4.18.0-ec.0

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.18.0-ec.0-aarch64

Team Approvals:

Tests:

Informing jobs
- aws-ovn-arm64 Failed (3 retries) periodic-ci-openshift-multiarch-master-nightly-4.18-ocp-e2e-aws-ovn-arm64
- ovn-upgrade Succeeded periodic-ci-openshift-multiarch-master-nightly-4.18-ocp-e2e-upgrade-aws-ovn-arm64

Upgrades from:

Untested upgrades: 4.17.0-rc.0, 4.17.0-rc.1

Upgrades to:

4.18.0-ec.1 (changes) - F F F F

Loading changelog, this may take a while ...

Changes from 4.17.0-ec.0

Created: 2024-09-02 08:13:09 +0000 UTC

Image Digest: sha256:b4e0c9b936738207e47eab44d1ddb44d9c5e3002f76cfe1faad50e7a5e541ed2

Components

Kubectl upgraded from 1.30.1 to 1.30.2
Kubernetes upgraded from 1.30.1 to 1.30.3
Kubernetes Tests upgraded from 1.29.0 to 1.30.0
Red Hat Enterprise Linux CoreOS upgraded from 417.94.202405311348-0 to 418.94.202408212252-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ClusterAPIInstallAzure (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
ExternalCloudProvider (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ExternalCloudProviderAzure (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ExternalCloudProviderExternal (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ExternalCloudProviderGCP (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ExternalRouteCertificate (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ImagePolicy (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ServiceAccountTokenNodeBindingValidation (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ServiceAccountTokenPodNodeInfo (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ChunkSizeMiB (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallGCP (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallPowerVS (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
GCPLabelsTags (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ManagedBootImages (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
NodeDisruptionPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
IngressControllerLBSubnetsAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MultiArchInstallAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MultiArchInstallGCP (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
SetEIPForNLBIngressController (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AWSEFSDriverVolumeMetrics (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AdditionalRoutingCapabilities (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
BootcNodeManagement (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterMonitoringConfig (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ImageStreamImportMode (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesAWS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MultiArchInstallAzure (0 tests)
NetworkSegmentation (10 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
OVNObservability (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
PersistentIPsForVirtualization (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ProcMountType (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
RouteAdvertisements (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
UserNamespacesPodSecurityStandards (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
UserNamespacesSupport (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

baremetal-cluster-api-controllers git 9e6d2bd4 sha256:69257e43f4c5e782947295aa197016d1dea541bc9bfbd3edc64e7df60918b331
metallb-frr git 377d02f9 sha256:1fead2c9cba21f7c1422e0909d7a71664b7496bceaf282f85890c6cddc407768
networking-console-plugin git 91b33f1b sha256:92bf0080f12ff736bf9bbc310081b9497d199a1ee8e18ae2454ff023ef3884b6
operator-framework-tools git 7915649d sha256:a3451dd8f8350c992d6139bd1498798649ce015f1848b31f3c335e6468630987

Removed images

alibaba-cloud-controller-manager
k8s-prometheus-adapter
olm-rukpak
sdn

Rebuilt images without code change

agent-installer-utils git 3b99303b sha256:67b512e3a0e7a6706fb661e61d914b6f30946442f450ed2cac3b8a8fc7de7f49
azure-kms-encryption-provider git eab1dcfc sha256:9df20f15228f2c72f173e255bc7898c513b1c8fcb8a6a29437844bd131f06791
baremetal-machine-controllers git 2549061c sha256:290e5145bb8333d51ca7c9f76eba07df9f0f8749f43d76a2548beb07bf1cae5b
cluster-bootstrap git 27bfb59f sha256:5f4749c3c53e3d3597da2eda1f7ddfcadf59cbcf0bd35a598a73b951c47f1cbc
cluster-policy-controller git c502ece1 sha256:4e1f20cef6ff30fa3f2def4f20788016bde01055a02f6dbe3d64a03da41d2607
configmap-reloader git b877222b sha256:865569d52d214d18be7bae8ebcf01c601c5f326d331a791ba6fed7b55d8035b5
csi-node-driver-registrar git 436a1f33 sha256:b382b09f4b58c6e80b2abd6f6fd4b400f363086b358ddfcf406d70ef7426ec96
driver-toolkit git 859518f6 sha256:2080dd576ebbe0ba41e634268fe6a18ec56ff89a9f024be9bfb40026911e4a82
kube-metrics-server git 1f68026b sha256:37bfd9fa404e8afd2b6db7eb228913a11025e37ac117b62c319a5b225fd82a72
kube-rbac-proxy git 8ea2c994 sha256:ce02d02845bb663ee4551097b593540575ff9e03f4e1cfe670b291e7f981feb2
kubevirt-cloud-controller-manager git 3f4542ec sha256:6def2704360e3a11380f6c5d2190ac1961aed0eeeba7748dacdd8d9350c94865
libvirt-machine-controllers git a336f0b5 sha256:e5c16785e97cc39b19f8ab6802e5a9a70f4452083541c770bde7d1e5f6956721
machine-image-customization-controller git 74bee374 sha256:f43d84f0e623cc007557672119a7a0187a9fb5adb8ad53ce53e327ac3776dd77
machine-os-images git 9e76dac7 sha256:b97048ffa59454db441cee3c573556b534d852976f8753c61a2f3c1d17006936
network-interface-bond-cni git 8630f336 sha256:00e1aa43860ba99044ffb5b5f403ea53175f40e678d177821e5e16ec9af87638
oauth-apiserver git e37ccb45 sha256:86b5eaf9b02938fcfd7ea3308de30556e23a68d740bd6d360612f00b446befa6
oauth-proxy git 30f80124 sha256:3730f4b4603eb93072767e65cdc3f38af25936d3ef2a86f198121b2847dc4263
openshift-apiserver git 3c3cb886 sha256:95293f75ab7a10da38170e0c1a0280ce1e46b4f2d4698c48706a91c12e4a0214
openshift-state-metrics git 1e963eb5 sha256:432f33e4b75d7268442c3b398d6251690cbb9916f2381cc04ce7c51fd7956133
ovirt-csi-driver git 1db726a9 sha256:1df2486a7df5e0c8fff8e07429b527d7a086a2c72158c5aaead3343883db29d7
ovirt-csi-driver-operator git 0feae256 sha256:095aa2cd81e8d11b0dd92277e606008b6e4ec8b649c80f796d2dddf8aac2d2cc
ovirt-machine-controllers git abb91c84 sha256:42ee8115bb1bd35b11f5b7ce1f075cfe67558cc9bc5f7c561f0205fee6f87f7a
prometheus-alertmanager git d7c1a7c6 sha256:85bcb7577e9f54d255e3beb702a155dfdb622f784f54a460f355761952936f72
rhel-coreos sha256:e16239c8f600ab2528c6af6150b11d0b1c9cea1b36b7a1dc1e10f8181e277850
rhel-coreos-extensions sha256:6b4f12295c95c71b9af87ec66771bc757e7606605f370ef79de29dc2bab9c607
route-controller-manager git a47f6be3 sha256:8889679f76243536bbcee56598e289d0984f50f29707975e632507b119e1c2bb

agent-installer-api-server

NO-ISSUE: Soft install timeout enhancement (#6694) #6694
NO-ISSUE: Support both minikube and kind for deploying on k8s cluster (#6664) #6664
NO-ISSUE: add MCE to OLM operators dev docs (#6689) #6689
MGMT-18384 bump golang 1.21 (#6667) #6667
MGMT-1612: Allow a slight deviation from official host minimum memory (#6660) #6660
MGMT-18378: allow CNV on ARM Dev preview (#6645) #6645
Reapply “Add certs to ingress when deploying in non-OCP clusters (#6564)” (#6685) #6564
Wait for host to deprovision in BMAC (#6666) #6666
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.17 (#6676) #6676
MGMT-18121: Configure networking when using ISCSI over OCI (#6665) #6665
NO-ISSUE: Change debug Dockerfile so it will not require prior actions (#6674) #6674
MGMT-17560: Workaround missing DNS on iSCSI (#6603) #6603
MGMT-18514: Calculate machine networks in external platform (#6661) #6661
OCPBUGS-27238: Use both the OCP cluster trusted certs and user certs (#6649) #6649
MGMT-18560: Fix AutomatedCleaningMode behavior (#6662) #6662
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.15 (#6663) #6663
NO-ISSUE: Fix debug image by adding required packages (#6659) #6659
MGMT-17560: Append kargs for iSCSI boot (#6602) #6602
NO-ISSUE: [master] Bump OCP versions: 4.16 (#6658) #6658
NO-ISSUE: Add missing kube api flag on kube api subsystem test (#6655) #6655
NO-ISSUE: Print subsystem environment variables before test (#6654) #6654
MGMT-17560: validation to support iSCSI boot volume (#6434) #6434
MGMT-18313: Replace golang base image as it is based on Centos Linux 7 (#6637) #6637
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.16, 4.13 (#6644) #6644
MGMT-18231: Block iSCSI as an installation disk when its holder is multipath (#6612) #6612
MGMT-18505: Fix installation from a 4.17 hub with converged flow (#6639) #6639
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.15, 4.12 (#6638) #6638
AGENT-930: For the agent installer, parse the expiration time from the token and verify if the token is valid. (#6605) #6605
NO-ISSUE: Use skipepr to build images as debug image requires nmstate packages for building (#6629) #6629
MGMT-16242: Suggest OCP images based on availability for architecture (#6262) #6262
NO-ISSUE: [master] Bump OCP versions: 4.16 (#6621) #6621
MGMT-18451: Enable debugging assisted-service on kind (#6613) #6613
Revert “MGMT-18127: User name and password in a proxy url should be url encod…” (#6619) #6619
NO-ISSUE: Tidy golang dependencies before vendoring in base image (#6599) #6599
NO-ISSUE: [master] Bump OCP versions: 4.17 (#6611) #6611
MGMT-18446: Correct hostname max length validation (#6604) #6604
MGMT-18448: Allow local cluster import to be disabled. (#6606) #6606
MGMT-17773: Enforce go modules tidy (#6600) #6600
NO-ISSUE: [master] Bump OCP versions: 4.15 (#6598) #6598
Add -L option to curl command to follow redirects (#6594) #6594
NO-ISSUE: Adjust permissions on /data directory (#6587) #6587
Revert “Add certs to ingress when deploying in non-OCP clusters (#6564)” (#6590) #6564
Fix OKD podman deploy (#6588) #6588
MGMT-18411: Add NTP sources to discovery environment (#6591) #6591
NO-ISSUE: Fix python client generation (#6593) #6593
fix: dev-requirements.txt to reduce vulnerabilities (#6576) #6576
MGMT-18155: handle state of day2 node in Done stage (#6570) #6570
Remove unused extracter struct (#6586) #6586
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.13 (#6584) #6584
KONFLUX-1611: Add labels, licenses & user to Dockerfile (#6484) #6484
Refactor package in generator_test.go to use _test suffix for implementing black-box testing methodology (#6578) #6578
Add certs to ingress when deploying in non-OCP clusters (#6564) #6564
MGMT-18333: Remove the python client from the image (#6579) #6579
NO-ISSUE: Exclude vendor directory from snyk code analysis (#6572) #6572
(‘#6552’): Update registry.svc.ci.openshift.org to registry.ci.openshift.org (#6553) #6553
NO-ISSUE: Fix subsystem tests in the CI - Wiremock stubs script is failing to reach wiremock from time to time (#6569) #6569
NO-ISSUE: [master] Bump OCP versions: 4.14 (#6568) #6568
MGMT-18171: Make manifest metadata storage more transactional in nature (#6457) #6457
fix: dev-requirements.txt to reduce vulnerabilities (#6551) #6551
NI-ISSUE: Fix skipper configuration (#6560) #6560
MGMT-17478: Use ICC config secret for converged flow info when available (#6533) #6533
Fix kind deploy (#6561) #6561
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.15 (#6558) #6558
MGMT-18160: Use cert-manager to handle tls certs for webhooks (#6546) #6546
MGMT-17893: Don’t destroy cluster on detach (#6532) #6532
NO-ISSUE: Add renovate config to limit number of PR (#6536) #6536
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16 (#6547) #6547
NO-ISSUE: Mount emptyDir for data in image service (#6544) #6544
MGMT-18131: Make application work on non-OCP kubernetes (#6446) #6446
NO-ISSUE: [master] Bump OCP versions: 4.15 (#6511) #6511
MGMT-18286: Internal Documentation for using and testing multipath (#6505) #6505
MGMT-18269: Reset finalizing stage in DB while resetting cluster (#6499) #6499
MGMT-8356: Fix postgres deployment script in ‘kind’ target to set static nodePort correctly, Remove static nodePorts for deployment targets other then ‘kind’ (#6504) #6504
NO-ISSUE: Add 4.17 OS/OCP images (#6503) #6503
OCPBUGS-35932: Allow auth in docker credentials to be empty (#6465) #6465
NO-ISSUE: Retrieve ‘subsystem-clean’ target as it is used by the QE (#6494) #6494
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.12, 4.15 (#6502) #6502
MGMT-18073: update OCP 4.16 GA version, add 4.17 beta versions (#6501) #6501
NO-ISSUE: Increase Konflux git clone depth (#6495) #6495
Allow agent-installer-client to use a secure port when adding a new node in day2 (#6464) #6464
Update quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.1 Docker digest to 8838d3e (#6479) #6479
Update quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.4 Docker digest to d70d970 (#6478) #6478
Update quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.1 Docker digest to 46fcff2 (#6477) #6477
Update quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.1 Docker digest to f38e274 (#6474) #6474
Update quay.io/konflux-ci/tekton-catalog/task-buildah:0.1 Docker digest to cdcb8b8 (#6473) #6473
Update quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check:0.1 Docker digest to a74dae0 (#6481) #6481
Update quay.io/konflux-ci/tekton-catalog/task-git-clone:0.1 Docker digest to 9ea6101 (#6480) #6480
MGMT-16102: Generated code returns inconsistent error codes (#6433) #6433
MGMT-18127: User name and password in a proxy url should be url encoded (#6467) #6467
NO-ISSUE: Red Hat Konflux update assisted-service-saas-main (#6471) #6471
NO-ISSUE: Add missing ‘make’ command (#6466) #6466
NO-ISSUE: Add pastequo as approver (#6460) #6460
Red Hat Konflux purge assisted-service-q2vh (#6453) #6453
fix: dev-requirements.txt to reduce vulnerabilities (#6445) #6445
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.16, 4.15, 4.13 (#6449) #6449
NO-ISSUE: Create ‘build’ dir if missing (#6448) #6448
MGMT-18029: Enhancement for manifest storage improvement (#6431) #6431
MGMT-8356: Deploy assisted-service and its components to kind cluster (#6385) #6385
MGMT-18067: Update operator bundle channel to 2.12 (#6440) #6440
NO-ISSUE: Add omer-vishlitzky to OWNERS_ALIASES file (#6432) #6432
NO-ISSUE: [master] Bump OCP versions: 4.16 (#6442) #6442
NO-ISSUE: Refactor uploader pkg (#6435) #6435
NO-ISSUE: Push cluster_installation_failed event each time the state machine go to failed state (#6439) #6439
MGMT-18092: infraenv cannot be created while deploying vlan spokes with previous configuration (#6420) #6420
MGMT-18130: Allow infra-operator to start in non OCP kubernetes clusters (#6427) #6427
fix: dev-requirements.txt to reduce vulnerabilities (#6438) #6438
NO-ISSUE: [master] Bump OCP versions: 4.12, 4.14, 4.15 (#6428) #6428
Differentiate between monitoring failures and component issues (#6437) #6437
MGMT-17708: Adjust the logs to show values when registering the cluster (#6429) #6429
Add Linoy Hadad to OWNER_ALIASES file (#6430) #6430
MGMT-18041: Expose helper to parse uploaded events (on-prem) (#6415) #6415
MGMT-18096: Make sure correct cluster name and base domain is set by local cluster import controller (#6419) #6419
NO-ISSUE: Remove double ‘required: false’ in openshift template (#6423) #6423
NO-ISSUE: [master] Bump OCP versions: 4.16 (#6421) #6421
MGMT-17300: adding has partition field for disks (#6383) #6383
MGMT-18086: Clean subsystem tests resources correctly (#6418) #6418
MGMT-18059: Mark OCI as supported integration (#6403) #6403
NO-ISSUE: [master] Bump OCP versions: 4.15, 4.14, 4.12, 4.16, 4.13 (#6409) #6409
MGMT-17802: Ensure that manifest patches may be placed in either manifests or openshift (#6411) #6411
MGMT-17794: Make sure that uploaded manifest files have valid filename before extensions (#6410) #6410
NO-ISSUE: Adding verification if file exist before sourcing it in force (#6407) #6407
AGENT-869: Implement a new auth type for ABI (#6174) #6174
MGMT-17984: [soft timeout] operators timeout after 10 hours without events (#6382) #6382
MGMT-18046: Create an infraenv for the local cluster during import (#6401) #6401
NO-ISSUE: Fix Failed to download metadata for dnf repositories in centos8 by using archived centos8 repositories (#6397) #6397
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-18550: bump golang 1.21 (#894) #894
OCPBUGS-31570: Bump to latest preinstall utils for disk cleanup fixes (#886) #886
NO-ISSUE: fixing ARM images builds (#885) #885
OCPBUGS-36779: Reload host inventory on conflict (#877) #877
MGMT-18332: Use centos stream 9 as the base image for test container (#876) #876
NO-ISSUE: Replace base golang image in the build Dockerfile as it is based on centos7 and it is EOL, which results in yum can’t reach its repositories (#862) #862
Full changelog

