4.19.0-okd-scos.0

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.19.0-okd-scos.0

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
- upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

Changes from 4.18.0-okd-scos.ec.3

Created: 2025-05-09 21:24:46 +0000 UTC

Image Digest: sha256:2c583a3f28d9366206134b51691df972a6787723bd01b4f9c0ace6e4887b4c92

Release 4.19.0-okd-scos.0 was created from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-05-09-104302

Components

Kubectl upgraded from 1.31.1 to 1.32.1
Kubernetes upgraded from 1.31.4 to 1.32.4
Kubernetes Tests upgraded from 1.31.1 to 1.32.4
CentOS Stream CoreOS upgraded from 418.9.202501310632-0 to 9.0.20250507-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
CSIDriverSharedResource (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereControlPlaneMachineSet (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereStaticIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GatewayAPI (6 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
AdditionalRoutingCapabilities (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ConsolePluginContentSecurityPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
MetricsCollectionProfiles (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
NetworkSegmentation (56 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OnClusterBuild (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
PersistentIPsForVirtualization (12 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
RouteExternalCertificate (19 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ServiceAccountTokenNodeBinding (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallIBMCloud (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
MachineAPIMigration (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
CPMSMachineNamePrefix (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GatewayAPIController (5 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterVersionOperatorConfiguration (0 tests)			Enabled (New)	Enabled (New)
DualReplica (0 tests)			Enabled (New)	Enabled (New)
DyanmicServiceEndpointIBMCloud (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
Example2 (0 tests)			Enabled (New)	Enabled (New)
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPCustomAPIEndpoints (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
HighlyAvailableArbiter (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
KMSEncryptionProvider (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLMCatalogdAPIV1Metas (4 tests)				Enabled (New)		Enabled (New)
NewOLMOwnSingleNamespace (0 tests)				Enabled (New)		Enabled (New)
NewOLMPreflightPermissionChecks (6 tests)				Enabled (New)		Enabled (New)
SELinuxChangePolicy (0 tests)			Enabled (New)	Enabled (New)
SELinuxMount (6 tests)			Enabled (New)	Enabled (New)
ShortCertRotation (0 tests)
SigstoreImageVerificationPKI (0 tests)			Enabled (New)	Enabled (New)
VSphereConfigurableMaxAllowedBlockVolumesPerNode (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereHostVMGroupZonal (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereMultiDisk (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

azure-service-operator git 0ae129b4 sha256:46326ed2e77b6a1147a5445d7020380c1717ce60a66035f594f7403337407b77

Removed images

csi-snapshot-validation-webhook
ovirt-machine-controllers

Rebuilt images without code change

aws-kms-encryption-provider git 088dcaf7 sha256:a56bb31b2982427528c5d7346efe715183f87cee872daeed01b408d01cf215bd
kubevirt-cloud-controller-manager git 3f4542ec sha256:de8c1f22ca3555e552ab55d873ed016d2a96da08dbbc65eaef0f5c5c4d7e206a
libvirt-machine-controllers git a336f0b5 sha256:82be9a3644ece5867ba1d89a9ddfe25aaa23ce5a44ab8efa86b81ca99a53bb35
multus-route-override-cni git 391c1b03 sha256:e1895181285f00370cb9dbf857a4cb3772100eb140f46867ed4a11030a002ba5
ovirt-csi-driver git 1db726a9 sha256:3962403813fb528ca1101113e22a0b2519b70db3dea7d9fb38537031a4b52475
stream-coreos git be084e2e sha256:fba4eb9ce34172ff46107f3455db8f045f9d6f2047dbaa1bb7f4de5b0743c3ab
stream-coreos-extensions git be084e2e sha256:da21fe4b600b8b2aa1aa99e71b20622bccc4635d00fc62889dcc8bd6512ea523

agent-installer-api-server

MGMT-20324: Fix day2 add hosts with P/Z CPU architectures #7527
MGMT-20207: avoid adding system CA bundle to AdditionalTrustBundle #7448
MGMT-20009: Change OCP 4.19 to the default version #7506
NO-ISSUE: Change node-maintenance operator namespace to avoid conflict with node-healthcheck operator #7491
NO-ISSUE: fixing late binding #7070
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-20534: Move getting Node replicas into waitForNodes (#1113) #1113
MGMT-20479: Update assisted-installer to allow TNA Clusters (#1106) #1106
NO-ISSUE: Update Konflux references (#1112) #1112
NO-ISSUE: Apply konflux migration (#1105) #1105
NO-ISSUE: Update Konflux references (#1103) #1103
NO-ISSUE: Update Konflux references (#1095) #1095
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.19 (#957) #957
NO-ISSUE: Update Konflux references (#1090) #1090
MGMT-20153: Fix ostree race between node-image-pull and installing to rootfs (#1076) #1076
OCPBUGS-53720: Bump jwt to 4.5.2 (#1080) #1080
NO-ISSUE: Update Konflux references (#1082) #1082
MGMT-19421: remove all references of HighAvailabilityMode and the command line argument –high-availability-mode (#1081) #1081
MGMT-20149: Add required SAST tasks for Konflux (#1064) #1064
NO-ISSUE: Remove Paul account from OWNERS (#1073) #1073
MGMT-20198: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#1066) #1066
NO-ISSUE: Bump github.com/golang/glog from 1.2.0 to 1.2.4 (#1057) #1057
OCPBUGS-52696, OCPBUGS-52704: Bump crpto to v0.33.openshift.1 (#1053) #1053
NO-ISSUE: Update Konflux references (#1051) #1051
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#1049) #1049
NO-ISSUE: Update Konflux references (#1048) #1048
NO-ISSUE: Update Konflux references (#1042) #1042
MGMT-19421: phase 1 of replacing the refference HighAvailabilityMode with ControlPlaneCount (#1027) #1027
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#1034) #1034
NO-ISSUE: Update Konflux references (#1031) #1031
NO-ISSUE: Update Konflux references (#1025) #1025
MGMT-19819: Add the commit reference from which the image is built to the image (#1024) #1024
MGMT-19815: Update tekton pipelines to point to new components (#1023) #1023
MGMT-19101: Respect installer args (#1018) #1018
NO-ISSUE: Update Konflux references (#1017) #1017
MGMT-19621: Fix Race condition between the OLM operators monitor to the cluster installation monitor (#1014) #1014
MGMT-19100: Install to the current boot device when CoreosImage is set (#1003) #1003
COS-3013: overlay node image before bootstrapping if necessary (#899) #899
NO-ISSUE: Update buildah image to fix a bug with SBOM (#1013) #1013
MGMT-19748: Configure snyk ignore (#1010) #1010
NO-ISSUE: Update Konflux references (#991) #991
MGMT-19734: Add renovate config to limit number of PRs (#1009) #1009
NO-ISSUE: Make konflux builds for downstream images to be multi-arch (#1008) #1008
MGMT-19645: Configure the following things for releasing in konflux: (#1004) #1004
MGMT-19381: Change downstream base images to rhel9.4 instead of ubi9 (#1002) #1002
MGMT-19595: Push latest tag for downstream images after merge to konflux int repo (#1001) #1001
Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.19 (#956) #956
OCPBUGS-13612: update gin version (#997) #997
MGMT-19537: Bump golang.org/x/net to 0.33.0 (#981) #981
MGMT-19506: Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (#976) #976
chore(deps): update konflux references (#972) #972
MGMT-19507: Stop using multi-arch builds in konflux (#971) #971
chore(deps): update konflux references (#958) #958
NO-ISSUE: Red Hat Konflux update assisted-installer-controller-downstream-main (#965) #965
NO-ISSUE: Red Hat Konflux update assisted-installer-downstream-main (#966) #966
MGMT-19453: Add downstream dockerfile (#960) #960
MGMT-19408: Create tekton pipelines for acm 2.13 (#954) #954
MGMT-19390: Update mce’s tekton pipelines to be multi-arch (#948) #948
OCPBUGS-45116: Add retry to mount efi device (#947) #947
Red Hat Konflux update assisted-installer-controller-mce-downstream-main (#946) #946
Red Hat Konflux update assisted-installer-mce-downstream-main (#945) #945
MGMT-19371: Add downstream dockerfiles for mce (#943) #943
NO-ISSUE: Add giladravid16 and pastequo to approvers list (#944) #944
Full changelog

agent-installer-node-agent

NO-ISSUE: Update assisted-service’s version (#997) #997
MGMT-20296: Modify RegisterHostConflict log (#990) #990
NO-ISSUE: Update Konflux references (#976) #976
OCPBUGS-53712: golang-jwt/jwt/v4 to 4.5.2 (#956) #956
NO-ISSUE: Update Konflux references (#959) #959
OCPBUGS-52994: Update to latest ghw version (#936) #936
MGMT-20227: Skip Motherboard serial if set to “-” (#955) #955
MGMT-20149: Add required sast tasks for Konflux (#942) #942
NO-ISSUE: Remove eran ifrach account from OWNERS (#947) #947
MGMT-20199: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#943) #943
NO-ISSUE: Update Konflux references (#929) #929
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#926) #926
NO-ISSUE: Update Konflux references (#924) #924
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#912) (#911) #912
NO-ISSUE: Update Konflux references (#921) #921
MGMT-19927: Modify MTU Check to Only MTUs != 1500 (#910) #910
MGMT-19588: Also use bond interface for hostname workaround (#920) #920
MGMT-19819: Add the commit reference from which the image is built to the image (#914) #914
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#912) #912
NO-ISSUE: Update Konflux references (#903) #903
NO-ISSUE: Increase image pull timeout during install (#904) #904
MGMT-19815: Update tekton pipelines to point to new components (#902) #902
MGMT-19102: Add boot device info to inventory (#899) #899
NO-ISSUE: Update Konflux references (#900) #900
MGMT-19100: Allow install to the existing root filesystem (#897) #897
NO-ISSUE: Update docker pkg to fix cves CVE-2024-41110 and CVE-2023-2253 (#895) #895
NO-ISSUE: Update buildah image to fix a bug with SBOM (#898) #898
Update Konflux references (#875) #875
MGMT-19734: Add renovate config to limit number of PRs (#896) #896
NO-ISSUE: Stop removing stuff from the downstream image that are needed for preflight-check to succeed (#893) #893
NO-ISSUE: Make konflux builds for downstream images to be multi-arch (#892) #892
MGMT-19645: Configure the following things for releasing in konflux: (#889) #889
OCPBUGS_45910: s390x: Fix cpu clockspeed and use Maschine Type for Model Name (#857) #857
MGMT-19381: Change downstream base images to rhel9.4 instead of ubi9 (#883) #883
MGMT-19595: Push latest tag for downstream image after merge to konflux int repo (#882) #882
OCPBUGS-43352: calculate outgoing interface for arping (#877) #877
MGMT-19537: Bump golang.org/x/net to 0.33.0 (#868) #868
MGMT-19537: Bump golang.org/x/net to 0.33.0 (#862) #862
MGMT-19506: Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (#856) #856
Update Konflux references (#852) #852
added another unkown motherboard id (#850) #850
MGMT-19507: Stop using multi-arch builds in konflux (#851) #851
Update Konflux references (#839) #839
NO-ISSUE: Red Hat Konflux update assisted-installer-agent-downstream-main (#846) #846
MGMT-19453: Add downstream dockerfile (#841) #841
Updating ose-agent-installer-node-agent-container image to be consistent with ART for 4.19 (#838) #838
MGMT-19408: Create tekton pipelines for acm 2.13 (#835) #835
Implement MTU check as part of the connectivity check (#821) #821
MGMT-19390: Update mce’s tekton pipelines to be multi-arch (#828) #828
Red Hat Konflux update assisted-installer-agent-mce-downstream-main (#827) #827
MGMT-19331: Add secure_boot_state to inventory (#822) #822
MGMT-19371: Add downstream dockerfile for mce (#825) #825
NO-ISSUE: Add giladravid16 and pastequo to approvers list (#826) #826
Full changelog

agent-installer-utils

OCPBUGS-55793: Use internal image registry #87
OCPBUGS-55761: Include RHEL 9 guest image to support VM launches via … #85
NO-ISSUE: Update ISOBuilder appliance image SHA #83
NO-ISSUE: ISOBuilder: Add support for default CatalogSource naming #79
OCPBUGS-55515: Include cnv operator in ISO builder script #80
OCPBUGS-55623: update to go.mod #81
NO-ISSUE: ISOBuilder-Add support-tools image for oc debug #77
NO-ISSUE: ISOBuilder- Update README.md #76
NO-ISSUE: ISOBuilder: Add Clean targets. #69
AGENT-1161: Update ISOBuilder dependencies #75
AGENT-1154: Dev docs for ISOBuilder #74
NO-ISSUE: Remove extra doneFunc() call #73
AGENT-1188: Add MBR to El Torito ISO to support USB boot alongside VM #72
NO-ISSUE: ISOBuilder: Use libpod registry #71
AGENT-1114: Check connectivity to rendezvous node and improvements #64
NO-ISSUE: ISOBuilder: Appliance tweaks #70
AGENT-1138: Skip release image checks for interactive disconnected #52
NO-ISSUE: ISOBuilder: idempotency and efficiency #66
NO-ISSUE: ISOBuilder: Support –dir param #68
NO-ISSUE: ISOBuilder: Update operators list #67
AGENT-1155: Support release image url with sha digst #65
NO-ISSUE: ISOBuilder: Make sudo optional #63
NO-ISSUE: ISOBuilder: Restructured to resolve right image ref #62
AGENT-1150: Move setup-agent-tui.sh into ignition file #59
NO-ISSUE: iso_builder: add ssh key file flag #53
AGENT-1151: Use internal appliance registry #58
NO-ISSUE: iso_builder: Remove support for rendezvousIP #61
NO-ISSUE: iso_builder: Revert “Merge pull request #54 from pawanpinjarkar/run-appliance-with… #60
NO-ISSUE: iso_builder: Run appliance without sudo #54
AGENT-1087: Add logging #50
AGENT-1137: Support both –ocp-version and –release-image-url #49
AGENT-1118: Ensure the correct selinux labels are applied to agent tui files #57
OCPBUGS-45505: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.19 #37
AGENT-1147: Update operators #51
AGENT-1087: Support url in appliance-config.yaml #47
AGENT-1119: agent-setup-tui.service typo fix #48
AGENT-1087: Enable agent installer interactive flow #46
AGENT-464: Refactor UI for Rendezvous node IP entry #42
AGENT-1087: load agent tui #44
AGENT-1087: OVE ISO Builder script improvements #40
AGENT-464: Adds form to agent-tui to enter rendezvous IP address #38
AGENT-1087, AGENT-1118: Add script to generate agent-based installer OVE ISO #39
Full changelog

apiserver-network-proxy

OCPBUGS-52573: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.19 #74
Full changelog

aws-cloud-controller-manager

OCPCLOUD-2843: Update cloud-provider-aws to K8s 1.32, attempt 3 #104
TRT-2005: Revert #102 “OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (b1f753a) into master” #103
OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (b1f753a) into master #102
TRT-2003: Revert #98 “OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (c9d7595) into master” #100
OCPCLOUD-2843: Merge https://github.com/kubernetes/cloud-provider-aws:master (c9d7595) into master #98
OCPBUGS-45516: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.19 #99
Full changelog

aws-cluster-api-controllers

OCPBUGS-54567: UPSTREAM: 5374: add marketType field validation #548
ART-12521: update go mod dependency for konflux #545
OCPBUGS-53728: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.2 (79ae3d0) into master #544
OCPCLOUD-2855: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.1 (49c75ac) into master #542
NO-JIRA: Update manifests generator tooling #538
OCPBUGS-49400: UPSTREAM: 5339: Bump glog for recent fixes #536
OCPBUGS-45734: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.19 #534
Full changelog

aws-ebs-csi-driver

STOR-2253: Rebase to upstream v1.39.0 for OCP 4.19 #283
OCPBUGS-51722: bump golang.org/x/crypto to v0.35.0 #284
OCPBUGS-46994: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #282
OCPBUGS-46197: CVE-2024-45337: bump golang.org/x/crypto from v0.30.0 to v0.31.0 #281
OCPBUGS-45562: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.19 #280
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-50493: Use 127.0.0.1 for healtz http-endpoints #364
NO-JIRA: build only needed cmd in container image #329
OCPBUGS-54382: Correct ASH driver inject env config #376
OSASINFRA-3652: openstack-cinder: Use new –with-topology flag #345
STOR-2126: Enable readOnlyFileSystem #370
OCPBUGS-54447: Enable required driver services #369
OCPBUGS-54180: Disable remove-not-ready-taint for azure disk csi driver #371
OCPBUGS-54230: Bump library-go #372
STOR-1877: Run operators without root user control #368
STOR-1880: Role and ClusterRole with too wide permissions #367
OCPBUGS-41827: update injector to use a secret rather than an environment variable #357
NO-JIRA: Fixed typo in README.md #348
STOR-2252: Bump all deps #361
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #363
CFE-1132: EFS Access Point Tags Update DAY2 #313
CFE-1131: AWS Tags DAY2 Update #297
STOR-2263: correct smb csi driver test manifest #360
NO-JIRA: Remove inject-proxy annotations for aws-ebs, aws-efs node daemonsets #308
OCPBUGS-48507: openstack-manila: update PodDisruptionBudget name #353
STOR-2078: Enable VolumeAttributesClass on AWS EBS for resizer + provisioner #314
NO-JIRA: Update golang.org/x/net to v0.34.0 #352
OCPBUGS-45073: Support HCP labels #332
STOR-2260: Bump OLM metadata to 4.19 #351
OCPBUGS-45591: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.19 #342
OCPBUGS-44723: remove EFS driver metrics #330
OCPBUGS-45374: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.19 #337
OCPBUGS-45622: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.19 #343
Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.19 #341
OCPBUGS-45508: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.19 #340
OCPBUGS-45395: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.19 #339
OCPBUGS-45352: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.19 #336
OCPBUGS-45267: openstack-manila: modify assets selectors #335
OCPBUGS-43357: support hcp tolerations #326
Full changelog

aws-machine-controllers

OCPBUGS-55706: Update machine-api-operator pkg with fixes #128
OCPBUGS-52454: Add spotMarketRequest on marketType spot #126
OCPCLOUD-2780: select instance ‘MarketType’ option #125
OCPCLOUD-2836: Update dependencies to k8s 1.32 #123
OCPBUGS-45578: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.19 #119
Full changelog

aws-pod-identity-webhook

OCPBUGS-52509: github.com/go-jose/go-jose/v4 v4.0.5 #200
OCPBUGS-45443: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.19 #199
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-55162: UPSTREAM: 8920: Fix azure stack hub volume detach failed #142
OCPBUGS-51090: Fix panic for GetZoneByNodeName on Azure Stack #141
OCPBUGS-50969: UPSTREAM: 8504: Fix GovCloud Config #139
CNTRLPLANE-106: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (78638bd) into main #136
OCPCLOUD-2844: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (dfca04a) into master #127
OCPBUGS-45694: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART for 4.19 #129
OCPBUGS-45859: Prevent panic when informer receives cache.DeletedFinalStateUnknown #130
OCPBUGS-45574: Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.19 #128
Full changelog

azure-cluster-api-controllers

ART-12521: update go mod dependency for konflux #334
CNTRLPLANE-105: Add new authentication type UserAssignedIdentityCredentials #333
OCPCLOUD-2854: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.18.0 (1957fc6) into master #332
NO-JIRA: Update manifests generator tooling #331
OCPBUGS-45570: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.19 #328
Full changelog

azure-disk-csi-driver

OCPBUGS-55494: Correct max data disk count table for L family v4 #105
OCPBUGS-54382, OCPBUGS-55162: Fix ASH azure disk regression issues #104
OCPBUGS-51376: Rebase against v1.32.0 #102
OCPBUGS-51768: UPSTREAM: 2903: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #101
OCPBUGS-51169: UPSTREAM: 2900: chore: update max data disk count table for D family v6 #100
STOR-2256: Rebase v1.314 upstream #99
OCPBUGS-47036: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #91
OCPBUGS-46575: Rebase to upstream v1.31.1 for OCP 4.19 #94
Full changelog

azure-file-csi-driver

OCPBUGS-55831: UPSTREAM: 2515: allow deleting cross-subscription snapshots #93
OCPBUGS-52654: Rebase to v1.32.0 #90
OCPBUGS-51782: UPSTREAM: 2395: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #88
OCPBUGS-47043: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #85
OCPBUGS-46218: CVE-2024-45337: bump golang.org/x/crypto to v0.31.0 #84
OCPBUGS-45753: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.19 #83
Full changelog

azure-kms-encryption-provider

NO-JIRA: Add OCP engineers to OWNERS for KMS #15
CNTRLPLANE-373: Add Support for UserAssignedIdentityCredential for Kubernetes-KMS #14
OCPBUGS-45592: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.19 #9
OCPBUGS-53496: bump golang-jwt v4 #10
Full changelog

azure-machine-controllers

OCPBUGS-54617: Update eviction policy for Spot VMs from Deallocate to Delete #138
OCPBUGS-31515: Re-reconcile machine on NIC provisioning failure #132
CORS-3883: Allow managed identity from other resource groups #133
OCPCLOUD-2839: Bump k8s 1.32 #128
OCPBUGS-38570: Fallback to PlatformFaultDomain when Zones is otherwise unset #126
OCPBUGS-45663: dynamically setting the amount of fault domains #124
OCPBUGS-45481: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.19 #123
Full changelog

azure-workload-identity-webhook

OCPBUGS-53800: github.com/golang-jwt/jwt/v4 v4.5.2 #30
OCPBUGS-52508: github.com/go-jose/go-jose/v4 v4.0.5 #26
OCPBUGS-45531: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.19 #25
Full changelog

