4.19.0-ec.4

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.19.0-ec.4-aarch64

Team Approvals:

Tests:

Informing jobs
- aws-ovn-arm64 Succeeded periodic-ci-openshift-multiarch-master-nightly-4.19-ocp-e2e-aws-ovn-arm64
- ovn-upgrade Succeeded (1 retries) periodic-ci-openshift-multiarch-master-nightly-4.19-ocp-e2e-upgrade-aws-ovn-arm64

Upgrades from:

Untested upgrades: 4.18.6, 4.18.7, 4.19.0-ec.0, 4.19.0-ec.1, 4.19.0-ec.2

4.19.0-ec.3 - Failed Success

Loading changelog, this may take a while ...

Changes from 4.19.0-ec.3

Created: 2025-03-28 17:34:10 +0000 UTC

Image Digest: sha256:409f9a10a2af5db0cacd3353a2a5caa5cc22095a2625aa1fef821e922ec60283

Components

Kubectl 1.32.1
Kubernetes upgraded from 1.32.2 to 1.32.3
Kubernetes Tests 1.32.2
Red Hat Enterprise Linux CoreOS upgraded from 419.96.202503032242-0 to 419.96.202503251418-0 (diff)

FeatureGate Changes

FeatureGate	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
DualReplica (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
DyanmicServiceEndpointIBMCloud (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GatewayAPIController (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
SELinuxChangePolicy (0 tests)	Enabled (New)	Enabled (New)
SELinuxMount (6 tests)	Enabled (New)	Enabled (New)
ShortCertRotation (0 tests)	Enabled (New)	Enabled (New)
VSphereConfigurableMaxAllowedBlockVolumesPerNode (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