agent-installer-node-agent

MGMT-18475: disabling CGO (#772) #772
NO-ISSUE: Bump golang.org/x/sys in the go-dependencies group (#766) #766
MGMT-18511: update golang 1.21 (#762) #762
MGMT-18521: fix NTP sources are not valid (#767) #767
NO-ISSUE: Bump the go-dependencies group with 3 updates (#763) #763
MGMT-17560: Report iSCSI host IP address in inventory (#727) #727
NO-ISSUE: fix for ARM and multi images (#754) #754
NO-ISSUE: Bump golang.org/x/sys in the go-dependencies group (#751) #751
NO-ISSUE: Use centos stream 9 as the base image for test container (#750) #750
NO-ISSUE: Migrate build image to use registry.access.redhat.com/ubi9/go-toolset:1.20 (#735) #735
MGMT-17867: fix multipath inventory to include wwn (#733) #733
NO-ISSUE: Bump the go-dependencies group with 2 updates (#726) #726
NO-ISSUE: Bump the go-dependencies group with 2 updates (#720) #720
Full changelog

apiserver-network-proxy

OCPBUGS-37052: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #57
OCPBUGS-34199: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.17 #54
Full changelog

aws-cloud-controller-manager

NO-JIRA: Update OWNERS #91
OCPCLOUD-2608: Merge https://github.com/kubernetes/cloud-provider-aws:master (0445cf1) into master #62
Full changelog

aws-cluster-api-controllers

OCPCLOUD-2679: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.6.1 (6db1244) into master #519
NO-JIRA: Update OWNERS #517
Full changelog

aws-ebs-csi-driver

OCPBUGS-37088: UPSTREAM: 2108, 2115: Fix allocatable volumes count for vt1 and g4 #274
STOR-1598: Rebase to v1.32.0 for OCP 4.17 #272
OCPBUGS-36943: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.17 #273
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-38578: Update aws-efs-csi-driver-operator image-references name #264
STOR-1819: Distribute OCP specific test manifest with create-efs-volume #260
OCPBUGS-38620: Some CSI driver containers missing terminationMessagePolicy #262
STOR-2009: Bump OLM metadata to 4.18 #259
OCPBUGS-38578: efs: fix tools image reference #261
STOR-1993: add init container in EFS CSI controller pod #252
STOR-1819: Add manifest with OCP specific test config #258
STOR-1422: Volume Metrics for EFS CSI Driver #255
STOR-1819: Add manifest with OCP specific test config #254
NO-JIRA: use service account namespace placeholder for smb role bindings #250
STOR-2002: add Azure File snapshot support #253
OCPBUGS-37488: add init container in EBS CSI controller pod #248
STOR-1856: add STS hook for EFS credentials request controller #251
STOR-1874: Use real HyperShift API #236
OCPBUGS-37274: Add FIPS_ENABLED to env vars for aws-efs-csi-driver (2) #249
STOR-1856: remove aws efs operator legacy dir #244
STOR-1596: Bump all deps for 4.17 #240
STOR-1856: STOR-1606: migrate legacy AWS EFS operator code to csi-operator #237
OCPBUGS-36936: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.17 #241
OCPBUGS-36948: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.17 #243
OCPBUGS-36942: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.17 #242
STOR-1606: Bump OLM metadata to 4.17 #239
OCPBUGS-34451: Bump go version to be consistent with ART #238
STOR-1290: don’t pass credentials via environment variables in AWS EBS #202
STOR-1856: migrate AWS EFS operator to csi-operator #232
NO-JIRA: keep smb test storageclass consistent with official doc #234
OCPBUGS-34667: Ensure Node Metric Service is created in the openshift-cluster-csi-drivers namespace for both OpenShift and Hypershift #233
Full changelog

aws-kms-encryption-provider

NO-JIRA: Bump to latest #20
Full changelog

aws-machine-controllers

OCPCLOUD-2565: Add feature gates flag #108
OCPBUGS-36469: Update placementGroupPartition to honour it as a pointer #107
CFE-1064: Add support for PlacementGroupPartition of placement group #101
NO-JIRA: Update OWNERS #105
OCPCLOUD-2615: Update dependencies to K8s 1.30 #104
OCPBUGS-34255: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.17 #103
Full changelog

aws-pod-identity-webhook

OCPBUGS-36522: Rename Dockerfile #195
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

NO-JIRA: Update OWNERS #123
OCPCLOUD-2607: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (e6f5e9a) into master #113
Full changelog

azure-cluster-api-controllers

OCPCLOUD-2584: Add manifest generation #300
OCPBUGS-34246: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.17 #312
OCPBUGS-36026: Update go-retryablehttp to v0.7.7 #309
NO-JIRA: Update OWNERS #308
OCPCLOUD-1640: Add DisableExtensionOperations field #301
Full changelog

azure-disk-csi-driver

STOR-1601: Rebase to upstream v1.29.7 for OCP 4.17 #81
OCPBUGS-36939: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.17 #83
Full changelog

azure-file-csi-driver

OCPBUGS-34637: bump mount-utils to treat ENODEV error as corrupted mount #74
STOR-2002: UPSTREAM: 2040: fix snapshot size #73
STOR-1604: Rebase v1.30.3 for OCP 4.17 #70
OCPBUGS-34464: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.17 #72
Full changelog

azure-machine-controllers

OCPCLOUD-2565: Adds –feature-gates CLI argument #116
NO-JIRA: Update OWNERS #114
OCPCLOUD-2614: Update to K8s 1.30 #113
Full changelog

azure-workload-identity-webhook

OCPBUGS-36402: Rename Dockerfile.rhel7 to Dockerfile.ocp #23
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

CORS-3561: Add new disk types GCP Control Plane nodes #8880
OCPBUGS-38235: upi/aws: update lambda runtime python version #8820
OCPBUGS-38118: failed to install Nutanix OCP 4.16 cluster with DHCP network #8806
OCPBUGS-38479: ic: validate release arch is compatible with cluster arch #8842
OCPBUGS-38177: install-status reflects day 2 services #8858
OCPBUGS-38722: aws: validate public-only subnets configs #8883
OCPBUGS-37663: azure: Fix empty route table being created. #8872
OCPBUGS-36196: CAPZ USGovernmentCloud fixes #8876
NO-JIRA: Print the “export KUBECONFIG=…” command on its own line for easier cut-and-paste #8882
OCPBUGS-37543: Azure: Disable shared key access when using managed identity #8844
OCPBUGS-38657: upstream capv bug causes session timeout #8871
OCPBUGS-38070: Azure CAPI: Add check for APIServer OperatorPublishingStrategy #8852
OCPBUGS-38571: GCP Global Address failed to destroy #8860
OCPBUGS-38558: Fix typo #8854
OCPBUGS-38599: incorrect folder gen, workaround govmomi vm folder path bug #8861
OCPBUGS-38152: Add roles needed for shared VPC #8815
OCPBUGS-38552: Use ManifestListed Digest for multi payload installs #8850
SPLAT-1713: Updated powercli configuration to allow multi vcenters #8853
OCPBUGS-37953: pkg/infrastructure/azure: limit storage account to 24 characters or less #8835
OCPBUGS-38551: only allow a single network in failure domain topology #8851
OCPBUGS-37945: import failure when esxi config is not the same in the cluster #8799
OCPBUGS-37683: Resource deletion is holding up deletion process #8810
OCPBUGS-35262: Do not create firewall rules for xpn installs #8801
SPLAT-1713: Enhanced vSphere UPI scripts for multi vcenter support #8829
OCPBUGS-38114: aws: add support for clusters with public-only subnets #8807
no-jira: update vsphere owners locations #8833
OCPBUGS-37736: vsphere, if secureboot is enabled, disable it in the template #8793
OCPBUGS-36327: bump capa for instance register fix #8678
OCPBUGS-38436: PowerVS: Fix mad system pool #8831
OCPBUGS-35947: pkg/asset/machines: fix Azure zones #8817
OCPBUGS-37780: aws: do not allow edge pools of different arch #8788
OCPBUGS-38241: Update control plane tags to match CAPI networks #8822
SPLAT-1560: set up ‘aicli’ & ‘qemu-img’ to use Assisted Installer to install OCP on Alibaba Cloud #8776
AGENT-938: Enhance console logging to display node ISO expiry date during addNodes workflow #8804
CFE-920: Update GCP userLabels and userTags configs description #8766
AGENT-944: Enable assisted-service debug logging #8816
OCPBUGS-37770: data/bootstrap/files/usr/local/bin/bootkube: Pass CVO render –feature-gate-manifest-path #8813
OCPBUGS-37821: Remove timed context for gcp client #8792
CORS-3575: Azure: remove azure terraform code and resources #8764
OCPBUGS-37540: Gather Azure Logs through load balancer #8812
AGENT-937: Check Authentication Token for Node Boot-Up on day2 #8802
Revert “Revert #8221 “SPLAT-1553: Added multi vCenter support for capi installer.”” #8638
MULTIARCH-4770: MULTIARCH-4776: bump o/api for MultiArchInstall FGs #8808
MULTIARCH-4098: Power VS: Make CAPI the default deployment method #8814
CORS-3617: Make Azure CAPI the default (& only) install option #8809
no-jira: PowerVS: Block disconnected deploys in 4.17 #8798
CORS-3608: aws: deprecate platform.aws.amiID field #8755
NO-ISSUE: Remove unnecessary code #8805
AGENT-890: Simplify Agent ISO kargs setting #8513
CORS-3546: Nutanix: add gpus and dataDisks support #8765
OCPBUGS-38055: fix/aws/edge: IAM profile must be same of workers #8803
CORS-3594: MOVE GCP CAPI to default feature set #8723
no-jira: doc: minor update to installation doc #8795
AGENT-870: Update AUTH_TYPE #8108
OCPBUGS-37594: pkg/infrastructure/azure: Set architecture when creating gallery image #8800
CORS-3609: aws: support existing IAM instance profiles #8689
MULTIARCH-4828: Pass ServiceEndpoints from install-config to CAPI for PowerVS #8781
MGMT-18364: add image-based installation ISO integration tests #8797
CORS-3565: CAPZ private clusters #8732
OCPBUGS-36361: Azure: If credentialsMode is manual, pass the identity through #8786
CORS-3299: Azure: Use Customer Managed Key to enable Storage Account Encryption #8736
MULTIARCH-4770: bump o/api for MultiArchInstall TechPreview gates #8791
OCPBUGS-34953: fix bogus analyze message when gather fails #8787
AGENT-928: allow user to specify sshKey via config file #8779
OCPBUGS-35262: Upgrade to latest cluster-api-provider-gcp #8780
AGENT-862: Change day-2 monitor timeout back to 90 minutes #8783
AGENT-919: Authenticate day2 operations #8717
OCPBUGS-35959: azure: Fix Accelerated network enablement #8667
CORS-3209: Set UserTags on CAPG resources #8691
no-jira: bootstrap: add shellcheck directives to follow sourced files #8741
CORS-3580: Update GCP Disk Types #8773
no-jira: Azure: remove stale DNS migration images #8775
OCPBUGS-37217: CAPI GCP - retry SetIAMPolicy #8763
OCPBUGS-37427: bootstrap gather fails in vsphere, only ipv6 address used #8759
OCPBUGS-37356: vSphere validation fails if dc is in a folder #8758
OCPBUGS-35366: Update upi references to api-internal #8582
AGENT-862: Extend monitor-add-nodes to support multiple nodes #8507
AGENT-854: day2 add-nodes workflow validations #8740
AGENT-900: enable fips for add-nodes workflow #8760
CORS-3568: Support GCP pre-created Service Accounts for CAPG #8750
OCPBUGS-36302: pkg/asset/machines/azure: Don’t set disk encryption set to nil #8756
OCPBUGS-36780: ic: fix typo in warning message #8744
OCPBUGS-36913: openstack: Fix security group tagging #8757
OCPBUGS-36390: aws: do not require create permissions when BYO IAM role #8688
MULTIARCH-4814: ic: add release arch validation for multi-arch clusters #8761
AGENT-922: Remove misleading inClusterConfig warning #8715
OCPBUGS-36904: aws: bump CAPA for subnet tagging fix #8730
no-jira: Replace Equal with ErrorContains for image-based nmstatectl unit tests #8762
OCPBUGS-37226: Persist image-based config manifests from state instead of template #8752
MGMT-18364: Add image-based config ISO integration tests #8737
OCPBUGS-36917: openstack: Fix apiVIPs and ingressVIPs docs #8728
no-jira: docs/user/azure: fix byo vnet security groups #8485
CORS-3607: Azure CAPI Installs within Tech Preview featureset #8754
MULTIARCH-4777: gcp: support multi-arch nodes #8701
OCPBUGS-35406: Use service CIDRs to determine bootstrap kubelet IP family #8681
AGENT-910: node-joiner multi-arch support #8644
METAL-1039: Allow baremetal platform without MAPI #8521
CORS-3569: UDR for Capz #8731
MULTIARCH-4569: aws: support multi-arch nodes #8698
no-jira: Revert “Merge pull request #8714 from r4f4/bump-default-release-4.17” #8753
OCPBUGS-37104: openstack: Validate controlPlanePort has subnet #8739
OCPBUGS-37164: Handle empty config for image-based create image #8745
OCPBUGS-37107: Power VS: Disable SNAT when specifying imageContentSources #8697
STOR-1353: Attempt to cleanup GCP Filestore instances on destroy #8699
CORS-3073: azure: Allow for installs in existing vnets #8662
MGMT-17842: Add image-based installer create config ISO #8514
MGMT-17226: Add image-based installer create installation ISO #8679
OCPBUGS-35440: capi/aws: bump provider for ingress rules fix #8596
OCPBUGS-34638: destroy/gcp: set value for DiscardLocalSsd #8649
CORS-3302: port forward SSH to bootstrap host #8669
OCPBUGS-36713: CAPG use existing subnets and VPC #8722
MGMT-17226: Add imagebased installer skeleton #8709
CORS-3485: Azure: modify control plane outbound LB into submission as an API LB #8652
OCPBUGS-36378: capi: start controllers after WaitGroup is created #8693
CORS-2775: cmd: destroy: remove deprecated github.com/pkg/errors #8720
OCPBUGS-33973: Openstack UPI - Reintroduce unique resource names. #8477
MULTIARCH-4568: Print release image arch and default arch when the payload is multi #8515
CORS-3593: go.mod: bump k8s dependencies #8713
OCPBUGS-35262: Skip firewall rule creation if permission is missing #8706
OCPBUGS-36142: azure: Fix HyperVGeneration for gen2 images. #8666
OCPBUGS-35542: Cleanup capi artifacts #8599
CORS-3590: releaseimage: update default version #8714
AGENT-875: Authenticate agents #8395
OCPBUGS-34708: CORS-3582: capi: remove unused feature gates #8703
OCPBUGS-36660: CORS-3591: 4.17 default channel incorrectly points to stable-4.16 #8708
CORS-3296: CAPG - configure Internal LoadBalancer in the provider #8421
CORS-3547: Upgrade cluster-api-provider-gcp to v1.7 #8700
AGENT-876: Authenticate systemd services and curl requests #8393
SPLAT-1670: install pwsh from ci mirrored image #8643
OCPBUGS-36453: PowerVS: add .ssh directory #8686
OCPBUGS-35262: Fix shared vpc issues with capg installs #8583
AGENT-925: retrieve ignition endpoint to add a new node #8650
OCPBUGS-35752: capi/aws: disable EKS controller in CAPA #8628
OSASINFRA-3402: Use Gophercloud v2.0.0 #8685
AGENT-871: Authenticate wait for #8270
OCPBUGS-36318: update RHCOS 4.17 bootimage metadata to 417.94.202407010929-0 #8690
OCPBUGS-36316: Power VS: Allow pending network for internal publishing strategy #8677
OCPBUGS-36242: vSphere - If the folder pre-exists do not tag #8671
OSASINFRA-3510: Change ‘Generate’ to accept a context #8562
OCPBUGS-36284: Remove etcd store when provisioning fails #8673
OCPBUGS-36092: bump go-retryablehttp for CVE fix #8653
no-jira: Update documentation on libvirt installs for devs #8675
OCPBUGS-36176: PowerVS: Add ibmcloud plugins #8661
OCPBUGS-35382: CAPG marketplace image use for control plane nodes #8665
OCPBUGS-35852: capi: shutdown local controlplane as the last step #8639
OCPBUGS-35188: aws: remove terraform configs #8557
CORS-3435: Create user assigned identity for Azure VM’s #8645
MULTIARCH-4515: Add new files for agent-based installer (LPAR support for s390x) #8536
OCPBUGS-35420: OSASINFRA-1962: openstack: Validate additionalNetworkIDs and additionalSecurityGroupIDs #8592
CORS-3483: Update CAPI and CAPZ versions to set Machine DisableExtensionOperations #8627
OCPBUGS-34978: Power VS: Ensure that VPC has prerequesite resources for private #8532
OCPBUGS-35547: Configured logger for controller-runtime #8641
OSASINFRA-3465: openstack: Update Gophercloud to v2 #8493
CORS-3562: azure: Setting experimental MachinePool featuregate to false #8637
CORS-3434: azure: Skip image upload if env var is set #8283
OCPBUGS-14963: IBMCloud: Ignore failed VPC regions #8556
OCPBUGS-33735: Remove GCP bootstrap ssh firewall rule #8523
OCPBUGS-31275: gcp: Validate install-config examples #8198
no-jira: images: upi-installer image cleanup #8216
OCPBUGS-33702: baremetal: bootstrap: bind icc to localhost #8445
Revert #8221 “SPLAT-1553: Added multi vCenter support for capi installer.” #8630
OCPBUGS-35426: Update cluster-api-provider-openstack to v0.10.3 #8625
OCPBUGS-35523: remove terraform libvirt from the installer #8610
OCPBUGS-30025: fix: changed validation for olm and marketplace #8609
OCPBUGS-35430: Support CAPI provider custom timeouts #8568
OCPBUGS-35533: Fix ethertype for masters service router SG creation #8615
CORS-3265: capz: Add Accelerated Networking #8418
OCPBUGS-35494: capi/aws: allow 6443 for private cluster NLB #8620
OCPBUGS-35530: capi/aws: retry SSH ingress rule removal #8616
OCPBUGS-35400: For GCP, only configure kmsKeyServiceAccount if set #8597
SPLAT-1553: Added multi vCenter support for capi installer. #8221
OCPBUGS-34037: bump github.com/container/images for CVE fix #8564
OCPBUGS-35511: capi aws: append random string in caller ref #8593
SPLAT-1437: CAPI/AWS/BYOIP: supporting Public IPv4 Pool #8175
OCPBUGS-35467: capi/aws: disable CAPA’s TagUnmanagedNetworkResources feature gate #8602
OCPBUGS-33745: save etcd data to its own directory #8424
NO-JIRA: Remove dulek from openstack-{approvers,reviewers} #8413
OCPBUGS-34819: capi/aws: bump provider for fixes #8545
OCPBUGS-34618: vsphere - allow network selection on cluster name #8505
OCPBUGS-35037: aws: delete ignition bucket on bootstrap destroy #8584
OCPBUGS-35293: Add ELB V2 permission to set security groups on API server load balancer #8572
OCPBUGS-34712: add tested instance type for IBMCloud #8549
OCPBUGS-35315: capi: use polling instead of exponential backoff #8522
OCPBUGS-35197: capi/aws: do not set proxy for masters #8570
OCPBUGS-34005: openstack: Attach a bootstrap FIP to the cluster network port #8578
OCPBUGS-35309: Add S3 permission to allow attaching S3 bucket policy #8573
OCPBUGS-33661: capi/aws: rename preserveBootstrapIgnition #8460
OCPBUGS-35180: Prevent multiple invocations on CAPI #8565
OCPBUGS-33681: Cleanup bootstrap resources for capg install #8489
OCPBUGS-34713: AWS remove extra tags from awsmachines for security groups and subnets #8567
OCPBUGS-35041: capi: do not override KUBECONFIG #8542
OCPBUGS-34325: Updating ose-baremetal-installer-container image to be consistent with ART for 4.17 #8559
OCPBUGS-35182: write etcd and kube-apiserver logs #8441
OCPBUGS-34456: bump envtest binaries version #8471
no-jira: hack: bump golangci-lint version #8535
OCPBUGS-34416: Validate OnHostMaintenance and ConfidentialCompute #8541
OCPBUGS-35039: PowerVS: Destroy DHCP in ERROR state #8544
OCPBUGS-34082: baremetal: check if HardwareDetails is nil #8443
OCPBUGS-34368: OCPBUGS-34325: OCPBUGS-34311: OCPBUGS-34221: Bump golang 1.22 #8473
OCPBUGS-34295: wait for ip addresses to be present on machines #8450
OCPBUGS-35099: OCPBUGS-4466: Prevent cluster installation with mismatched worker assets and worker replicas #8370
OCPBUGS-35038: capi/aws: add BootstrapDestroyer guard #8543
OCPBUGS-34915: Add network tags to capg control plane machines #8531
OCPBUGS-35020: capi/aws: don’t use S3 stub for masters #8538
OCPBUGS-33662: aws: don’t always require s3:Delete* permissions #8410
OCPBUGS-34969: Power VS: Add ports needed for private clusters to security group #8530
OCPBUGS-34900: Increase timeout for bootstrap complete #8534
no-jira: Minor updates to fix linting issues. #8529
OCPBUGS-34869: PowerVS: fix AddIPToLoadBalancerPool #8508
MULTIARCH-4640: Add 4 new regions for PowerVS #8484
OCPBUGS-34493: baremetal: Don’t always enable provisioning-interface.service #8491
No-jira: Revert “Cleanup GCP Filestore instances on destroy” #8527
Full changelog