baremetal-cluster-api-controllers

Remove ipam-controller-manager deployment #43
Add metal3 infra group to IPAM manager RBAC #42
Remove IPAM deployment #39
Find Nodes by hostname #38
downstream: regenerate manifests #37
Merge upstream #36
OCPBUGS-47538: Bump x/net to 0.33.0 #30
OCPBUGS-45382: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.19 #29
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-55909: Apply defaults then validate confidentialCompute #9695
OCPBUGS-55731: azure stack: switch cloud provider to standard lb #9690
CORS-3633: Fail the install when there are expired certs #9225
CORS-3960: Remove Terraform from Dockerfiles #9673
OCPBUGS-55492: sort zone slices extracted from map of byo subnets #9662
no-jira: IBI nmstate unit test fix #9680
OCPBUGS-55324: fix nil field access when describing security groups #9676
OCPBUGS-52203: Find GCP KMS keys #9597
CORS-3855: Remove ARO build flag from installer #9124
OCPBUGS-54902: Custom-DNS: Update Kubeconfig and Infra CR based on private or public cluster #9656
NO-JIRA: Update SCOS 4.19 bootimage metadata to 9.0.20250411-0 #9657
CORS-3870: validate duplicate AZs if no subnet roles at all or only for subnets of the same role #9663
CORS-3864, CORS-3959: CAPI AzureStack Support, Take II #9666
OCPEDGE-1749: [TNF] Updated bare-metal init sequence to detach control-plane nodes in Two Node OpenShift. #9661
Revert “Merge pull request #9645 from patrickdillon/azurestack-mark-iii” #9665
CORS-3864, CORS-3959: CAPI-based AzureStack Installs #9645
CORS-3870: add validations for subnets field with AWS API #9599
CORS-3871, CORS-3872, CORS-3873: place the cluster components on the assigned byo subnets if any #9633
CORS-3278: IBMCloud: Remove IBM Cloud TF provider #9649
OCPBUGS-54606: convert OVNKubernetes networkType to correct format #9653
CORS-3936: Add support for public-only networking #9544
CORS-3278: IBMCloud: Add DestroyBootstrap for leftover CAPI resources #9636
CORS-3854: Enable option to set boot diagnostics #9125
CORS-3278: Switch IBMCloud to CAPI #9652
CORS-3867: fix CRD descriptor to mention required BootstrapNode role #9655
CORS-3886: azure: Set use managed identity to false #9648
OCPBUGS-54319: oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x #9608
AGENT-1159: agent docs update #9627
OCPBUGS-53439: fix inconsistent subnet role name for bootstrap node #9650
NO-JIRA: fix the platform test assertions to check expected err message #9639
OCPBUGS-43990: Filter out excess CA certs when adding node #9641
NO-JIRA: add Roshan-R to CoreOS approvers and reviewers #9642
OCPEDGE-1506: Add Platform based validation to fencing credentials #9624
CORS-3908: Update gcp cloud provider config map to include new endpoints #9600
SPLAT-2121: vsphere - if no host group found, append not found #9638
OCPBUGS-54541: Update RHCOS 4.19 bootimage metadata to 9.6.20250402-0 #9632
OCPBUGS-46601: IBM Cloud Bump IBM Cloud CAPI #9623
OCPBUGS-43724: Fix Load balancer IP setup #9144
OCPBUGS-54407: Use correct case in path error messages #9615
OCPBUGS-54232: Azure Move BYO VNET SG creation to InfraReady #9603
OCPEDGE-1701: fix: update tnf validation to account for tna install config #9629
OCPBUGS-52473: aarch64 kernel is no longer zipped #9617
NO-JIRA: Add jcapiitao to CoreOS approvers and reviewers #9631
OCPBUGS-53067: Updating the file names in generic.ins file for s390x ABI for pxe Artifacts #9586
NO-JIRA: OWNERS_ALIASES - Add user as coreos-approvers / coreos-reviewers #9628
CORS-3883: Remove user-assigned identity from ARM template #9625
OCPBUGS-53303: Revert: Power VS: Disallow platform.powervs.clusterOSImage in install-config #9577
OCPBUGS-42241: Update to cluster-api-provider-azure release-v1.17.5 #9596
OCPBUGS-53140: Validation for API and Ingress VIPs when using user-managed load balancer #9571
no-jira: Add Johan-Liebert1 to coreos-reviewers and coreos-approvers #9556
CORS-3923, CORS-3927: Support confidential cluster installation on SEV-SNP and TDX nodes on GCP #9395
AGENT-587: Support Nutanix in Agent-based Installer #9537
SPLAT-2000: Added vSphere provisioning mode support for data disks #9439
OCPEDGE-1496: [TNF] Collect pacemaker, pcsd, and corosync logs and journals in installer-masters-gather.sh #9546
OCPBUGS-52356: IBMCloud: Fix CAPI endpoint overrides #9540
OCPEDGE-1505: Enhance Platform none with Fencing Credentials #9521
OSASINFRA-3730: Add support for storing OpenStack CA bundles #9194
OCPBUGS-53258: IBMCloud: Bump TF provider for CIS fix #9589
NO-JIRA: update OWNER_ALIASES for azure and aws #9598
OCPBUGS-53106: Create ConfigMap to reference baremetal-installer image #9563
NO-JIRA: CVE-2025-22868 bump oauth2 pkg to v0.27.0 #9569
CORS-3918: Send service endpoint overrides to CAPG through cluster spec #9528
OCPBUGS-53465: Update RHCOS 4.19 bootimage metadata to 9.6.20250321-0 #9593
OCPEDGE-1513: Fixed topology logic for 2-node installs and added unit tests #9579
OCPBUGS-53379: Update RHCOS 4.19 bootimage metadata to 9.6.20250319-0 #9582
AGENT-467: show the agent ui url when available #9584
CORS-3861, CORS-3883, CORS-3937: Azure Machine Identity API #9538
AGENT-537: Run agent installer command to create certificates #9574
OCPBUGS-52959: Issue short lived certificates if ShortCertRotation featuregate is enabled #8784
OCPBUGS-53173: PowerVS: remove TF code #9568
no-jira: add dev docs for bumping CAPI provider version #9567
OCPBUGS-53183: Avoid adding duplicate entries to NO_PROXY #9573
SPLAT-2078: Removed VSphereStaticIPs feature gate #9560
OCPBUGS-53280: PowerVS: Re-enable disconnected installs #9551
AGENT-537: Add agent command to generate certificates #9557
OCPBUGS-39146: Validate sgdisk partition start in image based installer config #9541
AGENT-1113: additional refinement for loading the agent UI #9565
SPLAT-2072: Removed VSphereMultiVCenters feature gate #9553
OCPEDGE-1513: feat(topologies): add DualReplica topology mode #9534
OCPBUGS-45692: Modified ova template name to use failure domain name #9300
OCPBUGS-50552: Power VS: Disallow clusterOSImage install-configuration parameter #9417
NO-JIRA: OWNERS: add thuan #9555
OCPBUGS-51209: Changed kernelFileType name from kernel.img to vmlinuz for s390x #9533
OCPBUGS-6271: Adding VIPs Validation for agent based vsphere installation #9532
AGENT-1113: enhance the unconfigured-ignition command to support the interactive workflow #9529
OCPBUGS-33370: Improve baremetal gather error message #9120
OCPBUGS-36553: VSphere: add vips to machinenetwork #9526
OCPBUGS-49737: Custom-DNS: Update master and worker user data secrets #9451
CORS-2508: aws: remove unused autoscaling:DescribeAutoScalingGroups perm #9223
OCPBUGS-51378: Change vsphere conversion govmomi err to be clear #9524
CORS-3278: Bump IBM Cloud CAPI to v0.10.0 #9523
OCPBUGS-44840: Mount the user-ca-bundle into ICC #9227
OCPBUGS-50637: Remove error logging when determining image arch #9531
OCPBUGS-51171: aws: add ec2:ReplaceRoute permission #9525
OCPBUGS-47724: AWS: Copy static MCO resources needed for custom-dns #9489
OCPBUGS-49623: IBMCloud: Missing ca-mon region due to static region list #9421
OCPBUGS-47681: Support regions only available in v2 of the aws sdk #9383
OKD-235: Add stream metadata for scos to be used by OKD #9520
OCPEDGE-1635: Set default values for arbiter #9530
OCPBUGS-39583: Remove tmp directory used for agent pxe files #9527
No-ISSUE: (dep) Bump openshift/api #9522
CORS-3917: Add install config validation for service endpoints #9517
NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer #9515
OCPBUGS-51350: PowerVS: Extra network routes for disconnected install #9510
NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage #9508
OCPBUGS-50961: Power VS: Log accurate error when deploying Internal with no vpcName #9497
SPLAT-1995: vsphere on destroy remove cns volumes #9425
OCPBUGS-47459: IBMCloud: CAPI add permitted network #9397
OCPBUGS-47652: IBMCloud: Set CAPI boot volumes #9385
CORS-3869: static validation for new vpc.subnets field #9505
OSASINFRA-3695: openstack: Create security group rules in batches #9042
OCPBUGS-46051: IBMCloud: Fix CAPI AZ handling #9415
OCPBUGS-50534: Fix error messages in available IP code #9503
OCPBUGS-51204: bootstrap/node-image-pull.sh: handle PXE boots as well #9516
OCPEDGE-1310: feat: add arbiter node support to installer #9159
CORS-3919: Add GCP service endpoints to the infrastructure manifest #9518
OCPBUGS-51084: PowerVS: Specify chrony config for Disconnected deploy #9500
no-jira: Bump cluster-api to v1.9.4 #9411
OCPBUGS-49351: Add vSphere logic to check for max network count #9419
CORS-3843: Add Tech Preview Feature gate to Installer for GCP Custom API Endpoints #9501
OCPBUGS-50919: Fixes panic during GCP tags fetch due to unstable network #9495
OCPBUGS-49940: PowerVS: datacenter supported systems #9442
OCPBUGS-49953: PowerVS: support destroy tag 1 #9403
OCPBUGS-50574: Check for vmgroup when create capv machine fd name #9453
CNTRLPLANE-194: add auth-api-bootstrap stage to bootkube.sh template #9424
CORS-3867, CORS-3868: deprecate platform.subnets and introduce platform.vpc.subnets field in install-config #9443
OCPBUGS-50899: PowerVS: COS eu-es hack #9490
OCPBUGS-50920: Rely on path declaration of base image #9491
OCPBUGS-45429: Set the right resource group in bootstrap destroy #9487
CORS-3835: Add gcp endpoints to the installer config #9363
OCPBUGS-46488: Validate Encryption Keys for GCP #9328
OCPBUGS-44507: Check public zone for stray record set #9365
OCPBUGS-50839: correct typo #9480
OCPBUGS-50657: PowerVS: destroy dhcp hack #9458
OCPBUGS-50534: Fix panic when there are no available IPs #9444
OCPBUGS-50649: vsphere - check if host is powered down or on standby before uploading template #9456
no-jira: Switch to go.uber.org/mock/gomock #9422
OCPBUGS-49319: IBMCloud: Drop CAPI metrics-bind-addr #9401
no-jira: Relax serviceEndpoint URL validation for IBMCloud platform #9416
OCPBUGS-50004: Add cluster:master_nodes metric retrieval in docs #9447
CORS-3825: pkg/infrastructure/azure: support nvme #9232
OCPBUGS-49737: Custom-DNS: GCP, AWS: Update worker pointer Ignition #9431
OCPBUGS-46656: validate configured networks to not overlap with OVNKubernetes default subnets #9428
MGMT-19545: add optional release registry field to the IBI installation config #9394
OCPBUGS-48044: [Nutanix] Install multi-NICs cluster failed with failureDomains #9376
OCPBUGS-49784: handle runtime panic when validating ovnKubernetesConfig #9432
OCPBUGS-48827: aws/edge/byovpc: subnets tag kube cluster tag to shared #9413
OCPBUGS-49594: aws/byo-ip added required permission ec2:ReleaseAddress #9420
OCPBUGS-46549: Update RHCOS 4.19 bootimage metadata to 9.6.20250121-0 #9392
OCPBUGS-48089: validate hostPrefix to be the same when multiple clusternetwork CIDRs are present #9398
SPLAT-1809: Added vSphere multi disk support #9035
OSASINFRA-2571: Add quota validation for server group #9326
OCPBUGS-48228: Envtest: Configure IPv6 service network for API Service #9361
CORS-3724: bump go v1.23 and k8s dependencies #9396
CORS-3637: OWNERS files for platform provider subdirectories #9407
OCPBUGS-47489: pkg/gcp/destroy: add waits to prevent leaks during heavy load #9384
MGMT-19771: Convert IDS to proper IDMS manifest #9391
OCPBUGS-47477: aws: skip dead zones on us-east-1 when discovering AZs #9333
OCPBUGS-48570: [Nutanix] Installation failed with timeout when uploading images to PC #9377
OCPBUGS-45551: Updating ose-installer-altinfra-container image to be consistent with ART for 4.19 #9275
no-jira: docs(user): fix grammer in upi install step #9292
OCPBUGS-48719: Add new tested azure arm instance type to doc #9387
OCPBUGS-46596: aws/permissions - defaults ec2:DescribeInstanceTypeOfferings #9341
COS-3013: overlay node image before bootstrapping if necessary #8742
OCPBUGS-48256: Run iscsiadm for agent-based iSCSI installations #9356
SPLAT-1742: vSphere - enable host group based zonal #8873
CORS-3722: bump default channel to stable-4.19 #9375
CORS-3721: bump default release image to 4.19 #9374
OCPBUGS-48437: PowerVS: limit by resourceGroupID #9359
OCPBUGS-46010: wait for at least 3 kube-apiserver instances #9302
no-jira: Remove myself from reviewers list #9358
no-jira: images: UPI: use ART repo dir #9360
OCPBUGS-47156: Bump golang.org/x/net to 0.33.0 #9343
NO-ISSUE: Fix owning component name in machine config templates #9353
NO-JIRA: remove the types which failed by RHEL-59521 and add the new gpu vm type #9337
OCPBUGS-29067: Update MCS Cert and Key files within bootstrap Ignition with UserProvisionedDNS #9238
NO-ISSUE: Deprecate node-joiner scripts #9304
MCO-1457: Clean up MCS CA & TLS cert objects for management #9309
OCPBUGS-45995: Always set AllowCrossTenantReplication parameter to false #9322
OCPBUGS-46571: Disable IP Forwarding for CAPG Machines #9332
OCPBUGS-46260: CVE-2024-45337 bump crypto pkg to v0.31.0 #9314
OCPBUGS-46605: Find instances by label GCP #9336
OCPBUGS-47504: Power VS: Private DNS service endpoint URL must end with /v1 #9335
METAL-1137: Enable TLS for ironic API in the bootstrap VM #9189
OCPBUGS-46144: azure: use separate /var to avoid growfs timeouts #9310
OCPBUGS-45218: aws: fix perm requirement for edge nodes #9256
OCPBUGS-46470: Power VS: ResourceManager also to override for Internal deploy #9317
OCPBUGS-46035: fix skew support for node-joiner #9307
OCPBUGS-44560: Add note about additional networks using IPv6 #9323
OCPBUGS-45280: Allow more time for Service Account Creation #9299
OCPBUGS-46363: Remove narrow timeout from etcd bootstrap member removal gate. #9295
OCPBUGS-44834: aws: include permissions for edge compute #9230
OCPBUGS-45984: IBMCloud Fix VPC-COS IAM Auth #9301
OCPBUGS-45317: node-joiner PXE artifacts should be prefixed “node” #9280
OCPBUGS-45727: Updating ose-installer-artifacts-container image to be consistent with ART for 4.19 #9284
OCPBUGS-44641: GCP placing *.apps record in wrong managed zone #9216
OCPBUGS-45855: If vCenter cluster has no esxi hosts fail with sane msg #9291
OCPBUGS-45807: aws: fix sts:AssumeRole perm requirement #9287
OCPBUGS-43779: Destroy all private cluster backend service resources #9270
OCPBUGS-45162: Delete tagged disks #9274
OCPBUGS-45482: Wait for etcd bootstrap member removal #9261
OCPBUGS-45685: Power VS: Create region-zone-sysType hierarchy #9245
OCPBUGS-45289: capi/aws: use LB name when finding Hosted Zone ID #9263
OCPBUGS-45678: Updating ose-baremetal-installer-container image to be consistent with ART for 4.19 #9282
OCPBUGS-45656: Updating ose-installer-container image to be consistent with ART for 4.19 #9279
OCPBUGS-44925: aws: add ec2:AllocateAddress perm requirement. #9234
OCPBUGS-44523: Remove unused variable from ASH arm template 06_workers.json #9204
OCPBUGS-45491: Align vSphere UPI haproxy config with IPI #9273
OCPBUGS-44938: Handle multiple mirror entries for source #9266
OCPBUGS-45286: PowerVS: Listen to machineNetwork #9254
ARO-12457: Include bootstrap docker config file in go module #9248
OCPBUGS-45175: Ironic external url port should change based on protocol #9249
NO-ISSUE: imagebasedinstaller: support json files in extramanifests directory #9136
OCPBUGS-44924: aws: add missing ec2:GetConsoleOutput perm requirement #9233
OCPBUGS-44193: move GCP zone filtering client-side #9169
OCPBUGS-43561: add zsh completion #9116
Full changelog

baremetal-machine-controllers

METAL-1300: Update CAPB to support disablePowerOff #235
NO-ISSUE: Update OWNERS #233
NO-ISSUE: Update BMO and MAO #232
OCPBUGS-47536: Bump x/net to 0.33.0 #223
OCPBUGS-45534: Updating baremetal-machine-controller-container image to be consistent with ART for 4.19 #222
Full changelog

baremetal-operator

METAL-998: Merge upstream #413
OCPBUGS-54582: Sync apr 2 #410
OCPBUGS-53233: Sync mar 18 #403
NO-ISSUE: Upstream Sync Mar 10 #401
OCPBUGS-52215: Bump x/oauth2 to 0.27.0 #400
OCPBUGS-51294: Merge upstream #398
OCPBUGS-45252: Merge upstream #397
OCPBUGS-44949: Merge upstream #394
NO-ISSUE: Merge upstream #392
NO-ISSUE: Sync dec 16 #391
OCPBUGS-45668: Updating ose-baremetal-operator-container image to be consistent with ART for 4.19 #387
OCPBUGS-45252: Merge upstream #386
Full changelog

baremetal-runtimecfg

OPNET-629: Use HAProxy monitor endpoint instead of API #343
OCPBUGS-48469: Pass in platform as a optional parameter to runtimecfg cmds #345
OCPEDGE-1689: Include Arbiter nodes in the API backends if there is only one master #344
OCPBUGS-48469: Include cloud platform specific parameters to argument list for corednsmonitor #341
Revert “OPNET-629: Use HAProxy monitor endpoint instead of API” #342
OPNET-629: Use HAProxy monitor endpoint instead of API #336
OCPBUGS-48194: Bump logrus version #338
OCPBUGS-45431: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.19 #335
OCPBUGS-44694: Extend haproxy-monitor fall time #334
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-53106: Get installer image from configMap for node-image command #2005
OCPBUGS-52164: Add the generation of initrd.addrsize and generic.ins file for ABI Day2 Artifacts #2007
NO-JIRA: adm release new: simplify writePayload #2008
COS-3023: Fixing rpmdiff permissions when running in container #2006
COS-3023: pkg/cli/admin/release/info: support generating RPM diffs #1966
NO-JIRA: adm release new: simplify writePayload #1997
NO-JIRA: adm release new: simplify no operator error condition #1999
OCPBUGS-54168: Use ProxyFromEnvironment when creating HTTP transport #1995
NO-JIRA: debug: suggest nsenter instead of chroot #1991
OCPBUGS-53389: Use fedora image in unit tests instead of centos #1992
OCPBUGS-23514: status: Adjust impact summary for Failing=Unknown #1989
OCPBUGS-52504: pkg/cli/admin/upgrade/recommend: Populate RESTConfig #1987
NO-JIRA: Bump x/oauth2 and x/crypto #1984
OCPBUGS-51254: Bump indirect dependency go-jose to 4.0.5 version #1983
NO-ISSUE: pkg/cli/admin/upgrade/recommend: Configureable version for test fixtures #1981
NO-ISSUE: Test case for lowercase Jira ticket names #1964
NO-ISSUE: pkg/cli/admin/upgrade/recommend: “Upstream” -> “Upstream update service” #1980
trt-1995: Update Unconditional Feature Gate Notation #1979
OCPBUGS-50682: OCPBUGS-50683: Correct oc adm top pvc messages #1974
WRKLDS-1653: Update k8s dependencies to 1.32 #1971
OTA-1426: pkg/cli/admin/upgrade: Check and display interesting alerts #1970
NO-JIRA: Sanitize tar header name as it is used in path #1969
OCPBUGS-49450: Address github.com/docker/docker CVE #1960
NO-ISSUE: admin/upgrade/status/examples/README: Document *-alerts.json #1959
OCPBUGS-38975: monitor should not exit for temp api disconnect #1949
NO-ISSUE: Remove experimental tag for –report and –pxe #1956
OCPBUGS-46361: Mark adm pod-network command as hidden and depcated #1955
OTA-1393: status: recognize multi-arch in node phase (2) #1933
OCPBUGS-19824: release new: replace 0.0.1-snapshot in all manifests #1945
OCPBUGS-18961: pkg/cli/admin/release/extract_tools: Enable ImageRegistry, etc. on 4.13-to-4.14 #1539
OCPBUGS-45991: Mark –report and –pxe flags as experimental #1951
OCPBUGS-45311: fix oc adm node-image create –pxe command to copy the correct artifacts #1931
OCPBUGS-45754: Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.19 #1946
NO-JIRA: adm release: simplify safe manifests mappers #1942
OCPBUGS-45454: Update to 4.19 and Go 1.23.0 #1938
NO-JIRA: adm release: clarify manifest processing #1936
OCPBUGS-45363: adm node-logs: Also parse logs when encountered with standard html header #1934
NO-JIRA: adm release: simplify image-references check #1930
OTA-1393: status: recognize multi-arch in node phase #1928
OCPBUGS-45022: Obfuscate sensitive data in Proxy resource while inspection #1929
OTA-1393: status: recognize multi-arch in target version #1926
no-jira: Documentation fix: add missing whitespace character #1911
NO-JIRA: adm release: simplify manifest iteration #1917
OTA-1393: status: compute mcoImagePullSpec only once #1924
Full changelog

cloud-credential-operator

OCPBUGS-55204: Revert “Merge pull request #848 from jstuever/OCPBUGS-53429” #854
OCPBUGS-53429: Render: configure proxy on bootstrap static pod #848
OCPBUGS-53824: update github.com/golang-jwt/jwt #836
NO-JIRA: Report the error when syncing STS secrets #827
OSASINFRA-3657: Add support for storing OpenStack CA bundles #780
OCPBUGS-52505: golang.org/x/oauth2 v0.28.0 #821
CCO-647: Enable readOnlyRootFilesystem on all containers #819
OCPBUGS-52507: github.com/go-jose/go-jose/v4 v4.0.5 #823
NO-JIRA: Add dry-run on aws create-all command #818
NO-JIRA: add example of how to build from source #820
CCO-629: Update modules to latest #817
NO-JIRA: docs: rotate oidc key to use less opinionated CLUSTER_NAME #816
CCO-631: Upgrade to k8s v0.32.0 #814
CCO-626: pkg/operator/utils: Log diff on CredentialsRequest status change #811
OCPBUGS-47466: golang.org/x/net v0.33.0 #803
OCPBUGS-45699: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.19 #796
OCPBUGS-41727: Add AWS region to aws-pod-identity-webhook #789
NO-JIRA: docs: rotate azure key to use more accurate variable commands #797
NO-JIRA: Fix JSON for 07-block-public-access-to-oidc-bucket.json #762
OCPBUGS-44933: Add retry to ccoctl gcp create functions #781
NO-JIRA: docs: rotate oidc key to specify azure storage account variables #790
OCPBUGS-44999: github.com/golang-jwt/jwt/v4 v4.5.1 #782
Full changelog

cloud-network-config-controller

OCPBUGS-45891: Increase API call timeout to 30 second #168
CNTRLPLANE-112: Remove ARO HCP MIv2 authentication from CNCC #169
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #166
OSASINFRA-3755: Prefer CA cert from credentials secret #167
OCPBUGS-53201: Revert “CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller” #164
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #161
SDN-5690: Rebase k8s to 1.32 #163
OCPBUGS-45631: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.19 #160
Full changelog

cluster-authentication-operator

OCPBUGS-51203: fix logo not being correctly aligned in Webkit #758
OCPBUGS-48176: Avoid duplicate OAuth client creation #757
OCPEDGE-1510: feat: add minimum count for DualReplica #761
OCPEDGE-1610: bump(kube,library-go,ocp/api): #759
NO-JIRA: Keycloak e2e test improvements #714
OCPBUGS-51981: fix: update starter path to account for mom integration #760
CNTRLPLANE-71: update cao to manage rolebindingrestriction crd #748
AUTH-541: OIDC structured auth config #713
CONSOLE-4434, OCPBUGS-43610: update login templates to use PF6 and add validation #751
NO-JIRA: OWNERS: update approvers #756
MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #752
OCPBUGS-48177: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #753
OCPEDGE-1306: feat: change minimum for arbiter ha deployments #734
NO-JIRA: fix: resolve some integration tests #750
API-1835: bring MOM up to date for testing and the like #744
Full changelog

cluster-autoscaler

OCPBUGS-54231: Fix cool down status condition to trigger scale down #355
OCPCLOUD-2835: rebase on upstream 1.32.0 release #340
NO-JIRA: improve nodes listing in ClusterAPI provider #354
OCPBUGS-11115: refactor findScalableResourceProviderIDs #349
OCPBUGS-11115: improve failed machine detection in clusterapi #347
OCPBUGS-11115: make DecreaseTargetSize more accurate #343
OCPBUGS-11115: improve replica counting on openshift #278
OCPCLOUD-2500: Update to recognize both upstream and openshift ScaleFromZero annotations #335
PODAUTO-266: Update VPA dockerfile to 4.19 #334
OCPBUGS-25852: UPSTREAM: <carry>: 🐛(metrics) Initialize metrics for autoscaler errors, scale events, and pod evictions #332
OCPBUGS-45686: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.19 #331
OCPBUGS-45565: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.19 #330
OCPBUGS-45075: VPA OWNERS: Remove John Kyros, et al., add Max Cao #322
Full changelog

cluster-autoscaler-operator

OCPCLOUD-2829: Bump k8s 1.32 #339
OCPBUGS-45451: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.19 #336
Full changelog

cluster-baremetal-operator

OCPBUGS-53330: Update BMO to latest #468
OCPBUGS-52216: Bump x/oauth2 to 0.27.0 #463
OCPBUGS-51275: Add new resources to controller relatedObjects #465
OCPBUGS-44839: Mount the user-ca-bundle into ICC #455
OCPBUGS-51275: add missing relatedObjects #461
METAL-1286: Remove legacy unused annotation exclude.release.openshift.io/internal-openshift-hosted #462
OCPEDGE-1607: feat: add arbiter node selector #460
OCPBUGS-36357: Replace watches with actual Watches #452
OCPBUGS-45418: Use go version 1.23 and OCP 4.19 base image #457
Full changelog

cluster-bootstrap

OCPEDGE-1683: feat: add support for arbiter and dual replica: #116
OCPBUGS-48821: bootstrap API server should terminate only after API is HA #111
OCPBUGS-45351: Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.19 #110
Full changelog

cluster-capi-controllers

OCPCLOUD-2860: Enable propagation of Machine annotations to Nodes #233
OCPCLOUD-2680: Enable machine to node propagation #229
NO-JIRA: Update manifests generator tooling #232
OCPCLOUD-2680: Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.5 (068c0f3) into master #231
OCPCLOUD-2857: Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.4 (79e6731) into master #230
OCPBUGS-45428: Updating ose-cluster-api-container image to be consistent with ART for 4.19 #228
Full changelog

cluster-capi-operator

OCPBUGS-54970, OCPBUGS-55349: Ensure CAPI machine when machine authority is CAPI #288
NO-JIRA: Prevent caching CAPI objects across namespaces #285
METAL-966: Reapply “Merge pull request #175 from honza/add-metal3” #284
OCPCLOUD-2648: Machine sync controller deletion logic #278
OCPCLOUD-2713: Handle credential fields in both mapi2capi and capi2mapi #282
OCPCLOUD-2564: add migration controllers #268
OCPBUGS-54972: Revert #175 “METAL-966: Add metal3 provider” #283
OCPCLOUD-2880: label selector and labels conversion, fixes to sync controllers and conversions #281
METAL-966: Add metal3 provider #175
OCPCLOUD-2895: Add AWS networkInterfaceType to conversion #280
OCPCLOUD-2712: Update comments based on Security Group Investigation #279
OCPCLOUD-2716: Handle Machine owner references translation between MAPI and CAPI #271
NO-JIRA: Bump github.com/golang-jwt/jwt to v5.2.2 #275
OCPCLOUD-2647: CAPI to MAPI Machine Synchronisation #265
NO-JIRA: Update version variable in generate-ocp-manifests hook script #277
NO-JIRA: fix: e2e: azure conditionally set identity #276
TRT-2048: Revert “OCPCLOUD-2792: corecluster: set controller level conditions + tests” #273
OCPBUGS-53057: Fix misspelled CAPI IBMPowerVSCluster kind name in corecluster generation logic #266
OCPCLOUD-2858: Bump dependencies to CAPI v1.9.z #270
NO-JIRA: Update TODOs with new Jira issues #269
OCPCLOUD-2718: Add default VolumeSize for MAPI to CAPI conversion #260
OCPCLOUD-2792: corecluster: set controller level conditions + tests #256
OCPCLOUD-2645: MAPI to CAPI Machine synchronization #258
NO-JIRA: Add lifecyclehook script that updates manifests-gen #264
NO-JIRA: Remove unused Dockerfile #255
OCPCLOUD-2824: Add manifest generation script for rebasebot #257
OCPCLOUD-2792: Repurpose unsupported controller to a broader clusteroperator one #254
MULTIARCH-5043: Add Powervs support for CAPI-MAPI conversion #216
OCPBUGS-29815: fix: always update clusteroperator status versions when differing #248
OCPCLOUD-2642: Reference ASO image for installation #235
OCPBUGS-45392: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.19 #241
OCPCLOUD-2202: Create and manage core cluster object #236
OCPCLOUD-2787: Add missing CustomNoUpgrade to manifests #244
OCPCLOUD-2644: MAPI to CAPI MachineSet synchronization #237
OCPCLOUD-2787: Updates migration controller cmd #243
OCPCLOUD-2787: Updates migration cmd to change metrics port #242
OCPCLOUD-2787: Deploy manifests for CustomNoUpgrade feature-set #238
OCPCLOUD-2647: Updates machine-api-migration cmd #239
MULTIARCH-5151, MULTIARCH-5152: Generate IBMPowerVSCluster resource for CAPI clusters #233
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-54427: Add rbac leases rbac for cloud-provider on Azure stack hub #387
OCPBUGS-41827: update injector to use a secret rather than an environment variable #380
OCPBUGS-41827: update injector to support secret as well #385
OCPBUGS-48481: annotation validation policy #379
OCPCLOUD-2843: AWS CCM should be configured with the AWS cloud provider config #384
OCPCLOUD-2831: Bump k8s 1.32 #382
OCPCLOUD-2843: Add AWS Cloud Config Transformer to set Shared config for AWS LB health probes #383
OCPCLOUD-2844: Add role/binding for new Azure AKS lease #381
OCPBUGS-44126: update azure permissions #376
OCPBUGS-45439: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.19 #377
OCPBUGS-45439: Update golangci-lint to v1.62.2 #378
Full changelog