csi-snapshot-validation-webhook

Rebuilt images without code change

apiserver-network-proxy git 0e116160 sha256:eaf73f4d8a8e207dae257f1a111b2e359758a6b3bda887155ff20cf9b28ad89b
aws-cloud-controller-manager git 425c1c5b sha256:20e87d86345babb8dce93e1d9d769788d22ab7929fd37ba2bb490fd82d3f25a6
aws-cluster-api-controllers git cda3c840 sha256:5d61fd4ada7c9089d779a9e6f8cb777141ab2a8e3bea7434e7e38dcc7f99c12a
aws-kms-encryption-provider git 088dcaf7 sha256:68f9d2ec8f6b530f29bc0dbdb54a93a7eaed132ed1fd3a252b889056fca0c1ff
aws-machine-controllers git d5523dc8 sha256:116c3c0fffdad04914710ee6afddebf1d4e5df99dfd536198342e3ab58e67e6a
azure-kms-encryption-provider git d4fb1b6d sha256:1b40cfe453416e8728e494f95e5849fe75e48974b81415419ab1d881458bfb40
azure-service-operator git 11ced00e sha256:483b6032e76fb7ce7f9bfafbc7f9da79490256a9372689e18c7bbb880c66a5d8
baremetal-cluster-api-controllers git 3e052bfb sha256:6eab05dd39d842d86c38860e8b58483f8ab878cbfa7f6986e41cbda50ce1e1fc
baremetal-machine-controllers git 9abe67f1 sha256:80f625b79972f6cd487b73ac409911c2336ac00f9b9c78b35546d4dbd29dcda0
cluster-authentication-operator git eb6de2ec sha256:ae820379663fe795721378f3691ecf30724acad8de30d289812c6cc7eb125edf
cluster-autoscaler-operator git 227f7537 sha256:9e8f54b0d3cb0f14df2ba8ff5857a3c9941428fd268af86ad4b1d235190e3181
cluster-kube-cluster-api-operator git 3ec30377 sha256:4d31879f8ca7ab6b75bed65b8529f6a3be663c02008a8044bfbdfa7d661767c8
cluster-kube-scheduler-operator git 4210c04a sha256:9917f37416d3f0d62846b9484a4d34b2793fe3da4e3d27c1f37106d88c216f87
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:8dbc98d6c4f9ba8be4821a99c15f322c74d663093a93ee9cb936cde82efe0eaf
cluster-machine-approver git a52da47f sha256:992fc99d7721a42e6f9d6d99628aae62f10958b80c64342c419408bdf6b05eba
cluster-olm-operator git f498726f sha256:03dbd4ab65dff46d4190fcb7cf75263a437886fab996393f78003fb59fafbd7a
cluster-openshift-apiserver-operator git 5f66a3e1 sha256:d354ba903b9bb3af1c450ba5f894965c2d11c22f6a22539fee5e77ecce2c8100
cluster-openshift-controller-manager-operator git 0ab30996 sha256:1db1f8a2171f9041195cff1b5e51b7ea016d33ceebc1425e07896fe17d36f406
configmap-reloader git 9bfbde86 sha256:0fb88a51092fee01f67f88b96d14b8ed770feba152b20844a97bd809896ff4b7
coredns git 7a1451db sha256:4fc1a08dc6e15c424adddd3725c033ac24846298ffc8176e13db1b674df32c37
csi-external-snapshotter git 1fc6ee15 sha256:3195e694594376e80badc61dc2e91a2173943a3b0e653dc18900bf64abe1ee37
csi-livenessprobe git e1566463 sha256:f195c623432fd284932aa1603d7928cadec20fbb547c4d6663568eff1252b14a
csi-node-driver-registrar git 378f5c1b sha256:003a56fd5872de41aef76662f06bc7eff6d22486df116286ae355800f88931e4
csi-snapshot-controller git 1fc6ee15 sha256:1a77322350b3a5888b1ad6665ef94a3b477beeedb628ae722b7852ff581b834d
docker-registry git 1b1c80a9 sha256:3e543fdb1db79e78ddba7381f1ea365b01fb345af602d809ab3b06baa775e811
gcp-cloud-controller-manager git d8d3aeba sha256:78b7edfcbc6c1a97db8f2a3d1a416472d49b97c30a1eebf32aa8a1303f7191d3
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:c9ee26bed7b78531f4a0bc439cc6939084224b524e1defce35eda6604dffea19
haproxy-router git b41f9d05 sha256:75f1ed729aca82c2d32b00451a98fa68d1d4910fad968e310a50647eec8aa15b
ironic-machine-os-downloader git dbe19772 sha256:86e2cb08def14475ed577a7a4cd3e0add5641f2c370979154dff70dd82d7a931
kube-metrics-server git 037a0e7e sha256:8ef9ee45cae114f8938e604bcce6534128f96c4eef7f49a9e1dab5fc5fc32275
kube-rbac-proxy git 59127756 sha256:cf218c10be35ac48a7b4dc7f7fae559cdda361e96de69a18f871ed58e28e60a7
kube-state-metrics git c3da3b5f sha256:d46bc3847553fab6c7e8cd38f901f8ca1f8c8195d529a88f107edbeffee12bd2
kube-storage-version-migrator git 4c521b09 sha256:5aa54b081969ff0bf9c64e25fd6272728e993907b7bde7842af921ccc073a5d4
kubevirt-cloud-controller-manager git 3f4542ec sha256:4558ca8b72d08057954007f421a4c7aaed081379821f58478bb1630685450fc8
kubevirt-csi-driver git ba2234bd sha256:6ab9260dad4713046f9691f08d6c00c0e2fbfb8fc20b71e2fe24902ecd1e9d57
libvirt-machine-controllers git a336f0b5 sha256:dcdc9771ede76a300d250121e9ad032623f6b5d7257e535aa9204b8bf2ef708d
machine-image-customization-controller git d7f86005 sha256:66dd3abaaca6acce210007f00063e940b3f27d97ab73e3c5781bb328fa907c0f
multus-admission-controller git 0b1b812e sha256:2e28b2272c1dc52049e1be53d33a659b248890013c63c20f0c28f5bb05e82585
multus-route-override-cni git 391c1b03 sha256:376803c5d216eeb5da654a114f96bc83871bbad2d628b42ae6e76210b71e2204
must-gather git 33763a32 sha256:a74512a0429332d6e05e03539e553b987a7d57ab71ded16d68f09acd179e901d
network-interface-bond-cni git f575d888 sha256:2d6a584491adba014a0fc2052b4f05e1e74552f79ac7c406ef32334169ae8829
network-metrics-daemon git 5ec8c6bd sha256:7764e5caf80c8840ef48532e5683637395e1b2a1ef457030850a2c36a42ed053
oauth-apiserver git 75914068 sha256:3172624d429e8bb3427d7fd34f0d6a91c4544d75f355f066e7b3c2657392b0cf
oauth-proxy git 3d12ccbe sha256:875bf5371704f6a19cab9484ecd38e5279197e55dcf0e82b85802093595137b3
oauth-server git 7c92a059 sha256:2acc5ce17cd6dd102b975c10588be28114d82904c8a5bd5e62b0d7e3ca8f0b03
openshift-apiserver git 85f6eb27 sha256:0f1454afd8adfc4ae8a413e156dca706259399c7c8419dd2a76e3cb43245524b
openshift-controller-manager git ed3eae5d sha256:81ef0a9ed1e4e179f4ec7c8ed08cc07f0713bd5a6664eb3900b5483e35e61014
openshift-state-metrics git 3106bcc3 sha256:afb1049d248a5d51ddb1f40a6b72e19b6269d603e4b3c80619babb435f530048
openstack-machine-api-provider git d2fce230 sha256:466f925051130baa30f0674abfb8f4fdee798d4ec1bc0414ecc9e9e9bfab5863
openstack-resource-controller git d00bab2b sha256:1af3512b168b8240b6d6a243ebf4a4a137ff761a003cd176c6363f03dbb7aa47
ovirt-csi-driver git 1db726a9 sha256:6998b1224380eacf9dd70fc7caa1a8281a469209c42973326d6d77c346f9b80a
ovirt-csi-driver-operator git c5b83033 sha256:1e7d64d2638273a46e3afb8059a1fa653f3ee256b24c7e05040a11c231e5fc68
prom-label-proxy git 7184f58d sha256:acf85a00232575c5478d3b03ee9f02871dab6675ae24d05d045ecde3748f683b
prometheus-alertmanager git 43131005 sha256:b8b81172a14c91522d3bed72635ee6c3c267b3808d78922b29b627905dc52549
prometheus-config-reloader git 3779c1d5 sha256:e43e3a5df7cc8a82b2d9d64ea14d06c6def3b4f78bef8ec1d024a9fe53663731
prometheus-node-exporter git 57a4e998 sha256:8376f46c1134b6dd0332fe1ed7ec2b2ae3091fd7f550c7791028d7a923f16f4b
prometheus-operator git 3779c1d5 sha256:b340fdd23a535109b9ea1969ea88147bb58f389c367015be0f48da5e164e246c
prometheus-operator-admission-webhook git 3779c1d5 sha256:6cd22fdc8a960150acdc1877f22ce84c39f26b1fe314483d88fb657f15c1f7f2
rhel-coreos sha256:f3e3c46fa69c87171417ed85f7dc318decb07bf45454f7010983c0e1b7ce2598
rhel-coreos-extensions sha256:bd99141a2a41816a1d521ed96670435b1c407ed71156ef2f4782b8fe471d3017
route-controller-manager git bc97534a sha256:f7f8e385ce56537394fa570c0e31225f30c8e8a95f9ad9ce1c6792a39c9bdc48
telemeter git f63fef91 sha256:b1fb08ec45e2c047ee576dc0a6d4c8df5c6c2c73df9d5ad40e9b230a635f043b

