Back to index
4.12.0-0.okd-scos-2023-03-23-213604 Download installer and client with:
oc adm release extract --tools quay.io/okd/scos-release:4.12.0-0.okd-scos-2023-03-23-213604 Qualifiers (status api ): None
No tests for this release
Upgrades from:
Loading changelog, this may take a while ...
Created: 2023-03-24 10:13:30 +0000 UTC
Image Digest: sha256:dccb04bec6bfb4a5eef60ea2375c66428c06ccf5f893c32f425c73e05256bad4
Release 4.12.0-0.okd-scos-2023-03-23-213604 was created from registry.ci.openshift.org/origin/release-scos:4.12.0-0.okd-scos-2023-03-23-213604
Components
Rebuilt images without code change
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10946
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.22, 4.20 #10942
ACM-41555 : Enable PQC in Dockerfiles #10901 MGMT-25131 : When getting the release image for a cluster we should always prioritize cluster.OcpReleaseImage if it’s set #10938 NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10941
NO-ISSUE: [master] Bump OCP versions: 5.0 #10937
APPSRE-14688 : remove legacy monitoring.coreos.com/v1 ServiceMonitors #10931 NO-ISSUE: [master] Bump OCP versions: 4.17, 5.0 #10924
OCPBUGS-120683 : Fix NUMAResourcesOperator CR name so it can be applied #10910 NO-ISSUE: Update operator bundle channel to ocm-5.1 #10867
OCPBUGS-120675 : added missing subscription name for lvms-operator #10909 AGENT-1529 : Add ovnKubernetesConfig to install-config definition #10430 NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10912
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.16, 4.21 #10907
NO-ISSUE:Bump go.opentelemetry.io/otel to v1.44.0 in master #10869
MGMT-25130 : assisted-service and assisted-image-service NetworkPolicy ingress has no source restriction (any pod in any namespace can reach them directly) #10906 NO-ISSUE: Modify Konflux YAMLs to ocm-5.1 #10874
MGMT-25139 : Allow setting os-stream on both clusters and infraenvs #10742 MGMT-20398 : Force status on bmh after install #10606 NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10884
MGMT-24877 : Improve sensitive credential redaction #10857 OCPBUGS-29975 : Allow multiple machine networks for UMN clusters #10817 MGMT-21334 : Don’t check ImageSetRef for installed clusters #10854 NO-ISSUE: Add missing Close() #10856
MGMT-24693 : fix e2e-ai-operator-disconnected-capi #10806 ACM-42573 : Assisted services’ networkpolicy doesn’t work for external image service and local image registry in disconnected environment #10850 MGMT-25066 : Add continuous node label reconciliation in InfraEnv controller #10813 NO-ISSUE: Refresh RPM lockfiles [SECURITY] #10829
MGMT-25065 : Add InfraEnv to Agent node label propagation #10812 NO-ISSUE: Add same-namespace egress for image-service to assisted-service #10816
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.17, 4.22, 4.19, 4.18, 4.14, 4.16, 4.20 #10804
ACM-40452 : CVE-2026-33815 Bump github.com/jackc/pgx/v5 to v5.9.0 #10783 ACM-40510 : Fix infrastructure-operator NetworkPolicy egress to kubernetes API #10792 NO-ISSUE: Update oc-mirror locations to CGW following openshift release decoupling #10601
ACM-40436 : Bump Go toolchain to go1.26.5 to fix stdlib CVEs #10770 OCPBUGS-93750 : Bump github.com/moby/moby to v28.5.2 #10680 MGMT-24827 : Resource-scoped auth for urlAuth endpoints #10667 MGMT-24831 : Add ntpSources field to InfraEnv and AgentClusterInstall CRDs #10756 ACM-30180 : Honor cluster TLS security profile in Infrastructure Operator #10734 NO-ISSUE: [master] Bump OCP versions: 4.22 #10735
MGMT-24939 : (assisted-service) Upgrade operator-sdk from v1.10.1 to v1.42.3 (kubebuilder v3→v4 migration) #10716 NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 5.0 #10733
MGMT-24903 : Fall back to CoreOS image from worker ignition for day-2 persistent-boot #10717 MULTIARCH-6274 : agent: Enable platform external s390x #10424 MGMT-24352 : Reset finalizing timeout on transition from installing-pending-user-action #10293 OCPBUGS-97919 : fix: use typed credentials key to support MAC-based fencing in ABI flow #10477 ACM-38238 : Assisted-installer repos: Set Up Set up Renovate configuration to automatically create Hive API Synchronization PRs #10711 OCPBUGS-91733 : manifest_generator add a label to LUKS root #10676 NO-ISSUE: [master] Bump OCP versions: 4.18, 4.19 #10724
NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh [SECURITY] #10718
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.21, 4.22 #10715
NO-ISSUE: [master] Bump OCP versions: 4.13, 4.18, 4.19 #10710
ACM-35865 : CVE-2026-39828 Bump golang.org/x/crypto to v0.52.0 using replace directive (client module) #10617 MGMT-23744 : CVE-2026-33997 Bump docker/docker to v28.5.2 #10685 NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.22, 4.21, 4.19, 4.20, 4.18 #10692
MGMT-24667 : Fix disconnected ZTP spoke installs for OCP 5.0 OSImageStream images #10527 MGMT-24699 : Assisted Service IPv6 CIDR comparison may fail with non-normalized CIDRs #10569 MGMT-24327 : upgrade assisted-service postgresql from 15 to 16 #10519 ACM-35865 : CVE-2026-39828 Bump golang.org/x/crypto to v0.52.0 using replace directive (api module) #10618 ACM-35865 : CVE-2026-39828 Bump golang.org/x/crypto to v0.52.0 using replace directive (models module) #10616 NO-ISSUE: [master] Bump OCP versions: 4.18, 5.0, 4.20, 4.16, 4.22, 4.19, 4.21, 4.14, 4.17 #10622
MGMT-24786 : Add resource-scoped authorization for local auth tokens #10603 NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh #10581
MGMT-18886 : OS Streams #10428 NO-ISSUE: hive-operator was migrated from community-operators to upstream-community-operators #10600
MGMT-24682 : Remove LSO and LVMS as CNV operator dependencies #10541 MGMT-24705 : CVE-2026-53488 Bump github.com/containerd/containerd to v1.7.33 through indirect dependency conversion #10572 ACM-36420 : CVE-2026-39821 Bump golang.org/x/net to v0.55.0 #10548 NO-ISSUE: [master] Bump OCP versions: 4.21, 4.22, 4.20 #10568
MGMT-24400 : Document TestVersion API and usage guidance #10426 NO-ISSUE: [master] Bump OCP versions: 4.20, 4.21, 4.18, 4.19, 4.13, 4.22, 4.16, 5.0 #10546