cluster-config-api

Move from JoelSpeed/kal to kubernetes-sigs/kube-api-linter #2297
OCPBUGS-48286: feature-gates - enable ServiceAccountTokenNodeBinding #2139
OPRUN-3766: Add FeatureFlag for OLMv1 Single/OwnNamespace #2264
MCO-1518: Create V1 MachineConfigNodes API & deploy V1 MCN CRDs #2255
Fix broken ControlPlaneMachineSet integration tests #2296
OAPE-148: Promote CPMSMachineNamePrefix feature gate to default feature set #2254
features: remove ShortCertRotation from DevPreviewNoUpgrade #2270
NE-2017: Enable GatewayAPIController featuregate in Default featureset #2284
OCPCLOUD-2914: Add MAPI to CAPI migration to TechPreview #2279
OCPEDGE-1775: Enable separation of conflicting enum values, and drop DualReplica to DevPreview #2283
OAPE-92: Promote RouteExternalCertificate feature gate to default feature set #2268
CONSOLE-4523: Lift Featuregate for the ConsolePlugin ContentSecurityPolicy API #2275
MON-4071: GA MetricsCollectionProfiles #2286
CNTRLPLANE-332: Add uid and extra claim mappings for external OIDC configuration #2234
Promote OnClusterBuild featuregate to default #2192
trt-2080: check devlopment start date for latest release #2285
NE-2009: Re-enable GatewayAPI featuregate in Default featureset #2281
TRT-2081: Revert #2261 “NE-2009: Enable GatewayAPI featuregate in Default featureset” #2277
Temporarily pin feature-gate-analyzer to 4.19 #2276
image/v1/types: improve documentation #2240
NE-2009: Enable GatewayAPI featuregate in Default featureset #2261
SPLAT-2078: Removed VSphereStaticIPs feature gate #2232
OPRUN-3780: Add feature flag for NewOLMPreflightPermissionCheck #2242
SPLAT-2079: Removed VSphereControlPlaneMachineSet feature gate #2236
MCO-1630: Generate v1 crds for PIS #2257
IBMCloud: Add IBM Cloud CAPI install TechPreview FG #2104
NO-ISSUE: tools: bump openshift controller-tools to latest commit #2260
NO ISSUE: Tombstone Spec.PinnedImageSets in MCN v1alpha1 API #2256
OCPNODE-2877: Remove support to configure cgroupsv1 in OCP #2181
Ignore partial manifests when running schemacheck #2251
MCO-1543: Update v1alpha1 MCN API #2201
Migrate DeepCopy and Compatibility gen to Gengo v2 #1776
CCXDEV-10455: update insightsDataGather to v1alpha2 with GathererConfig #2195
API-1843: FeatureGate(d) KMS encryption #2035
CONSOLE-4448, OCPBUGS-53412: Add the ability to specify a second custom logo for PatternFly 6 #2177
MCO-1521: Promote PinnedImageSet to GA #2198
Remove inactive reviewers and ex-Red Hatters from OWNERS, add everettraven #2238
Update KAL and remove patch strategy tags #2241
STOR-2141: add MaxAllowedBlockVolumesPerNode field to VSphereCSIDriverConfigSpec #2190
MCO-1590: Add explicit opt-out & status field for boot image update configuration #2223
API-1689: features: add ShortCertRotation #1977
NE-1954: Introduce GatewayAPIController feature gate #2219
CCXDEV-14850: insights add storage spec #2200
Support SEV_SNP and TDX confidential instance type selection on GCP #2165
OCPBUGS-48641: config/v1/types_cluster_version: Explain image and version both set #2158
OCPEDGE-1512: feat: add dualreplica featuregate #2196
STOR-2267: Add SELinuxMount and SELinuxChangePolicy to DevPreview #2212
Add changes to infrastructure object to contain service endpoints and feature flag added #2078
security: add annotation for validated SCC type #2211
NO-JIRA: Add example of excluding subnets pattern #2213
OCPNODE-2339: Add PKI field to (cluster)imagepolicy #2088
OCPBUGS-50587, OCPBUGS-51272: Reject new NodeStatus with revision set #2208
Fix FeatureGateNewOLMCatalogdAPIV1Metas spelling error #2214
OCPBUGS-32158: Add CEL validation for RegistrySources in Image API #1859
no-jira: correct default CIDR for ipv6 join subnet in API descriptors #2184
featuregate for catalogd metas web api #2202
CORS-3842: Add API Updates for GCP Custom API Endpoints #2150
NO-JIRA: bump controller-tools dependency to latest downstream commit #2207
SPLAT-2000: Add configuration for vSphere multi disk thinProvisioned #2154
NE-1871: Promote GatewayAPI to Tech Preview #2081
OCPBUGS-44199: Allow spaces in AWS tags #2124
OCPBUGS-48542: Remove Never option from IPsec Encapsulation #2199
OCPBUGS-42701: api: Updated the disableMultiNetwork parameter description #2143
ClusterOperator Conditions should be a listType=map #2194
Add the field “MarketType” to “AwsMachineProviderConfig” #2172
SDN-4930: Graduate UserDefinedNetworks to GA #1997
OCPBUGS-49779: Use BASE_REF env var to pull the release version for sippy data #2187
OCPBUGS-48078: Add ratcheting tests for PowerVS service endpoints #2142
NO-JIRA: upkeep: update component name for arbiter feature #2182
NO-JIRA: Add envtest archives for K8s 1.32.1 #2185
OTA-209: operator/v1alpha1: Add the ClusterVersionOperator to scheme #2162
OCPBUGS-45689: Updating ose-cluster-config-api-container image to be consistent with ART for 4.19 #2118
OCPBUGS-48740: Remove unnecessary object-src directive #2176
OSASINFRA-3690: Fix typo #2168
OAPE-94: Update API doc for route externalCertificate #2159
Fix race in tests using CRD patches for ratcheting #2175
OCPBUGS-39148: Add Feature Gate AND on NetworkLoadBalancer CEL #2131
Drop feature promotion from main verify check #2174
Add separate Make target for feature promotion #2173
Change OCL CRD deployment to v1 from v1alpha1 #2134
OCPBUGS-48260: Update dns1123Subdomain validation message for machineNamePrefix #2147
CNTRLPLANE-2: Update kubernetes to 1.32 #2096
Fix handling of validations that require multiple feature gates #2133
Update KAL to introduce statussubresource and maxlength linters #2160
OCPBUGS-48740: Add missing CSP directives #2163
SPLAT-2008: Update vSphere multi disk api size limit doc #2161
Monitoring Config should start life as v1alpha1 #2155
OSASINFRA-3689: Deprecate unused MAPO fields #1963
Update linter fixing to use golangci-lint #2141
CNV-47438: ipam, virt: graduate persistent ips feature gate to GA #2058
SPLAT-1808: Add vSphere multi disk support #2028
Add the option to test ratcheting validations within integration tests #2132
MCO-1443: Promote onclusterbuild to GA #2090
MON-3902: add initial Monitoring CRD api #1929
Add section about why we start APIs as v1alpha1 #2130
Add verify-lint-fix make target #2126
Add path warning for protobuf updates #2129
Update KAL with bug fixes for embedded fields #2128
OCPBUGS-40906: Add encapsulation flag to IPsecConfig struct #1472
OCPBUGS-43745: Add IdleCloseOnResponse field to IngressControllerSpec #2102
Update KAL to introduce new linters #2125
OTA-1029: Add ClusterVersionOperator API #2044
OCPBUGS-46380: StaticPodOperatorStatus validation should reject downgrades and concurrent node rollouts #2123
alert-relabel list should not be a pointer #2122
OCPBUGS-35196: Insights types - fix duration validation #1918
OCPEDGE-1307: feat: add HighlyAvailableArbiter control plane topology as feature for techpreview #2082
API-1843: KMSEncryptionProvider Feature Gate #2071
ClusterNetworkOperator API: promote the additionalRoutingCapabilities gate #2087
For the love of consistency… Apply linter auto-fixes #2116
Introduce KAL (Kube-API-Linter) to API repo #2114
Revert “OCPBUGS-44693: Disable ResilientWatchCacheInitialization” #2113
SPLAT-1743: vSphere - add host and vm based zonal #1999
CFE-1167: Feature-gated MachineNamePrefix field for CPMS #2086
OCPBUGS-44693: Disable ResilientWatchCacheInitialization #2111
Add example format validation #2110
SPLAT-1743: Add VMGroup to VSphere Provider workspace #2074
Update kubebuilder assets to include format library #2109
CFE-1168: Add CMPSMachineNamePrefix feature-gate #2094
STOR-1823: Remove CSIDriverSharedResource feature gate #2052
Full changelog

cluster-config-operator

OCPEDGE-1833: feat: bump api dep to pull in change in DualReplica #439
OCPBUGS-52744: Bump golang.org/x/crypto #433
OCPEDGE-1643: bump: ocp/api ocp/library-go k8s #431
OCPBUGS-45477: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.19 #430
OCPEDGE-1308: bump(api,k8s) #428
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-55017: Wait for operators to be stable for 2 minutes before accepting cluster is stable #358
OAPE-163: Extend E2E tests for MachineNamePrefix when the field is reset #355
SPLAT-2079: Removed VSphereControlPlaneMachineset feature gate #354
OAPE-147: Add E2E tests for MachineNamePrefix with OnDelete update strategy #353
OCPBUGS-52224: Bump to golang.org/x/oauth2@v0.27.0 #352
OAPE-126: Include CPMSMachineNamePrefix feature-gate name in e2e tests #351
OCPBUGS-50580: Fix MachineNamePrefix periodic on OpenStack #349
OCPCLOUD-2834: Update dependencies to K8s 1.32 #345
SPLAT-1817: Bump openshift/api to get vSphere multi disk support #335
SPLAT-1799: Add support for vSphere host and vm group based zonal #325
NO-JIRA: Update support matrix #339
OAPE-78: Add e2e periodic job for machine name prefix #338
OAPE-19: Support customized control plane machine names with prefix #332
OCPBUGS-45449: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 4.19 #334
OAPE-18: Bump openshift/api to vendor machineNamePrefix field #333
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2126: Enable readOnlyFileSystem #229
STOR-1880: Role and ClusterRole with too wide permissions #235
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #234
STOR-2281: Remove csi-snapshot-validation-webhook references #231
OCPBUGS-24588: bump library-go #233
STOR-2252: Bump all deps #228
OCPBUGS-45073: Support HCP labels #223
STOR-2136: Enable volume groupsnapshots APIs v1beta1 version #219
OCPBUGS-45471: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.19 #220
Full changelog

cluster-dns-operator

OCPBUGS-51193: Add runbook_url for CoreDNSErrorsHigh #426
OCPBUGS-45558: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.19 #425
Full changelog

cluster-etcd-operator

OCPEDGE-1773: Fix arbiter field in install-config #1409
OCPBUGS-53512: fix CVE-2025-30204 #1412
OCPBUGS-54222: increase etcdGRPCRequestsSlow duration #1402
OCPEDGE-1498: support updates to external etcd #1399
OCPEDGE-1500: Added scaling strategies for TNF #1396
OCPBUGS-48523: Bump to Kubernetes 1.32 and latest library-go. #1392
OCPBUGS-48400: generate event upon successfull bootstrap member removal #1391
NO-JIRA: fix schedule backup test #1393
OCPBUGS-48523: Bump library-go for static pod controller apply migration fixes. #1387
OCPEDGE-1195: Arbiter node support #1366
OCPEDGE-1435: bump(library-go,ocp/api,ocp/client-go) #1378
OCPBUGS-42809: always ensure quorum during bootstrap #1372
ETCD-677: add unsupported config override for etcd container removal #1352
OCPBUGS-43748: etcd pod containers do not start when tls min version is 1.3 #1364
Full changelog

cluster-image-registry-operator

OSASINFRA-3747: Prefer CA cert from credentials secret #1190
OCPBUGS-45409: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.19 #1196
CNTRLPLANE-112: Authenticate to Azure only once in CPO #1194
CNTRLPLANE-112: Bump msi-dataplane dependency #1187
CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication #1186
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-image-registry #1174
NO-JIRA: update owners #1178
OCPBUGS-50950: ensure that storage names don’t end in dashes #1177
OCPBUGS-47503: Power VS: Revert #1076 to match new API validation #1168
MULTIARCH-4971: Set import mode in image config based on ClusterVersion desired Architecture #1164
OCPBUGS-44491: add runbook url on prometheus alert rules #1159
OCPBUGS-41903: operator/status: clear azure path fix job conditions on operator removal #1142
Full changelog

cluster-ingress-operator

CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication for Ingress Operator #1222
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-ingress #1191
NE-2009: Relax pod bound validating admission rule for HyperShift #1221
NE-1969: Set Degraded=True if unmanaged Gateway API CRDs exist #1205
NE-1957: Add Gateway API DNS Feature e2e tests #1213
OCPBUGS-54650, OCPBUGS-54651, OCPBUGS-54652: desiredSubscription: Specify annotations and SCC #1214
NE-2009: Move VAP to Default featureset #1216
OCPBUGS-54568: desiredIstio: Specify priorityClassName #1211
OCPBUGS-53424: Wait for install plans to enter the “Requires Approval” phase before approving them #1203
NE-2008: Add GRPC conformance tests #1208
NE-1277: status: Add Gateway API objects to relatedObjects #933
NE-1994: Add E2E test for Istio manual deployment #1204
NE-1969: Add “v1” version to OpenShift GatewayClass controller name #1202
NE-1934: Bump to OSSM 3.0 for Gateway API support #1152
CORS-3907: Update ingress operator to with custom endpoints #1197
NE-1953: Add experimental Gateway API group to Validating Admission Policy #1200
NE-1907: Manage OSSM operator subscription manually to ensure a compatible version is installed #1112
NE-1981: Move controller test helpers to dedicated package #1199
NE-1953: Add Validating Admission Policy for Gateway API CRDs #1192
NE-1954: Implement GatewayAPIController feature gate #1198
NE-1936: Bump k8s.io dependencies to v0.32.1 #1184
OCPBUGS-31550: Gateway API - recreating SMCP which breaks Gateway API #1115
OCPBUGS-32776: Fix IBM Public Cloud DNS Provider Update Logic #1133
OCPBUGS-48780: Fix IBMCloud DNS Propagation Issues in E2E #1164
OCPBUGS-43745: Skip Test_IdleConnectionTerminationPolicyDeferred when DCM feature gate is enabled #1186
NE-1260: Add Makefile target to run Gateway API conformance tests #1176
OCPBUGS-43745: Add support for IdleCloseTerminationPolicy (Go http.Client) #1182
OCPBUGS-45585: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.19 #1173
OCPBUGS-41892: Single Watch on GWAPI CRD #1165
NE-1790: Follow up to enable Dynamic Configuration Manager feature gate #1174
SPLAT-1722: Remove alibaba #1111
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-45911: revert dev cert rotation #1835
Revert “OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects” #1830
OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects #1759
CNTRLPLANE-347: Issue short lived certificates if ShortCertRotation featuregate is enabled #1823
MON-4161: add cluster:controlplane_topology:sum recording rule #1829
MON-4160: operator: add topology metrics #1827
OCPBUGS-35102: Bump library-go #1824
NO-JIRA: readme: describe mapping between operatorLogLevel and log level #1820
AUTH-541: OIDC structured auth config #1760
OCPNODE-2940: add support for minimumKubeletVersion #1754
MON-4129: slos: accomodate for Prometheus v3 “le” normalization #1815
MON-4129: revert https://github.com/openshift/cluster-kube-apiserver-operator/pull/1784 #1817
NO-ISSUE: Bump TraceAll log level to v=10 #1814
OCPBUGS-48673: targetconfigcontroller: check live etcd endpoints #1792
API-1689: TLS registry: add description #1763
OCPBUGS-49980: change one sum:apiserver_request:burnrate5m to sum:apiserver_request:burnrate6h #1804
OCPBUGS-49763: Disregard health endpoints in the burn rate alerts #1742
OCPQE-28167: Increase waitForFallbackDegradedConditionTimeout #1789
OCPBUGS-49764: bindata/alerts/slo: improve burnrate calculation #1744
OCPBUGS-48686: bump(library-go) #1795
MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in rules defs and relabel config to accommodate the update to Prometheus v3 #1784
NO-JIRA: alerts: update APIRemovedInNextEUSReleaseInUse for 1.32 #1794
CNTRLPLANE-20: Update to Kubernetes 1.32.1 #1791
OCPBUGS-45654: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.19 #1786
OCPBUGS-48686: Bump library-go for static pod controller apply fixes. #1787
NO-JIRA: bump library-go #1779
OCPBUGS-45943: skip generating certs when networkConfig.status.ServiceNetwork is nil #1776
CNTRLPLANE-1: Add resource.k8s.io/v1beta1 API for Kubernetes 1.32 #1777
NO-JIRA: Revert Disable ResilientWatchCacheInitialization #1771
OCPBUGS-44693: Disable ResilientWatchCacheInitialization #1769
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-45390: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.19 #56
ACM-14968: Modified readme for cert-manager changes. #55
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-54945: Bump library-go #838
STOR-2267: Run SELinux warning controller #834
NO-JIRA: readme: describe mapping between operatorLogLevel and log level #835
NO-JIRA: readme: describe mapping between logLevel and log level #833
NO-ISSUE: Bump TraceAll log level to v=10 #828
OCPBUGS-48701: Bump to latest library-go #831
CNTRLPLANE-21: Update to Kubernetes 1.32.1 #830
OCPBUGS-48701: Bump library-go for static pod controller apply fixes. #829
OCPBUGS-45825: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.19 ++ #826
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-54945: Bump library-go #560
OCPBUGS-48700: Bump to latest library-go #558
CNTRLPLANE-22: Update to Kubernetes 1.32.1 #557
OCPBUGS-48700: Bump library-go for static pod controller apply fixes. #556
OCPBUGS-45724: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.19 #554
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-45640: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.19 #122
API-1835: bump library-go #120
OCPBUGS-20062: “gracefully” shutdown KSVM pod. #118
Full changelog

cluster-machine-approver

OCPCLOUD-2832: Bump k8s 1.32 #268
OCPBUGS-48056: Fix race condition in CO status controller test #264
OCPCLOUD-2787: Deploy CAPI manifests in CustomNoUpgrade #262
OCPBUGS-36404: Filter CSRs by signerName #243
OCPBUGS-45434: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.19 #247
OCPBUGS-45306: Ensure trailing dots on DNS names do not block serving cert auth #253
OCPBUGS-45306: Client internal DNS checks should ignore trailing dot #248
Full changelog

cluster-monitoring-operator

OCPBUGS-55737: [release-4.19] MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2597
NO-JIRA: Synchronize versions of the downstream components #2594
MON-4207: Bump prometheus-operator to v0.81.0 #2593
NO-JIRA: [bot] Synchronize versions of the downstream components #2589
MON-4161: add topology telemetry signals #2588
MON-4126: set fallbackScrapeProtocol: ‘PrometheusText1.0.0’ as default for all UWM Prometheus targets for backward compatibility with Prometheus v2 until a better migration process is available #2590
MON-4150: chore: update prometheus-operator go dep #2586
OCPBUGS-54516: provide context-rich and case-sensitive config validation #2584
MON-4149: chore: update library-go #2587
OCPBUGS-54223: Fix opentelemetry processor/receiver/exporter/extensions labels #2583
MON-4188: Add docs for proxy_url alertmanager #2582
NO-JIRA: [bot] Synchronize versions of the downstream components #2577
MON-4189: Updating node-exporter accelerators configmap #2558
MON-4043: Configuring external Alertmangers with proxy_url #2580
MON-4136: set up the PrometheusPossibleNarrowSelectors alert #2554
MON-3960: test: enable back TestTLSSecurityProfileConfiguration and m… #2545
NO-JIRA: chore: versions: kubeRbacProxy’s primary branch isn’t main yet #2574
OU-515: remove old nginx configmap deletion #2575
NO-JIRA: Bump prometheus-operator to 0.80.1 #2572
MON-4147: test: remove unnecessary UWM configuration in TestUserWorkloadMonitoringXXX #2567
OCPBUGS-50837: Fix opentelemetry metrics to use regexp on label match #2568
OCPBUGS-50703: Add incidents metric to telemetry #2569
NO-JIRA: Bump prometheus-operator to v0.80.0 #2565
MON-3866: create separate metrics client cert for metrics server #2536
NO-JIRA: tweak asciiDocs formatting to ease the mapping into the monitoring Docs #2563
OCPBUGS-48381: jsonnet: switch telemeter to main #2560
OCPBUGS-48376: jsonnet: switch openshift-state-metrics to main branch #2559
OCPBUGS-48370: chore: rename default branch in various places #2561
NO-JIRA: [bot] Synchronize versions of the downstream components #2531
OCPBUGS-48074: Fixing telemetry rule for accelerators #2551
MON-4107: chore: add logs (at v=3 level) regarding the deactivation of components #2546
OCPBUGS-31356: chore(client): DeleteXXX short-circuit if the resource doesn’t exist as a GET is less expensive than a no-op DELETE #2547
MON-4118: chore: use alertmanager v2 in tests as v1 is not longer supported in Prometheus 3 #2544
NO-JIRA: fix TestPrometheusRemoteWrite to align the image used for th… #2543
NO-JIRA: Bump prometheus-operator to 0.79.2 #2542
MGMT-19498: Fixing the configmap data fields #2540
NO-JIRA: Bump prometheus-operator to v0.79.1 #2538
MGMT-19498: Adding accelerators configuration file to the node-exporter #2530
OCPBUGS-35095: unpin kubernetes-mixin #2422
OCPBUGS-45389: update image to be consistent with ART for 4.19 #2533
OCPBUGS-35726: remove certificate hash annotation for monitoring-plugin #2524
OCPBUGS-45179: Use explicit name label for logging telemetry metrics #2529
NO-JIRA: [bot] Synchronize versions of the downstream components #2527
OCPBUGS-44831: disable token automount for alertmanager-user-workload SA #2522
NO-JIRA: use scrape class to avoid TLS config repetitions #2492
Full changelog

cluster-network-operator

OCPBUGS-55285: bindata,ovn-k,cudn: Validate loclanet topology’s excludeSubnet match specified subnets #2692
OCPBUGS-40906: Implement IPsec NAT-Traversal encapsulation option #2573
OCPBUGS-55090: Configures subdirectory based CNI chain loading #2690
OCPBUGS-54238: Update CSR status condition appropriately #2674
CORENET-5914: bindata,ovn-k: Update CUDN CRD following localnet support #2678
SDN-5701: [multus-networkpolicy] Update CRD to the latest v1beta1 #2668
CNF-16707: frr-k8s: wire the frr-status sidecar container #2687
CORENET-5856: Update RouteAdvertisements schema #2685
OCPBUGS-54837: Add missing backendAddressPools read permission on azure #2684
CORENET-4481: update install-cni script #2676
SDN-5342: Signer username validation #2560
OCPBUGS-53180: Add IPv6 NGINX configuration #2681
CNF-16707: frr-k8s: Add BGPSessionState CRD #2671
SDN-5689: Rebase k8s v1.32 #2656
OCPBUGS-54159: frr-k8s: tolerate all taints #2677
OCPBUGS-5241: Auto opt in for whereabouts-controller #2670
OCPBUGS-52280: Move to use newer IPsec DaemonSets irrespective of MCP state #2454
CNTRLPLANE-112: Update managed Azure HCP cloud network config #2647
OCPBUGS-52972: Correct namespace ref and cert dir #2665
NO-JIRA: ovn-k: sync EgressService with upstream #2664
OCPBUGS-52361: frr-k8s: rename validatingwebhook name #2659
SDN-4829: Add machine config watchers to report IPsec status #2383
NP-1100: Enable fast ranges #2648
NO-JIRA: Add “centos” to supported OS ids #2652
SDN-5330: Keep rendering OVN IPsec when its daemonset not available #2628
OCPBUGS-49746: ovn-k,cudn crd: Ensure matching toplogy and topology-config #2638
OCPBUGS-48312: frr-k8s: align manifests with operator #2615
OCPBUGS-49621: Fix UDN and CUDN hostSubnet validation #2636
OCPBUGS-49667: OVNK should be able to annotate network ID on NADs #2634
OCPBUGS-46564: Update egressfirewall CRD to be consistent with ovn-kubernetes repo #2610
SDN-5426: ©UDN CRD: add IPAM section and IPAM.Mode field. #2623
SDN-5330: Keep IPsec in OVN enabled during the upgrade #2621
OCPBUGS-48425: ovn-k, rbac: Enable users read & modify UserDefinedNetwork CRs #2619
SDN-4930: Fix user-defined-networks-namespace-label binding #2616
SDN-4930: Add host isolation mounts to ovnkube-node #2591
SDN-4168: Cleanup ipsec state only when ipsec is not full mode #2611
OCPBUGS-42609: Disable adding/removing the UDN namespace label #2612
SDN-5085: Add support for route advertisements #2442
CNF-15518: Bump the openshift api version #2586
OCPBUGS-46065: Skip including default crypto policies to avoid authby issue #2590
OCPBUGS-33656: Remove ip xfrm state when IPsec is disabled #2372
OCPBUGS-45341: iptables-alerter daemonset should run everywhere #2581
OCPBUGS-42189: Re-disable metrics server #2516
OCPBUGS-44950: Propagate HCP pods labels to 2nd level operands #2567
Full changelog

