Back to index
4.12.0-0.okd-2023-03-18-084815 Download installer and client with:
oc adm release extract --tools quay.io/openshift/okd:4.12.0-0.okd-2023-03-18-084815 Team Approvals:
No tests for this release
Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Created: 2023-03-18 11:16:01 +0000 UTC
Image Digest: sha256:7153ed89133eeaca94b5fda702c5709b9ad199ce4ff9ad1a0f01678d6ecc720f
Release 4.12.0-0.okd-2023-03-18-084815 was created from registry.ci.openshift.org/origin/release:4.12.0-0.okd-2023-03-18-084815
Components
Kubernetes upgraded from 1.25.4 to 1.25.7
Fedora CoreOS upgraded from 37.20221225.3 to 37.20230218.3
Rebuilt images without code change
MGMT-20324 : Fix day2 add hosts with P/Z CPU architectures #7527 MGMT-20207 : avoid adding system CA bundle to AdditionalTrustBundle #7448 MGMT-20009 : Change OCP 4.19 to the default version #7506 NO-ISSUE: Change node-maintenance operator namespace to avoid conflict with node-healthcheck operator #7491
NO-ISSUE: fixing late binding #7070
Full changelog
Konflux build pipeline service account migration for assisted-installer-controller-acm-ds-main (#1108) #1108
Konflux build pipeline service account migration for assisted-installer-ds-main (#1110) #1110
Konflux build pipeline service account migration for assisted-installer-controller-ds-main (#1109) #1109
Konflux build pipeline service account migration for assisted-installer-acm-ds-main (#1107) #1107
MGMT-20567 : Enable HTTP endpoint for MCO ignition (#1117) #1117 NO-ISSUE: Update Konflux references (#1114) #1114
MGMT-20534 : Move getting Node replicas into waitForNodes (#1113) #1113 MGMT-20479 : Update assisted-installer to allow TNA Clusters (#1106) #1106 NO-ISSUE: Update Konflux references (#1112) #1112
NO-ISSUE: Apply konflux migration (#1105) #1105
NO-ISSUE: Update Konflux references (#1103) #1103
NO-ISSUE: Update Konflux references (#1095) #1095
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.19 (#957) #957
NO-ISSUE: Update Konflux references (#1090) #1090
MGMT-20153 : Fix ostree race between node-image-pull and installing to rootfs (#1076) #1076 OCPBUGS-53720 : Bump jwt to 4.5.2 (#1080) #1080 NO-ISSUE: Update Konflux references (#1082) #1082
MGMT-19421 : remove all references of HighAvailabilityMode and the command line argument –high-availability-mode (#1081) #1081 MGMT-20149 : Add required SAST tasks for Konflux (#1064) #1064 NO-ISSUE: Remove Paul account from OWNERS (#1073) #1073
MGMT-20198 : CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#1066) #1066 NO-ISSUE: Bump github.com/golang/glog from 1.2.0 to 1.2.4 (#1057) #1057
OCPBUGS-52696 , OCPBUGS-52704 : Bump crpto to v0.33.openshift.1 (#1053) #1053 NO-ISSUE: Update Konflux references (#1051) #1051
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#1049) #1049
NO-ISSUE: Update Konflux references (#1048) #1048
NO-ISSUE: Update Konflux references (#1042) #1042
MGMT-19421 : phase 1 of replacing the refference HighAvailabilityMode with ControlPlaneCount (#1027) #1027 MGMT-19950 : Modify Konflux YAMLs to ocm-2.14 (#1034) #1034 NO-ISSUE: Update Konflux references (#1031) #1031
NO-ISSUE: Update Konflux references (#1025) #1025
MGMT-19819 : Add the commit reference from which the image is built to the image (#1024) #1024 MGMT-19815 : Update tekton pipelines to point to new components (#1023) #1023 MGMT-19101 : Respect installer args (#1018) #1018 NO-ISSUE: Update Konflux references (#1017) #1017
MGMT-19621 : Fix Race condition between the OLM operators monitor to the cluster installation monitor (#1014) #1014 MGMT-19100 : Install to the current boot device when CoreosImage is set (#1003) #1003 COS-3013 : overlay node image before bootstrapping if necessary (#899) #899 NO-ISSUE: Update buildah image to fix a bug with SBOM (#1013) #1013
MGMT-19748 : Configure snyk ignore (#1010) #1010 NO-ISSUE: Update Konflux references (#991) #991
MGMT-19734 : Add renovate config to limit number of PRs (#1009) #1009 NO-ISSUE: Make konflux builds for downstream images to be multi-arch (#1008) #1008
MGMT-19645 : Configure the following things for releasing in konflux: (#1004) #1004 MGMT-19381 : Change downstream base images to rhel9.4 instead of ubi9 (#1002) #1002 MGMT-19595 : Push latest tag for downstream images after merge to konflux int repo (#1001) #1001 Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.19 (#956) #956
OCPBUGS-13612 : update gin version (#997) #997 MGMT-19537 : Bump golang.org/x/net to 0.33.0 (#981) #981 MGMT-19506 : Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (#976) #976 chore(deps): update konflux references (#972) #972
MGMT-19507 : Stop using multi-arch builds in konflux (#971) #971 chore(deps): update konflux references (#958) #958
NO-ISSUE: Red Hat Konflux update assisted-installer-controller-downstream-main (#965) #965
NO-ISSUE: Red Hat Konflux update assisted-installer-downstream-main (#966) #966
