run zip if building provider binary failed #7047
OCPBUGS-8449 : pkg/asset/installconfig: set subscriptionID #6975 OCPBUGS-11039 : remove container-runtime flag from kubelet config #7036 rhcos: Bump to 414.92.202303281555-0 #7038
update tested instance type on 4.13 #7042
OCPBUGS-11038 : GCP: add europe-west12 region to the survey as supported region #7033 OCPBUGS-7966 : Do not remove host default configuration unless network configuration is provided for it #6991 OCPBUGS-2130 : vSphere - finding networks use full path cluster #6973 OCPBUGS-7699 : bump terraform for go-getter CVE fix #6892 OCPBUGS-8349 : Kubelet Client Cert should include system:serviceaccounts group #7032 OCPBUGS-10728 add project filter to gcp usage api requests #7018
OCPBUGS-10638 : Properly handle invalid agent command #7005 OCPGUS-2363 : IBMCloud: Use direct COS endpoint #6952 OCPBUGS-9081 : openstack/destroy: BulkDelete more objects at once #7017 OCPBUGS-8035 : IBMCloud: Fix SSH Private bootstrap #6944 OCPBUGS-7973 : IBMCloud set dnsrecords offset #6924 OCPBUGS-8509 : baremetal: do not use port 80 for httpd #6945 OCPBUGS-9982 : bootstrap-pivot: skip pivot in SCOS Live ISO #6965 PowerVS: Add capacity checks before installation #6850
OCPBUGS-8237 : update terraform-provider-ironic to 0.4.0 #6956 OCPBUGS-6727 : Nutanix Hostname of the VM is not set when using DHCP network config #6981 AGENT-502 : add agent-tui it test #6978 openstack: Remove version info, update lb FIP -> API FIP #7001
OCPBUGS-10570 : openstack: No master primarySubnet control-plane if portTarget is set #6994 OSDOCS-5240 : doc/fix-aws-localzones: replace jq to aws –query #6993 OCPBUGS-10207 : Do not always output warning msg when releaseImage is digest #6971 OCPBUGS-7015 : vsphere, nutanix survey: relax vip in machine cidr #6967 OCPBUGS-9949 : Verify output file exists when oc image extract is run #6960 OCPBUGS-7954 : openstack: Provide manual instructions for invalid certificates #6998 OCPBUGS-10313 : fix agent tui showing up multiple times #6977 Bump mongo-driver from 1.10 to 1.11.2 #6987
OCPBUGS-8540 : CVE: bump mongo-go-driver for fix #6950 OCPBUGS-10394 : Sort userTags in Machine and Machineset manifests #6976 Shorten SNO installation duration by releasing CVO lease #6757
OCPBUGS-2968 : bootstrap: Do not needlessly podman pull #6536 terraform: google: bump stringset dependency #6951
openstack-manifests: Export JUnit results #6966
Updating ose-installer-artifacts images to be consistent with ART #6968
quota: gcp: replace deprecated monitoring package and fix linting issues #6896
OCPBUGS-8119 : CVE-2023-25173: bump containerd #6949 OCPBUGS-8468 : aws: bump aws-sdk-go version #6943 data: libvirt: increase volume size to 32GB #6963
Updating ose-baremetal-installer images to be consistent with ART #6954
Updating ose-installer images to be consistent with ART #6953
refactor: replace github.com/ghodss/yaml with sigs.k8s.io/yaml #6935
OpenStack: support multiple API and ingress VIPs #6940
update RHCOS 4.13 bootimage metadata #6886
OCPBUGS-8094 : In agent ‘wait-for bootstrap’ command, test ssh to Node0 #6919 openstack-manifest: Show assets dir if persisted #6929
OCPBUGS-7262 : Disable systemd status while TUI showing #6925 OpenStack Failure domains #6917
OCPBUGS-8203 : Don’t log password values #6922 OCPBUGS-5129 : Pass Capabilites from install-config to cluster #6923 OCPBUGS-8305 : Power VS: Add resourceGroup to infrastructure manifest #6928 AGENT-356 : Disable ‘create pxe-files’ command #6927 OCPBUGS-8258 : Specify filename for default registries.conf #6926 openstack: consistent TechPreview-only feature validation #6916
RFE-2782 : Create edge compute pool to support AWS Local Zones #6371 OPNET-199 : Allow v6-primary dual stack on baremetal #6881 Generate CSI driver manifests #6856
Azure: use managed storage account for boot logs #6848
OCPBUGS-7015 : Relax MachineCIDR check for vSphere, Nutanix #6915 ARMOCP-417 : enable arm64 for agent installer #6401 AGENT-502 : Enable agent tui #6898 GCP: conditionally create bootstrap service account #6853
vsphere: Remove bostrt from approver/reviewer group #6918
OCPBUGS-7860 : azure: session: fix unclear auth error messages #6901 OCPBUGS-7991 : vSphere - only create RP when cluster is not empty #6905 Support the new fields in NutanixMachineProviderConfig #6841
openstack-manifests: Option to run selected test cases #6908
AGENT-526 : Refactor Agent InstallConfig embedding #6796 OCPBUGS-7993 : hack/build-coreos-manifest: support OKD #6906 bump version of ovirt terraform provider #6883
OCPBUGS-7622 : Ignore CPMS file if not exist #6887 linter: enable reporting about exported names lacking comments #6880
CFE-757 : Fix issues reported by QE #6870 OCPBUGS-7579 : azure: fix certificate-based auth with passpharse #6871 Update alias for Metal Platform #6884
CORS-2496 : Default 2xlarge instead of xlarge in AWS when the control-plane is single-node #6814 OSASINFRA-3090 : External LB support for on-prem platforms #6812 Bug 1904573 : baremetal container modify /etc/passwd group writable #6872 SPLAT-823 : Zonal GA, single terraform, deprecate legacy platform spec #6770 openstack: Fix missing docs link #6852
OCPBUGS-7180 : update RHCOS 4.13 bootimage metadata #6861 Removes m1kola from azure-reviewers #6865
OCPBUGS-7495 : Convert platform type for AgentClusterInstall #6855 CFE-582 : Generate Infrastructure CR with the azure user defined tags #6310 AGENT-456 : Remove connectivity checks from bash script #6846 integration: Don’t pass host data in the install-config #6795
linter: bump version to sync with CI #6859
OCPBUGS-4954 : IBMCloud: Handle COS reclamations #6845 CFE-757 : Fix issues reported by QE #6820 CORS-2386 : IBMCloud: Add networkResourceGroupName #6613 IBMCloud: Add tests for installconfig metadata #6348
OCPBUGS-1048 : if tag categories don’t exist, the installation will fail to bootstrap #6327 CFE-586 : Apply user defined tags on created azure resources #6354 OCPBUGS-7356 : data/manifests/bootkube/cvo-overrides: Default to stable-4.13 #6689 OCPBUGS-6777 : Fix file check for loading openshift manifests #6821 AGENT-505 : Embed agent files in initrd #6842 installer dev build settings to enable delve #6835
OCPBUGS-7261 : Update AgentConfig template #6840 OCPBUGS-4549 : azure: fix MS Graph calls on Gov cloud #6844 openstack-manifests: Add a debug option #6839
OpenStack: Fix distribution of zones on 32-bit systems #6834
OCPBUGS-6422 : CVE-2022-41717: bump net/http for fix #6801 CNF-6357 : feat: add CPU Partitioning flag into the install config #6430 SPLAT-820 : multi-zone is no longer tech preview #6782 destroy: vsphere: move API calls to client abstraction and add unit tests #6604
Add support for confidential compute #6799
Add Adam #6824
OCPBUGS-5234 : azurestack: upi: fix compute scale up #6735 CNF-6362 : feat: add support for nto rendering during bootstrap #6691 OCPBUGS-4997 : Set the configured proxy settings for agent installer #6827 azure: Add error message when authorizer fails. #6551
OCPBUGS-6486 : fixing ovirt installation on iSCSI #6816 OCPBUGS-6270 : Don’t require vSphere details for agent installer #6793 OCPBUGS-6722 : bootimage: move secure execution artifact to separate artifact #6811 PowerVS: Check for potential network conflict in existing CCs #6798
OCPBUGS-6663 : Check platform baremetal settings against default values #6809 AGENT-455 : Check registry and rendezvous host access at startup #6767 OCPBUGS-4549 : destroy: azure: handle nil responses from msgraph sdk #6717 AGENT-505 : Embed agent-tui binary in the agent ISO #6786 PowerVS: Remove region requirement #6772
Bug 2072202 : Check for reachability of API and API-Int URLs later in bootkube #6611 Bug 2067847 : prometheus/client_golang: Denial of service using InstrumentHandlerCounter #6391 CORS-2479 : bootstrap: set 0644 mode for registries.conf #6789 GCP: Remove the BYOH code #6771
AGENT-453 : Create interactive console service for agent installer #6756 OCPBUGS-5959 : bump RHCOS 4.13 bootimage metadata #6790 CORS-2469 : upi: Document removal of CPMS for UPI installation #6727 Bug 2070744 : Fix infinite loop error #6515 CORS-1558 : Add uninstall complete after destroy code #6572 AGENT-504 : Agent extract binary #6777 OCPBUGS-5182 : validate additional confidential VM types #6733 OCPBUGS-5461 : Allow NO_PROXY to contain IPs #6776 OCPBUGS-3253 : Warn if agent assets detected when using non-agent waitfor #6740 OCPBUGS-4654 : azure: upi: use Image Gallery in ARM templates #6684 OCPBUGS-5184 : azure: validate Windows-only VM types #6734 CORS-2449 : gcp: Set pre-created CPMS to Active state #6752 OCPBUGS-1612 : vsphere: set default resource pool when missing failure domain topology #6409 Generate the cloudproviderconfig manifests for integration of nutanix-ccm to OCP #6269
CORS-2405 : Create ControlPlaneMachineSet CRDs #6632 OCPBUGS-5734 : make VIP 168.63.129.16 noProxy in all clouds except Public #6761 OCPBUGS-1695 : Update FCOS to latest 37.20221127.3.0 stable #6487 OCPBUGS-5770 : CVE-2021-4238: goutils: update for randomness fix #6763 BUG 2110982: GCP skip public loadbalancer ip addresses #6755
AGENT-501 : Make it easier to change node zero IP and SERVICE_BASE_URL #6747 MGMT-12839 : Add Shielded VMs options to gcp mpool and TF #6698 OCPBUGS-5324 : CVE-2021-4235 go-yaml: Denial of Service in go-yaml #6741 OCPBUGS-881 : fail to create install-config.yaml as apiVIP and ingress VIP are not in machine networks #6469 SPLAT-901 : set default for variables that are deprecated by failure_domains #6750 OCPBUGS-1769 : Check for AWS STS installation before trying to get all IAM Roles #6666 GCP XPN: remove tech preview feature gate #6754
Expose Azure useImageGallery parameter in the MachineSets() call #6737
OCPBUGS-2088 : Validate that the rendevousIP is assigned to a master #6716 ARO-1796 : Update Azure SDK for go to v63.1.0+incompatible #6746 openstack: Revert Gophercloud workaround #6663
SPLAT-900 : provision VMs in to failure domains #6738 OCPBUGS-4874 : Remove order dependency for agent CLI string #6739 CORS-2449 : Create CPMS manifest #6695 OCPBUGS-2881 : Destroy the service and host project dns records #6534 Bug OCPBUGS-3921: OpenStack: fix bootstrap destroy cmd #6617
OCPBUGS-3706 : Improve error reporting from agent wait-for install-complete #6730 Better logic to derive vpcRegion/Zone from vpcName/Subnets #6665
update tested instance types on 4.12 #6731
Updating ose-baremetal-installer images to be consistent with ART #6678
OCPBUGS-5151 : baremetal: Extra time for provisioning interface #6729 OCPBUGS-3032 : Report status on the console immediately #6697 Updating ose-installer images to be consistent with ART #6675
OSASINFRA-3057 : openstack: Document Image Registry migration to Swift #6710 openstack: Rely on Go’s stdlib for errors #6656
Updating ose-installer-artifacts images to be consistent with ART #6693
cmd: update import of deprecated terminal package #6594
GCP: Tfvars will determine the user has create firewall permissions #6679
OCPBUGS-4941 : OpenStack: Force JSON content-type in Swift object listing #6707 PowerVS: Defer cancel when calling contextWithTimeout #6700
linter: fix issues since revision 75173a17cf #6712
OCPBUGS-2996 : bump RHCOS 4.13 bootimage metadata #6703 CORS-2340 : hack: replace deprecated go-lint #6601 OCPBUGS-3706 : Wait longer for baremetal #6688 Fix import order using the gci tool #6643
Switch back to gp2 ebs volume type for bootstrap instance #6692
OCPBUGS-2891 : aws: destroy: delete ELB listeners #6528 Consolidate loadsdk debug statements #6686
OWNERS_ALIASES: Remove lucab #6696
OCPBUGS-4549 : azure: replace deprecated AD Graph API #6614 Save rendezvous IP in a file ‘rendezvousIP’ alongside the ISO #6683
OCPBUGS-3987 : Check nmstateconfig content in agent-config.yaml #6674 CORS-2147 : Add documentation for the client certs authentication #6505 OCPBUGS-4367 : Fix missing debug messages when getting baseISO #6662 Use backoff functions in PowerVS destroy logic #6591
OCPBUGS-3032 : Report agent installation problems on the console #6544 OCPBUGS-3668 : fully qualified username must be provided #6596 OCPBUGS-1560 : vsphere zonal, terraform depends on ova import #6498 Agent integration tests proposal #6598
CORS-2291 : terraform: save logs to a file #6532 OCPBUGS-3196 : Set ip=dhcp,dhcp6 for master nodes on dualstack #6626 OCPBUGS-2130 : import ova resource cluster path fix #6519 OCPBUGS-2498 : ose-installer-container: vault: insufficient certificate revocation list checking #6493 Wait longer for VM to obtain IP from DHCP in PowerVS #6651
platformprovisioncheck: fix shadowing of err variable #6595
Alibaba: add the tags of the machine nodes #6535
Azure: use azidentity with adapter #6003
OCPBUGS-4125 : Enable CVO unmanage overrides in bootstrap-in-place installations #6649 openstack: Refactor TFVars generation #6465
Update OpenStack spec dependencies #6382
OCPBUGS-3164 : hold bootkube service until bootstrap has pivoted #6488 OCPBUGS-4355 : Fix return value from execute() #6646 OCPBUGS-4328 : images: updating images to be consistent with ART #6641 vSphere Zonal: validate dns and external load balancer #6612
GCP: remove private zone manipulation #6610
Replace deprecated io/ioutil package #6602
ibmcloud plugin “permission denied” #6627
Bug 2105570 : out-of-bounds read in golang.org/x/text/language leads to DoS #6389 OCPBUGS-3524 : data: azurerm: restore RHCOS SA access configuration #6583 OCPBUGS-3405 : Redact pull secret from agent-gather #6574 Adding aarch64 instance types for azure #6531
OCPBUGS-2931 : Azure Stack: use managed images for compute nodes #6540 OCPBUGS-3985 : Pass featureset to kas #6579 mv ibmcloud to /bin folder #6624
OCPBUGS-3278 : (Agent) Do not require host data in platform baremetal section in installconfig #6573 OCPBUGS-3277 : Restart create-cluster-and-infraenv.service if it fails #6577 OCPBUGS-3933 : OpenStack: Force JSON content-type in Swift #6615 add ibmcloud cli to image #6600
Update vSphere Owner files #6607
OCPBUGS-2384 : [Alibaba] fix the creation of public record #5671 docs: fix broken link to default kubelet.service taint #6593
OCPBUGS-3186 : IBMCloud: Confirm Zones and BYON Subnets #6553 OCPBUGS-3123 : Pass FeatureSet to cluster config render #6576 OCPBUGS-2738 : Uplift terraform-provider-ironic to 0.3.0 #6511 OCPBUGS-3382 : Fix cluster wide proxy #6571 OCPBUGS-3280 : Automatically retry install #6567 OCPBUGS-3304 : Always use first matching mirror in assisted-service #6563 OCPBUGS-2841 : (AGENT) only support amd64 archs #6546 OCPBUGS-3214 : Always add router CAs to kubeconfig, even if console is not available #6557 Update apiVersion for lso operator group #6558
OCPBUGS-2513 : Set PublicContainerRegistries for entries in mirror #6545 OCPBUGS-1627 : [vsphere-zones] Fix user folders #6412 OCPBUGS-1704 : gcp: fail during validation if service usage is not enabled #6516 OCPBUGS-3287 : agent ased installation fix for dual stack vips #6530 OCPBUGS-3096 : Static linking the terraform and providers binaries #6548 OCPBUGS-2911 : Use project after creation #6552 OCPBUGS-3110 : azure: Fix client certs authentication #6527 OCPBUGS-2847 : GCP XPN Featuregates #6522 OCPBUGS-2758 : Provide datastore as full path #6547 Bug 2074299 : update golang.org/x/crypto to address security vulnerabilities #6388 OCPBUGS-2966 : Add GCP CreateFirewallRules to tech preview #6533 OCPBUGS-1791 : add bootstrap configmap during the SNO reboot #6521 OCPBUGS-2290 : Power VS Check for existing DNS permitted network and public gateway #6481 Add linux/arm64 binary to installer-artifacts #6514
OCPBUGS-1033 : support multiple documents in the same extra manifest file #6492 OCPBUGS-3018 : Use result from List function after checking error #6541 OCPBUGS-2144 : Azure: Set appropriate architecture for gen v1 image #6517 go-fmt: apply formatting with golang 1.19 #6497
OCPBUGS-2895 : Azure: Fix DiskEncryptionSet regex validation #6513 AGENT-348 : Warn when information in install-config is ignored #6523 OCPBUGS-2837 : Reduce debug logs in agent wait-for commands #6520 Fix unexpected behavior from merging #6470 and #6500 #6526
AGENT-390 : Include CPU Architecture in ISO filename #6485 docs: feature sets #6506
Agent-321: Cluster and Host validations rework #6500
OCPBUGS-2327 : Add validation for releaseImage and registry.conf #6423 OCPBUGS-2086 : Detect failure in wait-for on transition back to ready #6470 OCPBUGS-2627 : agent-config: Generate missing AdditionalNTPSources in InfraEnv #6495 OCPBUGS-2338 : Don’t use error messages as default values #6486 OCPBUGS-1824 : enhance agent systemd service dependency #6408 OCPBUGS-1704 : Service Usage API is required, not optional #6504 Revert “create: add check for cluster operator stability” #6503
OCPBUGS-2301 : Search Network Project For resources #6499 OCPBUGS-2436 : Revert “Revert “[AWS] Add LB Type in the infrastructure cluster object via install-config yaml”” and fix OCPBUGS-2436 #6491 OCPBUGS-2174 : fix metadata tags not supported in certain regions #6475 Add initial support for OKD/SCOS #6443
