4.12.0-0.okd-2023-03-05-022504

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.12.0-0.okd-2023-03-05-022504

Team Approvals:

No tests for this release

Upgrades from:

Upgrades to:

Changes from 4.12.0-0.okd-2023-01-21-055900

Created: 2023-03-05 09:21:06 +0000 UTC

Image Digest: sha256:fef2d0803e6ee6ec36d1979a0b847441580fbd9ee3ad583c97edb7ff811ee3b6

Release 4.12.0-0.okd-2023-03-05-022504 was created from registry.ci.openshift.org/origin/release:4.12.0-0.okd-2023-03-05-022504

Components

Kubernetes 1.25.4
Fedora CoreOS upgraded from 37.20221225.3 to 37.20230205.3

Rebuilt images without code change

cluster-baremetal-operator git 047391f0 sha256:82f0ea62b2864760774f47d261b3084451559a378fcc9003d58952257da26fa8
cluster-control-plane-machine-set-operator git 89727d88 sha256:e4f66b6a1ed283d7c15724005d8839aa43fabad4c652d45026e9507523dd573c
cluster-dns-operator git 1c136fe3 sha256:863cc4e4eefcb7821db6933cb4906b65f946a33ae02ea363f1289fb6df00d2c2
ibm-cloud-controller-manager git e5f25fc6 sha256:f121d1a92998c17ea4b2fe4094257166646543db0af617498c86b4e3768f7e06
machine-os-images git 566bf595 sha256:feebbf5fdeaebbe67347255ee1aeef93e2e1da0e6da966deaaa095589cf0373d

agent-installer-api-server

MGMT-13192: dualstack SNO cluster fails to complete - getting error In dual stack installation we should set dhcp,dhcp6 kargs in order to wait for ipv6 address when node comes after reboot (#4914) #4914
Full changelog

agent-installer-node-agent

Add sg3_utils package (#497) (#500) #497
Full changelog

alibaba-cloud-csi-driver

Updating ose-alibaba-cloud-csi-driver images to be consistent with ART #17
OCPBUGS-6493: UPSTREAM: 682: fix gofmt #22
Full changelog

aws-ebs-csi-driver-operator

OCPBUGS-7892: do not inject-proxy when deploying in hypershift control plane #187
Full changelog

azure-disk-csi-driver-operator

OCPBUGS-7885: Adjust client-side QPS, burst and worker threads in provisioner and attacher sidecars #70
Full changelog

baremetal-installer, installer, installer-artifacts, ovirt-installer

OCPBUGS-7594: fully qualified username must be provided #6864
OCPBUGS-7746: Convert platform type for AgentClusterInstall #6878
OCPBUGS-8015: make VIP 168.63.129.16 noProxy in all clouds except Public #6909
OCPBUGS-6087: Warn if agent assets detected when using non-agent waitfor #6788
OCPBUGS-7607: IBMCloud: Handle COS reclamations #6867
OCPBUGS-7529: bump RHCOS 4.12 bootimage metadata #6873
OCPBUGS-7521: Update AgentConfig template #6857
OCPBUGS-5992: azure: validate Windows-only VM types #6780
OCPBUGS-6991: Don’t require vSphere details for agent installer #6826
OCPBUGS-6807: Check platform baremetal settings against default values #6815
OCPBUGS-7103: Set the configured proxy settings for agent installer #6830
OCPBUGS-7131: bootstrap: set 0644 mode for registries.conf #6804
OCPBUGS-5960: bump RHCOS 4.12 bootimage metadata #6791
OCPBUGS-5996: vsphere: set default resource pool when missing failure domain topology #6781
OCPBUGS-5667: CVE-2021-4238: goutils: update for randomness fix #6764
OCPBUGS-5782: CVE-2021-4235: Denial of Service in go-yaml #6769
OCPBUGS-6052: validate additional confidential VM types #6785
OCPBUGS-4895: Set ip=dhcp,dhcp6 for master nodes on dualstack #6706
Full changelog

baremetal-runtimecfg

OCPBUGS-5743: If primary ip address was already created no need to choose new ip #214
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-7960: pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1354
OCPBUGS-6600: Fix kube version from 1.24.1 to 1.25.2 #1327
Full changelog

cluster-capi-controllers

OCPCLOUD-2860: Enable propagation of Machine annotations to Nodes #233
OCPCLOUD-2680: Enable machine to node propagation #229
NO-JIRA: Update manifests generator tooling #232
OCPCLOUD-2680: Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.5 (068c0f3) into master #231
OCPCLOUD-2857: Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.4 (79e6731) into master #230
OCPBUGS-45428: Updating ose-cluster-api-container image to be consistent with ART for 4.19 #228
OCPCLOUD-2742: Merge https://github.com/kubernetes-sigs/cluster-api:v1.8.4 into master #225
OCPCLOUD-2703: OWNERS: update subcomponent #223
OCPBUGS-39516: Updating ose-cluster-api-container image to be consistent with ART for 4.18 #222
NO-JIRA: Update OWNERS #211
OCPCLOUD-2625: Merge https://github.com/kubernetes-sigs/cluster-api:v1.7.2 (a5898a2) into master #210
OCPBUGS-34133: Updating ose-cluster-api-container image to be consistent with ART for 4.17 #208
OCPBUGS-33170: All containers must fallback to logs on error #207
OCPBUGS-30480: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.4 (36c0e55) into master #203
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.2 (da795db) into master #199
OCPBUGS-30586: fix e2e tests on release branches #200
OCPCLOUD-2517: openshift: promote core CAPI IPAM CRDs to GA #197
OCPBUGS-29519: openshift: add CustomNoUpgrade annotation value to feature-set #196
OCPBUGS-29476: openshift: generate separate manifest for core CAPI CRDs #195
OCPBUGS-26111: add snyk file #194
OCPCLOUD-2449: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.0 (14efefe) into master #192
NO-JIRA: e2e: add openstack testing script #193
OCPBUGS-25586: Updating ose-cluster-api-container image to be consistent with ART #191
OCPBUGS-25000: Updating ose-cluster-api-container image to be consistent with ART #190
OCPCLOUD-2255: Update manifests-gen tool #189
OCPCLOUD-2257: Use manifests generation tool from provider repo #179
Update OWNERS #183
OCPBUGS-21645: Bump golang.org/x/net to v0.17.0 #182
OCPBUGS-17286, OCPCLOUD-2222: Merge https://github.com/kubernetes-sigs/cluster-api:v1.5.2 (3290c5a) into master #181
OCPBUGS-19109: Updating ose-cluster-api images to be consistent with ART #180
OCPBUGS-6354, OCPBUGS-6372: Merge https://github.com/kubernetes-sigs/cluster-api:v1.4.2 (7b92ce4) into master #175
Make openshift/e2e-tests.sh executable #178
OCPCLOUD-2121: Add openshift/e2e-tests for CAPI E2E testing #177
Updating ose-cluster-api images to be consistent with ART #174
Updating ose-cluster-api images to be consistent with ART #170
Add enxebre approvers #171
Merge https://github.com/kubernetes-sigs/cluster-api:release-1.3 (eb18352) into master #167
Sync OWNERS file #168
Updating ose-cluster-api images to be consistent with ART #165
Merge https://github.com/kubernetes-sigs/cluster-api:main into master #163
UPSTREAM: <carry>: bump build root image to golang-1.19 #164
Full changelog

cluster-etcd-operator

Update reviewers and approvers #987
OCPBUGS-7409: set default timeouts in etcdcli #1005
OCPBUGS-6935: add dedicated success status for bootstrap removal #999
OCPBUGS-7373: [release-4.12] fail early on missing node status envs #1004
OCPBUGS-6898: updating library-go for CVE-2022-41717 #998
OCPBUGS-5762: should not scale-down when all members are healthy #984
Full changelog

