4.12.0-0.okd-2023-02-18-033438

New features since version 4.11.0-0.okd-2023-12-20-003021

Download installer and client with:

oc adm release extract --tools quay.io/openshift/okd:4.12.0-0.okd-2023-02-18-033438

Team Approvals:

No tests for this release

Upgrades from:

4.12.0-0.okd-2023-02-17-214542 (changes) - Failed Success
4.12.0-0.okd-2023-02-04-212953 - Success
4.12.0-0.okd-2023-01-21-055900 (changes) - Success
4.11.0-0.okd-2023-01-14-152430 (changes) - F F F S
4.11.0-0.okd-2022-12-02-145640 (changes) - F F F S

Upgrades to:

Changes from 4.12.0-0.okd-2023-02-04-212953

Created: 2023-02-18 09:44:44 +0000 UTC

Image Digest: sha256:fd08a1dae13a434729451cdb6edd969714a4329904e8d27eb45d94e96021dff4

Release 4.12.0-0.okd-2023-02-18-033438 was created from registry.ci.openshift.org/origin/release:4.12.0-0.okd-2023-02-18-033438

Components

Kubernetes 1.25.4
Fedora CoreOS upgraded from 37.20230110.3 to 37.20230122.3

baremetal-installer, installer, installer-artifacts, ovirt-installer

OCPBUGS-6991: Don’t require vSphere details for agent installer #6826
OCPBUGS-6807: Check platform baremetal settings against default values #6815
OCPBUGS-7103: Set the configured proxy settings for agent installer #6830
OCPBUGS-7131: bootstrap: set 0644 mode for registries.conf #6804
Full changelog

cluster-capi-controllers

OCPCLOUD-2742: Merge https://github.com/kubernetes-sigs/cluster-api:v1.8.4 into master #225
OCPCLOUD-2703: OWNERS: update subcomponent #223
OCPBUGS-39516: Updating ose-cluster-api-container image to be consistent with ART for 4.18 #222
NO-JIRA: Update OWNERS #211
OCPCLOUD-2625: Merge https://github.com/kubernetes-sigs/cluster-api:v1.7.2 (a5898a2) into master #210
OCPBUGS-34133: Updating ose-cluster-api-container image to be consistent with ART for 4.17 #208
OCPBUGS-33170: All containers must fallback to logs on error #207
OCPBUGS-30480: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.4 (36c0e55) into master #203
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.2 (da795db) into master #199
OCPBUGS-30586: fix e2e tests on release branches #200
OCPCLOUD-2517: openshift: promote core CAPI IPAM CRDs to GA #197
OCPBUGS-29519: openshift: add CustomNoUpgrade annotation value to feature-set #196
OCPBUGS-29476: openshift: generate separate manifest for core CAPI CRDs #195
OCPBUGS-26111: add snyk file #194
OCPCLOUD-2449: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.0 (14efefe) into master #192
NO-JIRA: e2e: add openstack testing script #193
OCPBUGS-25586: Updating ose-cluster-api-container image to be consistent with ART #191
OCPBUGS-25000: Updating ose-cluster-api-container image to be consistent with ART #190
OCPCLOUD-2255: Update manifests-gen tool #189
OCPCLOUD-2257: Use manifests generation tool from provider repo #179
Update OWNERS #183
OCPBUGS-21645: Bump golang.org/x/net to v0.17.0 #182
OCPBUGS-17286, OCPCLOUD-2222: Merge https://github.com/kubernetes-sigs/cluster-api:v1.5.2 (3290c5a) into master #181
OCPBUGS-19109: Updating ose-cluster-api images to be consistent with ART #180
OCPBUGS-6354, OCPBUGS-6372: Merge https://github.com/kubernetes-sigs/cluster-api:v1.4.2 (7b92ce4) into master #175
Make openshift/e2e-tests.sh executable #178
OCPCLOUD-2121: Add openshift/e2e-tests for CAPI E2E testing #177
Updating ose-cluster-api images to be consistent with ART #174
Updating ose-cluster-api images to be consistent with ART #170
Add enxebre approvers #171
Merge https://github.com/kubernetes-sigs/cluster-api:release-1.3 (eb18352) into master #167
Sync OWNERS file #168
Updating ose-cluster-api images to be consistent with ART #165
Merge https://github.com/kubernetes-sigs/cluster-api:main into master #163
UPSTREAM: <carry>: bump build root image to golang-1.19 #164
Full changelog

cluster-dns-operator

OCPBUGS-40849: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.18 #421
OCPBUGS-38102: Bump to k8s.io/* v0.30.3 and controller-runtime v0.18.4 #420
OCPBUGS-33750: Bump version of DNSNameResolver controller #415
OCPBUGS-34229: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.17 #414
OCPBUGS-34229: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.17 #413
CFE-964: Add DNSNameResolver controller #394
OCPBUGS-32941: Bump to Kubernetes 1.29 and controller-runtime 0.17.3 #408
OCPBUGS-27924: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.16 #402
CFE-852: Enable ocp_dnsnameresolver CoreDNS plugin #393
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #403
OCPBUGS-24884: Updating ose-cluster-dns-operator-container image to be consistent with ART #397
OCPBUGS-24602: Enable topology-aware hints iff nodes in >=2 zones #398
OCPBUGS-23741: Bump to k8s.io v0.28.3, controller-runtime v0.16.3 #395
OCPBUGS-20024: Ignore max unavailable for status #386
OCPBUGS-22018: Bump golang.org/x/net/http2 to v0.17.0 for CVE-2023-39325 in cluster-dns-operator #387
OCPBUGS-20024: Revert “Revert “Set DNS DaemonSet’s maxSurge value to 10%”” #384
OCPBUGS-19510: test/e2e: Set controller-runtime logger #381
OCPBUGS-19126: Updating ose-cluster-dns-operator images to be consistent with ART #380
OCPBUGS-18034: Only bump lastTransitionTime on ‘status’ changes #375
OCPBUGS-15605: Update bufsize to 1232 bytes #370
OCPBUGS-13209: Revert “Set DNS DaemonSet’s maxSurge value to 10%” #379
NE-1268: Replace bindata using embed #361
OCPBUGS-12863: Replace Bugzilla link with Red Hat Issue Tracker #374
OCPBUGS-14395: Set controller-runtime logger to a null logger #369
OCPBUGS-6829: Add support for protocolStrategy API field to enable force_tcp configuration #359
OCPBUGS-13965: Bump vendors k8s libraries to 0.27.2 #368
OCPBUGS-13099: Updating ose-cluster-dns-operator images to be consistent with ART #363
OCPBUGS-12859: deflake TestDNSLogging #365
OCPBUGS-5943: Enable topology-aware hints if, and only if, nodes have zones #364
OCPBUGS-5943: Set DNS DaemonSet’s maxSurge value to 10% #358
OCPBUGS-10080: Updating ose-cluster-dns-operator images to be consistent with ART #357
OCPBUGS-4359: update-node-resolver.sh: Check for errors from >> #355
OCPBUGS-6382: Address CVE-2022-41717 #353
OCPBUGS-7648: Bump vendored k8s libraries to 0.26.1 and controller-runtime to 0.14.4 #356
OCPBUGS-4359: ensure original hosts file contents are preserved #352
Updating ose-cluster-dns-operator images to be consistent with ART #351
Full changelog

cluster-etcd-operator

OCPBUGS-7409: set default timeouts in etcdcli #1005
OCPBUGS-6935: add dedicated success status for bootstrap removal #999
OCPBUGS-7373: [release-4.12] fail early on missing node status envs #1004
OCPBUGS-6898: updating library-go for CVE-2022-41717 #998
Full changelog

cluster-image-registry-operator

MULTIARCH-5164: Update powervs-utils regions to include us-south and tor #1157
IR-490: manifests: add pvc related alerts to prometheus rules #1147
HOSTEDCP-1994: Add filewatcher for Azure client certificate authentication #1155
HOSTEDCP-2019: Use Client Cert Auth for ARO HCP deployments #1131
OCPBUGS-43508: fix proxy config and leader election test flakes #1140
OCPBUGS-38667: pkg/operator: wait for image registry config object cache sync #1138
OCPBUGS-42732: pkg/storage/azure: also check for auth failure error code on deletion #1129
CFE-1129: Added AWS TAGS reconciliation #1121
OCPBUGS-42514: azureclient: stop validating credentials when creating the client #1127
OCPBUGS-42196: pkg/storage/azure: use cluster-api tag key to discover vnet #1120
OCPBUGS-42106: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1122
OCPBUGS-42004: Set the Managed Identity client ID #1116
OCPBUGS-39485: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.18 #1113
OCPBUGS-37543: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1095
MULTIARCH-4971: Sync ImageStreamImportMode setting in the image config status #1090
OCPBUGS-38842: pkg/resource: invoke update-ca-trust extract with –output #1096
OCPBUGS-37543: Revert “Merge pull request #1087 from rajdeepc2792/rajdeepc2792/ARO-9391” #1093
ARO-9391, OCPBUGS-37543: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1087
OCPBUGS-38287: bump gophercloud to latest v2 #1086
IR-467: Enable MSI override for ARO HCP #1082
SPLAT-1721: Remove alibaba #1077
IR-471: Removing featuregate for chunkSizeMiB config #1073
Revert “IR-467: Enable Azure MSI authentication” #1079
IR-467: Enable Azure MSI authentication #1020
OCPBUGS-37207: Power VS: Check endpoints against lower case strings #1076
IR-471: Adding additional validation #1074
OCPBUGS-36038: go.*,vendor: bump go-retryablehttp #1063
IR-477: pkg/operator: deactivate azure path fix job #1061
IR-471: Exposing chunksize variable to utilize docker registry config #1060
OCPBUGS-34107: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.17 #1045
OCPBUGS-34399: Update rbac for featuregate #1056
OCPBUGS-33453: add SAR capability to image-registry #1046
CFE-962: Refactor code to mock GCP tag service for UTs #1027
OCPBUGS-34399: Revert “Merge pull request #1026 from deepsm007/expose-chunksize” #1052
OCPBUGS-34399: Exposing chunksize variable to utilize docker registry config #1026
OCPBUGS-34107: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.17 #1040
OCPBUGS-32710: pkg/storage/s3: use force path style in favour of virtual hosted style config #1028
OCPBUGS-33149: azure-path-fix: get client secret from k8s secret #1029
OCPBUGS-33868: Bump openshift api, client-go & library-go #1036
OCPBUGS-33172: azurepathfix: check if platform status is nil before accessing it #1030
OCPBUGS-32491: Power VS: Add support for Power VS endpoint overrides #1024
OCPBUGS-29559: Apply hypershift cluster-profile for ibm-cloud-managed #999
OCPBUGS-32328: azure-path-fix: support auth via account key (without clientID) #1021
OCPBUGS-30484: bump indirect google protobuf dependency #1015
NO-JIRA: remove bparees from owners #1019
OCPBUGS-29233: bump aws-sdk-go from v1.44 to v1.50 #1012
AUTH-482: set required-scc for openshift workloads #1008
NO-JIRA: bump golangci-lint to v1.56.2 #1013
OCPBUGS-29932: cmd/move-blobs: log and exit 1 on error instead of panic #1006
OCPBUGS-29637: azurepathfix: fix stack hub, government and workload identity setup #1003
OCPBUGS-29003: move azure storage blobs from docker back into /docker #998
NO-JIRA: Add hack/local-dev.sh #996
OCPBUGS-28225: pkg/storage/s3: enable bucket key on encryption settings #993
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #992
NO-JIRA: build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.16.0 #989
OCPBUGS-26767: MULTIARCH-4074: PowerVS: update supported regions #987
IR-409: build(deps): bump github.com/IBM/platform-services-go-sdk from 0.18.15 to 0.55.0 #974
OCPBUGS-24997: Updating ose-cluster-image-registry-operator-container image to be consistent with ART #979
IR-410: build(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1263 to 1.62.637 #980
OCPBUGS-11624: manifests/02-rbac.yaml: stop using wild cards #964
OCPBUGS-24649: add private endpoint permissions to Azure credentials request #971
OCPBUGS-24997: Updating ose-cluster-image-registry-operator-container image to be consistent with ART #975
IR-412: IBMCloud: Add support for endpoint overrides #955
CCO-248: Revert “Merge pull request #965 from jstuever/TRT-1368” #967
OCPVE-790: annotate credentials request manifests #959
OCPBUGS-24161: Updating ose-cluster-image-registry-operator-container image to be consistent with ART #966
TRT-1368: Revert “Merge pull request #935 from flavianmissi/CCO-248” #965
IR-366, IR-367, IR-411: allow users to configure private storage accounts in Azure #930
IR-408: request individual permissions for gcs #935
OCPBUGS-2889: accept user/pass OR application credentials on Swift UPI secret #924
IR-406, OCPBUGS-21853: bump k8s and openshift packages #936
OCPBUGS-21853: disable http2 for metrics endpoint #938
OCPBUGS-18969: move pruner role creation from openshift-apiserver #925
OCPBUGS-19262: Updating ose-cluster-image-registry-operator images to be consistent with ART #918
OCPBUGS-18469: increase storage account key cache expiration #912
OCPBUGS-17060: use Recreate on operator deployment #908
OCPBUGS-18103: check if response is nil before using it #909
OCPVE-632: add capability annotations to manifests #856
OCPBUGS-17882: Add rbac permission IDMS, ITMS #891
TRT-1193: Revert “IR-373: remove node-ca daemon” #899
CFE-846: Add user defined tags to the GCP buckets created #873
IR-373: remove node-ca daemon #867
build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 #877
build(deps): bump the k8s-dependencies group with 1 update #895
IR-363: Update Azure Credentials Request manifest of the Cluster Image Registry Operator to use new API field for requesting permissions #890
build(deps): bump github.com/prometheus/common from 0.37.0 to 0.44.0 #878
CFE-682: Add user defined labels to the GCP buckets created #872
CFE-682: Update openshift/api package to latest version #887
IR-390: Make a configmap for MCO to consume CAs #880
build(deps): bump github.com/aws/aws-sdk-go from 1.44.291 to 1.44.298 #879
build(deps): bump golang.org/x/net from 0.8.0 to 0.11.0 #871
build(deps): bump github.com/aliyun/aliyun-oss-go-sdk from 2.1.10+incompatible to 2.2.7+incompatible #869
.github/dependabot.yml: group certain dependencies #865
IR-389: bump aws-sdk-go #860
.github: configure dependabot #861
IR-369, IR-370: support Azure workload identity #857
OCPBUGS-12132: Updating ose-cluster-image-registry-operator images to be consistent with ART #854
Updating ose-cluster-image-registry-operator images to be consistent with ART #849
OCPBUGS-8224: fix storage selection on IBM cloud #847
OCPBUGS-6797: Add nil validation for IBM Cloud and Power VS infrastructure status in ibmcos #845
MULTIARCH-3212: Use IBM COS as storage backend for PowerVS #843
OCPBUGS-6621: bump aws-sdk-go #844
Add UserTags while creating Azure Storage Account #829
IR-341: bump openshift/api #828
IR-270: allow registry to create image objects #823
OCPBUGS-6175: OpenStack: Add support for Proxy #833
IR-308: Add support for External platform #825
OCPBUGS-4090: swift: Retry connecting to OpenStack #819
IR-311: storage: azure: use azidentity with an adapter #807
Bug 2065166: Remove roles/iam.serviceAccountUser role #824
Updating ose-cluster-image-registry-operator images to be consistent with ART #821
IR-314: Bump dependencies #816
Add config for golangci-lint and fix errors #820
hack/test-go.sh: generate coverage reports #818
OCPBUGS-3974: check for nil pointer before dereferencing #814
Bug 2066388: Add example for s3.regionEndpoint #815
OCPBUGS-2941: Bump gophercloud #808
add myself to OWNERS #809
Full changelog