MGMT-24673 : PATCH /v2/clusters/{id} does not return updated operator_bundles #10536 NO-ISSUE: Update linter version #10509
APPSRE-14691 : add monitoring.rhobs/v1 ServiceMonitors for COO compatibility #10540 OCPBUGS-93368 : Simplify IRI api dependency #10528 NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh [SECURITY] #10523
MGMT-24443 : watch configmap for CNI config update #10384 OCPBUGS-91974 : Stop setting DevPreviewNoUpgrade for TNF clusters #10507 MGMT-24635 : Incorrect grammar in OpenShift AI GPU validation message #10511 ACM-35864 : CVE-2026-39828/39829/39830 Bump golang.org/x/crypto to v0.52.0 #10495 MGMT-24453 : upgrade to golang 1.26 for assisted-service #10396 MGMT-24610 : Get OCP lifecycle data via api/v2 and update the product’s name #10478 ACM-34978 : apply disk encryption defaults on cluster create and update #10442 OCPBUGS-87099 : Add sourcedir /run/chrony-dhcp to generated chrony.conf #10479 MGMT-21368 : Log slow queries gorm #10457 MGMT-23234 : [BE] Improve the UX around the amd/nvidia operators selection - add profile to selection #10387 MGMT-24398 , MGMT-24399 : Migrate test versions to OCP version builder #10412 MGMT-22787 : Limit inventory output #10374 ACM-35140 : CVE-2025-58058 Bump github.com/ulikunitz/xz to v0.5.15 #10450 NO-ISSUE: [master] Bump OCP versions: 5.0, 4.21 #10472
ACM-35141 : CVE-2025-58058 Bump github.com/ulikunitz/xz to v0.5.15 through indirect dependency conversion #10461 MGMT-24571 : Fix initrd PPI reboot loop by comparing correct image URL #10456 NO-ISSUE: [master] Bump OCP versions: 4.19 #10449
MGMT-24551 : Add vNIC NFD rule and refine NIC subsystem matchers #10448 MGMT-24336 : Bump LSO catalog fallback to v4.22 for OCP 5.0 #10437 MGMT-24410 : Fixes for installer cache #10397 MGMT-24550 : Migrate NFD NodeFeatureRule apiVersion to nfd.k8s-sigs.io #10444 OCPEDGE-2692 : feat: support MAC address fencing credentials in ABI flow #10385 MGMT-24339 : Prepare 4.22 stable versions assisted-service upstream #10440 NO-ISSUE: [master] Bump OCP versions: 4.22 #10445
NO-ISSUE: Update OCP 5.0 OS images to use released 4.22 RHCOS #10441
MGMT-24495 : Fix S3 additional_name and file_name #10432 MGMT-24496 : Allow spaces between the value and unit for installcache #10433 NO-ISSUE: [master] Bump OCP versions: 4.18, 4.22, 4.20, 4.13 #10436
MGMT-22787 : Add enhancement doc to limit inventory size #10410 NO-ISSUE: [master] Bump OCP versions: 4.22, 4.21 #10427
MGMT-24397 : Add OCP test version builder & PoC #10321 MGMT-23738 : Flaky test: “Move Agent to another infraenv” fails with Kubernetes conflict error #10319 NO-ISSUE: [master] Bump OCP versions: 4.16 #10423
MGMT-19732 : Add ntp_sources field for exclusive NTP configuration #10408 MGMT-22370 : Add exponential backoff to agent image pull #10337 MGMT-24243 : Add option for a delay when applying static network config on minimal ISO #10373 NO-ISSUE: [master] Bump OCP versions: 4.19, 4.22 #10402
NO-ISSUE: add Assisted-by commit trailer convention to CLAUDE.md #10400
NO-ISSUE: [master] Bump OCP versions: 4.21, 5.0 #10392
MGMT-21836 : Allow external platform with non-standard HA control plane #10286 MGMT-23230 : Add MachineConfig for AMD GPU kernel module blacklist #9920 MGMT-24457 : Add MI350P PCI device IDs to NFD NodeFeatureRule #10388 MGMT-24393 : Assisted Service IPv6 checks fails comparative #10340 NO-ISSUE: [master] Bump OCP versions: 4.17, 4.20, 4.18 #10383
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.22 #10348
NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26 #10354
NO-ISSUE: Fix resource leak and inconsistency in manifest download #10322
MGMT-21834 : deprecate supported-platforms endpoint #10122 NO-ISSUE: [master] Bump OCP versions: 4.14, 4.19, 4.18, 4.21, 4.20, 4.16 #10342
NO-ISSUE: fix typo: ‘occured’ -> ‘occurred’ in main.go error wraps #10316
NO-ISSUE: increase the timout waiting for assisted-image-service #10327
MGMT-20634 : Revert mac-identifier and global DNS workarounds as RHEL-91250 and RHEL-72440 resolved #10318 ACM-33836 : CVE-2026-35469 bump github.com/moby/spdystream #10314 NO-ISSUE: [master] Bump OCP versions: 4.22, 4.13, 4.16, 4.17 #10296
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20, 4.18, 4.19 #10287
MGMT-19930 : upgrade PostgreSQL stack to pgx v5 and ocm-sdk-go v0.1.499 #10230 NO-ISSUE: [master] Bump OCP versions: 4.21 #10284
MGMT-24236 : Exclude post-installation hosts from pending-user-action timeout #10266 MGMT-24138 : Order network by bootstrap host #10257 NO-ISSUE: Remove unused RegisterAddHostsOCPCluster functions #10265
NO-ISSUE: [master] Bump OCP versions: 4.16, 5.0, 4.22 #10272
MGMT-24119 : Correct the namespace to install Loki Operator as “openshift-operators-redhat” instead of “openshift-loki” #10209 MGMT-23755 : Validate & trim MCS certificates when adding to ignition override #10262 NO-ISSUE: [master] Bump OCP versions: 4.21, 4.19 #10263
MGMT-23680 : CVE-2026-32285 Bump github.com/buger/jsonparser to v1.1.2 #10240 NO-ISSUE: Update operator bundle channel to backplane-5.0 #10215
MGMT-24115 : allow empty image checksum/url in getChecksumAndURL #10246 MGMT-23971 : Add a timeout for installing-pending-user-action #10202 NO-ISSUE: Modify Konflux YAMLs to backplane-5.0 #10237
MGMT-23802 : Fix manifest format in log bundles #10121 MGMT-23861 : Fix oci detection for day2 clusters #10231 NO-ISSUE: [master] Bump OCP versions: 4.22 #10220
ACM-33186 : Revert Renovate configuration for Hive updates #10203 MGMT-23553 : Automate events table bloat cleanup #10140 MGMT-23665 : fixing CVE-2026-33186 #10173 NO-ISSUE: Allow restoring soft deleted hosts #10185
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.21, 4.22, 4.18 #10201
NO-ISSUE: Bump go modules and linters #10181
MGMT-23861 : Revert MGMT-22385 for oci iscsi day2 #10170 ACM-32996 : Missing nil check in BMACReconciler causes controller panic #10164 MGMT-23920 : 4.22 SNO doesn’t support 4 cpu cores node #10153 NO-ISSUE: add shay23bra to owners #10163