agent-installer-api-server

WIP AGENT-538: Add ability for ABI UI to generate kubeconfig (#7391) #7391
MGMT-20149: Add required sast tasks for Konflux (#7441) #7441
NO-ISSUE: Remove eran ifrach account from OWNERS (#7446) #7446
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.13, 4.18, 4.14 (#7443) #7443
MGMT-20155: Add Node Healthcheck Operator alongside with remediation operators (#7436) #7436
OCPBUGS-53031: Bump oauth2 with v0.26.openshift.1 (#7410) #7410
MGMT-19903: Disable ODF and OpenShift AI Operators for Oracle (OCI) (#7341) #7341
MGMT-20183: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#7430) #7430
aantal-MGMT-19423: replacing HighAvailabilityMode with ControlPlaneCount. Some places like updating cluster params HighAvailabilityMode is still needed for backward compatibility. (#7373) #7373
NO-ISSUE: Update Konflux references (#7406) #7406
NO-ISSUE: Fix setuptools issue (#7415) #7415
NO-ISSUE: [master] Bump OCP versions: 4.15, 4.12 (#7408) #7408
NO-ISSUE: Only get the release image during install if it’s necessary (#7390) #7390
NO-ISSUE: [master] Bump OCP versions: 4.17 (#7400) #7400
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#7398) #7398
NO-ISSUE: [master] Bump OCP versions: 4.18, 4.19 (#7397) #7397
MGMT-19830: Enable installation of OCP clusters in vSphere environments with user-managed LB (#7272) #7272
MGMT-19596: Fixing broken KubeAPI tests (#7383) #7383
NO-ISSUE: Fix bug in MTU validation for CMN - validation should pass if all reports are checked (#7386) #7386
MGMT-19832: Fix time out during cluster last finalizing stage (#7372) #7372
MGMT-20099: add nmstate to /v2/supported-operators (#7378) #7378
MGMT-20022: Handle missing ManagedCluster in non MCE environments (#7348) #7348
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.18, 4.17 (#7380) #7380
MGMT-20095: Remove KMM operator from OpenShift AI NVIDIA bundle (#7376) #7376
MGMT-20010: Bump LSO override to 4.19 (#7366) #7366
MGMT-20043: Modify MTU Validation CMN to support multiple machine networks (#7357) #7357
NO-ISSUE: [master] Bump OCP versions: 4.18 (#7374) #7374
MGMT-19840: Gather operational metrics from installercache (#7281) #7281
MGMT-19939: Allow using the rootfs install method to add nodes (#7325) #7325
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-20149: Add required SAST tasks for Konflux (#1064) #1064
NO-ISSUE: Remove Paul account from OWNERS (#1073) #1073
MGMT-20198: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#1066) #1066
NO-ISSUE: Bump github.com/golang/glog from 1.2.0 to 1.2.4 (#1057) #1057
OCPBUGS-52696, OCPBUGS-52704: Bump crpto to v0.33.openshift.1 (#1053) #1053
NO-ISSUE: Update Konflux references (#1051) #1051
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#1049) #1049
Full changelog

agent-installer-node-agent

NO-ISSUE: Remove eran ifrach account from OWNERS (#947) #947
MGMT-20199: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#943) #943
NO-ISSUE: Update Konflux references (#929) #929
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#926) #926
Full changelog

agent-installer-utils

NO-ISSUE: iso_builder: Run appliance without sudo #54
AGENT-1087: Add logging #50
AGENT-1137: Support both –ocp-version and –release-image-url #49
AGENT-1118: Ensure the correct selinux labels are applied to agent tui files #57
OCPBUGS-45505: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.19 #37
AGENT-1147: Update operators #51
AGENT-1087: Support url in appliance-config.yaml #47
AGENT-1119: agent-setup-tui.service typo fix #48
AGENT-1087: Enable agent installer interactive flow #46
AGENT-464: Refactor UI for Rendezvous node IP entry #42
AGENT-1087: load agent tui #44
AGENT-1087: OVE ISO Builder script improvements #40
AGENT-464: Adds form to agent-tui to enter rendezvous IP address #38
AGENT-1087, AGENT-1118: Add script to generate agent-based installer OVE ISO #39
Full changelog

aws-ebs-csi-driver

OCPBUGS-51722: bump golang.org/x/crypto to v0.35.0 #284
OCPBUGS-46994: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #282
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, openstack-cinder-csi-driver-operator

STOR-1877: Run operators without root user control #368
STOR-1880: Role and ClusterRole with too wide permissions #367
OCPBUGS-41827: update injector to use a secret rather than an environment variable #357
NO-JIRA: Fixed typo in README.md #348
STOR-2252: Bump all deps #361
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #363
CFE-1132: EFS Access Point Tags Update DAY2 #313
CFE-1131: AWS Tags DAY2 Update #297
Full changelog

aws-pod-identity-webhook

OCPBUGS-52509: github.com/go-jose/go-jose/v4 v4.0.5 #200
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-50969: UPSTREAM: 8504: Fix GovCloud Config #139
Full changelog

azure-cluster-api-controllers

CNTRLPLANE-105: Add new authentication type UserAssignedIdentityCredentials #333
Full changelog

azure-disk-csi-driver

OCPBUGS-51376: Rebase against v1.32.0 #102
OCPBUGS-51768: UPSTREAM: 2903: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #101
Full changelog

azure-file-csi-driver

OCPBUGS-51782: UPSTREAM: 2395: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #88
Full changelog

azure-machine-controllers

CORS-3883: Allow managed identity from other resource groups #133
Full changelog

azure-workload-identity-webhook

OCPBUGS-52508: github.com/go-jose/go-jose/v4 v4.0.5 #26
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

