Back to index
4.8.0-0.okd-2023-02-11-154527 Download installer and client with:
oc adm release extract --tools registry.ci.openshift.org/origin/release:4.8.0-0.okd-2023-02-11-154527 Team Approvals:
No tests for this release
Loading changelog, this may take a while ...
Created: 2023-02-11 15:45:33 +0000 UTC
Image Digest: sha256:de5b18b5b79f6af72578b43c26a1706b9b10a2e8ff4c33b2e689ed656c1a173c
Components
Kubernetes upgraded from 1.21.1 to 1.21.14
Fedora CoreOS 48.34.4
Removed images
kubevirt-machine-controllers
ovirt-installer
Rebuilt images without code change
Updating ose-cluster-autoscaler-operator builder & base images to be consistent with ART #193
Bug 2026237 : Change ClusterAutoscalerUnschedulablePods severity to info #232 Bug 1995595 : add csidrivers and csistoragecapacities to autoscaler cluster role #220 Bug 1991501 : Do not recreate CA deployment when CA CR is being deleted #217 Full changelog
Updating configmap-reload builder & base images to be consistent with ART #32
Full changelog
Bug 2071200 : Fix setting of custom cert for default route #643 Bug 2008141 : Change web terminal subscription permissions from get to list #595 Bug 2041359 : Bump build-machinery-go for console-operator to pickup change in yaml-patch repository #627 Bug 2018391 : Remove SimpleHTTP ‘server’ response header value #606 Bug 1987315 : Bump openshift/api to add missing ‘include.release.openshift.io/single-node-developer’ annotation to the ConsolePlugin CRD #591 Bug 2003639 : Use kubernetes.io/hostname for workload anti-affi… …nity #589 Bug 2001268 : console-operator should report Available=true when at least available replica exists #583 Bug 1976349 : Add policy-group label to the openshift-console namespace manifest #561 Full changelog
Updating ose-containernetworking-plugins builder & base images to be consistent with ART #42
Full changelog
Bug 2101388 : bump to k8s 1.21.14 #1301 OCPBUGS-1461 : UPSTREAM: 109103: cpu/memory manager containerMap memory leak #1371 Bug 2083557 : UPSTREAM: 109935: fix: exclude non-ready nodes and deleted nodes from azure load balancers #1257 Bug 2105664 : UPSTREAM: <carry>: update list of deprecated apis #1317 [release 4.8] Bug Bug 2106970: UPSTREAM: <carry>: use correct base image for testing #1323
Bug 2077004 : Rebase 1.21.11 #1246 Bug 2063953 : UPSTREAM: <carry>: use hardcoded rest mapper from library-go #1245 Bug 2075043 : golang toolchain unsupported parsers tag #1240 Bug 2043808 : IPs with leading zeros are still valid in the apiserver #1173 Bug 2060494 : Backports inotify leak fix into kubelet #1203 Bug 2024642 : Rebase v1.21.8 #1102 Bug 2050131 : UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled #1168 Bug 2039377 : UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf #1108 Bug 2029466 : UPSTREAM: 107014: Mark volume as uncertain after Unmount* fails #1146 Bug 2024995 : Fix subpath source check #1067 Bug 2032325 : UPSTREAM: <carry>: api request counts for current hour are incorrect #1092 Bug 2022741 : UPSTREAM: 106260: Don’t guess SELinux support on error #1054 Bug 2021997 : Read k8s version from hyperkube Dockerfile #1045 Updating openshift-enterprise-hyperkube builder & base images to be consistent with ART #559
Bug 2017027 : UPSTREAM: <drop>: bump apiserver-library-go #1069 Bug 2022265 : Rebase v1.21.6 #1060 Updating openshift-enterprise-pod images to be consistent with ART #680
Bug 2020644 : Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1050 Bug 1994655 : openshift-apiserver should not set Available=False APIServicesAvailable on update #955 Bug 2008403 : Rebase v1.21.5 #981 Bug 2011460 : UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. #1005 Bug 1995714 : UPSTREAM: <carry>: admission/managementcpusoverride: cover the roll-back case #895 Bug 1994457 : Update to kubernetes 1.21.4 #888 Bug 1993754 : UPSTREAM: 104347: Pass additional flags to subpath mount to avoid fla… #940 Bug 1998391 : UPSTREAM: 104530: [1.21] bump runc to 1.0.2 #912 Bug 1957133 : do not throw error when we can’t get canonical path #854 Bug 1981770 : UPSTREAM: <drop>: bump(apiserver-library-go) #864 Bug 1981633 : UPSTREAM: <carry>: prevent the kubecontrollermanager service-ca from getting less secure #858 Bug 1981633 : UPSTREAM: <carry>: add a way to inject a vulnerable, legacy service-c… #856 Bug 1977351 : UPSTREAM: <carry>: Reject the pod creation when we can not decide the cluster type #833 Bug 1977924 : [release-4.8] Ensure scc compatibility with BoundServiceAccountTokenVolume #842 Bug 1975938 : update Multi-AZ Cluster Volumes test name #829 Bug 1973580 : only chown if non-windows machine with projected volumes #815 Full changelog
TBD: Gather status of the cephclusters.ceph.rook.io resources (#659) (#665) (#668) #659
Bug 2077765 : Gather namespace names with overlapping UIDs (#605) (#611) (#612) #605 Bug 2033546 : Gather all CostManagementMericsConfig definitions. (#525) (#569) #525 Update OWNERS (#543) #543
Bug 2027720 : gather webhook configurations (#508) (#560) #508 Bug 2026646 : Gather all the container logs from related namespaces of degraded clusteroperator (#516) (#554) #516 Bug 2021572 : Anonymize identity provider attributes in the (#520) (#527) (#541) #520 Bug 2020601 : Anonymize the ImageRegistry storage information also in status (#536) #536 obfuscation ovn clusters bug (#523) #523