baremetal-operator

OCPBUGS-38404: [OCP] Ability to disable agent power off after deployment #368
OCPBUGS-38142: Merge upstream #369
OCPBUGS-36425: Sync jul 30 #367
NO-ISSUE: Bmo sync jul9 #364
OCPBUGS-35559: Bmo sync jul5 #362
OCPBUGS-29687: Merge upstream #360
Full changelog

baremetal-runtimecfg

OCPBUGS-38281: Handle errors in iptables healthcheck #327
OPNET-552: Move to stream9 for local builds #328
OCPBUGS-38288: Distinguish NotExist from nil for keepalived sentinel file errors. #326
OCPBUGS-32348: Change mechanism of debug flag #309
OCPBUGS-32141: Fix handling of ELB Node IP detection #316
OCPBUGS-34706: Add support for OVN HostCidrs annotation #317
Full changelog

cli, cli-artifacts, deployer, tools

OTA-1292: upgrade-status: handle the OS image annotation better #1848
OTA-1292: upgrade-status: handle unschedulable nodes better #1849
OTA-1292: upgrade-status: handle expected MCD state better #1847
NO-JIRA: upgrade status: improve tests for missing annotations #1846
OTA-1212: Hide or condense control plane sections once successfully updated #1844
OCPBUGS-32053: Add examples for some oc adm policy commands #1845
OTA-1292: upgrade-status: bubble up the reason for unavailable nodes #1838
WRKLDS-1318: flags for single node interface #1841
OTA-1309: upgrade-status: test a compact cluster and a single-node cluster #1829
WRKLDS-1429: Adds a guardrail for node-image commands which is supported only for Openshift version 4.17+ #1837
OTA-1153: upgrade-status: communicate control plane completion clearly #1831
NO-JIRA: upgrade-status: fix HasOSImage function #1834
WRKLDS-1316: Retry and do not fail when logs cannot be updated #1836
NO-JIRA: upgrade-status: fix a typo in README #1830
WRKLDS-1316: Remove clusterversions from certificates api group #1835
AGENT-854: add the required role to support platform type validation #1832
WRKLDS-1316: oc adm node-image monitor command #1823
OTA-1291: upgrade status: removes custom nodes from the worker pool (2) #1825
NO-JIRA: Minor wording tweaks for CLI help #1826
OCPBUGS-37345: Revert “OCPBUGS-35994: pkg/cli/admin/upgrade/rollback: Drop this command” #1827
OTA-1291: upgrade status: removes custom nodes from the worker pool #1822
: MULTIARCH-4568: Inject ReleaseArch into openshift-install #1792
OCPBUGS-35994: pkg/cli/admin/upgrade/rollback: Drop this command #1806
no-jira: Extend the kube version check for images/tools/Dockerfile #1813
OCPBUGS-36525: Bump k8s to 1.30.2 #1812
WRKLDS-1310: pkg/cli/admin/mustgather: GA since and since-time flags #1811
OCPBUGS-36183: pkg/cli/admin/prune/renderedmachineconfigs: ‘Error dry-run deleting’ #1807
OCPBUGS-33897: upgrade status: control plane completion estimate #1742
OCPBUGS-31848: don’t manually delete must-gather’s cluster role binding #1790
OCPBUGS-34877: Ignore pruning when deployment points to replicationcontroller #1797
Full changelog

cloud-credential-operator

OCPBUGS-37782: update google.golang.org/grpc v1.65.0 #746
SPLAT-1718: Remove alibaba #737
CCO-572: STS OLM for GCP (WIF) #708
CCO-580: Upgrade to Kubernetes 1.30 #725
OCPBUGS-37334: SNYK ignore go-client misreporting #734
OCPBUGS-35016: Update to azidentity v1.7.0 #716
OCPBUGS-34347: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.17 #719
OCPBUGS-36032: IBM/go-sdk-core update to v5.6.3 #715
OCPBUGS-36140: GCP passthrough permissions check to ignore problematic permissions. #712
NO-JIRA: Fix Makefile for developer install #711
Full changelog

cloud-network-config-controller

SDN-4773: Add support for Azure Managed Service Identity authentication #151
NO-JIRA:Update linter file #146
SDN-4924: Rebase 1.30 #150
OCPBUGS-34302: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.17 #148
Full changelog

cluster-authentication-operator

OCPBUGS-35828: controller: set ownership annotation for webhook-auth secret #678
NO-JIRA: endpoint test: use httpbin #680
NO-JIRA: Several fixes for Keycloack IDP test #679
NO-JIRA: OWNERS: add ibihim, liouk, rm old #677
Full changelog

cluster-autoscaler

OCPBUGS-38277: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.18 #313
OCPBUGS-37498: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.17 #311
PODAUTO-202: Update VPA ocp/builder Dockerfile images to openshift/release images #310
PODAUTO-199: Upstream rebase to VPA 1.1.2 #309
OCPBUGS-34242: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.17 #304
NO-JIRA: Update OWNERS #307
OCPCLOUD-2616: rebase on upstream 1.30.1 release #306
Full changelog

cluster-autoscaler-operator

NO-JIRA: Update OWNERS #329
OCPBUGS-35952: add aws zone-id to ignore labels #328
OCPCLOUD-2617: Bump k8s to 1.30 #327
OCPBUGS-34151: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.17 #323
Full changelog

cluster-baremetal-operator

OCPBUGS-36357: Revert “reconcile on clusteroperator changes” #435
OCPBUGS-29660: Ignore provisioning ip config if disabled #429
METAL-1040: Allow CBO to run without MAPI #423
METAL-503: Remove ironic-inspector #430
OCPBUGS-29687: Move Secrets from environment variables to VolumeMounts in metal3-httpd container #408
AUTH-482: set required-scc for openshift workloads #407
OCPBUGS-29687: Move pull secret from env var to VolumeMount in metal3-image-customization container #428
OCPBUGS-35211: Add capability to metal3-ramdisk-logs container #424
OCPBUGS-34649: provisioning: add ownership for tls secret #422
Full changelog

cluster-capi-controllers

NO-JIRA: Update OWNERS #211
Full changelog

cluster-capi-operator

OCPCLOUD-2584: Enable azure infrastructure provider reconcile #115
OCPCLOUD-2207: Generate VSphereCluster #185
OCPBUGS-37718: fix: align openstack e2e branch #191
OCPBUGS-36296: fix: sort CredentialsRequest manifests after namespace #183
OCPCLOUD-2638: Add stricter linting configuration #186
OCPCLOUD-2204, OCPCLOUD-2205, OCPCLOUD-2206, OCPCLOUD-2207: Add InfraCluster controller + AWSCluster implementation #169
OCPCLOUD-2584: Implement compression of components in configMap #170
NO-JIRA: Update OWNERS #179
OCPCLOUD-2619: Bump CAPI 1.7 and k8s 1.29 #176
OCPBUGS-34085: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.17 #174
Full changelog

cluster-cloud-controller-manager-operator

NO-JIRA: Update envtest configuration to new index format #361
SPLAT-1720: Remove Alibaba #324
OCPBUGS-35798: PowerVS: Remove bind address #355
NO-JIRA: Update OWNERS #357
OCPCLOUD-2609: rebase for kubernetes 1.30 #356
NO-JIRA: openstack: Remove dulek from OWNERS #345
OCPBUGS-34144: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.17 #346
OCPBUGS-34938: Refactor resourceapply tests #352
Full changelog

cluster-config-api

OCPNODE-2387: SCC: add UserNamespaceLevel field #1939
featuregate analyzer: use 1 week lookback if possible #2009
clean up openshift-sdn references in the API #1981
OCPCLOUD-2561: Remove CloudProviderExternal feature gates #1780
featuregate analyzer: fix platform name for metal #2003
Update envtest publishing to create index file #2001
OCPBUGS-36479: remove duplicate featuregate ‘ExternalRouteCertificate’ #1959
METAL-1114: featuregates: add metal jobs for test analyzer #1998
featuregate analyzer: use correct platform name #2000
MULTIARCH-4556: Introduce ImageStreamImportMode field in the image config #1928
OCPBUGS-38414: Revert #1988 “Graduate UserDefinedNetworks to GA” #1996
extend the example integration test with set of strings attribute #1597
Add the field “CapacityReservationID” to “AwsMachineProviderConfig” #1978
SDN-4919, SDN-5135: Graduate UserDefinedNetworks to GA #1988
CFE-921: Enable GCPLabelsTags featureGate by default for GA #1971
MULTIARCH-4776: MULTIARCH-4770: installer: promote MultiArchInstall FGs #1991
Power VS: Move Power VS to CAPI by default #1979
CORS-3617: Promote Azure CAPI as the default Install method #1987
STOR-1422: Add field for enabling EFS volume metrics #1853
SDN-5086: Add API and feature gates for OVN-K BGP support #1944
NE-1794: Promote eipAllocations API in GA #1989
SDN-5186: Add OVNObservability feature gate as Tech Preview. #1986
AUTH-527: security/v1 - add constant for enforcing psa annotation #1980
IR-471: Removing featuregate for chunkSizeMiB config #1948
Run update-payload-crds after update-codegen-crds #1974
CORS-3594: Setting CAPG as the default infra provider #1958
NE-1774: Promote IngressControllerLBSubnetsAWS to GA #1966
OCPBUGS-35906: a rule to check if the featureSet is one of the known set of features #1952
featuregate promotion: use latest release instead of hard coding #1984
Add MCP and Config Version columns to MCN output #1972
MCO-1065: MCO-1171: Promoting ManagedBootImages and NodeDisruptionPolicy to default featureset #1975
MULTIARCH-4770: features: move MultiArchInstall[AWS|GCP] to TechPreview #1973
Nutanix mapi: gpus and dataDisks support #1935
CONSOLE-4161: Add support for lightspeed button integration #1956
NE-1516: Add configuration for AWS Elastic IPs (EIPs) via Ingress Controller CR. #1826
Added Feature Gate for Bootc Update Path #1969
CORS-3607: Add Azure CAPI installer to tech preview feature set #1967
OCPNODE-2436: SigstoreImageVerification featuregate marker for the ClusterImagePolicy and ImagePolicy #1964
Feature gate sippy queries to use variant registry #1909
NE-1530: Fix empty subnet list CEL validation #1961
OCPBUGS-36523: Rename Dockerfile #1949
NE-1530: IngressController LB Subnet Selection in AWS #1841
MCO-1215: add ManagedBootImagesAWS to Feature Gate #1945
OCPBUGS-36469: Update placementGroupPartition to pointer #1953
OCPNODE-2358: Update (cluster)imagepolicy doc no restriction on release repo scopes #1927
OCPBUGS-36213: Remove the conversion webhook reference from the ConsolePlugin CRD spec #1946
features: add multi-arch feature gate per platform #1947
MON-3546: Add ClusterMonitoringCRD feature gate #1930
SDN-4934: Add NetworkSegmentation Feature Gate #1941
OCPBUGS-34906: Fix IngressController missing listTypes #1917
METAL-1038 Remove baremetal dependency on MachineAPI capability #1916
NO-JIRA: remove beta enabled features from feature gates #1934
OCPBUGS-34907: prevent removing featureSet entirely #1932
CFE-1063: Add PlacementGroupPartition in AWSMachineProviderConfig #1897
Update published Kubebuilder tools #1924
OCPBUGS-34974: IBMCloud: Add IBM Cloud Services #1919
CNV-41151: ipam, virt: add persistent ips feature gate #1913
Full changelog