Updating golang version to fix gofmt issues #6484
Bug 2117537 : validation rule for invalid rendezvousIP in AgentConfig #6474 create: add check for cluster operator stability #6124
Revert “[AWS] Add LB Type in the infrastructure cluster object via install-config yaml” #6490
Add LB Type in the infrastructure cluster object via install-config yaml #6478
Bug 2059491 : [Alibaba] fix the format of Name #5668 AGENT-284 : Allow user to choose platform type #6438 OCPBUGS-2262 : Update gcp explain for DNS zones #6483 OCPBUGS-1941 : bump RHCOS 4.12 bootimage metadata #6452 Bug 2072202 : Check for api and api-int resolution during cluster install #5816 OCPBUGS-2259 : Fix soft-anti-affinity known issue #6479 Removing jstuever from OWNERS #6480
OCPBUGS-1881 : vsphere/destroy: improve logs when folder is not empty #6456 Adding “syd05” as a choice for zones in PowerVS #6468
OCPBUGS-1856 : IBMCloud: Allow traffic to kube-api-lb #6458 update to release.openshift.io/feature-set to match OCP 4.12 #6476
AGENT-347 : generate OS_IMAGES dynamically #6441 OCPBUGS-1900 : Avoid SNO bootstrap jsonpath error #6463 OCPBUGS-1698 : multi-zone network slice validation #6422 OCPBUGSM-47893 : added validation rule for invalid mac address in AgentConfig #6473 populate vSphere infrastructure spec #6457
OCPBUGS-1896 : Validate Credentials Mode After Install Config step #6453 OCPBUGS-2029 : Fix agent installation InstallConfig proxy processing #6461 Add docs about IPv6 on the additional Networks #6435
AGENT-375 : generate FIPS annotation for ACI #6467 AGENT-349 : Allow console login to Agent ISO #6464 OCPBUGS-1913 : Agent Installer: Do not fail on deprecated apiVip and ingressVip values #6462 Power VS: Disconnected cluster support #6347
azure: create bootimages using image gallery #6304
CORS 2046: GCP Add base domain validation when DNS zone is specified #6300
Fixes tested_instance_types_aarch64.md #6451
pkg/types: add feature set support #6336
pkg/asset/releaseimage/pullspec: Include override pullspec in log message #6460
Bug 2104997 : Add additional fields to proxy manifest #6374 OCPBUGS-527 : Improve error message in case of failure during the agent image generation #6436 AGENT-271 : Generate kubeadmin-password with ISO #6313 AWS: destroy: move helper functions to their own file #6131
AGENT-369 : SNO validation #6444 Add host-config status to agent-gather #6442
AGENT-321 : Move validation failures to debug log level #6446 CORS-2073 : Remove terraform provider “random” #6387 Increase start timeouts for assisted services #6445
OCPBUGS-891 : aws: add explicit EIP dependency for nat gw #6379 images: UPI: update gcloud install on rhel8 container #6158
OCPBUGS-1490 : [vsphere-zones] Handle no set zones #6390 powervs: introduce manifest for OVNKubernetes configuration #6405
Power VS: Enable IBM DNS service for private cluster support #6228
AGENT-264 : validate agent-config macs #6434 Ensure installer created ControlPlaneMachineSets are active on install #6425
AGENT-330 : Add disconnected instructions to MCE integration doc #6424 OCPBUGS-561 : bump RHCOS 4.12 bootimage metadata #6403 Remove extra blank line in DHCP debugging #6439
Change PowerVS default machine CIDR #6428
Change error on execute() to a debug message #6427
fix agent-config-template emitted by agent create #6306
CORS 2040: [gcp] Adding Public and Private Managed zones #6288
Bug 2116904 : Base generated NMStateConfig on InstallConfig name #6244 AGENT-354 : script for gathering install data #6402 AGENT-364 : Validate network type for SNO clusters #6419 cleanup unused types and constants after platform spec refactor #6370
AGENT-351 : Add MachineNetwork to agent-cluster-install for dual stack #6364 AGENT-319 : Set agent-config version to v1beta1 #6416 OCPBUGS-816 : Check that cached base ISP matches hash in release payload #6318 AGENT-365 : Set install invoker to “agent-installer” #6418 Bug 2055247 : pkg/asset/installconfig/azure: standardDDv5Family is not currently supported #6203 Verifying yq is installed properly in libvirt installer containers #6319
Agent installer: try to make systemd services more robust #6312
OCPBUGSM-47737 : Do not enable pre-network-manager-config.service #6323 Add documentation for agent networking #6400
vsphere: prevent duplicate validation check in multi-zone #6398
AGENT-288 Log rendezvous host IP when creating agent ISO #6393
AGENT-309 Display the rendezvous IP in motd and issue #6386
Agent: Don’t pass AdminKubeConfigClientCertKey #6373
hack: Use golang-1.16 image of origin-release #6367
OCPBUGS-1231 : disconnected machine-os-images info #6339 AGENT-325 Set NetworkType in AgentClusterInstall #6287
Bug 2094716 : docs: fully air-gapped AWS IPI install #6076 OCPBUGS-1489 : [vsphere] Loop over all folders for destroy #6378 AWS: resolve subnet-related FIXMEs #6140
go getter update for terraform & terraform providers #6352
GCP: Add me-west1 region #6359
aws: replace deprecated object in terraform config #6383
powervs-delete-named-dhcp #6365
azure: validation: avoid specifying capabilities twice #5952
CORS-2280 : IBMCloud: Add DNS Record for internal public traffic #6375 OCPBUGS-729 : vSphere 6.7u3 failing privilege validation #6293 Agent: Increase bootstrap-complete timeout #6384
aws user tags: set limit == openshift/api #6368
OCPBUGS-927 : azure: add sleep between zone and link creation #6349 Update power-go-client #6229
Fix generating Machine objects for PowerVS #6366
AGENT-328 : Add documentation for agent mce integration #6358 aws: allow clusters with public only subnets #6342
AWS UPI docs: remove control plane machineset #6346
OCPBUGS-705 : vSphere privilege checking failing when providing user-defined folder and/or resource pool #6281 GCP: allow environmental authentication #6330
AGENT: add ipv6 support #6328
OCPBUGS-1234 : [CFE-580] Fixed error condition for user tag validation #6356 OCPBUGS-717 : Upgrade python3.7 to 3.8 for AWS UPI #6270 OCPBUGS-963 : OpenStack: Lift validation for 14 chars cluster names #6309 OCPBUGS-1234 : [CFE-580] Extend user tags limit to 40 based on AWS limits #6345 OCPBUGS-1226 : OpenStack UPI: Create server group for Computes #6340 Power VS: use the new name field for the dhcp nw #6294
Add AWS r6i into tested instance types table #6337
vsphere zonal: platform spec and terraform updates #6329
CORS-2280 : IBMCloud: Add DNS Service permitted VPC #6325 CORS-2280 : IBMCloud: Add DNS Service destroy #6321 OCPBUGSM-47740 : No networkconfig needed with DHCP agent config #6317 azure: add support for arm64 instances (Dps_v5 instances) #6298
azure: Add client certification to terraform #6250
pkg/asset/ignition/bootstrap/cvoignore: Add group/kind/name(space) collision detection #6247
Add additionalTrustBundlePolicy field to allow CA bundle propagation #6232
OCPBUGS-1247 : Restrict CPMS from being created with single node clusters #6331 GCP: Add createFirewallRules parameter to installconfig. #6338
CORS-2043 : GCP: Passsthrough installer service account to Terraform r… #6326 Bump Nutanix Prism Go Client dep to c8a2536 to include refactors. #6308
OCPBUGS-927 : Add depends to enforce order for azure terraform dependencies #6311 vSphere: Zonal Terraform #6064
Terraform go 1.18 #6257
Revert “AWS: Create ControlPlaneMachineSet CRDs” #6324
OCPBUGS-302 : bootstrap gather: fix panic when platform is “none” #6243 Add bind-utils in upi installer image #6277
download ‘aliyun’ #6265
AGENT-308 : Add 4.12 to OS_IMAGES #6315 OCPBUGS-889 : bump default channel to stable-4.12 #6302 vSphere: Add the ability to attach a tag to a mob #5357
Power VS: Machine CIDR #6264
AGENT-318 : Merge agent-based installer #6263 CORS-2280 : IBMCloud: Add TF support for private DNS #6282 vsphere: error checking while creating vsphere clients #6305
Correct the GCP machine series name #6296
add bind config for PowerVS publish==internal IPI #6227
Bug 2084471 : validate baremetal hosts names are lowercase RFC 1123 #6112 terraform: azurerm bump provider to v3.19.1 #6262
Power VS: Enable global routing for cloud connection and specify dns #6289
fix check for control plane suitability for default zones #6295
Bug 2070744 : Fix infinite loop when failing to untag resources #5995 AWS: Create ControlPlaneMachineSet CRDs #6172
Add dual stack API & Ingress VIP support for on-prem platforms #5798
OWNER_ALIASES: remove Saqib Ali from the coreos approvers and reviewers #6291
gcp: machines to use networkProjectID when defined #6284
Bump FCOS to latest stable #6290
Switch delete ordering of CloudConnect and VPCs #6280
gcp: specify network_project_id for network and subnets #6283
Bug 2117439 : Azure masters should publish on an internal load balancer #6230 Bug OCPBUGS-164: OpenStack: Update Kuryr storage requirements #6286
CORS-2271 : IBMCloud: Add DNS Service support - installconfig #6255 Bug OCPBUGS-164: OpenStack: Set minimum disk of a flavor to 100 GB #6268
validate vSphere privileges #5741
Add support for private DNS server to PowerVS #6157
GCP: Remove firewall rules when providing network project id #6219
GCP: Add missing regions #6259
manifests: Pass the NetworkProjectID to manifests #6242
support for multi-zone/region installation #5911
cmd/openshift-install/create: One shot console access #5336
IBMCloud: Pull in latest openshift/api changes #6056
OCPBUGS-268 : vSphere - enable steal time accounting #6215 Bug 2028474 : oVirt: Removed cluster name length limitation #6206 gcp: Add validation for Network Project Data #6207
Bug 2098072 : vsphere: fix default disk type when not speficied #6233 Bug 2061947 : IBMCloud: Handle missing RG #6152 CORS-1994 : Update Installer Dependencies #6175 Bug 2109538 : nutanix: allow creating manifests without Prism Central connection #6149 IBMCloud: Use unique mutex for Client retrieval #6241
OCPBUGS-262 : UPI image download govc rate limit failure #6047 Extract the image-references file from the release, pass it to machine-config-operator #6234
powervs: allow VPC, Cloud connection, and NW re-use #6217
Bug 2109800 : IBMCloud: Allow metrics traffic #6208 IBMCloud: BYON Enablement #6183
IBMCLOUD Power VS: Updated Max and Min machinepool resource limits #6147
GCP: Added user specified tags on control plane instances #6199
Azure Stack UPI Docs: Remove Feature Gate CRs #5657
Bug 2115790 : bump RHCOS 4.12 bootimage metadata #6212 terraform: ibmcloud: bump provider version #6210
Revendor with golang 1.18 #6077
Update installer images to use golang 1.18 #6163
GCP: Add networkProjectID parameter to install-config. #6166
powervs: default to tier1 storage #6211
Download yq in upi installer containers #6008
Remove LoadBalancer settings from cloud provider config #5834
Add SPLAT members to platform reviewer/approver aliases #6202
Alibaba: Use a static region list #6178
Power VS: Add Montreal as a supported region #6209
OWNERS_ALIASES: Add Adam Piasecki (c4rt0) #6181
Switch libvirt VM’s to vnc graphic mode #6062
GCP: Added user specified tags on compute instances in installconfig #6185
CORS-2009 : Update default release image #6180 Fix ineffassign #4866
Bug 2105933 : data/data/coreos: update FCOS to 36.20220716.3.1 #6108 Bug 2114754 : gather: properly delete serial log dir #6197 tls: only report error if one happened #6195
Updating ose-installer-artifacts images to be consistent with ART #6096
Revert “GCP: Revert Instance Type from N2 to N1” #6058
CORS-2167 : Remove UPI Metal TF references #6174 Change defaultNetworkType to ovn-kubernetes #6014
PowerVS: Add 60 sec wait time after VPC creation. #6162
updated terraform-provider-ovirt #6169
Update vsphere permissions file #5387
Update kube components to v0.24.0 #6165
IBMCloud: BYON Enablement - SG Rule Cleanup #6143
BUG 2105341: Remove required check for control planes in boostrap gather #6168
BUG 2109388: Add AWS S3 Bucket Permissions #6150
added soundcard_enabled field to tf resources for master vms #6148
Update Installer approvers list #6151
IBMCloud: Update RHCOS image for VSI #6142
Bug 2102324 : Fix validation errors for instance type #6127 Updating ose-baremetal-installer images to be consistent with ART #6085
As a developer I want to update installer to use propagateUserFlags for GA #5994
terraform: update azure provider to v3 #6000
Azure console logs gathering #5904
OWNERS_ALIASES: drop miabbott from coreos aliases #6123
Gcp console logs gathering #5902
IBMCloud: BYON Enablement - Terraform #6051
Bug 2095323 : Create security group rules for each MachineNetwork CIDR #6125 Bug 2106061 : bump RHCOS 4.12 bootimage metadata #6129 test: use T.TempDir to create temporary test directory #5730
IBMCloud: BYON Enablement - InstallConfig #6050
Bug 2097691 : vsphere installconfig: use full dc path in network validation #6105 Terraform: Remove azureprivatedns provider #5983
Update OWENRS-ALIASES after changes in the team #6113
Bug 2106667 : OpenStack UPI: Allow setting external DNS #6116 Bug 2061947 : IBMCloud: Skip DNS Record delete #6013 Bug 2102228 : rhcos: Move to rhcos.mirror.openshift.com #6109 Bug 2082395 : Make azure baseDomainResoureGroup optional for private c… #6049 cmd/openshift-install/gather: Errorf for Available=False #5985
Bug 2070318 : Allow setting bootstrap kubelet ip #6042 Updating ose-installer images to be consistent with ART #6083
Bug 2098299 : Switch to perform normal marshalling with unknown fields #6039 openstack: Update base images #6082
AWS Destroy: Clean up endpoint services #6089
openstack UPI: Remove Swift example, use Glance #6091
Bug 2104578 : Remove unnecessary SG rule #6086 Bug 2090836 : Fixes CFE-489 - AWS installer should go through proxy for s3 bootstrap ignition call #5973 OpenStack: prompt FIP description #6075
Bug 1944365 : openstack: validate that VIPs are outside DHCP pools #6069 openstack UPI: clarify naming of RHCOS image #6081
Bug 2102324 : Fix panic when unknown region is provided. #6065 Bug 2103144 : openstack: validate apiVIP and ingressVIP to be semantically different #6067 Bug 2103236 : Provide proper error message for empty projects list #6071 BUG 2102632: destroy/gcp: Use min length for destroying disks #6068
Bug 2099401 : IBMCloud: Set regional URL for ibmcloud client #6046 openstack: Prepare for a UPI CI job #6055
Bug 2100841 : Print the “export KUBECONFIG=…” command on its own line for easier cut-and-paste #6018 Bug 1997704 : [OpenStack] Document in-tree limitation for external LBs #6033 Bug 2100496 : oVirt VM creation fails on empty affinity group description #6044 Bug 2064693 : Restore ability to use local clouds.yaml #5947 Bug 2047732 : [IBM]Volume is not deleted after destroy cluster #5962 Bug 2076646 : destroy/gcp: Disk names are filtered using kubernetes name format #5976 Bug 2095226 : Added changes to verify cloud connection and dhcp serviceinstance details of a powervs instance #5899 Bug 2097940 : PowerVS: Handle optional VPCRegion #6020 Bug 2082283 : Transition to the oVirt Terraform provider v2 #5867 Bug 2096905 : Swap Nutanix Prism Client #6002 Bug 2094694 : Nutanix cluster name validation #5991 Bug 2098243 : Adding error handling to powervs platform #5958 Bug 2096605 : vsphere: validate diskType if supplied #6019 Bug 2049108 : Fix network interface not found error #6016 Bug 2097260 : Fixes openshift-install create manifest failure of Power VS Platform #6007 Bug 2092107 : Re-add Power VS install-config DNS validation tests #5938 Bug 2092296 : Changed DefaultMachineCIDR of PowerVS to 192.168.0.0/16 #5940 Bug 2097239 : Changed Lower limits of CPU for PowerVS Cloud #5929 Bug 2090816 : Increase bootstrap timeout, not k8s API timeout #6010 Bug 2095917 : Nutanix set osDisk with diskSizeGB rather than diskSizeMiB #5998 Bug 1859153 : IAM instance profile race condition #5982 OWNERS_ALIASES: update coreos aliases #5989
Bug 2096352 : Collect whole journal and netstat data #5988 Bug 2090816 : baremetal: wait longer for bootstrap to complete #5981 baremetal: static IP for bootstrap node #5787
Bug 2068180 : update doc for DNS and disconnected clusters #5974 Bug 2090049 : GCP Destroy resources that are owned by cluster #5965 Bug 2094902 : Simplify cross-compiling #5905 Bug 2085336 : based on 4.11 CORS-1916 add the vm family #5913 Bug 2089563 : Use Power VS machine provider spec from openshift/api #5873 Bug 2093368 : OpenStack: Fix LoadBalancer FIP deletion on destroy #5964 Bug 2057582 : Remove all occurances of packet_device from upi/metal #5969 Bug 2057582 : For metal upi update source and versions of terraform providers #5941 BUG 2075459: IOPS was not being set even when manually configured #5925
Bug 2084280 : Remove optional services from permissions check #5915 Bug 2085380 : azure: validate VM image and instance HyperV gen match #5918 Bug 2084580 : Add check to validate cluster name for dots #5931 Bug 2086791 : Azure: validate ultrassd instance types in multi-zone regions #5937 Bug 2090487 : SNO network type update #5927 Updating ose-installer images to be consistent with ART #5950
Updating ose-installer-artifacts images to be consistent with ART #5908