CORS-3918: Send service endpoint overrides to CAPG through cluster spec #9528
OCPBUGS-53465: Update RHCOS 4.19 bootimage metadata to 9.6.20250321-0 #9593
OCPEDGE-1513: Fixed topology logic for 2-node installs and added unit tests #9579
OCPBUGS-53379: Update RHCOS 4.19 bootimage metadata to 9.6.20250319-0 #9582
AGENT-467: show the agent ui url when available #9584
CORS-3861, CORS-3883, CORS-3937: Azure Machine Identity API #9538
AGENT-537: Run agent installer command to create certificates #9574
OCPBUGS-52959: Issue short lived certificates if ShortCertRotation featuregate is enabled #8784
OCPBUGS-53173: PowerVS: remove TF code #9568
no-jira: add dev docs for bumping CAPI provider version #9567
OCPBUGS-53183: Avoid adding duplicate entries to NO_PROXY #9573
SPLAT-2078: Removed VSphereStaticIPs feature gate #9560
OCPBUGS-53280: PowerVS: Re-enable disconnected installs #9551
AGENT-537: Add agent command to generate certificates #9557
OCPBUGS-39146: Validate sgdisk partition start in image based installer config #9541
AGENT-1113: additional refinement for loading the agent UI #9565
SPLAT-2072: Removed VSphereMultiVCenters feature gate #9553
OCPEDGE-1513: feat(topologies): add DualReplica topology mode #9534
OCPBUGS-45692: Modified ova template name to use failure domain name #9300
OCPBUGS-50552: Power VS: Disallow clusterOSImage install-configuration parameter #9417
NO-JIRA: OWNERS: add thuan #9555
OCPBUGS-51209: Changed kernelFileType name from kernel.img to vmlinuz for s390x #9533
OCPBUGS-6271: Adding VIPs Validation for agent based vsphere installation #9532
AGENT-1113: enhance the unconfigured-ignition command to support the interactive workflow #9529
OCPBUGS-33370: Improve baremetal gather error message #9120
OCPBUGS-36553: VSphere: add vips to machinenetwork #9526
OCPBUGS-49737: Custom-DNS: Update master and worker user data secrets #9451
CORS-2508: aws: remove unused autoscaling:DescribeAutoScalingGroups perm #9223
OCPBUGS-51378: Change vsphere conversion govmomi err to be clear #9524
CORS-3278: Bump IBM Cloud CAPI to v0.10.0 #9523
OCPBUGS-44840: Mount the user-ca-bundle into ICC #9227
OCPBUGS-50637: Remove error logging when determining image arch #9531
OCPBUGS-51171: aws: add ec2:ReplaceRoute permission #9525
OCPBUGS-47724: AWS: Copy static MCO resources needed for custom-dns #9489
OCPBUGS-49623: IBMCloud: Missing ca-mon region due to static region list #9421
OCPBUGS-47681: Support regions only available in v2 of the aws sdk #9383
OKD-235: Add stream metadata for scos to be used by OKD #9520
OCPEDGE-1635: Set default values for arbiter #9530
OCPBUGS-39583: Remove tmp directory used for agent pxe files #9527
No-ISSUE: (dep) Bump openshift/api #9522
CORS-3917: Add install config validation for service endpoints #9517
NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer #9515
OCPBUGS-51350: PowerVS: Extra network routes for disconnected install #9510
NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage #9508
OCPBUGS-50961: Power VS: Log accurate error when deploying Internal with no vpcName #9497
SPLAT-1995: vsphere on destroy remove cns volumes #9425
OCPBUGS-47459: IBMCloud: CAPI add permitted network #9397
OCPBUGS-47652: IBMCloud: Set CAPI boot volumes #9385
CORS-3869: static validation for new vpc.subnets field #9505
OSASINFRA-3695: openstack: Create security group rules in batches #9042
OCPBUGS-46051: IBMCloud: Fix CAPI AZ handling #9415
Full changelog

baremetal-operator

OCPBUGS-53233: Sync mar 18 #403
NO-ISSUE: Upstream Sync Mar 10 #401
OCPBUGS-52215: Bump x/oauth2 to 0.27.0 #400
Full changelog

baremetal-runtimecfg

OCPEDGE-1689: Include Arbiter nodes in the API backends if there is only one master #344
OCPBUGS-48469: Include cloud platform specific parameters to argument list for corednsmonitor #341
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-54168: Use ProxyFromEnvironment when creating HTTP transport #1995
NO-JIRA: debug: suggest nsenter instead of chroot #1991
OCPBUGS-53389: Use fedora image in unit tests instead of centos #1992
OCPBUGS-23514: status: Adjust impact summary for Failing=Unknown #1989
OCPBUGS-52504: pkg/cli/admin/upgrade/recommend: Populate RESTConfig #1987
Full changelog

cloud-credential-operator

NO-JIRA: Report the error when syncing STS secrets #827
OSASINFRA-3657: Add support for storing OpenStack CA bundles #780
OCPBUGS-52505: golang.org/x/oauth2 v0.28.0 #821
CCO-647: Enable readOnlyRootFilesystem on all containers #819
OCPBUGS-52507: github.com/go-jose/go-jose/v4 v4.0.5 #823
NO-JIRA: Add dry-run on aws create-all command #818
NO-JIRA: add example of how to build from source #820
Full changelog

cloud-network-config-controller

OCPBUGS-53201: Revert “CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller” #164
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #161
SDN-5690: Rebase k8s to 1.32 #163
Full changelog

cluster-autoscaler

OCPBUGS-11115: improve failed machine detection in clusterapi #347
OCPBUGS-11115: make DecreaseTargetSize more accurate #343
OCPBUGS-11115: improve replica counting on openshift #278
Full changelog

cluster-baremetal-operator

OCPBUGS-52216: Bump x/oauth2 to 0.27.0 #463
OCPBUGS-51275: Add new resources to controller relatedObjects #465
OCPBUGS-44839: Mount the user-ca-bundle into ICC #455
Full changelog

cluster-bootstrap

OCPEDGE-1683: feat: add support for arbiter and dual replica: #116
Full changelog

cluster-capi-controllers

OCPCLOUD-2860: Enable propagation of Machine annotations to Nodes #233
OCPCLOUD-2680: Enable machine to node propagation #229
Full changelog

cluster-capi-operator

NO-JIRA: fix: e2e: azure conditionally set identity #276
TRT-2048: Revert “OCPCLOUD-2792: corecluster: set controller level conditions + tests” #273
OCPBUGS-53057: Fix misspelled CAPI IBMPowerVSCluster kind name in corecluster generation logic #266
OCPCLOUD-2858: Bump dependencies to CAPI v1.9.z #270
NO-JIRA: Update TODOs with new Jira issues #269
OCPCLOUD-2718: Add default VolumeSize for MAPI to CAPI conversion #260
OCPCLOUD-2792: corecluster: set controller level conditions + tests #256
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-41827: update injector to use a secret rather than an environment variable #380
Full changelog