NO-ISSUE: [master] Bump OCP versions: 4.13, 4.19 #10162
NO-ISSUE: Remove urlAuth from credentials endpoint #10161
MCO-2223 : Add osImageStream install-config overrides #10156 NO-ISSUE: [master] Bump OCP versions: 4.21 #10152
NO-ISSUE: [master] Bump OCP versions: 4.22, 4.18, 4.20 #10146
OCPBUGS-79576 : Mark raw FC/iSCSI multipath members as ineligible #10142 OCPBUGS-83401 : Fix IRI patcher feature check #10141 MGMT-23227 : Skip host operator validation for day2 clusters #10029 ACM-32735 : Add better API docs to CRDs #10124 MGMT-23548 : Ensure tests w/ gomock controllers call Finish() #10024 MGMT-22849 : Remove the nmconnection that the openshift-installer writes for the bootstrap. #10086 NO-ISSUE: Detect missing PostgreSQL client in development #10119
NO-ISSUE: Add assisted-service-writing-unit-tests agent skill #10123
MGMT-23451 : Lower SNO vCPU min to 4 instead of 8 for assisted for OCP 4.22 and above #10040 MGMT-23141 : Cluster creation returns SQL error rather than API error #10113 NO-ISSUE: [master] Bump OCP versions: 4.20, 4.18, 4.21, 4.14, 4.17, 4.19, 4.16 #10120
MGMT-23340 : upgrade assisted-service postgresql from 13 to 15 #10096 NO-ISSUE: Replace github.com/golang/mock with go.uber.org/mock #10082
OCPBUGS-79576 : Prefer multipath disk in ABI disk selection #10091 NO-ISSUE: BMAC: replace per-step Update calls with deferred Patch #10095
MGMT-22517 : Change amd gpu operator namespace to openshift-amd-gpu #10007 MGMT-23228 : Update NFD config for AMD Instinct GPU detection #9918 MGMT-23599 : implement cluster and host validations for Kube API mode #10044 MGMT-23253 : Reconcile stuck day2 agent status by checking spoke cluster #10087 NO-ISSUE: clarify error when interface in bond missing #10022
MGMT-23060 : Make InfraEnv CpuArchitecture immutable after creation #9999 MGMT-23625 : Remove pinned image version for nfd operator #10045 MGMT-23231 : Replace AcceleratorProfile with HardwareProfile #9919 MGMT-23674 : Remove controller-runtime dependency from api module #10071 MGMT-23650 : Disable image policy in assisted service operator deployment #10070 MGMT-23300 : Add missing permission for host reclaim pod #9934 MGMT-22939 : Fix cache key to get mustgather image #9940 OCPBUGS-79470 : Fix multi-document YAML parsing for NMStateConfig #10053 NO-ISSUE: [master] Bump OCP versions: 4.16, 4.17, 4.19, 4.21, 4.22 #10054
AGENT-1426 : Add localhost mirror only when missing in IRI patcher #10028 MGMT-23446 : TNA none platform on 4.19 (block for 4.21 and lower) #10013 MGMT-23045 : toggle metal3 integration #9933 OCPBUGS-78989 : Gate customDeploy on PreprovisioningImage having correct ISO #10032 MGMT-23339 : Add url to release image comparison for Kube API versions #10030 MGMT-23550 : Add feature usage for new CNI types #10027 NO-ISSUE: add skipper skill #10014
MGMT-23432 : add third parties CNI support to KUBE API mode #10015 NO-ISSUE: [master] Bump OCP versions: 4.21 #10023
NO-ISSUE: Add Go workspace files to .gitignore #10000
NO-ISSUE: [master] Bump OCP versions: 4.18, 4.20 #10002
MGMT-22967 : read MCS CA from machine-config-server-ca instead of kube-system/root-ca #9990 NO-ISSUE: [master] Bump OCP versions: 4.21 #9997
MGMT-22782 : Add state root cleanup script to day-2 worker ignition #9942 NO-ISSUE: Add bluesort to OWNERS_ALIASES #9979
OCPBUGS-77767 : OVE Above/Below-the-sea integration - Network configuration not persisted #9978 MGMT-23339 : Use release image URL from ClusterImageSet for KubeAPI clusters #9957 NO-ISSUE: [master] Bump OCP versions: 4.19, 4.13 #9988
MGMT-22518 : Adding RHOAI application endpoint to the list of known hosts for SNO #9936 OCPBUGS-77552 : fix: min supported arbiter disk size should be 50GB #9977 NO-ISSUE: Update InfraEnv CR description #9938
MGMT-22905 : Update LSO override for operator deployment #8824 NO-ISSUE: [master] Bump OCP versions: 4.17 #9975
NO-ISSUE: [master] Bump OCP versions: 4.22, 4.14, 4.21 #9968
NO-ISSUE: Refresh RPM lockfiles #9945
NO-ISSUE: Fix loki and logging #9939
NO-ISSUE: [master] Bump OCP versions: 4.18, 4.20 #9941
MGMT-23205 : Reject empty MAC address in NMState static network config #9937 NO-ISSUE: [master] Bump OCP versions: 4.21 #9935
MGMT-21783 : bundle cluster and host ignition endpoint CA certificates for day-2 hosts #8826 ACM-29247 : Infrastructure Operator - Set up Renovate configuration to automatically create Hive API Synchronization PRs #9917 NO-ISSUE: Refresh RPM lockfiles #9915
ACM-29247 : (Revert) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #9865 NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.22, 4.21 #9752
MGMT-22907 : Prepare 4.21 stable and 4.22 candidate versions assisted-service upstream #8831 NO-ISSUE: Use renovate to update rpms.lock.yaml #9619
ACM-29247 : (FIX) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #9505 NO-ISSUE: Update module github.com/go-logr/logr to v1.4.3 #9357
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20, 4.18, 4.19, 4.17 #8912
ACM-29247 : infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #8870 MGMT-22942 : Temporarily mirror CAPI image and OCP 4.20 release for disconnected CAPI CI #8819 MGMT-23047 : Ensure cluster is installed when adding an osImageVersion… #8818 MGMT-22998 : Add documentation to add node to an upgraded cluster #8810 MGMT-23164 : Bug: Assisted Installer fails for OCP < 4.16 due to missing libvirt dependency #8869 MGMT-22406 : Include primary_ip_stack in cluster event notifications #8846 MGMT-22385 : Skip ip= kernel args for Day2 iSCSI/multipath with unknown network #8837 NO-ISSUE: Update setup-envtest version to release-0.22 #8856
MGMT-22885 : Implement third-party CNI backend support #8797 NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #8850
NO-ISSUE: Update operator bundle channel to ocm-2.17 #8847