Bug 2085187 : terraform: revendor golang.org/x/sys #5896 Bug 2088660 : Fix for absence folder for bootstrap ignition iso #5935 Bug 2089682 : Ensure Presence of Overlay networks in cluster is handled gracefully #5939 Bug 1965468 : Revert “Bug 1909136: OpenStack: delete volume snapshots” #5923 Bug 1969794 : Correct typo #5922 Bug 2084441 : azure: proper premiumIO validation message #5924 Bug 2078431 : Set TF_DATA_DIR to the Terraform Dir. #5864 Bug 2086718 : Add destroy cluster support for PowerVS #5737 Bug 2086936 : vSphere: change socket back to cores #5914 Bug 2086056 : openstack: add doc for OVS HW offload #5886 Bug 2065893 : bump RHCOS 4.11 bootimage metadata #5887 Bug 2085721 : Fix name for customization controller image #5909 Power VS: Use bucket name from coreos stream rather than inferring it #5782
Increase Unit Testing Coverage of AWS Install Config to Include ValidateForProvisioning #5791
Added changes for validating the IBM Account Type for Provisioning Power VS resources #5734
Updating ose-installer images to be consistent with ART #5895
AGENT-40 : allow reading cert keys #5872 Power VS: Separating bootstrap resources to own stage for clean destroy #5901
Aws console logs #5807
GCP: Revert Instance Type from N2 to N1 #5898
Dynamic retrieval of GCP Regions for a Project #5815
Update to Golang v1.17 #5870
azure: move zones functionality to the client API #5844
azure: validation: dedup getting the capabilities #5893
update azure arm templates to support customer provided vnet #5880
machines: Set defaults for machine instance types #5841
Azure Provider: fix vmNetworkType defaults by checking vm capabilities #5846
OpenStack: fix SR-IOV documentation TOC #5881
Bug 2078875 : Delete all the ports from tagged Neutron networks. #5838 Bug 2082604 : Revert “image: set os name to red-coreos-stable-amd64” #5869 openstack: Add the Kuryr squad as approvers #5866
Update template for CloudProviderConfig #5875
Bump Azure Stack Terraform Provider for Go 1.18 #5865
Add -n argument to copy network config from install environment to install-to-disk.sh.template #5795
Update SR-IOV & DPDK doc for OpenStack #5712
Bug 2080054 : Add ‘ARG TAGS=“”’ line for each build step #5794 Pull the OS Image for Nutanix via URL #5868
Power VS: fix terraform vars #5863
Update TF Provider Version to 1.40.1 #5862
Use neutral pronoun in doc. #5384
Change the default machine pool config for Nutanix #5857
Bug 2074210 : Add new Regions to the GCP Installer configuration list #5811 Update os name to correct value #5860
Update the comment explaining vCPUs on Nutanix #5859
Bug 2064170 : Fixed duplicate strings in explain #5836 Bug 2077662 : Fix AWS Platform Provisioning Check #5831 Support RAID and BIOS configuration for master nodes of baremetal IPI deployments #5196
Power VS: Create Remaining TF Resources #5780
Handle the mapi-provider-nutanix types moving to openshift/api #5812
vsphere: upi ignition leak #5850
vSphere: ignore bootstrap eagerly scrub changes #5848
Bug 2078895 : ovirt: fixing incorrect ‘format’ value validation #5847 vsphere upi: missing etc resolv #5842
vsphere: remove unused namer interface #5824
Bug 2029438 : Set rc-manager=unmanaged on baremetal bootstrap #5482 Unpack to install dir #5825
baremetal: remove redundant proxy setting #5598
Determine Nic name in Bootstrap VM for ARM and x86 #5698
Add bootstrap directory for Nutanix platform #5828
Provider Azure: Enable accelerated networking on control plane nodes #5309
Ensure that the /bin/terraform-provider-matchbox binary is present #5829
Bug 2074659 : Fix empty string usage in ValidateForProvisioning #5801 vsphere: upi, use community ignition provider #5808
Bug 2076393 : vsphere: no longer logout of platform client before finished #5818 Bug 2076880 : for vsphere ipi add cluster domain to the uploaded vm configs so that 30-local-dns-prepender can use it #5788 Ensure Nutanix API VIP is populated in the SAN for the MCS Cert #5821
Bug 2048451 : Fix proxy dial to pick all proxies #5743 update the vm types OCPQE-8674 #5704
data/bootstrap/files/usr/local/bin/bootkube: –rm all Podman containers #5803
libvirt: use el8 repo for Google Cloud SDK #5467
AWS IMDSv2 support #5793
Bug 2075873 : data/data/coreos/fcos.json: update initial FCOS to 35.20220327.3.0 #5817 Changing the machine-config service name #5707
Ensure ignition host is set to API VIP for Nutanix platform #5813
Add Power VS-specific fields to cloud-provider config #5809
Check for CVO failing condition before exiting as success #5745
Add in-repo documentation for user-selectable capabilities #5732
vSphere session cleanup #5796
Power VS: Add basic install-config validation #5779
Adding public&private zones to DNS config on PowerVS #5749
Revert “cluster: unpack terraform binaries into install directory” #5810
Bug 2064170 : Fixed Azure punctuation installconfig.controlPlane.platf… #5802 Repin libvirt-version #5797
Add IBM Power VS: tf data #5614
cluster: unpack terraform binaries into install directory #5715
azure: Enable HyperVGeneration setting for Azure disks #5721
pkg/destroy/aws: Log unfiltered pagination #5775
terraform: fix module name of terraform providers #5727
remove platform.azure.osDisk #5785
Lower severity of ListAWSDefaultServiceQuotas warning msg #5747
images: Update terraform version in UPI image #5762
Bug 2033482 : vsphere: ensure terraform variables are defined #5778 Add VolumeID testscases for Power VS machinepool #5742
Power VS quota asset #5748
MGMT-9797 : Set single-node none-platform clusters Ingress DefaultPlacement to ControlPlane #5746 Added platform validation testcases for IBM PowerVS platform #5708
Add cluster destroy logic for Nutanix clusters #5638
Add IBM Power VS: tfvars #5615
pkg/asset/manifests/operators: Set kubernetes.io/description for cluster-config-v1 #5783
Updating ose-baremetal-installer images to be consistent with ART #5590
Add exit code for infra, bootstrip and install failures #5702
Bootstrap-in-place ignition creation should also create a worker.ign file #5786
Remove defaultStorageContainer from nutanix platform installconfig #5784
Update installconfig validation for Nutanix #5781
Re-update BMO vendor to use ipxe for iRMC #5662
Bug 2038774 : [IBM] add IPsec IKE UDP ports 500, 4500 to security group #5539 Update declarative assets for Nutanix #5636
Bug 2056460 : Preallocated disks for OCP nodes on oVirt #5594 gather: collect sssd journal logs #5771
Add nutanix-specific terraform variables #5637
Removing no-longer-needed DNS etcd stuff #5764
Add nutanix-specific customizations to installconfig #5633
Update default releaseimage to 4.11 #5774
collect machine state in bootstrap gather #5770
Refactor UltraSSD tfvars #5757
Bug 1918005 : vsphere: Use Managed Object ID for networks instead of potentially duplicate name. #5673 Azure: validate UltraSSD instance types #5759
OWNERS_ALIASES: Update current installer team #5766
Validate disk encryption sets #5692
vendor: update api to latest version to use AzureUltraSSDCapabilityEnabled #5756
vsphere: make cluster destroy more resilient to api failures #5556
Bug 2061891 : IBMCloud: Add br-sao region to static list #5760 Add Nutanix-specific customizations to manifests #5631
terraform: add terraform verification to ./hack/verify-vendor.sh #5675
Add nutanix-specific customizaitons to machines #5632
Bug 2047935 : bump RHCOS 4.11 bootimage metadata #5729 Bug 2066463 : IBMCloud: Patch IBM client auth #5736 Bug 2062998 : Update region check for coreos AMIs #5731 terraform: compress provider binaries faster #5739
Add nutanix-specific customizations for assorted assets #5634
Bug 2048067 : [Alibaba] fix location service endpoint #5664 Bug 2060687 : terraform: fix setting of zone in load balancers for non-zonal azure regions #5684 Doc: Update VIP number to 2 #5599
Updating ose-installer-artifacts images to be consistent with ART #5591
Add the terraform plugin for Nutanix #5635
Add IBM Power VS: cluster assets #5651
AlibabaCloud: fix for bootstrap teardown removing slb backends #5682
Use powervs NewClient in GetDNSZone #5723
vsphereprivate: update to v2 terraform sdk #5716
Bug 2064969 : terraform: upgrade aws provider to v4.5.0 #5719 Revert “Merge pull request #5665 from r4f4/azure-azid-adapter” #5722
vendor: upgrade aws sdk to v1.43.19 #5710
Azure: Add ultraSSDCapability to control plane instances. #5701
Bug 2061549 : azurestack: create the api DNS record when publishing internally #5691 Set ignition string to sensitive #5720
Bug 2047670 : aws: remove validation check for internal publish strategy #5695 baremetal: refresh owners list #5713
include conn timed out err for bootstrap collection #5677
Bump gophercloud #5686
Add Nutanix-specific platform types #5603
vSphere: Update terraform provider to current upstream #5694
Add IBM Power VS: machine assets #5611
Bug 2060617 : fix(ibmcloud): Properly match regex for DNS destroy #5679 Add IBM Power VS: manifest assets #5610
Azure azidentity adapter #5665
Validate BMC driver supported and requires provisioning network #5458
terraform: build binaries on go.mod changes #5672
Add IBM Power VS: installconfig assets #5612
Add VPCRegionForPowerVSRegion function #5700
Azure disk encryption support #5641
Bug 2060508 : azurestack: fix backend address pools for internal publishing #5678 azure/validation: Skip “resource group empty” check for ARO #5330
Bug 2061527 : IBMCloud: Missing infra providertype #5687 Bug 2061544 : azurestack: stop pinning to Standard_LRS for disk type #5688 Bug 2060970 : data/data/coreos/fcos.json: update initial FCOS to 35.20220213.3.0 #5680 doc: terraform maintenance document #5670
Updating ose-installer images to be consistent with ART #5589
remove stray tmp/simple_log.log file #5606
GCP may also return Forbidden status when trying to check quotas #5649
Bug 2026356 : Fix bootstrap disk instance type #5515 Bug 2034147 : Validate num cores with vcpus #5656 Bug 2059213 : build all terraform providers and terraform binary locally #5666 Add IBM Power VS: types #5609
point 06_workers.json to azurestack version #5661
Bug 2021041 : vsphere: Not found TagCategory when destroying ipi cluster #5558 Render the CVO manifest with user-specified capabilities from the install-config #5645
isolate terraform #5507
Bug 2046181 : baremetal: reduce API timeout to 15 minutes #5639 Check for DeletePlacementGroup permission before destroying cluster #5655
OWNERS_ALIASES: Drop wking from approvers #5644
data/manifests/bootkube/cvo-overrides: Default to stable-4.11 #5621
Updated owners to current OCP on RHV members #5654
baremetal: use combined Ironic, drop MariaDB #5553
Update OWNERS_ALIASES #5640
Bug 2047257 : openstack: Migration script should –force drain #5618 Tested instance type lists for AWS/Azure/GCP #5517
Bug 2047925 : Update BMO vendor #5588 cmd/openshift-install/create: Do not attempt analysis when we fail to gather logs #5582
Bug 2046181 : baremetal: wait for image-customization to come up #5579 aws: support the entirety of the secret partitions #5597
Bug 2050767 : vsphere: check that network exist in provisioning validation #5607 Bug 2048451 : Use proxy dial to validate endpoints #5600 Bug 2050146 : Don’t shortcut OpenStack scraping if quota is unavailable #5601 Bug 2048222 : Remove non-public AWS regions from list of regions #5595 Azure Stack: Add UPI Instructions for internal CA #5573
Remove Caleb Boylan from core installer reviewers #5593
Ensure removal of placement-groups during cluster destroy on AWS #5528
Bug 2047455 : Update custom image os type #5587 Bug 2047255 : [Alibaba] fix validation of resource group ID #5584 Bug 2046025 : [Alibaba] fix destory exist private zone #5583 Bug 2043003 : [Alibaba] fix destroy not exist security group #5580 Bug 2045916 : IBMCloud: Stop defaulting to dedicated storage profile #5578 Bug 2043297 : bump RHCOS 4.10 bootimage metadata #5577 Bug 2042370 : [Alibaba] fix installer index panic #5575 Bug 2042770 : [Alibaba] fix resource creation for existing network #5574 Bug 2040143 : [Alibaba] remove unsupport regions #5572 Bug 2035720 : [Alibaba] support internal publish strategy #5534 Bug 2025868 : Check HyperVGenerations for instance type #5509 Bug 2042036 : remove options for existing resources which are currently not supported #5568 Bug 2041765 : Adjust the startup order of httpd container #5541 Bug 2041750 : [Alibaba] fix endpoint error in some regions #5571 Bug 2047258 : Read GovCloud from RHCOS stream #5585 Bug 2045927 : Add proxy for ironic-agent.service #5569 Bug 2041694 : [Alibaba] fix system disk category of bootstrap #5564 Bug 2042655 : revert delay of bootstrap control plane teardown for alibaba #5550 Bug 2041319 : [Alibaba] fix VSwitch subnets overlap #5566 Bug 2041926 : [Alibaba] fix creating public record being skipped #5565 Bug 2023839 : Bump Fedora CoreOS to 35.20220116.2.0 #5567 Bug 2038166 : openstack: Fix invalid-https-certificate detection #5576 Bug 2037209 : update alibaba for provider spec api changes #5562 Bug 2037209 : vendor: update openshift/api to latest in preparation for alibaba machine provider changes #5563 Bug 2043731 : Add IP outputs for IBM terraform instances #5538 Bug 2037813 : [baremetal] networkConfig field now accepts yaml instead of string value #5545 Bug 2042315 : Fallback to External IP_OPTIONS when ProvisioningNetwork is Disabled #5548 Bug 2040160 : [Alibaba] fix EIP metering method #5547 Bug 2026321 : Remove allowed values for nodeVMsize #5532 Bug 2042438 : openstack/Dockerfile: add make and gettext #5546 Bug 2033271 : [Alibaba] fix deletion of resource group #5536 Bug 2041598 : Azure Stack remove CA bundle from CPC #5543 Bug 2017874 : Check quota for G and VT instances #5510 Bug 2038166 : openstack: Document legacy HTTPS cert validation #5544 Bug 2041361 : [Alibaba] fix load balance listener strategy #5540 Bug 2033524 : [Alibaba] support for list existing domains #5533 Bug 2035705 : Azure: Only attempt to destroy resourcegroups if present #5516 Bug 2039241 : [baremetal] use podman secret for image-customization server #5525 Bug 2035454 : [alibaba] fix deletion of the OSS bucket #5530 Bug 2039109 : Fix image-customization-controller image pull failure #5513 Bug 2039408 : Add northamerica-northeast-2 region to GCP validation #5531 Bug 2034527 : Pass different IP options to installed CoreOS image and IPA #5521 Bug 2039689 : Alibaba: fix payment method for NAT gateway #5529 Bug 1965969 : aws: Fix dns destroy logs #5494 Bug 2038384 : Azure: Update Default Instance Types #5519 Bug 2020480 : [vsphere] installation failure sometimes with error: the object ‘vim.Folder:group-v******’ has already been deleted or has not been completely created #5495 Bug 2033239 : Alibaba: fix the wrong default region #5490 Bug 2034537 : openstack: Update OWNERS #5503 Bug 2025788 : Check vCPUsAvailable for given instance type #5505 Bug 2019977 : Validate region provided in install config #5432 Bug 2028695 : Delete bootstrap profiles during cluster destroy #5506 Bug 2034245 : terraform: use the correct os for terraform providers #5501 Bug 2033749 : Azure Stack: Terraform Local Provider #5497 Baremetal: Deploy using CoreOS ISO from the release payload #5473
azurestack: Add a custom rhcos image field for ASH #5468
tf/stages: delete unused code around compat and gather, and improve comments #5476
Terraform: Unset TRACE-level debugging #5493
Azure Stack: fix versions for Terraform Upgrade #5492
Alibaba: fix: add the availability zone of worker #5438
AWS: Remove unused Instance Class Function #5335
tf/alibaba: fix name of alibaba tf provider #5489
azurestack upi : get VHD_URL with openshift-install coreos print-stream-json #5470
ibmcloud: remove resource group question from survey #5462
Remove GCP cluster api provider #5437
Bug 2032521 : vendor: address eventually consistency creating aws dhcp options associations #5488 machineconfig: Use KernelArguments field instead of kernel-args file #5439
asset/tfvars: use generic name for platform tfvars file #5477
Bug 1981941 : Upgrade terraform to 0.14.6 #4729 Azure Stack: add CA support in bootstrap ign stub #5430
pkg/asset/installconfig/aws: public DNS validation #5189
owners: refresh baremetal-approvers/reviewers #5485
tf/stages: add resolution to stages for openstack and ovirt #5484
Alibaba: support existing VPC, VSwitchs and PrivateZone #5379
images/libvirt: provide specific version of google cloud sdk #5486
aws: Update our local zone filtering code #5483
OpenStack: Instruction on how to deploy on ovs-dpk #5390
Bug 1921627 : Shorten instance group suffix to ig #4828 azurestack: Fix cluster tag check for A record destroy #5362
Openstack: Split terraform into stages #5078
Alibaba: fix the validation of instance type #5480
Baremetal: Split terraform into stages #5064
ovirt: split terraform into stages #5034
aws: changing default EBS type on masters to gp3. #5239
openstack: Document Control plane node migration #5475
Alibaba: refactor validation of machine pool #5426
Alibaba: format the log of the destroyer #5435
Cleanup machine references to ibmcloud SG #5472
Azure Stack Bootstrap Destroy Bug #5443