MGMT-19453 : Add downstream dockerfile (#960) #960 MGMT-19408 : Create tekton pipelines for acm 2.13 (#954) #954 MGMT-19390 : Update mce’s tekton pipelines to be multi-arch (#948) #948 OCPBUGS-45116 : Add retry to mount efi device (#947) #947 Red Hat Konflux update assisted-installer-controller-mce-downstream-main (#946) #946
Red Hat Konflux update assisted-installer-mce-downstream-main (#945) #945
MGMT-19371 : Add downstream dockerfiles for mce (#943) #943 NO-ISSUE: Add giladravid16 and pastequo to approvers list (#944) #944
OCPBUGS-42553 : Rhcos fails to reboot for skip mco reboot on s390x (#941) #941 NO-ISSUE: Update Dockerfile to use go.uber.org/mock (#911) #911
MGMT-19148 : Update assisted-service dependencies. (#936) #936 Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.18 (#917) #917
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.18 (#898) #898
NO-ISSUE: Bump PGX version (#932) #932
NO-ISSUE: Pin gocov version (#924) #924
OCPBUGS-38466 : Allow controller to continue when assisted-service (#896) #896 abi: let the bootstrap waiting for workers before rebooting (#910) #910
OCPBUGS-42149 : Libraries bump to mitigate CVE-2024-27289 (#903) #903 OCPBUGS-36577 : Switch to github.com/docker/distribution/reference to mitigate CVE-2024-3727 (#902) #902 MGMT-18550 : bump golang 1.21 (#894) #894 OCPBUGS-31570 : Bump to latest preinstall utils for disk cleanup fixes (#886) #886 NO-ISSUE: fixing ARM images builds (#885) #885
OCPBUGS-36779 : Reload host inventory on conflict (#877) #877 MGMT-18332 : Use centos stream 9 as the base image for test container (#876) #876 NO-ISSUE: Replace base golang image in the build Dockerfile as it is based on centos7 and it is EOL, which results in yum can’t reach its repositories (#862) #862
MGMT-17353 : Debug pod left in ImagePullBackOff after install in disconnected environment (#852) #852 MGMT-17353 : Debug pod left in ImagePullBackOff after install in disconnected environment (#817) #817 MGMT-16843 : Use hostnamectl to replace illegal hostname (#839) #839 OCPBUGS-32105 : Fix race to mark node Joined (#823) #823 NO-ISSUE: Bump github.com/onsi/gomega (#841) #841
MGMT-17305 : Moving disk operations to new repo (#840) #840 MGMT-17518 : Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#818) #818 Move to rhel9, decouple from cli image (#760) #760
NO-ISSUE: Decouple inventoryClient from ops (#811) #811
NO-ISSUE: Decouple inventoryClient from ops (#810) #810
NO-ISSUE: Bump the go-dependencies group with 3 updates (#809) #809
MGMT-16587 : Update to mitigate CVE-2024-21626 (#806) #806 MGMT-17305 : Wipe installation disk on IBI (#808) #808 MGMT-17384 : Change waiting for encapsulated machine config from retry to wait-for-predicate (#807) #807 NO-ISSUE: Bump the go-dependencies group with 1 update (#803) #803
MGMT-17308 : Offboard osherdp from maintainers list (#802) #802 MGMT-16587 : Bump runc to 1.1.12 to mitigate CVE-2024-21626 (#801) #801 OCPBUGS-30056 : RAN - SNO 4.16 deployment - Failed at Rebooting in agent (#800) #800 MGMT-16993 : [STG] avoid reboot not working correctly when there is a partition on installation disk (#798) #798 NO-ISSUE: Bump the go-dependencies group with 5 updates (#799) #799
NO-ISSUE: Bump the go-dependencies group with 2 updates (#797) #797
MGMT-16843 : Ensure valid hostname during install (#788) #788 MGMT-16966 : Problem creating extra partition on main disk in 4.15+ (#787) #787 NO-ISSUE: Bump the go-dependencies group with 2 updates (#786) #786
MGMT-16211 : Remove all timeouts from controller (#779) #779 OCPBUGS-25718 : Do not remove uninitialized taints if vSphere credentials are provided. (#778) #778 MGMT-14226 : Upgrade docker to 20.10.24 for CVE-2023-28842 (#781) #781 NO-ISSUE: Bump the go-dependencies group with 4 updates (#780) #780
NO-ISSUE: Bump the go-dependencies group with 1 update (#776) #776
NO-ISSUE: Bump the go-dependencies group with 2 updates (#772) #772
NO-ISSUE remove filanov from approves (#773) #773
NO-ISSUE: Bump the go-dependencies group with 1 update (#770) #770
NO-ISSUE: Bump the go-dependencies group with 2 updates (#769) #769
NO-ISSUE: Bump the go-dependencies group with 1 update (#768) #768
NO-ISSUE: Bump the go-dependencies group with 3 updates (#766) #766
NO-ISSUE: Bump the go-dependencies group with 2 updates (#762) #762
MGMT-16266 : Indication event showing how often host has been rebooted missing on some nodes (#757) #757 NO-ISSUE: fix golangci-lint failing to be pulled (#758) #758
NO-ISSUE: Bump the go-dependencies group with 2 updates (#756) #756
NO-ISSUE: Bump the go-dependencies group with 2 updates (#755) #755
OCPBUGS-20049 : Remove uninitialized taint for agent-based installs (#739) #739 MGMT-16258 : Partitions naming convetion is different for various disk types (#752) #752 NO-ISSUE: Bump the go-dependencies group with 2 updates (#751) #751
Updating ose-agent-installer-orchestrator images to be consistent with ART (#719) #719
MGMT-15926 : Delete failed OLM jobs and subscription install plans in all cases during initialization check, not only in case of not found error (#748) #748 NO-ISSUE: Add my github account as an OWNER for this repository (#749) #749