cluster-ingress-operator

OSASINFRA-3642: openstack: support setting external LB floating IP #1147
HOSTEDCP-2031: Use Client Certificate Authentication for ARO HCP deployments #1151
OCPBUGS-43412: Bump to k8s.io v0.31.1 (and deps) #1156
NE-1716: Bump Gateway API to v1.0.0 and OSSM to v2.6 #1163
CFE-1134: Watch infrastructure and update AWS tags #1148
OCPBUGS-43033: e2e/ingress_dns: support both private & public #1153
OCPBUGS-37932: Always log AWS service endpoints #1137
OCPBUGS-36340: Retry IngressController and Route updates in E2E tests #1116
OCPBUGS-42004: Set the MI client ID for the ARO HCP override #1144
AUTH-482: set required-scc for openshift workloads #1031
OCPBUGS-36044: Bump IBM/go-sdk-core to v5.17.4 #1120
OCPBUGS-41527: Add tolerations to survive scheduler taint manager e2e tests on workers #1143
OCPBUGS-41112: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.18 #1140
OCPBUGS-39151: Add Missing Scope Change Instructions #1135
OCPBUGS-38871: ingress: deployment: explicitly set DeploymentStrategy in SingleReplica case #1134
OCPBUGS-37491: Ingress operator status not degraded when canary route fails #1125
OCPBUGS-38217: Clear LB Status Parameters on LB Type Change #1126
OCPBUGS-34418: Allow router pods to use the “restricted” SCC #1064
OCPBUGS-38441: Resolve DNS Resolution CI Flakes in Subnets and EIP E2E #1127
OCPBUGS-38079: Bump controller-runtime to v0.18.4 #1122
NE-1798: API bump for promotion of eipAllocation from feature gates to GA. #1118
NE-1688: Enable Azure MSI authentication for ARO HCP #1119
NE-1674: Add LB EIP Allocation for AWS #1109
NE-1531: Fix Initialization of NLB Status Parameters #1114
NE-1531: AWS Subnet Selection #1046
NE-1273: Add a watch to the ingress operator so it will recreate the gwapi crds #1106
OCPBUGS-37627: Fix getRouteHost error handling #1110
NE-1208: Gateway API E2E Testing #1023
OCPBUGS-31664: Fix SyncLoadBalancerFailed status message of IngressController #1102
OCPBUGS-36465: Delete and recreate canary route to clear spec.host #1095
OCPBUGS-34413: Refine logging for accurate infra CR status updates #1103
OCPBUGS-35342: Add e2e test for connect timeout #1084
NO-JIRA: Add grzpiotrowski to OWNERS #1090
NO-JIRA: addowner-Thealisyed #1091
OCPBUGS-35356: Retry IngressController updates in router status E2E #1085
OCPBUGS-9037: Change Canary to use passthrough route #978
OCPBUGS-35368: Add Regexp Anchor to TestAll #1087
OCPBUGS-23221: internalServiceChanged: Fix target port logic #1052
OCPBUGS-34262: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.17 #1067
NE-1400: Bump to OSSM 2.5 and Gateway API v0.6.2 CRDs #1018
OCPBUGS-33792: Bump openshift/library-go to resolve NewPrometheusClient E2E failures #1054
OCPBUGS-32887: Allow operator to update Route spec.subdomain #1047
OCPBUGS-32942: Bump controller-runtime to v0.17.3 #1050
OCPBUGS-28673: implement connect timeout tuning option #1035
NE-1317: manifests - add ingress capability annotation #950
OCPBUGS-32371: Bump openshift/api, and update CRD generation #1045
OCPBUGS-25193: Add vnet subnet read and join permission for azure #1029
OCPBUGS-30834: Update to go 1.21 #1040
OCPBUGS-31722: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1037
OCPBUGS-3522: Include recent errors in canary checks fail #865
OCPBUGS-30091: TestHostNetworkPortBinding: Delete t.Parallel() #1032
CFE-987: Use RouterExternalCertificate feature gate for adding ROUTER_ENABLE_EXTERNAL_CERTIFICATE env var to the router pods #1017
CORS-2317: Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled #1016
OCPBUGS-28596: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.16 #1020
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #1019
NE-1490: update to go v1.20 #1012
OCPBUGS-15253: Include namespace in prometheus alerts IngressWithoutClassName and UnmanagedRoutes #980
CCO-249: Replace GCP role with explicit permissions #844
OCPBUGS-25006: Updating ose-cluster-ingress-operator-container image to be consistent with ART #1006
OCPBUGS-24531: Revert “ OCPBUGS-24531 Skip CI for scope change until OCPBUGS-24044 is resolved” #1011
OCPBUGS-24531: Revert “Merge pull request #1007 from candita/OCPBUGS-24531-SkipScopeChangeTest” and add changes to skip test only for Azure and GCP #1008
OCPBUGS-24531: Skip CI for scope change until OCPBUGS-24044 is resolved #1007
OCPVE-780: annotate credentials request manifests #995
OCPBUGS-23742: Bump controller-runtime to v0.16.3 #1001
NE-1402: Add service endpoint override capability to IBM DNS provider #990
OCPBUGS-16762: Revert “OCPBUGS-16762: Bump openshift/api for container.maxLength fix” #982
OCPBUGS-14994: Don’t add clientca-configmap finalizer if deleting #948
OCPBUGS-22020: Bump golang.org/x/net for CVE-2023-44487 #985
OCPBUGS-21803: test/e2e: Add test case for 2000000 maxConnections #983
OCPBUGS-20192: Require non-readonly filesystem in router container #981
OCPBUGS-16762: Bump openshift/api for container.maxLength fix #979
OCPBUGS-3541: Don’t create route metrics for ingress controllers that are not admitted #869
OCPBUGS-18248: Prevent GatewayClass from getting recreated #975
OCPBUGS-19268: Updating ose-cluster-ingress-operator images to be consistent with ART #977
OCPBUGS-15900: TestMTLSWithCRLs: only try to parse HTTP status code from curl output when stdout is long enough. #973
OCPBUGS-3356: E2E test for cookie length truncation #871
OCPBUGS-15978: Check public DNS zone when reporting status #967
OCPBUGS-17359: test/e2e: Don’t use openshift/origin-node #970
NE-1140, NE-1145: Set/delete HTTP request/response headers via IngressController API #872
OCPBUGS-16089: Set spec.subdomain on the canary route #965
OCPBUGS-14995: desiredRouterDeployment: Set HostPort if needed #947
OCPBUGS-10875: gateway-service-dns: Set DNS policy appropriately #934
NE-1244: Use permissions instead of the “Contributor” role in Azure CredentialsRequest #929
OCPBUGS-12790: README: Fix Bugzilla link #968
RFE-3007: Expose option-contstats as an unsupported option #887
NE-1189: Refactor Test_desiredLoadBalancerService #886
NE-1187: Use t.Run for table-driven tests #884
NE-1183: Rename unit tests for specific functions #880
NE-1269: Replace bindata using embed #905
RFE-3765: Allow Ingress to Modify the HAProxy Log Length when using a Sidecar #900
OCPBUGS-9274: canary: Tolerate infra node NoExecute taint #932
OCPBUGS-7546: Allow only 1 disruption with 3 replicas #931
OCPBUGS-15100: Fix previous attempt of adding a missing trailing dot to hostname #956
OCPBUGS-14396: Set controller-runtime logger to a null logger for E2E #946
OCPBUGS-14998: Only use RoleARN for Route53 API #951
OCPBUGS-15100: Create valid DNS names for Gateway API on GCP #949
OCPBUGS-13106: Add ingress controller status logging on waitForIngressControllerCondition #924
OCPBUGS-13190: Avoid spurious updates for internalTrafficPolicy #927
OCPBUGS-13810: Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #944
NE-1294: Add support for AWS shared VPC in another account #928
CCO-318: Enable Azure Workload Identity authentication. #906
OCPBUGS-6661, OCPBUGS-9464: Move mTLS CRL handling into the router, and fix accidental duplication of CRLs #939
OCPBUGS-13963: Bump vendors k8s libraries to 0.27.2 #936
Revert “OCPBUGS-6661, OCPBUGS-9464: Move mTLS CRL handling into the router, and fix accidental duplication of CRLs” #938
OCPBUGS-6661, OCPBUGS-9464: Move mTLS CRL handling into the router, and fix accidental duplication of CRLs #930
OCPBUGS-5478: add UBI based Dockerfile #925
CCO-318: Read feature gates for future usage #908
OCPBUGS-12913: Deflake TestRouterCompressionOperation #920
OCPBUGS-6784: bump controller-runtime to fix the multi namespace cache indexing #913
OCPBUGS-12579: Address CVE-2022-41723 #915
OCPBUGS-12790: Replace Bugzilla link with Red Hat Issue Tracker #916
OCPBUGS-10714: gatewayclass: Update for OSSM 2.4 API change #901
OCPBUGS-10189: Updating ose-cluster-ingress-operator images to be consistent with ART #898
OCPBUGS-10846: Fix TestClientTLS flakes #904
NE-1184: Test_desiredHttpErrorCodeConfigMap: Kill dead code and fix format #881
OCPBUGS-4054: configurable-route: Don’t use NewKindWithCache #860
NE-1186: Test_getRR: Fix typo: “excepted” → “expected” #883
CORS-2467: dns: azure: use azidentity with an adapter #846
NE-1105: Add support for Gateway API #890
OCPBUGS-7424: Bump vendored k8s libraries to 1.26.1 #888
CFE-679: Add user defined tags to the created DNS resources #874
OCPBUGS-6247: Updating ose-cluster-ingress-operator images to be consistent with ART #862
CORS-2072: GCP - Parse Zone ID with a project ID embedded #855
NE-1092: Add proxy protocol support for IBMCloud loadbalancers #812
OCPBUGS-6384: Address CVE-2022-41717 #876
OCPBUGS-4827: Add missing AWS permission for ListTagsForResources #868
OCPBUGS-6701: Avoid spurious updates for scope in IngressClass #879
OCPBUGS-6698: Fix conflict error message in ensureNodePortService #877
OCPBUGS-6700: updateIngressClass: Fix log message #878
NE-1124: Add support for External platform to CIO #873
OCPBUGS-4573: Target metrics port by name in internal service #864
OCPBUGS-434: Absorb PodsScheduled condition into MinAvailable #854
OCPBUGS-4759: Do not manage DNS for an ingresscontroller with domain mismatch in GCP #866
OCPBUGS-4703: Replace liveness-grace-period-seconds annotation #863
OCPBUGS-3404: Bump openshift/api for matchExpressions doc fix #856
OPNET-133: Support remote worker #858
OCPBUGS-1725: Ingress controller should not have affinity policy in single-replica clusters #810
OCPBUGS-1807: Fix bad handleSingleNode4Dot11Upgrade log message #808
Full changelog