Bug 2025464 : aws: get ips for all control plane instances for bootstrap gather #5465 openstack: Document credential rotation #5471
Azure Stack availability set #5442
aws-gp3 support: update vendor aws-sdk-go and terraform-provider-aws #5373
Alibaba: fix: destroy the records of the current cluster #5421
azure upi: get VHD_URL with openshift-install coreos print-stream-json #5469
rhcos: ami regions from rhcos stream at runtime #5466
Alibaba: fix: replace the ic.ClusterName in the validateClusterName #5461
Bug 2025093 : Remove The Default Value For The Disk Provisioning Type of Vsphere #5416 close a verify-codegen ci failure loophole #5447
azure: Fix terraform cluster IP output #5448
Bug 1964380 : remove privateDNSZoneName #5459 Bug 2027501 : bump RHCOS 4.10 bootimage metadata #5452 bootstrap: remove support for certs lacking SAN #5464
Alibaba: fix: rename the bootstrap output variable #5460
docs/dev/pinned-coreos.md: update rhcos-stream.json example #5453
Bug 2020216 : replace public-access with sas token in bootstrap deployment #5457 pkg/types: Correct docs for deprecated options #5444
Revert “open cluster-policy-controller ports for metrics” #5451
Bug 1997059 : aws: Filter out local zones when generating a default list of zones #5392 Condense IBM Cloud SG names #5455
Bug 1968364 : azure: Update upi docs to remove mentions of sshKeyData #5456 Generate network config secrets for baremetal platform #5247
machines: Extract root disk sizes to constants #5169
Update URL from cloud.redhat.com to console.redhat.com #5137
azurestack: Fix gather bootstrap for azurestack #5382
installer-artifacts: add darwin/arm64 binary #5418
Alibaba: fix kubebuilder validation #5406
Bug 1999668 : Azure: Ensure destroy doesn’t panic when invalid credent… #5314 Bug 1964380 : azure upi: do not create etcd DNS records #5394 Alibaba: fix: remove the default value #5410
libvirt: add doc on a default load balancer configuration for libvirt #4930
vendor: update terraform-provider-google for rate limit fix #5417
Alibaba: fix: remove unused ResourceGroupID #5431
Bug 2027387 : fix(ibmcloud): Do not compute image file checksum #5436 Alibaba: fix: remove the master node records #5422
OpenStack: Parallelize port deletion #5429
Bug 1968364 : azure: fix upi bug preventing using ed25519 keys #5407 Add Kiran and Caleb into Installer reviewers #5433
Alibaba: fix: use EXACT search mode #5411
baremetal: add NetworkConfig field #5207
Alibaba: fix: update comment on ResourceGroupID #5415
fix/alibaba-slb: remove unused listeners, and set kube-apiserver to HTTP/6080 #5427
Alibaba: Update tag and API types to mirror other providers #5381
Alibaba: update tags for cloud resources #5385
Alibaba: fix: use the max function #5414
Revert “Workaround golang linux/arm64 link error” #5402
remove MCO manifests #5383
feat(ibmcloud): Support VPC dedicated hosts #5295
Alibaba: support to create a resource group #5378
Use openshift/api instead of machine-api-operator #5350
Bug 2015837 : openstack: unset OS_CLOUD for running Terraform #5398 Vendor: Bump API for Azure Marketplace Images #5393
alibaba: implement cluster destroy #5348
upi/aws/cloudformation: make bootstrap instance type configurable #5400
Alibaba Cloud Provider: remove the ingress record. #5396
vSphere: Set default disktype to thick not eager #5395
Update code and Dockerfiles for golang 1.17 #5397
update registry.ci.openshift.org/ocp and origin images to 4.10 #5358
Bug 1960378 : Relax the imageContentSource validation #5346 IPI for vSphere w/ existing resource pool #5136
Bug 2016008 : aws: add newly supported regions for arm64 #5377 Alibaba: add metadata server IP validation #5360
Update registry.ci.openshift.org/origin image to 4.9 #5237
Bug 2021607 : Relax vcenter hostname check #5367 update Packet UPI for Equinix Metal rename #5014
Bug 1965969 : aws: Output public zone id correctly when deleting hosted dns records #5343 docs: correct spelling in docs #5165
Bug 2003113 : Improve host role management during assets creation #5205 openstack: Add stephenfin to owners #5354
vSphere IPI: Enable thin provisioning via the OVA import #4664
OWNERS_ALIASES: Removing Etienne #5363
Bug 2021364 : aws: remove invalid s3 permission #5232 Bug 1956776 : Fix network validation for UPI #5340 validation: Enforce strict unmarshalling of config #5307
Implement WithCustomExtractHostAddresses to gather bootstrap in stages #5355
openstack: Fix install config for openstack manifests #5349
azurestack: Fix destroyer to delete A records #5351
Alibabacloud recommitted and fixed #5333
Use Openshift Cluster API instead of MachineAPIOperator #5331
Bug 2004313 : azure: Skip making azure bootstrap ignition temp file #5296 Remove old RHCOS metadata (not stream metadata) #5252
Removes mjudeikis from OWNERS_ALIASES #5345
Bug 2016955 : Set AWS Bootstrap Type == Master #5334 Bug 1960378 : Relax the imageContentSource validation #5297 Fix broken data/unpack_test.go #5332
aws-ec2: add m6i as preferred instance type #5327
baremetal: fail if apiVIP and ingressVIP are set to the same value #5186
Bug 2013877 : Validate OpenStack supports resource tagging #5323 Vendor: Unpin kube-openapi #5324
Update OWNERS #5326
Bug 1956776 : Fix network validation #5317 Bug 2009253 : Add validation to check APIVIP is IPv4 in dual-stack for Bare Metal #5284 Bug 2006291 : baremetal: Prevent ProvisioningNetworkCIDR with host bits set #5233 Bug 2004596 : bump RHCOS 4.10 boot image metadata #5280 Bug 1917893 : bump oVirt terraform provider version which fix “Disk is locked” bug #5313 Remove kubevirt platform #5301
Bug 2012326 : gather-bootstrap: execute dbginfo script to collect debugging info on IBM Z systems #5281 Bug 2010921 : Azure Stack: add trust bundle to cloud config #5248 data/manifests/bootkube/cvo-overrides: Default to stable-4.10 #5312
vSphere: Split terraform into stages #5094
Bug 1956776 : Check if network is valid in install-config #4906 Bug 2012235 : IBM Cloud: Add RG to CP config #5294 baremetal: Move Dockerfile.ci to 4.10 images #5290
docs/dev/pinned-coreos: pass --no-signatures to plume cosa2stream #5268
Bug 2011893 : baremetal: check that driver supports secure boot #5285 Bug 2012233 : IBMCloud: Handle 5 rule SG limit #5289 ovirt: update of upi playbook files #5222
aws: Remove shared tags from user specified IAM roles #5286
feat(VSphere): validation of cpus/coresPerSocket in config #5217
IBM Cloud: provider config zones #5275
ovirt: remove dougsland from OWNERS_ALIASES #5282
Bug 1999734 : fix(ibmcloud): Add CIS CRN to infrastructure manifest #5182 azurestack: Add subnet nsg group association in terraform #5150
openstack: Update affinity docs #5274
ibmcloud: fix terraform formatting error from #5147 #5273
Bug 2010665 : do not modify cvo ignores for bootstrap-in-place #5271 Remove instanceType option m4 from AWS IPI default deployment #5162
Record rpm-ostree status and history in log-bundle #5130
Bug 1949672 : Update UPI ignition version to 3.2.0 #5164 Bug 1992777 : ibmcloud: Possible fix for “ibm_iam_authorization_policy” error #5147 libvirt: split up tf files into stages #5119
Bug 2009791 : Fix IBM Cloud config usage #5263 Make bootstrap image asset depend on rhcos image. #5267
Updating ose-installer-artifacts images to be consistent with ART #5221
openstack: Expose worker server group policy #5071
Bug 1955544 : Add ingress rules to master SG for compact clusters #5236 openstack: Move TFVars logic to own package #5264
Bug 2009699 : Fix RAM validation for openstack flavors #5260 Bug 2008119 : force cvo to ignore installer-provided resources #5258 Inject subnet names into IBM Cloud provider config #5234
open cluster-policy-controller ports for metrics #5105
vendor: Bump OpenShift API to Add Alibaba Platform #5216
Bug 2008599 : Azure Stack: Add Internal Load Balancer #5249 docs: libvirt: fix typo #5246
Bug 2000430 : bump cluster-api-provider-ovirt #5184 Block create cluster if bootstrapInPlace is set in install-config #5218
images: Fix jq not found error #5235
terraform/openstack: remove unused extra_tags #5226
pkg/destroy: log when writing quota for visibility #5204
Bug 2004600 : Remove duplicate ramdisk log container #5219 Updating ose-installer images to be consistent with ART #5194
fix(ibmcloud): Delete COS in recursive mode #5211
OWNERS: Prune crawford #5214
fix(ibmcloud): Allow NodePort access from all subnets #5188
Update baremetal approvers/reviewers #5213
Bug 2002567 : OpenStack: Fix links in SR-IOV workers doc #5201 baremetal: Specify entrypoint when starting inspector #5208
Typo fixing from Github to GitHub #5206
pkg/destroy/gcp: report cluster footprint in quota #5158
Bug 1994142 : fix(ibmcloud): Add more cloud config fields #5152 Bug 2001317 : openstack: Inaccurate MissingQuota error #5197 Bug 1993364 : Consider all Networks on Router clean up #5193 Bug 1993364 : openstack/destroy: fix Kuryr/BYON #5191 bring example in line with the default value #4971
Update OWNERS #5172
gcp upi: clarify ROUTER_IP needs to be set #5167
UPI: Add yq to images for ASH CI #5160
docs: fix broken link to CVO/operators.md in operators.md #5141
libvirt docs update when systemd-resolved is in use #5132
Add SRIOV Support for Kubevirt Provider #5088
Full changelog
OCPBUGS-45451 : Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.19 #336 OCPBUGS-42132 : set max soft bulk taint count to zero #334 OCPBUGS-39543 : Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.18 #331 OCPCLOUD-2739 : Bump deps to 1.31 #333 SPLAT-1719 : Remove Alibaba #330 NO-JIRA: Update OWNERS #329
OCPBUGS-35952 : add aws zone-id to ignore labels #328 OCPCLOUD-2617 : Bump k8s to 1.30 #327 OCPBUGS-34151 : Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.17 #323 AUTH-482 : set required-scc for openshift workloads #315 OCPBUGS-20565 : Set webhook minimum TLS version to 1.3 #320 OCPCLOUD-2493 : Add empty string as value for GpuType if GpuCount is empty 0 #317 OCPBUGS-31960 : Bump x/net to v.0.24.0 #318 OCPCLOUD-2493 : Update CAO to add upstream annotations #316 OCPCLOUD-2523 : add ExpanderOrderList api option #304 OCPBUGS-29863 : Apply hypershift cluster-profile for ibm-cloud-managed #314 OCPBUGS-28207 : update min/max memory limit documentation #313 MIXEDARCH-429 : Revert “OCPBUGS-18137: Provide the architecture of the control plane as argument to –scale-up-from-zero-default-arch” #311 OCPBUGS-28230 : add FallbackToLogsOnError for easier debugging #312 MIXEDARCH-429 : Add the environment variable value for CAPI_SCALE_ZERO_DEFAULT_ARCH #297 OCPCLOUD-2432 : Bump k8s packages to v1.29 #310 OCPBUGS-25559 : Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #305 OCPBUGS-25633 : Add Snyk file to exclude vendor directory on scan #306 OCPBUGS-24911 : Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #303 OCPBUGS-24102 : Updating ose-cluster-autoscaler-operator-container image to be consistent with ART #302 OCPCLOUD-2137 : Check scale from zero annotations on MachineSets #294 OCPBUGS-21791 : Bump x/net package to v0.17.0 #295 Update OWNERS #296
OCPCLOUD-2196 : Update dependencies k8s 1.28 #293 OCPBUGS-18137 : Provide the architecture of the control plane as argument to –scale-up-from-zero-default-arch #284 OCPBUGS-18954 : Ensure status reporter caches exit if they don’t sync #285 OCPBUGS-19411 : cluster-autoscaler-operator: clusterrole add clusteroperators watch #287 OCPBUGS-19169 : Updating ose-cluster-autoscaler-operator images to be consistent with ART #286 OCPBUGS-18278 : Address long acquire times during upgrade #281 OCPBUGS-18338 : Fix CI by running tests natively by default #282 Reconcile when external process change the clusteroperator status #279
OCPBUGS-14356 : add nutanix labels that should be ignored #275 CNF-5642 make operator optional #269
OCPCLOUD-2061 : Rebase dependencies to k8s 1.27 #274 Updating ose-cluster-autoscaler-operator images to be consistent with ART #273
OCPBUGS-10105 : Updating ose-cluster-autoscaler-operator images to be consistent with ART #271 Bug 1943194 : update GPU resource limits type to have validation #268 Update OWNERS #270
revert GPU label changes from pr 223 #267
: Update tooling in Cluster Autoscaler Operator #266
Add infrastructures resource to config.openshift.io #265
Allow infrastructures.config.openshift.io to be listed #264
Register configv1 types to schemes #262
Updating ose-cluster-autoscaler-operator images to be consistent with ART #259
: Update CAO to ignore platform related zone labels #260
Update OWNERS #261
: Set default container for operator #258
Add client certificate and key to service monitor #249
Updating ose-cluster-autoscaler-operator images to be consistent with ART #248
OCPCLOUD-1677 : add flag for duplicated events #253 Bug 1997396 : fix an error with autoscaler alert rules #254 OCPBUGS-1411 : Bump k8s deps to 1.25 #252 Bug 1997396 : update alerts for resource limits #250 OCPCLOUD-1427 : Expose autoscaler “–balancing-ignore-label” flag through CRD #251 Add verbosity option to ClusterAutoscaler object #247
Bug 2087039 : update dependencies to K8s 1.24, go 1.18 #246 Bug 2067803 : Bump prometheus/client_golang #242 Bug 2063194 : add leader election flags to autoscaler deployment #241 add capi version to autoscaler deployment #240
Updating ose-cluster-autoscaler-operator images to be consistent with ART #238
Bug 2034484 : fix: missed rbac and latest library-go #236 Bug 2026178 : update alerts to match style guidance #233 Library go bump #235
Update makefile to support podman #234
OCPCLOUD-1278 : add scale-down-utilization-threshold to CAO #226 update to Golang1.17 #227
update owners file #231
Bug 2025230 : Change ClusterAutoscalerUnschedulablePods severity to info #228 Bug 1943194 : add logic to detect GPU capacity and update accordingly #223 Updating ose-cluster-autoscaler-operator images to be consistent with ART #222
Full changelog
OCPBUGS-45724 : Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.19 #554 API-1835 : bump library-go #552 WRKLDS-1449 : bump(k8s): update k8s.io/* dependencies to v1.31.1 #547 API-1835 : operator client update #551 create CRDs from openshift/api #550
no-jira: Update OWNERS #549
OCPBUGS-41260 : Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.18 #548 no-jira: Rename Dockerfile #546
NO-JIRA: update library-go #544
OCPBUGS-34367 : Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.17 #543 API-1783 : bump(k8s): bump k8s version to v1.30.0 #540 WRKLDS-1168 : tolerate node-role.kubernetes.io/control-plane:NoExecute #539 OCPBUGS-30489 : bump(google.golang.org/protobuf)=v1.33.0 #538 WRKLDS-1071 : bump(library-go)=release-4.16 #536 OCPBUGS-29566 : Apply hypershift cluster-profile for ibm-cloud-managed #535 OCPBUGS-23900 : README: fix dynamicResourceAllocation field name #534 OCPBUGS-23900 : Profile customizations: dynamic resource allocation through TechPreviewNoUpgrade feature gate #532 AUTH-481 : add PSa labels to openshift-kube-scheduler-operator namespace #533 NO-JIRA: readme: describe mapping between logLevel and log level #531
NO-JIRA: README: add notes about dumping KS’s node cache #530
OCPBUGS-21846 : sync(library-go): revision_controller: update last revision only when a revision is completely rendered #526 OCPBUGS-23631 : Add .snyk file to exclude vendor and ignore unit tests #524 OCPBUGS-24915 : Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #522 TRT-1420 : Bump openshift/library-go to pick up revision_controller revert #521 OCPNODE-1890 : Bump k8s api to v0.29.0 #510 OCPBUGS-24915 : Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #519 OCPBUGS-24915 : Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #517 OCPBUGS-24106 : Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART #513 OCPBUGS-24218 : Annotate serviceaccount-ca with ownership information #511 OCPBUGS-23463 : bump(library-go) #512 NO-JIRA: README.md: steps for enabling profiling, collecting heap and running go tool pprof #507
OCPNODE-1886 : Migrate from kubescheduler.config.k8s.io/v1beta3 to v1 #508 OCPBUGS-21734 : Bump openshift/library-go to disable http/2 by default #503 OCPBUGS-21734 : Bump deps to address CVE-2023-44487 #500 bump(openshift/client-go,library-go) #498
OCPBUGS-16794 : installerpod: change pod manifest mode to 0600 #496 OCPBUGS-19175 : Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #493 Bump openshift/* libs #492
Update to Kubernetes 1.28.2 #491
STOR-1425 : Update to Kubernetes 1.28.1 #490 OCPBUGS-14052 : KubeSchedulerDown: set runbook_url annotation #489 OCPBUGS-15256 : Sync openshift/api to reduce installerpod configmap based file permissions to 0600 #488 remove loglevel in deploy #487
OCPBUGS-14323 : Change manifest directory permissions #485 Remove featureset flag and use only the manifest #484
STOR-1263 : Bump k8s 1.27 #472 use standard featuregate library from API #483
OCPBUGS-12074 : Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #479 Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #466
OCPBUGS-10568 : migrate to using lease objects for leader election #476 disable debug pporf with unauthenticated port #468