MGMT-23115 : add FIPS feature usage tracking #8845 MGMT-23077 : Revert “MGMT-21038: Prevent from inventory set host RequestedHostname directly” #8840 OCPEDGE-2367 : Add support for platform none and external on TNA clusters topology #8830 MGMT-22731 : Add To Renovate Tool - Update UBI-minimal Version Automatically #8802 MGMT-22523 : Bump AMD DeviceConfig driver version to 6.4.3 #8823 MGMT-23000 : Fix when a BMH is paused in non-converged flow #8812 MGMT-22287 : Remove OCP 4.12 support from assisted-service #8794 MGMT-21038 : Prevent from inventory set host RequestedHostname directly #7962 NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.21 #8816
ACM-29153 : Upgrade hive to e33d70 #8807 MGMT-21756 : enable FIPS 140-3 crypto module in Go builds #8755 NO-ISSUE: [master] Bump OCP versions: 4.20 #8801
MGMT-22583 : Implement Swagger Definitions for 3rd Party CNI / No CNI #8717 NO-ISSUE: [master] Bump OCP versions: 4.17, 4.20, 4.19, 4.13 #8795
NO-ISSUE: Clarify release images needed for ironic agent image #8778
NO-ISSUE: upgrade to 1.25 #8769
NO-ISSUE: [master] Bump OCP versions: 4.12, 4.18, 4.21, 4.16, 4.20 #8767
NO-ISSUE: Add parameter for pod disruption budget in openshift template #8765
MGMT-20701 : host re-registration improvement #8737 MGMT-22189 : Fix primary_ip_stack migration #8760 MGMT-22584 : Create Enhancement Document for 3rd Party CNI / No CNI Support in Assisted Installer #8594 MGMT-22131 : transitioning red hat operator base image to ubi minimal #8711 MGMT-22553 : Partial cluster updates fail with false validation errors on dual-stack clusters #8704 MGMT-22297 : fallback path for add-ntp-sources.sh #8742 NO-ISSUE: Update CONTRIBUTING.md #8745
MGMT-22189 : Order dual-stack networks when fetching from DB #8488 MGMT-22656 : Remove serviceMesh & kserve from DataScienceCluster spec #8741 NO-ISSUE: Add cpe label #8739
NO-ISSUE: bumping go version on branch master to v1.25 to solve CVE-2025-58183 #8708
AGENT-1407 : add support for InternalReleaseImage related resources #8600 NO-ISSUE: [master] Bump OCP versions: 4.21 #8733
MGMT-16090 : upgrade assisted-service postgresql from 12 to 13 #8602 MGMT-20499 : Always generate iSCSI NIC reapply manifest for day2 host support #8705 NO-ISSUE: [master] Bump OCP versions: 4.17 #8725
MGMT-22278 : Skip deleting spoke resources for an uninstalled agent #8608 MGMT-22186 : Add kata runtime class to Assisted installer #8140 ACM-27859 : Allow PreprovisioningImage finalizer to be removed once BMH finishes deprovisioning #8604 MGMT-20323 : Prefer bootable disks for installation #8701 NO-ISSUE: add to owners_aliases #8703
MGMT-22545 : Fix YAML marshaling for Kubernetes types in disconnected ignition #8619 OCPBUGS-68355 : Fix Day-2 CSR approval race condition #8622 MGMT-22423 : Fix race condition in ensureOwnerRef causing spec.installed to remain false #8621 ACM-27290 : Fix policy.json not generated for InfraEnv mirror registry config #8609 ACM-27906 : Fix container-image-availability check to use mirrored registries in disconnected environments #8611 NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20 #8612
MGMT-22458 : CVE-2025-65637 Bump github.com/go-openapi/loads, github.com/go-openapi/analysis, github.com/go-openapi/validate to fix CVE-2025-65637 through introducers update (models module) #8596 NO-ISSUE: Fix golangci-lint branch #8572
MGMT-22159 : Add NFD operator to the list of OSC operator dependencies #8292 MGMT-22320 : Expose GPU data in Agent CR inventory #8495 NO-ISSUE: Fix list bundle validation to check for feature incompatibilities #8571
MGMT-22273 : reduce log amount #8565 MGMT-22396 : CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 through indirect dependency conversion #8555 MGMT-18971 : Backup and restore for BMH #8563 NO-ISSUE: Add documentation for creating RHCOS template and configuring MachineSets on vSphere clusters #8441
MGMT-22278 : Allow Agent deletion when InfraEnv is deleted #8416 NO-ISSUE: [master] Bump OCP versions: 4.14, 4.16, 4.18, 4.19 #8564
OCPBUGS-66947 : Fix OLM manifest configMap metadata names #8496 OCPBUGS-61237 : Prevent race in agent-installer kubeconfig generation #8440 OCPBUGS-66374 : Compare usable memory fairly in validations #8476 MGMT-21809 : Limit TNF Clusters’ platform to either baremetal or none #8390 MGMT-22181 : [4.18] ODF compact mode with 5 masters fails #8471 NO-ISSUE: [master] Bump OCP versions: 4.13 #8491
MGMT-22103 : Add EVENT_RATE_LIMITS configuration support #8466 MGMT-22297 : synch NTP in discovery #8478 NO-ISSUE: [master] Bump OCP versions: 4.20, 4.16, 4.17, 4.19, 4.12 #8477
MGMT-22078 : Add readOnlyRootFilesystem to assisted-service template #8229 NO-ISSUE: Update module github.com/golangci/golangci-lint to v1.64.8 #8464
AGENT-1216 : HostStage for ‘Copying registry data to disk’ #8423 MGMT-22280 : remove loki dependency from logging op #8458 NO-ISSUE: [master] Bump OCP versions: 4.18 #8456
NO-ISSUE: [master] Bump OCP versions: 4.20 #8454
MGMT-22280 : new logging operators (loki, logging) #8445 NO-ISSUE: Update go.mod Hive dependency to 715614a9f379395dbb5b5091276ec59cacfd0599 #8450
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.19 #8442
MGMT-22193 : Fix dual-stack BMH NIC creation to support multiple NICs per interface #8426 MGMT-22292 : Add url label #8425 MGMT-22244 : add AgentServiceConfig ctrl watch for mirror regsitry configmap changes #8391 MGMT-22246 : Allow late binding for arbiter hosts #8395 MGMT-22263 : Fix Image service health check timeout too short for onprem deployments #8405 NO-ISSUE: [master] Bump OCP versions: 4.17, 4.21, 4.19 #8404
MGMT-21691 : Reorder networks and VIPs after each DB fetch before install-config generation #8400 ACM-26371 : Update go.mod Hive dependency #8392 OCPBUGS-56913 : Retry incomplete cluster registration in ABI #8241 NO-ISSUE: [master] Bump OCP versions: 4.20 #8398
MGMT-21982 : Remove –interactive flag from the unconfigured ignition #8389 NO-JIRA: Add project documentation to CLAUDE.md #8209
MGMT-22154 : return bad request when cluster or host are missing in v2uploadLogs #8356 NO-JIRA: Fix database initialization in unit tests #8353
NO-ISSUE: [master] Bump OCP versions: 4.12, 4.18 #8387