Bug TBD: Gather installed PSP names (#489) (#490) #489
Bug 1977342 : Fix obfuscation translation table secret 4.8 (#467) #467 Gather all MachineConfig definitions (#449) (#459) #449
Bug 1974877 : Add egress ips to anonymizer to 4.8 (#462) #462 Bug 1982170 : Set also the summary operation when updating status (#475) #475 MemoryRecord name can be obfuscated & fix case of duplicate records (#444) (#453) #444
Full changelog
Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #504
Full changelog
OCPBUGS-2205 : Fix DNS endpoint hack to prefer local instead of forcing it #469 Bug 2063971 : delete stale UDP conntrack entries for loadbalancer IPs #414 Bug 2092166 : Masquerade in cluster traffic that is marked for egress IP #435 Remove some binaries that accidentally got committed #398
Bug 2027397 : [EgressIP] move ct(commit) action from OVS group to flow #377 Bug 2014166 : Remove locking from EgressIPTracker.Ping #362 Bug 2002290 : [4.8] proxy: don’t re-check every userspace proxy rule on every change #347 Bug 1987239 : when assigning and releasing egressIP try more than once before failing #326 Bug 1999946 : improve SDN’s OVS healthcheck and logging #341 Bug 1995871 : Disable conntrack for vxlan traffic #337 Updating ose-sdn builder & base images to be consistent with ART #255
Updating kube-proxy builder & base images to be consistent with ART #256
Bug 1972864 : [4.8] fix local-with-fallback #322 Full changelog
Updating ose-kube-storage-version-migrator images to be consistent with ART #174
Full changelog
Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #217
Full changelog
Bug 2052758 : [4.8] PVs are not being cleaned up after PVC deletion #41 Updating local-storage-static-provisioner builder & base images to be consistent with ART #31
Full changelog
Bug 2048496 : Fix user-agent in vCenter sessions list #984 Bug 2027896 : [release-4.8] Add support for Azure Marketplace Images #970 Bug 2026562 : MaxUnhealthy should not be a string type #962 Bug 2022838 : GCP CI runs are complaining about APIs not being enabled #953 Bug 1999585 : [release-4.8] add alert for machine with long deletion phase #908 Bug 2000038 : Respect MaxUnhealthy limit for external remediation #910 Bug 1993117 : Make sure nodes don’t have attached volumes before vm deletion #903 Bug 1977634 : Prevent machine from stucking in Deleting phase on vSphere if related node object not found #896 Updating ose-machine-api-operator builder & base images to be consistent with ART #796
Bug 1973233 : [release-4.8] remove kubevirt images and references #876 Full changelog
Updating ose-multus-admission-controller builder & base images to be consistent with ART #32
Full changelog
Updating multus-cni builder & base images to be consistent with ART #95
Bug 1972167 : Updates entrypoint to rebuild kubeconfig when service account token or ca changes #108 Full changelog
Updating multus-networkpolicy builder & base images to be consistent with ART #6
Full changelog
Updating ose-multus-route-override-cni builder & base images to be consistent with ART #12
Full changelog
OCPBUGS-48333 : Update dependencies to address CVE-2024-24786 #313 no-jira: OWNERS: add Krzys (ibihim) and Ilias (liouk) as reviewers #282
OCPBUGS-44319 : Fix oauth-proxy e2e-component tests #289 OCPBUGS-24791 : Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART #270 OCPBUGS-21718 : go.mod: bump golang.org/x/net to v0.17.0 #266 OCPBUGS-18858 : Updating golang-github-openshift-oauth-proxy images to be consistent with ART #265 OCPBUGS-16459 : bump kube and lib-go to get rid of goproxy dep #260 fix route apiVersion #257
Updating golang-github-openshift-oauth-proxy images to be consistent with ART #251
APPSRE-7970 : Add support for configuring upstream timeout #258 OCPBUGS-14033 : Handle TERM signal gracefully #255 AUTH-373 : add audit-ID headers to TokenReview and SAR requests #252 Update logo #245
fix json examples for –openshift-delegate-urls #203
Use resourceName in Openshift SAR rule #243
Updating golang-github-openshift-oauth-proxy images to be consistent with ART #241
Bug 2026860 : ocp provider: don’t fail client creation if oauth-server cert is not present #238 Golang bump 1.17 #235
Bug 1966298 : Update golang.org/x/net #223 Bug 1986810 : trust the oauth-server when constructing a client to OpenShift #220 Bug 1980235 : deprecate version #218 Updating golang-github-openshift-oauth-proxy images to be consistent with ART #216
Updating .ci-operator.yaml build_root_image from openshift/release #215
Full changelog
OWNERS: Update team osasinfra #363
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #361
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #360
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #359
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #358
OCPCLOUD-2857 : Set infrastructureRef.Namespace in Cluster object #357 OSASINFRA-3707 : ⚠️ Manual sync from release-0.12 on main ⚠️ #352 OSASINFRA-3722 : Deploy manifests for CustomNoUpgrade feature set also #356 Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into main #349