cluster-config-operator

CFE-921: Update openshift/api package to latest version #423
OCPBUGS-34178: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.17 #419
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-38641: Add 1 minute stabilisation for clusteroperators after rollout #320
OCPBUGS-36469: Bump openshift/api #315
CFE-1087: API Bump for capacity Reservation #313
NO-JIRA: Update OWNERS #311
NO-JIRA: CPMS Cluster Operator should set related objects #310
OCPBUGS-35416: Wait for ControlPlaneMachineSet to be created when waiting for it to be updated #305
OCPBUGS-35069: Improved debugging of API listing errors #297
OCPBUGS-20061: Add unreadyNodeGracePeriod for allowing brief node hiccups #294
Full changelog

cluster-csi-snapshot-controller-operator

CNV-43972: HCP custom tolerations integration #214
STOR-1593: Update api extensions to upstream #215
STOR-1596: Bump all deps for 4.17 #213
OCPBUGS-36528: Rename Dockerfile #212
Full changelog

cluster-dns-operator

OCPBUGS-38102: Bump to k8s.io/* v0.30.3 and controller-runtime v0.18.4 #420
OCPBUGS-33750: Bump version of DNSNameResolver controller #415
OCPBUGS-34229: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.17 #414
Full changelog

cluster-etcd-operator

Revert “OCPBUGS-38573: use pooled client for etcd single member health checks” #1322
OCPBUGS-38573: use pooled client for etcd single member health checks #1319
OCPBUGS-38341: prefer env var over hardcoding ciphers #1314
NO-JIRA: degrade targetconfigcontroller on quorum loss #1309
OCPBUGS-36462: ensure ordering in member health checks #1308
NO-JIRA: only update envvar listeners on real changes #1300
ETCD-636: expose PruneOpts #1297
ETCD-493: Reflect etcd grafana dashboard mixin from upstream #1291
ETCD-604: Prune revisioned resources #1292
OCPBUGS-36621: Force sync on missing etcd-all-bundles configmap #1296
Revert “OCPBUGS-36621: add etcd-all-bundles to cvo create-only” #1295
ETCD-574: Update TLS artifact descriptions according to registry requ… #1294
OCPBUGS-36621: add etcd-all-bundles to cvo create-only #1293
NO-JIRA: only read signer/bundles on forced leaf generation #1288
OCPBUGS-36301: parallelize member health checks #1286
OCPBUGS-36407: Rename Dockerfile.rhel7 to Dockerfile.ocp #1289
NO-JIRA: cert rotation same assertions #1285
NO-JIRA: fix false positive bootstrap in cert signer controller #1283
NO-JIRA: update library-go #1281
ETCD-607: gate leaf cert generation (with bundle revision) #1275
NO-JIRA: Update etcd-tls-assets.md #1195
ETCD-606: Batch bundle revision rollout #1271
NO-JIRA: update library go #1274
ETCD-620: Update api vendor libraries to get GA’ed tuning profiles #1264
Full changelog

cluster-image-registry-operator

MULTIARCH-4971: Sync ImageStreamImportMode setting in the image config status #1090
OCPBUGS-38842: pkg/resource: invoke update-ca-trust extract with –output #1096
OCPBUGS-37543: Revert “Merge pull request #1087 from rajdeepc2792/rajdeepc2792/ARO-9391” #1093
ARO-9391, OCPBUGS-37543: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1087
OCPBUGS-38287: bump gophercloud to latest v2 #1086
IR-467: Enable MSI override for ARO HCP #1082
SPLAT-1721: Remove alibaba #1077
IR-471: Removing featuregate for chunkSizeMiB config #1073
Revert “IR-467: Enable Azure MSI authentication” #1079
IR-467: Enable Azure MSI authentication #1020
OCPBUGS-37207: Power VS: Check endpoints against lower case strings #1076
IR-471: Adding additional validation #1074
OCPBUGS-36038: go.*,vendor: bump go-retryablehttp #1063
IR-477: pkg/operator: deactivate azure path fix job #1061
IR-471: Exposing chunksize variable to utilize docker registry config #1060
OCPBUGS-34107: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.17 #1045
OCPBUGS-34399: Update rbac for featuregate #1056
Full changelog

cluster-ingress-operator

OCPBUGS-38217: Clear LB Status Parameters on LB Type Change #1126
OCPBUGS-34418: Allow router pods to use the “restricted” SCC #1064
OCPBUGS-38441: Resolve DNS Resolution CI Flakes in Subnets and EIP E2E #1127
OCPBUGS-38079: Bump controller-runtime to v0.18.4 #1122
NE-1798: API bump for promotion of eipAllocation from feature gates to GA. #1118
NE-1688: Enable Azure MSI authentication for ARO HCP #1119
NE-1674: Add LB EIP Allocation for AWS #1109
NE-1531: Fix Initialization of NLB Status Parameters #1114
NE-1531: AWS Subnet Selection #1046
NE-1273: Add a watch to the ingress operator so it will recreate the gwapi crds #1106
OCPBUGS-37627: Fix getRouteHost error handling #1110
NE-1208: Gateway API E2E Testing #1023
OCPBUGS-31664: Fix SyncLoadBalancerFailed status message of IngressController #1102
OCPBUGS-36465: Delete and recreate canary route to clear spec.host #1095
OCPBUGS-34413: Refine logging for accurate infra CR status updates #1103
OCPBUGS-35342: Add e2e test for connect timeout #1084
NO-JIRA: Add grzpiotrowski to OWNERS #1090
NO-JIRA: addowner-Thealisyed #1091
OCPBUGS-35356: Retry IngressController updates in router status E2E #1085
OCPBUGS-9037: Change Canary to use passthrough route #978
OCPBUGS-35368: Add Regexp Anchor to TestAll #1087
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-38335: Bump library-go #1721
NO-JIRA: nodekubeconfigcontroller: set ownership component for node kubeconfigs #1704
AUTH-521: add disabled syncer as reason to CFE for PSA #1686
NO-JIRA: update library-go #1703
OCPEDGE-1102: Revert high cpu usage alert description #1680
OCPEDGE-902: add SNO control plane high cpu usage alert #1676
OCPBUGS-34782: manifests: add ownership annotation for kubelet-bootstrap-kubeconfig #1694
OCPBUGS-34544: Disable PersistentVolumeLabel admission plugin #1693
OCPBUGS-34800: Update APIRemovedInNextReleaseInUse for kube 1.30 / ocp 4.17 #1697
Full changelog

cluster-kube-cluster-api-operator

UPSTREAM: <carry>: OCPBUGS-30487: Bump google.golang.org/protobuf #39
NO-JIRA: Update OWNERS #40
OCPBUGS-34084: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.17 #38
Full changelog

cluster-kube-controller-manager-operator

NO-JIRA: update library-go #814
OCPBUGS-34859: manifests: set owning-component for csr-signer-signer #812
OCPBUGS-34281: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.17 #813
Full changelog

cluster-kube-scheduler-operator

no-jira: Rename Dockerfile #546
NO-JIRA: update library-go #544
OCPBUGS-34367: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.17 #543
Full changelog

cluster-kube-storage-version-migrator-operator

NO-JIRA: bump(*) #113
Full changelog

cluster-machine-approver

OCPBUGS-36871: Client internal DNS checks should be case insensitive #237
NO-JIRA: Update OWNERS #236
Full changelog

cluster-monitoring-operator

OCPBUGS-38289: fix(prometheus): avoid passing the cluster-wide proxy config to a remote endpoint when noProxy will prevent the proxuying anyway #2441
MON-3982: [bot] Synchronize versions of the downstream components #2440
MON-3982: Upgrade to Prometheus operator v0.76.0 #2438
MON-3967, MON-3981: [bot] Synchronize versions of the downstream components #2437
MON-3962: set proxy_from_environment to true #2431
OCPBUGS-33863: use UserWorkloadInvalidConfiguration reason when UWM config only is invalid #2436
HOSTEDCP-1044: Add nodepools telemetry metrics for HyperShift #2265
NO-JIRA: [bot] Synchronize versions of the downstream components #2435
MON-3972: [bot] Synchronize versions of the downstream components #2434
OCPBUGS-17506: Make error messages clearer on poll timeouts #2417
MON-3964: set scrape timestamp tolerance for user workload monitoring #2429
MON-3961: inject proxy env variables in Alertmanager #2424
MON-3949: [bot] Synchronize versions of the downstream components #2419
MON-3900: follow-up: clean up operator logic and some tests now that metrics-server is the default Metrics API backend #2425
OCPBUGS-37686: fix documentation typos #2427
NO-JIRA: fix: fix a small typo #2426
MON-3921: Revert “Revert “Merge pull request #2392 from machine424/f-… #2403
MON-3959: Skip TestTLSSecurityProfileConfiguration as disruptive #2423
MON-3900: Remove prometheus-adapter code #2409
MON-3947: [bot] Synchronize versions of the downstream components #2418
MON-3947: [bot] Synchronize versions of the downstream components #2414
MON-3947: Bump prometheus-operator to 0.75.1 #2416
MON-2065: jsonnet: exclude kubernetes-storage rules #2377
OCPBUGS-36495: Add deprecated config runbook #2410
OCPBUGS-31250: Exclude windows nodes from kubelet servicemonitor #2368
OCPBUGS-36406: add runbook_url annotations #2401
MON-3914: add a regression test for gogc based on the go_gc_gogc_percent metric #2393
MON-3914: [bot] Synchronize versions of the downstream components #2394
OCPBUGS-36299: Revert #2392 “MON-3800: jsonnet: update prometheus dep to fetch the PrometheusKuber…” #2398
MON-3800: jsonnet: update prometheus dep to fetch the PrometheusKuber… #2392
OCPBUGS-35480: Add deprecation for prometheus adapter #2381
MON-3915: chore: bump Go dependencies #2387
MON-3914: adjust Prometheus GOGC based on infra topology #2390
OCPBUGS-32696: opt-out of multi-cluster Prometheus dashboard #2351
OCPBUGS-35397: attach runbook to the PrometheusDuplicateTimestamps alert #2365
MON-3905: [bot] Synchronize versions of the downstream components #2382
MON-3894: revert(monitoring-plugin): undo nginx caching tweaks as the issue was… #2380
MON-3795, SDN-3817: Expose OVNKubernetes:AdminNetworkPolicy Metrics via telemetry #2297
MON-3897: [bot] Synchronize versions of the downstream components #2378
OBSDOCS-883: change docs to correct retention time uwm prometheus #2277
Full changelog

cluster-network-operator

CONSOLE-3952: Deploy networking-console-plugin by CNO #2322
AUTH-482: set required-scc for openshift workloads #2282
OCPBUGS-38249: Verify that the codegen changes were commited #2373
NO-JIRA: iptables-alerter streamlining #2404
CONSOLE-3952: Add networking-console-plugin image to release payload #2332
OCPBUGS-38326: OVN-K, UDN CRD: Add missing permissions to control-plane #2468
OCPBUGS-38176: multus, Add openshift-cnv to globalNamespace #2466
SDN-4919: Change the masquerade subnet default value for new clusters #2460
SDN-5072: Deploy FRR-K8s #2450
SDN-5144: Add UserDefinedNetwork CRD and RBAC #2464
SDN-4773: Add Azure MSI Env Var for ARO HCP #2465
NO-JIRA: more openshift-sdn cleanup #2455
SDN-5070: Allow day 2 customization of masquerade subnet #2421
OCPBUGS-37786: Add proxy env vars to onvkube-node #2453
OCPBUGS-37713: Handle random crictl errors in iptables-alerter #2451
CNV-43973: HCP custom tolerations integration #2441
SDN-4919: OVN-Kubernetes UDN: EndpointSlice mirror controller RBAC permissions #2448
SDN-4934: Enable TechPreview FeatureGate for NetworkSegmentation #2433
OCPBUGS-33758: Fix IC distributed control plane alerts #2406
SDN-5029: ipam, virt: enable the persistent ips feature #2431
SDN-4916: Bump to k8s v1.30 latest #2429
OCPBUGS-30950: Set mount propagation to HostToContainer for /var/lib/kubelet #2368
SDN-4934: Network Segmentation Feature Gate Vendoring from API #2428
OCPBUGS-23758: Set global IP forwarding sysctl parameters while starting ovnkube-node #2385
OCPBUGS-29648: update whereabouts crd #2414
OCPBUGS-31878: Propogate hypershift control plane priority class override to multus and preserve container resource requests #2335
OCPBUGS-35316: Create the configmap mtu if not found #2410
OCPBUGS-34313: Updating cluster-network-operator-container image to be consistent with ART for 4.17 #2381
OCPBUGS-30948: Use applyconfigurations for updating network.oprerator status #2333
SDN-5029: linter: removed deprecated linters #2408
OCPBUGS-23000: Adds cluster-autoscaler annotation to prevent eviction #2369
OCPBUGS-33497: Limit iptables-alerter’s cpu #2401
SDN-4896: Drop openshift-sdn support #2384
NP-976, OCPBUGS-34658: Live migration: add metrics to observe CNI live migration #2388
OCPBUGS-34858, OCPBUGS-34916: Validate live migration before setting the progressing condition #2399
OCPBUGS-34524: Fix DNSResolver feature gate enablement #2387
Full changelog

cluster-node-tuning-operator

OCPBUGS-38795: Fix defer status during recommended profile change (#1142) #1142
NO-JIRA:E2E: Remove checking of reserved cpus in irqbalance file (#1140) #1140
Add support for setting operand verbosity (#1114) #1114
Allow specifying $TAG separately from the full image path (#1139) #1139
CNF-13014: Add cross compiling support to Makefile (#1135) #1135
PSAP-1428: Read-only filesystem for the operator (#1136) #1136
Remove vestiges of annotation ignore-cgroups-version from tests (#1059) #1059
OCPBUGS-28647: tuned: distinguish deferred updates (#1129) #1129
OCPBUGS-34917: Operator: do not use /tmp (#1132) #1132
CNF-13391: ppc: adjust for Hypershift (#1124) #1124
OCPBUGS-37865: E2E: Verify ovs threadpool inherits parent cpu affinity (#1123) #1123
e2e:document: how to run locally on HCP platform (#1122) #1122
NO-JIRA:e2e:hypershift: remove/rename deprecated env variables (#1121) #1121
controller: predicate for containerruntimeconfig (#1108) #1108
CNF-12711: hypershift: enable feature gate support (#1115) #1115
NO-JIRA: Project cleanups (#1120) #1120
CNF-12680: CNF-13488: Add performance profile status for hypershift support (#1089) #1089
OCPBUGS-28647: deferred updates: cleanups (#1119) #1119
Fix the destination of asset’s copy (#1112) #1112
OCPBUGS-28647: tuned: operand: add support for deferred updates (#1019) #1019
makefile: ensure bindata (#1116) #1116
e2e: performance: skip test on env with insufficient cpus (#1111) #1111
e2e: performance: verify tuned one-shot service vs kubelet (#1106) #1106
CNF-7123: Enable and adjust 1_performance suite on Hypershift (#1084) #1084
NO-JIRA: Rename and reorganize hypershift labels (#1090) #1090
E2E: Add ginkgo labels to respective test suites (#1097) #1097
NO-JIRA: hypershift: implements missing client calls needed for e2e tests (#1107) #1107
CNF-13530: hypershift: support containerruntimeconfig (#1100) #1100
CNF-13394: Changed node inspector to have lazy initialization (#1093) #1093
NO-JIRA: hypershift:unitests: adjust controller unit-tests (#1105) #1105
Fix requested profile doesn’t exist (#1104) #1104
NO-JIRA:pao:hypershift: fix client implementation (#1094) #1094
hypershift: check updatingConfig condition to be false instead of missing (#1096) #1096
e2e:run-test.sh: match ginkgo CLI to ginkgo package (#1092) #1092
e2e:performance: decode to valid kubeletconfig object (#1091) #1091
OCPBUGS-34972: perfprof: bump verbosiness of logs (#1075) #1075
e2e:label: platform labels (#1076) #1076
NO-JIRA: remove 4.13->4.14 compatibility code (#1079) #1079
Dockerfile:bump go-builder to 1.22 (#1078) #1078
CNF-11559: [Part ³⁄₃] Hypershift PAO adoption (#1057) #1057
e2e: Added mixed cpus negative tests (#1026) #1026
OCPBUGS-28647: tuned: operand: deferred updates prepare: cleanups from #1019 (#1073) #1073
Add tier0 and tier1 tags to non reboot test cases (#1064) #1064
Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.17 (#1068) #1068
CNF-11815: e2e: Added node inspector for inspecting nodes configuration (#1008) #1008
Full changelog