cluster-image-registry-operator

OSASINFRA-3747: Prefer CA cert from credentials secret #1190
OCPBUGS-45409: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.19 #1196
CNTRLPLANE-112: Authenticate to Azure only once in CPO #1194
CNTRLPLANE-112: Bump msi-dataplane dependency #1187
CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication #1186
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-image-registry #1174
NO-JIRA: update owners #1178
OCPBUGS-50950: ensure that storage names don’t end in dashes #1177
OCPBUGS-47503: Power VS: Revert #1076 to match new API validation #1168
MULTIARCH-4971: Set import mode in image config based on ClusterVersion desired Architecture #1164
OCPBUGS-44491: add runbook url on prometheus alert rules #1159
OCPBUGS-41903: operator/status: clear azure path fix job conditions on operator removal #1142
MULTIARCH-5164: Update powervs-utils regions to include us-south and tor #1157
IR-490: manifests: add pvc related alerts to prometheus rules #1147
HOSTEDCP-1994: Add filewatcher for Azure client certificate authentication #1155
HOSTEDCP-2019: Use Client Cert Auth for ARO HCP deployments #1131
OCPBUGS-43508: fix proxy config and leader election test flakes #1140
OCPBUGS-38667: pkg/operator: wait for image registry config object cache sync #1138
OCPBUGS-42732: pkg/storage/azure: also check for auth failure error code on deletion #1129
CFE-1129: Added AWS TAGS reconciliation #1121
OCPBUGS-42514: azureclient: stop validating credentials when creating the client #1127
OCPBUGS-42196: pkg/storage/azure: use cluster-api tag key to discover vnet #1120
OCPBUGS-42106: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1122
OCPBUGS-42004: Set the Managed Identity client ID #1116
OCPBUGS-39485: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.18 #1113
OCPBUGS-37543: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1095
MULTIARCH-4971: Sync ImageStreamImportMode setting in the image config status #1090
OCPBUGS-38842: pkg/resource: invoke update-ca-trust extract with –output #1096
OCPBUGS-37543: Revert “Merge pull request #1087 from rajdeepc2792/rajdeepc2792/ARO-9391” #1093
ARO-9391, OCPBUGS-37543: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1087
OCPBUGS-38287: bump gophercloud to latest v2 #1086
IR-467: Enable MSI override for ARO HCP #1082
SPLAT-1721: Remove alibaba #1077
IR-471: Removing featuregate for chunkSizeMiB config #1073
Revert “IR-467: Enable Azure MSI authentication” #1079
IR-467: Enable Azure MSI authentication #1020
OCPBUGS-37207: Power VS: Check endpoints against lower case strings #1076
IR-471: Adding additional validation #1074
OCPBUGS-36038: go.*,vendor: bump go-retryablehttp #1063
IR-477: pkg/operator: deactivate azure path fix job #1061
IR-471: Exposing chunksize variable to utilize docker registry config #1060
OCPBUGS-34107: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.17 #1045
OCPBUGS-34399: Update rbac for featuregate #1056
OCPBUGS-33453: add SAR capability to image-registry #1046
CFE-962: Refactor code to mock GCP tag service for UTs #1027
OCPBUGS-34399: Revert “Merge pull request #1026 from deepsm007/expose-chunksize” #1052
OCPBUGS-34399: Exposing chunksize variable to utilize docker registry config #1026
OCPBUGS-34107: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.17 #1040
OCPBUGS-32710: pkg/storage/s3: use force path style in favour of virtual hosted style config #1028
OCPBUGS-33149: azure-path-fix: get client secret from k8s secret #1029
OCPBUGS-33868: Bump openshift api, client-go & library-go #1036
OCPBUGS-33172: azurepathfix: check if platform status is nil before accessing it #1030
OCPBUGS-32491: Power VS: Add support for Power VS endpoint overrides #1024
OCPBUGS-29559: Apply hypershift cluster-profile for ibm-cloud-managed #999
OCPBUGS-32328: azure-path-fix: support auth via account key (without clientID) #1021
OCPBUGS-30484: bump indirect google protobuf dependency #1015
NO-JIRA: remove bparees from owners #1019
OCPBUGS-29233: bump aws-sdk-go from v1.44 to v1.50 #1012
AUTH-482: set required-scc for openshift workloads #1008
NO-JIRA: bump golangci-lint to v1.56.2 #1013
OCPBUGS-29932: cmd/move-blobs: log and exit 1 on error instead of panic #1006
OCPBUGS-29637: azurepathfix: fix stack hub, government and workload identity setup #1003
OCPBUGS-29003: move azure storage blobs from docker back into /docker #998
NO-JIRA: Add hack/local-dev.sh #996
OCPBUGS-28225: pkg/storage/s3: enable bucket key on encryption settings #993
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #992
NO-JIRA: build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.16.0 #989
OCPBUGS-26767: MULTIARCH-4074: PowerVS: update supported regions #987
IR-409: build(deps): bump github.com/IBM/platform-services-go-sdk from 0.18.15 to 0.55.0 #974
OCPBUGS-24997: Updating ose-cluster-image-registry-operator-container image to be consistent with ART #979
IR-410: build(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1263 to 1.62.637 #980
OCPBUGS-11624: manifests/02-rbac.yaml: stop using wild cards #964
OCPBUGS-24649: add private endpoint permissions to Azure credentials request #971
OCPBUGS-24997: Updating ose-cluster-image-registry-operator-container image to be consistent with ART #975
IR-412: IBMCloud: Add support for endpoint overrides #955
CCO-248: Revert “Merge pull request #965 from jstuever/TRT-1368” #967
OCPVE-790: annotate credentials request manifests #959
OCPBUGS-24161: Updating ose-cluster-image-registry-operator-container image to be consistent with ART #966
TRT-1368: Revert “Merge pull request #935 from flavianmissi/CCO-248” #965
IR-366, IR-367, IR-411: allow users to configure private storage accounts in Azure #930
IR-408: request individual permissions for gcs #935
OCPBUGS-2889: accept user/pass OR application credentials on Swift UPI secret #924
IR-406, OCPBUGS-21853: bump k8s and openshift packages #936
OCPBUGS-21853: disable http2 for metrics endpoint #938
OCPBUGS-18969: move pruner role creation from openshift-apiserver #925
OCPBUGS-19262: Updating ose-cluster-image-registry-operator images to be consistent with ART #918
OCPBUGS-18469: increase storage account key cache expiration #912
OCPBUGS-17060: use Recreate on operator deployment #908
OCPBUGS-18103: check if response is nil before using it #909
OCPVE-632: add capability annotations to manifests #856
OCPBUGS-17882: Add rbac permission IDMS, ITMS #891
TRT-1193: Revert “IR-373: remove node-ca daemon” #899
CFE-846: Add user defined tags to the GCP buckets created #873
IR-373: remove node-ca daemon #867
build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 #877
build(deps): bump the k8s-dependencies group with 1 update #895
IR-363: Update Azure Credentials Request manifest of the Cluster Image Registry Operator to use new API field for requesting permissions #890
build(deps): bump github.com/prometheus/common from 0.37.0 to 0.44.0 #878
CFE-682: Add user defined labels to the GCP buckets created #872
CFE-682: Update openshift/api package to latest version #887
IR-390: Make a configmap for MCO to consume CAs #880
build(deps): bump github.com/aws/aws-sdk-go from 1.44.291 to 1.44.298 #879
build(deps): bump golang.org/x/net from 0.8.0 to 0.11.0 #871
build(deps): bump github.com/aliyun/aliyun-oss-go-sdk from 2.1.10+incompatible to 2.2.7+incompatible #869
.github/dependabot.yml: group certain dependencies #865
IR-389: bump aws-sdk-go #860
.github: configure dependabot #861
IR-369, IR-370: support Azure workload identity #857
OCPBUGS-12132: Updating ose-cluster-image-registry-operator images to be consistent with ART #854
Updating ose-cluster-image-registry-operator images to be consistent with ART #849
OCPBUGS-8224: fix storage selection on IBM cloud #847
OCPBUGS-6797: Add nil validation for IBM Cloud and Power VS infrastructure status in ibmcos #845
MULTIARCH-3212: Use IBM COS as storage backend for PowerVS #843
OCPBUGS-6621: bump aws-sdk-go #844
Add UserTags while creating Azure Storage Account #829
IR-341: bump openshift/api #828
IR-270: allow registry to create image objects #823
OCPBUGS-6175: OpenStack: Add support for Proxy #833
IR-308: Add support for External platform #825
OCPBUGS-4090: swift: Retry connecting to OpenStack #819
IR-311: storage: azure: use azidentity with an adapter #807
Bug 2065166: Remove roles/iam.serviceAccountUser role #824
Updating ose-cluster-image-registry-operator images to be consistent with ART #821
IR-314: Bump dependencies #816
Add config for golangci-lint and fix errors #820
hack/test-go.sh: generate coverage reports #818
OCPBUGS-3974: check for nil pointer before dereferencing #814
Bug 2066388: Add example for s3.regionEndpoint #815
OCPBUGS-2941: Bump gophercloud #808
add myself to OWNERS #809
Full changelog