ACM-25423 : CVE-2024-45339 Bump github.com/golang/glog to v1.2.4 using replace directive (api module) #8372 NO-ISSUE: Remove unused ISO_CACHE_DIR variable #8361
MGMT-22154 : enable 400 status code in V2UploadLogs endpoint #8355 MGMT-22081 : Add proxy, NTP, network config, and rendezvous IP to OVE #8144 NO-ISSUE: [master] Bump OCP versions: 4.16 #8354
MGMT-19212 : Update PreprovisioningImage status when InfraEnv not found #8264 MGMT-21604 : Remove OCP 4.15 support from assisted-service #8248 MGMT-22184 : Sanitize HTTP request logging to exclude authorization headers #8293 NO-ISSUE: [master] Bump OCP versions: 4.20 #8288
MGMT-22052 : Allow single API and Ingress VIPs in dual-stack with IPv6 primary #8250 MGMT-22153 : increase log capacity from 100MB to 250MB #8260 NO-ISSUE: [master] Bump OCP versions: 4.15 #8267
MGMT-22127 : Stop non-existing InfraEnv reconcile #8252 MGMT-9154 : agent auto approval #8234 MGMT-22053 : Add Feature Support for Dual-Stack Primary IPv6 #8258 NO-ISSUE: Add maorfr to OWNERS_ALIASES file #8262
AGENT-1248 : Create configmap containing operator manifests #7818 ACM-2554 : inject imagePullSecrets when available under k8s-mode #8196 NO-ISSUE: [master] Bump OCP versions: 4.16, 4.19, 4.17 #8249
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.18 #8247
MGMT-22042 : add cve-automation github app to owners_aliases #8243 MGMT-22066 : Enable TNA clusters support by default #8242 MGMT-21904 : Improve Duplicate certificate Detection used by the infrastructure operator #8233 ACM-25980 : Introduce PreprovisioningImage finalizer #8221 MGMT-21848 : Allow matching host’s disk using byPath #8113 NO-ISSUE: [master] Bump OCP versions: 4.20, 4.14, 4.16, 4.18 #8219
MGMT-21230 : Use XTS for disk encryption #8115 MGMT-21870 : Add new parameters for bundle routes #8101 MGMT-22038 : Only check TNF version for day-1 bound hosts #8213 MGMT-22025 : Filter out irrelevant RHCOS images in operator deployment scripts #8194 MGMT-20681 : Improve discovery ISO password change script #7683 MGMT-21624 : Fix dual-stack primary IPv6 migrations and update #8145 NO-ISSUE: [master] Bump OCP versions: 4.13, 4.17, 4.21, 4.19 #8156
MGMT-21958 : Prepare 4.20 stable versions assisted-service upstream #8142 NO-ISSUE: Update konflux pipelines to use a remote pipeline #8143
NO-ISSUE: adds example Agent resource to docs #8120
NO-ISSUE: migrate renovate config #8060
MGMT-21135 : Unexpected Additional Subnet Appears in Machine Network Selection #7953 MGMT-21810 : Support TNF cluster installation using kube-api #8085 MGMT-21759 : Update Assisted Service webhook away from deprecated webhook.Validator API #8135 MGMT-21859 : Move osc operators to supported #8056 MGMT-19836 : Add ClusterID field on HostRoleUpdatedEvent #8111 MGMT-21624 : Add Dual-Stack with primary IPv6 support in Assisted #8026 NO-ISSUE: [master] Bump OCP versions: 4.16, 4.12, 4.18, 4.20, 4.19, 4.17 #8134
AGENT-1303 : Allow InfraEnv registration to use late binding #8059 NO-ISSUE: Update Konflux references #8128
NO-ISSUE: bump ocp dockerfile base image to 4.21 #8110
MGMT-20588 : Align kube descheduler activation CR with OVE needs #7960 NO-ISSUE: Update Konflux references #8050
ACM-25137 : Remove the SERVICE_EL8_IMAGE env vars #8108 MGMT-21725 : Update Renovate for legacy EL8 Dockerfiles #8090 OCPBUGS-62580 : Fix edge jobs to be consistent with ART for 4.21 #8104 NO-ISSUE: [master] Bump OCP versions: 4.19 #8095
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.18 #8089
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.15, 4.14 #8084
MGMT-20192 : add possibility to disable image service #7955 MGMT-20464 : Fix NFD detection of NVIDIA GPUs #7696 MGMT-20324 : Fix day2 add hosts with P/Z CPU architectures #7527 MGMT-20207 : avoid adding system CA bundle to AdditionalTrustBundle #7448 MGMT-20009 : Change OCP 4.19 to the default version #7506 NO-ISSUE: Change node-maintenance operator namespace to avoid conflict with node-healthcheck operator #7491
NO-ISSUE: fixing late binding #7070
And 1657 elided commits (e.g. from squash or rebase merges)
Full changelog
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2326
ACM-41555 : Enable PQC in Dockerfiles #2307 NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2309
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2304
MGMT-24885 : Harden command construction and credential handling #2275 NO-ISSUE: Add approver bluesort #2286
NO-ISSUE: Modify Konflux YAMLs to ocm-5.1 #2281
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.13.2 #2285
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.13.1 #2273
NO-ISSUE: Update module github.com/golangci/golangci-lint to v2.13.0 #2271
OCPBUGS-101647 : Bump golang.org/x/net to v0.56.0 #2251 MGMT-24598 : CVE-2026-42306 Bump assisted-service dep to pick up docker v28.5.2 #2219 OCPBUGS-96799 : Bump golang.org/x/net from v0.48.0 to v0.55.0 #2244 OCPBUGS-96696 : Wait for all nodes to join before exiting for ABI #2230 ACM-38238 : Assisted-installer repos: Set Up Set up Renovate configuration to automatically create Hive API Synchronization PRs #2224 MGMT-24702 : CVE-2026-53488 Bump github.com/containerd/containerd to v1.7.33 #2204 NO-ISSUE: Bump linter #2199
MGMT-24453 : upgrade to golang 1.26 #2171 NO-ISSUE: Refresh RPM lockfiles #2182
NO-ISSUE: Refresh RPM lockfiles #2160
MGMT-23784 : CVE-2026-34986 Bump github.com/go-jose/go-jose/v3 to v3.0.5 using replace directive #2121 NO-ISSUE: Modify Konflux YAMLs to backplane-5.0 #2119
ACM-33186 : Revert Renovate configuration for Hive updates #2107 NO-ISSUE: upgrade go.opentelemetry.io/otel/sdk to … #2097
MGMT-23789 : CVE-2026-34986 Bump github.com/go-jose/go-jose/v4 to v4.1.4 through indirect dependency conversion #2081 NO-ISSUE: Refresh RPM lockfiles #2069
MGMT-23545 : Mount pull secret token as a file #2053 MGMT-23191 : Ensure MCO configs are present before rebooting the bootstrap node #2039 MGMT-23664 : CVE-2026-33186 Bump google.golang.org/grpc to v1.79.3 through indirect dependency conversion #2058 OCPBUGS-70213 : fix: allow workers to join TNA cluster when 1 master + arbiter are ready #2056 NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2040