NO-ISSUE: Bump the go-dependencies group with 2 updates (#747) #747
MGMT-15902 : Trigger event that notifies the number of reboots once the node installation is completed (#744) #744 NO-ISSUE: Bump the go-dependencies group with 1 update (#745) #745
NO-ISSUE: Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#743) #743
NO-ISSUE: Bump github.com/operator-framework/api from 0.17.7 to 0.18.0 (#742) #742
MGMT-16039 : upgrade to golang 1.20 (#741) #741 NO-ISSUE: Bump the go-dependencies group with 7 updates (#738) #738
OCPBUGS-16482 : Update dependencies to remove goproxy dependency (#701) #701 MGMT-15984 : Assisted installer doesn’t freeze and unmount file systems used for overwriting os image (#737) #737 NO-ISSUE: Bump golang.org/x/sync from 0.1.0 to 0.4.0 (#731) #731
Updating ose-agent-installer-csr-approver images to be consistent with ART (#718) #718
MGMT-15710 : Assisted installer changes for avoiding MCO reboot (#713) #713 MGMT-15810 : fix image missing nsenter executable (#729) #729 MGMT-15810 : change base image to stream9 (#725) #725 NO-ISSUE: fix dependabot ingored packages (#724) #724
NO-ISSUE: dependabot exclude k8s (#706) #706
OCPBUGS-16482 : bump golangci-lint to 1.53.1 (#702) #702 OCPBUGS-4240 : allow controller to complete for agent-based installs (#700) #700 MGMT-15235 : Compile with CGO_ENABLED=1 for amd64 (#699) #699 Revert “MGMT-15235: Compile with CGO_ENABLED=1 for FIPS (#683)” (#693) #683
OCPBUGS-17252 : Bump golang.org/x/net/html (#695) #695 Updating ose-agent-installer-orchestrator images to be consistent with ART (#652) #652
MGMT-15343 : dependabot group updates (#692) #692 MGMT-15344 : Assisted-controller should not timeout on waiting cvo by itself (#688) #688 MGMT-15235 : Compile with CGO_ENABLED=1 for FIPS (#683) #683 MGMT-13586 : Wait for ETCD Bootstrap to complete (#670) #670 NO-ISSUE: Remove slaviered from project OWNERS (#669) #669
NO-ISSUE: Bump github.com/go-openapi/strfmt from 0.21.3 to 0.21.7 (#663) #663
Updating ose-agent-installer-csr-approver images to be consistent with ART (#651) #651
MGMT-14299 : Limit untaint nodes to vsphere/nutanix (#660) #660 NO-ISSUE: Add javipolo to approvers (#659) #659
MGMT-12967 : Create network policy in assisted-installer namespace (#658) #658 NO-ISSUE: Bump github.com/onsi/gomega from 1.24.2 to 1.27.5 (#656) #656
MGMT-14114 : Nutanix - uninitialized set on nodes (#653) #653 NO-ISSUE: controller logs optimizations (#646) #646
NO-ISSUE: Bump golang.org/x/sync (#644) #644
MULTIARCH-3387 : Set boot device to target disk for powervm (#626) #626 MGMT-13710 : assisted-installer-controller hangs for 2 minutes before uploading the ingress CA (#638) #638 NO-ISSUE: Bump golang.org/x/net from 0.5.0 to 0.7.0 (#640) #640
NO-ISSUE: Replace iotil by os and io in order to fix lint issues (#642) #642
NO-ISSUE: Bump openshift/release from golang-1.18 to golang-1.19 (#612) #612
MGMT-13568 : Add pause mcp while setting new role labels (#623) #623 MGMT-13292 : Add the installed version of the OLM operators in the monitor operators response (#622) #622 Remove uninitialized taint from vSphere nodes (#629) #629
OCPBUGS-7149 : IPv6 multinode spoke no moving from rebooting/configuring stage (#627) #627 MGMT-13507 : Apply node labels only when node is Ready (#620) #620 MGMT-13463 : Assisted-controller can fail to send summary logs and we will not have any logs (#619) #619 MGMT-10785 : report failing cluster operators controller -> service (#617) #617 MGMT-13229 : SNO: Start controller when node is not ready, right after joined (#613) #613 MGMT-13385 : Installation fail due to race condition in etcd bootstrap strategy (#618) #618 MGMT-13131 : shorten SNO installation duration (#615) #615 NO-ISSUE: Bump golang.org/x/net from 0.4.0 to 0.5.0 (#611) #611
MGMT-13141 : assisted-installer-controller shouldn’t try to update BMH if (#610) #610 Updating ose-agent-installer-orchestrator images to be consistent with ART (#588) #588
NO-ISSUE: Bump github.com/operator-framework/api from 0.17.1 to 0.17.3 (#609) #609
MGMT-12908 : Labeling nodes as quick as possible and fixing hostname possible issue (#601) #601 NO-ISSUE: Bump github.com/thoas/go-funk from 0.9.2 to 0.9.3 (#608) #608
Bump assisted-service to v1.0.10-0.20221222230528-2b0f66c4cdcd (#604) #604
NO-ISSUE: Bump github.com/operator-framework/api from 0.17.2 to 0.17.3 (#603) #603
MGMT-12339 : Update host install progress on cleanup error (#597) #597 MGMT-12984 : Add more logs to LVM cleanup (#600) #600 NO-ISSUE: Bump github.com/onsi/gomega from 1.24.1 to 1.24.2 (#599) #599
MGMT-12339 : Add extra step to force clean disks with LVM volumes (#583) #583 Remove jira tickets prefix requirements (#594) #594
NO-ISSUE: Bump golang.org/x/net from 0.2.0 to 0.4.0 (#593) #593
MGMT-12471 : Don’t crash if operator isn’t monitored by service (#589) #589 NO-ISSUE: Bump github.com/go-openapi/runtime from 0.24.2 to 0.25.0 (#585) #585
NO-ISSUE: Bump github.com/operator-framework/api from 0.17.1 to 0.17.2 (#584) #584
NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.12.3 to 0.13.1 (#569) #569
NO-ISSUE: Bump github.com/onsi/gomega from 1.22.1 to 1.24.1 (#577) #577
NO-ISSUE: Bump k8s.io/client-go from 0.24.4 to 0.25.4 (#576) #576
OCPBUGSM-46219 : OCPBUGSM-46220: Update golang version to 1.18.1. (#581) #581 MGMT-12471 : Don’t wait for console if it is disabled (#574) #574 NO-ISSUE: change all ‘go get’ commands to ‘go install’ (#580) #580
NO-ISSUE: Log informative error in case subscription doesn’t have CSV (#573) #573
MGMT-12467 : Remove special handling for installing OCP < 4.7 (#571) #571 MGMT-12469 : Add resolv.conf content to controller logs in order to improve dns issue visibility (#572) #572 OCPBUGS-3166 : assisted-installer: pod creation fails due to violations of security policies in 4.12 (#568) #568 NO-ISSUE: improvement on gathering controller logs, validating that buffer is not empty (#567) #567
Full changelog
CNTRLPLANE-112 : Remove ARO HCP MIv2 Authentication for Ingress Operator #1222 CNTRLPLANE-112 : Add new Azure authentication type for managed Azure HCP for cluster-ingress #1191 NE-2009 : Relax pod bound validating admission rule for HyperShift #1221 NE-1969 : Set Degraded=True if unmanaged Gateway API CRDs exist #1205 NE-1957 : Add Gateway API DNS Feature e2e tests #1213 OCPBUGS-54650 , OCPBUGS-54651 , OCPBUGS-54652 : desiredSubscription: Specify annotations and SCC #1214 NE-2009 : Move VAP to Default featureset #1216 OCPBUGS-54568 : desiredIstio: Specify priorityClassName #1211 OCPBUGS-53424 : Wait for install plans to enter the “Requires Approval” phase before approving them #1203 NE-2008 : Add GRPC conformance tests #1208 NE-1277 : status: Add Gateway API objects to relatedObjects #933 NE-1994 : Add E2E test for Istio manual deployment #1204 NE-1969 : Add “v1” version to OpenShift GatewayClass controller name #1202 NE-1934 : Bump to OSSM 3.0 for Gateway API support #1152 CORS-3907 : Update ingress operator to with custom endpoints #1197 NE-1953 : Add experimental Gateway API group to Validating Admission Policy #1200 NE-1907 : Manage OSSM operator subscription manually to ensure a compatible version is installed #1112 NE-1981 : Move controller test helpers to dedicated package #1199 NE-1953 : Add Validating Admission Policy for Gateway API CRDs #1192 NE-1954 : Implement GatewayAPIController feature gate #1198 NE-1936 : Bump k8s.io dependencies to v0.32.1 #1184 OCPBUGS-31550 : Gateway API - recreating SMCP which breaks Gateway API #1115 OCPBUGS-32776 : Fix IBM Public Cloud DNS Provider Update Logic #1133 OCPBUGS-48780 : Fix IBMCloud DNS Propagation Issues in E2E #1164 OCPBUGS-43745 : Skip Test_IdleConnectionTerminationPolicyDeferred when DCM feature gate is enabled #1186 NE-1260 : Add Makefile target to run Gateway API conformance tests #1176 OCPBUGS-43745 : Add support for IdleCloseTerminationPolicy (Go http.Client) #1182 OCPBUGS-45585 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.19 #1173 OCPBUGS-41892 : Single Watch on GWAPI CRD #1165 NE-1790 : Follow up to enable Dynamic Configuration Manager feature gate #1174 SPLAT-1722 : Remove alibaba #1111 CORS-3755 : AWS: Add Ingress LB IPs to Infra CR when in-cluster DNS is enabled #1167 NE-1790 : Enable Dynamic Configuration Manager feature gate #1159 OSASINFRA-3642 : openstack: support setting external LB floating IP #1147 HOSTEDCP-2031 : Use Client Certificate Authentication for ARO HCP deployments #1151 OCPBUGS-43412 : Bump to k8s.io v0.31.1 (and deps) #1156 NE-1716 : Bump Gateway API to v1.0.0 and OSSM to v2.6 #1163 CFE-1134 : Watch infrastructure and update AWS tags #1148 OCPBUGS-43033 : e2e/ingress_dns: support both private & public #1153 OCPBUGS-37932 : Always log AWS service endpoints #1137 OCPBUGS-36340 : Retry IngressController and Route updates in E2E tests #1116 OCPBUGS-42004 : Set the MI client ID for the ARO HCP override #1144 AUTH-482 : set required-scc for openshift workloads #1031 OCPBUGS-36044 : Bump IBM/go-sdk-core to v5.17.4 #1120 OCPBUGS-41527 : Add tolerations to survive scheduler taint manager e2e tests on workers #1143 OCPBUGS-41112 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.18 #1140 OCPBUGS-39151 : Add Missing Scope Change Instructions #1135 OCPBUGS-38871 : ingress: deployment: explicitly set DeploymentStrategy in SingleReplica case #1134 OCPBUGS-37491 : Ingress operator status not degraded when canary route fails #1125 OCPBUGS-38217 : Clear LB Status Parameters on LB Type Change #1126 OCPBUGS-34418 : Allow router pods to use the “restricted” SCC #1064 OCPBUGS-38441 : Resolve DNS Resolution CI Flakes in Subnets and EIP E2E #1127 OCPBUGS-38079 : Bump controller-runtime to v0.18.4 #1122 NE-1798 : API bump for promotion of eipAllocation from feature gates to GA. #1118 NE-1688 : Enable Azure MSI authentication for ARO HCP #1119 NE-1674 : Add LB EIP Allocation for AWS #1109 NE-1531 : Fix Initialization of NLB Status Parameters #1114 NE-1531 : AWS Subnet Selection #1046 NE-1273 : Add a watch to the ingress operator so it will recreate the gwapi crds #1106 OCPBUGS-37627 : Fix getRouteHost error handling #1110 NE-1208 : Gateway API E2E Testing #1023 OCPBUGS-31664 : Fix SyncLoadBalancerFailed status message of IngressController #1102 OCPBUGS-36465 : Delete and recreate canary route to clear spec.host #1095 OCPBUGS-34413 : Refine logging for accurate infra CR status updates #1103 OCPBUGS-35342 : Add e2e test for connect timeout #1084 NO-JIRA: Add grzpiotrowski to OWNERS #1090