cluster-olm-operator

OCPBUGS-37544: add version flag #62
OPRUN-3403: Remove Rukpak references from code #63
OPRUN-3405: Stop building rukpak #60
OPRUN-3437: update configmap permissions #59
OCPBUGS-36686: Re-enable cluster-olm-operator #58
OCPBUGS-34126: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.17 #55
OCPBUGS-36684: Disable cluster-olm-operator #56
NO-ISSUE: Update owners #57
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-30492: bump google.golang.org/protobuf #583
OCPBUGS-34349: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #580
Full changelog

cluster-openshift-controller-manager-operator

no-jira: OWNERS: remove former employees #354
OCPBUGS-35801: nil pointer reference in ocm-operator #355
WRKLDS-1327: Replace wildcards by explicit list of verbs #353
Full changelog

cluster-samples-operator

OCPBUGS-38926: Update Go version, API version and vendored libs to the same versions as in the openshift/api. #561
OCPBUGS-38273: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.18 #559
NO-ISSUE: Only pick up the changes from the supported imagestreams and templates in library-sync.sh. #553
KUBESAW-162: add mfrancisc and metlos as owners #549
Full changelog

cluster-storage-operator

OCPBUGS-38183: Use restricted-v2 SCC and remove runAsUser in Hypershift #497
STOR-1422: Bump(openshift/api): to get EFS volume metrics #496
CFE-879: Add TagUser role to creadentials request of GCP PD operator #490
OCPBUGS-37488: Pass TOOLS_IMAGE env var to AWS EBS CSI Driver operator #494
CNV-44992: HCP custom tolerations integration #493
OCPBUGS-37633: Add permissions for vsphere_problem_detector to access clustercsidrivers #495
STOR-1767: Disable vsphere-problem-detector alerts if ManagementState==Removed #487
STOR-1596: Bump all deps for 4.17 #486
MON-2065: manifests: add k8s storage rules #477
OCPBUGS-36169: deactivate MultipleDefaultStorageClasses alert immediately after being fixed #483
STOR-1767: add env var OPERATOR_NAME to vsphere csi operator deployment #485
STOR-1593: add patch role to PVs for provisioner #482
OCPBUGS-34590: revert vsphere problem detector controller name change #479
OCPBUGS-34291: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.17 #476
Full changelog

cluster-update-keys

Revert “OCPBUGS-37770: Revert #58 “OTA-1304: manifests.rhel/0000_90_openshift-cluster-image-policy: New manifest”” #60
OCPBUGS-37770: Revert #58 “OTA-1304: manifests.rhel/0000_90_openshift-cluster-image-policy: New manifest” #59
OTA-1304: manifests.rhel/0000_90_openshift-cluster-image-policy: New manifest #58
OCPBUGS-35528: keys: Update Red Hat keys to use SHA256 signatures #57
Full changelog

cluster-version-operator

OCPBUGS-37770: cmd/render: Add –feature-gate-manifest-path option #1078
OCPBUGS-37770: pkg/payload/render: Include release image (Cluster)ImagePolicy #1076
OCPBUGS-37345: Revert “OCPBUGS-35994: Revert “OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream”” #1072
no-jira: TestCVO: set known caps from configv1.KnownClusterVersionCapabilities #1075
no-jira: TestSetCapabilities: use KnownClusterVersionCapabilities for known keys instead of picking DefaultCapabilitySet #1073
OCPBUGS-32678: Fix a panic caused by a data race #1070
OCPBUGS-33983: vendor: Update openshift/api to pick up zz_generated.crd-manifests #1045
OCPBUGS-35994: Revert “OCPBUGS-24535: pkg/payload/precondition/clusterversion/rollback: Allow previous version within z-stream” #1061
Revert “METAL-1053, OCPBUGS-33983: Remove baremetal dependency on MachineAPI capability” #1063
METAL-1053: Remove baremetal dependency on MachineAPI capability #1051
NO-JIRA: Update OWNERS #1058
OCPBUGS-35464: Updating cluster-version-operator-container image to be consistent with ART for 4.17 #1056
Revert “OCPBUGS-34287: Updating cluster-version-operator-container image to be consistent with ART for 4.17” #1055
NO-JIRA: typo change previousily to previously #1054
OCPBUGS-34287: Updating cluster-version-operator-container image to be consistent with ART for 4.17 #1047
OCPBUGS-35236: Revert: Add support for Custom Certificate Authorities for custom signature stores” #1052
Full changelog

console

OCPBUGS-38789: Networking section depends on networking-console-plugin #13675
CONSOLE-4124: replace deprecated components in ResourceLog #14133
CONSOLE-4178: i18n upload/download routine task - sprint 257 #14118
CONSOLE-4124: replace deprecated components in ResourceDropdown #14128
CONSOLE-4118: Convert DropdownDeprecated to use new Dropdown #14006
CONSOLE-4124: replace deprecated components in SilenceForm #14138
OCPBUGS-37448: fix namespace for networkpolicy #14165
OCPBUGS-35238: Storage -> StorageClasses -> Create StorageClass -> Provisioner -> kubernetes.io/gce-pd: i18n misses #14100
OCPBUGS-38226: Modifying helm e2e test to fix CI issue #14125
CONSOLE-4118: Switch deprecated select for utilization card filter #14121
OCPBUGS-38051: improve Lightspeed popup contents and navigation #14110
OCPBUGS-36967: RWOP access mode is not integrated in the UI [cephfs.csi.ceph.com & rbd.csi.ceph.com] #14099
OCPBUGS-34956: double k-native exec timeout #14043
OCPBUGS-38557: Add support for GCP Workload Identity / Federated identity operator installs #14086
OCPBUGS-38111: do not directly mutate links in useMemo #14116
NO-JIRA: Update Console plugin SDK package changelogs post publish #14135
CNV-39065: Display memory overcommit #14122
NO-JIRA: Fix typos in Console dynamic plugin SDK README #14136
OCPBUGS-37988: fix bug where cluster version text appears black in da… #14120
OCPBUGS-32773: Values entered into the Instantiate Template form are automatically cleared #14026
OCPBUGS-38228: correct casing in “Lightspeed” #14132
ODC-7625: Red Hat Camel K Operator installation via cli #14010
OCPBUGS-34365: Unrelated readme opened when opening CodeReady workspaces from Quarkus using s2i quickstart #14103
OCPBUGS-37453: A value submitted in From view is wrapped with single quotation after switching to Yaml view. #14084
OCPBUGS-38236: Add telemetry to Lightspeed console capability #14123
CONSOLE-4188: Add the signals correlation to the app launcher #14097
NO-JIRA: Console PR Template: Fix position of colon #14047
MULTIARCH-4148: Add the CPU architecture column to the NodeList and filter properties for all cpu archs #13718
CONSOLE-4187: Dev console: Use Metrics page from monitoring-plugin #14105
CONSOLE-4185: Export CSV option for Virtualized Table #14050
ODC-7631: Add Shipwright Build create form #14106
NO-JIRA: Disable “Helm release status verification: HR-01-TC04” test due to CI outage #14124
OCPBUGS-38036: Properly chain trap commands #14111
CONSOLE-4104: Implement basic OLM V1 catalog view with filtering #14056
CONSOLE-3970: add Lightspeed button #14030
OCPBUGS-37426: No documentation covering how to translate plugin messages #14081
NO-JIRA: Update Console plugin SDK package changelogs post publish #14104
ODC-7632: Combine Shipwright model pages #14029
ODC-7626: Web Terminal Operator installation via cli #14009
ODC-7648: Open Lightspeed Chat Interface by clicking a button on the YAML Editor component #14087
OCPBUGS-30889: No access to list pipelines.tekton.dev prevents from using Delete application form #13942
OCPBUGS-36872: Add base path to locale init #14046
OCPBUGS-37802: Build option is selected as Shipwright on edit if created the deployment using BuildConfig #14101
OCPBUGS-36619: Switch to use annotations as labels from PipelineRuns created through Pipelines as Code is deprecated #14034
ODC-7634: Test all current workflows, write Integration tests #14075
OCPBUGS-36816: Include PatternFly-4 chart styles so they are available for dynamic plugins that still use PF4 react-charts #14080
CNV-41506, OCPBUGS-37403: Localnet NAD incorrectly displayed #13948
ODC-7640: Remove Alerting Details Page from Console #14072
CONSOLE-4098: Show deprecated operators in OperatorHub (Post-installation screens) #14048
OCPBUGS-35301: add missing translation in TriggerBindingSection #14062
OCPBUGS-23332: Fix utilization card limits/total display #14053
CNV-35124, OCPBUGS-37401: OVN Kubernetes multi-homing #14044
ODC-7621, ODC-7633: Add Shipwright as Build Options in Add & Edit Forms #14016
CONSOLE-4171: i18n upload/download routine task - sprint 256 #14054
Add dynamic plugin SDK package changelogs & update plugin docs #14012
OCPBUGS-37054: hide ‘View all steps in documentation’ for ROSA and OSD #14061
OCPBUGS-33801: Manually create an API token for a ServiceAccount #14038
ODC-7639: Remove alerts list from dev console codebase #14014
ODC-7624, ODC-7628: shipwright test improvement #13990
OCPBUGS-34387: maintain session across tabs #14041
OCPBUGS-34901: ensure correct API version for OperandDetails #14036
OCPBUGS-36801: disable serverless tests till further investigation #14042
ODC-7620: Modal submit button: show loading state #14007
OCPBUGS-35940: Create RoleBinding will trigger Admission Webhook Warning #14021
OCPBUGS-34956: increase namespace deletion timeout for k-native e2e tests #14039
CONSOLE-4060: Show deprecated operators in OperatorHub (Pre-installation screens) #13961
OCPBUGS-34956: disable failing knative e2e test #14019
OCPBUGS-35926: Add debounce to PAC auto selecton in git import flow #14011
OCPBUGS-30841: Redirects to new PipelineRun logs URL from old PipelineRun logs URL #14032
OCPBUGS-36260: Tooltip on Pipeline when expression is not shows #14023
OCPBUGS-31047: Reordered dependancy warning to fix the lint error #13993
ODC-7612: Serverless Operator installation via CLI #13949
OCPBUGS-36339: Fix “Auto deploy when new image is available” becomes unchecked when editing a deployment from web console #14024
CONSOLE-4140: display URI decoded configuration files on MachineConfi… #14015
OCPBUGS-36424: DeploymentConfigs deprecation info alert should not present on the Edit deployment page #14025
OCPBUGS-31685: Revert - terminal: use username if uid is not present #13719
OCPBUGS-35284: fix BMH restart annotation #13995
CONSOLE-4134: i18n upload/download routine task sprint - 255 #13991
OCPBUGS-35879: Fix TypeError: Cannot read properties of null (reading ‘metadata’) in Topology view #14017
CONSOLE-3792: Add extension point to enable customized create project modal for dynamic plugins #13825
OCPBUGS-33490: Update Docs links for “Learn More” in Display Warning Policy Notification #14002
ODC-7581: Gitea support when using Import from Git in Developer Console #13928
OCPBUGS-35928: Improve control over PatternFly shared modules used in Console plugins #13992
OCPBUGS-35999: Remove duplicate code in storage module #14004
OCPBUGS-35996: remove orphaned i18n files #14001
ODC-7627: Move test-cypress script into a frontend sub-folder to make it easier to approve changes #13937
OCPBUGS-35908: fix flaking crd-extension tests #14000
ODC-7613: Update the UI for selecting the Git Provider in the Import form #13936
CONSOLE-3824: Remove kubevirt-plugin code #13769
ODC-7585: Pipeline operator installation via CLI #13909
OCPBUGS-33136: Fix invalid node filesystem query #13924
OCPBUGS-34316: Manually Approve client CSR displays an unknown warning message #13939
RHSTOR-5836: add info for ODF use-case (LSO LocalVolumeSet “Create” page) #13965
OCPBUGS-34937: Violation warning is not displayed for minAvailable in PDB Create/Edit form #13935
OCPBUGS-32550: Fix placement of icons on WebKit #13987
ODC-7614: Port exposed in Dockerfile not observed in the Ports Dropdown in Git Import Form #13953
OCPBUGS-35418: Error with html escaping for Route helptext #13980
OCPBUGS-35497: Update Go prereq in README.md #13979
OCPBUGS-34986: remove duplicate OAuth config #13957
ODC-7596: Show Pod Disruption warning message in Topology page #13921
OCPBUGS-35492: add info on obtaining first preferred language #13976
OCPBUGS-34516: Improve catalog grid icon display and scaling #13901
CONSOLE-4115: Add OLM v1 package #13960
OCPBUGS-25929: Fix: Quick Start “next” button requires double click to move to next step #13934
OCPBUGS-22853: Keep useUserSettings hook in the internal api #13967
OCPBUGS-29804: Fix crash if helm chart metadata is nil #13963
OCPBUGS-30218: fix pseudolocalization #13964
OCPBUGS-35376: sessions: fix sessions pruning #13903
OCPBUGS-35287: Alphabetize icons, alias httpd to apache #13958
OCPBUGS-29499, OCPBUGS-29804: bump helm to 3.14.4 #13816
(chore) Update tectonic builder image to use golang-1.22 #13932
OCPBUGS-29744: Removed nested label component #13946
OCPBUGS-34752: Forward selected key prop in IconDropdown component #13919
OCPBUGS-34683: Ensure requiredVersion is set for Console provided shared modules #13893
OCPBUGS-33756: Display of “Auth Token GCP” filter in OperatorHub should be conditioned #13867
OCPBUGS-35080: replace global refresh sync lock in OIDC provider with per-refresh-token one #13655
NO-JIRA: Remove Edge from devconsole_pr.md #13943
NO-JIRA: docs: update dead links in docs/helm #13904
OCPBUGS-35031: restore missing CloseButton styles #13941
OCPBUGS-34862: Fix Inconsistent Capitalization of “Import from Git” #13925
OCPBUGS-34684: i18n upload/download routine task - Sprint 254 #13910
OCPBUGS-29777: RWOP accessMode is not available on OpenShift console UI #13829
OCPBUGS-34656, OCPBUGS-34791, OCPBUGS-34828: disabling add-flow A-04-TC01 test and knative tests due to flakes #13931
OCPBUGS-34958: Replace Red Hat catalog source with Community #13938
OCPBUGS-33539: Add default sorting column for VirtualizedTable component of dynamic plugin sdk #13916
OCPBUGS-34533: Fix updating the “Until” field on the Silence > Edit page #13926
CONSOLE-3662, CONSOLE-4097, OCPBUGS-34538: Update plugin docs regarding Console 4.16 shared module changes #13900
NO-JIRA: revert “Add username/uid label and annotation for the user setting ConfigMap, Role and RoleBinding” #13917
Full changelog

console-operator

OCPBUGS-38549: Get externalOrganizationID instead of the organizationID #925
CONSOLE-4163: Add RBAC for console to GET PackageManifests #921
CONSOLE-4161: Add Capabilities to config builder #920
OCPBUGS-35941: Bump documentationBaseURL to 4.17 #912
OCPBUGS-36213: Bump openshift/api to pick up removal of conversion webhook server reference #919
OCPBUGS-33715: Add logging for determining the ORG_ID source #918
OCPBUGS-33715: Cache organization ID when the ID changes #913
TRT-1733: Revert #914 “OCPBUGS-29547: Apply hypershift cluster-profile for ibm-cloud-managed” #915
OCPBUGS-29547: Apply hypershift cluster-profile for ibm-cloud-managed #914
OCPBUGS-33787: Add cluster wide trusted CA bundle to operator #911
OCPBUGS-33787: Tolerate the absence of ingress capability on HyperShift clusters #886
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

NP-1042: Update owners #164
OKD-218: install util-linux #165
Full changelog

coredns

OCPBUGS-36454: Rename Dockerfile.openshift.rhel7 to Dockerfile.ocp #128
NE-1721: Merge 1.11.3 #118
OCPBUGS-33750: UPSTREAM: <carry>: openshift: Bump the version of ocp_dnsnameresolver external plugin #122
OCPBUGS-34619: UPSTREAM: 6692: openshift: Fix OCPBUGS-34619 #121
Full changelog

csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

OCPBUGS-38336: UPSTREAM: 126641: e2e/storage: update block device test to always specify a valid path #2054
NO-JIRA: update downstream owners #2047
OCPBUGS-35297: UPSTREAM: 126470: Move APIServingWithRoutine to alpha and disabled by default #2044
OCPBUGS-37620: Bump 1.30.3 #2038
NO-JIRA: UPSTREAM: 126213: add test about container metrics from cadvisor #2040
OCPBUGS-37281: UPSTREAM: 126104: Add funcs in pkg/filesystem/util to set file permissions on Windows and update container log dir perms #2034
OCPEDGE-1181: UPSTREAM: <carry>: update test annotations for sno #2033
NO-JIRA: add tool to validate test packages imported #2024
OCPBUGS-36742: UPSTREAM: <carry>: sync imports #2017
OCPBUGS-37111: UPSTREAM: 125404: Fix that PodIP field is temporarily removed for a terminal pod #2025
NO-JIRA: UPSTREAM: <drop>: bump(github.com/openshift/apiserver-library-go) #2023
MULTIARCH-4229: UPSTREAM:<carry>:bump cadvisor for 3516 upstream patches #2012
OCPBUGS-36743: UPSTREAM: <carry>: inject k8s version from hyperkube Dockerfile #2018
OCPBUGS-34294: OCPBUGS-34309: UPSTREAM: <carry>: update base image #1998
API-1783: Bump 1.30.2 #1996
OCPBUGS-14613: drop carry “don’t fail integration due to too many goroutines” #1995
OCPBUGS-34544: UPSTREAM: <carry>: Disable PersistentVolumeLabel by default #1991
OCPBUGS-34050: Backport 125337 #1987
OCPBUGS-34544: UPSTREAM: <carry>: Disable e2e tests that need PersistentVolumeLabel #1986
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