OCPBUGS-76382 : Fix root partition before copying IRI registry data #2034 ACM-29247 : Infrastructure Operator - Set up Renovate configuration to automatically create Hive API Synchronization PRs #2037 NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2035
NO-ISSUE: Refresh RPM lockfiles #2027
ACM-29247 : (Revert) infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #1998 NO-ISSUE: Update module github.com/jackc/pgtype to v1.14.4 #1664
NO-ISSUE: Use renovate to update rpms.lock.yaml #1515
NO-ISSUE: Update github.com/alecthomas/units digest to 0f3dac3 #1524
ACM-29247 : infrastructure operator set up renovate configuration to automatically create hive api synchronization p rs #1511 MGMT-22731 : Add To Renovate Tool - Update UBI-minimal Version Automatically #1487 NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #1498
Revert “NO-ISSUE: test for FF ACM 2.17” #1496
NO-ISSUE: test for FF ACM 2.17 #1495
ACM-29166 : Upgrade hive to e33d70 #1491 MGMT-22499 : CVE-2025-66506 Bump github.com/sigstore/fulcio to v1.8.3 using replace directive #1484 MGMT-22532 : CVE-2025-52881 Bump github.com/opencontainers/selinux to v1.13.0 using replace directive #1483 MGMT-22393 : CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 using replace directive #1474 NO-ISSUE: upgrade go to 1.25 #1466
MGMT-22653 : bump the required minimal go version to 1.24 #1459 NO-ISSUE: Add cpe label #1457
MGMT-22131 : transitioning red hat operator base image to ubi minimal #1444 ACM-25812 : bumping go version on branch master #1446 AGENT-1216 : support new HostStage (HostStageCopyingRegistryDataToDisk) #1384 AGENT-1216 : copy registry data to disk in ABI/Appliance flow #1359 MGMT-22292 : Add url label #1375 AGENT-1072 : Apply operator manifests from ConfigMap for agent-installer #1175 MGMT-22042 : add cve-automation github app to owners_aliases #1328 MGMT-20756 : assisted installer naive string concatenation for partiti… #1308 NO-ISSUE: Update konflux pipelines to use a remote pipeline #1301
NO-ISSUE: Update Konflux references #1299
MGMT-21724 : Update Renovate for legacy EL8 Dockerfiles #1289 OCPBUGS-62361 : Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.21 #1276 OCPBUGS-62398 : Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.21 #1277 NO-ISSUE: Update Konflux references #1283
NO-ISSUE: Update Konflux references #1265
And 239 elided commits (e.g. from squash or rebase merges)
Full changelog
CNTRLPLANE-3237 : pick https://github.com/openshift/library-go/pull/2449- #2287 #764 CNTRLPLANE-3237 : pull https://github.com/openshift/library-go/pull/2451 #763 CNTRLPLANE-3237 : kms: wire EncryptionConfigurationComputer into encryption controllers #762 NO-JIRA: Bump library-go #760
CNTRLPLANE-3237 : kms: wire preflight deployer #758 NO-JIRA: Update library-go to get latest changes #759
NO-JIRA: Update KMS cases and bump library-go #756
CNTRLPLANE-3237 : pull https://github.com/openshift/library-go/pull/2430 #754 OCPBUGS-105786 : Revert “Revert “NO-JIRA: Disable WatchList feature gate due to the missing support of Project watch”” #751 NO-JIRA: update KMS tests changes with latest library-go bump #753
NO-JIRA: Retry conflict errors on UpdateKMSEncryptionStatus function #752
OCPBUGS-98618 : Add HostToContainer mountPropagation to node-pullsecrets volume mount #744 CNTRLPLANE-3237 : kms key controller preflight support #747 NO-JIRA: bump library-go api and client-go #746
Revert “NO-JIRA: Disable WatchList feature gate due to the missing support of Project watch” #681
NO-JIRA: Bump library-go #745
NO-JIRA: Update openshift/* #742
CNTRLPLANE-3237 : creates the kms status provider from the operator client #741 NO-JIRA: add KMS preflight deploy e2e to encryption-kms-2 #739
CNTRLPLANE-3361 : Update openshift/* #740 NO-JIRA: Automatic agentic rebase: Update library-go to d8f45c2 #737
CNTRLPLANE-3237 : encryptionstatusprovider: implement UpdateKMSEncryptionStatus #736 CNTRLPLANE-3237 : encryptionstatusprovider: use OpenShiftAPIServerInterface instead of Clientset #735 NO-JIRA: kms to kms key identifier check #728
OCPBUGS-87507 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 5.0 #705 CNTRLPLANE-3237 : intro openShiftAPIServerEncryptionStatusProvider #734 NO-JIRA: Bump library-go to sync #732
CNTRLPLANE-3234 : wire KMS health reporter status writer #730 OCPBUGS-86583 : Allow Prometheus to scrape check-endpoints metrics on port 17698 #729 NO-JIRA: Automatic agentic rebase: Update library-go to fd74bb5 #727
NO-JIRA: update func from library-go #724
NO-JIRA: Add test for KMS to KMS migration #726
NO-JIRA: Bump library-go for sync #725
NO-JIRA: Bump library-go #723
NO-JIRA: Update openshift dependencies #722
NO-JIRA: add preflight command #714
NO-JIRA: add kms preflight to NP to allow egress #720
NO-JIRA: Automatic agentic rebase: Update library-go to b0f5231 #716
CNTRLPLANE-3363 : Register health monitor as command #713 NO-JIRA: kms: bump library-go to get KMS plugin security context #711
CNTRLPLANE-3545 : bump library-go to get CA bundle wiring #709 NO-JIRA: Automatic agentic rebase: Update library-go to 7fd5f33 #710
NO-JIRA: Automatic agentic rebase: Update library-go to 0469313 #707
CNTRLPLANE-3226 : switch to real Vault KMS plugin in CI #704 CNTRLPLANE-3226 : bump library-go to get KMS plugin credentials #699 CNTRLPLANE-3364 : remove old go std tests #703 NO-JIRA: Automatic agentic rebase: Update library-go to d8750ed #702
NO-JIRA: Automatic agentic rebase: Update library-go to 0cf249e #701
NO-JIRA: bump latest library-go changes #700
NO-jIRA: Remove old mock plugin deployment #698
NO-JIRA: kms: use DefaultFakeVaultEncryptionProvider to ensure AppRole secre setup #697
CNTRLPLANE-3236 : support deploying Vault mock KMS plugin #693 NO-JIRA: Bump latest library-go changes #692
CNTRLPLANE-3364 : add the kms suite and migrate the kms tests of oas-o to ote #690 CNTRLPLANE-3237 : Bump library-go and sync encryption tests with APIServerEncryption struct change #689 NO-JIRA: Bump latest library-go changes #688