cluster-ingress-operator

NE-2009: Relax pod bound validating admission rule for HyperShift #1221
NE-1969: Set Degraded=True if unmanaged Gateway API CRDs exist #1205
NE-1957: Add Gateway API DNS Feature e2e tests #1213
OCPBUGS-54650, OCPBUGS-54651, OCPBUGS-54652: desiredSubscription: Specify annotations and SCC #1214
NE-2009: Move VAP to Default featureset #1216
OCPBUGS-54568: desiredIstio: Specify priorityClassName #1211
OCPBUGS-53424: Wait for install plans to enter the “Requires Approval” phase before approving them #1203
NE-2008: Add GRPC conformance tests #1208
NE-1277: status: Add Gateway API objects to relatedObjects #933
NE-1994: Add E2E test for Istio manual deployment #1204
NE-1969: Add “v1” version to OpenShift GatewayClass controller name #1202
NE-1934: Bump to OSSM 3.0 for Gateway API support #1152
CORS-3907: Update ingress operator to with custom endpoints #1197
NE-1953: Add experimental Gateway API group to Validating Admission Policy #1200
NE-1907: Manage OSSM operator subscription manually to ensure a compatible version is installed #1112
NE-1981: Move controller test helpers to dedicated package #1199
NE-1953: Add Validating Admission Policy for Gateway API CRDs #1192
NE-1954: Implement GatewayAPIController feature gate #1198
NE-1936: Bump k8s.io dependencies to v0.32.1 #1184
OCPBUGS-31550: Gateway API - recreating SMCP which breaks Gateway API #1115
OCPBUGS-32776: Fix IBM Public Cloud DNS Provider Update Logic #1133
OCPBUGS-48780: Fix IBMCloud DNS Propagation Issues in E2E #1164
OCPBUGS-43745: Skip Test_IdleConnectionTerminationPolicyDeferred when DCM feature gate is enabled #1186
NE-1260: Add Makefile target to run Gateway API conformance tests #1176
OCPBUGS-43745: Add support for IdleCloseTerminationPolicy (Go http.Client) #1182
OCPBUGS-45585: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.19 #1173
OCPBUGS-41892: Single Watch on GWAPI CRD #1165
NE-1790: Follow up to enable Dynamic Configuration Manager feature gate #1174
SPLAT-1722: Remove alibaba #1111
CORS-3755: AWS: Add Ingress LB IPs to Infra CR when in-cluster DNS is enabled #1167
NE-1790: Enable Dynamic Configuration Manager feature gate #1159
OSASINFRA-3642: openstack: support setting external LB floating IP #1147
HOSTEDCP-2031: Use Client Certificate Authentication for ARO HCP deployments #1151
OCPBUGS-43412: Bump to k8s.io v0.31.1 (and deps) #1156
NE-1716: Bump Gateway API to v1.0.0 and OSSM to v2.6 #1163
CFE-1134: Watch infrastructure and update AWS tags #1148
OCPBUGS-43033: e2e/ingress_dns: support both private & public #1153
OCPBUGS-37932: Always log AWS service endpoints #1137
OCPBUGS-36340: Retry IngressController and Route updates in E2E tests #1116
OCPBUGS-42004: Set the MI client ID for the ARO HCP override #1144
AUTH-482: set required-scc for openshift workloads #1031
OCPBUGS-36044: Bump IBM/go-sdk-core to v5.17.4 #1120
OCPBUGS-41527: Add tolerations to survive scheduler taint manager e2e tests on workers #1143
OCPBUGS-41112: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.18 #1140
OCPBUGS-39151: Add Missing Scope Change Instructions #1135
OCPBUGS-38871: ingress: deployment: explicitly set DeploymentStrategy in SingleReplica case #1134
OCPBUGS-37491: Ingress operator status not degraded when canary route fails #1125
OCPBUGS-38217: Clear LB Status Parameters on LB Type Change #1126
OCPBUGS-34418: Allow router pods to use the “restricted” SCC #1064
OCPBUGS-38441: Resolve DNS Resolution CI Flakes in Subnets and EIP E2E #1127
OCPBUGS-38079: Bump controller-runtime to v0.18.4 #1122
NE-1798: API bump for promotion of eipAllocation from feature gates to GA. #1118
NE-1688: Enable Azure MSI authentication for ARO HCP #1119
NE-1674: Add LB EIP Allocation for AWS #1109
NE-1531: Fix Initialization of NLB Status Parameters #1114
NE-1531: AWS Subnet Selection #1046
NE-1273: Add a watch to the ingress operator so it will recreate the gwapi crds #1106
OCPBUGS-37627: Fix getRouteHost error handling #1110
NE-1208: Gateway API E2E Testing #1023
OCPBUGS-31664: Fix SyncLoadBalancerFailed status message of IngressController #1102
OCPBUGS-36465: Delete and recreate canary route to clear spec.host #1095
OCPBUGS-34413: Refine logging for accurate infra CR status updates #1103
OCPBUGS-35342: Add e2e test for connect timeout #1084
NO-JIRA: Add grzpiotrowski to OWNERS #1090
NO-JIRA: addowner-Thealisyed #1091
OCPBUGS-35356: Retry IngressController updates in router status E2E #1085
OCPBUGS-9037: Change Canary to use passthrough route #978
OCPBUGS-35368: Add Regexp Anchor to TestAll #1087
OCPBUGS-23221: internalServiceChanged: Fix target port logic #1052
OCPBUGS-34262: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.17 #1067
NE-1400: Bump to OSSM 2.5 and Gateway API v0.6.2 CRDs #1018
OCPBUGS-33792: Bump openshift/library-go to resolve NewPrometheusClient E2E failures #1054
OCPBUGS-32887: Allow operator to update Route spec.subdomain #1047
OCPBUGS-32942: Bump controller-runtime to v0.17.3 #1050
OCPBUGS-28673: implement connect timeout tuning option #1035
NE-1317: manifests - add ingress capability annotation #950
OCPBUGS-32371: Bump openshift/api, and update CRD generation #1045
OCPBUGS-25193: Add vnet subnet read and join permission for azure #1029
OCPBUGS-30834: Update to go 1.21 #1040
OCPBUGS-31722: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1037
OCPBUGS-3522: Include recent errors in canary checks fail #865
OCPBUGS-30091: TestHostNetworkPortBinding: Delete t.Parallel() #1032
CFE-987: Use RouterExternalCertificate feature gate for adding ROUTER_ENABLE_EXTERNAL_CERTIFICATE env var to the router pods #1017
CORS-2317: Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled #1016
OCPBUGS-28596: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.16 #1020
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #1019
NE-1490: update to go v1.20 #1012
OCPBUGS-15253: Include namespace in prometheus alerts IngressWithoutClassName and UnmanagedRoutes #980
CCO-249: Replace GCP role with explicit permissions #844
OCPBUGS-25006: Updating ose-cluster-ingress-operator-container image to be consistent with ART #1006
OCPBUGS-24531: Revert “ OCPBUGS-24531 Skip CI for scope change until OCPBUGS-24044 is resolved” #1011
OCPBUGS-24531: Revert “Merge pull request #1007 from candita/OCPBUGS-24531-SkipScopeChangeTest” and add changes to skip test only for Azure and GCP #1008
OCPBUGS-24531: Skip CI for scope change until OCPBUGS-24044 is resolved #1007
OCPVE-780: annotate credentials request manifests #995
OCPBUGS-23742: Bump controller-runtime to v0.16.3 #1001
NE-1402: Add service endpoint override capability to IBM DNS provider #990
OCPBUGS-16762: Revert “OCPBUGS-16762: Bump openshift/api for container.maxLength fix” #982
OCPBUGS-14994: Don’t add clientca-configmap finalizer if deleting #948
OCPBUGS-22020: Bump golang.org/x/net for CVE-2023-44487 #985
OCPBUGS-21803: test/e2e: Add test case for 2000000 maxConnections #983
OCPBUGS-20192: Require non-readonly filesystem in router container #981
OCPBUGS-16762: Bump openshift/api for container.maxLength fix #979
OCPBUGS-3541: Don’t create route metrics for ingress controllers that are not admitted #869
OCPBUGS-18248: Prevent GatewayClass from getting recreated #975
OCPBUGS-19268: Updating ose-cluster-ingress-operator images to be consistent with ART #977
OCPBUGS-15900: TestMTLSWithCRLs: only try to parse HTTP status code from curl output when stdout is long enough. #973
OCPBUGS-3356: E2E test for cookie length truncation #871
OCPBUGS-15978: Check public DNS zone when reporting status #967
OCPBUGS-17359: test/e2e: Don’t use openshift/origin-node #970
NE-1140, NE-1145: Set/delete HTTP request/response headers via IngressController API #872
OCPBUGS-16089: Set spec.subdomain on the canary route #965
OCPBUGS-14995: desiredRouterDeployment: Set HostPort if needed #947
OCPBUGS-10875: gateway-service-dns: Set DNS policy appropriately #934
NE-1244: Use permissions instead of the “Contributor” role in Azure CredentialsRequest #929
OCPBUGS-12790: README: Fix Bugzilla link #968
RFE-3007: Expose option-contstats as an unsupported option #887
NE-1189: Refactor Test_desiredLoadBalancerService #886
NE-1187: Use t.Run for table-driven tests #884
NE-1183: Rename unit tests for specific functions #880
NE-1269: Replace bindata using embed #905
RFE-3765: Allow Ingress to Modify the HAProxy Log Length when using a Sidecar #900
OCPBUGS-9274: canary: Tolerate infra node NoExecute taint #932
OCPBUGS-7546: Allow only 1 disruption with 3 replicas #931
OCPBUGS-15100: Fix previous attempt of adding a missing trailing dot to hostname #956
OCPBUGS-14396: Set controller-runtime logger to a null logger for E2E #946
OCPBUGS-14998: Only use RoleARN for Route53 API #951
OCPBUGS-15100: Create valid DNS names for Gateway API on GCP #949
OCPBUGS-13106: Add ingress controller status logging on waitForIngressControllerCondition #924
OCPBUGS-13190: Avoid spurious updates for internalTrafficPolicy #927
OCPBUGS-13810: Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #944
NE-1294: Add support for AWS shared VPC in another account #928
CCO-318: Enable Azure Workload Identity authentication. #906
OCPBUGS-6661, OCPBUGS-9464: Move mTLS CRL handling into the router, and fix accidental duplication of CRLs #939
OCPBUGS-13963: Bump vendors k8s libraries to 0.27.2 #936
Revert “OCPBUGS-6661, OCPBUGS-9464: Move mTLS CRL handling into the router, and fix accidental duplication of CRLs” #938
OCPBUGS-6661, OCPBUGS-9464: Move mTLS CRL handling into the router, and fix accidental duplication of CRLs #930
OCPBUGS-5478: add UBI based Dockerfile #925
CCO-318: Read feature gates for future usage #908
OCPBUGS-12913: Deflake TestRouterCompressionOperation #920
OCPBUGS-6784: bump controller-runtime to fix the multi namespace cache indexing #913
OCPBUGS-12579: Address CVE-2022-41723 #915
OCPBUGS-12790: Replace Bugzilla link with Red Hat Issue Tracker #916
OCPBUGS-10714: gatewayclass: Update for OSSM 2.4 API change #901
OCPBUGS-10189: Updating ose-cluster-ingress-operator images to be consistent with ART #898
OCPBUGS-10846: Fix TestClientTLS flakes #904
NE-1184: Test_desiredHttpErrorCodeConfigMap: Kill dead code and fix format #881
OCPBUGS-4054: configurable-route: Don’t use NewKindWithCache #860
NE-1186: Test_getRR: Fix typo: “excepted” → “expected” #883
CORS-2467: dns: azure: use azidentity with an adapter #846
NE-1105: Add support for Gateway API #890
OCPBUGS-7424: Bump vendored k8s libraries to 1.26.1 #888
CFE-679: Add user defined tags to the created DNS resources #874
OCPBUGS-6247: Updating ose-cluster-ingress-operator images to be consistent with ART #862
CORS-2072: GCP - Parse Zone ID with a project ID embedded #855
NE-1092: Add proxy protocol support for IBMCloud loadbalancers #812
OCPBUGS-6384: Address CVE-2022-41717 #876
OCPBUGS-4827: Add missing AWS permission for ListTagsForResources #868
OCPBUGS-6701: Avoid spurious updates for scope in IngressClass #879
OCPBUGS-6698: Fix conflict error message in ensureNodePortService #877
OCPBUGS-6700: updateIngressClass: Fix log message #878
NE-1124: Add support for External platform to CIO #873
OCPBUGS-4573: Target metrics port by name in internal service #864
OCPBUGS-434: Absorb PodsScheduled condition into MinAvailable #854
OCPBUGS-4759: Do not manage DNS for an ingresscontroller with domain mismatch in GCP #866
OCPBUGS-4703: Replace liveness-grace-period-seconds annotation #863
OCPBUGS-3404: Bump openshift/api for matchExpressions doc fix #856
OPNET-133: Support remote worker #858
OCPBUGS-1725: Ingress controller should not have affinity policy in single-replica clusters #810
OCPBUGS-1807: Fix bad handleSingleNode4Dot11Upgrade log message #808
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-6789: make the bootstrap kube-apiserver honor cluster-wide featuregates #1439
OCPBUGS-7369: Guard pod set readiness probe endpoint explicitly #1445
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-7369: Guard pod set readiness probe endpoint explicitly #699
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-7369: Guard controller: set the readiness probe endpoint explicitly #462
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-45640: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.19 #122
API-1835: bump library-go #120
OCPBUGS-20062: “gracefully” shutdown KSVM pod. #118
NO-JIRA: operator/starter.go: don’t report an error on shutdown #117
OCPBUGS-41169: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.18 #116
NO-JIRA: bump(*) #113
OCPBUGS-34306: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.17 #110
OCPBUGS-34306: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.17 #109
AUTH-482: set required-scc for openshift workloads #107
OCPBUGS-29567: Apply hypershift cluster-profile for ibm-cloud-managed #106
OCPBUGS-27930: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.16 #103
OCPBUGS-24989: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART #101
OCPBUGS-21738: bump library-go to include switch to HTTP/1.1 #95
OCPBUGS-19253: Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #94
Revert “specify master node selector on migrator pod” #93
OCPBUGS-17170: specify master node selector on migrator pod #92
OCPBUGS-16513: bump(*): update to 1.27.1 #91
Fix operator doc in README #90
Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #89
OCPBUGS-6240: Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #87
Full changelog

cluster-machine-approver

OCPCLOUD-2832: Bump k8s 1.32 #268
OCPBUGS-48056: Fix race condition in CO status controller test #264
OCPCLOUD-2787: Deploy CAPI manifests in CustomNoUpgrade #262
OCPBUGS-36404: Filter CSRs by signerName #243
OCPBUGS-45434: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.19 #247
OCPBUGS-45306: Ensure trailing dots on DNS names do not block serving cert auth #253
OCPBUGS-45306: Client internal DNS checks should ignore trailing dot #248
OCPCLOUD-2736: Update to k8s 1.31 #240
OCPCLOUD-2703: OWNERS: update subcomponent #239
OCPBUGS-39526: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.18 #238
OCPBUGS-36871: Client internal DNS checks should be case insensitive #237
NO-JIRA: Update OWNERS #236
OCPCLOUD-2602: Update dependencies to Kube 1.30 #235
OCPBUGS-34138: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.17 #232
OCPBUGS-33644: check for machine crd before listing machines #231
OCPBUGS-29568: Apply hypershift cluster-profile for ibm-cloud-managed #229
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #227
OCPBUGS-26116: Add Snyk file to exclude vendor directory on scan #225
OCPCLOUD-2417: Update to kube 1.29 and controller-runtime 0.17.0 #224
OCPBUGS-23544: Increase concurrent reconciles to 10 #222
OCPBUGS-25582: Updating ose-cluster-machine-approver-container image to be consistent with ART #223
OCPBUGS-24985: Updating ose-cluster-machine-approver-container image to be consistent with ART #218
OCPBUGS-24154: Updating ose-cluster-machine-approver-container image to be consistent with ART #217
OCPCLOUD-2277: Ensure Cluster Machine Approver metrics are only available via HTTPS #211
OCPBUGS-21594: Filter non node CSRs in metrics #208
OCPBUGS-21793: Bump x/net package to v0.17.0 #204
Update OWNERS #205
OCPBUGS-19250: Updating ose-cluster-machine-approver images to be consistent with ART #201
OCPCLOUD-2181: Update K8s dependencies to 1.28 #203
OCPBUGS-17090: Set logger for controller runtime #200
OCPBUGS-18338: Fix CI by running tests natively by default #199
OCPBUGS-16156: check if machine api present #198
handle situation when machine CRD is not present #191
OCPCLOUD-2044: Update to Kubernetes 1.27 deps #195
OCPBUGS-10171: Go 1.20 bump with fixed unit tests #194
OCPBUGS-11225: Update node client allowed usages #189
OCPBUGS-11225: Update isNodeClientCert to allow for new key usages #186
OCPBUGS-11225: approver: fix ECDSA approvals in 1.27 #184
Update TLS Bootstrapping doc links in README #182
Updating ose-cluster-machine-approver images to be consistent with ART #180
Update OWNERS #179
: Update tooling for CMA #178
OCPCLOUD-1805: Port to ginkgo v2 #176
Updating ose-cluster-machine-approver images to be consistent with ART #174
Update OWNERS #177
Full changelog