Updating Readme to add a new Clusterrole #190
NO-JIRA: Clarify Personas for Sharing #185
Full changelog

csi-driver-shared-resource-operator

STOR-1596: Bump all deps for 4.17 #114
Full changelog

csi-external-attacher

STOR-1593: Rebase external-attacher to v4.6.1 for OCP 4.17 #76
OCPBUGS-36455: Rename Dockerfile to Dockerfile.ocp #77
Full changelog

csi-external-provisioner

STOR-1593: Rebase to upstream v5.0.2 for 4.17 #104
OCPBUGS-34458: Updating csi-provisioner-container image to be consistent with ART for 4.17 #103
OCPBUGS-37455: Revert 5.0.1 rebase #102
STOR-1593: Rebase to upstream v5.0.1 for 4.17 #98
Full changelog

csi-external-resizer

STOR-1593: Rebase to upstream v1.11.1 for 4.17 #164
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

STOR-1593: Rebase external-snapshotter to v8.0.1 for OCP 4.17 #156
OCPBUGS-34257: Updating ose-csi-snapshot-validation-webhook-container image to be consistent with ART for 4.17 #158
OCPBUGS-34292: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.17 #159
OCPBUGS-34435: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.17 #157
Full changelog

csi-livenessprobe

OCPBUGS-36456: Rename Dockerfile #67
Full changelog

docker-builder

OCPBUGS-33215: Bumps openshift/api & related dependencies #394
Full changelog

docker-registry

OCPBUGS-36521: Rename Dockerfile #407
OCPBUGS-35335: use SelfAccessReview to obtain user info #404
OCPBUGS-34442: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.17 #401
OCPBUGS-33453: Use SAR instead of SSAR #402
Full changelog

egress-router-cni

OCPBUGS-37730: Build rhel8 binary from rhel8 golang builder #88
OCPBUGS-35526: update to go 1.22 and k8s.io mods to v0.30 #84
OKD-217: install util-linux #82
Full changelog

etcd

OCPBUGS-34653: Rebase etcd 3.5.14 openshift 4.17 #273
Full changelog

gcp-cloud-controller-manager

OCPBUGS-35256: Allow bootstrap node in existing instance groups #66
NO-JIRA: Update OWNERS #65
OCPCLOUD-2606: Merge https://github.com/kubernetes/cloud-provider-gcp:master (856e124) into master #57
Full changelog

gcp-cluster-api-controllers

NO-JIRA: Update OWNERS #229
OCPCLOUD-2622: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.7.0 (93bb59d) into master #228
Full changelog

gcp-machine-controllers

OCPCLOUD-2565: Add feature gates flag #86
OCPCLOUD-2565: Bump o/api and MAO packages #87
NO-JIRA: Update OWNERS #85
OCPCLOUD-2613: Bump k8s to 1.30 #84
OCPBUGS-34381: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.17 #83
Full changelog

gcp-pd-csi-driver

STOR-1602: Rebase to upstream v1.14.1 for OCP 4.17 #68
OCPBUGS-34245: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.17 #69
Full changelog

gcp-pd-csi-driver-operator

STOR-1819: Add manifest with OCP specific test config #125
CFE-879: Add resourceTags in Infrastructure to driver args list #120
STOR-1596: Bump all deps for 4.17 #124
Full changelog

haproxy-router

OCPBUGS-38475: Rename router Dockerfiles #616
OCPBUGS-38101: Bump k8s.io/* packages to v0.30.3 #615
OCPBUGS-34351: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.17 #602
OCPBUGS-34471: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.17 #604
Full changelog

hypershift

OCPBUGS-38925: copy oapi ca-trust recursively when building trust anchor #4605
OCPBUGS-38183: Update CSO deployment file #4542
HOSTEDCP-1483: update cloud-credential-operator in go.mod #4532
OCPBUGS-36680: ensure additionalTrustBundle propogates to workers #4331
NO-JIRA: add 4.14 and 4.15 HO base images to docker cve scan scripts #4591
OCPBUGS-38739: [Azure] Use infraID from infra-json if provided #4579
chore(deps): update konflux references #4568
chore(deps): update golang docker tag to v1.23 #4569
OCPBUGS-38463: nodepoolcontroller: List() PerformanceProfile status per NodePool #4556
HOSTEDCP-1565: external-dns: add proxy env vars if cluster proxy is configured #4580
NO-JIRA: [kubevirt] Fix KubeVirtNodesLiveMigratable condition for NodePools with 0 replicas #4494
HOSTEDCP-1861: cpo: separate KAS cert into internal and external #4566
OCPBUGS-34816: Block data plane HC configuration requests #4303
HOSTEDCP-1868: Pause CAPI cluster when HostedCluster is paused #4578
OCPBUGS-38409: Update CPO and HO base images to 4.18 #4543
HOSTEDCP-1903: Remove unused ROSA/EKS CRDs from hypershift install #4576
NO-JIRA: add docker script to find package versions in HO & CPO #4537
CONSOLE-3952: Add networking-console-plugin image to CNO as an env var #4558
NO-JIRA: fix(KONFLUX-3663): format PipelineRun files and upload SAST results #4533
OCPBUGS-36261: label routes when using SharedIngress #4562
OCPBUGS-37052: HTTPS proxy: do not proxy communication to cloud providers #4560
OSASINFRA-3567: openstack: fix setting external DNS on create #4517
OCPBUGS-38154: Fix bug where nodes were not triggering dedicated serving reconciliation #4563
OSASINFRA-3553: relax PodAffinityTerm for zone spreading in HA #4513
OCPBUGS-38467: allow for shared-ingress router pod creation without p… #4557
NO-JIRA: Fix CEL rules in the CRD #4512
HOSTEDCP-1475: Remove hard-coded konnectivity agenty image URI #4548
HOSTEDCP-1609: Support configuring Azure diagnostics via CLI flags #4529
OCPBUGS-38437: Stop building mce-2.7 from main #4549
OCPBUGS-36261: label routes only when HCP router used #4495
HOSTEDCP-1707: Update version support and upgrade docs #4347
HOSTEDCP-1874: Remove saas_template.yaml #4521
NO-JIRA: Bump LatestSupportedVersion to 4.18.0 after branch-out #4530
chore(deps): update konflux references (main) #4522
chore(deps): update quay.io/openshift/origin-base docker tag to v4.16 (main) #4526
NO-JIRA: Update golang Docker tag to v1.22 (main) #4523
CNV-42532: KubeVirt: add label to DataVolume #4509
OCPBUGS-38183: make use of azure-disk-driver-control-plane-image #4514
OSASINFRA-3546: docs/openstack: fix typo #4510
OCPBUGS-25937: Support KMS v2 on AWS #4502
OSASINFRA-3555: openstack: e2e adjustments #4492
HOSTEDCP-1776: Set KCM node monitor grace period #4404
HOSTEDCP-1853: Add Arm NodePool Support Through Azure Marketplace #4455
OCPBUGS-38041: test: e2e: handle 409 conflict in EnsureHostedClusterImmutability #4493
HOSTEDCP-1850: Allow setting Kube APIServer maximum requests in flight #4488
OSASINFRA-3550: openstack: ingress API & octavia ingress provider #4474
OCPBUGS-37488: CSO: add environment variable for tools image #4483
NO-JIRA: Update Konflux 4.17 and perform migration #4486
NO-JIRA: Update Konflux and perform migration #4485
OSASINFRA-3554: OpenStack: Use external network ID in favor of Name #4477
OCPBUGS-37934: Reverting ETCD cluster rebuild #4475
OCPBUGS-37052: Use konnectivity HTTP proxy for ingress controller #4456
HOSTEDCP-1669: Add first azure services validation #4466
NO-JIRA: Remove non relevant OVNSbDb service type declarations #4465
HOSTEDCP-1565: add VPC Endpoint Service proxy support #4470
OCPBUGS-37832: set proxy envvars on aws and azure CCMs #4468
HOSTEDCP-1851: Use a multi-arch haproxy image for shared ingress #4454
HOSTEDCP-1669: Make hostedcluster.spec.services immutable for non IBM platforms #4449
NO-JIRA: Ensure VolumeSnapshots are deleted during cloud resource cleanup #4306
OCPBUGS-37753: Let the CPO oidc check resolve through data plane #4273
NO-JIRA: Update IBM go sdk #4435
NO-JIRA: Flaky cert validation test #4448
CNF-12681: Added support for performance profile status #4020
HOSTEDCP-1778: Default multi-arch flag to true and default release stream for HCP CLI #4447
OCPBUGS-36932: Add HTTP konnectivity proxy to OAuth server #4381
OSASINFRA-3550: docs/openstack: adds content for Ingress with MetalLB #4439
OCPBUGS-37703: fix release stream flag/rhcos image for create cluste… #4445
CNV-32074: Add Kubevirt live-migratable condition for HC and NP #4361
OCPBUGS-37698: mce-2.7 enablement for main #4442
OCPBUGS-36689: Omit the unused 0000_50_olm_06-psm-operator.service.ya… #4348
OSASINFRA-3546: openstack: document how to create a cluster #4414
NO-JIRA: chore(deps): update konflux references (main) #4426
HOSTEDCP-1798: Update AWS multi-arch docs to include migration #4421
OCPBUGS-37625: DedicatedRequestServing scheduler: make taken labels list consistent #4425
OCPBUGS-37486: Set right endpointSlice port #4422
OCPBUGS-24400: Only recreate etcd if hasn’t ever been ready #4419
OSASINFRA-3319: implements required OpenStack credentials #4410
HOSTEDCP-1791: dont render any secrets in manifest file #4420
HOSTEDCP-1798: Refactor multi-arch validation algorithm #4405
OSASINFRA-3538: openstack: small fixes for CLI #4415
OCPBUGS-34820: Keep in sync the HC and HCP ICS field #4412
HOSTEDCP-1813: Moves MachineIdentity from the HostedCluster API to the NodePool API #4408
HOSTEDCP-1791: dont render cloud-credentials secret #4406
OSASINFRA-3312: Implements OpenStack Node pools #4409
OSASINFRA-3539: Add ipam to cluster-api assets #4399
OSASINFRA-3538: openstack: cluster CLI #4396
HOSTEDCP-1838: Migrate buildah config in tekton files for migration from 0.1 to 0.2 #4403
HOSTEDCP-1836: Fix Snyk vulnerability with python deps #4394
OCPBUGS-36897: fix(api): Nodepool CEL validation fix #4378
OSASINFRA-3311: openstack: CAPO provider deployment #4373
OCPBUGS-37222: extract rhel9 MCO binaries for rhel8 based MCO images #4382
HOSTEDCP-1834: Fix Dependabot Issue By Updating Azure RHCOS Image Copy Process #4379
OCPBUGS-37102: Separate ibmcloud kms encryption configuration types #4372
NO-JIRA: Fix OADP backup objects #4376
HOSTEDCP-1832: Document konnectivity in HyperShift #4374
CNV-39630: Add ability to set tolerations on the HostedCluster #4339
OSASINFRA-3525: Initial PR to start supporting OpenStack platform #4350
CNF-11845: nodepoolcontroller: mirror containerruntimeconfig to HCP NS #4150
HOSTEDCP-1795, HOSTEDCP-1796: Customize the self-generated cert validity and rotation #4335
OCPBUGS-34816: Fix the resource from is checking the MHC platform #4365
HOSTEDCP-1820: Add snyk helper scripts to contrib #4359
NO-JIRA: Update Konflux references #4362
OCPBUGS-35899: Doubled machineHealthCheck timeout on Agent and None #4345
OCPBUGS-24400: Recreate the ETCD statefulSet on HostedCluster deployment when stays failing #4354
OCPBUGS-35905: E2E test to verify openshift-apiserver TLS certificates #4322
OSASINFRA-3310: Adds cluster-api-provider-openstack assets #4355
HOSTEDCP-1734, HOSTEDCP-1737: use proxy-protocol-v2 for shared ingress #4330
NO-JIRA: Let cmd unit tests run without a running Kubernetes cluster #4310
NO-JIRA: Default azure to run as managed-service=aro #4316
OCPBUGS-34865: Fix name resolution for HTTPS konnectivity proxy #4351
NO-JIRA: add ignition payload inspect docs #4346
OCPBUGS-33934: Add newline after TLS certs referenced by image.config #4343
NO-JIRA: Update catalog annotation based on an OCP version #4344
HOSTEDCP-1818: fix(build): update to the fixed clamav image #4342
OCPBUGS-36681: Set Azure VM identity if user assigned identity set #4332
HOSTEDCP-1716: When running the HO locally it should no required a running pod #4268
CNF-12951: hypershift:performanceprofile: associate profile name with user input #4108
NO-JIRA: Add net policy to allow ingress from sharedingress namespace #4336
OCPBUGS-34865: Add HTTP(s) konnectivity proxy for openshift-apiserver #4218
OCPBUGS-34820: Delete IDMS in dataplane once HCP ICS field is removed #4333
NO-JIRA: KubeVirtJsonPatchTest: fix vmi slice assignment #4319
NO-JIRA: Update ci image of capk to 4.17 #4183
NO-JIRA: Dump capz azure resources #4329
NO-JIRA: Remove Steve Kuznetsov from approvers/owners #4334
NO-JIRA: Update Konflux references #4324
NO-JIRA: Update AKS contrib docs #4314
HOSTEDCP-1808: Update Mkdocs, dependencies and dockerfile #4323
NO-JIRA: Dump sharedingress manifest #4321
NO-JIRA: Enhance aks docs #4311
NO-JIRA: e2e tests: skip checking ValidKubeVirtInfraNetworkMTU if no workers #4313
Revert “HOSTEDCP-1778: Enable MultiArch flag by default” #4312
NO-JIRA: skip validate metrics on azure e2e #4305
NO-JIRA: skip multiarch test before HC creation #4292
OCPBUGS-30986: remove weak ciphers from security profile #4294
NO-JIRA: Add release notes to commit and print proper output when release errors #4304
HOSTEDCP-1778: Enable MultiArch flag by default #4272
CNV-39589: [Kubevirt] Add support for passing GPU devices to NodePools #4101
NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 - abandoned #4300
NO-JIRA: chore(deps): update konflux references #4297
OCPBUGS-23922: hcco: reconcile apiserver config into hosted cluster #4278
OCPBUGS-36230: Use a reconciled proxy config when generating nodepool userdata #4277
OCPBUGS-35521: Move infra-volumesnapshot-class-mapping to core binding #4290
OCPBUGS-33060: enable audit log for oauth-openshift #3994
NO-JIRA: test/e2e: remove api budget checks #4286
NO-JIRA: fixup azure aks docs #4293
NO-JIRA: Update HC on AKS doc for new flags for infra #4274
HOSTEDCP-1342: Add new metrics to check CA bundle validity and expiry [OSD-15414] #3442
NO-JIRA: cmd/cluster/kubevirt: add a test from dvossel #4220
HOSTEDCP-1709, HOSTEDCP-1777: test/e2e: complete move to eventually blocks #4263
OCPBUGS-36188: kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4271
OCPBUGS-31840: Make guest cluster components use the correct KAS port #3849
HOSTEDCP-1447: test/e2e: tar.gz hosted cluster content #4256
Update Konflux references #4258
OCPBUGS-35979: Keep old user data for aws < 4.16 #4269
NO-JIRA: Fix the getting started page by adding export to BUCKET_NAME #4207
HOSTEDCP-1221: add heterogenous NP e2e #4005
OCPBUGS-35874: check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route #4254
HOSTEDCP-1709: test/e2e: actually wait for guest cluster client #4262
NO-JIRA: OWNERS: add stevekuznetsov #4255
HOSTEDCP-1709: test/e2e: use the eventually abstraction in chaos test #4247
HOSTEDCP-1709: test/e2e: updates to the eventually construct #4253
HOSTEDCP-1684: remove CLI requirement for RG flag when NSG ID is supp… #4232
CNV-30445: KubeVirt: Enable multiqueue by default #4221
NO-JIRA: chore(deps): update konflux references #4249
HOSTEDCP-1729: Support for on-demand global routing when creating transit gateway #4081
NO-JIRA: test/e2e: reduce logging for ssh and oc adm inspect #4242
NO-JIRA: test/e2e: reduce logging on guest cluster infra cleanup #4239
NO-JIRA: remove CI_TESTS_RUNS from e2e script as we now directly pass… #4226
OCPBUGS-35450: Remove KMS V1 provider support for IBM Cloud #4215
NO-JIRA: chore(deps): update konflux references to ff44cf3 #4244
HOSTEDCP-1709: test/e2e: add a harness for asynchronous assertions #4206
NO-JIRA: test: e2e: bump CPO mutate budget #4237
OCPBUGS-34544: Disable PersistentVolumeLabel admission plugin #4107
NO-JIRA: Shared ingress tests #4229
NO-JIRA: Bump golang.org/x/net from 0.20.0 to 0.23.0 in /contrib/aws-tag-lb-service-webhook #3914
NO-JIRA: chore(deps): update konflux references to 2be7c9c (main) #4222
NO-JIRA: Revert “kubevirt, e2e: Skip advanced multinet for CI” #4203
OCPBUGS-35513: cluster/core: fix nodepool naming #4219
OCPBUGS-33428: Complete KAS migration to none endpoint reconciler type #4133
CNV-42626: Transition kubevirt vms to use topology spread constraints #4145
NO-JIRA: Fix tests to avoid race conditions #4214
HOSTEDCP-1542: cmd: use validated and completed opts pattern #4212
NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform #4184
NO-JIRA: Added markdown for storage table support #4213
HOSTEDCP-1542: Fixed infra-id not being defaulted first #4210
HOSTEDCP-1721: Enable shared ingress for Azure #4188
HOSTEDCP-1542: cmd/cluster: refactor to remove example fixtures #4018
HOSTEDCP-1402: cmd/infra/aws/destroy: allow using component credentials #3975
HOSTEDCP-1446: hack: remove old arguments and scripts #4186
OCPBUGS-34650: Allow specifying the volume detach timeout for machines via NodePools #4136
HOSTEDCP-1709: test/e2e: misc context fixes: #4172
IR-471: registry operator: Add missing env var, wait for rbac #4123
HOSTEDCP-1514: support Azure diagnostics on NodePools #3970
OCPBUGS-34807: Fixed ValidReleaseInfo condition #4129
OCPBUGS-33951: Documentation for disconnected MGMT Cluster #4182
kubevirt, e2e: Skip advanced multinet for CI #4187
OCPBUGS-35205: Add hypershift-cluster-version-operator image to release providers #4138
chore(deps): update konflux references #4165
HOSTEDCP-1446: hack: make the e2e script generic #4176
NO-JIRA: Delete references to the openshift-sdn image in CNO #4164
HOSTEDCP-1709: test/e2e: always bound assertions in time #4170
HOSTEDCP-1712: Initialize infra id for e2e-azure tests #4163
OCPBUGS-34274: Generate default worker security group rules based on machineCIDR #4085
NO-JIRA: test/e2e: remove dead code #4171
HOSTEDCP-1709: hack/test: remove timeouts #4169
OCPBUGS-34987: Add missing Tag permissions to cli role #4166
HOSTEDCP-1553: Add annotation to customize log verbosity of kube-apiserver #4026
HOSTEDCP-1689: add PodMonitor for external-dns #4147
OCPBUGS-33953: Document how ICSP/IDMS work in HCP #4098
OCPBUGS-33952: Documented HCP service exposure #4086
NO-JIRA: Dependabot updates #4152
HOSTEDCP-1709: test/e2e: constrain actions to context, timeout #4142
HOSTEDCP-1709: e2e/util: improve logging during node readiness poll #4153
OCPBUGS-34607: Disable machine pool feature gate #4109
HOSTEDCP-1694: Automate HO Deployment Tag & Commit Updates for ROSA HCP #4102
OCPBUGS-32467: nodepool_controller: add a reconciler for cleanup #3969
Full changelog