cluster-kube-apiserver-operator

API-1835: migrate static pod fallback to ssa #1765
API-1835: migrate startup monitor conditon to ssa #1764
STOR-2078: Enable VolumesAttributesClass API in kube-apiserver #1761
API-1835: migrate the installer controller to SSA #1756
NO-JIRA: Update “deprecated API in use” alert expressions for 1.31. #1750
OCPBUGS-42083: Don’t rollout revision until three etcd endpoints are listed #1743
WRKLDS-1449: bump(k8s): update k8s.io/* dependencies to v1.31.1 #1722
API-1835: update to use the latest revision controller #1747
API-1835: operator client update #1737
WRKLDS-1449: cleanup flag validation after they have been added to the installer #1736
NO-JIRA: Re-apply “certrotationcontroller: set AutoRegenerateAfterOfflineExpiry for generated certificates” #1665
create CRDs from openshift/api #1735
OCPBUGS-41778: increase kube-apiserver failureThreshold #1732
OCPBUGS-41173: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.18 #1730
NO-JIRA: Bump library-go to add audit logs about events #1723
OCPBUGS-41257: introduce –operand-kubernetes-version flag and resolve API group versions accordingly #1731
OCPBUGS-38335: Bump library-go #1721
NO-JIRA: nodekubeconfigcontroller: set ownership component for node kubeconfigs #1704
AUTH-521: add disabled syncer as reason to CFE for PSA #1686
NO-JIRA: update library-go #1703
OCPEDGE-1102: Revert high cpu usage alert description #1680
OCPEDGE-902: add SNO control plane high cpu usage alert #1676
OCPBUGS-34782: manifests: add ownership annotation for kubelet-bootstrap-kubeconfig #1694
OCPBUGS-34544: Disable PersistentVolumeLabel admission plugin #1693
OCPBUGS-34800: Update APIRemovedInNextReleaseInUse for kube 1.30 / ocp 4.17 #1697
OCPBUGS-33963: Create one-shot migrations for the flowcontrol group. #1689
API-1783: bump(k8s): update k8s version to v1.30.0 #1666
OCPBUGS-33522: add a controller that reconciles SCCs’ volumes #1675
NO-ISSUE: Revert “add SNO control plane high cpu usage alert” #1674
OCPBUGS-33184: Fix incorrect name for hostmount-anyuid SCC ClusterRole #1671
OCPEDGE-902: add SNO control plane high cpu usage alert #1660
WRKLDS-1015: tolerate node-role.kubernetes.io/control-plane:NoExecute #1664
OCPBUGS-22969: Use v1 for flowcontrol API #1577
OCPBUGS-31384: use RotatedSigningCASecret controller in update only mode #1659
NO-ISSUE: Revert “certrotationcontroller: set AutoRegenerateAfterOfflineExpiry for generated certificates #1661
NO-JIRA: certrotationcontroller: set AutoRegenerateAfterOfflineExpiry #1652
OCPBUGS-30119: certrotation: Bump library-go to latest master #1651
OCPCLOUD-2514: External CCM should no longer rely on feature gate access #1649
OCPBUGS-25894: operator: stop removing kube-apiserver-slos asset #1642
NO-JIRA: extend node-system-admin-client validity to 2 years #1618
OBSDA-553: add provider name to cluster_infrastructure_provider when external platform #1638
AUTH-481: Add PSa labels to openshift-kube-apiserver-operator namespace #1637
OCPBUGS-27842: Add sno section to alert description #1633
NO-JIRA: Add Vu and Vadim to OWNERS #1634
OCPBUGS-24005: when skipping a webhook check because of missing CA log the name of the webhook #1632
NO-JIRA: Add ownership for the admin kubeconfig #1584
OCPBUGS-18939: manifest: drop slo latency metrics in favor of sli #1546
NO-ISSUE: prevent update status conflicts #1621
OCPBUGS-21846: sync(library-go): revision_controller: update last revision only when a revision is completely rendered #1619
OCPBUGS-14496: manifests: fix the scope of the TechPreviewNoUpgrade alert #1512
OCPBUGS-24907: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART #1606
OCPNODE-1892: Rebase 1.29.0 #1608
OCPBUGS-24005: webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1587
TRT-1420: revert #1586 #1596 #1607
OCPNODE-1890: Bump k8s api to v0.29.0 #1586
OCPNODE-1892: Set flag to skip setting cloud-provider=external #1596
OCPBUGS-24701: ignore vendor folder in SAST scan #1599
AUTH-442: psa cluster fleet evaluation #1588
OCPBUGS-24213: Annotate managed certs #1568
OCPBUGS-23796: use AlwaysAllow UnhealthyPodEvictionPolicy option #1579
OCPBUGS-21836: use external load balancer url for jwks-uri #1578
manifests: set owning component for TLS artifacts #1583
OCPBUGS-19160: Updating ose-cluster-kube-apiserver-operator images to be consistent with ART #1550
OCPBUGS-20331: manifests/0000_90_kube-apiserver-operator_04_servicemonitor-apiserver: Rename to kube-apiserver-performance-recording-rules #1566
OCPBUGS-20331: manifests: rename API performance dashboard #1565
OCPBUGS-21729: bump library-go to include switch to HTTP/1.1 #1567
Update required GV for ValidatingAdmissionPolicy gate. #1561
Update “deprecated API in use” alert expressions for 1.28. #1562
bump(openshift/client-go,library-go) #1560
OCPBUGS-16794: installerpod: change pod manifest mode to 0600 #1557
OCPBUGS-19024: remove featuregate upgradeable controller that moved to cluster-config-operator #1547
OCPBUGS-18247: manifests: don’t include recording rules when Console capability is not enabled #1542
OCPBUGS-15504: manifest: remove kube-apiserver PrometheusRule #1543
Bump openshift/* libs #1549
Update to Kubernetes 1.28.2 #1548
STOR-1425: Update to Kubernetes 1.28.1 #1534
OCPBUGS-17436: Unrevert 1536 and 1538. #1541
Reverts DynamicResourceAllocation enablement on techpreview #1540
OCPBUGS-17436: Enable DynamicResourceAllocation API in kube-apiserver #1538
Set runtime-config in lockstep with feature-gates, if needed. #1536
bump(api) #1535
OCPBUGS-16511: bump(*): vendor update #1529
OCPBUGS-16511: remove dependency on typed prometheus client #1527
OCPBUGS-13635: make webhook connection failure a warning in log #1526
OCPBUGS-15489: manifests: add new PrometheusRule for recording rules #1521
certrotation: rotate kube-apiserver-to-kubelet-signer when 80% of validity is over #1523
OCPBUGS-13946: do not use one second timeout when asserting a webhook connection #1510
OCPBUGS-14008: Enable “send-retry-after-while-not-ready-once” on SNO #1500
update probes for best practices and consistency #1516
api_performance_dashboard: show apiserver_longrunning_requests metric #1518
allow greater timeout for etcd health check #1517
api_performance_dashboard: show apiserver_request_total instead of apiserver_dropped_requests #1520
OCPBUGS-8404: pkg/operator/configobserver: check that the serving certificate refer… #1482
OCPBUGS-3986: dashboard: use recording rules for most metrics #1484
OCPBUGS-14940: api_performance_dashboard: show apiserver_longrunning_requests metric #1511
OCPBUGS-13946: degraded_webhook.go x509: certificate signed by unknown authority #1503
OCPBUGS-14323: Change manifest directory permissions #1505
OCPBUGS-13547: Remove featureset flag and use only the manifest #1491
OCPBUGS-13303: pkg/operator/startupmonitor: skip openshift-apiserver readiness check… #1492
OCPBUGS-14038: Update APIRemovedInNextRelease alerts #1497
STOR-1263: Bump k8s 1.27 #1469
read featureset from the manifests #1490
Read feature manifest #1488
Cover featuregate access errors in PSA configobserver unit tests. #1486
switch to featuregates via the API #1485
OCPBUGS-10831: pod security: use v1 api #1481
OCPBUGS-11361: Revert “Merge pull request #1474 from benluddy/oapi-bump” #1477
Bump dependency on openshift/api. #1474
Updating ose-cluster-kube-apiserver-operator images to be consistent with ART #1460
OCPBUGS-10713: PSA Violation alert: add ocp_namespace label #1435
OCPBUGS-10039: update openshift/api to include aesgcm provider in the default apiserver schema #1462
OCPBUGS-10577: update apf configuration to use v1beta3 #1413
OCPBUGS-8711: API-1509: Enable AES-GCM encryption #1449
OCPBUGS-8478: Disable TestBoundTokenSignerController #1455
STOR-1051: Allow CSI inline volumes in all SCCs #1434
WRKLDS-705: Bump openshift/api to enable DynamicResourceAllocation through TechPreviewNoUpgrade #1447
bump(api) #1444
bump(*) #1442
Update OWNERS to remove/replace adambkaplan #1438
OCPBUGS-5873: dashboard: use apiserver_storage_objects metric #1432
API-1520: Update SLO alerts based on upstream improvements #1431
WRKLDS-649: Guard pod set readiness probe endpoint explicitly #1437
update APIRemovedInNextRelease alerts #1436
OCPBUGS-6202: Updating ose-cluster-kube-apiserver-operator images to be consistent with ART #1415
OCPBUGS-6258: bump(k8s): 1.26.1 #1433
increase audit log size to contain an entire upgrade+e2e run #1430
OCPBUGS-3985: enable pod security admission for techpreview #1403
OCPBUGS-272: Remove duplicate find word in error msg for degraded webhook #1428
Fix typo in PodSecurityViolation alert’s description #1391
make the bootstrap kube-apiserver honor cluster-wide featuregates #1419
remove use of deprecated klog flags #1427
Revert “drop log-file flag removed in 1.26” #1425
make api team approver #1377
drop log-file flag removed in 1.26 #1420
bump(api) #1418
Drop flags removed in k8s 1.26 #1417
OCPBUGS-3041: guard controller: set an explicit hostname to avoid name collisions #1410
STOR-829: Enable CSIInlineVolumeSecurity admission plugin #1385
OCPBUGS-3985: update for featureset rendering #1409
OCPBUGS-3929: update apf configuration to use v1beta2 #1408
bootstrap-kube-apiserver: specify resources.requests #1398
OCPBUGS-1601: CVE-2022-3259: enable HSTS for kube-apiserver #1392
Bug 2100429: Allow ephemeral volumes in all SCCs #1380
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-7369: Guard pod set readiness probe endpoint explicitly #699
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-7369: Guard controller: set the readiness probe endpoint explicitly #462
Full changelog

cluster-kube-storage-version-migrator-operator

NO-JIRA: operator/starter.go: don’t report an error on shutdown #117
OCPBUGS-41169: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.18 #116
NO-JIRA: bump(*) #113
OCPBUGS-34306: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.17 #110
OCPBUGS-34306: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.17 #109
AUTH-482: set required-scc for openshift workloads #107
OCPBUGS-29567: Apply hypershift cluster-profile for ibm-cloud-managed #106
OCPBUGS-27930: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.16 #103
OCPBUGS-24989: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART #101
OCPBUGS-21738: bump library-go to include switch to HTTP/1.1 #95
OCPBUGS-19253: Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #94
Revert “specify master node selector on migrator pod” #93
OCPBUGS-17170: specify master node selector on migrator pod #92
OCPBUGS-16513: bump(*): update to 1.27.1 #91
Fix operator doc in README #90
Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #89
OCPBUGS-6240: Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #87
Full changelog

cluster-machine-approver

OCPCLOUD-2736: Update to k8s 1.31 #240
OCPCLOUD-2703: OWNERS: update subcomponent #239
OCPBUGS-39526: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.18 #238
OCPBUGS-36871: Client internal DNS checks should be case insensitive #237
NO-JIRA: Update OWNERS #236
OCPCLOUD-2602: Update dependencies to Kube 1.30 #235
OCPBUGS-34138: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.17 #232
OCPBUGS-33644: check for machine crd before listing machines #231
OCPBUGS-29568: Apply hypershift cluster-profile for ibm-cloud-managed #229
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #227
OCPBUGS-26116: Add Snyk file to exclude vendor directory on scan #225
OCPCLOUD-2417: Update to kube 1.29 and controller-runtime 0.17.0 #224
OCPBUGS-23544: Increase concurrent reconciles to 10 #222
OCPBUGS-25582: Updating ose-cluster-machine-approver-container image to be consistent with ART #223
OCPBUGS-24985: Updating ose-cluster-machine-approver-container image to be consistent with ART #218
OCPBUGS-24154: Updating ose-cluster-machine-approver-container image to be consistent with ART #217
OCPCLOUD-2277: Ensure Cluster Machine Approver metrics are only available via HTTPS #211
OCPBUGS-21594: Filter non node CSRs in metrics #208
OCPBUGS-21793: Bump x/net package to v0.17.0 #204
Update OWNERS #205
OCPBUGS-19250: Updating ose-cluster-machine-approver images to be consistent with ART #201
OCPCLOUD-2181: Update K8s dependencies to 1.28 #203
OCPBUGS-17090: Set logger for controller runtime #200
OCPBUGS-18338: Fix CI by running tests natively by default #199
OCPBUGS-16156: check if machine api present #198
handle situation when machine CRD is not present #191
OCPCLOUD-2044: Update to Kubernetes 1.27 deps #195
OCPBUGS-10171: Go 1.20 bump with fixed unit tests #194
OCPBUGS-11225: Update node client allowed usages #189
OCPBUGS-11225: Update isNodeClientCert to allow for new key usages #186
OCPBUGS-11225: approver: fix ECDSA approvals in 1.27 #184
Update TLS Bootstrapping doc links in README #182
Updating ose-cluster-machine-approver images to be consistent with ART #180
Update OWNERS #179
: Update tooling for CMA #178
OCPCLOUD-1805: Port to ginkgo v2 #176
Updating ose-cluster-machine-approver images to be consistent with ART #174
Update OWNERS #177
Full changelog