cluster-node-tuning-operator

Fixed rcu_nocbs cpu parsing (#1317) #1317
Use cpuset.CPUSet for reserved, isolated and offline fields (#1321) #1321
Make the e2e/basic/modules.go test reentrant (#1322) #1322
Enhance hugepages validation error message (#1320) #1320
Bump to k8s 1.32.3 (#1318) #1318
Unblock production image generation (#1319) #1319
OCPBUGS-54628: Add retry method if we hit jira rate limit (#1313) #1313
Ignore -server-ose repos in the CI (#1314) #1314
CNF-17417: Enhanced utility function for fetching container runtime (#1279) #1279
Obsolete pod label-based matching (#1304) #1304
Revert “e2e: skip RHEL-79032 jira issue in irqbalance (#1312)” (#1315) #1312
Remove pinning of all dependencies (#1309) #1309
e2e: arm: Add kernel page size e2e testing suite (#1307) #1307
e2e: skip RHEL-79032 jira issue in irqbalance (#1312) #1312
CNF-16638: Reduce code duplication of RPS enabled checks (#1301) #1301
Add observedGeneration to Profile status (#1305) #1305
Manage TuneD profiles with the same name and different content (#1216) #1216
OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) #1303
NO-JIRA: PPC: unit: test sortTopology for expected output (#1217) #1217
Switch builder image to multi-arch image (#1297) #1297
CNF-16742: kernelPageSize + hugepages combinations validation (#1296) #1296
machineconfig: add support for various hugepage sizes. (#1295) #1295
E2E: Add test to verify runc uses valid cpus (#1088) #1088
OCPBUGS-49823: Support hugepage size selection for ARM-based clusters (#1294) #1294
OCPBUGS-49403: E2E: Add configuration tests related to align cpus by uncorecache feature (#1291) #1291
OCPBUGS-48530: E2E: Add test cases to verify PerPodPowerManagement with PPC (#1284) #1284
Fix hack/test-tuned-fdp.sh (#1285) #1285
Add missing Polarion test case id (#1280) #1280
use ROLE_WORKER_CNF environment variable to determine mcp name (#1261) #1261
CNF-16267: Add kernel page size field (#1262) #1262
OCPBUGS-46584: Adjust Workload Hints test cases based on Intel or AMD (#1258) #1258
PPC: correct EnableHardwareTuning flag value (#1269) #1269
E2E: Tuned deferred test automation (#1230) #1230
hypershift: Refined mixed_cpus suite for Hosted Clusters (#1173) #1173
Update OWNERS file (#1260) #1260
E2E: Add hypershift support to container runtime config tests (#1229) #1229
NO-JIRA: e2e: common way to fetch poolName (#1255) #1255
e2e:labels: fix typo and adding type (#1256) #1256
e2e: add irdma to module_blacklist kernel args (#1249) #1249
OCPBUGS-45421: Linter fixes (#1253) #1253
e2e: tuned degraded test fix (#1246) #1246
OCPBUGS-44372: cmd: PPC: support tolerating heterogeneous core IDs (#1236) #1236
OCPBUGS-45346: performanceprofile cpuset input validation (#1231) #1231
OCPBUGS-45264: Normalize cpu sets when rendering to Tuned profiles (#1232) #1232
CNF-15505: Remove container runtime selection (#1219) #1219
Move reboot tests to appropriate make target for hypershift (#1224) #1224
Full changelog

cluster-olm-operator

OPRUN-3821: Add FeatureFlag for OLMv1 Single/OwnNamespace #110
OCPBUGS-54877: Increase debug logging level for op-con/catd #114
OPRUN-3782: Watch for permissions preflight feature gate #113
OCPBUGS-54781: Revert #111 “OPRUN-3782: Watch for permissions preflight feature gate” #112
OPRUN-3782: Watch for permissions preflight feature gate #111
OCPBUGS-54179: Add openshift node selector annotation #109
OPRUN-3690: Watch for new upstream feature gate APIV1MetasHandler #104
NO-ISSUE: Update to k8s v0.32.2/v1.32.2 #108
OCPBUGS-51357: Revert “(vendor) Bump openshift/api” #106
NO-ISSUE: Bump kubernetes and openshift/api dependencies #105
OPRUN-3663: Watch and reconcile feature gates changes #102
OCPBUGS-49410: extend clusterrole with permissions for OCP observability #103
OCPBUGS-45425: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.19 #94
NO-ISSUE: Fixing some nitpicks #98
OCPBUGS-45098: Add infomer for proxy.config.openshift.io #93
NO-ISSUE: bump all bingo build dependencies #96
NO-ISSUE: Remove m1kola from owners #97
NO-ISSUE: Adding Lalatendu Mohanty as approver #91
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-48177: Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #612
MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #611
OCPBUGS-45701: Updating ose-cluster-openshift-apiserver-operator-cont… #607
NO-JIRA: Revert Disable ResilientWatchCacheInitialization #604
OCPBUGS-44693: Disable ResilientWatchCacheInitialization #603
OCPBUGS-23435: bump library-go to bring in workload-conditions fix #600
Full changelog

cluster-openshift-controller-manager-operator

WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #381
OCPBUGS-47528: Add team members to the OWNERS file #373
OCPBUGS-45698: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.19 #372
API-1835: bump library-go #370
Full changelog

cluster-policy-controller

CNTRLPLANE-55: Add MinimallySufficientPodSecurityStandard annotation to namespaces #161
WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #160
MON-3866: chore: csr: Add approver for monitoring CSRs issued for metrics-server #148
OCPBUGS-45829: Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.19 ++ #159
Full changelog

cluster-samples-operator

OCPBUGS-54590: Samples Operator should sort failing image imports #627
OCPBUGS-54589: Adding filter to clusterOperatorInformerEventHandler #626
OCPBUGS-54591: only update LastTransitionTime if operator status change #625
OCPBUGS-54471: Periodic sync of supported OCP samples #622
OCPBUGS-54479: Periodic sync of OKD samples #621
OCPBUGS-54349: cluster-samples-operator - fix failing unit tests MacBook (ARM chip) #618
OCPBUGS-54216: Update the k8s API version #614
OCPBUGS-54347: add rhdmalone to owners #616
OCPBUGS-54149: Updates to README.md #613
OCPBUGS-52848: Unrevert the revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #609
OCPBUGS-52848: Unrevert the revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #608
OCPBUGS-52848: Revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #606
OCPBUGS-52848: Revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #607
OCPBUGS-52379: relevant references to master renamed in README.md #603
OCPBUGS-52346: bump x/oauth2 to version 0.27.0 #602
OCPBUGS-45049: Adding mutex to func createSamples on handler.go #601
OCPBUGS-30313: Removing reference of registry.access.redhat.com #592
OCPBUGS-48182: add shannon and aroyoredhat as owners #593
OCPBUGS-45597: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.19 #591
Full changelog

cluster-storage-operator

NO-JIRA: correct cinder operator CredentialsRequest name #577
OCPBUGS-54491: sync Azure File permissions with upstream docs #576
STOR-2078: Enable VolumeAttributesClass for GCP-PD #574
OSASINFRA-3731: openstack: Consume CA cert from CCO secret #557
STOR-2126: Enable readOnlyFileSystem #564
STOR-1878: Run operators without root user control #570
STOR-1881: Role and ClusterRole with too wide permissions #569
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #568
OCPBUGS-24588: bump library-go #566
STOR-2252: Bump all deps #554
CFE-1131: Added token minter Sidecar for aws-ebs hypershift-deployments #528
OCPBUGS-50668: fix Vsphere cluster Storage operator in Unavailable state #556
STOR-2078: VolumeAttributesClasses typo in resources #550
OCPBUGS-45073: Support HCP labels #551
STOR-2078: Typo in clusterRole resources for VolumeAttributesClasses #549
OCPBUGS-45617: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.19 #546
OCPBUGS-45737: Remove unecessary resources from the guest cluster #544
STOR-2078: Add RBAC rule for Volumeattributesclass #545
STOR-2078: Add OPERATOR_IMAGE_VERSION var to AWS-EBS operator #542
Full changelog

cluster-update-keys

NO-JIRA: Updating openshift-ci-release-key for 2 years #70
Full changelog

cluster-version-operator

OTA-1403: Add an always passing test case #1172
NO-JIRA: make verify #1177
OCPBUGS-23514: Failing=Unknown upon long CO updating #1165
NO-JIRA: manifests: make template manifests valid YAML #1171
OTA-1488: Remove USC code #1176
OTA-1488: Remove DevPreview USC manifests #1175
NO-JIRA: Fix some issues identified by yamllint #1174
OTA-1403: Create minimal openshift tests extension #1168
NO-JIRA: Add unit test for renderManifest #1173
OTA-1403: Move the CVO CLI Application to a Separate Folder #1169
OTA-209: Add CVOConfiguration controller #1163
OTA-1427: Reconcile all nodes via a special event #1164
OCPBUGS-52258: pkg/cvo/updatepayload: Context around ValidateDirectory calls #1166
NO-JIRA: Use k8s.sets for the fields of ClusterCapabilities #1159
OTA-1427: Recompute node insights when MC/MCP changes #1144
OTA-209: Add ClusterVersionOperator manifests #1161
OTA-1418: Decribe informer->usc communication #1162
NO-JIRA: Rename fields in ClusterCapabilities for readability #1157
OTA-1427: Polish reason and message in Node’s status insight #1145
NO-JIRA: Refactor for readability #1131
OCPBUGS-50498: cvo: improve error handling on port collision #1160
NO-JIRA: Update ClusterOperator Status Conditions to listType=map #1149
OTA-861: Generate an accepted risk for Y-then-Z upgrade #1093
NO-JIRA: Fix a few AMD64-oriented tests on Non-AMD64 machines #1156
OTA-1418: USC: Drop unknown insights after grace period #1150
NO-JIRA: status: extract API types to a package #1155
OTA-209: Bump github.com/openshift/client-go #1147
OTA-209: Resolve lint issues #1148
OTA-1418: Allow forcing health insights on CV #1141
OTA-1339: USC: Pull latest UpdateStatus API code #1138
OTA-1427: USC: Maintain status insights for Nodes #1136
OTA-1427: Add hack/test-usc-integration.sh to start testing USC in CI #1142
OTA-1411: USC: Maintain status insights for ClusterOperator resources #1135
OTA-209: Bump github.com/openshift/api #1130
OCPBUGS-45922: CONTRIBUTING.md: Rename master to main #1125
OTA-1269: USC: Add DevPreviewNoUpgrade-gated manifests #1107
NO-ISSUE: Simplify the preconditions code #1127
OCPBUGS-45777: Updating cluster-version-operator-container image to be consistent with ART for 4.19 #1123
OCPBUGS-44860: pkg/payload/precondition/clusterversion: New GiantHop update precondition #1112
OCPBUGS-45324: deps: bump golang.org/x/net to 0.31.0 #1115
OCPBUGS-31462: Set openshift.io/required-scc: privileged annotation in version pods #1106
OTA-1307: pkg/cvo/updatepayload: Drop the Job controller for release-manifests downloads #1105
Full changelog

configmap-reloader

OCPBUGS-45705: Updating configmap-reload-container image to be consistent with ART for 4.19 #66
Full changelog

console

OCPBUGS-55702: fix bug where Critical Alerts section cannot be collapsed #15018
OCPBUGS-55814: Add DEVCONSOLE_PROXY flag #15027
OCPBUGS-55414: fix runtime error on MachineConfigPools page #15007
OCPBUGS-55448: Fix +Add details switch animation regression #15011
OCPBUGS-55454: Disable web terminal and Shipwright e2e #15012
OCPBUGS-53443: Check for ACM when hiding switcher #14988
ODC-7727: Change favourites button defaultName #14996
CONSOLE-4492: fix: do not render if listpageheader has no props #14995
OCPBUGS-55252: fix bug where tab underline is missing #14991
NO-JIRA: Deprecate react-router-dom-v5-compat #14994
OCPBUGS-54670: Use PF component group for PageHeading #14965
OCPBUGS-54833: fix spacing of secondary action in notification drawer… #14980
OCPBUGS-54976: Mark withHandlePromise HOC as Deprecated #14969
OCPBUGS-54656: Add space between quick start action list items #14940
OCPBUGS-54601: fix bug where operator appears twice #14983
OCPBUGS-45514: Add account email to the telemetry #14978
CONSOLE-4464: Update PatternFly to latest #14979
OCPBUGS-54657: Expose OdcBaseNode through the dynamic plugin SDK #14955
OCPBUGS-55047: align spacing after breadrcumb with PatternFly #14972
OCPBUGS-55018: fix web terminal initialize form style #14974
CONSOLE-4505: Update i18next package #14881
OCPBUGS-55084: fix bug where highlighting items from quickstart does … #14976
CONSOLE-4542: Remove base dl dd dt CSS #14966
CONSOLE-4541: deprecate VirtualizedTable and ListPageFilter and useLi… #14967
CONSOLE-4524: Allow Deletion of Identity Providers (IDPs) via OpenShift Web Console #14949
OCPBUGS-43792: Load extensions in same order as plugins listed in SERVER_FLAGS global #14902
ODC-7781: Running knative e2e tests from admin view #14952
OCPBUGS-54669: Enable project selector dropdown on Helm form in admin perspective #14956
OCPBUGS-54963: Fix visual regression with knative getting started card #14968
OCPBUGS-54536: Use router link for OLM CSV empty state #14929
CONSOLE-4492: Use helpText for help text #14964
OCPBUGS-54878: Align left/right margins of add card items #14963
CONSOLE-4542: Convert dl, dd, dt to PF DescriptionList #14947
CONSOLE-4538: Add error reporting link to ErrorBoundary modal #14958
OCPEDGE-1614: hack: allow DualReplica in control plane topology validation #14934
OCPBUGS-36658: Fetching taskRuns in PLR details page using PLR UID also #14921
CONSOLE-4507: Clean up catalog view #14954
CONSOLE-4520: Further PatternFly 6 bug fixes and cleanup #14945
CONSOLE-4464: Update PatternFly to 6.2.0 #14953
OCPBUGS-49870: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14887
OCPBUGS-54733: fix bug where co-resource-icon–fixed-width can clip #14950
OCPBUGS-52486: Notification drawer should have keyboard navigation focus when expanded. #14889
OCPBUGS-54540: fix flaking update-modal test #14937
OCPBUGS-54684: Remove orphaned notification drawer CSS class #14948
OCPBUGS-54492: metadata.name field is missing in PDB example YAML #14946
CONSOLE-4538: Use PF component groups for Error states #14912
ODC-7720: Further Developer Catalog -> Software Catalog renaming #14911
CONSOLE-4540: add set as default sc action #14920
ODC-7778: Include Quick create in Admin perspective guided tour #14850
CONSOLE-4393, ODC-6775: @types/node pre-merge prep #14932
OCPBUGS-46526: Add BaseNode in topology folder into Dynamic Plugin SDK #14907
OCPBUGS-54472: fix position of OpenShift Lightspeed button #14923
OCPBUGS-54461: Add missing href props to masthead items #14922
OCPBUGS-53065: Fix regression where normal Pod terminals are unresponsive. #14927
OCPBUGS-54540: fix flaking update-modal test #14930
OCPBUGS-53167: Re-enable guided tour in admin perspective #14928
CONSOLE-4520: Further base token cleanup and fixes #14909
OCPBUGS-54265: Remove extra div in MultiTabListPage #14906
OCPBUGS-54477: Remove char limit for favourite names #14924
OCPBUGS-47723: always show ‘Plugin available’ button on CSV list no matter plugin enabled or not #14655
NO-JIRA: adding new reference plugin: kuadrant #14361
OCPBUGS-54485: Add dark theme feedback graphic #14925
CONSOLE-4484: Fix Skip to content regression #14918
OCPBUGS-54436: Warning: React.useMemo has a missing dependency #14913
OCPBUGS-54430: Fix shifting play/pause button when loading #14916
OCPBUGS-46404: i18n translations for Export as CSV button #14651
OCPBUGS-52479: Fix OLM e2e tests #14851
OCPBUGS-20230: Prevent yaml editor crash #14676
CONSOLE-4464, ODC-7756: Bump PF6 to latest prereleases #14783
CONSOLE-4501: Add unit test for Timestamp component #14799
CONSOLE-4521: Remove old polyfills #14880
OCPBUGS-52948: Multiple favorite icon on same page #14863
OCPBUGS-53065: Debug pod logs are not accessible when debugging a node via OpenShift Console #14898
CONSOLE-4462: Remove two more overrides #14891
OCPBUGS-53227: fix bug where /k8s/all-namespaces/volumesnapshots 404s #14901
ODC-7770: Remove perspective switcher if only one perspective is present #14762
OCPBUGS-52938: ‘Helm Chart Repository’ name is used in breadcrumb link, details page heading and action names #14890
(chores) Add approvers #14895
OCPBUGS-52864: Edit form for key/value secrets should be showing decoded base64 values. #14852
ODC-7773: Add e2e tests for Favorites feature #14802
CONSOLE-4437: Add CSP test to the test-prow-e2e.sh #14858
RHSTOR-6927: Removes LSO static plugin from console #14740
OCPBUGS-53119: Add support for extensibility in SnapshotClass and StorageClass pages #14878
OCPBUGS-52489: Fixed the typo ‘enivornments’ on tour page #14857
CONSOLE-4081: Refactor EditSecret component #14853
OCPBUGS-53030: Fix type-only dynamic module import build warnings for plugins #14861
CONSOLE-3960: Migrate react-helmet to react-helmet-async #14876
CONSOLE-3247: Remove react-measure #14844
OCPBUGS-34737: Disable pipeline ci tests due to failure in task creation #14893
OCPBUGS-53103: Apply plugin-api-changed label to plugin SDK shared modules #14872
ODC-7776: Add getting started alert #14830
ODC-7766: Test updates pertaining to perspective merge #14717
CONSOLE-4515, CONSOLE-4516, CONSOLE-4517: Update react-modal, react-tagsinput #14874
OCPBUGS-53118: Include init containers in readiness count if ready and started is true #14877
CONSOLE-4461: Notification drawer move to Page props, fixing the small overlap on the notification drawer #14723
OCPBUGS-45847: Remove barrel file references in static plugin exposedModules #14683
OCPBUGS-52589: Fix hooks in CaptureTelemetry #14870
CONSOLE-3414: Fix flaky Loading tests #14873
OCPBUGS-53047: Disable guided tour in admin perspective #14866
OCPBUGS-52166: Fix sort function on Access review table #14848
OCPBUGS-52589: update @types/react to v17, use new JSX transform #14864
ODC-7775: Update content in Getting started resources on cluster and project overview page #14829
OCPBUGS-52325: fix Node Logs toolbar layout at mobile #14836
CONSOLE-4430: Content Security Policy E2E testing with Puppeteer & Chrome #14675
CONSOLE-3414: Replace Loading with PF Spinner #14842
ODC-7727: Add hover effect to favourites icon #14839
CONSOLE-4504: set LogViewer theme using console’s theme #14827
OCPBUGS-48491: Namespace is not persisting when switching to developer view from the topology page of admin page #14812
OCPBUGS-49348: Fix Secret form drag and drop issue #14798
OCPBUGS-37101: Remove logoutOpenShift method call #14658
OCPBUGS-52316: enable clicking outside NodeLogs Selects to close them #14826
OCPBUGS-52214: add missing v5 patternfly-addons.scss and patternfly-charts.scss styles #14813
CONSOLE-4409: Update monaco theming and sidebar logic #14835
CONSOLE-4503: Replace custom Banner with PatternFly equivalent #14825
OCPBUGS-52298: Add breadcrumbs to ODC Project details page #14824
OCPBUGS-51372: Filter ‘Name’ on resource list page doesn’t align well when language is set to Chinese/Japanese/Korean #14822
ODC-7727: Favoriting page in the Console admin perspective #14765
OCPBUGS-51355: VolumeSnapshots are not displayed in OpenShift Web Console #14820
CONSOLE-4498: Replace checkboxes with Switch in ResourceLog #14815
OCPBUGS-30973: Remove @ts-ignore comment missed in #14680 #14814
CONSOLE-4496: Replace custom Checkbox filter with PatternFly Switch #14807
OCPBUGS-51037: Update the monitoring topic used by the console team #14781
OCPBUGS-50650: Retain original path when detecting perspective #14810
CONSOLE-4407, CONSOLE-4409: Update monaco and YAML language server, use PF6 CodeEditor #14663
OCPBUGS-51076: Console UI Displays Incorrect Subscription Values #14790
CONSOLE-4399: Added ‘createdTime’ in Jobs.tsx #14786
OCPBUGS-48413: Sorted Links based on OS in CLI #14819
CONSOLE-4484: follow on fix to ensure Bottom ConsoleNotification are … #14806
NO-JIRA: Apply plugin-api-changed label on changes to the api package #14804
OCPBUGS-52180: Fix notification drawer close button error #14809
ODC-7724: Add guided tour in Admin perspective #14776
ODC-7769: Add Getting started section in project Overview page #14792
OCPBUGS-30973: Update @types/react-redux #14680
ODC-7725: Show perspective preferences option if more than one perspective are available #14644
OCPBUGS-51202: Fix Timestamp component #14793
OCPBUGS-46050: Determine if disabled a11y rules can be re-enabled #14643
CONSOLE-4484: Replace custom tabs with PF6 Tabs component #14760
OCPBUGS-48642: Check for unused modules in static plugins #14695
CONSOLE-4486: decrease TertiaryHeading margins in Edit resource limit… #14782
OCPBUGS-50546: Do not load CSRs if user does not have permissions #14771
OCPBUGS-36786: Force async package upgrade. #14775
OCPBUGS-50670: fix bold text issues and missing underline on inline link buttons on safari and firefox. #14766
NO-JIRA: Small demo plugin and plugin doc improvements #14779
CONSOLE-4489: fix bug where dropdown menu can overflow #14780
OCPBUGS-49996: add missing contextId to be able to inject tabs from plugins #14732
OCPBUGS-49778: Linkify OLM operator uninstall message #14713
OCPBUGS-50693: Show Observe section without PROMETHEUS and MONITORING flags #14697
CONSOLE-4467: replace html heading elements with PatternFly components #14767
OCPBUGS-50847: fix but where textarea can be expanded horizontally #14773
CONSOLE-4476: Remove various upstream workarounds #14756
OCPBUGS-45141: Store Topology sidebar alert in the localStorage #14700
NO-JIRA: Update Console dynamic plugin SDK doc and changelogs #14768
ODC-7735: Edit ci tests to have step to enable developer perspective #14684
OCPBUGS-50665: fix bug where Demo Plugin tab url is always appended #14764
CONSOLE-4079, CONSOLE-4080: Address tech debt in GenericSecretForm and KeyValueEntryForm components #14520
OCPBUGS-49381: Workloads-DeploymentConfigs-Add storage: i18n misses #14747
CONSOLE-4480: fix background color of Command Line Terminal tab #14759
OCPBUGS-48548: The secret created with Basic authentication has an incorrect type #14691
CONSOLE-4464: bump PatternFly 6 to latest available versions #14750
CONSOLE-4443: Upgrade dynamic-demo-plugin to PatternFly 6 #14682
OCPBUGS-48637: add support for “OpenShift Virtualization Engine” valid subscription filter on OperatorHub #14709
OCPBUGS-46088: [Hypershift] Filter by Node type list is empty #14704
CONSOLE-4477: more token updates #14752
OCPBUGS-49839: fix run time error when no completed version exists #14742
CONSOLE-4475: fix QueryBrowser tooltip styles #14751
CONSOLE-4469: improve layout and functionality of Edit upstream confi… #14734
OCPBUGS-43061: update the Deployment pod on change in imageStream #14523
CONSOLE-4474: Unbold pf-v6 labels by default #14748
CONSOLE-4465: add workaround for menu scroll #14745
CONSOLE-4473: fix alignment issues with Bootstrap radio and checkbox … #14739
CONSOLE-4472: fix QuickStart layout issues #14738
CONSOLE-4471: fix bug where close button can overlap guided tour popo… #14737
CONSOLE-4470: fix bug where Edit button is bold inside DetailsItem dt #14736
CONSOLE-4467: replace html heading elements with PatternFly components #14726
OCPBUGS-49988: Updating cypress config to have video enabled for the CI results #14731
OCPBUGS-46513: Fix issue with bridge flag for conditional CSP features #14727
OCPBUGS-47722: always show associated plugin name on CSV details page #14656
OCPBUGS-49718: Fix Pipeline Repository overview page close button #14708
ODC-7726, ODC-7767: Expose Topology components and utils to openshift-console/dynamic-plugin-sdk #14705
OCPBUGS-49919: Catalog card label should be right aligned #14722
NO-JIRA: Consolidate YAMLs Directory into yamls to Resolve macOS Case-Sensitivity Conflicts #14712
CONSOLE-4381: PatternFly 6 README updates #14729
OCPBUGS-49839: fix run time error when no completed version exists #14719
OCPBUGS-49366: fix bug where Search filter dropdown label isn’t i18n #14706
OCPBUGS-48635: fix/remove broken codeRefs #14694
OCPBUGS-46513: Add support for conditional CSP headers #14710
OCPBUGS-48608: Render refresh popover after adding CSP directive to the ConsolePlugin CR #14692
OCPBUGS-45029: dev-console cypress feature file test update #14685
NO-JIRA: update github username #14679
OCPBUGS-46438: Pipeline visualisation shows all tasks as Failed and after that goes to Running state #14628
OCPEDGE-1346: feat: bump api to pull in arbiter node infra #14469
OCPBUGS-45103: update variable name for plugin name parsing #14650
ODC-7720: Add dev perspective nav options to admin perspective #14588
OCPBUGS-48292: allow copying of dependency assets #14677
OCPBUGS-45325: Fix ns dropdown UI when web terminal is open #14609
CONSOLE-4379: remove PatternFly 4 shared modules #14671
CONSOLE-4076: Address tech debt in SourceSecretForm component #14633
CONSOLE-4077: Refactor BasicAuthSubform to be functional component #14631
OCPBUGS-2956: ‘create a Project’ button on Getting started page doesn’t work #14635
OCPBUGS-43661: Limit payload size of GQL query #14429
OCPBUGS-46511: fix navigation from non-General User Preference tab to… #14647
OCPBUGS-45371: Authenticate user token in openshift Authenticate func #14578
OCPBUGS-21755: Add catalog to operator installation route parameters and PackageManifest list request label selector #14632
OCPBUGS-45915: prefer OpenShift release version in telemetry events #14579
OCPBUGS-47778: Improving web terminal test failures #14657
OCPBUGS-46415: Append new errors via string instead of list #14653
OCPBUGS-46555: fix bug where two external link icons can appear in Op… #14648
ODC-7695: Fix and enable web-terminal tests #14308
OCPBUGS-45213: Fix BuildSpec details section heading font size #14554
OCPBUGS-47541: Incorrect capitalization for Lightspeed to capitalized LightSpeed in ja and zh langs #14646
OCPBUGS-46452: i18n upload/download routine task - sprint 263 #14629
OCPBUGS-46385: fix alignment of Font Awesome icons #14630
OCPBUGS-32406: Test Serverless function gives no response when function is not running #14610
OCPBUGS-46544: Post TypeScript upgrade changes #14634
OCPBUGS-46461: Test helm CI failures #14617
CONSOLE-4400: Upgrade TypeScript to v5 #14620
OCPBUGS-43671: Disable GQL introspection #14409
CONSOLE-4380: Remove more already-migrated code #14614
OCPBUGS-41676, OCPBUGS-41826: upgrade axe-core and cypress-axe #14311
OCPBUGS-28206: ERROR in search tool: Cannot read properties of undefined (reading ‘state’) #14600
CONSOLE-4378: remove orphaned PopupKebabMenu code #14594
CONSOLE-4377: update to use new DropdownItemProps from PatternFly 5 #14593
CONSOLE-4376: remove orphaned ClusterConfigurationDropdownField code #14592
OCPBUGS-45787: Installing operator with a + in the version name doesn’t work #14602
OCPBUGS-37058: i18n: Missing translations for “PodDisruptionBudget violated” string #14586
OCPBUGS-45468: Updating openshift-enterprise-console-container image to be consistent with ART for 4.19 #14581
OCPBUGS-45104: update release note link #14543
OCPBUGS-23924: Render TaskRun results even when failed #14414
ODC-7710: Remove @console/rhoas-plugin #14577
OCPBUGS-45802: fix Number input focus layout issue #14597
CONSOLE-4380: Use AlertsRulesDetailPage from monitoring-plugin #14596
OCPBUGS-45848: Throw warnings when guessModuleFilePath is needed to guess file extensions #14599
OCPBUGS-45319: Add customData field to the HorizontalNav component #14575
OCPBUGS-45606: ‘Channel’ and ‘Version’ dropdowns do not collapse if the user does not select an option. #14590
CONSOLE-3905: (deps) upgrade to webpack 5 #14378
OCPBUGS-44059: Run check-resolution in parallel #14453
OCPBUGS-38543: OCP web console show pod status as Init:0/1 after using Native sidecars #14313
OCPBUGS-44920: save all window.windowErrors for easier debugging #14547
OCPBUGS-45198: fix bug where ConsolePlugins list does not display if … #14583
OCPBUGS-45242: fix runtime error when backend service details don’t e… #14582
OCPBUGS-45296: Add Telemetry to the OLS Import to Console feature #14562
OCPBUGS-44254: Bump pkijs from 2.1.89 to 2.1.90 #14470
OCPBUGS-36212: Missing translation for ““Read write once pod (RWOP)” ja and zh #14565
OCPBUGS-43859: Getting Oh no, something went wrong error when trying to install operator. #14526
OCPBUGS-44800: Add Dynamic Plugins nav item #14521
OCPBUGS-32033: Fix Function Import: An error occurred Cannot read properties of undefined (reading ‘filter’) #14134
OCPBUGS-13685: use default StorageClass for ServerlessFunction pipelineVolumeClaimTemplate #14130
OCPBUGS-44595: only enable Save button in Console plugin enablement m… #14532
OCPBUGS-41974: ImagePullSecret getting duplicated when editing DeploymentConfig in Form View #14531
OCPBUGS-44898: i18n upload/download routine task - sprint 262 #14502
OCPBUGS-44265: ReRun of Resolver based PipelineRuns fails from UI #14471
OCPBUGS-43830: Expand “Rollback Helm Release” status width #14448
ODC-7698: Replace CopyPipelineRunButton with PF5 design #14413
OCPBUGS-39388: Filter out empty params before Shipwright build creation #14514
OCPBUGS-39359: Add optional build strategy params under ExpandCollapse #14540
Full changelog