cluster-config-api

Migrate DeepCopy and Compatibility gen to Gengo v2 #1776
CCXDEV-10455: update insightsDataGather to v1alpha2 with GathererConfig #2195
API-1843: FeatureGate(d) KMS encryption #2035
CONSOLE-4448, OCPBUGS-53412: Add the ability to specify a second custom logo for PatternFly 6 #2177
MCO-1521: Promote PinnedImageSet to GA #2198
Remove inactive reviewers and ex-Red Hatters from OWNERS, add everettraven #2238
Update KAL and remove patch strategy tags #2241
STOR-2141: add MaxAllowedBlockVolumesPerNode field to VSphereCSIDriverConfigSpec #2190
MCO-1590: Add explicit opt-out & status field for boot image update configuration #2223
API-1689: features: add ShortCertRotation #1977
NE-1954: Introduce GatewayAPIController feature gate #2219
CCXDEV-14850: insights add storage spec #2200
Support SEV_SNP and TDX confidential instance type selection on GCP #2165
OCPBUGS-48641: config/v1/types_cluster_version: Explain image and version both set #2158
OCPEDGE-1512: feat: add dualreplica featuregate #2196
STOR-2267: Add SELinuxMount and SELinuxChangePolicy to DevPreview #2212
Add changes to infrastructure object to contain service endpoints and feature flag added #2078
Full changelog

cluster-config-operator

OCPEDGE-1643: bump: ocp/api ocp/library-go k8s #431
Full changelog

cluster-control-plane-machine-set-operator

OAPE-147: Add E2E tests for MachineNamePrefix with OnDelete update strategy #353
OCPBUGS-52224: Bump to golang.org/x/oauth2@v0.27.0 #352
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2281: Remove csi-snapshot-validation-webhook references #231
OCPBUGS-24588: bump library-go #233
STOR-2252: Bump all deps #228
Full changelog

cluster-dns-operator

OCPBUGS-51193: Add runbook_url for CoreDNSErrorsHigh #426
Full changelog

cluster-etcd-operator

OCPEDGE-1500: Added scaling strategies for TNF #1396
Full changelog

cluster-image-registry-operator

CNTRLPLANE-112: Bump msi-dataplane dependency #1187
CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication #1186
Full changelog

cluster-ingress-operator

NE-1934: Bump to OSSM 3.0 for Gateway API support #1152
CORS-3907: Update ingress operator to with custom endpoints #1197
NE-1953: Add experimental Gateway API group to Validating Admission Policy #1200
NE-1907: Manage OSSM operator subscription manually to ensure a compatible version is installed #1112
NE-1981: Move controller test helpers to dedicated package #1199
NE-1953: Add Validating Admission Policy for Gateway API CRDs #1192
NE-1954: Implement GatewayAPIController feature gate #1198
NE-1936: Bump k8s.io dependencies to v0.32.1 #1184
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-35102: Bump library-go #1824
Full changelog

cluster-kube-controller-manager-operator

STOR-2267: Run SELinux warning controller #834
Full changelog

cluster-monitoring-operator

MON-4188: Add docs for proxy_url alertmanager #2582
NO-JIRA: [bot] Synchronize versions of the downstream components #2577
MON-4189: Updating node-exporter accelerators configmap #2558
MON-4043: Configuring external Alertmangers with proxy_url #2580
MON-4136: set up the PrometheusPossibleNarrowSelectors alert #2554
MON-3960: test: enable back TestTLSSecurityProfileConfiguration and m… #2545
NO-JIRA: chore: versions: kubeRbacProxy’s primary branch isn’t main yet #2574
OU-515: remove old nginx configmap deletion #2575
Full changelog

cluster-network-operator

OCPBUGS-52280: Move to use newer IPsec DaemonSets irrespective of MCP state #2454
CNTRLPLANE-112: Update managed Azure HCP cloud network config #2647
OCPBUGS-52972: Correct namespace ref and cert dir #2665
NO-JIRA: ovn-k: sync EgressService with upstream #2664
OCPBUGS-52361: frr-k8s: rename validatingwebhook name #2659
Full changelog

cluster-node-tuning-operator

CNF-16638: Reduce code duplication of RPS enabled checks (#1301) #1301
Add observedGeneration to Profile status (#1305) #1305
Manage TuneD profiles with the same name and different content (#1216) #1216
OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) #1303
NO-JIRA: PPC: unit: test sortTopology for expected output (#1217) #1217
Switch builder image to multi-arch image (#1297) #1297
Full changelog

cluster-policy-controller

CNTRLPLANE-55: Add MinimallySufficientPodSecurityStandard annotation to namespaces #161
Full changelog

cluster-samples-operator

OCPBUGS-54149: Updates to README.md #613
OCPBUGS-52848: Unrevert the revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #609
OCPBUGS-52848: Unrevert the revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #608
OCPBUGS-52848: Revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #606
OCPBUGS-52848: Revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #607
OCPBUGS-52379: relevant references to master renamed in README.md #603
OCPBUGS-52346: bump x/oauth2 to version 0.27.0 #602
OCPBUGS-45049: Adding mutex to func createSamples on handler.go #601
Full changelog

cluster-storage-operator

STOR-1881: Role and ClusterRole with too wide permissions #569
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #568
OCPBUGS-24588: bump library-go #566
STOR-2252: Bump all deps #554
CFE-1131: Added token minter Sidecar for aws-ebs hypershift-deployments #528
Full changelog

cluster-update-keys

NO-JIRA: Updating openshift-ci-release-key for 2 years #70
Full changelog

cluster-version-operator

OTA-1403: Move the CVO CLI Application to a Separate Folder #1169
OTA-209: Add CVOConfiguration controller #1163
OTA-1427: Reconcile all nodes via a special event #1164
OCPBUGS-52258: pkg/cvo/updatepayload: Context around ValidateDirectory calls #1166
NO-JIRA: Use k8s.sets for the fields of ClusterCapabilities #1159
Full changelog