insights-operator

Using the appropriate Bash interpreter on Git hook scripts (#980) #980
OSPRH-5904: Integration of the OpenStack CRs into the insights-operator (#951) #951
limit the time for the new rapid container logs & update the endpoint (#964) #964
remove firing alerts from the config/metrics file (#954) #954
fix the configmapobserver notifications (#968) #968
update OWNERS file…again (#966) #966
Add haproxy metric (#963) #963
always store remote configuration and metrics in the archive (#959) #959
introduce JSON schema & validation for rapid container logs (#953) #953
remove SDN related gatherers (#955) #955
OCPBUGS-35882: properly encode the URL for the advisor links (#952) #952
CCXDEV-12582: rapid recommendations with new status condition (#944) #944
OCPBUGS-35727: Ingress controller related certificates’ validate dates gathering (#945) #945
OCPBUGS-33082: Add new use cases for networking obfuscation (#947) #947
Full changelog

ironic

NO-ISSUE: fix scos and fcos dockerfiles to remove ironic-inspector #566
OCPBUGS-38782: redfish-virtualmedia fails on XFusion nodes #560
OCPBUGS-38521: set min version for python3-webob #550
OCPBUGS-38596: Update ironic version in ironic-image #556
METAL-1123: Suppress file listing of compiled py files #544
OCPBUGS-38077: update sushy to pick up the RAID fix #540
OCPBUGS-38406: Update root image #542
OCPBUGS-38275: Updating ironic-container image to be consistent with ART for 4.18 #539
OCPBUGS-37402: bump werkzeug #533
METAL-1094: Sync with upstream metal3-io/ironic-image #532
OCPBUGS-37084: Update ironic projects to latest available #522
METAL-1070: Align ironic dependencies with latest upper constraints #520
OCPBUGS-33335: Update Python Jinja2 #519
METAL-1049: Download and install sources from local dir #494
OCPBUGS-32261: Update ironic-inspector to fix the memory leak #516
NO-ISSUE: Bump ironic projects versions #514
OCPBUGS-29687: Read ironic and inspector htpasswds from files #513
Bug OCPBUGS-34534: Disable installation of .pyc files through pip #508
Full changelog

ironic-agent

OCPBUGS-38521: set webob and bump werkzeug #147
OCPBUGS-38406: Update root image #144
OCPBUGS-38255: Updating ironic-agent-container image to be consistent with ART for 4.18 #143
METAL-1049: Download and install sources from local dir #142
OCPBUGS-37086: Update ironic projects to latest available #141
METAL-1070: Align ironic dependencies with latest upper constraints #140
OCPBUGS-35968: Disable installation of .pyc files through pip #139
NO-ISSUE: Bump ironic projects versions #137
NO-ISSUE: Replace README with an explanation how this agent works #138
Full changelog

ironic-machine-os-downloader

OCPBUGS-38265: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.18 #99
OCPBUGS-33892: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.17 #98
Full changelog

ironic-static-ip-manager

OCPBUGS-38282: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.18 #44
OCPBUGS-33907: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.17 #43
Full changelog

keepalived-ipfailover

OCPBUGS-34348: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.17 #186
OKD-219: add util-linux to base image #187
Full changelog

kube-proxy

SDN-4925: Revendor k/k to upstream 1.30.3 (for kube-proxy) #630
OCPBUGS-34279: ART sync and golang 1.22 update #629
Full changelog

kube-state-metrics

OCPBUGS-33620: [bot] Bump openshift/kube-state-metrics to v2.13.0 #115
Full changelog

kube-storage-version-migrator

OCPBUGS-34066: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.17 #205
Full changelog

kubevirt-csi-driver

CNV-45886: Add csi-clone support to kubevirt-csi (#118) #45
CNV-44899: Sync upstream 2024-07-22 #44
OCPBUGS-35093: Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.17 #43
Full changelog

machine-api-operator

OCPBUGS-31777: Updates message verbs to use %q where appropriate #1240
OCPCLOUD-2565: Machine controller feature gating #1274
OCPCLOUD-2565: Machineset feature gating #1273
OCPBUGS-37154: Added Permisions for Azure Capacity Reservation #1272
OCPCLOUD-2565: Updates vsphere feature gates #1269
CORS-3546: Nutanix: add gpus and dataDisks support #1266
CORS-3580: Add the hyperdisk-balanced disk type #1268
OCPBUGS-36469: Update validation for placementGroupPartition to honour it as pointer #1267
CFE-1065: Add range validation for placementGroupPartition #1265
CFE-1065: Add support for PlacementGroupPartition of placement group #1242
NO-JIRA: Update OWNERS #1264
OCPBUGS-1735: Vsphere: Handle cloned instance with lost taskID #1223
OCPCLOUD-2565: Bump openshift/api #1256
Full changelog

machine-config-operator

OCPBUGS-31777: Updates message verbs to use %q where appropriate #4369
OCPBUGS-37850: Machine-config daemon ListPools panic during tech-preview CI runs #4533
NO-ISSUE: Add ref link to NodeDisruptionPolicy in docs/* #4543
AUTH-482: set required-scc for openshift workloads #4504
OCPNODE-2482: Enable CRI-O internal repair feature as the default #4519
OCPBUGS-37984: Give keepalived-monitor necessary capabilities #4517
OCPBUGS-37534: Revert “MCD-pull: run after network-online.target in Azure” #4515
OCPBUGS-38320: Revert “templates/master/cri-o: make crun as the default container runtime” #4523
OCPNODE-2357: templates/master/cri-o: make crun as the default container runtime #4437
NO-JIRA: crio: set min memory for crun #4516
OCPBUGS-35800: kubelet config controller does not always propogate tlsSecurityProfile #4512
OCPBUGS-31298: Prevent no-operation patches from overloading the kube-api server with unnecessary calls #4511
MCO-703: Lifecycle Buildah with MCO #4471
MCO-1214: Enabled boot images updates for AWS #4492
NO-ISSUE: Move ManagedBootImages and NodeDisruptionPolicy to default e2e suite #4513
NO-JIRA: Fix HasOSImage function #4510
NO-ISSUE: Remove openshift/api pin #4508
MCO-1065: MCO-1171: API bump for ManagedBootImages and NodeDisruptionPolicy GA #4496
OCPBUGS-33784: Guard MachineOSBuild informers with feature gates #4497
MCO-1230: Retry build and push operations multiple times #4469
OCPBUGS-30955: On-Prem resolv prepender to watch for NM changes #4488
MCO-1191, MCO-1194: Experiment with creating internal go bindings for bootc , Incorporate support for bootc commands to Machine Config Daemon #4465
OCPBUGS-36289: e2e test should wait for MCD pod to be running #4444
NO-ISSUE: OWNERS: keep up-to-date with active maintainers #4493
MCO-1202: MCO-1203: MCO-1204: MCO-1205: MCO-1213: Implementing tlsSecurityProfile for MCO #4435
SPLAT-1381: Remove Alibaba #4112
NO-ISSUE: API bump to fetch BootcNodeManagement FG #4487
OCPBUGS-36175: Remove privileged flag from on-prem containers #4443
OCPNODE-2438: bump API and update CRD manifests #4480
OCPBUGS-37271: kubelet: boot without PSI for performance concerns #4470
MCO-1125: OCPBUGS-35277: Allow paths to be defined for non-disruptive updates #4472
OCPBUGS-19537: OCB should fail if node is not coreos based #4442
MCO-1227: Run boot image controller only when required #4477
OCPBUGS-33397: Openshift uncordoned compute-node that was intentionally cordoned #4475
OCPBUGS-33134: Nodes are drained twice when an OCB image is applied #4467
OCPBUGS-36654: Machine-config operator should not hot loop generating ValidatingAdmissionPolicyUpdated events #4460
OPNET-465: Refactor LB and DNS manifest list for vSphere #4167
MCO-1103: Restore setup-envtest used in the verify test #4458
MCO-1144: Implement progressing/error boot images conditions on the MachineConfiguration object #4390
NO-ISSUE: Revert “disable mglru service” #4468
OCPBUGS-36344: Add CIP relevant mirrors to sigstore attachement cfg #4449
OCPBUGS-35436: Remove disable-mglru.service #4466
OCPBUGS-36711: templates: run disable-mglru conditionally #4459
OCPBUGS-35300: MCD-pull: run after network-online.target in Azure #4423
OCPBUGS-30603: Bootstrap e2e test featuregate setup does not match the actual code #4439
MCO-1147, OCPBUGS-34225: Pick up openshift/kubernetes 1.30 rebase updates, Dockerfile Update #4399
OCPNODE-2226: Introduce versioning in auto-node-sizing feature #4363
OCPBUGS-21628, OCPBUGS-28974: daemon: Handle correctly OS Version for 4.1 and 4.2 bootimages #4429
OCPBUGS-33694: daemon/update: disable systemd unit before overwriting #4421
OCPBUGS-36178: remove unnecessary e2e test TestControllerConfigStuff #4434
OCPBUGS-33913, OCPBUGS-34261: CurrentImagePullSecret should be consumed by the MCD #4395
OCPBUGS-35971: disable mglru kernel feature #4425
NO-JIRA: format policy.json #4412
OCPBUGS-32348: Make logging configurable for on-prem components #4344
OCPBUGS-31710: Unify machineconfig file format for kubeletconfig to use YAML encoding instead of JSON encoding #4350
OCPBUGS-35519: Revert “Azure: add Azure specific dnsmasq ordering” #4411
OCPBUGS-33331: Fix reference to $host_file #4353
OCPBUGS-34050: Default ipv4 NODE_IP to 0.0.0.0 #4388
OCPBUGS-35300: Azure: add Azure specific dnsmasq ordering #4404
OCPNODE-2216: crio: migrate metrics port to localhost only [4.17] #4292
OCPNODE-2336: Drop ClusterImagePolicy validation on scope conflicts with release-image repo #4401
OCPBUGS-33671, OCPBUGS-34079: fix secret canonicalization #4366
OCPBUGS-33129: Panic when we remove an OCB infra MCP and we try to create new ones with different names #4396
MCO-1152: MCO-1146: Add e2e tests for NodeDisruptionPolicy #4365
OCPBUGS-34959: ensure event handlers are registered after queue is configured #4359
OCPBUGS-29820: kubelet.service: wait for chronyd #4381
OCPBUGS-33248: daemon: upgrade os image from local container storage if it exists #4347
Full changelog

monitoring-plugin

OCPBUGS-36921: Use resource label when showing empty alert list pages #165
NO-JIRA: Update query-browser to not use setState #164
NO-JIRA: upgrade to go 1.22 fixing the z version #162
NO-JIRA: downgrade to go 1.21 to be able to use cachito #160
NO-JIRA: add FIPS compliant flags and env vars #157
OU-431: Export CSV for Alert Tables #133
NO-JIRA: Use DNF and go based image in Dockerfile #154
NO-JIRA: fix cachito web folder #151
NO-JIRA: fix command chain for art image #149
NO-JIRA: fix cachito pem file location #146
NO-JIRA: fix cachito target folder #144
NO-JIRA: Fix art image cachito path for yarn lock #142
OU-436: Add Golang backend #128
OU-258: Dev console: Use Metrics page from monitoring-plugin #138
OCPBUGS-37291: check undefined function before calling #137
NO-JIRA: Fix docker local and log query browser error #135
OU-248: Add Alerts Detail Page #131
OU-238: Export CSV #127
OCPBUGS-36970: Use the non-tenancy URL in the Admin perspective #134
OU-251: Prevent rule labels from being added to alert labels for dev console #132
OU-439: Add the predefined queries list to the admin metrics #129
OU-251: Migrate Developer Perspective Alert List to Monitoring Plugin #125
OKD-210: Use rhel9 base image in Dockerfile #121
Full changelog

multus-admission-controller

OCPBUGS-34283: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.17 #85
NP-1046: Update owners #86
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-37991: Downstream sync to address multiple interface returns in network-status annotation #245
OKD-218: install util-linux #241
OCPBUGS-34911: Update owners file #237
OCPBUGS-33559: Thick plugin should not wait for API readiness on CNI DEL #233
Full changelog

multus-networkpolicy

Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.17 (#55) #55
Update owners (#56) #56
Full changelog

multus-route-override-cni

NP-1041: Update owners #57
Full changelog

multus-whereabouts-ipam-cni

NP-1057: Ds merge 08/02/2024 #307
OCPBUGS-33941: upstream sync 23072024 #303
NP-1045: Update owners #285
OCPBUGS-29648: upstream sync 13062024 #290
Full changelog

must-gather

NO-JIRA: Expand the approvers for must-gather #439
MON-3108: fix(collection-scripts/monitoring_common.sh): set a default –sandbox-dir-root to ‘promtool tsdb dump-openmetrics’ for better UX #437
CNF-13837: gather_ppc: fallback option when NTO image not found #436
MON-3108: Add gather_metrics for Prometheus fetching #434
OCPBUGS-33959, SDN-5066: Remove needless multus log collection #431
NO-JIRA: Update dockerfile rename changes #433
NO-JIRA: Rename Dockerfile #432
NO-JIRA: Correct typo. #414
NO-JIRA: Adding the missing clusterresourcequota and Flowcontrol resources #408
OCPBUGS-34360: Run ppc node collection in parallel #424
OCPBUGS-31037: Collect PerformanceProfile Data From all Nodes #410
OCPBUGS-33959: Network logs collection: skip unready nodes #425
Full changelog