cluster-monitoring-operator

NO-JIRA: [bot] Synchronize versions of the downstream components #2589
MON-4161: add topology telemetry signals #2588
MON-4126: set fallbackScrapeProtocol: ‘PrometheusText1.0.0’ as default for all UWM Prometheus targets for backward compatibility with Prometheus v2 until a better migration process is available #2590
MON-4150: chore: update prometheus-operator go dep #2586
OCPBUGS-54516: provide context-rich and case-sensitive config validation #2584
MON-4149: chore: update library-go #2587
OCPBUGS-54223: Fix opentelemetry processor/receiver/exporter/extensions labels #2583
MON-4188: Add docs for proxy_url alertmanager #2582
NO-JIRA: [bot] Synchronize versions of the downstream components #2577
MON-4189: Updating node-exporter accelerators configmap #2558
MON-4043: Configuring external Alertmangers with proxy_url #2580
MON-4136: set up the PrometheusPossibleNarrowSelectors alert #2554
MON-3960: test: enable back TestTLSSecurityProfileConfiguration and m… #2545
NO-JIRA: chore: versions: kubeRbacProxy’s primary branch isn’t main yet #2574
OU-515: remove old nginx configmap deletion #2575
NO-JIRA: Bump prometheus-operator to 0.80.1 #2572
MON-4147: test: remove unnecessary UWM configuration in TestUserWorkloadMonitoringXXX #2567
OCPBUGS-50837: Fix opentelemetry metrics to use regexp on label match #2568
OCPBUGS-50703: Add incidents metric to telemetry #2569
NO-JIRA: Bump prometheus-operator to v0.80.0 #2565
MON-3866: create separate metrics client cert for metrics server #2536
NO-JIRA: tweak asciiDocs formatting to ease the mapping into the monitoring Docs #2563
OCPBUGS-48381: jsonnet: switch telemeter to main #2560
OCPBUGS-48376: jsonnet: switch openshift-state-metrics to main branch #2559
OCPBUGS-48370: chore: rename default branch in various places #2561
NO-JIRA: [bot] Synchronize versions of the downstream components #2531
OCPBUGS-48074: Fixing telemetry rule for accelerators #2551
MON-4107: chore: add logs (at v=3 level) regarding the deactivation of components #2546
OCPBUGS-31356: chore(client): DeleteXXX short-circuit if the resource doesn’t exist as a GET is less expensive than a no-op DELETE #2547
MON-4118: chore: use alertmanager v2 in tests as v1 is not longer supported in Prometheus 3 #2544
NO-JIRA: fix TestPrometheusRemoteWrite to align the image used for th… #2543
NO-JIRA: Bump prometheus-operator to 0.79.2 #2542
MGMT-19498: Fixing the configmap data fields #2540
NO-JIRA: Bump prometheus-operator to v0.79.1 #2538
MGMT-19498: Adding accelerators configuration file to the node-exporter #2530
OCPBUGS-35095: unpin kubernetes-mixin #2422
OCPBUGS-45389: update image to be consistent with ART for 4.19 #2533
OCPBUGS-35726: remove certificate hash annotation for monitoring-plugin #2524
OCPBUGS-45179: Use explicit name label for logging telemetry metrics #2529
NO-JIRA: [bot] Synchronize versions of the downstream components #2527
OCPBUGS-44831: disable token automount for alertmanager-user-workload SA #2522
NO-JIRA: use scrape class to avoid TLS config repetitions #2492
AUTH-482: set required-scc for openshift workloads #2498
MON-4046: add early validation for Platform and UWM monitoring configmaps #2490
OCPBUGS-38655: take cluster proxy into account for UWM Prometheus rem… #2523
MON-4058: Fix api-docs for ThanosRuler EvaluationInterval #2518
MON-3934: make TestImageRegistryPods more robust and split it into Pl… #2468
MON-4058: Expose evaluationInterval setting for UWM Prometheus and ThanosRuler #2517
MON-4078: report vendor_model:node_accelerator_cards:sum to Telemetry #2515
MON-4057: Expose scrapeInterval setting for UWM Prometheus #2503
NO-JIRA: [bot] Synchronize versions of the downstream components #2516
OCPBUGS-43987: Bump library-go to get latest tls suite changes #2513
OCPBUGS-27250: bump prometheus-operator to v0.78.1 #2514
MON-4051: Add new metrics for OpenShift logging telemetry #2512
MON-4065: [bot] Synchronize versions of the downstream components #2504
OCPBUGS-18007: Add runbook url for TelemeterClientFailures #2506
MON-4060: Bump prometheus-operator to v0.77.2 #2502
OCPBUGS-42671: make config unmarshalling more strict to help detect #2493
OCPBUGS-42148: Fix api doc on Thanos Ruler default retention #2500
MON-3850: Lint CMO tests #2292
MON-4021: feat: add the required utils for automated tests and integration with the docs #2443
NO-JIRA: fix CMO config for Alertmanager e2e tests #2495
NO-JIRA: [bot] Update jsonnet dependencies #2486
MON-3523: Disable http2 in metrics-server by default #2485
MON-3802: implement cross-namespace rules for UWM #2307
MON-3991: set noProxy for Prometheus remote-write via the CR. #2453
OCPBUGS-30122: chore: Bump to prometheus-operator 0.77.1 #2480
OCPBUGS-30122: Bump openshift/prometheus-operator to v0.77.1 #2484
NO-JIRA: vendor Kubernetes dashboards #2482
NO-JIRA: update Go dependencies #2481
OCPBUGS-41158: add pod-metrics-reader cluster role #2475
MON-3896: Add OpenTelemetry operator metrics #2450
NO-JIRA: clean-up generated dashboards #2479
NO-JIRA: remove 4.17 TODOs #2478
NO-JIRA: Update ConsolePlugin to include specs for i18n.loadType : Preload. #2477
MON-3367: chore: enable delayed-compaction feature flag on Platform and UWM Prometheuses #2469
OCPBUGS-39246: filter alerts sent to Telemeter #2466
MON-3934: move port forward setup inside retry loop for more resiliency #2465
MON-3934: merge TestAlertManagerHasAdditionalAlertRelabelConfigs into… #2464
MON-3994: [bot] Synchronize versions of the downstream components #2462
OCPBUGS-39133: Configure graceful shutdown for metrics-server #2460
MON-3994: [bot] Synchronize versions of the downstream components #2457
OCPBUGS-39126: disable user-defined monitoring per object #2452
OU-450: Migrate Monitoring Plugin Deployment from nginx to Go server #2412
MON-3992: [bot] Synchronize versions of the downstream components #2454
NO-JIRA: Update README.md #2456
Updating cluster-monitoring-operator-container image to be consistent with ART for 4.18 #2455
MON-3990: make TestClusterMonitorConsolePlugin check that one of the pods can serve /plugin-manifest.json #2444
MON-3989: [bot] Synchronize versions of the downstream components #2446
MON-3895: Add tempo operator metrics #2421
OCPBUGS-38780: update links to OpenShift documentation #2442
OCPBUGS-38289: fix(prometheus): avoid passing the cluster-wide proxy config to a remote endpoint when noProxy will prevent the proxuying anyway #2441
MON-3982: [bot] Synchronize versions of the downstream components #2440
MON-3982: Upgrade to Prometheus operator v0.76.0 #2438
MON-3967, MON-3981: [bot] Synchronize versions of the downstream components #2437
MON-3962: set proxy_from_environment to true #2431
OCPBUGS-33863: use UserWorkloadInvalidConfiguration reason when UWM config only is invalid #2436
HOSTEDCP-1044: Add nodepools telemetry metrics for HyperShift #2265
NO-JIRA: [bot] Synchronize versions of the downstream components #2435
MON-3972: [bot] Synchronize versions of the downstream components #2434
OCPBUGS-17506: Make error messages clearer on poll timeouts #2417
MON-3964: set scrape timestamp tolerance for user workload monitoring #2429
MON-3961: inject proxy env variables in Alertmanager #2424
MON-3949: [bot] Synchronize versions of the downstream components #2419
MON-3900: follow-up: clean up operator logic and some tests now that metrics-server is the default Metrics API backend #2425
OCPBUGS-37686: fix documentation typos #2427
NO-JIRA: fix: fix a small typo #2426
MON-3921: Revert “Revert “Merge pull request #2392 from machine424/f-… #2403
MON-3959: Skip TestTLSSecurityProfileConfiguration as disruptive #2423
MON-3900: Remove prometheus-adapter code #2409
MON-3947: [bot] Synchronize versions of the downstream components #2418
MON-3947: [bot] Synchronize versions of the downstream components #2414
MON-3947: Bump prometheus-operator to 0.75.1 #2416
MON-2065: jsonnet: exclude kubernetes-storage rules #2377
OCPBUGS-36495: Add deprecated config runbook #2410
OCPBUGS-31250: Exclude windows nodes from kubelet servicemonitor #2368
OCPBUGS-36406: add runbook_url annotations #2401
MON-3914: add a regression test for gogc based on the go_gc_gogc_percent metric #2393
MON-3914: [bot] Synchronize versions of the downstream components #2394
OCPBUGS-36299: Revert #2392 “MON-3800: jsonnet: update prometheus dep to fetch the PrometheusKuber…” #2398
MON-3800: jsonnet: update prometheus dep to fetch the PrometheusKuber… #2392
OCPBUGS-35480: Add deprecation for prometheus adapter #2381
MON-3915: chore: bump Go dependencies #2387
MON-3914: adjust Prometheus GOGC based on infra topology #2390
OCPBUGS-32696: opt-out of multi-cluster Prometheus dashboard #2351
OCPBUGS-35397: attach runbook to the PrometheusDuplicateTimestamps alert #2365
MON-3905: [bot] Synchronize versions of the downstream components #2382
MON-3894: revert(monitoring-plugin): undo nginx caching tweaks as the issue was… #2380
MON-3795, SDN-3817: Expose OVNKubernetes:AdminNetworkPolicy Metrics via telemetry #2297
MON-3897: [bot] Synchronize versions of the downstream components #2378
OBSDOCS-883: change docs to correct retention time uwm prometheus #2277
MON-3884: Send metric acm_managed_cluster_worker_cores via Telemetry #2367
MON-3887, MON-3889: [bot] Synchronize versions of the downstream components #2376
MON-3888: bump go tools 1.22 #2375
MON-3882: [bot] Synchronize versions of the downstream components #2371
MON-3701: clean-up injection of CA bundle for user Alertmanager #2361
OCPBUGS-33645: inject trusted CA bundle into UWM Alertmanager #2349
OCPBUGS-34437: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.17 #2372
MON-3881: chore: remove hack/ocp-images.sh #2366
MON-3801: clean-up unused OAuth proxy references #2359
MON-3701: clean-up injection of CA bundle for user Prometheus #2362
MON-3874: chore: poll immediately in the e2e tests #2356
MON-3701: clean-up tests #2360
OCPBUGS-33955: remove deprecated logtostderr argument #2355
OCPBUGS-33686: [bot] Synchronize versions of the downstream components #2363
OCPBUGS-23000: node-exporter: Prevent cluster-autoscaler from evicting #2346
MON-3763: Add cnv_abnormal #2291
OCPBUGS-34080: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.17 #2358
: NO-JIRA: Fix formatting in the resources documentation #2353
MON-3861: Bump go tools 1.21 #2348
MON-3856: Bump openshift/prometheus to v2.52.0 #2342
OCPBUGS-32510: change metrics-server probes for SNO #2337
MON-3851: Bump openshift/thanos to v0.35.0 #2338
MON-3847: Bump openshift/node_exporter to v1.8.0 #2336
OCPBUGS-32510: tweak Prometheus RBAC setup as a temp fix. #2334
AUTH-482: set required-scc for openshift workloads #2335