console

(chores) Add approvers #14895
OCPBUGS-52864: Edit form for key/value secrets should be showing decoded base64 values. #14852
ODC-7773: Add e2e tests for Favorites feature #14802
CONSOLE-4437: Add CSP test to the test-prow-e2e.sh #14858
RHSTOR-6927: Removes LSO static plugin from console #14740
OCPBUGS-53119: Add support for extensibility in SnapshotClass and StorageClass pages #14878
OCPBUGS-52489: Fixed the typo ‘enivornments’ on tour page #14857
CONSOLE-4081: Refactor EditSecret component #14853
OCPBUGS-53030: Fix type-only dynamic module import build warnings for plugins #14861
CONSOLE-3960: Migrate react-helmet to react-helmet-async #14876
CONSOLE-3247: Remove react-measure #14844
OCPBUGS-34737: Disable pipeline ci tests due to failure in task creation #14893
OCPBUGS-53103: Apply plugin-api-changed label to plugin SDK shared modules #14872
ODC-7776: Add getting started alert #14830
ODC-7766: Test updates pertaining to perspective merge #14717
CONSOLE-4515, CONSOLE-4516, CONSOLE-4517: Update react-modal, react-tagsinput #14874
OCPBUGS-53118: Include init containers in readiness count if ready and started is true #14877
CONSOLE-4461: Notification drawer move to Page props, fixing the small overlap on the notification drawer #14723
OCPBUGS-45847: Remove barrel file references in static plugin exposedModules #14683
OCPBUGS-52589: Fix hooks in CaptureTelemetry #14870
CONSOLE-3414: Fix flaky Loading tests #14873
OCPBUGS-53047: Disable guided tour in admin perspective #14866
OCPBUGS-52166: Fix sort function on Access review table #14848
OCPBUGS-52589: update @types/react to v17, use new JSX transform #14864
ODC-7775: Update content in Getting started resources on cluster and project overview page #14829
OCPBUGS-52325: fix Node Logs toolbar layout at mobile #14836
CONSOLE-4430: Content Security Policy E2E testing with Puppeteer & Chrome #14675
CONSOLE-3414: Replace Loading with PF Spinner #14842
ODC-7727: Add hover effect to favourites icon #14839
CONSOLE-4504: set LogViewer theme using console’s theme #14827
OCPBUGS-48491: Namespace is not persisting when switching to developer view from the topology page of admin page #14812
OCPBUGS-49348: Fix Secret form drag and drop issue #14798
OCPBUGS-37101: Remove logoutOpenShift method call #14658
OCPBUGS-52316: enable clicking outside NodeLogs Selects to close them #14826
OCPBUGS-52214: add missing v5 patternfly-addons.scss and patternfly-charts.scss styles #14813
CONSOLE-4409: Update monaco theming and sidebar logic #14835
CONSOLE-4503: Replace custom Banner with PatternFly equivalent #14825
OCPBUGS-52298: Add breadcrumbs to ODC Project details page #14824
OCPBUGS-51372: Filter ‘Name’ on resource list page doesn’t align well when language is set to Chinese/Japanese/Korean #14822
ODC-7727: Favoriting page in the Console admin perspective #14765
OCPBUGS-51355: VolumeSnapshots are not displayed in OpenShift Web Console #14820
CONSOLE-4498: Replace checkboxes with Switch in ResourceLog #14815
OCPBUGS-30973: Remove @ts-ignore comment missed in #14680 #14814
CONSOLE-4496: Replace custom Checkbox filter with PatternFly Switch #14807
OCPBUGS-51037: Update the monitoring topic used by the console team #14781
OCPBUGS-50650: Retain original path when detecting perspective #14810
CONSOLE-4407, CONSOLE-4409: Update monaco and YAML language server, use PF6 CodeEditor #14663
OCPBUGS-51076: Console UI Displays Incorrect Subscription Values #14790
CONSOLE-4399: Added ‘createdTime’ in Jobs.tsx #14786
OCPBUGS-48413: Sorted Links based on OS in CLI #14819
Full changelog

console-operator

NETOBSERV-2029: add netobserv ConsoleCLIDownload #958
OCPBUGS-53164: Add annotations to Enable developer perspective quick start to include in the console quick starts #970
ODC-7723: Add quick start to enable developer perspective #968
CONSOLE-4508: Enable CSP e2e test #969
OCPBUGS-51256: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #965
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-53198: Sync 25-03-2025 #177
OCPBUGS-45272: Ds merge 3/7/25 #175
OCPBUGS-48190: Ds merge 2/5/2025 #173
Full changelog

csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, kube-proxy, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

OCPBUGS-45273: Properly annotate networking skip according to Jira ticket #2235
OCPBUGS-53014: Bump 1.32.3 #2241
TRT-1854: translate test annotations to use: include/exclude CEL, labels, filtering #2215
STOR-2285: UPSTREAM: <carry>: Add volume group snapshot test driver #2232
OCPBUGS-44693: Revert “disable ResilientWatchCacheInitialization feature” #2192
OCPBUGS-52477: Revert #2229: Initialize testContext before enumerating tests #2236
NO-JIRA: Initialize testContext before enumerating tests #2229
UPSTREAM: <carry>: OCPBUGS-45274: Enable PodRejectionStatus test #2231
OCPBUGS-45274: UPSTREAM: 130097: Modify how to check the status #2228
Full changelog

csi-external-attacher

OCPBUGS-41719: UPSTREAM: 624: Reorder API calls after successful detach #82
Full changelog

csi-external-provisioner

OCPBUGS-51561: bump golang.org/x/crypto to v0.36.0 #112
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #113
OCPBUGS-49805: Fix the managed-by-label getting populated with invalid value #110
Full changelog

csi-external-resizer

STOR-2251: Rebase external-resizer to upstream v1.13.2 for OCP 4.19 #169
Full changelog

docker-builder

OCPBUGS-43812: Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 #458
Full changelog

driver-toolkit

test/e2e: adapt for layered node image (#167) #167
Full changelog

egress-router-cni

OCPBUGS-53096: Build openshift container based on 4.19 image #89
Full changelog

etcd

OCPBUGS-52181: Ensure cluster id changes during force-new-cluster #313
OCPBUGS-50510: Add configurable option for hardware-related timeout delay #311
OCPBUGS-45488: Updating ose-etcd-container image to be consistent with ART for 4.19 #306
ETCD-717: Rebase etcd 3.5.19 openshift 4.19 #315
Full changelog

gcp-cluster-api-controllers

OCPCLOUD-2856: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.9.0 (b822ce2) into master #239
Full changelog

gcp-machine-controllers

CORS-3906: Update MAPI GCP Provider to use custom GCP endpoints #111
OCPCLOUD-2882, OCPCLOUD-2889: Provision AMD SEV-SNP and Intel TDX confidential instances #110
Full changelog