console-operator

ODC-7780: update quick starts to work in the converged perspective #977
OCPBUGS-55082: Revert “Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads” #979
CONSOLE-4523: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #976
NETOBSERV-2023: Implement a quickstart for netobserv operator #955
CONSOLE-4481: Add additional CSP test #975
OCPBUGS-45514: Report email_domain to telemetry #971
CONSOLE-4481: Add junit generation for unit and e2e testing #974
ART-12521: update go mod dependency for konflux #973
NETOBSERV-2029: add netobserv ConsoleCLIDownload #958
OCPBUGS-53164: Add annotations to Enable developer perspective quick start to include in the console quick starts #970
ODC-7723: Add quick start to enable developer perspective #968
CONSOLE-4508: Enable CSP e2e test #969
OCPBUGS-51256: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #965
OCPBUGS-51379: Re-revert Report email_domain to telemetry + fix panic for uninitialized mail value. #964
OCPBUGS-45514: Report email_domain to telemetry + fix panic for uninitialized mail value. #962
OCPBUGS-51156: Revert #950 “OCPBUGS-45514: Report email_domain to telemetry” #961
OCPBUGS-45514: Report email_domain to telemetry #950
OCPBUGS-48536: Bump documentationBaseURL to 4.19 #956
OCPBUGS-48740: Vendor the missing CSP directives #960
OCPBUGS-46513: Add ConsolePluginContentSecurityPolicy feature gate to… #957
OCPEDGE-1345: feat: add arbiter node support for HA #939
OCPBUGS-45722: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.19 #946
OCPBUGS-45222: Dont disable console when authConfig type is set to None #944
OCPBUGS-44953: don’t set current clients when no OIDC providers are configured #945
OCPBUGS-44362: Remove the v1alpha1 schema for ConsolePlugin CRD #942
OCPBUGS-44556: console/status: set initial value of Message field #940
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-37212: Upstream sync 15042025 #183
OCPBUGS-53198: Upstream sync 01-04-2025 #180
OCPBUGS-53198: Sync 25-03-2025 #177
OCPBUGS-45272: Ds merge 3/7/25 #175
OCPBUGS-48190: Ds merge 2/5/2025 #173
Full changelog

coredns

OCPBUGS-45467: Updating coredns-container image to be consistent with ART for 4.19 #131
OCPBUGS-39559: Updating coredns-container image to be consistent with ART for 4.18 #130
OCPBUGS-36454: Rename Dockerfile.openshift.rhel7 to Dockerfile.ocp #128
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

ART-12521: update go mod dependency for konflux #320
NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into master #311
OCPBUGS-45433: Updating csi-driver-manila-container image to be consistent with ART for 4.19 #317
OCPBUGS-45739: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.19 #318
OCPBUGS-45412: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.19 #316
Full changelog

csi-driver-nfs

NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #153
OCPBUGS-45714: Updating csi-driver-nfs-container image to be consistent with ART for 4.19 #150
Full changelog

csi-external-attacher

STOR-2251: Rebase external-attacher to v4.8.1 for OCP 4.19 #83
OCPBUGS-41719: UPSTREAM: 624: Reorder API calls after successful detach #82
OCPBUGS-45401: Updating csi-attacher-container image to be consistent with ART for 4.19 #81
Full changelog

csi-external-provisioner

STOR-2251: Rebase external-provisioner to upstream v5.2.0 for OCP 4.19 #111
OCPBUGS-51561: bump golang.org/x/crypto to v0.36.0 #112
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #113
OCPBUGS-49805: Fix the managed-by-label getting populated with invalid value #110
OCPBUGS-46727: CVE-2024-45338: bump golang.org/x/net to v0.34.0 #109
OCPBUGS-46125: CVE-2024-45337: bump golang.org/x/crypto to v0.31.0 #108
OCPBUGS-45735: Updating csi-provisioner-container image to be consistent with ART for 4.19 #107
Full changelog

csi-external-resizer

STOR-2251: Rebase external-resizer to upstream v1.13.2 for OCP 4.19 #169
OCPBUGS-45706: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.19 #167
Full changelog

csi-external-snapshotter, csi-snapshot-controller

STOR-2251: Rebase external-snapshotter to v8.2.1 for OCP 4.19 #177
STOR-2281: Remove csi-snapshot-validation-webhook #175
Full changelog

csi-livenessprobe

STOR-2251: Rebase livenessprobe to v2.15.0 for OCP 4.19 #71
OCPBUGS-45588: Updating csi-livenessprobe-container image to be consistent with ART for 4.19 #70
Full changelog

csi-node-driver-registrar

STOR-2251: Rebase node-driver-registrat to v2.13.0 for OCP 4.19 #78
OCPBUGS-45712: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.19 #77
Full changelog

docker-builder

OCPBUGS-45492: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.19 #467
OCPBUGS-43812: Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 #458
OCPBUGS-48741: Buildah dependency bump to v1.39.0 #455
OCPBUGS-48667: Bump golang.org/x/crypto dependency to 0.31.0 #432
OCPBUILD-174: Clean Up Containerfiles #414
OCPBUILD-174: Always Build with -mod vendor #415
OCPBUGS-47526: Add team members to the OWNERS file #419
OCPBUILD-174: Refresh CONTRIBUTING Guide #416
OCPBUGS-45321: skipping some unit tests to avoid failures as they are duplicate #412
Full changelog

docker-registry

IR-522: disable aws region check #425
NO-JIRA: chore: update owners file #424
OCPBUGS-25981, OCPBUGS-38874: bump docker-distribution to add new regions #419
OCPBUGS-45414: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.19 #417
Full changelog

driver-toolkit

test/e2e: adapt for layered node image (#167) #167
Getting the kernel version from the kernel-rt-core-* file. (#165) #165
Adding pull-secrets to the oc adm release info... command. (#164) #164
Pulling the DTK image from the CI registry instead of quay.io. (#163) #163
OCPBUGS-48156: Assert right rt version at build time (#161) #161
Using jq instead of yq in the e2e job. (#162) #162
Extending the e2e job to validate the kernel-rt versions matches. (#160) #160
Updating driver-toolkit-container image to be consistent with ART for 4.19 (#159) #159
Full changelog

egress-router-cni

OCPBUGS-53096: Build openshift container based on 4.19 image #89
Full changelog

etcd, installer-etcd-artifacts

ETCD-726: Rebase etcd 3.5.21 openshift 4.19 #324
OCPBUGS-52181: Ensure cluster id changes during force-new-cluster #313
OCPBUGS-50510: Add configurable option for hardware-related timeout delay #311
OCPBUGS-45488: Updating ose-etcd-container image to be consistent with ART for 4.19 #306
ETCD-717: Rebase etcd 3.5.19 openshift 4.19 #315
DOWNSTREAM: <carry>: OCPBUGS-51838: fix a compaction induce latency issue #309
ETCD-709: Rebase etcd 3.5.18 openshift 4.19 #308
Full changelog

gcp-cloud-controller-manager

OCPCLOUD-2845: Merge https://github.com/kubernetes/cloud-provider-gcp:master (1316392) into master #74
OCPCLOUD-2845: Merge https://github.com/kubernetes/cloud-provider-gcp:master (54cd0bb) into master #69
OCPBUGS-43089: Do not check for PodCIDR when determining if node is in the default subnetwork. #72
OCPBUGS-45407: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.19 #70
Full changelog

gcp-cluster-api-controllers

ART-12521: update go mod dependency for konflux #240
OCPCLOUD-2856: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.9.0 (b822ce2) into master #239
NO-JIRA: Update manifests generator tooling #238
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.8.1 (737b737) into master #237
OCPBUGS-45614: Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.19 #234
Full changelog

gcp-machine-controllers

CORS-3906: Update MAPI GCP Provider to use custom GCP endpoints #111
OCPCLOUD-2882, OCPCLOUD-2889: Provision AMD SEV-SNP and Intel TDX confidential instances #110
OCPBUGS-46387: add a3 instance types to gpu quota validation logic #102
OCPBUGS-17079, OCPBUGS-44671: Disable shielded VMs for non-UEFI disks #108
OCPCLOUD-2840: Bump k8s 1.32 #109
OCPBUGS-43531: Refactor exists() to handle gcp API change #101
OCPBUGS-45923: update a2 gpu detection logic to be dynamic #98
OCPBUGS-45733: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.19 #96
Full changelog

gcp-pd-csi-driver

OCPBUGS-39258: UPSTREAM: 2021: Add Attach Limit for Hyperdisk + Gen4 VMs #77
STOR-2257: Rebase to upstream v1.17.4 for OCP 4.19 #75
OCPBUGS-45567: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.19 #73
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-53451: enable VolumeAttributesClass #145
OCPBUGS-54336: Bump library-go #144
CORS-3911: Add custom endpoint args from infrastructure #141
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #140
STOR-2252: Bump all deps #139
OCPBUGS-48100: Rename master branch to main #138
OCPBUGS-45400: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.19 #136
Full changelog

gcp-workload-identity-federation-webhook

OCPBUGS-45458: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.19 #7
Full changelog

haproxy-router

OCPBUGS-45759: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.19 #644
OCPBUGS-45702: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.19 #643
OCPBUGS-39403: Fix parseIPList to Continue Processing After Invalid IPs and Return Valid IPs #621
OCPBUGS-45290: Reject All CA-Signed Certs Using SHA1 #642
OCPBUGS-47761: Update default_pub_keys.pem to use SHA256 #646
OCPBUGS-43745: Add support for IdleCloseTerminationPolicy #639
NO-JIRA: Update OWNERS file to reflect current team #645
OCPBUGS-38078: Validate HAProxy health check interval time value #618
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPBUGS-55265: Bump 1.32.4 #2275
OCPBUGS-37706: allow TLS1.3 or modern profile to be specified #2135
OCPBUGS-53249: skip UDP LoadBalancer on external #2247
OCPBUGS-54426: Fix implementation of ContainsCIDR to allow non-equal addresses #2263
OCPBUGS-52410: Propagate error when creating CustomResourceStorage instead of panicking #2216
TRT-1854: fix OVNKubernetes network skips #2256
STOR-2285: Update group snapshot test rules #2254
OCPBUGS-54339: UPSTREAM: 129808: e2e: bump port-forward timeout #2257
TRT-1836: UPSTREAM: <carry>: remove old k8s-tests external binary #2178
OCPBUGS-45273: Properly annotate networking skip according to Jira ticket #2235
OCPBUGS-53014: Bump 1.32.3 #2241
TRT-1854: translate test annotations to use: include/exclude CEL, labels, filtering #2215
STOR-2285: UPSTREAM: <carry>: Add volume group snapshot test driver #2232
OCPBUGS-44693: Revert “disable ResilientWatchCacheInitialization feature” #2192
OCPBUGS-52477: Revert #2229: Initialize testContext before enumerating tests #2236
NO-JIRA: Initialize testContext before enumerating tests #2229
UPSTREAM: <carry>: OCPBUGS-45274: Enable PodRejectionStatus test #2231
OCPBUGS-45274: UPSTREAM: 130097: Modify how to check the status #2228
OCPBUGS-45214: Add groupsnapshot tests #2155
OCPNODE-2940: add minimumkubeletversion admission package #2201
TRT-1854: Update openshift-tests-extension version #2214
OCPBUGS-45359: Unskip recover volume expansion failure tests #2218
OCPBUGS-45241: UPSTREAM: <carry>: Re-enable temporarily disabled port-forward test #2213
OAPE-96: UPSTREAM: <drop>: bump openshift/api@107848b719c5 #2217
OCPNODE-2940: add minimumkubeletversion package #2104
CNTRLPLANE-1: Bump 1.32.2 #2209
NO-JIRA: UPSTREAM: fix request Host storing in openshift.io/during-graceful audit log annotation #2119
OCPBUGS-41533: UPSTREAM: <carry>: util: inform the kubelet it has a new enough kernel for idmapped mounts #2168
TRT-1286: List images from external test binary #2177
OCPBUGS-46477: Disable ServiceAccountNodeAudienceRestriction feature gate and reenable Azure file tests #2202
TRT-1854: UPSTREAM: <drop>: ./hack/update-vendor.sh for openshift-tests-extension #2194
OCPBUGS-46038: UPSTREAM: 129180: prevent unnecessary resolving of iscsi/fc devices to dm #2171
OCPBUGS-48694: Don’t retry storage calls with side effects. #2191
NO-JIRA: Add benluddy to DOWNSTREAM_OWNERS. #2182
OCPBUGS-38121: OCPBUGS-39305: UPSTREAM: <carry>: log only deprecated api requests #2113
OCPBUGS-48177: UPSTREAM: <carry>: disable etcd readiness checks by default #2174
OCPEDGE-1314: feat: add arbiter node role #2109
CNTRLPLANE-1: downgrade grpc library to 1.65.0 #2190
OCPBUGS-48077, OCPBUGS-48078: Fix status ratcheting 4.19 #2167
OCPBUGS-48819: Fix Portworx plugin’s CSI translation to copy secret name & namespace #2185
CNTRLPLANE-1: Update to Kubernetes v1.32.1 #2147
OCPBUGS-48364: Update to Kubernetes 1.31.4 #2179
TRT-1836: Bug fixes for openshift-tests-extension #2142
OCPBUGS-45645: Updating openshift-enterprise-pod-container image to be consistent with ART for 4.19 #2154
OCPBUGS-44786: add support for the LLC alignment cpumanager policy option #2136
WRKLDS-1449: Update to Kubernetes v1.31.3 #2141
OCPBUGS-44896: Enable format library for 4.18 #2139
Full changelog