NO-JIRA: addowner-Thealisyed #1091
OCPBUGS-35356 : Retry IngressController updates in router status E2E #1085 OCPBUGS-9037 : Change Canary to use passthrough route #978 OCPBUGS-35368 : Add Regexp Anchor to TestAll #1087 OCPBUGS-23221 : internalServiceChanged: Fix target port logic #1052 OCPBUGS-34262 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.17 #1067 NE-1400 : Bump to OSSM 2.5 and Gateway API v0.6.2 CRDs #1018 OCPBUGS-33792 : Bump openshift/library-go to resolve NewPrometheusClient E2E failures #1054 OCPBUGS-32887 : Allow operator to update Route spec.subdomain #1047 OCPBUGS-32942 : Bump controller-runtime to v0.17.3 #1050 OCPBUGS-28673 : implement connect timeout tuning option #1035 NE-1317 : manifests - add ingress capability annotation #950 OCPBUGS-32371 : Bump openshift/api, and update CRD generation #1045 OCPBUGS-25193 : Add vnet subnet read and join permission for azure #1029 OCPBUGS-30834 : Update to go 1.21 #1040 OCPBUGS-31722 : Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1037 OCPBUGS-3522 : Include recent errors in canary checks fail #865 OCPBUGS-30091 : TestHostNetworkPortBinding: Delete t.Parallel() #1032 CFE-987 : Use RouterExternalCertificate feature gate for adding ROUTER_ENABLE_EXTERNAL_CERTIFICATE env var to the router pods #1017 CORS-2317 : Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled #1016 OCPBUGS-28596 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.16 #1020 OCPBUGS-28230 : add FallbackToLogsOnError for easier debugging #1019 NE-1490 : update to go v1.20 #1012 OCPBUGS-15253 : Include namespace in prometheus alerts IngressWithoutClassName and UnmanagedRoutes #980 CCO-249 : Replace GCP role with explicit permissions #844 OCPBUGS-25006 : Updating ose-cluster-ingress-operator-container image to be consistent with ART #1006 OCPBUGS-24531 : Revert “ OCPBUGS-24531 Skip CI for scope change until OCPBUGS-24044 is resolved” #1011 OCPBUGS-24531 : Revert “Merge pull request #1007 from candita/OCPBUGS-24531-SkipScopeChangeTest” and add changes to skip test only for Azure and GCP #1008 OCPBUGS-24531 : Skip CI for scope change until OCPBUGS-24044 is resolved #1007 OCPVE-780 : annotate credentials request manifests #995 OCPBUGS-23742 : Bump controller-runtime to v0.16.3 #1001 NE-1402 : Add service endpoint override capability to IBM DNS provider #990 OCPBUGS-16762 : Revert “OCPBUGS-16762: Bump openshift/api for container.maxLength fix” #982 OCPBUGS-14994 : Don’t add clientca-configmap finalizer if deleting #948 OCPBUGS-22020 : Bump golang.org/x/net for CVE-2023-44487 #985 OCPBUGS-21803 : test/e2e: Add test case for 2000000 maxConnections #983 OCPBUGS-20192 : Require non-readonly filesystem in router container #981 OCPBUGS-16762 : Bump openshift/api for container.maxLength fix #979 OCPBUGS-3541 : Don’t create route metrics for ingress controllers that are not admitted #869 OCPBUGS-18248 : Prevent GatewayClass from getting recreated #975 OCPBUGS-19268 : Updating ose-cluster-ingress-operator images to be consistent with ART #977 OCPBUGS-15900 : TestMTLSWithCRLs: only try to parse HTTP status code from curl output when stdout is long enough. #973 OCPBUGS-3356 : E2E test for cookie length truncation #871 OCPBUGS-15978 : Check public DNS zone when reporting status #967 OCPBUGS-17359 : test/e2e: Don’t use openshift/origin-node #970 NE-1140 , NE-1145 : Set/delete HTTP request/response headers via IngressController API #872 OCPBUGS-16089 : Set spec.subdomain on the canary route #965 OCPBUGS-14995 : desiredRouterDeployment: Set HostPort if needed #947 OCPBUGS-10875 : gateway-service-dns: Set DNS policy appropriately #934 NE-1244 : Use permissions instead of the “Contributor” role in Azure CredentialsRequest #929 OCPBUGS-12790 : README: Fix Bugzilla link #968 RFE-3007 : Expose option-contstats as an unsupported option #887 NE-1189 : Refactor Test_desiredLoadBalancerService #886 NE-1187 : Use t.Run for table-driven tests #884 NE-1183 : Rename unit tests for specific functions #880 NE-1269 : Replace bindata using embed #905 RFE-3765 : Allow Ingress to Modify the HAProxy Log Length when using a Sidecar #900 OCPBUGS-9274 : canary: Tolerate infra node NoExecute taint #932 OCPBUGS-7546 : Allow only 1 disruption with 3 replicas #931 OCPBUGS-15100 : Fix previous attempt of adding a missing trailing dot to hostname #956 OCPBUGS-14396 : Set controller-runtime logger to a null logger for E2E #946 OCPBUGS-14998 : Only use RoleARN for Route53 API #951 OCPBUGS-15100 : Create valid DNS names for Gateway API on GCP #949 OCPBUGS-13106 : Add ingress controller status logging on waitForIngressControllerCondition #924 OCPBUGS-13190 : Avoid spurious updates for internalTrafficPolicy #927 OCPBUGS-13810 : Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #944 NE-1294 : Add support for AWS shared VPC in another account #928 CCO-318 : Enable Azure Workload Identity authentication. #906 OCPBUGS-6661 , OCPBUGS-9464 : Move mTLS CRL handling into the router, and fix accidental duplication of CRLs #939 OCPBUGS-13963 : Bump vendors k8s libraries to 0.27.2 #936 Revert “OCPBUGS-6661, OCPBUGS-9464: Move mTLS CRL handling into the router, and fix accidental duplication of CRLs” #938
