# 4.12.0-0.nightly-arm64-2024-08-16-175234 Created: 2024-08-16 17:53:57 +0000 UTC Image Digest: `sha256:c836e18526b68a2a170317c469b4ed6759406c68c1d499d0274dc4fc330b393b` ## Changes from 4.11.59 ### Components * Kubernetes upgraded from 1.24.16 to 1.25.16 * Red Hat Enterprise Linux CoreOS upgraded from 411.86.202403120448-0 to 412.86.202407192342-0 ### New images * [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [8df44eae](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/8df44eaee8f4a31754d77f3f3a18ff59878efc72) `sha256:a88a4bbc2855764f2eaaf91d47fc1752ff099857f10a8bfdb9e80960d944060f` * [cluster-platform-operators-manager](https://github.com/openshift/platform-operators) git [c930dc74](https://github.com/openshift/platform-operators/commit/c930dc745f23ee5bde8b48d13557976186c21c7c) `sha256:f885030eecdb135f3285f015cea4def7102e69cc6a5f542b27a3cecdc58527d9` * [ibmcloud-cluster-api-controllers](https://github.com/openshift/kubernetes) git [306a47e1](https://github.com/openshift/kubernetes/commit/306a47e15eb91b22d3716b0d7d48fdd35e1ce2ba) `sha256:9b31f85f64f85d93dcc2eeb098a8ac4fc2f4259cc395ad06932e10990d7ca852` * [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [a19615cd](https://github.com/openshift/cloud-provider-kubevirt/commit/a19615cda3daf69008253d75cc848ac0ad397179) `sha256:7da29c55f3a7121d6c456a227d5ba33a280ead33eb5418bae0848396aeb672f8` * [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver) git [f407c8a7](https://github.com/openshift/kubevirt-csi-driver/commit/f407c8a71c831a8f7911bf0b4a99bb6b16e0e0b6) `sha256:cf998295e34c9d44e655ec391662c2a9944275fbf0225900d3656f3d8f45270e` * [olm-rukpak](https://github.com/openshift/operator-framework-rukpak) git [f219ce7a](https://github.com/openshift/operator-framework-rukpak/commit/f219ce7af993e4ca2c994b74375ddc8dbb4a5333) `sha256:535e5de146d6c0e0a39624607f612266cbf92c96e73f0555e3ae9e78aec732ff` * [ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes) git [2996be21](https://github.com/openshift/ovn-kubernetes/commit/2996be215b6dc887d9c439ad4256e47568eb7a0e) `sha256:09b88b47e7fbbe1ea9b3f60e861409520ac1001dbe303c73f75e0dd3b81ec325` * [powervs-block-csi-driver](https://github.com/openshift/kubernetes) git [306a47e1](https://github.com/openshift/kubernetes/commit/306a47e15eb91b22d3716b0d7d48fdd35e1ce2ba) `sha256:9b31f85f64f85d93dcc2eeb098a8ac4fc2f4259cc395ad06932e10990d7ca852` * [powervs-block-csi-driver-operator](https://github.com/openshift/kubernetes) git [306a47e1](https://github.com/openshift/kubernetes/commit/306a47e15eb91b22d3716b0d7d48fdd35e1ce2ba) `sha256:9b31f85f64f85d93dcc2eeb098a8ac4fc2f4259cc395ad06932e10990d7ca852` * rhel-coreos-8 `sha256:d20715b0e3b59c095541025758f5d6a52b147f1310cbff73a928a5fcd15b4a7c` * rhel-coreos-8-extensions `sha256:426f960bed0709cf7ef5701ffb0a1ca1ec4a6c5c4d4c83abce35b93922095bbd` * [route-controller-manager](https://github.com/openshift/route-controller-manager) git [0f141ce9](https://github.com/openshift/route-controller-manager/commit/0f141ce9d349fb30755e3d0d7f9f196a91782957) `sha256:e1d88f907422906c4f63210cb7d1be729c90f3400f771d86a2ebf1f3120d4e30` ### Rebuilt images without code change * [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [596745ce](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/596745cec38b8401d1d906bfb9d3d78fdaeabcde) `sha256:83212b61f8cae275040d6c64a9a5f38a9f041a03d13a072fba60e3db81e7e7d2` * machine-os-content `sha256:e3da43461657fd440fa742be4d7648b6768426efb55a18dfb2ff9bfd0e5ccae0` ### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/844e6efd0d1c9d583afdefc6bc5ae744471ef9c1) * [MGMT-11753](https://issues.redhat.com/browse/MGMT-11753): moving CI Dockerfiles to the repo [#4386](https://github.com/openshift/assisted-service/pull/4386) * Bump mockgen to prevent dependencies removal [#4321](https://github.com/openshift/assisted-service/pull/4321) * NO-ISSUE: do not print error message when docker doesn't exist [#4129](https://github.com/openshift/assisted-service/pull/4129) * [Full changelog](https://github.com/openshift/assisted-service/compare/bc51be826e96cae9e00d0fff0970fd273c078d9a...844e6efd0d1c9d583afdefc6bc5ae744471ef9c1) ### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/bc8fd423f1f7b47c46a9d97ede546f989785015d) * [MGMT-17596](https://issues.redhat.com/browse/MGMT-17596): Bump x/net to at least v0.24.0 to mitigate CVE-2023-45288 (#836) [#836](https://github.com/openshift/assisted-installer/pull/836) * [MGMT-17590](https://issues.redhat.com/browse/MGMT-17590): Bump runc to v1.1.12 to mitigate CVE-2024-21626 (#828) [#828](https://github.com/openshift/assisted-installer/pull/828) * [MGMT-17541](https://issues.redhat.com/browse/MGMT-17541): Replace broken golangci reference (#825) [#825](https://github.com/openshift/assisted-installer/pull/825) * [MGMT-13586](https://issues.redhat.com/browse/MGMT-13586): Wait for ETCD Bootstrap to complete (#670) (#726) [#670](https://github.com/openshift/assisted-installer/pull/670) * [OCPBUGS-7149](https://issues.redhat.com/browse/OCPBUGS-7149): IPv6 multinode spoke no moving from rebooting/configuring stage Update the mcs log regex (#631) [#631](https://github.com/openshift/assisted-installer/pull/631) * Remove jira tickets prefix requirements (#595) [#595](https://github.com/openshift/assisted-installer/pull/595) * Updating ose-agent-installer-csr-approver images to be consistent with ART (#535) [#535](https://github.com/openshift/assisted-installer/pull/535) * [MGMT-12305](https://issues.redhat.com/browse/MGMT-12305): Fix a vulnerability which could cause a denial of service on version v0.3.7 of golang.org/x/text/language. (#565) [#565](https://github.com/openshift/assisted-installer/pull/565) * Updating ose-agent-installer-orchestrator images to be consistent with ART (#557) [#557](https://github.com/openshift/assisted-installer/pull/557) * NO-ISSUE: Bump github.com/go-openapi/runtime from 0.24.1 to 0.24.2 (#564) [#564](https://github.com/openshift/assisted-installer/pull/564) * NO-ISSUE: Bump github.com/onsi/gomega from 1.21.1 to 1.22.1 (#561) [#561](https://github.com/openshift/assisted-installer/pull/561) * NO-ISSUE: Bump github.com/onsi/gomega from 1.20.2 to 1.21.1 (#559) [#559](https://github.com/openshift/assisted-installer/pull/559) * [MGMT-12077](https://issues.redhat.com/browse/MGMT-12077): Assisted Installer doesn't remove a PV if it's not attached to a volume group (#558) [#558](https://github.com/openshift/assisted-installer/pull/558) * [MGMT-12115](https://issues.redhat.com/browse/MGMT-12115): Fix wrong formatting in Controller Pod definition (#553) [#553](https://github.com/openshift/assisted-installer/pull/553) * NO-ISSUE: Remove unused function RemoveLV (#552) [#552](https://github.com/openshift/assisted-installer/pull/552) * [MGMT-12115](https://issues.redhat.com/browse/MGMT-12115): assisted-installer-controller Job does not apply Additional Root CA Trust Bundle (#551) [#551](https://github.com/openshift/assisted-installer/pull/551) * Update approvers and reviewers lists (#550) [#550](https://github.com/openshift/assisted-installer/pull/550) * NO-ISSUE: Bump github.com/operator-framework/api from 0.17.0 to 0.17.1 (#546) [#546](https://github.com/openshift/assisted-installer/pull/546) * [MGMT-12055](https://issues.redhat.com/browse/MGMT-12055): Assisted controller should log if one of the nodes changed it's ip after reboot (#545) [#545](https://github.com/openshift/assisted-installer/pull/545) * [MGMT-12070](https://issues.redhat.com/browse/MGMT-12070): Assisted controller should not set status done on host more than once (#543) [#543](https://github.com/openshift/assisted-installer/pull/543) * NO-ISSUE: add Adrien as a maintainer (#544) [#544](https://github.com/openshift/assisted-installer/pull/544) * [MGMT-12057](https://issues.redhat.com/browse/MGMT-12057): Remove enablement of router access logs in controller, not needed anymore (#542) [#542](https://github.com/openshift/assisted-installer/pull/542) * [MGMT-12038](https://issues.redhat.com/browse/MGMT-12038): Controller should upload logs from file on summary logs (#540) [#540](https://github.com/openshift/assisted-installer/pull/540) * NO-ISSUE: print boot order after setting it (#539) [#539](https://github.com/openshift/assisted-installer/pull/539) * Updating ose-agent-installer-orchestrator images to be consistent with ART (#496) [#496](https://github.com/openshift/assisted-installer/pull/496) * [MGMT-11348](https://issues.redhat.com/browse/MGMT-11348): Changes for upstream multi-arch support (#536) [#536](https://github.com/openshift/assisted-installer/pull/536) * NO-ISSUE: Bump github.com/onsi/gomega from 1.20.1 to 1.20.2 (#538) [#538](https://github.com/openshift/assisted-installer/pull/538) * [MGMT-11565](https://issues.redhat.com/browse/MGMT-11565): Add handleOLMEarlySetupBug when waiting for CSV (#531) [#531](https://github.com/openshift/assisted-installer/pull/531) * NO-ISSUE: Bump github.com/operator-framework/api from 0.16.0 to 0.17.0 (#534) [#534](https://github.com/openshift/assisted-installer/pull/534) * NO-ISSUE: Bump github.com/onsi/gomega from 1.20.0 to 1.20.1 (#533) [#533](https://github.com/openshift/assisted-installer/pull/533) * NO-ISSUE: Bump github.com/onsi/gomega from 1.19.0 to 1.20.0 (#509) [#509](https://github.com/openshift/assisted-installer/pull/509) * [MGMT-11695](https://issues.redhat.com/browse/MGMT-11695): Disk cleanup does not clean all volume groups in a physical volume. (#518) [#518](https://github.com/openshift/assisted-installer/pull/518) * [MGMT-11170](https://issues.redhat.com/browse/MGMT-11170): Report the caller in the log. (#527) [#527](https://github.com/openshift/assisted-installer/pull/527) * NO-ISSUE: Bump k8s.io/client-go from 0.24.2 to 0.24.4 (#523) [#523](https://github.com/openshift/assisted-installer/pull/523) * NO-ISSUE: Bump github.com/operator-framework/operator-lifecycle-manager (#525) [#525](https://github.com/openshift/assisted-installer/pull/525) * NO-ISSUE: Bump github.com/go-openapi/swag from 0.22.0 to 0.22.3 (#521) [#521](https://github.com/openshift/assisted-installer/pull/521) * [MGMT-10085](https://issues.redhat.com/browse/MGMT-10085): Get real filepath of RAID device (#517) [#517](https://github.com/openshift/assisted-installer/pull/517) * NO-ISSUE: Bump github.com/go-openapi/swag from 0.21.1 to 0.22.0 (#515) [#515](https://github.com/openshift/assisted-installer/pull/515) * [MGMT-11100](https://issues.redhat.com/browse/MGMT-11100): changing url for router status check from console to canary (#512) [#512](https://github.com/openshift/assisted-installer/pull/512) * [MGMT-11365](https://issues.redhat.com/browse/MGMT-11365): fix flaky installation of golangci-lint (#510) [#510](https://github.com/openshift/assisted-installer/pull/510) * NO-ISSUE: Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 (#508) [#508](https://github.com/openshift/assisted-installer/pull/508) * NO-ISSUE: Add `jhernand` to `OWNERS_ALIASES` (#507) [#507](https://github.com/openshift/assisted-installer/pull/507) * [MGMT-11106](https://issues.redhat.com/browse/MGMT-11106): Writing controller logs to file in order to be able to send (#506) [#506](https://github.com/openshift/assisted-installer/pull/506) * NO-ISSUE: Bump github.com/go-openapi/strfmt from 0.21.2 to 0.21.3 (#504) [#504](https://github.com/openshift/assisted-installer/pull/504) * NO-ISSUE: Bump k8s.io/apimachinery from 0.24.2 to 0.24.3 (#502) [#502](https://github.com/openshift/assisted-installer/pull/502) * [BZ-2107887](https://issues.redhat.com/browse/BZ-2107887): misleading configuring state when installing with assisted-installer (#501) [#501](https://github.com/openshift/assisted-installer/pull/501) * [MGMT-8855](https://issues.redhat.com/browse/MGMT-8855): repeated event messages in wait for olm operators due to (#499) [#499](https://github.com/openshift/assisted-installer/pull/499) * NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.12.2 to 0.12.3 (#498) [#498](https://github.com/openshift/assisted-installer/pull/498) * [MGMT-11100](https://issues.redhat.com/browse/MGMT-11100): Adding get router status logic in case of sno failure. (#497) [#497](https://github.com/openshift/assisted-installer/pull/497) * [MGMT-11063](https://issues.redhat.com/browse/MGMT-11063): assisted-installer isn't sending the host logs in case the installation was successful and cacert was added (#495) [#495](https://github.com/openshift/assisted-installer/pull/495) * NO-ISSUE: add stage info in case converged flow is enabled (#493) [#493](https://github.com/openshift/assisted-installer/pull/493) * NO-ISSUE: Add @rccrdpccl as approver (#492) [#492](https://github.com/openshift/assisted-installer/pull/492) * NO-ISSUE: Bump github.com/hashicorp/go-version from 1.5.0 to 1.6.0 (#491) [#491](https://github.com/openshift/assisted-installer/pull/491) * [MGMT-10660](https://issues.redhat.com/browse/MGMT-10660): Refactor assisted-installer ops code to allow writing unitests (#488) [#488](https://github.com/openshift/assisted-installer/pull/488) * NO-ISSUE: In case must-gather upload failed but logs were gathered (#487) [#487](https://github.com/openshift/assisted-installer/pull/487) * NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.12.1 to 0.12.2 (#489) [#489](https://github.com/openshift/assisted-installer/pull/489) * [Full changelog](https://github.com/openshift/assisted-installer/compare/aa467482746b55af2a64137302a7b3ef556c83c4...bc8fd423f1f7b47c46a9d97ede546f989785015d) ### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/ce915b7d0a3d3b225b6a190d2babf20cc864d22e) * Update README.md [#395](https://github.com/openshift/assisted-installer-agent/pull/395) * [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e74ffbf509d382c42891884b90a8a9fb82922f5e...ce915b7d0a3d3b225b6a190d2babf20cc864d22e) ### [alibaba-cloud-controller-manager, alibaba-cloud-csi-driver, alibaba-disk-csi-driver-operator, alibaba-machine-controllers, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, gcp-cloud-controller-manager, gcp-cluster-api-controllers, gcp-machine-controllers, gcp-pd-csi-driver, gcp-pd-csi-driver-operator, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibm-vpc-node-label-updater, ibmcloud-machine-controllers, kuryr-cni, kuryr-controller, nutanix-machine-controllers, pod, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector](https://github.com/openshift/kubernetes/tree/306a47e15eb91b22d3716b0d7d48fdd35e1ce2ba) * [OCPBUGS-30454](https://issues.redhat.com/browse/OCPBUGS-30454): CVE 2024-24786 [#1974](https://github.com/openshift/kubernetes/pull/1974) * UPSTREAM: <drop>: Bump golang.org/x/net to v0.23.0 [#1940](https://github.com/openshift/kubernetes/pull/1940) * Address CVE [#13](https://github.com/openshift/kubernetes/pull/13) * [OCPBUGS-15527](https://issues.redhat.com/browse/OCPBUGS-15527): Prevent partially filled HPA behaviors from crashing kube-controller-manager [#1887](https://github.com/openshift/kubernetes/pull/1887) * [OCPBUGS-25815](https://issues.redhat.com/browse/OCPBUGS-25815): Fix device uncertain errors on reboot 4.12 [#1833](https://github.com/openshift/kubernetes/pull/1833) * [OCPBUGS-25214](https://issues.redhat.com/browse/OCPBUGS-25214): legacy-cloud-providers: prevent index out-of-range in getNextUnitNumber [#1835](https://github.com/openshift/kubernetes/pull/1835) * [OCPBUGS-23568](https://issues.redhat.com/browse/OCPBUGS-23568): Update to kubernetes 1.25.16 [#1807](https://github.com/openshift/kubernetes/pull/1807) * [OCPBUGS-23288](https://issues.redhat.com/browse/OCPBUGS-23288): UPSTREAM: 121881: Use golang library instead of mklink [#1803](https://github.com/openshift/kubernetes/pull/1803) * [OCPBUGS-20113](https://issues.redhat.com/browse/OCPBUGS-20113): UPSTREAM: <carry>: Do not allow nodes to set forbidden openshift labels [#1747](https://github.com/openshift/kubernetes/pull/1747) * openshift-hack: Fix sporadic 141 errors in build-rpms [#1774](https://github.com/openshift/kubernetes/pull/1774) * [OCPBUGS-21435](https://issues.redhat.com/browse/OCPBUGS-21435): [release-4.12] UPSTREAM: 121125: [1.25][CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 [#1760](https://github.com/openshift/kubernetes/pull/1760) * [OCPBUGS-18288](https://issues.redhat.com/browse/OCPBUGS-18288), [OCPBUGS-19483](https://issues.redhat.com/browse/OCPBUGS-19483): Update to kubernetes 1.25.14 [#1719](https://github.com/openshift/kubernetes/pull/1719) * [OCPBUGS-18768](https://issues.redhat.com/browse/OCPBUGS-18768): UPSTREAM: <carry>: Force using host go always and use host libriaries [#1694](https://github.com/openshift/kubernetes/pull/1694) * [OCPBUGS-17188](https://issues.redhat.com/browse/OCPBUGS-17188): Update to Kubernetes 1.25.12 [#1669](https://github.com/openshift/kubernetes/pull/1669) * [OCPBUGS-17159](https://issues.redhat.com/browse/OCPBUGS-17159): Increase service idle max timeout to 100 minutes [#1662](https://github.com/openshift/kubernetes/pull/1662) * [OCPBUGS-8737](https://issues.redhat.com/browse/OCPBUGS-8737): UPSTREAM: <drop>: bump apiserver-library-go for scc fix [#1619](https://github.com/openshift/kubernetes/pull/1619) * [OCPBUGS-15309](https://issues.redhat.com/browse/OCPBUGS-15309): Bump to k8s 1.25.11 [#1615](https://github.com/openshift/kubernetes/pull/1615) * [OCPBUGS-14745](https://issues.redhat.com/browse/OCPBUGS-14745): [release-4.12] UPSTREAM: 118383: bump cadvisor for upstream patch 3301 [#1600](https://github.com/openshift/kubernetes/pull/1600) * [OCPBUGS-13173](https://issues.redhat.com/browse/OCPBUGS-13173): Bump to k8s 1.25.10 [#1582](https://github.com/openshift/kubernetes/pull/1582) * [OCPBUGS-7589](https://issues.redhat.com/browse/OCPBUGS-7589): UPSTREAM: <carry>: add default kubelet sysctls within rpm [#1478](https://github.com/openshift/kubernetes/pull/1478) * [OCPBUGS-11166](https://issues.redhat.com/browse/OCPBUGS-11166): UPSTREAM: <carry>: Force using the go tooling from the system [#1531](https://github.com/openshift/kubernetes/pull/1531) * [OCPBUGS-11166](https://issues.redhat.com/browse/OCPBUGS-11166): Bump to k8s 1.25.8 [#1527](https://github.com/openshift/kubernetes/pull/1527) * [OCPBUGS-8705](https://issues.redhat.com/browse/OCPBUGS-8705): Fix mounted volume expansion tests [#1503](https://github.com/openshift/kubernetes/pull/1503) * [OCPBUGS-7078](https://issues.redhat.com/browse/OCPBUGS-7078): Bump to k8s 1.25.7 [#1496](https://github.com/openshift/kubernetes/pull/1496) * [OCPBUGS-5769](https://issues.redhat.com/browse/OCPBUGS-5769): scc admission - seccomp profiles fix [#1471](https://github.com/openshift/kubernetes/pull/1471) * [OCPBUGS-5490](https://issues.redhat.com/browse/OCPBUGS-5490): remove in-tree volume limits test now that CSIMigration is GA [#1449](https://github.com/openshift/kubernetes/pull/1449) * [OCPBUGS-4808](https://issues.redhat.com/browse/OCPBUGS-4808): Apply shared defaulters to CRD-based routes. [#1441](https://github.com/openshift/kubernetes/pull/1441) * [OCPBUGS-4366](https://issues.redhat.com/browse/OCPBUGS-4366): Update to 1.25.4 [#1434](https://github.com/openshift/kubernetes/pull/1434) * [OCPBUGS-3878](https://issues.redhat.com/browse/OCPBUGS-3878): UPSTREAM: <drop>: Bump openshift/api. [#1425](https://github.com/openshift/kubernetes/pull/1425) * [OCPBUGS-3875](https://issues.redhat.com/browse/OCPBUGS-3875): UPSTREAM: <carry>: Add host assignment plugin for CRD-based routes. [#1427](https://github.com/openshift/kubernetes/pull/1427) * [OCPBUGS-3780](https://issues.redhat.com/browse/OCPBUGS-3780): UPSTREAM: <carry>: Add validation plugin for CRD-based route parity. [#1422](https://github.com/openshift/kubernetes/pull/1422) * [OCPBUGS-3503](https://issues.redhat.com/browse/OCPBUGS-3503): UPSTREAM: <drop>: Bump library-go. [#1423](https://github.com/openshift/kubernetes/pull/1423) * Bug OCPBUGS-2927: Disable expansion in SC, if driver does not support it [#1403](https://github.com/openshift/kubernetes/pull/1403) * [OCPBUGS-3503](https://issues.redhat.com/browse/OCPBUGS-3503): UPSTREAM: : Bump library-go. [#1414](https://github.com/openshift/kubernetes/pull/1414) * [OCPBUGS-3094](https://issues.redhat.com/browse/OCPBUGS-3094): Tag AWS security groups at creation [#1412](https://github.com/openshift/kubernetes/pull/1412) * [OCPBUGS-3071](https://issues.redhat.com/browse/OCPBUGS-3071): 4.12: revert: 1340: tag AWS security group at creation [#1405](https://github.com/openshift/kubernetes/pull/1405) * [OCPBUGS-3117](https://issues.redhat.com/browse/OCPBUGS-3117): UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines [#1407](https://github.com/openshift/kubernetes/pull/1407) * [OCPBUGS-2774](https://issues.redhat.com/browse/OCPBUGS-2774): UPSTREAM: 112807 Fix Load balancer services with xTP local [#1400](https://github.com/openshift/kubernetes/pull/1400) * UPSTREAM: 113208: Set default test timeouts first, only then modify the required ones [#1396](https://github.com/openshift/kubernetes/pull/1396) * UPSTREAM: <carry>: Bug 2098054: tag AWS security group at creation [#1340](https://github.com/openshift/kubernetes/pull/1340) * UPSTREAM: 113135: Wait for pod not running or gone in storage tests [#1394](https://github.com/openshift/kubernetes/pull/1394) * Bump to k8s 1.25.2 [#1380](https://github.com/openshift/kubernetes/pull/1380) * [Bug 2041317](https://bugzilla.redhat.com/show_bug.cgi?id=2041317): Fix replica calculation at start of HPA scaling policy period [#1391](https://github.com/openshift/kubernetes/pull/1391) * UPSTREAM: <carry>: allow annotating with a specific suite [#1388](https://github.com/openshift/kubernetes/pull/1388) * k8s 1.25.0 [#1360](https://github.com/openshift/kubernetes/pull/1360) * UPSTREAM: <carry>: Dockerfile: use centos:stream9 [#1366](https://github.com/openshift/kubernetes/pull/1366) * [OCPBUGS-718](https://issues.redhat.com/browse/OCPBUGS-718): UPSTREAM: 112267: aws: skip health rules if they are a subnet of the client rule [#1358](https://github.com/openshift/kubernetes/pull/1358) * UPSTREAM: <carry>: optionally enable retry after until apiserver is ready [#1346](https://github.com/openshift/kubernetes/pull/1346) * UPSTREAM: 110639: endpointslices: node missing on Pod scenario [#1359](https://github.com/openshift/kubernetes/pull/1359) * UPSTREAM: <carry>: Update kubensenter to use exec instead of subprocess [#1350](https://github.com/openshift/kubernetes/pull/1350) * UPSTREAM: 110039: Add readinessProbe to aggregated api service test [#1307](https://github.com/openshift/kubernetes/pull/1307) * [Bug 2118318](https://bugzilla.redhat.com/show_bug.cgi?id=2118318): UPSTREAM: 110939: don't quota events.k8s.io events by default [#1344](https://github.com/openshift/kubernetes/pull/1344) * UPSTREAM: 111789: Update Netpol e2e tests to use framework CreateName… [#1349](https://github.com/openshift/kubernetes/pull/1349) * UPSTREAM: <carry>: Skip session affinity timeout tests [#1339](https://github.com/openshift/kubernetes/pull/1339) * [Bug 2117569](https://bugzilla.redhat.com/show_bug.cgi?id=2117569): UPSTREAM: 110888: feat: fix a bug thaat not all event be ignored by gc controller [#1338](https://github.com/openshift/kubernetes/pull/1338) * Add kubensenter to the openshift RPM [#1327](https://github.com/openshift/kubernetes/pull/1327) * UPSTREAM: 111306: Make scheduling e2e tests run PSa-restricted pods [#1333](https://github.com/openshift/kubernetes/pull/1333) * trt-393: add plugin name to caches not synchronized error [#1330](https://github.com/openshift/kubernetes/pull/1330) * [Bug 2102383](https://bugzilla.redhat.com/show_bug.cgi?id=2102383): UPSTREAM: 89885: Fix panic in openstack.InstanceExistsByProviderID() [#1315](https://github.com/openshift/kubernetes/pull/1315) * [Bug 2088606](https://bugzilla.redhat.com/show_bug.cgi?id=2088606): Overly loose admission check when configuring UpstreamResolvers or ForwardPlugin [#1247](https://github.com/openshift/kubernetes/pull/1247) * [Bug 2081194](https://bugzilla.redhat.com/show_bug.cgi?id=2081194): UPSTREAM: <carry>: update list of deprecated apis [#1091](https://github.com/openshift/kubernetes/pull/1091) * [Bug 2082773](https://bugzilla.redhat.com/show_bug.cgi?id=2082773): Fix resizing of ephemeral volumes [#1296](https://github.com/openshift/kubernetes/pull/1296) * UPSTREAM: <carry>: Remove reserved CPUs from default set [#1295](https://github.com/openshift/kubernetes/pull/1295) * [Bug 2094012](https://bugzilla.redhat.com/show_bug.cgi?id=2094012): UPSTREAM: 110652: fix: --chunk-size with selector returns missing result [#1303](https://github.com/openshift/kubernetes/pull/1303) * [Full changelog](https://github.com/openshift/kubernetes/compare/2e1e13716c780e450a311e9a73bb90cf183f1e40...306a47e15eb91b22d3716b0d7d48fdd35e1ce2ba) ### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/a3c0e6b7016017e26603f9990bce2891374f3ca1) * [OCPBUGS-31984](https://issues.redhat.com/browse/OCPBUGS-31984): Bump golang.org/x/net to v0.23.0 [#52](https://github.com/openshift/apiserver-network-proxy/pull/52) * [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/3362d673b054807a4974b4d600486933f7e0bd42...a3c0e6b7016017e26603f9990bce2891374f3ca1) ### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/f90fb443bc71b2319d8cce276b280c26d0f18fb7) * [OCPBUGS-32079](https://issues.redhat.com/browse/OCPBUGS-32079): update for CVE-2023-45288 [release-4.12] [#85](https://github.com/openshift/cloud-provider-aws/pull/85) * [OCPBUGS-20722](https://issues.redhat.com/browse/OCPBUGS-20722): Update golang.org/x/net to v0.17.0 [#55](https://github.com/openshift/cloud-provider-aws/pull/55) * Updating ose-aws-cloud-controller-manager images to be consistent with ART [#25](https://github.com/openshift/cloud-provider-aws/pull/25) * [OCPBUGS-2076](https://issues.redhat.com/browse/OCPBUGS-2076): Replace k8s.io/cloud-provider with openshift's version [#28](https://github.com/openshift/cloud-provider-aws/pull/28) * [OCPBUGS-1413](https://issues.redhat.com/browse/OCPBUGS-1413): Rebase 03.10.2022 k8s 1.25 [#26](https://github.com/openshift/cloud-provider-aws/pull/26) * Merge https://github.com/kubernetes/cloud-provider-aws:master into master [#24](https://github.com/openshift/cloud-provider-aws/pull/24) * Updating ose-aws-cloud-controller-manager images to be consistent with ART [#23](https://github.com/openshift/cloud-provider-aws/pull/23) * [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/611fef9447b1bd6602561a07a69e4d11ff1ca161...f90fb443bc71b2319d8cce276b280c26d0f18fb7) ### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/16156accbe3b9bcedbe39ef988170e1f644fcd75) * [OCPBUGS-20810](https://issues.redhat.com/browse/OCPBUGS-20810): bump golang.org/x/net to v0.17.0 [#483](https://github.com/openshift/cluster-api-provider-aws/pull/483) * [OCPBUGS-15548](https://issues.redhat.com/browse/OCPBUGS-15548): Pass right SGs for IsExternallyManaged on creation [#469](https://github.com/openshift/cluster-api-provider-aws/pull/469) * Updating ose-aws-cluster-api-controllers images to be consistent with ART [#448](https://github.com/openshift/cluster-api-provider-aws/pull/448) * Rebase to v1.5.0 [#443](https://github.com/openshift/cluster-api-provider-aws/pull/443) * [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/b7408966b5e5952e60588ca08794c876f2cb575f...16156accbe3b9bcedbe39ef988170e1f644fcd75) ### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/bbab20f9559a1be6f39fed8e604712d41f507b49) * [OCPBUGS-33457](https://issues.redhat.com/browse/OCPBUGS-33457): UPSTREAM: 1919: Add reserved-volume-attachments [#267](https://github.com/openshift/aws-ebs-csi-driver/pull/267) * [OCPBUGS-20919](https://issues.redhat.com/browse/OCPBUGS-20919): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#241](https://github.com/openshift/aws-ebs-csi-driver/pull/241) * [OCPBUGS-14281](https://issues.redhat.com/browse/OCPBUGS-14281): Volume unmount repeats after successful unmount, preventing pod delete [#226](https://github.com/openshift/aws-ebs-csi-driver/pull/226) * UPSTREAM: <carry>: Remove .github files [#212](https://github.com/openshift/aws-ebs-csi-driver/pull/212) * [STOR-860](https://issues.redhat.com/browse/STOR-860): Rebase to v1.11.4 for OCP 4.12 [#206](https://github.com/openshift/aws-ebs-csi-driver/pull/206) * [OCPBUGS-1574](https://issues.redhat.com/browse/OCPBUGS-1574): UPSTREAM: 1398: Add resolver to handle custom endpoints [#208](https://github.com/openshift/aws-ebs-csi-driver/pull/208) * Fix older dockerfile [#207](https://github.com/openshift/aws-ebs-csi-driver/pull/207) * Updating ose-aws-ebs-csi-driver images to be consistent with ART [#202](https://github.com/openshift/aws-ebs-csi-driver/pull/202) * [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/46bd913789c6c1c246ecff2d982e4b3b4654254d...bbab20f9559a1be6f39fed8e604712d41f507b49) ### [aws-ebs-csi-driver-operator](https://github.com/openshift/aws-ebs-csi-driver-operator/tree/71bb7838f93bc88e679b0a967fbf1660cdf8aff1) * [OCPBUGS-33457](https://issues.redhat.com/browse/OCPBUGS-33457): Explicitly reserve 1 attachment for the root disk [#308](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/308) * [OCPBUGS-21018](https://issues.redhat.com/browse/OCPBUGS-21018): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#282](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/282) * [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#265](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/265) * [OCPBUGS-13721](https://issues.redhat.com/browse/OCPBUGS-13721): assets/hypershift/controller_sa: Set controller ServiceAccount imagePullSecrets [#230](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/230) * 4.12: OCPBUGS-10646: 4.12 hypershift set control plane [#208](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/208) * [OCPBUGS-7892](https://issues.redhat.com/browse/OCPBUGS-7892): do not inject-proxy when deploying in hypershift control plane [#187](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/187) * [OCPBUGS-4251](https://issues.redhat.com/browse/OCPBUGS-4251): Add HyperShift specific priorityClass [#170](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/170) * [OCPBUGS-4527](https://issues.redhat.com/browse/OCPBUGS-4527): hypershift: use correct kubeconfig secret [#171](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/171) * [OCPBUGS-1904](https://issues.redhat.com/browse/OCPBUGS-1904): Don't deploy VolumeSnapshotClass in static controller [#166](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/166) * [STOR-1040](https://issues.redhat.com/browse/STOR-1040): port to hypershift [#159](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/159) * [OCPBUGS-1904](https://issues.redhat.com/browse/OCPBUGS-1904): Only deploy VolumeSnapshotClass when CRD exists [#164](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/164) * Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART [#162](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/162) * Reformat for go 1.19 [#163](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/163) * [STOR-858](https://issues.redhat.com/browse/STOR-858): Bump github.com/openshift/* and k8s.io/* [#161](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/161) * [STOR-764](https://issues.redhat.com/browse/STOR-764): Change the default StorageClass to the CSI one (AWS) [#160](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/160) * Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART [#158](https://github.com/openshift/aws-ebs-csi-driver-operator/pull/158) * [Full changelog](https://github.com/openshift/aws-ebs-csi-driver-operator/compare/2c9edc2a947c6677fa9def34172f8e8be532084b...71bb7838f93bc88e679b0a967fbf1660cdf8aff1) ### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/440886d004a6ecbc45d5bc04c2f703fb0efaa632) * [OCPBUGS-24564](https://issues.redhat.com/browse/OCPBUGS-24564): Reduce metrics cardinality [#97](https://github.com/openshift/machine-api-provider-aws/pull/97) * [OCPBUGS-21562](https://issues.redhat.com/browse/OCPBUGS-21562): Update golang.org/x/net to v0.17.0 [#90](https://github.com/openshift/machine-api-provider-aws/pull/90) * [OCPCLOUD-1131](https://issues.redhat.com/browse/OCPCLOUD-1131): Implement fetching instance types from API [#53](https://github.com/openshift/machine-api-provider-aws/pull/53) * Updating ose-machine-api-provider-aws images to be consistent with ART [#45](https://github.com/openshift/machine-api-provider-aws/pull/45) * [OCPBUGS-1411](https://issues.redhat.com/browse/OCPBUGS-1411): Bump k8s dependencies to 1.25 [#52](https://github.com/openshift/machine-api-provider-aws/pull/52) * Update Machine API Operator dependency [#51](https://github.com/openshift/machine-api-provider-aws/pull/51) * Update Machine API operator dependency [#49](https://github.com/openshift/machine-api-provider-aws/pull/49) * pkg/actuators/machineset/controller: Fix %s in scale-from-zero logging [#43](https://github.com/openshift/machine-api-provider-aws/pull/43) * [Bug 2106733](https://bugzilla.redhat.com/show_bug.cgi?id=2106733): Fix panic when accessing nil machine annotations map [#46](https://github.com/openshift/machine-api-provider-aws/pull/46) * [Bug 2060068](https://bugzilla.redhat.com/show_bug.cgi?id=2060068): check securityGroupIDs for emptiness [#44](https://github.com/openshift/machine-api-provider-aws/pull/44) * [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/48926df1a7c81558cc17c588a9ef822ef58e05b1...440886d004a6ecbc45d5bc04c2f703fb0efaa632) ### [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook/tree/31917a5f3e7557916b8e92a0a9ae529ab176f738) * [OCPBUGS-32880](https://issues.redhat.com/browse/OCPBUGS-32880): Upgrade go-jose module to 2.6.3 [#191](https://github.com/openshift/aws-pod-identity-webhook/pull/191) * [OCPBUGS-21312](https://issues.redhat.com/browse/OCPBUGS-21312): Upgrade golang/x/net for CVE-2023-39325 (4.12) [#185](https://github.com/openshift/aws-pod-identity-webhook/pull/185) * NO-ISSUE: Sync OWNERS with team members [#178](https://github.com/openshift/aws-pod-identity-webhook/pull/178) * NO-ISSUE: snyk: exclude vendor/ [#174](https://github.com/openshift/aws-pod-identity-webhook/pull/174) * Update OWNERS [#157](https://github.com/openshift/aws-pod-identity-webhook/pull/157) * Updating ose-aws-pod-identity-webhook images to be consistent with ART [#156](https://github.com/openshift/aws-pod-identity-webhook/pull/156) * Updating ose-aws-pod-identity-webhook images to be consistent with ART [#155](https://github.com/openshift/aws-pod-identity-webhook/pull/155) * [Full changelog](https://github.com/openshift/aws-pod-identity-webhook/compare/7bcd87c48a619d699eab6d4c6369d8e70102d90f...31917a5f3e7557916b8e92a0a9ae529ab176f738) ### [azure-cloud-controller-manager, azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure/tree/2193ccfa8575aeb0520a25b77ec963097a66cd6e) * [OCPBUGS-21401](https://issues.redhat.com/browse/OCPBUGS-21401): Bump golang.org/x/net to v0.18.0 [#95](https://github.com/openshift/cloud-provider-azure/pull/95) * [OCPBUGS-22832](https://issues.redhat.com/browse/OCPBUGS-22832): UPSTREAM: 2805: add disk lun check in AttachDisk to avoid race condition [#91](https://github.com/openshift/cloud-provider-azure/pull/91) * [OCPBUGS-17159](https://issues.redhat.com/browse/OCPBUGS-17159): Increase service idle max timeout to 100 minutes [#82](https://github.com/openshift/cloud-provider-azure/pull/82) * [OCPBUGS-2076](https://issues.redhat.com/browse/OCPBUGS-2076): Replace k8s.io/cloud-provider with openshift's version [#44](https://github.com/openshift/cloud-provider-azure/pull/44) * Updating ose-azure-cloud-controller-manager images to be consistent with ART [#41](https://github.com/openshift/cloud-provider-azure/pull/41) * Updating ose-azure-cloud-node-manager images to be consistent with ART [#40](https://github.com/openshift/cloud-provider-azure/pull/40) * [OCPBUGS-1413](https://issues.redhat.com/browse/OCPBUGS-1413): Rebase cloud-provider-azure 29.09.2022 [#39](https://github.com/openshift/cloud-provider-azure/pull/39) * fix .dockerignore to satisfy OCP specific requirements [#37](https://github.com/openshift/cloud-provider-azure/pull/37) * Replace .dockerignore file with the OCP specific one [#36](https://github.com/openshift/cloud-provider-azure/pull/36) * Updating ose-azure-cloud-node-manager images to be consistent with ART [#34](https://github.com/openshift/cloud-provider-azure/pull/34) * Updating ose-azure-cloud-controller-manager images to be consistent with ART [#35](https://github.com/openshift/cloud-provider-azure/pull/35) * [Full changelog](https://github.com/openshift/cloud-provider-azure/compare/673e7b9d40ecdd9b9aa938113aedefb8aa33412e...2193ccfa8575aeb0520a25b77ec963097a66cd6e) ### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/32491247e933ad705424d5bdac0ab7770ac63789) * [OCPBUGS-21489](https://issues.redhat.com/browse/OCPBUGS-21489): bump golang.org/x/net to v0.17.0 [#289](https://github.com/openshift/cluster-api-provider-azure/pull/289) * [Bug 2087043](https://bugzilla.redhat.com/show_bug.cgi?id=2087043): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:main into master [#260](https://github.com/openshift/cluster-api-provider-azure/pull/260) * Updating ose-azure-cluster-api-controllers images to be consistent with ART [#263](https://github.com/openshift/cluster-api-provider-azure/pull/263) * UPSTREAM: <carry>: remove "coverage.*" from gitignore [#262](https://github.com/openshift/cluster-api-provider-azure/pull/262) * UPSTREAM: <carry>: bump .ci-operator.yaml to use golang 1.18 [#261](https://github.com/openshift/cluster-api-provider-azure/pull/261) * Updating ose-azure-cluster-api-controllers images to be consistent with ART [#259](https://github.com/openshift/cluster-api-provider-azure/pull/259) * [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/2118fe60689f382c8ce1c9150c6014cd9340b965...32491247e933ad705424d5bdac0ab7770ac63789) ### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/a930c89beac514d4d98f6055bf6cfe78eeec25a5) * [OCPBUGS-22941](https://issues.redhat.com/browse/OCPBUGS-22941): UPSTREAM: 1755: fix: detach disk failure when there is throttling [#62](https://github.com/openshift/azure-disk-csi-driver/pull/62) * [OCPBUGS-22832](https://issues.redhat.com/browse/OCPBUGS-22832): UPSTREAM: 2805: add disk lun check in AttachDisk to avoid race condition [#60](https://github.com/openshift/azure-disk-csi-driver/pull/60) * [OCPBUGS-20675](https://issues.redhat.com/browse/OCPBUGS-20675): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#56](https://github.com/openshift/azure-disk-csi-driver/pull/56) * Updating ose-azure-disk-csi-driver images to be consistent with ART [#34](https://github.com/openshift/azure-disk-csi-driver/pull/34) * UPSTREAM: <carry>: Remove .github files [#33](https://github.com/openshift/azure-disk-csi-driver/pull/33) * [STOR-864](https://issues.redhat.com/browse/STOR-864): Rebase to v1.22.0 [#32](https://github.com/openshift/azure-disk-csi-driver/pull/32) * [Bug 2111811](https://bugzilla.redhat.com/show_bug.cgi?id=2111811): UPSTREAM 1367, 1409: Update max data disk count table [#29](https://github.com/openshift/azure-disk-csi-driver/pull/29) * Updating ose-azure-disk-csi-driver images to be consistent with ART [#28](https://github.com/openshift/azure-disk-csi-driver/pull/28) * [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/f4bb81ea10d3c72f245c11ae99e9c5cddd2761a7...a930c89beac514d4d98f6055bf6cfe78eeec25a5) ### [azure-disk-csi-driver-operator](https://github.com/openshift/azure-disk-csi-driver-operator/tree/988b8cc8ead51c2904c6cb75446529bfe3674ee3) * [OCPBUGS-20749](https://issues.redhat.com/browse/OCPBUGS-20749): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#103](https://github.com/openshift/azure-disk-csi-driver-operator/pull/103) * [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#95](https://github.com/openshift/azure-disk-csi-driver-operator/pull/95) * [OCPBUGS-7885](https://issues.redhat.com/browse/OCPBUGS-7885): Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars [#70](https://github.com/openshift/azure-disk-csi-driver-operator/pull/70) * [OCPBUGS-3425](https://issues.redhat.com/browse/OCPBUGS-3425): Only deploy VolumeSnapshotClass if CRD exists [#59](https://github.com/openshift/azure-disk-csi-driver-operator/pull/59) * Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#55](https://github.com/openshift/azure-disk-csi-driver-operator/pull/55) * [STOR-858](https://issues.redhat.com/browse/STOR-858): Bump github.com/openshift/* and k8s.io/* [#53](https://github.com/openshift/azure-disk-csi-driver-operator/pull/53) * Updating ose-azure-disk-csi-driver-operator images to be consistent with ART [#51](https://github.com/openshift/azure-disk-csi-driver-operator/pull/51) * [Full changelog](https://github.com/openshift/azure-disk-csi-driver-operator/compare/c9fa000ca7bccec9261f50b30cd9a9c826f48dde...988b8cc8ead51c2904c6cb75446529bfe3674ee3) ### [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver/tree/15aade4d58785b54ac732a660f1359132d27f9b9) * [OCPBUGS-20842](https://issues.redhat.com/browse/OCPBUGS-20842): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#39](https://github.com/openshift/azure-file-csi-driver/pull/39) * [STOR-865](https://issues.redhat.com/browse/STOR-865): Rebase to v1.21.0 for OCP 4.12 [#17](https://github.com/openshift/azure-file-csi-driver/pull/17) * Updating azure-file-csi-driver images to be consistent with ART [#19](https://github.com/openshift/azure-file-csi-driver/pull/19) * UPSTREAM: <carry>: Remove .github files [#18](https://github.com/openshift/azure-file-csi-driver/pull/18) * Updating azure-file-csi-driver images to be consistent with ART [#16](https://github.com/openshift/azure-file-csi-driver/pull/16) * [Full changelog](https://github.com/openshift/azure-file-csi-driver/compare/c322c8f3392dcd6c978241adf75cc7a0e580a8e7...15aade4d58785b54ac732a660f1359132d27f9b9) ### [azure-file-csi-driver-operator](https://github.com/openshift/azure-file-csi-driver-operator/tree/060ba825fead5953bef544017ef4b3d0cbabe3e5) * [OCPBUGS-20946](https://issues.redhat.com/browse/OCPBUGS-20946): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#78](https://github.com/openshift/azure-file-csi-driver-operator/pull/78) * [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#71](https://github.com/openshift/azure-file-csi-driver-operator/pull/71) * [STOR-858](https://issues.redhat.com/browse/STOR-858): Bump github.com/openshift/* and k8s.io/* [#37](https://github.com/openshift/azure-file-csi-driver-operator/pull/37) * Updating azure-file-csi-driver-operator images to be consistent with ART [#38](https://github.com/openshift/azure-file-csi-driver-operator/pull/38) * [Bug 2080449](https://bugzilla.redhat.com/show_bug.cgi?id=2080449): disable VHD disk feature [#33](https://github.com/openshift/azure-file-csi-driver-operator/pull/33) * Updating azure-file-csi-driver-operator images to be consistent with ART [#34](https://github.com/openshift/azure-file-csi-driver-operator/pull/34) * [Full changelog](https://github.com/openshift/azure-file-csi-driver-operator/compare/a5c172bdbe328e75192f7333369e74f5df2d6abb...060ba825fead5953bef544017ef4b3d0cbabe3e5) ### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/6b5bfffdcf6315871d6c296025db7d0812132868) * [OCPBUGS-36148](https://issues.redhat.com/browse/OCPBUGS-36148): Fix mapi_instance_create_failed metric with accelerated networking [#115](https://github.com/openshift/machine-api-provider-azure/pull/115) * [OCPBUGS-30809](https://issues.redhat.com/browse/OCPBUGS-30809): Don't create availability set when using spot instances [#105](https://github.com/openshift/machine-api-provider-azure/pull/105) * [OCPBUGS-24564](https://issues.redhat.com/browse/OCPBUGS-24564): Reduce cardinality [#97](https://github.com/openshift/machine-api-provider-azure/pull/97) * [OCPBUGS-20741](https://issues.redhat.com/browse/OCPBUGS-20741): Bump x/net package to v0.18.0 [#84](https://github.com/openshift/machine-api-provider-azure/pull/84) * [OCPBUGS-19549](https://issues.redhat.com/browse/OCPBUGS-19549), [OCPBUGS-22247](https://issues.redhat.com/browse/OCPBUGS-22247): Fix empty clusterName references for GenerateMachinePublicIPName [#82](https://github.com/openshift/machine-api-provider-azure/pull/82) * [OCPBUGS-17960](https://issues.redhat.com/browse/OCPBUGS-17960): Machine Actuator should not set metadata.name [#71](https://github.com/openshift/machine-api-provider-azure/pull/71) * [OCPBUGS-17221](https://issues.redhat.com/browse/OCPBUGS-17221): Add user defined Tags to NIC Azure resources [#69](https://github.com/openshift/machine-api-provider-azure/pull/69) * [OCPBUGS-1871](https://issues.redhat.com/browse/OCPBUGS-1871): Fix machine not going failed with invalid vmsize [#36](https://github.com/openshift/machine-api-provider-azure/pull/36) * [OCPBUGS-1411](https://issues.redhat.com/browse/OCPBUGS-1411): Bump k8s dependencies to 1.25 [#35](https://github.com/openshift/machine-api-provider-azure/pull/35) * Update Machine API Operator dependency to fix phase transition metric [#33](https://github.com/openshift/machine-api-provider-azure/pull/33) * [Bug 2108647](https://bugzilla.redhat.com/show_bug.cgi?id=2108647): Implement fetching SKUs information from Azure [#32](https://github.com/openshift/machine-api-provider-azure/pull/32) * [Bug 2117439](https://bugzilla.redhat.com/show_bug.cgi?id=2117439): Populate internalLoadBalancer for Control Plane Machines when not set [#31](https://github.com/openshift/machine-api-provider-azure/pull/31) * Update Machine API Operator to bring in drain controller update [#30](https://github.com/openshift/machine-api-provider-azure/pull/30) * [Bug 2085390](https://bugzilla.redhat.com/show_bug.cgi?id=2085390): make Azure instance types case-insensitive [#27](https://github.com/openshift/machine-api-provider-azure/pull/27) * Enable configuration of boot diagnostics when creating VMs [#24](https://github.com/openshift/machine-api-provider-azure/pull/24) * [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/b3c71cfab08545a4f095549afeb712bb25c4b2c4...6b5bfffdcf6315871d6c296025db7d0812132868) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/397b6739fa16d51e7d97ee3eecb38c9345c3e746) * [OCPBUGS-36179](https://issues.redhat.com/browse/OCPBUGS-36179): [release-4.12]: bump github.com/container/images for CVE fix [#8663](https://github.com/openshift/installer/pull/8663) * [OCPBUGS-22981](https://issues.redhat.com/browse/OCPBUGS-22981): IBMCloud: Add eu-es region [#7686](https://github.com/openshift/installer/pull/7686) * [OCPBUGS-30630](https://issues.redhat.com/browse/OCPBUGS-30630): baremetal: populate customDeploy in advance [#8144](https://github.com/openshift/installer/pull/8144) * [OCPBUGS-32449](https://issues.redhat.com/browse/OCPBUGS-32449): Updated libvirt installer to include multi-arch yq and symlink for backwards compatibility [#8290](https://github.com/openshift/installer/pull/8290) * [OCPBUGS-30768](https://issues.redhat.com/browse/OCPBUGS-30768): update RHCOS 4.12 bootimage metadata to 412.86.202402272018-0 [#8140](https://github.com/openshift/installer/pull/8140) * [OCPBUGS-30134](https://issues.redhat.com/browse/OCPBUGS-30134): [release-4.12] bump containerd for vulnerability fix [#8091](https://github.com/openshift/installer/pull/8091) * [OCPBUGS-27454](https://issues.redhat.com/browse/OCPBUGS-27454): baremetal: correct external_http_url for v6-only BMCs [#7900](https://github.com/openshift/installer/pull/7900) * [OCPBUGS-25593](https://issues.redhat.com/browse/OCPBUGS-25593): [release-4.12] OCPBUGS-16640: Update azure cli version to 2.49.0 [#7849](https://github.com/openshift/installer/pull/7849) * [OCPBUGS-23184](https://issues.redhat.com/browse/OCPBUGS-23184): azure: validation: validate defaultMachinePlatform [#7709](https://github.com/openshift/installer/pull/7709) * [OCPBUGS-25476](https://issues.redhat.com/browse/OCPBUGS-25476): destroy: gcp: fix destroying regional disks [#7845](https://github.com/openshift/installer/pull/7845) * [OCPBUGS-23302](https://issues.redhat.com/browse/OCPBUGS-23302): images: installer: add xz to the container [#7726](https://github.com/openshift/installer/pull/7726) * [OCPBUGS-23379](https://issues.redhat.com/browse/OCPBUGS-23379): images: update govc image in upi-installer [#7739](https://github.com/openshift/installer/pull/7739) * [OCPBUGS-22116](https://issues.redhat.com/browse/OCPBUGS-22116): Add KMS encryption keys if provided [#7769](https://github.com/openshift/installer/pull/7769) * [OCPBUGS-23329](https://issues.redhat.com/browse/OCPBUGS-23329): Specify google cloud CLI to version 447.0.0 [#7731](https://github.com/openshift/installer/pull/7731) * [OCPBUGS-22933](https://issues.redhat.com/browse/OCPBUGS-22933): [release-4.12]: vsphere: fix validation of CPUS and CoresPerSocket [#7677](https://github.com/openshift/installer/pull/7677) * [OCPBUGS-13288](https://issues.redhat.com/browse/OCPBUGS-13288): use python3 for cloud sdk [#7170](https://github.com/openshift/installer/pull/7170) * [OCPBUGS-18645](https://issues.redhat.com/browse/OCPBUGS-18645): new Aws secret regions support [#7473](https://github.com/openshift/installer/pull/7473) * [OCPBUGS-22288](https://issues.redhat.com/browse/OCPBUGS-22288): Don't log password values [#7627](https://github.com/openshift/installer/pull/7627) * [OCPBUGS-18644](https://issues.redhat.com/browse/OCPBUGS-18644): terraform: aws: secret regions now support ALIAS record [#7472](https://github.com/openshift/installer/pull/7472) * [OCPBUGS-17651](https://issues.redhat.com/browse/OCPBUGS-17651): Validate that the rendevousIP is assigned to a master [#7416](https://github.com/openshift/installer/pull/7416) * [OCPBUGS-20145](https://issues.redhat.com/browse/OCPBUGS-20145): [release-4.12] Use updated ansible-core for Openstack image [#7560](https://github.com/openshift/installer/pull/7560) * [OCPBUGS-18646](https://issues.redhat.com/browse/OCPBUGS-18646): Allow destroy for C2S isolated (us-iso and us-isob) partitions [#7474](https://github.com/openshift/installer/pull/7474) * [OCPBUGS-10992](https://issues.redhat.com/browse/OCPBUGS-10992): bootstrap-pivot: skip pivot in SCOS Live ISO [#7035](https://github.com/openshift/installer/pull/7035) * [CORS-2792](https://issues.redhat.com/browse/CORS-2792): AWS Shared VPC Backport [release-4.12] [#7435](https://github.com/openshift/installer/pull/7435) * [OCPBUGS-18320](https://issues.redhat.com/browse/OCPBUGS-18320): CORS-2445: GCP: Add osImage to the install config [#7454](https://github.com/openshift/installer/pull/7454) * [OCPBUGS-17404](https://issues.redhat.com/browse/OCPBUGS-17404): backport openstack UPI for ansible 2.10 [#7399](https://github.com/openshift/installer/pull/7399) * [OCPBUGS-16778](https://issues.redhat.com/browse/OCPBUGS-16778): bump RHCOS 4.12 bootimage metadata to 412.86.202308081039-0 [#7420](https://github.com/openshift/installer/pull/7420) * [OCPBUGS-17467](https://issues.redhat.com/browse/OCPBUGS-17467): Allow override of networkType [#7406](https://github.com/openshift/installer/pull/7406) * [OCPBUGS-17174](https://issues.redhat.com/browse/OCPBUGS-17174): Set AdditionalTrustBundle in override when mirroring not enabled [#7386](https://github.com/openshift/installer/pull/7386) * [OCPBUGS-16382](https://issues.redhat.com/browse/OCPBUGS-16382): azure: skip LB creation when not needed [#7342](https://github.com/openshift/installer/pull/7342) * [OCPBUGS-14868](https://issues.redhat.com/browse/OCPBUGS-14868): Shorten SNO installation duration by releasing CPC lease [#7242](https://github.com/openshift/installer/pull/7242) * [OCPBUGS-14495](https://issues.redhat.com/browse/OCPBUGS-14495): Support /dev/disk/by-path root device hints [#7227](https://github.com/openshift/installer/pull/7227) * [OCPBUGS-16151](https://issues.redhat.com/browse/OCPBUGS-16151): ic: azure: validate diskTypes in AzureStack [#7331](https://github.com/openshift/installer/pull/7331) * [OCPBUGS-11199](https://issues.redhat.com/browse/OCPBUGS-11199): azure: upi: use Image Gallery in ARM templates [#7054](https://github.com/openshift/installer/pull/7054) * [OCPBUGS-13940](https://issues.redhat.com/browse/OCPBUGS-13940): bump RHCOS 4.12 bootimage metadata to 412.86.202306132230-0 [#7249](https://github.com/openshift/installer/pull/7249) * [OCPBUGS-14664](https://issues.redhat.com/browse/OCPBUGS-14664): Shorten SNO installation duration by releasing CVO lease [#7235](https://github.com/openshift/installer/pull/7235) * [OCPBUGS-7400](https://issues.redhat.com/browse/OCPBUGS-7400): Check for AWS STS installation before trying to get all IAM Roles [#7175](https://github.com/openshift/installer/pull/7175) * [OCPBUGS-13819](https://issues.redhat.com/browse/OCPBUGS-13819): Bootstrap on aws should have same metadata service type as on other nodes [#7196](https://github.com/openshift/installer/pull/7196) * [OCPBUGS-12202](https://issues.redhat.com/browse/OCPBUGS-12202): Relax vsphere, nutanix VIP validation [#7116](https://github.com/openshift/installer/pull/7116) * [OCPBUGS-7551](https://issues.redhat.com/browse/OCPBUGS-7551): vSphere - ignore all bootstrap disk changes [#6860](https://github.com/openshift/installer/pull/6860) * [OCPBUGS-14014](https://issues.redhat.com/browse/OCPBUGS-14014): Do not always output warning msg when releaseImage is digest [#7202](https://github.com/openshift/installer/pull/7202) * [OCPBUGS-13052](https://issues.redhat.com/browse/OCPBUGS-13052): bump RHCOS 4.12 bootimage metadata [#7164](https://github.com/openshift/installer/pull/7164) * [OCPBUGS-12956](https://issues.redhat.com/browse/OCPBUGS-12956): openstack: Add netcat to the Installer image [#7148](https://github.com/openshift/installer/pull/7148) * [OCPBUGS-12749](https://issues.redhat.com/browse/OCPBUGS-12749): [Alibaba] update the bandwidth value of EIP [#7131](https://github.com/openshift/installer/pull/7131) * [OCPBUGS-7400](https://issues.redhat.com/browse/OCPBUGS-7400): Check for AWS STS installation before trying to get all IAM Roles [#7141](https://github.com/openshift/installer/pull/7141) * [OCPBUGS-11360](https://issues.redhat.com/browse/OCPBUGS-11360): Use 100 GB as minimum disk size in validations [#7065](https://github.com/openshift/installer/pull/7065) * [OCPBUGS-11662](https://issues.redhat.com/browse/OCPBUGS-11662): AWS - Remove ACLs from s3 ign [#7084](https://github.com/openshift/installer/pull/7084) * [OCPBUGS-11208](https://issues.redhat.com/browse/OCPBUGS-11208): GCP: add europe-west12 region to the survey as supported region [#7055](https://github.com/openshift/installer/pull/7055) * [OCPBUGS-11108](https://issues.redhat.com/browse/OCPBUGS-11108): Kubelet Client Cert should include system:serviceaccounts group [#7050](https://github.com/openshift/installer/pull/7050) * [OCPBUGS-8384](https://issues.redhat.com/browse/OCPBUGS-8384): Specify filename for default registries.conf [#6941](https://github.com/openshift/installer/pull/6941) * [OCPBUGS-10904](https://issues.redhat.com/browse/OCPBUGS-10904): IBMCloud: Fix SSH Private bootstrap [#7028](https://github.com/openshift/installer/pull/7028) * [OCPBUGS-10905](https://issues.redhat.com/browse/OCPBUGS-10905): IBMCloud set dnsrecords offset [#7029](https://github.com/openshift/installer/pull/7029) * [OCPBUGS-10740](https://issues.redhat.com/browse/OCPBUGS-10740): bump RHCOS 4.12 bootimage metadata [#7019](https://github.com/openshift/installer/pull/7019) * [OCPBUGS-7481](https://issues.redhat.com/browse/OCPBUGS-7481): Fix file check for loading openshift manifests [#6907](https://github.com/openshift/installer/pull/6907) * [OCPBUGS-10497](https://issues.redhat.com/browse/OCPBUGS-10497): [release-4.12] aws: bump aws-sdk-go version [#6985](https://github.com/openshift/installer/pull/6985) * [OCPBUGS-10439](https://issues.redhat.com/browse/OCPBUGS-10439): Sort userTags in Machine and Machineset manifests [#6984](https://github.com/openshift/installer/pull/6984) * [OCPBUGS-7469](https://issues.redhat.com/browse/OCPBUGS-7469): [release-4.12] GCP XPN Featuregates [#6851](https://github.com/openshift/installer/pull/6851) * [OCPBUGS-7063](https://issues.redhat.com/browse/OCPBUGS-7063): vSphere - Remove regexs in terraform ova import [#6868](https://github.com/openshift/installer/pull/6868) * [OCPBUGS-8658](https://issues.redhat.com/browse/OCPBUGS-8658): Pass Capabilites from install-config to cluster [#6947](https://github.com/openshift/installer/pull/6947) * [OCPBUGS-7594](https://issues.redhat.com/browse/OCPBUGS-7594): fully qualified username must be provided [#6864](https://github.com/openshift/installer/pull/6864) * [OCPBUGS-7746](https://issues.redhat.com/browse/OCPBUGS-7746): Convert platform type for AgentClusterInstall [#6878](https://github.com/openshift/installer/pull/6878) * [OCPBUGS-8015](https://issues.redhat.com/browse/OCPBUGS-8015): make VIP 168.63.129.16 noProxy in all clouds except Public [#6909](https://github.com/openshift/installer/pull/6909) * [OCPBUGS-6087](https://issues.redhat.com/browse/OCPBUGS-6087): Warn if agent assets detected when using non-agent waitfor [#6788](https://github.com/openshift/installer/pull/6788) * [OCPBUGS-7607](https://issues.redhat.com/browse/OCPBUGS-7607): IBMCloud: Handle COS reclamations [#6867](https://github.com/openshift/installer/pull/6867) * [OCPBUGS-7529](https://issues.redhat.com/browse/OCPBUGS-7529): bump RHCOS 4.12 bootimage metadata [#6873](https://github.com/openshift/installer/pull/6873) * [OCPBUGS-7521](https://issues.redhat.com/browse/OCPBUGS-7521): Update AgentConfig template [#6857](https://github.com/openshift/installer/pull/6857) * [OCPBUGS-5992](https://issues.redhat.com/browse/OCPBUGS-5992): azure: validate Windows-only VM types [#6780](https://github.com/openshift/installer/pull/6780) * [OCPBUGS-6991](https://issues.redhat.com/browse/OCPBUGS-6991): Don't require vSphere details for agent installer [#6826](https://github.com/openshift/installer/pull/6826) * [OCPBUGS-6807](https://issues.redhat.com/browse/OCPBUGS-6807): Check platform baremetal settings against default values [#6815](https://github.com/openshift/installer/pull/6815) * [OCPBUGS-7103](https://issues.redhat.com/browse/OCPBUGS-7103): Set the configured proxy settings for agent installer [#6830](https://github.com/openshift/installer/pull/6830) * [OCPBUGS-7131](https://issues.redhat.com/browse/OCPBUGS-7131): bootstrap: set 0644 mode for registries.conf [#6804](https://github.com/openshift/installer/pull/6804) * [OCPBUGS-5960](https://issues.redhat.com/browse/OCPBUGS-5960): bump RHCOS 4.12 bootimage metadata [#6791](https://github.com/openshift/installer/pull/6791) * [OCPBUGS-5996](https://issues.redhat.com/browse/OCPBUGS-5996): vsphere: set default resource pool when missing failure domain topology [#6781](https://github.com/openshift/installer/pull/6781) * [OCPBUGS-5667](https://issues.redhat.com/browse/OCPBUGS-5667): CVE-2021-4238: goutils: update for randomness fix [#6764](https://github.com/openshift/installer/pull/6764) * [OCPBUGS-5782](https://issues.redhat.com/browse/OCPBUGS-5782): CVE-2021-4235: Denial of Service in go-yaml [#6769](https://github.com/openshift/installer/pull/6769) * [OCPBUGS-6052](https://issues.redhat.com/browse/OCPBUGS-6052): validate additional confidential VM types [#6785](https://github.com/openshift/installer/pull/6785) * [OCPBUGS-4895](https://issues.redhat.com/browse/OCPBUGS-4895): Set ip=dhcp,dhcp6 for master nodes on dualstack [#6706](https://github.com/openshift/installer/pull/6706) * [OCPBUGS-6015](https://issues.redhat.com/browse/OCPBUGS-6015): fail to create install-config.yaml as apiVIP and ingress VIP are not in machine networks [#6783](https://github.com/openshift/installer/pull/6783) * [OCPBUGS-5844](https://issues.redhat.com/browse/OCPBUGS-5844): Update FCOS to latest 37.20221127.3.0 stable [#6773](https://github.com/openshift/installer/pull/6773) * [OCPBUGS-5764](https://issues.redhat.com/browse/OCPBUGS-5764): Expose Azure useImageGallery parameter in the MachineSets() call [#6753](https://github.com/openshift/installer/pull/6753) * [OCPBUGS-4460](https://issues.redhat.com/browse/OCPBUGS-4460): hold bootkube service until bootstrap has pivoted [#6661](https://github.com/openshift/installer/pull/6661) * [OCPBUGS-5513](https://issues.redhat.com/browse/OCPBUGS-5513): Update Azure SDK to v63.1.0+incompatible [release-4.12] [#6751](https://github.com/openshift/installer/pull/6751) * [OCPBUGS-4649](https://issues.redhat.com/browse/OCPBUGS-4649): Report agent installation problems on the console [#6680](https://github.com/openshift/installer/pull/6680) * [OCPBUGS-5455](https://issues.redhat.com/browse/OCPBUGS-5455): Remove order dependency for agent CLI string [#6748](https://github.com/openshift/installer/pull/6748) * [OCPBUGS-4962](https://issues.redhat.com/browse/OCPBUGS-4962): Improve error reporting from agent wait-for install-complete [#6742](https://github.com/openshift/installer/pull/6742) * [OCPBUGS-4886](https://issues.redhat.com/browse/OCPBUGS-4886): Switch back to gp2 ebs volume type for bootstrap instance [#6705](https://github.com/openshift/installer/pull/6705) * [OCPBUGS-5190](https://issues.redhat.com/browse/OCPBUGS-5190): baremetal: Extra time for provisioning interface [#6732](https://github.com/openshift/installer/pull/6732) * [OCPBUGS-4943](https://issues.redhat.com/browse/OCPBUGS-4943): Wait longer for VM to obtain IP from DHCP in PowerVS [#6709](https://github.com/openshift/installer/pull/6709) * [OCPBUGS-3899](https://issues.redhat.com/browse/OCPBUGS-3899): [Alibaba] fix the creation of public record [#6605](https://github.com/openshift/installer/pull/6605) * [OCPBUGS-4962](https://issues.redhat.com/browse/OCPBUGS-4962): Wait longer for baremetal [#6713](https://github.com/openshift/installer/pull/6713) * [OCPBUGS-5035](https://issues.redhat.com/browse/OCPBUGS-5035): ose-installer-container: vault: insufficient certificate revocation list checking [#6722](https://github.com/openshift/installer/pull/6722) * [OCPBUGS-4869](https://issues.redhat.com/browse/OCPBUGS-4869): aws: destroy: delete ELB listeners [#6702](https://github.com/openshift/installer/pull/6702) * [OCPBUGS-5019](https://issues.redhat.com/browse/OCPBUGS-5019): OpenStack: Force JSON content-type in Swift object listing [#6718](https://github.com/openshift/installer/pull/6718) * [OCPBUGS-2997](https://issues.redhat.com/browse/OCPBUGS-2997): bump RHCOS 4.12 bootimage metadata [#6704](https://github.com/openshift/installer/pull/6704) * [OCPBUGS-3890](https://issues.redhat.com/browse/OCPBUGS-3890): IBMCloud: Confirm Zones and BYON Subnets [#6603](https://github.com/openshift/installer/pull/6603) * [OCPBUGS-3639](https://issues.redhat.com/browse/OCPBUGS-3639): Azure: Set appropriate architecture for gen v1 image [#6588](https://github.com/openshift/installer/pull/6588) * [OCPBUGS-4698](https://issues.redhat.com/browse/OCPBUGS-4698): Check nmstateconfig content in agent-config.yaml [#6687](https://github.com/openshift/installer/pull/6687) * [OCPBUGS-4547](https://issues.redhat.com/browse/OCPBUGS-4547): out-of-bounds read in golang.org/x/text/language leads to DoS [#6650](https://github.com/openshift/installer/pull/6650) * [OCPBUGS-4660](https://issues.redhat.com/browse/OCPBUGS-4660): Fix missing debug messages when getting baseISO [#6682](https://github.com/openshift/installer/pull/6682) * Alibaba: add the tags of the machine nodes [#6667](https://github.com/openshift/installer/pull/6667) * image: Updating installer images to be consistent with ART [#6658](https://github.com/openshift/installer/pull/6658) * [OCPBUGS-4506](https://issues.redhat.com/browse/OCPBUGS-4506): Enable CVO unmanage overrides in bootstrap-in-place installations [#6664](https://github.com/openshift/installer/pull/6664) * [OCPBUGS-4457](https://issues.redhat.com/browse/OCPBUGS-4457): Fix return value from execute() [#6659](https://github.com/openshift/installer/pull/6659) * [OCPBUGS-4342](https://issues.redhat.com/browse/OCPBUGS-4342): data: azurerm: restore RHCOS SA access configuration [#6645](https://github.com/openshift/installer/pull/6645) * [OCPBUGS-3249](https://issues.redhat.com/browse/OCPBUGS-3249): update golang.org/x/crypto to address security vulnerabilities [#6631](https://github.com/openshift/installer/pull/6631) * [OCPBUGS-4267](https://issues.redhat.com/browse/OCPBUGS-4267): Azure Stack: use managed images for compute nodes [#6639](https://github.com/openshift/installer/pull/6639) * [OCPBUGS-4308](https://issues.redhat.com/browse/OCPBUGS-4308): Redact pull secret from agent-gather [#6640](https://github.com/openshift/installer/pull/6640) * [OCPBUGS-4068](https://issues.redhat.com/browse/OCPBUGS-4068): (Agent) Do not require host data in platform baremetal section in installconfig [#6623](https://github.com/openshift/installer/pull/6623) * [OCPBUGS-4064](https://issues.redhat.com/browse/OCPBUGS-4064): Restart create-cluster-and-infraenv.service if it fails [#6622](https://github.com/openshift/installer/pull/6622) * [OCPBUGS-3657](https://issues.redhat.com/browse/OCPBUGS-3657): Uplift terraform-provider-ironic to 0.3.0 [#6592](https://github.com/openshift/installer/pull/6592) * [OCPBUGS-4063](https://issues.redhat.com/browse/OCPBUGS-4063): OpenStack: Force JSON content-type in Swift [#6621](https://github.com/openshift/installer/pull/6621) * [OCPBUGS-3055](https://issues.redhat.com/browse/OCPBUGS-3055): add bootstrap configmap during the SNO reboot [#6555](https://github.com/openshift/installer/pull/6555) * [OCPBUGS-3523](https://issues.redhat.com/browse/OCPBUGS-3523): Pass FeatureSet to cluster config render [#6590](https://github.com/openshift/installer/pull/6590) * [OCPBUGS-3406](https://issues.redhat.com/browse/OCPBUGS-3406): Use project after creation [#6575](https://github.com/openshift/installer/pull/6575) * [OCPBUGS-3307](https://issues.redhat.com/browse/OCPBUGS-3307): gcp: fail during validation if service usage is not enabled [#6565](https://github.com/openshift/installer/pull/6565) * [OCPBUGS-3515](https://issues.redhat.com/browse/OCPBUGS-3515): (AGENT) only support amd64 archs [#6580](https://github.com/openshift/installer/pull/6580) * [OCPBUGS-3520](https://issues.redhat.com/browse/OCPBUGS-3520): Automatically retry install [#6582](https://github.com/openshift/installer/pull/6582) * [OCPBUGS-3519](https://issues.redhat.com/browse/OCPBUGS-3519): Always use first matching mirror in assisted-service [#6581](https://github.com/openshift/installer/pull/6581) * [OCPBUGS-3459](https://issues.redhat.com/browse/OCPBUGS-3459): Always add router CAs to kubeconfig, even if console is not available [#6578](https://github.com/openshift/installer/pull/6578) * [OCPBUGS-3250](https://issues.redhat.com/browse/OCPBUGS-3250): azure: Fix client certs authentication [#6561](https://github.com/openshift/installer/pull/6561) * [OCPBUGS-3398](https://issues.redhat.com/browse/OCPBUGS-3398): Fix cluster wide proxy [#6587](https://github.com/openshift/installer/pull/6587) * [OCPBUGS-3366](https://issues.redhat.com/browse/OCPBUGS-3366): Set PublicContainerRegistries for entries in mirror [#6568](https://github.com/openshift/installer/pull/6568) * [OCPBUGS-3306](https://issues.redhat.com/browse/OCPBUGS-3306): agent ased installation fix for dual stack vips [#6564](https://github.com/openshift/installer/pull/6564) * [OCPBUGS-3095](https://issues.redhat.com/browse/OCPBUGS-3095): Power VS Check for existing DNS permitted network and public gateway [#6550](https://github.com/openshift/installer/pull/6550) * [OCPBUGS-3035](https://issues.redhat.com/browse/OCPBUGS-3035): support multiple documents in the same extra manifest file [#6549](https://github.com/openshift/installer/pull/6549) * [OCPBUGS-3343](https://issues.redhat.com/browse/OCPBUGS-3343): [vsphere-zones] Fix user folders [#6566](https://github.com/openshift/installer/pull/6566) * [OCPBUGS-3263](https://issues.redhat.com/browse/OCPBUGS-3263): Static linking the terraform and providers binaries [#6562](https://github.com/openshift/installer/pull/6562) * [OCPBUGS-2984](https://issues.redhat.com/browse/OCPBUGS-2984): Azure: Fix DiskEncryptionSet regex validation [#6538](https://github.com/openshift/installer/pull/6538) * [OCPBUGS-3028](https://issues.redhat.com/browse/OCPBUGS-3028): Use result from List function after checking error [#6543](https://github.com/openshift/installer/pull/6543) * [AGENT-348](https://issues.redhat.com/browse/AGENT-348): Warn when information in install-config is ignored [#6523](https://github.com/openshift/installer/pull/6523) * [OCPBUGS-2837](https://issues.redhat.com/browse/OCPBUGS-2837): Reduce debug logs in agent wait-for commands [#6520](https://github.com/openshift/installer/pull/6520) * Fix unexpected behavior from merging #6470 and #6500 [#6526](https://github.com/openshift/installer/pull/6526) * [AGENT-390](https://issues.redhat.com/browse/AGENT-390): Include CPU Architecture in ISO filename [#6485](https://github.com/openshift/installer/pull/6485) * docs: feature sets [#6506](https://github.com/openshift/installer/pull/6506) * Agent-321: Cluster and Host validations rework [#6500](https://github.com/openshift/installer/pull/6500) * [OCPBUGS-2327](https://issues.redhat.com/browse/OCPBUGS-2327): Add validation for releaseImage and registry.conf [#6423](https://github.com/openshift/installer/pull/6423) * [OCPBUGS-2086](https://issues.redhat.com/browse/OCPBUGS-2086): Detect failure in wait-for on transition back to ready [#6470](https://github.com/openshift/installer/pull/6470) * [OCPBUGS-2627](https://issues.redhat.com/browse/OCPBUGS-2627): agent-config: Generate missing AdditionalNTPSources in InfraEnv [#6495](https://github.com/openshift/installer/pull/6495) * [OCPBUGS-2338](https://issues.redhat.com/browse/OCPBUGS-2338): Don't use error messages as default values [#6486](https://github.com/openshift/installer/pull/6486) * [OCPBUGS-1824](https://issues.redhat.com/browse/OCPBUGS-1824): enhance agent systemd service dependency [#6408](https://github.com/openshift/installer/pull/6408) * [OCPBUGS-1704](https://issues.redhat.com/browse/OCPBUGS-1704): Service Usage API is required, not optional [#6504](https://github.com/openshift/installer/pull/6504) * Revert "create: add check for cluster operator stability" [#6503](https://github.com/openshift/installer/pull/6503) * [OCPBUGS-2301](https://issues.redhat.com/browse/OCPBUGS-2301): Search Network Project For resources [#6499](https://github.com/openshift/installer/pull/6499) * [OCPBUGS-2436](https://issues.redhat.com/browse/OCPBUGS-2436): Revert "Revert "[AWS] Add LB Type in the infrastructure cluster object via install-config yaml"" and fix OCPBUGS-2436 [#6491](https://github.com/openshift/installer/pull/6491) * [OCPBUGS-2174](https://issues.redhat.com/browse/OCPBUGS-2174): fix metadata tags not supported in certain regions [#6475](https://github.com/openshift/installer/pull/6475) * Add initial support for OKD/SCOS [#6443](https://github.com/openshift/installer/pull/6443) * Updating golang version to fix gofmt issues [#6484](https://github.com/openshift/installer/pull/6484) * [Bug 2117537](https://bugzilla.redhat.com/show_bug.cgi?id=2117537): validation rule for invalid rendezvousIP in AgentConfig [#6474](https://github.com/openshift/installer/pull/6474) * create: add check for cluster operator stability [#6124](https://github.com/openshift/installer/pull/6124) * Revert "[AWS] Add LB Type in the infrastructure cluster object via install-config yaml" [#6490](https://github.com/openshift/installer/pull/6490) * Add LB Type in the infrastructure cluster object via install-config yaml [#6478](https://github.com/openshift/installer/pull/6478) * [Bug 2059491](https://bugzilla.redhat.com/show_bug.cgi?id=2059491): [Alibaba] fix the format of Name [#5668](https://github.com/openshift/installer/pull/5668) * [AGENT-284](https://issues.redhat.com/browse/AGENT-284): Allow user to choose platform type [#6438](https://github.com/openshift/installer/pull/6438) * [OCPBUGS-2262](https://issues.redhat.com/browse/OCPBUGS-2262): Update gcp explain for DNS zones [#6483](https://github.com/openshift/installer/pull/6483) * [OCPBUGS-1941](https://issues.redhat.com/browse/OCPBUGS-1941): bump RHCOS 4.12 bootimage metadata [#6452](https://github.com/openshift/installer/pull/6452) * [Bug 2072202](https://bugzilla.redhat.com/show_bug.cgi?id=2072202): Check for api and api-int resolution during cluster install [#5816](https://github.com/openshift/installer/pull/5816) * [OCPBUGS-2259](https://issues.redhat.com/browse/OCPBUGS-2259): Fix soft-anti-affinity known issue [#6479](https://github.com/openshift/installer/pull/6479) * Removing jstuever from OWNERS [#6480](https://github.com/openshift/installer/pull/6480) * [OCPBUGS-1881](https://issues.redhat.com/browse/OCPBUGS-1881): vsphere/destroy: improve logs when folder is not empty [#6456](https://github.com/openshift/installer/pull/6456) * Adding "syd05" as a choice for zones in PowerVS [#6468](https://github.com/openshift/installer/pull/6468) * [OCPBUGS-1856](https://issues.redhat.com/browse/OCPBUGS-1856): IBMCloud: Allow traffic to kube-api-lb [#6458](https://github.com/openshift/installer/pull/6458) * update to release.openshift.io/feature-set to match OCP 4.12 [#6476](https://github.com/openshift/installer/pull/6476) * [AGENT-347](https://issues.redhat.com/browse/AGENT-347): generate OS_IMAGES dynamically [#6441](https://github.com/openshift/installer/pull/6441) * [OCPBUGS-1900](https://issues.redhat.com/browse/OCPBUGS-1900): Avoid SNO bootstrap jsonpath error [#6463](https://github.com/openshift/installer/pull/6463) * [OCPBUGS-1698](https://issues.redhat.com/browse/OCPBUGS-1698): multi-zone network slice validation [#6422](https://github.com/openshift/installer/pull/6422) * [OCPBUGSM-47893](https://issues.redhat.com/browse/OCPBUGSM-47893): added validation rule for invalid mac address in AgentConfig [#6473](https://github.com/openshift/installer/pull/6473) * populate vSphere infrastructure spec [#6457](https://github.com/openshift/installer/pull/6457) * [OCPBUGS-1896](https://issues.redhat.com/browse/OCPBUGS-1896): Validate Credentials Mode After Install Config step [#6453](https://github.com/openshift/installer/pull/6453) * [OCPBUGS-2029](https://issues.redhat.com/browse/OCPBUGS-2029): Fix agent installation InstallConfig proxy processing [#6461](https://github.com/openshift/installer/pull/6461) * Add docs about IPv6 on the additional Networks [#6435](https://github.com/openshift/installer/pull/6435) * [AGENT-375](https://issues.redhat.com/browse/AGENT-375): generate FIPS annotation for ACI [#6467](https://github.com/openshift/installer/pull/6467) * [AGENT-349](https://issues.redhat.com/browse/AGENT-349): Allow console login to Agent ISO [#6464](https://github.com/openshift/installer/pull/6464) * [OCPBUGS-1913](https://issues.redhat.com/browse/OCPBUGS-1913): Agent Installer: Do not fail on deprecated apiVip and ingressVip values [#6462](https://github.com/openshift/installer/pull/6462) * Power VS: Disconnected cluster support [#6347](https://github.com/openshift/installer/pull/6347) * azure: create bootimages using image gallery [#6304](https://github.com/openshift/installer/pull/6304) * CORS 2046: GCP Add base domain validation when DNS zone is specified [#6300](https://github.com/openshift/installer/pull/6300) * Fixes tested_instance_types_aarch64.md [#6451](https://github.com/openshift/installer/pull/6451) * pkg/types: add feature set support [#6336](https://github.com/openshift/installer/pull/6336) * pkg/asset/releaseimage/pullspec: Include override pullspec in log message [#6460](https://github.com/openshift/installer/pull/6460) * [Bug 2104997](https://bugzilla.redhat.com/show_bug.cgi?id=2104997): Add additional fields to proxy manifest [#6374](https://github.com/openshift/installer/pull/6374) * [OCPBUGS-527](https://issues.redhat.com/browse/OCPBUGS-527): Improve error message in case of failure during the agent image generation [#6436](https://github.com/openshift/installer/pull/6436) * [AGENT-271](https://issues.redhat.com/browse/AGENT-271): Generate kubeadmin-password with ISO [#6313](https://github.com/openshift/installer/pull/6313) * AWS: destroy: move helper functions to their own file [#6131](https://github.com/openshift/installer/pull/6131) * [AGENT-369](https://issues.redhat.com/browse/AGENT-369): SNO validation [#6444](https://github.com/openshift/installer/pull/6444) * Add host-config status to agent-gather [#6442](https://github.com/openshift/installer/pull/6442) * [AGENT-321](https://issues.redhat.com/browse/AGENT-321): Move validation failures to debug log level [#6446](https://github.com/openshift/installer/pull/6446) * [CORS-2073](https://issues.redhat.com/browse/CORS-2073): Remove terraform provider "random" [#6387](https://github.com/openshift/installer/pull/6387) * Increase start timeouts for assisted services [#6445](https://github.com/openshift/installer/pull/6445) * [OCPBUGS-891](https://issues.redhat.com/browse/OCPBUGS-891): aws: add explicit EIP dependency for nat gw [#6379](https://github.com/openshift/installer/pull/6379) * images: UPI: update gcloud install on rhel8 container [#6158](https://github.com/openshift/installer/pull/6158) * [OCPBUGS-1490](https://issues.redhat.com/browse/OCPBUGS-1490): [vsphere-zones] Handle no set zones [#6390](https://github.com/openshift/installer/pull/6390) * powervs: introduce manifest for OVNKubernetes configuration [#6405](https://github.com/openshift/installer/pull/6405) * Power VS: Enable IBM DNS service for private cluster support [#6228](https://github.com/openshift/installer/pull/6228) * [AGENT-264](https://issues.redhat.com/browse/AGENT-264): validate agent-config macs [#6434](https://github.com/openshift/installer/pull/6434) * Ensure installer created ControlPlaneMachineSets are active on install [#6425](https://github.com/openshift/installer/pull/6425) * [AGENT-330](https://issues.redhat.com/browse/AGENT-330): Add disconnected instructions to MCE integration doc [#6424](https://github.com/openshift/installer/pull/6424) * [OCPBUGS-561](https://issues.redhat.com/browse/OCPBUGS-561): bump RHCOS 4.12 bootimage metadata [#6403](https://github.com/openshift/installer/pull/6403) * Remove extra blank line in DHCP debugging [#6439](https://github.com/openshift/installer/pull/6439) * Change PowerVS default machine CIDR [#6428](https://github.com/openshift/installer/pull/6428) * Change error on execute() to a debug message [#6427](https://github.com/openshift/installer/pull/6427) * fix agent-config-template emitted by `agent create` [#6306](https://github.com/openshift/installer/pull/6306) * CORS 2040: [gcp] Adding Public and Private Managed zones [#6288](https://github.com/openshift/installer/pull/6288) * [Bug 2116904](https://bugzilla.redhat.com/show_bug.cgi?id=2116904): Base generated NMStateConfig on InstallConfig name [#6244](https://github.com/openshift/installer/pull/6244) * [AGENT-354](https://issues.redhat.com/browse/AGENT-354): script for gathering install data [#6402](https://github.com/openshift/installer/pull/6402) * [AGENT-364](https://issues.redhat.com/browse/AGENT-364): Validate network type for SNO clusters [#6419](https://github.com/openshift/installer/pull/6419) * cleanup unused types and constants after platform spec refactor [#6370](https://github.com/openshift/installer/pull/6370) * [AGENT-351](https://issues.redhat.com/browse/AGENT-351): Add MachineNetwork to agent-cluster-install for dual stack [#6364](https://github.com/openshift/installer/pull/6364) * [AGENT-319](https://issues.redhat.com/browse/AGENT-319): Set agent-config version to v1beta1 [#6416](https://github.com/openshift/installer/pull/6416) * [OCPBUGS-816](https://issues.redhat.com/browse/OCPBUGS-816): Check that cached base ISP matches hash in release payload [#6318](https://github.com/openshift/installer/pull/6318) * [AGENT-365](https://issues.redhat.com/browse/AGENT-365): Set install invoker to "agent-installer" [#6418](https://github.com/openshift/installer/pull/6418) * [Bug 2055247](https://bugzilla.redhat.com/show_bug.cgi?id=2055247): pkg/asset/installconfig/azure: standardDDv5Family is not currently supported [#6203](https://github.com/openshift/installer/pull/6203) * Verifying yq is installed properly in libvirt installer containers [#6319](https://github.com/openshift/installer/pull/6319) * Agent installer: try to make systemd services more robust [#6312](https://github.com/openshift/installer/pull/6312) * [OCPBUGSM-47737](https://issues.redhat.com/browse/OCPBUGSM-47737): Do not enable pre-network-manager-config.service [#6323](https://github.com/openshift/installer/pull/6323) * Add documentation for agent networking [#6400](https://github.com/openshift/installer/pull/6400) * vsphere: prevent duplicate validation check in multi-zone [#6398](https://github.com/openshift/installer/pull/6398) * AGENT-288 Log rendezvous host IP when creating agent ISO [#6393](https://github.com/openshift/installer/pull/6393) * AGENT-309 Display the rendezvous IP in motd and issue [#6386](https://github.com/openshift/installer/pull/6386) * Agent: Don't pass AdminKubeConfigClientCertKey [#6373](https://github.com/openshift/installer/pull/6373) * hack: Use golang-1.16 image of origin-release [#6367](https://github.com/openshift/installer/pull/6367) * [OCPBUGS-1231](https://issues.redhat.com/browse/OCPBUGS-1231): disconnected machine-os-images info [#6339](https://github.com/openshift/installer/pull/6339) * AGENT-325 Set NetworkType in AgentClusterInstall [#6287](https://github.com/openshift/installer/pull/6287) * [Bug 2094716](https://bugzilla.redhat.com/show_bug.cgi?id=2094716): docs: fully air-gapped AWS IPI install [#6076](https://github.com/openshift/installer/pull/6076) * [OCPBUGS-1489](https://issues.redhat.com/browse/OCPBUGS-1489): [vsphere] Loop over all folders for destroy [#6378](https://github.com/openshift/installer/pull/6378) * AWS: resolve subnet-related FIXMEs [#6140](https://github.com/openshift/installer/pull/6140) * go getter update for terraform & terraform providers [#6352](https://github.com/openshift/installer/pull/6352) * GCP: Add me-west1 region [#6359](https://github.com/openshift/installer/pull/6359) * aws: replace deprecated object in terraform config [#6383](https://github.com/openshift/installer/pull/6383) * powervs-delete-named-dhcp [#6365](https://github.com/openshift/installer/pull/6365) * azure: validation: avoid specifying capabilities twice [#5952](https://github.com/openshift/installer/pull/5952) * [CORS-2280](https://issues.redhat.com/browse/CORS-2280): IBMCloud: Add DNS Record for internal public traffic [#6375](https://github.com/openshift/installer/pull/6375) * [OCPBUGS-729](https://issues.redhat.com/browse/OCPBUGS-729): vSphere 6.7u3 failing privilege validation [#6293](https://github.com/openshift/installer/pull/6293) * Agent: Increase bootstrap-complete timeout [#6384](https://github.com/openshift/installer/pull/6384) * aws user tags: set limit == openshift/api [#6368](https://github.com/openshift/installer/pull/6368) * [OCPBUGS-927](https://issues.redhat.com/browse/OCPBUGS-927): azure: add sleep between zone and link creation [#6349](https://github.com/openshift/installer/pull/6349) * Update power-go-client [#6229](https://github.com/openshift/installer/pull/6229) * Fix generating Machine objects for PowerVS [#6366](https://github.com/openshift/installer/pull/6366) * [AGENT-328](https://issues.redhat.com/browse/AGENT-328): Add documentation for agent mce integration [#6358](https://github.com/openshift/installer/pull/6358) * aws: allow clusters with public only subnets [#6342](https://github.com/openshift/installer/pull/6342) * AWS UPI docs: remove control plane machineset [#6346](https://github.com/openshift/installer/pull/6346) * [OCPBUGS-705](https://issues.redhat.com/browse/OCPBUGS-705): vSphere privilege checking failing when providing user-defined folder and/or resource pool [#6281](https://github.com/openshift/installer/pull/6281) * GCP: allow environmental authentication [#6330](https://github.com/openshift/installer/pull/6330) * AGENT: add ipv6 support [#6328](https://github.com/openshift/installer/pull/6328) * [OCPBUGS-1234](https://issues.redhat.com/browse/OCPBUGS-1234): [CFE-580] Fixed error condition for user tag validation [#6356](https://github.com/openshift/installer/pull/6356) * [OCPBUGS-717](https://issues.redhat.com/browse/OCPBUGS-717): Upgrade python3.7 to 3.8 for AWS UPI [#6270](https://github.com/openshift/installer/pull/6270) * [OCPBUGS-963](https://issues.redhat.com/browse/OCPBUGS-963): OpenStack: Lift validation for 14 chars cluster names [#6309](https://github.com/openshift/installer/pull/6309) * [OCPBUGS-1234](https://issues.redhat.com/browse/OCPBUGS-1234): [CFE-580] Extend user tags limit to 40 based on AWS limits [#6345](https://github.com/openshift/installer/pull/6345) * [OCPBUGS-1226](https://issues.redhat.com/browse/OCPBUGS-1226): OpenStack UPI: Create server group for Computes [#6340](https://github.com/openshift/installer/pull/6340) * Power VS: use the new name field for the dhcp nw [#6294](https://github.com/openshift/installer/pull/6294) * Add AWS r6i into tested instance types table [#6337](https://github.com/openshift/installer/pull/6337) * vsphere zonal: platform spec and terraform updates [#6329](https://github.com/openshift/installer/pull/6329) * [CORS-2280](https://issues.redhat.com/browse/CORS-2280): IBMCloud: Add DNS Service permitted VPC [#6325](https://github.com/openshift/installer/pull/6325) * [CORS-2280](https://issues.redhat.com/browse/CORS-2280): IBMCloud: Add DNS Service destroy [#6321](https://github.com/openshift/installer/pull/6321) * [OCPBUGSM-47740](https://issues.redhat.com/browse/OCPBUGSM-47740): No networkconfig needed with DHCP agent config [#6317](https://github.com/openshift/installer/pull/6317) * azure: add support for arm64 instances (Dps_v5 instances) [#6298](https://github.com/openshift/installer/pull/6298) * azure: Add client certification to terraform [#6250](https://github.com/openshift/installer/pull/6250) * pkg/asset/ignition/bootstrap/cvoignore: Add group/kind/name(space) collision detection [#6247](https://github.com/openshift/installer/pull/6247) * Add additionalTrustBundlePolicy field to allow CA bundle propagation [#6232](https://github.com/openshift/installer/pull/6232) * [OCPBUGS-1247](https://issues.redhat.com/browse/OCPBUGS-1247): Restrict CPMS from being created with single node clusters [#6331](https://github.com/openshift/installer/pull/6331) * GCP: Add createFirewallRules parameter to installconfig. [#6338](https://github.com/openshift/installer/pull/6338) * [CORS-2043](https://issues.redhat.com/browse/CORS-2043): GCP: Passsthrough installer service account to Terraform r… [#6326](https://github.com/openshift/installer/pull/6326) * Bump Nutanix Prism Go Client dep to c8a2536 to include refactors. [#6308](https://github.com/openshift/installer/pull/6308) * [OCPBUGS-927](https://issues.redhat.com/browse/OCPBUGS-927): Add depends to enforce order for azure terraform dependencies [#6311](https://github.com/openshift/installer/pull/6311) * vSphere: Zonal Terraform [#6064](https://github.com/openshift/installer/pull/6064) * Terraform go 1.18 [#6257](https://github.com/openshift/installer/pull/6257) * Revert "AWS: Create ControlPlaneMachineSet CRDs" [#6324](https://github.com/openshift/installer/pull/6324) * [OCPBUGS-302](https://issues.redhat.com/browse/OCPBUGS-302): bootstrap gather: fix panic when platform is "none" [#6243](https://github.com/openshift/installer/pull/6243) * Add bind-utils in upi installer image [#6277](https://github.com/openshift/installer/pull/6277) * download 'aliyun' [#6265](https://github.com/openshift/installer/pull/6265) * [AGENT-308](https://issues.redhat.com/browse/AGENT-308): Add 4.12 to OS_IMAGES [#6315](https://github.com/openshift/installer/pull/6315) * [OCPBUGS-889](https://issues.redhat.com/browse/OCPBUGS-889): bump default channel to stable-4.12 [#6302](https://github.com/openshift/installer/pull/6302) * vSphere: Add the ability to attach a tag to a mob [#5357](https://github.com/openshift/installer/pull/5357) * Power VS: Machine CIDR [#6264](https://github.com/openshift/installer/pull/6264) * [AGENT-318](https://issues.redhat.com/browse/AGENT-318): Merge agent-based installer [#6263](https://github.com/openshift/installer/pull/6263) * [CORS-2280](https://issues.redhat.com/browse/CORS-2280): IBMCloud: Add TF support for private DNS [#6282](https://github.com/openshift/installer/pull/6282) * vsphere: error checking while creating vsphere clients [#6305](https://github.com/openshift/installer/pull/6305) * Correct the GCP machine series name [#6296](https://github.com/openshift/installer/pull/6296) * add bind config for PowerVS publish==internal IPI [#6227](https://github.com/openshift/installer/pull/6227) * [Bug 2084471](https://bugzilla.redhat.com/show_bug.cgi?id=2084471): validate baremetal hosts names are lowercase RFC 1123 [#6112](https://github.com/openshift/installer/pull/6112) * terraform: azurerm bump provider to v3.19.1 [#6262](https://github.com/openshift/installer/pull/6262) * Power VS: Enable global routing for cloud connection and specify dns [#6289](https://github.com/openshift/installer/pull/6289) * fix check for control plane suitability for default zones [#6295](https://github.com/openshift/installer/pull/6295) * [Bug 2070744](https://bugzilla.redhat.com/show_bug.cgi?id=2070744): Fix infinite loop when failing to untag resources [#5995](https://github.com/openshift/installer/pull/5995) * AWS: Create ControlPlaneMachineSet CRDs [#6172](https://github.com/openshift/installer/pull/6172) * Add dual stack API & Ingress VIP support for on-prem platforms [#5798](https://github.com/openshift/installer/pull/5798) * OWNER_ALIASES: remove Saqib Ali from the coreos approvers and reviewers [#6291](https://github.com/openshift/installer/pull/6291) * gcp: machines to use networkProjectID when defined [#6284](https://github.com/openshift/installer/pull/6284) * Bump FCOS to latest stable [#6290](https://github.com/openshift/installer/pull/6290) * Switch delete ordering of CloudConnect and VPCs [#6280](https://github.com/openshift/installer/pull/6280) * gcp: specify network_project_id for network and subnets [#6283](https://github.com/openshift/installer/pull/6283) * [Bug 2117439](https://bugzilla.redhat.com/show_bug.cgi?id=2117439): Azure masters should publish on an internal load balancer [#6230](https://github.com/openshift/installer/pull/6230) * Bug OCPBUGS-164: OpenStack: Update Kuryr storage requirements [#6286](https://github.com/openshift/installer/pull/6286) * [CORS-2271](https://issues.redhat.com/browse/CORS-2271): IBMCloud: Add DNS Service support - installconfig [#6255](https://github.com/openshift/installer/pull/6255) * Bug OCPBUGS-164: OpenStack: Set minimum disk of a flavor to 100 GB [#6268](https://github.com/openshift/installer/pull/6268) * validate vSphere privileges [#5741](https://github.com/openshift/installer/pull/5741) * Add support for private DNS server to PowerVS [#6157](https://github.com/openshift/installer/pull/6157) * GCP: Remove firewall rules when providing network project id [#6219](https://github.com/openshift/installer/pull/6219) * GCP: Add missing regions [#6259](https://github.com/openshift/installer/pull/6259) * manifests: Pass the NetworkProjectID to manifests [#6242](https://github.com/openshift/installer/pull/6242) * support for multi-zone/region installation [#5911](https://github.com/openshift/installer/pull/5911) * cmd/openshift-install/create: One shot console access [#5336](https://github.com/openshift/installer/pull/5336) * IBMCloud: Pull in latest openshift/api changes [#6056](https://github.com/openshift/installer/pull/6056) * [OCPBUGS-268](https://issues.redhat.com/browse/OCPBUGS-268): vSphere - enable steal time accounting [#6215](https://github.com/openshift/installer/pull/6215) * [Bug 2028474](https://bugzilla.redhat.com/show_bug.cgi?id=2028474): oVirt: Removed cluster name length limitation [#6206](https://github.com/openshift/installer/pull/6206) * gcp: Add validation for Network Project Data [#6207](https://github.com/openshift/installer/pull/6207) * [Bug 2098072](https://bugzilla.redhat.com/show_bug.cgi?id=2098072): vsphere: fix default disk type when not speficied [#6233](https://github.com/openshift/installer/pull/6233) * [Bug 2061947](https://bugzilla.redhat.com/show_bug.cgi?id=2061947): IBMCloud: Handle missing RG [#6152](https://github.com/openshift/installer/pull/6152) * [CORS-1994](https://issues.redhat.com/browse/CORS-1994): Update Installer Dependencies [#6175](https://github.com/openshift/installer/pull/6175) * [Bug 2109538](https://bugzilla.redhat.com/show_bug.cgi?id=2109538): nutanix: allow creating manifests without Prism Central connection [#6149](https://github.com/openshift/installer/pull/6149) * IBMCloud: Use unique mutex for Client retrieval [#6241](https://github.com/openshift/installer/pull/6241) * [OCPBUGS-262](https://issues.redhat.com/browse/OCPBUGS-262): UPI image download govc rate limit failure [#6047](https://github.com/openshift/installer/pull/6047) * Extract the image-references file from the release, pass it to `machine-config-operator` [#6234](https://github.com/openshift/installer/pull/6234) * powervs: allow VPC, Cloud connection, and NW re-use [#6217](https://github.com/openshift/installer/pull/6217) * [Bug 2109800](https://bugzilla.redhat.com/show_bug.cgi?id=2109800): IBMCloud: Allow metrics traffic [#6208](https://github.com/openshift/installer/pull/6208) * IBMCloud: BYON Enablement [#6183](https://github.com/openshift/installer/pull/6183) * IBMCLOUD Power VS: Updated Max and Min machinepool resource limits [#6147](https://github.com/openshift/installer/pull/6147) * GCP: Added user specified tags on control plane instances [#6199](https://github.com/openshift/installer/pull/6199) * Azure Stack UPI Docs: Remove Feature Gate CRs [#5657](https://github.com/openshift/installer/pull/5657) * [Bug 2115790](https://bugzilla.redhat.com/show_bug.cgi?id=2115790): bump RHCOS 4.12 bootimage metadata [#6212](https://github.com/openshift/installer/pull/6212) * terraform: ibmcloud: bump provider version [#6210](https://github.com/openshift/installer/pull/6210) * Revendor with golang 1.18 [#6077](https://github.com/openshift/installer/pull/6077) * Update installer images to use golang 1.18 [#6163](https://github.com/openshift/installer/pull/6163) * GCP: Add networkProjectID parameter to install-config. [#6166](https://github.com/openshift/installer/pull/6166) * powervs: default to tier1 storage [#6211](https://github.com/openshift/installer/pull/6211) * Download `yq` in upi installer containers [#6008](https://github.com/openshift/installer/pull/6008) * Remove LoadBalancer settings from cloud provider config [#5834](https://github.com/openshift/installer/pull/5834) * Add SPLAT members to platform reviewer/approver aliases [#6202](https://github.com/openshift/installer/pull/6202) * Alibaba: Use a static region list [#6178](https://github.com/openshift/installer/pull/6178) * Power VS: Add Montreal as a supported region [#6209](https://github.com/openshift/installer/pull/6209) * OWNERS_ALIASES: Add Adam Piasecki (c4rt0) [#6181](https://github.com/openshift/installer/pull/6181) * Switch libvirt VM's to vnc graphic mode [#6062](https://github.com/openshift/installer/pull/6062) * GCP: Added user specified tags on compute instances in installconfig [#6185](https://github.com/openshift/installer/pull/6185) * [CORS-2009](https://issues.redhat.com/browse/CORS-2009): Update default release image [#6180](https://github.com/openshift/installer/pull/6180) * Fix ineffassign [#4866](https://github.com/openshift/installer/pull/4866) * [Bug 2105933](https://bugzilla.redhat.com/show_bug.cgi?id=2105933): data/data/coreos: update FCOS to 36.20220716.3.1 [#6108](https://github.com/openshift/installer/pull/6108) * [Bug 2114754](https://bugzilla.redhat.com/show_bug.cgi?id=2114754): gather: properly delete serial log dir [#6197](https://github.com/openshift/installer/pull/6197) * tls: only report error if one happened [#6195](https://github.com/openshift/installer/pull/6195) * Updating ose-installer-artifacts images to be consistent with ART [#6096](https://github.com/openshift/installer/pull/6096) * Revert "GCP: Revert Instance Type from N2 to N1" [#6058](https://github.com/openshift/installer/pull/6058) * [CORS-2167](https://issues.redhat.com/browse/CORS-2167): Remove UPI Metal TF references [#6174](https://github.com/openshift/installer/pull/6174) * Change defaultNetworkType to ovn-kubernetes [#6014](https://github.com/openshift/installer/pull/6014) * PowerVS: Add 60 sec wait time after VPC creation. [#6162](https://github.com/openshift/installer/pull/6162) * updated terraform-provider-ovirt [#6169](https://github.com/openshift/installer/pull/6169) * Update vsphere permissions file [#5387](https://github.com/openshift/installer/pull/5387) * Update kube components to v0.24.0 [#6165](https://github.com/openshift/installer/pull/6165) * IBMCloud: BYON Enablement - SG Rule Cleanup [#6143](https://github.com/openshift/installer/pull/6143) * BUG 2105341: Remove required check for control planes in boostrap gather [#6168](https://github.com/openshift/installer/pull/6168) * BUG 2109388: Add AWS S3 Bucket Permissions [#6150](https://github.com/openshift/installer/pull/6150) * added soundcard_enabled field to tf resources for master vms [#6148](https://github.com/openshift/installer/pull/6148) * Update Installer approvers list [#6151](https://github.com/openshift/installer/pull/6151) * IBMCloud: Update RHCOS image for VSI [#6142](https://github.com/openshift/installer/pull/6142) * [Bug 2102324](https://bugzilla.redhat.com/show_bug.cgi?id=2102324): Fix validation errors for instance type [#6127](https://github.com/openshift/installer/pull/6127) * Updating ose-baremetal-installer images to be consistent with ART [#6085](https://github.com/openshift/installer/pull/6085) * As a developer I want to update installer to use propagateUserFlags for GA [#5994](https://github.com/openshift/installer/pull/5994) * terraform: update azure provider to v3 [#6000](https://github.com/openshift/installer/pull/6000) * Azure console logs gathering [#5904](https://github.com/openshift/installer/pull/5904) * OWNERS_ALIASES: drop miabbott from coreos aliases [#6123](https://github.com/openshift/installer/pull/6123) * Gcp console logs gathering [#5902](https://github.com/openshift/installer/pull/5902) * IBMCloud: BYON Enablement - Terraform [#6051](https://github.com/openshift/installer/pull/6051) * [Bug 2095323](https://bugzilla.redhat.com/show_bug.cgi?id=2095323): Create security group rules for each MachineNetwork CIDR [#6125](https://github.com/openshift/installer/pull/6125) * [Bug 2106061](https://bugzilla.redhat.com/show_bug.cgi?id=2106061): bump RHCOS 4.12 bootimage metadata [#6129](https://github.com/openshift/installer/pull/6129) * test: use `T.TempDir` to create temporary test directory [#5730](https://github.com/openshift/installer/pull/5730) * IBMCloud: BYON Enablement - InstallConfig [#6050](https://github.com/openshift/installer/pull/6050) * [Bug 2097691](https://bugzilla.redhat.com/show_bug.cgi?id=2097691): vsphere installconfig: use full dc path in network validation [#6105](https://github.com/openshift/installer/pull/6105) * Terraform: Remove azureprivatedns provider [#5983](https://github.com/openshift/installer/pull/5983) * Update OWENRS-ALIASES after changes in the team [#6113](https://github.com/openshift/installer/pull/6113) * [Bug 2106667](https://bugzilla.redhat.com/show_bug.cgi?id=2106667): OpenStack UPI: Allow setting external DNS [#6116](https://github.com/openshift/installer/pull/6116) * [Bug 2061947](https://bugzilla.redhat.com/show_bug.cgi?id=2061947): IBMCloud: Skip DNS Record delete [#6013](https://github.com/openshift/installer/pull/6013) * [Bug 2102228](https://bugzilla.redhat.com/show_bug.cgi?id=2102228): rhcos: Move to rhcos.mirror.openshift.com [#6109](https://github.com/openshift/installer/pull/6109) * [Bug 2082395](https://bugzilla.redhat.com/show_bug.cgi?id=2082395): Make azure baseDomainResoureGroup optional for private c… [#6049](https://github.com/openshift/installer/pull/6049) * cmd/openshift-install/gather: Errorf for Available=False [#5985](https://github.com/openshift/installer/pull/5985) * [Bug 2070318](https://bugzilla.redhat.com/show_bug.cgi?id=2070318): Allow setting bootstrap kubelet ip [#6042](https://github.com/openshift/installer/pull/6042) * Updating ose-installer images to be consistent with ART [#6083](https://github.com/openshift/installer/pull/6083) * [Bug 2098299](https://bugzilla.redhat.com/show_bug.cgi?id=2098299): Switch to perform normal marshalling with unknown fields [#6039](https://github.com/openshift/installer/pull/6039) * openstack: Update base images [#6082](https://github.com/openshift/installer/pull/6082) * AWS Destroy: Clean up endpoint services [#6089](https://github.com/openshift/installer/pull/6089) * openstack UPI: Remove Swift example, use Glance [#6091](https://github.com/openshift/installer/pull/6091) * [Bug 2104578](https://bugzilla.redhat.com/show_bug.cgi?id=2104578): Remove unnecessary SG rule [#6086](https://github.com/openshift/installer/pull/6086) * [Bug 2090836](https://bugzilla.redhat.com/show_bug.cgi?id=2090836): Fixes CFE-489 - AWS installer should go through proxy for s3 bootstrap ignition call [#5973](https://github.com/openshift/installer/pull/5973) * OpenStack: prompt FIP description [#6075](https://github.com/openshift/installer/pull/6075) * [Bug 1944365](https://bugzilla.redhat.com/show_bug.cgi?id=1944365): openstack: validate that VIPs are outside DHCP pools [#6069](https://github.com/openshift/installer/pull/6069) * openstack UPI: clarify naming of RHCOS image [#6081](https://github.com/openshift/installer/pull/6081) * [Bug 2102324](https://bugzilla.redhat.com/show_bug.cgi?id=2102324): Fix panic when unknown region is provided. [#6065](https://github.com/openshift/installer/pull/6065) * [Bug 2103144](https://bugzilla.redhat.com/show_bug.cgi?id=2103144): openstack: validate apiVIP and ingressVIP to be semantically different [#6067](https://github.com/openshift/installer/pull/6067) * [Bug 2103236](https://bugzilla.redhat.com/show_bug.cgi?id=2103236): Provide proper error message for empty projects list [#6071](https://github.com/openshift/installer/pull/6071) * BUG 2102632: destroy/gcp: Use min length for destroying disks [#6068](https://github.com/openshift/installer/pull/6068) * [Bug 2099401](https://bugzilla.redhat.com/show_bug.cgi?id=2099401): IBMCloud: Set regional URL for ibmcloud client [#6046](https://github.com/openshift/installer/pull/6046) * openstack: Prepare for a UPI CI job [#6055](https://github.com/openshift/installer/pull/6055) * [Full changelog](https://github.com/openshift/installer/compare/080693d2736ac301bfebf09f83da79cc4cf902d8...397b6739fa16d51e7d97ee3eecb38c9345c3e746) ### [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal/tree/24a47014aa42d649008687c5bd81771d6477c33c) * [OCPBUGS-21700](https://issues.redhat.com/browse/OCPBUGS-21700): Uplift x/net to v0.17.0 [#200](https://github.com/openshift/cluster-api-provider-baremetal/pull/200) * Updating baremetal-machine-controller images to be consistent with ART [#182](https://github.com/openshift/cluster-api-provider-baremetal/pull/182) * Updating baremetal-machine-controller images to be consistent with ART [#173](https://github.com/openshift/cluster-api-provider-baremetal/pull/173) * Update OWNERS file [#175](https://github.com/openshift/cluster-api-provider-baremetal/pull/175) * [Full changelog](https://github.com/openshift/cluster-api-provider-baremetal/compare/1a6f3aa469970c91987f7025f5204a542839d875...24a47014aa42d649008687c5bd81771d6477c33c) ### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/9152e200990c26194a70c25033a71583e2775066) * [OCPBUGS-30630](https://issues.redhat.com/browse/OCPBUGS-30630): Do not update instance_info and deploy_interface for active nodes [#338](https://github.com/openshift/baremetal-operator/pull/338) * [OCPBUGS-24490](https://issues.redhat.com/browse/OCPBUGS-24490): backport: Delay delete of detached hosts [#326](https://github.com/openshift/baremetal-operator/pull/326) * [OCPBUGS-23291](https://issues.redhat.com/browse/OCPBUGS-23291): hack for deploying V6-only clusters from dualstack hubs [#320](https://github.com/openshift/baremetal-operator/pull/320) * [OCPBUGS-21154](https://issues.redhat.com/browse/OCPBUGS-21154): Uplift x/net to v0.17.0 [#310](https://github.com/openshift/baremetal-operator/pull/310) * [OCPBUGS-17703](https://issues.redhat.com/browse/OCPBUGS-17703): Trigger reconcile on Secret change [#298](https://github.com/openshift/baremetal-operator/pull/298) * [OCPBUGS-17459](https://issues.redhat.com/browse/OCPBUGS-17459): Set minimum TLS version for webhook to 1.2 [#297](https://github.com/openshift/baremetal-operator/pull/297) * [OCPBUGS-14188](https://issues.redhat.com/browse/OCPBUGS-14188): Deleting unmanaged BMH get stuck fix [#283](https://github.com/openshift/baremetal-operator/pull/283) * [OCPBUGS-13530](https://issues.redhat.com/browse/OCPBUGS-13530): Support /dev/disk/by-path root device hints [#278](https://github.com/openshift/baremetal-operator/pull/278) * [OCPBUGS-12175](https://issues.redhat.com/browse/OCPBUGS-12175): Revert live-iso validation [#269](https://github.com/openshift/baremetal-operator/pull/269) * [OCPBUGS-9955](https://issues.redhat.com/browse/OCPBUGS-9955): allow namespace to continue with terminating when deprovisioning a bmh [#258](https://github.com/openshift/baremetal-operator/pull/258) * Updating ose-baremetal-operator images to be consistent with ART [#243](https://github.com/openshift/baremetal-operator/pull/243) * [OCPBUGS-2210](https://issues.redhat.com/browse/OCPBUGS-2210): Exclude hosts with virtual media from PROVISIONING_LIMIT [#244](https://github.com/openshift/baremetal-operator/pull/244) * [OCPBUGS-1080](https://issues.redhat.com/browse/OCPBUGS-1080): Merge upstream [#242](https://github.com/openshift/baremetal-operator/pull/242) * Merge upstream [#241](https://github.com/openshift/baremetal-operator/pull/241) * Remove upstream release GitHub workflow [#240](https://github.com/openshift/baremetal-operator/pull/240) * Merge upstream [#239](https://github.com/openshift/baremetal-operator/pull/239) * Merge upstream [#238](https://github.com/openshift/baremetal-operator/pull/238) * Updating ose-baremetal-operator images to be consistent with ART [#232](https://github.com/openshift/baremetal-operator/pull/232) * [Full changelog](https://github.com/openshift/baremetal-operator/compare/f7b90bfd5b29699406ce2a925ac124ec44ab373a...9152e200990c26194a70c25033a71583e2775066) ### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/474ed48e840fdb7bf859d769cd673b29705a7b91) * [OCPBUGS-26930](https://issues.redhat.com/browse/OCPBUGS-26930): Add .snyk file to ignore vendor and test files [#296](https://github.com/openshift/baremetal-runtimecfg/pull/296) * [OCPBUGS-20127](https://issues.redhat.com/browse/OCPBUGS-20127): Increase timeout for bootstrap kubeapi [#279](https://github.com/openshift/baremetal-runtimecfg/pull/279) * [OCPBUGS-18606](https://issues.redhat.com/browse/OCPBUGS-18606): Move haproxy firewall rule check earlier in loop [#272](https://github.com/openshift/baremetal-runtimecfg/pull/272) * [OCPBUGS-17715](https://issues.redhat.com/browse/OCPBUGS-17715): Don't render config with incomplete unicast peer list [#268](https://github.com/openshift/baremetal-runtimecfg/pull/268) * [OCPBUGS-15315](https://issues.redhat.com/browse/OCPBUGS-15315): Use machine-config state instead of comparing roles [#262](https://github.com/openshift/baremetal-runtimecfg/pull/262) * [OCPBUGS-12805](https://issues.redhat.com/browse/OCPBUGS-12805): Make nested dual stack VIP configs respect EnableUnicast [#240](https://github.com/openshift/baremetal-runtimecfg/pull/240) * [OCPBUGS-13405](https://issues.redhat.com/browse/OCPBUGS-13405): Verify kubelet version in upgrade check [#249](https://github.com/openshift/baremetal-runtimecfg/pull/249) * [OCPBUGS-11145](https://issues.redhat.com/browse/OCPBUGS-11145): fix isUpgradeStillRunning() [#232](https://github.com/openshift/baremetal-runtimecfg/pull/232) * [OCPBUGS-5743](https://issues.redhat.com/browse/OCPBUGS-5743): If primary ip address was already created no need to choose new ip [#214](https://github.com/openshift/baremetal-runtimecfg/pull/214) * [OCPBUGS-2512](https://issues.redhat.com/browse/OCPBUGS-2512): Improve IP address sort order for interface selection [#199](https://github.com/openshift/baremetal-runtimecfg/pull/199) * Updating baremetal-runtimecfg images to be consistent with ART [#196](https://github.com/openshift/baremetal-runtimecfg/pull/196) * Run go fmt [#197](https://github.com/openshift/baremetal-runtimecfg/pull/197) * Adding node ip hint for all who want to use it [#185](https://github.com/openshift/baremetal-runtimecfg/pull/185) * [OCPBUGS-669](https://issues.redhat.com/browse/OCPBUGS-669): Empty chosen list when retrying ip selection [#191](https://github.com/openshift/baremetal-runtimecfg/pull/191) * Add list of Node configs to handle multiple VIPs [#176](https://github.com/openshift/baremetal-runtimecfg/pull/176) * [OCPBUGS-669](https://issues.redhat.com/browse/OCPBUGS-669): Apply ipv6 bind check to non-VIP case too [#188](https://github.com/openshift/baremetal-runtimecfg/pull/188) * Updating baremetal-runtimecfg images to be consistent with ART [#184](https://github.com/openshift/baremetal-runtimecfg/pull/184) * [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/09f56048506bcf0a27a21cc835a799a91a50aab9...474ed48e840fdb7bf859d769cd673b29705a7b91) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/d691257345aeeec951c763e11658a944037f9b39) * [OCPBUGS-30289](https://issues.redhat.com/browse/OCPBUGS-30289): oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators [#1701](https://github.com/openshift/oc/pull/1701) * [OCPBUGS-25642](https://issues.redhat.com/browse/OCPBUGS-25642): Add client version in must-gather summary [#1639](https://github.com/openshift/oc/pull/1639) * [OCPBUGS-24462](https://issues.redhat.com/browse/OCPBUGS-24462): Overwrite template's namespace with the explicit one [#1618](https://github.com/openshift/oc/pull/1618) * [OCPBUGS-23222](https://issues.redhat.com/browse/OCPBUGS-23222): regeneratemco: explicitly check for PlatformStatus field [#1598](https://github.com/openshift/oc/pull/1598) * [OCPBUGS-20248](https://issues.redhat.com/browse/OCPBUGS-20248): oc process: Set original namespace if it differs [#1560](https://github.com/openshift/oc/pull/1560) * [OCPBUGS-20291](https://issues.redhat.com/browse/OCPBUGS-20291): Truncate existing files when writing from inspect [#1563](https://github.com/openshift/oc/pull/1563) * [OCPBUGS-20299](https://issues.redhat.com/browse/OCPBUGS-20299): Use quay redis image instead docker mysql [#1567](https://github.com/openshift/oc/pull/1567) * [OCPBUGS-16173](https://issues.redhat.com/browse/OCPBUGS-16173): Add tls-server-name when property exists in kubeconfig [#1507](https://github.com/openshift/oc/pull/1507) * [OCPBUGS-1283](https://issues.redhat.com/browse/OCPBUGS-1283): Bump golang.org/x dependencies [#1421](https://github.com/openshift/oc/pull/1421) * [OCPBUGS-16056](https://issues.redhat.com/browse/OCPBUGS-16056): mcs cert: account for environments that use IP directly [#1501](https://github.com/openshift/oc/pull/1501) * [OCPBUGS-16194](https://issues.redhat.com/browse/OCPBUGS-16194): reboot: set ignition version to 3.1 [#1509](https://github.com/openshift/oc/pull/1509) * handle the error case of node retrieval while waiting for reboot [#1485](https://github.com/openshift/oc/pull/1485) * bring some cert rotation helpers back into 4.12 [fix unit-tests] [#1478](https://github.com/openshift/oc/pull/1478) * [OCPBUGS-14647](https://issues.redhat.com/browse/OCPBUGS-14647): [release-4.12] Do not set master node selector if there's no masters [#1366](https://github.com/openshift/oc/pull/1366) * [OCPBUGS-14236](https://issues.redhat.com/browse/OCPBUGS-14236): Remove closed centos7 registry from newapp unit tests [#1434](https://github.com/openshift/oc/pull/1434) * [OCPBUGS-10774](https://issues.redhat.com/browse/OCPBUGS-10774): bump repo sclorg/s2i-ruby-container location for newapp test [#1382](https://github.com/openshift/oc/pull/1382) * [OCPBUGS-7960](https://issues.redhat.com/browse/OCPBUGS-7960): pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates [#1354](https://github.com/openshift/oc/pull/1354) * [OCPBUGS-6600](https://issues.redhat.com/browse/OCPBUGS-6600): Fix kube version from 1.24.1 to 1.25.2 [#1327](https://github.com/openshift/oc/pull/1327) * remove support for empty files and stdout in oc registry login [#1277](https://github.com/openshift/oc/pull/1277) * Bump go to 1.19 in go.mod [#1262](https://github.com/openshift/oc/pull/1262) * [Bug 2093046](https://bugzilla.redhat.com/show_bug.cgi?id=2093046): oc debug: Add priorityClassName into node debugging pod template [#1263](https://github.com/openshift/oc/pull/1263) * use correct namespace with sample templates [#1272](https://github.com/openshift/oc/pull/1272) * Do not try to load plugins for cobra commands [#1267](https://github.com/openshift/oc/pull/1267) * [Bug 2078694](https://bugzilla.redhat.com/show_bug.cgi?id=2078694): New-App Using Git via SSH [#1269](https://github.com/openshift/oc/pull/1269) * [OCPBUGS-2495](https://issues.redhat.com/browse/OCPBUGS-2495): pkg/cli/login: Warn, but do not fail, on surprise project-list errors [#1268](https://github.com/openshift/oc/pull/1268) * [IR-262](https://issues.redhat.com/browse/IR-262): Keep manifest list children [#1229](https://github.com/openshift/oc/pull/1229) * oc debug,version: minor todo improvements [#1265](https://github.com/openshift/oc/pull/1265) * pkg/cli/admin/release/extract: Don't print image metadata verification messages when extracting to stdout [#1264](https://github.com/openshift/oc/pull/1264) * pkg/cli/admin/release/extract: Unify extraction cases [#1237](https://github.com/openshift/oc/pull/1237) * OWNERS_ALIASES: Freshen update-approvers [#1260](https://github.com/openshift/oc/pull/1260) * [Bug 2059125](https://bugzilla.redhat.com/show_bug.cgi?id=2059125): release extract: Add binary re-signing for macos arm64 [#1242](https://github.com/openshift/oc/pull/1242) * [Bug 2000554](https://bugzilla.redhat.com/show_bug.cgi?id=2000554): oc inspect: Also gather namespaces in which webhook services are running [#1258](https://github.com/openshift/oc/pull/1258) * add support for --next flag in oc adm release new [#1243](https://github.com/openshift/oc/pull/1243) * oc 4.12 kubernetes 1.25.2 bump [#1250](https://github.com/openshift/oc/pull/1250) * [Bug 2033167](https://bugzilla.redhat.com/show_bug.cgi?id=2033167): oc extract: Create target directory if not exist [#1248](https://github.com/openshift/oc/pull/1248) * Update login.go [#1188](https://github.com/openshift/oc/pull/1188) * Add --overwrite flag into pod security violation error message [#1234](https://github.com/openshift/oc/pull/1234) * [OCPBUGS-613](https://issues.redhat.com/browse/OCPBUGS-613): oc adm logs: generate proper path for static pods [#1231](https://github.com/openshift/oc/pull/1231) * [OCPBUGS-852](https://issues.redhat.com/browse/OCPBUGS-852): cli/debug: Create temporary namespace for node debugging [#1236](https://github.com/openshift/oc/pull/1236) * [Bug 1879980](https://bugzilla.redhat.com/show_bug.cgi?id=1879980): Bump go-ldap module to v3 [#1226](https://github.com/openshift/oc/pull/1226) * Updating openshift-enterprise-deployer images to be consistent with ART [#1200](https://github.com/openshift/oc/pull/1200) * Updating ose-cli-artifacts images to be consistent with ART [#1202](https://github.com/openshift/oc/pull/1202) * Updating openshift-enterprise-cli images to be consistent with ART [#1195](https://github.com/openshift/oc/pull/1195) * [Bug 2087679](https://bugzilla.redhat.com/show_bug.cgi?id=2087679): [inspect] Add EgressQoS to inspect [#1148](https://github.com/openshift/oc/pull/1148) * Updating ose-tools images to be consistent with ART [#1201](https://github.com/openshift/oc/pull/1201) * Give a complete oc label command in pod security error message [#1228](https://github.com/openshift/oc/pull/1228) * [Bug 2112934](https://bugzilla.redhat.com/show_bug.cgi?id=2112934): Add servicemonitors into common namespaces for inspection [#1224](https://github.com/openshift/oc/pull/1224) * [Bug 2108307](https://bugzilla.redhat.com/show_bug.cgi?id=2108307): Set HostIPC to true when debugging node [#1218](https://github.com/openshift/oc/pull/1218) * [Bug 2111537](https://bugzilla.redhat.com/show_bug.cgi?id=2111537): (image info): Introduce show-multiarch flag [#1217](https://github.com/openshift/oc/pull/1217) * [Bug 2095708](https://bugzilla.redhat.com/show_bug.cgi?id=2095708): oc adm inspect: check a resource exists before its inspection [#1215](https://github.com/openshift/oc/pull/1215) * [Bug 2092731](https://bugzilla.redhat.com/show_bug.cgi?id=2092731): Change error message to signal passing keep-manifest-list flag [#1213](https://github.com/openshift/oc/pull/1213) * [Bug 1880865](https://bugzilla.redhat.com/show_bug.cgi?id=1880865): Avoid TLS cert checking when login with --insecure-skip-tls-verify=true [#1161](https://github.com/openshift/oc/pull/1161) * [Bug 2105325](https://bugzilla.redhat.com/show_bug.cgi?id=2105325): Add ManifestListDigest field to release info struct [#1203](https://github.com/openshift/oc/pull/1203) * Add unit tests for release new package [#1197](https://github.com/openshift/oc/pull/1197) * Support for identity token [#1199](https://github.com/openshift/oc/pull/1199) * release info bug printing: enable `--skip-bug-check` for `--output=json` [#1204](https://github.com/openshift/oc/pull/1204) * release: extract ccoctl [#1194](https://github.com/openshift/oc/pull/1194) * [Bug 2103126](https://bugzilla.redhat.com/show_bug.cgi?id=2103126): set proper pod security ns labels [#1187](https://github.com/openshift/oc/pull/1187) * [Bug 2100702](https://bugzilla.redhat.com/show_bug.cgi?id=2100702): Set hasMedataOverrides to true when ToImageBase is set [#1192](https://github.com/openshift/oc/pull/1192) * [Bug 2100166](https://bugzilla.redhat.com/show_bug.cgi?id=2100166): Add new IsManifestList flag into ReleaseInfo struct [#1185](https://github.com/openshift/oc/pull/1185) * [Bug 2101885](https://bugzilla.redhat.com/show_bug.cgi?id=2101885): Set completion function for get command [#1186](https://github.com/openshift/oc/pull/1186) * [Bug 2100702](https://bugzilla.redhat.com/show_bug.cgi?id=2100702): Use from-release as based image when base digest is invalid [#1183](https://github.com/openshift/oc/pull/1183) * [Bug 2100708](https://bugzilla.redhat.com/show_bug.cgi?id=2100708): Lower chosen platform architecture/OS log level [#1184](https://github.com/openshift/oc/pull/1184) * [Full changelog](https://github.com/openshift/oc/compare/bf40a6c2b28d2ed7dec6a9d481ff4da057796de8...d691257345aeeec951c763e11658a944037f9b39) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/54058b5154f66f4485c670bca0eb105eb4b2d90a) * [OCPBUGS-32897](https://issues.redhat.com/browse/OCPBUGS-32897): Upgrade go-jose module to 2.6.3 [#699](https://github.com/openshift/cloud-credential-operator/pull/699) * [OCPBUGS-21348](https://issues.redhat.com/browse/OCPBUGS-21348): Upgrade golang/x/net for CVE-2023-39325 [#624](https://github.com/openshift/cloud-credential-operator/pull/624) * NO-ISSUE: snyk: exclude vendor/ [#619](https://github.com/openshift/cloud-credential-operator/pull/619) * NO-ISSUE: Removing andrew from OWNERS [#618](https://github.com/openshift/cloud-credential-operator/pull/618) * [OCPBUGS-13739](https://issues.redhat.com/browse/OCPBUGS-13739): Determine AWS partition based on region for readOnlyAnonUserPolicyTemplate bucket ARN. [#539](https://github.com/openshift/cloud-credential-operator/pull/539) * [OCPBUGS-11707](https://issues.redhat.com/browse/OCPBUGS-11707): ccoctl: Enable public anon read access to default OIDC S3 bucket [#529](https://github.com/openshift/cloud-credential-operator/pull/529) * Bump to k8s 1.25 [#505](https://github.com/openshift/cloud-credential-operator/pull/505) * Make ccoctl use regional STS endpoint by default [#491](https://github.com/openshift/cloud-credential-operator/pull/491) * Changes generated from make update-gofmt with go-1.19. [#495](https://github.com/openshift/cloud-credential-operator/pull/495) * Update OWNERS to reflect reality. [#494](https://github.com/openshift/cloud-credential-operator/pull/494) * Add support for granular GCP permissions using custom roles [#489](https://github.com/openshift/cloud-credential-operator/pull/489) * update to release.openshift.io/feature-set to match OCP 4.12 [#490](https://github.com/openshift/cloud-credential-operator/pull/490) * Add ccoctl support to create OIDC endpoint with private S3 bucket [#486](https://github.com/openshift/cloud-credential-operator/pull/486) * [TRT-481](https://issues.redhat.com/browse/TRT-481): fix: order conditions by type to limit un-needed updates [#488](https://github.com/openshift/cloud-credential-operator/pull/488) * [Bug 2118625](https://bugzilla.redhat.com/show_bug.cgi?id=2118625): Refactor Nutanix plugin to use external credentials structs [#485](https://github.com/openshift/cloud-credential-operator/pull/485) * [Bug 2117474](https://bugzilla.redhat.com/show_bug.cgi?id=2117474): Fix panic when the Provider spec is empty in credential request [#484](https://github.com/openshift/cloud-credential-operator/pull/484) * Rename azure-mind-mod-removal to fix typo [#481](https://github.com/openshift/cloud-credential-operator/pull/481) * [Bug 2100964](https://bugzilla.redhat.com/show_bug.cgi?id=2100964): Make ccoctl work with credentials fetched from gcloud cli defaults [#475](https://github.com/openshift/cloud-credential-operator/pull/475) * Updating ose-cloud-credential-operator images to be consistent with ART [#474](https://github.com/openshift/cloud-credential-operator/pull/474) * [Bug 2101880](https://bugzilla.redhat.com/show_bug.cgi?id=2101880): manifests/00-namespace: Set empty openshift.io/run-level [#472](https://github.com/openshift/cloud-credential-operator/pull/472) * [Issue #452] Improving documentation [#465](https://github.com/openshift/cloud-credential-operator/pull/465) * doc(aws-sts): add alternative to host OIDC configuration in a private bucket using CloudFront [#468](https://github.com/openshift/cloud-credential-operator/pull/468) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/85f6afd591103fd54dae6bc07d85511d3d80fcb3...54058b5154f66f4485c670bca0eb105eb4b2d90a) ### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/c086bed76ee3d3b3fe9f516f873414e7b4348acd) * [OCPBUGS-33198](https://issues.redhat.com/browse/OCPBUGS-33198): Avoid nil pointer panic while assigning private IP on Azure [#141](https://github.com/openshift/cloud-network-config-controller/pull/141) * [OCPBUGS-22949](https://issues.redhat.com/browse/OCPBUGS-22949): Azure: skip backend pool if attached to an outbound rule [#128](https://github.com/openshift/cloud-network-config-controller/pull/128) * [OCPBUGS-16325](https://issues.redhat.com/browse/OCPBUGS-16325): Azure: Handle already existing IP configurations [#117](https://github.com/openshift/cloud-network-config-controller/pull/117) * [OCPBUGS-14717](https://issues.redhat.com/browse/OCPBUGS-14717): increase GCP egress ip capacity to 100 from 10 [#114](https://github.com/openshift/cloud-network-config-controller/pull/114) * [OCPBUGS-13802](https://issues.redhat.com/browse/OCPBUGS-13802): sync CloudPrivateIpConfig when node is missing [#112](https://github.com/openshift/cloud-network-config-controller/pull/112) * [OCPBUGS-13183](https://issues.redhat.com/browse/OCPBUGS-13183): pull project name from subnet uri [#108](https://github.com/openshift/cloud-network-config-controller/pull/108) * Bug OCPBUGS-5156: Add ApplicationSecurityGroups to InterfaceIPConfiguration [#92](https://github.com/openshift/cloud-network-config-controller/pull/92) * [OCPBUGS-4783](https://issues.redhat.com/browse/OCPBUGS-4783): OpenStack: Support multi AZ environments [#88](https://github.com/openshift/cloud-network-config-controller/pull/88) * [OCPBUGS-4784](https://issues.redhat.com/browse/OCPBUGS-4784): OpenStack: Only return egressIPConfiguration for first InternalIP [#89](https://github.com/openshift/cloud-network-config-controller/pull/89) * [OCPBUGS-4230](https://issues.redhat.com/browse/OCPBUGS-4230): Fix azure log message for assigning and releasing an IP [#80](https://github.com/openshift/cloud-network-config-controller/pull/80) * [OCPBUGS-3552](https://issues.redhat.com/browse/OCPBUGS-3552): Add assigned egress ips into capacity [#73](https://github.com/openshift/cloud-network-config-controller/pull/73) * [OCPBUGS-1736](https://issues.redhat.com/browse/OCPBUGS-1736): use proxy vars when available [#62](https://github.com/openshift/cloud-network-config-controller/pull/62) * [OCPBUGS-1417](https://issues.redhat.com/browse/OCPBUGS-1417): AWS: build temp credentials file from AWS key and secret [#68](https://github.com/openshift/cloud-network-config-controller/pull/68) * Update .ci-operator.yaml to use go 1.19 [#65](https://github.com/openshift/cloud-network-config-controller/pull/65) * Updating ose-cloud-network-config-controller images to be consistent with ART [#64](https://github.com/openshift/cloud-network-config-controller/pull/64) * [OCPBUGS-1629](https://issues.redhat.com/browse/OCPBUGS-1629): Add resolver to handle custom endpoints [#61](https://github.com/openshift/cloud-network-config-controller/pull/61) * [SDN-3203](https://issues.redhat.com/browse/SDN-3203): 1.25 rebase [#58](https://github.com/openshift/cloud-network-config-controller/pull/58) * [OCPBUGS-683](https://issues.redhat.com/browse/OCPBUGS-683): Node controller: Skip uninitialized nodes [#57](https://github.com/openshift/cloud-network-config-controller/pull/57) * Jira OCPBUGS-208: OpenStack: Avoid concurrent port updates for attach/detach operations [#54](https://github.com/openshift/cloud-network-config-controller/pull/54) * Jira OCPBUGS-247: OpenStack Return UnexpectedURIError when URI cannot be parsed [#55](https://github.com/openshift/cloud-network-config-controller/pull/55) * [Bug 2118563](https://bugzilla.redhat.com/show_bug.cgi?id=2118563): Adjust OpenStack port capacity to default max_allowed_address_pair [#53](https://github.com/openshift/cloud-network-config-controller/pull/53) * [Bug 2111878](https://bugzilla.redhat.com/show_bug.cgi?id=2111878): Make azure operations to be in sequence [#52](https://github.com/openshift/cloud-network-config-controller/pull/52) * [Bug 2104784](https://bugzilla.redhat.com/show_bug.cgi?id=2104784): AWS: Fix race in IP address assignment code [#50](https://github.com/openshift/cloud-network-config-controller/pull/50) * Update OWNERS [#51](https://github.com/openshift/cloud-network-config-controller/pull/51) * Add OpenStack cloud provider [#47](https://github.com/openshift/cloud-network-config-controller/pull/47) * Updating ose-cloud-network-config-controller images to be consistent with ART [#49](https://github.com/openshift/cloud-network-config-controller/pull/49) * [Bug 2105996](https://bugzilla.redhat.com/show_bug.cgi?id=2105996): Fix assign error display for cloudprivateipconfig [#48](https://github.com/openshift/cloud-network-config-controller/pull/48) * [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/fd849e37f0073049d64b85ccdd58794640aee011...c086bed76ee3d3b3fe9f516f873414e7b4348acd) ### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/4f7f6b1af4b674b24270e65c40728b19071ab3e3) * [OCPBUGS-20683](https://issues.redhat.com/browse/OCPBUGS-20683): CVE 2023 39325 [4.12] [#653](https://github.com/openshift/cluster-authentication-operator/pull/653) * [OCPBUGS-22689](https://issues.redhat.com/browse/OCPBUGS-22689): increase timeout for probes [#639](https://github.com/openshift/cluster-authentication-operator/pull/639) * [OCPBUGS-13346](https://issues.redhat.com/browse/OCPBUGS-13346): dont log jwt tokens [#622](https://github.com/openshift/cluster-authentication-operator/pull/622) * [OCPBUGS-3841](https://issues.redhat.com/browse/OCPBUGS-3841): update apf configuration to use v1beta2 [#591](https://github.com/openshift/cluster-authentication-operator/pull/591) * [OCPBUGS-4040](https://issues.redhat.com/browse/OCPBUGS-4040): Restart authentication operator if console capability is enabled [#593](https://github.com/openshift/cluster-authentication-operator/pull/593) * [OCPBUGS-3510](https://issues.redhat.com/browse/OCPBUGS-3510): Update cluster-authentication-operator not to go degraded without console [#590](https://github.com/openshift/cluster-authentication-operator/pull/590) * make the custom route controller use server-side-apply to avoid stomping unknown fields [#582](https://github.com/openshift/cluster-authentication-operator/pull/582) * e2e: address PSa failures [#581](https://github.com/openshift/cluster-authentication-operator/pull/581) * [Bug 2111842](https://bugzilla.redhat.com/show_bug.cgi?id=2111842): v/o/library-go - version-bump [#576](https://github.com/openshift/cluster-authentication-operator/pull/576) * Updating ose-cluster-authentication-operator images to be consistent with ART [#575](https://github.com/openshift/cluster-authentication-operator/pull/575) * Updating ose-cluster-authentication-operator images to be consistent with ART [#571](https://github.com/openshift/cluster-authentication-operator/pull/571) * [Bug 2078287](https://bugzilla.redhat.com/show_bug.cgi?id=2078287): only ever include certificates in the oauth-serving-cert CM [#573](https://github.com/openshift/cluster-authentication-operator/pull/573) * [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/bc149c8ede402ee1bb12b526030508114aabdfd3...4f7f6b1af4b674b24270e65c40728b19071ab3e3) ### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/cf2360ec81b45fd015e507f3805184e00b97b132) * [OCPBUGS-30911](https://issues.redhat.com/browse/OCPBUGS-30911): Fix unstructured taint parsing in Cluster API provider [#291](https://github.com/openshift/kubernetes-autoscaler/pull/291) * [OCPBUGS-23274](https://issues.redhat.com/browse/OCPBUGS-23274): Rebase 4.12 branch onto cluster autoscaler 1.25.3 [#267](https://github.com/openshift/kubernetes-autoscaler/pull/267) * Updating atomic-openshift-cluster-autoscaler images to be consistent with ART [#242](https://github.com/openshift/kubernetes-autoscaler/pull/242) * Updating vertical-pod-autoscaler images to be consistent with ART [#243](https://github.com/openshift/kubernetes-autoscaler/pull/243) * rebase on upstream 1.25.0 [#241](https://github.com/openshift/kubernetes-autoscaler/pull/241) * [Bug 2001027](https://bugzilla.redhat.com/show_bug.cgi?id=2001027): update clusterapi nodegroups processor [#240](https://github.com/openshift/kubernetes-autoscaler/pull/240) * Updating vertical-pod-autoscaler images to be consistent with ART [#235](https://github.com/openshift/kubernetes-autoscaler/pull/235) * [Bug 1944065](https://bugzilla.redhat.com/show_bug.cgi?id=1944065): Have VPA ignore phantom containers named "POD" [#233](https://github.com/openshift/kubernetes-autoscaler/pull/233) * [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/bf6c1c328ac39a367417e93c74fcbb3fe8628825...cf2360ec81b45fd015e507f3805184e00b97b132) ### [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator/tree/29a6e57c10cf027f5f04e9bcb2e8842497f63bf6) * [OCPBUGS-32005](https://issues.redhat.com/browse/OCPBUGS-32005): Update x/net to v0.25.0 [#325](https://github.com/openshift/cluster-autoscaler-operator/pull/325) * [OCPBUGS-20754](https://issues.redhat.com/browse/OCPBUGS-20754): Bump x/net package to v0.18.0 [#300](https://github.com/openshift/cluster-autoscaler-operator/pull/300) * Updating ose-cluster-autoscaler-operator images to be consistent with ART [#248](https://github.com/openshift/cluster-autoscaler-operator/pull/248) * [OCPCLOUD-1677](https://issues.redhat.com/browse/OCPCLOUD-1677): add flag for duplicated events [#253](https://github.com/openshift/cluster-autoscaler-operator/pull/253) * [Bug 1997396](https://bugzilla.redhat.com/show_bug.cgi?id=1997396): fix an error with autoscaler alert rules [#254](https://github.com/openshift/cluster-autoscaler-operator/pull/254) * [OCPBUGS-1411](https://issues.redhat.com/browse/OCPBUGS-1411): Bump k8s deps to 1.25 [#252](https://github.com/openshift/cluster-autoscaler-operator/pull/252) * [Bug 1997396](https://bugzilla.redhat.com/show_bug.cgi?id=1997396): update alerts for resource limits [#250](https://github.com/openshift/cluster-autoscaler-operator/pull/250) * [OCPCLOUD-1427](https://issues.redhat.com/browse/OCPCLOUD-1427): Expose autoscaler "--balancing-ignore-label" flag through CRD [#251](https://github.com/openshift/cluster-autoscaler-operator/pull/251) * Add verbosity option to ClusterAutoscaler object [#247](https://github.com/openshift/cluster-autoscaler-operator/pull/247) * [Full changelog](https://github.com/openshift/cluster-autoscaler-operator/compare/1731b6650d41a46207dc08f4d0993873b3b5d99f...29a6e57c10cf027f5f04e9bcb2e8842497f63bf6) ### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/18c92d2feec0eb2e0665fcf6e914b5f512e634f6) * [OCPBUGS-23291](https://issues.redhat.com/browse/OCPBUGS-23291): hack for deploying V6-only clusters from dualstack hubs [#389](https://github.com/openshift/cluster-baremetal-operator/pull/389) * [OCPBUGS-20845](https://issues.redhat.com/browse/OCPBUGS-20845): Uplift x/net to v0.17.0 [#371](https://github.com/openshift/cluster-baremetal-operator/pull/371) * [OCPBUGS-19557](https://issues.redhat.com/browse/OCPBUGS-19557): Guard against nil PlatformStatus [#367](https://github.com/openshift/cluster-baremetal-operator/pull/367) * [OCPBUGS-16169](https://issues.redhat.com/browse/OCPBUGS-16169): use proxying for inspector in addition to ironic [#349](https://github.com/openshift/cluster-baremetal-operator/pull/349) * [OCPBUGS-15715](https://issues.redhat.com/browse/OCPBUGS-15715): Limit role binding to openshift-machine-api namespace [#347](https://github.com/openshift/cluster-baremetal-operator/pull/347) * [OCPBUGS-7585](https://issues.redhat.com/browse/OCPBUGS-7585): also use BMH.ConsumerRef for linking to master Machines [#326](https://github.com/openshift/cluster-baremetal-operator/pull/326) * [OCPBUGS-5072](https://issues.redhat.com/browse/OCPBUGS-5072): delete ironic-proxy/image-cache when not needed [#317](https://github.com/openshift/cluster-baremetal-operator/pull/317) * [OCPBUGS-4696](https://issues.redhat.com/browse/OCPBUGS-4696): Do not fail the reconciler when no master Machines exist [#314](https://github.com/openshift/cluster-baremetal-operator/pull/314) * Updating ose-cluster-baremetal-operator images to be consistent with ART [#300](https://github.com/openshift/cluster-baremetal-operator/pull/300) * Golang 1.19 [#306](https://github.com/openshift/cluster-baremetal-operator/pull/306) * Handle AWS platform [#304](https://github.com/openshift/cluster-baremetal-operator/pull/304) * [OCPBUGS-1806](https://issues.redhat.com/browse/OCPBUGS-1806): Use machines instead of nodes to detect masters [#299](https://github.com/openshift/cluster-baremetal-operator/pull/299) * Add port to IRONIC_EXTERNAL_URL_V6 [#302](https://github.com/openshift/cluster-baremetal-operator/pull/302) * Enable running CBO from AWS [#301](https://github.com/openshift/cluster-baremetal-operator/pull/301) * [OCPBUGS-872](https://issues.redhat.com/browse/OCPBUGS-872): add a workaround for a NetworkManager issue [#286](https://github.com/openshift/cluster-baremetal-operator/pull/286) * Pass IRONIC_EXTERNAL_URL_V6 to baremetal-operator [#288](https://github.com/openshift/cluster-baremetal-operator/pull/288) * [OCPBUGS-651](https://issues.redhat.com/browse/OCPBUGS-651): ignore metal3 pods that are terminating [#284](https://github.com/openshift/cluster-baremetal-operator/pull/284) * Added handling PlatformStatus.Type other than Baremetal [#285](https://github.com/openshift/cluster-baremetal-operator/pull/285) * [OCPBUGS-421](https://issues.redhat.com/browse/OCPBUGS-421): do not rely on string "master" to be in BMH names [#282](https://github.com/openshift/cluster-baremetal-operator/pull/282) * Updating ose-cluster-baremetal-operator images to be consistent with ART [#273](https://github.com/openshift/cluster-baremetal-operator/pull/273) * Run a proxy for ironic when provisioning network is disabled [#279](https://github.com/openshift/cluster-baremetal-operator/pull/279) * Use platformStatus.type to determine type of platform [#280](https://github.com/openshift/cluster-baremetal-operator/pull/280) * [METAL-157](https://issues.redhat.com/browse/METAL-157): Don't run image cache unless required [#275](https://github.com/openshift/cluster-baremetal-operator/pull/275) * Stop passing HTPASSWD variables to services [#278](https://github.com/openshift/cluster-baremetal-operator/pull/278) * Add RBAC for metal3.io/hardwaredata [#277](https://github.com/openshift/cluster-baremetal-operator/pull/277) * Fix a few papercuts [#263](https://github.com/openshift/cluster-baremetal-operator/pull/263) * Update to golang 1.18 and regenerate CRDs [#265](https://github.com/openshift/cluster-baremetal-operator/pull/265) * Drop the IRONIC_HTTPD compatibility option [#245](https://github.com/openshift/cluster-baremetal-operator/pull/245) * [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/4d2ec1ddc45644a6ce86eda78c916a28382fe863...18c92d2feec0eb2e0665fcf6e914b5f512e634f6) ### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/138a1cf2b98578acb4ccf098736bdf08614d2d6a) * [OCPBUGS-14386](https://issues.redhat.com/browse/OCPBUGS-14386): Update dependencies and image [#91](https://github.com/openshift/cluster-bootstrap/pull/91) * Add API team to the OWNERS [#97](https://github.com/openshift/cluster-bootstrap/pull/97) * [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/ffb5e2e417ab7e9da1caf7dd76007f5cfe8fc5a5...138a1cf2b98578acb4ccf098736bdf08614d2d6a) ### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/03d89f216e0f2c3e1b2a647b0e37d52bbfdaefee) * [OCPBUGS-21521](https://issues.redhat.com/browse/OCPBUGS-21521): bump golang.org/x/net to v0.17.0 [#186](https://github.com/openshift/cluster-api/pull/186) * [Full changelog](https://github.com/openshift/cluster-api/compare/793bb48245f0e50e9dde2182286a4d219829ae6f...03d89f216e0f2c3e1b2a647b0e37d52bbfdaefee) ### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/60a36d8320ddfd196840a1597e61c065603778ee) * [OCPBUGS-21055](https://issues.redhat.com/browse/OCPBUGS-21055): Bump golang.org/x/net to v0.17.0 [#138](https://github.com/openshift/cluster-capi-operator/pull/138) * [Bug 2116686](https://bugzilla.redhat.com/show_bug.cgi?id=2116686): OCPBUGS-5155: Add provider webhook [#96](https://github.com/openshift/cluster-capi-operator/pull/96) * Add PowerVS platform to webhooks [#81](https://github.com/openshift/cluster-capi-operator/pull/81) * Add Power VS cluster api support [#79](https://github.com/openshift/cluster-capi-operator/pull/79) * Bug 2116686, Bug OCPBUGS-1493: Initial implementation of validation webhooks [#76](https://github.com/openshift/cluster-capi-operator/pull/76) * Update CI to use tools from vendor folder [#80](https://github.com/openshift/cluster-capi-operator/pull/80) * Updating ose-cluster-capi-operator images to be consistent with ART [#78](https://github.com/openshift/cluster-capi-operator/pull/78) * Update openshift/api and k8s to 1.25 [#77](https://github.com/openshift/cluster-capi-operator/pull/77) * Add tests that compare MAPI and CAPI created instances [#72](https://github.com/openshift/cluster-capi-operator/pull/72) * [Bug 2118550](https://bugzilla.redhat.com/show_bug.cgi?id=2118550): Momentarily disable Azure platform support [#75](https://github.com/openshift/cluster-capi-operator/pull/75) * Update manifests to use release.openshift.io/feature-set [#74](https://github.com/openshift/cluster-capi-operator/pull/74) * Set privileged pod security for openshift-cluster-api namespace [#73](https://github.com/openshift/cluster-capi-operator/pull/73) * Add webhooks for providers [#68](https://github.com/openshift/cluster-capi-operator/pull/68) * Update docs [#69](https://github.com/openshift/cluster-capi-operator/pull/69) * [Bug 2100852](https://bugzilla.redhat.com/show_bug.cgi?id=2100852): Improve log message for secret syncer [#71](https://github.com/openshift/cluster-capi-operator/pull/71) * Add option to choose a provider to update [#67](https://github.com/openshift/cluster-capi-operator/pull/67) * Updating ose-cluster-capi-operator images to be consistent with ART [#65](https://github.com/openshift/cluster-capi-operator/pull/65) * [Bug 2100822](https://bugzilla.redhat.com/show_bug.cgi?id=2100822): Add E2E for GCP [#64](https://github.com/openshift/cluster-capi-operator/pull/64) * [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/8c08e223b1ec06969955abd696bf3220a8126109...60a36d8320ddfd196840a1597e61c065603778ee) ### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/3b1f0843e2bd25fb4e39659ef47424f67ccaa727) * [OCPBUGS-21148](https://issues.redhat.com/browse/OCPBUGS-21148): Bump golang.org/x/net to v0.18.0 [#297](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/297) * [OCPBUGS-13862](https://issues.redhat.com/browse/OCPBUGS-13862): add separate upgradeable condition for the sync controller [#254](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/254) * [OCPBUGS-13188](https://issues.redhat.com/browse/OCPBUGS-13188): update config sync controller to add upgrade status [#251](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/251) * [OCPBUGS-7898](https://issues.redhat.com/browse/OCPBUGS-7898): add a check for nutanix cloud conf map [#239](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/239) * [OCPBUGS-7884](https://issues.redhat.com/browse/OCPBUGS-7884): Restart pods if related configuration was changed [#228](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/228) * [OCPBUGS-5142](https://issues.redhat.com/browse/OCPBUGS-5142): Try to limit groups for the REST mapper discovery [#212](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/212) * [OCPBUGS-1411](https://issues.redhat.com/browse/OCPBUGS-1411): Bump dependencies to k8s 1.25 [#203](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/203) * CCM namespace should be labelled as privileged [#202](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/202) * Reset Go mod after openstack library-go bump [#200](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/200) * Update library-go to set OpenStack provider to external [#199](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/199) * Updating ose-cluster-cloud-controller-manager-operator images to be consistent with ART [#196](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/196) * [Bug 2104373](https://bugzilla.redhat.com/show_bug.cgi?id=2104373): Improve decision logic around syncing cloud config [#197](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/197) * [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/2dbffc67e4fb2ef972f4ba6e6c1a76447193c6ce...3b1f0843e2bd25fb4e39659ef47424f67ccaa727) ### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/92c3b10237c1ebf7ab7a0c744db3949377614e52) * [OCPBUGS-16243](https://issues.redhat.com/browse/OCPBUGS-16243): retire LatencySensitive featureset [#336](https://github.com/openshift/cluster-config-operator/pull/336) * : OCPBUGS-21245: bump library-go to include switch to HTTP/1.1 [#373](https://github.com/openshift/cluster-config-operator/pull/373) * [CORS-2794](https://issues.redhat.com/browse/CORS-2794): AWS Shared VPC API Bump [release-4.12] [#344](https://github.com/openshift/cluster-config-operator/pull/344) * [OCPBUGS-4544](https://issues.redhat.com/browse/OCPBUGS-4544): Revert "Increase verbosity level to track probe timeouts" [#275](https://github.com/openshift/cluster-config-operator/pull/275) * [OCPBUGS-3523](https://issues.redhat.com/browse/OCPBUGS-3523): add --feature-set option to render options [#272](https://github.com/openshift/cluster-config-operator/pull/272) * [NE-975](https://issues.redhat.com/browse/NE-975): Update openshift/api for updated ingress config loadBalancer fields [#268](https://github.com/openshift/cluster-config-operator/pull/268) * Increase verbosity level to track probe timeouts [#267](https://github.com/openshift/cluster-config-operator/pull/267) * [Bug 1843043](https://bugzilla.redhat.com/show_bug.cgi?id=1843043): Update openshift/api for modified config resource description [#264](https://github.com/openshift/cluster-config-operator/pull/264) * update openshift/api for new ingress manifest [#263](https://github.com/openshift/cluster-config-operator/pull/263) * Update go.mod api,client-go to register crd [#262](https://github.com/openshift/cluster-config-operator/pull/262) * This is not the repo you're looking for. [#261](https://github.com/openshift/cluster-config-operator/pull/261) * Bump k8s dependencies [#260](https://github.com/openshift/cluster-config-operator/pull/260) * [Full changelog](https://github.com/openshift/cluster-config-operator/compare/4fbf99986d7d55885c0dc4a53610a53f97171242...92c3b10237c1ebf7ab7a0c744db3949377614e52) ### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/f573eded61847fc153874615b29704d93ddcad8d) * [OCPBUGS-32429](https://issues.redhat.com/browse/OCPBUGS-32429): create suitable role and roleBinding for csi-snapshot-webhook [#207](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/207) * [OCPBUGS-21442](https://issues.redhat.com/browse/OCPBUGS-21442): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#169](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/169) * [OCPBUGS-10646](https://issues.redhat.com/browse/OCPBUGS-10646): Hypershift: set Deployment properties [#148](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/148) * [OCPBUGS-8374](https://issues.redhat.com/browse/OCPBUGS-8374): [4.12] remove cluster-admin role. [#143](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/143) * [OCPBUGS-4526](https://issues.redhat.com/browse/OCPBUGS-4526): hypershift: use correct kubeconfig secret for csi-snapshot-controller [#138](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/138) * [OCPBUGS-4251](https://issues.redhat.com/browse/OCPBUGS-4251): Add HyperShift specific priorityClass [#135](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/135) * [OCPBUGS-4121](https://issues.redhat.com/browse/OCPBUGS-4121): Don't remove PDB on SNO clusters [#134](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/134) * [STOR-971](https://issues.redhat.com/browse/STOR-971): Update for HyperShift [#125](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/125) * Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART [#130](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/130) * add capability annotation [#126](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/126) * [Bug 2101520](https://bugzilla.redhat.com/show_bug.cgi?id=2101520): bump library-go to get a that prevents watchers leaks [#129](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/129) * [STOR-858](https://issues.redhat.com/browse/STOR-858): Bump github.com/openshift/* and k8s.io/* [#128](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/128) * [OCPBUGS-990](https://issues.redhat.com/browse/OCPBUGS-990): Add RBAC to read extension-apiserver-authentication in kube-system [#127](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/127) * [STOR-970](https://issues.redhat.com/browse/STOR-970): Refactoring the oprator for newer library-go [#124](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/124) * Updating ose-cluster-csi-snapshot-controller-operator images to be consistent with ART [#122](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/122) * [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/a95aec84224c06e448601b4de4906dfa49e1d429...f573eded61847fc153874615b29704d93ddcad8d) ### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/e955534113ef9a65ad055198eab63ba7d60fbd21) * [OCPBUGS-21525](https://issues.redhat.com/browse/OCPBUGS-21525): Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator [#391](https://github.com/openshift/cluster-dns-operator/pull/391) * [OCPBUGS-19933](https://issues.redhat.com/browse/OCPBUGS-19933): update-node-resolver.sh: Check for errors from >> [#385](https://github.com/openshift/cluster-dns-operator/pull/385) * [OCPBUGS-19933](https://issues.redhat.com/browse/OCPBUGS-19933): ensure original hosts file contents are preserved [#383](https://github.com/openshift/cluster-dns-operator/pull/383) * [OCPBUGS-15251](https://issues.redhat.com/browse/OCPBUGS-15251): Add support for protocolStrategy API field to enable force_tcp configuration [#378](https://github.com/openshift/cluster-dns-operator/pull/378) * Updating ose-cluster-dns-operator images to be consistent with ART, and generate bindata [#344](https://github.com/openshift/cluster-dns-operator/pull/344) * [OCPBUGS-753](https://issues.redhat.com/browse/OCPBUGS-753): keep dns-default annotations intact [#340](https://github.com/openshift/cluster-dns-operator/pull/340) * [NE-929](https://issues.redhat.com/browse/NE-929): CoreDNS Cache Tuning - Functional Implementation [#335](https://github.com/openshift/cluster-dns-operator/pull/335) * [OCPBUGS-1439](https://issues.redhat.com/browse/OCPBUGS-1439): Fix TestDNSLogging race condition [#341](https://github.com/openshift/cluster-dns-operator/pull/341) * [OCPBUGS-1549](https://issues.redhat.com/browse/OCPBUGS-1549): Reconcile the DNS namespace [#343](https://github.com/openshift/cluster-dns-operator/pull/343) * [OCPBUGS-1558](https://issues.redhat.com/browse/OCPBUGS-1558): Bump vendored k8s libraries to 1.25 [#342](https://github.com/openshift/cluster-dns-operator/pull/342) * [NE-1066](https://issues.redhat.com/browse/NE-1066): Enable the chaos plugin for CoreDNS in order to expose CoreDNS metadata [#337](https://github.com/openshift/cluster-dns-operator/pull/337) * [DPP-10859](https://issues.redhat.com/browse/DPP-10859): Update Bugzilla links to "Networking" component [#333](https://github.com/openshift/cluster-dns-operator/pull/333) * [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/69b0ceb465c42e22ef51a01952f25ef7bb1f5d99...e955534113ef9a65ad055198eab63ba7d60fbd21) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/4bf4f66a77b9149d92496b439f14bb9306d1f19c) * [OCPBUGS-35501](https://issues.redhat.com/browse/OCPBUGS-35501): return errors in wait-for-ceo [#1277](https://github.com/openshift/cluster-etcd-operator/pull/1277) * [OCPBUGS-32001](https://issues.redhat.com/browse/OCPBUGS-32001): update golang x net [#1256](https://github.com/openshift/cluster-etcd-operator/pull/1256) * [OCPBUGS-30914](https://issues.redhat.com/browse/OCPBUGS-30914): Replace nodelister with master nodelister everywhere [#1224](https://github.com/openshift/cluster-etcd-operator/pull/1224) * [OCPBUGS-30938](https://issues.redhat.com/browse/OCPBUGS-30938): fix panic in health check timeouts [#1228](https://github.com/openshift/cluster-etcd-operator/pull/1228) * [OCPBUGS-27776](https://issues.redhat.com/browse/OCPBUGS-27776): [4.13] Remove z-upgrades from UpgradeBackupController [#1185](https://github.com/openshift/cluster-etcd-operator/pull/1185) * [OCPBUGS-23151](https://issues.redhat.com/browse/OCPBUGS-23151): relax readiness to local serializable requests [#1156](https://github.com/openshift/cluster-etcd-operator/pull/1156) * [OCPBUGS-21127](https://issues.redhat.com/browse/OCPBUGS-21127): fixing CVE-2023-39325 by updating dependencies [#1148](https://github.com/openshift/cluster-etcd-operator/pull/1148) * [OCPBUGS-20100](https://issues.redhat.com/browse/OCPBUGS-20100): [4.12] Backports of backup/restore fixes [#1137](https://github.com/openshift/cluster-etcd-operator/pull/1137) * [OCPBUGS-19837](https://issues.redhat.com/browse/OCPBUGS-19837): Update staticpod file permissions to conform with CIS benchmarks [#1128](https://github.com/openshift/cluster-etcd-operator/pull/1128) * [OCPBUGS-17808](https://issues.redhat.com/browse/OCPBUGS-17808): reset snapshot default counts to avoid file already lo… [#1100](https://github.com/openshift/cluster-etcd-operator/pull/1100) * [OCPBUGS-12473](https://issues.redhat.com/browse/OCPBUGS-12473): Fix Flake TestAttemptToScaleDown/scale_down_only_by_one_machine_at_a_time [#1046](https://github.com/openshift/cluster-etcd-operator/pull/1046) * [OCPBUGS-7830](https://issues.redhat.com/browse/OCPBUGS-7830): increase live/ready timeout and failure thresholds [#1011](https://github.com/openshift/cluster-etcd-operator/pull/1011) * Update reviewers and approvers [#987](https://github.com/openshift/cluster-etcd-operator/pull/987) * [OCPBUGS-7409](https://issues.redhat.com/browse/OCPBUGS-7409): set default timeouts in etcdcli [#1005](https://github.com/openshift/cluster-etcd-operator/pull/1005) * [OCPBUGS-6935](https://issues.redhat.com/browse/OCPBUGS-6935): add dedicated success status for bootstrap removal [#999](https://github.com/openshift/cluster-etcd-operator/pull/999) * [OCPBUGS-7373](https://issues.redhat.com/browse/OCPBUGS-7373): [release-4.12] fail early on missing node status envs [#1004](https://github.com/openshift/cluster-etcd-operator/pull/1004) * [OCPBUGS-6898](https://issues.redhat.com/browse/OCPBUGS-6898): updating library-go for CVE-2022-41717 [#998](https://github.com/openshift/cluster-etcd-operator/pull/998) * [OCPBUGS-5762](https://issues.redhat.com/browse/OCPBUGS-5762): should not scale-down when all members are healthy [#984](https://github.com/openshift/cluster-etcd-operator/pull/984) * [OCPBUGS-4743](https://issues.redhat.com/browse/OCPBUGS-4743): only allow TLS1.2/1.3 ciphersuites in etcd and CEO [#971](https://github.com/openshift/cluster-etcd-operator/pull/971) * [OCPBUGS-3841](https://issues.redhat.com/browse/OCPBUGS-3841): update apf configuration to use v1beta2 [#965](https://github.com/openshift/cluster-etcd-operator/pull/965) * [OCPBUGS-4193](https://issues.redhat.com/browse/OCPBUGS-4193): later bootstrap removal in delayed scaling [#967](https://github.com/openshift/cluster-etcd-operator/pull/967) * [OCPBUGS-2918](https://issues.redhat.com/browse/OCPBUGS-2918): update prometheus alerts [#958](https://github.com/openshift/cluster-etcd-operator/pull/958) * library-go vendoring for installer cmd timeout [#950](https://github.com/openshift/cluster-etcd-operator/pull/950) * doc access clusterbot resources [#948](https://github.com/openshift/cluster-etcd-operator/pull/948) * doc fixes for prometheus metrics [#933](https://github.com/openshift/cluster-etcd-operator/pull/933) * Hypershift: Stop trying to apply etcd prometheusrule [#917](https://github.com/openshift/cluster-etcd-operator/pull/917) * trt-589 library-go bump [#941](https://github.com/openshift/cluster-etcd-operator/pull/941) * [OCPBUGS-1329](https://issues.redhat.com/browse/OCPBUGS-1329): Add niceness to important etcd processes [#938](https://github.com/openshift/cluster-etcd-operator/pull/938) * [OCPBUGS-1130](https://issues.redhat.com/browse/OCPBUGS-1130): increase etcdGRPCRequestsSlow thresholds [#932](https://github.com/openshift/cluster-etcd-operator/pull/932) * Remove quorum guard pod after the pod is removed from the cluster [#923](https://github.com/openshift/cluster-etcd-operator/pull/923) * [Bug 2046335](https://bugzilla.redhat.com/show_bug.cgi?id=2046335): fix cert rotation on IP changes [#921](https://github.com/openshift/cluster-etcd-operator/pull/921) * [OCPBUGS-675](https://issues.redhat.com/browse/OCPBUGS-675): preserve log message on failures [#922](https://github.com/openshift/cluster-etcd-operator/pull/922) * [OCPBUGS-675](https://issues.redhat.com/browse/OCPBUGS-675): add nil check in checkSingleMemberHealth() [#918](https://github.com/openshift/cluster-etcd-operator/pull/918) * Revert "Adding cluster-etcd-operator sub command: ensure-env" [#914](https://github.com/openshift/cluster-etcd-operator/pull/914) * Set default container in etcd [#910](https://github.com/openshift/cluster-etcd-operator/pull/910) * Adding cluster-etcd-operator sub command: ensure-env [#726](https://github.com/openshift/cluster-etcd-operator/pull/726) * [Bug 2089199](https://bugzilla.redhat.com/show_bug.cgi?id=2089199): Remove etcd dashboards from Hypershift [#897](https://github.com/openshift/cluster-etcd-operator/pull/897) * vendor upstream alerts [#894](https://github.com/openshift/cluster-etcd-operator/pull/894) * Exits with a non-zero code in case Etcd backup fails [#871](https://github.com/openshift/cluster-etcd-operator/pull/871) * [Bug 2106044](https://bugzilla.redhat.com/show_bug.cgi?id=2106044): Fix etcd minor upgrade backup [#884](https://github.com/openshift/cluster-etcd-operator/pull/884) * [Bug 2097073](https://bugzilla.redhat.com/show_bug.cgi?id=2097073): vendor upstream alerts [#890](https://github.com/openshift/cluster-etcd-operator/pull/890) * fixing metrics proxy log spam [#883](https://github.com/openshift/cluster-etcd-operator/pull/883) * Updating cluster-etcd-operator images to be consistent with ART [#875](https://github.com/openshift/cluster-etcd-operator/pull/875) * remove etcd-health-monitor sidecar from pod manifest [#873](https://github.com/openshift/cluster-etcd-operator/pull/873) * fixing unit test health flakes with tolerance [#874](https://github.com/openshift/cluster-etcd-operator/pull/874) * [Bug 1884568](https://bugzilla.redhat.com/show_bug.cgi?id=1884568): Add etcd pod liveness probe [#869](https://github.com/openshift/cluster-etcd-operator/pull/869) * Add documentation for profiling CEO [#868](https://github.com/openshift/cluster-etcd-operator/pull/868) * [Bug 2097431](https://bugzilla.redhat.com/show_bug.cgi?id=2097431): fix degraded missing cluster version [#857](https://github.com/openshift/cluster-etcd-operator/pull/857) * [Bug 2093819](https://bugzilla.redhat.com/show_bug.cgi?id=2093819): add timeout to health checks [#862](https://github.com/openshift/cluster-etcd-operator/pull/862) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/5617740c013848971699d210a8b28e208938e0d8...4bf4f66a77b9149d92496b439f14bb9306d1f19c) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/0e04e37acf8ea366dd94dfadec274df06e35eb44) * [OCPBUGS-22125](https://issues.redhat.com/browse/OCPBUGS-22125): increase storage account key cache expiration [#939](https://github.com/openshift/cluster-image-registry-operator/pull/939) * [OCPBUGS-20684](https://issues.redhat.com/browse/OCPBUGS-20684): mitigate effects of rapid reset [#947](https://github.com/openshift/cluster-image-registry-operator/pull/947) * [OCPBUGS-8491](https://issues.redhat.com/browse/OCPBUGS-8491): bump aws-sdk-go [#846](https://github.com/openshift/cluster-image-registry-operator/pull/846) * [OCPBUGS-6517](https://issues.redhat.com/browse/OCPBUGS-6517): OpenStack: Add support for Proxy [#834](https://github.com/openshift/cluster-image-registry-operator/pull/834) * [OCPBUGS-4678](https://issues.redhat.com/browse/OCPBUGS-4678): Bump aws-sdk-go to v1.44.145 [#822](https://github.com/openshift/cluster-image-registry-operator/pull/822) * [OCPBUGS-5154](https://issues.redhat.com/browse/OCPBUGS-5154): swift: Retry connecting to OpenStack [#826](https://github.com/openshift/cluster-image-registry-operator/pull/826) * [OCPBUGS-3175](https://issues.redhat.com/browse/OCPBUGS-3175): Bump gophercloud [#812](https://github.com/openshift/cluster-image-registry-operator/pull/812) * add myself to OWNERS [#813](https://github.com/openshift/cluster-image-registry-operator/pull/813) * [IR-295](https://issues.redhat.com/browse/IR-295): upgrade to Go 1.19 [#805](https://github.com/openshift/cluster-image-registry-operator/pull/805) * [IR-298](https://issues.redhat.com/browse/IR-298): Bump k8s to 1.25.2 [#803](https://github.com/openshift/cluster-image-registry-operator/pull/803) * [OCPBUGS-1717](https://issues.redhat.com/browse/OCPBUGS-1717): bump aws-go-sdk, adding support for me-central-1 [#800](https://github.com/openshift/cluster-image-registry-operator/pull/800) * Bug OCPBUGS-716: Add support for kube event recorder [#798](https://github.com/openshift/cluster-image-registry-operator/pull/798) * [Bug 2093440](https://bugzilla.redhat.com/show_bug.cgi?id=2093440): Use actualDaemonSet for SetDaemonSetGeneration [#790](https://github.com/openshift/cluster-image-registry-operator/pull/790) * [Bug 2093440](https://bugzilla.redhat.com/show_bug.cgi?id=2093440): Add progressing condition for node-ca daemon set [#789](https://github.com/openshift/cluster-image-registry-operator/pull/789) * Updating ose-cluster-image-registry-operator images to be consistent with ART [#788](https://github.com/openshift/cluster-image-registry-operator/pull/788) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/d34b3ef1941864e566ebdf9ee04c55d14b8b4cd9...0e04e37acf8ea366dd94dfadec274df06e35eb44) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/c1c0ab3f0c320d071cb0edb8200ee75672aca033) * [OCPBUGS-35454](https://issues.redhat.com/browse/OCPBUGS-35454): internal service changed fix target port logic [#1092](https://github.com/openshift/cluster-ingress-operator/pull/1092) * [OCPBUGS-35304](https://issues.redhat.com/browse/OCPBUGS-35304): TestHostNetworkPortBinding: Delete t.Parallel() [#1083](https://github.com/openshift/cluster-ingress-operator/pull/1083) * [OCPBUGS-35027](https://issues.redhat.com/browse/OCPBUGS-35027): Don't add clientca-configmap finalizer if deleting [#1080](https://github.com/openshift/cluster-ingress-operator/pull/1080) * [OCPBUGS-34888](https://issues.redhat.com/browse/OCPBUGS-34888): desiredRouterDeployment: Set HostPort if needed [#1076](https://github.com/openshift/cluster-ingress-operator/pull/1076) * [OCPBUGS-34757](https://issues.redhat.com/browse/OCPBUGS-34757): Avoid spurious updates for internalTrafficPolicy [#1070](https://github.com/openshift/cluster-ingress-operator/pull/1070) * [OCPBUGS-34110](https://issues.redhat.com/browse/OCPBUGS-34110): Avoid spurious updates for scope in IngressClass [#1056](https://github.com/openshift/cluster-ingress-operator/pull/1056) * [OCPBUGS-34548](https://issues.redhat.com/browse/OCPBUGS-34548): Use centos7 tag for quay.io/centos7/httpd-24-centos7 image [#1068](https://github.com/openshift/cluster-ingress-operator/pull/1068) * [OCPBUGS-20765](https://issues.redhat.com/browse/OCPBUGS-20765): Bump golang.org/x/net for CVE-2023-44487 [#988](https://github.com/openshift/cluster-ingress-operator/pull/988) * [OCPBUGS-22432](https://issues.redhat.com/browse/OCPBUGS-22432): test/e2e: Don't use openshift/origin-node [#992](https://github.com/openshift/cluster-ingress-operator/pull/992) * [NE-1372](https://issues.redhat.com/browse/NE-1372): Add support for AWS shared VPC in another account #966 [#971](https://github.com/openshift/cluster-ingress-operator/pull/971) * [OCPBUGS-13049](https://issues.redhat.com/browse/OCPBUGS-13049): bump controller-runtime to fix the multi namespace cache indexing [#922](https://github.com/openshift/cluster-ingress-operator/pull/922) * [OCPBUGS-15467](https://issues.redhat.com/browse/OCPBUGS-15467): Add missing AWS permission for ListTagsForResources [#954](https://github.com/openshift/cluster-ingress-operator/pull/954) * [OCPBUGS-16620](https://issues.redhat.com/browse/OCPBUGS-16620): Deflake TestRouterCompressionOperation [#963](https://github.com/openshift/cluster-ingress-operator/pull/963) * [OCPBUGS-16621](https://issues.redhat.com/browse/OCPBUGS-16621): Fix TestClientTLS flakes [#964](https://github.com/openshift/cluster-ingress-operator/pull/964) * [OCPBUGS-15644](https://issues.redhat.com/browse/OCPBUGS-15644): Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record [#959](https://github.com/openshift/cluster-ingress-operator/pull/959) * [OCPBUGS-14454](https://issues.redhat.com/browse/OCPBUGS-14454), [OCPBUGS-14455](https://issues.redhat.com/browse/OCPBUGS-14455): Handle mTLS CRLs, and fix accidental CRL duplication [#941](https://github.com/openshift/cluster-ingress-operator/pull/941) * [OCPBUGS-12464](https://issues.redhat.com/browse/OCPBUGS-12464): Target metrics port by name in internal service [#910](https://github.com/openshift/cluster-ingress-operator/pull/910) * [OCPBUGS-3517](https://issues.redhat.com/browse/OCPBUGS-3517): Ingress controller should not have affinity policy in single-replica clusters [#857](https://github.com/openshift/cluster-ingress-operator/pull/857) * [OCPBUGS-2775](https://issues.redhat.com/browse/OCPBUGS-2775): Changed "name" label to "shard_name" of route_metrics_controller_routes_per_shard metric [#851](https://github.com/openshift/cluster-ingress-operator/pull/851) * [OCPBUGS-2848](https://issues.redhat.com/browse/OCPBUGS-2848): Support matchExpressions selectors with route metrics [#850](https://github.com/openshift/cluster-ingress-operator/pull/850) * [Bug 2117524](https://bugzilla.redhat.com/show_bug.cgi?id=2117524): Update CRLs when they expire [#828](https://github.com/openshift/cluster-ingress-operator/pull/828) * [OCPBUGS-853](https://issues.redhat.com/browse/OCPBUGS-853): certificate-publisher: Don't publish extraneous certificates [#824](https://github.com/openshift/cluster-ingress-operator/pull/824) * [Bug 1962502](https://bugzilla.redhat.com/show_bug.cgi?id=1962502): Add alerts for unmanaged Routes and Ingresses without IngressClassName [#823](https://github.com/openshift/cluster-ingress-operator/pull/823) * [NE-1071](https://issues.redhat.com/browse/NE-1071): Default HAProxy maxconn value to 50000 for OCP 4.12) [#836](https://github.com/openshift/cluster-ingress-operator/pull/836) * Updating ose-cluster-ingress-operator images to be consistent with ART [#834](https://github.com/openshift/cluster-ingress-operator/pull/834) * [OCPBUGS-2435](https://issues.redhat.com/browse/OCPBUGS-2435): TestRouterCompressionOperation: Nil-pointer fix [#843](https://github.com/openshift/cluster-ingress-operator/pull/843) * [OCPBUGS-2493](https://issues.redhat.com/browse/OCPBUGS-2493): Fix TestUnmanagedDNSToManagedDNSInternal E2E test race conditions [#845](https://github.com/openshift/cluster-ingress-operator/pull/845) * [CFE-478](https://issues.redhat.com/browse/CFE-478): Added support for exporting Route type and Routes per Shard metrics [#779](https://github.com/openshift/cluster-ingress-operator/pull/779) * [NE-975](https://issues.redhat.com/browse/NE-975): Use ingress config to set default LB type on AWS [#837](https://github.com/openshift/cluster-ingress-operator/pull/837) * [OCPBUGS-2429](https://issues.redhat.com/browse/OCPBUGS-2429): Fix TestReloadInterval min value test cases and race conditions [#842](https://github.com/openshift/cluster-ingress-operator/pull/842) * [OCPBUGS-2334](https://issues.redhat.com/browse/OCPBUGS-2334): Added nil check for service object on load balancer scope change [#839](https://github.com/openshift/cluster-ingress-operator/pull/839) * [NE-956](https://issues.redhat.com/browse/NE-956): Configurable LB Source Ranges - Functional Implementation [#817](https://github.com/openshift/cluster-ingress-operator/pull/817) * [Bug 2107462](https://bugzilla.redhat.com/show_bug.cgi?id=2107462): Update CGO_ENABLED=1 [#833](https://github.com/openshift/cluster-ingress-operator/pull/833) * [OCPBUGS-236](https://issues.redhat.com/browse/OCPBUGS-236): Bump openshift/api for reloadInterval fix [#830](https://github.com/openshift/cluster-ingress-operator/pull/830) * [OCPBUGS-1554](https://issues.redhat.com/browse/OCPBUGS-1554): Bump vendored k8s libraries to 1.25 [#829](https://github.com/openshift/cluster-ingress-operator/pull/829) * Enable switching of AWS CLB to NLB without deletion of IngressController object. [#790](https://github.com/openshift/cluster-ingress-operator/pull/790) * [Bug 2066560](https://bugzilla.redhat.com/show_bug.cgi?id=2066560): Make ingress clusteroperator progressing=true when router deployment is rolling out [#769](https://github.com/openshift/cluster-ingress-operator/pull/769) * Add IBM Cloud DNS support for Power VS [#819](https://github.com/openshift/cluster-ingress-operator/pull/819) * [OCPBUGS-1049](https://issues.redhat.com/browse/OCPBUGS-1049): test/e2e: Fix TestCanaryRoute security context [#826](https://github.com/openshift/cluster-ingress-operator/pull/826) * [Bug 2089482](https://bugzilla.redhat.com/show_bug.cgi?id=2089482): Do not use deprecated API field InfrastructureStatus.Platform [#814](https://github.com/openshift/cluster-ingress-operator/pull/814) * [NE-969](https://issues.redhat.com/browse/NE-969): Add IBM DNS Services provider support for private clusters [#796](https://github.com/openshift/cluster-ingress-operator/pull/796) * [DPP-10860](https://issues.redhat.com/browse/DPP-10860): Update Bugzilla links to "Networking" component [#815](https://github.com/openshift/cluster-ingress-operator/pull/815) * [OCPBUGS-368](https://issues.redhat.com/browse/OCPBUGS-368): Fix e2e tests for pod security violations [#818](https://github.com/openshift/cluster-ingress-operator/pull/818) * [NE-979](https://issues.redhat.com/browse/NE-979): add ReloadInterval TuningOption [#805](https://github.com/openshift/cluster-ingress-operator/pull/805) * [Bug 2101878](https://bugzilla.redhat.com/show_bug.cgi?id=2101878): Fix another issue with route status clearing race condition caused by not validating generation id [#811](https://github.com/openshift/cluster-ingress-operator/pull/811) * [Bug 2108708](https://bugzilla.redhat.com/show_bug.cgi?id=2108708): Disable auto creation of default ingress contoller for hypershift [#797](https://github.com/openshift/cluster-ingress-operator/pull/797) * [Bug 2101878](https://bugzilla.redhat.com/show_bug.cgi?id=2101878): Fix route status clearing race condition caused by using the cache [#794](https://github.com/openshift/cluster-ingress-operator/pull/794) * [Bug 2106086](https://bugzilla.redhat.com/show_bug.cgi?id=2106086): Bump openshift/api for healthCheckInterval fix [#804](https://github.com/openshift/cluster-ingress-operator/pull/804) * [Bug 2104481](https://bugzilla.redhat.com/show_bug.cgi?id=2104481): Allow PROXY protocol for the "Private" endpoint publishing strategy [#803](https://github.com/openshift/cluster-ingress-operator/pull/803) * add Ethany-RH to OWNERS [#800](https://github.com/openshift/cluster-ingress-operator/pull/800) * [Bug 2086887](https://bugzilla.redhat.com/show_bug.cgi?id=2086887): Add better debug logging to TestIngressOperatorCacheIsNotGlobal to help debug flakes [#793](https://github.com/openshift/cluster-ingress-operator/pull/793) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/9e60f1f1e166b8097e21a6187123fd49ea0e02c2...c1c0ab3f0c320d071cb0edb8200ee75672aca033) ### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/09d7ddbaba9eb5715313e716476e6a33848d045c) * [OCPBUGS-22736](https://issues.redhat.com/browse/OCPBUGS-22736): pkg/operator/configobserver: check that the serving certificate refer… [#1571](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1571) * : OCPBUGS-20855: bump library-go to include switch to HTTP/1.1 [#1574](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1574) * [OCPBUGS-19837](https://issues.redhat.com/browse/OCPBUGS-19837): Update staticpod file permissions to conform with CIS benchmarks [#1559](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1559) * [OCPBUGS-17139](https://issues.redhat.com/browse/OCPBUGS-17139): make webhook connection failure a warning in log [#1533](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1533) * [OCPBUGS-13346](https://issues.redhat.com/browse/OCPBUGS-13346): dont log jwt tokens [#1524](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1524) * [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): enable pod security admission for techpreview [#1440](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1440) * [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): make the bootstrap kube-apiserver honor cluster-wide featuregates [#1439](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1439) * [OCPBUGS-7369](https://issues.redhat.com/browse/OCPBUGS-7369): Guard pod set readiness probe endpoint explicitly [#1445](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1445) * [OCPBUGS-4478](https://issues.redhat.com/browse/OCPBUGS-4478): guard controller: set an explicit hostname to avoid name collisions [#1416](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1416) * [OCPBUGS-3056](https://issues.redhat.com/browse/OCPBUGS-3056): CVE-2022-3259: enable HSTS for kube-apiserver [#1400](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1400) * [OCPBUGS-3037](https://issues.redhat.com/browse/OCPBUGS-3037): Allow ephemeral volumes in all SCCs [#1399](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1399) * [OCPBUGS-4299](https://issues.redhat.com/browse/OCPBUGS-4299): bootstrap-kube-apiserver: specify resources.requests [#1411](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1411) * [OCPBUGS-3841](https://issues.redhat.com/browse/OCPBUGS-3841): update apf configuration to use v1beta2 [#1407](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1407) * [OCPBUGS-3663](https://issues.redhat.com/browse/OCPBUGS-3663): Revert "turn PodSecurity admission to enforce restricted globally" [#1405](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1405) * [OCPBUGS-2071](https://issues.redhat.com/browse/OCPBUGS-2071): revert dev cert rotation [#1401](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1401) * [Bug 2094362](https://bugzilla.redhat.com/show_bug.cgi?id=2094362): Duplicate prometheus rules for API SLOs after upgrade [#1376](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1376) * library-go vendoring for installer cmd timeout [#1395](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1395) * serviceaccountissuer: fix case when default value is being used and not trusted after change [#1393](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1393) * bindata/assets/alerts/api-usage: Include removed_release in APIRemovedInNext*ReleaseInUse labels [#1367](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1367) * Fix typo in operator status serviceAccountIssuer name field [#1390](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1390) * [OCPBUGS-2198](https://issues.redhat.com/browse/OCPBUGS-2198): AUTH-309: Wire support for trusted service account issuers [#1381](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1381) * Update API alerts after recent bump to k8s 1.25 [#1382](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1382) * trt-589 bump library-go [#1383](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1383) * [Bug 2073220](https://bugzilla.redhat.com/show_bug.cgi?id=2073220): routes/status resources can leak sensitive data [#1375](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1375) * k8s 1.25.0 [#1374](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1374) * make PodSecurity admission enforce restricted globally [#1369](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1369) * Update library-go to enable external provider for OpenStack by default [#1370](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1370) * enable dev cert rotation [#1364](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1364) * [Bug 2101444](https://bugzilla.redhat.com/show_bug.cgi?id=2101444): specify resource=pod for PSa violation alerts [#1363](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1363) * [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/06f0a3d686b9f4a8e70ca430059093ad6d71fced...09d7ddbaba9eb5715313e716476e6a33848d045c) ### [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator/tree/d50f7322addd997cc73a0ba8294eadb977974c3f) * [OCPBUGS-20962](https://issues.redhat.com/browse/OCPBUGS-20962): bump golang.org/x/net to v0.17.0 [#29](https://github.com/openshift/cluster-api-operator/pull/29) * Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART [#8](https://github.com/openshift/cluster-api-operator/pull/8) * Updating ose-cluster-kube-cluster-api-operator images to be consistent with ART [#7](https://github.com/openshift/cluster-api-operator/pull/7) * [Full changelog](https://github.com/openshift/cluster-api-operator/compare/5ad359ecbb8edee5ebf0352e5d0969ee95dfe4d0...d50f7322addd997cc73a0ba8294eadb977974c3f) ### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/c3c07bebb7a644fe75bccd590fa088bcccd3749a) * [OCPBUGS-27068](https://issues.redhat.com/browse/OCPBUGS-27068): bump(library-go)=release-4.12 [#789](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/789) * [OCPBUGS-21048](https://issues.redhat.com/browse/OCPBUGS-21048): Bump deps to address CVE-2023-44487 [4.12] [#759](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/759) * [OCPBUGS-19837](https://issues.redhat.com/browse/OCPBUGS-19837): Update staticpod file permissions to conform with CIS benchmarks [#754](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/754) * [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): Enforce PSA when techpreview is enabled [#694](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/694) * [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): honor feature gates during bootstrapping [#695](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/695) * [OCPBUGS-7369](https://issues.redhat.com/browse/OCPBUGS-7369): Guard pod set readiness probe endpoint explicitly [#699](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/699) * [OCPBUGS-4478](https://issues.redhat.com/browse/OCPBUGS-4478): Sync library go 4.12 [#676](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/676) * [OCPBUGS-4766](https://issues.redhat.com/browse/OCPBUGS-4766): limit cluster-policy-controller RBAC permissions [#675](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/675) * [OCPBUGS-4681](https://issues.redhat.com/browse/OCPBUGS-4681): remove unnecessary RBAC [#674](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/674) * [OCPBUGS-4303](https://issues.redhat.com/browse/OCPBUGS-4303): bootstrap-kube-controller-manager: specify resources.requests [#666](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/666) * library-go vendoring for installer cmd timeout [#659](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/659) * trt-589 bump library-go [#658](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/658) * Update go mod go version [#657](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/657) * add nodes.config.openshift.io to resource-graph [#655](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/655) * [Bug 2101843](https://bugzilla.redhat.com/show_bug.cgi?id=2101843): Label openshift-infra namespace as privileged [#647](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/647) * k8s 1.25.0 [#652](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/652) * [Bug 2118286](https://bugzilla.redhat.com/show_bug.cgi?id=2118286): always report and reconcile GarbageCollectorDegraded condition [#650](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/650) * [OCPBUGS-212](https://issues.redhat.com/browse/OCPBUGS-212): gc watcher should close connections after throwing away a client [#649](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/649) * Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART [#638](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/638) * [Bug 2001409](https://bugzilla.redhat.com/show_bug.cgi?id=2001409): add runbook urls to KCM-o alerts [#635](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/635) * Reset Go mod after openstack library-go bump [#642](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/642) * fix TestPodDisruptionBudgetAtLimitAlert by adding SecurityContext to a pod [#643](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/643) * Update library-go to set OpenStack provider to external [#641](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/641) * Make KCM-O conditionally dependent on monitoring stack availability [#639](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/639) * [Bug 2103940](https://bugzilla.redhat.com/show_bug.cgi?id=2103940): Decouple KCM-O's status from monitoring stack [#636](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/636) * [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/97ab7ed27bee6bf9e58f71aae573f20a028c5601...c3c07bebb7a644fe75bccd590fa088bcccd3749a) ### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/48cd96c9dc27c801beff17fa5ea8c3dac374f10d) * [OCPBUGS-27067](https://issues.redhat.com/browse/OCPBUGS-27067): bump(library-go)=release-4.12 [#529](https://github.com/openshift/cluster-kube-scheduler-operator/pull/529) * [OCPBUGS-21239](https://issues.redhat.com/browse/OCPBUGS-21239): Sync deps CVE 2023 39325 4.12 [#505](https://github.com/openshift/cluster-kube-scheduler-operator/pull/505) * [OCPBUGS-19837](https://issues.redhat.com/browse/OCPBUGS-19837): Update staticpod file permissions to conform with CIS benchmarks [#499](https://github.com/openshift/cluster-kube-scheduler-operator/pull/499) * [OCPBUGS-14652](https://issues.redhat.com/browse/OCPBUGS-14652): disable debug pporf with unauthenticated port for 4.12 [#481](https://github.com/openshift/cluster-kube-scheduler-operator/pull/481) * [OCPBUGS-7369](https://issues.redhat.com/browse/OCPBUGS-7369): Guard controller: set the readiness probe endpoint explicitly [#462](https://github.com/openshift/cluster-kube-scheduler-operator/pull/462) * [OCPBUGS-4478](https://issues.redhat.com/browse/OCPBUGS-4478): Sync library go 4.12 [#452](https://github.com/openshift/cluster-kube-scheduler-operator/pull/452) * [OCPBUGS-4292](https://issues.redhat.com/browse/OCPBUGS-4292): bootstrap-kube-scheduler: specify resources.requests [#448](https://github.com/openshift/cluster-kube-scheduler-operator/pull/448) * library-go vendoring for installer cmd timeout [#444](https://github.com/openshift/cluster-kube-scheduler-operator/pull/444) * Bump openshift/api to bring the MatchLabelKeysInPodTopologySpread enabled in TPNoUpgrade [#442](https://github.com/openshift/cluster-kube-scheduler-operator/pull/442) * trt-589 bump library-go [#441](https://github.com/openshift/cluster-kube-scheduler-operator/pull/441) * Bump go.mod golang version to 1.19 [#440](https://github.com/openshift/cluster-kube-scheduler-operator/pull/440) * k8s 1.25.0 [#438](https://github.com/openshift/cluster-kube-scheduler-operator/pull/438) * Describe how to increase log level of kube-scheduler instances [#436](https://github.com/openshift/cluster-kube-scheduler-operator/pull/436) * Updating ose-cluster-kube-scheduler-operator images to be consistent with ART [#433](https://github.com/openshift/cluster-kube-scheduler-operator/pull/433) * Update owners [#432](https://github.com/openshift/cluster-kube-scheduler-operator/pull/432) * [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/554fc89c4317e6108851fd3c729dcd11a78f7834...48cd96c9dc27c801beff17fa5ea8c3dac374f10d) ### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/1a251f4d00c050404dc313c698279da435d08c07) * : OCPBUGS-21336: bump library-go to include switch to HTTP/1.1 [#98](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/98) * [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/56b2189809bbc3b39c04db7e6b4d27235ad2ab9a...1a251f4d00c050404dc313c698279da435d08c07) ### [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver/tree/7b08a4de4a08da8cdb341948e0902395eb0da961) * [OCPBUGS-23486](https://issues.redhat.com/browse/OCPBUGS-23486): Filter non node CSRs in metrics [#220](https://github.com/openshift/cluster-machine-approver/pull/220) * [OCPBUGS-21430](https://issues.redhat.com/browse/OCPBUGS-21430): Bump x/net package to v0.18.0 [#214](https://github.com/openshift/cluster-machine-approver/pull/214) * [OCPBUGS-2621](https://issues.redhat.com/browse/OCPBUGS-2621): Update capi related CMA deployment ports [#173](https://github.com/openshift/cluster-machine-approver/pull/173) * [OCPBUGS-1411](https://issues.redhat.com/browse/OCPBUGS-1411): Bump k8s dependencies to 1.25 [#171](https://github.com/openshift/cluster-machine-approver/pull/171) * update to release.openshift.io/feature-set to match OCP 4.12 [#172](https://github.com/openshift/cluster-machine-approver/pull/172) * ignore case when checking csr hostnames [#170](https://github.com/openshift/cluster-machine-approver/pull/170) * [Full changelog](https://github.com/openshift/cluster-machine-approver/compare/0533fa53b62f0261977101b8bd16076ac6480871...7b08a4de4a08da8cdb341948e0902395eb0da961) ### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/ee4a20d4d0214c9c8fdacaede3482683436d36e0) * [OCPBUGS-35558](https://issues.redhat.com/browse/OCPBUGS-35558): label for infra nodes for metric cluster:capacity_cpu_cores:sum [#2383](https://github.com/openshift/cluster-monitoring-operator/pull/2383) * [OCPBUGS-28766](https://issues.redhat.com/browse/OCPBUGS-28766): fix generation of telemeter token hash [#2306](https://github.com/openshift/cluster-monitoring-operator/pull/2306) * [OCPBUGS-25389](https://issues.redhat.com/browse/OCPBUGS-25389): Add RHACM telemetry metric for 4.12 [#2204](https://github.com/openshift/cluster-monitoring-operator/pull/2204) * [OCPBUGS-21441](https://issues.redhat.com/browse/OCPBUGS-21441): Set the new --disable-http2 flag for prometheus-adapter to disable HTTP2 [#2148](https://github.com/openshift/cluster-monitoring-operator/pull/2148) * [OCPBUGS-22843](https://issues.redhat.com/browse/OCPBUGS-22843): [release-4.12] add RHACS telemetry metrics [#2140](https://github.com/openshift/cluster-monitoring-operator/pull/2140) * [OCPBUGS-21234](https://issues.redhat.com/browse/OCPBUGS-21234): upgrade golang.org/x/net to v0.17.0 [#2123](https://github.com/openshift/cluster-monitoring-operator/pull/2123) * [OCPBUGS-17125](https://issues.redhat.com/browse/OCPBUGS-17125): backport metrics collection profiles selector logic to prevent users from double scraping when they upgrade from 4.12 to 4.13 [#2047](https://github.com/openshift/cluster-monitoring-operator/pull/2047) * [OCPBUGS-16028](https://issues.redhat.com/browse/OCPBUGS-16028): Add the trusted CA bundle in UWM Prometheus pods [#2042](https://github.com/openshift/cluster-monitoring-operator/pull/2042) * [OCPBUGS-15473](https://issues.redhat.com/browse/OCPBUGS-15473): Limit the value of GOMAXPROCS on node-exporter to 4 [#2023](https://github.com/openshift/cluster-monitoring-operator/pull/2023) * [OCPBUGS-13008](https://issues.redhat.com/browse/OCPBUGS-13008): Add build number to vcenter version information [#1965](https://github.com/openshift/cluster-monitoring-operator/pull/1965) * [OCPBUGS-12727](https://issues.redhat.com/browse/OCPBUGS-12727): backport OCPBUGS-5353 to 4.12 [#1955](https://github.com/openshift/cluster-monitoring-operator/pull/1955) * [OCPBUGS-11508](https://issues.redhat.com/browse/OCPBUGS-11508): add startup probe for prometheus-adapter [#1940](https://github.com/openshift/cluster-monitoring-operator/pull/1940) * [OCPBUGS-11623](https://issues.redhat.com/browse/OCPBUGS-11623): node-exporter: disable btrfs collector [#1944](https://github.com/openshift/cluster-monitoring-operator/pull/1944) * [OCPBUGS-11404](https://issues.redhat.com/browse/OCPBUGS-11404): jsonnet: Add prometheus container in UWM [#1935](https://github.com/openshift/cluster-monitoring-operator/pull/1935) * [OCPBUGS-2439](https://issues.redhat.com/browse/OCPBUGS-2439): set the argument path.udev.data in node exporter [#1800](https://github.com/openshift/cluster-monitoring-operator/pull/1800) * [OCPBUGS-4363](https://issues.redhat.com/browse/OCPBUGS-4363): Fixed TargetDown expression to join on the proper label [#1833](https://github.com/openshift/cluster-monitoring-operator/pull/1833) * [OCPBUGS-4488](https://issues.redhat.com/browse/OCPBUGS-4488): Fixes externalURL field for Prometheus and Alertmanager [#1840](https://github.com/openshift/cluster-monitoring-operator/pull/1840) * [OCPBUGS-4627](https://issues.redhat.com/browse/OCPBUGS-4627): compute doc link in PVC not configured message [#1844](https://github.com/openshift/cluster-monitoring-operator/pull/1844) * [OCPBUGS-4489](https://issues.redhat.com/browse/OCPBUGS-4489): Increase startupProbe for prometheus [#1841](https://github.com/openshift/cluster-monitoring-operator/pull/1841) * [OCPBUGS-4431](https://issues.redhat.com/browse/OCPBUGS-4431): add alert KubePodNotScheduled to group openshift-kubernetes.rules [#1837](https://github.com/openshift/cluster-monitoring-operator/pull/1837) * [OCPBUGS-3276](https://issues.redhat.com/browse/OCPBUGS-3276): Pin Down Dependencies on Release 4.12 [#1819](https://github.com/openshift/cluster-monitoring-operator/pull/1819) * [OCPBUGS-4029](https://issues.redhat.com/browse/OCPBUGS-4029): test: increase timeout when checking remote write metrics [#1820](https://github.com/openshift/cluster-monitoring-operator/pull/1820) * [MON-2727](https://issues.redhat.com/browse/MON-2727): Adds telemeter alert TelemeterClientFailures [#1803](https://github.com/openshift/cluster-monitoring-operator/pull/1803) * *: don't expose Prometheus operator's port [#1806](https://github.com/openshift/cluster-monitoring-operator/pull/1806) * Documentation: fix TelemeterClientConfig [#1801](https://github.com/openshift/cluster-monitoring-operator/pull/1801) * Synchronize versions of the downstream components [#1797](https://github.com/openshift/cluster-monitoring-operator/pull/1797) * jsonnet/components: remove PDB patches [#1799](https://github.com/openshift/cluster-monitoring-operator/pull/1799) * [OCPBUGS-1321](https://issues.redhat.com/browse/OCPBUGS-1321): Node Exporter - ignore virtual NICs from OVNK cluster [#1780](https://github.com/openshift/cluster-monitoring-operator/pull/1780) * [RHDEVDOCS-3165](https://issues.redhat.com/browse/RHDEVDOCS-3165): updates to config map code comments and docgen utility [#1773](https://github.com/openshift/cluster-monitoring-operator/pull/1773) * [CFE-551](https://issues.redhat.com/browse/CFE-551): Allowlist metrics related to Routes to be sent via telemetry [#1776](https://github.com/openshift/cluster-monitoring-operator/pull/1776) * test/e2e: improve getActiveTarget() [#1796](https://github.com/openshift/cluster-monitoring-operator/pull/1796) * Synchronize versions of the downstream components [#1793](https://github.com/openshift/cluster-monitoring-operator/pull/1793) * update to release.openshift.io/feature-set to match OCP 4.12 [#1794](https://github.com/openshift/cluster-monitoring-operator/pull/1794) * update to release.openshift.io/feature-set to match OCP 4.12 [#1764](https://github.com/openshift/cluster-monitoring-operator/pull/1764) * [OCPBUGS-2138](https://issues.redhat.com/browse/OCPBUGS-2138): Add os_image_url_override metric from MCO to telemetry [#1784](https://github.com/openshift/cluster-monitoring-operator/pull/1784) * [Bug 2043518](https://bugzilla.redhat.com/show_bug.cgi?id=2043518): set degraded and available status based on Prometheus resource status [#1558](https://github.com/openshift/cluster-monitoring-operator/pull/1558) * Updating cluster-monitoring-operator images to be consistent with ART [#1787](https://github.com/openshift/cluster-monitoring-operator/pull/1787) * Revert "[bot] Update jsonnet dependencies" [#1788](https://github.com/openshift/cluster-monitoring-operator/pull/1788) * Update jsonnet dependencies [#1770](https://github.com/openshift/cluster-monitoring-operator/pull/1770) * Synchronize versions of the downstream components [#1782](https://github.com/openshift/cluster-monitoring-operator/pull/1782) * Makefile: add docgen tool dependency to the docs target [#1772](https://github.com/openshift/cluster-monitoring-operator/pull/1772) * Synchronize versions of the downstream components [#1779](https://github.com/openshift/cluster-monitoring-operator/pull/1779) * [Bug 2114721](https://bugzilla.redhat.com/show_bug.cgi?id=2114721): Adds telemeter token hash to Deployment annotation [#1747](https://github.com/openshift/cluster-monitoring-operator/pull/1747) * [Bug 2100860](https://bugzilla.redhat.com/show_bug.cgi?id=2100860): Pass user-defined Alertmanager service in shared configmap [#1690](https://github.com/openshift/cluster-monitoring-operator/pull/1690) * [OCPBUGS-1364](https://issues.redhat.com/browse/OCPBUGS-1364): Dedicated kubelet ServiceMonitor for prometheus-adapter [#1752](https://github.com/openshift/cluster-monitoring-operator/pull/1752) * [Bug 1933144](https://bugzilla.redhat.com/show_bug.cgi?id=1933144): Extend KubeAggregatedAPIDown alert "for" to 15m [#1639](https://github.com/openshift/cluster-monitoring-operator/pull/1639) * Adds documentation about how to configure CMO [#1696](https://github.com/openshift/cluster-monitoring-operator/pull/1696) * Rename kube_pv to odf_system_pvs [#1756](https://github.com/openshift/cluster-monitoring-operator/pull/1756) * Synchronize versions of the downstream components [#1768](https://github.com/openshift/cluster-monitoring-operator/pull/1768) * go.