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into main #348
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into main #347
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into main #339
OCPBUGS-45387 : Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.19 #345 Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into main #336
NO-JIRA: manual git merge on upstream 0.11 #335
CARRY: add comment to .snyk about Glance #334
snyk: ignore md5 & SHA1 warnings for ORC images #333
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into main #332
OCPBUGS-43892 : manual rebase on upstream release-0.11 #331 Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into main #324
Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.18 #322
OCPBUGS-34072 : Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.17 #317 Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.10 into main #316
Remove dulek from shiftstack-team #313
NO-JIRA: Bump to latest CAPO v0.10 #314
NO-JIRA: Bump to latest CAPO v0.10 #312
OCPBUGS-33170 : openshift: Set FallbackToLogsOnError on infra-cluster controller #311 OSASINFRA-3437 : Rebase on CAPO v0.10 #305 OCPBUGS-31277 : Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.16 #301 🐛 Persist API FloatingIP immediately on creation #1831
:bug: Fix patching OpenstackMachine’s immutable spec during reconcile #1819
✨ Add flags for configuring rate limits #1817
:bug: Fix potential panic during instance create #1806
🐛 Revert “Move FloatingIP to Bastion spec” #1783
🌱 Import CAPI v1.6.0 #1780
🌱 Bump version artifacts for release-0.9 #1775
🐛 Verify success of parsing OpenStack cloud cacert #1770
📖 Fix network-related docs for API v1alpha7 #1764
🌱 Remove Containerfile and Dockerfile experimental #1760
🌱 Fix log message typo #1758
🐛 Update e2e testing image of CAPI version from 1.5.0 to 1.5.1 #1754
🐛Fix missing endpoint type in OpenStack endpoint clients configuration #1744
✨remove flavor check to relief restrictions to CPU #1745
⚠️ Move FloatingIP to Bastion spec #1739
⚠️ Bump Go to 1.20.10 #1740
✨ Add ephemeral storage support to the AdditionalBlockDevices #1696
✨ Use kustomize new syntax for patches #1735
✨ Add cache on provider scope #1688
🌱 deps: Bump dependencies #1733
🌱 Enable k8s upgrade in self hosted test #1732
🌱 Use k8s v1.28 in tests #1723
🐛 Don’t remove BYO api server loadbalancer floating IP #1728
🌱 Replace kustomize vars with replacements #1726
🌱 e2e: dump cinder volumes #1722
🌱 Ignore go workspaces #1724
🌱 E2e: Use pre-build node images #1699
✨ Add option to customize private network MTU #1701
:seedling: ci: bump Flatcar tested version #1713
🌱 ci: Several CI fixes #1718
✨ Add server name for the Machine InternalDNS #1715
🌱 Bump devstack image to ubuntu 22.04 #1716
🌱 Add explicit dependency on github.com/golang/mock/mockgen/model #1712
🌱 Allow custom KUBEBUILDER_ASSETS_DIR in tests #1710
🌱 Ignore vendor directories in boilerplate check #1709
🌱 Build setup-envtest in hack/tools #1707
🌱 Bump ginkgo #1705
:sparkles: Additional data volumes for machines #1668
🌱 gitignore: ignore vendor/ directory #1690
🌱 Move webhook CA injection into webhook resource #1686
Update Gophercloud to 1.7.0 #1682
🐛 Only delete all ports when deleting cluster network #1680
:book: Clarify release notes content for releases and pre-releases #1678
🌱 Remove defaulter-gen #1677
:book: doc/development: add devstack notes #1569
🌱 Add test for getOrCreate #1673
Set failure only on instance error when no nodeRef #1637
🌱Fix various issues with CRD generation #1669
✨Allow changing allowAllInClusterTraffic in a deployed cluster #1663
avoid duplicate error event #1655
🌱Bump CAPI to v1.5.1 #1666
🌱Structured logging migration of instance.go, service.go, floatingip.go, and securitygroups.go #1631
Fix v1alpha6 -> v1alpha7 idempotence #1626
🐛 Don’t fail when deleting non-existing port #1660
🐛 Fix panic on delete before cluster is initialised #1657
🐛Fix failing clusterctl upgrade test (second attempt) #1661
🐛Fix failing clusterctl upgrade test #1659
🌱 Bump golangci-lint to 1.54.2 #1652
🐛 fix port cleanup when using CAPO-created cluster network #1651
:bug: Fix Port Leaks #1648
🌱 Update verbosity levels in instance.go #1635
📖 Fix APIVersion to use existing router with OpenStackCluster #1638
🌱 Migrate pkg/cloud/services/networking/network.go and router.go to structured logging #1624
🐛 Fix application credential support in env.rc #1646
🌱Remove APIServerLoadBalancer.Provider Up Conversion #1642
🌱Migrate controllers/openstackcluster_controller.go to structured logging #1630
:seedling: Migrating /pkg/cloud/services/loadbalancer/loadbalancer.go and /controllers/openstackmachine_controller.go to structured logging #1621
✨ Add --version flag #1641
✨ Add support to IPv6 in Machine’s status #1633
🌱 chore: use capo cluster agent for API requests #1614
✨ Update to CAPI 1.5 #1600
🌱 Simplify types of Instance.SecurityGroup and Instance.Networks #1625
remove subnet from the output in kubectl get #1609
:sparkles: Allow Use of Public CAs #1610
:seedling: ci: bump flatcar to latest stable #1607