hypershift

OCPBUGS-55927: Fix Konflux enterprise contract violations #6126
OCPBUGS-55749: Fix mce-2.9 konflux pipelines #6117
Red Hat Konflux update hypershift-cli-mce-29 #6104
HYPBLD-642: konflux build hcp cli #6072
OCPBUGS-53206: Use a CPO image label to determine whether to run expired cert remediation #5943
OCPBUGS-55433: Add control plane pull secret reference to control-plane-operator SA #6092
OCPBUGS-44439: Add proxy trustedCA to ignition config #6053
OCPBUGS-53082: Skip AWS cleanup check for 4.14 and earlier #6069
HOSTEDCP-2254: Fix Karpenter deployment restarting #6009
NO-JIRA: Add e2e flags to test Azure KMS #6076
CNTRLPLANE-111: Support KMSv2 encryption encryption for ARO HCP, with MIv3 #6048
NO-JIRA: Azure AKS Docs Updated to set Secrets in Key Vault #5754
CNTRLPLANE-713: Pass featuregates for ocm and oapi in cpov2 #6071
HOSTEDCP-2059: Support capacity reservation in NodePool API #5972
NO-JIRA: Fix hostedcluster_controller unit test for featuregate job #6067
CNTRLPLANE-713: Pass featuregates to ocm and oapi #6068
CNTRLPLANE-713: Use feature flags from release payload for control plane workloads #6060
CNTRLPLANE-711: transition admissionregistration from v1beta1 to v1 #6005
AUTOSCALE-127: fix e2e autonode drift test #6062
CNTRLPLANE-112: Enable MIv3 for Ingress #6058
NO-JIRA: Remove kas from EnsureNoCrashingPods exceptions #5946
OCPBUGS-54863: Add annotation to configure KAS goaway-chance #6019
AUTOSCALE-193: Use payload karpenter image if present, otherwise don’t #6029
NO-JIRA: Red Hat Konflux update hypershift-release-mce-29 #6056
NO-JIRA: Add cpo container sync to verify job #6051
OCPBUGS-54867: Use 135 for terminationGracePeriodSeconds for v2 KAS #6021
OCPBUGS-54810: Don’t check if olm images exist if guest cluster #5982
OCPBUGS-54819: Update OpenShift apiserver liveness and readiness probe endpoints to … #6016
NO-JIRA: Add README.md to docs folder #6050
NO-JIRA: version check csi-snapshot-webhook for EnsureSATokenNotMountedUnlessNecessary #6043
OCPBUGS-54225: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #5897
NO-JIRA: Improve API docs for configuration.Image #6034
Revert “Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure”” #6012
OCPBUGS-54533: Update DNS names for ovn-kubernetes cp metrics #6007
OCPBUGS-54763: openstack/cli: only set port security when specified #6036
NO-JIRA: Bump o/api version to 4.19 tag #6035
OCPBUGS-54916: Set Azure KMS Configuration to v2 #6027
OCPBUGS-54309: Drop isIP CEL check #6032
AUTOSCALE-127: allow karpenter-provider-aws image to be overriden by hcp annotation #5999
CNTRLPLANE-217: Add E2E to KubeAPIServerDNSName API to cover KAS custom certificate #5968
STOR-2281: Remove snapshot webhook #6004
OCPBUGS-54763: openstack: set port security only if explicitly specified #6015
OCPBUGS-52661: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #5798
NO-JIRA: Bump CAPZ to v1.19.2 #6018
NO-JIRA: update konflux references #5987
OCPBUGS-48540: Mcd proxy #6011
AUTOSCALE-44: add autonode karpenter drift hcp upgrade e2e test #5870
OCPBUGS-54602: Set KAS GOMEMLIMIT node label to what OSDFM expects #5975
NO-JIRA: Add polling for kas-bootstrap kas network requests #5990
OCPBUGS-53261: Add validation to avoid conflicts between KubeAPI server and NamedCertificates SANs #5875
OCPBUGS-41853: Add documentation for API Server custom certificate in HCP #6001
OCPBUGS-54178: Add missing servicemonitors and prometheusrules permissions for non-OVN #5893
ARO-15695: test/e2e: run EnsureImageRegistryCapabilityDisabled on 4.18 #5984
NO-JIRA: Add OWNERS to kas-bootstrap #5991
CNTRLPLANE-233: Add –kas-dns-name CLI flag to consume KubeAPIServerDNSName API #5969
CNTRLPLANE-334: openshift/api dependency bumps #5971
NO-JIRA: Enable ppc64le builds #5985
OSASINFRA-3732: openstack: Sync CA cert to new key #5702
chore(deps): update golang docker tag to v1.24 #5616
OCPBUGS-54431: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5942
NO-JIRA: Sync labels between CPO and RHTAP CPO dockerfile #5966
OCPBUGS-52983: Add check for expected conditions before running NodePool tests #5970
NO-JIRA: test/e2e: output pod name on EnsureHCPPodsAffinitiesAndTolerations failure #5967
OCPBUGS-13292: Add functionality to limit CAPI CRD installation on HO installation #5949
OCPBUGS-54439: Change KASGoMemLimit to a string pointer type #5965
NO-JIRA: Red Hat Konflux update hypershift-operator-main #5974
NO-JIRA: Add doc on SecretProviderClass for managed Azure #5892
OCPBUGS-50562: Sync RBAC for attaching volumes on VM level #5831
CNTRLPLANE-303: [CPOv2 Refactor] Refactor ignition into cpov2 #5868
NO-JIRA: Create token Secret for dev cluster explicitly #5523
OCPBUGS-52984: annotate AWSEndpointServices with HostedClusterAnnotation #5960
OCPBUGS-53403: Remove synced annotations from HCP when they are removed from HC #5879
NO-JIRA: set default expriationDate tag in AWS if not set #5951
NO-JIRA: chore: Remove Azure autorest dependency #5917
CNTRLPLANE-378: Run kas-bootstrap binary for cpov2 #5947
NO-JIRA: Add version check for CAPI flag #5911
ARO-15578: add disable cluster capabilities flag to cluster create cmd #5775
NO-JIRA: chore: Bump CAPZ to v1.19.1 #5916
CNTRLPLANE-378: Move bootstrap apply bash into kas-bootstrap binary #5937
NO-JIRA: Disabling flaking EnsureKubeAPIDNSName E2E test #5939
NO-JIRA: Remove ppc64le from HO tekton files #5924
CNTRLPLANE-366: Create Azure role assignments in the Azure HC CLI #5896
OCPBUGS-53904: bump golang-jwt v4 and v5 #5904
CNTRLPLANE-350: add NodePool minor version compatibility check #5873
NO-JIRA: fix(api): Adjust CRD validation rules to account for ignition server … #5782
ART-11792: update go mod dependency for konflux #5918
CNTRLPLANE-112: Enable MIv3 for azure file csi driver #5915
NO-JIRA: Revert “OCPBUGS-50915: Disable capi machineset preflights” #5910
CNTRLPLANE-112: Fix CNCC RG Permissions & RBAC #5903
NO-JIRA: Remove TODO comment for AzureProviderConfig #5838
OCPBUGS-46379: Kas bootstrap bin #5871
CNTRLPLANE-111: Enable MIv3 for CAPZ #5825
ARO-15229: add e2e tests for image registry capability #5810
CNTRLPLANE-336: [CPOv2 Refactor] Refactor konnectivity-agent into cpov2 #5856
OCPBUGS-50915: Disable capi machineset preflights #5653
CNTRLPLANE-111: Authenticate to Azure only once in CPO #5862
OCPBUGS-52190: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #5876
NO-JIRA: Make serve-containerised in docs not defaulting to a running Docker container when Podman is installed #5859
OCPBUGS-53263: Fixed cpov2 reconciliation making no-op calls to api-server #5861
OCPBUGS-53462: Check for availability of individual catalog images #5881
NO-JIRA: Improve error output msg for Azure CLI role cmds #5877
STOR-2281: Remove csi-snapshot-validation-webhook #5776
CNTRLPLANE-111: Fix KMS Azure credentials mount path #5857
CNTRLPLANE-348: Konflux tagged releases #5869
OCPBUGS-53407: chore(deps): update konflux references #5846
NO-JIRA: feat(builds): Add area labels and OWNERS #5872
OCPBUGS-52424: Set shutdown watch termination grace period on kube-apiserver #5760
NO-JIRA: Add Azure scheduler doc to mkdocs #5865
CNTRLPLANE-342: Add missing area for support #5864
OCPBUGS-53050: Handle multiple mirror entries for source #5827
OCPBUGS-52331: CPO v2: rollout workloads on any changes to mounted configmaps/secrets #5767
NO-JIRA: openstack: revert OpenStackImageRetentionPolicy + use a unique image name per Hosted Cluster #5853
Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure” #5860
OCPBUGS-53083: e2e: detect leader election failure in restarted pods #5830
CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure #5837
METAL-1240: Fix kube-controller-manager and openshift-route-controller-manager services’ ipFamilies wrt PreferDualStack policy #5829
OSASINFRA-3492: feat(openstack): leverage ORC to manage the release image #5139
CNTRLPLANE-325: rootless containerized builds #5835
CNTRLPLANE-265: Enable gosimple, govet, and errcheck in golangci-lint #5759
CNTRLPLANE-111: Fix Azure KMS SecretProviderClass volume name #5820
NO-JIRA: Bump msi-dataplane dependency #5796
OCPBUGS-52985: filter watch events for HO AWSEndpointService reconciler #5818
NO-JIRA: Update Konflux references #5799
ARO-14354, ARO-14355, ARO-14356: introduce image registry capability behind feature gate #5456
OCPBUGS-52819: CPO Overrides for OCPBUGS-48519 #5808
PODAUTO-324: PODAUTO-325: Allow autonode to run upstream karpenter core e2e tests #5680
OCPBUGS-51364: fix oc patch command on doc #5807
NO-JIRA: Fix-dependabot-bumps #5797
OCPBUGS-52655: Add flag to set etcd storage size #5795
CNTRLPLANE-111: Fix KMS MIv3 Issues #5793
NO-JIRA: Disable GitHub Actions #5812
OCPBUGS-52821: stop using dev mode for loggers #5801
HOSTEDCP-2237: Auto approve Karpenter serving CSRs #5708
OLS-1370: Add full aws permission list and point to it from “getting started” #5746
NO-JIRA: CPOv2 token-minter abstraction #5769
NO-JIRA: test/e2e: skip WaitForImageRollout in executeNodePoolTest on newer releases #5778
OCPBUGS-52323: Make managed-trust-bundle optional #5763
CNV-57648: document how to configure descheduler #5779
NO-JIRA: Remove WI step for cluster-image-registry-operator #5777
OTA-1405: Add the ClusterVersionOperator API #5569
OCPBUGS-52419: e2e: don’t call WaitForImageRollout in executeNodePoolTest #5771
OCPBUGS-50518: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5475
CNTRLPLANE-263: Remove unused CAPZ CRDs from HyperShift install #5756
NO-JIRA: speed up image builds #5766
NO-JIRA: go.mod updates from Konflux #5761
OSASINFRA-3733: (follow-up) deploy ORC on release payload >= 4.19 #5749
OCPBUGS-52223: refactor aws identity health check into new controller #5751
OCPBUGS-50523: Fix audit-logs container to properly handle SIGTERM #5491
NO-JIRA: Remove issues-exit flag for golangci-lint #5762
CNTRLPLANE-111: Enable MIv3 for CP/CCM in managed Azure HCP #5755
NO-JIRA: Add CPO container sync check to GitHub Actions #5753
OCPBUGS-52226, OCPBUGS-52227: CVE Fix for potential denial of service in upstream libs #5750
NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 #5719
HOSTEDCP-2242: [CPOv2 Refactor] Refactor image-registry-operator #5676
NO-JIRA: chore(deps): update konflux references #5527 #5747
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5424
OCPBUGS-51364: Remove scaledown APIs from Backup/Restore procedure #5745
CNTRLPLANE-244: Enable initial GitHub Action jobs #5706
OCPBUGS-49825: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5551
OSASINFRA-3733: deploy ORC on release payload >= 4.19 #5710
CNTRLPLANE-112: Enable MIv3 for azure disk csi driver #5703
HOSTEDCP-2262: Karpenter openshift ec2class #5600
NO-JIRA: chore(owners): Update IBM reviewers #5717
CNTRLPLANE-111: Enable MIv3 for Azure KMS #5704
NO-JIRA: doc: openstack: update go version #5716
CNTRLPLANE-112: Enable image registry to use managed identity v3 #5655
HOSTEDCP-2246: [CPOv2 Refactor] Refactor OLM #5663
HOSTEDCP-2247: [CPOv2 Refactor] Refactor control-plane-pki-operator #5694
OCPBUGS-51007: test/e2e: fix WaitForImageRollout to actually wait on upgrade case #5679
NO-JIRA: Bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.5 #5700
OCPBUGS-50907: Propagate Reason for Available condition from HCP to HC #5650
NO-JIRA: Reenable ibm network cel #5698
NO-JIRA: ho: watch AWSEndpointServices #5674
NO-JIRA: test/e2e: use test name for HC name #5665
OSASINFRA-3719: openstack: ORC deployed out of tree #5584
CNTRLPLANE-35: skip EnsureValidatingAdmissionPoliciesExists/EnsureVal… #5672
NO-JIRA: Update-precommit-docs #5678
HOSTEDCP-2248: [CPOv2 Refactor] Refactor snapshotcontroller #5632
OCPBUGS-50860: Skip hashing configuration.image.imageStreamImportMode #5651
NO-JIRA: Add omitempty to CredentialsSecretName #5656
OCPBUGS-51039: return marshalled dataplane even if assignprincipals is false #5610
HOSTEDCP-2241: [CPOv2 Refactor] Refactor ingress operator #5602
CNTRLPLANE-220: Update “Create an Azure Hosted Cluster on AKS” docs #5652
CNTRLPLANE-238: Bump k8s to v1.32.2 and CAPZ to v1.18.0 #5623
NO-JIRA: Fix hc hcp cel inconsistency #5661
NO-JIRA: add secretproviderclass to dump #5654
OCPBUGS-50606: Fix kubeadmin login failure #5631
NO-JIRA: bump Cluster API Provider OpenStack to v0.12 (for 4.19 only) #5622
NO-JIRA: update hypershift azure roles to use ids #5657
CNTRLPLANE-112: Add UserAssignedIdentityCredentials environment variable for OpenShift operators #5621
NO-JIRA: CPOv2 refactor self service sa kubeconfig #5607
CNTRLPLANE-111: Move CPO to use UserAssignedIdentityCredentials #5596
HOSTEDCP-2244: Refactor machine approver into cpov2 #5594
OCPBUGS-50578: add region to AWS creds passed to operators managed by CPO #5595
OCPBUGS-50014: Restart HCP on stale serving certs #5601
NO-JIRA: Remove ARO HCP Managed Identity Tech Preview #5604
HOSTEDCP-2171: add e2e test for aro scheduler #5568
NO-JIRA: Bump Golang to 1.23 #5466
NO-JIRA: Ensure ‘pull-secret’ is set properly on v2 serviceAccounts #5609
NO-JIRA: Bump to CAPI v1.9, CAPA v2.7 #5611
HOSTEDCP-2255: e2e: ensure custom tolerations on all HCP pods #5543
HOSTEDCP-2243: Refactor dns operator into cpov2 #5593
PODAUTO-318: Implement HCP karpenter deletion #5540
NO-ISSUE: docs/content/how-to/disaster-recovery/etcd-recovery: Explicitly delegate to admin #5515
NO-JIRA: Bump the golang-dependencies group with 2 updates #5582
PODAUTO-302: Relax cel rule for karpenter role to be required in an ec2NodeClass #5581
NO-JIRA: Remove haproxy generation error for normal flow #5583
OCPBUGS-49913: Honor proxy vars in the util insecure http client #5572
CNTRLPLANE-221: specify region in AWS credentials for operator-roles #5571
NO-JIRA: e2e: combine OpenStack advanced tests within one Nodepool #5579
OCPBUGS-49609: Split binary builds #5499
NO-JIRA: Apply additional labels to CollectProfilesCronJob #5580
HOSTEDCP-2231: Remove cloud connection, Set Transit Gateway as default #5293
CNTRLPLANE-209: Add shared-ingress docs #5564
HOSTEDCP-2257: Vendor karpenter CRDs #5522
ARO-14442: introduce capabilities api #5554
NO-JIRA: add optional step for creating release image using cluster b… #5578
CNTRLPLANE-109: Update Azure API for Phase 3 Managed Identity Work #5556
NO-JIRA: add watch permission to SecretProviderClass in ARO #5565
NO-JIRA: Update cpov2 docs #5560
NO-JIRA: e2e: don’t skip mirrorconfigs on OSP #5441
OCPBUGS-49791: Use /livez for kubernetes scheduler liveness probe #5546
CNTRLPLANE-111: Move secretproviderclass.go to support folder #5559
OCPBUGS-49838: Watch NodePools in HostedCluster controller #5553
HOSTEDCP-2120: Enable EnsureCustomLabels e2e test #5549
OCPBUGS-49724: remove passed in image matching desired image check fr… #5524
OCPBUGS-48619: Add HostedCluster additional trustbundles to konnectivity-https-proxy #5525
HOSTEDCP-2040: Add TestCreateClusterCustomConfigV2 #5401
OCPBUGS-49748: Duplicate hostDevices.name when hostDevices.deviceName has multiple types. #5535
OCPBUGS-49804: Revert “HOSTEDCP-2120: Enable EnsureCustomLabels e2e test” #5547
HOSTEDCP-2259: CLI: enable secure proxy creation #5526
CNTRLPLANE-172: cli: azure: allow assigning custom HCP roles #5541
OCPBUGS-49686: Add ObjectEncoding to the Azure API and SecretProviderClass Reconciliation in the CPO #5505
NO-JIRA: Bump github.com/Azure/go-autorest/autorest from 0.11.29 to 0.11.30 in the azure-github-dependencies group #5518
HOSTEDCP-2120: Enable EnsureCustomLabels e2e test #5511
OCPBUGS-48688: Remove Credentials from the Azure API #5510
HOSTEDCP-2249: Reconcile karpenter user-data secret programmatically instead of creating a mock nodePool #5439
NO-JIRA: Bump the misc-dependencies group with 6 updates #5519
MON-4129: adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #5508
OCPBUGS-49611: Konnectivity: add agent readiness #4829
NO-JIRA: cpov2: switch to resource.k8s.io/v1beta1 after kube 1.32 rebase #5514
HOSTEDCP-2226: Add ValidatingAdmissionPolicy for karpenter EC2NodeClass CRD #5395
HOSTEDCP-2256: [CPO Refactor] Delete component and its resources when predicate changes to false #5509
HOSTEDCP-2245: [CPO Refactor] Refactor cluster-node-tuning-operator #5473
NO-JIRA: add assignServicePrincipal check before assignign roles to WI #5498
HOSTEDCP-1706: feat: add a metric for cluster size override annotation #4825
NO-JIRA: Add instructions for ccoctl and fix minor issues #5490
OCPBUGS-48688: Add Tenant ID to Azure API & Remove Credentials from CPO #5495
OCPBUGS-48519: fix overwriting PKI operator HCP conditions #5493
HOSTEDCP-2169: Add aro scheduler #5417
OCPBUGS-48532: Fix IsProgressing condition in HostedClusters #5487
NO-JIRA: switch to resource.k8s.io/v1beta1 after kube 1.32 rebase #5496
CNTRLPLANE-187: Remove MachineIdentityID from Azure HyperShift API #5488
OCPBUGS-49370: openstack: update CAPI provider deployment spec #5483
NO-JIRA: Fix a few bugs in Azure Upstream Docs #5489
NO-JIRA: chore(deps): update konflux references (main) #5476
NO-JIRA: Update managed Azure/ARO HCP contrib and upstream documents #5474
HOSTEDCP-2061: [CPO Refactor] Refactor cluster-network-operator #5460
OCPBUGS-48626: openstack: add DNS option to CLI #5446
NO-JIRA: Bump google.golang.org/grpc from 1.69.4 to 1.70.0 in the misc-dependencies group #5472
NO-JIRA: Sync v2 code #5467
CNTRLPLANE-173: Assign known ARO roles for CP IDs for ARO HCP #5469
NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.5.0 to 1.6.0 in the azure-github-dependencies group #5471
PODAUTO-303: Re enable karpenter e2e #5462
OCPBUGS-48688: Remove client secret references now Workload Identity is supported #5455
OCPBUGS-48794: Adds contributor role over VNET for Cloud Provider #5468
HOSTEDCP-2232: Destroy DHCP Server before PowerVS Cloud Instance deletion #5227
NO-JIRA: [kubevirt] Skip KubeVirtAdvancedMultinetTest for v4.14 and below #5449
NO-JIRA: Remove OpenStack workaround for Ingress Floating IP #5176
OCPBUGS-48758: Revert #5404 “PODAUTO-303: Add the most basic e2e for autoNode via Karpenter” #5461
HOSTEDCP-2176: Enable unused & ineffassign linters in golangci-lint #5418
OCPBUGS-48708: correct aro azureFile config and permissions #5453
NO-JIRA: add command for retrieving user account id for AKS dev env s… #5436
PODAUTO-303: Add the most basic e2e for autoNode via Karpenter #5404
NO-JIRA: Bump the misc-dependencies group with 8 updates #5450
HOSTEDCP-1542: Implement Workload Identity in Azure for Data Plane Components Part 4 #5361
HOSTEDCP-2062: [CPO Refactor] Refactor kubevirt csi driver #5447
NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity #5440
HOSTEDCP-1971: HyperShift operator upgrade test for rollout validation #4999
NO-JIRA: Update Konflux references #5423
Revert “Revert “CNTRLPLANE-26: Disable building HO for s390x platform on PR”” #5422
OCPBUGS-48510: Allow ARM64 arch deployment on None platform type #5403
NO-JIRA: Fix dev docs for managed azure #5411
NO-JIRA: Drop openstack create rejection validation #5410
HOSTEDCP-1542: Implement Workload Identity in Azure for Data Plane Components Part 3 #4587
NO-JIRA: Add GOWORK=off to clients in Makefile #5421
OCPBUGS-45511: Compare contents of user-ca-bundle-config.yaml to the correct configmap #5420
NO-JIRA: doc/openstack: improve index layout #5412
AUTH-482: set required-scc for openshift workloads #5310
OCPBUGS-48506: Set ownership annotations for TLS artifacts #5355
NO-JIRA: add information about checking HO and e2e are from main on latest release branch #5419
CNTRLPLANE-129: Move Microsoft Repo to CI dir in e2e dockerfile #5416
Revert “CNTRLPLANE-26: Disable building HO for s390x platform on PR” #5406
NO-JIRA: chore(deps): update konflux references (main) #5383
OCPBUGS-44960: (OSASINFRA-3643) bump k8s and dependencies #4927
NO-JIRA: Bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 in /hack/tools #5400
NO-JIRA: Bump golang.org/x/net from 0.31.0 to 0.33.0 in /hack/tools #5399
NO-JIRA: test/e2e: move pre-removal metrics validation out teardown path #5234
NO-JIRA: Add make lint-fix to pre-commit hook #5387
NO-JIRA: Enforce EnsurePSANotPrivileged for 4.19 and later #5362
NO-JIRA: Update Create Azure HC document #5396
OCPBUGS-48216: use rm -f in all CVO cmds for idempotency #5390
NO-JIRA: Bump the golang-dependencies and github.com/Azure/azure-sdk-for-go/sdk/azcore #5373
HOSTEDCP-2233: [CPO Refactor] Refactor cluster-storage-operator #5312
NO-JIRA: docs/nit: fix missing spaces in md breaking rendered html #5392
OSASINFRA-3670: doc/openstack: etcd on LVM #5391
NO-JIRA: cmd: dump: include ValidatingAdmissionPolicies in guest cluster dump #5165
HOSTEDCP-1542: Introduce e2e flags for Workload Identity #5363
NO-JIRA: e2e: don’t check the KV’s LiveMigratable condition for <4.17 #5389
OCPBUGS-48152: Fix mirror reference image name when ID is set #5353
OSASINFRA-3681: improve the doc on OpenStack #5243
Revert “OCPBUGS-45265: Use /livez/ping endpoint rather than /version” #5381
NO-JIRA: test/e2e: improve VAP test assertions #5375
OCPBUGS-45265: Use /livez/ping endpoint rather than /version #5211
NO-JIRA: Reoncile karpenter aws creds before running the operator #5360
NO-JIRA: Bump golang.org/x/crypto and golang.org/x/net #5357
HOSTEDCP-2176: Introduce golangci-lint to make verify and only turn on gci linter #5322
CNTRLPLANE-68: add flags for setting azure marketplace images in e2e #5356
HOSTEDCP-2234: Karpenter auto machine approver #5349
OCPBUGS-47715: fix disconnected via CLI #5341
chore(deps): update dependency mkdocs-material to v9.5.49 #5247
NO-JIRA: Move oauth kubeadminsecret hash annotation logic from HCCO to CPO #5286
HOSTEDCP-2199: [CPO Refactor] Refactor cloud-credential-operator #5203
NO-JIRA: Update Konflux references (main) #5325
OCPBUGS-46354: fix(ho): Add all supported config schemas for NodePool NTO reconcile #5280
NO-JIRA: Revert E2E test change which validates the CVO Image propagation #5323
NO-JIRA: Fix oauth-v2 and kcm-v2 #5306
CNTRLPLANE-26: Disable building HO for s390x platform on PR #5314
OCPBUGS-46529: kubevirt, Don’t break on hostname NodePort.Address #5313
CNTRLPLANE-25: Fix valid release image update issue #5316
OCPBUGS-46483: Correctly Reconcile CSO CSI Secrets for Managed Azure Deployments #5311
OCPBUGS-43083, OCPBUGS-44655: Fix IPv6 Disconnected HCP deployments #5168
HOSTEDCP-2220: Autonode karpenter #5279
CNTRLPLANE-10: Konflux build CPO only when needed #5287
NO-JIRA: Only use public IPs for 4.16 and above #5304
OSASINFRA-3685: openstack: tag CAPI resources with InfraID #5262
STOR-2136: Give delete permissions to snapshot-operator role #5277
NO-JIRA: chore(deps): update konflux references (main) #5288
NO-JIRA: set diskStorageAccountType in aks e2e #5273
CNTRLPLANE-9: Red Hat Konflux update control-plane-operator-main #5282
OCPBUGS-44314: Consistently look up and dial cloud API hostnames #5281
OCPBUGS-45595: Updating ose-hypershift-container image to be consistent with ART for 4.19 #5272
NO-JIRA: test/e2e: detect rapidly updating deployments #5229
OCPBUGS-45322: consolidating upgradingConfig/Version nodepool status update from CAPI controller to Conditions controller #5222
OCPBUGS-46342: Allow ARM64 arch deployment on Agent platform #5276
OCPBUGS-44438: Remove non-matching feature-gated CVO manifests from payload #5093
NO-JIRA: Fix expected AWS HC conditions during e2e tests #5266
NO-JIRA: Allow multiple yaml def in a file for pre-commit #5271
HOSTEDCP-2203: Create e2e clusters with public IP instances only #5269
NO-JIRA: Fix spelling mistakes from PR #5265 #5270
HOSTEDCP-2215: Expand pre-commit hooks to check on commit and push #5245
HOSTEDCP-2203: Add support for public only AWS clusters #5242
NO-JIRA: contrib: update route53 zone cleaning utility #5265
NO-JIRA: Fix pre-commit hook issues #5264
HOSTEDCP-2193: documenting –managed-identities-file flag #5199
NO-JIRA: Update Konflux References and Perform Migration #5260
HOSTEDCP-2206: Improve Unit Test Runtime #5257
OCPBUGS-42320: Prevent IgnitionServer from flooding the API server with patch requests #5220
NO-JIRA: Remove SP creation/deletion in the HyperShift CLI #5240
NO-JIRA: Relax networking cel validation for IBMCloud #5258
NO-JIRA: openstack/e2e: allow to change AZ name #5138
OCPBUGS-42338: Update KCM node monitor grace period #5166
NO-JIRA: e2e: followup cleanup for OpenStack Manila #5221
HOSTEDCP-2181: bump base images in dockerfiles to 4.19 #5195
HOSTEDCP-1958: Integrate codespell in Makefile #4700
OCPBUGS-44236: Use system trust bundle in CPO IDP https client #5241
HOSTEDCP-2204: adding contributor role to nodepoolManagement SP #5244
HOSTEDCP-2201: add DNS RG to contributor role assignments and add new flag for skipping role assignments #5230
NO-JIRA: openstack/doc: add a requirement for Octavia #5223
NO-JIRA: updating ocp release task notes #5239
OCPBUGS-44967: Pass only the certificate name for CNO deployment #5216
OCPBUGS-45182, OCPBUGS-45189: e2e/openstack: adjustments for missing manila apps & pods #5202
OCPBUGS-42434: Enable Managed Identity w/ Certificates in HyperShift Control Plane Components #5160
HOSTEDCP-2197: Fix TLS config documentation for disconnected #5212
NO-JIRA: cpov2: revert oauth reconciliation #5217
OCPBUGS-44968: Reconcile SecretProvider for CSO on ARO HCP #4904
NO-JIRA: chore(deps): update konflux references (main) #5205
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.5.46 (main) #5206
HOSTEDCP-2193: allow reuse of SP for e2e #5194
OCPBUGS-44380: Reconcile proxy CA bundle into hosted cluster #5197
HOSTEDCP-2075: Dns cel e2e #5171
OCPBUGS-44934: Fix error message when kas is route and hostname is not set #5192
NO-JIRA: CPO V2 cleanup #5188
HOSTEDCP-2075: Nodeport address cel #5172
OCPBUGS-44967: Reconcile SecretProvider for CNCC on ARO HCP #4903
OCPBUGS-44910: openstack: don’t reconcile image registry config during bootstrap #5178
OCPBUGS-44957: Use fleet manager configmaps to determine placeholder pod node antiaffinity #5191
OCPBUGS-44698: Create AWS clients on every reconcile instead of at initialization #5179
OCPBUGS-44964: Reconcile SecretProviderClass for Ingress on ARO HCP #4884
OCPBUGS-44929: e2e: fix manila CSI operator #5186
OCPBUGS-44326: Separate CPO containerfiles #5177
HOSTEDCP-2181: update latest supported version for 4.19 branching #5146
NO-JIRA: chore(deps): update konflux references (main) #5180
NO-JIRA: chore(deps): update dependency mkdocs-mermaid2-plugin to v1.2.1 (main) #5185
NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (main) #5181
HOSTEDCP-2187: [CPO Refactor] Refactor cluster-policy-controller #5170
Full changelog

ibm-cloud-controller-manager

OCPCLOUD-2846: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.32 (f326c83) into master #76
OCPBUGS-45494: Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 4.19 #77
Full changelog

ibm-vpc-block-csi-driver

NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #80
OCPBUGS-53912: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #81
STOR-2249: Rebase to upstream 5.2.14 for OCP 4.19 #79
OCPBUGS-45465: Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.19 #78
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-55038: [IBM VPC] set offlineExpansion to false in e2e test manifest #143
OCPBUGS-54482: Bump library-go #142
STOR-2252: Bump all deps for 4.19 #141
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #140
STOR-2252: Bump all deps #137
OCPBUGS-47121: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #136
AUTH-482: set required-scc for openshift workloads #135
OCPBUGS-45554: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.19 #134
OCPBUGS-44978: bump openshift/api #132
Full changelog

ibmcloud-cluster-api-controllers

OCPCLOUD-2852: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.10.0 (0c35eac) into main #107
NO-JIRA: Update manifests generator tooling #106
OCPBUGS-50674: Fix for CVE-2024-45338 in golang.org/x/net/html in main #99
OCPBUGS-45691: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.19 #96
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.9.0 (eed3ac7) into main #95
Full changelog

ibmcloud-machine-controllers

OCPBUGS-51864: IBMCloud: MAPI replacing unhealthy CP nodes #61
OCPCLOUD-2841: Update K8s to 1.32 #60
OCPBUGS-45696: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.19 #59
Full changelog