WRKLDS-705 : Bump openshift/api to enable DynamicResourceAllocation through TechPreviewNoUpgrade #463 WRKLDS-649 : Guard pod set readiness probe endpoint explicitly #459 OCPBUGS-6261 : bump(k8s): 1.26.1 #460 Add client certificate and key to service monitor #434
remove use of deprecated klog flags #457
Revert “Drop log flags removed in k8s 1.26” #456
bump (openshift/api) for CSIMigration* feature gates #455
Drop log flags removed in k8s 1.26 #454
Drop flags removed in k8s 1.26 #453
OCPBUGS-3041 : guard controller: set an explicit hostname to avoid name collisions #446 bootstrap-kube-scheduler: specify resources.requests #445
library-go vendoring for installer cmd timeout #444
Bump openshift/api to bring the MatchLabelKeysInPodTopologySpread enabled in TPNoUpgrade #442
trt-589 bump library-go #441
Bump go.mod golang version to 1.19 #440
k8s 1.25.0 #438
Describe how to increase log level of kube-scheduler instances #436
Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #433
Update owners #432
Bug 2062459 : Introduce sync unit test #430 Bug 2086092 : bump to k8s v0.24.0 #420 Bug 2062459 : Fix bootstrap leader election config #428 Bug 2064024 : README: fix scheduler configuration formatting #427 Bug 2064024 : Update library-go to 80f9619c2 #425 Fix debugging information #424
manifests/deployment: comply to restricted pod security level #421
[rebase v1.24] remove –port flag from bootstrap #422
Update OWNERS #419
Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #406
Bug 2053582 : Track static pod lifecycle #417 Bug 2053582 : Track static pod lifecycle #415 Update resourcelock to configmapleases #412
Bump(openshift/api): to get CSI changes #411
Do not wait for a port which is no longer used by the scheduler #410
update cert injection annotations to beta #409
Bug 2029470 : update library-go to get rapid installer pod fixes #407 Bug 2035986 : Replace deprecated annotation #393 Bug 2042049 : Delete feature gates removed from k8s.io/kubernetes/pkg/features/kube_features.go #401 Bug 2039414 : Update KubeSchedulerConfig to v1beta3(default in 1.23) #395 Bug 2005901 : Sync the library-go #397 Bug 2033751 : Return Error when trying to use Scheduler Policy #390 Bug 2040132 : drop –port flag #398 Bug 2035927 : Replace NodeResourcesLeastAllocated/NodeResourcesMostAllocated plugins with NodeResourcesFit #392 Bug 2005901 : Bump library-go #396 Bug 2038968 : bump(openshift/api): to get CSI migration gates switched off #394 Bug 2005901 : Guard controller pdb #373 Bug 2034515 : bump library-go #388 Upgrade library-go version #387
Bump to k8s 1.23 #386
bump(library-go): to gather a fix for static pod UID version #384
Bug 2026352 : Sync with library-go to pick fixes for pruner panic #383 Bug 2002300 : Disable balancedAllocation and add weight for HighNodeUtilization profile #378 update scheduler metrics service selector #382
Fix gomod #377
Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #375
bump(*): library-go #376
bump(openshift/api): to get fix for typo in feature gate #374
Bug 2010354 : Make alert consistent with the alerting-consistency guidelines #372 podsecurity: enforce privileged for openshift-kube-scheduler namespace #371
Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #369
Bug 2001856 : bump libgo and related deps #368 Updating ose-cluster-kube-scheduler-operator images to be consistent with ART #367
Full changelog
OCPBUGS-45597 : Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.19 #591 SO-142 : Periodic sync of OKD samples #582 SO-139 : Update the k8s API version #584 SO-138 : Periodic sync of supported OCP samples #583 SO-137 : Support updating the library separately for OKD and for OCP. #581 OKD-225 : Add back mysql samples #571 OCPBUGS-42265 : Fix the rails template before the upstream accepts or PR #574 OKD-225 : Sync samples - OKD CI is completely broken currently due to removed containers #569 OKD-225 : update okd dockerfile builder and base images #566 OCPBUGS-38994 : Fix library-sync.sh to handle renames in unsupported samples #562 OCPBUGS-38926 : Update Go version, API version and vendored libs to the same versions as in the openshift/api. #561 OCPBUGS-38273 : Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.18 #559 NO-ISSUE: Only pick up the changes from the supported imagestreams and templates in library-sync.sh. #553
KUBESAW-162 : add mfrancisc and metlos as owners #549 SO-121 : Syncing the library for only S2i Samples for OCP 4.16 #543 Revert “SO-121: Resync Libray for 4.16” #542
SO-121 : Resync Libray for 4.16 #540 OCPBUGS-31303 : bump K8s version to 29.2 #536 AUTH-482 : set required-scc for openshift workloads #535 OCPBUGS-26992 : Align builder and base for Dockerfile.okd with Dockerfile #531 OCPBUGS-28230 : add FallbackToLogsOnError for easier debugging #532 OCPBUGS-24787 : Updating ose-cluster-samples-operator-container image to be consistent with ART #530 OCPBUGS-24787 : Updating ose-cluster-samples-operator-container image to be consistent with ART #527 SO-119 : Fix mariadb import url in OKD #525 SO-118 : Bumping the K8s to 28.2 and golang to 1.20 #524 SO-117 : Library Sync for OCP release 4.15 #522 OCPBUGS-22225 : Sync library to remove invalid dockerhub references for OKD #519 Use latest tag for network-tools imagestream #518
OCPBUGS-18857 : Updating ose-cluster-samples-operator images to be consistent with ART #517 manifests: Drop explicit runlevel from CRD manifest #515
OCPBUGS-16435 : Bump k8 to v0.27.2 for ocp 4.14 #514 OCPBUGS-16403 : Update Cluster Sample Operator dependencies and libraries for OCP 4.14 #511 reconcile status when clusteroperator changes #510
OCPBUGS-15754 : Update Jenkins and Jenkins Agent Base image versions #504 OCPBUGS-14491 : Updating to use Jenkins 4.13 images #502 OCPBUGS-12775 : Update Cluster Sample Operator dependencies and libraaies for OCP 4.14 #500 Updating ose-cluster-samples-operator images to be consistent with ART #499
OCPBUGS-10910 : Add network tools imagestreams #495 Updating ose-cluster-samples-operator images to be consistent with ART #493
Fix jira component #494
update Jenkins to use v4.12 imagestreams #491
OCPBUGS-855 : When setting allowedRegistries urls the openshift-samples operator is degraded #487 OCPBUGS-6811 : Update Cluster Sample Operator dependencies and libraries for OCP 4.13 #485 Change importMode to preserveOriginal for Openshift imagestreams #482
OCPBUGS-6579 : update sample imagestreams with latest 4.11 image using specific image tag reference #483 OCPBUGS-4357 : Bump k8s master #476 OCPBUGS-4166 : Update Cluster Sample Operator dependencies and libraries for OCP 4.13 #474 OCPBUGS-3426 : Update Cluster Sample Operator dependencies and libraries for OCP 4.12 #471 Updating ose-cluster-samples-operator images to be consistent with ART #470
Updating ose-cluster-samples-operator images to be consistent with ART #465
Add client certificate and key to service monitor #464
Updating ose-cluster-samples-operator images to be consistent with ART #435
Bug 2086086 : Update Cluster Sample Operator dependencies and libraries for OCP 4.11 #433 update jenkins CPaaS image refs prior to 4.11 GA #432
Bug 2086086 : Update Cluster Sample Operator dependencies and libraries for OCP 4.11 #431 Bug 2095256 : Samples Owner needs to be Updated #429 Bug 2086086 : Update Cluster Sample Operator dependencies and libraries for OCP 4.11 #428 AUTH-133 : manifests/deployment: comply to restricted pod security level #425 Updating ose-cluster-samples-operator images to be consistent with ART #426
JNKS-289 : pull in jenkins imagestream updates (add back maven/nodejs streams) #422 Jira SO-19: Make sure template and imagestream api version is groupified #420
JNKS-287 : remove imagestream manifest refs; remove override of jenkins images with payload images #416 Bug 2010364 : OpenShift Alerting Rules Style-Guide Compliance #419 Bug 2067823 : Taking care of CVE-2022-21698 #418 Bug 2064610 : Remove duplicate v1 from cakephp-mysql templates #417 manifests: Add capability.openshift.io/name #414
Updating ose-cluster-samples-operator images to be consistent with ART #412
Bug 2027745 : Allowing ImageStream creation when config registry empty #406 Bug 2033720 : Synching SSO library #411 upd rhel7 Dockerfile in case still used for rhel7 worker nodes #410
Bug 2033720 : Bump k8 dependencies to v0.23.1 #409 Bug 2033720 : Library synchronization for OCP 4.10 #408 Bug 2027745 : Move openshift build-machinery-go dependency #407 Update OWNERS #402
Remove single node prod cluster profile annotation as it is not used #405
Bug 2007757 : Including Template in must-gather related objects. #399 Bug 2006947 : fix proxy portion of tbr inaccessible check #397 Updating ose-cluster-samples-operator images to be consistent with ART #396
Bug 2002368 : acccount for image api returning invalid on imagestream create based on allowed/blocked registry settings #394 Bug 2003683 : fix recently introduced panic when conflict errors occur #395 Bug 1993840 : more avoiding immediate degraded on intermittent API errors #391 Updating ose-cluster-samples-operator images to be consistent with ART #390
Full changelog
ART-10934 : Move sigstore to release-3 key #63 OCPBUGS-41185 : Updating ose-cluster-update-keys-container image to be consistent with ART for 4.18 #62 Revert “OCPBUGS-37770: Revert #58 “OTA-1304: manifests.rhel/0000_90_openshift-cluster-image-policy: New manifest”” #60
OCPBUGS-37770 : Revert #58 “OTA-1304: manifests.rhel/0000_90_openshift-cluster-image-policy: New manifest” #59 OTA-1304 : manifests.rhel/0000_90_openshift-cluster-image-policy: New manifest #58 OCPBUGS-35528 : keys: Update Red Hat keys to use SHA256 signatures #57 OCPBUGS-29570 : Apply hypershift cluster-profile for ibm-cloud-managed #54 OCPBUGS-24932 : Updating ose-cluster-update-keys-container image to be consistent with ART #53 OCPBUGS-24115 : Updating ose-cluster-update-keys-container image to be consistent with ART #52 OCPBUGS-19189 : Updating ose-cluster-update-keys images to be consistent with ART #51 Adding the new CI Signer public key #49
Clean up owners file as part of DPP-10343 #46
Updating ose-cluster-update-keys images to be consistent with ART #45
Updating ose-cluster-update-keys images to be consistent with ART #43
Update OWNERS #44
OWNERS: Prune crawford #42
Full changelog
OCPBUGS-45922 : CONTRIBUTING.md: Rename master to main #1125 OTA-1269 : USC: Add DevPreviewNoUpgrade-gated manifests #1107 NO-ISSUE: Simplify the preconditions code #1127
OCPBUGS-45777 : Updating cluster-version-operator-container image to be consistent with ART for 4.19 #1123 OCPBUGS-44860 : pkg/payload/precondition/clusterversion: New GiantHop update precondition #1112 OCPBUGS-45324 : deps: bump golang.org/x/net to 0.31.0 #1115 OCPBUGS-31462 : Set openshift.io/required-scc: privileged annotation in version pods #1106 OTA-1307 : pkg/cvo/updatepayload: Drop the Job controller for release-manifests downloads #1105 MULTIARCH-4559 : pkg/featuregates: Fix statusReleaseArchitecture enablement #1111 MULTIARCH-4559 : pkg: Propagate Release.Architecture #1110 OPRUN-3588 : Update openshift/api to pick up OLM V1 v4.18 capability sets #1108 OTA-1269 : Scaffold Update Status Controller (USC) #1091 OCPBUGS-44018 : pkg/cvo/availableupdates: Preserve update advice on update-service failures #1098 OCPBUGS-22442 : Fix TestRunGraph/mid-task_cancellation_with_work_in_queue_does_not_deadlock flake #1102 NO-JIRA: task graph: test speedup and code cleaup #1101
NO-JIRA: task graph: improve TestRunGraph tests #1100
NO-JIRA: task graph: comments and cleanups #1099
NO-JIRA: OWNERS: Update the username of David Hurta #1090
NO-JIRA: Simplify unit test TestCVO_UpgradeVerifiedPayload #1088
OCPBUGS-41111 : vendor: Update openshift/api to pick up v4.17 and v4.18 capability sets #1086 OCPBUGS-41132 : Updating cluster-version-operator-container image to be consistent with ART for 4.18 #1083 OCPBUGS-15200 : Filter out shallowly UpdateEffectNone errors from a MultipleErrors message in the Failing condition #1050 OCPBUGS-37770 : cmd/render: Add –feature-gate-manifest-path option #1078 OCPBUGS-37770 : pkg/payload/render: Include release image (Cluster)ImagePolicy #1076 OCPBUGS-37345 : Revert “OCPBUGS-35994: Revert “OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream”” #1072 no-jira: TestCVO: set known caps from configv1.KnownClusterVersionCapabilities #1075
no-jira: TestSetCapabilities: use KnownClusterVersionCapabilities for known keys instead of picking DefaultCapabilitySet #1073
OCPBUGS-32678 : Fix a panic caused by a data race #1070 OCPBUGS-33983 : vendor: Update openshift/api to pick up zz_generated.crd-manifests #1045 OCPBUGS-35994 : Revert “OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream” #1061 Revert “METAL-1053, OCPBUGS-33983: Remove baremetal dependency on MachineAPI capability” #1063
METAL-1053 : Remove baremetal dependency on MachineAPI capability #1051 NO-JIRA: Update OWNERS #1058
OCPBUGS-35464 : Updating cluster-version-operator-container image to be consistent with ART for 4.17 #1056 Revert “OCPBUGS-34287: Updating cluster-version-operator-container image to be consistent with ART for 4.17” #1055
NO-JIRA: typo change previousily to previously #1054
OCPBUGS-34287 : Updating cluster-version-operator-container image to be consistent with ART for 4.17 #1047 OCPBUGS-35236 : Revert: Add support for Custom Certificate Authorities for custom signature stores” #1052 OCPBUGS-24700 : Add support for Custom Certificate Authorities for custom signature stores #1030 OTA-1160 : pkg/cvo/reconciliation_issues: Publish ClusterOperator transitionStart #1044 NO-ISSUE: pkg/payload/task: Drop unused Requeued property #1043
NE-1318 : Add always-enable-capabilities flag and set Ingress as always enabled #946 OCPBUGS-9133 : pkg/cvo/metrics: Connect ClusterVersion to ClusterOperatorDown and ClusterOperatorDegraded #746 AUTH-482 : set required-scc for openshift workloads #1038 NO-ISSUE: docs/user/tasks-*by-number-and-component.svg: Update to 4.15 #1042
OTA-1159 : pkg/cvo: Render status.Failure in ReconciliationIssues #1041 OTA-1210 : *: Add –update-service command-line option #1035 OTA-1159 : [2 ⁄3 ] Maintain ReconciliationIssues condition #1032 OCPBUGS-29868 : Apply hypershift cluster-profile for ibm-cloud-managed #1037 NO-JIRA: Runbook URLs for ClusterOperatorDown and ClusterOperatorDegraded #1036
OCPVE-659 : bump openshift/api with new capability #979 OTA-1159 : [1/x] Refactor syncStatus for testability #1031 OCPBUGS-18454 : Avoid using risk names as condition reasons when invalid #962 OCPBUGS-7714 : yield lock while retrieving payload #1005 NO-JIRA: manifests: fix service manifest filename #1027
OCPBUGS-27468 : bump(openshift/api)=master to pick up new TechPreviewNoUpgrade features #1026 OCPBUGS-7714 : Refactor & improve SyncWorker lock code #1020 OTA-1169 : deps: bump openshift/api and k8s.io/client.go #1022 OCPBUGS-25862 : CO health: only track current in-progress upgrade start #1011 OCPBUGS-26014 : clusterOperatorBuilder: Reconcile metadata on COs #1012 OCPBUGS-25708 : pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls #1009 OCPBUGS-24535 : pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream #996 OCPBUGS-24963 : Updating cluster-version-operator-container image to be consistent with ART #1006 OCPBUGS-25055 : pkg/cvo/sync_worker: Verification-failure details for unforced updates too #1003 OCPBUGS-24963 : Updating cluster-version-operator-container image to be consistent with ART #1004 OTA-917 : pkg/customsignaturestore: Implement signatureStores customization #994 OCPVE-646 : add cloud credential capability #963 OTA-855 : Create GET requests to the Prometheus API server #999 OCPBUGS-23290 : install/0000_90_cluster-version-operator_02_servicemonitor: ‘oc get …’ for CannotRetrieveUpdates #995 OCPBUGS-24138 : NO-JIRA: Updating cluster-version-operator-container image to be consistent with ART #1000 OCPBUGS-23377 : to reduce log noise, only log sync_worker messages on retry or payload change #997 OCPBUGS-19391 : do not reconcile rules if aggregationRule is set #993 OCPBUGS-8079 : install/0000_90_cluster-version-operator_02_servicemonitor: Drop $ from ${{ #992 OCPVE-740 : vendor: bump openshift/api #984 OCPBUGS-21933 : Bump http-related deps #983 OCPVE-673 : Bump API to Add OLM Capability #971 Revert openshift/api bump PR merged by mistake (977) #978
OCPVE-659 : bump openshift/api #977 OCPBUGS-19868 : pkg/clusterconditions/cache: Avoid panic on all-fresh-cache evaluation #975 OCPBUGS-19512 : pkg/clusterconditions/promql: Warm cache with 1s delay #939 OCPBUGS-18386 : Properly reconcile SCC resources #966 OTA-854 : Add configurable CVO knobs for risk-evaluation PromQL target #926 OCPBUGS-18984 : pkg/payload/precondition/clusterversion/etcdbackup: Drop precondition #968 OCPBUGS-19222 : Updating cluster-version-operator images to be consistent with ART #970 OCPBUGS-18567 : lib/resourcemerge/apps: Cover paused and other spec properties in EnsureDeployment #965 OCPBUGS-13308 : Simplify user-facing messages on risk evaluation throttling #955 OCPBUGS-17418 : Really handle DeletedFinalStateUnknown correctly #954 CNF-9385 : add ImageRegistry capability #950 OCPBUGS-17418 : Handle cache.DeletedFinalStateUnknown #952 docs/user/tasks-*by-number-and-component.svg: Update to 4.13 #949