MON-3163: support VPAs #2078
OCPBUGS-23801: update OTEL google.golang.org/grpc/otelgrpc #2321
NO-JIRA: Increase checkAlertmanagerAPIVerbs timeout #2330
MON-3487: base CP enablement on dedicated feature gate #2153
OCPBUGS-32177: fix wrong dir hack/tools of tools.go #2327
MON-3707: Add ipsec state metric into telemetry #2326
MON-3701: clean-up injection of trusted CA bundle for k8s Prometheus #2323
MON-3839: test: add skip tests for prometheus adapter tests #2328
MON-3820: allow read-only access for Alertmanager API #2319
MON-3701: remove trusted CA bundle from Thanos Querier #2325
MON-3701: follow-up of PR #2308 #2324
MON-3825: Synchronize versions of the downstream components #2322
OCPBUGS-30430: update google.golang.org/protobuf #2320
MON-3701: clean-up injection of trusted CA bundle for main Alertmanager #2310
MON-3783: add controller-id annotation to pods deployments and operator #2309
OCPBUGS-18643: address lint warnings #2284
WINC-1180: assets, jsonnet: Add container_network openshift-kubernetes.rules #2314
OCPBUGS-31847: Synchronize versions of the downstream components #2318
MON-3701: remove references to OAuth proxy #2308
MON-3706: chore: simplify GetServiceAccountToken() #2272
MON-3621: Enable extra-scrape-metrics feature in PrometheusUWM #2302
OCPBUGS-31411: add runbook link for KubeAggregatedAPIErrors alert #2316
OCPBUGS-29531: Add include.release.openshift.io/hypershift label #2264
MON-3778, OLS-117: Add OLS metrics to telemetry whitelist #2300
OCPBUGS-31920: go.mod: bump openshift/api #2290
MON-3700: replace OAuth proxy for Thanos Ruler #2294
MON-3799: Synchronize versions of the downstream components #2301
MON-3749: enable request headers flags for metrics server #2293
OCPBUGS-28650: fix generation of telemeter token hash #2298
MON-3801: remove oauth-redirectreference annotations #2299
MON-3793: Synchronize versions of the downstream components #2295
MON-3793: jsonnet: Bump jsonnet deps for prometheus-operator #2296
MON-3792: fix metrics-server path for /test versions #2286
MON-3789: add a golangci-lint-fix makefile target to fix golangci-lint errros when possible #2275
MON-3771: update Prometheus operator to v0.72.0 #2288
MON-3498: Modify prometheus-adapter e2e tests to compact with metrics server #2196
OCPBUGS-30257: Making sure proxy settings are correctly forwarded in the generated remote write configs #2269
OCPNODE-2100: jsonnet: update crio port to TLS port 9637 #2257
MON-3694: chore: encourage the use of the new ‘slices’ package instead of ‘golang.org/x/exp/slices’ #2243
MON-3748: Enable audit logs by default for metrics-server #2280
MON-3380: adjust prometheus-k8s service openshift.io/description #2279
MON-3747: Increase e2e test timeout to 150 min #2278
MON-3381: replace OAuth proxy for Alertmanager #2260
OCPBUGS-28246: fix Thanos ruler alert generator url #2267
MON-3706: Revert “chore: poll immediately in the e2e tests” #2271
MON-3717: pkg/client.go: make some CreateOrUpdateXXX functions use library-go’s resourceapply utils. #2226
MON-3717: update library-go to get https://github.com/openshift/libra… #2266
MON-3380: re-add kube-rbac-proxy for /metrics and /federate #2261
MON-3172: describe monitoring services #2188
MON-3706: chore: poll immediately in the e2e tests #2258
MON-3380: replace OAuth proxy for prometheus-k8s #2246
OCPBUGS-18326: add Console cap annotation to dashboards #2254
TRT-1489: Revert “jsonnet: update crio port to TLS port 9637” #2255
OCPNODE-2022: jsonnet: update crio port to TLS port 9637 #2229
MON-3705: [bot] Update jsonnet dependencies #2208
MON-3699: chore: merge OmitFromDoc with HideFromDoc introduced in https://github.com/https://github.com/openshift/cluster-monitoring-operator/pull/2210 to hide fields from the doc #2247
MON-3697: use maximumStartupDurationSeconds instead of container patch #2251
OCPBUGS-28246: fix: set externalURL in UWM Prometheus #2250
MON-3689: Synchronize versions of the downstream components #2245
OCPBUGS-27289: followup of https://github.com/openshift/cluster-monitoring-operator/pull/2242 #2244
STOR-1289: Move vSphere prometheus rules to cluster-storage-operator #2235
OCPBUGS-27289: rollout metrics-server on cert rotations #2242
OCPBUGS-27213: Adjust lastError injection to wait.PollUntilContextTimeout’s final error #2234
MON-3676: move raptorsun out of reviewer list #2240
MON-3673: [bot] Synchronize versions of the downstream components #2238
MON-2853: add runbook link to TargetDown alert #2237
MON-3661: [bot] Synchronize versions of the downstream components #2236
OCPBUGS-26983: rollout monitoring plugin on TLS rotation #2233
MON-3661: chore: update Prometheus operator to v0.71.0 #2230
MON-3667: remove outdated documentation #2232
OCPBUGS-25849: make PrometheusAdapter and MetricsServer tasks less conflict prone #2218
OCPBUGS-25378: drop InfoInhibitor from default Alertmanager config #2225
MON-3664: chore: avoid issues with std.set* functions #2231
MON-3654: use Go standard errors package instead of github.com/pkg/errors #2224
MON-1047: fix: add terminationMessagePolicy: FallbackToLogsOnError to all conta… #2228
MON-3552: remove temporary cleanup code and no longer needed tests #2210
MON-3650: Synchronize versions of the downstream components #2222
MON-3649: Synchronize versions of the downstream components #2221
MON-3644: Ease the tracking of monitoring components versions. #2220
OCPBUGS-25803: make CMO ConsolePluginComponents task resilient to dependencies #2193
OCPBUGS-25676: fix(tasks): adjust ‘trusted CA bundle ConfigMap’ related logs for alertmanagers. #2219
MON-3633: Synchronize versions of the downstream components #2214
OCPBUGS-24977: Updating cluster-monitoring-operator-container image to be consistent with ART #2211
OCPBUGS-25403: go.mod update k8s.io/api* to v0.29.0 #2205
MON-3589: Refactor assertExemplarsEnabled check for UWM Prometheus xand add a check for –scrape.timestamp-tolerance on Platform Prometheus #2194
OCPBUGS-24977: use 1.20 in go.mod #2199
MON-3592: Use strict yaml unmarshaling #2195
OCPBUGS-25025: go.mod: bump prometheus-operator to v0.70.0 #2191
OCPBUGS-24977: Updating cluster-monitoring-operator-container image to be consistent with ART #2190
OCPBUGS-24630: additionalArgs: list items must have named fields #2189
MON-3553: Set scrape.timestamp tolerance #2187
OCPBUGS-23516: prevent plugin entry assets from caching #2186
OCPBUGS-21610: Detect ipv4/ipv6 socket in pod ip for nginx conf #2173
MON-3134: allow to query alerts from thanos-querier tenancy port #2184
MON-3551: fix: simplify jq script avoids error with jq1.7 #2180
MON-3454: Add track timestamps staleness #2160
OCPBUGS-24212: Add ownership annotation for certificates #2158
MON-3379: Replace the oauth-proxy before thanos-querier with kube-rbac-proxy #2136
MON-3544: Adjust NodeClock* alerting rules to work with PTP operator #2182
OCPBUGS-23745: Wait for 3 (instead of 2) consecutive failing reconcil… #2179
MON-3548: [bot] Synchronize versions of the downstream components #2183
MON-3543: Update API docs for Metrics Server #2181
OCPBUGS-24323: synchronize versions of the downstream components #2174
OCPBUGS-24340: patch securityContext for Thanos querier #2178
OCPBUGS-24323: update prometheus-operator jsonnet to v0.70.0 #2177
MON-3287: Remove openshift-etcd related RBAC as they will be manager by #2165
OCPBUGS-21610: revert #2166 #2172
MON-3524: Update metrics-server in CHANGELOG and README #2169
MON-3533: Update cluster:kube_persistentvolume_plugin_type_counts:sum #2171
STOR-1277: Add SELinux metrics to telemetry #2155
MON-3500: Enable sending exemplars over RW in UWM #2161
OCPBUGS-21610: Change config to allow ipv6/4 #2166
MON-3511: hack/local-cmo.sh: pass desired version in cmo run command #2168
MON-3211: Implement switching to metrics-server #2022
MON-3505: move aggregated-metrics-reader role to cmo jsonnet #2163
MON-3503: Synchronize versions of the downstream components #2162
OCPBUGS-23495: Change UWM Prometheus’ kube-rbac-proxy-thanos port num… #2164
MON-3479: update Prometheus operator assets to v0.69.1 #2152
MON-3503: Synchronize versions of the downstream components #2150
MON-3421: improve the detection of CMO unavailability/degradation due to U… #2129
MON-3476: Add code block to check FeatureGate status #2151
OCPBUGS-17035: fix KRP permissions for Thanos Querier #2057
OCPBUGS-22742: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 #2138
OCPBUGS-21621: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2145
MON-3398: Add RHACM telemetry metric #2100
Synchronize versions of the downstream components #2135
Fix UWM alert access permissions #2131
Synchronize versions of the downstream components #2133
OCPBUGS-4069: Prometheus Adatper takes metrics from kubelet job only. #2117
MON-3422: Remove temporary no more needed code #2132
fix: force HTTP/1.1 connections #2128
OCPVE-711: feat: add olm capability annotation #2105
OCPBUGS-21631: upgrade golang.org/x/net to v0.17.0 #2120
OCPBUGS-18326: revert previous fix to avoid activating console capability during update #2118
MON-3286: Remove no longer needed code. #2116
OCPBUGS-17850: replace nonResourceURLs permissions by subresource #2099
Synchronize versions of the downstream components #2115
Update jsonnet dependencies #2076
OWNERS: remove sthaha #2114
build: add -e to go list command to install tools #2112
Change kube-rbac-proxy-thanos port #2113
OCPBUGS-11344: alertmanager: use alertmanager CRD’s automountServiceAccountToken option #2111
Remove deprecated ioutil #2108
OCPBUGS-18326: add console capability annotation to dashboards and monitoring-plugin. #2101
MON-3302: add RHACS telemetry metrics #2062
add machine424 and rexagod to OWNERS #2083
Remove bparees from approvers #2104
Revert “feat: add olm capability annotation” #2103
MON-3270: Add kube-metrics-server to image-references #2102
OCPVE-711: feat: add olm capability annotation #2095
chore: fix imports order #2098
Set Thanos version in the Thanos Ruler spec #2094
OCPBUGS-19237: Updating cluster-monitoring-operator images to be consistent with ART #2084
Synchronize versions of the downstream components #2093
Synchronize versions of the downstream components #2089
MON-3383: Remove weak cryptograhic primitive usage #2086
OCPBUGS-18390: jsonnet/rules: exclude -1 from etcd objects count #2081
OCPBUGS-19059: Enable ipv6 on monitoring-plugin nginx #2090
MON-3376: Remove deprecated –logtostderr argument #2077
OCPBUGS-19356: Topology spread constraints admission webhook #2073
OCPBUGS-17682: add topologySpreadConstraints to UWM prometheus operator #2072
Synchronize versions of the downstream components #2082
MON-2642: Improve e2e tests for alertrelabelconfigs CRD #2080