insights-operator

CCXDEV-15083: Move the Insights runtime extractor feature to GA (#1081) #1081
feat: remove the upgradeable condition (#1079) #1079
CCXDEV-9905: Introduce a new config option for storing archives to persistent volume (#1070) #1070
chore: add BaiyangZhou to OWNERS file (#1080) #1080
NO-JIRA: refactor gather commands (#1076) #1076
NO-JIRA: feat: add gatherer name validation to gendocs (#1075) #1075
fix: allow running enabled functions from disabled gatherer (#1077) #1077
Fix bad IPv6 address (#1073) #1073
OCPBUGS-35196: update the duration validation pattern according to the OpenShift API (#1072) #1072
CCXDEV-12875: Enable Insight Operator entitlements for multi arch clusters (#1066) #1066
CCXDEV-14824: Upgrade Golang to 1.23 (#1071) #1071
OCPBUGS-48154: Add a liveness probe to the extractor container (#1067) #1067
Add Ondrej user to OWNERS file (#1065) #1065
Ignore previous status when disabling alerts (#1055) #1055
bump up OpenShift versions (#1053) #1053
OCPBUGS-45926: use joinHostPort to fix IPv6 (#1050) #1050
minor test update (#1052) #1052
avoid possible Go panic when searching existing conditions (#1046) #1046
golanci-lint version update & corresponding fixes (#1045) #1045
OCPBUGS-45047: Avoid to send the same error repeated N times (#1043) #1043
Updating ose-insights-operator-container image to be consistent with ART for 4.19 (#1044) #1044
sort the JSON schema validation errors (#1039) #1039
set required-scc for dataGahtering jobs & pods (#1033) #1033
OCPBUGS-45047: LokiStack gatherer (#1022) #1022
OCPBUGS-45044: insightsoperator.operator.openshift.io resource is create-only (#1032) #1032
NO-JIRA: Add conditional gatherer validation test cases (#1020) #1020
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Enable FIPS #41
New runtimes tests #40
SB 3.4.3 test app and 3.1.4 app simplified #39
plain-java runtime sample #38
Update README #36
Update instructions to run the extractor on a cluster #35
OCPBUGS-45626: Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.19 #34
OCPBUGS-45512: Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.19 #33
Full changelog

installer-altinfra

CORS-3633: Fail the install when there are expired certs #9225
CORS-3960: Remove Terraform from Dockerfiles #9673
OCPBUGS-55492: sort zone slices extracted from map of byo subnets #9662
no-jira: IBI nmstate unit test fix #9680
OCPBUGS-55324: fix nil field access when describing security groups #9676
OCPBUGS-52203: Find GCP KMS keys #9597
CORS-3855: Remove ARO build flag from installer #9124
OCPBUGS-54902: Custom-DNS: Update Kubeconfig and Infra CR based on private or public cluster #9656
NO-JIRA: Update SCOS 4.19 bootimage metadata to 9.0.20250411-0 #9657
CORS-3870: validate duplicate AZs if no subnet roles at all or only for subnets of the same role #9663
CORS-3864, CORS-3959: CAPI AzureStack Support, Take II #9666
OCPEDGE-1749: [TNF] Updated bare-metal init sequence to detach control-plane nodes in Two Node OpenShift. #9661
Revert “Merge pull request #9645 from patrickdillon/azurestack-mark-iii” #9665
CORS-3864, CORS-3959: CAPI-based AzureStack Installs #9645
CORS-3870: add validations for subnets field with AWS API #9599
CORS-3871, CORS-3872, CORS-3873: place the cluster components on the assigned byo subnets if any #9633
CORS-3278: IBMCloud: Remove IBM Cloud TF provider #9649
OCPBUGS-54606: convert OVNKubernetes networkType to correct format #9653
CORS-3936: Add support for public-only networking #9544
CORS-3278: IBMCloud: Add DestroyBootstrap for leftover CAPI resources #9636
CORS-3854: Enable option to set boot diagnostics #9125
CORS-3278: Switch IBMCloud to CAPI #9652
CORS-3867: fix CRD descriptor to mention required BootstrapNode role #9655
CORS-3886: azure: Set use managed identity to false #9648
OCPBUGS-54319: oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x #9608
AGENT-1159: agent docs update #9627
OCPBUGS-53439: fix inconsistent subnet role name for bootstrap node #9650
NO-JIRA: fix the platform test assertions to check expected err message #9639
OCPBUGS-43990: Filter out excess CA certs when adding node #9641
NO-JIRA: add Roshan-R to CoreOS approvers and reviewers #9642
OCPEDGE-1506: Add Platform based validation to fencing credentials #9624
CORS-3908: Update gcp cloud provider config map to include new endpoints #9600
SPLAT-2121: vsphere - if no host group found, append not found #9638
OCPBUGS-54541: Update RHCOS 4.19 bootimage metadata to 9.6.20250402-0 #9632
OCPBUGS-46601: IBM Cloud Bump IBM Cloud CAPI #9623
OCPBUGS-43724: Fix Load balancer IP setup #9144
OCPBUGS-54407: Use correct case in path error messages #9615
OCPBUGS-54232: Azure Move BYO VNET SG creation to InfraReady #9603
OCPEDGE-1701: fix: update tnf validation to account for tna install config #9629
OCPBUGS-52473: aarch64 kernel is no longer zipped #9617
NO-JIRA: Add jcapiitao to CoreOS approvers and reviewers #9631
OCPBUGS-53067: Updating the file names in generic.ins file for s390x ABI for pxe Artifacts #9586
NO-JIRA: OWNERS_ALIASES - Add user as coreos-approvers / coreos-reviewers #9628
CORS-3883: Remove user-assigned identity from ARM template #9625
OCPBUGS-53303: Revert: Power VS: Disallow platform.powervs.clusterOSImage in install-config #9577
OCPBUGS-42241: Update to cluster-api-provider-azure release-v1.17.5 #9596
OCPBUGS-53140: Validation for API and Ingress VIPs when using user-managed load balancer #9571
no-jira: Add Johan-Liebert1 to coreos-reviewers and coreos-approvers #9556
CORS-3923, CORS-3927: Support confidential cluster installation on SEV-SNP and TDX nodes on GCP #9395
AGENT-587: Support Nutanix in Agent-based Installer #9537
SPLAT-2000: Added vSphere provisioning mode support for data disks #9439
OCPEDGE-1496: [TNF] Collect pacemaker, pcsd, and corosync logs and journals in installer-masters-gather.sh #9546
OCPBUGS-52356: IBMCloud: Fix CAPI endpoint overrides #9540
OCPEDGE-1505: Enhance Platform none with Fencing Credentials #9521
OSASINFRA-3730: Add support for storing OpenStack CA bundles #9194
OCPBUGS-53258: IBMCloud: Bump TF provider for CIS fix #9589
NO-JIRA: update OWNER_ALIASES for azure and aws #9598
OCPBUGS-53106: Create ConfigMap to reference baremetal-installer image #9563
NO-JIRA: CVE-2025-22868 bump oauth2 pkg to v0.27.0 #9569
CORS-3918: Send service endpoint overrides to CAPG through cluster spec #9528
OCPBUGS-53465: Update RHCOS 4.19 bootimage metadata to 9.6.20250321-0 #9593
OCPEDGE-1513: Fixed topology logic for 2-node installs and added unit tests #9579
OCPBUGS-53379: Update RHCOS 4.19 bootimage metadata to 9.6.20250319-0 #9582
AGENT-467: show the agent ui url when available #9584
CORS-3861, CORS-3883, CORS-3937: Azure Machine Identity API #9538
AGENT-537: Run agent installer command to create certificates #9574
OCPBUGS-52959: Issue short lived certificates if ShortCertRotation featuregate is enabled #8784
OCPBUGS-53173: PowerVS: remove TF code #9568
no-jira: add dev docs for bumping CAPI provider version #9567
OCPBUGS-53183: Avoid adding duplicate entries to NO_PROXY #9573
SPLAT-2078: Removed VSphereStaticIPs feature gate #9560
OCPBUGS-53280: PowerVS: Re-enable disconnected installs #9551
AGENT-537: Add agent command to generate certificates #9557
OCPBUGS-39146: Validate sgdisk partition start in image based installer config #9541
AGENT-1113: additional refinement for loading the agent UI #9565
SPLAT-2072: Removed VSphereMultiVCenters feature gate #9553
OCPEDGE-1513: feat(topologies): add DualReplica topology mode #9534
OCPBUGS-45692: Modified ova template name to use failure domain name #9300
OCPBUGS-50552: Power VS: Disallow clusterOSImage install-configuration parameter #9417
NO-JIRA: OWNERS: add thuan #9555
OCPBUGS-51209: Changed kernelFileType name from kernel.img to vmlinuz for s390x #9533
OCPBUGS-6271: Adding VIPs Validation for agent based vsphere installation #9532
AGENT-1113: enhance the unconfigured-ignition command to support the interactive workflow #9529
OCPBUGS-33370: Improve baremetal gather error message #9120
OCPBUGS-36553: VSphere: add vips to machinenetwork #9526
OCPBUGS-49737: Custom-DNS: Update master and worker user data secrets #9451
CORS-2508: aws: remove unused autoscaling:DescribeAutoScalingGroups perm #9223
OCPBUGS-51378: Change vsphere conversion govmomi err to be clear #9524
CORS-3278: Bump IBM Cloud CAPI to v0.10.0 #9523
OCPBUGS-44840: Mount the user-ca-bundle into ICC #9227
OCPBUGS-50637: Remove error logging when determining image arch #9531
OCPBUGS-51171: aws: add ec2:ReplaceRoute permission #9525
OCPBUGS-47724: AWS: Copy static MCO resources needed for custom-dns #9489
OCPBUGS-49623: IBMCloud: Missing ca-mon region due to static region list #9421
OCPBUGS-47681: Support regions only available in v2 of the aws sdk #9383
OKD-235: Add stream metadata for scos to be used by OKD #9520
OCPEDGE-1635: Set default values for arbiter #9530
OCPBUGS-39583: Remove tmp directory used for agent pxe files #9527
No-ISSUE: (dep) Bump openshift/api #9522
CORS-3917: Add install config validation for service endpoints #9517
NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer #9515
OCPBUGS-51350: PowerVS: Extra network routes for disconnected install #9510
NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage #9508
OCPBUGS-50961: Power VS: Log accurate error when deploying Internal with no vpcName #9497
SPLAT-1995: vsphere on destroy remove cns volumes #9425
OCPBUGS-47459: IBMCloud: CAPI add permitted network #9397
OCPBUGS-47652: IBMCloud: Set CAPI boot volumes #9385
CORS-3869: static validation for new vpc.subnets field #9505
OSASINFRA-3695: openstack: Create security group rules in batches #9042
OCPBUGS-46051: IBMCloud: Fix CAPI AZ handling #9415
OCPBUGS-50534: Fix error messages in available IP code #9503
OCPBUGS-51204: bootstrap/node-image-pull.sh: handle PXE boots as well #9516
OCPEDGE-1310: feat: add arbiter node support to installer #9159
CORS-3919: Add GCP service endpoints to the infrastructure manifest #9518
OCPBUGS-51084: PowerVS: Specify chrony config for Disconnected deploy #9500
no-jira: Bump cluster-api to v1.9.4 #9411
OCPBUGS-49351: Add vSphere logic to check for max network count #9419
CORS-3843: Add Tech Preview Feature gate to Installer for GCP Custom API Endpoints #9501
OCPBUGS-50919: Fixes panic during GCP tags fetch due to unstable network #9495
OCPBUGS-49940: PowerVS: datacenter supported systems #9442
OCPBUGS-49953: PowerVS: support destroy tag 1 #9403
OCPBUGS-50574: Check for vmgroup when create capv machine fd name #9453
CNTRLPLANE-194: add auth-api-bootstrap stage to bootkube.sh template #9424
CORS-3867, CORS-3868: deprecate platform.subnets and introduce platform.vpc.subnets field in install-config #9443
OCPBUGS-50899: PowerVS: COS eu-es hack #9490
OCPBUGS-50920: Rely on path declaration of base image #9491
OCPBUGS-45429: Set the right resource group in bootstrap destroy #9487
CORS-3835: Add gcp endpoints to the installer config #9363
OCPBUGS-46488: Validate Encryption Keys for GCP #9328
OCPBUGS-44507: Check public zone for stray record set #9365
OCPBUGS-50839: correct typo #9480
OCPBUGS-50657: PowerVS: destroy dhcp hack #9458
OCPBUGS-50534: Fix panic when there are no available IPs #9444
OCPBUGS-50649: vsphere - check if host is powered down or on standby before uploading template #9456
no-jira: Switch to go.uber.org/mock/gomock #9422
OCPBUGS-49319: IBMCloud: Drop CAPI metrics-bind-addr #9401
no-jira: Relax serviceEndpoint URL validation for IBMCloud platform #9416
OCPBUGS-50004: Add cluster:master_nodes metric retrieval in docs #9447
CORS-3825: pkg/infrastructure/azure: support nvme #9232
OCPBUGS-49737: Custom-DNS: GCP, AWS: Update worker pointer Ignition #9431
OCPBUGS-46656: validate configured networks to not overlap with OVNKubernetes default subnets #9428
MGMT-19545: add optional release registry field to the IBI installation config #9394
OCPBUGS-48044: [Nutanix] Install multi-NICs cluster failed with failureDomains #9376
OCPBUGS-49784: handle runtime panic when validating ovnKubernetesConfig #9432
OCPBUGS-48827: aws/edge/byovpc: subnets tag kube cluster tag to shared #9413
OCPBUGS-49594: aws/byo-ip added required permission ec2:ReleaseAddress #9420
OCPBUGS-46549: Update RHCOS 4.19 bootimage metadata to 9.6.20250121-0 #9392
OCPBUGS-48089: validate hostPrefix to be the same when multiple clusternetwork CIDRs are present #9398
SPLAT-1809: Added vSphere multi disk support #9035
OSASINFRA-2571: Add quota validation for server group #9326
OCPBUGS-48228: Envtest: Configure IPv6 service network for API Service #9361
CORS-3724: bump go v1.23 and k8s dependencies #9396
CORS-3637: OWNERS files for platform provider subdirectories #9407
OCPBUGS-47489: pkg/gcp/destroy: add waits to prevent leaks during heavy load #9384
MGMT-19771: Convert IDS to proper IDMS manifest #9391
OCPBUGS-47477: aws: skip dead zones on us-east-1 when discovering AZs #9333
OCPBUGS-48570: [Nutanix] Installation failed with timeout when uploading images to PC #9377
OCPBUGS-45551: Updating ose-installer-altinfra-container image to be consistent with ART for 4.19 #9275
no-jira: docs(user): fix grammer in upi install step #9292
OCPBUGS-48719: Add new tested azure arm instance type to doc #9387
OCPBUGS-46596: aws/permissions - defaults ec2:DescribeInstanceTypeOfferings #9341
COS-3013: overlay node image before bootstrapping if necessary #8742
OCPBUGS-48256: Run iscsiadm for agent-based iSCSI installations #9356
SPLAT-1742: vSphere - enable host group based zonal #8873
CORS-3722: bump default channel to stable-4.19 #9375
CORS-3721: bump default release image to 4.19 #9374
OCPBUGS-48437: PowerVS: limit by resourceGroupID #9359
OCPBUGS-46010: wait for at least 3 kube-apiserver instances #9302
no-jira: Remove myself from reviewers list #9358
no-jira: images: UPI: use ART repo dir #9360
OCPBUGS-47156: Bump golang.org/x/net to 0.33.0 #9343
NO-ISSUE: Fix owning component name in machine config templates #9353
NO-JIRA: remove the types which failed by RHEL-59521 and add the new gpu vm type #9337
OCPBUGS-29067: Update MCS Cert and Key files within bootstrap Ignition with UserProvisionedDNS #9238
NO-ISSUE: Deprecate node-joiner scripts #9304
MCO-1457: Clean up MCS CA & TLS cert objects for management #9309
OCPBUGS-45995: Always set AllowCrossTenantReplication parameter to false #9322
OCPBUGS-46571: Disable IP Forwarding for CAPG Machines #9332
OCPBUGS-46260: CVE-2024-45337 bump crypto pkg to v0.31.0 #9314
OCPBUGS-46605: Find instances by label GCP #9336
OCPBUGS-47504: Power VS: Private DNS service endpoint URL must end with /v1 #9335
METAL-1137: Enable TLS for ironic API in the bootstrap VM #9189
OCPBUGS-46144: azure: use separate /var to avoid growfs timeouts #9310
OCPBUGS-45218: aws: fix perm requirement for edge nodes #9256
OCPBUGS-46470: Power VS: ResourceManager also to override for Internal deploy #9317
OCPBUGS-46035: fix skew support for node-joiner #9307
OCPBUGS-44560: Add note about additional networks using IPv6 #9323
OCPBUGS-45280: Allow more time for Service Account Creation #9299
OCPBUGS-46363: Remove narrow timeout from etcd bootstrap member removal gate. #9295
OCPBUGS-44834: aws: include permissions for edge compute #9230
OCPBUGS-45984: IBMCloud Fix VPC-COS IAM Auth #9301
OCPBUGS-45317: node-joiner PXE artifacts should be prefixed “node” #9280
OCPBUGS-45727: Updating ose-installer-artifacts-container image to be consistent with ART for 4.19 #9284
OCPBUGS-44641: GCP placing *.apps record in wrong managed zone #9216
OCPBUGS-45855: If vCenter cluster has no esxi hosts fail with sane msg #9291
OCPBUGS-45807: aws: fix sts:AssumeRole perm requirement #9287
OCPBUGS-43779: Destroy all private cluster backend service resources #9270
OCPBUGS-45162: Delete tagged disks #9274
OCPBUGS-45482: Wait for etcd bootstrap member removal #9261
OCPBUGS-45685: Power VS: Create region-zone-sysType hierarchy #9245
OCPBUGS-45289: capi/aws: use LB name when finding Hosted Zone ID #9263
OCPBUGS-45678: Updating ose-baremetal-installer-container image to be consistent with ART for 4.19 #9282
OCPBUGS-45656: Updating ose-installer-container image to be consistent with ART for 4.19 #9279
OCPBUGS-44925: aws: add ec2:AllocateAddress perm requirement. #9234
OCPBUGS-44523: Remove unused variable from ASH arm template 06_workers.json #9204
OCPBUGS-45491: Align vSphere UPI haproxy config with IPI #9273
OCPBUGS-44938: Handle multiple mirror entries for source #9266
OCPBUGS-45286: PowerVS: Listen to machineNetwork #9254
ARO-12457: Include bootstrap docker config file in go module #9248
OCPBUGS-45175: Ironic external url port should change based on protocol #9249
NO-ISSUE: imagebasedinstaller: support json files in extramanifests directory #9136
OCPBUGS-44924: aws: add missing ec2:GetConsoleOutput perm requirement #9233
OCPBUGS-44193: move GCP zone filtering client-side #9169
OCPBUGS-43561: add zsh completion #9116
Full changelog

ironic

OCPBUGS-55743: Extract files one-by-one in logwatch #656
METAL-1327: Update pkgs ocp419 take2 #651
NO-ISSUE: Update dependencies for OCP 4.19, part 1 #649
NO-JIRA: Sync with upstream metal3/main 2025-03-24 #650
METAL-1297: Update ironic-image to the latest commit hash #644
METAL-1299: Do not use openstack packages #645
OCPBUGS-51310: Fix runlogwatch script #641
OCPBUGS-50613: Install python3-inotify pkg explicitly #638
OCPBUGS-49829: Fix runlogwatch failure if LOG_DIR does not exist #635
OCPBUGS-48737: Sync with upstream metal3 ironic-image 2025-01-30 #629
METAL-1266: Switch master branch to main in check-requirements #628
METAL-1253: Remove dependency from sushy package #621
METAL-1251: Remove dependency from ironic-lib #619
OCPBUGS-48172: Bump jinja2 to 3.1.5 #618
OCPBUGS-45636: Sync including fix for bug #614
NO-ISSUE: Sync with metal3 upstream 2024-12-16 #616
OCPBUGS-45638: Updating ironic-container image to be consistent with ART for 4.19 #613
Full changelog

ironic-agent

OCPBUGS-55315: Delay determining the hostname to put into ignition #182
NO-ISSUE: Update dependencies for OCP 4.19 #181
METAL-1299: Do not use openstack packages #177
METAL-1297: Update commit hash of ironic-python-agent #176
METAL-1266: Switch master branch to main in check-requirements #175
OCPBUGS-45259: METAL-1251: Update commit hash of ironic-python-agent #174
Updating ironic-agent-container image to be consistent with ART for 4.19 #173
Full changelog

ironic-machine-os-downloader

OCPBUGS-45522: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.19 #100
Full changelog

ironic-static-ip-manager

OCPBUGS-45715: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.19 #46
Full changelog

keepalived-ipfailover

OCPBUGS-45700: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.19 #205
OCPBUGS-45831: Updating ose-egress-http-proxy-container image to be consistent with ART for 4.19 #204
OCPBUGS-45405: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.19 #201
NE-1908: Add instructions for keepalived-ipfailover image testing #198
OCPBUGS-45452: Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.19 #202
NO-JIRA: egress: update OWNERS #203
Full changelog

kube-metrics-server

OCPBUGS-45583: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.19 #39
Full changelog

kube-rbac-proxy

CNTRLPLANE-248: Merge upstream v0.19.0 release #116
OCPBUGS-45765: Updating kube-rbac-proxy-container image to be consistent with ART for 4.19 #115
AUTH-555: Merge upstream v0.18.2 release #114
Full changelog

kube-state-metrics

OCPBUGS-52192: [bot] Bump openshift/kube-state-metrics to v2.15.0 #119
OCPBUGS-45519: Updating kube-state-metrics-container image to be consistent with ART for 4.19 #118
Full changelog

kube-storage-version-migrator

OCPBUGS-45383: Updating ose-kube-storage-version-migrator-container i… #209
Full changelog

kubevirt-csi-driver

NO-JIRA: Add awels as approver #59
OCPBUGS-50562: Ensure unpublish works for volumes carried over upgrades #58
OCPBUGS-50562: Ensure volume stays attached through reboots #53
Full changelog

machine-api-operator

OCPBUGS-55786: [release-4.19] Fixes machineset paused condition nil pointer #1368
OCPBUGS-55706: fix: use patch for machine/machineset status #1367
OCPBUGS-55424: Added skip for when config not multi nic #1358
OCPBUGS-55461: Fix updateMachineSetStatus nil pointer #1360
Revert “SPLAT-2180: Added conformance label” #1359
OCPBUGS-55417: Resync CRDs #1357
OCPBUGS-55083: Updates GCP CredentialsRequest #1353
SPLAT-2180: Added conformance label #1354
OCPBUGS-55025: fix: nodelink use patch to apply machine’s nodeRef #1352
SPLAT-2051: implement e2e tests for vSphere multi network #1347
SPLAT-2118: Update tests-extensions to pick up new vendor filtering #1351
OCPBUGS-52464: webhook to validate marketType field #1339
SPLAT-2078: Removed VSphereStaticIPs feature gate #1346
SPLAT-2060: Create e2e tests for vSphere Data Disk feature #1338
OCPCLOUD-2882, OCPCLOUD-2889: support AMD SEV_SNP and TDX confidential computing machines on GCP #1326
OCPCLOUD-2780: Validate aws marketType webhook #1329
OCPBUGS-44671, OCPBUGS-51373: Updates GCP credentials request #1335
SPLAT-2000: Added vSphere provisioning mode to data disks #1328
OCPBUGS-49413: add image/read permissions #1330
OCPBUGS-51042: Drop oVirt support #1331
OCPBUGS-49351: Added vSphere check for max networks #1327
OCPCLOUD-2830: Update dependencies to K8s 1.32 #1325
SPLAT-1800: vSphere host zonal missing operator feature #1323
SPLAT-1811: Add vSphere multi disk support #1290
OCPBUGS-43608: add webhook for fields that are not working #1320
OCPBUGS-46433: Add cluster-reader to controlplanemachinesets resource #1316
OCPBUGS-44130: Add Azure permissions based on linked actions #1309
SPLAT-1800: Add support for vSphere host and vm group based zonal #1285
AUTH-482: set required-scc for openshift workloads #1317
SPLAT-1940: Refactored vsphere featuregate parameters #1315
OCPBUGS-45480: Updating ose-machine-api-operator-container image to be consistent with ART for 4.19 #1310
AUTH-482: set required-scc for openshift workloads #1308
CORS-3741: [Nutanix] support multi-subnets in Machine providerSpec #1301
Full changelog