📖 Add link to book in README #1602
🌱 Add metadata for release 0.8 #1601
⚠️ Update NetworkStatus ready for dual stack #1577
🌱 E2e: Unify machine log collection #1595
🌱 E2e: Bump the tested Kubernetes versions #1594
🌱 E2e: Implement LogCollector interface #1581
✨ Allowing update of OpenstackCluster API server fixed IP #1590
:sparkles: Add additional sec group rule for additionalPorts of LB #1592
do not set failure reason/message when LB not created #1591
🌱 Replace github.com/pkg/errors #1585
🌱 dependencies: Bump Go stdlib #1584
🐛 Fix deadlock #1579
🌱 Bump Kubernetes version used in e2e tests #1571
⚠️ Remove ProjectID from PortOpts #1575
🐛 Always filter cluster subnets by cluster network ID #1572
🌱 E2e: Bump clusterctl upgrade to start from v0.7.2 #1568
:warning: Transform Profile into an interface #1560
🌱 Set provider ID through kubelet in ubuntu templates #1551
⚠️Remove last uses of TenantID and pagination filters #1563
:seedling: Deprecate v1alpha5 #1561
:seedling: bump docker distribution to 2.8.2+incompatible #1562
⚠️ Replace SubnetParam with SubnetFilter #1559
⚠️ Replace SecurityGroupParam with SecurityGroupFilter #1557
🌱Remove unused fields from ExternalNetwork #1555
🌱Remove PortOpts from Network #1550
🌱 Reduce the Bastion status to only fields which are used #1546
⚠️ Remove PortOpts.SecurityGroups #1516
Use dl.k8s.io instead of kubernetes-release bucket #1542
Fix OWNERS_ALIASES syntax error #1543
Update external approvers #1536
⚠️ Remove Networks #1518
Add lentzi90 to cluster-api-openstack-maintainers #1537
⚠️ Remove v1alpha3 and v1alpha4 #1527
Update linter to v1.52.2 #1534
🌱 Remove creation of 2 Events for the same event #1531
🐛 Patch: Backport Provider to v1alpha6 #1530
🐛 Improve env.rc and create_cloud_conf.sh templates #1381
✨ Support propagate uplink status #1481
✨Infer port network from subnet #1519
:seedling: ci: bump flatcar to latest major stable #1524
🌱 bump docker to 20.10.24+incompatible #1525
:warning: flatcar: make external-cloud-provider-flatcar the default one #1522
:seedling: pull cluster-api@v1.4.1 #1521
⚠️ Deprecate In-tree Cloud Provider #1514
🌱 Bump gophercloud to v1.3.0 #1520
:sparkles: Add RouterName for use existing router #1370
Restore APIServerLoadBalancer.Provider on up-conversion #1517
📖 Document removal of OpenStackMachineSpec.Subnet #1515
🌱 Un-pointer PortOpts.SecurityGroups #1511
✨Add Octavia OVN Provider Support #1501
Add dulek to reviewers #1512
⚠️Remove OpenStackMachineSpec.Subnet #1504
🌱 Add fuzzy conversion tests for v1alpha6 #1509
:book: docs/configuration: add Flatcar to OS section #1503
:bug: e2e: refresh packages list before install containerd #1507
:sparkles: templates: add flatcar template #1444
📖 Add documentation for creating local test environments #1500
🐛 fix: allow using multiattach volume types #1498
⚠️ Add v1alpha7 #1497
✨ Support value specs for Ports #1452
fix: fix typo of worker rules and controller rules #1492
🐛 Switch to “4” instead of “ipip” for rules #1489
:bug: Fix Provisioning to Unavailable AZs #1479
🐛 uplift golang and x/net #1482
Fix “internal ip doesn’t exist (yet)” in e2e logs #1474
Remove the resource and machine tickers from e2e tests #1471
Fix boilerplate linter #1473
Download golangci-lint instead of building it #1470
🌱 Bump gophercloud to v1.2.0 #1463
📖 Add documentation about –ca-cert flag #1467
🐛 Return from reconciler after adding finalizer #1464
✨ Add Tags to API-Loadbalancer resources #1457
🐛 Fix Tilt by adding CAPO label in tilt-provider.json #1430
Add e2e remediation tests #1380
🌱 Add e2e self hosted test #1428
Envtest mocks #1236
🌱 Bump ginkgo to v2.7.0 and sync with hack/tools #1460
check flavor and reject CPUs less than 2 #1451
✨ add explicit securitycontext to controller #1461
📖 fix path for taggin and serverMetadata in OpenstackMachineTemplates #1454
✨ Add ca-cert flag to supply a default ca certificate for each requests #1440
🌱 Use newer containerd in e2e tests #1456
🌱 E2e: Use plain ubuntu cloud image #1441
🐛 fix nil-pointer in initial reconciliation loop with empty status field #1445
🌱Add log to provide more info in case error happen #1443
🌱Be more robust when checking gophercloud errors in IsNotFound #1432
🐛 uplift x/net to 0.4.0 #1427
🌱Bump CAPI to v1.3.1 #1424
✨Add lentzi90 to reviewers #1421
:book: Fix spelling errors on docs #1418
🌱 e2e: Change logging to avoid use of By #1417
🌱 Remove It block from clusterctl upgrade #1412
✨ Bump CAPI to v1.3.0 #1406
🌱Release 0.7 patches #1405
🐛 Update Ubuntu, CirrOS & Amphora image #1408
🌱 Add e2e clusterctl upgrade tests #1371
🌱 Bump Gophercloud to v1.1.0 #1402
🌱 scripts: replace apt with apt-get #1401
🌱 Tag current e2e tests as PR-Blocking #1390
🐛 Allow UDP traffic over nodeports #1396
🌱Ensure we capture early devstack logs #1399
🐛 Don’t enable router-ovn service in CI deployments #1400
🐛 Decrease initial backoff for Floating IP operations #1386
🐛 Fix Octavia versions endpoint #1385
🐛 openstackmachine: do not set transient error message and reason #1301
🐛 fix: improve load balancer health checks #1375
🌱 Synchronize versions between Makefile, Containerfile, e2e and go.mod #1369
:book: Add more infomation to run e2e test in locally #1362