OCPBUGS-6661 , OCPBUGS-9464 : Move mTLS CRL handling into the router, and fix accidental duplication of CRLs #930 OCPBUGS-5478 : add UBI based Dockerfile #925 CCO-318 : Read feature gates for future usage #908 OCPBUGS-12913 : Deflake TestRouterCompressionOperation #920 OCPBUGS-6784 : bump controller-runtime to fix the multi namespace cache indexing #913 OCPBUGS-12579 : Address CVE-2022-41723 #915 OCPBUGS-12790 : Replace Bugzilla link with Red Hat Issue Tracker #916 OCPBUGS-10714 : gatewayclass: Update for OSSM 2.4 API change #901 OCPBUGS-10189 : Updating ose-cluster-ingress-operator images to be consistent with ART #898 OCPBUGS-10846 : Fix TestClientTLS flakes #904 NE-1184 : Test_desiredHttpErrorCodeConfigMap: Kill dead code and fix format #881 OCPBUGS-4054 : configurable-route: Don’t use NewKindWithCache #860 NE-1186 : Test_getRR: Fix typo: “excepted” → “expected” #883 CORS-2467 : dns: azure: use azidentity with an adapter #846 NE-1105 : Add support for Gateway API #890 OCPBUGS-7424 : Bump vendored k8s libraries to 1.26.1 #888 CFE-679 : Add user defined tags to the created DNS resources #874 OCPBUGS-6247 : Updating ose-cluster-ingress-operator images to be consistent with ART #862 CORS-2072 : GCP - Parse Zone ID with a project ID embedded #855 NE-1092 : Add proxy protocol support for IBMCloud loadbalancers #812 OCPBUGS-6384 : Address CVE-2022-41717 #876 OCPBUGS-4827 : Add missing AWS permission for ListTagsForResources #868 OCPBUGS-6701 : Avoid spurious updates for scope in IngressClass #879 OCPBUGS-6698 : Fix conflict error message in ensureNodePortService #877 OCPBUGS-6700 : updateIngressClass: Fix log message #878 NE-1124 : Add support for External platform to CIO #873 OCPBUGS-4573 : Target metrics port by name in internal service #864 OCPBUGS-434 : Absorb PodsScheduled condition into MinAvailable #854 OCPBUGS-4759 : Do not manage DNS for an ingresscontroller with domain mismatch in GCP #866 OCPBUGS-4703 : Replace liveness-grace-period-seconds annotation #863 OCPBUGS-3404 : Bump openshift/api for matchExpressions doc fix #856 OPNET-133 : Support remote worker #858 OCPBUGS-1725 : Ingress controller should not have affinity policy in single-replica clusters #810 OCPBUGS-1807 : Fix bad handleSingleNode4Dot11Upgrade log message #808 Full changelog
OCPBUGS-45640 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.19 #122 API-1835 : bump library-go #120 OCPBUGS-20062 : “gracefully” shutdown KSVM pod. #118 NO-JIRA: operator/starter.go: don’t report an error on shutdown #117
OCPBUGS-41169 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.18 #116 NO-JIRA: bump(*) #113
OCPBUGS-34306 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.17 #110 OCPBUGS-34306 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.17 #109 AUTH-482 : set required-scc for openshift workloads #107 OCPBUGS-29567 : Apply hypershift cluster-profile for ibm-cloud-managed #106 OCPBUGS-27930 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.16 #103 OCPBUGS-24989 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART #101 OCPBUGS-21738 : bump library-go to include switch to HTTP/1.1 #95 OCPBUGS-19253 : Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #94 Revert “specify master node selector on migrator pod” #93
OCPBUGS-17170 : specify master node selector on migrator pod #92 OCPBUGS-16513 : bump(*): update to 1.27.1 #91 Fix operator doc in README #90
Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #89
OCPBUGS-6240 : Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #87 Full changelog
E2E: Per Core Runtime Tuning Test automation (#509) (#568) #509
E2E: Network stack Pinning tests (#533) #533
Run node selector tests only if we 2 non Performanceworker nodes (#554) #554
skip multiple ranges test if cores < 20 and use core as key to delete cpu siblings (#543) #543
pao: latency-tests: read test log directly from pod (#547) #547
Add authentication to the /metrics endpoint (#553) #553
Update NTO images to be consistent with ART (#557) #557
OCPBUGS-5021 : [release-4.12] Fix two irqbalance tests - smp affinity vs online (#530) #530 Full changelog
OCPBUGS-48177 : Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #612 MON-4129 : adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #611 OCPBUGS-45701 : Updating ose-cluster-openshift-apiserver-operator-cont… #607 NO-JIRA: Revert Disable ResilientWatchCacheInitialization #604