gcp-pd-csi-driver

STOR-2257: Rebase to upstream v1.17.4 for OCP 4.19 #75
Full changelog

gcp-pd-csi-driver-operator

NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #140
STOR-2252: Bump all deps #139
Full changelog

hypershift

CNTRLPLANE-111: Authenticate to Azure only once in CPO #5862
OCPBUGS-52190: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #5876
NO-JIRA: Make serve-containerised in docs not defaulting to a running Docker container when Podman is installed #5859
OCPBUGS-53263: Fixed cpov2 reconciliation making no-op calls to api-server #5861
OCPBUGS-53462: Check for availability of individual catalog images #5881
NO-JIRA: Improve error output msg for Azure CLI role cmds #5877
STOR-2281: Remove csi-snapshot-validation-webhook #5776
CNTRLPLANE-111: Fix KMS Azure credentials mount path #5857
CNTRLPLANE-348: Konflux tagged releases #5869
OCPBUGS-53407: chore(deps): update konflux references #5846
NO-JIRA: feat(builds): Add area labels and OWNERS #5872
OCPBUGS-52424: Set shutdown watch termination grace period on kube-apiserver #5760
NO-JIRA: Add Azure scheduler doc to mkdocs #5865
CNTRLPLANE-342: Add missing area for support #5864
OCPBUGS-53050: Handle multiple mirror entries for source #5827
OCPBUGS-52331: CPO v2: rollout workloads on any changes to mounted configmaps/secrets #5767
NO-JIRA: openstack: revert OpenStackImageRetentionPolicy + use a unique image name per Hosted Cluster #5853
Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure” #5860
OCPBUGS-53083: e2e: detect leader election failure in restarted pods #5830
CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure #5837
METAL-1240: Fix kube-controller-manager and openshift-route-controller-manager services’ ipFamilies wrt PreferDualStack policy #5829
OSASINFRA-3492: feat(openstack): leverage ORC to manage the release image #5139
CNTRLPLANE-325: rootless containerized builds #5835
CNTRLPLANE-265: Enable gosimple, govet, and errcheck in golangci-lint #5759
CNTRLPLANE-111: Fix Azure KMS SecretProviderClass volume name #5820
NO-JIRA: Bump msi-dataplane dependency #5796
OCPBUGS-52985: filter watch events for HO AWSEndpointService reconciler #5818
NO-JIRA: Update Konflux references #5799
ARO-14354, ARO-14355, ARO-14356: introduce image registry capability behind feature gate #5456
OCPBUGS-52819: CPO Overrides for OCPBUGS-48519 #5808
PODAUTO-324: PODAUTO-325: Allow autonode to run upstream karpenter core e2e tests #5680
OCPBUGS-51364: fix oc patch command on doc #5807
NO-JIRA: Fix-dependabot-bumps #5797
OCPBUGS-52655: Add flag to set etcd storage size #5795
CNTRLPLANE-111: Fix KMS MIv3 Issues #5793
NO-JIRA: Disable GitHub Actions #5812
OCPBUGS-52821: stop using dev mode for loggers #5801
HOSTEDCP-2237: Auto approve Karpenter serving CSRs #5708
OLS-1370: Add full aws permission list and point to it from “getting started” #5746
NO-JIRA: CPOv2 token-minter abstraction #5769
NO-JIRA: test/e2e: skip WaitForImageRollout in executeNodePoolTest on newer releases #5778
OCPBUGS-52323: Make managed-trust-bundle optional #5763
CNV-57648: document how to configure descheduler #5779
NO-JIRA: Remove WI step for cluster-image-registry-operator #5777
OTA-1405: Add the ClusterVersionOperator API #5569
OCPBUGS-52419: e2e: don’t call WaitForImageRollout in executeNodePoolTest #5771
OCPBUGS-50518: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5475
CNTRLPLANE-263: Remove unused CAPZ CRDs from HyperShift install #5756
NO-JIRA: speed up image builds #5766
NO-JIRA: go.mod updates from Konflux #5761
OSASINFRA-3733: (follow-up) deploy ORC on release payload >= 4.19 #5749
OCPBUGS-52223: refactor aws identity health check into new controller #5751
OCPBUGS-50523: Fix audit-logs container to properly handle SIGTERM #5491
NO-JIRA: Remove issues-exit flag for golangci-lint #5762
CNTRLPLANE-111: Enable MIv3 for CP/CCM in managed Azure HCP #5755
NO-JIRA: Add CPO container sync check to GitHub Actions #5753
OCPBUGS-52226, OCPBUGS-52227: CVE Fix for potential denial of service in upstream libs #5750
NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 #5719
HOSTEDCP-2242: [CPOv2 Refactor] Refactor image-registry-operator #5676
Full changelog

insights-operator

NO-JIRA: refactor gather commands (#1076) #1076
NO-JIRA: feat: add gatherer name validation to gendocs (#1075) #1075
fix: allow running enabled functions from disabled gatherer (#1077) #1077
Full changelog

insights-runtime-exporter, insights-runtime-extractor

New runtimes tests #40
SB 3.4.3 test app and 3.1.4 app simplified #39
plain-java runtime sample #38
Full changelog

ironic

NO-JIRA: Sync with upstream metal3/main 2025-03-24 #650
METAL-1297: Update ironic-image to the latest commit hash #644
METAL-1299: Do not use openstack packages #645
Full changelog

ironic-agent

METAL-1299: Do not use openstack packages #177
METAL-1297: Update commit hash of ironic-python-agent #176
Full changelog

machine-api-operator

SPLAT-2078: Removed VSphereStaticIPs feature gate #1346
SPLAT-2060: Create e2e tests for vSphere Data Disk feature #1338
OCPCLOUD-2882, OCPCLOUD-2889: support AMD SEV_SNP and TDX confidential computing machines on GCP #1326
Full changelog