MON-3304: Add option to specify resource limits for all components #2067
OCPBUGS-17690: remove deprecated argument #2075
OCPBUGS-17691: replace outdated repository link #2074
MON-2641: Add e2e tests for AlertingRule controller #2054
Add telemeter client SA to rbac proxy #2043
OCPBUGS-1062: update webhook configuration only if required #2065
MON-988: remove alert “MultipleContainersOOMKilled” #2071
Remove deprecated visual_web_terminal_sessions metric #2059
OCPBUGS-17487: fix typo for ThanosRulerConfig.Resources #2070
Update jsonnet dependencies #2063
OCPBUGS-17346: Avoid recreating some resources, created by prometheus-operator, during 4.13->4.14 upgrade #2066
MON-3291: Adjust node-exporter’s MaxProcs documentation now that we s… #2055
Synchronize versions of the downstream components #2061
MON-3093: fix single node replica issue #2060
OCPBUGS-17191: add namespace label to alerting rules #2058
Synchronize versions of the downstream components #2056
MON-2645: remove unnecessary RBAC permissions #2051
Synchronize versions of the downstream components #2052
OCPBUGS-10699: remove Kube*QuotaOvercommit alerts #2049
MON-2645: remove unused rebalancer code #2048
Synchronize versions of the downstream components #2050
Remove OADP metrics from the Telemetry #2040
MON-669: Remove etcd ServiceMonitors management code as they’ll be no… #2039
MON-3216: Add ownership labels to kube resources #1986
MON-3177: Expose and propagate TopologySpreadConstraints for kube state metrics #2026
OCPBUGS-16203: correct docs for metric node_systemd_timer_last_trigger_seconds. #2045
MON-3178: Expose and propagate TopologySpreadConstraints for prometheus-operator #2033
MON-3274: collect the number of LIST and WATCH requests to the apiserver from telemetry #2044
MON-2903: add nodeExporter.collectors.systemd settings. #1892
MON-3179: Expose and propagate TopologySpreadConstraints for openshift state metrics #2034
MON-3176: Expose and propagate TopologySpreadConstraints for prometheus-adapter #2025
OCPBUGS-9835: Add Content-Security-Policy headers to prometheus and alertmanager #2012
MON-3182: Expose and propagate TopologySpreadConstraints for UWM alertmanager #2037
MON-3180: Expose and propagate TopologySpreadConstraints for telemeter-client #2017
MON-3183: Expose and propagate TopologySpreadConstraints for UWM prometheus #2038
MON-3181: Expose and propagate TopologySpreadConstraints for thanos-querier #2035
MON-3231: add metric for the configured profile #2030
MON-3269: add nodeExporter.collectors.processes settings. #2032
MON-3222: Make netdev/netclass interfaces configurable #1963
e2e-tests: ensure pod assertions find at least one pod #2028
test/e2e/framework: remove unused function #2020
OCPBUGS-15440: fix CMO to apply console-plugin pod.spec config #2018
chore: update dependencies #2013
OCPBUGS-14922: skip console-plugin installation if console CO is absent #2011
OCPBUGS-12714: turn on netlink mode of netclass collector for node exporter #2015
MON-3249: Update telemeter-client to allow TLS through rbac proxy #2005
Synchronize versions of the downstream components #2024
OCPBUGS-13153: Limit the value of GOMAXPROCS on node-exporter. #1996
hack/local-cmo: show the correct logged-in user #2019
MON-3253: refactor local-cmo.sh to use CMO SA by default #2010
test/e2e: validate CMO and UWM configs #2006
pkg/operator: reduce duplication in CSR controllers #2007
Synchronize versions of the downstream components #2009
OCPBUGS-15210: manifest: rename TP roleBinding to cluster-monitoring-operator-alert-… #2008
MON-3127: add nodeExporter.collectors.ksmd settings. #1931
Synchronize versions of the downstream components #2004
MON-3229: Remove the dependency on the apiserver auth #1904
Synchronize versions of the downstream components #2003
Fix link metrics #1999
OCPBUGS-11958: Add the trusted CA bundle in UWM Prometheus pods #1970
OCPBUGS-14123: make TestBodySizeLimit less flaky #1991
Update OWNERS list #1951
MON-3113: add nodeExporter.collectors.mountstats settings. #1936
OCPBUGS-12903: Fix console metrics doc typo #1997
OCPBUGS-14816: Add misspell target in Makefile #1994
OCPBUGS-14887: [bot] Synchronize versions of the downstream components #1995
MON-2967: CMO deploys monitoring console-plugin #1890
OCPBUGS-14772: Add federate-client-certs #1990
OCPBUGS-14072: test: increase poll wait time for alertmanager #1973
OCPBUGS-14618: Synchronize versions of the downstream components #1988
OCPBUGS-14378: Skip some errcheck golangci-lint violations #1983
MON-2981: alertingrule and relabel: promote to v1 #1945
OCPBUGS-11889: disable CORS headers on Thanos querier #1950
OCPBUGS-14606: Remove remaining staticcheck violations #1989
OCPBUGS-14375: Fix golangci-lint gosimple violations #1979
OCPBUGS-14381: Skip golang-ci lint unused false positives #1985
OCPBUGS-14561: Prevent ci/prow/versions from failing on PR against release-xxx #1969
OCPBUGS-10387: label for infra nodes for metric cluster:capacity_cpu_cores:sum #1926
OCPBUGS-14379: Skip specific govet violation on operator main.go #1984
OCPBUGS-14371: Fix golangci-lint misspell violations #1978
OCPBUGS-14380: Fix golangcilint whitespace violations #1977
OCPBUGS-14377: Fix golangci-int wastedassign violations #1981
OCPBUGS-14376: Fix golangci-lint ineffassign violations #1980
OCPBUGS-14366: Fix golangci-lint unconvert violations #1982
OCPBUGS-13147: Add golangci-lint linters #1949
OCPBUGS-1626: update jsonnet dependencies #1961
OCPBUGS-12903: Add new web console usage metrics #1910
OCPBUGS-13939: Extend remote write test timeout #1971
OCPBUGS-14007: test/e2e: don’t fail on telemeter remote write failed samples #1972
OCPBUGS-13095: Uncomment cluster:vsphere_infrastructure_failure_domains:max #1960
OCPBUGS-12995: go.mod: update golang.org/x/net to v0.7.0 #1958
OCPBUGS-13006: Add build number to vsphere vcenter information #1946
OCPBUGS-12343: Update 4.14 cluster-monitoring-operator image to be consistent with ART #1952
jsonnet: add comment why empty prometheus container needed #1943
OCPBUGS-11434: node-exporter: disable btrfs collector #1937
4.14: OCPBUGS-11269: Add CSI migration for vSphere to telemetry #1933
Speedup jsonnet generation by running in parallel #1908
OCPBUGS-10690: jsonnet: Add prometheus container in UWM #1930
OCPBUGS-7694: add startup probe for prometheus-adapter #1917
OCPBUGS-10161: Updating cluster-monitoring-operator images to be consistent with ART #1914
OCPBUGS-8215: bugfix in Node Exporter argument setting #1909
OCPBUGS-7282: Node Exporter ignores network interface under name “cali[a-f0-9]*” #1905
Update jsonnet dependencies #1913
OCPBUGS-8282: turn off netlink mode of netclass collector in Node Exporter. #1912
MON-2894: add nodeExporter.maxProcs setting. #1895
MON-2973: test/e2e: Add cleanup func for alertmanager uwm secret test #1907
MON-2693: Scrape profiles #1785
MON-2959: test/e2e: Add test for alertmanager secret platform #1899
MON-2904: add nodeExporter.collectors.buddyinfo settings. #1891
MON-2895: toggle netlink implementation of netclass collector #1894
MON-2932: jsonnet/dashboards: add role template variable to node related dashbo… #1879
MON-2900: add nodeExporter.collectors.netclass settings. #1893
Update jsonnet dependencies #1903
MON-2951: create Routes only with ingress operator #1885
OCPBUGS-7391: wait for service CA secrets #1900
Synchronize versions of the downstream components #1902
MON-2973: pkg/manifests: Allow configuring secrets in alertmanager (UWM) #1884
Synchronize versions of the downstream components #1898
pkg/operator: fix typo in info logs #1896
MON-2901: add nodeExporter.collectors.netdev settings. #1888
STOR-1154: Add vSphere topology to telemetry #1886
Add nodeExporter.collectors.tcpstat settings. #1876
Synchronize versions of the downstream components #1887
MON-2959: Allow configuring secrets in alertmanager (platform) #1882
Update jsonnet dependencies #1880
Synchronize versions of the downstream components #1878
pkg/manifests/manifests.go: move constants to jsonnet #1873
Synchronize versions of the downstream components #1877
add nodeExporter.collectors.cpufreq settings. #1855
Update jsonnet dependencies #1869
Fix ‘make run-local’ target #1874
*: remove kube-rbac-proxy sidecar container #1870
OCPBUGS-2729: unify ignored network device list of Node Exporter. #1871
OCPBUGS-5353: unstack dashboards with limit markers. #1868
Update jsonnet dependencies #1865
Synchronize versions of the downstream components #1867
Update jsonnet dependencies #1864
Synchronize versions of the downstream components #1863
OCPBUGS-4521: check that all targets are up after certificate recreation #1848
Synchronize versions of the downstream components #1861
OCPBUGS-4219: Adds runbook link to PrometheusRuleFailures #1860
MON-2807: Use bearer token file for remote write authentication with telemeter #1733
OCPBUGS-1998: pkg/client: Update daemonset degrade condition #1812
Synchronize versions of the downstream components #1859
Bug 2114515: jsonnet: ignore /var/lib/ibmc-s3fs/ mountpoints #1854
Synchronize versions of the downstream components #1853
Synchronize versions of the downstream components #1852
OCPBUGS-4793: fix object reference in Kubernetes events #1842
Synchronize versions of the downstream components #1849
Updating cluster-monitoring-operator images to be consistent with ART #1846
OCPBUGS-2729: Node Exporter ignore virtual network device ‘enP.*’. #1843
Unpin and update jsonnet dependencies #1818
OCPBUGS-2141: compute doc link in PVC not configured message #1836
Synchronize versions of the downstream components #1838
go.mod: switch to go 1.19 #1839
Synchronize versions of the downstream components #1835
OCPBUGS-2260: add alert KubePodNotScheduled to group openshift-kubernetes.rules #1830
Synchronize versions of the downstream components #1831
Remove deprecated option from kube-state-metrics args #1832
OCPBUGS-4184: use mTLS authentication for metrics scraping #1827
OCPBUGS-4168: Increase startupProbe for prometheus #1824
OCPBUGS-4181: Fixes externalURL field for Prometheus and Alertmanager #1826
Synchronize versions of the downstream components #1823
OCPBUGS-1453: Fixed TargetDown expression to join on the proper label #1767
Bug 2095719: Updates CreateOrUpdateServiceAccounts #1745
OCPBUGS-4024: test: increase timeout when checking remote write metrics #1817
OCPBUGS-3331: Pin Jsonnet Deps + Update go.mod for 4.12 + Patch Alert KubePodNotRead #1816
Revert “OCPBUGS-3331: Pin Jsonnet Deps + Update go.mod for 4.12” #1815
OCPBUGS-3331: Pin Jsonnet Deps + Update go.mod for 4.12 #1814
Switch ksm registry to registry.k8s.io #1809
MGDAPI-4488: RHOAM fleet wide observability metrics #1771
Full changelog