API-1768 : e2e network policy tests #675 NO-JIRA: Add control-plane-approvers to OWNERS #677
NO-JIRA: Update library-go for latest changes #678
CNTRLPLANE-2619 : Restart operator when TLS config changes #662 CNTRLPLANE-2450 : bump(k8s.io): 1.35.2 #669 CNTRLPLANE-2619 : make checkendpoints use apiserver config #657 NO-JIRA: OWNERS: remove engineers who have left Red Hat #646
NO-JIRA: Disable WatchList feature gate due to the missing support of Project watch #667
CNTRLPLANE-2241 : Update library-go to get KMS encryption #647 NO-JIRA: Create test namespace for KMS migration scenario #650
CNTRLPLANE-2247 : Adding KMS TestKMSEncryptionOnOff test for OAS #649 CNTRLPLANE-2247 : Adding KMS TestKMSEncryptionOnOff test for Routes #644 CNTRLPLANE-2241 : Conditionally add the KMS plugin volume mount to the openshift-apiserver container #641 CNTRLPLANE-2247 : Add KMS encryption test target #642 NO-JIRA: update to Kubernetes v1.34.1 #640
OCPBUGS-70035 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.22 #635 OCPBUGS-62500 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.21 #626 NO-JIRA: Bump library go rm co dep #625
CNTRLPLANE-1257 : Add README to test extension #624 CNTRLPLANE-1257 : set up openshift-tests-extension and add a sanity test #623 : NO-JIRA: Bump to Go 1.24 and k8s 1.33 #620
NO-JIRA: operator: annotate image-import-ca configmap with owner #616
OCPBUGS-48177 : Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #612 MON-4129 : adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #611 OCPBUGS-45701 : Updating ose-cluster-openshift-apiserver-operator-cont… #607 NO-JIRA: Revert Disable ResilientWatchCacheInitialization #604
OCPBUGS-44693 : Disable ResilientWatchCacheInitialization #603 OCPBUGS-23435 : bump library-go to bring in workload-conditions fix #600 NO-JIRA: bump dependencies #598
API-1835 : update to use the latest API #597 API-1835 : switch OpenshiftDeploymentLatestRevisionClient to use the generic client #595 API-1835 : update for more apply loops #592 MULTIARCH-4557 : Sync import mode image config status field in the observed config #582 NO-JIRA: remove unused OperatorClient #594
API-1835 : last transition time update #593 API-1835 : update library-go to use new operator client #584 create CRDs from openshift/api #591
OCPBUGS-41617 : increase openshift-apiserver failureThreshold #588 OCPBUGS-41232 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.18 #586 NO-JIRA: Bump library-go to add audit logs about events #587
OCPBUGS-39589 : Rebase 1.30 #585 OCPBUGS-30492 : bump google.golang.org/protobuf #583 OCPBUGS-34349 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #580 OCPBUGS-34349 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #579 AUTH-482 : Set required-scc for openshift workloads #573 WRKLDS-1015 : tolerate node-role.kubernetes.io/control-plane:NoExecute #574 OCPBUGS-29580 : Apply hypershift cluster-profile for ibm-cloud-managed #572 OCPBUGS-32346 : the apiservice controller waits until bootstrap complete #575 NO-ISSUE: Makefile: fixes test-e2e-encryption-rotation targets #577
NO-ISSUE: fix: TestRedeployOnConfigChange #576
OCPBUGS-22969 : Use v1 for flowcontrol API #559 OCPBUGS-18115 : Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #566 OCPBUGS-18939 : manifest: drop slo latency metrics in favor of sli #547 WRKLDS-1004 : use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #562 OCPBUGS-24972 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART #561 OCPBUGS-18115 : Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #551 OCPBUGS-19231 : Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #548 OCPBUGS-21733 : bump library-go to include switch to HTTP/1.1 #552 WRKLDS-728 : Capabilities: drop build/apps APIService when capabilities are not enabled #532 switch image-registry cert CM #545
OCPBUGS-16554 : update dependencies to get rid of goproxy #546 AUTH-408 : bindata: set required-scc #544 Plumb featuregates to the openshift-apiserver #542
allow etcd healthcheck timeout closer to probe timeouts to avoid failing on slower etcd #540
Add AES-GCM encryption tests #539
OCPBUGS-14010 : increase timeout for probes #536 OCPBUGS-2765 : Library go bump #538 OCPBUGS-12813 : Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #534 Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #525
OCPBUGS-10040 : update openshift/api to include aesgcm provider in the default apiserver schema #526 API-1509 : Enable AESGCM encryption #521 OCPBUGS-4343 : update apf configuration to use v1beta3 #509 OCPBUGS-6233 : Bump dependencies and images #517 OCPBUGS-5300 : routes/status resources can leak sensitive data, exclude it from audit #511 make api team approver #506
OCPBUGS-3929 : update apf configuration to use v1beta2 #508 And 1 elided commits (e.g. from squash or rebase merges)
Full changelog
CNTRLPLANE-3895 : Bump kubernetes dependencies to v1.36 #441 CNTRLPLANE-2907 : e2e network policy tests #428 NO-JIRA: Add control-plane-approvers to OWNERS #427
OCPBUGS-81472 : Prevent possibility of running controllers against empty informer caches #426 CNTRLPLANE-2620 : Restart operator when TLS config changes #412 CNTRLPLANE-2769 : bump kubernetes dependencies to v1.35 #415 no-jira: Migrate away from deprecated ioutil #401
no-jira: refactor: use the configured clock source during startup #411