Fix accesIPv4 checking #1366
switch version from float to int #1281
🌱 CI: Clean openstack volumes #1364
🌱 Bump CAPI to v1.2.4 #1361
✨ Enable additional linters and metalinter checks. Fix findings #1359
🌱 Remove unnecessary mock import aliases #1357
🐛 Don’t require cinder when not using volumes #1353
🌱 Add the cluster templates back #1354
🌱 Update golangci-lint (v1.46.2 -> v1.50.0), remove deprecated linters #1342
🐛 Don’t require an InstanceSpec for DeleteInstance #1350
ci: Pin to the yoga version of openstackclient #1352
✨ Allow for omitting AZ from control plane nodes #1318
🌱 Group Makefile targets #1343
doc: update calico location #1338
update doc to make it more clear #1335
🐛 fix nilpointer during clusterctl move #1340
update k8s to 1.25 #1330
🌱 remove apricote from reviewers #1333
📖 update README to include Yoga #1331
update devstack release #1329
🌱 add merge strategy markers #1325
🌱 gce-project.sh: loop over all GCP zones during instance creation #1324
:bug: Add security groups to ports only #1319
📖 Update PlantUML version (1.2020.16 -> 1.2022.6) #1321
✨ Conditions for OpenStackMachines #1288
🐛 Fix go1.19 linting errors #1313
🌱 Ensure that python and pip is installed for e2e and conformance tests #1309
not assign floating ip when there are multiple controller nodes #1276
🐛 Update calico manifest for e2e testing #1307
✨ Add re-creation of bastion host on change #1303
e2e test: add more dump output #1304
🐛 Fix conformance tests #1305
refactory sec group code (for additional CNI support) #1299
🌱 Bump CAPI to v1.2.0 #1302
🌱 Set ginkgo.timeout in our kubetest config #1297
🌱 bump to capi v1.2.0-rc.0 #1295
🌱 only reconcile loadbalancer member if machine is control-plane #1294
✨ Enable JSON Logging #1296
replace “4” with “ipip” #1290
✨ Bump to CAPI v1.2.0-beta.1 #1283
🐛 Fix logger arguments #1284
Fix generation of e2e-templates when running conformance tests #1287
📖 add v1alpha6 breaking changes book page #1285
🌱 Generate cluster templates with kustomize #1271
🐛 delete port left over by err openstackmachine #1260
Add Age column for osc/osm #1279
✨ Add v1alpha6 API types #1272
use 1.24 as test env #1277
update doc to reflect latest version, add helm link #1275
nit:make event to log for already associated FIP #1268
📖 Instance create timeout is in minutes #1267
🐛 Make failure domain optional for OpenStackMachine #1263
✨ Feature: restrict API Server LB access via IPs #1247
:sparkles: bump golangci-lint version to v1.46.2 #1258
cleanup: remove used file #1243
Passing security groups by specifying more options in addition to UUIDs on ports #1246
🐛 implement conversion for OpenStackClusterTemplate CRD #1249
refactory test code (reuse existing function) #1194
🏃 Add tests for cluster controller #1199
🐛 remove webhooks for old APIversion v1alpha4 #1240
🌱 Fix ginkgo warnings #1239
🌱 Remove macaptain from cluster-api-openstack-reviewers #1237
move chrischdi to emeritus_approvers #1233
:bug: Fix nil pointer reference during bastion deletion #1231
:seedling: Update RELEASE.md process for release branches #1228
🏃 update PR icon template to match CAPI #1229
📖 allow up to 20 tabs in book #1224
🌱 Add release 0.6.x to metadata.yaml #1226
🐛Don’t set ImageRef on server when booting from volume #1225
🐛Fix conversion of boot from volume images #1223
🐛 always wait for active Loadbalancer after getOrCreate #1200
📖 Document CRD changes from v1alpha4 to v1alpha5 #1216
🐛 controllers/openstackcluster_controller.go fix nil pointer and dump openstack ports #1217
Improve log message #1202
🐛 bump CAPI to v1.1.3 #1209
🏃Remove prankul88 as a reviewer #1213
🏃 Add apricote as a reviewer #1212
📖 replace dead link for cloud.conf details #1211
⚠️ rename v1beta1 to v1alpha5 #1198
address CVE-2022-27191 #1204
✨ Support Application Credential auth #1189
✨Refactor CreateInstance and CreateBastion #1191
⚠️ move loadbalancer opts to struct #1187
🏃 Explain mutability of bastion configuration in CRD #1190
🏃 Enable controller tests #1183
🐛 Install sshuttle using pip instead of from source #1185
🏃 Add Scopes to pass data to services #1178
🐛 Address CVE-2022-21698 #1182
🐛 upgrade golangci-lint for go 1.18 support #1184
✨Export GetFloatingIP #1179
Add unit test for trunk #1172
📖update doc to talk about microversion #1161
🐛 Fix event target of floating ip operations #1177
Fix flaky UT on gate #1175
Remove internal AZ special handling #1168
🐛 Clean up removed AvailabilityZones from OpenStackCluster.status.failureDomains #1165
📖 add info about office hours to README and Book #1167
move CI to xena #1158
🐛 api/v1beta1/openstackmachine_types.go: change errorReason/errorMessage to failureReason/failureMessage #1150
✨Remove FIXME (adjust the comment and code both) #1157
🐛 containerfile: Bump Go version #1156
🏃 devstack: Allow empty private SSH key #1144
Make hidekazuna emeritus #1152
Avoid set failMessage when bastion creation failed #1138
🏃 OWNERS: satisfy the maintainers tool #1123
manager.yaml: enable metrics endpoint #1141
📖 Document external repositories referencing CAPO owners #1142
bump CAPI to v1.1.0 #1137
Add test for trunk feature #1128
🐛Bump CAPI to v1.0.4 #1136