cluster-monitoring-operator

MON-4058: Fix api-docs for ThanosRuler EvaluationInterval #2518
MON-3934: make TestImageRegistryPods more robust and split it into Pl… #2468
MON-4058: Expose evaluationInterval setting for UWM Prometheus and ThanosRuler #2517
MON-4078: report vendor_model:node_accelerator_cards:sum to Telemetry #2515
MON-4057: Expose scrapeInterval setting for UWM Prometheus #2503
NO-JIRA: [bot] Synchronize versions of the downstream components #2516
OCPBUGS-43987: Bump library-go to get latest tls suite changes #2513
OCPBUGS-27250: bump prometheus-operator to v0.78.1 #2514
MON-4051: Add new metrics for OpenShift logging telemetry #2512
MON-4065: [bot] Synchronize versions of the downstream components #2504
OCPBUGS-18007: Add runbook url for TelemeterClientFailures #2506
MON-4060: Bump prometheus-operator to v0.77.2 #2502
OCPBUGS-42671: make config unmarshalling more strict to help detect #2493
OCPBUGS-42148: Fix api doc on Thanos Ruler default retention #2500
MON-3850: Lint CMO tests #2292
MON-4021: feat: add the required utils for automated tests and integration with the docs #2443
NO-JIRA: fix CMO config for Alertmanager e2e tests #2495
NO-JIRA: [bot] Update jsonnet dependencies #2486
MON-3523: Disable http2 in metrics-server by default #2485
MON-3802: implement cross-namespace rules for UWM #2307
MON-3991: set noProxy for Prometheus remote-write via the CR. #2453
OCPBUGS-30122: chore: Bump to prometheus-operator 0.77.1 #2480
OCPBUGS-30122: Bump openshift/prometheus-operator to v0.77.1 #2484
NO-JIRA: vendor Kubernetes dashboards #2482
NO-JIRA: update Go dependencies #2481
OCPBUGS-41158: add pod-metrics-reader cluster role #2475
MON-3896: Add OpenTelemetry operator metrics #2450
NO-JIRA: clean-up generated dashboards #2479
NO-JIRA: remove 4.17 TODOs #2478
NO-JIRA: Update ConsolePlugin to include specs for i18n.loadType : Preload. #2477
MON-3367: chore: enable delayed-compaction feature flag on Platform and UWM Prometheuses #2469
OCPBUGS-39246: filter alerts sent to Telemeter #2466
MON-3934: move port forward setup inside retry loop for more resiliency #2465
MON-3934: merge TestAlertManagerHasAdditionalAlertRelabelConfigs into… #2464
MON-3994: [bot] Synchronize versions of the downstream components #2462
OCPBUGS-39133: Configure graceful shutdown for metrics-server #2460
MON-3994: [bot] Synchronize versions of the downstream components #2457
OCPBUGS-39126: disable user-defined monitoring per object #2452
OU-450: Migrate Monitoring Plugin Deployment from nginx to Go server #2412
MON-3992: [bot] Synchronize versions of the downstream components #2454
NO-JIRA: Update README.md #2456
Updating cluster-monitoring-operator-container image to be consistent with ART for 4.18 #2455
MON-3990: make TestClusterMonitorConsolePlugin check that one of the pods can serve /plugin-manifest.json #2444
MON-3989: [bot] Synchronize versions of the downstream components #2446
MON-3895: Add tempo operator metrics #2421
OCPBUGS-38780: update links to OpenShift documentation #2442
OCPBUGS-38289: fix(prometheus): avoid passing the cluster-wide proxy config to a remote endpoint when noProxy will prevent the proxuying anyway #2441
MON-3982: [bot] Synchronize versions of the downstream components #2440
MON-3982: Upgrade to Prometheus operator v0.76.0 #2438
MON-3967, MON-3981: [bot] Synchronize versions of the downstream components #2437
MON-3962: set proxy_from_environment to true #2431
OCPBUGS-33863: use UserWorkloadInvalidConfiguration reason when UWM config only is invalid #2436
HOSTEDCP-1044: Add nodepools telemetry metrics for HyperShift #2265
NO-JIRA: [bot] Synchronize versions of the downstream components #2435
MON-3972: [bot] Synchronize versions of the downstream components #2434
OCPBUGS-17506: Make error messages clearer on poll timeouts #2417
MON-3964: set scrape timestamp tolerance for user workload monitoring #2429
MON-3961: inject proxy env variables in Alertmanager #2424
MON-3949: [bot] Synchronize versions of the downstream components #2419
MON-3900: follow-up: clean up operator logic and some tests now that metrics-server is the default Metrics API backend #2425
OCPBUGS-37686: fix documentation typos #2427
NO-JIRA: fix: fix a small typo #2426
MON-3921: Revert “Revert “Merge pull request #2392 from machine424/f-… #2403
MON-3959: Skip TestTLSSecurityProfileConfiguration as disruptive #2423
MON-3900: Remove prometheus-adapter code #2409
MON-3947: [bot] Synchronize versions of the downstream components #2418
MON-3947: [bot] Synchronize versions of the downstream components #2414
MON-3947: Bump prometheus-operator to 0.75.1 #2416
MON-2065: jsonnet: exclude kubernetes-storage rules #2377
OCPBUGS-36495: Add deprecated config runbook #2410
OCPBUGS-31250: Exclude windows nodes from kubelet servicemonitor #2368
OCPBUGS-36406: add runbook_url annotations #2401
MON-3914: add a regression test for gogc based on the go_gc_gogc_percent metric #2393
MON-3914: [bot] Synchronize versions of the downstream components #2394
OCPBUGS-36299: Revert #2392 “MON-3800: jsonnet: update prometheus dep to fetch the PrometheusKuber…” #2398
MON-3800: jsonnet: update prometheus dep to fetch the PrometheusKuber… #2392
OCPBUGS-35480: Add deprecation for prometheus adapter #2381
MON-3915: chore: bump Go dependencies #2387
MON-3914: adjust Prometheus GOGC based on infra topology #2390
OCPBUGS-32696: opt-out of multi-cluster Prometheus dashboard #2351
OCPBUGS-35397: attach runbook to the PrometheusDuplicateTimestamps alert #2365
MON-3905: [bot] Synchronize versions of the downstream components #2382
MON-3894: revert(monitoring-plugin): undo nginx caching tweaks as the issue was… #2380
MON-3795, SDN-3817: Expose OVNKubernetes:AdminNetworkPolicy Metrics via telemetry #2297
MON-3897: [bot] Synchronize versions of the downstream components #2378
OBSDOCS-883: change docs to correct retention time uwm prometheus #2277
MON-3884: Send metric acm_managed_cluster_worker_cores via Telemetry #2367
MON-3887, MON-3889: [bot] Synchronize versions of the downstream components #2376
MON-3888: bump go tools 1.22 #2375
MON-3882: [bot] Synchronize versions of the downstream components #2371
MON-3701: clean-up injection of CA bundle for user Alertmanager #2361
OCPBUGS-33645: inject trusted CA bundle into UWM Alertmanager #2349
OCPBUGS-34437: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.17 #2372
MON-3881: chore: remove hack/ocp-images.sh #2366
MON-3801: clean-up unused OAuth proxy references #2359
MON-3701: clean-up injection of CA bundle for user Prometheus #2362
MON-3874: chore: poll immediately in the e2e tests #2356
MON-3701: clean-up tests #2360
OCPBUGS-33955: remove deprecated logtostderr argument #2355
OCPBUGS-33686: [bot] Synchronize versions of the downstream components #2363
OCPBUGS-23000: node-exporter: Prevent cluster-autoscaler from evicting #2346
MON-3763: Add cnv_abnormal #2291
OCPBUGS-34080: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.17 #2358
: NO-JIRA: Fix formatting in the resources documentation #2353
MON-3861: Bump go tools 1.21 #2348
MON-3856: Bump openshift/prometheus to v2.52.0 #2342
OCPBUGS-32510: change metrics-server probes for SNO #2337
MON-3851: Bump openshift/thanos to v0.35.0 #2338
MON-3847: Bump openshift/node_exporter to v1.8.0 #2336
OCPBUGS-32510: tweak Prometheus RBAC setup as a temp fix. #2334
AUTH-482: set required-scc for openshift workloads #2335
MON-3163: support VPAs #2078
OCPBUGS-23801: update OTEL google.golang.org/grpc/otelgrpc #2321
NO-JIRA: Increase checkAlertmanagerAPIVerbs timeout #2330
MON-3487: base CP enablement on dedicated feature gate #2153
OCPBUGS-32177: fix wrong dir hack/tools of tools.go #2327
MON-3707: Add ipsec state metric into telemetry #2326
MON-3701: clean-up injection of trusted CA bundle for k8s Prometheus #2323
MON-3839: test: add skip tests for prometheus adapter tests #2328
MON-3820: allow read-only access for Alertmanager API #2319
MON-3701: remove trusted CA bundle from Thanos Querier #2325
MON-3701: follow-up of PR #2308 #2324
MON-3825: Synchronize versions of the downstream components #2322
OCPBUGS-30430: update google.golang.org/protobuf #2320
MON-3701: clean-up injection of trusted CA bundle for main Alertmanager #2310
MON-3783: add controller-id annotation to pods deployments and operator #2309
OCPBUGS-18643: address lint warnings #2284
WINC-1180: assets, jsonnet: Add container_network openshift-kubernetes.rules #2314
OCPBUGS-31847: Synchronize versions of the downstream components #2318
MON-3701: remove references to OAuth proxy #2308
MON-3706: chore: simplify GetServiceAccountToken() #2272
MON-3621: Enable extra-scrape-metrics feature in PrometheusUWM #2302
OCPBUGS-31411: add runbook link for KubeAggregatedAPIErrors alert #2316
OCPBUGS-29531: Add include.release.openshift.io/hypershift label #2264
MON-3778, OLS-117: Add OLS metrics to telemetry whitelist #2300
OCPBUGS-31920: go.mod: bump openshift/api #2290
MON-3700: replace OAuth proxy for Thanos Ruler #2294
MON-3799: Synchronize versions of the downstream components #2301
MON-3749: enable request headers flags for metrics server #2293
OCPBUGS-28650: fix generation of telemeter token hash #2298
MON-3801: remove oauth-redirectreference annotations #2299
MON-3793: Synchronize versions of the downstream components #2295
MON-3793: jsonnet: Bump jsonnet deps for prometheus-operator #2296
MON-3792: fix metrics-server path for /test versions #2286
MON-3789: add a golangci-lint-fix makefile target to fix golangci-lint errros when possible #2275
MON-3771: update Prometheus operator to v0.72.0 #2288
MON-3498: Modify prometheus-adapter e2e tests to compact with metrics server #2196
OCPBUGS-30257: Making sure proxy settings are correctly forwarded in the generated remote write configs #2269
OCPNODE-2100: jsonnet: update crio port to TLS port 9637 #2257
MON-3694: chore: encourage the use of the new ‘slices’ package instead of ‘golang.org/x/exp/slices’ #2243
MON-3748: Enable audit logs by default for metrics-server #2280
MON-3380: adjust prometheus-k8s service openshift.io/description #2279
MON-3747: Increase e2e test timeout to 150 min #2278
MON-3381: replace OAuth proxy for Alertmanager #2260
OCPBUGS-28246: fix Thanos ruler alert generator url #2267
MON-3706: Revert “chore: poll immediately in the e2e tests” #2271
MON-3717: pkg/client.go: make some CreateOrUpdateXXX functions use library-go’s resourceapply utils. #2226
MON-3717: update library-go to get https://github.com/openshift/libra… #2266
MON-3380: re-add kube-rbac-proxy for /metrics and /federate #2261
MON-3172: describe monitoring services #2188
MON-3706: chore: poll immediately in the e2e tests #2258
MON-3380: replace OAuth proxy for prometheus-k8s #2246
OCPBUGS-18326: add Console cap annotation to dashboards #2254
TRT-1489: Revert “jsonnet: update crio port to TLS port 9637” #2255
OCPNODE-2022: jsonnet: update crio port to TLS port 9637 #2229
MON-3705: [bot] Update jsonnet dependencies #2208
MON-3699: chore: merge OmitFromDoc with HideFromDoc introduced in https://github.com/https://github.com/openshift/cluster-monitoring-operator/pull/2210 to hide fields from the doc #2247
MON-3697: use maximumStartupDurationSeconds instead of container patch #2251
OCPBUGS-28246: fix: set externalURL in UWM Prometheus #2250
MON-3689: Synchronize versions of the downstream components #2245
OCPBUGS-27289: followup of https://github.com/openshift/cluster-monitoring-operator/pull/2242 #2244
STOR-1289: Move vSphere prometheus rules to cluster-storage-operator #2235
OCPBUGS-27289: rollout metrics-server on cert rotations #2242
OCPBUGS-27213: Adjust lastError injection to wait.PollUntilContextTimeout’s final error #2234
MON-3676: move raptorsun out of reviewer list #2240
MON-3673: [bot] Synchronize versions of the downstream components #2238
MON-2853: add runbook link to TargetDown alert #2237
MON-3661: [bot] Synchronize versions of the downstream components #2236
OCPBUGS-26983: rollout monitoring plugin on TLS rotation #2233
MON-3661: chore: update Prometheus operator to v0.71.0 #2230
MON-3667: remove outdated documentation #2232
OCPBUGS-25849: make PrometheusAdapter and MetricsServer tasks less conflict prone #2218
OCPBUGS-25378: drop InfoInhibitor from default Alertmanager config #2225
MON-3664: chore: avoid issues with std.set* functions #2231
MON-3654: use Go standard errors package instead of github.com/pkg/errors #2224
MON-1047: fix: add terminationMessagePolicy: FallbackToLogsOnError to all conta… #2228
MON-3552: remove temporary cleanup code and no longer needed tests #2210
MON-3650: Synchronize versions of the downstream components #2222
MON-3649: Synchronize versions of the downstream components #2221
MON-3644: Ease the tracking of monitoring components versions. #2220
OCPBUGS-25803: make CMO ConsolePluginComponents task resilient to dependencies #2193
OCPBUGS-25676: fix(tasks): adjust ‘trusted CA bundle ConfigMap’ related logs for alertmanagers. #2219
MON-3633: Synchronize versions of the downstream components #2214
OCPBUGS-24977: Updating cluster-monitoring-operator-container image to be consistent with ART #2211
OCPBUGS-25403: go.mod update k8s.io/api* to v0.29.0 #2205
MON-3589: Refactor assertExemplarsEnabled check for UWM Prometheus xand add a check for –scrape.timestamp-tolerance on Platform Prometheus #2194
OCPBUGS-24977: use 1.20 in go.mod #2199
MON-3592: Use strict yaml unmarshaling #2195
OCPBUGS-25025: go.mod: bump prometheus-operator to v0.70.0 #2191
OCPBUGS-24977: Updating cluster-monitoring-operator-container image to be consistent with ART #2190
OCPBUGS-24630: additionalArgs: list items must have named fields #2189
MON-3553: Set scrape.timestamp tolerance #2187
OCPBUGS-23516: prevent plugin entry assets from caching #2186
OCPBUGS-21610: Detect ipv4/ipv6 socket in pod ip for nginx conf #2173
MON-3134: allow to query alerts from thanos-querier tenancy port #2184
MON-3551: fix: simplify jq script avoids error with jq1.7 #2180
MON-3454: Add track timestamps staleness #2160
OCPBUGS-24212: Add ownership annotation for certificates #2158
MON-3379: Replace the oauth-proxy before thanos-querier with kube-rbac-proxy #2136
MON-3544: Adjust NodeClock* alerting rules to work with PTP operator #2182
OCPBUGS-23745: Wait for 3 (instead of 2) consecutive failing reconcil… #2179
MON-3548: [bot] Synchronize versions of the downstream components #2183