network-metrics-daemon

Correct spelling (#97) #97
Update owners (#94) #94
Full changelog

network-tools

NO-JIRA: Remove Ben from script #130
NO-JIRA: Add real total line to the bug ranking #131
NO-JIRA: Px score for bugs #128
Full changelog

oauth-server

OCPBUGS-33695: p/o/handlers - fix nil-pointer, if ResStatus is nil #150
Full changelog

oc-mirror

OCPBUGS-35824: Log warning UPDATE_URL_OVERRIDE correctly (#908) #908
CLID-169: Add terraform template to up Enclave demo env on AWS (#907) #907
OCPBUGS-37867: Use tag only when image by tag and digest (#911) #911
OCPBUGS-38037: unable to build graph image in enclave environment (#906) #906
OCPBUGS-38396: use platform.release when set (#909) #909
OCPBUGS-37950: Bug fix when kubevirt image not found (#904) #904
OCPBUGS-37667: Rebuild catalogs – without cache generation (#899) #899
CLID-179: Include the HyperShift KubeVirt CoreOS container (#900) #900
removes duplicated operator related images (#903) #903
CLID-133: feat: introduces priority on mirroring and show which operator failed during mirroring (#895) #895
OCPBUGS-36410: fix: creates tags for release images (#898) #898
CLID-136: Skip deletion of operator catalog image in delete feature (#894) #894
OCPBUGS-37055: Use proxy for HTTP request release signatures (#891) #891
OCPBUGS-36548: Skip catalogs that are non existing (#888) #888
OCPBUGS-36445: Fix to ensure invalid catalogs are skipped (#885) #885
CLID-99 consolidates the release collector for delete feature (#883) #883
This is a combination of 6 commits. (#880) #880
OCPBUGS-362214: Fix V2 DiskToMirror should not require internet access (#882) #882
Update enclave documentation : OSUS (#878) #878
OCPBUGS-34020: Implement fail safe / fail fast in workers (#865) #865
CLID-135: Show warning in console when EUS and version conditions are used (#874) #874
OCPBUGS-35279: Fix spelling error in delete console message (#877) #877
Updating oc-mirror-plugin-container image to be consistent with ART for 4.17 (#872) #872
OCPBUGS-33775: Do not generate idms & itms if nothing has been mirrored (#869) #869
OCPBUGS-33121: Fix problems with versions and verbose flags (#867) #867
Full changelog

olm-catalogd

NO-ISSUE: Synchronize From Upstream Repositories #59
NO-ISSUE: Synchronize From Upstream Repositories #57
NO-ISSUE: Synchronize From Upstream Repositories #53
Full changelog

olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #131
NO-ISSUE: Synchronize From Upstream Repositories #130
NO-ISSUE: Synchronize From Upstream Repositories #129
NO-ISSUE: Synchronize From Upstream Repositories #128
NO-ISSUE: Synchronize From Upstream Repositories #127
NO-ISSUE: Synchronize From Upstream Repositories #126
NO-ISSUE: Synchronize From Upstream Repositories #125
NO-ISSUE: Synchronize From Upstream Repositories #124
NO-ISSUE: Synchronize From Upstream Repositories #123
NO-ISSUE: Synchronize From Upstream Repositories #121
NO-ISSUE: Synchronize From Upstream Repositories #119
NO-ISSUE: Synchronize From Upstream Repositories #118
NO-ISSUE: Synchronize From Upstream Repositories #117
NO-ISSUE: Synchronize From Upstream Repositories #115
OCPBUGS-36471: Synchronize From Upstream Repositories #114
NO-ISSUE: Synchronize From Upstream Repositories #111
NO-ISSUE: Synchronize From Upstream Repositories #110
Full changelog

openshift-controller-manager

OCPBUGS-35731: Race condition when deleting ServiceAccount #318
Revert Revert OCPBUGS-36833: 4.16 “Bad” reconciliation loops can cause unbounded dockercfg secret creation #322
NO-JIRA: Revert “OCPBUGS-36833: 4.16 “Bad” reconciliation loops can cause unbounded dockercfg secret creation” #321
OCPBUGS-36833: 4.16 “Bad” reconciliation loops can cause unbounded dockercfg secret creation #319
OCPBUGS-32873: Replace deprecated gopkg.in/square/go-jose.v2 #315
Full changelog

openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-34113: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.17 #292
OCPBUGS-34113, OCPBUGS-34137, OCPBUGS-34460, OCPBUGS-35462: sync upstream on release-1.30/go1.22 #287
NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.29 into master #284
NO-JIRA: Remove dulek from shiftstack-team #279
Full changelog

openstack-cinder-csi-driver-operator

NO-JIRA: Add more docs for configuration options #167
STOR-1596: Bump all deps for 4.17 #176
OCPBUGS-30949: Add config map hooks #168
Full changelog

openstack-cluster-api-controllers

OCPBUGS-34072: Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.17 #317
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into main #316
Full changelog

openstack-machine-api-provider

OCPCLOUD-2565: Adds –feature-gates CLI argument #122
Full changelog

operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #841
NO-ISSUE: Synchronize From Upstream Repositories #835
NO-ISSUE: Synchronize From Upstream Repositories #834
NO-ISSUE: Update junit report file name to show spec results on Test Grid #832
OCPBUGS-36500: remove cvo hypershift profile annotation from psm-operator manifests #831
NO-ISSUE: Synchronize From Upstream Repositories #830
NO-ISSUE: Synchronize From Upstream Repositories #827
NO-ISSUE: Synchronize From Upstream Repositories #825
NO-ISSUE: Synchronize From Upstream Repositories #820
NO-ISSUE: Synchronize From Upstream Repositories #816
OCPBUGS-35970: add io.openshift.release.operator label to image #812
NO-ISSUE: Synchronize From Upstream Repositories #815
NO-ISSUE: add output-dir to E2E_GINKGO_OPTS #813
OCPBUGS-35970: don’t erase the filesystem from the base tools image #804
NO-ISSUE: Manual Sync 0702 #808
OCPBUGS-35970: switch base image #802
NO-ISSUE: Synchronize From Upstream Repositories #801
NO-ISSUE: Synchronize From Upstream Repositories #797
NO-ISSUE: Manual Sync #796
OPRUN-3221: 🌱 fix xplat compile for of-tools image; hide utest files from git; use rhel8 art builder image #770
NO-ISSUE: Synchronize From Upstream Repositories #790
NO-ISSUE: Synchronize From Upstream Repositories #783
NO-ISSUE: Synchronize From Upstream Repositories #778
NO-ISSUE: Synchronize From Upstream Repositories #763
Full changelog

operator-marketplace

NO-ISSUE: Add client certificate and key to service monitor #482
OCPBUGS-34244: Updating marketplace-operator-container image to be consistent with ART for 4.17 #568
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

SDN-4930: Downstream Merge 20th august #2268
OCPBUGS-37056, OCPBUGS-37439, OCPBUGS-37439: Downstream Merge 14th August 2024 #2259
OCPBUGS-37541: Fix per-pod MCS/metadata blocking #2240
OCPBUGS-36614, OCPBUGS-36865, SDN-4919: [DownstreamMerge] 29 July 2024 #2241
OCPBUGS-37709: Revert #2233 DownStream Merge: 24th July 2024 #2243
OCPBUGS-36865, SDN-4919: DownStream Merge: 24th July 2024 #2233
SDN-4919: Downstream Merge July 10th #2223
OCPBUGS-33758, OCPBUGS-33758, OCPBUGS-35347, OCPBUGS-35367, SDN-4919, SDN-5011: Downstream Merge: July 2nd #2217
OCPBUGS-34463: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.17 #2186
OCPBUGS-34778: bump OVN to fix multicast bug #2210
OCPBUGS-34462: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.17 #2191
OCPBUGS-33005: Downstream Merge June 17th #2206
SDN-4157: Downstream Merge June 7th 2024 #2201
OCPBUGS-34109: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.17 #2176
Full changelog

prom-label-proxy

MON-3972: [bot] Bump openshift/prom-label-proxy to v0.11.0 #375
MON-3905: [bot] Bump openshift/prom-label-proxy to v0.10.0 #373
MON-3897: [bot] Bump openshift/prom-label-proxy to v0.9.0 #372
Full changelog

prometheus

OCPBUGS-38622: Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. #220
MON-3981: [bot] Bump openshift/prometheus to v2.54.0 #219
MON-3981: [bot] Bump openshift/prometheus to v2.54.0 #218
MON-3914: [bot] Bump openshift/prometheus to v2.53.1 #215
OCPBUGS-37370: backport of upstream fix #216
OCPBUGS-37244: [bot] Bump openshift/prometheus to v2.53.1 #211
OCPBUGS-35483: cherry-pick upstream fix to make PrometheusRemoteWriteBehind fire when remote endpoint is never reached. #213
OCPBUGS-36768: cherry-pick upstream remote-write fix #210
MON-3914: [bot] Bump openshift/prometheus to v2.53.0 #208
MON-3914: [bot] Bump openshift/prometheus to v2.53.0 #206
OCPBUGS-34264: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.17 #205
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

MON-3982: [bot] Bump openshift/prometheus-operator to v0.76.0 #297
OCPBUGS-38174: feat: sync proxy settings in Alertmanager configuration #295
MON-3947: Bump openshift/prometheus-operator to v0.75.2 #294
Full changelog

prometheus-node-exporter

MON-3949: [bot] Bump openshift/node_exporter to v1.8.2 #149
Full changelog

service-ca-operator

NO-JIRA: fix outdated doc links #241
Full changelog

telemeter

OCPBUGS-33285: Add metricsclient_http_requests_total metric #500
MON-3890: add recording rule acm_capacity_effective_cpu_cores #534
OCPBUGS-34833: fix issuer check during JWT authentication #536
Full changelog

tests

OCPBUGS-38859: add api-unreachable-from-client monitor test #29003
WRKLDS-1449: remove create job extended test in favor of the upstream ones #29030
OCPBUGS-38792: Try also user CA for getting openshift-tests image #28990
OCPBUGS-38805: fix: removed grouping flag for jq #29028
NO-JIRA: Expand approvers for origin #29027
WRKLDS-1449: Update etcd test data for 1.31 release #29023
NO-JIRA: Tame some build-log.txt output #29019
NO-JIRA: rename unexpected node unreachable and add unreachable interval #29017
NO-JIRA: apiserver/graceful_termination: simplify condition for “kubelet terminates kube-apiserver gracefully extended” test #29016
NO-JIRA: new test for detecting ungraceful kube-apiserver termination by kubelet #29015
WRKLDS-1431: e2e: extend DC testing to Deployments #28996
NO-JIRA: add important resources to watch #29011
OCPBUGS-38061: add unexpected ready for monitor tests #28989
Revert “IR-471: Skipping chunksizemib tests” #28976
OCPBUGS-38359: NetworkSegmentation tests: fix the IPv6 node IP detection #28997
STOR-1839: run vsphere driver config test on non techpreview clusters #28848
NO-JIRA: create a test that repeatedly rolls out the kube-apiserver and uses m… #28986
NO-JIRA: drop ocp-storage exceptions for termination policy #28793
STOR-1819: Add OpenShift specific CSI certification test #28967
TRT-1723: riskanalysis: pass along errors from API request #28984
SDN-4919: NetworkSegmentation: Add tests for EndpointSlices mirror controller #28945
OCPEDGE-1033: fix: making oslat test more dynamic to handle different cpu sets #28980
OCPEDGE-1182: fix: remove un-needed test #28979
TRT-1688: Revert “allow etcd log test to flake under vsphere” #28978
OCPBUGS-37837: vertical scaling test should not rely on CPMS replicas #28969
OCPBUGS-37986: Revert #28944 “ Reapply \“Merge pull request #28277 from vrutkovs/in-cluster-fixes-v3\ #28977
IR-471: Skipping chunksizemib tests #28975
OCPBUGS-37245: Ignore pod sandbox adds expected to fail #28973
OCPBUGS-18865: Reapply “Merge pull request #28277 from vrutkovs/in-cluster-fixes-v3” #28944
NO-JIRA: Disable:Broken for [sig-builds][Feature:Builds][Slow] can use private repositories as build input build using an HTTP token should be able to clone source code via an HTTP token [apigroup:build.openshift.io] #28968
NO-JIRA: riskanalysis: improve request retries #28961
SDN-4919: Skip network segmentation tests #28964
NO-ISSUE: Automated - Update synthetic test data #28954
OCPBUGS-37675: Add a version command to openshift-tests #28960
NO-ISSUE: Use external binary name on retry #28955
OCPBUGS-35880: fix pod not returning success on ‘Managed cluster should verify that nodes have no unexpected reboots’ #28953
OCPEDGE-1181: bump(ocp/k8s): updating to pull in annotation fix for SNO conformance test #28948
IR-471: Updating the test with skipper function #28947
no-jira: e2e: mark tests as [apigroup:apps.openshift.io] dependent #28951
NO-JIRA: Revert “pathologicalevents: Ignore leaky RecreatingTerminatedPod” #28950
SDN-5133: Add udn test framework #28933
NO-ISSUE: Automated - Update synthetic test data #28914
OCPBUGS-37436: increase telemetry series permitted avg threshold #28943
TRT-1702: record risk analysis results in BQ #28926
OCPBUGS-37411: Revert #28277 “OCPBUGS-18865: add monitortest: in-cluster disruption monitors” #28942
no-jira: e2e: check for deployer RB only when DeploymentConfig is enabled #28941
no-jira: e2e: check for deployer SA only when DeploymentConfig is enabled #28939
OCPBUGS-18865: add monitortest: in-cluster disruption monitors #28277
OCPBUGS-36742: Sync imports #28929
OCPEDGE-1125: upkeep: add better logging for crio failures #28852
NO-JIRA: egressfirewall: skip ping tests in case of hypershift kubevirt on Azure infra #28916
IR-471: Add test for ChunkSizeMiB configuration for Registry #28932
STOR-1961: Fix vSphereDriverConfiguration tests #28936
NO-JIRA: Fail on APIs removed in the next release #28240
OCPBUGS-36672: Shorten stabilization time for etcd profiles test #28930
API-1802: watchevents: add cert rotation events #28639
OCPBUGS-34902: Revert “NO-JIRA: test: skip crio test for rt runs” #28918
OCPBUGS-36403: test/extended/util/openshift/clusterversionoperator/adminack: No nested framework.Fail #28917
NO-JIRA: Always try to pull the the in-cluster test binary #28900
NO-JIRA: fix: update skip logic for watchdog #28920
ETCD-611: update cert rotation tests #28890
Use ephemeral cluster docker config.json for test binary extraction #28873
OCPBUGS-36263: Expand allowance for kubelet metrics api endpoint outages during node upgrades #28911
USHIFT-3455: Skip legacy-etcd monitor tests in microshift #28874
OCPEDGE-800: feat: add SNO upgrade consideration during pathological errors #28903
OCPBUGS-34475: remove unused in-cluster monitoring code #28908
OCPBUGS-36187: Revert #28515 Re-enable test/extended/router/http2 tests on AWS” #28905
OCPBUGS-33486: Removes dependency on samples operator images #28840
OCPBUGS-26601: Re-enable test/extended/router/http2 tests on AWS #28515
NO-ISSUE: Automated - Update synthetic test data #28897
TRT-1718: Add new intervals for kubelet metrics endpoints down #28896
NO-JIRA: Add display flag to the primary EtcdLeadership intervals #28861
OCPEDGE-1157: fix: resolve serial operator availability #28893
OCPBUGS-35535: add Proxy config #28880
Revert “TRT-1691: Revert #28735 “TRT-1576: Fail if operator has Available=False unless in upgrade window”” #28851
USHIFT-3455: Add apigroup to skip a FeatureGate test in MicroShift #28875
NO-ISSUE: fix the node reboot test to actually run #28884
ETCD-578: Fix etcd profiles e2e test to check returned status for upd… #28836
NO-JIRA: use lib-go version of the markdown interface #28707
ETCD-606: Open up the RequiredInstallerResourcesMissing test to more resources. #28866
OCPBUGS-34448: monitortestframework: unsupported monitors should warn, not error #28865
OCPBUGS-34468: art consistency openshift 4.17 openshift enterprise tests custom #28876
trt-1689: Filter must-gather and truncate system node users #28856
API-1783: bump(k8s.io/kubernetes) #28869
NO-ISSUE: Automated - Update synthetic test data #28867
API-1783: Rebase 1.30 #28829
OCPBUGS-33497: Add a “limit” exception for iptables-alerter #28858
TRT-1688: allow test to flake under vsphere #28855
Full changelog

thanos

MON-3967: [bot] Bump openshift/thanos to v0.36.1 #149
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github