✨ Ensure trunk deletion #1125
✨Service interface load balancer #1119
🐛 Prevent creation of floating IPs when reconcile load balancer in non ACTIVE state #1115
Remove duplicate tags before making API calls #1112
iamemilio resigns as a reviewer #1113
Document running CI devstack on CentOS #1108
✨Cinder AZ and volume type support #1030
✨ improve log entry for ReplaceAllAttributesTags #1110
🐛 Avoid replacing tags when no tags are provided. #1107
Delete trunk on failure #1095
Allow image uuid to be used in instanceSpec #1101
📖nit: update doc to include spec #1102
🐛update log to make it clear (LB member instead of LB) #1104
🐛 loadbalancer service: fix metric name for member list #1097
🏃 Migrate CI to Wallaby #1091
Fail fast without create port at all #1094
🐛 fix loadbalancer service to reconcile all ports instead of returning at the first #1089
Update .golangci.yml #1090
:book: Update documentation according to clusterctl sub command changes #1088
🌱 Standardize api import aliases #1082
Update OWNERS file #1084
🏃Fix generated clouds.yaml for local e2e tests #1069
🏃Add new maintainers and reviewers #1083
:sparkles: Port rework #1059
🏃 Fix SECURITY_CONTACTS #1080
✨ Allow webhook changes to OpenStackCluster.Spec.Bastion #1070
images: use k8s-staging-test-infra/gcb-docker-gcloud #1068
🐛Cleanup ports #1063
:sparkles: Add tags on security groups created by capo #1053
🐛Fix conversion of IdentityRef converting between v1alpha4 and v1beta1 #1066
📖 Update configuration document #1056
✨Add unit tests for compute service #1061
🐛update logic to support more instance state #909
🏃 Delete unused annotation #1057
🐛Fixes for running E2E tests locally against devstack on OpenStack #1048
🏃 Fix conversion-gen in Makefile #1052
📖 Update version support #1055
🏃 Move sbueringer to emeritus maintainers #1058
✨ Bump golangci-lint to 1.43.0 #1042
📖 Update RELEASE document #1051
📖 Fix yaml example #1050
✨ Add v1beta1 API types #1047
🐛Pull Calico from quay.io instead of docker.io #1049
✨ Update CAPI to v1beta1 #1041
✨ Remove ensure kind binary script from repository #1036
🐛 Fix image push in Makefile for image-push jobs #1039
✨E2E error logging improvements #1032
Check trunk support before enabling trunk at port level #1014
✨ Change default branch to “main” #1031
✨ Add tags to portOpts #1027
✨Devstack on openstack and multi-AZ support #1026
🏃 Add unit tests for getOrCreatePort func #1020
Port Tagging Regression #1016
🐛 Fix typo in delete server log #1025
📖 Fix typo in OPENSTACK_CLOUD_CACERT_B64 example #1018
✨ controllers: replace context.TODO with real context objects #1019
🏃update e2e container to latest cluster-api #1010
✨Return all NodeAddresses in OpenStackMachine.Status.Addresses #1004
🏃 Bump calico from v3.18.1 to v3.20.1 #1015
🐛 Don’t make unnecessary REST API calls in getServerNetworks #994
✨Allow update for some param only first time update #1012
✨Add webhook of openstackcluster, no update allowed for now #1006
🏃 Standardize metrics in networking package #1003
:sparkles: Allow clusters without a floating IP for the API server #973
:sparkles: Implement allowAllInClusterTraffic flag #998
🏃 Move deletePorts back to compute package #1002
✨Add InstanceStatus.AvailabilityZone() #992
📖 Add book link to README #996
🏃 Refactor all network client calls into networking package #950
:bug: Add alpha3 Resources to Scheme #985
⚠️ Don’t overwrite openstackcluster.status.network on reconciliation #989
✨Document running E2E tests locally #982
:bug: Fix Conversion from alpha3 to alpha4 #986
✨Enhancements for running E2E tests locally #981
only use loadbalaner reference if needed #978
✨ Allow Trunk configuration at a Port level #934
fix gate lint issue #980
Update flavor usage of e2e test #977
Add gc for error instance’s port #975
:sparkles: Refactor: Don’t use infrav1.Instance internally #971
✨ Cleanup and refactor InstanceExists and DeleteInstance #960
getOrCreatePort: add support to configure port Profile #964
update from v1alpha3 to v1alpha4 in Makefile #970
🏃Return error if instance go error #967
🐛 bump controller-runtime to 0.9.6 to fix webhook tls errors #969
📖Add port security doc #958
📖 Add netlify.toml to publish our book #963
🐛 ignore Conflict status in order to make instance able to detach interface #962
📖Fix broken link #957
🐛 Fix failure to create server with specified tags #924
✨ Apply Port Security to Ports #921
✨ Add webhook readiness and health checks #955
🐛 openstackcluster reconciliation: reset .Status.failureMessage and .Status.FailureReason on success #953
✨ Do not update fip if its already mapped correct #947
✨ Add mock client and 2 tests for networking package #935
📖 improve release documentation #946
✨ Fix Webhook names for OpenStackMachineTemplate and OpenStackCluster #945
✨ Add OpenStackClusterTemplates Type #933
📖 Adjust README.md to fit v0.4.0 and bump k8s to v1.21.3 #944
✨ Add conversion for SecretReference to string #937
🐛 Wait for ports creation in ports e2e test #938
Use the kubernetesversions package of the cluster-api repo again #905
🐛 Remove the ttl flag from sshuttle invocation #941
Revert “reassociate Floating IP if first associate fails” #939