MON-3543: Update API docs for Metrics Server #2181
OCPBUGS-24323: synchronize versions of the downstream components #2174
OCPBUGS-24340: patch securityContext for Thanos querier #2178
OCPBUGS-24323: update prometheus-operator jsonnet to v0.70.0 #2177
MON-3287: Remove openshift-etcd related RBAC as they will be manager by #2165
OCPBUGS-21610: revert #2166 #2172
MON-3524: Update metrics-server in CHANGELOG and README #2169
MON-3533: Update cluster:kube_persistentvolume_plugin_type_counts:sum #2171
STOR-1277: Add SELinux metrics to telemetry #2155
MON-3500: Enable sending exemplars over RW in UWM #2161
OCPBUGS-21610: Change config to allow ipv6/4 #2166
MON-3511: hack/local-cmo.sh: pass desired version in cmo run command #2168
MON-3211: Implement switching to metrics-server #2022
MON-3505: move aggregated-metrics-reader role to cmo jsonnet #2163
MON-3503: Synchronize versions of the downstream components #2162
OCPBUGS-23495: Change UWM Prometheus’ kube-rbac-proxy-thanos port num… #2164
MON-3479: update Prometheus operator assets to v0.69.1 #2152
MON-3503: Synchronize versions of the downstream components #2150
MON-3421: improve the detection of CMO unavailability/degradation due to U… #2129
MON-3476: Add code block to check FeatureGate status #2151
OCPBUGS-17035: fix KRP permissions for Thanos Querier #2057
OCPBUGS-22742: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 #2138
OCPBUGS-21621: Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2145
MON-3398: Add RHACM telemetry metric #2100
Synchronize versions of the downstream components #2135
Fix UWM alert access permissions #2131
Synchronize versions of the downstream components #2133
OCPBUGS-4069: Prometheus Adatper takes metrics from kubelet job only. #2117
MON-3422: Remove temporary no more needed code #2132
fix: force HTTP/1.1 connections #2128
OCPVE-711: feat: add olm capability annotation #2105
OCPBUGS-21631: upgrade golang.org/x/net to v0.17.0 #2120
OCPBUGS-18326: revert previous fix to avoid activating console capability during update #2118
MON-3286: Remove no longer needed code. #2116
OCPBUGS-17850: replace nonResourceURLs permissions by subresource #2099
Synchronize versions of the downstream components #2115
Update jsonnet dependencies #2076
OWNERS: remove sthaha #2114
build: add -e to go list command to install tools #2112
Change kube-rbac-proxy-thanos port #2113
OCPBUGS-11344: alertmanager: use alertmanager CRD’s automountServiceAccountToken option #2111
Remove deprecated ioutil #2108
OCPBUGS-18326: add console capability annotation to dashboards and monitoring-plugin. #2101
MON-3302: add RHACS telemetry metrics #2062
add machine424 and rexagod to OWNERS #2083
Remove bparees from approvers #2104
Revert “feat: add olm capability annotation” #2103
MON-3270: Add kube-metrics-server to image-references #2102
OCPVE-711: feat: add olm capability annotation #2095
chore: fix imports order #2098
Set Thanos version in the Thanos Ruler spec #2094
OCPBUGS-19237: Updating cluster-monitoring-operator images to be consistent with ART #2084
Synchronize versions of the downstream components #2093
Synchronize versions of the downstream components #2089
MON-3383: Remove weak cryptograhic primitive usage #2086
OCPBUGS-18390: jsonnet/rules: exclude -1 from etcd objects count #2081
OCPBUGS-19059: Enable ipv6 on monitoring-plugin nginx #2090
MON-3376: Remove deprecated –logtostderr argument #2077
OCPBUGS-19356: Topology spread constraints admission webhook #2073
OCPBUGS-17682: add topologySpreadConstraints to UWM prometheus operator #2072
Synchronize versions of the downstream components #2082
MON-2642: Improve e2e tests for alertrelabelconfigs CRD #2080
MON-3304: Add option to specify resource limits for all components #2067
OCPBUGS-17690: remove deprecated argument #2075
OCPBUGS-17691: replace outdated repository link #2074
MON-2641: Add e2e tests for AlertingRule controller #2054
Add telemeter client SA to rbac proxy #2043
OCPBUGS-1062: update webhook configuration only if required #2065
MON-988: remove alert “MultipleContainersOOMKilled” #2071
Remove deprecated visual_web_terminal_sessions metric #2059
OCPBUGS-17487: fix typo for ThanosRulerConfig.Resources #2070
Update jsonnet dependencies #2063
OCPBUGS-17346: Avoid recreating some resources, created by prometheus-operator, during 4.13->4.14 upgrade #2066
MON-3291: Adjust node-exporter’s MaxProcs documentation now that we s… #2055
Synchronize versions of the downstream components #2061
MON-3093: fix single node replica issue #2060
OCPBUGS-17191: add namespace label to alerting rules #2058
Synchronize versions of the downstream components #2056
MON-2645: remove unnecessary RBAC permissions #2051
Synchronize versions of the downstream components #2052
OCPBUGS-10699: remove Kube*QuotaOvercommit alerts #2049
MON-2645: remove unused rebalancer code #2048
Synchronize versions of the downstream components #2050
Remove OADP metrics from the Telemetry #2040
MON-669: Remove etcd ServiceMonitors management code as they’ll be no… #2039
MON-3216: Add ownership labels to kube resources #1986
MON-3177: Expose and propagate TopologySpreadConstraints for kube state metrics #2026
OCPBUGS-16203: correct docs for metric node_systemd_timer_last_trigger_seconds. #2045
MON-3178: Expose and propagate TopologySpreadConstraints for prometheus-operator #2033
MON-3274: collect the number of LIST and WATCH requests to the apiserver from telemetry #2044
MON-2903: add nodeExporter.collectors.systemd settings. #1892
MON-3179: Expose and propagate TopologySpreadConstraints for openshift state metrics #2034
MON-3176: Expose and propagate TopologySpreadConstraints for prometheus-adapter #2025
OCPBUGS-9835: Add Content-Security-Policy headers to prometheus and alertmanager #2012
MON-3182: Expose and propagate TopologySpreadConstraints for UWM alertmanager #2037
MON-3180: Expose and propagate TopologySpreadConstraints for telemeter-client #2017
MON-3183: Expose and propagate TopologySpreadConstraints for UWM prometheus #2038
MON-3181: Expose and propagate TopologySpreadConstraints for thanos-querier #2035
MON-3231: add metric for the configured profile #2030
MON-3269: add nodeExporter.collectors.processes settings. #2032
MON-3222: Make netdev/netclass interfaces configurable #1963
e2e-tests: ensure pod assertions find at least one pod #2028
test/e2e/framework: remove unused function #2020
OCPBUGS-15440: fix CMO to apply console-plugin pod.spec config #2018
chore: update dependencies #2013
OCPBUGS-14922: skip console-plugin installation if console CO is absent #2011
OCPBUGS-12714: turn on netlink mode of netclass collector for node exporter #2015
MON-3249: Update telemeter-client to allow TLS through rbac proxy #2005
Synchronize versions of the downstream components #2024
OCPBUGS-13153: Limit the value of GOMAXPROCS on node-exporter. #1996
hack/local-cmo: show the correct logged-in user #2019
MON-3253: refactor local-cmo.sh to use CMO SA by default #2010
test/e2e: validate CMO and UWM configs #2006
pkg/operator: reduce duplication in CSR controllers #2007
Synchronize versions of the downstream components #2009
OCPBUGS-15210: manifest: rename TP roleBinding to cluster-monitoring-operator-alert-… #2008
MON-3127: add nodeExporter.collectors.ksmd settings. #1931
Synchronize versions of the downstream components #2004
MON-3229: Remove the dependency on the apiserver auth #1904
Synchronize versions of the downstream components #2003
Fix link metrics #1999
OCPBUGS-11958: Add the trusted CA bundle in UWM Prometheus pods #1970
OCPBUGS-14123: make TestBodySizeLimit less flaky #1991
Update OWNERS list #1951
MON-3113: add nodeExporter.collectors.mountstats settings. #1936
OCPBUGS-12903: Fix console metrics doc typo #1997
OCPBUGS-14816: Add misspell target in Makefile #1994
OCPBUGS-14887: [bot] Synchronize versions of the downstream components #1995
MON-2967: CMO deploys monitoring console-plugin #1890
OCPBUGS-14772: Add federate-client-certs #1990
OCPBUGS-14072: test: increase poll wait time for alertmanager #1973
OCPBUGS-14618: Synchronize versions of the downstream components #1988
OCPBUGS-14378: Skip some errcheck golangci-lint violations #1983
MON-2981: alertingrule and relabel: promote to v1 #1945
OCPBUGS-11889: disable CORS headers on Thanos querier #1950
OCPBUGS-14606: Remove remaining staticcheck violations #1989
OCPBUGS-14375: Fix golangci-lint gosimple violations #1979
OCPBUGS-14381: Skip golang-ci lint unused false positives #1985
OCPBUGS-14561: Prevent ci/prow/versions from failing on PR against release-xxx #1969
OCPBUGS-10387: label for infra nodes for metric cluster:capacity_cpu_cores:sum #1926
OCPBUGS-14379: Skip specific govet violation on operator main.go #1984
OCPBUGS-14371: Fix golangci-lint misspell violations #1978
OCPBUGS-14380: Fix golangcilint whitespace violations #1977
OCPBUGS-14377: Fix golangci-int wastedassign violations #1981
OCPBUGS-14376: Fix golangci-lint ineffassign violations #1980
OCPBUGS-14366: Fix golangci-lint unconvert violations #1982
OCPBUGS-13147: Add golangci-lint linters #1949
OCPBUGS-1626: update jsonnet dependencies #1961
OCPBUGS-12903: Add new web console usage metrics #1910
OCPBUGS-13939: Extend remote write test timeout #1971
OCPBUGS-14007: test/e2e: don’t fail on telemeter remote write failed samples #1972
OCPBUGS-13095: Uncomment cluster:vsphere_infrastructure_failure_domains:max #1960
OCPBUGS-12995: go.mod: update golang.org/x/net to v0.7.0 #1958
OCPBUGS-13006: Add build number to vsphere vcenter information #1946
OCPBUGS-12343: Update 4.14 cluster-monitoring-operator image to be consistent with ART #1952
jsonnet: add comment why empty prometheus container needed #1943
OCPBUGS-11434: node-exporter: disable btrfs collector #1937
4.14: OCPBUGS-11269: Add CSI migration for vSphere to telemetry #1933
Speedup jsonnet generation by running in parallel #1908
OCPBUGS-10690: jsonnet: Add prometheus container in UWM #1930
OCPBUGS-7694: add startup probe for prometheus-adapter #1917
OCPBUGS-10161: Updating cluster-monitoring-operator images to be consistent with ART #1914
OCPBUGS-8215: bugfix in Node Exporter argument setting #1909
OCPBUGS-7282: Node Exporter ignores network interface under name “cali[a-f0-9]*” #1905
Update jsonnet dependencies #1913
OCPBUGS-8282: turn off netlink mode of netclass collector in Node Exporter. #1912
MON-2894: add nodeExporter.maxProcs setting. #1895
MON-2973: test/e2e: Add cleanup func for alertmanager uwm secret test #1907
MON-2693: Scrape profiles #1785
MON-2959: test/e2e: Add test for alertmanager secret platform #1899
MON-2904: add nodeExporter.collectors.buddyinfo settings. #1891
MON-2895: toggle netlink implementation of netclass collector #1894
MON-2932: jsonnet/dashboards: add role template variable to node related dashbo… #1879
MON-2900: add nodeExporter.collectors.netclass settings. #1893
Update jsonnet dependencies #1903
MON-2951: create Routes only with ingress operator #1885
OCPBUGS-7391: wait for service CA secrets #1900
Synchronize versions of the downstream components #1902
MON-2973: pkg/manifests: Allow configuring secrets in alertmanager (UWM) #1884
Synchronize versions of the downstream components #1898
pkg/operator: fix typo in info logs #1896
MON-2901: add nodeExporter.collectors.netdev settings. #1888
STOR-1154: Add vSphere topology to telemetry #1886
Add nodeExporter.collectors.tcpstat settings. #1876
Synchronize versions of the downstream components #1887
MON-2959: Allow configuring secrets in alertmanager (platform) #1882
Update jsonnet dependencies #1880
Synchronize versions of the downstream components #1878
pkg/manifests/manifests.go: move constants to jsonnet #1873
Synchronize versions of the downstream components #1877
add nodeExporter.collectors.cpufreq settings. #1855
Update jsonnet dependencies #1869
Fix ‘make run-local’ target #1874
*: remove kube-rbac-proxy sidecar container #1870
OCPBUGS-2729: unify ignored network device list of Node Exporter. #1871
OCPBUGS-5353: unstack dashboards with limit markers. #1868
Update jsonnet dependencies #1865
Synchronize versions of the downstream components #1867
Update jsonnet dependencies #1864
Synchronize versions of the downstream components #1863
OCPBUGS-4521: check that all targets are up after certificate recreation #1848
Synchronize versions of the downstream components #1861
OCPBUGS-4219: Adds runbook link to PrometheusRuleFailures #1860
MON-2807: Use bearer token file for remote write authentication with telemeter #1733
OCPBUGS-1998: pkg/client: Update daemonset degrade condition #1812
Synchronize versions of the downstream components #1859
Bug 2114515: jsonnet: ignore /var/lib/ibmc-s3fs/ mountpoints #1854
Synchronize versions of the downstream components #1853
Synchronize versions of the downstream components #1852
OCPBUGS-4793: fix object reference in Kubernetes events #1842
Synchronize versions of the downstream components #1849
Updating cluster-monitoring-operator images to be consistent with ART #1846
OCPBUGS-2729: Node Exporter ignore virtual network device ‘enP.*’. #1843
Unpin and update jsonnet dependencies #1818
OCPBUGS-2141: compute doc link in PVC not configured message #1836
Synchronize versions of the downstream components #1838
go.mod: switch to go 1.19 #1839
Synchronize versions of the downstream components #1835
OCPBUGS-2260: add alert KubePodNotScheduled to group openshift-kubernetes.rules #1830
Synchronize versions of the downstream components #1831
Remove deprecated option from kube-state-metrics args #1832
OCPBUGS-4184: use mTLS authentication for metrics scraping #1827
OCPBUGS-4168: Increase startupProbe for prometheus #1824
OCPBUGS-4181: Fixes externalURL field for Prometheus and Alertmanager #1826
Synchronize versions of the downstream components #1823
OCPBUGS-1453: Fixed TargetDown expression to join on the proper label #1767
Bug 2095719: Updates CreateOrUpdateServiceAccounts #1745
OCPBUGS-4024: test: increase timeout when checking remote write metrics #1817
OCPBUGS-3331: Pin Jsonnet Deps + Update go.mod for 4.12 + Patch Alert KubePodNotRead #1816
Revert “OCPBUGS-3331: Pin Jsonnet Deps + Update go.mod for 4.12” #1815
OCPBUGS-3331: Pin Jsonnet Deps + Update go.mod for 4.12 #1814
Switch ksm registry to registry.k8s.io #1809
MGDAPI-4488: RHOAM fleet wide observability metrics #1771
Full changelog