Dockerfile: bump to 1.19 and use public UBI pullspec #944
pkg/payload: De-noise ‘excluding …’ logs #945
bump api version to add new capability #941
pkg/cvo/metrics: Doc from_version semantics for cluster_version{type=“completed”} #929
Code cleanups for golangci-lint failures #942
OTA-559 : Migrate to (*Manifest).Include(…, overrides) #934 OCPBUGS-9070 : Fix hotlooping on Cronjob resources #910 Updating cluster-version-operator images to be consistent with ART #932
Updating cluster-version-operator images to be consistent with ART #930
Updating cluster-version-operator images to be consistent with ART #928
syncStatus: Reduce verbosity when syncing nothing of interest #922
Update dnsPolicy to allow consistent resolution of the internal LB #920
OTA-941 : pkg/payload/precondition/clusterversion/rollback: New precondition #918 Updating cluster-version-operator images to be consistent with ART #911
OCPBUGS-5469 : pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #909 pkg/cvo: code cleanups #902
OCPBUGS-7419 : Trigger new sync round on ClusterOperator Available changes #904 install/0000_90_cluster-version-operator_02_servicemonitor: Add ClusterReleaseNotAccepted #906
OCPBUGS-6097 : CVO hotloops on ImageStream and logs the information incorrectly #894 OCPBUGS-6292 : Update golang.org/x/net/http2 for CVE-2022-41717 #901 Bug 2090680 : RetrievePayload: Improve timeouts and cover behavior with tests #896 pkg/cvo: Set ‘controller’ in our ownerReferences #900
pkg/cvo/sync_worker: Fix “The sync worker already has a pending notification” formatting #898
vendor: update openshift/api for NodeTuning capability #883
Bug 2089138 : CVO hotloops on ValidatingWebhookConfiguration #893 logging: consistently use RFC3339 in log messages #889
OCPBUGS-702 : Fix removing caBundle field of CRDs when ...inject-cabundle=true #870 lib/validation: Drop “a previous version” from desiredUpdate validation #888
Adding David to approvers list and removing Jack #891
upgradeable: improve logging and refactor #886
start.go: simplify code for computing sync period #887
OCPBUGS-5505 : Set upgradeability check throttling period to 2m #882 Revert “pkg/cvo/updatepayload.go: timeout payload retrieval” #881
pkg/cincinnati: Set User-Agent for Cincinnati requests #839
Bug 2090680 : pkg/cvo/updatepayload.go: timeout payload retrieval #846 tests: fix rare nil dereference in TestCache #875
pkg/payload: code cleanups #877
OTA-817 : Support ClusterVersion spec DesiredUpdate Architecture field #860 OCPBUGS-4986 : pkg/payload/precondition: Do not claim warnings would have blocked #876 OTA-844 : pkg/cvo/metrics: Add ‘reason’ to cluster_operator_up #868 OTA-560 : Improve developer-oriented docs #871 Updating cluster-version-operator images to be consistent with ART #873
OCPBUGS-1443 : Avoid using a lister before client caches sync #874 OTA-560 : Modernize README.md to be user-centered #869 Build CVO from UBI8 instead of obsolete origin-v4.0:base #872
Bug 2089093 : CVO hotloops on OperatorGroup due to the diff of “upgradeStrategy” #862 update library-go to pick up feature-set annotation change #853
Add myself as approver and David Hurta as a reviewer #864
OCPBUGS-1458 : Allow CVO to update KUBERNETES_SERVICE_HOST with LB address #851 pkg/cvo/cvo_scenarios_test.go: Remove status check from TestCVO_UpgradeFailedPayloadLoadWithCapsChanges #857
resourcemerge: cleanup deprecated function calls #858
OCPBUGS-2727 : Do not fail precondition check for UnknownUpdate #856 Bug 2033499 : Don’t overwrite accepted risks if local payload #852 OCPBUGS-2125 : Allow unknown capabilities during payload load and implicitl enablement checking #850 bump api version to add new capability #835
Bug 2033499 : Populate acceptedRisks in ClusterVersion History #841 Dockerfile: Bump to Go 1.18 #845
Fix ups from gofmt 1.19 #849
Revert “Fix ups from gofmt 1.19 and yamllint” #848
Fix ups from gofmt 1.19 and yamllint #844
Updating cluster-version-operator images to be consistent with ART #842
OCPBUGS-1636 : pkg/cvo/sync_worker: Pre-create ClusterOperator in reconciling-mode too #840 Bug 1951835 : Handle report only sync errors #837 OCPBUGS-1402 : pkg/cvo/sync_worker.go: remove Lock/Unlock #832 OWNERS: Prune vrutkovs #838
pkg/cvo: add test utility functions #833
allow more than one featureset #821
OCPBUGS-575 : lib/resourcemerge/core: Reconcile seccompProfile in ensurePodSecurityContext #830 Bug 2006611 : Upgrade takes too much time when upgrading via –to-image #808 OCPBUGS-569 : CVO History Pruner return not assigned to config.Status.History #828 bump api version to add new capability #801
lib/capability: Sort all slices after building them #827
Bug 1951835 : Propagate Degraded to update status #662 Bug 2010365 : OpenShift Alerting Rules Style-Guide Compliance #800 Restore ‘Pull arch from payload’ and fix #813
/pkg/cvo: improve CV history pruning #805
Bug 2117033 : pkg/cvo/sync_worker: Trigger new sync round on ClusterOperator versions[name=operator] changes #818 pkg/cvo/status.go: sort implicitly enabled caps #814
pkg/cvo/sync_worker: Consolidate all ClusterOperator errors by reason #577
Revert “Pull arch from payload” #810
Pull arch from payload #796
Bug 2110590 : pkg/cvo/updatepayload: Set ‘readOnlyRootFilesystem: false’ #807 Bug 2109374 : pkg/clusterconditions/promql: Cap PromQL queries at 5 minutes #806 Bug 2094174 : pkg/cvo: reset payload load status #788 Bug 2108858 : lib/resourcemerge: change SecurityContext reconcile #804 Updating cluster-version-operator images to be consistent with ART #797
Bug 2100533 : remove local golang lint #792 Bug 2097067 : pkg/cvo: retain initial completed update history entry #791 Updating cluster-version-operator images to be consistent with ART #779
Bug 2091770 : pkg/cvo/updatepayload: Guard against ‘rm -fR -whatever’ with ./* #783 Bug 2071998 : pkg/cvo/updatepayload: Event when forcing through a sig-verification failure #763 Bug 2081895 : lib/resourcebuilder: Drop Get from check*Health functions #780 Bug 2079789 : capability: Init prior known from CV status #773 Bug 2084331 : vendor: Bump library-go to pick up manifest checkResourceEnablement fix #781 Bug 2081895 : lib/resourcebuilder/apiext: Restore check for Established=True CRDs #771 Revert “admin-gates: Add ack-4.11-kube-1.25-api-removals-in-4.12 gate” #775
Bug 2080429 : pkg/cvo/sync_worker.go: Save overrides and capabilities #770 admin-gates: Add ack-4.11-kube-1.25-api-removals-in-4.12 gate #772
Bug 2079789 : pkg/cvo/sync_worker.go: Initialize implicitlyEnabledCaps #768 Bug 2072389 : Do not save desired update on load failures #766 Bug 2070805 : pkg/cvo/updatepayload: Restore shell for rm globbing #767 Bug 2070805 : pkg/cvo/updatepayload: Shift previous-download removal into the job #765 Bug 2070854 : syncWorkerStatus: Avoid saving stale status values #759 Implicitly enable capabilities on updates #758
Bug 2070887 : pkg/cvo/sync_worker.go: set implicitly enabled caps earlier #761 pkg/cvo/sync_worker: Log only changed enabled capabilities #762
Bug 2070805 : pkg/cvo/updatepayload: Prune previous payload downloads #760 capability: disallow disabling, add enabling capabilities #754
Bump openshift/api to include new marketplace capability #757
pkg/cvo/metrics: Add a cluster_version_capability metric #755
vendor: update openshift/api #751
lib/capability: Sort status.capabilities arrays #752
pkg/cvo/sync_worker.go: ensure all of SyncWorkerStatus copied #750
pkg/payload: Log load-time manifest exclusion at V(2) #749
Consume post install static spec capabilities #744
Bug 2062568 : lib/resourcebuilder/batch: Stop waiting on Job deadline exceeded #748 Get cluster version object earlier in startup #741
Bug 1822752 : pkg/cvo: Fix ups from separating load from apply #683 #745 Bug 1822752 : pkg/cvo: Separate payload load from payload apply #683 Bug 2050946 : Fix wrong informer for feature-gate-stopper #739 pkg/payload: Log manifest exclusion #712
vendor: Bump openshift/api to pick up capabilities #737
Updating cluster-version-operator images to be consistent with ART #732
Bug 2050946 : pkg/featurechangestopper: Seed queue to guard against incorrect startingTechPreviewState #736 Bug 2009845 : pkg/cvo/sync_worker: Use current state, not suggested state, for guarding Initializing->Updating #733 pkg/cvo: Drop unused ‘workers’ argument from Operator.Run #719
Bug 2009845 : pkg/cvo/sync_worker: Log transition to updating #730 Bug 2027342 : Add notification for certificate changes #726 Bug 2009845 : pkg/cvo/sync_worker: Do not cancel sync workers on install-time target-version change #729 Bug 2009845 : Respect overrides changes during install (second round) #728 Revert “Bug 2009845: Respect overrides changes during install” #727
Bug 2009845 : Respect overrides changes during install #713 Bug 2034484 : Library go bump #716 Bug 2000938 : lib/resourcemerge/apps: Avoid hotlooping on implicit strategy #722 Bug 2034493 : *: Use –v=2 logging to drop client-side throttling noise #721 Bug 2033745 : pkg/cvo/availableupdates: Acount for default upstream in recent-change throttling #718 pkg/payload/precondition: File shuffling, drop ClusterVersion argument, etc. #708
Bug 2029785 : pkg/cincinnati: Fix panic for conditional edges overlapping with unconditional edges #707 pkg/start: Log and continue when we fail to retrieve the feature gate #706
pkg/featurechangestopper: Refactor to allow declaring work completion #704
Exclude featuregate.release.openshift/tech-preview=true manifests #694
Bug 2026560 : lib/resourcemerge/core: Merge volumeMounts by mountPath #703 Bug 2020107 : Remove run-level label #623 Bug 2028217 : lib/resourcemerge/apps: Default Deployment replicas to one #698 Bug 2027585 : pkg/cincinnati: Fix panic for conditional edges with risks after an invalid risk #697 Bumping the GOLANGCI_LINT_VERSION to v1.43.0 #695
Targeted edge blocking #663
Bug 2005407 : Changing the ClusterNotUpgradeable alert to info #659 install: Add description annotations to manifests #686
Bug 2022509 : cvo: Compare manifest group in getOverrideForManifest #689 Updating cluster-version-operator images to be consistent with ART #687
Bug 1990635 : Fixing the sync issue when desired version and channel changed at the same time #669 install/0000_00_cluster-version-operator_03_deployment: Set dnsPolicy: ClusterFirstWithHostNet #646
install: Drop single-node-developer profile #685
Adding docs to test CVO with custom update graph #681
Bug 1878925 : pkg/cvo/updatepayload: Drop history from target pullspec lookup #684 Adding seed to make rand.Float64() return random values #653
vendor: Bump openshift/api for targeted edge blocking #680
Bug 2014071 : lib/resourcemerge/imagestream.go: remove TagReference field dependency #677 Bug 2014071 : lib/resourcemerge/imagestream.go: Copy all data for new tag reference #674 Bug 2000938 : Ensure CVO applies appropriate Deployment strategy on update #650 podsecurity: enforce privileged for openshift-cluster-version namespace #668
Bug 2011896 : pkg/cvo/upgradeable: Include messages for multiple-reason Upgradeable=False #670 Unset listen option while running CVO locally [doc/dev] #667
.ci-operator: Bump to Go 1.16 #665
Bug 2005581 : install/0000_00_cluster-version-operator_03_deployment: Explicit kube-api-access #660 OWNERS: Prune crawford #656
Bug 2002834 : lib/resourcemerge/core: Remove unrecognized volumes and mounts #654 Updating cluster-version-operator images to be consistent with ART #655
pkg/cvo: Drop the explicit ‘upstream’ from our replacement ClusterVersion #640
Full changelog
OCPBUGS-45705 : Updating configmap-reload-container image to be consistent with ART for 4.19 #66 NO-JIRA: Update downstream to v0.14.0 #65
OCPBUGS-41241 : Updating configmap-reload-container image to be consistent with ART for 4.18 #64 OCPBUGS-34355 : Updating configmap-reload-container image to be consistent with ART for 4.17 #62 OCPBUGS-34355 : Updating configmap-reload-container image to be consistent with ART for 4.17 #61 MON-3671 : add machine424 and rexagod to OWNERS #55 OCPBUGS-24912 : Updating configmap-reload-container image to be consistent with ART #58 Updating configmap-reload-container image to be consistent with ART #57
OCPBUGS-19171 : Updating configmap-reload images to be consistent with ART #56 Updating configmap-reload images to be consistent with ART #52
OCPBUGS-10106 : Updating openshift-state-metrics images to be consistent with ART #51 Updating configmap-reload images to be consistent with ART #48
Updating configmap-reload images to be consistent with ART #47
OWNERS: Add Joao and myself, and move former team members to emeritus #46
Updating configmap-reload images to be consistent with ART #45
Bug 2067745 : Merge Upstream Master Branch #44 Updating configmap-reload images to be consistent with ART #42
Updating configmap-reload images to be consistent with ART #41
Updating configmap-reload images to be consistent with ART #40
OWNERS: cleanup #39
Updating configmap-reload images to be consistent with ART #38
Updating configmap-reload images to be consistent with ART #37
OWNERS: update #36
Full changelog
NO-JIRA: Add warning about repository being obsolete #244
NO-JIRA: Update OWNERS file #245
OSASINFRA-3529 : Bump Gophercloud to v2 #243 OCPBUGS-39471 : Updating csi-driver-manila-operator-container image to be consistent with ART for 4.18 #242 OCPBUGS-29240 : Add missing healthchecks #239 NO-JIRA: Cleanup duplicated resources requests #238
AUTH-482 : set required-scc for openshift workloads #234 STOR-1596 : Bump all deps for 4.17 #233 OCPBUGS-34090 : Updating csi-driver-manila-operator-container image to be consistent with ART for 4.17 #232 OCPBUGS-34090 : Updating csi-driver-manila-operator-container image to be consistent with ART for 4.17 #231 OCPBUGS-28230 : enforce termination message policy on all platform pods #229 STOR-1574 : Bump all deps #226 OCPBUGS-28934 : Updating csi-driver-manila-operator-container image to be consistent with ART for 4.16 #227 NO-ISSUE: Remove local manifests #208
STOR-1574 : Bump library-go #225 OCPBUGS-23809 : Bump opentelemetry libs #220 STOR-1714 : Release leadership on SIGTERM #223 STOR-1688 : Chore: add .snyk file to ignore false positives #218 OCPBUGS-24226 : setting TLSSecurityProfile with no minTLSVersion crashes controller #217 OCPBUGS-23306 : Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #214 OCPBUGS-24824 : Updating csi-driver-manila-operator-container image to be consistent with ART #213 STOR-1402 , STOR-1453 : update libraries and specify TLS_MIN_VERSION #212 OCPBUGS-9331 : Fix selector for manila-csi-driver-controller-metrics service #210 OCPBUGS-22357 : CVE-2023-44487: bump github.com/openshift/library-go to master #207 OCPBUGS-21940 : Update k8s.io/apimachinery and k8s.io/apiserver #206 OCPBUGS-21593 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #205 OCPBUGS-19166 : Updating csi-driver-manila-operator images to be consistent with ART #204 Configure User Agent #191
STOR-1440 : Restart controller Pods if metrics-serving-cert changed #198 OCPBUGS-12499 : Bump dependencies #197 Remove unused Dockerfile.openshift.ci file #193
Rework how we build the container image #194
OCPBUGS-14049 : Don’t cache OpenStack client #184 Revert “OCPBUGS-14049: Add secret informer” #192
OCPBUGS-16453 : Bump library-go #190 OCPBUGS-16783 : Chore: Update OWNERS #189 OCPBUGS-14049 : Add secret informer #187 STOR-1065 : Rework sidecar bindings to bind common ClusterRoles #186 OCPBUGS-14824 : Bump csi-driver-manila-operator library-go #183 STOR-1168 : Bump common libraries #182 Updating csi-driver-manila-operator images to be consistent with ART #181
Updating csi-driver-manila-operator images to be consistent with ART #180
Updating csi-driver-manila-operator images to be consistent with ART #179
OCPBUGS-8683 : Add management workloads annotations #175 OCPBUGS-8628 : Bump go.mongodb.org/mongo-driver to v1.5.1 #173 Updating csi-driver-manila-operator images to be consistent with ART #172
STOR-1019 : Bump to k8s 1.26 libs for OCP 4.13 #167 OCPBUGS-6301 : Address CVE-2022-41717 #165 Bug 2106736 : Add multiplePVsSameID capability #164 STOR-1078 : Add hostPaths necessary for SELinux mounts #162 Updating csi-driver-manila-operator images to be consistent with ART #161
OCPBUGS-4347 : set TLS cipher suites in Kube RBAC sidecars #160 OCPBUGS-1904 : Only deploy VolumeSnapshotClass when CRD exists #159 Updating csi-driver-manila-operator images to be consistent with ART #157
Ensure files follow go 1.19 formatting #158
Bug 2057637 : Include secrets to VolumeSnapshotClass #156 STOR-858 : Bump github.com/openshift/* and k8s.io/* #155 Bug OCPBUGS-944: Fix RBAC race during initial deployment #154
Expose CSI_FSGROUP_POLICY as an operator option #142