{mod,sum}: require Go 1.18 [#1769](https://github.com/openshift/cluster-monitoring-operator/pull/1769) * Use odf metrics instead of ceph [#1718](https://github.com/openshift/cluster-monitoring-operator/pull/1718) * Add client certificate and key to service monitor [#1738](https://github.com/openshift/cluster-monitoring-operator/pull/1738) * Update jsonnet dependencies [#1766](https://github.com/openshift/cluster-monitoring-operator/pull/1766) * Add odf_system_objects_total and odf_system_bucket_count [#1763](https://github.com/openshift/cluster-monitoring-operator/pull/1763) * [MON-2654](https://issues.redhat.com/browse/MON-2654): Add a cluster advance feature usage metric [#1750](https://github.com/openshift/cluster-monitoring-operator/pull/1750) * Synchronize versions of the downstream components [#1761](https://github.com/openshift/cluster-monitoring-operator/pull/1761) * Update jsonnet dependencies [#1758](https://github.com/openshift/cluster-monitoring-operator/pull/1758) * Synchronize versions of the downstream components [#1759](https://github.com/openshift/cluster-monitoring-operator/pull/1759) * [OCPBUGS-864](https://issues.redhat.com/browse/OCPBUGS-864): sorted condition and update on change [#1746](https://github.com/openshift/cluster-monitoring-operator/pull/1746) * [MON-2646](https://issues.redhat.com/browse/MON-2646): Remove grafana related code [#1731](https://github.com/openshift/cluster-monitoring-operator/pull/1731) * [Bug 2099939](https://bugzilla.redhat.com/show_bug.cgi?id=2099939): Sets status when UserAlertmanagerConfig is missconfigured [#1724](https://github.com/openshift/cluster-monitoring-operator/pull/1724) * Update jsonnet dependencies [#1741](https://github.com/openshift/cluster-monitoring-operator/pull/1741) * Whitelist metrics for MCG addon [#1721](https://github.com/openshift/cluster-monitoring-operator/pull/1721) * [Bug 2116382](https://bugzilla.redhat.com/show_bug.cgi?id=2116382): Give precedence to CMO config map proxy config [#1737](https://github.com/openshift/cluster-monitoring-operator/pull/1737) * OWNERS: Add myself, and move former team members to emeritus [#1739](https://github.com/openshift/cluster-monitoring-operator/pull/1739) * [Bug 2100312](https://bugzilla.redhat.com/show_bug.cgi?id=2100312): go.mod: update openshift-api to current release-4.12 tip [#1740](https://github.com/openshift/cluster-monitoring-operator/pull/1740) * Update jsonnet dependencies [#1735](https://github.com/openshift/cluster-monitoring-operator/pull/1735) * [Bug 2115527](https://bugzilla.redhat.com/show_bug.cgi?id=2115527): reverts #1704 [#1734](https://github.com/openshift/cluster-monitoring-operator/pull/1734) * [MON-1261](https://issues.redhat.com/browse/MON-1261): exposing topology spread constraints through config [#1624](https://github.com/openshift/cluster-monitoring-operator/pull/1624) * Update jsonnet dependencies [#1730](https://github.com/openshift/cluster-monitoring-operator/pull/1730) * pkg/manifests/amcfg.go: reorder declarations [#1728](https://github.com/openshift/cluster-monitoring-operator/pull/1728) * Unpin Jsonnet dependencies. [#1725](https://github.com/openshift/cluster-monitoring-operator/pull/1725) * Synchronize versions of the downstream components [#1727](https://github.com/openshift/cluster-monitoring-operator/pull/1727) * [Bug 2083226](https://bugzilla.redhat.com/show_bug.cgi?id=2083226): increase alertmanager startupProbe failure threshold [#1720](https://github.com/openshift/cluster-monitoring-operator/pull/1720) * Synchronize versions of the downstream components [#1722](https://github.com/openshift/cluster-monitoring-operator/pull/1722) * [MON-2658](https://issues.redhat.com/browse/MON-2658): Add security context to additional containers in e2e tests [#1714](https://github.com/openshift/cluster-monitoring-operator/pull/1714) * [Bug 2089199](https://bugzilla.redhat.com/show_bug.cgi?id=2089199): Removes etcd related dashboards from CMO [#1674](https://github.com/openshift/cluster-monitoring-operator/pull/1674) * [Bug 2090988](https://bugzilla.redhat.com/show_bug.cgi?id=2090988): Set HA convention on admission-webhook [#1716](https://github.com/openshift/cluster-monitoring-operator/pull/1716) * Synchronize versions of the downstream components [#1713](https://github.com/openshift/cluster-monitoring-operator/pull/1713) * Add telemetry metrics for HyperShift [#1710](https://github.com/openshift/cluster-monitoring-operator/pull/1710) * Updating cluster-monitoring-operator images to be consistent with ART [#1711](https://github.com/openshift/cluster-monitoring-operator/pull/1711) * [Bug 2095719](https://bugzilla.redhat.com/show_bug.cgi?id=2095719): Updates CreateOrUpdateServiceAccounts [#1704](https://github.com/openshift/cluster-monitoring-operator/pull/1704) * [Bug 2100472](https://bugzilla.redhat.com/show_bug.cgi?id=2100472): fix alert controllers when not in techpreview [#1707](https://github.com/openshift/cluster-monitoring-operator/pull/1707) * Synchronize versions of the downstream components [#1705](https://github.com/openshift/cluster-monitoring-operator/pull/1705) * Revert "Bug 2100472: start alert controllers only when techpreview" [#1706](https://github.com/openshift/cluster-monitoring-operator/pull/1706) * [Bug 2100472](https://bugzilla.redhat.com/show_bug.cgi?id=2100472): start alert controllers only when techpreview [#1701](https://github.com/openshift/cluster-monitoring-operator/pull/1701) * [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e131c1998d36790111a9af1c7bcdbee46ae295ba...ee4a20d4d0214c9c8fdacaede3482683436d36e0) ### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/c1a891129c310d01b8d6940f1eefd26058c0f5b6) * [OCPBUGS-29167](https://issues.redhat.com/browse/OCPBUGS-29167): fix whereabouts conformance test failures [#2256](https://github.com/openshift/cluster-network-operator/pull/2256) * [OCPBUGS-29884](https://issues.redhat.com/browse/OCPBUGS-29884): add env var in whereabouts-reconciler daemonset [#2284](https://github.com/openshift/cluster-network-operator/pull/2284) * [OCPBUGS-29302](https://issues.redhat.com/browse/OCPBUGS-29302): Update ingressconfig_controller to use field Manager [#2268](https://github.com/openshift/cluster-network-operator/pull/2268) * [OCPBUGS-28801](https://issues.redhat.com/browse/OCPBUGS-28801): [release-4.12] Add ConfigMap mount to the whereabouts-reconciler DaemonSet [#2244](https://github.com/openshift/cluster-network-operator/pull/2244) * NO-JIRA: add kyrtapz as reviewer and approver for release 4.12 [#2230](https://github.com/openshift/cluster-network-operator/pull/2230) * [release 4.12] OCPBUGS-23025: Add maxLogFiles config for OVN-K Audit Logging [#2188](https://github.com/openshift/cluster-network-operator/pull/2188) * [OCPBUGS-24039](https://issues.redhat.com/browse/OCPBUGS-24039): remove all managed fields used by old manager [#2099](https://github.com/openshift/cluster-network-operator/pull/2099) * [OCPBUGS-21715](https://issues.redhat.com/browse/OCPBUGS-21715): Bump golang.org/x/net and github.com/openshift/library-go [#2124](https://github.com/openshift/cluster-network-operator/pull/2124) * [OCPBUGS-24571](https://issues.redhat.com/browse/OCPBUGS-24571): Disable weak SSH cipher suites [#2164](https://github.com/openshift/cluster-network-operator/pull/2164) * [OCPBUGS-25128](https://issues.redhat.com/browse/OCPBUGS-25128): Update to go 1.19 and x/net 0.8.0 [#2157](https://github.com/openshift/cluster-network-operator/pull/2157) * [OCPBUGS-23293](https://issues.redhat.com/browse/OCPBUGS-23293): IBMCloud specific: patch out management workload for dataplane component thats needed for bootstrapping [#2108](https://github.com/openshift/cluster-network-operator/pull/2108) * [OCPBUGS-20277](https://issues.redhat.com/browse/OCPBUGS-20277): Edited multus-admission-controller deployment config to not add autoount a service account token [#1884](https://github.com/openshift/cluster-network-operator/pull/1884) * [OCPBUGS-20197](https://issues.redhat.com/browse/OCPBUGS-20197): remove prestop hooks for northd, sbdbd and nbdb [#2055](https://github.com/openshift/cluster-network-operator/pull/2055) * [OCPBUGS-17656](https://issues.redhat.com/browse/OCPBUGS-17656): prevent creation of multiple cni-sysctl-allowlist-ds pods [#1948](https://github.com/openshift/cluster-network-operator/pull/1948) * [OCPBUGS-11547](https://issues.redhat.com/browse/OCPBUGS-11547): Hypershift: Add RollingUpdate parameters to multus-admission-controller [#1775](https://github.com/openshift/cluster-network-operator/pull/1775) * [OCPBUGS-16142](https://issues.redhat.com/browse/OCPBUGS-16142): fix reconciliation process of the allowlist controller [#1891](https://github.com/openshift/cluster-network-operator/pull/1891) * [release-4.12 ] OCPBUGS-11217:use annotation daemonset to update hybrid overlay [#1764](https://github.com/openshift/cluster-network-operator/pull/1764) * [OCPBUGS-15588](https://issues.redhat.com/browse/OCPBUGS-15588): Add release version annotation to whereabouts-reconciler [#1856](https://github.com/openshift/cluster-network-operator/pull/1856) * [OCPBUGS-13891](https://issues.redhat.com/browse/OCPBUGS-13891): [release-4.12] HyperShift: Support HostedControlPlane node selector [#1816](https://github.com/openshift/cluster-network-operator/pull/1816) * [OCPBUGS-13067](https://issues.redhat.com/browse/OCPBUGS-13067): Fix tier label, privileged, HOSTNAME/NODENAME in whereabouts reconciler [backport 4.12] [#1829](https://github.com/openshift/cluster-network-operator/pull/1829) * [OCPBUGS-6061](https://issues.redhat.com/browse/OCPBUGS-6061): Update github.com/Masterminds/sprig to v3 [#1689](https://github.com/openshift/cluster-network-operator/pull/1689) * [OCPBUGS-13013](https://issues.redhat.com/browse/OCPBUGS-13013): AUTH: update cluster-reader to include k8s.ovn.org [#1799](https://github.com/openshift/cluster-network-operator/pull/1799) * [OCPBUGS-13067](https://issues.redhat.com/browse/OCPBUGS-13067): Whereabouts should implement the reconciliation controller [backport 4.12] [#1801](https://github.com/openshift/cluster-network-operator/pull/1801) * [OCPBUGS-11559](https://issues.redhat.com/browse/OCPBUGS-11559): multus-admission-controller should not run as root under Hypershift [#1777](https://github.com/openshift/cluster-network-operator/pull/1777) * Bug OCPBUGS-4896: Kuryr: If set use MTU from Config for svc net [#1671](https://github.com/openshift/cluster-network-operator/pull/1671) * [OCPBUGS-10977](https://issues.redhat.com/browse/OCPBUGS-10977): HyperShift: Add POD_NAME env to ovnkube-node [#1753](https://github.com/openshift/cluster-network-operator/pull/1753) * [OCPBUGS-11461](https://issues.redhat.com/browse/OCPBUGS-11461): Split out konnectivity certs [#1771](https://github.com/openshift/cluster-network-operator/pull/1771) * [OCPBUGS-11178](https://issues.redhat.com/browse/OCPBUGS-11178): remove TLS_RSA_WITH_AES_128_CBC_SHA256 cipher [#1759](https://github.com/openshift/cluster-network-operator/pull/1759) * [OCPBUGS-11059](https://issues.redhat.com/browse/OCPBUGS-11059): Fix info log formatting [#1659](https://github.com/openshift/cluster-network-operator/pull/1659) * [OCPBUGS-10319](https://issues.redhat.com/browse/OCPBUGS-10319): HyperShift: Set affinity, tolerations and co-location for all hcp resources created by CNO [#1738](https://github.com/openshift/cluster-network-operator/pull/1738) * [OCPBUGS-8014](https://issues.redhat.com/browse/OCPBUGS-8014): add default noProxy config for Azure [#1722](https://github.com/openshift/cluster-network-operator/pull/1722) * [OCPBUGS-9927](https://issues.redhat.com/browse/OCPBUGS-9927): Enable configuration of node healthz server on ovnkube [#1731](https://github.com/openshift/cluster-network-operator/pull/1731) * [OCPBUGS-5953](https://issues.redhat.com/browse/OCPBUGS-5953): Backport Added missing API field podref to OverlappingRangeIPReservation CRD [Backport 4.12] [#1685](https://github.com/openshift/cluster-network-operator/pull/1685) * [OCPBUGS-7044](https://issues.redhat.com/browse/OCPBUGS-7044): HyperShift: Add .hypershift.local to no proxy list [#1706](https://github.com/openshift/cluster-network-operator/pull/1706) * [OCPBUGS-7044](https://issues.redhat.com/browse/OCPBUGS-7044): HyperShift: Do not use proxy for internal routes [#1704](https://github.com/openshift/cluster-network-operator/pull/1704) * [OCPBUGS-4778](https://issues.redhat.com/browse/OCPBUGS-4778): Fix handling of deployment and statefulset updates [#1663](https://github.com/openshift/cluster-network-operator/pull/1663) * [OCPBUGS-4238](https://issues.redhat.com/browse/OCPBUGS-4238): HyperShift: Co-locate OVN-Kubernetes master with other hcp pods [#1645](https://github.com/openshift/cluster-network-operator/pull/1645) * [OCPBUGS-6494](https://issues.redhat.com/browse/OCPBUGS-6494): OVN-Kubernetes: Stop sorting master node addresses, ignore readiness checks for redundant NB/SB [#1691](https://github.com/openshift/cluster-network-operator/pull/1691) * [OCPBUGS-3461](https://issues.redhat.com/browse/OCPBUGS-3461): CNI binary copy should account for the possibility of symlinks [backport 4.12] [#1615](https://github.com/openshift/cluster-network-operator/pull/1615) * [OCPBUGS-4856](https://issues.redhat.com/browse/OCPBUGS-4856): Disable the drop-icmp container 'oc' pprof webserver on Azure [#1666](https://github.com/openshift/cluster-network-operator/pull/1666) * [OCPBUGS-4686](https://issues.redhat.com/browse/OCPBUGS-4686): Revert "Remove references to the hosts kubeconfig" [#1660](https://github.com/openshift/cluster-network-operator/pull/1660) * [OCPBUGS-4183](https://issues.redhat.com/browse/OCPBUGS-4183): Fix default disable-udp-aggregation value on s390x [#1661](https://github.com/openshift/cluster-network-operator/pull/1661) * [OCPBUGS-4637](https://issues.redhat.com/browse/OCPBUGS-4637): Support RHOBS monitoring for HyperShift [#1652](https://github.com/openshift/cluster-network-operator/pull/1652) * [OCPBUGS-3956](https://issues.redhat.com/browse/OCPBUGS-3956): HyperShift: Do not accept empty infrastructure name [#1634](https://github.com/openshift/cluster-network-operator/pull/1634) * [OCPBUGS-4183](https://issues.redhat.com/browse/OCPBUGS-4183): Disable UDP aggregation on s390x [#1643](https://github.com/openshift/cluster-network-operator/pull/1643) * [OCPBUGS-3824](https://issues.redhat.com/browse/OCPBUGS-3824): ipsec: Run ovs-monitor-ipsec in the foreground and change probes [#1621](https://github.com/openshift/cluster-network-operator/pull/1621) * Jira OCPBUGS-3851: IPsec: Fix broken counter++ expression [#1636](https://github.com/openshift/cluster-network-operator/pull/1636) * [OCPBUGS-3944](https://issues.redhat.com/browse/OCPBUGS-3944): Remove references to the hosts kubeconfig [#1632](https://github.com/openshift/cluster-network-operator/pull/1632) * [OCPBUGS-3437](https://issues.redhat.com/browse/OCPBUGS-3437): HyperShift: Render cncc with proxy settings of the management cluster [#1613](https://github.com/openshift/cluster-network-operator/pull/1613) * [OCPBUGS-3889](https://issues.redhat.com/browse/OCPBUGS-3889): SDN: /var/run mount cleanup [#1628](https://github.com/openshift/cluster-network-operator/pull/1628) * [OCPBUGS-3184](https://issues.redhat.com/browse/OCPBUGS-3184): update microshift ovnk manifests [#1610](https://github.com/openshift/cluster-network-operator/pull/1610) * [OCPBUGS-2362](https://issues.redhat.com/browse/OCPBUGS-2362): Prefer oldest nodes, harden new alerts and revert setting new OVN-K alerts to info [#1579](https://github.com/openshift/cluster-network-operator/pull/1579) * fixed typo in comment [#1597](https://github.com/openshift/cluster-network-operator/pull/1597) * Jira OCPBUGS-1736: Always set PROXY variables for CNCC [#1576](https://github.com/openshift/cluster-network-operator/pull/1576) * Remove the allow_ra sysctl for ipv4 from default systl whitelist [#1590](https://github.com/openshift/cluster-network-operator/pull/1590) * [SDN-2591](https://issues.redhat.com/browse/SDN-2591): allow hybrid overlay to be enabled post install [#1584](https://github.com/openshift/cluster-network-operator/pull/1584) * [SDN-3515](https://issues.redhat.com/browse/SDN-3515): HyperShift: multus admission controller: expose metrics over HTTPs [#1583](https://github.com/openshift/cluster-network-operator/pull/1583) * rebase to k8s v1.25.0 [#1571](https://github.com/openshift/cluster-network-operator/pull/1571) * Bug OCPBUGS-2328: Fix for index out of range error [#1588](https://github.com/openshift/cluster-network-operator/pull/1588) * Add sysctl whitelist controller [#1573](https://github.com/openshift/cluster-network-operator/pull/1573) * Kuryr: Add missing keystoneauth options [#1581](https://github.com/openshift/cluster-network-operator/pull/1581) * [OCPBUGS-1341](https://issues.redhat.com/browse/OCPBUGS-1341): Set owner reference for pod network connectivity check [#1566](https://github.com/openshift/cluster-network-operator/pull/1566) * ovn-k, managed: pass join-subnet to control-plane [#1582](https://github.com/openshift/cluster-network-operator/pull/1582) * [OCPBUGS-1083](https://issues.redhat.com/browse/OCPBUGS-1083): Move OVNK alert level to info [#1564](https://github.com/openshift/cluster-network-operator/pull/1564) * Pass enable-udp-aggregation=true to ovn-kubernetes [#1533](https://github.com/openshift/cluster-network-operator/pull/1533) * [OCPBUGS-1038](https://issues.redhat.com/browse/OCPBUGS-1038): Multus IPAM detection should honor conflists [#1570](https://github.com/openshift/cluster-network-operator/pull/1570) * egress_ip: remove redundant config [#1568](https://github.com/openshift/cluster-network-operator/pull/1568) * [OCPBUGS-1515](https://issues.redhat.com/browse/OCPBUGS-1515): Use custom uint128 type when validating v6InternalSubnet [#1561](https://github.com/openshift/cluster-network-operator/pull/1561) * [SDN-3283](https://issues.redhat.com/browse/SDN-3283): HyperShift: Use a socks-proxy in ovnkube-master to allow for node heath checks [#1539](https://github.com/openshift/cluster-network-operator/pull/1539) * Bug: OCPBUGS-736: Kuryr: Use machine net MTU to create service net [#1545](https://github.com/openshift/cluster-network-operator/pull/1545) * Migrate Egress IP configuration during SDN migration and rollback [#1536](https://github.com/openshift/cluster-network-operator/pull/1536) * Allow empty vSphere status field in VIP sync [#1558](https://github.com/openshift/cluster-network-operator/pull/1558) * microshift: update ovnk manifests [#1552](https://github.com/openshift/cluster-network-operator/pull/1552) * Add ovn-kubernetes-microshift to image-stream [#1556](https://github.com/openshift/cluster-network-operator/pull/1556) * Migrate Multicast configuration during SDN migration and rollback [#1543](https://github.com/openshift/cluster-network-operator/pull/1543) * OVN-K: add patch/update service permissions to controller [#1554](https://github.com/openshift/cluster-network-operator/pull/1554) * Add controller to synchronize the API and Ingress VIP fields [#1519](https://github.com/openshift/cluster-network-operator/pull/1519) * Bug SDN-3458: HyperShift: Differentiate resources deployed by different CNO instances in status manager [#1541](https://github.com/openshift/cluster-network-operator/pull/1541) * OVN-K alerts: first tranche [#1526](https://github.com/openshift/cluster-network-operator/pull/1526) * [SDN-3432](https://issues.redhat.com/browse/SDN-3432): Add alert for OVNKubernetesControllerDisconnectedSouthboundDatabase [#1548](https://github.com/openshift/cluster-network-operator/pull/1548) * Add vSphere platform to allow dual-stack cluster [#1518](https://github.com/openshift/cluster-network-operator/pull/1518) * [OKD-49](https://issues.redhat.com/browse/OKD-49): Adds support for scos to multus [#1544](https://github.com/openshift/cluster-network-operator/pull/1544) * [Bug 1894268](https://bugzilla.redhat.com/show_bug.cgi?id=1894268): Allow users to specify ovnkube join subnet [#1508](https://github.com/openshift/cluster-network-operator/pull/1508) * Bug OCPBUGS-917: Add EgressQoS DstCIDR format validation [#1492](https://github.com/openshift/cluster-network-operator/pull/1492) * Multus admission controller: Wait for token in Hypershift [#1546](https://github.com/openshift/cluster-network-operator/pull/1546) * Use fixed name for creating EgressFirewall CRs [#1540](https://github.com/openshift/cluster-network-operator/pull/1540) * Migrate Egress Firewall Configuration during SDN migration and Rollback [#1534](https://github.com/openshift/cluster-network-operator/pull/1534) * hypershift: set multus controller priority appropriate for hosted clusters [#1538](https://github.com/openshift/cluster-network-operator/pull/1538) * [Bug 2094068](https://bugzilla.redhat.com/show_bug.cgi?id=2094068): Add northboundstale alert runbook [#1482](https://github.com/openshift/cluster-network-operator/pull/1482) * microshift: compact ovn databases periodically [#1537](https://github.com/openshift/cluster-network-operator/pull/1537) * Hypershift: Allow configuring hostname and labels on the route [#1531](https://github.com/openshift/cluster-network-operator/pull/1531) * Multus admission controller changes for hypershift [#1516](https://github.com/openshift/cluster-network-operator/pull/1516) * HyperShift: Move CNCC to the controll-plane namespace [#1525](https://github.com/openshift/cluster-network-operator/pull/1525) * Bug OCPBUGS-216: Kuryr: Bump timeoutSeconds for livenessProbe [#1528](https://github.com/openshift/cluster-network-operator/pull/1528) * Add missing runbook links for OVN-kubernetes alerts [#1523](https://github.com/openshift/cluster-network-operator/pull/1523) * [Bug 2103680](https://bugzilla.redhat.com/show_bug.cgi?id=2103680): avoid overrriding disableNetworkDiagnostics on reconciliation [#1527](https://github.com/openshift/cluster-network-operator/pull/1527) * Render CRDs for both OSDN and OVNK during migration [#1521](https://github.com/openshift/cluster-network-operator/pull/1521) * Configure ignored namespaces into multus-admission-controller [#1515](https://github.com/openshift/cluster-network-operator/pull/1515) * Add microshift ovnk manifests [#1517](https://github.com/openshift/cluster-network-operator/pull/1517) * [Bug 2116982](https://bugzilla.redhat.com/show_bug.cgi?id=2116982): multus-admission-controller SNO number of replicas [#1524](https://github.com/openshift/cluster-network-operator/pull/1524) * Enable the cloud-network-config-controller for OpenStack [#1505](https://github.com/openshift/cluster-network-operator/pull/1505) * multi-networkpolicy: Enable on SR-IOV networks [#1443](https://github.com/openshift/cluster-network-operator/pull/1443) * Updating cluster-network-operator images to be consistent with ART [#1507](https://github.com/openshift/cluster-network-operator/pull/1507) * Add configmap list/watch rights to cloud-network-config-controller [#1511](https://github.com/openshift/cluster-network-operator/pull/1511) * The Multus admission controller should run as a deployment [#1514](https://github.com/openshift/cluster-network-operator/pull/1514) * [Bug 2108232](https://bugzilla.redhat.com/show_bug.cgi?id=2108232): Revert "Bug 2085089: Pass enable-udp-aggregation=true to ovn-kubernetes" [#1510](https://github.com/openshift/cluster-network-operator/pull/1510) * [Bug 2100601](https://bugzilla.redhat.com/show_bug.cgi?id=2100601): Update CNO to config EgressIP timeout for ovnk [#1498](https://github.com/openshift/cluster-network-operator/pull/1498) * [Bug 2060079](https://bugzilla.redhat.com/show_bug.cgi?id=2060079): Enhance sensitivity of SDN alert NodeProxyApplySlow [#1491](https://github.com/openshift/cluster-network-operator/pull/1491) * [Bug 2103590](https://bugzilla.redhat.com/show_bug.cgi?id=2103590): Add init container to ensure that Status.podIP is set before postStart hooks run [#1503](https://github.com/openshift/cluster-network-operator/pull/1503) * remove @squeed from owners [#1497](https://github.com/openshift/cluster-network-operator/pull/1497) * [Full changelog](https://github.com/openshift/cluster-network-operator/compare/33da9fb933f67f53f2c317f3a021a458a41ce159...c1a891129c310d01b8d6940f1eefd26058c0f5b6) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/20966da941ab8773261b5b4c133f3a1716699243) * irqbalance: set banned cpus list to 0 (#1006) [#1006](https://github.com/openshift/cluster-node-tuning-operator/pull/1006) * Refactor IRQ load balancing enable/disable test (#1038) [#1038](https://github.com/openshift/cluster-node-tuning-operator/pull/1038) * Scheduler plugin: ignore IRQs (#1034) [#1034](https://github.com/openshift/cluster-node-tuning-operator/pull/1034) * Disable HTTP/2 for webhook and metrics servers (#849) [#849](https://github.com/openshift/cluster-node-tuning-operator/pull/849) * Remove obsolete protocols and weak ciphers (#847) [#847](https://github.com/openshift/cluster-node-tuning-operator/pull/847) * [OCPBUGS-21837](https://issues.redhat.com/browse/OCPBUGS-21837): nto: pao avoid timeout when there are too many CSV (#838) [#838](https://github.com/openshift/cluster-node-tuning-operator/pull/838) * Tighten the rules for modifying Tuned Profiles (#790) [#790](https://github.com/openshift/cluster-node-tuning-operator/pull/790) * [OCPBUGS-19459](https://issues.redhat.com/browse/OCPBUGS-19459): check for object being nil (#821) [#821](https://github.com/openshift/cluster-node-tuning-operator/pull/821) * [OCPBUGS-18868](https://issues.redhat.com/browse/OCPBUGS-18868): [release-4.14] e2e: add expected max latancy to hwlatdetec test & rename constant (#788) (#808) (#809) [#788](https://github.com/openshift/cluster-node-tuning-operator/pull/788) * Release leader election on manager exit (#789) [#789](https://github.com/openshift/cluster-node-tuning-operator/pull/789) * Fix a race in e2e test rollback.go code (#742) [#742](https://github.com/openshift/cluster-node-tuning-operator/pull/742) * pao: e2e: Make script executable (#734) [#734](https://github.com/openshift/cluster-node-tuning-operator/pull/734) * pao e2e: Split gcp-pao lane (#728) [#728](https://github.com/openshift/cluster-node-tuning-operator/pull/728) * Do not rollback settings on TuneD exit (#711) [#711](https://github.com/openshift/cluster-node-tuning-operator/pull/711) * [OCPBUGS-15800](https://issues.redhat.com/browse/OCPBUGS-15800): e2e: latency testing: increase the expected threshold and fix gomega truncating output (#710) [#710](https://github.com/openshift/cluster-node-tuning-operator/pull/710) * Revert "Remove optimization to allow full resync (#569)" (#688) [#569](https://github.com/openshift/cluster-node-tuning-operator/pull/569) * update owners 20230109 (#549) [#549](https://github.com/openshift/cluster-node-tuning-operator/pull/549) * Add PerformanceProfiles to 'oc adm must-gather' (#667) [#667](https://github.com/openshift/cluster-node-tuning-operator/pull/667) * [OCPBUGS-14472](https://issues.redhat.com/browse/OCPBUGS-14472): Fix updating numa core siblings map in GetCpuSiblings function (#675) [#675](https://github.com/openshift/cluster-node-tuning-operator/pull/675) * Remove trailing spaces from test names (#572) [#572](https://github.com/openshift/cluster-node-tuning-operator/pull/572) * Remove optimization to allow full resync (#569) [#569](https://github.com/openshift/cluster-node-tuning-operator/pull/569) * e2e:latency: count LATENCY_TEST_DELAY in timeout (#539) [#539](https://github.com/openshift/cluster-node-tuning-operator/pull/539) * e2e: add missing test id (#630) [#630](https://github.com/openshift/cluster-node-tuning-operator/pull/630) * Remove subPaths, they are broken (#627) [#627](https://github.com/openshift/cluster-node-tuning-operator/pull/627) * Remove the preStop hook for openshift-tuned (#621) [#621](https://github.com/openshift/cluster-node-tuning-operator/pull/621) * E2E: Per Core Runtime Tuning Test automation (#509) (#568) [#509](https://github.com/openshift/cluster-node-tuning-operator/pull/509) * E2E: Network stack Pinning tests (#533) [#533](https://github.com/openshift/cluster-node-tuning-operator/pull/533) * Run node selector tests only if we 2 non Performanceworker nodes (#554) [#554](https://github.com/openshift/cluster-node-tuning-operator/pull/554) * skip multiple ranges test if cores < 20 and use core as key to delete cpu siblings (#543) [#543](https://github.com/openshift/cluster-node-tuning-operator/pull/543) * pao: latency-tests: read test log directly from pod (#547) [#547](https://github.com/openshift/cluster-node-tuning-operator/pull/547) * Add authentication to the /metrics endpoint (#553) [#553](https://github.com/openshift/cluster-node-tuning-operator/pull/553) * Update NTO images to be consistent with ART (#557) [#557](https://github.com/openshift/cluster-node-tuning-operator/pull/557) * [OCPBUGS-5021](https://issues.redhat.com/browse/OCPBUGS-5021): [release-4.12] Fix two irqbalance tests - smp affinity vs online (#530) [#530](https://github.com/openshift/cluster-node-tuning-operator/pull/530) * Remove trailing space from test name (#546) [#546](https://github.com/openshift/cluster-node-tuning-operator/pull/546) * Fix default hard eviction threshold when PCC is applied (#520) [#520](https://github.com/openshift/cluster-node-tuning-operator/pull/520) * [OCPBUGS-4215](https://issues.redhat.com/browse/OCPBUGS-4215): e2e: performance profile: add logs and minor fixes (#516) [#516](https://github.com/openshift/cluster-node-tuning-operator/pull/516) * E2E: Automation offline CPUs test (#514) [#514](https://github.com/openshift/cluster-node-tuning-operator/pull/514) * Configure ktimers scheduler prio same as ksoftirqs (#511) [#511](https://github.com/openshift/cluster-node-tuning-operator/pull/511) * Set RPS for all rx queues (#503) [#503](https://github.com/openshift/cluster-node-tuning-operator/pull/503) * E2E fix: Make Nodeselector tests independent (#422) [#422](https://github.com/openshift/cluster-node-tuning-operator/pull/422) * Filter out copied csvs when removing pao CSV (#492) [#492](https://github.com/openshift/cluster-node-tuning-operator/pull/492) * e2e: perfprof: remove broken test (#494) [#494](https://github.com/openshift/cluster-node-tuning-operator/pull/494) * udev-rule: rationale for applying the rule on virtual interfaces (#482) [#482](https://github.com/openshift/cluster-node-tuning-operator/pull/482) * HyperShift: rename Tuned ConfigMap key from tuned to tuning (#491) [#491](https://github.com/openshift/cluster-node-tuning-operator/pull/491) * HyperShift: avoid unnecessary mcfg creation (#481) [#481](https://github.com/openshift/cluster-node-tuning-operator/pull/481) * e2e: perfprof: get cpus from node capacity (#486) [#486](https://github.com/openshift/cluster-node-tuning-operator/pull/486) * Add intel_pstate=disable to default configuration with no hints (#480) [#480](https://github.com/openshift/cluster-node-tuning-operator/pull/480) * [OCPBUGSM-47141](https://issues.redhat.com/browse/OCPBUGSM-47141): set RPS for veth only at host level (#479) [#479](https://github.com/openshift/cluster-node-tuning-operator/pull/479) * Adjust nto_custom_profiles:count metric to count by _id (#476) [#476](https://github.com/openshift/cluster-node-tuning-operator/pull/476) * Set default RealTime hint to true (#475) [#475](https://github.com/openshift/cluster-node-tuning-operator/pull/475) * Clean output of kernel args if no hugepages or add args are present (#474) [#474](https://github.com/openshift/cluster-node-tuning-operator/pull/474) * workloadHints not included in validateFields() (#468) [#468](https://github.com/openshift/cluster-node-tuning-operator/pull/468) * Add perPodPowerManagement workloadHint to PPC (#430) [#430](https://github.com/openshift/cluster-node-tuning-operator/pull/430) * previously know as Performance Addon Operator (#473) [#473](https://github.com/openshift/cluster-node-tuning-operator/pull/473) * Create HACKING.md file (#449) [#449](https://github.com/openshift/cluster-node-tuning-operator/pull/449) * Add API workloadHint perPodPowerManagement (#415) [#415](https://github.com/openshift/cluster-node-tuning-operator/pull/415) * Skip should set offline cpus after deploy PAO test (#470) [#470](https://github.com/openshift/cluster-node-tuning-operator/pull/470) * Add verification on kernel param rcutree.kthread (#464) [#464](https://github.com/openshift/cluster-node-tuning-operator/pull/464) * e2e: Fix metrics_cert_rotation.go (#471) [#471](https://github.com/openshift/cluster-node-tuning-operator/pull/471) * Performance profile Annotation to enable RPS (#462) [#462](https://github.com/openshift/cluster-node-tuning-operator/pull/462) * HyperShift: Create ConfigMaps for NTO-generated MachineConfigs (#456) [#456](https://github.com/openshift/cluster-node-tuning-operator/pull/456) * Toggle RPS configuration with realtime hint (#460) [#460](https://github.com/openshift/cluster-node-tuning-operator/pull/460) * Refactor WorkloadHints (#418) [#418](https://github.com/openshift/cluster-node-tuning-operator/pull/418) * Enable e2e tests for SNO (#459) [#459](https://github.com/openshift/cluster-node-tuning-operator/pull/459) * Improve tuned test (#426) [#426](https://github.com/openshift/cluster-node-tuning-operator/pull/426) * hack: performance: skip tests under 5_latency_testing (#448) [#448](https://github.com/openshift/cluster-node-tuning-operator/pull/448) * hypershift: Remove dynamic client and simplify getNodePoolNameFromNode (#452) [#452](https://github.com/openshift/cluster-node-tuning-operator/pull/452) * irqbalance: add unit to clear the cpu ban list #413 (#444) [#444](https://github.com/openshift/cluster-node-tuning-operator/pull/444) * Enable basic sysctl tuning of HyperShift hosted cluster nodes (#390) [#390](https://github.com/openshift/cluster-node-tuning-operator/pull/390) * e2e: performance: update path of latency binary (#443) [#443](https://github.com/openshift/cluster-node-tuning-operator/pull/443) * latency-tests: improve logs clarity (#393) [#393](https://github.com/openshift/cluster-node-tuning-operator/pull/393) * e2e: performance: Update PP isolated cpus (#429) [#429](https://github.com/openshift/cluster-node-tuning-operator/pull/429) * Allow new cri-o annotations for power management config (#383) [#383](https://github.com/openshift/cluster-node-tuning-operator/pull/383) * leader.go: remove unused file (#441) [#441](https://github.com/openshift/cluster-node-tuning-operator/pull/441) * convert core and cpu strings to integer (#432) [#432](https://github.com/openshift/cluster-node-tuning-operator/pull/432) * stalld: remove support for built-in stalld (#433) [#433](https://github.com/openshift/cluster-node-tuning-operator/pull/433) * e2e: fix a race in [reboots] tests (#439) [#439](https://github.com/openshift/cluster-node-tuning-operator/pull/439) * e2e: perfprof: unbreak the e2e-gcp PAO lane (#438) [#438](https://github.com/openshift/cluster-node-tuning-operator/pull/438) * [Bug 2105123](https://bugzilla.redhat.com/show_bug.cgi?id=2105123): tuned: disable irqbalance (#396) [#396](https://github.com/openshift/cluster-node-tuning-operator/pull/396) * Add function to node utils to fetch Core Siblings (#403) [#403](https://github.com/openshift/cluster-node-tuning-operator/pull/403) * Add client certificate and key to service monitor (#427) [#427](https://github.com/openshift/cluster-node-tuning-operator/pull/427) * openshift-tuned: remember recommended profile (#421) [#421](https://github.com/openshift/cluster-node-tuning-operator/pull/421) * Add offlined to v1 api (#417) [#417](https://github.com/openshift/cluster-node-tuning-operator/pull/417) * add +optional and +default=true to workloadHints API (#416) [#416](https://github.com/openshift/cluster-node-tuning-operator/pull/416) * TuneD: use the same FDP version for upstream (#412) [#412](https://github.com/openshift/cluster-node-tuning-operator/pull/412) * Fix cpu overlap error output (#409) [#409](https://github.com/openshift/cluster-node-tuning-operator/pull/409) * [Bug 2102450](https://bugzilla.redhat.com/show_bug.cgi?id=2102450): set rcutree.kthread_prio to ksoftirqd prio (#408) [#408](https://github.com/openshift/cluster-node-tuning-operator/pull/408) * e2e: add podsecurity labels (#405) [#405](https://github.com/openshift/cluster-node-tuning-operator/pull/405) * doc: fix description of the `PERFORMANCE_PROFILE_INPUT_FILES` env var (#399) [#399](https://github.com/openshift/cluster-node-tuning-operator/pull/399) * e2e: check for tsc=reliable instead of tsc=nowatchdog (#410) [#410](https://github.com/openshift/cluster-node-tuning-operator/pull/410) * test: utils: use updated profile, not original (#404) [#404](https://github.com/openshift/cluster-node-tuning-operator/pull/404) * Dockerfile: provide full URL to CentOS stream image (#406) [#406](https://github.com/openshift/cluster-node-tuning-operator/pull/406) * [Bug 2105967](https://bugzilla.redhat.com/show_bug.cgi?id=2105967): E2E test case Telco friendly workload hints (#374) [#374](https://github.com/openshift/cluster-node-tuning-operator/pull/374) * Rename Performance Addon Controller to Performance Profile Controller (#373) [#373](https://github.com/openshift/cluster-node-tuning-operator/pull/373) * makefile: enable running pao latency testing suite (#376) [#376](https://github.com/openshift/cluster-node-tuning-operator/pull/376) * Clean up file and fix API docs (#391) [#391](https://github.com/openshift/cluster-node-tuning-operator/pull/391) * Add clientset.go missing pkg/generated file (#397) [#397](https://github.com/openshift/cluster-node-tuning-operator/pull/397) * Fix typo realTime Hint in PerformanceProfile.yaml (#389) [#389](https://github.com/openshift/cluster-node-tuning-operator/pull/389) * Fix wrong kubelet test (#394) [#394](https://github.com/openshift/cluster-node-tuning-operator/pull/394) * Bump vendor dependencies to k8s 1.24.2 (#386) [#386](https://github.com/openshift/cluster-node-tuning-operator/pull/386) * must-gather e2e test (#365) [#365](https://github.com/openshift/cluster-node-tuning-operator/pull/365) * Switch to CentOS Stream for upstream Containerfile (#385) [#385](https://github.com/openshift/cluster-node-tuning-operator/pull/385) * Remove stale Profiles. (#381) [#381](https://github.com/openshift/cluster-node-tuning-operator/pull/381) * PAO: update README.txt (#369) [#369](https://github.com/openshift/cluster-node-tuning-operator/pull/369) * e2e: performance profile: Latency tests stabilization (#368) [#368](https://github.com/openshift/cluster-node-tuning-operator/pull/368) * Updating cluster-node-tuning-operator images to be consistent with ART (#382) [#382](https://github.com/openshift/cluster-node-tuning-operator/pull/382) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/e65d78b5407738b4aa3b52d74ac63de7a561dbd1...20966da941ab8773261b5b4c133f3a1716699243) ### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/b870fc67ef5a0e92df5e5bed1ba0cb1cf197d8c6) * [OCPBUGS-22689](https://issues.redhat.com/browse/OCPBUGS-22689): increase timeout for probes [#558](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/558) * : OCPBUGS-20694: bump library-go to include switch to HTTP/1.1 [#556](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/556) * [OCPBUGS-13346](https://issues.redhat.com/browse/OCPBUGS-13346): dont log jwt tokens [#543](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/543) * [OCPBUGS-3293](https://issues.redhat.com/browse/OCPBUGS-3293): routes/status resources can leak sensitive data, exclude it from audit [#512](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/512) * [OCPBUGS-3841](https://issues.redhat.com/browse/OCPBUGS-3841): update apf configuration to use v1beta2 [#507](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/507) * remove old ensureDaemonSetCleanup [#505](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/505) * [Bug 2101880](https://bugzilla.redhat.com/show_bug.cgi?id=2101880): operator NS manifest: Set empty openshift.io/run-level [#497](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/497) * [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/0e82f58c55a5d966cc46e0cb489e33601eb1df6f...b870fc67ef5a0e92df5e5bed1ba0cb1cf197d8c6) ### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/ab963d8ad0387788c947b884a96eb9b2fed470b6) * [OCPBUGS-20777](https://issues.redhat.com/browse/OCPBUGS-20777): bump(k8s,openshift) to address CVE-2023-44487 [#311](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/311) * [OCPBUGS-4803](https://issues.redhat.com/browse/OCPBUGS-4803): [release-4.12] Correct go file formatting for go1.19 with gofmt [#275](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/275) * [OCPBUGS-3841](https://issues.redhat.com/browse/OCPBUGS-3841): update apf configuration to use v1beta2 [#271](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/271) * [BUILD-534](https://issues.redhat.com/browse/BUILD-534): Rebase to k8s 1.25 [#268](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/268) * manage openshift-controller-manager as a Deployment [#264](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/264) * [Bug 2055620](https://bugzilla.redhat.com/show_bug.cgi?id=2055620): Add permissions for image trigger controller [#244](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/244) * switch to route-controller-manager image and use ApplyDeployment no. 2 [#267](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/267) * Revert "switch to route-controller-manager image and use ApplyDeployment" [#265](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/265) * switch to route-controller-manager image and use ApplyDeployment [#258](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/258) * rename operator queue to OpenshiftControllerManagerOperator [#257](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/257) * fix README links [#263](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/263) * [OCPBUGS-722](https://issues.redhat.com/browse/OCPBUGS-722): handle errors during operand creation and update [#262](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/262) * [OCPBUGS-722](https://issues.redhat.com/browse/OCPBUGS-722): Fix NPD when accessing rote controller spec.deployment.replicas [#259](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/259) * Manage route controllers in separate ns [#255](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/255) * Adding leader election leases permissions for openshift-controller-manager-sa [#253](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/253) * [BUILD-417](https://issues.redhat.com/browse/BUILD-417): Adding leader election leases [#250](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/250) * [Bug 2110629](https://bugzilla.redhat.com/show_bug.cgi?id=2110629): Set openshift.io/run-level to nil in openshift-controller-manager namespace [#248](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/248) * [Bug 2110617](https://bugzilla.redhat.com/show_bug.cgi?id=2110617): Add namespace and RBAC needed for ingress-to-route [#247](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/247) * Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART [#245](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/245) * [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/a3473662f96140be5a462203885fc03d0e83f95c...ab963d8ad0387788c947b884a96eb9b2fed470b6) ### [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller/tree/cb8862b0042ac2e7130a7c018e3e083ebc46705e) * [OCPBUGS-21080](https://issues.redhat.com/browse/OCPBUGS-21080): Bump deps to address CVE-2023-44487 [4.12] [#136](https://github.com/openshift/cluster-policy-controller/pull/136) * [OCPBUGS-12442](https://issues.redhat.com/browse/OCPBUGS-12442): psalabelsyncer: handle empty namespace of a rolebinding subject [#111](https://github.com/openshift/cluster-policy-controller/pull/111) * [OCPBUGS-14092](https://issues.redhat.com/browse/OCPBUGS-14092): [4.12] fix ClusterResourceQuotas to work for all api resources including custom resources [#117](https://github.com/openshift/cluster-policy-controller/pull/117) * [OCPBUGS-13889](https://issues.redhat.com/browse/OCPBUGS-13889): external template and route Informer [#114](https://github.com/openshift/cluster-policy-controller/pull/114) * [OCPBUGS-6789](https://issues.redhat.com/browse/OCPBUGS-6789): backport feature gate honoring for PSa label syncer [#98](https://github.com/openshift/cluster-policy-controller/pull/98) * [OCPBUGS-7705](https://issues.redhat.com/browse/OCPBUGS-7705): [release-4.12] update dependencies to point to v0.25.0 [#102](https://github.com/openshift/cluster-policy-controller/pull/102) * [OCPBUGS-5786](https://issues.redhat.com/browse/OCPBUGS-5786): clusterquotareconciliation: do not sync quota monitor cache with no monitors registered [#95](https://github.com/openshift/cluster-policy-controller/pull/95) * [OCPBUGS-3663](https://issues.redhat.com/browse/OCPBUGS-3663): Revert "Revert "Revert "psalabelsyncer: synchronize the enforcement l… [#90](https://github.com/openshift/cluster-policy-controller/pull/90) * Bump go to 1.19 in go.mod [#88](https://github.com/openshift/cluster-policy-controller/pull/88) * Bump Kubernetes module dependencies to 1.25. [#87](https://github.com/openshift/cluster-policy-controller/pull/87) * Factor our ns exemptions to make them consumable by other components [#85](https://github.com/openshift/cluster-policy-controller/pull/85) * pkg/psalabelsyncer: rm unused, simple bool return [#86](https://github.com/openshift/cluster-policy-controller/pull/86) * Revert "Revert "psalabelsyncer: synchronize the enforcement label"" [#84](https://github.com/openshift/cluster-policy-controller/pull/84) * Revert "psalabelsyncer: synchronize the enforcement label" [#82](https://github.com/openshift/cluster-policy-controller/pull/82) * psalabelsyncer: synchronize the enforcement label [#81](https://github.com/openshift/cluster-policy-controller/pull/81) * [Full changelog](https://github.com/openshift/cluster-policy-controller/compare/83e97b522ef2e757440362f099593222121684d1...cb8862b0042ac2e7130a7c018e3e083ebc46705e) ### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/f1b49e34512d38bf908183318edd1f9f9aeef883) * [OCPBUGS-15757](https://issues.redhat.com/browse/OCPBUGS-15757): Update Jenkins and Jenkins Agent Base image versions [#506](https://github.com/openshift/cluster-samples-operator/pull/506) * [OCPBUGS-10918](https://issues.redhat.com/browse/OCPBUGS-10918): update Jenkins to v4.12 [#492](https://github.com/openshift/cluster-samples-operator/pull/492) * [OCPBUGS-7208](https://issues.redhat.com/browse/OCPBUGS-7208): When setting allowedRegistries urls the openshift-samples operator is degraded [#489](https://github.com/openshift/cluster-samples-operator/pull/489) * [OCPBUGS-4599](https://issues.redhat.com/browse/OCPBUGS-4599): Bump k8s master [#479](https://github.com/openshift/cluster-samples-operator/pull/479) * [OCPBUGS-4407](https://issues.redhat.com/browse/OCPBUGS-4407): Update Cluster Sample Operator dependencies and libraries for OCP 4.13 [#478](https://github.com/openshift/cluster-samples-operator/pull/478) * [OCPBUGS-4369](https://issues.redhat.com/browse/OCPBUGS-4369): Update Cluster Sample Operator dependencies and libraries for OCP 4.12 [#477](https://github.com/openshift/cluster-samples-operator/pull/477) * Updating ose-cluster-samples-operator images to be consistent with ART [#465](https://github.com/openshift/cluster-samples-operator/pull/465) * Add client certificate and key to service monitor [#464](https://github.com/openshift/cluster-samples-operator/pull/464) * Updating ose-cluster-samples-operator images to be consistent with ART [#435](https://github.com/openshift/cluster-samples-operator/pull/435) * [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/051761b88ee7a2327130172afdb8a3107405df94...f1b49e34512d38bf908183318edd1f9f9aeef883) ### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/21ebf328f53182111eb7dce344487ba633d09b1a) * [OCPBUGS-21266](https://issues.redhat.com/browse/OCPBUGS-21266): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#407](https://github.com/openshift/cluster-storage-operator/pull/407) * [OCPBUGS-18131](https://issues.redhat.com/browse/OCPBUGS-18131): Add patch for allowing configmap updates via clusterrole [#402](https://github.com/openshift/cluster-storage-operator/pull/402) * [OCPBUGS-14307](https://issues.redhat.com/browse/OCPBUGS-14307): User real node name in failing mount alerts [#377](https://github.com/openshift/cluster-storage-operator/pull/377) * [OCPBUGS-13719](https://issues.redhat.com/browse/OCPBUGS-13719): assets: csi: hypershift: add pull-secret to aws-ebs-csi-driver-operator ServiceAccount [#370](https://github.com/openshift/cluster-storage-operator/pull/370) * [OCPBUGS-10646](https://issues.redhat.com/browse/OCPBUGS-10646): Hypershift: set control plane operand properties [#355](https://github.com/openshift/cluster-storage-operator/pull/355) * [OCPBUGS-8374](https://issues.redhat.com/browse/OCPBUGS-8374): Add UID to CSO Pod to be able to run with custom SCCs [#347](https://github.com/openshift/cluster-storage-operator/pull/347) * [OCPBUGS-7331](https://issues.redhat.com/browse/OCPBUGS-7331): hypershift: remove inject-proxy annotation from aws-ebs-csi-driver-operator deployment [#337](https://github.com/openshift/cluster-storage-operator/pull/337) * [STOR-1039](https://issues.redhat.com/browse/STOR-1039): Make changes into CSO for hypershift [#318](https://github.com/openshift/cluster-storage-operator/pull/318) * [OCPBUGS-2880](https://issues.redhat.com/browse/OCPBUGS-2880): Fix panic on empty featureGate.spec.customNoUpgrade [#325](https://github.com/openshift/cluster-storage-operator/pull/325) * [Bug 2093016](https://bugzilla.redhat.com/show_bug.cgi?id=2093016): Add alert about attach / mount failing [#324](https://github.com/openshift/cluster-storage-operator/pull/324) * [OCPBUGS-1361](https://issues.redhat.com/browse/OCPBUGS-1361): Reword vSphere problem detector check alerts [#322](https://github.com/openshift/cluster-storage-operator/pull/322) * Remove specific UID from cluster-storage-operator [#316](https://github.com/openshift/cluster-storage-operator/pull/316) * [OCPBUGS-1904](https://issues.redhat.com/browse/OCPBUGS-1904): Allow CSI operator to get CRDs [#323](https://github.com/openshift/cluster-storage-operator/pull/323) * add storage capability annotation [#303](https://github.com/openshift/cluster-storage-operator/pull/303) * Bump go to 1.19 [#321](https://github.com/openshift/cluster-storage-operator/pull/321) * [STOR-858](https://issues.redhat.com/browse/STOR-858): Bump github.com/openshift/* and k8s.io/* [#317](https://github.com/openshift/cluster-storage-operator/pull/317) * [STOR-1050](https://issues.redhat.com/browse/STOR-1050): bump openshift/api to latest master [#319](https://github.com/openshift/cluster-storage-operator/pull/319) * Remove in-tree AWS EBS and GCP PD storage classes [#312](https://github.com/openshift/cluster-storage-operator/pull/312) * [TRT-534](https://issues.redhat.com/browse/TRT-534): Add client certificate and key to service monitor [#306](https://github.com/openshift/cluster-storage-operator/pull/306) * [OCPBUGS-946](https://issues.redhat.com/browse/OCPBUGS-946): Resource csi.storage.k8s.io/csinodeinfos added to powervs-block-csi-d river-operator-clusterrole [#315](https://github.com/openshift/cluster-storage-operator/pull/315) * Updating cluster-storage-operator images to be consistent with ART [#296](https://github.com/openshift/cluster-storage-operator/pull/296) * [Bug 2112237](https://bugzilla.redhat.com/show_bug.cgi?id=2112237): correct sc error messages for ibm and alibaba platforms [#310](https://github.com/openshift/cluster-storage-operator/pull/310) * Add PowerVS Block CSI Driver Operator [#304](https://github.com/openshift/cluster-storage-operator/pull/304) * [Bug 2108054](https://bugzilla.redhat.com/show_bug.cgi?id=2108054): Allow Prometheus to scan openshift-cluster-csi-drivers namespace [#308](https://github.com/openshift/cluster-storage-operator/pull/308) * [STOR-956](https://issues.redhat.com/browse/STOR-956): Bump(openshift/api): to get CSI changes [#307](https://github.com/openshift/cluster-storage-operator/pull/307) * [Bug 2108054](https://bugzilla.redhat.com/show_bug.cgi?id=2108054): Add alert about unsupported CSI driver [#305](https://github.com/openshift/cluster-storage-operator/pull/305) * [Bug 2107043](https://bugzilla.redhat.com/show_bug.cgi?id=2107043): HTTPS_PROXY ENV missing in some CSI driver operators [#301](https://github.com/openshift/cluster-storage-operator/pull/301) * [Bug 2101645](https://bugzilla.redhat.com/show_bug.cgi?id=2101645): DefaultStorageClassController reports fake message on azure and openstack [#292](https://github.com/openshift/cluster-storage-operator/pull/292) * [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/bc69ea348a1d38a8f4d765e13de81afe9744e4c7...21ebf328f53182111eb7dce344487ba633d09b1a) ### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/2796e1732615521e818be82663058e0a3f1b3941) * Clean up owners file as part of DPP-10343 [#46](https://github.com/openshift/cluster-update-keys/pull/46) * Updating ose-cluster-update-keys images to be consistent with ART [#45](https://github.com/openshift/cluster-update-keys/pull/45) * [Full changelog](https://github.com/openshift/cluster-update-keys/compare/289032fb67e5e358f21808fab87350bcf5e5e85b...2796e1732615521e818be82663058e0a3f1b3941) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/8e2c472a67964065c8aa271f85ef7f7e57726ac4) * [OCPBUGS-27443](https://issues.redhat.com/browse/OCPBUGS-27443): pkg/cvo/availableupdates: Only bump LastAttempt on Cincinnati pulls [#1024](https://github.com/openshift/cluster-version-operator/pull/1024) * [OCPBUGS-20729](https://issues.redhat.com/browse/OCPBUGS-20729): [4.12] Bump http-related deps [#990](https://github.com/openshift/cluster-version-operator/pull/990) * [OCPBUGS-22408](https://issues.redhat.com/browse/OCPBUGS-22408): pkg/clusterconditions/promql: Warm cache with 1s delay [#988](https://github.com/openshift/cluster-version-operator/pull/988) * [OCPBUGS-22198](https://issues.redhat.com/browse/OCPBUGS-22198): Reconcile Volumes in SCCs [#985](https://github.com/openshift/cluster-version-operator/pull/985) * [OCPBUGS-14096](https://issues.redhat.com/browse/OCPBUGS-14096): Trigger new sync round on ClusterOperator Available changes [#938](https://github.com/openshift/cluster-version-operator/pull/938) * [OCPBUGS-12182](https://issues.redhat.com/browse/OCPBUGS-12182): Update dnsPolicy to allow consistent resolution of the internal LB [#931](https://github.com/openshift/cluster-version-operator/pull/931) * [OCPBUGS-10565](https://issues.redhat.com/browse/OCPBUGS-10565): RetrievePayload: Improve timeouts and cover behavior with tests [#914](https://github.com/openshift/cluster-version-operator/pull/914) * [OCPBUGS-10514](https://issues.redhat.com/browse/OCPBUGS-10514): pkg/cvo/availableupdates: Prioritize conditional risks for largest target version [#913](https://github.com/openshift/cluster-version-operator/pull/913) * [OCPBUGS-8304](https://issues.redhat.com/browse/OCPBUGS-8304): Adding admin-gate ack-4.12-kube-1.26-api-removals-in-4.13 [#908](https://github.com/openshift/cluster-version-operator/pull/908) * [OCPBUGS-5879](https://issues.redhat.com/browse/OCPBUGS-5879): Set upgradeability check throttling period to 2m [#884](https://github.com/openshift/cluster-version-operator/pull/884) * [OCPBUGS-5083](https://issues.redhat.com/browse/OCPBUGS-5083): pkg/payload/precondition: Do not claim warnings would have blocked [#878](https://github.com/openshift/cluster-version-operator/pull/878) * [OCPBUGS-3770](https://issues.redhat.com/browse/OCPBUGS-3770): Allow CVO to update `KUBERNETES_SERVICE_HOST` with LB address [#866](https://github.com/openshift/cluster-version-operator/pull/866) * [OCPBUGS-3352](https://issues.redhat.com/browse/OCPBUGS-3352): Do not fail precondition check for UnknownUpdate [#861](https://github.com/openshift/cluster-version-operator/pull/861) * [Bug 2033499](https://bugzilla.redhat.com/show_bug.cgi?id=2033499): Don't overwrite accepted risks if local payload [#852](https://github.com/openshift/cluster-version-operator/pull/852) * [OCPBUGS-2125](https://issues.redhat.com/browse/OCPBUGS-2125): Allow unknown capabilities during payload load and implicitl enablement checking [#850](https://github.com/openshift/cluster-version-operator/pull/850) * bump api version to add new capability [#835](https://github.com/openshift/cluster-version-operator/pull/835) * [Bug 2033499](https://bugzilla.redhat.com/show_bug.cgi?id=2033499): Populate acceptedRisks in ClusterVersion History [#841](https://github.com/openshift/cluster-version-operator/pull/841) * Dockerfile: Bump to Go 1.18 [#845](https://github.com/openshift/cluster-version-operator/pull/845) * Fix ups from gofmt 1.19 [#849](https://github.com/openshift/cluster-version-operator/pull/849) * Revert "Fix ups from gofmt 1.19 and yamllint" [#848](https://github.com/openshift/cluster-version-operator/pull/848) * Fix ups from gofmt 1.19 and yamllint [#844](https://github.com/openshift/cluster-version-operator/pull/844) * Updating cluster-version-operator images to be consistent with ART [#842](https://github.com/openshift/cluster-version-operator/pull/842) * [OCPBUGS-1636](https://issues.redhat.com/browse/OCPBUGS-1636): pkg/cvo/sync_worker: Pre-create ClusterOperator in reconciling-mode too [#840](https://github.com/openshift/cluster-version-operator/pull/840) * [Bug 1951835](https://bugzilla.redhat.com/show_bug.cgi?id=1951835): Handle report only sync errors [#837](https://github.com/openshift/cluster-version-operator/pull/837) * [OCPBUGS-1402](https://issues.redhat.com/browse/OCPBUGS-1402): pkg/cvo/sync_worker.go: remove Lock/Unlock [#832](https://github.com/openshift/cluster-version-operator/pull/832) * OWNERS: Prune vrutkovs [#838](https://github.com/openshift/cluster-version-operator/pull/838) * pkg/cvo: add test utility functions [#833](https://github.com/openshift/cluster-version-operator/pull/833) * allow more than one featureset [#821](https://github.com/openshift/cluster-version-operator/pull/821) * [OCPBUGS-575](https://issues.redhat.com/browse/OCPBUGS-575): lib/resourcemerge/core: Reconcile seccompProfile in ensurePodSecurityContext [#830](https://github.com/openshift/cluster-version-operator/pull/830) * [Bug 2006611](https://bugzilla.redhat.com/show_bug.cgi?id=2006611): Upgrade takes too much time when upgrading via --to-image [#808](https://github.com/openshift/cluster-version-operator/pull/808) * [OCPBUGS-569](https://issues.redhat.com/browse/OCPBUGS-569): CVO History Pruner return not assigned to config.Status.History [#828](https://github.com/openshift/cluster-version-operator/pull/828) * bump api version to add new capability [#801](https://github.com/openshift/cluster-version-operator/pull/801) * lib/capability: Sort all slices after building them [#827](https://github.com/openshift/cluster-version-operator/pull/827) * [Bug 1951835](https://bugzilla.redhat.com/show_bug.cgi?id=1951835): Propagate Degraded to update status [#662](https://github.com/openshift/cluster-version-operator/pull/662) * [Bug 2010365](https://bugzilla.redhat.com/show_bug.cgi?id=2010365): OpenShift Alerting Rules Style-Guide Compliance [#800](https://github.com/openshift/cluster-version-operator/pull/800) * Restore 'Pull arch from payload' and fix [#813](https://github.com/openshift/cluster-version-operator/pull/813) * /pkg/cvo: improve CV history pruning [#805](https://github.com/openshift/cluster-version-operator/pull/805) * [Bug 2117033](https://bugzilla.redhat.com/show_bug.cgi?id=2117033): pkg/cvo/sync_worker: Trigger new sync round on ClusterOperator versions[name=operator] changes [#818](https://github.com/openshift/cluster-version-operator/pull/818) * pkg/cvo/status.go: sort implicitly enabled caps [#814](https://github.com/openshift/cluster-version-operator/pull/814) * pkg/cvo/sync_worker: Consolidate all ClusterOperator errors by reason [#577](https://github.com/openshift/cluster-version-operator/pull/577) * Revert "Pull arch from payload" [#810](https://github.com/openshift/cluster-version-operator/pull/810) * Pull arch from payload [#796](https://github.com/openshift/cluster-version-operator/pull/796) * [Bug 2110590](https://bugzilla.redhat.com/show_bug.cgi?id=2110590): pkg/cvo/updatepayload: Set 'readOnlyRootFilesystem: false' [#807](https://github.com/openshift/cluster-version-operator/pull/807) * [Bug 2109374](https://bugzilla.redhat.com/show_bug.cgi?id=2109374): pkg/clusterconditions/promql: Cap PromQL queries at 5 minutes [#806](https://github.com/openshift/cluster-version-operator/pull/806) * [Bug 2094174](https://bugzilla.redhat.com/show_bug.cgi?id=2094174): pkg/cvo: reset payload load status [#788](https://github.com/openshift/cluster-version-operator/pull/788) * [Bug 2108858](https://bugzilla.redhat.com/show_bug.cgi?id=2108858): lib/resourcemerge: change SecurityContext reconcile [#804](https://github.com/openshift/cluster-version-operator/pull/804) * Updating cluster-version-operator images to be consistent with ART [#797](https://github.com/openshift/cluster-version-operator/pull/797) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/8966b291a649d3a262d1b714aef02c6d9d3ff402...8e2c472a67964065c8aa271f85ef7f7e57726ac4) ### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/e4d9170e71bdf8a79e9cde94dac53575a30f46f3) * Updating configmap-reload images to be consistent with ART [#47](https://github.com/openshift/configmap-reload/pull/47) * OWNERS: Add Joao and myself, and move former team members to emeritus [#46](https://github.com/openshift/configmap-reload/pull/46) * Updating configmap-reload images to be consistent with ART [#45](https://github.com/openshift/configmap-reload/pull/45) * [Full changelog](https://github.com/openshift/configmap-reload/compare/b7c03bb081cb4389b6492f3a38c1405c2518f9e3...e4d9170e71bdf8a79e9cde94dac53575a30f46f3) ### [console](https://github.com/openshift/console/tree/4dd47eda1513b51d91113731a069ffc4731dc058) * [OCPBUGS-34933](https://issues.redhat.com/browse/OCPBUGS-34933): Helm Plugin's Catalog incorrectly renders a single index entry into multiple tiles [#13930](https://github.com/openshift/console/pull/13930) * [OCPBUGS-32146](https://issues.redhat.com/browse/OCPBUGS-32146): Bump graphql-go to v1.3.0 [#13923](https://github.com/openshift/console/pull/13923) * [OCPBUGS-34845](https://issues.redhat.com/browse/OCPBUGS-34845): Fix PipelineRun Logs tab navigation [#13920](https://github.com/openshift/console/pull/13920) * [OCPBUGS-33778](https://issues.redhat.com/browse/OCPBUGS-33778): fix issues with Edit Route form [#13859](https://github.com/openshift/console/pull/13859) * [OCPBUGS-27479](https://issues.redhat.com/browse/OCPBUGS-27479): Bump helm pkg [#13528](https://github.com/openshift/console/pull/13528) * [OCPBUGS-29746](https://issues.redhat.com/browse/OCPBUGS-29746): Add Pipeline metrics tab using plugin [#13621](https://github.com/openshift/console/pull/13621) * [OCPBUGS-29348](https://issues.redhat.com/browse/OCPBUGS-29348): Added Proxy to non k8s endpoints [#13600](https://github.com/openshift/console/pull/13600) * [OCPBUGS-22431](https://issues.redhat.com/browse/OCPBUGS-22431): Check if filtered object contains name property [#13285](https://github.com/openshift/console/pull/13285) * [OCPBUGS-25213](https://issues.redhat.com/browse/OCPBUGS-25213): add access review for impersonate [#13440](https://github.com/openshift/console/pull/13440) * [OCPBUGS-18116](https://issues.redhat.com/browse/OCPBUGS-18116): Bump helm version [#13104](https://github.com/openshift/console/pull/13104) * [OCPBUGS-24236](https://issues.redhat.com/browse/OCPBUGS-24236): Remove tech preview badge from Pipeline repository pages [#13384](https://github.com/openshift/console/pull/13384) * [OCPBUGS-23413](https://issues.redhat.com/browse/OCPBUGS-23413): Correct logout process [#13342](https://github.com/openshift/console/pull/13342) * [OCPBUGS-24364](https://issues.redhat.com/browse/OCPBUGS-24364): Subsequent PipelineRuns take initial PipelineRun name into account [#13401](https://github.com/openshift/console/pull/13401) * [OCPBUGS-13357](https://issues.redhat.com/browse/OCPBUGS-13357): add multipath device type to LocalVolumeSet [#12805](https://github.com/openshift/console/pull/12805) * [OCPBUGS-23346](https://issues.redhat.com/browse/OCPBUGS-23346): update the KnativeServing API version to v1beta1 for global-config extension [#13334](https://github.com/openshift/console/pull/13334) * [OCPBUGS-23154](https://issues.redhat.com/browse/OCPBUGS-23154): remove expandable toggle for conditional update risk d… [#13322](https://github.com/openshift/console/pull/13322) * [OCPBUGS-22964](https://issues.redhat.com/browse/OCPBUGS-22964): add support for new features annotations while preservi… [#13305](https://github.com/openshift/console/pull/13305) * [OCPBUGS-19382](https://issues.redhat.com/browse/OCPBUGS-19382): Could not import multiple resources via JSON (while YAML supports this) [#13168](https://github.com/openshift/console/pull/13168) * [OCPBUGS-20071](https://issues.redhat.com/browse/OCPBUGS-20071): Fix that "Delete application" doesn't work in topology when Pipelines operator is not installed [#13212](https://github.com/openshift/console/pull/13212) * [OCPBUGS-21727](https://issues.redhat.com/browse/OCPBUGS-21727): fetch TaskRuns without selector and reduces the get TaskRuns requests [#13251](https://github.com/openshift/console/pull/13251) * [OCPBUGS-21731](https://issues.redhat.com/browse/OCPBUGS-21731): show all the legends for Pipeline metrics in PipelineRun TaskRun Duration chart [#13252](https://github.com/openshift/console/pull/13252) * [OCPBUGS-13580](https://issues.redhat.com/browse/OCPBUGS-13580): Regression: OpenShift Console no-longer filters SecretList when displaying ServiceAccount [#12747](https://github.com/openshift/console/pull/12747) * [OCPBUGS-19907](https://issues.redhat.com/browse/OCPBUGS-19907): Fixed Edit Application form for Knative Services [#13205](https://github.com/openshift/console/pull/13205) * [OCPBUGS-19045](https://issues.redhat.com/browse/OCPBUGS-19045): Web console slowness on Project>Project access page [#13155](https://github.com/openshift/console/pull/13155) * [OCPBUGS-18273](https://issues.redhat.com/browse/OCPBUGS-18273): Fix topology crash when a console.topology/data/factory extension tries to resolve a resource with version from the CRDs which doesn't exists [#13113](https://github.com/openshift/console/pull/13113) * [OCPBUGS-18563](https://issues.redhat.com/browse/OCPBUGS-18563): OLM Pages work when copied CSVs are disabled [#13055](https://github.com/openshift/console/pull/13055) * [OCPBUGS-17530](https://issues.redhat.com/browse/OCPBUGS-17530): fix bug where binary secret values are corrupted on edit and add test coverage [#13087](https://github.com/openshift/console/pull/13087) * [OCPBUGS-18366](https://issues.redhat.com/browse/OCPBUGS-18366): Fix DeploymentConfig list performance issues by lazy loading their ReplicationControllers [#13122](https://github.com/openshift/console/pull/13122) * [OCPBUGS-16660](https://issues.redhat.com/browse/OCPBUGS-16660): Manual cherry-pick of #12978 [#13039](https://github.com/openshift/console/pull/13039) * [OCPBUGS-17192](https://issues.redhat.com/browse/OCPBUGS-17192): "Duplicate RoleBinding" leads to "Unsupported value" error [#13063](https://github.com/openshift/console/pull/13063) * [OCPBUGS-16846](https://issues.redhat.com/browse/OCPBUGS-16846): Fix stop PLR option [#13051](https://github.com/openshift/console/pull/13051) * [OCPBUGS-2182](https://issues.redhat.com/browse/OCPBUGS-2182): re-enable operator-install-single-namespace.spec.ts test [#13013](https://github.com/openshift/console/pull/13013) * [OCPBUGS-16732](https://issues.redhat.com/browse/OCPBUGS-16732): When removing the project owner from the project in GUI, instead of that user, the group (the default group added as project admin through the project template) will be removed. [#13047](https://github.com/openshift/console/pull/13047) * [OCPBUGS-16046](https://issues.redhat.com/browse/OCPBUGS-16046), [OCPBUGS-16047](https://issues.redhat.com/browse/OCPBUGS-16047), [OCPBUGS-16048](https://issues.redhat.com/browse/OCPBUGS-16048): Helm Chart installation form hangs on create if JSON-schema is using 2019-09 or 2020-20 standard revisions [#12997](https://github.com/openshift/console/pull/12997) * [OCPBUGS-15898](https://issues.redhat.com/browse/OCPBUGS-15898): account for single object in status.conditions instead… [#12982](https://github.com/openshift/console/pull/12982) * [OCPBUGS-16139](https://issues.redhat.com/browse/OCPBUGS-16139): The upgrade Helm Release tab in OpenShift GUI Developer console is not refreshing with updated values. [#13004](https://github.com/openshift/console/pull/13004) * [OCPBUGS-15710](https://issues.redhat.com/browse/OCPBUGS-15710): Create helm release page doesn't show a YAML editor when schema isn't available (httpd-imagestreams chart) [#12962](https://github.com/openshift/console/pull/12962) * [OCPBUGS-15849](https://issues.redhat.com/browse/OCPBUGS-15849): Add Pipeline metrics unsupported empty page [#12977](https://github.com/openshift/console/pull/12977) * [OCPBUGS-9405](https://issues.redhat.com/browse/OCPBUGS-9405): [OSD] There is no error message shown on node label edi… [#12965](https://github.com/openshift/console/pull/12965) * [OCPBUGS-15798](https://issues.redhat.com/browse/OCPBUGS-15798): Remove access review check for PipelineResource from Pipeline section [#12969](https://github.com/openshift/console/pull/12969) * [OCPBUGS-13643](https://issues.redhat.com/browse/OCPBUGS-13643): Fix OLM k8sResourcePrefix descriptor dropdown behavior [#12813](https://github.com/openshift/console/pull/12813) * [OCPBUGS-15569](https://issues.redhat.com/browse/OCPBUGS-15569): use service port name instead targetPort in the Pipeline Event listener route [#12958](https://github.com/openshift/console/pull/12958) * [OCPBUGS-15535](https://issues.redhat.com/browse/OCPBUGS-15535): Delete annotation 'tekton.dev/v1beta1TaskRuns' when rerun the PLR [#12955](https://github.com/openshift/console/pull/12955) * [OCPBUGS-15404](https://issues.redhat.com/browse/OCPBUGS-15404): Importing a kn Service shows a non-working Open URL decorator also when the Add Route checkbox was unselected [#12935](https://github.com/openshift/console/pull/12935) * [OCPBUGS-15057](https://issues.redhat.com/browse/OCPBUGS-15057): only copy workload annotations to debug pod [#12903](https://github.com/openshift/console/pull/12903) * [OCPBUGS-15099](https://issues.redhat.com/browse/OCPBUGS-15099): visiting Configurations page returns error Cannot read… [#12906](https://github.com/openshift/console/pull/12906) * [OCPBUGS-15482](https://issues.redhat.com/browse/OCPBUGS-15482): Remove PipelineResource CRD check because it's not installed with PO 1.11 anymore [#12948](https://github.com/openshift/console/pull/12948) * [OCPBUGS-14190](https://issues.redhat.com/browse/OCPBUGS-14190): When Creating Sample Devfile from the Samples Page, Topology Icon is not set [#12859](https://github.com/openshift/console/pull/12859) * [OCPBUGS-11989](https://issues.redhat.com/browse/OCPBUGS-11989): Modified git import flow module to handle create button enable-disable issue [#12775](https://github.com/openshift/console/pull/12775) * [OCPBUGS-6848](https://issues.redhat.com/browse/OCPBUGS-6848): Service name search ability while creating the Route from console [#12505](https://github.com/openshift/console/pull/12505) * [OCPBUGS-7619](https://issues.redhat.com/browse/OCPBUGS-7619): Search page: LazyActionMenus are shown below Add/Remove from navigation button [#12575](https://github.com/openshift/console/pull/12575) * [OCPBUGS-7924](https://issues.redhat.com/browse/OCPBUGS-7924): Developer - Topology : 'Filter by resource' drop-down i18n misses [#12598](https://github.com/openshift/console/pull/12598) * [OCPBUGS-13803](https://issues.redhat.com/browse/OCPBUGS-13803): add support for minimal status of tekton [#12831](https://github.com/openshift/console/pull/12831) * [OCPBUGS-13750](https://issues.redhat.com/browse/OCPBUGS-13750): use PipelineRun template from 'pipelines-as-code-pipelinerun-go' configMap for Go runtime [#12829](https://github.com/openshift/console/pull/12829) * [OCPBUGS-12839](https://issues.redhat.com/browse/OCPBUGS-12839): Show type of sample on the samples view [#12783](https://github.com/openshift/console/pull/12783) * [OCPBUGS-12992](https://issues.redhat.com/browse/OCPBUGS-12992): Pipeline doesn't render correctly when displayed but looks fine in edit mode [#12791](https://github.com/openshift/console/pull/12791) * [OCPBUGS-9336](https://issues.redhat.com/browse/OCPBUGS-9336): use buildconfig form also for create [#12770](https://github.com/openshift/console/pull/12770) * [OCPBUGS-11601](https://issues.redhat.com/browse/OCPBUGS-11601): Move operator install status to it's own … [#12715](https://github.com/openshift/console/pull/12715) * [OCPBUGS-12232](https://issues.redhat.com/browse/OCPBUGS-12232): Fix for broken Create key/value secrets e2e tests [#12750](https://github.com/openshift/console/pull/12750) * [OCPBUGS-11844](https://issues.redhat.com/browse/OCPBUGS-11844): delete associated pipeline, triggertemplate and eventlistener when deleting app [#12727](https://github.com/openshift/console/pull/12727) * [OCPBUGS-11972](https://issues.redhat.com/browse/OCPBUGS-11972): update the default pipelineRun template name [#12687](https://github.com/openshift/console/pull/12687) * [OCPBUGS-6888](https://issues.redhat.com/browse/OCPBUGS-6888): Show Git icon and repo link as per the Git provider [#12511](https://github.com/openshift/console/pull/12511) * [OCPBUGS-12476](https://issues.redhat.com/browse/OCPBUGS-12476): Pipelines repository list and creation form doesn't show Tech Preview status [#12763](https://github.com/openshift/console/pull/12763) * [OCPBUGS-1753](https://issues.redhat.com/browse/OCPBUGS-1753): Fix OLM descriptor components deletes operand e2e test failing [#12573](https://github.com/openshift/console/pull/12573) * [OCPBUGS-12477](https://issues.redhat.com/browse/OCPBUGS-12477): Users don't know what type of resource is being created by Import from Git or Deploy Image flows [#12765](https://github.com/openshift/console/pull/12765) * [OCPBUGS-11998](https://issues.redhat.com/browse/OCPBUGS-11998): Do not show builder ImageStreams without `sampleRepo` as samples [#12740](https://github.com/openshift/console/pull/12740) * [OCPBUGS-5009](https://issues.redhat.com/browse/OCPBUGS-5009): Helm Charts and Samples are not disabled in topology actions if actions are disabled in customization [#12382](https://github.com/openshift/console/pull/12382) * [OCPBUGS-7953](https://issues.redhat.com/browse/OCPBUGS-7953): fix devfile error [#12605](https://github.com/openshift/console/pull/12605) * [OCPBUGS-6672](https://issues.redhat.com/browse/OCPBUGS-6672): In DeploymentConfig both the Form view and Yaml view are not in sync [#12475](https://github.com/openshift/console/pull/12475) * [OCPBUGS-8016](https://issues.redhat.com/browse/OCPBUGS-8016): PipelineRun templates must be fetched from OpenShift namespace [#12614](https://github.com/openshift/console/pull/12614) * [OCPBUGS-10225](https://issues.redhat.com/browse/OCPBUGS-10225): Get the Event type value from the latest PLR of the Repository [#12643](https://github.com/openshift/console/pull/12643) * [OCPBUGS-7333](https://issues.redhat.com/browse/OCPBUGS-7333): Add missing SDK extensions descriptions [#12556](https://github.com/openshift/console/pull/12556) * [OCPBUGS-7951](https://issues.redhat.com/browse/OCPBUGS-7951): delete application should delete all part-of resources [#12604](https://github.com/openshift/console/pull/12604) * [OCPBUGS-6036](https://issues.redhat.com/browse/OCPBUGS-6036): Project dropdown order is not as smart as project list page order [#12447](https://github.com/openshift/console/pull/12447) * [OCPBUGS-7800](https://issues.redhat.com/browse/OCPBUGS-7800): add subject kind dropdown in the project access form [#12586](https://github.com/openshift/console/pull/12586) * [OCPBUGS-8339](https://issues.redhat.com/browse/OCPBUGS-8339): disable operator-install-single-namespace.spec.ts until… [#12624](https://github.com/openshift/console/pull/12624) * [OCPBUGS-3892](https://issues.redhat.com/browse/OCPBUGS-3892): Add cluster to query params of websocket requests [#12282](https://github.com/openshift/console/pull/12282) * [OCPBUGS-5092](https://issues.redhat.com/browse/OCPBUGS-5092): Fix to use and set correct secretReference for build-config triggers [#12388](https://github.com/openshift/console/pull/12388) * [OCPBUGS-7895](https://issues.redhat.com/browse/OCPBUGS-7895): Bump helm version to 3.10.1 [#12579](https://github.com/openshift/console/pull/12579) * [OCPBUGS-6873](https://issues.redhat.com/browse/OCPBUGS-6873): The dropdown list component will be covered by deployment details page on Topology page [#12507](https://github.com/openshift/console/pull/12507) * [OCPBUGS-6831](https://issues.redhat.com/browse/OCPBUGS-6831): Fix crash when pinnedResources is null [#12503](https://github.com/openshift/console/pull/12503) * [OCPBUGS-7471](https://issues.redhat.com/browse/OCPBUGS-7471): Right border radius is 0 for the pipeline visualization wrapper in dark mode [#12565](https://github.com/openshift/console/pull/12565) * [OCPBUGS-7506](https://issues.redhat.com/browse/OCPBUGS-7506): Fix different CI issues [#12555](https://github.com/openshift/console/pull/12555) * [OCPBUGS-6966](https://issues.redhat.com/browse/OCPBUGS-6966): Remove description field from the PLR parameters page [#12519](https://github.com/openshift/console/pull/12519) * [OCPBUGS-7437](https://issues.redhat.com/browse/OCPBUGS-7437): Webhook Secret (1 of 2) is not removed when Knative Service is deleted [#12560](https://github.com/openshift/console/pull/12560) * [OCPBUGS-6887](https://issues.redhat.com/browse/OCPBUGS-6887): Show Tag label and tag name if tag is detected in repository PipelineRun list and details page [#12510](https://github.com/openshift/console/pull/12510) * [OCPBUGS-6816](https://issues.redhat.com/browse/OCPBUGS-6816): Repositories list does not show the running pipelinerun as last pipelinerun [#12500](https://github.com/openshift/console/pull/12500) * [OCPBUGS-4072](https://issues.redhat.com/browse/OCPBUGS-4072): Fix rerender loop/crash when bindable-kinds is found but has no status [#12304](https://github.com/openshift/console/pull/12304) * [OCPBUGS-6671](https://issues.redhat.com/browse/OCPBUGS-6671): fix broken pipeline secret [#12474](https://github.com/openshift/console/pull/12474) * [OCPBUGS-6913](https://issues.redhat.com/browse/OCPBUGS-6913): PipelineRun task status overlaps status text [#12516](https://github.com/openshift/console/pull/12516) * [OCPBUGS-6766](https://issues.redhat.com/browse/OCPBUGS-6766): Fix to provide an option to delete all app resources on delete-resource modal for D/DC/KSVC [#12491](https://github.com/openshift/console/pull/12491) * [OCPBUGS-6969](https://issues.redhat.com/browse/OCPBUGS-6969): Added translation to Last used in resource type dropdown [#12521](https://github.com/openshift/console/pull/12521) * [OCPBUGS-6764](https://issues.redhat.com/browse/OCPBUGS-6764): Add Git Repository (PAC) showed empty permission content and non-working help link until a git url is entered [#12490](https://github.com/openshift/console/pull/12490) * [OCPBUGS-4281](https://issues.redhat.com/browse/OCPBUGS-4281): Do not disable metrics when auth is disabled [#12323](https://github.com/openshift/console/pull/12323) * [OCPBUGS-6669](https://issues.redhat.com/browse/OCPBUGS-6669): Do not show UpdateInProgress when status is Failing [#12473](https://github.com/openshift/console/pull/12473) * [OCPBUGS-5093](https://issues.redhat.com/browse/OCPBUGS-5093): Fix to show correct help texts for each git repo status error code [#12389](https://github.com/openshift/console/pull/12389) * [OCPBUGS-6085](https://issues.redhat.com/browse/OCPBUGS-6085): Editing Pipeline in the ocp console should show correct information [#12452](https://github.com/openshift/console/pull/12452) * [OCPBUGS-6758](https://issues.redhat.com/browse/OCPBUGS-6758): Add RBAC check on Create a Project link in all-namespaces pages [#12489](https://github.com/openshift/console/pull/12489) * [OCPBUGS-6755](https://issues.redhat.com/browse/OCPBUGS-6755): Remove `refs-heads` from the branch name for Repository pipelineRun row [#12487](https://github.com/openshift/console/pull/12487) * [OCPBUGS-6743](https://issues.redhat.com/browse/OCPBUGS-6743): Fix react warning when open console, add missing keys in navigation [#12484](https://github.com/openshift/console/pull/12484) * [OCPBUGS-5875](https://issues.redhat.com/browse/OCPBUGS-5875): Don't proxy CORS response headers [#12276](https://github.com/openshift/console/pull/12276) * [OCPBUGS-6678](https://issues.redhat.com/browse/OCPBUGS-6678): fix run-time error on Cluster Settings when availableUp… [#12476](https://github.com/openshift/console/pull/12476) * [OCPBUGS-4633](https://issues.redhat.com/browse/OCPBUGS-4633): Monitoring: Fix alert descriptions with duplicate resources [#12352](https://github.com/openshift/console/pull/12352) * [OCPBUGS-5303](https://issues.redhat.com/browse/OCPBUGS-5303): display 'Control plane is hosted' alert only when isCl… [#12409](https://github.com/openshift/console/pull/12409) * [OCPBUGS-5263](https://issues.redhat.com/browse/OCPBUGS-5263): only show upgrade details if cluster not externally man… [#12404](https://github.com/openshift/console/pull/12404) * [OCPBUGS-5444](https://issues.redhat.com/browse/OCPBUGS-5444): Change vSphere connection health status icon [#12415](https://github.com/openshift/console/pull/12415) * [OCPBUGS-4960](https://issues.redhat.com/browse/OCPBUGS-4960): Fix that topology sidebar actions shows outdated data (Edit Pod Count, Edit labels, Edit annotations, etc.) [#12378](https://github.com/openshift/console/pull/12378) * [OCPBUGS-5003](https://issues.redhat.com/browse/OCPBUGS-5003): fixed node maintenance plugin route configuration for BareMetalNodesPage [#12381](https://github.com/openshift/console/pull/12381) * [OCPBUGS-5185](https://issues.redhat.com/browse/OCPBUGS-5185): Add DevSandbox specific telemetry config (to allow these cluster to enforce cluster type and opt-out) [#12393](https://github.com/openshift/console/pull/12393) * [OCPBUGS-5191](https://issues.redhat.com/browse/OCPBUGS-5191): add support for version v1beta1 for knativeServing and knativeEventing [#12395](https://github.com/openshift/console/pull/12395) * [OCPBUGS-4897](https://issues.redhat.com/browse/OCPBUGS-4897): Pan nodes into view if all nodes are not visible on load [#12370](https://github.com/openshift/console/pull/12370) * [OCPBUGS-4013](https://issues.redhat.com/browse/OCPBUGS-4013): fix number spinner input [#12288](https://github.com/openshift/console/pull/12288) * "OCPBUGS-4512: Fix navsection bug" [#12340](https://github.com/openshift/console/pull/12340) * [OCPBUGS-4458](https://issues.redhat.com/browse/OCPBUGS-4458): fix issue where node debug terminal doesn't load [#12338](https://github.com/openshift/console/pull/12338) * [OCPBUGS-3333](https://issues.redhat.com/browse/OCPBUGS-3333): Promote ConsolePlugins API version to v1 in console repository [#12248](https://github.com/openshift/console/pull/12248) * [OCPBUGS-4035](https://issues.redhat.com/browse/OCPBUGS-4035): Fix for initial showing of topology contents [#12299](https://github.com/openshift/console/pull/12299) * [OCPBUGS-4117](https://issues.redhat.com/browse/OCPBUGS-4117): Re-enable serverless e2e tests [#12308](https://github.com/openshift/console/pull/12308) * [OCPBUGS-4116](https://issues.redhat.com/browse/OCPBUGS-4116): Re-enable pipelines e2e tests [#12307](https://github.com/openshift/console/pull/12307) * [OCPBUGS-4004](https://issues.redhat.com/browse/OCPBUGS-4004): migrate Events integration test to Cypress to mitigate … [#12291](https://github.com/openshift/console/pull/12291) * [OCPBUGS-3927](https://issues.redhat.com/browse/OCPBUGS-3927): show 403 error when normal user check operands on All … [#12284](https://github.com/openshift/console/pull/12284) * [OCPBUGS-3786](https://issues.redhat.com/browse/OCPBUGS-3786): add Release not accepted to Update status on Cluster Se… [#12273](https://github.com/openshift/console/pull/12273) * [OCPBUGS-3754](https://issues.redhat.com/browse/OCPBUGS-3754): Monitoring: Add popover help text for silence form's negative matchers [#12271](https://github.com/openshift/console/pull/12271) * [OCPBUGS-3696](https://issues.redhat.com/browse/OCPBUGS-3696): improve display of RetrievedUpdate condition in Update status [#12270](https://github.com/openshift/console/pull/12270) * [OCPBUGS-2874](https://issues.redhat.com/browse/OCPBUGS-2874): add capacity action for SS CSV list page [OCP 4.12 & ODF 4.11] [#12233](https://github.com/openshift/console/pull/12233) * [OCPBUGS-2974](https://issues.redhat.com/browse/OCPBUGS-2974): Monitoring: Fix permission check for Prometheus & Alertmanager pollers [#12225](https://github.com/openshift/console/pull/12225) * [OCPBUGS-3265](https://issues.redhat.com/browse/OCPBUGS-3265): check that user can patch console operator config in s… [#12239](https://github.com/openshift/console/pull/12239) * Create-Knative-Workload | Knative Serverless [#12165](https://github.com/openshift/console/pull/12165) * add tab extension to dev console [#12109](https://github.com/openshift/console/pull/12109) * [OCPBUGS-2651](https://issues.redhat.com/browse/OCPBUGS-2651): Show focus border on pipeline run nodes [#12157](https://github.com/openshift/console/pull/12157) * [OCPBUGS-2909](https://issues.redhat.com/browse/OCPBUGS-2909): Fix documentation link which leads to 404 [#12181](https://github.com/openshift/console/pull/12181) * [OCPBUGS-2478](https://issues.redhat.com/browse/OCPBUGS-2478): Fix i18n issue in Remove component node from application modal [#12180](https://github.com/openshift/console/pull/12180) * [Bug 2110256](https://bugzilla.redhat.com/show_bug.cgi?id=2110256): Storage -> PVC -> upload data, does not support source reference [#12213](https://github.com/openshift/console/pull/12213) * [OCPBUGS-1950](https://issues.redhat.com/browse/OCPBUGS-1950): Devfile samples (in Developer Catalog) link doesn't include the current selected namespace [#12193](https://github.com/openshift/console/pull/12193) * [CONSOLE-3164](https://issues.redhat.com/browse/CONSOLE-3164): Move main nav components [#12123](https://github.com/openshift/console/pull/12123) * [CONSOLE-3224](https://issues.redhat.com/browse/CONSOLE-3224): Expose errorMessage and errorCause for failed plugins [#12151](https://github.com/openshift/console/pull/12151) * [CONSOLE-3336](https://issues.redhat.com/browse/CONSOLE-3336): Make dynamic plugin dependencies optional [#12078](https://github.com/openshift/console/pull/12078) * [Bug 2115347](https://bugzilla.redhat.com/show_bug.cgi?id=2115347): Monitoring: Add support for Alertmanager negative matchers [#12139](https://github.com/openshift/console/pull/12139) * CONSOLE 3250: Configure default behavior for "Wrap lines" in log viewers [#12015](https://github.com/openshift/console/pull/12015) * chore(i18n): update translations: Completed-7034-OCP 4.12/Master Branch UI Localization- Sprint 224 [#12185](https://github.com/openshift/console/pull/12185) * [CONSOLE-3276](https://issues.redhat.com/browse/CONSOLE-3276): Expose ErrorBoundary capabilities in the SDK [#12170](https://github.com/openshift/console/pull/12170) * Replace resource URI with inline yaml in devfile [#12168](https://github.com/openshift/console/pull/12168) * [Bug 2110321](https://bugzilla.redhat.com/show_bug.cgi?id=2110321): Workloads list page has different PDB action items from details page when All Projects selected [#12117](https://github.com/openshift/console/pull/12117) * Update Devfile Import to use Kubernetes YAML definitions [#12000](https://github.com/openshift/console/pull/12000) * [OCPBUGS-2654](https://issues.redhat.com/browse/OCPBUGS-2654): Update OperatorHub tests [#12198](https://github.com/openshift/console/pull/12198) * [ODC-6786](https://issues.redhat.com/browse/ODC-6786): Add cluster configuration extension, page, and options for console customization [#12159](https://github.com/openshift/console/pull/12159) * MGMT-9085 Add vSphere Connection plugin [#12068](https://github.com/openshift/console/pull/12068) * [OCPBUGS-505](https://issues.redhat.com/browse/OCPBUGS-505): Input box aria-label and name wrong for editing PDB inside Deployments [#12064](https://github.com/openshift/console/pull/12064) * [OCPBUGS-2455](https://issues.redhat.com/browse/OCPBUGS-2455): Pods and PDBs list page just reports 'Not found' when no Pod/PDB [#12178](https://github.com/openshift/console/pull/12178) * [OCPBUGS-2100](https://issues.redhat.com/browse/OCPBUGS-2100): Fix warning icon color [#12177](https://github.com/openshift/console/pull/12177) * [OCPBUGS-1916](https://issues.redhat.com/browse/OCPBUGS-1916): Workloads list page has different HPA action items from details page when All Projects selected [#12120](https://github.com/openshift/console/pull/12120) * [OCPBUGS-548](https://issues.redhat.com/browse/OCPBUGS-548): Tweaks to make the "Favorites" section heading consistent with project menu section heading [#12119](https://github.com/openshift/console/pull/12119) * [OCPBUGS-1470](https://issues.redhat.com/browse/OCPBUGS-1470): i18n Incorrect plural for maxUnavailable pod count [#12065](https://github.com/openshift/console/pull/12065) * [OCPBUGS-1776](https://issues.redhat.com/browse/OCPBUGS-1776): Remove duplicate start guide alert from devconsole Search page [#12158](https://github.com/openshift/console/pull/12158) * [OCPBUGS-2430](https://issues.redhat.com/browse/OCPBUGS-2430): Add missing Quick Start translation [#12171](https://github.com/openshift/console/pull/12171) * [ODC-6779](https://issues.redhat.com/browse/ODC-6779): Hide sub-catalog(s) in the developer catalog or the entire dev catalog based on customization [#12067](https://github.com/openshift/console/pull/12067) * [OCPBUGS-800](https://issues.redhat.com/browse/OCPBUGS-800): Name of workload get changed, when project and image stream gets changed on reloading the form on the edit deployment page of the workload [#12024](https://github.com/openshift/console/pull/12024) * [OCPBUGS-1017](https://issues.redhat.com/browse/OCPBUGS-1017): Persist last cluster dropdown selection in session storage only [#12179](https://github.com/openshift/console/pull/12179) * [OCPBUGS-2344](https://issues.redhat.com/browse/OCPBUGS-2344): Change annotation to be used for fake helm repositories [#12141](https://github.com/openshift/console/pull/12141) * [OCPBUGS-1416](https://issues.redhat.com/browse/OCPBUGS-1416): Fix outdated, broken ODC add-page e2e test [#12055](https://github.com/openshift/console/pull/12055) * [OCPBUGS-2438](https://issues.redhat.com/browse/OCPBUGS-2438): Monitoring: Fix help popovers [#12166](https://github.com/openshift/console/pull/12166) * [OCPBUGS-1746](https://issues.redhat.com/browse/OCPBUGS-1746): Update the Github App events and permissions [#12162](https://github.com/openshift/console/pull/12162) * [OCPBUGS-193](https://issues.redhat.com/browse/OCPBUGS-193): Corrected kebab action overlapping issue in Helm page [#11980](https://github.com/openshift/console/pull/11980) * [OCPBUGS-2369](https://issues.redhat.com/browse/OCPBUGS-2369): adds check for metadata as metadata is not required in template spec [#12169](https://github.com/openshift/console/pull/12169) * [OCPBUGS-2075](https://issues.redhat.com/browse/OCPBUGS-2075): Hide silent switch for alerting rule if no associated alerts are present in devconsole [#12152](https://github.com/openshift/console/pull/12152) * [Bug 2100334](https://bugzilla.redhat.com/show_bug.cgi?id=2100334): separate fetching of serving and eventing as they can be enabled independently [#12080](https://github.com/openshift/console/pull/12080) * [OCPBUGS-2195](https://issues.redhat.com/browse/OCPBUGS-2195): fixes npe on topology [#12156](https://github.com/openshift/console/pull/12156) * Cards-display-on-serverless-operator-installation | Knative-serverless [#12089](https://github.com/openshift/console/pull/12089) * Updates flags and blocks migrated extensions [#11992](https://github.com/openshift/console/pull/11992) * Add resource quota alert to topology list view node [#12143](https://github.com/openshift/console/pull/12143) * [OCPBUGS-1040](https://issues.redhat.com/browse/OCPBUGS-1040): Add checks for pods in hpaPodRingLabel [#12118](https://github.com/openshift/console/pull/12118) * [OCPBUGS-2181](https://issues.redhat.com/browse/OCPBUGS-2181): updates test id for 3scale [#12167](https://github.com/openshift/console/pull/12167) * [OCPBUGS-1105](https://issues.redhat.com/browse/OCPBUGS-1105): OCPBUGS-1106: Update dependencies to the registry library and devfile parser [#12043](https://github.com/openshift/console/pull/12043) * [OCPBUGS-2265](https://issues.redhat.com/browse/OCPBUGS-2265): Allow passing documentation links for alerts [#12059](https://github.com/openshift/console/pull/12059) * [CONSOLE-3190](https://issues.redhat.com/browse/CONSOLE-3190): update OperatorHub filter to use nodeArchitectures instead of GOARCH [#12072](https://github.com/openshift/console/pull/12072) * ODC7127: Change node background color to yellow on zoom out [#12142](https://github.com/openshift/console/pull/12142) * [Bug 2100843](https://bugzilla.redhat.com/show_bug.cgi?id=2100843): Fix selection on add connector context menu option opens the side panel of the node [#12069](https://github.com/openshift/console/pull/12069) * [OCPBUGS-2102](https://issues.redhat.com/browse/OCPBUGS-2102): updates e2e to call resource type selection in advance option [#12147](https://github.com/openshift/console/pull/12147) * [ODC-6771](https://issues.redhat.com/browse/ODC-6771): Add telemetry support [#12140](https://github.com/openshift/console/pull/12140) * [ODC-6785](https://issues.redhat.com/browse/ODC-6785): Enable/Disable perspective(s) based on customization [#12025](https://github.com/openshift/console/pull/12025) * Refactor ResourceSection and move it under Advanced options [#12052](https://github.com/openshift/console/pull/12052) * [ODC-6772](https://issues.redhat.com/browse/ODC-6772): Show resource quota alert in deployment side-panel [#12029](https://github.com/openshift/console/pull/12029) * [OCPBUGS-194](https://issues.redhat.com/browse/OCPBUGS-194): Switch api explorer filters to use PF toolbar component for structure and adjustments. [#12111](https://github.com/openshift/console/pull/12111) * [Bug 2115522](https://bugzilla.redhat.com/show_bug.cgi?id=2115522): Strange padding in new Helm Chart Repository table row [#12102](https://github.com/openshift/console/pull/12102) * [OCPBUGS-1678](https://issues.redhat.com/browse/OCPBUGS-1678): Use local test data to mock a devfile registry [#12088](https://github.com/openshift/console/pull/12088) * Updating openshift-enterprise-console images to be consistent with ART [#12121](https://github.com/openshift/console/pull/12121) * [OU-38](https://issues.redhat.com/browse/OU-38): Monitoring: Refactor silence duration dropdown to use PatternFly [#12101](https://github.com/openshift/console/pull/12101) * Action on Knative-Service | Knative Serverless [#12081](https://github.com/openshift/console/pull/12081) * [OU-56](https://issues.redhat.com/browse/OU-56): Query browser: Refactor timespan dropdown to use PatternFly components [#12076](https://github.com/openshift/console/pull/12076) * [Bug 2079249](https://bugzilla.redhat.com/show_bug.cgi?id=2079249): Find latest pipeline run without firehose selector [#12071](https://github.com/openshift/console/pull/12071) * [OCPBUGS-1479](https://issues.redhat.com/browse/OCPBUGS-1479): PDB list page should only show Create Pod button to user has sufficient permission [#12066](https://github.com/openshift/console/pull/12066) * Update PL/PLR visualization to use new PF pipeline package [#12046](https://github.com/openshift/console/pull/12046) * [Bug 2057972](https://bugzilla.redhat.com/show_bug.cgi?id=2057972): Remove space in Chinese translation for Duplicate {{kindLabel}} [#12099](https://github.com/openshift/console/pull/12099) * HELM 386:Chart Verifier api integration [#11964](https://github.com/openshift/console/pull/11964) * [OCPBUGS-1827](https://issues.redhat.com/browse/OCPBUGS-1827): disable e2e for knative [#12114](https://github.com/openshift/console/pull/12114) * [OCPBUGS-184](https://issues.redhat.com/browse/OCPBUGS-184): Fix OperatorHub "View it here" link for installed operators [#12105](https://github.com/openshift/console/pull/12105) * Move some datetime functions to @openshift-console/plugin-shared [#12037](https://github.com/openshift/console/pull/12037) * [OCPBUGS-183](https://issues.redhat.com/browse/OCPBUGS-183): fix bug where line numbers greater than 5 digits overlay… [#12093](https://github.com/openshift/console/pull/12093) * [OCPBUGS-803](https://issues.redhat.com/browse/OCPBUGS-803): Handle fake helm chart repository [#12096](https://github.com/openshift/console/pull/12096) * [Bug 1904106](https://bugzilla.redhat.com/show_bug.cgi?id=1904106): Fix Y-axis labels for minimal / no data [#12087](https://github.com/openshift/console/pull/12087) * Monitoring: Clean up use of ISO datetime helpers [#12053](https://github.com/openshift/console/pull/12053) * OU-66 Add a 'Select/Unselect All' button to Observe > Metrics Page > … [#12033](https://github.com/openshift/console/pull/12033) * [ODC-6778](https://issues.redhat.com/browse/ODC-6778): add list of disabled dev catalog types to server flags [#11984](https://github.com/openshift/console/pull/11984) * [OCPBUGS-1522](https://issues.redhat.com/browse/OCPBUGS-1522): Allow regular users to access debug pods [#12098](https://github.com/openshift/console/pull/12098) * add list of enabled/disabled perspectives to server flags [#11993](https://github.com/openshift/console/pull/11993) * chore(i18n): update translations: Completed-7034-OCP 4.12/Master Branch UI Localization- Sprint 223 [#12083](https://github.com/openshift/console/pull/12083) * [Bug 2100860](https://bugzilla.redhat.com/show_bug.cgi?id=2100860): Use Alertmanager services for user-defined alerts from config [#11712](https://github.com/openshift/console/pull/11712) * YAML Editor with forwardRef [#11997](https://github.com/openshift/console/pull/11997) * [OCPBUGS-1677](https://issues.redhat.com/browse/OCPBUGS-1677): Fix devfile registry assertion [#12085](https://github.com/openshift/console/pull/12085) * [PF-2022](https://issues.redhat.com/browse/PF-2022): 12 package updates [#12063](https://github.com/openshift/console/pull/12063) * [OCPBUGS-1569](https://issues.redhat.com/browse/OCPBUGS-1569): add admin flag to disabled extensions [#12027](https://github.com/openshift/console/pull/12027) * [ODC-6784](https://issues.redhat.com/browse/ODC-6784): Added Code Snippets for Hiding Perspectives in Dev Console [#12075](https://github.com/openshift/console/pull/12075) * [Bug 2030406](https://bugzilla.redhat.com/show_bug.cgi?id=2030406): Remove nav override for fixed demo plugin nav component dom structure [#12079](https://github.com/openshift/console/pull/12079) * [OCPBUGS-1570](https://issues.redhat.com/browse/OCPBUGS-1570): fixes issue with eventsources vis on topology [#12074](https://github.com/openshift/console/pull/12074) * [CONSOLE-3183](https://issues.redhat.com/browse/CONSOLE-3183): Improve console.dashboards/overview/detail/item extension [#12058](https://github.com/openshift/console/pull/12058) * Action on Knative-Revision | Knative Serverless [#12034](https://github.com/openshift/console/pull/12034) * [Bug 2057972](https://bugzilla.redhat.com/show_bug.cgi?id=2057972): Switch to "verb kind" phrase so that Chinese translations do not have spaces between. [#12039](https://github.com/openshift/console/pull/12039) * [Bug 2077138](https://bugzilla.redhat.com/show_bug.cgi?id=2077138): update version of quick-start library to latest [#12038](https://github.com/openshift/console/pull/12038) * [ODC-6780](https://issues.redhat.com/browse/ODC-6780): Provide a code snippet for the console CRD for adding Subcatalogs in Dev Catalog [#12047](https://github.com/openshift/console/pull/12047) * [OCPBUGS-1268](https://issues.redhat.com/browse/OCPBUGS-1268): Remove required flags from helm actions to show the HCR actions also if no helm repo is enabled [#12042](https://github.com/openshift/console/pull/12042) * Expose the NamespaceBar component in the dynamic plugin SDK API [#12001](https://github.com/openshift/console/pull/12001) * [OCPBUGS-1141](https://issues.redhat.com/browse/OCPBUGS-1141): fetch shared resource imagestreams based on labels instance and name [#12035](https://github.com/openshift/console/pull/12035) * [OCPBUGS-943](https://issues.redhat.com/browse/OCPBUGS-943): Use the Deployment as resource kind and label also when importing a Devfile [#12022](https://github.com/openshift/console/pull/12022) * [OCPBUGS-1256](https://issues.redhat.com/browse/OCPBUGS-1256): Improve OLM descriptors e2e tests [#12044](https://github.com/openshift/console/pull/12044) * [OCPBUGS-1290](https://issues.redhat.com/browse/OCPBUGS-1290): updates description for kafkaSink [#12048](https://github.com/openshift/console/pull/12048) * OU-68 Add PodMonitors to Metrics targets Page [#12008](https://github.com/openshift/console/pull/12008) * Added resource quota warning message in topology and add page [#11962](https://github.com/openshift/console/pull/11962) * [OCPBUGS-270](https://issues.redhat.com/browse/OCPBUGS-270): Show already loaded catalog items after a timeout (3sec) [#12019](https://github.com/openshift/console/pull/12019) * [OU-85](https://issues.redhat.com/browse/OU-85): Monitoring: Add runbook URLs to alert and rule details pages [#12026](https://github.com/openshift/console/pull/12026) * Automate DevConsole Interop WTO Scenarios [#8814](https://github.com/openshift/console/pull/8814) * [Bug 2115899](https://bugzilla.redhat.com/show_bug.cgi?id=2115899): BuildConfig form: Change image repository to image registry [#11938](https://github.com/openshift/console/pull/11938) * [OCPBUGS-548](https://issues.redhat.com/browse/OCPBUGS-548): Changes to the application menu with search and favorite options so it is consistent with PatternFly menu and aligns with Project selection menu [#11985](https://github.com/openshift/console/pull/11985) * [OCPBUGS-939](https://issues.redhat.com/browse/OCPBUGS-939): Fix flaky CI and usability issue: Disable create button until Devfile is parsed [#12023](https://github.com/openshift/console/pull/12023) * Monitoring: Clean up and make more use of the dynamic plugin SDK [#12009](https://github.com/openshift/console/pull/12009) * [OCPBUGS-238](https://issues.redhat.com/browse/OCPBUGS-238): enable knative e2e in ci [#12021](https://github.com/openshift/console/pull/12021) * [OCPBUGS-896](https://issues.redhat.com/browse/OCPBUGS-896): Allows launching of modals from alert actions [#12018](https://github.com/openshift/console/pull/12018) * Pass className to HealthItem popup top-level component [#11952](https://github.com/openshift/console/pull/11952) * chore(i18n): update translations: Completed-7034-OCP 4.12/Master Branch UI Localization- Sprint 222 [#11989](https://github.com/openshift/console/pull/11989) * Update pf packages to pf-2022-10 [#11981](https://github.com/openshift/console/pull/11981) * [OCPBUGS-869](https://issues.redhat.com/browse/OCPBUGS-869): correct Azure product name for support link [#12016](https://github.com/openshift/console/pull/12016) * Migrates StorageClass Provisioner to dynamic-plugin-sdk [#11931](https://github.com/openshift/console/pull/11931) * Disable all OCS tests [#12013](https://github.com/openshift/console/pull/12013) * kafka-event-source & kafka-source-connection feature | Knative [#11957](https://github.com/openshift/console/pull/11957) * [Bug 2112812](https://bugzilla.redhat.com/show_bug.cgi?id=2112812): Update registry library dependency to pick up proxy support [#12011](https://github.com/openshift/console/pull/12011) * Gherkin for "Cancelled" and "Stopped" status of pipeline run [#11868](https://github.com/openshift/console/pull/11868) * [CONSOLE-3179](https://issues.redhat.com/browse/CONSOLE-3179): Improve control over shared modules provided by Console to dynamic plugins [#11700](https://github.com/openshift/console/pull/11700) * [OCPBUGS-704](https://issues.redhat.com/browse/OCPBUGS-704): Disable knative test suite [#12006](https://github.com/openshift/console/pull/12006) * [Bug 2109854](https://bugzilla.redhat.com/show_bug.cgi?id=2109854): Fix description for Max unavailable and Max surge [#11867](https://github.com/openshift/console/pull/11867) * Add support for param of array type when starting a Pipeline [#11953](https://github.com/openshift/console/pull/11953) * [OCPBUGS-451](https://issues.redhat.com/browse/OCPBUGS-451): show git icon in repository details page based on git provider [#12003](https://github.com/openshift/console/pull/12003) * OWNERS: add jerolimov to approvers [#11998](https://github.com/openshift/console/pull/11998) * [OU-59](https://issues.redhat.com/browse/OU-59): Query browser: Remove the metrics list dropdown [#11991](https://github.com/openshift/console/pull/11991) * [HELM-342](https://issues.redhat.com/browse/HELM-342): Add basic authentication support for Helm repositories [#11782](https://github.com/openshift/console/pull/11782) * Add functionality to add kafka-sinks as subscriber, trigger and event-source sink target [#11925](https://github.com/openshift/console/pull/11925) * [OCPBUGS-435](https://issues.redhat.com/browse/OCPBUGS-435): Dropdown items on storageclass creation page need i18n support [#11988](https://github.com/openshift/console/pull/11988) * chore(i18n): update translations: Completed-7034-OCP 4.12 UI Localization- sprint 221 [#11940](https://github.com/openshift/console/pull/11940) * [Bug 2102681](https://bugzilla.redhat.com/show_bug.cgi?id=2102681): Fix zh locale (greater than pod) [#11802](https://github.com/openshift/console/pull/11802) * Include ActionServiceProvider in dynamic-plugin-sdk [#11923](https://github.com/openshift/console/pull/11923) * create kafkaSink support in catalog [#11948](https://github.com/openshift/console/pull/11948) * ODC-6712 & ODC-6714: Add a build decorator for Shipwright Builds and builds section into topology sidebar for Shipwright Builds and BuildRuns [#11853](https://github.com/openshift/console/pull/11853) * correcting nightly failures: pipelines [#11891](https://github.com/openshift/console/pull/11891) * [RHSTOR-3593](https://issues.redhat.com/browse/RHSTOR-3593): Add basic support for Modals [#11163](https://github.com/openshift/console/pull/11163) * [Bug 2091573](https://bugzilla.redhat.com/show_bug.cgi?id=2091573): Input values in Instantiate Template are disappeared randomly in the developer console [#11967](https://github.com/openshift/console/pull/11967) * Query browser: Use PatternFly components directly for Actions and kebab dropdown menus [#11959](https://github.com/openshift/console/pull/11959) * [Bug 2091102](https://bugzilla.redhat.com/show_bug.cgi?id=2091102): Name of workload get changed, when project and image stream gets changed on edit deployment page of the workload [#11758](https://github.com/openshift/console/pull/11758) * correcting nightly failures: topology [#11878](https://github.com/openshift/console/pull/11878) * [Bug 2080260](https://bugzilla.redhat.com/show_bug.cgi?id=2080260): Update OLM pages to use details and list page extensions for operands when they exist [#11883](https://github.com/openshift/console/pull/11883) * [OCPBUGS-238](https://issues.redhat.com/browse/OCPBUGS-238): enable knative e2e in ci [#11963](https://github.com/openshift/console/pull/11963) * [OCPBUGS-180](https://issues.redhat.com/browse/OCPBUGS-180): Change 'Role' title to 'Roles' [#11960](https://github.com/openshift/console/pull/11960) * [Bug 2071792](https://bugzilla.redhat.com/show_bug.cgi?id=2071792): Support namespace of choice for the user that wants to use TLS verification [#11571](https://github.com/openshift/console/pull/11571) * Monitoring: Import enums from dynamic plugin SDK [#11961](https://github.com/openshift/console/pull/11961) * [Bug 2117738](https://bugzilla.redhat.com/show_bug.cgi?id=2117738): reset ErrorBoundary state on location change [#11955](https://github.com/openshift/console/pull/11955) * [CONSOLE-3179](https://issues.redhat.com/browse/CONSOLE-3179): Add deprecation note for react-helmet [#11876](https://github.com/openshift/console/pull/11876) * [Bug 2094502](https://bugzilla.redhat.com/show_bug.cgi?id=2094502): Fix bug where the create required custom resource button points to the wrong namespace. [#11949](https://github.com/openshift/console/pull/11949) * [Bug 2091555](https://bugzilla.redhat.com/show_bug.cgi?id=2091555): - Sort function doesn't work on "Namespaces" column on operator details page [#11958](https://github.com/openshift/console/pull/11958) * [Bug 2109502](https://bugzilla.redhat.com/show_bug.cgi?id=2109502): improve bug report links [#11874](https://github.com/openshift/console/pull/11874) * [Bug 2103090](https://bugzilla.redhat.com/show_bug.cgi?id=2103090): - Storage - StorageClasses - Create StorageClass - Provisioner: Upon selection of Provisoner i18n misses [#11945](https://github.com/openshift/console/pull/11945) * [OCPBUGS-169](https://issues.redhat.com/browse/OCPBUGS-169): Fixes E2E test [#11956](https://github.com/openshift/console/pull/11956) * [Bug 2117367](https://bugzilla.redhat.com/show_bug.cgi?id=2117367): Include referenced .scss files when building core plugin SDK package [#11951](https://github.com/openshift/console/pull/11951) * [Bug 2115280](https://bugzilla.redhat.com/show_bug.cgi?id=2115280): kubevirt-e2e-aws see two duplicated navigation items [#11943](https://github.com/openshift/console/pull/11943) * Monitoring: Clean up imports and types [#11784](https://github.com/openshift/console/pull/11784) * Capture telemetry event for Export application action [#11921](https://github.com/openshift/console/pull/11921) * [Bug 2116415](https://bugzilla.redhat.com/show_bug.cgi?id=2116415): e2e: Disable Shipwright e2e tests [#11947](https://github.com/openshift/console/pull/11947) * Updated dynamic demo plugin instructions [#11904](https://github.com/openshift/console/pull/11904) * Allow editing of Repositories using the form-yaml experience [#11866](https://github.com/openshift/console/pull/11866) * [CONSOLE-3244](https://issues.redhat.com/browse/CONSOLE-3244): Make status.HostIP for Pods visible in the OCP Web Console [#11919](https://github.com/openshift/console/pull/11919) * [Bug 2111686](https://bugzilla.redhat.com/show_bug.cgi?id=2111686): [OKD/nanokube] Fix NPE when project or build status is not defined [#11791](https://github.com/openshift/console/pull/11791) * [Bug 2109511](https://bugzilla.redhat.com/show_bug.cgi?id=2109511): fix failed PipelineRun log texts color in light mode [#11859](https://github.com/openshift/console/pull/11859) * [Bug 2102341](https://bugzilla.redhat.com/show_bug.cgi?id=2102341): Include min-width on operator icon img so that Firefox displays them correctly [#11934](https://github.com/openshift/console/pull/11934) * [Bug 2114488](https://bugzilla.redhat.com/show_bug.cgi?id=2114488): Fix Monitoring Alert decorator icon color in Topology [#11928](https://github.com/openshift/console/pull/11928) * [Bug 2110525](https://bugzilla.redhat.com/show_bug.cgi?id=2110525): Clear the error when switching between the Form and YAML editor [#11871](https://github.com/openshift/console/pull/11871) * improve export application flow [#11915](https://github.com/openshift/console/pull/11915) * [Bug 2115799](https://bugzilla.redhat.com/show_bug.cgi?id=2115799): Fix Resource selection for import flow [#11937](https://github.com/openshift/console/pull/11937) * [Bug 2107469](https://bugzilla.redhat.com/show_bug.cgi?id=2107469): Fix service-binding modal sub-title text when the target is available [#11898](https://github.com/openshift/console/pull/11898) * [CONSOLE-3188](https://issues.redhat.com/browse/CONSOLE-3188): Add alert with message for Console plugins page when console operator spec.managementState is Unmanaged [#11897](https://github.com/openshift/console/pull/11897) * Add Resource type dropdown on the User preferences page [#11833](https://github.com/openshift/console/pull/11833) * Gherkin for Builds v2 in Dev Console - Topology [#11893](https://github.com/openshift/console/pull/11893) * Added Repositories tab in Helm Page [#11844](https://github.com/openshift/console/pull/11844) * Add Cancel option and update the stop status for the PipelineRun [#11920](https://github.com/openshift/console/pull/11920) * [ODC-6740](https://issues.redhat.com/browse/ODC-6740): Move Build v2 e2e tests from dev-console to shipwright-plugin package [#11889](https://github.com/openshift/console/pull/11889) * [CONSOLE-3140](https://issues.redhat.com/browse/CONSOLE-3140): Expose ResourceIcon to dynamic-plugin-sdk [#11870](https://github.com/openshift/console/pull/11870) * [Bug 2084504](https://bugzilla.redhat.com/show_bug.cgi?id=2084504): can not silence platform alert from developer console [#11895](https://github.com/openshift/console/pull/11895) * Bug 2105918, Bug 2105303: specify namespace and index entry along with chart url to get the chart details [#11838](https://github.com/openshift/console/pull/11838) * [Bug 2112481](https://bugzilla.redhat.com/show_bug.cgi?id=2112481): Fix visual inconsistencies across synched editor forms [#11903](https://github.com/openshift/console/pull/11903) * [Bug 1951901](https://bugzilla.redhat.com/show_bug.cgi?id=1951901): incorrect Worker nodes number calculated when nodes have… [#11896](https://github.com/openshift/console/pull/11896) * [Bug 2001211](https://bugzilla.redhat.com/show_bug.cgi?id=2001211): Resource usage measurement data display the concatenati… [#11805](https://github.com/openshift/console/pull/11805) * [Bug 2099795](https://bugzilla.redhat.com/show_bug.cgi?id=2099795): README file for helm charts encoded in Chinese shows messy characters in the UI [#11881](https://github.com/openshift/console/pull/11881) * [Bug 2112862](https://bugzilla.redhat.com/show_bug.cgi?id=2112862): Fix broken Namespace CRUD e2e test [#11908](https://github.com/openshift/console/pull/11908) * [CONSOLE-3186](https://issues.redhat.com/browse/CONSOLE-3186): Add shared-plugin to the SDK Packages tables docs [#11882](https://github.com/openshift/console/pull/11882) * capture telemetry for helmChartRepo creation to detect scope [#11872](https://github.com/openshift/console/pull/11872) * SDK - add plain yaml editor [#11840](https://github.com/openshift/console/pull/11840) * [Bug 2070562](https://bugzilla.redhat.com/show_bug.cgi?id=2070562): Base64 data value for java keystore secret changing auto… [#11890](https://github.com/openshift/console/pull/11890) * [Bug 2111205](https://bugzilla.redhat.com/show_bug.cgi?id=2111205): [CI Watcher] Add yarn config to dynamic-demo-plugin [#11880](https://github.com/openshift/console/pull/11880) * [Bug 2112146](https://bugzilla.redhat.com/show_bug.cgi?id=2112146): Update pod YAML sample for restricted pod security admission policy [#11894](https://github.com/openshift/console/pull/11894) * [Bug 2110927](https://bugzilla.redhat.com/show_bug.cgi?id=2110927): Remove zero from edit yaml page and clear errors when the user press the save button [#11877](https://github.com/openshift/console/pull/11877) * [Bug 2075107](https://bugzilla.redhat.com/show_bug.cgi?id=2075107): consistency in web terminal headers [#11858](https://github.com/openshift/console/pull/11858) * bump codemirror and promql editor to the last version [#11822](https://github.com/openshift/console/pull/11822) * [Bug 2092319](https://bugzilla.redhat.com/show_bug.cgi?id=2092319): [Firefox] multi-line node status formatting issue [#11638](https://github.com/openshift/console/pull/11638) * [Bug 2089221](https://bugzilla.redhat.com/show_bug.cgi?id=2089221): Could not de-select a Git Secret in add and edit forms [#11606](https://github.com/openshift/console/pull/11606) * [Bug 2084453](https://bugzilla.redhat.com/show_bug.cgi?id=2084453): - Edit PodDisruptionBudget page sometimes takes user to not synced YAML view [#11845](https://github.com/openshift/console/pull/11845) * [Bug 2097026](https://bugzilla.redhat.com/show_bug.cgi?id=2097026): Administration - Cluster Settings - Cluster Operators : … [#11742](https://github.com/openshift/console/pull/11742) * [Bug 2094240](https://bugzilla.redhat.com/show_bug.cgi?id=2094240): Update workload-pause.tsx to fix inconsistency between buttons in the notification and kebab action dropdown. [#11677](https://github.com/openshift/console/pull/11677) * Updates Ceph plugin OWNERS [#11657](https://github.com/openshift/console/pull/11657) * [Bug 2109673](https://bugzilla.redhat.com/show_bug.cgi?id=2109673): Align Console plugin SDK package dependencies with generated code [#11625](https://github.com/openshift/console/pull/11625) * Bug 2106366, Bug 2106377: Use displayname for PHCR in the catalog page [#11852](https://github.com/openshift/console/pull/11852) * [Bug 2108551](https://bugzilla.redhat.com/show_bug.cgi?id=2108551): [CI Watcher] Bulk Import e2e test flaking at a high rate [#11863](https://github.com/openshift/console/pull/11863) * [CONSOLE-3181](https://issues.redhat.com/browse/CONSOLE-3181): Deprecate useAccessReviewAllowed and useSafetyFirst [#11851](https://github.com/openshift/console/pull/11851) * support creation of helm chart repo using the existing PHCR form [#11821](https://github.com/openshift/console/pull/11821) * [Bug 2037329](https://bugzilla.redhat.com/show_bug.cgi?id=2037329): remove redundant model check to prevent tab reloading [#11862](https://github.com/openshift/console/pull/11862) * chore(i18n): update translations: Completed-7034-OCP 4.11 UI Localization- sprint 220 [#11846](https://github.com/openshift/console/pull/11846) * Bump webpack dependency in plugin SDK and demo plugin [#11771](https://github.com/openshift/console/pull/11771) * [Bug 2109469](https://bugzilla.redhat.com/show_bug.cgi?id=2109469): Fix create-namespace e2e test: cleanup useServiceLevelTitle hook usage [#11855](https://github.com/openshift/console/pull/11855) * [Bug 2108638](https://bugzilla.redhat.com/show_bug.cgi?id=2108638): SDK - expose useLastNamespace [#11828](https://github.com/openshift/console/pull/11828) * [Bug 2106805](https://bugzilla.redhat.com/show_bug.cgi?id=2106805): Enable running specific spec files with headless test-cypress [#11818](https://github.com/openshift/console/pull/11818) * add parameters tab on PipelineRun details page [#11767](https://github.com/openshift/console/pull/11767) * [Bug 2079690](https://bugzilla.redhat.com/show_bug.cgi?id=2079690): Fix operand affinity form field [#11834](https://github.com/openshift/console/pull/11834) * [Bug 2094558](https://bugzilla.redhat.com/show_bug.cgi?id=2094558): MetalLB: Creating ip address pool and community CR throu… [#11728](https://github.com/openshift/console/pull/11728) * [Bug 2105344](https://bugzilla.redhat.com/show_bug.cgi?id=2105344): correct usePodActionsProvider and apply it [#11816](https://github.com/openshift/console/pull/11816) * [Bug 2100640](https://bugzilla.redhat.com/show_bug.cgi?id=2100640): Adjust font size and alignment for show operands radio toggle [#11850](https://github.com/openshift/console/pull/11850) * [Bug 2106866](https://bugzilla.redhat.com/show_bug.cgi?id=2106866): Fix flaky OLM descriptor test [#11856](https://github.com/openshift/console/pull/11856) * [Bug 2092137](https://bugzilla.redhat.com/show_bug.cgi?id=2092137): Search doesn't show all entries when name filter is cleared [#11665](https://github.com/openshift/console/pull/11665) * [CONSOLE-3091](https://issues.redhat.com/browse/CONSOLE-3091): Remove orphaned code along with consolidating some code to use PF instead of Bootstrap [#11744](https://github.com/openshift/console/pull/11744) * [Bug 2090457](https://bugzilla.redhat.com/show_bug.cgi?id=2090457): openshift-debug-node- namespaces do not get deleted for … [#11824](https://github.com/openshift/console/pull/11824) * [Bug 2102098](https://bugzilla.redhat.com/show_bug.cgi?id=2102098): There is no error message shown on node label edi... [#11817](https://github.com/openshift/console/pull/11817) * [Bug 2106803](https://bugzilla.redhat.com/show_bug.cgi?id=2106803): mock call to /api/devfile in e2e [#11831](https://github.com/openshift/console/pull/11831) * [Bug 2093597](https://bugzilla.redhat.com/show_bug.cgi?id=2093597): Added the spacing between advanced options [#11739](https://github.com/openshift/console/pull/11739) * [Bug 2079214](https://bugzilla.redhat.com/show_bug.cgi?id=2079214): Switch default modal scroll behavior from inner modal body scroll to entire modal scroll to prevent bug and have consistent display of dropdown menus. [#11835](https://github.com/openshift/console/pull/11835) * [Bug 2081674](https://bugzilla.redhat.com/show_bug.cgi?id=2081674): Added onSubmit for create a project function for Dev perspective [#11781](https://github.com/openshift/console/pull/11781) * [Bug 2089773](https://bugzilla.redhat.com/show_bug.cgi?id=2089773): Added separate reducers for status and title for pipeline status [#11678](https://github.com/openshift/console/pull/11678) * [Bug 2106866](https://bugzilla.redhat.com/show_bug.cgi?id=2106866): Fix flaky OLM test [#11832](https://github.com/openshift/console/pull/11832) * [CONSOLE-3167](https://issues.redhat.com/browse/CONSOLE-3167): Remove static plugin nav extensions [#11825](https://github.com/openshift/console/pull/11825) * [Bug 2103981](https://bugzilla.redhat.com/show_bug.cgi?id=2103981): show last 3 build with option to view all in case of more then 3 builds [#11837](https://github.com/openshift/console/pull/11837) * [Bug 2103224](https://bugzilla.redhat.com/show_bug.cgi?id=2103224): Update the side nav perspective selection so it has the correct background and border color when in dark mode [#11790](https://github.com/openshift/console/pull/11790) * [Bug 2103972](https://bugzilla.redhat.com/show_bug.cgi?id=2103972): fix MultiColumnField header alignment used for Pipeline parameters [#11799](https://github.com/openshift/console/pull/11799) * [Bug 2078769](https://bugzilla.redhat.com/show_bug.cgi?id=2078769): Added translations for filter group names [#11594](https://github.com/openshift/console/pull/11594) * [CONSOLE-3067](https://issues.redhat.com/browse/CONSOLE-3067): Adding Rollout Restart function to the OpenShift Console [#11725](https://github.com/openshift/console/pull/11725) * [Bug 2091542](https://bugzilla.redhat.com/show_bug.cgi?id=2091542): - Error Loading/404 not found page shown after clicking "Current namespace only" [#11743](https://github.com/openshift/console/pull/11743) * [Bug 2021297](https://bugzilla.redhat.com/show_bug.cgi?id=2021297): Implement dynamic plugin dependency resolution [#11626](https://github.com/openshift/console/pull/11626) * [CONSOLE-3204](https://issues.redhat.com/browse/CONSOLE-3204): Add missing api docs for *Icon and *Status components [#11808](https://github.com/openshift/console/pull/11808) * [Bug 2098234](https://bugzilla.redhat.com/show_bug.cgi?id=2098234): fix broken update server link [#11768](https://github.com/openshift/console/pull/11768) * Bug 2105909, Bug 2105328: Fix create-namespace e2e test, ESOCKET timeout issue, and a11y violations to unblock CI [#11809](https://github.com/openshift/console/pull/11809) * [Bug 2052662](https://bugzilla.redhat.com/show_bug.cgi?id=2052662): Fix null reference [#11780](https://github.com/openshift/console/pull/11780) * Updating openshift-enterprise-console images to be consistent with ART [#11789](https://github.com/openshift/console/pull/11789) * [Bug 2093593](https://bugzilla.redhat.com/show_bug.cgi?id=2093593): Updated selected strategy file as devfile when devfile is selected [#11719](https://github.com/openshift/console/pull/11719) * [Bug 2100774](https://bugzilla.redhat.com/show_bug.cgi?id=2100774): add error color to required help text for image search field [#11776](https://github.com/openshift/console/pull/11776) * Update PF packages to pf-2022-8 [#11766](https://github.com/openshift/console/pull/11766) * [CONSOLE-3083](https://issues.redhat.com/browse/CONSOLE-3083): Update API docs for dynamic plugin sdk [#11639](https://github.com/openshift/console/pull/11639) * Update ODC owner files [#11760](https://github.com/openshift/console/pull/11760) * [Bug 2096350](https://bugzilla.redhat.com/show_bug.cgi?id=2096350): fix bug where Cluster update modal errors weren't displa… [#11762](https://github.com/openshift/console/pull/11762) * [Full changelog](https://github.com/openshift/console/compare/71da8a5d97fff0e6c6bf78356ff21e12246b8266...4dd47eda1513b51d91113731a069ffc4731dc058) ### [console-operator](https://github.com/openshift/console-operator/tree/32e6d25c4ac9fe71bb64fa7b30073a72547f4974) * [OCPBUGS-33386](https://issues.redhat.com/browse/OCPBUGS-33386): Reset console operator's conditions [#898](https://github.com/openshift/console-operator/pull/898) * [OCPBUGS-20988](https://issues.redhat.com/browse/OCPBUGS-20988): Disable HTTP/2 for webhook [#876](https://github.com/openshift/console-operator/pull/876) * [OCPBUGS-30990](https://issues.redhat.com/browse/OCPBUGS-30990): [release-4.12] Bump library-go and golang.org/x/net [#867](https://github.com/openshift/console-operator/pull/867) * [OCPBUGS-18951](https://issues.redhat.com/browse/OCPBUGS-18951): Add haproxy timeout annotation to console routes [#792](https://github.com/openshift/console-operator/pull/792) * [OCPBUGS-18309](https://issues.redhat.com/browse/OCPBUGS-18309): Add missing watch permission for helm-chartrepos-viewers [#789](https://github.com/openshift/console-operator/pull/789) * [OCPBUGS-15834](https://issues.redhat.com/browse/OCPBUGS-15834): Dockerfile: Shift ConsolePlugin CRD after the operator Deployment [#791](https://github.com/openshift/console-operator/pull/791) * [OCPBUGS-18563](https://issues.redhat.com/browse/OCPBUGS-18563): OLM Pages work when copied CSVs are disabled [#780](https://github.com/openshift/console-operator/pull/780) * [OCPBUGS-13647](https://issues.redhat.com/browse/OCPBUGS-13647): Proper cleanup of route sync conditions [#762](https://github.com/openshift/console-operator/pull/762) * [OCPBUGS-7999](https://issues.redhat.com/browse/OCPBUGS-7999): Distinguish between route conditions and remove the old ones [#735](https://github.com/openshift/console-operator/pull/735) * [OCPBUGS-6921](https://issues.redhat.com/browse/OCPBUGS-6921): Recover ConsoleNotificationSync after being degraded [#728](https://github.com/openshift/console-operator/pull/728) * [CONSOLE-3252](https://issues.redhat.com/browse/CONSOLE-3252): Create a ConsoleNotification when cluster is performing an upgrade [#687](https://github.com/openshift/console-operator/pull/687) * [OCPBUGS-2219](https://issues.redhat.com/browse/OCPBUGS-2219): Empty string should be valid for i18n loadType [#689](https://github.com/openshift/console-operator/pull/689) * [CONSOLE-3337](https://issues.redhat.com/browse/CONSOLE-3337): Dynamic plugin proxy reference issue [#691](https://github.com/openshift/console-operator/pull/691) * [OCPBUGS-1708](https://issues.redhat.com/browse/OCPBUGS-1708): Set i18n LoadType to Lazy when v1alpha1 i18n annotation is set to false [#684](https://github.com/openshift/console-operator/pull/684) * update to release.openshift.io/feature-set to match OCP 4.12 [#688](https://github.com/openshift/console-operator/pull/688) * [CONSOLE-3125](https://issues.redhat.com/browse/CONSOLE-3125): Add cluster filtering by product and ocp version [#677](https://github.com/openshift/console-operator/pull/677) * [ODC-6778](https://issues.redhat.com/browse/ODC-6778): Bump openshift/api to get devcatalog disable types cuztomization changes [#676](https://github.com/openshift/console-operator/pull/676) * [CONSOLE-3069](https://issues.redhat.com/browse/CONSOLE-3069): Handle new v1 ConsolePlugin api in the operator [#683](https://github.com/openshift/console-operator/pull/683) * [OCPBUGS-785](https://issues.redhat.com/browse/OCPBUGS-785): Bump documentationBaseURL to 4.12 [#682](https://github.com/openshift/console-operator/pull/682) * [ODC-6783](https://issues.redhat.com/browse/ODC-6783): Export perspectives to console-config ConfigMap [#678](https://github.com/openshift/console-operator/pull/678) * CONSOLE 3096: Promote ConsolePlugin CRD to v1 [#670](https://github.com/openshift/console-operator/pull/670) * [Bug 2100860](https://bugzilla.redhat.com/show_bug.cgi?id=2100860): Retrieve user-defined Alertmanager services from shared configmap [#658](https://github.com/openshift/console-operator/pull/658) * [CONSOLE-3242](https://issues.redhat.com/browse/CONSOLE-3242): Heterogeneous architecture clusters [#669](https://github.com/openshift/console-operator/pull/669) * [CONSOLE-3220](https://issues.redhat.com/browse/CONSOLE-3220): Add console capability to all manifests [#665](https://github.com/openshift/console-operator/pull/665) * [OCPBUGS-457](https://issues.redhat.com/browse/OCPBUGS-457): TestEditUnmanagedPodDisruptionBudget flakes [#675](https://github.com/openshift/console-operator/pull/675) * [OCPBUGS-498](https://issues.redhat.com/browse/OCPBUGS-498): Update with latest openshift/api changes [#674](https://github.com/openshift/console-operator/pull/674) * [Bug 2117646](https://bugzilla.redhat.com/show_bug.cgi?id=2117646): Changing field on any of routes in the openshift-console namespace wont trigger sync loop [#672](https://github.com/openshift/console-operator/pull/672) * [Bug 2117142](https://bugzilla.redhat.com/show_bug.cgi?id=2117142): update annotations for project-helm-chartrepository-editor [#673](https://github.com/openshift/console-operator/pull/673) * [Bug 2117142](https://bugzilla.redhat.com/show_bug.cgi?id=2117142): Update permission for projecthelmchartrepositories with an aggregator role [#667](https://github.com/openshift/console-operator/pull/667) * [Bug 2089950](https://bugzilla.redhat.com/show_bug.cgi?id=2089950): Deleting downloads deployment should not fail if already deleted [#663](https://github.com/openshift/console-operator/pull/663) * [Bug 2093852](https://bugzilla.redhat.com/show_bug.cgi?id=2093852): InfrastructureTopology must be driving console affinity rule creation [#657](https://github.com/openshift/console-operator/pull/657) * [Bug 2021297](https://bugzilla.redhat.com/show_bug.cgi?id=2021297): Pass RELEASE_VERSION envar into the console pod [#659](https://github.com/openshift/console-operator/pull/659) * [Full changelog](https://github.com/openshift/console-operator/compare/488fe1393f90ed89881fb4963e957e3603e6d778...32e6d25c4ac9fe71bb64fa7b30073a72547f4974) ### [container-networking-plugins](https://github.com/openshift/containernetworking-plugins/tree/1b33971993ca1013be9f24690c44560d2c58c70a) * [OCPBUGS-20593](https://issues.redhat.com/browse/OCPBUGS-20593): build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 [backport 4.12] [#131](https://github.com/openshift/containernetworking-plugins/pull/131) * [OCPBUGS-5289](https://issues.redhat.com/browse/OCPBUGS-5289): Adds vlan path substitution fix to address tuning regression for runtime config [#71](https://github.com/openshift/containernetworking-plugins/pull/71) * [OCPBUGS-4223](https://issues.redhat.com/browse/OCPBUGS-4223): Fix path substitution to enable setting sysctls on vlan interfaces [#68](https://github.com/openshift/containernetworking-plugins/pull/68) * Updating ose-containernetworking-plugins images to be consistent with ART [#66](https://github.com/openshift/containernetworking-plugins/pull/66) * Updating ose-containernetworking-plugins images to be consistent with ART [#65](https://github.com/openshift/containernetworking-plugins/pull/65) * [Full changelog](https://github.com/openshift/containernetworking-plugins/compare/1addd7c74290115ec4071de171f5069a17633153...1b33971993ca1013be9f24690c44560d2c58c70a) ### [coredns](https://github.com/openshift/coredns/tree/cc1194ea004f6b4bcb132fd1c6cebee68666d38f) * [OCPBUGS-21023](https://issues.redhat.com/browse/OCPBUGS-21023): UPSTREAM: <carry>: openshift: Address CVE-2023-39325 [#103](https://github.com/openshift/coredns/pull/103) * [OCPBUGS-20144](https://issues.redhat.com/browse/OCPBUGS-20144): UPSTREAM: <carry>: openshift: Fix OCPBUGS-20144 [#98](https://github.com/openshift/coredns/pull/98) * [OCPBUGS-240](https://issues.redhat.com/browse/OCPBUGS-240): Remove bufsize hardcoding to 2048 on cache upstream refreshes. [#78](https://github.com/openshift/coredns/pull/78) * Updating coredns images to be consistent with ART [#77](https://github.com/openshift/coredns/pull/77) * [OCPBUGS-1731](https://issues.redhat.com/browse/OCPBUGS-1731): Merge 1.10.0 [#76](https://github.com/openshift/coredns/pull/76) * Updating coredns images to be consistent with ART [#75](https://github.com/openshift/coredns/pull/75) * [Full changelog](https://github.com/openshift/coredns/compare/e195fdd7d4c05474aeb2786a3909e00ba7be60b8...cc1194ea004f6b4bcb132fd1c6cebee68666d38f) ### [csi-driver-shared-resource, csi-driver-shared-resource-webhook](https://github.com/openshift/csi-driver-shared-resource/tree/d054948fbc78ef04c7a55ac2a4b3ac0ed5648585) * [OCPBUGS-28953](https://issues.redhat.com/browse/OCPBUGS-28953): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#169](https://github.com/openshift/csi-driver-shared-resource/pull/169) * [OCPBUGS-23118](https://issues.redhat.com/browse/OCPBUGS-23118): Should reference configmaps instead of secrets [#154](https://github.com/openshift/csi-driver-shared-resource/pull/154) * [OCPBUGS-20703](https://issues.redhat.com/browse/OCPBUGS-20703): bump golang.org/x/net to v0.17.0 [#148](https://github.com/openshift/csi-driver-shared-resource/pull/148) * Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART [#112](https://github.com/openshift/csi-driver-shared-resource/pull/112) * Updating ose-csi-driver-shared-resource images to be consistent with ART [#113](https://github.com/openshift/csi-driver-shared-resource/pull/113) * csi topology is only PV relatead, do not need [#111](https://github.com/openshift/csi-driver-shared-resource/pull/111) * Updating ose-csi-driver-shared-resource-mustgather images to be consistent with ART [#108](https://github.com/openshift/csi-driver-shared-resource/pull/108) * Updating ose-csi-driver-shared-resource images to be consistent with ART [#107](https://github.com/openshift/csi-driver-shared-resource/pull/107) * Updating ose-csi-driver-shared-resource-webhook images to be consistent with ART [#106](https://github.com/openshift/csi-driver-shared-resource/pull/106) * [Full changelog](https://github.com/openshift/csi-driver-shared-resource/compare/c53236512eb9747c8969e466deeba4e9c615f91c...d054948fbc78ef04c7a55ac2a4b3ac0ed5648585) ### [csi-driver-shared-resource-operator](https://github.com/openshift/csi-driver-shared-resource-operator/tree/cc297702e6d2d4fb5a2b57a734c26d0d0a7bec1c) * [OCPBUGS-28959](https://issues.redhat.com/browse/OCPBUGS-28959): Replace 'coreydaley' with 'sayan-biswas' in OWNERS file [#105](https://github.com/openshift/csi-driver-shared-resource-operator/pull/105) * [OCPBUGS-20787](https://issues.redhat.com/browse/OCPBUGS-20787): bump golang.org/x/net to v0.17.0 [#88](https://github.com/openshift/csi-driver-shared-resource-operator/pull/88) * [OCPBUGS-3359](https://issues.redhat.com/browse/OCPBUGS-3359): Revert "[build-407] Mount shared secret and configmap list config path into shared driver node" [#62](https://github.com/openshift/csi-driver-shared-resource-operator/pull/62) * Updating ose-csi-driver-shared-resource-operator images to be consistent with ART [#58](https://github.com/openshift/csi-driver-shared-resource-operator/pull/58) * Mount shared secret and configmap list config path into shared driver node [#56](https://github.com/openshift/csi-driver-shared-resource-operator/pull/56) * [STOR-858](https://issues.redhat.com/browse/STOR-858): Bump github.com/openshift/* and k8s.io/* [#57](https://github.com/openshift/csi-driver-shared-resource-operator/pull/57) * : Authorize shared secrets and configmaps with openshift- prefix [#53](https://github.com/openshift/csi-driver-shared-resource-operator/pull/53) * [Bug 2081557](https://bugzilla.redhat.com/show_bug.cgi?id=2081557): Run at least one replica of Webhook [#51](https://github.com/openshift/csi-driver-shared-resource-operator/pull/51) * Updating ose-csi-driver-shared-resource-operator images to be consistent with ART [#52](https://github.com/openshift/csi-driver-shared-resource-operator/pull/52) * [Full changelog](https://github.com/openshift/csi-driver-shared-resource-operator/compare/cef0485335717f66460da9e7216a431ef3bb722c...cc297702e6d2d4fb5a2b57a734c26d0d0a7bec1c) ### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/fac7b8fd905b4c68beadc2c968e6f981385463e8) * [OCPBUGS-21139](https://issues.redhat.com/browse/OCPBUGS-21139): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#62](https://github.com/openshift/csi-external-attacher/pull/62) * UPSTREAM: 379: Fix gofmt for go 1.19 [#47](https://github.com/openshift/csi-external-attacher/pull/47) * UPSTREAM: <carry>: Remove .github files [#43](https://github.com/openshift/csi-external-attacher/pull/43) * Updating csi-attacher images to be consistent with ART [#42](https://github.com/openshift/csi-external-attacher/pull/42) * [STOR-859](https://issues.redhat.com/browse/STOR-859): Rebase to v4.0.0 for OCP 4.12 [#41](https://github.com/openshift/csi-external-attacher/pull/41) * Updating csi-attacher images to be consistent with ART [#40](https://github.com/openshift/csi-external-attacher/pull/40) * [Full changelog](https://github.com/openshift/csi-external-attacher/compare/1e15b60167c2fc326dc81f3d23a9f47852f0f858...fac7b8fd905b4c68beadc2c968e6f981385463e8) ### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/3aa7c527732e288c71119ea3e78fac739dfbd438) * [OCPBUGS-20743](https://issues.redhat.com/browse/OCPBUGS-20743): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#74](https://github.com/openshift/csi-external-provisioner/pull/74) * Updating csi-provisioner images to be consistent with ART [#58](https://github.com/openshift/csi-external-provisioner/pull/58) * UPSTREAM: <carry>: Remove .github files [#57](https://github.com/openshift/csi-external-provisioner/pull/57) * [STOR-859](https://issues.redhat.com/browse/STOR-859): Rebase to v3.3.0 for OCP 4.12 [#55](https://github.com/openshift/csi-external-provisioner/pull/55) * Updating csi-provisioner images to be consistent with ART [#54](https://github.com/openshift/csi-external-provisioner/pull/54) * [Bug 2101343](https://bugzilla.redhat.com/show_bug.cgi?id=2101343): UPSTREAM: 2101343: fix: changed the csistoragecapacity check namespace [#52](https://github.com/openshift/csi-external-provisioner/pull/52) * [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/7729f3835e2a1a68953bb9f9265e2e89e7d04184...3aa7c527732e288c71119ea3e78fac739dfbd438) ### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/5b066ba420bd74ec5327978d2731da989d57d4f2) * [OCPBUGS-20885](https://issues.redhat.com/browse/OCPBUGS-20885): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#149](https://github.com/openshift/csi-external-resizer/pull/149) * Updating ose-csi-external-resizer images to be consistent with ART [#134](https://github.com/openshift/csi-external-resizer/pull/134) * UPSTREAM: <carry>: Remove .github files [#133](https://github.com/openshift/csi-external-resizer/pull/133) * [STOR-859](https://issues.redhat.com/browse/STOR-859): Rebase to v1.6.0 for OCP 4.12 [#132](https://github.com/openshift/csi-external-resizer/pull/132) * Updating ose-csi-external-resizer images to be consistent with ART [#131](https://github.com/openshift/csi-external-resizer/pull/131) * [Full changelog](https://github.com/openshift/csi-external-resizer/compare/15ef7669ad93f1c70c6916d5e07f86cdd9fa167e...5b066ba420bd74ec5327978d2731da989d57d4f2) ### [csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook](https://github.com/openshift/csi-external-snapshotter/tree/6fdb648f67640dbb8b5eed10a1eab9830e6f8cdf) * [OCPBUGS-29244](https://issues.redhat.com/browse/OCPBUGS-29244): cherry-pick:release-4.12: OCPBUGS-29244 Update VolumeSnapshot and VolumeSnapshotContent using JSON patch [#140](https://github.com/openshift/csi-external-snapshotter/pull/140) * [OCPBUGS-20991](https://issues.redhat.com/browse/OCPBUGS-20991): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#111](https://github.com/openshift/csi-external-snapshotter/pull/111) * Updating csi-snapshot-validation-webhook images to be consistent with ART [#84](https://github.com/openshift/csi-external-snapshotter/pull/84) * Updating ose-csi-external-snapshotter images to be consistent with ART [#83](https://github.com/openshift/csi-external-snapshotter/pull/83) * Updating ose-csi-snapshot-controller images to be consistent with ART [#82](https://github.com/openshift/csi-external-snapshotter/pull/82) * UPSTREAM: <carry>: Remove .github files [#81](https://github.com/openshift/csi-external-snapshotter/pull/81) * Updating csi-snapshot-validation-webhook images to be consistent with ART [#80](https://github.com/openshift/csi-external-snapshotter/pull/80) * Updating ose-csi-external-snapshotter images to be consistent with ART [#79](https://github.com/openshift/csi-external-snapshotter/pull/79) * Updating ose-csi-snapshot-controller images to be consistent with ART [#78](https://github.com/openshift/csi-external-snapshotter/pull/78) * [STOR-859](https://issues.redhat.com/browse/STOR-859): Rebase to v6.1.0 for OCP 4.12 [#77](https://github.com/openshift/csi-external-snapshotter/pull/77) * Updating csi-snapshot-validation-webhook images to be consistent with ART [#76](https://github.com/openshift/csi-external-snapshotter/pull/76) * Updating ose-csi-external-snapshotter images to be consistent with ART [#75](https://github.com/openshift/csi-external-snapshotter/pull/75) * Updating ose-csi-snapshot-controller images to be consistent with ART [#74](https://github.com/openshift/csi-external-snapshotter/pull/74) * [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/54d2f3dc5227bbaaf0c76e256dc49f4d58cfb33c...6fdb648f67640dbb8b5eed10a1eab9830e6f8cdf) ### [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe/tree/e6545e71597df1da4635c266eb8f499fc376d970) * [OCPBUGS-20629](https://issues.redhat.com/browse/OCPBUGS-20629): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#52](https://github.com/openshift/csi-livenessprobe/pull/52) * [OCPBUGS-13821](https://issues.redhat.com/browse/OCPBUGS-13821): Bump gRPC from 1.38.0 to 1.49.0 [#43](https://github.com/openshift/csi-livenessprobe/pull/43) * Updating csi-livenessprobe images to be consistent with ART [#35](https://github.com/openshift/csi-livenessprobe/pull/35) * UPSTREAM: <carry>: Remove .github files [#34](https://github.com/openshift/csi-livenessprobe/pull/34) * Updating csi-livenessprobe images to be consistent with ART [#33](https://github.com/openshift/csi-livenessprobe/pull/33) * [Full changelog](https://github.com/openshift/csi-livenessprobe/compare/d8ed786f0e3ee68f51c82701e0f1918614fc6c41...e6545e71597df1da4635c266eb8f499fc376d970) ### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/c316b8963a0b0ff8d45f2b32c56de972d55bfd37) * [OCPBUGS-20674](https://issues.redhat.com/browse/OCPBUGS-20674): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#54](https://github.com/openshift/csi-node-driver-registrar/pull/54) * Updating csi-node-driver-registrar images to be consistent with ART [#39](https://github.com/openshift/csi-node-driver-registrar/pull/39) * UPSTREAM: <carry>: Remove .github files [#38](https://github.com/openshift/csi-node-driver-registrar/pull/38) * Updating csi-node-driver-registrar images to be consistent with ART [#37](https://github.com/openshift/csi-node-driver-registrar/pull/37) * [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/d5100c1d61be6cdc84a55730a0d86ed6f177c85e...c316b8963a0b0ff8d45f2b32c56de972d55bfd37) ### [docker-builder](https://github.com/openshift/builder/tree/a1cce53440f2f491c16c1b2c5a5b9986ba28c3fc) * [OCPBUGS-23037](https://issues.redhat.com/browse/OCPBUGS-23037): Add -p flag to cp command to preserve timestamps [#372](https://github.com/openshift/builder/pull/372) * [OCPBUGS-20695](https://issues.redhat.com/browse/OCPBUGS-20695): [release-4.12]Bump golang.org/x/net [#364](https://github.com/openshift/builder/pull/364) * [OCPBUGS-17228](https://issues.redhat.com/browse/OCPBUGS-17228): bump github.com/containers/buildah to v1.26.6 [#325](https://github.com/openshift/builder/pull/325) * [OCPBUGS-15643](https://issues.redhat.com/browse/OCPBUGS-15643): Add the git-lfs package [#353](https://github.com/openshift/builder/pull/353) * [OCPBUGS-6753](https://issues.redhat.com/browse/OCPBUGS-6753): manage-dockerfile: use the original form of HEALTHCHECK [#324](https://github.com/openshift/builder/pull/324) * Updating openshift-enterprise-builder images to be consistent with ART [#315](https://github.com/openshift/builder/pull/315) * [OCPBUGS-4779](https://issues.redhat.com/browse/OCPBUGS-4779): [release-4.12] Update to go1.19 [#321](https://github.com/openshift/builder/pull/321) * [BUILD-530](https://issues.redhat.com/browse/BUILD-530): Rebase to k8s.io 1.25 [#316](https://github.com/openshift/builder/pull/316) * bump(github.com/containers/buildah) to v1.26.4 [#306](https://github.com/openshift/builder/pull/306) * bump github.com/containers/buildah to v1.26.2 [#304](https://github.com/openshift/builder/pull/304) * Attempt to create /dev/fuse at startup [#305](https://github.com/openshift/builder/pull/305) * [Bug 2099991](https://bugzilla.redhat.com/show_bug.cgi?id=2099991): Add support for BUILDAH_QUIET environment variable [#303](https://github.com/openshift/builder/pull/303) * Set _CONTAINERS_USERNS_CONFIGURED if we create a user namespace [#301](https://github.com/openshift/builder/pull/301) * Updating openshift-enterprise-builder images to be consistent with ART [#302](https://github.com/openshift/builder/pull/302) * [Full changelog](https://github.com/openshift/builder/compare/f3147a0c11eb471ee57a0bd4f56ddf06521726e1...a1cce53440f2f491c16c1b2c5a5b9986ba28c3fc) ### [docker-registry](https://github.com/openshift/image-registry/tree/9e75355ca282cf5abac5595585a4b089e6a95e6f) * [OCPBUGS-19306](https://issues.redhat.com/browse/OCPBUGS-19306): bump docker-distribution [#382](https://github.com/openshift/image-registry/pull/382) * [OCPBUGS-10496](https://issues.redhat.com/browse/OCPBUGS-10496): bump docker-distribution [#365](https://github.com/openshift/image-registry/pull/365) * [OCPBUGS-8491](https://issues.redhat.com/browse/OCPBUGS-8491): bump aws-sdk-go [#362](https://github.com/openshift/image-registry/pull/362) * [OCPBUGS-4678](https://issues.redhat.com/browse/OCPBUGS-4678): Bump aws-sdk-go to v1.44.145 [#357](https://github.com/openshift/image-registry/pull/357) * [IR-299](https://issues.redhat.com/browse/IR-299): bump go to 1.19 and k8s to 1.25.2 [#351](https://github.com/openshift/image-registry/pull/351) * [OCPBUGS-1717](https://issues.redhat.com/browse/OCPBUGS-1717): bump aws-go-sdk, adding support for me-central-1 [#348](https://github.com/openshift/image-registry/pull/348) * [OCPBUGS-102](https://issues.redhat.com/browse/OCPBUGS-102): Keep OCI image configs when hard prune [#341](https://github.com/openshift/image-registry/pull/341) * Fix security context for test pods [#342](https://github.com/openshift/image-registry/pull/342) * Updating openshift-enterprise-registry images to be consistent with ART [#339](https://github.com/openshift/image-registry/pull/339) * [Full changelog](https://github.com/openshift/image-registry/compare/431737b34e0ee40bab77b6d6f0e67e2c57fa7e08...9e75355ca282cf5abac5595585a4b089e6a95e6f) ### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/6e5c04c066a428047d1755478cf88b290d32ad8f) * [OCPBUGS-1](https://issues.redhat.com/browse/OCPBUGS-1): Jira integration test PR 3 [#92](https://github.com/openshift/driver-toolkit/pull/92) * [Full changelog](https://github.com/openshift/driver-toolkit/compare/28589b0a149df1fa10b2759fff13b1885d0dfa14...6e5c04c066a428047d1755478cf88b290d32ad8f) ### [egress-router-cni](https://github.com/openshift/egress-router-cni/tree/a92e415791b531ca15ec84953550b71bd3534566) * Updating egress-router-cni images to be consistent with ART [#64](https://github.com/openshift/egress-router-cni/pull/64) * Updating egress-router-cni images to be consistent with ART [#63](https://github.com/openshift/egress-router-cni/pull/63) * [Full changelog](https://github.com/openshift/egress-router-cni/compare/fccaf1d9818617b8e6349d49cf9d7bbd7443c1e1...a92e415791b531ca15ec84953550b71bd3534566) ### [etcd](https://github.com/openshift/etcd/tree/bb82e891abeaddd57e1a07775874d71f2ddd9e85) * [OCPBUGS-28736](https://issues.redhat.com/browse/OCPBUGS-28736): Rebase etcd 3.5.12 openshift 4.12 [#246](https://github.com/openshift/etcd/pull/246) * [OCPBUGS-27102](https://issues.redhat.com/browse/OCPBUGS-27102): Rebase etcd 3.5.11 openshift 4.12 [#240](https://github.com/openshift/etcd/pull/240) * [OCPBUGS-21187](https://issues.redhat.com/browse/OCPBUGS-21187): [4.12] Carrying fixes for CVE-2023-44487 [#228](https://github.com/openshift/etcd/pull/228) * [OCPBUGS-15860](https://issues.redhat.com/browse/OCPBUGS-15860): [4.12] Rebase openshift/etcd to 3.5.9 [#207](https://github.com/openshift/etcd/pull/207) * Update owners [#185](https://github.com/openshift/etcd/pull/185) * Updating ose-etcd images to be consistent with ART [#153](https://github.com/openshift/etcd/pull/153) * [OCPBUGS-5761](https://issues.redhat.com/browse/OCPBUGS-5761): UPSTREAM:<carry>: etcdserver: process the scenaro of the last WAL rec… [#176](https://github.com/openshift/etcd/pull/176) * [OCPBUGS-3100](https://issues.redhat.com/browse/OCPBUGS-3100): Rebase openshift/etcd 4.12 onto v3.5.6 [#169](https://github.com/openshift/etcd/pull/169) * UPSTREAM: <carry>: rebase script [#159](https://github.com/openshift/etcd/pull/159) * [OCPBUGS-861](https://issues.redhat.com/browse/OCPBUGS-861): Rebase openshift/etcd 4.12 onto v3.5.5 [#144](https://github.com/openshift/etcd/pull/144) * Updating ose-etcd images to be consistent with ART [#134](https://github.com/openshift/etcd/pull/134) * [Full changelog](https://github.com/openshift/etcd/compare/e73305f67d109e401acfb86f099065e3a5797c5c...bb82e891abeaddd57e1a07775874d71f2ddd9e85) ### [haproxy-router](https://github.com/openshift/router/tree/29b4ae9821d4985dfdd147ea2b2f54a7cb68d90f) * [OCPBUGS-35875](https://issues.redhat.com/browse/OCPBUGS-35875): Properly handle rewrite-target annotation [#610](https://github.com/openshift/router/pull/610) * [OCPBUGS-33432](https://issues.redhat.com/browse/OCPBUGS-33432): Route 'haproxy.router.openshift.io/timeout' value is not validated [#593](https://github.com/openshift/router/pull/593) * [OCPBUGS-34212](https://issues.redhat.com/browse/OCPBUGS-34212): Reject routes with MD5 certs [#601](https://github.com/openshift/router/pull/601) * [OCPBUGS-33517](https://issues.redhat.com/browse/OCPBUGS-33517): Count active services before setting weight to 1 [#581](https://github.com/openshift/router/pull/581) * [OCPBUGS-21098](https://issues.redhat.com/browse/OCPBUGS-21098): Bump golang.org/x/net to v0.17.0 to address CVE-2023-39325 [#532](https://github.com/openshift/router/pull/532) * [OCPBUGS-17766](https://issues.redhat.com/browse/OCPBUGS-17766): haproxy/template: mitigate CVE-2023-40225 [#507](https://github.com/openshift/router/pull/507) * [OCPBUGS-18639](https://issues.redhat.com/browse/OCPBUGS-18639): properly handle weight=0 [#511](https://github.com/openshift/router/pull/511) * [OCPBUGS-14454](https://issues.redhat.com/browse/OCPBUGS-14454), [OCPBUGS-14455](https://issues.redhat.com/browse/OCPBUGS-14455): Handle mTLS CRLs, and fix accidental CRL duplication [#491](https://github.com/openshift/router/pull/491) * Updating ose-haproxy-router-base images to be consistent with ART [#424](https://github.com/openshift/router/pull/424) * [Bug 2107462](https://bugzilla.redhat.com/show_bug.cgi?id=2107462): Update CGO_ENABLED=1 [#423](https://github.com/openshift/router/pull/423) * [NE-1071](https://issues.redhat.com/browse/NE-1071): Default HAProxy maxconn value to 50000 for OCP 4.12 [#417](https://github.com/openshift/router/pull/417) * [OCPBUGS-1730](https://issues.redhat.com/browse/OCPBUGS-1730): Bump vendored K8S libraries to 1.25.2 [#421](https://github.com/openshift/router/pull/421) * Updating openshift-enterprise-haproxy-router images to be consistent with ART [#411](https://github.com/openshift/router/pull/411) * Updating ose-haproxy-router-base images to be consistent with ART [#410](https://github.com/openshift/router/pull/410) * [Full changelog](https://github.com/openshift/router/compare/60fb6ea5d782172ea2dc3eadf74b90b5e9022cc8...29b4ae9821d4985dfdd147ea2b2f54a7cb68d90f) ### [hypershift](https://github.com/openshift/hypershift/tree/6f1e70162329ed38cb7e58622fc79955e4338f02) * [MULTIARCH-3709](https://issues.redhat.com/browse/MULTIARCH-3709): PowerVS - Add reuse resource flags to e2e test [#2994](https://github.com/openshift/hypershift/pull/2994) * [MULTIARCH-3732](https://issues.redhat.com/browse/MULTIARCH-3732): PowerVS - Fix cluster deletion when existing resources passed [#2993](https://github.com/openshift/hypershift/pull/2993) * [MULTIARCH-3733](https://issues.redhat.com/browse/MULTIARCH-3733): Add dev flags in destroy cluster powervs command [#2998](https://github.com/openshift/hypershift/pull/2998) * Updated secret permissions for openshift-route-controller-manager [#2924](https://github.com/openshift/hypershift/pull/2924) * fix(hcco): Add HCP label to HCCO by default [#2972](https://github.com/openshift/hypershift/pull/2972) * fix(ignition): Add HCP label to ignition-server by default [#2949](https://github.com/openshift/hypershift/pull/2949) * [OCPBUGS-16847](https://issues.redhat.com/browse/OCPBUGS-16847): use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort [#2855](https://github.com/openshift/hypershift/pull/2855) * [release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount patch2 [#2803](https://github.com/openshift/hypershift/pull/2803) * [OCPBUGS-16411](https://issues.redhat.com/browse/OCPBUGS-16411): fix deletion bug when hostedzone is already deleted [#2835](https://github.com/openshift/hypershift/pull/2835) * Kas policy 4.12 [#2826](https://github.com/openshift/hypershift/pull/2826) * Leader election config update. [#2800](https://github.com/openshift/hypershift/pull/2800) * [OCPBUGS-15614](https://issues.redhat.com/browse/OCPBUGS-15614): Check OwningIngressController also in Labels [#2759](https://github.com/openshift/hypershift/pull/2759) * [OCPBUGS-16086](https://issues.redhat.com/browse/OCPBUGS-16086): autoscaling balance similar groups [#2806](https://github.com/openshift/hypershift/pull/2806) * [HOSTEDCP-1060](https://issues.redhat.com/browse/HOSTEDCP-1060): refactor ignition-server reconcilation and add ignition-server proxy [#2749](https://github.com/openshift/hypershift/pull/2749) * [OCPBUGS-14873](https://issues.redhat.com/browse/OCPBUGS-14873): Update vendored openshift API for 4.12 [#2734](https://github.com/openshift/hypershift/pull/2734) * [HOSTEDCP-1073](https://issues.redhat.com/browse/HOSTEDCP-1073): enforce blocked rollout of HCP [#2745](https://github.com/openshift/hypershift/pull/2745) * properly handle user CA bundle not existing [#2711](https://github.com/openshift/hypershift/pull/2711) * [OCPBUGS-15304](https://issues.redhat.com/browse/OCPBUGS-15304): [release-4.12] fix(oauth): Do not proxy IBM Cloud IAM endpoints [#2695](https://github.com/openshift/hypershift/pull/2695) * [OCPBUGS-14873](https://issues.redhat.com/browse/OCPBUGS-14873): Honor global ingress configuration LoadBalancer type on AWS [#2678](https://github.com/openshift/hypershift/pull/2678) * [OCPBUGS-14803](https://issues.redhat.com/browse/OCPBUGS-14803): Set `DisableStrictZoneCheck = true` in the AWS Cloud Provider config [#2667](https://github.com/openshift/hypershift/pull/2667) * [release 4.12] OCPBUGS-11555: OAuth OpenShift deployment requires ConfigMap mount [#2512](https://github.com/openshift/hypershift/pull/2512) * [OCPBUGS-14156](https://issues.redhat.com/browse/OCPBUGS-14156): Reconcile oauthDeployment annotations even if kubeadmin secret is not found [#2614](https://github.com/openshift/hypershift/pull/2614) * [OCPBUGS-14031](https://issues.redhat.com/browse/OCPBUGS-14031): Include default ingress CA in root CA bundle [#2600](https://github.com/openshift/hypershift/pull/2600) * [OCPBUGS-13626](https://issues.redhat.com/browse/OCPBUGS-13626): Sync proxy TrustedCA to guest cluster [#2557](https://github.com/openshift/hypershift/pull/2557) * [OCPBUGS-13639](https://issues.redhat.com/browse/OCPBUGS-13639): Cherry pick aws endpoint sg [#2579](https://github.com/openshift/hypershift/pull/2579) * [OCPBUGS-12787](https://issues.redhat.com/browse/OCPBUGS-12787): fix(hcco): Get OLM CatalogSource images from defined map [#2485](https://github.com/openshift/hypershift/pull/2485) * ACM-5173 [backport 4.12] get pull secret instead of dockerconfigjson from mce credentials [#2486](https://github.com/openshift/hypershift/pull/2486) * Configurable SRE MetricsSet [#2545](https://github.com/openshift/hypershift/pull/2545) * [OCPBUGS-13077](https://issues.redhat.com/browse/OCPBUGS-13077): Ensure ingress controllers are removed before load balancers [#2515](https://github.com/openshift/hypershift/pull/2515) * [OCPBUGS-11544](https://issues.redhat.com/browse/OCPBUGS-11544): Pass runAsUser to CNO so it can run its managed services with proper security context [#2391](https://github.com/openshift/hypershift/pull/2391) * [OCPBUGS-12845](https://issues.redhat.com/browse/OCPBUGS-12845): Delete kubeadmin secret when an idp is defined [#2492](https://github.com/openshift/hypershift/pull/2492) * [OCPBUGS-12738](https://issues.redhat.com/browse/OCPBUGS-12738): Pass OPENSHIFT_RELEASE_IMAGE env variable to CNO [#2473](https://github.com/openshift/hypershift/pull/2473) * [OCPBUGS-12199](https://issues.redhat.com/browse/OCPBUGS-12199): remove ACL for aws bucket [#2458](https://github.com/openshift/hypershift/pull/2458) * [OCPBUGS-11607](https://issues.redhat.com/browse/OCPBUGS-11607): properly reconcile with user specified changes for in proxy configuration [#2395](https://github.com/openshift/hypershift/pull/2395) * [OCPBUGS-11726](https://issues.redhat.com/browse/OCPBUGS-11726): Update HostedCluster oauthCallbackURLTemplate [#2410](https://github.com/openshift/hypershift/pull/2410) * e2e: Cleanup shared OIDC provider on SIGTERM [#2449](https://github.com/openshift/hypershift/pull/2449) * [HOSTEDCP-568](https://issues.redhat.com/browse/HOSTEDCP-568): Update Konnectiviy socks5 proxy for IBM exception [#2406](https://github.com/openshift/hypershift/pull/2406) * [OCPBUGS-10584](https://issues.redhat.com/browse/OCPBUGS-10584): Switch NTO metrics auth to certs generated by HCP controller [#2293](https://github.com/openshift/hypershift/pull/2293) * [OCPBUGS-11014](https://issues.redhat.com/browse/OCPBUGS-11014): Do not proxy when guest cluster resolution fails [#2340](https://github.com/openshift/hypershift/pull/2340) * [OCPBUGS-11654](https://issues.redhat.com/browse/OCPBUGS-11654): [release-4.12] Create new EC2 client for AWS identity provider health check [#2403](https://github.com/openshift/hypershift/pull/2403) * [OCPBUGS-10646](https://issues.redhat.com/browse/OCPBUGS-10646): Add storage operators perms. to watch HostedControlPlane [#2306](https://github.com/openshift/hypershift/pull/2306) * [HOSTEDCP-939](https://issues.redhat.com/browse/HOSTEDCP-939): [release-4.12] Setup shared OIDC provider for e2e clusters [#2365](https://github.com/openshift/hypershift/pull/2365) * [HOSTEDCP-806](https://issues.redhat.com/browse/HOSTEDCP-806): Fix ValidAWSKMSConfig condition [#2362](https://github.com/openshift/hypershift/pull/2362) * [OCPBUGS-11056](https://issues.redhat.com/browse/OCPBUGS-11056): fix external APIServer address selection based on endpointAccess [#2350](https://github.com/openshift/hypershift/pull/2350) * OCPBUGS-10823 ensure well known public domains do not get proxied on image imports [#2351](https://github.com/openshift/hypershift/pull/2351) * [SDA-8707](https://issues.redhat.com/browse/SDA-8707): No more specifying the scrape interval at servicemonitors & podmonitors level [#2356](https://github.com/openshift/hypershift/pull/2356) * [HOSTEDCP-900](https://issues.redhat.com/browse/HOSTEDCP-900): Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field [#2285](https://github.com/openshift/hypershift/pull/2285) * [OCPBUGS-10504](https://issues.redhat.com/browse/OCPBUGS-10504): Deletion of the VPCEnpoint on conflicting service names [#2310](https://github.com/openshift/hypershift/pull/2310) * [HOSTEDCP-806](https://issues.redhat.com/browse/HOSTEDCP-806): [release-4.12] Validate etcd KMS config [#2273](https://github.com/openshift/hypershift/pull/2273) * [HOSTEDCP-801](https://issues.redhat.com/browse/HOSTEDCP-801): [release-4.12] Expose external DNS for private cluster endpoints [#2314](https://github.com/openshift/hypershift/pull/2314) * [HOSTEDCP-839](https://issues.redhat.com/browse/HOSTEDCP-839): Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver [#2297](https://github.com/openshift/hypershift/pull/2297) * [OCPBUGS-10587](https://issues.redhat.com/browse/OCPBUGS-10587): Use appropriate serving certificate for OAuth [#2295](https://github.com/openshift/hypershift/pull/2295) * [OSD-15099](https://issues.redhat.com/browse/OSD-15099): Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed [#2274](https://github.com/openshift/hypershift/pull/2274) * Add PodMonitor for ingress-operator pods in HCP namespaces [#2275](https://github.com/openshift/hypershift/pull/2275) * [OCPBUGS-8334](https://issues.redhat.com/browse/OCPBUGS-8334): [release-4.12] Update the pull secret source for ignition payload [#2268](https://github.com/openshift/hypershift/pull/2268) * Force controleplane upgrade always [#2289](https://github.com/openshift/hypershift/pull/2289) * [OCPBUGS-8370](https://issues.redhat.com/browse/OCPBUGS-8370): Fix cleanup of volumes on cluster deletion [#2253](https://github.com/openshift/hypershift/pull/2253) * [OCPBUGS-8241](https://issues.redhat.com/browse/OCPBUGS-8241): Add external DNS health condition / release-4.12 [#2206](https://github.com/openshift/hypershift/pull/2206) * [HOSTEDCP-809](https://issues.redhat.com/browse/HOSTEDCP-809): Clone CA key/cert to TLS key/cert [#2263](https://github.com/openshift/hypershift/pull/2263) * Add configuration for automatic labeling and label commands [#2255](https://github.com/openshift/hypershift/pull/2255) * fix(cpo): Delete multus validatingwebhookconfiguration on CNO init [#2251](https://github.com/openshift/hypershift/pull/2251) * feat(HCCO): Block DNS operator delete until Cluster Version updated [#2242](https://github.com/openshift/hypershift/pull/2242) * kms addition for pod identity workflow [#2247](https://github.com/openshift/hypershift/pull/2247) * Add e2e test for hosted cluster behind a proxy [#2199](https://github.com/openshift/hypershift/pull/2199) * Add e2e test for cluster creation with AWS KMS [#2201](https://github.com/openshift/hypershift/pull/2201) * [HOSTEDCP-826](https://issues.redhat.com/browse/HOSTEDCP-826): Customize DNS base domain prefix [#2235](https://github.com/openshift/hypershift/pull/2235) * feat: Add pod gone check to prober + DNS operator leader elect [#2209](https://github.com/openshift/hypershift/pull/2209) * fix(ibmcloud): Explicitly set HCCO controllers [#2208](https://github.com/openshift/hypershift/pull/2208) * ensure reconcilation of apiserver port is in 4.12 [#2195](https://github.com/openshift/hypershift/pull/2195) * Cleanup default security group only if authorized [#2212](https://github.com/openshift/hypershift/pull/2212) * fix(cpo): Set restart annotation on multus-admission-controller [#2190](https://github.com/openshift/hypershift/pull/2190) * fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac [#2189](https://github.com/openshift/hypershift/pull/2189) * fix(cpo): Reduce CNO access if Calico used as network provider [#2184](https://github.com/openshift/hypershift/pull/2184) * Skip destroyAWSDefaultSecurityGroup if not AWS [#2168](https://github.com/openshift/hypershift/pull/2168) * Create default security group for AWS clusters [#2162](https://github.com/openshift/hypershift/pull/2162) * [AUTH-323](https://issues.redhat.com/browse/AUTH-323): pki: split out konnectivity certs from the rootCA [#2156](https://github.com/openshift/hypershift/pull/2156) * fix(ibmcloud): Initialize image registry config on creates and bad config [#2104](https://github.com/openshift/hypershift/pull/2104) * fix(cpo): Allow KAS profiling disablement [#2122](https://github.com/openshift/hypershift/pull/2122) * reduce ignition server scope [#2140](https://github.com/openshift/hypershift/pull/2140) * OpenID add support for groups claim in the config [#2129](https://github.com/openshift/hypershift/pull/2129) * fix(cpo): Restart registry operator on annotation [#2121](https://github.com/openshift/hypershift/pull/2121) * Fix CAPA crd generation [#2120](https://github.com/openshift/hypershift/pull/2120) * Set k8s.io/kubernetes dependency to v0.23.3 [#2118](https://github.com/openshift/hypershift/pull/2118) * fix(cpo): Separate RBAC for NTO + CNO [#2112](https://github.com/openshift/hypershift/pull/2112) * Merge main up to db7c22ae into 'release-4.12' [#2101](https://github.com/openshift/hypershift/pull/2101) * Merge main into release-4.12 branch [#2053](https://github.com/openshift/hypershift/pull/2053) * Release 4.12 rebase latest [#2047](https://github.com/openshift/hypershift/pull/2047) * Fix OpenID OAuth config parsing [#2029](https://github.com/openshift/hypershift/pull/2029) * Fast foward release-4.12 to main [#2003](https://github.com/openshift/hypershift/pull/2003) * [OCPBUGS-5133](https://issues.redhat.com/browse/OCPBUGS-5133): Reinstate hosted cluster configuration propagation [#1981](https://github.com/openshift/hypershift/pull/1981) * Remove CAPA command from deployment [#1970](https://github.com/openshift/hypershift/pull/1970) * Fast forward release-4.12 to main [#1964](https://github.com/openshift/hypershift/pull/1964) * Remove CAPI manager container command path [#1969](https://github.com/openshift/hypershift/pull/1969) * v1beta1: add missing S3 publishing strategy type [#1968](https://github.com/openshift/hypershift/pull/1968) * Fast forward 'release-4.12' branch to 'main' [#1932](https://github.com/openshift/hypershift/pull/1932) * [SDN-3508](https://issues.redhat.com/browse/SDN-3508): Add proxy env variables to CNO deployment [#1845](https://github.com/openshift/hypershift/pull/1845) * [MCO-258](https://issues.redhat.com/browse/MCO-258): inplaceupgrader: handle multiple upgrade versions [#1810](https://github.com/openshift/hypershift/pull/1810) * PowerVS Refactor docs - bug fixes [#1825](https://github.com/openshift/hypershift/pull/1825) * Docs: add nodes for InPlace Upgrade NodePools [#1805](https://github.com/openshift/hypershift/pull/1805) * network: Use non default ovn-k V4InternalSubnet at tenant [#1783](https://github.com/openshift/hypershift/pull/1783) * Adds davidvossel as approver [#1833](https://github.com/openshift/hypershift/pull/1833) * NodePool API: rename spec.tunedConfig to spec.tuningConfig [#1802](https://github.com/openshift/hypershift/pull/1802) * reduce konnectivity-agent log verbosity [#1828](https://github.com/openshift/hypershift/pull/1828) * add HC available duration metric [#1829](https://github.com/openshift/hypershift/pull/1829) * aws: use gp3-csi storage class by default [#1830](https://github.com/openshift/hypershift/pull/1830) * add note for public zone creation doc [#1827](https://github.com/openshift/hypershift/pull/1827) * PowerVS: Bug fix on flags usage [#1812](https://github.com/openshift/hypershift/pull/1812) * Clean up AWS endpointAccess + servicePublishingStrategy logic [#1803](https://github.com/openshift/hypershift/pull/1803) * Ensure kubevirt-csi containers all have resource.Requests and PullPolicy set [#1816](https://github.com/openshift/hypershift/pull/1816) * Add custom types for enum fields in PowerVSNodePoolPlatform [#1809](https://github.com/openshift/hypershift/pull/1809) * Updated Agent provider docs [#1814](https://github.com/openshift/hypershift/pull/1814) * Add KubeVirt Platform Owners [#1817](https://github.com/openshift/hypershift/pull/1817) * Add comments to clarify aws endpoints controllers [#1808](https://github.com/openshift/hypershift/pull/1808) * Fixing some doc typos and issues [#1742](https://github.com/openshift/hypershift/pull/1742) * KubeVirt CSI Driver Integration [#1733](https://github.com/openshift/hypershift/pull/1733) * feat: Added "Scale dataplane to zero" workflow to the documentation [#1804](https://github.com/openshift/hypershift/pull/1804) * [STOR-1040](https://issues.redhat.com/browse/STOR-1040): Render AWS CSI Driver credentials in the mgmt cluster [#1751](https://github.com/openshift/hypershift/pull/1751) * bug: Fixes HOSTEDCP-528, OIDCConfigurationInvalidReason should be always present [#1743](https://github.com/openshift/hypershift/pull/1743) * Extracts correct mco image based on managed cluster's arch [#1716](https://github.com/openshift/hypershift/pull/1716) * Fix image registry reconcile loop [#1794](https://github.com/openshift/hypershift/pull/1794) * Add CAPI provider image override for PowerVS [#1800](https://github.com/openshift/hypershift/pull/1800) * bug: HOSTEDCP-587 explain more in detail Public and PublicAndPrivate endpoint-access [#1788](https://github.com/openshift/hypershift/pull/1788) * Enable NodePool controller to apply generated MachineConfigs [#1729](https://github.com/openshift/hypershift/pull/1729) * Allow certain EndpointAccess transitions [#1761](https://github.com/openshift/hypershift/pull/1761) * increase loop detector threshold to 10 [#1801](https://github.com/openshift/hypershift/pull/1801) * Remove KubeletConfig & ContainerRuntimeConfig CRDs [#1775](https://github.com/openshift/hypershift/pull/1775) * HCCO: inplace upgrade: do not reconcile bare upgrade pod [#1799](https://github.com/openshift/hypershift/pull/1799) * Fix recreate issue on serviceID - MULTIARCH-2895 [#1753](https://github.com/openshift/hypershift/pull/1753) * Add compute and memory args for powervs e2e [#1797](https://github.com/openshift/hypershift/pull/1797) * test: e2e: exclude catalog pods from restart check [#1798](https://github.com/openshift/hypershift/pull/1798) * Update Dockerfiles for consistency [#1795](https://github.com/openshift/hypershift/pull/1795) * Make NodePool platform condition types generic [#1792](https://github.com/openshift/hypershift/pull/1792) * Ensure existing DHCP server is in ACTIVE state [#1784](https://github.com/openshift/hypershift/pull/1784) * Update Dockerfile with same labels as Dockerfile.control-plane [#1791](https://github.com/openshift/hypershift/pull/1791) * Expose HC NodeSelector in the cli [#1759](https://github.com/openshift/hypershift/pull/1759) * Add recording rule for NTO metric needed in telemetry [#1763](https://github.com/openshift/hypershift/pull/1763) * Use separate image for route controller manager [#1790](https://github.com/openshift/hypershift/pull/1790) * How to Migrate a HostedClusters among the same AWS Region [#1780](https://github.com/openshift/hypershift/pull/1780) * Update index.md. [#1535](https://github.com/openshift/hypershift/pull/1535) * Decompress and decode config if supported by current CPO [#1758](https://github.com/openshift/hypershift/pull/1758) * update OLM catalogs to 4.11 [#1746](https://github.com/openshift/hypershift/pull/1746) * Add image overrides [#1785](https://github.com/openshift/hypershift/pull/1785) * Specify ca for gitlab oauth only when passed as input [#1772](https://github.com/openshift/hypershift/pull/1772) * [STOR-1053](https://issues.redhat.com/browse/STOR-1053): Add storage objects to guest cluster dump [#1770](https://github.com/openshift/hypershift/pull/1770) * Add cloud.ibm.com into konnectivity cloudAPI [#1741](https://github.com/openshift/hypershift/pull/1741) * Add fallback for mco flags [#1781](https://github.com/openshift/hypershift/pull/1781) * Pass imagerefs to mco [#1773](https://github.com/openshift/hypershift/pull/1773) * install: add flag to wait for HyperShift operator rollout [#1760](https://github.com/openshift/hypershift/pull/1760) * gzip and base64-encode ignition configs [#1671](https://github.com/openshift/hypershift/pull/1671) * Add separate deployment for openshift route controller manager [#1756](https://github.com/openshift/hypershift/pull/1756) * Add release image validation for NodePools [#1709](https://github.com/openshift/hypershift/pull/1709) * Fix cmd.Context() usage in PowerVS [#1754](https://github.com/openshift/hypershift/pull/1754) * Refactor how-to docs [#1740](https://github.com/openshift/hypershift/pull/1740) * Increase DHCP service polling interval [#1739](https://github.com/openshift/hypershift/pull/1739) * Add Kubevirt Cloud Controller Manager [#1725](https://github.com/openshift/hypershift/pull/1725) * Ensure generated junit.xml has a defined suite name [#1712](https://github.com/openshift/hypershift/pull/1712) * Add cluster name prefix before secrets [#1730](https://github.com/openshift/hypershift/pull/1730) * [SDN-3283](https://issues.redhat.com/browse/SDN-3283): CNO: Add an environment variable with socks5-proxy image [#1731](https://github.com/openshift/hypershift/pull/1731) * Revert "Make zone spread only apply within a given revision" [#1744](https://github.com/openshift/hypershift/pull/1744) * remove alvaroaleman and ironcladlou from OWNERS [#1745](https://github.com/openshift/hypershift/pull/1745) * Make zone spread only apply within a given revision [#1724](https://github.com/openshift/hypershift/pull/1724) * Route LDAP IDPs in the oauth server through guest VPC [#1680](https://github.com/openshift/hypershift/pull/1680) * Add missing rbac for authentication reader [#1734](https://github.com/openshift/hypershift/pull/1734) * Add nodepool create cmd for PowerVS [#1726](https://github.com/openshift/hypershift/pull/1726) * Add PowerVS OVN Kube routing config [#1718](https://github.com/openshift/hypershift/pull/1718) * Add granular access for PowerVS using cloud credential operator and add storage operator creds [#1612](https://github.com/openshift/hypershift/pull/1612) * Enable Node Tuning Operator in HyperShift [#1651](https://github.com/openshift/hypershift/pull/1651) * Refactor PowerVS changes [#1682](https://github.com/openshift/hypershift/pull/1682) * fix(oauth): Do not proxy IBM Cloud IAM endpoints [#1722](https://github.com/openshift/hypershift/pull/1722) * Bug SDN-3459: Handle long OVN SBDB route hostname [#1711](https://github.com/openshift/hypershift/pull/1711) * fix(pki): Allow BYO PKI for ignition server [#1721](https://github.com/openshift/hypershift/pull/1721) * Set DNS server explicitly while creating DHCP [#1720](https://github.com/openshift/hypershift/pull/1720) * Fix CLI panic when status.version is nil [#1715](https://github.com/openshift/hypershift/pull/1715) * OVN SBDB: Use private router when possible [#1689](https://github.com/openshift/hypershift/pull/1689) * Registry operator: Avoid restarts when token file changes [#1713](https://github.com/openshift/hypershift/pull/1713) * HO: Ignore NoSuchBucket error when deleting OIDC docs [#1714](https://github.com/openshift/hypershift/pull/1714) * Add a drain controller for inplace upgrades [#1691](https://github.com/openshift/hypershift/pull/1691) * Reconcile default ingress controller on creation only [#1710](https://github.com/openshift/hypershift/pull/1710) * [NE-1043](https://issues.redhat.com/browse/NE-1043): Move the DNS operator into the management cluster [#1537](https://github.com/openshift/hypershift/pull/1537) * Add node controller to HCCO Manager [#1702](https://github.com/openshift/hypershift/pull/1702) * Add recording rules for telemetry [#1690](https://github.com/openshift/hypershift/pull/1690) * Destroy: Don't fail if finalizer can not be added [#1707](https://github.com/openshift/hypershift/pull/1707) * Upgrade AWS SDK [#1701](https://github.com/openshift/hypershift/pull/1701) * Use kubeconfig port for worker haproxy [#1708](https://github.com/openshift/hypershift/pull/1708) * Set right API group [#1706](https://github.com/openshift/hypershift/pull/1706) * AWS infra destroy: Handle bucket not found during batch delete [#1700](https://github.com/openshift/hypershift/pull/1700) * Cleanup etcd rule manifest in CVO [#1699](https://github.com/openshift/hypershift/pull/1699) * Oauth: Fix hostname when using DNS indirection and no public router LB [#1705](https://github.com/openshift/hypershift/pull/1705) * Fix clusters where apiserver is exposed through LB and DNS indirection is used [#1696](https://github.com/openshift/hypershift/pull/1696) * Update external-dns image [#1694](https://github.com/openshift/hypershift/pull/1694) * Move Cloud network config controller to the management cluster [#1679](https://github.com/openshift/hypershift/pull/1679) * Allow OpenShiftSDN CNI for PowerVS platform [#1693](https://github.com/openshift/hypershift/pull/1693) * Add CIDR checks to webhook on create [#1688](https://github.com/openshift/hypershift/pull/1688) * Fix clusters that use LB expose strategy with a custom port [#1683](https://github.com/openshift/hypershift/pull/1683) * Validate OCP release version and SDN on initial install [#1686](https://github.com/openshift/hypershift/pull/1686) * Reconcile spec of clusterversion resource [#1687](https://github.com/openshift/hypershift/pull/1687) * APIServer route expose strategy: Fix with private clusters [#1685](https://github.com/openshift/hypershift/pull/1685) * remove external-dns provider variable from openshift template parameters [#1684](https://github.com/openshift/hypershift/pull/1684) * E2E: Fix flakes due to inability of finding matching nodepools [#1681](https://github.com/openshift/hypershift/pull/1681) * Enable cleaning up of hosted cluster cloud resources on destroy [#1672](https://github.com/openshift/hypershift/pull/1672) * ClusterID and infraID should be immutable. [#1660](https://github.com/openshift/hypershift/pull/1660) * Correctly manage infra status condition when there is no LB controller [#1678](https://github.com/openshift/hypershift/pull/1678) * Fix Switch to library-go to compute audit profile audit policy [#1677](https://github.com/openshift/hypershift/pull/1677) * Add IBMPowerVSCluster to status subresource set [#1676](https://github.com/openshift/hypershift/pull/1676) * OAuth: do not reference paths for empty optional secrets or configmaps [#1674](https://github.com/openshift/hypershift/pull/1674) * Honor the debug-deployments annotation [#1673](https://github.com/openshift/hypershift/pull/1673) * Ignition server: Use common pki code [#1657](https://github.com/openshift/hypershift/pull/1657) * Fix router reconciliation when apiserver is exposed through LB [#1669](https://github.com/openshift/hypershift/pull/1669) * E2E: Consistently use Patch to avoid conflict failures [#1664](https://github.com/openshift/hypershift/pull/1664) * Fix e2e powervs destroy opts [#1650](https://github.com/openshift/hypershift/pull/1650) * Drop insecure port on router to save rules [#1668](https://github.com/openshift/hypershift/pull/1668) * external-dns settings for operator install template rendering [#1666](https://github.com/openshift/hypershift/pull/1666) * PowerVS: Add provider id fmt for capi deployment [#1665](https://github.com/openshift/hypershift/pull/1665) * Registry operator: Set proxy vars [#1663](https://github.com/openshift/hypershift/pull/1663) * A few simple kubebuilder validations. [#1658](https://github.com/openshift/hypershift/pull/1658) * Ingress endpoint [#1597](https://github.com/openshift/hypershift/pull/1597) * Add rbac so route-to-ingress controller can do its leader election [#1662](https://github.com/openshift/hypershift/pull/1662) * Move image registry operator to control plane [#1643](https://github.com/openshift/hypershift/pull/1643) * CI script to install hypershift from pre-release MCE catalog source [#1648](https://github.com/openshift/hypershift/pull/1648) * Add a helper to create SA kubeconfigs [#1654](https://github.com/openshift/hypershift/pull/1654) * HCCO: Use cpo manifests for references [#1645](https://github.com/openshift/hypershift/pull/1645) * Increase the unittest timeout to 20m from the default 10m [#1653](https://github.com/openshift/hypershift/pull/1653) * Add unittests for haproxy config generation [#1652](https://github.com/openshift/hypershift/pull/1652) * Drop hypershift-operator util and consolidate with support [#1647](https://github.com/openshift/hypershift/pull/1647) * HO: Fix haproxy to have apiserver external address for public clusters [#1649](https://github.com/openshift/hypershift/pull/1649) * Self image lookup: Retry on empty string [#1628](https://github.com/openshift/hypershift/pull/1628) * private aws cluster guide - update IAM policy example [#1641](https://github.com/openshift/hypershift/pull/1641) * [Full changelog](https://github.com/openshift/hypershift/compare/da0a576c1cdd3f3d4bbd7b3540bf6ac843fa4483...6f1e70162329ed38cb7e58622fc79955e4338f02) ### [insights-operator](https://github.com/openshift/insights-operator/tree/6b543885144d6eb40c7c8342dac15f80e77bb4fa) * [OCPBUGS-32004](https://issues.redhat.com/browse/OCPBUGS-32004): bump golang.org/x/net version (#932) [#932](https://github.com/openshift/insights-operator/pull/932) * [OCPBUGS-28519](https://issues.redhat.com/browse/OCPBUGS-28519): Add extra check in ids to bypass validations (#906) [#906](https://github.com/openshift/insights-operator/pull/906) * adds helm information gather (#890) [#890](https://github.com/openshift/insights-operator/pull/890) * [OCPBUGS-23439](https://issues.redhat.com/browse/OCPBUGS-23439): remove username & password config options (#869) [#869](https://github.com/openshift/insights-operator/pull/869) * [OCPBUGS-22922](https://issues.redhat.com/browse/OCPBUGS-22922): create Prometheus rules programmatically according the… (#860) (#862) [#860](https://github.com/openshift/insights-operator/pull/860) * [OCPBUGS-20731](https://issues.redhat.com/browse/OCPBUGS-20731): update dependencies (#841) [#841](https://github.com/openshift/insights-operator/pull/841) * Add cherry-pick from 4.13 (#853) [#853](https://github.com/openshift/insights-operator/pull/853) * [OCPBUGS-19476](https://issues.redhat.com/browse/OCPBUGS-19476): update Insights report config logging (#831) [#831](https://github.com/openshift/insights-operator/pull/831) * [OCPBUGS-19405](https://issues.redhat.com/browse/OCPBUGS-19405): workload info gatherer, add external image repo (#823) [#823](https://github.com/openshift/insights-operator/pull/823) * [OCPBUGS-15031](https://issues.redhat.com/browse/OCPBUGS-15031): fix the config serialization & add test (#794) (#800) [#794](https://github.com/openshift/insights-operator/pull/794) * [OCPBUGS-15459](https://issues.redhat.com/browse/OCPBUGS-15459): gather PDBs only from openshift namespaces (#804) [#804](https://github.com/openshift/insights-operator/pull/804) * [OCPBUGS-15414](https://issues.redhat.com/browse/OCPBUGS-15414): extend configmap gatherer to get gateway-mode-config (#788) (#791) (#801) [#788](https://github.com/openshift/insights-operator/pull/788) * [OCPBUGS-7871](https://issues.redhat.com/browse/OCPBUGS-7871): Collect info about monitoring pods pv (#769) [#769](https://github.com/openshift/insights-operator/pull/769) * [OCPBUGS-11008](https://issues.redhat.com/browse/OCPBUGS-11008): update the cluster transfer interval to 12h (#765) [#765](https://github.com/openshift/insights-operator/pull/765) * [OCPBUGS-10531](https://issues.redhat.com/browse/OCPBUGS-10531): service_accounts.go Marshal fix (#754) [#754](https://github.com/openshift/insights-operator/pull/754) * [OCPBUGS-6732](https://issues.redhat.com/browse/OCPBUGS-6732): Anonymize env vars from containers: HTTP_PROXY, HTTPS_PROXY (#727) [#727](https://github.com/openshift/insights-operator/pull/727) * [OCPBUGS-6833](https://issues.redhat.com/browse/OCPBUGS-6833): feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#736) [#736](https://github.com/openshift/insights-operator/pull/736) * [OCPBUGS-6782](https://issues.redhat.com/browse/OCPBUGS-6782): Create gatherer for gathering machines. (#734) [#734](https://github.com/openshift/insights-operator/pull/734) * [OCPBUGS-5976](https://issues.redhat.com/browse/OCPBUGS-5976): operators gatherer - handle ingresscontroller relatedObject & simplify (#714) (#719) [#714](https://github.com/openshift/insights-operator/pull/714) * [OCPBUGS-5348](https://issues.redhat.com/browse/OCPBUGS-5348): do not periodically update Available clusteroperator co… (#710) [#710](https://github.com/openshift/insights-operator/pull/710) * do not get disabled rules (#706) (#713) [#706](https://github.com/openshift/insights-operator/pull/706) * [OCPBUGS-3377](https://issues.redhat.com/browse/OCPBUGS-3377): fix: storage/ceph path structure (#691) (#697) [#691](https://github.com/openshift/insights-operator/pull/691) * [OCPBUGS-2915](https://issues.redhat.com/browse/OCPBUGS-2915): Updated info link in insights recommendations (#683) [#683](https://github.com/openshift/insights-operator/pull/683) * refactor(workloads_info): improving code reability (#650) [#650](https://github.com/openshift/insights-operator/pull/650) * [OCPBUGS-2249](https://issues.redhat.com/browse/OCPBUGS-2249): fix the schema checking conditional gathering rules (#687) [#687](https://github.com/openshift/insights-operator/pull/687) * Improve GatherNodeLogs docs (#690) [#690](https://github.com/openshift/insights-operator/pull/690) * Update owners list (#688) [#688](https://github.com/openshift/insights-operator/pull/688) * [OCPBUGS-2346](https://issues.redhat.com/browse/OCPBUGS-2346): refactor(dvo_metrics): remove name and namespace from dvo metrics (#685) [#685](https://github.com/openshift/insights-operator/pull/685) * limit the size of logs loaded into memory (#681) [#681](https://github.com/openshift/insights-operator/pull/681) * Updating ose-insights-operator images to be consistent with ART (#682) [#682](https://github.com/openshift/insights-operator/pull/682) * read DataPolicy attribute from the config API (#680) [#680](https://github.com/openshift/insights-operator/pull/680) * Update PNCC gatherer (#679) [#679](https://github.com/openshift/insights-operator/pull/679) * [OCPBUGS-1351](https://issues.redhat.com/browse/OCPBUGS-1351): do not include disabled rules in the total metric (#678) [#678](https://github.com/openshift/insights-operator/pull/678) * updated conditional gathering rules checking (#670) [#670](https://github.com/openshift/insights-operator/pull/670) * read new config API and disable gatherers based on the API values (#673) [#673](https://github.com/openshift/insights-operator/pull/673) * [OCPBUGS-1068](https://issues.redhat.com/browse/OCPBUGS-1068): fix alert namespace label (#674) [#674](https://github.com/openshift/insights-operator/pull/674) * Implement insights report updating in the insightsoperators.operator.openshift.io resource (#669) [#669](https://github.com/openshift/insights-operator/pull/669) * K8s & OpenShift version updates (#671) [#671](https://github.com/openshift/insights-operator/pull/671) * manifests/02-namespace: Explicitly clear run-level label (#672) [#672](https://github.com/openshift/insights-operator/pull/672) * openshift-machine-api warning events gatherer (#658) [#658](https://github.com/openshift/insights-operator/pull/658) * Introduce insightsoperators.openshift.io CR & implement its gather st… (#666) [#666](https://github.com/openshift/insights-operator/pull/666) * [OCPBUGS-439](https://issues.redhat.com/browse/OCPBUGS-439): update the DVO metrics gatherer (#664) [#664](https://github.com/openshift/insights-operator/pull/664) * fix: order conditions by type to limit un-needed updates (#667) [#667](https://github.com/openshift/insights-operator/pull/667) * chore(manifests): adding insights capability annotations (#646) [#646](https://github.com/openshift/insights-operator/pull/646) * Update K8s & OpenShift versions + vendoring (#661) [#661](https://github.com/openshift/insights-operator/pull/661) * helm upgrade and uninstall metric gathering (#657) [#657](https://github.com/openshift/insights-operator/pull/657) * Remove Bugzilla references (#660) [#660](https://github.com/openshift/insights-operator/pull/660) * Extend the conditional gatherer docs (#656) [#656](https://github.com/openshift/insights-operator/pull/656) * Gather status of the cephclusters.ceph.rook.io resources (#654) [#654](https://github.com/openshift/insights-operator/pull/654) * Enable Insights recommendations as alerts by default (#653) [#653](https://github.com/openshift/insights-operator/pull/653) * Gather & store firing alerts in JSON too (#652) [#652](https://github.com/openshift/insights-operator/pull/652) * Updating ose-insights-operator images to be consistent with ART (#649) [#649](https://github.com/openshift/insights-operator/pull/649) * Expose Insights recommendations as alerts (#644) [#644](https://github.com/openshift/insights-operator/pull/644) * Minor gatherer's docs & OWNERS update (#647) [#647](https://github.com/openshift/insights-operator/pull/647) * chore(docs): adding list of insights generated metrics (#645) [#645](https://github.com/openshift/insights-operator/pull/645) * [Full changelog](https://github.com/openshift/insights-operator/compare/325ecc86f380b8d4f8908e3cf9103e01079b497d...6b543885144d6eb40c7c8342dac15f80e77bb4fa) ### [ironic](https://github.com/openshift/ironic-image/tree/9a3e609e1e77bf07fada4dd39c5d563eaa165030) * [OCPBUGS-32362](https://issues.redhat.com/browse/OCPBUGS-32362): [4.12] remove unused prometheus-exporter [#489](https://github.com/openshift/ironic-image/pull/489) * [OCPBUGS-32386](https://issues.redhat.com/browse/OCPBUGS-32386): Use unix sockets by default for reverse proxy communication [#477](https://github.com/openshift/ironic-image/pull/477) * [OCPBUGS-29229](https://issues.redhat.com/browse/OCPBUGS-29229): Fix Inspector iPXE config for IPv6 addresses [#454](https://github.com/openshift/ironic-image/pull/454) * [OCPBUGS-23979](https://issues.redhat.com/browse/OCPBUGS-23979): Ironic side of external_http_url (METAL-163) is not wired in correctly [#431](https://github.com/openshift/ironic-image/pull/431) * [OCPBUGS-23357](https://issues.redhat.com/browse/OCPBUGS-23357): Upgrade werkzeug dependency [#423](https://github.com/openshift/ironic-image/pull/423) * [OCPBUGS-23182](https://issues.redhat.com/browse/OCPBUGS-23182): Use bash process substitution instead of pipe [#419](https://github.com/openshift/ironic-image/pull/419) * [OCPBUGS-19064](https://issues.redhat.com/browse/OCPBUGS-19064): Handle Eject DVD in 4.12 [#417](https://github.com/openshift/ironic-image/pull/417) * [OCPBUGS-21849](https://issues.redhat.com/browse/OCPBUGS-21849): bump eventlet version [#409](https://github.com/openshift/ironic-image/pull/409) * [OCPBUGS-17642](https://issues.redhat.com/browse/OCPBUGS-17642): Expand regex for fcos/okd packages list [#392](https://github.com/openshift/ironic-image/pull/392) * [OCPBUGS-16169](https://issues.redhat.com/browse/OCPBUGS-16169): allow inspector to also be proxied [#385](https://github.com/openshift/ironic-image/pull/385) * [OCPBUGS-13586](https://issues.redhat.com/browse/OCPBUGS-13586): Add python-flask dependency [#373](https://github.com/openshift/ironic-image/pull/373) * Bug OCPBUGS-13335: Bump ironic version to include fix to OCPBUGS-13335. [#367](https://github.com/openshift/ironic-image/pull/367) * [OCPBUGS-13041](https://issues.redhat.com/browse/OCPBUGS-13041): Bump python-sushy [#363](https://github.com/openshift/ironic-image/pull/363) * [OCPBUGS-7566](https://issues.redhat.com/browse/OCPBUGS-7566): Bump werkzeug 4.12 [#352](https://github.com/openshift/ironic-image/pull/352) * [OCPBUGS-5143](https://issues.redhat.com/browse/OCPBUGS-5143): Adding dosfstools and util-linux tools to ironic-image [#341](https://github.com/openshift/ironic-image/pull/341) * [OCPBUGS-5100](https://issues.redhat.com/browse/OCPBUGS-5100): Configure Ironic iLO driver to use web server [#339](https://github.com/openshift/ironic-image/pull/339) * [OCPBUGS-4789](https://issues.redhat.com/browse/OCPBUGS-4789): Update packages versions with latest available [#335](https://github.com/openshift/ironic-image/pull/335) * [OCPBUGS-4840](https://issues.redhat.com/browse/OCPBUGS-4840): Handle a different error code for missing TransferProtocolType [#334](https://github.com/openshift/ironic-image/pull/334) * Bug OCPBUGS-2052: Fix setting boot related attributes [#324](https://github.com/openshift/ironic-image/pull/324) * [OCPBUGS-4479](https://issues.redhat.com/browse/OCPBUGS-4479): fix: Add support for OKD/SCOS [#329](https://github.com/openshift/ironic-image/pull/329) * [OCPBUGS-4311](https://issues.redhat.com/browse/OCPBUGS-4311): Remove RDO distribution configuration (finally fixes #46) [#327](https://github.com/openshift/ironic-image/pull/327) * [OCPBUGS-4097](https://issues.redhat.com/browse/OCPBUGS-4097): Workaround for long time gap between operations in recent idrac [#322](https://github.com/openshift/ironic-image/pull/322) * [OCPBUGS-3111](https://issues.redhat.com/browse/OCPBUGS-3111): Don't save OS_ prefixed variables [#310](https://github.com/openshift/ironic-image/pull/310) * Bug OCPBUGS-3479: Improve resiliency of eTag handling [#315](https://github.com/openshift/ironic-image/pull/315) * Removed ServerName from VirtualHost Directives [#305](https://github.com/openshift/ironic-image/pull/305) * Sync with upstream metal3-io ironic-image 2022-09-29 [#301](https://github.com/openshift/ironic-image/pull/301) * [OCPBUGS-1799](https://issues.redhat.com/browse/OCPBUGS-1799): use brackets for IPv6 addresses in ironic-proxy [#300](https://github.com/openshift/ironic-image/pull/300) * Update sushy to 4.3.0 (Zed final) [#299](https://github.com/openshift/ironic-image/pull/299) * [Bug 2104275](https://bugzilla.redhat.com/show_bug.cgi?id=2104275): sync the ValueDisplayName fix [#296](https://github.com/openshift/ironic-image/pull/296) * Update ironic and ironic-inspector for OCP 4.12 [#293](https://github.com/openshift/ironic-image/pull/293) * Update dependencies for OCP 4.12 [#290](https://github.com/openshift/ironic-image/pull/290) * ironic-proxy: never validate TLS peer name [#292](https://github.com/openshift/ironic-image/pull/292) * [OCPBUGS-171](https://issues.redhat.com/browse/OCPBUGS-171): Fix IRONIC_EXTERNAL_IP when TLS is used for virtual media [#291](https://github.com/openshift/ironic-image/pull/291) * Merge from upstream metal3-io/ironic-image [#289](https://github.com/openshift/ironic-image/pull/289) * [METAL-256](https://issues.redhat.com/browse/METAL-256): Add a new entry point for the Ironic proxy [#286](https://github.com/openshift/ironic-image/pull/286) * Sync with upstream metal3-io ironic-image [#283](https://github.com/openshift/ironic-image/pull/283) * Updating ironic images to be consistent with ART [#282](https://github.com/openshift/ironic-image/pull/282) * [Full changelog](https://github.com/openshift/ironic-image/compare/240777d34c88ec9a6780510307ced3d4ac96b1ba...9a3e609e1e77bf07fada4dd39c5d563eaa165030) ### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/38fe5bbf9371da3770319a12b9f7d1321d14bbf0) * [OCPBUGS-29769](https://issues.redhat.com/browse/OCPBUGS-29769): Always add ignition to set hostname on /etc/hostname [#112](https://github.com/openshift/ironic-agent-image/pull/112) * [OCPBUGS-19008](https://issues.redhat.com/browse/OCPBUGS-19008): better compatibility with old hostnamectl [#92](https://github.com/openshift/ironic-agent-image/pull/92) * [OCPBUGS-19008](https://issues.redhat.com/browse/OCPBUGS-19008): backport hostname fixes [#90](https://github.com/openshift/ironic-agent-image/pull/90) * "Bug OCPBUGS-15831: Switch to udevadm command install instead of package" [#82](https://github.com/openshift/ironic-agent-image/pull/82) * [OCPBUGS-9934](https://issues.redhat.com/browse/OCPBUGS-9934): Adding dep on python3-werkzeug >= 2.0.3-4 [#72](https://github.com/openshift/ironic-agent-image/pull/72) * [OCPBUGS-5067](https://issues.redhat.com/browse/OCPBUGS-5067): make coreos-installer output available in the logs [#66](https://github.com/openshift/ironic-agent-image/pull/66) * [OCPBUGS-456](https://issues.redhat.com/browse/OCPBUGS-456): Update ironic-python-agent for OCP 4.12 [#61](https://github.com/openshift/ironic-agent-image/pull/61) * Update dependencies for OCP 4.12 [#60](https://github.com/openshift/ironic-agent-image/pull/60) * Updating ironic-agent images to be consistent with ART [#57](https://github.com/openshift/ironic-agent-image/pull/57) * Install iproute explicitely [#59](https://github.com/openshift/ironic-agent-image/pull/59) * [Full changelog](https://github.com/openshift/ironic-agent-image/compare/1dad35c5b3844f04b81468c4ad6b33953953cdc6...38fe5bbf9371da3770319a12b9f7d1321d14bbf0) ### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/c65c1f1c19a9b62ef5f4a857e5ce86ad6fca3d29) * [OCPBUGS-15735](https://issues.redhat.com/browse/OCPBUGS-15735): Binary should be compiled on rhel9 [#92](https://github.com/openshift/ironic-rhcos-downloader/pull/92) * Updating ironic-rhcos-downloader images to be consistent with ART [#83](https://github.com/openshift/ironic-rhcos-downloader/pull/83) * [OCPBUGS-478](https://issues.redhat.com/browse/OCPBUGS-478): Install libguestfs-tools-c instead of libguestfs-tools [#82](https://github.com/openshift/ironic-rhcos-downloader/pull/82) * Updating ironic-rhcos-downloader images to be consistent with ART [#79](https://github.com/openshift/ironic-rhcos-downloader/pull/79) * [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/876128b5ac733a244a3838b151b0a6df663937aa...c65c1f1c19a9b62ef5f4a857e5ce86ad6fca3d29) ### [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager/tree/a8ade8fe60ad5fb1ab225a514ec331123b256cff) * [OCPBUGS-14415](https://issues.redhat.com/browse/OCPBUGS-14415): Flush addresses on provisioning interface with global scope only [#37](https://github.com/openshift/ironic-static-ip-manager/pull/37) * Updating ironic-static-ip-manager images to be consistent with ART [#31](https://github.com/openshift/ironic-static-ip-manager/pull/31) * [Full changelog](https://github.com/openshift/ironic-static-ip-manager/compare/8c8af7bec058936780626d6b5d1b44f15b88791c...a8ade8fe60ad5fb1ab225a514ec331123b256cff) ### [k8s-prometheus-adapter](https://github.com/openshift/k8s-prometheus-adapter/tree/36c06694097a1a09a8c4e1f70a9025187814cb1a) * [OCPBUGS-21441](https://issues.redhat.com/browse/OCPBUGS-21441): upgrade golang.org/x/net to 0.17.0 to address CVE [#91](https://github.com/openshift/k8s-prometheus-adapter/pull/91) * [OCPBUGS-20580](https://issues.redhat.com/browse/OCPBUGS-20580): limit number of simultaneous client requests [#79](https://github.com/openshift/k8s-prometheus-adapter/pull/79) * Updating ose-prometheus-adapter images to be consistent with ART [#65](https://github.com/openshift/k8s-prometheus-adapter/pull/65) * Bump openshift/k8s-prometheus-adapter to v0.10.0 [#64](https://github.com/openshift/k8s-prometheus-adapter/pull/64) * OWNERS: Add Joao and myself, and move former team members to emeritus [#63](https://github.com/openshift/k8s-prometheus-adapter/pull/63) * Updating ose-prometheus-adapter images to be consistent with ART [#62](https://github.com/openshift/k8s-prometheus-adapter/pull/62) * [Full changelog](https://github.com/openshift/k8s-prometheus-adapter/compare/c223902cf8f136d8e2769bf955e079ffc0064e49...36c06694097a1a09a8c4e1f70a9025187814cb1a) ### [keepalived-ipfailover](https://github.com/openshift/images/tree/7e8a0105eb7369f3f92ad7b2581a2efffab5b28e) * Updating openshift-enterprise-egress-router images to be consistent with ART [#115](https://github.com/openshift/images/pull/115) * Updating ose-egress-http-proxy images to be consistent with ART [#114](https://github.com/openshift/images/pull/114) * Updating openshift-enterprise-egress-dns-proxy images to be consistent with ART [#117](https://github.com/openshift/images/pull/117) * Updating openshift-enterprise-keepalived-ipfailover images to be consistent with ART [#116](https://github.com/openshift/images/pull/116) * Add bparees as approver [#118](https://github.com/openshift/images/pull/118) * Updating openshift-enterprise-base images to be consistent with ART [#113](https://github.com/openshift/images/pull/113) * [Full changelog](https://github.com/openshift/images/compare/f1330f6fb99d1056544bca67f30c098059ef3edf...7e8a0105eb7369f3f92ad7b2581a2efffab5b28e) ### [kube-proxy, sdn](https://github.com/openshift/sdn/tree/9706f967ca7bb1ade1a789123c71fe6cb55a025e) * [OCPBUGS-20753](https://issues.redhat.com/browse/OCPBUGS-20753): update x/net to v0.17.0 [#615](https://github.com/openshift/sdn/pull/615) * [OCPBUGS-22972](https://issues.redhat.com/browse/OCPBUGS-22972): Change the permission of 80-openshift-network.conf to 600 [#583](https://github.com/openshift/sdn/pull/583) * [OCPBUGS-18325](https://issues.redhat.com/browse/OCPBUGS-18325): Vendor o/k to consume update to prefer local TCP eps for DNS [#573](https://github.com/openshift/sdn/pull/573) * [OCPBUGS-13785](https://issues.redhat.com/browse/OCPBUGS-13785): EgressNetworkPolicy DNS resolution does not fall back to TCP [#542](https://github.com/openshift/sdn/pull/542) * [OCPBUGS-14304](https://issues.redhat.com/browse/OCPBUGS-14304): fix possible concurrent map read/write [#551](https://github.com/openshift/sdn/pull/551) * [OCPBUGS-13058](https://issues.redhat.com/browse/OCPBUGS-13058): save and delete the old egress network policy [#539](https://github.com/openshift/sdn/pull/539) * [OCPBUGS-13761](https://issues.redhat.com/browse/OCPBUGS-13761): CVE-2018-17419 ose-node-container: dns: Denial of Service (DoS) [#541](https://github.com/openshift/sdn/pull/541) * [OCPBUGS-10805](https://issues.redhat.com/browse/OCPBUGS-10805): Fix race in Egress IP Tracker start [#521](https://github.com/openshift/sdn/pull/521) * [OCPBUGS-7474](https://issues.redhat.com/browse/OCPBUGS-7474): Initialize egress node monitoring struct with previous reachability status [#505](https://github.com/openshift/sdn/pull/505) * [OCPBUGS-6842](https://issues.redhat.com/browse/OCPBUGS-6842): Handle race condition to setup default vnid flows [#497](https://github.com/openshift/sdn/pull/497) * [OCPBUGS-7227](https://issues.redhat.com/browse/OCPBUGS-7227): Update for 4.12 / go 1.19, including gofmt updates [#482](https://github.com/openshift/sdn/pull/482) * [OCPBUGS-4486](https://issues.redhat.com/browse/OCPBUGS-4486): Add node egress IP assignment resync [#487](https://github.com/openshift/sdn/pull/487) * [OCPBUGS-4422](https://issues.redhat.com/browse/OCPBUGS-4422): pass ResourceVersion:0 for kube List() calls [#473](https://github.com/openshift/sdn/pull/473) * [OCPBUGS-69](https://issues.redhat.com/browse/OCPBUGS-69): Generate egress ip metrics for sdn node [#470](https://github.com/openshift/sdn/pull/470) * [OCPBUGS-1533](https://issues.redhat.com/browse/OCPBUGS-1533): rebase to kube 1.25.1 [#458](https://github.com/openshift/sdn/pull/458) * [OCPBUGS-256](https://issues.redhat.com/browse/OCPBUGS-256): fix network policy egress [#459](https://github.com/openshift/sdn/pull/459) * [Bug 2104953](https://bugzilla.redhat.com/show_bug.cgi?id=2104953): rebase to 1.24, take 2 [#450](https://github.com/openshift/sdn/pull/450) * Enable EgressIP on OpenStack [#447](https://github.com/openshift/sdn/pull/447) * [Bug 2081562](https://bugzilla.redhat.com/show_bug.cgi?id=2081562): setup network policy rules during pod creation to fix postStart hook [#439](https://github.com/openshift/sdn/pull/439) * Updating kube-proxy images to be consistent with ART [#448](https://github.com/openshift/sdn/pull/448) * [Bug 2101622](https://bugzilla.redhat.com/show_bug.cgi?id=2101622): Revert 'kube 1.24 rebase'; master [#442](https://github.com/openshift/sdn/pull/442) * [Full changelog](https://github.com/openshift/sdn/compare/e5b34b769cb7dd359cd027b9bb19cf4988a2c5dd...9706f967ca7bb1ade1a789123c71fe6cb55a025e) ### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/b17014fefeb55512dd015d3024184c8c4692588b) * [OCPBUGS-20687](https://issues.redhat.com/browse/OCPBUGS-20687): trim down http2, make it configurable 4.12 [#85](https://github.com/openshift/kube-rbac-proxy/pull/85) * [OCPBUGS-11645](https://issues.redhat.com/browse/OCPBUGS-11645): Updating kube-rbac-proxy images to be consistent with ART [#56](https://github.com/openshift/kube-rbac-proxy/pull/56) * Merg upstream into downstream [#60](https://github.com/openshift/kube-rbac-proxy/pull/60) * OWNERS: add myself (ibihim) [#57](https://github.com/openshift/kube-rbac-proxy/pull/57) * [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/c04896cdf9288341c9f88051a2744ca192300182...b17014fefeb55512dd015d3024184c8c4692588b) ### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/748f71317b9d3e3e5a96b14131294e2695f26434) * [OCPBUGS-20764](https://issues.redhat.com/browse/OCPBUGS-20764): bump x/net to v0.17.0 [#103](https://github.com/openshift/kube-state-metrics/pull/103) * [OCPBUGS-4118](https://issues.redhat.com/browse/OCPBUGS-4118): cherry-pick, do not expose ingress path metric when service is nil [#84](https://github.com/openshift/kube-state-metrics/pull/84) * [OCPBUGS-4112](https://issues.redhat.com/browse/OCPBUGS-4112): cherry-pick, autoscaling/v2beta2 HorizontalPodAutoscaler is deprecated in v1.23+ [#83](https://github.com/openshift/kube-state-metrics/pull/83) * Updating kube-state-metrics images to be consistent with ART [#78](https://github.com/openshift/kube-state-metrics/pull/78) * Bump openshift/kube-state-metrics to v2.6.0 [#77](https://github.com/openshift/kube-state-metrics/pull/77) * OWNERS: Add Joao and myself, and move former team members to emeritus [#76](https://github.com/openshift/kube-state-metrics/pull/76) * Updating kube-state-metrics images to be consistent with ART [#75](https://github.com/openshift/kube-state-metrics/pull/75) * [Full changelog](https://github.com/openshift/kube-state-metrics/compare/7d0ca88aaf60227733ea06152114b623c5574779...748f71317b9d3e3e5a96b14131294e2695f26434) ### [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt/tree/a2882f7aa56d4059a20bdc02486da905b5764062) * Updating ose-libvirt-machine-controllers images to be consistent with ART [#240](https://github.com/openshift/cluster-api-provider-libvirt/pull/240) * [Full changelog](https://github.com/openshift/cluster-api-provider-libvirt/compare/b6e14eabe93e25323cf32b7661edd0e7422b4e4b...a2882f7aa56d4059a20bdc02486da905b5764062) ### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/cffade7eb36a1db8b9c4bf339a2c525d5fde871a) * [OCPBUGS-32007](https://issues.redhat.com/browse/OCPBUGS-32007): Update x/net to