cluster-network-operator

OCPBUGS-7044: HyperShift: Add .hypershift.local to no proxy list #1706
OCPBUGS-7044: HyperShift: Do not use proxy for internal routes #1704
OCPBUGS-4778: Fix handling of deployment and statefulset updates #1663
Full changelog

cluster-node-tuning-operator

OCPBUGS-44372: PPC: skip comparing ProcessorCore.Index between NUMA cores (#1213) #1213
OCPBUGS-44477: Fix nil pointer dereference caused by external calling of validation function (#1214) #1214
Drop GOOS=linux from Makefile (#1172) #1172
Read-only container root filesystem (#1099) #1099
NO-JIRA: nodeInspector: do not reuse namespace (#1206) #1206
e2e: wait for node inspector deletion (#1200) #1200
CNF-14628: e2e: Adjust profile nodeSeletcor on hypershift (#1183) #1183
CNF-13014: Align dockerfile ocp version (#1194) #1194
OCPBUGS-43666: Fix kernel arguments ordering on Intel (#1197) #1197
OCPBUGS-43665: Drop amd_iommu=on from amd tuning (#1198) #1198
NO-JIRA: Fix typo in codegen script (#1199) #1199
Fix linter warnings (#1196) #1196
Bump the latest k8s and OpenShift dependencies (#1195) #1195
CNF-13014: Check for tuned patches before attempting to apply them in the dockerfile script (#1193) #1193
CNF-14090: Add vendor and architecture specific tuning options (#1083) #1083
CNF-13193: Update NTO Hugepages size validation (#1086) #1086
NO-JIRA: Default to username and timestamp for custom NTO push (#1190) #1190
logs: avoid spamming when PerformanceProfile is missing (#1181) #1181
E2E: fix modify node selector to use lowercase (#1185) #1185
Remove upstream TuneD patch (#1151) #1151
Make ocp-tuned-one-shot.service restart on-failure (#1177) #1177
OCPBUGS-38900: Drop sched_migration_cost_ns setting (#1163) #1163
NO-JIRA: CI: unblock (#1182) #1182
NO-JIRA: hypershift:handler: add KubeletConfig unique label (#1169) #1169
Fix context deadlines in ExecCommandOnPod() (#1174) #1174
Fix failing pao-functests after a MCO change (#1175) #1175
Add a script to test internal TuneD FDP releases (#1167) #1167
hypershift: make target for perf profile update suites (#1168) #1168
OCPBUGS-41486: E2E: Add support for hypershift to memory manager (#1161) #1161
NO-JIRA: deferred updates: fix in-place update handling on reboot (#1162) #1162
Fixing empty tuned submodule when using Dockerfile (#1159) #1159
E2E: wait for ovs services affinity to reset after deployment deletion (#1158) #1158
Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.18 (#1155) #1155
hypershift: Adjusted mustgather suite for hosted cluster compatibility (#1143) #1143
E2E: Remove explicitly setting Realtime kernel and realtime hint (#1060) #1060
OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1131) #1131
OCPBUGS-39005: Add cluster-wide proxy env file (#1144) #1144
E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1127) #1127
OCPBUGS-38795: Fix defer status during recommended profile change (#1142) #1142
NO-JIRA:E2E: Remove checking of reserved cpus in irqbalance file (#1140) #1140
Add support for setting operand verbosity (#1114) #1114
Allow specifying $TAG separately from the full image path (#1139) #1139
CNF-13014: Add cross compiling support to Makefile (#1135) #1135
PSAP-1428: Read-only filesystem for the operator (#1136) #1136
Remove vestiges of annotation ignore-cgroups-version from tests (#1059) #1059
OCPBUGS-28647: tuned: distinguish deferred updates (#1129) #1129
OCPBUGS-34917: Operator: do not use /tmp (#1132) #1132
CNF-13391: ppc: adjust for Hypershift (#1124) #1124
OCPBUGS-37865: E2E: Verify ovs threadpool inherits parent cpu affinity (#1123) #1123
e2e:document: how to run locally on HCP platform (#1122) #1122
NO-JIRA:e2e:hypershift: remove/rename deprecated env variables (#1121) #1121
controller: predicate for containerruntimeconfig (#1108) #1108
CNF-12711: hypershift: enable feature gate support (#1115) #1115
NO-JIRA: Project cleanups (#1120) #1120
CNF-12680: CNF-13488: Add performance profile status for hypershift support (#1089) #1089
OCPBUGS-28647: deferred updates: cleanups (#1119) #1119
Fix the destination of asset’s copy (#1112) #1112
OCPBUGS-28647: tuned: operand: add support for deferred updates (#1019) #1019
makefile: ensure bindata (#1116) #1116
e2e: performance: skip test on env with insufficient cpus (#1111) #1111
e2e: performance: verify tuned one-shot service vs kubelet (#1106) #1106
CNF-7123: Enable and adjust 1_performance suite on Hypershift (#1084) #1084
NO-JIRA: Rename and reorganize hypershift labels (#1090) #1090
E2E: Add ginkgo labels to respective test suites (#1097) #1097
NO-JIRA: hypershift: implements missing client calls needed for e2e tests (#1107) #1107
CNF-13530: hypershift: support containerruntimeconfig (#1100) #1100
CNF-13394: Changed node inspector to have lazy initialization (#1093) #1093
NO-JIRA: hypershift:unitests: adjust controller unit-tests (#1105) #1105
Fix requested profile doesn’t exist (#1104) #1104
NO-JIRA:pao:hypershift: fix client implementation (#1094) #1094
hypershift: check updatingConfig condition to be false instead of missing (#1096) #1096
e2e:run-test.sh: match ginkgo CLI to ginkgo package (#1092) #1092
e2e:performance: decode to valid kubeletconfig object (#1091) #1091
OCPBUGS-34972: perfprof: bump verbosiness of logs (#1075) #1075
e2e:label: platform labels (#1076) #1076
NO-JIRA: remove 4.13->4.14 compatibility code (#1079) #1079
Dockerfile:bump go-builder to 1.22 (#1078) #1078
CNF-11559: [Part ³⁄₃] Hypershift PAO adoption (#1057) #1057
e2e: Added mixed cpus negative tests (#1026) #1026
OCPBUGS-28647: tuned: operand: deferred updates prepare: cleanups from #1019 (#1073) #1073
Add tier0 and tier1 tags to non reboot test cases (#1064) #1064
Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.17 (#1068) #1068
CNF-11815: e2e: Added node inspector for inspecting nodes configuration (#1008) #1008
e2e: latency: Add negative tests (#1071) #1071
e2e: Added hwlatdetect default window size (#926) #926
E2E: Fetch pod node instead of relying on first worker-cnf node (#1070) #1070
Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.17 (#1063) #1063
OCPBUGS-33682: right-hand-side profile_dirs take precedence (#1061) #1061
No-Jira: E2E: Extend mixed cpus tests to test cpu load balancing annotation (#1028) #1028
NO-JIRA: E2E: Add test for checking cpuset.cpus.exclusive (#1046) #1046
CNF-11817: e2e: control and data planes clients (#1004) #1004
Unify OKD and OCP Dockerfiles (#1058) #1058
OCPBUGS-33460: E2E: change tuned profile path (#1055) #1055
E2E: modify test use HaveKey matchter instead of ContainElement (#1056) #1056
E2E: Add automation to check default cpuset from cpu manager state file (#1050) #1050
perfprof: latency e2e: adjust failure message (#1044) #1044
set required-scc for openshift workloads (#968) #968
OCPBUGS-26401: TuneD prior to kubelet in one-shot mode (#1045) #1045
perfprof: e2e: account for node base load (#1047) #1047
CNF-6517: [Part 2] Hypershift PAO adoption (#1037) #1037
CNF-11099: set intel_pstate driver to automatic as default (#950) #950
OCPBUGS-32469: Remove tuned/rendered object (#1036) #1036
NO-JIRA: 4.16 go deps (#1042) #1042
CNF-6517: [Part 1] Hypershift PAO adoption (#1032) #1032
PSAP-1354: Updated a script for deploying a custom NTO image to a cluster (#1030) #1030
OCPBUGS-30111: Negative net interface name does not reduce queues (#973) #973
Enhance latency cnf-tests UX (#1041) #1041
pao:controller: remove depracated function (#1039) #1039
Replaced tuned hard-included repo with a git submodule (#1029) #1029
OCPBUGS-31694: E2E: Workload hints test cases fixes (#1012) #1012
OCPBUGS-30647: NTO operand (openshift-tuned) fixes (#1024) #1024
NO-JIRA: E2E: use strings.CutPrefix instead of trim function to get containerID (#1031) #1031
NO-JIRA: deps: Bump OCP dependencies and remove MCO deps (#1022) #1022
Update the awk print field to fetch rhcos-image (#1033) #1033
set Cgroups V2 as default (#1010) #1010
E2E: Adjust Dynamic ovs pinning tests with cgroupv2 (#1011) #1011
NO-JIRA: deps: Bump to K8s 1.29.2 (#990) #990
Delete duplicate mixedcpus e2e test (#1015) #1015
e2e: Enhance tests related to crio annotations (#955) #955
NO-JIRA: E2E: Adjust tests for cgroupv2 changes (#993) #993
OCPBUGS-30569: Systemd processes not being moved to cpuset/systemd.slice fix (#992) #992
NO-JIRA: E2E: Add systemd package to fetch properties of cgroup slice (#991) #991
e2e: when crun is enabled by default skip checking runc config (#948) #948
NO-JIRA: Update tuned profile degraded test (#1005) #1005
Change .snyk format (#1000) #1000
Remove removePerformanceOLMOperator() (#997) #997
CNF-11213: added mixedCpus e2e test (#967) #967
NO-JIRA: Add positive tests with ginkgo timeout (#964) #964
OCPBUGS-30647: Remove TuneD timeout code and reload on ERRORs (#998) #998
Add sync for rendering extra ctrcfgs (#980) #980
OCPBUGS-29594: Reduce number of reboots in offline tests (#940) #940
makefile:hypershift: initial make target (#995) #995
e2e:mixedcpus: check env variables of init process (#961) #961
CVE-2024: 24786: update protobuf (#985) #985
Ignore scheduler plugin IRQs when globally enabled (#987) #987
E2E: skip ovs affinity test due to OCPBUGS-30806 (#988) #988
Remove RELEASE_VERSION from test-upstream-tuned.sh (#969) #969
Update OWNERS file (#872) #872
e2e: perf-prof: increase logging for debugging (#974) #974
OCPBUGS-26400: scheduler plugin: ignore IRQs (#976) #976
e2e: testdata: remove the annotated profile (#962) #962
OCPBUGS-29641: fix rendering extra ctrcfgs (#972) #972
NTO operand cleanup (#970) #970
Render: Don’t fail if there is no recommended profile. (#935) #935
OCPBUGS-23167: Add performance real time tuned template (#954) #954
Add support to inject owner-ref argument to render command (#960) #960
OCPBUGS-29546: Apply hypershift cluster-profile for ibm-cloud-managed (#958) #958
OCPBUGS-29594: e2e: fix comparing incompatible types (#957) #957
Render: Add MCSelector to missing default MCPs (#956) #956
e2e: check if shared CPUs survive Kubelet restart (#912) #912
render: perfprofile: don’t annotate perfprof (#951) #951
CNF-9173: e2e: mixedcpus test (#892) #892
e2e: fix typo in label name (#947) #947
skip realtime disabled tests due to OCPBUGS-28828 (#944) #944
OCPBUGS-29183: Enable crun as runtime only if missing (#937) #937
Fix e2e tests on SNO (#939) #939
e2e: classifying tests using labels (#936) #936
Bump TuneD to the latest OCP-shipped TuneD upstream version (#938) #938
CNF-9173: e2e: cgroups: introduce cgroup package (#906) #906
New flags in Performance profile creator (#908) #908
NO-JIRA: e2e: set performance profile cpus using env vars (#909) #909
CNF-11091: Change webhook failure policy to ignore (#933) #933
CNF-11145: Enhance render sync to include bootstrap rendering tests (#932) #932
NO-JIRA: perfprof: render: make ownerReference optional (#907) #907
Revert “NO-JIRA: skip crun configuration test” (#918) #918
Render MC without additional PP (#924) #924
Report duplicate priority only for multiple matching profiles (#890) #890
e2e: UpdateWithRetry only update spec (#914) #914