CNTRLPLANE-2620 : propagate global tls config to operand #407 OCPBUGS-70032 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.22 #404 CNTRLPLANE-1307 : Refactor OTE to single-module architecture #403 CNTRLPLANE-1676 : Rebase k8s 1.34 #402 CNTRLPLANE-1544 : Use user namespace for the operator #397 CNTRLPLANE-1544 : Enable user namespaces for the operands #400 OCPBUGS-62494 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.21 #399 CNTRLPLANE-1307 : set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test #395 CNTRLPLANE-926 : Add readonlyRootFilesystem #392 CNTRLPLANE-1054 : Update k8s deps to 1.33.2 #393 WRKLDS-844 : sync: Use more descriptive variable name #390 WRKLDS-844 : pkg/operator: Split OCM/RCM status conditions #387 WRKLDS-954 : pkg/operator: Remove expired conditional resources #388 WRKLDS-1676 : ocm deployment: Add POD_NAME #386 WRKLDS-1676 : controller manager config: Set leaderElection.name #385 WRKLDS-1653 : bump(k8s): update k8s.io/* dependencies to v1.32.2 #381 OCPBUGS-47528 : Add team members to the OWNERS file #373 OCPBUGS-45698 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.19 #372 API-1835 : bump library-go #370 WRKLDS-1492 : Update k8s dependencies to 1.31.1 #368 OCPBUGS-41227 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.18 #364 create CRDs from openshift/api #367
no-jira: OWNERS: remove former employees #354
OCPBUGS-35801 : nil pointer reference in ocm-operator #355 WRKLDS-1327 : Replace wildcards by explicit list of verbs #353 WRKLDS-1292 : Bump k8s dependencies to 1.30.1 #352 OCPBUGS-34395 : Move cluster Build CR to runlevel 10 to match CRD #351 OCPBUGS-34077 : Always Disable Default Rolebindings Controller #346 OCPBUGS-34054 : lots of churn during image registry managed/removed transition #347 OCPBUILD-9 : Adds capabilities for builder & deployer rolebindings controller #335 AUTH-482 : set required-scc for openshift workloads #336 OCPBUGS-23848 : Bumps opentelemetry dependencies #341 OCPBUGS-29973 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.16 #337 OCPBUGS-29581 : Apply hypershift cluster-profile for ibm-cloud-managed #334 OCPBUGS-22969 : Use v1 for flowcontrol API #316 BUILD-854 : Add adambkaplan as approver #338 OCPBUGS-24888 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART #321 OCPBUGS-28666 : Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #326 OCPBUGS-23624 : Add .snyk file to exclude vendor and ignore unit tests #325 WRKLDS-1016 : Bump k8s dependencies to 1.29.0 #324 OCPBUGS-24190 : Disable deployer-controller when deploymentconfig is disabled #320 OCPBUGS-22956 : Remove blockage of ConfigObserver by build informer HasSynced flag #315 Revert “Revert #300 “API-1666: add image pull secret cleanup controller”” #314
Revert #300 “API-1666: add image pull secret cleanup controller” #313
API-1642 : add image pull secret cleanup controller #300 API-1642 : Do not generate image pull secrets for internal registry when internal registry is disabled. #298 OCPBUGS-21830 : bump(k8s,openshift) to address CVE-2023-44487 #308 OCPBUGS-20164 : Include Build CRD in manifests #306 WRKLDS-806 : Bump kube dependencies to 1.28.2 #305 OCPBUGS-19136 : Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #304 OCPBUGS-18932 : Always sort disabled controller list #302 OCPBUGS-18498 : Disable BuildConfigChange controller when Build cap is disabled #299 route-controller-manager deployment updates #295
OCPBUGS-16072 : Updating Kubernetes and other associated dependencies #296 OCPBUGS-13926 : change the operator log level to default normal in the deployment #289 BUILD-582 , OCPBUGS-14638 : bump(k8s): 1.27.1 #294 OCPBUGS-13926 : add loglevel controller for OCM-o #292 Revert “13895: [WRKLDS-730] route-controller-manager deployment updates” #293
OCPBUGS-13895 : [WRKLDS-730] route-controller-manager deployment updates #288 Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #287
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #286
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #285
Bump golang.org/x/net from 0.5.0 to 0.7.0 #284
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #279
OCPBUGS-10568 : migrate to using lease objects for leader election #282 Add Divyanshu Agrawal as a reviewer #283
OCPBUGS-4343 : update apf configuration to use v1beta3 #273 Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #274
WRKLDS-594 : bump(k8s): 1.26.1 #277 OCPBUGS-5275 : remove unnecessary RBAC for leader-locking-ingress-to-route-controller #276 OCPBUGS-3929 : update apf configuration to use v1beta2 #272 let deployer pods patch/apply replication controllers #270
Bug 2111979 : Set openshift.io/run-level to nil in openshift-controller-manager nam… #269 And 2 elided commits (e.g. from squash or rebase merges)
Full changelog
HOSTEDCP-801 : [release-4.12] Expose external DNS for private cluster endpoints #2314 HOSTEDCP-839 : Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver #2297 OCPBUGS-10587 : Use appropriate serving certificate for OAuth #2295 OSD-15099 : Delaying the creation of servicemonitor and podmonitor resources till the hostedcluster is Completed #2274 Add PodMonitor for ingress-operator pods in HCP namespaces #2275
OCPBUGS-8334 : [release-4.12] Update the pull secret source for ignition payload #2268 Force controleplane upgrade always #2289
OCPBUGS-8370 : Fix cleanup of volumes on cluster deletion #2253 OCPBUGS-8241 : Add external DNS health condition / release-4.12 #2206 HOSTEDCP-809 : Clone CA key/cert to TLS key/cert #2263 Add configuration for automatic labeling and label commands #2255
fix(cpo): Delete multus validatingwebhookconfiguration on CNO init #2251
feat(HCCO): Block DNS operator delete until Cluster Version updated #2242
kms addition for pod identity workflow #2247
Add e2e test for hosted cluster behind a proxy #2199
Add e2e test for cluster creation with AWS KMS #2201
HOSTEDCP-826 : Customize DNS base domain prefix #2235 feat: Add pod gone check to prober + DNS operator leader elect #2209
fix(ibmcloud): Explicitly set HCCO controllers #2208
ensure reconcilation of apiserver port is in 4.12 #2195
Cleanup default security group only if authorized #2212
fix(cpo): Set restart annotation on multus-admission-controller #2190
fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac #2189
fix(cpo): Reduce CNO access if Calico used as network provider #2184
Full changelog
Updating ose-network-interface-bond-cni images to be consistent with ART #37
Full changelog
Updating ose-network-metrics-daemon images to be consistent with ART (#60) #60
Fix gofmt check issue (#68) #68
Update golang.org/x/text to 0.7.0 (#66) #66
Full changelog
Source code for this page located on github