Updating csi-driver-manila-operator images to be consistent with ART #151
Bug 2090662 : SWEET32: Improve TLS configuration for Kube RBAC Proxy (cont) #149 Bug 2083153 : Fetch application credentials #148 Bug 2090662 : SWEET32: Improve TLS configuration for Kube RBAC Proxy #145 Bug 2089973 : bump libs to k8s 1.24 for OCP 4.11 #144 Updating csi-driver-manila-operator images to be consistent with ART #143
Bug 2074274 : Address CVE-2022-27191 #141 Bug 2067749 : Address CVE-2022-21698 #140 ci: enable more tests #138
Updating csi-driver-manila-operator images to be consistent with ART #137
shiftstack: Update OWNERS #135
Bug 2043130 : csi-driver-manila: Add external-snapshotter permissions to patch snapshots #136 Bug 2038934 : Add custom CA bundle support #134 Bug 2038053 : Bump k8s to 1.23 #133 Bug 2034537 : OWNERS: Update ShiftStack members #132 Normalize the storage class name when ShareType has invalid characters #131
Updating csi-driver-manila-operator images to be consistent with ART #130
Updating csi-driver-manila-operator images to be consistent with ART #128
Updating csi-driver-manila-operator images to be consistent with ART #121
Bug 2001620 : Do not degrade cluster on failure to reach Manila #120 Full changelog
OCPBUGS-45401 : Updating csi-attacher-container image to be consistent with ART for 4.19 #81 STOR-2018 : Rebase external-attacher to v4.7.0 for OCP 4.18 #80 Updating csi-attacher-container image to be consistent with ART for 4.18 #79
STOR-1593 : Rebase external-attacher to v4.6.1 for OCP 4.17 #76 OCPBUGS-36455 : Rename Dockerfile to Dockerfile.ocp #77 OCPBUGS-34440 : Updating csi-attacher-container image to be consistent with ART for 4.17 #75 OCPBUGS-34098 : Updating csi-attacher-container image to be consistent with ART for 4.17 #74 STOR-1573 : Rebase external-attacher to v4.5.1 for OCP 4.16 #72 OCPBUGS-30437 : CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #71 OCPBUGS-27242 : fix or ignore snyk errors for ocp storage repos #70 OCPBUGS-25576 : Updating csi-attacher-container image to be consistent with ART #69 STOR-1688 : Chore: add .snyk file to ignore false positives #68 OCPBUGS-25053 : Updating csi-attacher-container image to be consistent with ART #67 OCPBUGS-24966 : Updating csi-attacher-container image to be consistent with ART #66 OCPBUGS-24139 : Updating csi-attacher-container image to be consistent with ART #65 OCPBUGS-21593 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #59 STOR-1404 : Rebase external-attacher to v4.4.0 for OCP 4.15 #58 OCPBUGS-19225 : Updating csi-attacher images to be consistent with ART #57 STOR-1169 : Rebase external-attacher to v4.3.0 for OCP 4.14 #54 OCPBUGS-14815 : Chore: Update OWNERS and OWNERS_ALIASES #55 Updating csi-attacher images to be consistent with ART #53
Updating csi-attacher images to be consistent with ART #52
Updating csi-attacher images to be consistent with ART #51
Updating csi-attacher images to be consistent with ART #50
STOR-1020 : Rebase external-attacher to v4.1.0 for OCP 4.13 #49 Updating csi-attacher images to be consistent with ART #48
Update to go v1.19 #45
UPSTREAM: <carry>: Remove .github files #43
Updating csi-attacher images to be consistent with ART #42
STOR-859 : Rebase to v4.0.0 for OCP 4.12 #41 Updating csi-attacher images to be consistent with ART #40
Bug 2097284 : Rebase to v3.5.0 for OCP 4.11 #39 Updating csi-attacher images to be consistent with ART #38
Bug 2043130 : Rebase to v3.4.0 for OCP 4.10 #37 Updating csi-attacher images to be consistent with ART #35
Full changelog
OCPBUGS-46125 : CVE-2024-45337: bump golang.org/x/crypto to v0.31.0 #108 OCPBUGS-45735 : Updating csi-provisioner-container image to be consistent with ART for 4.19 #107 STOR-2018 : Rebase external-provisioner to upstream v5.1.0 for OCP 4.18 #106 Updating csi-provisioner-container image to be consistent with ART for 4.18 #105
STOR-1593 : Rebase to upstream v5.0.2 for 4.17 #104 OCPBUGS-34458 : Updating csi-provisioner-container image to be consistent with ART for 4.17 #103 OCPBUGS-37455 : Revert 5.0.1 rebase #102 STOR-1593 : Rebase to upstream v5.0.1 for 4.17 #98 STOR-1573 : Rebase external-provisioner to v4.0.1 for OCP 4.16 #95 OCPBUGS-30442 : CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #94 OCPBUGS-29971 : Updating csi-provisioner-container image to be consistent with ART for 4.16 #93 OCPBUGS-27242 : fix or ignore snyk errors for ocp storage repos #88 OCPBUGS-25492 : UPSTREAM: 1132: CVE-2023-48795: bump golang.org/x/crypto to v0.17.0 #85 OCPBUGS-25532 : Updating csi-provisioner-container image to be consistent with ART #84 STOR-1688 : Chore: add .snyk file to ignore false positives #83 OCPBUGS-22528 , OCPBUGS-23812 : UPSTREAM: 1124: Bump OpenTelemetry to fix CVEs #81 OCPBUGS-25082 : Updating csi-provisioner-container image to be consistent with ART #80 OCPBUGS-24804 : Updating csi-provisioner-container image to be consistent with ART #79 OCPBUGS-23062 : UPSTREAM: 1047: Revert bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 #78 OCPBUGS-22528 : UPSTREAM: 1047: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.44.0 to 0.45.0 #77 OCPBUGS-21593 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #71 STOR-1404 : Rebase external-provisioner to v3.6.0 for OCP 4.15 #70 OCPBUGS-19114 : Updating csi-provisioner images to be consistent with ART #69 OCPBUGS-17264 : USPTREAM: 969: build(deps): bump golang.org/x/tools from 0.9.3 to 0.12.0 #68 OCPBUGS-14811 : Chore: Update OWNERS and OWNERS_ALIASES #66 STOR-1169 : Rebase external-provisioner to v3.5.0 for OCP 4.14 #65 Updating csi-provisioner images to be consistent with ART #64
Updating csi-provisioner images to be consistent with ART #63
Updating csi-provisioner images to be consistent with ART #62
Updating csi-provisioner images to be consistent with ART #61
STOR-1020 : Rebase external-provisioner to v3.4.0 for OCP 4.13 #60 Updating csi-provisioner images to be consistent with ART #59
Updating csi-provisioner images to be consistent with ART #58
UPSTREAM: <carry>: Remove .github files #57
STOR-859 : Rebase to v3.3.0 for OCP 4.12 #55 Updating csi-provisioner images to be consistent with ART #54
Bug 2101343 : UPSTREAM: 2101343: fix: changed the csistoragecapacity check namespace #52 Bug 2097282 : Rebase to v3.2.0 for OCP 4.11 #51 Updating csi-provisioner images to be consistent with ART #50
Bug 2043130 : Rebase to v3.1.0 for OCP 4.10 #49 Updating csi-provisioner images to be consistent with ART #48
Updating csi-provisioner images to be consistent with ART #47
Updating csi-provisioner images to be consistent with ART #46
Full changelog
STOR-2135 : Bring latest changes for snapshotter #166 OCPBUGS-45828 : Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.19 #169 OCPBUGS-45582 : Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART for 4.19 #168 OCPBUGS-45380 : Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.19 #167 STOR-2018 : Rebase external-snapshotter to v8.1.0 for OCP 4.18 #164 OCPBUGS-41140 : Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.18 #163 OCPBUGS-41107 : Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART for 4.18 #162 OCPBUGS-39454 : Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.18 #161 STOR-1593 : Rebase external-snapshotter to v8.0.1 for OCP 4.17 #156 OCPBUGS-34257 : Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART for 4.17 #158 OCPBUGS-34292 : Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.17 #159 OCPBUGS-34435 : Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.17 #157 OCPBUGS-34292 : Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.17 #152 OCPBUGS-34257 : Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART for 4.17 #151 OCPBUGS-34061 : Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.17 #150 OCPBUGS-31746 : Backport volumegroupsnapshot fixes to OCP 4.16 #148 OCPBUGS-31439 : Backport volumegroupsnapshot fixes to OCP 4.16 #146 STOR-1573 : Rebase external-snapshotter to v7.0.1 for OCP 4.16 #145 OCPBUGS-30503 : CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #144 STOR-1700 : Rebase external-snapshotter to v7.0.0 to get VolumeGroupSnapshot #139 OCPBUGS-24996 : Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #137 STOR-1688 : Chore: add .snyk file to ignore false positives #133 OCPBUGS-25548 : Updating ose-csi-snapshot-controller-container image to be consistent with ART #135 OCPBUGS-25575 : Updating ose-csi-external-snapshotter-container image to be consistent with ART #136 OCPBUGS-24996 : Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #132 OCPBUGS-25052 : Updating ose-csi-external-snapshotter-container image to be consistent with ART #131 OCPBUGS-25124 : Updating ose-csi-snapshot-controller-container image to be consistent with ART #130 OCPBUGS-24996 : Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #129 OCPBUGS-24964 : Updating ose-csi-external-snapshotter-container image to be consistent with ART #128 OCPBUGS-24866 : Updating ose-csi-snapshot-controller-container image to be consistent with ART #127 OCPBUGS-24330 : Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #124 OCPBUGS-24338 : Updating ose-csi-external-snapshotter-container image to be consistent with ART #123 OCPBUGS-24329 : Updating ose-csi-snapshot-controller-container image to be consistent with ART #121 OCPBUGS-24244 : Updating ose-csi-external-snapshotter-container image to be consistent with ART #118 OCPBUGS-24160 : Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART #116 OCPBUGS-24244 : Updating ose-csi-external-snapshotter-container image to be consistent with ART #117 OCPBUGS-24071 : Updating ose-csi-snapshot-controller-container image to be consistent with ART #115 OCPBUGS-23010 : UPSTREAM: 958: Re-queue SnapshotContents that are readyToUse: false #114 OCPBUGS-21593 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #108 STOR-1404 : Rebase external-snapshotter to v6.3.0 for OCP 4.15 #107 OCPBUGS-19260 : Updating csi-snapshot-validation-webhook images to be consistent with ART #106 OCPBUGS-19223 : Updating ose-csi-external-snapshotter images to be consistent with ART #105 OCPBUGS-19100 : Updating ose-csi-snapshot-controller images to be consistent with ART #104 STOR-1169 : Rebase external-snapshotter to v6.2.2 for OCP 4.14 #101 OCPBUGS-14813 : Chore: Update OWNERS and OWNERS_ALIASES #102 Updating csi-snapshot-validation-webhook images to be consistent with ART #100
Updating ose-csi-external-snapshotter images to be consistent with ART #99
Updating ose-csi-snapshot-controller images to be consistent with ART #98
Updating csi-snapshot-validation-webhook images to be consistent with ART #97
Updating ose-csi-external-snapshotter images to be consistent with ART #96
Updating ose-csi-snapshot-controller images to be consistent with ART #95
Updating csi-snapshot-validation-webhook images to be consistent with ART #94
Updating ose-csi-external-snapshotter images to be consistent with ART #93
Updating ose-csi-snapshot-controller images to be consistent with ART #92
Updating csi-snapshot-validation-webhook images to be consistent with ART #91
Updating ose-csi-snapshot-controller images to be consistent with ART #89
Updating ose-csi-external-snapshotter images to be consistent with ART #90
STOR-1020 : Rebase external-snapshotter to v6.2.1 for OCP 4.13 #88 Updating csi-snapshot-validation-webhook images to be consistent with ART #87
Updating ose-csi-external-snapshotter images to be consistent with ART #86
Updating ose-csi-snapshot-controller images to be consistent with ART #85
Updating csi-snapshot-validation-webhook images to be consistent with ART #84
Updating ose-csi-external-snapshotter images to be consistent with ART #83
Updating ose-csi-snapshot-controller images to be consistent with ART #82
UPSTREAM: <carry>: Remove .github files #81
Updating csi-snapshot-validation-webhook images to be consistent with ART #80
Updating ose-csi-external-snapshotter images to be consistent with ART #79
Updating ose-csi-snapshot-controller images to be consistent with ART #78
STOR-859 : Rebase to v6.1.0 for OCP 4.12 #77 Updating csi-snapshot-validation-webhook images to be consistent with ART #76
Updating ose-csi-external-snapshotter images to be consistent with ART #75
Updating ose-csi-snapshot-controller images to be consistent with ART #74
Bug 2097283 : Rebase to v6.0.1 for OCP 4.11 #73 Updating ose-csi-snapshot-controller images to be consistent with ART #70
Updating csi-snapshot-validation-webhook images to be consistent with ART #72
Updating ose-csi-external-snapshotter images to be consistent with ART #71
Updating ose-csi-external-snapshotter images to be consistent with ART #68
Updating csi-snapshot-validation-webhook images to be consistent with ART #69
Updating ose-csi-snapshot-controller images to be consistent with ART #67
Bug 2043130 : Update CSI sidecars to the latest release for 4.10 #66 Updating csi-snapshot-validation-webhook images to be consistent with ART #60
Updating ose-csi-snapshot-controller images to be consistent with ART #61
Updating ose-csi-external-snapshotter images to be consistent with ART #59
Updating ose-csi-snapshot-controller images to be consistent with ART #58
Full changelog
OCPBUGS-45712 : Updating csi-node-driver-registrar-container image to be consistent with ART for 4.19 #77 STOR-2018 : Rebase node-driver-registrat to v2.12.0 for OCP 4.18 #76 Updating csi-node-driver-registrar-container image to be consistent with ART for 4.18 #75
OCPBUGS-34361 : Updating csi-node-driver-registrar-container image to be consistent with ART for 4.17 #74 OCPBUGS-34361 : Updating csi-node-driver-registrar-container image to be consistent with ART for 4.17 #73 STOR-1573 : Rebase node-driver-registrar to v2.10.0 for OCP 4.16 #70 OCPBUGS-30441 : CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #69 OCPBUGS-29987 : Updating csi-node-driver-registrar-container image to be consistent with ART for 4.16 #68 OCPBUGS-27242 : fix or ignore snyk errors for ocp storage repos #64 OCPBUGS-25544 : Updating csi-node-driver-registrar-container image to be consistent with ART #62 STOR-1688 : Chore: add .snyk file to ignore false positives #61 OCPBUGS-25117 : Updating csi-node-driver-registrar-container image to be consistent with ART #59 OCPBUGS-23811 : UPSTREAM: 354: Bump Bump OpenTelemetry to fix CVEs #58 OCPBUGS-24856 : Updating csi-node-driver-registrar-container image to be consistent with ART #57 OCPBUGS-21593 : CVE-2023-44487: bump golang.org/x/net to v0.17.0 #51 STOR-1404 : Rebase node-driver-registrar to v2.9.0 for OCP 4.15 #50 OCPBUGS-19247 : Updating csi-node-driver-registrar images to be consistent with ART #49 STOR-1169 : Rebase node-driver-registrar to v2.8.0 for OCP 4.14 #46 OCPBUGS-14814 : Chore: Update OWNERS and OWNERS_ALIASES #47 Updating csi-node-driver-registrar images to be consistent with ART #45
Updating csi-node-driver-registrar images to be consistent with ART #44
Updating csi-node-driver-registrar images to be consistent with ART #43
Updating csi-node-driver-registrar images to be consistent with ART #42
STOR-1020 : Rebase csi-node-driver-registrar to v2.7.0 for OCP 4.13 #41 Updating csi-node-driver-registrar images to be consistent with ART #40
Updating csi-node-driver-registrar images to be consistent with ART #39
UPSTREAM: <carry>: Remove .github files #38
Updating csi-node-driver-registrar images to be consistent with ART #37
Bug 2097286 : Rebase to v2.5.1 for OCP 4.12 #36 Updating csi-node-driver-registrar images to be consistent with ART #35
Updating csi-node-driver-registrar images to be consistent with ART #34
Updating csi-node-driver-registrar images to be consistent with ART #33
Updating csi-node-driver-registrar images to be consistent with ART #32
Full changelog
Updating ose-prometheus-adapter-container image to be consistent with ART for 4.18 #108
MON-3906 : Bump prometheus adapter to 0.12.0 #106 OCPBUGS-34299 : Updating ose-prometheus-adapter-container image to be consistent with ART for 4.17 #105 OCPBUGS-34299 : Updating ose-prometheus-adapter-container image to be consistent with ART for 4.17 #104 OCPBUGS-30532 : upgrade github.com/golang/protobuf to v1.5.4 for bette… #101 OCPBUGS-25583 : Updating ose-prometheus-adapter-container image to be consistent with ART #100 OCPBUGS-24986 : Updating ose-prometheus-adapter-container image to be consistent with ART #99 OCPBUGS-24986 : Updating ose-prometheus-adapter-container image to be consistent with ART #98 MON-3584 : Remove trailing spaces from Dockerfile.ocp #97 OCPBUGS-24155 : Updating ose-prometheus-adapter-container image to be consistent with ART #95 MON-3489 : Bump openshift/k8s-prometheus-adapter to v0.11.2 #94 OCPBUGS-21621 : Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 #88 add machine424 and rexagod to OWNERS #73
OCPBUGS-21621 : upgrade golang.org/x/net to 0.17.0 to address CVE-2023… #80 OCPBUGS-18971 : limit number of simultaneous client requests #76 OCPBUGS-19251 : Updating ose-prometheus-adapter images to be consistent with ART #74 Bump openshift/k8s-prometheus-adapter to v0.11.0 #72