cluster-network-operator

OCPBUGS-5953: Backport Added missing API field podref to OverlappingRangeIPReservation CRD [Backport 4.12] #1685
OCPBUGS-7044: HyperShift: Add .hypershift.local to no proxy list #1706
OCPBUGS-7044: HyperShift: Do not use proxy for internal routes #1704
OCPBUGS-4778: Fix handling of deployment and statefulset updates #1663
OCPBUGS-4238: HyperShift: Co-locate OVN-Kubernetes master with other hcp pods #1645
OCPBUGS-6494: OVN-Kubernetes: Stop sorting master node addresses, ignore readiness checks for redundant NB/SB #1691
OCPBUGS-3461: CNI binary copy should account for the possibility of symlinks [backport 4.12] #1615
OCPBUGS-4856: Disable the drop-icmp container ‘oc’ pprof webserver on Azure #1666
Full changelog

cluster-node-tuning-operator

E2E: Per Core Runtime Tuning Test automation (#509) (#568) #509
E2E: Network stack Pinning tests (#533) #533
Run node selector tests only if we 2 non Performanceworker nodes (#554) #554
skip multiple ranges test if cores < 20 and use core as key to delete cpu siblings (#543) #543
pao: latency-tests: read test log directly from pod (#547) #547
Add authentication to the /metrics endpoint (#553) #553
Update NTO images to be consistent with ART (#557) #557
OCPBUGS-5021: [release-4.12] Fix two irqbalance tests - smp affinity vs online (#530) #530
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-48177: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #612
MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #611
OCPBUGS-45701: Updating ose-cluster-openshift-apiserver-operator-cont… #607
NO-JIRA: Revert Disable ResilientWatchCacheInitialization #604
OCPBUGS-44693: Disable ResilientWatchCacheInitialization #603
OCPBUGS-23435: bump library-go to bring in workload-conditions fix #600
NO-JIRA: bump dependencies #598
API-1835: update to use the latest API #597
API-1835: switch OpenshiftDeploymentLatestRevisionClient to use the generic client #595
API-1835: update for more apply loops #592
MULTIARCH-4557: Sync import mode image config status field in the observed config #582
NO-JIRA: remove unused OperatorClient #594
API-1835: last transition time update #593
API-1835: update library-go to use new operator client #584
create CRDs from openshift/api #591
OCPBUGS-41617: increase openshift-apiserver failureThreshold #588
OCPBUGS-41232: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.18 #586
NO-JIRA: Bump library-go to add audit logs about events #587
OCPBUGS-39589: Rebase 1.30 #585
OCPBUGS-30492: bump google.golang.org/protobuf #583
OCPBUGS-34349: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #580
OCPBUGS-34349: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #579
AUTH-482: Set required-scc for openshift workloads #573
WRKLDS-1015: tolerate node-role.kubernetes.io/control-plane:NoExecute #574
OCPBUGS-29580: Apply hypershift cluster-profile for ibm-cloud-managed #572
OCPBUGS-32346: the apiservice controller waits until bootstrap complete #575
NO-ISSUE: Makefile: fixes test-e2e-encryption-rotation targets #577
NO-ISSUE: fix: TestRedeployOnConfigChange #576
OCPBUGS-22969: Use v1 for flowcontrol API #559
OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #566
OCPBUGS-18939: manifest: drop slo latency metrics in favor of sli #547
WRKLDS-1004: use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #562
OCPBUGS-24972: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART #561
OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #551
OCPBUGS-19231: Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #548
OCPBUGS-21733: bump library-go to include switch to HTTP/1.1 #552
WRKLDS-728: Capabilities: drop build/apps APIService when capabilities are not enabled #532
switch image-registry cert CM #545
OCPBUGS-16554: update dependencies to get rid of goproxy #546
AUTH-408: bindata: set required-scc #544
Plumb featuregates to the openshift-apiserver #542
allow etcd healthcheck timeout closer to probe timeouts to avoid failing on slower etcd #540
Add AES-GCM encryption tests #539
OCPBUGS-14010: increase timeout for probes #536
OCPBUGS-2765: Library go bump #538
OCPBUGS-12813: Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #534
Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #525
OCPBUGS-10040: update openshift/api to include aesgcm provider in the default apiserver schema #526
API-1509: Enable AESGCM encryption #521
OCPBUGS-4343: update apf configuration to use v1beta3 #509
OCPBUGS-6233: Bump dependencies and images #517
OCPBUGS-5300: routes/status resources can leak sensitive data, exclude it from audit #511
make api team approver #506
OCPBUGS-3929: update apf configuration to use v1beta2 #508
Full changelog

cluster-openshift-controller-manager-operator

WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #381
OCPBUGS-47528: Add team members to the OWNERS file #373
OCPBUGS-45698: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.19 #372
API-1835: bump library-go #370
WRKLDS-1492: Update k8s dependencies to 1.31.1 #368
OCPBUGS-41227: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.18 #364
create CRDs from openshift/api #367
no-jira: OWNERS: remove former employees #354
OCPBUGS-35801: nil pointer reference in ocm-operator #355
WRKLDS-1327: Replace wildcards by explicit list of verbs #353
WRKLDS-1292: Bump k8s dependencies to 1.30.1 #352
OCPBUGS-34395: Move cluster Build CR to runlevel 10 to match CRD #351
OCPBUGS-34077: Always Disable Default Rolebindings Controller #346
OCPBUGS-34054: lots of churn during image registry managed/removed transition #347
OCPBUILD-9: Adds capabilities for builder & deployer rolebindings controller #335
AUTH-482: set required-scc for openshift workloads #336
OCPBUGS-23848: Bumps opentelemetry dependencies #341
OCPBUGS-29973: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.16 #337
OCPBUGS-29581: Apply hypershift cluster-profile for ibm-cloud-managed #334
OCPBUGS-22969: Use v1 for flowcontrol API #316
BUILD-854: Add adambkaplan as approver #338
OCPBUGS-24888: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART #321
OCPBUGS-28666: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #326
OCPBUGS-23624: Add .snyk file to exclude vendor and ignore unit tests #325
WRKLDS-1016: Bump k8s dependencies to 1.29.0 #324
OCPBUGS-24190: Disable deployer-controller when deploymentconfig is disabled #320
OCPBUGS-22956: Remove blockage of ConfigObserver by build informer HasSynced flag #315
Revert “Revert #300 “API-1666: add image pull secret cleanup controller”” #314
Revert #300 “API-1666: add image pull secret cleanup controller” #313
API-1642: add image pull secret cleanup controller #300
API-1642: Do not generate image pull secrets for internal registry when internal registry is disabled. #298
OCPBUGS-21830: bump(k8s,openshift) to address CVE-2023-44487 #308
OCPBUGS-20164: Include Build CRD in manifests #306
WRKLDS-806: Bump kube dependencies to 1.28.2 #305
OCPBUGS-19136: Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #304
OCPBUGS-18932: Always sort disabled controller list #302
OCPBUGS-18498: Disable BuildConfigChange controller when Build cap is disabled #299
route-controller-manager deployment updates #295
OCPBUGS-16072: Updating Kubernetes and other associated dependencies #296
OCPBUGS-13926: change the operator log level to default normal in the deployment #289
BUILD-582, OCPBUGS-14638: bump(k8s): 1.27.1 #294
OCPBUGS-13926: add loglevel controller for OCM-o #292
Revert “13895: [WRKLDS-730] route-controller-manager deployment updates” #293
OCPBUGS-13895: [WRKLDS-730] route-controller-manager deployment updates #288
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #287
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #286
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #285
Bump golang.org/x/net from 0.5.0 to 0.7.0 #284
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #279
OCPBUGS-10568: migrate to using lease objects for leader election #282
Add Divyanshu Agrawal as a reviewer #283
OCPBUGS-4343: update apf configuration to use v1beta3 #273
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #274
WRKLDS-594: bump(k8s): 1.26.1 #277
OCPBUGS-5275: remove unnecessary RBAC for leader-locking-ingress-to-route-controller #276
OCPBUGS-3929: update apf configuration to use v1beta2 #272
let deployer pods patch/apply replication controllers #270
Bug 2111979: Set openshift.io/run-level to nil in openshift-controller-manager nam… #269
Full changelog

cluster-policy-controller

OCPBUGS-6789: backport feature gate honoring for PSa label syncer #98
OCPBUGS-7705: [release-4.12] update dependencies to point to v0.25.0 #102
Full changelog

cluster-samples-operator

OCPBUGS-7208: When setting allowedRegistries urls the openshift-samples operator is degraded #489
Full changelog