Skip PerformanceProfile update test (#929) #929
Export ValidateBasicFields for Hypershift (#916) #916
e2e: log: set ctrl-runtime logger (#911) #911
OCPBUGS-22095: Add default MCP objects for rendering (#833) #833
README Doc Typo Fix (#920) #920
HyperShift code linter PR837 followup (#910) #910
CNF-10786: e2e: general improvements and cleanup (#898) #898
dnm: skip crun configuration test (#917) #917
Add .snyk file for static code analysis (#902) #902
OCPBUGS-25699: irqbalance: set banned cpus list to ‘0’ (#899) #899
rps: fail silently when rps application failed (#895) #895
OCPBUGS-20368: E2E: Add tests for Dynamic ovs pinning (#746) #746
NTO: Add MCP name to filter PP (#878) #878
OCPBUGS-24581: rps: fix mask update for SR-IOV devices (#877) #877
OCPBUGS-24792: Make MC names deterministic (#875) #875
makefile: add target to trigger mixedcpus e2e test (#883) #883
Fix error logging in metrics server.go (#882) #882
e2e-test: Call SetLogger (#881) #881
Use go 1.21 (#879) #879
OCPBUGS-24638: Do not set default RPS sysctl twice (#868) #868
Updating cluster-node-tuning-operator-container image to be consistent with ART (#867) #867
e2e: images: bump default test image to 4.14 (#856) #856
cpuset-configure: exit gracefully on cgroup v2 (#866) #866
CNF-7610: Mixed CPUs plugin deployment support (#853) #853
New MachineConfig render command (#844) #844
Report duplicate profiles as ERRORs (#864) #864
CNF-10473: featuregates: main: add feature gates support for PAO controller (#858) #858
e2e:latency: omit LatencyTestRun env variable (#857) #857
OCPBUGS-18649: E2E: PPC Test cases (#708) #708
OCPBUGS-18640: Fix Racing Machine Configs and add Day 0 Support (#854) #854
Avoid k8s.io/kubernetes as dep (#848) #848
Remove most //nolint:* overrides (#837) #837
CNF-10294: main: remove deprecated multi ns function (#770) #770
OCPBUGS-22519: bump opentelemetry package (#840) #840
Disable HTTP/2 for webhook and metrics servers (#834) #834
Remove obsolete protocols and weak ciphers (#827) #827
OCPBUGS-18662: rps: trigger udev even per queue (#816) #816
render: change dir path (#824) #824
Makefile: remote tmp folder on clean target (#823) #823
Add golangci-lint (#793) #793
Updating cluster-node-tuning-operator images to be consistent with ART (#795) #795
fix: add if check for no resource match error (#801) #801
nto: avoid timeout when there are too many CSV (#731) #731
Set non-default UserAgent for easier debugging (#807) #807
Improve co/node-tuning operand version reporting (#792) #792
Add the k8s reporter to the configuration suite (#815) #815
OCPBUGS-18783: e2e: perfprof: enhance the scheduling domain tests (#791) #791
Add kubeconfig path for IBM Managed OpenShift (#810) #810
Add k8s reporter to e2e tests (#666) #666
OCPBUGS-19459: check for object being nil (#804) #804
Memory manager E2E test fixes (#784) #784
Some unit tests fail with go1.19 as some modules require 1.20 (#794) #794
e2e: add expected max latancy to hwlatdetec test & rename constant (#719) #719
OCPBUGS-18662: e2e:rps: improve logging (#787) #787
Sync DaemonSet if operand image changes (#785) #785
OCPBUGS-18392: Change the OVN trigger file name to adapt to OVN IC (#777) #777
OCPBUGS-15044: e2e:irqloadbalance: wait for profile revert (#768) #768
Add SetLogger() prior to controller-runtime start (#779) #779
OCPBUGS-18052: feat: added logic to handle legacy sno install (#778) #778
OCPBUGS-17943: Add rtentsk plugin to pp tuned profile (#767) #767
Tighten the rules for modifying Tuned Profiles (#775) #775
Revert “Tighten the rules for modifying Tuned Profiles (#765)” (#771) #765
Tighten the rules for modifying Tuned Profiles (#765) #765
OCPBUGS-14026: cgroup: Match the name of the cgroup to what is expected by kubelet (#758) #758
e2e: irqbalance: improve test troubleshooting (#753) #753
OCPBUGS-16348: OSLAT latency spikes due to tsc karg setting (#756) #756
Makefile: hack: add helpers to compile testsuites (#751) #751
OCPBUGS-17219: Render mode should not segfault w/ no matching MCP (#754) #754
Release leader election on manager exit (#745) #745
generate missing files (#752) #752
vendor: bump OCP dependencies 08082023 (#750) #750
OCPBUGS-7980: e2e:ht-aware: exec on the correct worker node (#729) #729
bump k8s to 1.27.4 (#748) #748
e2e: wait for objects deletion (#749) #749
e2e:wait: return updated pod object explicitly (#744) #744
OCPBUGS-17258: CVE-2023-3978: golang.org/x/net/html (#747) #747
e2e: remove image parameter from must gather (#743) #743
Update the config.openshift.io/node object’s cgroupMode to “v1” (#737) #737
Fix a race in e2e test rollback.go code (#739) #739
e2e:irqbalance: applied condition exists (#727) #727
Improve render error handling (#724) #724
e2e:irqbalance: wait for tuned profile to be ready (#721) #721
pao:status: do not take address of loop var (#720) #720
nto:tuned: remove sched_min_granularity_ns settings (#722) #722
Align TuneD with the latest shipped FDP version (#716) #716
E2E: update cpu load balancing test for latest cgroup related changes (#712) #712
Build gather-sysinfo (#714) #714
e2e: overhaul Performance-Addon-Operator tests (#590) #590
e2e: latency testing: increase the expected threshold (#706) #706
e2e: perf-prof: disable truncating gomega output (#702) #702
Configure OVS for dynamic cpu pinning (#559) #559
OCPVE-382: fix: add default state for crio config (#700) #700
e2e: devmgr: fine tune kubelet restart test (#701) #701
e2e: RPS: fix expected cpu set (#703) #703
Switch to rslave/HostToContainer volume mount propagation (#692) #692
Do not rollback settings on TuneD exit (#699) #699
e2e: reboot: add kubelet restart test (#697) #697
remove conditional skip (#690) #690
e2e: memorymanager fix: check the hugepage size condition (#693) #693
Use RHEL9 as a base (#665) #665
Expose TuneD socket to host. (#651) #651
E2E: Use appropriate device path for rpsmask test (#691) #691
chore: replace github.com/ghodss/yaml with sigs.k8s.io/yaml (#628) #628
test: perfprof: devices: fix default test image (#672) #672
e2e: verify latency tests run with LATENCY_TEST_DELAY>120 (#662) #662
E2E: Add memory manager sanity test case (#573) #573
modify owners (#634) #634
Add minLength restriction to Tuned CR (#689) #689
OCPBUGS-14934: consistent use of ginkgo flags in Makefile (#682) #682
OCPBUGS-14622: Do not fail creating cgroups if they exist already (#683) #683
OCPBUGS-14193: pao e2e: Split e2e PAO update lane to more lanes (#631) #631
OCPBUGS-4194: rps: use default rps mask kernel API (#650) #650
OCPBUGS-14756: [test] [e2e] Check ci lanes are executing the right test suites (#679) #679
check ocp version and export CNF_TEST_IMAGE variable with appropriate cluster version (#584) #584
OCPBUGS-5529: Fix updating numa core siblings map in GetCpuSiblings function (#564) #564
Remove cpu-quota.crio.io: disable annotation (#663) #663
OCPBUGS-14137: e2e: perfprof: add SNO device recovery test (#653) #653
Add PerformanceProfiles to ‘oc adm must-gather’ (#655) #655
Revert “Add PerformanceProfiles to ‘oc adm must-gather’ (#582)” (#654) #582
Add PerformanceProfiles to ‘oc adm must-gather’ (#582) #582
OCPBUGS-13148: Configure cpu balancing cpu sets for all clusters (#646) #646
OCPBUGS-12978 use WatchNamespace() when deleting Profiles (#644) #644
Updating cluster-node-tuning-operator images to be consistent with ART (#579) #579
OCPBUGS-11083: pao e2e: fix update test suit timeouts (#626) #626
e2e: Fix RPS test for multi-worker cluster (#641) #641
Revert PR558 and PR585 partially (#639) #639
e2e: add missing test id (#622) #622
OCPNODE-1539: perf profile: add script for preparing cgroups for CPU load balance disabling (#601) #601
Remove subPaths, they are broken (#623) #623
OCPBUGS-10293: performance-profile: enable crun for high-performance runtime (#588) #588
Revert #567 and cleanup PPC-generated TuneD config (#611) #611
Backup and revert profile when hugepages test completes (#597) #597
tuned: Handle UserLevelNetworking nil pointer gracefully (#608) #608
A new env var NO_BZ_CHECKS disables Bz and Jira status checks (#607) #607
OCPBUGS-9959: check scheduler settings under /sys/kernel/debug/sched/ (#581) #581
workload-hints: disable stalld when rt disabled (#592) #592
render: remove uid from render-sync target (#594) #594
OCPBUGS-11083: e2e: profile updates tests revised (#600) #600
Update to the latest k8s and OpenShift deps (#580) #580
Make the enable-leader-election option work (#586) #586
Update NTO-generated MC on MachineCount <= 1 (#585) #585
remove BZ 2181546 from skip list (#602) #602
Fix updating nodeSelector test (#595) #595
Remove the preStop hook for openshift-tuned (#587) #587
Skip tests depending on Jira or Bz issue status (#591) #591
kubectl explain to explicitly state workloadHint default values (#576) #576
Fix failing HyperShift presubmits (#578) #578
Add a script to validate upstream TuneD (#577) #577
CNF-5900: feat: added support for generating workload partitioning files (#431) #431
Re enable node selector tests in update tests (#574) #574
Handle different # of CPUs are in the same MCP (#558) #558
composable OCP: make NTO components optional (#524) #524
Update to TuneD v2.20.0 (#565) #565
Remove trailing spaces from test names (#570) #570
Remove optimization to allow full resync (#567) #567
Report host-level sysctls in conflict with TuneD ones (#566) #566
E2E: Per Core Runtime Tuning Test automation (#509) #509
Add test case to check single rx queue on veth interface (#562) #562
Add update-manifests Makefile target (#560) #560
render: initialize klog flag (#538) #538
Refactor IRQ load balancing enable/disable test (#561) #561
update to ginkgo 2 (#517) #517
Skip watch on CA ConfigMap in HyperShift (#550) #550
update owners 20230109 (#542) #542
Add authentication to the /metrics endpoint (#541) #541
Run node selector tests only if we 2 non Performanceworker nodes (#532) #532
Updating profile new lane (#536) #536
Remove trailing space from test name (#540) #540
skip multiple ranges test if cores < 20 and use core as key to delete cpu siblings (#537) #537
Generate must-gather data (#442) #442
e2e:latency: count LATENCY_TEST_DELAY in timeout (#535) #535
E2E: Network stack Pinning tests (#501) #501
refactor: move command func to seperate file (#522) #522
performance-profile: render: make target for render sync (#528) #528
Switch to golang 1.19 (#521) #521
Add Containerfile for RHEL-9 (#519) #519
Fix two irqbalance tests - smp affinity vs online (#518) #518
Fix default hard eviction threshold when PCC is applied (#505) #505
e2e: performance profile: add logs and minor fixes (#485) #485
PPCreator: If rt-kernel enabled, power consumption mode default cannot be selected (#512) #512
Configuration hotfixes documentation fixes (#513) #513
E2E: Automation offline CPUs test (#380) #380
pao: latency-tests: read test log directly from pod (#499) #499
Configure ktimers scheduler prio same as ksoftirqs (#507) #507
Run rps mask tests when Reserved cpu are not nil (#483) #483
Set RPS for all rx queues (#495) #495
Full changelog