OCPBUGS-12659 : bump golang.org/x/net version #71 Updating ose-prometheus-adapter images to be consistent with ART #69
OCPBUGS-10172 : Updating ose-prometheus-adapter images to be consistent with ART #68 OCPBUGS-6458 : Bump golang.org/x/net to v0.4.0 for GO-2022-1144 #67 Updating ose-prometheus-adapter images to be consistent with ART #66
Bump openshift/k8s-prometheus-adapter to v0.10.0 #64
OWNERS: Add Joao and myself, and move former team members to emeritus #63
Updating ose-prometheus-adapter images to be consistent with ART #62
Updating ose-prometheus-adapter images to be consistent with ART #61
Updating ose-prometheus-adapter images to be consistent with ART #60
Bump openshift/k8s-prometheus-adapter to v0.9.1 #59
Updating ose-prometheus-adapter images to be consistent with ART #58
OWNERS: cleanup #57
Updating ose-prometheus-adapter images to be consistent with ART #56
Full changelog
OCPBUGS-45452 : Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.19 #202 NO-JIRA: egress: update OWNERS #203
OCPBUGS-45342 : Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.19 #200 OCPBUGS-33629 : Only set the instancetype to master if the preempt strategy is not nopreempt. #197 OCPBUGS-39480 : Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.18 #193 OCPBUGS-41231 : Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.18 #196 OCPBUGS-41213 : Updating ose-egress-http-proxy-container image to be consistent with ART for 4.18 #195 OCPBUGS-39544 : Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.18 #194 OCPBUGS-38285 : Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.18 #191 OCPBUGS-38286 : Updating openshift-enterprise-base-container image to be consistent with ART for 4.18 #192 OCPBUGS-34348 : Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.17 #186 OKD-219 : add util-linux to base image #187 OCPBUGS-34152 : Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.17 #184 OCPBUGS-34338 : Updating ose-egress-http-proxy-container image to be consistent with ART for 4.17 #185 OCPBUGS-34103 : Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.17 #183 OCPBUGS-33909 : Updating openshift-enterprise-base-container image to be consistent with ART for 4.17 #182 OCPBUGS-33908 : Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.17 #181 OKD-40 : Revert #179 #180 OKD-40 : Remove centos-openstack-zed and add in rdo repo to get python-cinderclient dependency #179 Add dnf-plugins-core in scos to help with OCP image compat #178
OKD-210 : Add sig-cloud repository and enable rt repository #177 OKD-210 : Add the sig-nfv repo in the CS9 base #176 OCPBUGS-24850 : Bump OpenShift 4.16, RHEL9, and iptables package #175 OCPBUGS-24990 : Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART #159 OCPBUGS-24800 : Updating ose-egress-http-proxy-container image to be consistent with ART #156 NO-ISSUE: Add Scott and Mrunal as image approvers #170
NO-ISSUE: remove bparees from owners #169
OCPBUGS-29484 : update unit tests in egress/dns-proxy #165 NE-1444 : egress/dns-proxy: switch to haproxy28 RPM package #160 OCPBUGS-24861 : Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART #158 OCPBUGS-24751 : Updating openshift-enterprise-base-rhel9-container image to be consistent with ART #155 OCPBUGS-24723 : Updating openshift-enterprise-base-container image to be consistent with ART #154 OCPBUGS-19261 : Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #153 OCPBUGS-19107 : Updating ose-egress-http-proxy images to be consistent with ART #150 OCPBUGS-19239 : Updating openshift-enterprise-egress-router images to be consistent with ART #151 OCPBUGS-18860 : Updating openshift-enterprise-base-rhel9 images to be consistent with ART #149 OCPBUGS-18853 : Updating openshift-enterprise-base images to be consistent with ART #148 OCPBUGS-10176 : 15143307: Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #132 OCPBUGS-10163 : Updating openshift-enterprise-egress-router images to be consistent with ART #131 OCPBUGS-10181 : 15143312: Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #133 NE-1304 : container builds: switch to haproxy26 package #141 OCPBUGS-11385 : Removed chroot setting #137 egress: update owners #139
OCPBUGS-11595 : Revert “[NE-1267] container builds: switch to haproxy26 package” #138 egress/dns-proxy/Dockerfile: switch to haproxy26 package #136
OCPBUGS-10003 : Revert “bump RHEL8 egress-dns-proxy image to haproxy26” #134 Updating ose-egress-http-proxy images to be consistent with ART #130
Updating openshift-enterprise-base-rhel9 images to be consistent with ART #129
Updating openshift-enterprise-base images to be consistent with ART #128
Add jupierce as approver / remove Clayton #127
rhel9 base image: Fix build failure #126
Dockerfile: add RHEL9 base image dockerfile #124
bump RHEL8 egress-dns-proxy image to haproxy26 #125
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #122
Updating ose-egress-http-proxy images to be consistent with ART #120
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #123
Updating openshift-enterprise-base images to be consistent with ART #119
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #117
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #116
Add bparees as approver #118
Updating openshift-enterprise-base images to be consistent with ART #113
Updating ose-egress-http-proxy images to be consistent with ART #105
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #108
Updating openshift-enterprise-egress-router images to be consistent with ART #106
Bug 2062126 : ipfailover: Autodetect the “ens3” NIC #111 Updating openshift-enterprise-base images to be consistent with ART #109
Bug 2018188 : VRRP ID conflict between keepalived-ipfailover and cluster VIPs #104 Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #107
Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART #101
Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART #102
Updating openshift-enterprise-egress-router images to be consistent with ART #100
Add jupierce to OWNERS #103
Updating ose-egress-http-proxy images to be consistent with ART #99
Full changelog
AUTH-555 : Merge upstream v0.18.2 release #114 NO-JIRA: OWNERS: update #110
AUTH-534 : Merge upstream v0.18.1 #104 OCPBUGS-31955 : Merge upstream v0.17.1 release #98 AUTH-486 : Add tests for the hardcoded-authorizer feature #90 OCPBUGS-29974 : Updating kube-rbac-proxy-container image to be consistent with ART for 4.16 #91 OCPBUGS-24818 : Updating kube-rbac-proxy-container image to be consistent with ART #88 OCPBUGS-21672 : http2: trim connetions and buffers #80 OCPBUGS-21672 : go.mod: bump golang.org/x/net to v0.17.0 #73 OCPBUGS-19143 : Updating kube-rbac-proxy images to be consistent with ART #72 AUTH-362 : v0.14.2 downstream #70 OCPBUGS-12313 : Update 4.14 kube-rbac-proxy image to be consistent with ART #66 : OCPBUGS-12777: Downstream merge v0.14.1 #67
OCPBUGS-10089 : Update 4.14 kube-rbac-proxy image to be consistent with ART #64 Merge upstream v0.14.0 on downstream #63
Merg upstream into downstream #60
OWNERS: add myself (ibihim) #57
Updating kube-rbac-proxy images to be consistent with ART #54
Updating kube-rbac-proxy images to be consistent with ART #52
Full changelog
Updating ose-mdns-publisher images to be consistent with ART #43
Updating ose-mdns-publisher images to be consistent with ART #42
Updating ose-mdns-publisher images to be consistent with ART #38
Full changelog
Updating ose-network-metrics-daemon images to be consistent with ART #62
Full changelog
NO-JIRA: rebase 1.31 #123
NO-JIRA: Bump 1.30 #121
NO-JIRA: apiserver: sanitize the generic config for the chained servers #122
OCPBUGS-39529 : Updating ose-oauth-apiserver-container image to be consistent with ART for 4.18 #118 NO-JIRA: UPSTREAM: <carry>: retrying etcd Unavailable errors for the etcd health and ready checkers #119
Update OWNERS #120
OCPBUGS-34446 : Updating ose-oauth-apiserver-container image to be consistent with ART for 4.17 #116 OCPBUGS-34140 : Updating ose-oauth-apiserver-container image to be consistent with ART for 4.17 #115 NO-ISSUE: openapiconfig: generate base config using DefaultOpenAPIConfig #111
OCPBUGS-30319 : bump lib-go to fix SAs acting as OAuth2 clients #108 NO-ISSUE: oauth-apiserver: allow disabling PriorityAndFairness #106
NO-ISSUE: oauth-apiserver: apply GenericServerRunOptions to the server configuration #105
OCPBUGS-29176 : Updating ose-oauth-apiserver-container image to be consistent with ART for 4.16 #101 OCPBUGS-28658 : bump k8s.io and others (master) #98 OCPBUGS-24954 : Updating ose-oauth-apiserver-container image to be consistent with ART #94 OCPBUGS-27094 : UPSTREAM: <carry>: retry etcd Unavailable errors #95 OCPBUGS-19214 : Updating ose-oauth-apiserver images to be consistent with ART #90 bump k8s to 1.27.3 #89
Updating ose-oauth-apiserver images to be consistent with ART #87
bump kube to 1.24.4 #81
bump kube to 1.23.1 #75
Bug 2049155 : fix printers to avoid panic from DeepCopy #71 bump golang to 1.17 #65
Bug 1986504 : bump openshift/api #63 registry: audit deleted access/authorize tokens #62
Updating ose-oauth-apiserver images to be consistent with ART #59
Full changelog
OCPBUGS-44319 : Fix oauth-proxy e2e-component tests #289 OCPBUGS-24791 : Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART #270 OCPBUGS-21718 : go.mod: bump golang.org/x/net to v0.17.0 #266 OCPBUGS-18858 : Updating golang-github-openshift-oauth-proxy images to be consistent with ART #265 OCPBUGS-16459 : bump kube and lib-go to get rid of goproxy dep #260 fix route apiVersion #257
Updating golang-github-openshift-oauth-proxy images to be consistent with ART #251
APPSRE-7970 : Add support for configuring upstream timeout #258 OCPBUGS-14033 : Handle TERM signal gracefully #255 AUTH-373 : add audit-ID headers to TokenReview and SAR requests #252 Update logo #245
fix json examples for –openshift-delegate-urls #203
Use resourceName in Openshift SAR rule #243
Updating golang-github-openshift-oauth-proxy images to be consistent with ART #241
Bug 2026860 : ocp provider: don’t fail client creation if oauth-server cert is not present #238 Golang bump 1.17 #235
Full changelog
OCPBUGS-44099 : escape spaces in oauth callback path #166 OCPBUGS-42772 : Fix login path for go1.22 mux pattern matching #165 NO-JIRA: Revert #157 #159
OCPBUGS-42772 : sanitize login path #157 OCPBUGS-30452 : Update google.golang.org/protobuf to v1.33.0 and vendor dependencies #156 NO-JIRA: OWNERS: add ibihim (kostrows) #153
OCPBUGS-33695 : p/o/handlers - fix nil-pointer, if ResStatus is nil #150 NO-JIRA: bump go-jose to a newer version #147
OCPBUGS-32331 : Updating oauth-server-container image to be consistent with ART for 4.16 #145 OCPBUGS-24987 , OCPBUGS-30319 : bump lib-go to fix SAs acting as OAuth2 clients #142 OCPBUGS-21671 : go.mod: bump golang.org/x/net to v0.17.0 #137 OCPBUGS-5233 : update osin to latest version #128 OCPBUGS-10887 : bump kube to 1.26 and lib-go for the groupcache fix #123 AUTH-357 : update osin to latest version #121 Updating oauth-server images to be consistent with ART #119
OCPBUGS-2457 : don’t log request query and fragment on failed authn request #118 OCPBUGS-2457 : don’t log request query and fragment on failed authn request #115 OCPBUGS-6238 : update art image #116 Updating oauth-server images to be consistent with ART #109
Bump library-go to b2073c41366aae78868b24e86d99021b79d754cb #112
fix linter findings #98
Bug 2086505 : Updating oauth-server images to be consistent with ART #108 Bug 2086465 : External OAuth: create audit logs for auth events #103 AUTH-100 : Add request header authn auditing #106 Update external dependencies #105
osin: Import from the new openshift module path #104
AUTH-66 : turn on audit on oauth-server with PW-based flow #92 Bug 2038691 : groupsync: create annotations if not present before writing to them #96 Golang bump 1.17 #94
Bug 2020625 : oidc: allocate claims slice to 0 len to prevent empty groups #93 Updating oauth-server images to be consistent with ART #84
oidc handler: add remote OIDC URLs to error logs #74
AUTH-8 : Add group synchronization from OIDC providers #87 Updating oauth-server images to be consistent with ART #83
Full changelog
OCPBUGS-45566 : Updating marketplace-operator-container image to be consistent with ART for 4.19 #580 AUTH-482 : set required-scc for openshift workloads #578 OPRUN-3536 : Replace 4.17 image references with 4.18 #575 OCPBUGS-41061 : Updating marketplace-operator-container image to be consistent with ART for 4.18 #574 OCPBUGS-38813 : Replace 4.16 image references with 4.17 #572 NO-ISSUE: Add client certificate and key to service monitor #482
OCPBUGS-34244 : Updating marketplace-operator-container image to be consistent with ART for 4.17 #568 OCPBUGS-24971 : bump golang to 1.21 #560 AUTH-482 : set required-scc for openshift workloads #561 OCPBUGS-28230 : enforce termination message policy on all platform pods #559 OCPBUGS-29575 : Apply hypershift cluster-profile for ibm-cloud-managed #556 OPECO-3031 : Update community index to 4.16 #558 synching dco policy across v0 repos #557
OPECO-3029 : Update image tag to 4.16 for all indexes except community-operators #555 Delete deploy dir #529
OPRUN-3130 : use content extraction in default catalog sources #540 OCPBUGS-19710 : Update image tag to 4.15 for all but community operators #541 OCPBUGS-21592 : [release-4.15] bump golang.org/x/net to 0.17.0 #546 Update image tag to 4.15 for community operators #534
OCPBUGS-19230 : Updating marketplace-operator images to be consistent with ART #539 Dockerfile: Align OKD and OCP #531
OCPBUGS-15158 : Scope Marketplace Operator RBAC #528 OCPBUGS-17157 : defaults: add memory targets to CatalogSources #527 OCPBUGS-17157 : manifests: tune memory use #526 OCPBUGS-17157 : bump controller-runtime, expose pprof, watch only one configmap #525 OCPBUGS-13910 : update community-operator-index to 4.14 tag #524 Update owners #517
OCPBUGS-9357 : remove a race condition #520 OCPBUGS-13921 : Update image tag to 4.14 for all but community operators #523 OCPBUGS-12794 : update community index to 4.13 tag #514 OCPBUGS-12341 : Updating marketplace-operator images to be consistent with ART #515 OCPBUGS-10926 : update image tag to 4.13 for all but community operators #513 Updating marketplace-operator images to be consistent with ART #508
Update OWNERS #509
OCPBUGS-5466 : Default CatalogSource aren’t always reverted to default settings #504 OCPBUGS-6232 : Updating marketplace-operator images to be consistent with ART #493 OCPBUGS-6323 : Upgrade golang/x/net to v0.4.0 to fix CVE-2022-41717 #505 OCPBUGS-5423 : Remove PSA audit and warnings #502 OCPBUGS-5423 : Run Default CatalogSource in Restricted mode #498 OCPBUGS-4873 : Add audit-version and warn-version labels #495 Remove duplicate gprcPodConfig field in defaults #496
OCPBUGS-4758 : Unenforce PSA Restrictions #491 OCPBUGS-2223 : Update Default CatalogSource Images to 4.12 tag #487 Updating marketplace-operator images to be consistent with ART #479
OCPBUGS-441 : Dockerfile.okd: include custom OperatorHub manifest #481 (psa) make marketplace namespace restricted #484
(namespace) remove PSA baseline enforcement #483
Add PSA enforcement label #480
Bug 2010375 : Clarify reason/steps to diagnose in *CatalogError prom alert #469 Bug 2088541 : Add psa anotations to namespace to suppress warnings #478 Updating marketplace-operator images to be consistent with ART #473
Bug 2092464 : Update default catalogsource to use 4.11 images #477 Bug 2079610 : Fix operatorHub status #470 Revert “Bug 2092464: shift marketplace operator catalogs default to v4.11” #476
Bug 2092464 : shift marketplace operator catalogs default to v4.11 #474 manifests/deployment: comply to restricted pod security level #471
chore(modules): bump openshift/api for new operatorhub crd #472
Bug 2057558 : increase polling time of status report to reduce log spam #461 fix(manifests): add singleton operatorhub cr #468
fix(capabilities): add operatorhub crd manifest #467
Bug 2070792 : chore(manifests): add missing capabilities annotation #465 manifests/10_clusteroperator: Drop the unused namespace property #401
chore(manifests): add openshift capability annotation #462
Bug 2067909 : Bump github.com/prometheus/client_golang to v0.12.1 #463 Update OWNERS #464
Bump repository to Go 1.17 and k8s v0.23.x #460
Updating marketplace-operator images to be consistent with ART #459
Bug 1927478 : Add catalog source pod spec overrides #457 Bug 2034409 : Update defaults to point to 4.10 images #456 Bug 1996928 : Revert “Start without defaults on ARM” #420 Updating marketplace-operator images to be consistent with ART #428
Update OWNERS #430
Add summary and description for prometheus alerts #429
Updating marketplace-operator images to be consistent with ART #427
Remove the marketplace v1 and v2 APIs #426
Remove unused packages #424
Bump the k8s dependencies to 1.22.1 and controller-runtime to 0.10.0 #422
Makefile,test: Fix flaky e2e tests #425
Full changelog
Source code for this page located on github