Add failure fields in OpestackCluster status section #893
✨ Add GET gophercloud metrics #932
reassociate Floating IP if first associate fails #930
✨ add description and tag to floating ips #925
🏃 sync linter settings with cluster-api repo and fix findings #923
Rename master to main #928
🏃 use amphora image from GCS in e2e tests #922
✨Update CAPI to v0.4.0 #919
📖 Upgrading a cluster without LBaaS is not supported #915
🐛 Don’t log nil error when AuthInfo is not set #916
🏃 Add test for custom port options feature #908
🐛 fixup release targets and update doc accordingly #903
🐛 Fix doc about external cloud provider #904
Add resource shortNames #894
🐛 fix release staging target #902
✨ Upgrade CAPI to v0.4.0-beta.0 #901
📖 Document custom ports feature #900
:sparkles: add predicates.ResourceIsNotExternallyManaged to cluster controller #897
✨ Add feature to create ports with custom options #876
Fix error logging for OpenStack instance creation #891
🐛 Fix event of associate/disassociate floating IP #880
Add some events related to load balancer #869
honor server group ID parm #881
Add metrics of gophercloud (POST,UPDATE and DELETE) actions #863
🏃 Validate OpenStackMachineTemplate spec.template.spec immutability #872
🏃 Refactor: use Service struct field more #871
Add seanschneeweiss as reviewer #874
Add chrischdi as reviewer #873
🏃 Add some events and refactor related to instance #862
Add more logs for LB creation #867
📖 Add doc related to log level #866
Upgrade to latest CAPI version (2021-05-07) #861
✨ api/v1alpha4 remove obsolete UserDataSecret field #865
✨ Add gophercloud request logs, fix contexts #860
✨ adjust loadbalancer wait.Backoff #853
🐛 Fix polling deleting instance #852
set image param as optional for boot from volume #851
Delete watching Status when deleting #846
bump tests to Kubernetes 1.20.6 #849
Wait for instance delete #845
Cleanup docs changes #838
📖 add documentation about postsubmit and nightly images/manifests #836
📖Add book build process #822
🐛 do not propagate the cloud field to clientconfig.AuthOptions #829
🐛 fix conversion-gen #827
🏃 Refactor/cleanup load balancer related code #835
🏃 Optimize devstack setup on GCP, add a script to setup a devstack on AWS #800
🏃 upgrade to latest CAPI version and upgrade/cleanup some other deps #833
🏃 Refactor: event consistency #828
🐛 fix path of uploaded artifacts #830
🏃 publish nightly artifacts #819
🏃 Reorder function variables #820
🏃 Refactor: Make getLoadBalancerName function #823
📖 Remove note about CI #821
📖 Update supported version of k8s in Readme #818
🏃 Test openstack key in our e2e tests #815
🏃 Remove neutron lbaas support #813
🐛 Delete bastion if basion.enabled=false #817
🏃 Improve ci script patching #812
🏃 Add e2e tests for all flavors #798
fix post-cluster-api-provider-openstack-push-images and add post-submit manifests #811
🐛 Fix configuration.md about bastion #810
🐛 fix post-cluster-api-provider-openstack-push-images #809
🏃 Update golangci-lint and fix most of the linter issues #797
📖 Update links for filing new issue #807
🏃 Remove unused release note section in the PR template #806
🐛 fix conversion gen #805
🏃 Implement conformance test via e2e test framework #782
🏃 Bump ginkgo version #803
🐛 InstanceExists should not do substring search on name #799
🐛 Make conversion-gen output location explicit #802
🏃 update yq commands to support yq V4 #792
🏃 Remove useOctavia from nonha template #795
🏃 Remove disablePortSecurity: false from template #793
🏃 goimports: fix import order, add local-prefix to linter #791
Update development guide #789
🏃 Add todos to PR template #786
✨ pkg/cloud/services/networking/securitygroups.go reimplement reconcilation #773
✨ Update klog dependency to v2 #779
🏃 migrate conformance test to Prow #759
📖 Update configuration doc #781
Initial impl v1alpha4 #748
Add support for failureDomain (AZ) for bastion #757
🐛Remove start.sh and restart.sh #761
Fix gate issue (test failure) #767
🏃 Update OWNERS files #766
Fix a doc typo #762
🏃 Update pull request template to use /hold per default #758
:sparkles: AccessSubnetUUID: we can specify source subnet for access IP address #756
🐛 use APIServerFloatingIP instead of ControlPlaneEndpoint.Host for LB #755
Refactory network functions (router.go==>network.go) #751
📖 improve RELEASE.md #747
Fix clusterctl config command #744
Update sync logic #736
Fix LoadBalancerMember creation #737
🐛 fix rbac aggregation manager role #743
🐛 Pass GOPROXY environment variable to Docker image build #740
🐛 Add NAMESPACE variable in cluster templates. #739
🏃 Revert Merge pull request #725 #733
🏃Remove unnecessary field in manager.yaml #729
Specify –metrics-bind-addr for CAPO manager #725
update openstack provider format from // to /// #727
🏃 Bump CAPI to v0.3.12 #724
🐛Ignore not found error when remove router interface #720
📖 Add instructions to use cluster template with load-balancer #703
Fix ca-file path in env.rc #716
move from 0.3.1 to 0.3.3 in the CI test #686
:bug: Fix domain_name and domain_id usage in env.rc #714
🏃 Refactor loadbalancer package #710
🏃Refactor create, delete instance #711
🏃 Move ncdc to emeritus status #708