machine-config-operator

NO-ISSUE: MCN changes for API validation #4949
OCPNODE-2340: update (Cluster)Imagepolicy PKI config to policy.json #4886
OCPBUGS-52827: Fixing typos for MachineConfigNode #4914
OCPBUGS-51130: In OCL. Cannot install extensions #4870
OCPBUGS-52280, SDN-5330: Add ipsec connect wait service #4854
OCPNODE-2842: Set Upgradeable=False when cluster is on cgroup v1 #4822
“NO-ISSUE: ensure that client configs are not mutable” #4915
MCO-1501: Add support for custom MCPs in MCN #4876
OCPBUGS-53085: Add scc label to arbitor crio-metrics-proxy #4912
OCPBUGS-51150: daemon: ensure ostree-finalize-staged is started before rebooting #4907
OCPBUGS-44185: Race in configure-ovs.sh affects bonding interface configuration. #4609
OCPBUGS-52213: Update ObservedGeneration in KubeletConfig #4900
RHEL-79554: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4866
MCO-1485: MCO:1486: MCO-1324: Attempt stub Ignition upgrade #4885
MCO-1537: Add MCDRebootError runbook to prometheus rules #4895
NO-JIRA: Update the MCS iptables debug command in docs #4896
OCPBUGS-43896: add revert logic to OCL path in MCD #4825
MCO-1515: Kube bump to 1.32 #4797
Full changelog

machine-os-images

NO-JIRA: Change to new host #54
Full changelog

metallb-frr

Align to upstream #79
Syncoperator03032025 #78
Full changelog

monitoring-plugin

OU-700: don’t show metrics links in acm perspective #367
COO-768: add plugin proxy to perses proxy path #365
COO-759: update datasource whenerver the csrf token changes #363
RHINENG-12634: incident utils typescript conversion #359
CNV-55987: Aggregated alerts #348
COO-684: add mui/material as is required as peer dependency #360
OU-681: fix typo in the predefined metrics list #358
OU-499: remove deprecated components #356
Full changelog

multus-cni, multus-cni-microshift

TRT-2057: Properly structure empty CNI result #267
OCPBUGS-54153: Ds merge ³⁄₂₄ #264
OCPBUGS-53087: Tolerate issues writing network status annotation on CNI ADD #263
Full changelog

multus-networkpolicy

Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.19 (#67) #67
OCPBUGS-44354: Sync 20250204 (#66) #66
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-52415: replace entrypoint #349
Full changelog

network-tools

NO-JIRA: Add Peng #138
Full changelog

networking-console-plugin

add adam to the approves #223
CNV-56305: upgrade Network UI to PatternFly 6 #221
CNV-58015: fix delete label row #224
Upgrade dockerfile for node 18 and 4.19 #222
Full changelog

oc-mirror

OCPBUGS-52960: v2: fix setting version during build (#1109) #1109
OCPBUGS-52978: delete: fix typo in –help output (#1115) #1115
OCPBUGS-52969: remove TechPreview mentions of v2 in –help (#1110) #1110
OCPBUGS-52588: fix: error when no related image was found (#1105) #1105
OCPBUGS-50680: v2/operator: refactor operator FilteredCollector (#1093) #1093
no-jira: v2/manifest/oci-manifest: refactor and dedup the code (#1098) #1098
v2: filter wrapcheck warnings for oc-mirror (#1104) #1104
OCPBUGS-51328: Fix CVE-2025-27144 (#1097) #1097
CLID-325: adds cpu and memory profiling (#1100) #1100
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #299
NO-ISSUE: Synchronize From Upstream Repositories #298
NO-ISSUE: Synchronize From Upstream Repositories through PR1871 #294
OCPBUGS-23055: Synchronize From Upstream Repositories through PR1811 #290
NO-ISSUE: Synchronize From Upstream Repositories #285
Full changelog

openstack-cinder-csi-driver, openstack-cloud-controller-manager

NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into master #311
Full changelog

openstack-cluster-api-controllers

Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #361
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #360
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #986
NO-ISSUE: Synchronize From Upstream Repositories #984
NO-ISSUE: Synchronize From Upstream Repositories #966
NO-ISSUE: Update DOWNSTREAM owners files #973
OCPBUGS-42526: Ensure that PSA label is latest instead of pinning versions #972
Full changelog

operator-marketplace

OPRUN-3818: Bump sigs.k8s.io/controller-runtime from 0.20.2 to 0.20.3 #611
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.23.0 #605
NO-ISSUE: Bump github.com/onsi/gomega from 1.36.1 to 1.36.2 #608
NO-ISSUE: Upgrade github.com/operator-framework/api from v0.23.0 to v0.30.0 and github.com/prometheus/client_golang v1.21.0 => v1.21.1 #598
NO-ISSUE: Add dependabot to help keep the project maintained #599
OCPBUGS-52340: Ensure that PSA label is latest instead of pinning versions #600
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-48678: Update OVN to FDP25.A.1 24.09.2-41 #2493
Full changelog

prometheus

OCPBUGS-53025: Scraping: Bump cache iteration after error to avoid false duplicate detection. #245
Full changelog

service-ca-operator

OCPBUGS-48171: Update go 1.23 and ocp 4.19 #254
Full changelog

tests

OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.redhat.com to redhat.com #29618
CNTRLPLANE-5: Fix decoding of CBOR data in etcd test #29614
SDN-5768: virt, udn: use l2bridge binding #29439
OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.openshift.com to docs.redhat.com after docs migration #29604
CNTRLPLANE-5: Decode CBOR data in etcd test #29601
MCO-1594: updates for ManagedBootImageStatus #29598
SDN-4168: Fix IPsec tests for monitor failures #29437
TRT-2026: validate that the binary extraction was successful via existence check #29595
OSD-26270: re-enabled managed-upgrade-operator test by removing exclusion #29585
NO-ISSUE: Automated - Update synthetic test data #29570
NO-ISSUE: replace hardcoded ClusterVersionCapability string in olmv1 tests #29577
TRT-1575: Fail the test when an expected operator goes to degraded #29566
OCPBUGS-52578: Use payload pullspec for image info test #29586
OCPBUGS-51373: use non-fake boot image for patch #29574
Full changelog

thanos

MON-4139: feat: replace github.com/prometheus/prometheu dep with one having an xtra check in the parser to help identify le/quantile selectors misuses in Prometheus v3 #158
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github