cluster-openshift-apiserver-operator

NO-JIRA: bump dependencies #598
API-1835: update to use the latest API #597
API-1835: switch OpenshiftDeploymentLatestRevisionClient to use the generic client #595
API-1835: update for more apply loops #592
MULTIARCH-4557: Sync import mode image config status field in the observed config #582
NO-JIRA: remove unused OperatorClient #594
API-1835: last transition time update #593
API-1835: update library-go to use new operator client #584
create CRDs from openshift/api #591
OCPBUGS-41617: increase openshift-apiserver failureThreshold #588
OCPBUGS-41232: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.18 #586
NO-JIRA: Bump library-go to add audit logs about events #587
OCPBUGS-39589: Rebase 1.30 #585
OCPBUGS-30492: bump google.golang.org/protobuf #583
OCPBUGS-34349: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #580
OCPBUGS-34349: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #579
AUTH-482: Set required-scc for openshift workloads #573
WRKLDS-1015: tolerate node-role.kubernetes.io/control-plane:NoExecute #574
OCPBUGS-29580: Apply hypershift cluster-profile for ibm-cloud-managed #572
OCPBUGS-32346: the apiservice controller waits until bootstrap complete #575
NO-ISSUE: Makefile: fixes test-e2e-encryption-rotation targets #577
NO-ISSUE: fix: TestRedeployOnConfigChange #576
OCPBUGS-22969: Use v1 for flowcontrol API #559
OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #566
OCPBUGS-18939: manifest: drop slo latency metrics in favor of sli #547
WRKLDS-1004: use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #562
OCPBUGS-24972: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART #561
OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #551
OCPBUGS-19231: Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #548
OCPBUGS-21733: bump library-go to include switch to HTTP/1.1 #552
WRKLDS-728: Capabilities: drop build/apps APIService when capabilities are not enabled #532
switch image-registry cert CM #545
OCPBUGS-16554: update dependencies to get rid of goproxy #546
AUTH-408: bindata: set required-scc #544
Plumb featuregates to the openshift-apiserver #542
allow etcd healthcheck timeout closer to probe timeouts to avoid failing on slower etcd #540
Add AES-GCM encryption tests #539
OCPBUGS-14010: increase timeout for probes #536
OCPBUGS-2765: Library go bump #538
OCPBUGS-12813: Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #534
Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #525
OCPBUGS-10040: update openshift/api to include aesgcm provider in the default apiserver schema #526
API-1509: Enable AESGCM encryption #521
OCPBUGS-4343: update apf configuration to use v1beta3 #509
OCPBUGS-6233: Bump dependencies and images #517
OCPBUGS-5300: routes/status resources can leak sensitive data, exclude it from audit #511
make api team approver #506
OCPBUGS-3929: update apf configuration to use v1beta2 #508
Full changelog

cluster-openshift-controller-manager-operator

WRKLDS-1492: Update k8s dependencies to 1.31.1 #368
OCPBUGS-41227: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.18 #364
create CRDs from openshift/api #367
no-jira: OWNERS: remove former employees #354
OCPBUGS-35801: nil pointer reference in ocm-operator #355
WRKLDS-1327: Replace wildcards by explicit list of verbs #353
WRKLDS-1292: Bump k8s dependencies to 1.30.1 #352
OCPBUGS-34395: Move cluster Build CR to runlevel 10 to match CRD #351
OCPBUGS-34077: Always Disable Default Rolebindings Controller #346
OCPBUGS-34054: lots of churn during image registry managed/removed transition #347
OCPBUILD-9: Adds capabilities for builder & deployer rolebindings controller #335
AUTH-482: set required-scc for openshift workloads #336
OCPBUGS-23848: Bumps opentelemetry dependencies #341
OCPBUGS-29973: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.16 #337
OCPBUGS-29581: Apply hypershift cluster-profile for ibm-cloud-managed #334
OCPBUGS-22969: Use v1 for flowcontrol API #316
BUILD-854: Add adambkaplan as approver #338
OCPBUGS-24888: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART #321
OCPBUGS-28666: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #326
OCPBUGS-23624: Add .snyk file to exclude vendor and ignore unit tests #325
WRKLDS-1016: Bump k8s dependencies to 1.29.0 #324
OCPBUGS-24190: Disable deployer-controller when deploymentconfig is disabled #320
OCPBUGS-22956: Remove blockage of ConfigObserver by build informer HasSynced flag #315
Revert “Revert #300 “API-1666: add image pull secret cleanup controller”” #314
Revert #300 “API-1666: add image pull secret cleanup controller” #313
API-1642: add image pull secret cleanup controller #300
API-1642: Do not generate image pull secrets for internal registry when internal registry is disabled. #298
OCPBUGS-21830: bump(k8s,openshift) to address CVE-2023-44487 #308
OCPBUGS-20164: Include Build CRD in manifests #306
WRKLDS-806: Bump kube dependencies to 1.28.2 #305
OCPBUGS-19136: Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #304
OCPBUGS-18932: Always sort disabled controller list #302
OCPBUGS-18498: Disable BuildConfigChange controller when Build cap is disabled #299
route-controller-manager deployment updates #295
OCPBUGS-16072: Updating Kubernetes and other associated dependencies #296
OCPBUGS-13926: change the operator log level to default normal in the deployment #289
BUILD-582, OCPBUGS-14638: bump(k8s): 1.27.1 #294
OCPBUGS-13926: add loglevel controller for OCM-o #292
Revert “13895: [WRKLDS-730] route-controller-manager deployment updates” #293
OCPBUGS-13895: [WRKLDS-730] route-controller-manager deployment updates #288
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #287
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #286
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #285
Bump golang.org/x/net from 0.5.0 to 0.7.0 #284
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #279
OCPBUGS-10568: migrate to using lease objects for leader election #282
Add Divyanshu Agrawal as a reviewer #283
OCPBUGS-4343: update apf configuration to use v1beta3 #273
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #274
WRKLDS-594: bump(k8s): 1.26.1 #277
OCPBUGS-5275: remove unnecessary RBAC for leader-locking-ingress-to-route-controller #276
OCPBUGS-3929: update apf configuration to use v1beta2 #272
let deployer pods patch/apply replication controllers #270
Bug 2111979: Set openshift.io/run-level to nil in openshift-controller-manager nam… #269
Full changelog

cluster-policy-controller

OCPBUGS-43380: psalabelsyncer: add image volume type to list #157
WRKLDS-1492: Update k8s dependencies to 1.31.1 #156
OCPBUGS-41166: Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.18 #152
no-jira: Update OWNERS #155
AUTH-537: pkg/psalabelsyncer: switch to PSA version ‘latest’ #153
WRKLDS-1292: bump(k8s.io)=1.30.1 #151
OCPBUGS-34304: Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.17 #150
OCPBUGS-34304: Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.17 #149
OCPBUGS-30496: bump(google.golang.org/protobuf)=v1.33.0 #147
WRKLDS-1016: bump k8s to 1.29.1 #146
OCPBUGS-24877: Updating ose-cluster-policy-controller-container image to be consistent with ART #144
OCPBUGS-26190: Add .snyk file to exclude vendor and ignore unit tests #145
OCPBUGS-24078: Updating ose-cluster-policy-controller-container image to be consistent with ART #143
go.mod: remove replaces #138
OCPBUGS-21638: bump(k8s,openshift) to address CVE-2023-44487 #137
OCPBUGS-21638: Bump deps to address CVE-2023-44487 #133
WRKLDS-806: bump k8s to 1.28 #132
OCPBUGS-19119: Updating cluster-policy-controller images to be consistent with ART #131
OCPBUGS-17458: ps syncer: don’t hotloop on a missing namespace #130
OCPBUGS-17989: pkg/psalabelsyncer: enforce syncing in case label is set #129
AUTH-413: ps syncer: only sync labels if noone else is managing them #127
ps syncer: add a controller for run-level 0 namespaces #128
Adjust logs per generic troubleshooting #126
OCPBUGS-15568: Add timeout into cache sync wait to prevent hanging forever #124
OCPBUGS-15568: Remove debugs logs in workqueuebucket #125
Add more logs for queue operations #122
OCPBUGS-15568: Handle error if caches are not synced instead silently exit #121
Add ingvagabund to owners #120
Add logs for quota namespace syncing with verbosity level 2 #119
OCPBUGS-13649: fix ClusterResourceQuotas to work for all api resources including custom resources #115
OCPBUGS-13579: bump(k8s) to v0.27.1 #113
OCPBUGS-8271: external template and route Informer #100
Updating cluster-policy-controller images to be consistent with ART #110
complete controller description #104
OCPBUGS-160: psalabelsyncer: handle empty namespace of a rolebinding subject #107
Updating cluster-policy-controller images to be consistent with ART #105
update psa dependency version #103
update controller-manager dependency to point to v0.25.0 #101
OCPBUGS-723: clusterquotareconciliation: do not sync quota monitor cache with no monitors registered #94
OCPBUGS-3985: enforce pod security admission when techpreview is enabled #89
Updating cluster-policy-controller images to be consistent with ART #91
Full changelog

cluster-samples-operator

OCPBUGS-7208: When setting allowedRegistries urls the openshift-samples operator is degraded #489
Full changelog

cluster-storage-operator

OCPBUGS-7331: hypershift: remove inject-proxy annotation from aws-ebs-csi-driver-operator deployment #337
Full changelog

console

OCPBUGS-7506: Fix different CI issues #12555
OCPBUGS-6966: Remove description field from the PLR parameters page #12519
OCPBUGS-7437: Webhook Secret (1 of 2) is not removed when Knative Service is deleted #12560
OCPBUGS-6887: Show Tag label and tag name if tag is detected in repository PipelineRun list and details page #12510
OCPBUGS-6816: Repositories list does not show the running pipelinerun as last pipelinerun #12500
OCPBUGS-4072: Fix rerender loop/crash when bindable-kinds is found but has no status #12304
OCPBUGS-6671: fix broken pipeline secret #12474
OCPBUGS-6913: PipelineRun task status overlaps status text #12516
Full changelog

console-operator

OCPBUGS-6921: Recover ConsoleNotificationSync after being degraded #728
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-6591: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.25 into release-4.12 #174
Full changelog

csi-driver-manila-operator

OCPBUGS-6599: Address CVE-2022-41717 #166
Full changelog

csi-driver-nfs

OCPBUGS-6590: Address CVE-2022-41717 #105
Full changelog

fedora-coreos, machine-os-content, okd-rpms

Bump fedora-coreos to latest stable #531
overlay: prevent NM from modifying resolv.conf #528
Bump fedora-coreos to latest stable #526
Dockerfile.rpms: use stable CRIO releases #521
Full changelog

hypershift

fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac #2189
fix(cpo): Reduce CNO access if Calico used as network provider #2184
Skip destroyAWSDefaultSecurityGroup if not AWS #2168
Create default security group for AWS clusters #2162
AUTH-323: pki: split out konnectivity certs from the rootCA #2156
fix(ibmcloud): Initialize image registry config on creates and bad config #2104
fix(cpo): Allow KAS profiling disablement #2122
reduce ignition server scope #2140
OpenID add support for groups claim in the config #2129
fix(cpo): Restart registry operator on annotation #2121
Full changelog

insights-operator

OCPBUGS-6782: Create gatherer for gathering machines. (#734) #734
Full changelog

kube-proxy, sdn

OCPBUGS-6842: Handle race condition to setup default vnid flows #497
OCPBUGS-7227: Update for 4.12 / go 1.19, including gofmt updates #482
Full changelog

machine-config-operator

OCPBUGS-6943: Improvements for configure-ovs.sh #3528
OCPBUGS-6045: There are not enough logs in case “oc extract” is stuck in mco first boot #3503
OCPBUGS-6973: configure-ovs: optionally generate configuration in /run #3532
OCPBUGS-6779: baremetal: clean state generated by NM when run by dracut #3521
OCPBUGS-7241: controller: default overwrite to true for files #3546
Full changelog

network-interface-bond-cni

Updating ose-network-interface-bond-cni images to be consistent with ART #37
Full changelog

network-metrics-daemon

Update golang.org/x/text to 0.7.0 (#66) #66
Full changelog

oc-mirror

OCPBUGS-6703: fix: adds logic that searches for the correct name when using a heads… (#554) #554
Full changelog

openstack-machine-api-provider

OCPBUGS-7155: Address CVE-2022-41717 #55
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-7556: Defuse E2e timebomb #449
OCPBUGS-7086: cherry-pick pull request refactor FBC caching (#1051) f… #441
OCPBUGS-6260: Catalog, fatal error: concurrent map read and map write #440
OCPBUGS-7025: Set ImagePullPolicy of bundle unpacker to “IfNotPresent” for image digests #439
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-6040: addMasqueradeRoute: fallback to gateway interface IPs #1484
OCPBUGS-7230: Delete IGMP Groups when deleting stale chassis #1516
OCPBUGS-3399: Drop in-cluster traffic towards svcCIDR at wrong port #1490
OCPBUGS-6961: update base image of Dockerfile #1504
OCPBUGS-6823: [release-4.12] Fix Egress FW ACL rules in dualstack mode #1500
OCPBUGS-4862: Correct the deletion of noHostSubnet nodes #1470
OCPBUGS-298: ovnkube-trace: run ovn-sbctl and ovn-trace with –no-leader-only #1489
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-7458: Fixes ThanoRuler StatefulSet re-creation bug #217
Full changelog

tests

OCPBUGS-7633: remove reference to old guard pods #27732
OCPBUGS-7285: extended: security: do not explicitly set api audience on token request #27716
OCPBUGS-6850: [release-4.12] upgrade/adminack: guarantee one admin ack check post-upgrade #27684
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-6936: fix for nil user session (#1859) #57
Full changelog

vsphere-problem-detector

OCPBUGS-6788: Derive the fully qualified vSphere username when checking permissions #98
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github