:bug: Add SecurityGroup to Loadbalancerport when not using octavia #700
🐛 Fix SecurityGroupInUse error #705
Fix nil pointer error for Network #693
🏃 Add OpenStack version to bug report template #696
📖 fix getting log #697
🐛 Delete spec.disableServerTags of OpenStackCluster #692
✨ Align flag names with upstream Kubernetes components #690
update Make method to avoid mismatch #688
move to capi 0.3.11 #683
Add cluster-template-external-cloud-provider.yaml into release doc #682
Add openstack ussuri into support list #586
Switch CI from U to V release #680
Move log to creating place #673
set openstack cluster status for Bastion #671
📖 Update how to retrieve kubeconfig #677
✨ Add support for Tilt #666
nit: remove duplicate blanks #672
🐛 Fix to delete only automatically created floating IPs #669
fix location for env.rc file #665
Add doc update for boot from volume case #664
Add root volume support (put root volume into instance create param) #662
🐛 Update reference to the latest version of CAPO v0.3.1 #656
Remove USE_PYTHON3 #660
✨ Delete automatically created floating IP when deleting cluster #653
🏃 Cleanup unused variables #657
🏃 Delete spec.kubeadmConfigSpec.ntp.servers in cluster-template-without-lb.yaml #659
🏃 Bump Go to v1.13.15 in conformance pr job #658
🐛 Fix event message about port ID with associate Floating IP #655
Remove unnecessary colon #654
✨ My594 revised #590 #594 wrong parameter for a user provider network #610
📖 Update calico version in documentation #652
Add openStackMachine.Status.Addresses value #648
🏃 Bump CAPI to v0.3.10 #650
✨ Add events deleting resources #645
Add doc for how to move a cluster #630
📖 Update external cloud provider URL #646
Update configuration document #644
🏃 Bump Go to 1.13.15 #640
Add force move of secret cloud config #636
update cluster-api to 0.3.9 #639
Refactor creating/deleting instance #641
Add version into log #638
default concurrent reconcile from 1 to 10 #637
✨ Add bastion host to login the nodes and update non HA template #619
CI: Wget kubernetes binary be quiet #632
📖 Fix Link for external openstack template #629
Add tags to status #617
cleanup keys params #625
nit: update name of get output for openstackmachine #624
🏃 Add CAPO version to github issue template #623
🐛 Fix get openstackcluster to show ENDPOINT value #620
Rename to capoerrors #618
Remove Tag creation for ports and add description for it #596
Add application cred usage #599
switch to no-admin for CI test #606
🐛 Fix e2e test Kubernetes official binaries version #616
🏃 Update template for the external cloud provider #611
update openstack CI test version from T => U #605
✨ Use OpenStack key pair instead of KubeadmConfig spec #607
🏃 e2e test uses official Kubernetes version #613
🏃 Bump Cluster-API to v0.3.8 #615
Update e2e test and document of non lb case #608
✨Add external network discovery #573
nit: replace return with exit #602
📖 Add reference to the external cloud provider doc #600
🐛Update mtu size in Makefile #598
🏃 Add hidekazuna to reviewer #597
✨ Use external cloud provider #595
Add more logs for debug purpose #593
nit: Add default egress rule description #585
Add event for seucrity group #592
report error if security group not exist #583
Add doc tip for floating ip #575
📖 Update Required Configuration #576
🐛 Fix README.md #579
ignore router get return 404 error #571
Add generated security groups automatically #563
🐛 Invoke KUSTOMIZE in release-manifests #569
🐛 Show openstackcluster ENDPOINT #570
update doc about ssh security group #564
Remove APIServerLoadBalancerAdditionalPorts #561
🐛 Fix auto generate security groups #555
Make DisablePortSecurity compatible with platforms not using the port… #560
🏃 Update support for CAPI v0.3.5 #552
🐛 enable managedAPIServerLoadBalancer w/ existing network #548
🐛 Set up OPENSTACK_CLOUD environment variable in env.rc #550
reviewers: remove flaper87 #549
📖 Update Configuration doc #545
Add additional info when error occur #541
🐛 e2e test: switch to -bazel folder because bin folder has been removed #540
🐛 remove docker-build from build test #542
Add availability zone to be used by controller plane #537
🏃 Pr add prow test scripts #539
🐛 Fix updating to Cluster API v0.3.3 #538
🐛 Fix cluster-template.yaml #534
Add 1.18 support into list #536
🏃 Add Stein to v1alpha3 tested version #535
🏃 Add Zuul jobs for e2e conformance tests #491
🐛 use sec groups from the current project, wait for lb from last reconcile #523
🏃 Update to cluster-api v0.3.3, controller-tools v0.2.8 and controller-runtime v0.5.2 #532
✨ Delete router/network/subnet #522
✨ Add ServerGroupID to OpenStackMachineSpec #531
Fix cacert issue #527
avoid basename usage to avoid source action failure #529
Revert “Add kuryr support” #221
Full changelog
Bug 2013945 : pvc stuck on pending status when using preallocated storage domain #89 Updating ose-ovirt-csi-driver builder & base images to be consistent with ART #75
Full changelog
Updating ose-service-ca-operator images to be consistent with ART #177
Update go version to 1.16 #179
Bug 1981633 : add vulnerable legacy injector to allow for upgrade clusters to use … #168 Full changelog
Source code for this page located on github