OCPBUGS-44693 : Disable ResilientWatchCacheInitialization #603 OCPBUGS-23435 : bump library-go to bring in workload-conditions fix #600 NO-JIRA: bump dependencies #598
API-1835 : update to use the latest API #597 API-1835 : switch OpenshiftDeploymentLatestRevisionClient to use the generic client #595 API-1835 : update for more apply loops #592 MULTIARCH-4557 : Sync import mode image config status field in the observed config #582 NO-JIRA: remove unused OperatorClient #594
API-1835 : last transition time update #593 API-1835 : update library-go to use new operator client #584 create CRDs from openshift/api #591
OCPBUGS-41617 : increase openshift-apiserver failureThreshold #588 OCPBUGS-41232 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.18 #586 NO-JIRA: Bump library-go to add audit logs about events #587
OCPBUGS-39589 : Rebase 1.30 #585 OCPBUGS-30492 : bump google.golang.org/protobuf #583 OCPBUGS-34349 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #580 OCPBUGS-34349 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #579 AUTH-482 : Set required-scc for openshift workloads #573 WRKLDS-1015 : tolerate node-role.kubernetes.io/control-plane:NoExecute #574 OCPBUGS-29580 : Apply hypershift cluster-profile for ibm-cloud-managed #572 OCPBUGS-32346 : the apiservice controller waits until bootstrap complete #575 NO-ISSUE: Makefile: fixes test-e2e-encryption-rotation targets #577
NO-ISSUE: fix: TestRedeployOnConfigChange #576
OCPBUGS-22969 : Use v1 for flowcontrol API #559 OCPBUGS-18115 : Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #566 OCPBUGS-18939 : manifest: drop slo latency metrics in favor of sli #547 WRKLDS-1004 : use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #562 OCPBUGS-24972 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART #561 OCPBUGS-18115 : Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #551 OCPBUGS-19231 : Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #548 OCPBUGS-21733 : bump library-go to include switch to HTTP/1.1 #552 WRKLDS-728 : Capabilities: drop build/apps APIService when capabilities are not enabled #532 switch image-registry cert CM #545
OCPBUGS-16554 : update dependencies to get rid of goproxy #546 AUTH-408 : bindata: set required-scc #544 Plumb featuregates to the openshift-apiserver #542
allow etcd healthcheck timeout closer to probe timeouts to avoid failing on slower etcd #540
Add AES-GCM encryption tests #539
OCPBUGS-14010 : increase timeout for probes #536 OCPBUGS-2765 : Library go bump #538 OCPBUGS-12813 : Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #534 Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #525
OCPBUGS-10040 : update openshift/api to include aesgcm provider in the default apiserver schema #526 API-1509 : Enable AESGCM encryption #521 OCPBUGS-4343 : update apf configuration to use v1beta3 #509 OCPBUGS-6233 : Bump dependencies and images #517 OCPBUGS-5300 : routes/status resources can leak sensitive data, exclude it from audit #511 make api team approver #506
OCPBUGS-3929 : update apf configuration to use v1beta2 #508 Full changelog
WRKLDS-1653 : bump(k8s): update k8s.io/* dependencies to v1.32.2 #381 OCPBUGS-47528 : Add team members to the OWNERS file #373 OCPBUGS-45698 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.19 #372 API-1835 : bump library-go #370 WRKLDS-1492 : Update k8s dependencies to 1.31.1 #368 OCPBUGS-41227 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.18 #364 create CRDs from openshift/api #367
no-jira: OWNERS: remove former employees #354
OCPBUGS-35801 : nil pointer reference in ocm-operator #355 WRKLDS-1327 : Replace wildcards by explicit list of verbs #353 WRKLDS-1292 : Bump k8s dependencies to 1.30.1 #352 OCPBUGS-34395 : Move cluster Build CR to runlevel 10 to match CRD #351 OCPBUGS-34077 : Always Disable Default Rolebindings Controller #346 OCPBUGS-34054 : lots of churn during image registry managed/removed transition #347 OCPBUILD-9 : Adds capabilities for builder & deployer rolebindings controller #335 AUTH-482 : set required-scc for openshift workloads #336 OCPBUGS-23848 : Bumps opentelemetry dependencies #341 OCPBUGS-29973 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.16 #337 OCPBUGS-29581 : Apply hypershift cluster-profile for ibm-cloud-managed #334 OCPBUGS-22969 : Use v1 for flowcontrol API #316 BUILD-854 : Add adambkaplan as approver #338 OCPBUGS-24888 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART #321 OCPBUGS-28666 : Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #326 OCPBUGS-23624 : Add .snyk file to exclude vendor and ignore unit tests #325 WRKLDS-1016 : Bump k8s dependencies to 1.29.0 #324 OCPBUGS-24190 : Disable deployer-controller when deploymentconfig is disabled #320 OCPBUGS-22956 : Remove blockage of ConfigObserver by build informer HasSynced flag #315 Revert “Revert #300 “API-1666: add image pull secret cleanup controller”” #314
Revert #300 “API-1666: add image pull secret cleanup controller” #313