cluster-storage-operator

OCPBUGS-7331: hypershift: remove inject-proxy annotation from aws-ebs-csi-driver-operator deployment #337
Full changelog

cluster-version-operator

OCPBUGS-5879: Set upgradeability check throttling period to 2m #884
Full changelog

console

OCPBUGS-3892: Add cluster to query params of websocket requests #12282
OCPBUGS-5092: Fix to use and set correct secretReference for build-config triggers #12388
OCPBUGS-7895: Bump helm version to 3.10.1 #12579
OCPBUGS-6873: The dropdown list component will be covered by deployment details page on Topology page #12507
OCPBUGS-6831: Fix crash when pinnedResources is null #12503
OCPBUGS-7471: Right border radius is 0 for the pipeline visualization wrapper in dark mode #12565
OCPBUGS-7506: Fix different CI issues #12555
OCPBUGS-6966: Remove description field from the PLR parameters page #12519
OCPBUGS-7437: Webhook Secret (1 of 2) is not removed when Knative Service is deleted #12560
OCPBUGS-6887: Show Tag label and tag name if tag is detected in repository PipelineRun list and details page #12510
OCPBUGS-6816: Repositories list does not show the running pipelinerun as last pipelinerun #12500
OCPBUGS-4072: Fix rerender loop/crash when bindable-kinds is found but has no status #12304
OCPBUGS-6671: fix broken pipeline secret #12474
OCPBUGS-6913: PipelineRun task status overlaps status text #12516
OCPBUGS-6766: Fix to provide an option to delete all app resources on delete-resource modal for D/DC/KSVC #12491
OCPBUGS-6969: Added translation to Last used in resource type dropdown #12521
OCPBUGS-6764: Add Git Repository (PAC) showed empty permission content and non-working help link until a git url is entered #12490
OCPBUGS-4281: Do not disable metrics when auth is disabled #12323
OCPBUGS-6669: Do not show UpdateInProgress when status is Failing #12473
OCPBUGS-5093: Fix to show correct help texts for each git repo status error code #12389
OCPBUGS-6085: Editing Pipeline in the ocp console should show correct information #12452
OCPBUGS-6758: Add RBAC check on Create a Project link in all-namespaces pages #12489
OCPBUGS-6755: Remove refs-heads from the branch name for Repository pipelineRun row #12487
OCPBUGS-6743: Fix react warning when open console, add missing keys in navigation #12484
OCPBUGS-5875: Don’t proxy CORS response headers #12276
OCPBUGS-6678: fix run-time error on Cluster Settings when availableUp… #12476
OCPBUGS-4633: Monitoring: Fix alert descriptions with duplicate resources #12352
Full changelog

console-operator

OCPBUGS-6921: Recover ConsoleNotificationSync after being degraded #728
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6591: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 #174
OCPBUGS-6064: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 #172
Bug OCPBUGS-5403: Make sure LB status is updated immediately #164
Full changelog

csi-driver-manila-operator

OCPBUGS-6599: Address CVE-2022-41717 #166
Full changelog

csi-driver-nfs

OCPBUGS-6590: Address CVE-2022-41717 #105
Full changelog

docker-registry

OCPBUGS-4678: Bump aws-sdk-go to v1.44.145 #357
Full changelog

driver-toolkit

Adding rpm-build to the Dockerfile (#117) #117
Full changelog

fedora-coreos, machine-os-content, okd-rpms

Bump fedora-coreos to latest stable #555
Revert “Dockerfile.ci: report real FCOS version” #552
Revert “DEBUG: don’t pull in fresh FCOS” #532
Dockerfile.ci: report real FCOS version #549
manifests: remove extensions manifests #548
selinux fixes: allow iptables wrapper to write to tmpfs #546
Dockerfile: replace existing kubelet #543
Add a service which applies custom SELinux fixes #541
Dockerfile: enable services via systemd presets #540
Dockerfile: install netcat #538
Bump fedora-coreos to latest stable #531
overlay: prevent NM from modifying resolv.conf #528
Bump fedora-coreos to latest stable #526
Dockerfile.rpms: use stable CRIO releases #521
Bump openshift-os to latest release-4.12 #523
Bump openshift-os to latest release-4.12 #518
Dockerfile: remove rpm-ostree override #515
Full changelog

hyperkube, pod

OCPBUGS-5769: scc admission - seccomp profiles fix #1471
Full changelog

hypershift

Add e2e test for cluster creation with AWS KMS #2201
HOSTEDCP-826: Customize DNS base domain prefix #2235
feat: Add pod gone check to prober + DNS operator leader elect #2209
fix(ibmcloud): Explicitly set HCCO controllers #2208
ensure reconcilation of apiserver port is in 4.12 #2195
Cleanup default security group only if authorized #2212
fix(cpo): Set restart annotation on multus-admission-controller #2190
fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac #2189
fix(cpo): Reduce CNO access if Calico used as network provider #2184
Skip destroyAWSDefaultSecurityGroup if not AWS #2168
Create default security group for AWS clusters #2162
AUTH-323: pki: split out konnectivity certs from the rootCA #2156
fix(ibmcloud): Initialize image registry config on creates and bad config #2104
fix(cpo): Allow KAS profiling disablement #2122
reduce ignition server scope #2140
OpenID add support for groups claim in the config #2129
fix(cpo): Restart registry operator on annotation #2121
Fix CAPA crd generation #2120
Set k8s.io/kubernetes dependency to v0.23.3 #2118
fix(cpo): Separate RBAC for NTO + CNO #2112
Merge main up to db7c22ae into ‘release-4.12’ #2101
Merge main into release-4.12 branch #2053
Full changelog

insights-operator

OCPBUGS-6732: Anonymize env vars from containers: HTTP_PROXY, HTTPS_PROXY (#727) #727
OCPBUGS-6833: feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#736) #736
OCPBUGS-6782: Create gatherer for gathering machines. (#734) #734
OCPBUGS-5976: operators gatherer - handle ingresscontroller relatedObject & simplify (#714) (#719) #714
Full changelog

kube-proxy, sdn

OCPBUGS-6842: Handle race condition to setup default vnid flows #497
OCPBUGS-7227: Update for 4.12 / go 1.19, including gofmt updates #482
Full changelog

machine-api-operator

OCPBUGS-8286: Short circuit misfiring #1109
Full changelog

machine-config-operator

OCPBUGS-6943: Improvements for configure-ovs.sh #3528
OCPBUGS-6045: There are not enough logs in case “oc extract” is stuck in mco first boot #3503
OCPBUGS-6973: configure-ovs: optionally generate configuration in /run #3532
OCPBUGS-6779: baremetal: clean state generated by NM when run by dracut #3521
OCPBUGS-7241: controller: default overwrite to true for files #3546
OCPBUGS-6997: Fix 4.12 art images #3535
OCPBUGS-6805: Only check image type if we are sure there is work that needs to be done #3526
OCPBUGS-5999: 4.12 - remove goutils from dependency tree #3496
OCPBUGS-6179: controller: don’t render new MC until base MCs update #3506
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-3941: Backport Excluded ranges bug (#282) #103
Full changelog

network-interface-bond-cni

Updating ose-network-interface-bond-cni images to be consistent with ART #37
Full changelog

network-metrics-daemon

Updating ose-network-metrics-daemon images to be consistent with ART (#60) #60
Fix gofmt check issue (#68) #68
Update golang.org/x/text to 0.7.0 (#66) #66
Full changelog

oauth-apiserver

Updating ose-oauth-apiserver images to be consistent with ART #80
Full changelog

oc-mirror

OCPBUGS-6703: fix: adds logic that searches for the correct name when using a heads… (#554) #554
Updating oc-mirror-plugin images to be consistent with ART (#515) #515
Full changelog

openstack-machine-api-provider

OCPBUGS-7155: Address CVE-2022-41717 #55
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-7825: Set openshift.io/scc label to empty #456
OCPBUGS-7769: [release-4.12] update cluster policy operator dependency #454
OCPBUGS-7556: Defuse E2e timebomb #449
OCPBUGS-7086: cherry-pick pull request refactor FBC caching (#1051) f… #441
OCPBUGS-6260: Catalog, fatal error: concurrent map read and map write #440
OCPBUGS-7025: Set ImagePullPolicy of bundle unpacker to “IfNotPresent” for image digests #439
Full changelog

operator-marketplace

OCPBUGS-7108: Default CatalogSource aren’t always reverted to default settings #506
Full changelog

ovirt-machine-controllers

OCPBUGS-6309: Fix swapped CPU socket and thread mapping #173
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-7317: [release-4.12] Delete stale egress ip snat entries by node #1520
OCPBUGS-7026: Bump OVN to 22.12 and turn off neighbour response in router options. #1521
OCPBUGS-6040: addMasqueradeRoute: fallback to gateway interface IPs #1484
OCPBUGS-7230: Delete IGMP Groups when deleting stale chassis #1516
OCPBUGS-3399: Drop in-cluster traffic towards svcCIDR at wrong port #1490
OCPBUGS-6961: update base image of Dockerfile #1504
OCPBUGS-6823: [release-4.12] Fix Egress FW ACL rules in dualstack mode #1500
OCPBUGS-4862: Correct the deletion of noHostSubnet nodes #1470
OCPBUGS-298: ovnkube-trace: run ovn-sbctl and ovn-trace with –no-leader-only #1489
OCPBUGS-5841: ovnkube-node: Existing management port check #1475
OCPBUGS-6812: [release-4.12] Ensure loadbalancer cleanup doesn’t fail #1497
OCPBUGS-298: Bump OVN to 22.09.0-54 #1488
Full changelog

powervs-block-csi-driver

Update OWNERS component to Multi-Arch #24
Full changelog

powervs-block-csi-driver-operator

Update OWNERS component to Multi-Arch #16
Full changelog

powervs-cloud-controller-manager

Updated OWNERS component to Multi-Arch #29
Full changelog

powervs-machine-controllers

Update OWNERS #39
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-7458: Fixes ThanoRuler StatefulSet re-creation bug #217
Full changelog

telemeter

OCPBUGS-7702: Add ‘agent-installer’ value to ‘install_type’ label #451
Full changelog

tests

OCPBUGS-8024: Backport fixes to resume gathering CI disruption data for SLB and image registry #27759
OCPBUGS-7633: remove reference to old guard pods #27732
OCPBUGS-7285: extended: security: do not explicitly set api audience on token request #27716
OCPBUGS-6850: [release-4.12] upgrade/adminack: guarantee one admin ack check post-upgrade #27684
OCPBUGS-5493: Use cluster network MTU for bond interfaces #27637
OCPBUGS-5490: Fix intervalcreation incorrect year unit test bug #27668
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-7426: Add migrationDataStore field #59
OCPBUGS-6936: fix for nil user session (#1859) #57
Full changelog

vsphere-csi-driver-operator

OCPBUGS-7901: Bump sidecar timeouts for vsphere #142
OCPBUGS-7426: Fix datastore migration bug in 4.12 #139
Full changelog

vsphere-problem-detector

OCPBUGS-6788: Derive the fully qualified vSphere username when checking permissions #98
OCPBUGS-5509: Add a count of zonal volumes #97
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github