v0.25.0 [#1257](https://github.com/openshift/machine-api-operator/pull/1257) * [OCPBUGS-25303](https://issues.redhat.com/browse/OCPBUGS-25303): Update reference URL [#1189](https://github.com/openshift/machine-api-operator/pull/1189) * [OCPBUGS-21501](https://issues.redhat.com/browse/OCPBUGS-21501): Bump golang.org/x/net to v0.18.0 [#1176](https://github.com/openshift/machine-api-operator/pull/1176) * [OCPBUGS-10943](https://issues.redhat.com/browse/OCPBUGS-10943): Fix empty component version [#1132](https://github.com/openshift/machine-api-operator/pull/1132) * [OCPBUGS-7882](https://issues.redhat.com/browse/OCPBUGS-7882): Block machine deletion if extra disks are attached [#1120](https://github.com/openshift/machine-api-operator/pull/1120) * [OCPBUGS-8286](https://issues.redhat.com/browse/OCPBUGS-8286): Short circuit misfiring [#1109](https://github.com/openshift/machine-api-operator/pull/1109) * [OCPBUGS-5413](https://issues.redhat.com/browse/OCPBUGS-5413): Append annotations from machine template spec to the node [#1104](https://github.com/openshift/machine-api-operator/pull/1104) * [OCPBUGS-5117](https://issues.redhat.com/browse/OCPBUGS-5117): [release-4.12] Allow to use machine.openshift.io API in provider specs [#1086](https://github.com/openshift/machine-api-operator/pull/1086) * [OCPBUGS-5417](https://issues.redhat.com/browse/OCPBUGS-5417): machine-api-termination-handler: run DaemonSet only on Linux [#1105](https://github.com/openshift/machine-api-operator/pull/1105) * Show warnings if provider specs have invalid GroupVersionKind [#1018](https://github.com/openshift/machine-api-operator/pull/1018) * Update envtest [#1071](https://github.com/openshift/machine-api-operator/pull/1071) * [OCPCLOUD-1131](https://issues.redhat.com/browse/OCPCLOUD-1131): Add DescribeInstanceTypes permission for AWS provider [#1062](https://github.com/openshift/machine-api-operator/pull/1062) * [OCPBUGS-2151](https://issues.redhat.com/browse/OCPBUGS-2151): Don't degrade when workers not expected [#1074](https://github.com/openshift/machine-api-operator/pull/1074) * Updating ose-machine-api-operator images to be consistent with ART [#1073](https://github.com/openshift/machine-api-operator/pull/1073) * Update default Azure image to use image galleries [#1076](https://github.com/openshift/machine-api-operator/pull/1076) * [OCPBUGS-1274](https://issues.redhat.com/browse/OCPBUGS-1274): add tolerations to termination handler [#1072](https://github.com/openshift/machine-api-operator/pull/1072) * Restrict creating Power VS machine with negative processor and memory [#1067](https://github.com/openshift/machine-api-operator/pull/1067) * [OCPBUGS-519](https://issues.redhat.com/browse/OCPBUGS-519): update error message for disconnected installation validation [#1068](https://github.com/openshift/machine-api-operator/pull/1068) * Update dependencies to K8s 1.25 [#1070](https://github.com/openshift/machine-api-operator/pull/1070) * Only drain a single control plane machine at once [#1066](https://github.com/openshift/machine-api-operator/pull/1066) * Add tag and category id to the caching client log messages [#1063](https://github.com/openshift/machine-api-operator/pull/1063) * [Bug 2101736](https://bugzilla.redhat.com/show_bug.cgi?id=2101736): Ignore managed fields during finalizer removal [#1061](https://github.com/openshift/machine-api-operator/pull/1061) * Ensure the phase transition metric only updates when the phase changes [#1059](https://github.com/openshift/machine-api-operator/pull/1059) * Release leader election lease when shutting down [#1060](https://github.com/openshift/machine-api-operator/pull/1060) * Tags/categories ids cache implementation [#1057](https://github.com/openshift/machine-api-operator/pull/1057) * [OCPBUGS-268](https://issues.redhat.com/browse/OCPBUGS-268): vSphere - enable steal time accounting [#1056](https://github.com/openshift/machine-api-operator/pull/1056) * [Bug 2111972](https://bugzilla.redhat.com/show_bug.cgi?id=2111972): operator NS manifest: Set empty openshift.io/run-level [#1053](https://github.com/openshift/machine-api-operator/pull/1053) * Change the git command [#1050](https://github.com/openshift/machine-api-operator/pull/1050) * add a helper function to detect windows os [#1055](https://github.com/openshift/machine-api-operator/pull/1055) * [Bug 2115308](https://bugzilla.redhat.com/show_bug.cgi?id=2115308): Ensure failed drains are subject to exponential backoff [#1051](https://github.com/openshift/machine-api-operator/pull/1051) * [Bug 2087981](https://bugzilla.redhat.com/show_bug.cgi?id=2087981): Change "create" sequence with powering on the vm after clone [#1047](https://github.com/openshift/machine-api-operator/pull/1047) * update windows helper functions [#1049](https://github.com/openshift/machine-api-operator/pull/1049) * [Bug 2110501](https://bugzilla.redhat.com/show_bug.cgi?id=2110501): Revert "Bug 2101880: operator NS manifest: Set empty openshift.io/run-level" [#1045](https://github.com/openshift/machine-api-operator/pull/1045) * [Bug 2109258](https://bugzilla.redhat.com/show_bug.cgi?id=2109258): add more support for old delete annotation [#1042](https://github.com/openshift/machine-api-operator/pull/1042) * [Bug 2101736](https://bugzilla.redhat.com/show_bug.cgi?id=2101736): allow to remove finalizers [#1037](https://github.com/openshift/machine-api-operator/pull/1037) * [Bug 2107578](https://bugzilla.redhat.com/show_bug.cgi?id=2107578): Fix while setting default processor value for Power VS platform [#1040](https://github.com/openshift/machine-api-operator/pull/1040) * [Bug 2104642](https://bugzilla.redhat.com/show_bug.cgi?id=2104642): fix the Machine validation webhook for nutanix providerSpec [#1038](https://github.com/openshift/machine-api-operator/pull/1038) * [Bug 2104642](https://bugzilla.redhat.com/show_bug.cgi?id=2104642): Add a validation webhook for Nutanix MachineProviderConfig [#1034](https://github.com/openshift/machine-api-operator/pull/1034) * [Bug 2097153](https://bugzilla.redhat.com/show_bug.cgi?id=2097153): change ListTags call to ListTagsForCategory [#1027](https://github.com/openshift/machine-api-operator/pull/1027) * [Bug 1994820](https://bugzilla.redhat.com/show_bug.cgi?id=1994820): Degrade operator on cluster bootstrap if not all Machines are Running [#1019](https://github.com/openshift/machine-api-operator/pull/1019) * Migrate delete annotation to match upstream CAPI annotation [#1024](https://github.com/openshift/machine-api-operator/pull/1024) * add utility functions for windows powershell tags [#1030](https://github.com/openshift/machine-api-operator/pull/1030) * [Bug 2101880](https://bugzilla.redhat.com/show_bug.cgi?id=2101880): operator NS manifest: Set empty openshift.io/run-level [#1031](https://github.com/openshift/machine-api-operator/pull/1031) * Add webhook validations for Azure boot diagnostics [#1029](https://github.com/openshift/machine-api-operator/pull/1029) * Update revendoring tool [#1028](https://github.com/openshift/machine-api-operator/pull/1028) * [Full changelog](https://github.com/openshift/machine-api-operator/compare/b00c052468ea0ea410494d615b2b46ab8733afd0...cffade7eb36a1db8b9c4bf339a2c525d5fde871a) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/dd2a0b3f915b8057891df23748eea4a9b0315311) * [OCPBUGS-33665](https://issues.redhat.com/browse/OCPBUGS-33665): Run resolv-prepender entirely async [#4364](https://github.com/openshift/machine-config-operator/pull/4364) * [OCPBUGS-30829](https://issues.redhat.com/browse/OCPBUGS-30829): Add existing kubeletconfig/ctrcfg mc-name-suffix annotation [#4257](https://github.com/openshift/machine-config-operator/pull/4257) * [OCPBUGS-30823](https://issues.redhat.com/browse/OCPBUGS-30823): Introduce kubelet-dependencies.target and firstboot-osupdate.target [#4268](https://github.com/openshift/machine-config-operator/pull/4268) * [OCPBUGS-30329](https://issues.redhat.com/browse/OCPBUGS-30329): set nodeStatusReportFrequency [#4246](https://github.com/openshift/machine-config-operator/pull/4246) * [OCPBUGS-19659](https://issues.redhat.com/browse/OCPBUGS-19659): After dual-stack conversion reconcile IPFamilies [#3936](https://github.com/openshift/machine-config-operator/pull/3936) * [OCPBUGS-29366](https://issues.redhat.com/browse/OCPBUGS-29366): release-4.12: fix nodeStatusUpdateFrequency [#4180](https://github.com/openshift/machine-config-operator/pull/4180) * [OCPBUGS-29278](https://issues.redhat.com/browse/OCPBUGS-29278): crio: drop automatic image cleanup on upgrades [#4178](https://github.com/openshift/machine-config-operator/pull/4178) * [OCPBUGS-14071](https://issues.redhat.com/browse/OCPBUGS-14071): Imageinspect takes type of error into account, drop podman inspect fallback [#3717](https://github.com/openshift/machine-config-operator/pull/3717) * [OCPBUGS-21038](https://issues.redhat.com/browse/OCPBUGS-21038): update library-go and kube deps to latest version [#4013](https://github.com/openshift/machine-config-operator/pull/4013) * [OCPBUGS-22719](https://issues.redhat.com/browse/OCPBUGS-22719): Backport logspam PRs [#4008](https://github.com/openshift/machine-config-operator/pull/4008) * [OCPBUGS-21723](https://issues.redhat.com/browse/OCPBUGS-21723): keepalived/ingress: change healthcheck script [#3985](https://github.com/openshift/machine-config-operator/pull/3985) * [OCPBUGS-18433](https://issues.redhat.com/browse/OCPBUGS-18433): Prevent NM from unsetting the hostname [#3900](https://github.com/openshift/machine-config-operator/pull/3900) * [OCPBUGS-20509](https://issues.redhat.com/browse/OCPBUGS-20509): resolv-prepender: avoid pulling baremetalRuntimeCfgImage again if it … [#3969](https://github.com/openshift/machine-config-operator/pull/3969) * [OCPBUGS-19779](https://issues.redhat.com/browse/OCPBUGS-19779): daemon: always use `podman cp` to copy extensions container content [#3944](https://github.com/openshift/machine-config-operator/pull/3944) * [OCPBUGS-19515](https://issues.redhat.com/browse/OCPBUGS-19515): The kubeconfig copied on to each node has 644 permissions [#3931](https://github.com/openshift/machine-config-operator/pull/3931) * [OCPBUGS-17862](https://issues.redhat.com/browse/OCPBUGS-17862): Agent-based install process the container machine-config-controller will be oom [#3875](https://github.com/openshift/machine-config-operator/pull/3875) * [OCPBUGS-17461](https://issues.redhat.com/browse/OCPBUGS-17461): The machine-config-controller pod restart in SNO+1 causing daemonsets to restart [#3844](https://github.com/openshift/machine-config-operator/pull/3844) * [OCPBUGS-15570](https://issues.redhat.com/browse/OCPBUGS-15570): configure-ovs: support UUID in vlan.parent [#3768](https://github.com/openshift/machine-config-operator/pull/3768) * [OCPBUGS-16754](https://issues.redhat.com/browse/OCPBUGS-16754): daemon: Don't traverse `/run/ostree/auth.json` symlink [#3818](https://github.com/openshift/machine-config-operator/pull/3818) * [OCPBUGS-11303](https://issues.redhat.com/browse/OCPBUGS-11303): Fix regex dot in coredns config file [#3660](https://github.com/openshift/machine-config-operator/pull/3660) * [OCPBUGS-13757](https://issues.redhat.com/browse/OCPBUGS-13757): The MCD has a non-functional pivot command that should be removed [#3710](https://github.com/openshift/machine-config-operator/pull/3710) * [OCPBUGS-7718](https://issues.redhat.com/browse/OCPBUGS-7718): Prevent possible split-brain scenario with keepalived unicast [#3562](https://github.com/openshift/machine-config-operator/pull/3562) * [OCPBUGS-7945](https://issues.redhat.com/browse/OCPBUGS-7945): [release-4.12] Forklift most of resolv-prepender dispatcher script to systemd [#3573](https://github.com/openshift/machine-config-operator/pull/3573) * [OCPBUGS-5935](https://issues.redhat.com/browse/OCPBUGS-5935): Wrap podman commands in a while loop [#3495](https://github.com/openshift/machine-config-operator/pull/3495) * [OCPBUGS-7167](https://issues.redhat.com/browse/OCPBUGS-7167): Avoid 'too restrictive' SCC problems by being more explicit [#3542](https://github.com/openshift/machine-config-operator/pull/3542) * [OCPBUGS-10505](https://issues.redhat.com/browse/OCPBUGS-10505): daemon: Drop duplicate `--authfile` used in `run` [#3617](https://github.com/openshift/machine-config-operator/pull/3617) * [OCPBUGS-10372](https://issues.redhat.com/browse/OCPBUGS-10372): Remove hard requirement for the afterburn from early-running aws-related services [#3613](https://github.com/openshift/machine-config-operator/pull/3613) * [OCPBUGS-9993](https://issues.redhat.com/browse/OCPBUGS-9993): Revert "daemon: Temporarily copy auth file with more open perms on FCOS" [#3608](https://github.com/openshift/machine-config-operator/pull/3608) * [OCPBUGS-7445](https://issues.redhat.com/browse/OCPBUGS-7445): configure-ovs: fix mtu-migration cleanup [#3555](https://github.com/openshift/machine-config-operator/pull/3555) * [OCPBUGS-8261](https://issues.redhat.com/browse/OCPBUGS-8261): [release-4.12] backport cleanupDuplicateMC [#3578](https://github.com/openshift/machine-config-operator/pull/3578) * [OCPBUGS-6943](https://issues.redhat.com/browse/OCPBUGS-6943): Improvements for `configure-ovs.sh` [#3528](https://github.com/openshift/machine-config-operator/pull/3528) * [OCPBUGS-6045](https://issues.redhat.com/browse/OCPBUGS-6045): There are not enough logs in case "oc extract" is stuck in mco first boot [#3503](https://github.com/openshift/machine-config-operator/pull/3503) * [OCPBUGS-6973](https://issues.redhat.com/browse/OCPBUGS-6973): configure-ovs: optionally generate configuration in /run [#3532](https://github.com/openshift/machine-config-operator/pull/3532) * [OCPBUGS-6779](https://issues.redhat.com/browse/OCPBUGS-6779): baremetal: clean state generated by NM when run by dracut [#3521](https://github.com/openshift/machine-config-operator/pull/3521) * [OCPBUGS-7241](https://issues.redhat.com/browse/OCPBUGS-7241): controller: default overwrite to true for files [#3546](https://github.com/openshift/machine-config-operator/pull/3546) * [OCPBUGS-6997](https://issues.redhat.com/browse/OCPBUGS-6997): Fix 4.12 art images [#3535](https://github.com/openshift/machine-config-operator/pull/3535) * [OCPBUGS-6805](https://issues.redhat.com/browse/OCPBUGS-6805): Only check image type if we are sure there is work that needs to be done [#3526](https://github.com/openshift/machine-config-operator/pull/3526) * [OCPBUGS-5999](https://issues.redhat.com/browse/OCPBUGS-5999): 4.12 - remove goutils from dependency tree [#3496](https://github.com/openshift/machine-config-operator/pull/3496) * [OCPBUGS-6179](https://issues.redhat.com/browse/OCPBUGS-6179): controller: don't render new MC until base MCs update [#3506](https://github.com/openshift/machine-config-operator/pull/3506) * [OCPBUGS-5743](https://issues.redhat.com/browse/OCPBUGS-5743): Mount /run/nodeip-configuration into keepalived containers [#3479](https://github.com/openshift/machine-config-operator/pull/3479) * [OCPBUGS-5384](https://issues.redhat.com/browse/OCPBUGS-5384): daemon: Explicitly pull image before running [#3475](https://github.com/openshift/machine-config-operator/pull/3475) * [OCPBUGS-3311](https://issues.redhat.com/browse/OCPBUGS-3311): [alicloud] provider ID not being set for kubelet [#3457](https://github.com/openshift/machine-config-operator/pull/3457) * [OCPBUGS-4805](https://issues.redhat.com/browse/OCPBUGS-4805): Do not allow empty system reserved values [#3453](https://github.com/openshift/machine-config-operator/pull/3453) * [OCPBUGS-4667](https://issues.redhat.com/browse/OCPBUGS-4667): vsphere: check that /etc/hostname is not empty [#3452](https://github.com/openshift/machine-config-operator/pull/3452) * [OCPBUGS-4091](https://issues.redhat.com/browse/OCPBUGS-4091): NM resolv prepender: correct permissions for systemd resolved config [#3442](https://github.com/openshift/machine-config-operator/pull/3442) * [OCPBUGS-4091](https://issues.redhat.com/browse/OCPBUGS-4091): NM resolve prepender: remove extra quotes in OKD flow [#3433](https://github.com/openshift/machine-config-operator/pull/3433) * [OCPBUGS-3955](https://issues.redhat.com/browse/OCPBUGS-3955): daemon: gate done state on uncordon completion [#3425](https://github.com/openshift/machine-config-operator/pull/3425) * [OCPBUGS-3750](https://issues.redhat.com/browse/OCPBUGS-3750): daemon: Stop setting I/O scheduler to bfq [#3417](https://github.com/openshift/machine-config-operator/pull/3417) * [OCPBUGS-3874](https://issues.redhat.com/browse/OCPBUGS-3874): Don't make https call to http endpoint [#3420](https://github.com/openshift/machine-config-operator/pull/3420) * [OCPBUGS-3504](https://issues.redhat.com/browse/OCPBUGS-3504): On-prem: Ensure resolv-prepender respects NM dispatcher timeout [#3410](https://github.com/openshift/machine-config-operator/pull/3410) * [OCPBUGS-3650](https://issues.redhat.com/browse/OCPBUGS-3650): Revert "Substitute skopeo inspect for imageInspect/podman" [#3414](https://github.com/openshift/machine-config-operator/pull/3414) * [OCPBUGS-3001](https://issues.redhat.com/browse/OCPBUGS-3001): Substitute skopeo inspect for imageInspect/podman, drop podman inspect fallback [#3396](https://github.com/openshift/machine-config-operator/pull/3396) * Force string format when logging rpm-ostree status [#3393](https://github.com/openshift/machine-config-operator/pull/3393) * controller: Don't allow creating the force file via MachineConfig [#3391](https://github.com/openshift/machine-config-operator/pull/3391) * [Bug 2034883](https://bugzilla.redhat.com/show_bug.cgi?id=2034883): Sync controllerconfig anyway if daemon sync fails [#3388](https://github.com/openshift/machine-config-operator/pull/3388) * Fix machine-config-operator logspam when extensions container is not present [#3387](https://github.com/openshift/machine-config-operator/pull/3387) * [OCPBUGS-2757](https://issues.redhat.com/browse/OCPBUGS-2757): Reconcile successfully if already booted into target [#3383](https://github.com/openshift/machine-config-operator/pull/3383) * [OCPBUGS-1257](https://issues.redhat.com/browse/OCPBUGS-1257): Have keepalived check for haproxy status for API VIP [#3339](https://github.com/openshift/machine-config-operator/pull/3339) * daemon: Only try to apply layered changes if BaseOSExtensionsContainerImage is not empty [#3382](https://github.com/openshift/machine-config-operator/pull/3382) * [OCPBUGS-89](https://issues.redhat.com/browse/OCPBUGS-89): configure-ovs: auto-connect ovs-if-phys0 with br-ex [#3312](https://github.com/openshift/machine-config-operator/pull/3312) * [Bug 2107090](https://bugzilla.redhat.com/show_bug.cgi?id=2107090): Machine config server hangs on handling large number of requests in parallel [#3262](https://github.com/openshift/machine-config-operator/pull/3262) * [OCPBUGS-2079](https://issues.redhat.com/browse/OCPBUGS-2079): Add ephemeral storage to kubelet system reserved args [#3375](https://github.com/openshift/machine-config-operator/pull/3375) * [MCO-400](https://issues.redhat.com/browse/MCO-400): helpers: Do synchronize condition if message changes [#3369](https://github.com/openshift/machine-config-operator/pull/3369) * [OCPBUGS-2197](https://issues.redhat.com/browse/OCPBUGS-2197): update: Set proxy for inplace container update too [#3377](https://github.com/openshift/machine-config-operator/pull/3377) * [OCPBUGS-2197](https://issues.redhat.com/browse/OCPBUGS-2197): OCPBUGS-2122: update: Inject proxy data for firstboot [#3370](https://github.com/openshift/machine-config-operator/pull/3370) * [OCPBUGS-2269](https://issues.redhat.com/browse/OCPBUGS-2269): Upgrade failures and MCDPivotError Alert Firing on GCP realtime kernel [#3373](https://github.com/openshift/machine-config-operator/pull/3373) * daemon: Temporarily copy auth file with more open perms on SCOS too [#3372](https://github.com/openshift/machine-config-operator/pull/3372) * : Add missing bits for dual-stack ingress VIPs [#3341](https://github.com/openshift/machine-config-operator/pull/3341) * Jira OCPBUGS-1503: configure-ovs.sh: Do not fail bond with invalid slave device names [#3345](https://github.com/openshift/machine-config-operator/pull/3345) * [MCO-396](https://issues.redhat.com/browse/MCO-396): daemon: FCOS workaround, plus SELinux workaround [#3358](https://github.com/openshift/machine-config-operator/pull/3358) * Switch to https://github.com/coreos/rpmostree-client-go [#3302](https://github.com/openshift/machine-config-operator/pull/3302) * [RFE-2962](https://issues.redhat.com/browse/RFE-2962): configure ovs should use node-ip-hint set by nodeip-configuration [#3362](https://github.com/openshift/machine-config-operator/pull/3362) * [MCO-371](https://issues.redhat.com/browse/MCO-371): metrics: aggregate os_image_url_override metric to avoid unbounded cardinality [#3363](https://github.com/openshift/machine-config-operator/pull/3363) * Rename KUBELET_NODEIP_HINT to just NODEIP_HINT [#3353](https://github.com/openshift/machine-config-operator/pull/3353) * Revert "RFE-2962: configure ovs should use node-ip-hint set by nodeip-configuration service" [#3360](https://github.com/openshift/machine-config-operator/pull/3360) * [Bug 2056387](https://bugzilla.redhat.com/show_bug.cgi?id=2056387): fix alibaba kubelet node name unit [#3338](https://github.com/openshift/machine-config-operator/pull/3338) * Dockerfile: Remove SCOS extensions image references [#3356](https://github.com/openshift/machine-config-operator/pull/3356) * bootstrap: Add CLI arguments for new format oscontainer [#3354](https://github.com/openshift/machine-config-operator/pull/3354) * [RFE-2962](https://issues.redhat.com/browse/RFE-2962): configure ovs should use node-ip-hint set by nodeip-configuration service [#3233](https://github.com/openshift/machine-config-operator/pull/3233) * Add cgroupv2 configuration support in MCO [#3349](https://github.com/openshift/machine-config-operator/pull/3349) * [MCO-289](https://issues.redhat.com/browse/MCO-289): Teach the MCO to use new format image [#3317](https://github.com/openshift/machine-config-operator/pull/3317) * [MCO-371](https://issues.redhat.com/browse/MCO-371): metrics: Add metric for OS image override [#3343](https://github.com/openshift/machine-config-operator/pull/3343) * [OCPBUGS-1616](https://issues.redhat.com/browse/OCPBUGS-1616): Revert "Merge pull request #3311 from sairameshv/cgroupv2" [#3348](https://github.com/openshift/machine-config-operator/pull/3348) * OCPNODE-1146 Add cgroup confiuration support in MCO [#3311](https://github.com/openshift/machine-config-operator/pull/3311) * Bump openshift/api [#3336](https://github.com/openshift/machine-config-operator/pull/3336) * Dual stack vips [#3269](https://github.com/openshift/machine-config-operator/pull/3269) * [TRT-540](https://issues.redhat.com/browse/TRT-540): Add privileged label to infra namespaces [#3328](https://github.com/openshift/machine-config-operator/pull/3328) * update to release.openshift.io/feature-set to match OCP 4.12 [#3329](https://github.com/openshift/machine-config-operator/pull/3329) * added @engelmi, @eslutsky, @Darth-Mera to ovirt-approvers [#3332](https://github.com/openshift/machine-config-operator/pull/3332) * [OCPBUGS-825](https://issues.redhat.com/browse/OCPBUGS-825): Provide a reason if operator is unavailable [#3324](https://github.com/openshift/machine-config-operator/pull/3324) * [MCO-256](https://issues.redhat.com/browse/MCO-256): hypershift: add disruptionless updates to MCD [#3320](https://github.com/openshift/machine-config-operator/pull/3320) * [OCPBUGS-224](https://issues.redhat.com/browse/OCPBUGS-224): Make sure there is a search domain in resolv.conf [#3306](https://github.com/openshift/machine-config-operator/pull/3306) * Hypershift: remove error message on return [#3326](https://github.com/openshift/machine-config-operator/pull/3326) * daemon: Drop mock node updater client [#3325](https://github.com/openshift/machine-config-operator/pull/3325) * [OCPBUGS-631](https://issues.redhat.com/browse/OCPBUGS-631): Pull container image as a separate step [#3318](https://github.com/openshift/machine-config-operator/pull/3318) * Add kubens.service, drop-ins, and kubensenter prefix to kubelet.service [#3274](https://github.com/openshift/machine-config-operator/pull/3274) * Add RuntimeDefault to ctrcfg [#3295](https://github.com/openshift/machine-config-operator/pull/3295) * daemon: Use just one NodeUpdaterClient instance [#3304](https://github.com/openshift/machine-config-operator/pull/3304) * vendor: Bump containers/image [#3303](https://github.com/openshift/machine-config-operator/pull/3303) * OKD: Add build args for FCOS and SCOS [#3294](https://github.com/openshift/machine-config-operator/pull/3294) * [Bug 2107113](https://bugzilla.redhat.com/show_bug.cgi?id=2107113): Fix .ssh directory not owned by core when created by Machine Config D… [#3250](https://github.com/openshift/machine-config-operator/pull/3250) * fixes config decompression lint issue [#3301](https://github.com/openshift/machine-config-operator/pull/3301) * Round off SYSTEM_RESERVED_MEMORY if value is in decimal [#3299](https://github.com/openshift/machine-config-operator/pull/3299) * Remove `onPremPlatformKeepalivedEnableUnicast` function [#3174](https://github.com/openshift/machine-config-operator/pull/3174) * MCD: Add support for RHCOS9 and SCOS9 [#3179](https://github.com/openshift/machine-config-operator/pull/3179) * Bug-2051533: Adding day2 remote worker node requires manually approving CSRs [#3276](https://github.com/openshift/machine-config-operator/pull/3276) * Decompress and decode Ignition configs from ConfigMap [#3280](https://github.com/openshift/machine-config-operator/pull/3280) * [Bug 2111817](https://bugzilla.redhat.com/show_bug.cgi?id=2111817): daemon: Add a workaround for bug 2111817 [#3291](https://github.com/openshift/machine-config-operator/pull/3291) * Don't reference `rhel-coreos-8-extensions` yet [#3290](https://github.com/openshift/machine-config-operator/pull/3290) * Accept new image format, consume in controllerconfig, but stop there [#3286](https://github.com/openshift/machine-config-operator/pull/3286) * Allow overriding OSImageURL with a layered image [#3272](https://github.com/openshift/machine-config-operator/pull/3272) * daemon: drop `systemctl stop kubelet` during node reboot [#2509](https://github.com/openshift/machine-config-operator/pull/2509) * [Bug 2105003](https://bugzilla.redhat.com/show_bug.cgi?id=2105003): on-prem: improvements on resolv-prepender [#3271](https://github.com/openshift/machine-config-operator/pull/3271) * Fix typo [#3279](https://github.com/openshift/machine-config-operator/pull/3279) * Update library-go to set OpenStack provider to external [#3270](https://github.com/openshift/machine-config-operator/pull/3270) * add control-plane label [#3273](https://github.com/openshift/machine-config-operator/pull/3273) * Prep patches for bumping openshift/client-go [#3251](https://github.com/openshift/machine-config-operator/pull/3251) * Update approvers and reviewers list with current active members [#3266](https://github.com/openshift/machine-config-operator/pull/3266) * ctrcfg controller remove cleanupmc() [#3149](https://github.com/openshift/machine-config-operator/pull/3149) * [Bug 2109963](https://bugzilla.redhat.com/show_bug.cgi?id=2109963): Master node in SchedulingDisabled after upgrade from 4.10.24 -> 4.11.0-rc.4 [#3264](https://github.com/openshift/machine-config-operator/pull/3264) * daemon: Drop tuneableFCOSArgsAllowlist [#3248](https://github.com/openshift/machine-config-operator/pull/3248) * daemon: Drop workarounds for rpm-ostree bugs [#3239](https://github.com/openshift/machine-config-operator/pull/3239) * [Bug 2104619](https://bugzilla.redhat.com/show_bug.cgi?id=2104619): Remove rollback deployment [#3243](https://github.com/openshift/machine-config-operator/pull/3243) * on-prem: render-config-coredns from /var/run/NetworkManager/resolv.conf [#3237](https://github.com/openshift/machine-config-operator/pull/3237) * [Bug 2101157](https://bugzilla.redhat.com/show_bug.cgi?id=2101157): configure-ovs: fix handling of connection names with spaces and checking the connection name suffix [#3242](https://github.com/openshift/machine-config-operator/pull/3242) * [Bug 2104503](https://bugzilla.redhat.com/show_bug.cgi?id=2104503): Updating ose-machine-config-operator images to be consistent with ART [#3228](https://github.com/openshift/machine-config-operator/pull/3228) * [Bug 2103786](https://bugzilla.redhat.com/show_bug.cgi?id=2103786): drain controller: don't skip the MCC pod drain [#3212](https://github.com/openshift/machine-config-operator/pull/3212) * [Bug 2102004](https://bugzilla.redhat.com/show_bug.cgi?id=2102004): pkg/controller/common/helpers: Explicitly set mode 0644 [#3226](https://github.com/openshift/machine-config-operator/pull/3226) * [Bug 2099945](https://bugzilla.redhat.com/show_bug.cgi?id=2099945): configure-ovs: clone inactive autoconnect slaves [#3203](https://github.com/openshift/machine-config-operator/pull/3203) * [Bug 2101157](https://bugzilla.redhat.com/show_bug.cgi?id=2101157): configure-ovs: fix handling of connection names with spaces and checking the connection name suffix [#3214](https://github.com/openshift/machine-config-operator/pull/3214) * [Bug 2097785](https://bugzilla.redhat.com/show_bug.cgi?id=2097785): Send out OSUpdateStaged event directly [#3189](https://github.com/openshift/machine-config-operator/pull/3189) * [Bug 2101880](https://bugzilla.redhat.com/show_bug.cgi?id=2101880): NS manifest: Set empty openshift.io/run-level [#3217](https://github.com/openshift/machine-config-operator/pull/3217) * Update block payload test with vendored runtime-utils [#3148](https://github.com/openshift/machine-config-operator/pull/3148) * [Bug 2099664](https://bugzilla.redhat.com/show_bug.cgi?id=2099664): daemon: initialize nodewriter before login monitor [#3211](https://github.com/openshift/machine-config-operator/pull/3211) * [Bug 2096413](https://bugzilla.redhat.com/show_bug.cgi?id=2096413): configure-ovs: set mac only for non fail_over_mac bonds [#3202](https://github.com/openshift/machine-config-operator/pull/3202) * README: Link to the product documentation for example MachineConfigs [#3150](https://github.com/openshift/machine-config-operator/pull/3150) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/15d0b0288a4330b90ac89f14c781dfa7349af52c...dd2a0b3f915b8057891df23748eea4a9b0315311) ### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/e456249dbf0c5456bd0671d41a4445bd266b3660) * [OCPBUGS-27090](https://issues.redhat.com/browse/OCPBUGS-27090): configurable ironic agent vlan creation [#119](https://github.com/openshift/image-customization-controller/pull/119) * [OCPBUGS-21543](https://issues.redhat.com/browse/OCPBUGS-21543): Uplift x/net to v0.17.0 [#106](https://github.com/openshift/image-customization-controller/pull/106) * [OCPBUGS-19008](https://issues.redhat.com/browse/OCPBUGS-19008): Pass BareMetalHost name to IPA (take 2) [#101](https://github.com/openshift/image-customization-controller/pull/101) * [OCPBUGS-18687](https://issues.redhat.com/browse/OCPBUGS-18687): Watch networkData Secrets for changes [#96](https://github.com/openshift/image-customization-controller/pull/96) * [OCPBUGS-5655](https://issues.redhat.com/browse/OCPBUGS-5655): Update dependencies [#76](https://github.com/openshift/image-customization-controller/pull/76) * Updating ose-image-customization-controller images to be consistent with ART [#65](https://github.com/openshift/image-customization-controller/pull/65) * [OCPBUGS-3557](https://issues.redhat.com/browse/OCPBUGS-3557): use host IPC for the agent container [#69](https://github.com/openshift/image-customization-controller/pull/69) * Use GO 1.19 [#66](https://github.com/openshift/image-customization-controller/pull/66) * [OCPBUGS-389](https://issues.redhat.com/browse/OCPBUGS-389): mount /run/udev into the agent container [#61](https://github.com/openshift/image-customization-controller/pull/61) * Support different IP addresses for Inspector and Ironic [#60](https://github.com/openshift/image-customization-controller/pull/60) * Updating ose-image-customization-controller images to be consistent with ART [#57](https://github.com/openshift/image-customization-controller/pull/57) * Upgrade golangci linter to 1.47.3 [#58](https://github.com/openshift/image-customization-controller/pull/58) * Remove IPA settings that match the defaults in ironic-agent-image [#38](https://github.com/openshift/image-customization-controller/pull/38) * [Full changelog](https://github.com/openshift/image-customization-controller/compare/30f98fdb5341d13f33c264faae0910af74424265...e456249dbf0c5456bd0671d41a4445bd266b3660) ### [machine-os-images](https://github.com/openshift/machine-os-images/tree/566bf59501f178bd80e410fda66cc424de6a4891) * Updating ose-machine-os-images images to be consistent with ART [#20](https://github.com/openshift/machine-os-images/pull/20) * [OCPBUGS-884](https://issues.redhat.com/browse/OCPBUGS-884): Update rhcos release browser url [#21](https://github.com/openshift/machine-os-images/pull/21) * [Full changelog](https://github.com/openshift/machine-os-images/compare/b1580a29e6bc76598c2d408c0e27460bc6b638be...566bf59501f178bd80e410fda66cc424de6a4891) ### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/e27952fc813ac994e64f715a8690f3d36a9ec778) * [OCPBUGS-21330](https://issues.redhat.com/browse/OCPBUGS-21330): Update go.mod for CVE-2023-39325 [Release-4.12] [#73](https://github.com/openshift/multus-admission-controller/pull/73) * Updating ose-multus-admission-controller images to be consistent with ART [#61](https://github.com/openshift/multus-admission-controller/pull/61) * [OCPBUGS-10506](https://issues.redhat.com/browse/OCPBUGS-10506): Client golang [backport 4.12] [#59](https://github.com/openshift/multus-admission-controller/pull/59) * [Full changelog](https://github.com/openshift/multus-admission-controller/compare/dbbd93bebf0fe24394ea26588c5e02de7d575764...e27952fc813ac994e64f715a8690f3d36a9ec778) ### [multus-cni](https://github.com/openshift/multus-cni/tree/07d8af54f06652b283dc0aa8db68d438c4bfe741) * [OCPBUGS-28520](https://issues.redhat.com/browse/OCPBUGS-28520): Fix SAST scan issues for multus-cni-container [4.12] [#225](https://github.com/openshift/multus-cni/pull/225) * [OCPBUGS-21061](https://issues.redhat.com/browse/OCPBUGS-21061): Update go.mod for CVE-2023-39325 [Release-4.12] [#196](https://github.com/openshift/multus-cni/pull/196) * [OCPBUGS-22461](https://issues.redhat.com/browse/OCPBUGS-22461): fix multiple default gw [#200](https://github.com/openshift/multus-cni/pull/200) * [OCPBUGS-7844](https://issues.redhat.com/browse/OCPBUGS-7844): Fix multus to support CNI plugin which does not create interface [backport 4.12] [#164](https://github.com/openshift/multus-cni/pull/164) * [Full changelog](https://github.com/openshift/multus-cni/compare/a3dbf84666cbdabbbfbcfb63cefc98877fe67361...07d8af54f06652b283dc0aa8db68d438c4bfe741) ### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/644461f25fb6b45054d1a8be7a996670959a5a9d) * [OCPBUGS-21420](https://issues.redhat.com/browse/OCPBUGS-21420): Update go.mod for CVE-2023-39325 (#36) [#36](https://github.com/openshift/multus-networkpolicy/pull/36) * [OCPBUGS-977](https://issues.redhat.com/browse/OCPBUGS-977): Sync k8snetworkplumbingwg/multi-networkpolicy-iptables 2022_10 (#20) [#20](https://github.com/openshift/multus-networkpolicy/pull/20) * Updating multus-networkpolicy images to be consistent with ART (#19) [#19](https://github.com/openshift/multus-networkpolicy/pull/19) * Upstream rebase (#18) [#18](https://github.com/openshift/multus-networkpolicy/pull/18) * Updating multus-networkpolicy images to be consistent with ART (#17) [#17](https://github.com/openshift/multus-networkpolicy/pull/17) * [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/6bc780e4f79cc1d666249da342fff1805c1121bf...644461f25fb6b45054d1a8be7a996670959a5a9d) ### [multus-route-override-cni](https://github.com/openshift/route-override-cni/tree/efd6ffbb275a133196e30edfe9f241e2a3b4f0c0) * Updating ose-multus-route-override-cni images to be consistent with ART [#27](https://github.com/openshift/route-override-cni/pull/27) * [Full changelog](https://github.com/openshift/route-override-cni/compare/523b79044306b7590ad449d7eab06a233d687d86...efd6ffbb275a133196e30edfe9f241e2a3b4f0c0) ### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/60a4bcef7c21402cb7c69dad7ab58bc4b4c24fa1) * [OCPBUGS-28801](https://issues.redhat.com/browse/OCPBUGS-28801): [release-4.12] Enable whereabouts config [#244](https://github.com/openshift/whereabouts-cni/pull/244) * [OCPBUGS-16008](https://issues.redhat.com/browse/OCPBUGS-16008): Cherry pick fix assignment 4.12 [#238](https://github.com/openshift/whereabouts-cni/pull/238) * [OCPBUGS-21499](https://issues.redhat.com/browse/OCPBUGS-21499): update golang.org/x/net to v0.17.0 [#209](https://github.com/openshift/whereabouts-cni/pull/209) * [OCPBUGS-5953](https://issues.redhat.com/browse/OCPBUGS-5953): Denormalize IP name before checking if pod is alive [Backport 4.12] [#178](https://github.com/openshift/whereabouts-cni/pull/178) * Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#134](https://github.com/openshift/whereabouts-cni/pull/134) * [OCPBUGS-8673](https://issues.redhat.com/browse/OCPBUGS-8673): Dual stack support [#131](https://github.com/openshift/whereabouts-cni/pull/131) * [OCPBUGS-7429](https://issues.redhat.com/browse/OCPBUGS-7429): Invalid ipv6 backport 4.12 [#109](https://github.com/openshift/whereabouts-cni/pull/109) * [OCPBUGS-11321](https://issues.redhat.com/browse/OCPBUGS-11321): respect requested allocation range when exluding ranges [Backport 4.12] [#123](https://github.com/openshift/whereabouts-cni/pull/123) * Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART [#93](https://github.com/openshift/whereabouts-cni/pull/93) * [OCPBUGS-3941](https://issues.redhat.com/browse/OCPBUGS-3941): Backport Excluded ranges bug (#282) [#103](https://github.com/openshift/whereabouts-cni/pull/103) * Fix commitish for non-default interfaces fix [#96](https://github.com/openshift/whereabouts-cni/pull/96) * ip-reconciler: Add all non default interfaces to Pod IP list [#95](https://github.com/openshift/whereabouts-cni/pull/95) * [Full changelog](https://github.com/openshift/whereabouts-cni/compare/7d544f9f2c44303f28dcc6dd4d5620da24907d9c...60a4bcef7c21402cb7c69dad7ab58bc4b4c24fa1) ### [must-gather](https://github.com/openshift/must-gather/tree/dc23fd8103fdf54262f101c16b11102242d9d002) * [OCPBUGS-24523](https://issues.redhat.com/browse/OCPBUGS-24523): [release-4.12] Add csi-proxy logs collection in must-gather for Windows nodes [#394](https://github.com/openshift/must-gather/pull/394) * [OCPBUGS-4250](https://issues.redhat.com/browse/OCPBUGS-4250): [release-4.12] backport PodNetworkConnectivityCheck gather script #334 [#334](https://github.com/openshift/must-gather/pull/334) * Updating ose-must-gather images to be consistent with ART [#330](https://github.com/openshift/must-gather/pull/330) * [Bug 2000552](https://bugzilla.redhat.com/show_bug.cgi?id=2000552): Add apiservices logs gathering by default [#332](https://github.com/openshift/must-gather/pull/332) * [OCPBUGS-1810](https://issues.redhat.com/browse/OCPBUGS-1810): fix ingress node firewall script permission [#329](https://github.com/openshift/must-gather/pull/329) * Add ingress node firewall must-gather collection script [#328](https://github.com/openshift/must-gather/pull/328) * Updating ose-must-gather images to be consistent with ART [#320](https://github.com/openshift/must-gather/pull/320) * [Bug 2103283](https://bugzilla.redhat.com/show_bug.cgi?id=2103283): Add timeout to oc cp command to fix must-gather delays when routers are terminating [#317](https://github.com/openshift/must-gather/pull/317) * Stop collecting Docker logs on Windows instances [#315](https://github.com/openshift/must-gather/pull/315) * [Full changelog](https://github.com/openshift/must-gather/compare/44f6adacb094952723f957d4d7d61043b6f2fe04...dc23fd8103fdf54262f101c16b11102242d9d002) ### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/30386d6b8d4f3b05931842b6a9b85f15c241b09a) * [OCPBUGS-13836](https://issues.redhat.com/browse/OCPBUGS-13836): Ignore missing links during delete command [#53](https://github.com/openshift/bond-cni/pull/53) * Updating ose-network-interface-bond-cni images to be consistent with ART [#37](https://github.com/openshift/bond-cni/pull/37) * ds merges: mac duplicates [#40](https://github.com/openshift/bond-cni/pull/40) * Add mtu verification for nics that are not sriov (#40) [#38](https://github.com/openshift/bond-cni/pull/38) * ds merges: github ci [#33](https://github.com/openshift/bond-cni/pull/33) * [Full changelog](https://github.com/openshift/bond-cni/compare/b76a677034edb66ddaf123cb79a2bb20a301f694...30386d6b8d4f3b05931842b6a9b85f15c241b09a) ### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/fad45782360032bdde3a10b9a28ba30ecc14684f) * Added METRIC_TEST_IMAGE var (#92) [#92](https://github.com/openshift/network-metrics-daemon/pull/92) * Update the k8s dependencies to 1.25.15 (#84) [#84](https://github.com/openshift/network-metrics-daemon/pull/84) * Revert "Remove e2e tests that consistently fail in 4.12 (#74)" (#77) [#74](https://github.com/openshift/network-metrics-daemon/pull/74) * Remove e2e tests that consistently fail in 4.12 (#74) [#74](https://github.com/openshift/network-metrics-daemon/pull/74) * Updating ose-network-metrics-daemon images to be consistent with ART (#60) [#60](https://github.com/openshift/network-metrics-daemon/pull/60) * Fix gofmt check issue (#68) [#68](https://github.com/openshift/network-metrics-daemon/pull/68) * Update golang.org/x/text to 0.7.0 (#66) [#66](https://github.com/openshift/network-metrics-daemon/pull/66) * Adjusted test ns for the new ocp security model (#61) [#61](https://github.com/openshift/network-metrics-daemon/pull/61) * Updating ose-network-metrics-daemon images to be consistent with ART (#59) [#59](https://github.com/openshift/network-metrics-daemon/pull/59) * [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/ec215698a4984fab85b29966bbdd420f1bbc58f4...fad45782360032bdde3a10b9a28ba30ecc14684f) ### [network-tools](https://github.com/openshift/network-tools/tree/c76613c77c8785b91611bb3c4245bc34f3b14f76) * [OCPBUGS-1831](https://issues.redhat.com/browse/OCPBUGS-1831): Improve error propagation [#70](https://github.com/openshift/network-tools/pull/70) * Updating ose-network-tools images to be consistent with ART [#71](https://github.com/openshift/network-tools/pull/71) * Minor fixed found during demo preparation [#68](https://github.com/openshift/network-tools/pull/68) * Add pod-run-netns-command script to run command from network-tools [#67](https://github.com/openshift/network-tools/pull/67) * Implement new scripts to interact with ovn cluster [#66](https://github.com/openshift/network-tools/pull/66) * Migrate existing scripts to network-tools [#65](https://github.com/openshift/network-tools/pull/65) * Rework network-tools to [#64](https://github.com/openshift/network-tools/pull/64) * update owners [#62](https://github.com/openshift/network-tools/pull/62) * Updating ose-network-tools images to be consistent with ART [#63](https://github.com/openshift/network-tools/pull/63) * [Full changelog](https://github.com/openshift/network-tools/compare/4e87286cff4d645777cf2632a0671eed0d82270c...c76613c77c8785b91611bb3c4245bc34f3b14f76) ### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/f07bf80ded344ebf02003e8874dd21f45175869d) * [OCPBUGS-21049](https://issues.redhat.com/browse/OCPBUGS-21049): Bump K8s to v1.25 [#104](https://github.com/openshift/oauth-apiserver/pull/104) * Updating ose-oauth-apiserver images to be consistent with ART [#80](https://github.com/openshift/oauth-apiserver/pull/80) * bump kube to 1.24.4 [#81](https://github.com/openshift/oauth-apiserver/pull/81) * [Full changelog](https://github.com/openshift/oauth-apiserver/compare/c9c2dd15751d391a6a81ceee744db7b2d07a208b...f07bf80ded344ebf02003e8874dd21f45175869d) ### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/03e5b13b8b7087dd70abfd70efb4c5b92f800a4f) * Update logo [#245](https://github.com/openshift/oauth-proxy/pull/245) * fix json examples for --openshift-delegate-urls [#203](https://github.com/openshift/oauth-proxy/pull/203) * [Full changelog](https://github.com/openshift/oauth-proxy/compare/aad1b28fcf4b32d9ad592eee33e439bd575565a2...03e5b13b8b7087dd70abfd70efb4c5b92f800a4f) ### [oauth-server](https://github.com/openshift/oauth-server/tree/0c434f420b178093a2e940dfb2c445ff638d1914) * [OCPBUGS-27478](https://issues.redhat.com/browse/OCPBUGS-27478): bump osin deps [#144](https://github.com/openshift/oauth-server/pull/144) * [OCPBUGS-13906](https://issues.redhat.com/browse/OCPBUGS-13906): don't log request query and fragment on failed authn request [#129](https://github.com/openshift/oauth-server/pull/129) * [OCPBUGS-12757](https://issues.redhat.com/browse/OCPBUGS-12757): bump lib-go for group cache fix, kube 1.24->1.25 [#127](https://github.com/openshift/oauth-server/pull/127) * Updating oauth-server images to be consistent with ART [#109](https://github.com/openshift/oauth-server/pull/109) * Bump library-go to b2073c41366aae78868b24e86d99021b79d754cb [#112](https://github.com/openshift/oauth-server/pull/112) * fix linter findings [#98](https://github.com/openshift/oauth-server/pull/98) * [Full changelog](https://github.com/openshift/oauth-server/compare/8d80088ebf859d717e470b47fed9f9014b9226a0...0c434f420b178093a2e940dfb2c445ff638d1914) ### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/e9ad64992e81a10230e1759db6577db078f18b38) * : OCPBUGS-21429: Enable HTTP/2 CVE mitigation [#399](https://github.com/openshift/openshift-apiserver/pull/399) * [OCPBUGS-8717](https://issues.redhat.com/browse/OCPBUGS-8717): Clear metadata.namespace on projects before write. [#358](https://github.com/openshift/openshift-apiserver/pull/358) * [OCPBUGS-4339](https://issues.redhat.com/browse/OCPBUGS-4339): fix printer panic [#335](https://github.com/openshift/openshift-apiserver/pull/335) * [IR-259](https://issues.redhat.com/browse/IR-259): changing image stream importMode increments its generation [#329](https://github.com/openshift/openshift-apiserver/pull/329) * [IR-258](https://issues.redhat.com/browse/IR-258): ImageStreamImport manifest list support [#290](https://github.com/openshift/openshift-apiserver/pull/290) * bump to kube 1.25.2 [#320](https://github.com/openshift/openshift-apiserver/pull/320) * [OCPBUGS-2803](https://issues.redhat.com/browse/OCPBUGS-2803): Revert "projects: add rw mutex to auth cache" [#326](https://github.com/openshift/openshift-apiserver/pull/326) * Perform route host defaulting and update authz using v1 types. [#321](https://github.com/openshift/openshift-apiserver/pull/321) * Drop AllocateRouterShard from hostname allocation interface. [#322](https://github.com/openshift/openshift-apiserver/pull/322) * Use route/v1 types for route warnings. [#317](https://github.com/openshift/openshift-apiserver/pull/317) * Remove k8s.io/kubernetes deps from route validation/defaulting. [#319](https://github.com/openshift/openshift-apiserver/pull/319) * Condense the route host allocator abstraction. [#313](https://github.com/openshift/openshift-apiserver/pull/313) * Move route host assignment code out of the route REST strategy. [#315](https://github.com/openshift/openshift-apiserver/pull/315) * Make route validation operate on v1 types. [#312](https://github.com/openshift/openshift-apiserver/pull/312) * make api team approver [#316](https://github.com/openshift/openshift-apiserver/pull/316) * Remove use of %w formatting directive from t.Errorf call. [#293](https://github.com/openshift/openshift-apiserver/pull/293) * add retry on imagestreamtag update [#304](https://github.com/openshift/openshift-apiserver/pull/304) * Add coreydaley as reviewer/approver for pkg/build [#294](https://github.com/openshift/openshift-apiserver/pull/294) * Stop unnecessary project auth cache invalidations. [#295](https://github.com/openshift/openshift-apiserver/pull/295) * [Bug 2089402](https://bugzilla.redhat.com/show_bug.cgi?id=2089402): Validate Image labels correctly [#292](https://github.com/openshift/openshift-apiserver/pull/292) * [Full changelog](https://github.com/openshift/openshift-apiserver/compare/35df5a026c69f864c3ca499718256f6b2592d811...e9ad64992e81a10230e1759db6577db078f18b38) ### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/b6528f9ea28164af9f1ceea0e50f18116fe3c90e) * Updating ose-openshift-controller-manager images to be consistent with ART [#241](https://github.com/openshift/openshift-controller-manager/pull/241) * [OCPBUGS-978](https://issues.redhat.com/browse/OCPBUGS-978): gracefully release leases in OCM [#239](https://github.com/openshift/openshift-controller-manager/pull/239) * template namespace processing [#242](https://github.com/openshift/openshift-controller-manager/pull/242) * bump to kube 1.25.2 [#244](https://github.com/openshift/openshift-controller-manager/pull/244) * Remove route controllers [#240](https://github.com/openshift/openshift-controller-manager/pull/240) * remove route controllers from OCM process (openshift-controller-manager start) [#238](https://github.com/openshift/openshift-controller-manager/pull/238) * Updating ose-openshift-controller-manager images to be consistent with ART [#236](https://github.com/openshift/openshift-controller-manager/pull/236) * [Bug 2117235](https://bugzilla.redhat.com/show_bug.cgi?id=2117235): separate route controllers to a new command [#234](https://github.com/openshift/openshift-controller-manager/pull/234) * [Bug 2116715](https://bugzilla.redhat.com/show_bug.cgi?id=2116715): remove GenericResourceInformer code because it is not used anymore [#235](https://github.com/openshift/openshift-controller-manager/pull/235) * [BUILD-417](https://issues.redhat.com/browse/BUILD-417): Rebase k8s 1.24 [#226](https://github.com/openshift/openshift-controller-manager/pull/226) * [Bug 2110617](https://bugzilla.redhat.com/show_bug.cgi?id=2110617): Split route controller [#230](https://github.com/openshift/openshift-controller-manager/pull/230) * [BUILD-433](https://issues.redhat.com/browse/BUILD-433): Run builds in user namespaces without seccomp if BUILD_PRIVILEGED=false [#173](https://github.com/openshift/openshift-controller-manager/pull/173) * [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/79bfbb51f113f5098a39821f1891a21ffd446434...b6528f9ea28164af9f1ceea0e50f18116fe3c90e) ### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/3d5dc18d2bee5ba7132560bf40790af997952d33) * [OCPBUGS-20706](https://issues.redhat.com/browse/OCPBUGS-20706): bump `x/net` to v0.17.0 [#106](https://github.com/openshift/openshift-state-metrics/pull/106) * Updating openshift-state-metrics images to be consistent with ART [#91](https://github.com/openshift/openshift-state-metrics/pull/91) * OWNERS: Add myself, and move former team members to emeritus [#90](https://github.com/openshift/openshift-state-metrics/pull/90) * Updating openshift-state-metrics images to be consistent with ART [#89](https://github.com/openshift/openshift-state-metrics/pull/89) * Updating openshift-state-metrics images to be consistent with ART [#88](https://github.com/openshift/openshift-state-metrics/pull/88) * [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/78bc019d4b7d7a1b215711dcbeec240756a3d562...3d5dc18d2bee5ba7132560bf40790af997952d33) ### [openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/2f1d9f8ac6af4364d8118c874b0071d9e9f3ee65) * update tags to v1.25.4 [#2118](https://github.com/openshift/cloud-provider-openstack/pull/2118) * [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/f985eeeb426c803a2a1d8e14e6b703ccc7114309...2f1d9f8ac6af4364d8118c874b0071d9e9f3ee65) ### [openstack-cinder-csi-driver-operator](https://github.com/openshift/openstack-cinder-csi-driver-operator/tree/d09e51ae44b3ac6d27236b515c1f7c6da847689d) * [OCPBUGS-21557](https://issues.redhat.com/browse/OCPBUGS-21557): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#137](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/137) * [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#130](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/130) * Bug OCPBUGS-3774: Add SecretHashAnnotation to node service [#98](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/98) * [OCPBUGS-1904](https://issues.redhat.com/browse/OCPBUGS-1904): Only deploy VolumeSnapshotClass when CRD exists [#94](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/94) * Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART [#93](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/93) * [STOR-858](https://issues.redhat.com/browse/STOR-858): Bump github.com/openshift/* and k8s.io/* [#92](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/92) * Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART [#90](https://github.com/openshift/openstack-cinder-csi-driver-operator/pull/90) * [Full changelog](https://github.com/openshift/openstack-cinder-csi-driver-operator/compare/a6d74d7263737fda5684f54bae26b388e7cdee63...d09e51ae44b3ac6d27236b515c1f7c6da847689d) ### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/05657663c02be6d03d074d0f39a2b247cef9286a) * Bug OCPBUGS-19770: Set controller's SyncPeriod to 1 hour [#86](https://github.com/openshift/machine-api-provider-openstack/pull/86) * [OCPBUGS-10607](https://issues.redhat.com/browse/OCPBUGS-10607): Use TenantID if ProjectID is empty [#66](https://github.com/openshift/machine-api-provider-openstack/pull/66) * [OCPBUGS-10603](https://issues.redhat.com/browse/OCPBUGS-10603): machineset_controller: Stop caching clouds credentials [#65](https://github.com/openshift/machine-api-provider-openstack/pull/65) * [OCPBUGS-7155](https://issues.redhat.com/browse/OCPBUGS-7155): Address CVE-2022-41717 [#55](https://github.com/openshift/machine-api-provider-openstack/pull/55) * Updating ose-machine-api-provider-openstack images to be consistent with ART [#47](https://github.com/openshift/machine-api-provider-openstack/pull/47) * Depend on CAPO v0.6.3 [#45](https://github.com/openshift/machine-api-provider-openstack/pull/45) * gofmt with Go v1.19 [#48](https://github.com/openshift/machine-api-provider-openstack/pull/48) * Update dependencies [#44](https://github.com/openshift/machine-api-provider-openstack/pull/44) * Updating ose-machine-api-provider-openstack images to be consistent with ART [#43](https://github.com/openshift/machine-api-provider-openstack/pull/43) * [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/0446d771465fa6e03ea8ed24f1cea706d0d2b15e...05657663c02be6d03d074d0f39a2b247cef9286a) ### [openstack-machine-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/f13e381e962777d48fadcaa3570a583e72aa80c7) * [OCPBUGS-20780](https://issues.redhat.com/browse/OCPBUGS-20780): deps: Upgrade golang.org/x/net to v0.17.0 [#277](https://github.com/openshift/cluster-api-provider-openstack/pull/277) * [OCPBUGS-2508](https://issues.redhat.com/browse/OCPBUGS-2508): Ensure network defs without subnet follow noAllowedAddressPairs [#247](https://github.com/openshift/cluster-api-provider-openstack/pull/247) * Updating ose-openstack-machine-controllers images to be consistent with ART [#244](https://github.com/openshift/cluster-api-provider-openstack/pull/244) * gofmt with Go v1.19 [#246](https://github.com/openshift/cluster-api-provider-openstack/pull/246) * [OCPBUGS-1765](https://issues.redhat.com/browse/OCPBUGS-1765): Apply noAllowedAddressPairs on intended subnets only [#242](https://github.com/openshift/cluster-api-provider-openstack/pull/242) * Updating ose-openstack-machine-controllers images to be consistent with ART [#239](https://github.com/openshift/cluster-api-provider-openstack/pull/239) * [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/4f21449a757895eebf1b21611c49a772669b11dc...f13e381e962777d48fadcaa3570a583e72aa80c7) ### [operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/3327393399e6847c34da5875c9158be533c59a0e) * [OCPBUGS-32854](https://issues.redhat.com/browse/OCPBUGS-32854): bump go-jose to v2.6.3 [#782](https://github.com/openshift/operator-framework-olm/pull/782) * [OCPBUGS-35242](https://issues.redhat.com/browse/OCPBUGS-35242): Unblock CI [#773](https://github.com/openshift/operator-framework-olm/pull/773) * [OCPBUGS-27563](https://issues.redhat.com/browse/OCPBUGS-27563), [OCPBUGS-27568](https://issues.redhat.com/browse/OCPBUGS-27568), [OCPBUGS-27648](https://issues.redhat.com/browse/OCPBUGS-27648), [OCPBUGS-27653](https://issues.redhat.com/browse/OCPBUGS-27653): bump go-git/v5 to 5.11.0 [#688](https://github.com/openshift/operator-framework-olm/pull/688) * [OCPBUGS-27962](https://issues.redhat.com/browse/OCPBUGS-27962): [CARRY] SSC RBAC [#671](https://github.com/openshift/operator-framework-olm/pull/671) * [OCPBUGS-28229](https://issues.redhat.com/browse/OCPBUGS-28229): Registry Pod Controller Flag [#673](https://github.com/openshift/operator-framework-olm/pull/673) * [OCPBUGS-24619](https://issues.redhat.com/browse/OCPBUGS-24619): Update to latest k8s v0.25.15 API server and enable HTTP/2 DoS mitigations [#660](https://github.com/openshift/operator-framework-olm/pull/660) * [OCPBUGS-22132](https://issues.redhat.com/browse/OCPBUGS-22132): [release-4.12] Bump golang.org/x/net to v0.17.0 [#590](https://github.com/openshift/operator-framework-olm/pull/590) * [OCPBUGS-18512](https://issues.redhat.com/browse/OCPBUGS-18512), [RHIBMCS-168](https://issues.redhat.com/browse/RHIBMCS-168): Copied csv listing backport [#559](https://github.com/openshift/operator-framework-olm/pull/559) * Introduce DOWNSTREAM_OWNERS file [#541](https://github.com/openshift/operator-framework-olm/pull/541) * Allow cpb to be statically compiled / exempt from FIPS compliance [#512](https://github.com/openshift/operator-framework-olm/pull/512) * [OCPBUGS-15858](https://issues.redhat.com/browse/OCPBUGS-15858): fix dynamic conversion webhook [#503](https://github.com/openshift/operator-framework-olm/pull/503) * [OCPBUGS-15737](https://issues.redhat.com/browse/OCPBUGS-15737): Re-enable psa plugin [#500](https://github.com/openshift/operator-framework-olm/pull/500) * [OCPBUGS-7650](https://issues.redhat.com/browse/OCPBUGS-7650): Catalog Pod Startup Probe Timeout [#450](https://github.com/openshift/operator-framework-olm/pull/450) * Updating operator-registry images to be consistent with ART [#397](https://github.com/openshift/operator-framework-olm/pull/397) * [OCPBUGS-7825](https://issues.redhat.com/browse/OCPBUGS-7825): Set openshift.io/scc label to empty [#456](https://github.com/openshift/operator-framework-olm/pull/456) * [OCPBUGS-7769](https://issues.redhat.com/browse/OCPBUGS-7769): [release-4.12] update cluster policy operator dependency [#454](https://github.com/openshift/operator-framework-olm/pull/454) * [OCPBUGS-7556](https://issues.redhat.com/browse/OCPBUGS-7556): Defuse E2e timebomb [#449](https://github.com/openshift/operator-framework-olm/pull/449) * [OCPBUGS-7086](https://issues.redhat.com/browse/OCPBUGS-7086): cherry-pick pull request refactor FBC caching (#1051) f… [#441](https://github.com/openshift/operator-framework-olm/pull/441) * [OCPBUGS-6260](https://issues.redhat.com/browse/OCPBUGS-6260): Catalog, fatal error: concurrent map read and map write [#440](https://github.com/openshift/operator-framework-olm/pull/440) * [OCPBUGS-7025](https://issues.redhat.com/browse/OCPBUGS-7025): Set ImagePullPolicy of bundle unpacker to "IfNotPresent" for image digests [#439](https://github.com/openshift/operator-framework-olm/pull/439) * [OCPBUGS-3881](https://issues.redhat.com/browse/OCPBUGS-3881): Default to legacy psa settings [#426](https://github.com/openshift/operator-framework-olm/pull/426) * [OCPBUGS-4951](https://issues.redhat.com/browse/OCPBUGS-4951): Bump go and k8s [#424](https://github.com/openshift/operator-framework-olm/pull/424) * Updating operator-lifecycle-manager images to be consistent with ART [#398](https://github.com/openshift/operator-framework-olm/pull/398) * [OCPBUGS-3837](https://issues.redhat.com/browse/OCPBUGS-3837): fix service account token secret reference (#2862) [#412](https://github.com/openshift/operator-framework-olm/pull/412) * [OCPBUGS-3795](https://issues.redhat.com/browse/OCPBUGS-3795): Order an operator CR's status.Component.Refs array (#2880) [#411](https://github.com/openshift/operator-framework-olm/pull/411) * Update OWNERS file [#402](https://github.com/openshift/operator-framework-olm/pull/402) * test/e2e: Preserve the existing environment when using exec.Command [#403](https://github.com/openshift/operator-framework-olm/pull/403) * Attempt workaround for https://issues.redhat.com/browse/CLOUDBLD-11068 [#399](https://github.com/openshift/operator-framework-olm/pull/399) * [OCPBUGS-1912](https://issues.redhat.com/browse/OCPBUGS-1912): Move opm diff to oc mirror [#391](https://github.com/openshift/operator-framework-olm/pull/391) * [OCPBUGS-122](https://issues.redhat.com/browse/OCPBUGS-122): Psa legacy catalog enablement [#383](https://github.com/openshift/operator-framework-olm/pull/383) * [OLM-2695](https://issues.redhat.com/browse/OLM-2695): Adds downstream only CSV Namespace Labeler Plug-In [#370](https://github.com/openshift/operator-framework-olm/pull/370) * [OCPBUGS-1004](https://issues.redhat.com/browse/OCPBUGS-1004): dump descriptive source info on error instead of the source data (#1021) [#380](https://github.com/openshift/operator-framework-olm/pull/380) * [OCPBUGS-858](https://issues.redhat.com/browse/OCPBUGS-858): Package Server Manager should enforce expected csv values [#378](https://github.com/openshift/operator-framework-olm/pull/378) * [OCPBUGS-650](https://issues.redhat.com/browse/OCPBUGS-650): fixing reliance on candidate channel containing all referenced bundle… [#379](https://github.com/openshift/operator-framework-olm/pull/379) * [OLM-2690](https://issues.redhat.com/browse/OLM-2690): Subscription affinity [#359](https://github.com/openshift/operator-framework-olm/pull/359) * OLM-1803 channel upgrade graph visualization [#377](https://github.com/openshift/operator-framework-olm/pull/377) * [OLM-2753](https://issues.redhat.com/browse/OLM-2753): Semver veneer pipe support [#376](https://github.com/openshift/operator-framework-olm/pull/376) * [OCPBUGS-643](https://issues.redhat.com/browse/OCPBUGS-643), [OLM-2726](https://issues.redhat.com/browse/OLM-2726): downstreaming `opm serve` changes from operator-registry [#374](https://github.com/openshift/operator-framework-olm/pull/374) * [OCPBUGS-78](https://issues.redhat.com/browse/OCPBUGS-78): Cleanup conversion webhooks when an operator is uninstalled [#360](https://github.com/openshift/operator-framework-olm/pull/360) * [OCPBUGS-440](https://issues.redhat.com/browse/OCPBUGS-440): improve CA and certificate generation [#361](https://github.com/openshift/operator-framework-olm/pull/361) * noqe: script fixes [#369](https://github.com/openshift/operator-framework-olm/pull/369) * (psa) restrict olm namespace + remove labels from openshift-operators ns [#367](https://github.com/openshift/operator-framework-olm/pull/367) * noqe: operator-registry QoL improvements [#362](https://github.com/openshift/operator-framework-olm/pull/362) * noqe: Update magic catalog for psa changes (#2842) [#365](https://github.com/openshift/operator-framework-olm/pull/365) * Psa downstream [#349](https://github.com/openshift/operator-framework-olm/pull/349) * Add a more robust script for automating the upstream/downstream sync process [#351](https://github.com/openshift/operator-framework-olm/pull/351) * Support Global Operators in Console [#326](https://github.com/openshift/operator-framework-olm/pull/326) * [Bug 2097557](https://bugzilla.redhat.com/show_bug.cgi?id=2097557): use env var for OCP version instead of clusterversion status [#346](https://github.com/openshift/operator-framework-olm/pull/346) * Explicitly override the global catalog namespace [#345](https://github.com/openshift/operator-framework-olm/pull/345) * Sync 07/26 [#343](https://github.com/openshift/operator-framework-olm/pull/343) * [Bug 2105045](https://bugzilla.redhat.com/show_bug.cgi?id=2105045): Only update namespaces when OperatorGroup labels need to change. (#2809) [#336](https://github.com/openshift/operator-framework-olm/pull/336) * Sync 0707 [#335](https://github.com/openshift/operator-framework-olm/pull/335) * [Bug 2101357](https://bugzilla.redhat.com/show_bug.cgi?id=2101357): concurrent write bug fix [#337](https://github.com/openshift/operator-framework-olm/pull/337) * [Bug 2106449](https://bugzilla.redhat.com/show_bug.cgi?id=2106449): Update containerd version [#338](https://github.com/openshift/operator-framework-olm/pull/338) * Updating operator-lifecycle-manager images to be consistent with ART [#334](https://github.com/openshift/operator-framework-olm/pull/334) * Update makefile to default to gsed if present [#313](https://github.com/openshift/operator-framework-olm/pull/313) * Updating operator-registry images to be consistent with ART [#333](https://github.com/openshift/operator-framework-olm/pull/333) * [Full changelog](https://github.com/openshift/operator-framework-olm/compare/5ea0428ed52bf0cae15094d7e4fb24b0953932d7...3327393399e6847c34da5875c9158be533c59a0e) ### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/3589162a126ec4a696998ae42eec431e532d337c) * [OCPBUGS-32081](https://issues.redhat.com/browse/OCPBUGS-32081): update golang.org/x/net for CVE-2023-45288 [#567](https://github.com/operator-framework/operator-marketplace/pull/567) * [OCPBUGS-20955](https://issues.redhat.com/browse/OCPBUGS-20955): [release-4.12] bump golang.org/x/net to 0.17.0 [#550](https://github.com/operator-framework/operator-marketplace/pull/550) * [OCPBUGS-18503](https://issues.redhat.com/browse/OCPBUGS-18503): remove a race condition [#533](https://github.com/operator-framework/operator-marketplace/pull/533) * [OCPBUGS-14109](https://issues.redhat.com/browse/OCPBUGS-14109): Revert default catsrc diff changes [#519](https://github.com/operator-framework/operator-marketplace/pull/519) * [OCPBUGS-7108](https://issues.redhat.com/browse/OCPBUGS-7108): Default CatalogSource aren't always reverted to default settings [#506](https://github.com/operator-framework/operator-marketplace/pull/506) * [OCPBUGS-5468](https://issues.redhat.com/browse/OCPBUGS-5468): Remove PSA audit and warnings [#503](https://github.com/operator-framework/operator-marketplace/pull/503) * [OCPBUGS-5474](https://issues.redhat.com/browse/OCPBUGS-5474): Run Default CatalogSource in Restricted mode [#500](https://github.com/operator-framework/operator-marketplace/pull/500) * [OCPBUGS-4763](https://issues.redhat.com/browse/OCPBUGS-4763): Unenforce PSA Restrictions [#494](https://github.com/operator-framework/operator-marketplace/pull/494) * [OCPBUGS-2223](https://issues.redhat.com/browse/OCPBUGS-2223): Update Default CatalogSource Images to 4.12 tag [#487](https://github.com/operator-framework/operator-marketplace/pull/487) * Updating marketplace-operator images to be consistent with ART [#479](https://github.com/operator-framework/operator-marketplace/pull/479) * [OCPBUGS-441](https://issues.redhat.com/browse/OCPBUGS-441): Dockerfile.okd: include custom OperatorHub manifest [#481](https://github.com/operator-framework/operator-marketplace/pull/481) * (psa) make marketplace namespace restricted [#484](https://github.com/operator-framework/operator-marketplace/pull/484) * (namespace) remove PSA baseline enforcement [#483](https://github.com/operator-framework/operator-marketplace/pull/483) * Add PSA enforcement label [#480](https://github.com/operator-framework/operator-marketplace/pull/480) * [Bug 2010375](https://bugzilla.redhat.com/show_bug.cgi?id=2010375): Clarify reason/steps to diagnose in *CatalogError prom alert [#469](https://github.com/operator-framework/operator-marketplace/pull/469) * [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/c3bae405daf605563d85fed86de0748d3b424bff...3589162a126ec4a696998ae42eec431e532d337c) ### [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver/tree/87ab37895e56ea3c80be0163571fa593ce96d86b) * [OCPBUGS-23162](https://issues.redhat.com/browse/OCPBUGS-23162): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#131](https://github.com/openshift/ovirt-csi-driver/pull/131) * Updating ose-ovirt-csi-driver images to be consistent with ART [#122](https://github.com/openshift/ovirt-csi-driver/pull/122) * Bump go version [#123](https://github.com/openshift/ovirt-csi-driver/pull/123) * improved logging if no storage domain is found by name [#121](https://github.com/openshift/ovirt-csi-driver/pull/121) * updated go-ovirt-client [#120](https://github.com/openshift/ovirt-csi-driver/pull/120) * Added @Darth-Mera as approver [#119](https://github.com/openshift/ovirt-csi-driver/pull/119) * added k8s deployment files [#114](https://github.com/openshift/ovirt-csi-driver/pull/114) * update go-ovirt-client [#113](https://github.com/openshift/ovirt-csi-driver/pull/113) * Updating ose-ovirt-csi-driver images to be consistent with ART [#112](https://github.com/openshift/ovirt-csi-driver/pull/112) * [Full changelog](https://github.com/openshift/ovirt-csi-driver/compare/cd3370fb298994289659a5a9c73262c007e8a836...87ab37895e56ea3c80be0163571fa593ce96d86b) ### [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator/tree/e5e02335951010745a42f472a0656b5948ffdade) * [OCPBUGS-23266](https://issues.redhat.com/browse/OCPBUGS-23266): CVE-2023-44487: bump golang.org/x/net to v0.17.0 [#128](https://github.com/openshift/ovirt-csi-driver-operator/pull/128) * [OCPBUGS-18417](https://issues.redhat.com/browse/OCPBUGS-18417): set TLS cipher suites in Kube RBAC sidecars [#121](https://github.com/openshift/ovirt-csi-driver-operator/pull/121) * Updating ose-cluster-ovirt-csi-operator images to be consistent with ART [#108](https://github.com/openshift/ovirt-csi-driver-operator/pull/108) * [STOR-858](https://issues.redhat.com/browse/STOR-858): Bump github.com/openshift/* and k8s.io/* [#107](https://github.com/openshift/ovirt-csi-driver-operator/pull/107) * updated go-ovirt-client [#106](https://github.com/openshift/ovirt-csi-driver-operator/pull/106) * [OCPRHV-685](https://issues.redhat.com/browse/OCPRHV-685): added secret informer for daemonset [#104](https://github.com/openshift/ovirt-csi-driver-operator/pull/104) * Added @Darth-Mera as approver [#105](https://github.com/openshift/ovirt-csi-driver-operator/pull/105) * update go-ovirt-client [#103](https://github.com/openshift/ovirt-csi-driver-operator/pull/103) * Add client certificate and key to service monitor [#102](https://github.com/openshift/ovirt-csi-driver-operator/pull/102) * [Bug 2088033](https://bugzilla.redhat.com/show_bug.cgi?id=2088033): Clear text password stored on disk [#99](https://github.com/openshift/ovirt-csi-driver-operator/pull/99) * Update credentials automatically [#101](https://github.com/openshift/ovirt-csi-driver-operator/pull/101) * Updating ose-cluster-ovirt-csi-operator images to be consistent with ART [#100](https://github.com/openshift/ovirt-csi-driver-operator/pull/100) * [Full changelog](https://github.com/openshift/ovirt-csi-driver-operator/compare/1c75c1240c4c0feda419378d6f63767cddab50df...e5e02335951010745a42f472a0656b5948ffdade) ### [ovirt-machine-controllers](https://github.com/openshift/cluster-api-provider-ovirt/tree/03e8cb50f9ffa28b48d8aeaeb8410ab1598750d1) * [OCPBUGS-6309](https://issues.redhat.com/browse/OCPBUGS-6309): Fix swapped CPU socket and thread mapping [#173](https://github.com/openshift/cluster-api-provider-ovirt/pull/173) * Updating ose-ovirt-machine-controllers images to be consistent with ART [#170](https://github.com/openshift/cluster-api-provider-ovirt/pull/170) * Improve logging [#168](https://github.com/openshift/cluster-api-provider-ovirt/pull/168) * update go-ovirt-client [#167](https://github.com/openshift/cluster-api-provider-ovirt/pull/167) * added wrapped klogr for unified logging [#166](https://github.com/openshift/cluster-api-provider-ovirt/pull/166) * Remove duplicate MemoryMB validation [#165](https://github.com/openshift/cluster-api-provider-ovirt/pull/165) * Ocprhv 681 automatic credentials update [#161](https://github.com/openshift/cluster-api-provider-ovirt/pull/161) * Added @Darth-Mera as approver [#164](https://github.com/openshift/cluster-api-provider-ovirt/pull/164) * Add validations tests [#163](https://github.com/openshift/cluster-api-provider-ovirt/pull/163) * updated readme and custom capo docs [#162](https://github.com/openshift/cluster-api-provider-ovirt/pull/162) * Refactor controller structure [#160](https://github.com/openshift/cluster-api-provider-ovirt/pull/160) * Disable memory ballooning in high perf workers [#143](https://github.com/openshift/cluster-api-provider-ovirt/pull/143) * Fix OCPRHV-789 [#159](https://github.com/openshift/cluster-api-provider-ovirt/pull/159) * [OCPRHV-788](https://issues.redhat.com/browse/OCPRHV-788): added check for high_performance to set placement_policy_affinity [#144](https://github.com/openshift/cluster-api-provider-ovirt/pull/144) * added functional test for automatically updating credentials [#158](https://github.com/openshift/cluster-api-provider-ovirt/pull/158) * set serial console enabled for high performance VMs [#157](https://github.com/openshift/cluster-api-provider-ovirt/pull/157) * enable headless for high performance VMs [#156](https://github.com/openshift/cluster-api-provider-ovirt/pull/156) * disable soundcard for high performance VMs [#155](https://github.com/openshift/cluster-api-provider-ovirt/pull/155) * dedicated functional test run script [#154](https://github.com/openshift/cluster-api-provider-ovirt/pull/154) * update envtest setup for CI [#153](https://github.com/openshift/cluster-api-provider-ovirt/pull/153) * added generation of crds [#150](https://github.com/openshift/cluster-api-provider-ovirt/pull/150) * removed test stage in dockerfile [#151](https://github.com/openshift/cluster-api-provider-ovirt/pull/151) * [OCPRHV-806](https://issues.redhat.com/browse/OCPRHV-806): added functional test for actuator [#148](https://github.com/openshift/cluster-api-provider-ovirt/pull/148) * added first set unit tests for machine validation [#147](https://github.com/openshift/cluster-api-provider-ovirt/pull/147) * Updating ose-ovirt-machine-controllers images to be consistent with ART [#146](https://github.com/openshift/cluster-api-provider-ovirt/pull/146) * [Full changelog](https://github.com/openshift/cluster-api-provider-ovirt/compare/5a93d94c208baf4867bc41529cc379aeb25c9cc4...03e8cb50f9ffa28b48d8aeaeb8410ab1598750d1) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/2996be215b6dc887d9c439ad4256e47568eb7a0e) * [OCPBUGS-35876](https://issues.redhat.com/browse/OCPBUGS-35876): [release-4.12] ipv6+all protocols conntrack flush [#2214](https://github.com/openshift/ovn-kubernetes/pull/2214) * [OCPBUGS-29864](https://issues.redhat.com/browse/OCPBUGS-29864): CVE-2022-41723: avoid quadratic complexity in HPACK decoding [#2204](https://github.com/openshift/ovn-kubernetes/pull/2204) * [OCPBUGS-34273](https://issues.redhat.com/browse/OCPBUGS-34273), [OCPBUGS-34414](https://issues.redhat.com/browse/OCPBUGS-34414): Improves service iptables efficiency on start up + ICMP error messages to pass through [#2184](https://github.com/openshift/ovn-kubernetes/pull/2184) * [OCPBUGS-32990](https://issues.redhat.com/browse/OCPBUGS-32990): Bump OVS [#2144](https://github.com/openshift/ovn-kubernetes/pull/2144) * [OCPBUGS-33422](https://issues.redhat.com/browse/OCPBUGS-33422): [release-4.12] Full implementation of KEP-1669 ProxyTerminatingEndpoints + ETP=local fix [#2135](https://github.com/openshift/ovn-kubernetes/pull/2135) * [OCPBUGS-25889](https://issues.redhat.com/browse/OCPBUGS-25889): [release-4.12] OVN bump to 23.06.1-112 [#2154](https://github.com/openshift/ovn-kubernetes/pull/2154) * [OCPBUGS-23259](https://issues.redhat.com/browse/OCPBUGS-23259): [release-4.12] Update leaderelection config to allow retries [#2017](https://github.com/openshift/ovn-kubernetes/pull/2017) * [OCPBUGS-28598](https://issues.redhat.com/browse/OCPBUGS-28598): CARRY: Updates owners and adds Surya [#2034](https://github.com/openshift/ovn-kubernetes/pull/2034) * [OCPBUGS-26700](https://issues.redhat.com/browse/OCPBUGS-26700): [release-4.12] fixes MTU configuration on gateway router [#2015](https://github.com/openshift/ovn-kubernetes/pull/2015) * [OCPBUGS-24420](https://issues.redhat.com/browse/OCPBUGS-24420): OVNK/GW: Ignore headless services in syncServices [#1972](https://github.com/openshift/ovn-kubernetes/pull/1972) * [OCPBUGS-23981](https://issues.redhat.com/browse/OCPBUGS-23981): Netpol retryFramework cleanup [#1977](https://github.com/openshift/ovn-kubernetes/pull/1977) * [OCPBUGS-26243](https://issues.redhat.com/browse/OCPBUGS-26243): Fix Egress IP Deletion Handler to Prevent OVN Policy Leaks [#2006](https://github.com/openshift/ovn-kubernetes/pull/2006) * [OCPBUGS-25096](https://issues.redhat.com/browse/OCPBUGS-25096): Fragment oversized reply packets in LGW mode [#1984](https://github.com/openshift/ovn-kubernetes/pull/1984) * [OCPBUGS-22091](https://issues.redhat.com/browse/OCPBUGS-22091): Bump OVN to 23.06.1-39.el8fdp [#1943](https://github.com/openshift/ovn-kubernetes/pull/1943) * [OCPBUGS-18681](https://issues.redhat.com/browse/OCPBUGS-18681): Check libovsdbclient.ErrNotFound on wrapped errors [#1862](https://github.com/openshift/ovn-kubernetes/pull/1862) * [OCPBUGS-20241](https://issues.redhat.com/browse/OCPBUGS-20241): fix race condition in hybrid overlay DRIP alloc [#1932](https://github.com/openshift/ovn-kubernetes/pull/1932) * [OCPBUGS-18353](https://issues.redhat.com/browse/OCPBUGS-18353): Update bridge flow cache when the host address changes [#1872](https://github.com/openshift/ovn-kubernetes/pull/1872) * [OCPBUGS-14708](https://issues.redhat.com/browse/OCPBUGS-14708), [OCPBUGS-19089](https://issues.redhat.com/browse/OCPBUGS-19089), [OCPBUGS-19904](https://issues.redhat.com/browse/OCPBUGS-19904), [OCPBUGS-19906](https://issues.redhat.com/browse/OCPBUGS-19906): Dockerfile: bump OVN to ovn22.12-22.12.1-18.el8fdp [#1881](https://github.com/openshift/ovn-kubernetes/pull/1881) * [OCPBUGS-18054](https://issues.redhat.com/browse/OCPBUGS-18054): Emit node events only when retry failure [#1837](https://github.com/openshift/ovn-kubernetes/pull/1837) * [OCPBUGS-18652](https://issues.redhat.com/browse/OCPBUGS-18652): Do not return error if pod IP cannot be retrieved for `deletePeerPod` and perf improvements [#1903](https://github.com/openshift/ovn-kubernetes/pull/1903) * [OCPBUGS-19432](https://issues.redhat.com/browse/OCPBUGS-19432): Remove stale egressip status entry [#1892](https://github.com/openshift/ovn-kubernetes/pull/1892) * [OCPBUGS-18586](https://issues.redhat.com/browse/OCPBUGS-18586): Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR [#1856](https://github.com/openshift/ovn-kubernetes/pull/1856) * [OCPBUGS-18058](https://issues.redhat.com/browse/OCPBUGS-18058): [release-4.12] Create egress firewall with one db transaction [#1835](https://github.com/openshift/ovn-kubernetes/pull/1835) * [OCPBUGS-17675](https://issues.redhat.com/browse/OCPBUGS-17675): Don't return error on delete event that doesn't ave a chance to succeed. [#1814](https://github.com/openshift/ovn-kubernetes/pull/1814) * [OCPBUGS-17522](https://issues.redhat.com/browse/OCPBUGS-17522): [release-4.12] libovsdb: give monitor setup time to process than normal transactions [#1808](https://github.com/openshift/ovn-kubernetes/pull/1808) * [OCPBUGS-16336](https://issues.redhat.com/browse/OCPBUGS-16336): Backport support AllocateLoadBalancerNodePortsFalse [#1766](https://github.com/openshift/ovn-kubernetes/pull/1766) * [OCPBUGS-15593](https://issues.redhat.com/browse/OCPBUGS-15593): ovnkube-master pod failed to reconnect to ovn db due to ssl expire [#1730](https://github.com/openshift/ovn-kubernetes/pull/1730) * [OCPBUGS-15719](https://issues.redhat.com/browse/OCPBUGS-15719): [relase-4.12] Fix egressFirewall create error handling [#1746](https://github.com/openshift/ovn-kubernetes/pull/1746) * [OCPBUGS-13744](https://issues.redhat.com/browse/OCPBUGS-13744): Improve syncNodes to remove stale data [#1732](https://github.com/openshift/ovn-kubernetes/pull/1732) * [OCPBUGS-13885](https://issues.redhat.com/browse/OCPBUGS-13885): [release-4.12] Drop packets that were not properly SNATed [#1679](https://github.com/openshift/ovn-kubernetes/pull/1679) * [OCPBUGS-15388](https://issues.redhat.com/browse/OCPBUGS-15388): Fix stale SNAT entries for completed pods [#1723](https://github.com/openshift/ovn-kubernetes/pull/1723) * [OCPBUGS-15709](https://issues.redhat.com/browse/OCPBUGS-15709): [release-4.12] Remove non-existing functions test. [#1739](https://github.com/openshift/ovn-kubernetes/pull/1739) * [OCPBUGS-15424](https://issues.redhat.com/browse/OCPBUGS-15424): [release-4.12] Fix network policy to work with long namespace names [#1725](https://github.com/openshift/ovn-kubernetes/pull/1725) * [OCPBUGS-14982](https://issues.redhat.com/browse/OCPBUGS-14982): Validate port before deleting conntrack flow [#1713](https://github.com/openshift/ovn-kubernetes/pull/1713) * [OCPBUGS-14041](https://issues.redhat.com/browse/OCPBUGS-14041): Fix bug that resulted in routes not be restored to a new vnic [#1681](https://github.com/openshift/ovn-kubernetes/pull/1681) * [OCPBUGS-13953](https://issues.redhat.com/browse/OCPBUGS-13953): [release-4.12] Use loadbalancer.Name as client index [#1680](https://github.com/openshift/ovn-kubernetes/pull/1680) * [OCPBUGS-13599](https://issues.redhat.com/browse/OCPBUGS-13599): Call SyncEndpoints from AddService [#1673](https://github.com/openshift/ovn-kubernetes/pull/1673) * [OCPBUGS-7439](https://issues.redhat.com/browse/OCPBUGS-7439): [release-4.12]: Egress Service: Fix nodeSelector parsing [#1529](https://github.com/openshift/ovn-kubernetes/pull/1529) * [OCPBUGS-12768](https://issues.redhat.com/browse/OCPBUGS-12768): : [release-4.12] Delete equivalent ACLs when searching by predicate. [#1661](https://github.com/openshift/ovn-kubernetes/pull/1661) * [OCPBUGS-12265](https://issues.redhat.com/browse/OCPBUGS-12265): [release-4.12] Network scale metrics [#1653](https://github.com/openshift/ovn-kubernetes/pull/1653) * [OCPBUGS-8226](https://issues.redhat.com/browse/OCPBUGS-8226): fix hybridOverlay DRIP in ICNIv1 pods [#1633](https://github.com/openshift/ovn-kubernetes/pull/1633) * [OCPBUGS-11701](https://issues.redhat.com/browse/OCPBUGS-11701): [release-4.12] CARRY: use "prefer local" for annotated services [#1638](https://github.com/openshift/ovn-kubernetes/pull/1638) * [OCPBUGS-11109](https://issues.redhat.com/browse/OCPBUGS-11109): [release-4.12] Batch potentially big transaction on egress firewall ACLs migration [#1617](https://github.com/openshift/ovn-kubernetes/pull/1617) * [OCPBUGS-10947](https://issues.redhat.com/browse/OCPBUGS-10947): [release-4.12] Egress firewall fix retry [#1610](https://github.com/openshift/ovn-kubernetes/pull/1610) * [OCPBUGS-10314](https://issues.redhat.com/browse/OCPBUGS-10314): [release-4.12] Handle Completed pods deletion [#1581](https://github.com/openshift/ovn-kubernetes/pull/1581) * Updating ovn-kubernetes-microshift images to be consistent with ART [#1288](https://github.com/openshift/ovn-kubernetes/pull/1288) * [OCPBUGS-10632](https://issues.redhat.com/browse/OCPBUGS-10632): Check the "Serving" field for endpoints [#1569](https://github.com/openshift/ovn-kubernetes/pull/1569) * [OCPBUGS-6034](https://issues.redhat.com/browse/OCPBUGS-6034): Update egress node assignability on every egress node update [#1483](https://github.com/openshift/ovn-kubernetes/pull/1483) * [OCPBUGS-7732](https://issues.redhat.com/browse/OCPBUGS-7732): Fix leak in service controller cache [#1545](https://github.com/openshift/ovn-kubernetes/pull/1545) * [OCPBUGS-10490](https://issues.redhat.com/browse/OCPBUGS-10490): [release-4.12] Move checkForStaleOVSInterfaces and related code to node.go [#1595](https://github.com/openshift/ovn-kubernetes/pull/1595) * [OCPBUGS-10318](https://issues.redhat.com/browse/OCPBUGS-10318): [release-4.12] node: add node healthz server for cloud load balancers [#1570](https://github.com/openshift/ovn-kubernetes/pull/1570) * [OCPBUGS-7346](https://issues.redhat.com/browse/OCPBUGS-7346): [release-4.12] Fully remove dependency on default gateway for services [#1577](https://github.com/openshift/ovn-kubernetes/pull/1577) * [OCPBUGS-6957](https://issues.redhat.com/browse/OCPBUGS-6957): [release-4.12] Ensure routes are not duplicated [#1503](https://github.com/openshift/ovn-kubernetes/pull/1503) * [OCPBUGS-8501](https://issues.redhat.com/browse/OCPBUGS-8501), [OCPBUGS-8506](https://issues.redhat.com/browse/OCPBUGS-8506), [OCPBUGS-8508](https://issues.redhat.com/browse/OCPBUGS-8508): [release-4.12] Fix EFW's name truncation logic & make EFW ACLs unique using extIDs [#1559](https://github.com/openshift/ovn-kubernetes/pull/1559) * [OCPBUGS-7223](https://issues.redhat.com/browse/OCPBUGS-7223): node: don't consider internal masquerade addresses as node IP addresses [#1528](https://github.com/openshift/ovn-kubernetes/pull/1528) * [OCPBUGS-7317](https://issues.redhat.com/browse/OCPBUGS-7317): [release-4.12] Delete stale egress ip snat entries by node [#1520](https://github.com/openshift/ovn-kubernetes/pull/1520) * [OCPBUGS-7026](https://issues.redhat.com/browse/OCPBUGS-7026): Bump OVN to 22.12 and turn off neighbour response in router options. [#1521](https://github.com/openshift/ovn-kubernetes/pull/1521) * [OCPBUGS-6040](https://issues.redhat.com/browse/OCPBUGS-6040): addMasqueradeRoute: fallback to gateway interface IPs [#1484](https://github.com/openshift/ovn-kubernetes/pull/1484) * [OCPBUGS-7230](https://issues.redhat.com/browse/OCPBUGS-7230): Delete IGMP Groups when deleting stale chassis [#1516](https://github.com/openshift/ovn-kubernetes/pull/1516) * [OCPBUGS-3399](https://issues.redhat.com/browse/OCPBUGS-3399): Drop in-cluster traffic towards svcCIDR at wrong port [#1490](https://github.com/openshift/ovn-kubernetes/pull/1490) * [OCPBUGS-6961](https://issues.redhat.com/browse/OCPBUGS-6961): update base image of Dockerfile [#1504](https://github.com/openshift/ovn-kubernetes/pull/1504) * [OCPBUGS-6823](https://issues.redhat.com/browse/OCPBUGS-6823): [release-4.12] Fix Egress FW ACL rules in dualstack mode [#1500](https://github.com/openshift/ovn-kubernetes/pull/1500) * [OCPBUGS-4862](https://issues.redhat.com/browse/OCPBUGS-4862): Correct the deletion of noHostSubnet nodes [#1470](https://github.com/openshift/ovn-kubernetes/pull/1470) * [OCPBUGS-298](https://issues.redhat.com/browse/OCPBUGS-298): ovnkube-trace: run ovn-sbctl and ovn-trace with --no-leader-only [#1489](https://github.com/openshift/ovn-kubernetes/pull/1489) * [OCPBUGS-5841](https://issues.redhat.com/browse/OCPBUGS-5841): ovnkube-node: Existing management port check [#1475](https://github.com/openshift/ovn-kubernetes/pull/1475) * [OCPBUGS-6812](https://issues.redhat.com/browse/OCPBUGS-6812): [release-4.12] Ensure loadbalancer cleanup doesn't fail [#1497](https://github.com/openshift/ovn-kubernetes/pull/1497) * [OCPBUGS-298](https://issues.redhat.com/browse/OCPBUGS-298): Bump OVN to 22.09.0-54 [#1488](https://github.com/openshift/ovn-kubernetes/pull/1488) * [OCPBUGS-5923](https://issues.redhat.com/browse/OCPBUGS-5923): [release-4.12] Fix egress firewall to allow inbound connections in both gw modes [#1477](https://github.com/openshift/ovn-kubernetes/pull/1477) * [OCPBUGS-5046](https://issues.redhat.com/browse/OCPBUGS-5046): [release-4.12] egressip: fix test data race accessing podAssignment cache [#1467](https://github.com/openshift/ovn-kubernetes/pull/1467) * [OCPBUGS-3651](https://issues.redhat.com/browse/OCPBUGS-3651): downstream windows fixes [#1384](https://github.com/openshift/ovn-kubernetes/pull/1384) * [OCPBUGS-4533](https://issues.redhat.com/browse/OCPBUGS-4533): Move check_pkt_larger to gateway router ports [#1420](https://github.com/openshift/ovn-kubernetes/pull/1420) * [OCPBUGS-3651](https://issues.redhat.com/browse/OCPBUGS-3651): [release-4.12] cherry-pick hybrid overlay fixes from master branch [#1460](https://github.com/openshift/ovn-kubernetes/pull/1460) * Bug OCPBUGS-4383: Don't log in iterateRetryResources when there are no retry entries [#1413](https://github.com/openshift/ovn-kubernetes/pull/1413) * [OCPBUGS-4098](https://issues.redhat.com/browse/OCPBUGS-4098): [release-4.12] egress ip: Skip mgmt ports that cannot have assignable IP addresses [#1429](https://github.com/openshift/ovn-kubernetes/pull/1429) * [OCPBUGS-4884](https://issues.redhat.com/browse/OCPBUGS-4884): [release-4.12] Fixes scenario where deleted + completed pods may leak [#1451](https://github.com/openshift/ovn-kubernetes/pull/1451) * [OCPBUGS-4835](https://issues.redhat.com/browse/OCPBUGS-4835): [4.12] Fix address set cleanup: only delete address sets owned by given object. [#1446](https://github.com/openshift/ovn-kubernetes/pull/1446) * [OCPBUGS-4760](https://issues.redhat.com/browse/OCPBUGS-4760): [4.12] Avoid duplicate transactions and minimize handlers with empty namespace selectors [#1439](https://github.com/openshift/ovn-kubernetes/pull/1439) * [OCPBUGS-4286](https://issues.redhat.com/browse/OCPBUGS-4286): Fix delete equivalent acls [#1406](https://github.com/openshift/ovn-kubernetes/pull/1406) * [OCPBUGS-3378](https://issues.redhat.com/browse/OCPBUGS-3378): Set the node as reachable only when it is being added as an egressip node [#1402](https://github.com/openshift/ovn-kubernetes/pull/1402) * [OCPBUGS-4503](https://issues.redhat.com/browse/OCPBUGS-4503): Support LB Session Affinity TimeOut [#1427](https://github.com/openshift/ovn-kubernetes/pull/1427) * [OCPBUGS-4503](https://issues.redhat.com/browse/OCPBUGS-4503): [release-4.12] Dockerfile: bump OVN to 22.09.0-25 [#1425](https://github.com/openshift/ovn-kubernetes/pull/1425) * Bug OCPBUGS-4379: apply retry logic to ovnk-node controllers [#1411](https://github.com/openshift/ovn-kubernetes/pull/1411) * [OCPBUGS-4361](https://issues.redhat.com/browse/OCPBUGS-4361): Bp ovnkube trace changes [#1408](https://github.com/openshift/ovn-kubernetes/pull/1408) * [OCPBUGS-4505](https://issues.redhat.com/browse/OCPBUGS-4505): pods: deleteLogicalPort should not fail when node is gone [#1419](https://github.com/openshift/ovn-kubernetes/pull/1419) * [OCPBUGS-4453](https://issues.redhat.com/browse/OCPBUGS-4453): Set NODAD flag on masquerade address [#1416](https://github.com/openshift/ovn-kubernetes/pull/1416) * [Release 4.12] OCPBUGS-3397: Avoid Remetric pods [#1399](https://github.com/openshift/ovn-kubernetes/pull/1399) * [OCPBUGS-3390](https://issues.redhat.com/browse/OCPBUGS-3390): Handle k8s watcher restart scenario [#1359](https://github.com/openshift/ovn-kubernetes/pull/1359) * [OCPBUGS-3798](https://issues.redhat.com/browse/OCPBUGS-3798): [4.12] Dockerfile: bump regular image to OVS 2.17.0-62 [#1409](https://github.com/openshift/ovn-kubernetes/pull/1409) * [OCPBUGS-4356](https://issues.redhat.com/browse/OCPBUGS-4356): Bump OVN to 22.09.0-22 [#1407](https://github.com/openshift/ovn-kubernetes/pull/1407) * [OCPBUGS-2896](https://issues.redhat.com/browse/OCPBUGS-2896): Refactor retry into its own pkg [#1376](https://github.com/openshift/ovn-kubernetes/pull/1376) * Updating ovn-kubernetes-base images to be consistent with ART [#1287](https://github.com/openshift/ovn-kubernetes/pull/1287) * [OCPBUGS-3798](https://issues.redhat.com/browse/OCPBUGS-3798): [4.12] Dockerfile: bump OVS to 2.17.0-62.el8fdp [#1387](https://github.com/openshift/ovn-kubernetes/pull/1387) * [OCPBUGS-3977](https://issues.redhat.com/browse/OCPBUGS-3977): Handle expired entry while handling dns update [#1392](https://github.com/openshift/ovn-kubernetes/pull/1392) * [OCPBUGS-3871](https://issues.redhat.com/browse/OCPBUGS-3871): Ignore addresses in masquerade subnet when retrieving gateway IPs [#1386](https://github.com/openshift/ovn-kubernetes/pull/1386) * [OCPBUGS-3348](https://issues.redhat.com/browse/OCPBUGS-3348): Validate node subnet annotations against cluster networks [#1351](https://github.com/openshift/ovn-kubernetes/pull/1351) * [OCPBUGS-3658](https://issues.redhat.com/browse/OCPBUGS-3658): [release-4.12] Support proper parsing of IPs with leading zeros [#1379](https://github.com/openshift/ovn-kubernetes/pull/1379) * [OCPBUGS-3773](https://issues.redhat.com/browse/OCPBUGS-3773): Adjust ovs bundle timeout [#1382](https://github.com/openshift/ovn-kubernetes/pull/1382) * [OCPBUGS-3468](https://issues.redhat.com/browse/OCPBUGS-3468): Disable packet MTU check when OVS HW Offload is enabled [#1368](https://github.com/openshift/ovn-kubernetes/pull/1368) * [OCPBUGS-298](https://issues.redhat.com/browse/OCPBUGS-298): Adapt ovnkube-trace to work with external controlplane [#1363](https://github.com/openshift/ovn-kubernetes/pull/1363) * [OCPBUGS-3075](https://issues.redhat.com/browse/OCPBUGS-3075): [release-4.12] Fix netpol races [#1347](https://github.com/openshift/ovn-kubernetes/pull/1347) * [OCPBUGS-3346](https://issues.redhat.com/browse/OCPBUGS-3346): vendor: bump libovsdb to 8f21d188c3a50d0ce378bd66ec68215967aaad77 [#1348](https://github.com/openshift/ovn-kubernetes/pull/1348) * [OCPBUGS-3369](https://issues.redhat.com/browse/OCPBUGS-3369): Fix mac address not set in SRIOV container interface [#1361](https://github.com/openshift/ovn-kubernetes/pull/1361) * [OCPBUGS-3221](https://issues.redhat.com/browse/OCPBUGS-3221): Allow empty nexthop in L3GatewayConfig node annotation [#1356](https://github.com/openshift/ovn-kubernetes/pull/1356) * [OCPBUGS-3003](https://issues.redhat.com/browse/OCPBUGS-3003): Ignore non-ready endpoints when processing endpointslices [#1344](https://github.com/openshift/ovn-kubernetes/pull/1344) * [OCPBUGS-2826](https://issues.redhat.com/browse/OCPBUGS-2826): ovnkube-trace: Fix ofproto/trace for IPv6 [#1338](https://github.com/openshift/ovn-kubernetes/pull/1338) * [OCPBUGS-1520](https://issues.redhat.com/browse/OCPBUGS-1520): Fixes SNAT-ing Logic for EgressIPs [#1331](https://github.com/openshift/ovn-kubernetes/pull/1331) * [OCPBUGS-1520](https://issues.redhat.com/browse/OCPBUGS-1520): Prioritize adding events to handlers for shared resources [#1333](https://github.com/openshift/ovn-kubernetes/pull/1333) * [OCPBUGS-1643](https://issues.redhat.com/browse/OCPBUGS-1643): Add logging verbosity to configuring OVN logs [#1324](https://github.com/openshift/ovn-kubernetes/pull/1324) * [OCPBUGS-2175](https://issues.redhat.com/browse/OCPBUGS-2175): Allocate Hybrid Overlay IP on node updates too [#1319](https://github.com/openshift/ovn-kubernetes/pull/1319) * [OCPBUGS-2004](https://issues.redhat.com/browse/OCPBUGS-2004): egress IP: fix log when gRPC connection fails [#1304](https://github.com/openshift/ovn-kubernetes/pull/1304) * [OCPBUGS-2176](https://issues.redhat.com/browse/OCPBUGS-2176): add endpointSlice informer in master process [#1302](https://github.com/openshift/ovn-kubernetes/pull/1302) * [OCPBUGS-2085](https://issues.redhat.com/browse/OCPBUGS-2085): CARRY: Dockerfile.base: bump to openvswitch2.17.0-37.4.el8fdp [#1298](https://github.com/openshift/ovn-kubernetes/pull/1298) * [OCPBUGS-1705](https://issues.redhat.com/browse/OCPBUGS-1705): Don't use ACL names ever! [#1300](https://github.com/openshift/ovn-kubernetes/pull/1300) * Dockerfile: bump to ovn22.09-22.09.0-5.el8fdp [#1284](https://github.com/openshift/ovn-kubernetes/pull/1284) * 9-23-22 b - dualstack fixed [#1289](https://github.com/openshift/ovn-kubernetes/pull/1289) * [OCPBUGS-1705](https://issues.redhat.com/browse/OCPBUGS-1705): Trim ACL names according to RFC1123 [#1281](https://github.com/openshift/ovn-kubernetes/pull/1281) * [OCPBUGS-1553](https://issues.redhat.com/browse/OCPBUGS-1553): Dockerfile: bump to openvswitch2.17.0-37.4.el8fdp [#1273](https://github.com/openshift/ovn-kubernetes/pull/1273) * Use iptables-restore to add MCS/metadata blocking in the pod [#1262](https://github.com/openshift/ovn-kubernetes/pull/1262) * 9-12-22 merge [#1267](https://github.com/openshift/ovn-kubernetes/pull/1267) * 9-7-22 merge [#1264](https://github.com/openshift/ovn-kubernetes/pull/1264) * 9-2-22 merge [#1263](https://github.com/openshift/ovn-kubernetes/pull/1263) * [OCPBUGS-165](https://issues.redhat.com/browse/OCPBUGS-165): [DownstreamMerge] 8-29-2022 merge [#1255](https://github.com/openshift/ovn-kubernetes/pull/1255) * 8-25-2022 [#1253](https://github.com/openshift/ovn-kubernetes/pull/1253) * revert endpoints [#1248](https://github.com/openshift/ovn-kubernetes/pull/1248) * 8-8-2022 [#1237](https://github.com/openshift/ovn-kubernetes/pull/1237) * Fix ovn version in Dockerfile.base [#1236](https://github.com/openshift/ovn-kubernetes/pull/1236) * Introduce ovn-kubernetes-{base|singlenode} images [#1213](https://github.com/openshift/ovn-kubernetes/pull/1213) * [Bug 2109945](https://bugzilla.redhat.com/show_bug.cgi?id=2109945): [Downstream Merge: 04-08-2022] [#1231](https://github.com/openshift/ovn-kubernetes/pull/1231) * [Bug 2111534](https://bugzilla.redhat.com/show_bug.cgi?id=2111534): Downstream Merge: 27-07-2022 [#1214](https://github.com/openshift/ovn-kubernetes/pull/1214) * Updating ose-ovn-kubernetes images to be consistent with ART [#1174](https://github.com/openshift/ovn-kubernetes/pull/1174) * [Bug 2111733](https://bugzilla.redhat.com/show_bug.cgi?id=2111733): Bump OVN to 22.06.0-27 [#1222](https://github.com/openshift/ovn-kubernetes/pull/1222) * [OCPBUGSM-45393](https://issues.redhat.com/browse/OCPBUGSM-45393): Bug 2078691: [Downstream Merge] 22-07-2022 [#1210](https://github.com/openshift/ovn-kubernetes/pull/1210) * 4.12 initial merge from upstream: 7-18-22 [#1205](https://github.com/openshift/ovn-kubernetes/pull/1205) * [Bug 2106862](https://bugzilla.redhat.com/show_bug.cgi?id=2106862): Append the SNAT rule in management chain [#1199](https://github.com/openshift/ovn-kubernetes/pull/1199) * [Bug 2095444](https://bugzilla.redhat.com/show_bug.cgi?id=2095444): EGW: Clean Stale Conntrack Entries [#1189](https://github.com/openshift/ovn-kubernetes/pull/1189) * [Bug 2106298](https://bugzilla.redhat.com/show_bug.cgi?id=2106298): populate sock address for ovndb connection in unix mode [#1188](https://github.com/openshift/ovn-kubernetes/pull/1188) * [Bug 2100507](https://bugzilla.redhat.com/show_bug.cgi?id=2100507): Remove redundant log lines in obj_retry.go [#1162](https://github.com/openshift/ovn-kubernetes/pull/1162) * [Bug 2097243](https://bugzilla.redhat.com/show_bug.cgi?id=2097243): Fix egressips for pods recreated with same name [#1169](https://github.com/openshift/ovn-kubernetes/pull/1169) * [Bug 2097221](https://bugzilla.redhat.com/show_bug.cgi?id=2097221): Dockerfile: bump to ovn22.06-22.06.0-7.el8fdp [#1170](https://github.com/openshift/ovn-kubernetes/pull/1170) * [Bug 2091238](https://bugzilla.redhat.com/show_bug.cgi?id=2091238): Fix Panic in Network Policy deletion [#1166](https://github.com/openshift/ovn-kubernetes/pull/1166) * [Bug 2100220](https://bugzilla.redhat.com/show_bug.cgi?id=2100220): Fix completed pods releasing IP address on update [#1158](https://github.com/openshift/ovn-kubernetes/pull/1158) * [Bug 2089807](https://bugzilla.redhat.com/show_bug.cgi?id=2089807): Release Leader election lock on errors [#1167](https://github.com/openshift/ovn-kubernetes/pull/1167) * [Bug 2100249](https://bugzilla.redhat.com/show_bug.cgi?id=2100249): Revert "Bug 2082599: add upper bound to number of failed attempts" [#1161](https://github.com/openshift/ovn-kubernetes/pull/1161) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/2e60df220e147198e60b63950f9bab91e68facd7...2996be215b6dc887d9c439ad4256e47568eb7a0e) ### [prom-label-proxy](https://github.com/openshift/prom-label-proxy/tree/b1907888004888b977918cf911b189de736642b2) * Updating prom-label-proxy images to be consistent with ART [#350](https://github.com/openshift/prom-label-proxy/pull/350) * OWNERS: Add myself, and move former team members to emeritus [#349](https://github.com/openshift/prom-label-proxy/pull/349) * Updating prom-label-proxy images to be consistent with ART [#347](https://github.com/openshift/prom-label-proxy/pull/347) * Bump v0.5.0 [#348](https://github.com/openshift/prom-label-proxy/pull/348) * [Full changelog](https://github.com/openshift/prom-label-proxy/compare/af12fbc4482a0d8fe9e4748c675d56bbc43975f2...b1907888004888b977918cf911b189de736642b2) ### [prometheus](https://github.com/openshift/prometheus/tree/72ceaef4a59ec0cfb0639563ba9bd28928f4bcc0) * [OCPBUGS-21219](https://issues.redhat.com/browse/OCPBUGS-21219): update golang.org/x/net to v0.17.0 [4.12] [#175](https://github.com/openshift/prometheus/pull/175) * [OCPBUGS-4048](https://issues.redhat.com/browse/OCPBUGS-4048): fix certificate reloads after rotation [#149](https://github.com/openshift/prometheus/pull/149) * Revert unwanted downstream patch [#144](https://github.com/openshift/prometheus/pull/144) * [OCPBUGS-1718](https://issues.redhat.com/browse/OCPBUGS-1718): [bot] Bump openshift/prometheus to v2.39.1 [#142](https://github.com/openshift/prometheus/pull/142) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#141](https://github.com/openshift/prometheus/pull/141) * Bump openshift/prometheus to v2.38.0 [#140](https://github.com/openshift/prometheus/pull/140) * OWNERS: Add myself, and move former team members to emeritus [#139](https://github.com/openshift/prometheus/pull/139) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#137](https://github.com/openshift/prometheus/pull/137) * Bump openshift/prometheus to v2.37.0 [#138](https://github.com/openshift/prometheus/pull/138) * [Full changelog](https://github.com/openshift/prometheus/compare/4e4243d54331efdbe2a32f7441740faa4d335acb...72ceaef4a59ec0cfb0639563ba9bd28928f4bcc0) ### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/914cad827e9a177b29b23e02eb48b4065da8dca2) * [OCPBUGS-21031](https://issues.redhat.com/browse/OCPBUGS-21031): Bump golang.org/x/net to v0.17.0 [#82](https://github.com/openshift/prometheus-alertmanager/pull/82) * Updating golang-github-prometheus-alertmanager images to be consistent with ART [#64](https://github.com/openshift/prometheus-alertmanager/pull/64) * Updating golang-github-prometheus-alertmanager images to be consistent with ART [#61](https://github.com/openshift/prometheus-alertmanager/pull/61) * OWNERS: Add myself, and move former team members to emeritus [#62](https://github.com/openshift/prometheus-alertmanager/pull/62) * [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/7e3c773132f52d79c263320ce7c559349bce935b...914cad827e9a177b29b23e02eb48b4065da8dca2) ### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/d1e399d5cead91c677cee4a80a032f5057cb43e3) * [OCPBUGS-20843](https://issues.redhat.com/browse/OCPBUGS-20843): Bump golang.org/x/net to v0.17.0 [#249](https://github.com/openshift/prometheus-operator/pull/249) * [OCPBUGS-7458](https://issues.redhat.com/browse/OCPBUGS-7458): Fixes ThanoRuler StatefulSet re-creation bug [#217](https://github.com/openshift/prometheus-operator/pull/217) * Updating prometheus-operator images to be consistent with ART [#204](https://github.com/openshift/prometheus-operator/pull/204) * Bump openshift/prometheus-operator to v0.60.1 [#208](https://github.com/openshift/prometheus-operator/pull/208) * Bump openshift/prometheus-operator to v0.60.0 [#207](https://github.com/openshift/prometheus-operator/pull/207) * Updating prometheus-operator-admission-webhook images to be consistent with ART [#206](https://github.com/openshift/prometheus-operator/pull/206) * Updating prometheus-config-reloader images to be consistent with ART [#205](https://github.com/openshift/prometheus-operator/pull/205) * Bump openshift/prometheus-operator to v0.59.2 [#203](https://github.com/openshift/prometheus-operator/pull/203) * Bump openshift/prometheus-operator to v0.59.1 [#200](https://github.com/openshift/prometheus-operator/pull/200) * OWNERS: Add myself, and move former team members to emeritus [#198](https://github.com/openshift/prometheus-operator/pull/198) * Bump openshift/prometheus-operator to v0.58.0 [#197](https://github.com/openshift/prometheus-operator/pull/197) * Updating prometheus-operator-admission-webhook images to be consistent with ART [#195](https://github.com/openshift/prometheus-operator/pull/195) * Updating prometheus-config-reloader images to be consistent with ART [#194](https://github.com/openshift/prometheus-operator/pull/194) * Updating prometheus-operator images to be consistent with ART [#193](https://github.com/openshift/prometheus-operator/pull/193) * [Full changelog](https://github.com/openshift/prometheus-operator/compare/ef9b02af91f3f5906f5a463b76e70f1318306cf9...d1e399d5cead91c677cee4a80a032f5057cb43e3) ### [prometheus-node-exporter](https://github.com/openshift/node_exporter/tree/99077a3c8c3b0fce152fe0affce1e31fc2c6efaa) * [OCPBUGS-21123](https://issues.redhat.com/browse/OCPBUGS-21123): upgrade golang.org/x/net to v0.17.0 [#136](https://github.com/openshift/node_exporter/pull/136) * Updating golang-github-prometheus-node_exporter images to be consistent with ART [#112](https://github.com/openshift/node_exporter/pull/112) * Align to upstream v1.4.0 [#109](https://github.com/openshift/node_exporter/pull/109) * Fix a bug of metric format on AMD EPYC platforms [#107](https://github.com/openshift/node_exporter/pull/107) * Updating golang-github-prometheus-node_exporter images to be consistent with ART [#104](https://github.com/openshift/node_exporter/pull/104) * OWNERS: Add myself, and move former team members to emeritus [#106](https://github.com/openshift/node_exporter/pull/106) * [Full changelog](https://github.com/openshift/node_exporter/compare/31707a12bf07365256743ff63aef8c2695ac0cb1...99077a3c8c3b0fce152fe0affce1e31fc2c6efaa) ### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/ef1d057db0bf8d0846d96e09cdd1f55998a1f80b) * [OCPBUGS-21026](https://issues.redhat.com/browse/OCPBUGS-21026): CVE 2023 39325 (4.12) [#231](https://github.com/openshift/service-ca-operator/pull/231) * [OCPBUGS-3279](https://issues.redhat.com/browse/OCPBUGS-3279): Return nil from start funcs after context is cancelled. [#203](https://github.com/openshift/service-ca-operator/pull/203) * [Bug 2048349](https://bugzilla.redhat.com/show_bug.cgi?id=2048349): make the operator react to workload logLevel configuration [#196](https://github.com/openshift/service-ca-operator/pull/196) * Quality of life changes, fix e2e tests failing too often [#197](https://github.com/openshift/service-ca-operator/pull/197) * Updating ose-cluster-authentication-operator images to be consistent with ART [#192](https://github.com/openshift/service-ca-operator/pull/192) * [Bug 2101880](https://bugzilla.redhat.com/show_bug.cgi?id=2101880): operator NS manifest: Set empty openshift.io/run-level [#194](https://github.com/openshift/service-ca-operator/pull/194) * [Full changelog](https://github.com/openshift/service-ca-operator/compare/0899d1127049ab3906484bade3d47c306d5e3677...ef1d057db0bf8d0846d96e09cdd1f55998a1f80b) ### [telemeter](https://github.com/openshift/telemeter/tree/9c8092bb329c90d4ae12daf16906adb9b9620e20) * [OCPBUGS-21310](https://issues.redhat.com/browse/OCPBUGS-21310): [release-4.12] fix: Bump golang.org/x/net to v0.17.0 [#486](https://github.com/openshift/telemeter/pull/486) * [OCPBUGS-7702](https://issues.redhat.com/browse/OCPBUGS-7702): Add 'agent-installer' value to 'install_type' label [#451](https://github.com/openshift/telemeter/pull/451) * Fixes typo in telemeter/client/kubernetes.libsonnet [#434](https://github.com/openshift/telemeter/pull/434) * Updating telemeter images to be consistent with ART [#433](https://github.com/openshift/telemeter/pull/433) * Adds TemeterClientJobFailing alert [#431](https://github.com/openshift/telemeter/pull/431) * Add rules for cluster CPU-hours and Instance-hours [#418](https://github.com/openshift/telemeter/pull/418) * *: Update docs with latest Telemeter architecture [#430](https://github.com/openshift/telemeter/pull/430) * Forward: Add logic to sanitize labels [#429](https://github.com/openshift/telemeter/pull/429) * pkg/receive/handler: Add middleware to respect whitelist + elide [#427](https://github.com/openshift/telemeter/pull/427) * OWNERS: Add myself to owners file [#425](https://github.com/openshift/telemeter/pull/425) * pkg/receive/handler: Use OIDC client [#426](https://github.com/openshift/telemeter/pull/426) * pkg/receive/handler: Propagate upstream error message [#423](https://github.com/openshift/telemeter/pull/423) * OWNERS: Add myself, and move former team members to emeritus [#424](https://github.com/openshift/telemeter/pull/424) * pkg/server: use v1 forward requests counter [#422](https://github.com/openshift/telemeter/pull/422) * Bump Telemeter rules evaluation interval to 4m [#420](https://github.com/openshift/telemeter/pull/420) * [Bug 1924548](https://bugzilla.redhat.com/show_bug.cgi?id=1924548): go.mod: update github.com/gogo/protobuf to v1.3.2 [#419](https://github.com/openshift/telemeter/pull/419) * Bump Telemeter rules evaluation interval to 3m [#417](https://github.com/openshift/telemeter/pull/417) * Updating telemeter images to be consistent with ART [#415](https://github.com/openshift/telemeter/pull/415) * pkg/forwarder: add counter for the total number of requests [#416](https://github.com/openshift/telemeter/pull/416) * Updates version of golangci-lint to support GO1.18 [#413](https://github.com/openshift/telemeter/pull/413) * [Full changelog](https://github.com/openshift/telemeter/compare/f40faee6edd85acc9581382c99ae7b106bbaafc8...9c8092bb329c90d4ae12daf16906adb9b9620e20) ### [tests](https://github.com/openshift/origin/tree/7b7d4ef2acfb10117f21af59d5b99da177b19d3d) * Bug OCPBUGS-20557: Correct condition for rejecting connection [#28327](https://github.com/openshift/origin/pull/28327) * [OCPBUGS-18490](https://issues.redhat.com/browse/OCPBUGS-18490): bump monitoring SNO bounds [#28239](https://github.com/openshift/origin/pull/28239) * [OCPBUGS-18527](https://issues.redhat.com/browse/OCPBUGS-18527): Ignore timeout and connection refused errors during upgrade tests for 4.12 [#28270](https://github.com/openshift/origin/pull/28270) * [OCPBUGS-18309](https://issues.redhat.com/browse/OCPBUGS-18309): Add missing watch permission for console users [#28234](https://github.com/openshift/origin/pull/28234) * [OCPBUGS-16696](https://issues.redhat.com/browse/OCPBUGS-16696): Wait for DNS DS pods to be ready [#28083](https://github.com/openshift/origin/pull/28083) * [OCPBUGS-16243](https://issues.redhat.com/browse/OCPBUGS-16243): allow cluster-config-operator to manage featuregate upgrade block [#28055](https://github.com/openshift/origin/pull/28055) * [OCPBUGS-15933](https://issues.redhat.com/browse/OCPBUGS-15933): remove references to registry.centos.org [#28033](https://github.com/openshift/origin/pull/28033) * [CCO-367](https://issues.redhat.com/browse/CCO-367): Allow CCO to be Upgradeable=False when credentialsMode=Manual [#27941](https://github.com/openshift/origin/pull/27941) * [OCPBUGS-14152](https://issues.redhat.com/browse/OCPBUGS-14152): Move from registry.centos.org to quay.io [#27949](https://github.com/openshift/origin/pull/27949) * [OCPBUGS-12914](https://issues.redhat.com/browse/OCPBUGS-12914): Add (optional) dual-stack tests to the CNI certification test suite [#27903](https://github.com/openshift/origin/pull/27903) * Updating openshift-enterprise-tests images to be consistent with ART [#27293](https://github.com/openshift/origin/pull/27293) * add specific test for failing cgroups path [#27856](https://github.com/openshift/origin/pull/27856) * [OCPBUGS-8705](https://issues.redhat.com/browse/OCPBUGS-8705): Bump(openshift/kubernetes): to get fix for resizing flake [#27794](https://github.com/openshift/origin/pull/27794) * [OCPBUGS-8024](https://issues.redhat.com/browse/OCPBUGS-8024): Backport fixes to resume gathering CI disruption data for SLB and image registry [#27759](https://github.com/openshift/origin/pull/27759) * [OCPBUGS-7633](https://issues.redhat.com/browse/OCPBUGS-7633): remove reference to old guard pods [#27732](https://github.com/openshift/origin/pull/27732) * [OCPBUGS-7285](https://issues.redhat.com/browse/OCPBUGS-7285): extended: security: do not explicitly set api audience on token request [#27716](https://github.com/openshift/origin/pull/27716) * [OCPBUGS-6850](https://issues.redhat.com/browse/OCPBUGS-6850): [release-4.12] upgrade/adminack: guarantee one admin ack check post-upgrade [#27684](https://github.com/openshift/origin/pull/27684) * [OCPBUGS-5493](https://issues.redhat.com/browse/OCPBUGS-5493): Use cluster network MTU for bond interfaces [#27637](https://github.com/openshift/origin/pull/27637) * [OCPBUGS-5490](https://issues.redhat.com/browse/OCPBUGS-5490): Fix intervalcreation incorrect year unit test bug [#27668](https://github.com/openshift/origin/pull/27668) * [OCPBUGS-5130](https://issues.redhat.com/browse/OCPBUGS-5130): run resourcewatch fixes [#27625](https://github.com/openshift/origin/pull/27625) * [OCPBUGS-4836](https://issues.redhat.com/browse/OCPBUGS-4836): 1sec [#27610](https://github.com/openshift/origin/pull/27610) * [OCPBUGS-4503](https://issues.redhat.com/browse/OCPBUGS-4503): Unskip service session affinity tests [#27598](https://github.com/openshift/origin/pull/27598) * [OCPBUGS-4851](https://issues.redhat.com/browse/OCPBUGS-4851): Add Kuryr exception to "pods should successfully create sandboxes" test [#27611](https://github.com/openshift/origin/pull/27611) * [OCPBUGS-4407](https://issues.redhat.com/browse/OCPBUGS-4407): Nginx 1.18 images will reach EOL in November 2022 [#27599](https://github.com/openshift/origin/pull/27599) * [OCPBUGS-2927](https://issues.redhat.com/browse/OCPBUGS-2927): [release-4.12] Bump kubernetes to latest release-4.12 [#27588](https://github.com/openshift/origin/pull/27588) * [OCPBUGS-3649](https://issues.redhat.com/browse/OCPBUGS-3649): : Fix flake reporting for certain tests. [#27557](https://github.com/openshift/origin/pull/27557) * [OCPBUGS-3649](https://issues.redhat.com/browse/OCPBUGS-3649): Revert "Merge pull request #27533 from dgoodwin/merge-alert-backstops" [#27550](https://github.com/openshift/origin/pull/27550) * Synchronize release-4.12 with master [#27541](https://github.com/openshift/origin/pull/27541) * [OCPBUGS-3428](https://issues.redhat.com/browse/OCPBUGS-3428): Skip broken [sig-devex][Feature:ImageEcosystem] tests [#27537](https://github.com/openshift/origin/pull/27537) * k8s 1.25.0 [#27503](https://github.com/openshift/origin/pull/27503) * Revert 1.25 again [#27499](https://github.com/openshift/origin/pull/27499) * Extend SCC tests with their corresponding service account variants [#27491](https://github.com/openshift/origin/pull/27491) * MicroShift: label e2es with more apigroup labels (squashing more PRs into a single one + fixes) [#27498](https://github.com/openshift/origin/pull/27498) * Skip resource growth checks in upgrade-rollback jobs [#27450](https://github.com/openshift/origin/pull/27450) * k8s 1.25.0 [#27490](https://github.com/openshift/origin/pull/27490) * Remove must-gather pod from lack priorityclass exception list [#27469](https://github.com/openshift/origin/pull/27469) * Ocpbugs 2275 remove templateservicebroker test [#27484](https://github.com/openshift/origin/pull/27484) * Support external topology for hypershift [#27437](https://github.com/openshift/origin/pull/27437) * USHIFT-481 Get event intervals for alerts only if Prometheus route exists [#27467](https://github.com/openshift/origin/pull/27467) * Revert "k8s 1.25.0" [#27489](https://github.com/openshift/origin/pull/27489) * k8s 1.25.0 [#27416](https://github.com/openshift/origin/pull/27416) * Automated - Update synthetic test data [#27475](https://github.com/openshift/origin/pull/27475) * microshift: avoid oauth and console disruption monitoring [#27462](https://github.com/openshift/origin/pull/27462) * Migrate route.sh, run.sh, service.sh and status.sh tests to go [#27455](https://github.com/openshift/origin/pull/27455) * Add skips logic for tests that require optional capabilities [#27481](https://github.com/openshift/origin/pull/27481) * Fix flaky cli tests [#27482](https://github.com/openshift/origin/pull/27482) * Migrate idle.sh to go tests [#27451](https://github.com/openshift/origin/pull/27451) * Add dgoodwin as approver to origin [#27477](https://github.com/openshift/origin/pull/27477) * update skip openshift-controller-manager scaling events in build testsuite [#27474](https://github.com/openshift/origin/pull/27474) * Fix unit tests that have broken since we stopped running them 2 years ago [#27460](https://github.com/openshift/origin/pull/27460) * [USHIFT-357](https://issues.redhat.com/browse/USHIFT-357): MicroShift: skip sig-scheduling tests [#27402](https://github.com/openshift/origin/pull/27402) * [USHIFT-356](https://issues.redhat.com/browse/USHIFT-356): MicroShift: skip sig-node tests [#27425](https://github.com/openshift/origin/pull/27425) * [OCPBUGS-2155](https://issues.redhat.com/browse/OCPBUGS-2155): Revert "Add etcd vertical scaling test suite" [#27463](https://github.com/openshift/origin/pull/27463) * [USHIFT-358](https://issues.redhat.com/browse/USHIFT-358): MicroShift: skip sig-storage tests [#27438](https://github.com/openshift/origin/pull/27438) * Check for console capability before launching it's disruption monitoring. [#27439](https://github.com/openshift/origin/pull/27439) * Add Invariant test to look for probe errors for openshift-config-operator [#27436](https://github.com/openshift/origin/pull/27436) * Fix missing reporting of 0s disruptions. [#27452](https://github.com/openshift/origin/pull/27452) * Add etcd vertical scaling test suite [#27444](https://github.com/openshift/origin/pull/27444) * [USHIFT-351](https://issues.redhat.com/browse/USHIFT-351): Microshift: skip sig-devex tests [#27392](https://github.com/openshift/origin/pull/27392) * [USHIFT-300](https://issues.redhat.com/browse/USHIFT-300): microshift: skip sig-imageregistry tests [#27367](https://github.com/openshift/origin/pull/27367) * Drastically reduce the jobs we enforce disruption on. [#27457](https://github.com/openshift/origin/pull/27457) * [USHIFT-354](https://issues.redhat.com/browse/USHIFT-354): MicroShift: skip sig-instrumentation tests [#27399](https://github.com/openshift/origin/pull/27399) * [USHIFT-350](https://issues.redhat.com/browse/USHIFT-350): MicroShift: skip sig-coreos tests [#27400](https://github.com/openshift/origin/pull/27400) * egressip: avoid curl hanging when sending probes [#27379](https://github.com/openshift/origin/pull/27379) * [OCPBUGS-1079](https://issues.redhat.com/browse/OCPBUGS-1079): Use kubeconfig from secret mount instead of /tmp [#27443](https://github.com/openshift/origin/pull/27443) * include storage and must-gather tests in expectedTestCount [#27356](https://github.com/openshift/origin/pull/27356) * feat: update query results [#27448](https://github.com/openshift/origin/pull/27448) * [USHIFT-283](https://issues.redhat.com/browse/USHIFT-283): microshift: skip sig-builds tests [#27361](https://github.com/openshift/origin/pull/27361) * Fix rare race condition in ImageStream admission tests. [#27442](https://github.com/openshift/origin/pull/27442) * remove test/extended OWNERS file [#27408](https://github.com/openshift/origin/pull/27408) * [OCPBUGS-985](https://issues.redhat.com/browse/OCPBUGS-985): Revert "Test Baremetal deployment without a provisoning network" [#27441](https://github.com/openshift/origin/pull/27441) * [USHIFT-344](https://issues.redhat.com/browse/USHIFT-344): MicroShift: fix sig-apps tests [#27397](https://github.com/openshift/origin/pull/27397) * [USHIFT-301](https://issues.redhat.com/browse/USHIFT-301): microshift: skip sig-operator tests [#27369](https://github.com/openshift/origin/pull/27369) * [USHIFT-343](https://issues.redhat.com/browse/USHIFT-343): MicroShift: skip sig-api-machinery tests [#27410](https://github.com/openshift/origin/pull/27410) * Remove test 'clone repository using git:// protocol should clone using git:// if no proxy is configured' [#27391](https://github.com/openshift/origin/pull/27391) * [Bug 1933144](https://bugzilla.redhat.com/show_bug.cgi?id=1933144): Bump k8s to include c83b5d076f5 [#27380](https://github.com/openshift/origin/pull/27380) * Check version when discovery client [#27432](https://github.com/openshift/origin/pull/27432) * [USHIFT-285](https://issues.redhat.com/browse/USHIFT-285): MicroShift: allow CLI creation without OpenShift APIs [#27358](https://github.com/openshift/origin/pull/27358) * sig-api-machinery: remove project from authenticated browser APIServe… [#27333](https://github.com/openshift/origin/pull/27333) * Bump api-requests for console-operator on vsphere [#27431](https://github.com/openshift/origin/pull/27431) * [USHIFT-353](https://issues.redhat.com/browse/USHIFT-353): MicroShift: skip sig-installer tests [#27409](https://github.com/openshift/origin/pull/27409) * make runonce-ldapsearch pod name unique [#27426](https://github.com/openshift/origin/pull/27426) * [OCPBUGS-1265](https://issues.redhat.com/browse/OCPBUGS-1265): test/extended/prometheus: Consider telemeterClient.enabled [#27422](https://github.com/openshift/origin/pull/27422) * Fix double disruption testing and values for most backends in intervals chart and bigquery. [#27415](https://github.com/openshift/origin/pull/27415) * add retry for checkLADPConn [#27424](https://github.com/openshift/origin/pull/27424) * e2e/cli: Migrate completions, whoami and projects tests to go [#27371](https://github.com/openshift/origin/pull/27371) * Enable ServiceInternalTrafficPolicy tests in OVNK [#27043](https://github.com/openshift/origin/pull/27043) * [OCPBUGS-967](https://issues.redhat.com/browse/OCPBUGS-967): temporarily disable IngressClass test, which is changed in upstream in 1.25 [#27417](https://github.com/openshift/origin/pull/27417) * Add a test case to find job name/cluster version mismatches [#27413](https://github.com/openshift/origin/pull/27413) * upkeep: updated data set for 4.12 [#27420](https://github.com/openshift/origin/pull/27420) * [OCPBUGS-1237](https://issues.redhat.com/browse/OCPBUGS-1237): Fix s2i ruby test that relys on rack [#27419](https://github.com/openshift/origin/pull/27419) * Address exceeded maximum resolution of 11,000 points per timeseries [#27384](https://github.com/openshift/origin/pull/27384) * [OCPBUGS-587](https://issues.redhat.com/browse/OCPBUGS-587): Temporarily flake FailedToUpdateEndpointSlices [#27418](https://github.com/openshift/origin/pull/27418) * Ignore the "InsufficientInstanceCapacity" patholocial event [#27385](https://github.com/openshift/origin/pull/27385) * Automatically skip tests with apigroups which are not served [#27406](https://github.com/openshift/origin/pull/27406) * Label tests with openshift crafted API groups [#27387](https://github.com/openshift/origin/pull/27387) * skip route-controller-manager scaling events in build testsuite [#27394](https://github.com/openshift/origin/pull/27394) * Remove flake for 40% Secret/ConfigMap growth test. [#27381](https://github.com/openshift/origin/pull/27381) * [Bug 2100091](https://bugzilla.redhat.com/show_bug.cgi?id=2100091): Ignore FailedCreatePodSandBox events for garbage collector tests [#27270](https://github.com/openshift/origin/pull/27270) * Fix upgrade dry-run. [#27388](https://github.com/openshift/origin/pull/27388) * Update etcd tests with k8s 1.25 data [#27396](https://github.com/openshift/origin/pull/27396) * Update etcd tests with k8s data [#27393](https://github.com/openshift/origin/pull/27393) * Instead of returning errors when there is no etcd operator, just return static values for etcd metadata [#27342](https://github.com/openshift/origin/pull/27342) * Test baremetal deployment without provisioning network [#26676](https://github.com/openshift/origin/pull/26676) * Ensures operators use external cloud provider [#27349](https://github.com/openshift/origin/pull/27349) * [Bug 2098053](https://bugzilla.redhat.com/show_bug.cgi?id=2098053): Re-revert "Add networking test for invalid external gateway" [#27277](https://github.com/openshift/origin/pull/27277) * Separate out pathological event test for error updating endpoint slices [#27377](https://github.com/openshift/origin/pull/27377) * Revert "Label tests with openshift crafted API groups (round 3)" [#27378](https://github.com/openshift/origin/pull/27378) * Skip etcd scaling test for metal and vsphere platforms [#27375](https://github.com/openshift/origin/pull/27375) * Test we don't see substantial Secret/ConfigMap growth during upgrade. [#27354](https://github.com/openshift/origin/pull/27354) * Add ovnkube-node pods in the interval chart for ingress [#27372](https://github.com/openshift/origin/pull/27372) * update service load balancer test to gracefully roll out [#27180](https://github.com/openshift/origin/pull/27180) * EgressIP: Enable EgressIP tests for OpenStack [#27363](https://github.com/openshift/origin/pull/27363) * Label tests with openshift crafted API groups (round 3) [#27368](https://github.com/openshift/origin/pull/27368) * Suppress failures if certain firing alerts happened with related event [#27304](https://github.com/openshift/origin/pull/27304) * [Bug 2095623](https://bugzilla.redhat.com/show_bug.cgi?id=2095623): Revert "Disable azure-file tests" [#27259](https://github.com/openshift/origin/pull/27259) * job names: exclude text before `e2e` for both platform and network tests [#27373](https://github.com/openshift/origin/pull/27373) * upkeep: updated synthetic tests historical data for alerts and disruption [#27364](https://github.com/openshift/origin/pull/27364) * Update job name tests for hard failure cases [#27362](https://github.com/openshift/origin/pull/27362) * Label tests with openshift crafted API groups (round 1) [#27355](https://github.com/openshift/origin/pull/27355) * Add required pod security admission annotations into cmd/namespace [#27357](https://github.com/openshift/origin/pull/27357) * [Bug 2110503](https://bugzilla.redhat.com/show_bug.cgi?id=2110503): EgressIP: Probes and check tcpdump logs should succeed eventually [#27318](https://github.com/openshift/origin/pull/27318) * test/extended/util/disruption: Remove stale p95 references [#27351](https://github.com/openshift/origin/pull/27351) * display UTC time for timeline charts [#27348](https://github.com/openshift/origin/pull/27348) * networking/acl: live-retrieve the NS instead of f.Namespace [#27347](https://github.com/openshift/origin/pull/27347) * Consider Prometheus maximum points in a time series for alert tests [#27319](https://github.com/openshift/origin/pull/27319) * Tune watch limits for operators [#27281](https://github.com/openshift/origin/pull/27281) * allow techpreviewnoupgrade alert when testing techpreview [#27343](https://github.com/openshift/origin/pull/27343) * Ignore repo name when looking for network type in job name [#27339](https://github.com/openshift/origin/pull/27339) * Use "plugin" for some nw isolation test case names [#27330](https://github.com/openshift/origin/pull/27330) * Revert "Revert 'bump o/k for the fixed scheduling tests'"; layer fix on top [#27332](https://github.com/openshift/origin/pull/27332) * Update authenticated users RBAC e2e test [#27326](https://github.com/openshift/origin/pull/27326) * OWNERS_ALIASES: add me as a metal platform lead [#27337](https://github.com/openshift/origin/pull/27337) * Add Jan as image approver, remove Ravi and Clayton [#27331](https://github.com/openshift/origin/pull/27331) * [Bug 2114506](https://bugzilla.redhat.com/show_bug.cgi?id=2114506): test/extended/olm: Handle unset enabledCapabilities in marketplaceEnabled [#27336](https://github.com/openshift/origin/pull/27336) * Convert kubelet logs into monitor events for timelines [#27299](https://github.com/openshift/origin/pull/27299) * Revert "bump o/k for the fixed scheduling tests" [#27328](https://github.com/openshift/origin/pull/27328) * etcd vertical scaling test: add verbose timeout error messages and bump machine provisioning timeout for Azure [#27322](https://github.com/openshift/origin/pull/27322) * remove CLI.SetupNamespace() in favour of CLI.SetupProject() [#27325](https://github.com/openshift/origin/pull/27325) * Increase API requests limit for monitoring operator on openstack [#27324](https://github.com/openshift/origin/pull/27324) * bump o/k for the fixed scheduling tests [#27323](https://github.com/openshift/origin/pull/27323) * Separate out test for SamplesImagestreamImportFailing alarm [#27314](https://github.com/openshift/origin/pull/27314) * Fix same test name being used twice for pods on different nodes check. [#27315](https://github.com/openshift/origin/pull/27315) * etcd storage tests: work with dynamic namespace names [#27295](https://github.com/openshift/origin/pull/27295) * Add etcd vertical scaling test." [#27294](https://github.com/openshift/origin/pull/27294) * Add a new spyglass chart for image-registry, console, oauth [#27297](https://github.com/openshift/origin/pull/27297) * [Bug 2098194](https://bugzilla.redhat.com/show_bug.cgi?id=2098194): set sampleErr to bodyReadErr [#27260](https://github.com/openshift/origin/pull/27260) * Fixes OVN ACL audit log parsing [#27312](https://github.com/openshift/origin/pull/27312) * [Bug 2079679](https://bugzilla.redhat.com/show_bug.cgi?id=2079679): pkg/monitor: wait for Prometheus sidecars to be ready [#27224](https://github.com/openshift/origin/pull/27224) * Add test that checks CI job name matches platform and network type [#27311](https://github.com/openshift/origin/pull/27311) * examples: drop OCP 3 library paths [#27266](https://github.com/openshift/origin/pull/27266) * Revert "Enable EgressIP tests for internal targets" [#27307](https://github.com/openshift/origin/pull/27307) * fix(olm-test): skip test if marketplace is not enabled [#27302](https://github.com/openshift/origin/pull/27302) * [Bug 2089966](https://bugzilla.redhat.com/show_bug.cgi?id=2089966): use multi-arch ldap and multicast test images [#27169](https://github.com/openshift/origin/pull/27169) * Revert "Bypass tests failing due to metal image rebuild on RHEL9" [#27288](https://github.com/openshift/origin/pull/27288) * Update to go 1.18 [#27253](https://github.com/openshift/origin/pull/27253) * separate interval gathering from interval calculation [#27298](https://github.com/openshift/origin/pull/27298) * Make margin wider to see more in spyglass charts [#27061](https://github.com/openshift/origin/pull/27061) * [Bug 2098096](https://bugzilla.redhat.com/show_bug.cgi?id=2098096): Enable EgressIP tests for internal targets [#27262](https://github.com/openshift/origin/pull/27262) * test/extended/prometheus: clean alert exceptions [#27211](https://github.com/openshift/origin/pull/27211) * test: allow -f to match tests for any test suite (redux) [#27096](https://github.com/openshift/origin/pull/27096) * BUG 2067323: test/extended/router: Drop host lookup for gRPC HTTP/2 h2spec tests [#27274](https://github.com/openshift/origin/pull/27274) * [Bug 2097297](https://bugzilla.redhat.com/show_bug.cgi?id=2097297): Show DNS lookup sampler problems on the disruption intervals chart. [#27261](https://github.com/openshift/origin/pull/27261) * [Bug 2094342](https://bugzilla.redhat.com/show_bug.cgi?id=2094342): bump cluster-capi-operator apirequests upper bound to 50 [#27225](https://github.com/openshift/origin/pull/27225) * Add Ravi and Abu as image approvers [#27282](https://github.com/openshift/origin/pull/27282) * Remove etcd vertical scaling test. [#27280](https://github.com/openshift/origin/pull/27280) * make a new category of pod sandbox failure [#27247](https://github.com/openshift/origin/pull/27247) * [Bug 2099698](https://bugzilla.redhat.com/show_bug.cgi?id=2099698): revert: no longer needed logic for rt kernel [#27264](https://github.com/openshift/origin/pull/27264) * Bypass tests failing due to metal image rebuild on RHEL9 [#27283](https://github.com/openshift/origin/pull/27283) * [Full changelog](https://github.com/openshift/origin/compare/b34b8a2503424d03cd50b8ecd0860b380a492f4f...7b7d4ef2acfb10117f21af59d5b99da177b19d3d) ### [thanos](https://github.com/openshift/thanos/tree/2867a6b552eaddefd73aa979f13e95f6df338070) * [OCPBUGS-27100](https://issues.redhat.com/browse/OCPBUGS-27100): Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 [#137](https://github.com/openshift/thanos/pull/137) * [OCPBUGS-21135](https://issues.redhat.com/browse/OCPBUGS-21135): Bump golang.org/x/net to v0.17.0 [#126](https://github.com/openshift/thanos/pull/126) * [OCPBUGS-4276](https://issues.redhat.com/browse/OCPBUGS-4276): Update exporter-toolkit to 0.7.3 [#111](https://github.com/openshift/thanos/pull/111) * Updating thanos images to be consistent with ART [#101](https://github.com/openshift/thanos/pull/101) * Bump openshift/thanos to v0.28.1 [#91](https://github.com/openshift/thanos/pull/91) * Bump openshift/thanos to v0.28.0 [#90](https://github.com/openshift/thanos/pull/90) * OWNERS: Add Joao and myself, and move former team members to emeritus [#88](https://github.com/openshift/thanos/pull/88) * Bump openshift/thanos to v0.27.0 [#85](https://github.com/openshift/thanos/pull/85) * [Full changelog](https://github.com/openshift/thanos/compare/45baf4b41798633ce46a944786bbea39ba8c074e...2867a6b552eaddefd73aa979f13e95f6df338070)