API-1642 : add image pull secret cleanup controller #300 API-1642 : Do not generate image pull secrets for internal registry when internal registry is disabled. #298 OCPBUGS-21830 : bump(k8s,openshift) to address CVE-2023-44487 #308 OCPBUGS-20164 : Include Build CRD in manifests #306 WRKLDS-806 : Bump kube dependencies to 1.28.2 #305 OCPBUGS-19136 : Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #304 OCPBUGS-18932 : Always sort disabled controller list #302 OCPBUGS-18498 : Disable BuildConfigChange controller when Build cap is disabled #299 route-controller-manager deployment updates #295
OCPBUGS-16072 : Updating Kubernetes and other associated dependencies #296 OCPBUGS-13926 : change the operator log level to default normal in the deployment #289 BUILD-582 , OCPBUGS-14638 : bump(k8s): 1.27.1 #294 OCPBUGS-13926 : add loglevel controller for OCM-o #292 Revert “13895: [WRKLDS-730] route-controller-manager deployment updates” #293
OCPBUGS-13895 : [WRKLDS-730] route-controller-manager deployment updates #288 Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #287
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #286
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #285
Bump golang.org/x/net from 0.5.0 to 0.7.0 #284
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #279
OCPBUGS-10568 : migrate to using lease objects for leader election #282 Add Divyanshu Agrawal as a reviewer #283
OCPBUGS-4343 : update apf configuration to use v1beta3 #273 Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #274
WRKLDS-594 : bump(k8s): 1.26.1 #277 OCPBUGS-5275 : remove unnecessary RBAC for leader-locking-ingress-to-route-controller #276 OCPBUGS-3929 : update apf configuration to use v1beta2 #272 let deployer pods patch/apply replication controllers #270
Bug 2111979 : Set openshift.io/run-level to nil in openshift-controller-manager nam… #269 Full changelog
Dockerfile: symlink netcat to nc #565
Bump fedora-coreos-config to latest stable #560
Bump fedora-coreos to latest stable #555
Revert “Dockerfile.ci: report real FCOS version” #552
Revert “DEBUG: don’t pull in fresh FCOS” #532
Dockerfile.ci: report real FCOS version #549
manifests: remove extensions manifests #548
selinux fixes: allow iptables wrapper to write to tmpfs #546
Dockerfile: replace existing kubelet #543
Add a service which applies custom SELinux fixes #541
Dockerfile: enable services via systemd presets #540
Dockerfile: install netcat #538
Bump fedora-coreos to latest stable #531
overlay: prevent NM from modifying resolv.conf #528
Bump fedora-coreos to latest stable #526
Dockerfile.rpms: use stable CRIO releases #521
Bump openshift-os to latest release-4.12 #523
Bump openshift-os to latest release-4.12 #518
Dockerfile: remove rpm-ostree override #515
Full changelog
Force controleplane upgrade always #2289
OCPBUGS-8370 : Fix cleanup of volumes on cluster deletion #2253 OCPBUGS-8241 : Add external DNS health condition / release-4.12 #2206 HOSTEDCP-809 : Clone CA key/cert to TLS key/cert #2263 Add configuration for automatic labeling and label commands #2255
fix(cpo): Delete multus validatingwebhookconfiguration on CNO init #2251
feat(HCCO): Block DNS operator delete until Cluster Version updated #2242
kms addition for pod identity workflow #2247
Add e2e test for hosted cluster behind a proxy #2199
Add e2e test for cluster creation with AWS KMS #2201
HOSTEDCP-826 : Customize DNS base domain prefix #2235 feat: Add pod gone check to prober + DNS operator leader elect #2209
fix(ibmcloud): Explicitly set HCCO controllers #2208
ensure reconcilation of apiserver port is in 4.12 #2195
Cleanup default security group only if authorized #2212
fix(cpo): Set restart annotation on multus-admission-controller #2190
fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac #2189
fix(cpo): Reduce CNO access if Calico used as network provider #2184
Skip destroyAWSDefaultSecurityGroup if not AWS #2168
Create default security group for AWS clusters #2162
AUTH-323 : pki: split out konnectivity certs from the rootCA #2156 fix(ibmcloud): Initialize image registry config on creates and bad config #2104
fix(cpo): Allow KAS profiling disablement #2122
reduce ignition server scope #2140
OpenID add support for groups claim in the config #2129
fix(cpo): Restart registry operator on annotation #2121
Fix CAPA crd generation #2120
Set k8s.io/kubernetes dependency to v0.23.3 #2118
fix(cpo): Separate RBAC for NTO + CNO #2112
Merge main up to db7c22ae into ‘release-4.12’ #2101
Merge main into release-4.12 branch #2053
Full changelog
Updating ose-network-interface-bond-cni images to be consistent with ART #37
Full changelog
Updating ose-network-metrics-daemon images to be consistent with ART (#60) #60
Fix gofmt check issue (#68) #68
Update golang.org/x/text to 0.7.0 (#66) #66
Full changelog
OCPBUGS-6703 : fix: adds logic that searches for the correct name when using a heads… (#554) #554 Updating oc-mirror-plugin images to be consistent with ART (#515) #515
Full changelog
Source code for this page located on github