machine-config-operator

OCPBUGS-55809: Use auto=start only for IPsec out connections #5035
OCPBUGS-44757: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5031
Revert “NO-ISSUE: debug podman on PIS” #5013
OCPBUGS-44757: decrease leases for kubelet on azure #5010
NO-ISSUE: debug podman on PIS #5003
MCO-1635: Add new runbook for HighOverallControlPlaneMemory to alert #5005
OCPBUGS-55388: MSBIC should not update windows machinesets #5009
MCO-1645: API & client-go bumps for MCN V1 API updates #5011
MCO-1519: Adapt MCO code to use V1 MCN API #4992
OCPBUGS-50905: Leverage shared node.env for both AWS providerID and hostname units #4999
OCPBUGS-51273: Don’t crashloop for HAProxy init container #4963
NO-JIRA: Update Envtest assets to 1.32.1 #5002
OCPBUGS-44732: Support for br-ex with DHCP and static DNS #4724
OCPBUGS-55043: Fix PollUntilContextTimeout in syncRenderConfig #4987
OCPBUGS-55231: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #4995
OCPBUGS-49675, OCPBUGS-55039: In OCL. Usbguard service fails when we install the usbguard extension: IPsec tmpfile.d directives missing when enabling IPsec in OCL #4986
OCPBUGS-54592: Only populate LastFailedGeneration & LastFailedGenerationError on PIS failure #4983
OCPBUGS-55234: kubelet: readonly mounts for criometricsproxy #4997
OCPBUGS-48469: Fix CoreDNS static pod bring-up on cloud platforms #4830
MCO-1584: Opt-in boot image updates for AWS & GCP by default #4902
MCO-1615: MCN status update degraded #4977
MCO-1509: Enable OCL for disconnected workflow #4971
MCO-1558, OCPBUGS-34745: Add support to rebuild and prune OCL images #4975
OCPEDGE-1690: add dual-replica templates #4938
OCPBUGS-53408: wait for build and ensure OS image is actually new #4924
OCPBUGS-54872: Make sure generation fields in MCN do not have a value of 0 #4982
MCO-1544: Update MCO code to use MCN’s updated v1alpha1 API #4962
OCPBUGS-53425: Make mtu-migration run after wait-for-primary-ip #4932
OCPBUGS-54611: pkg/operator/status: Drop kubelet skew guard #4970
OCPBUGS-54384: kubelet-service: narrow down restorecon path #4857
OCPBUGS-54175: Add /etc/docker/certs.d to template #4933
MCO-1587: Add runbook for ExtremelyHighIndividualControlPlaneMemory #4976
OCPBUGS-49737: GCP: Include the gcp-routes.service for all GCP installs #4969
OCPBUGS-52656: Update the MCN PIS status of only the primary pool #4948
OCPBUGS-54570: Drop broken feature which statically configures DHCP addresses #4965
CORENET-5524: Modify regex for ipsec showstates command #4959
OCPBUGS-49894: Ensure proxy config exists when reverting from OCL to non-OCL #4833
OCPNODE-3020: Remove cgroupv1 references #4964
MCO-1627: Get rid of setting mcn.Spec.PinnedImageSets field #4960
OCPBUGS-38869: Update desired config in MCN on OCL update #4922
OCPBUGS-46421, OCPBUGS-48675, OCPBUGS-48808: Ensure build job is deleted when rebuild is triggered #4807
MCO-1522: Adapt MCO to use PIS V1 API #4934
OCPBUGS-54161: use the same success criteria for OCL e2e tests #4941
MCO-1579: Bump ignition to 3.5 #4903
NO-ISSUE: MCN changes for API validation #4949
OCPNODE-2340: update (Cluster)Imagepolicy PKI config to policy.json #4886
OCPBUGS-52827: Fixing typos for MachineConfigNode #4914
OCPBUGS-51130: In OCL. Cannot install extensions #4870
OCPBUGS-52280, SDN-5330: Add ipsec connect wait service #4854
OCPNODE-2842: Set Upgradeable=False when cluster is on cgroup v1 #4822
“NO-ISSUE: ensure that client configs are not mutable” #4915
MCO-1501: Add support for custom MCPs in MCN #4876
OCPBUGS-53085: Add scc label to arbitor crio-metrics-proxy #4912
OCPBUGS-51150: daemon: ensure ostree-finalize-staged is started before rebooting #4907
OCPBUGS-44185: Race in configure-ovs.sh affects bonding interface configuration. #4609
OCPBUGS-52213: Update ObservedGeneration in KubeletConfig #4900
RHEL-79554: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4866
MCO-1485: MCO:1486: MCO-1324: Attempt stub Ignition upgrade #4885
MCO-1537: Add MCDRebootError runbook to prometheus rules #4895
NO-JIRA: Update the MCS iptables debug command in docs #4896
OCPBUGS-43896: add revert logic to OCL path in MCD #4825
MCO-1515: Kube bump to 1.32 #4797
OPNET-629: Mark haproxy unhealthy if no healthy backends #4767
OCPBUGS-44602: Set ownerReference for OCL build objects #4861
OCPBUGS-41489: configure-ovs workaround for ovs-if-br-ex bug #4877
OCPBUGS-48810: Ensure that build jobs are always reconciled #4811
No-Issue: Remove OCL Extensions test #4868
OCPEDGE-1493: Add 2no-ha extension support required by Two Node OpenShift #4843
OCPBUGS-50849: add RHEL variant to IsEL() check #4856
NO-ISSUE: increase WaitForPoolComplete() timeout #4873
OCPBUGS-51009: OSUpdateStarted event should only be emitted on actual OS updates #4864
OCPBUGS-47743: Update cluster-reader ClusterRole permissions #4823
OCPBUGS-45459: Remove trailing period from Openstack provided hostnames #4778
OCPBUGS-47629: /etc/crio/crio.conf.d/00-default should contain runtime_root for runc #4850
OCPBUGS-49394: Fix SELinux failures running afterburn-hostname #4863
OCPBUGS-50599: Enforce VIPs to be collocated at the same host #4844
OCPBUGS-49347: Degraded machine-config CO due to ManagedBootImages update when upgrading an OCL cluster #4810
OCPBUGS-33894: Avoid dumping Go struct in potentially user-facing reason annotation #4814
OCPBUGS-44618: In OCL, MCPs are reporting Updating=false while the image is being built #4710
OCPBUGS-49959: Panic in the MCC when using OCL v1 GA #4834
NO-ISSUE: Add isabella-janssen to OWNERS as approver & reviewer #4846
OCPBUGS-31778: Update format verbs for alert logs #4839
OCPBUGS-50002: MCC complains about v1 MachineOSConfig in default featureset #4838
MCO-1492: Add new runbook for SystemMemoryExceedsReservation to alert #4832
OCPBUGS-43552: maxUnavailable value is not honored when disabling OCL #4817
OCPBUGS-49731: Correct MachineConfig documentation on sysstat extension support #4828
OCPEDGE-1585: Revert “OCPEDGE-1419 Add ksan-storage extension” #4821
OCPBUGS-49436: Make resolv-prepender env file optional #4815
NO-ISSUE: Remove etc-pki-entitlement cruft #4812
OCPBUGS-48250: MCO CO degrades are stuck on until master pool updates complete #4791
OCPBUGS-46072: create /run/nodeip-configuration before use #4798
MCO-1437: MCO-1476: MCO-1477: MCO-1284: Adapt MCO to OCL v1 API #4756
MGMT-19337: enable injection of custom kubelet labels via env var in base template #4794
MCO-643: MCO-645: Reintroduce MCS CA rotation #4735
OCPBUGS-34586: Auto-recover from MC with invalid extension #4763
OCPBUGS-29067: GCP Custom-DNS: Update services that run on control plane nodes #4367
OCPBUGS-48566: Enable nmstate-configuration on all platforms #4795
MCO-466: Improve erroring where there is a bootstrap/in-cluster master config mismatch #4723
OCPEDGE-1313: feat: added assets for arbiter node role #4675
OCPEDGE-1419: Add ksan-storage extension #4792
MGMT-19337: enable injection of custom kubelet labels via env var for master nodes #4746
OCPBUGS-41489: Specify interface type when adding ovs-port #4761
OCPBUGS-38809: Update machine-config-daemon-pull.service to use custom policy for Podman < 4.4.1 #4554
OCPBUGS-48195: use new buffer for decoding clusterOverridePolicyJSON #4780
OCPBUGS-45928, OCPBUGS-46531: crio: drop crun subcgroup #4774
MCO-1449: Add MCDPivotError runbook to prometheus rules #4771
MCO-1482: pkg/operator/status: Drop PoolUpdating as an Upgradeable=False condition #4760
MCO-81: Emit events to warn about failing drains #4726
NO-ISSUE: Add AUTHFILE option to make image #4741
OCPEDGE-1559: bump(ocp/api,ocp/client-go) #4772
TRT-1926: Revert #4765 “crio: drop crun subcgroup” #4770
OCPBUGS-33144: Add clarification to invalid maxUnavailable alert #4757
OCPBUGS-38749: add timeout error to applyManifest retry list #4764
OCPBUGS-45928, OCPBUGS-46531: crio: drop crun subcgroup #4765
MCO-1470: Incorporates upstream devex helper changes for OCL testing #4753
OCPBUGS-46052: machine-os-builder deployment missing openshift.io/required-scc annotation #4752
MCO-1451: Merge “Zack’s Scripts” #4718
MCO-1416: Update timeouts & improve debuggability of ocl e2e tests #4750
MCO-113: Preserve previous boot MCD log #4731
OCPBUGS-45496: Prevent undesired MOSBs from building #4739
OCPBUGS-42636: Wait to render for other MC generating sub-controllers #4727
OCPBUGS-45860: daemon: add nil check for annotation fetching #4740
OCPBUGS-27477: Pausing Master MCP results in Alerts #4707
MCO-1416: Increase timeouts in OCL e2e tests #4730
OCPBUGS-45306: Remove trailing periods from AWS provided hostnames #4729
OCPBUGS-39199: clusteroperator/machine-config blips Degraded=True during upgrade test #4706
MCO-1416: Create OCL e2e Test Suite & Remove Unneeded Helper #4699
OCPBUGS-44995: Update the storage.conf configuration file template #4681
OCPBUGS-38749: add retry on error for apply functions #4698
NO-ISSUE: Fix 3 typos #4685
MCO-1165: rebuild annotation #4694
Full changelog

machine-image-customization-controller

OCPBUGS-44031: Verify tls while pulling down IPA #131
OCPBUGS-45710: Use go version 1.23 and OCP 4.19 base image #133
Full changelog

machine-os-images

OCPBUGS-55934: Dummy change to force a rebuild for 4.19 #63
NO-JIRA: Change to new host #54
OCPBUGS-50910: Decompress pxe file only if it’s a valid compressed file #51
OCPBUGS-44889: Allow external configuration of download host for production builds #46
NO-ISSUE: Update OWNERS #49
OCPBUGS-45474: Updating ose-machine-os-images-container image to be consistent with ART for 4.19 #48
Full changelog

metallb-frr

OCPBUGS-55284: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #87
Syncmetallb 04042025 #81
Align to upstream #79
Syncoperator03032025 #78
OCPBUGS-45545: Updating ose-frr-container image to be consistent with ART for 4.19 #70
Sync OWNERS with MetalLB #75
Align upstream 13/1/25 #72
Full changelog

monitoring-plugin

NO-JIRA: fix: update monitoring and virtualization routes to avoid overriding console routes #411
: NO-JIRA: bound table scroll and column alignment #409 #409
NO-JIRA: feature: upgrade react router to v5 compat #406
NO-JIRA: fix(incidents): performance improvements for incidents page #398
OCPBUGS-48533: Reset variables when making orthongonal selections #394
OU-765: Don’t break if cluster doesn’t exist #399
OU-767: Allow filtering by cluster name #396
OU-750: update the metrics typeahead to look pf-6 native #395
OCPBUGS-54292: Show column headings on metrics page #397
OU-760: Requests UX changes post PF-6 #390
OU-723, OU-729: Add label typeahead #392
OU-757: Show cluster column heading on acm silences page #393
OU-703: fix states filter in aggregated row #389
OU-752: Clear out old queries when loading queries from URL #391
RHINENG-16773: fixed silence alerts data form not filled with alert details #384
OU-702: re-add csv button for aggregated alert list #383
OU-659: PF-6 Migration #380
OU-678: fix: allow to set refresh interval to off #379
OU-724: remove dependency on deleted image #375
OU-660: Remove console CSS and Align with Patternfly components #362
OCPBUGS-52592: Fix “Export as CSV” #369
OU-700: don’t show metrics links in acm perspective #367
COO-768: add plugin proxy to perses proxy path #365
COO-759: update datasource whenerver the csrf token changes #363
RHINENG-12634: incident utils typescript conversion #359
CNV-55987: Aggregated alerts #348
COO-684: add mui/material as is required as peer dependency #360
OU-681: fix typo in the predefined metrics list #358
OU-499: remove deprecated components #356
NO-JIRA: fix virtualization persepective perses extension point #355
OU-618: Various Perses Updates #353
NO-JIRA: use ocp base images for ci #354
NO-JIRA: add incidents header #351
OU-618: Embed Perses Dashboards into Monitoring Plugin #350
OU-643: fix filter dropdpdowns to match patterfly correct use, remove deprecated dropdown components #347
rhineng-16008: add cutoff for alerts timestamps #349
RHINENG-10537: incidents page remove longstanding filter #343
RHINENG-10537: Voronoi container review branch #340
RHINENG-10537: fix incidents page loading state issue #341
NO-JIRA: Incidents page small fixes #336
OU-649: fix net/http vulnerable dependency #332
RHINENG-15594: fix tooltip in row details #334
RHINENG-15501: Fixing incidents filter issues with severeties and long standing #333
RHINENG-15582: Incidents dark theme support #331
RHINENG-15284: sync alert chart to main filter #330
RHINENG-15501: hotfix because filter requirement were updated #329
OU-644: Finish Alerting Refactor #306
OU-645: Fix virtualization perspective routes and routing #325
NO-JIRA: Don’t attempt to access potentially undefined variable #326
NO-JIRA: fixed function for incident chart colors #324
RHINENG-15501: Improve incidents filter logic and sync #323
RHINENG-15284: Sync alerts chart and incidents table with days filter #319
OU-433: Split the Dashboard Page between perses and legacy #304
RHINENG-15362: Sort the bars in the charts based on their first timestamp #322
NO-JIRA: revert reset all filters button #321
RHINENG-15190: fix gap in incident charts #316
OCPBUGS-47535: use pf v5 variables and table component #307
OU-630: Add Needed Virtualization Perspective Changes #317
OCPBUGS-48142: Fix Dev Perspective Alert URL namespace #314
Revert “OU-588: Move Incidents Tab to Alerting Page ” #312
RHINENG-15114: incidents page fixed date style inconsistency #310
RHINENG-15115: update hideshow graph button #311
RHINENG-15096: incidents page reset filters fix #309
OU-588: Move Incidents Tab to Alerting Page #303
NO-JIRA: Remove duplicate parameter #296
OCPBUGS-45896: Fix admin console alert detail graph #288
OCPBUGS-46083: fix button spacing on silence form #300
NO-JIRA: Run webpack with a different port #290
OCPBUGS-45174: Fix bounds on bar chart #295
OCPBUGS-45816: Fix inverted dropdown toggle #291
OCPBUGS-45801: Allow editing the until field on the silence edit page #292
OU-561: Use AlertsRulesDetailPage from monitoring-plugin #286
OU-432: Merge Perses dashboards with current dashboards list #266
NO-JIRA: tidy go dependencies #287
OU-499: Port CONSOLE-4124, ODC-7655, CONSOLE-4127 to dynamic plugin #282
OCPBUGS-45661: Updating monitoring-plugin-container image to be consistent with ART for 4.19 #284
RHINENG-14555: Update for the filters and default state for the filters #285
NO-JIRA: multiple components in tooltip for incidents #281
RHINENG-14523: (fix) update expanded details #283
RHINENG-14585: Remove pending alerts from processing and add another value to the unique key #280
RHINENG-14677: fix filters for incidents #279
OCPBUGS-35726: fix cert/key file reload #264
NO-JIRA: fix incidents filter width #275
NO-JIRA: Fix feature flagged DX #276
RHINENG-14523: Fix expanded row won’t render without rule details + firing logic update #274
NO-JIRA: Upgrade incidents dropdown #273
RHINENG-14524: incidents charts update cursor and #270
NO-JIRA: Remove extra copy that fails #269
Full changelog

multus-admission-controller

OCPBUGS-45601: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.19 #92
Full changelog

multus-cni, multus-cni-microshift

: OCPBUGS-55091: CNI subdirectory chaining for composable CNI chaining #268
TRT-2057: Properly structure empty CNI result #267
OCPBUGS-54153: Ds merge ³⁄₂₄ #264
OCPBUGS-53087: Tolerate issues writing network status annotation on CNI ADD #263
OCPBUGS-45037: Bring in getpodcontext (fix cache miss carry) #258
Full changelog

multus-networkpolicy

Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.19 (#67) #67
OCPBUGS-44354: Sync 20250204 (#66) #66
Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.19 (#65) #65
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-54422: Ds merge ⁴⁄₃ #356
OCPBUGS-53397: Upstream sync 20-03-2025 #353
OCPBUGS-52415: replace entrypoint #349
NP-1128: Ds merge 2/25/25 #346
NP-1100: Add nodeslicecontroller to dockerfile #341
OKD-232: fix entrypoint.sh for new SCOS builds #322
NP-1110: Allow go vet to be skipped #327
NP-1110: Remove build from make test-skip-static #326
NP-1110: <Carry> Add test dockerfile #325
NP-1111: replace ls line #323
NP-1111: Commit for test logs <temp> #321
<Carry> OCPBUGS-45854: Add test dockerfile #319
NP-1108: <Carry> Add test dockerfile #318
NP-1107: Ds merge 11/27/2024 #317
Full changelog

must-gather

MCO-1648: MCO-1649: Add machineconfignodes and pinnedimagesets to must-gather #487
CNF-16640: Changes for FRR-K8s Deployed via CNO #479
no-jira: Remove davemulford from collection-scripts/OWNERS file. #481
: no-jira: Update Makefile and Add Testing Info #462
NO-ISSUE: gather additional MCO debug artifacts #468
OCPBUGS-44264: Collect all clustercsidriver resources #464
OCPBUGS-45363: Update to use 4.19 image #466
OCPBUGS-44857: Separate resources with comma to fix malformed inspect #465
Full changelog

network-interface-bond-cni

OCPBUGS-45827: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.19 #66
Full changelog

network-metrics-daemon

Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.19 (#104) #104
Full changelog

network-tools

NO-JIRA: Fix JIRA queries #141
NO-JIRA: Add Peng #138
OCPBUGS-45318: change containerRuntime from runc to crun #136
OCPBUGS-45757: Updating ose-network-tools-container image to be consistent with ART for 4.19 #135
NO-JIRA: Add miheer and render dev names without “rhn-support-” prefix #134
Full changelog

networking-console-plugin

CNV-57493: Validate if the namespace is configured for a primary UDN #237
CNV-60065: fix cudn input name #233
OCPBUGS-49395: adding translations #236
Upload i18n translations scripts #229
CNV-59853: remove co-m-table-grid and dropdown-kebab-pf classes #231
CNV-58647: update PatternFly Modal to new version #228
CNV-58320: remove console classes which changed styling #227
add adam to the approves #223
CNV-56305: upgrade Network UI to PatternFly 6 #221
CNV-58015: fix delete label row #224
Upgrade dockerfile for node 18 and 4.19 #222
CNV-56436: show ipam lifecycle correctly with new spec #218
OCPBUGS-41964: No default path in the route creation form #216
CNV-56236: fix cudn modal form titles #217
OCPBUGS-42135: Update documentation links #214
CNV-56336: fix ipam lifecycle with new spec #212
CNV-56076: create cudn from empty state #210
Fix nads with no label #206
OCPBUGS-45803: Fix weight width #203
CNV-55457: Remove project modal #202
CNV-55234: do not show all namesapces in cudn namespace column #197
CNV-55129: Disable udn button #178
CNV-54828: fix udn create button #190
OCPBUGS-48421: add CIRD subnmet description #183
OCPBUGS-48440: show MTU and sort on list #181
OCPBUGS-48677: fix nad misspelled #189
CNV-55085: remove layer configuration #180
CNV-55239: Cluster udn through matchlabel #179
CNV-54825: do not allow deleting udns #191
OCPBUGS-48676: replace edit with save #185
OCPBUGS-48665: fix service name #184
CNV-55131: remove the primary name to the udn creation form #177
CNV-54827: fix select label on ClusterUserDefinedNetwork #173
OCPBUGS-48206: fix path-to-regex CVE #174
OCPBUGS-44823: hide udn navbar when udn is not installed #163
CNV-54111: mark NAD managed by UDN #162
OCPBUGS-48185: Bump nanoid from 3.3.7 to 3.3.8 #164
OCPBUGS-48073: Bump dompurify from 2.4.9 to 2.5.8 #161
OCPBUGS-48072: Bump cross-spawn from 7.0.3 to 7.0.6 #160
OCPBUGS-46553: fix ports as number instead of strings #152
OCPBUGS-46557: fix project displayName and description #154
CNV-50554: fix create button position #153
OCPBUGS-45050: UI crash accessing a Service in pending state #151
CNV-46603: select projects with multitypeahead #150
Updating networking-console-plugin-container image to be consistent with ART for 4.19 #148
CNV-46603: search project by name and fix select height #142
CNV-46603: Create project modal with ClusterUDN creation #146
CNV-46603: Cluster UDN modal creation #145
run kubevirt-plugin using start-console #147
CNV-52127: remove t calls that are not within components #143
CNV-46603: add CUDN kind #137
Full changelog

nutanix-cloud-controller-manager

OCPCLOUD-2847: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (1771fdb) into main #42
OCPBUGS-45615: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.19 #41
Full changelog

nutanix-machine-controllers

OCPCLOUD-2842: Update dependencies to k8s 1.32 #90
OCPBUGS-54317: fixing CVE-2025-22868 #97
OCPBUGS-53245: Fix link-local addresses being added to machine #100
OCPBUGS-50710: fixing CVE-2024-45338 #89
OCPBUGS-45560: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.19 #87
Full changelog

oauth-apiserver

OCPBUGS-49845: Prevent storage layer retries for methods with side effects. #128
Full changelog

oauth-proxy

OCPBUGS-48333: Update dependencies to address CVE-2024-24786 #313
no-jira: OWNERS: add Krzys (ibihim) and Ilias (liouk) as reviewers #282
OCPBUGS-44319: Fix oauth-proxy e2e-component tests #289
Full changelog

oauth-server

CONSOLE-4434, OCPBUGS-43610: update login templates to use PF6 and add validation #169
OCPBUGS-35294: Add French and Spanish localization for login screen #154
Full changelog

oc-mirror

OCPBUGS-55704: implements registries.d file as specified in containers/image docs (#1137) #1137
OCPBUGS-54891: Fix mirroring images with tag&digest in charts (#1133) #1133
OCPBUGS-54653: delete: continue on errors (#1127) #1127
OCPBUGS-50617: oc-mirror does not create signature files (#1073) #1073
CLID-246, CLID-307, CLID-308, CLID-309, CLID-310, CLID-347: feat/adds signatures to the archive (#1119) #1119
CLID-321: Add annotations to resources generated by oc-mirror v2 (#1086) #1086
CLID-352: images: add integration tests image (#1124) #1124
OCPBUGS-49880: cli: return distinct error codes depending on failure (#1062) #1062
OCPBUGS-52471: Fix OOM at filtering catalogs (#1120) #1120
OCPBUGS-52960: v2: fix setting version during build (#1109) #1109
OCPBUGS-52978: delete: fix typo in –help output (#1115) #1115
OCPBUGS-52969: remove TechPreview mentions of v2 in –help (#1110) #1110
OCPBUGS-52588: fix: error when no related image was found (#1105) #1105
OCPBUGS-50680: v2/operator: refactor operator FilteredCollector (#1093) #1093
no-jira: v2/manifest/oci-manifest: refactor and dedup the code (#1098) #1098
v2: filter wrapcheck warnings for oc-mirror (#1104) #1104
OCPBUGS-51328: Fix CVE-2025-27144 (#1097) #1097
CLID-325: adds cpu and memory profiling (#1100) #1100
CLID-203, OCPBUGS-26771: fixes CVE-2024-0406 mholt/archiver: path traversal vulnerability (#1092) #1092
Bump the pip group across 2 directories with 3 updates (#1054) #1054
v2: update golangci-lint config (#1083) #1083
OCPBUGS-50963: v2: don’t clean cluster resources on dry-run mode (#1087) #1087
v2/cli: always stop local registry and close registry.log (#1068) #1068
OCPBUGS-44103: bump oc fork version (#1080) #1080
OCPBUGS-49990: v2/release: error out for kubevirt/graph image errors (#1070) #1070
OCPBUGS-50685: fixes the code to make the spinner trigger after semaphore is released (#1077) #1077
v2: disable spinners when not running in a tty (#1049) #1049
OCPBUGS-50503: oc-mirror fails with error unknown image: reference name is empty (#1072) #1072
OCPBUGS-49991: fixes bundle related images being skipped (#1071) #1071
NO-JIRA: only save graph data if it’s valid json (#1069) #1069
OCPBUGS-49803: v2/cli: share common flag options (#1043) #1043
OCPBUGS-49798: exposes the parallel-layers flag (#1063) #1063
OCPBUGS-49730: fixes the infinite loop when no images to mirror (#1060) #1060
no-jira: v2/local_stored_collector: fix missing log argument (#1061) #1061
OCPBUGS-49723: v2/clusterresources: remove ClusterCatalog namespace (#1058) #1058
CLID-300: Update catalog filtering doc (#1047) #1047
CLID-306: upgrades dependencies (#1053) #1053
CLID-306: upgrades dependencies (#1048) #1048
CLID-303: disables the selected bundle feature (#1045) #1045
CLID-301: add –cache-dir to delete command (#1041) #1041
OCPBUGS-45059: fixes the delete when catalog mirrored with v1 from disk (oci://) (#1036) #1036
CLID-301: add –cache-dir command line option (#1035) #1035
OCPBUGS-45161: Generate ClusterCatalog resources for operator catalogs (#1034) #1034
fixes CVEs upgrading go-git dependency (#1028) #1028
OCPBUGS-47688: Fix ITMS and IDMS generated when mirror dest contains release namespace (#1002) #1002
OCPBUGS-48513: e2e: use same version of crane as in go.mod (#1016) #1016
ocpbugs-44799: new concurrent worker using channels (#960) #960
OWNERS: add myself to reviewers. (#1007) #1007
OCPBUGS-44714: don’t clear cluster-resources dir on delete --generate (#1004) #1004
OCPBUGS-47453: Use one of the newer sha256 keys to verify release signatures (#997) #997
make: also fmt/vet the v2 module (#996) #996
OCPBUGS-45215: cli: fix log-level values checking (#995) #995
OCPBUGS-43489: Fix for deleting of local cache using –force-cache-de… (#988) #988
OCPBUGS-45580: Fix Mirror2Disk not including the rebuilt catalog in the archive (#990) #990
update ci file to the latest go version (#986) #986
pull request template update (#987) #987
OCPBUGS-44901: Align tag format for additionalImages and operators (#981) #981
OCPBUGS-42849: Assign a static name to the release signature configmap (#979) #979
OCPBUGS-43825: Fix graph image not deletable if mirrored by m2m (#982) #982
Updating oc-mirror-plugin-container image to be consistent with ART for 4.19 (#980) #980
OCPBUGS-44033: Failed to mirror ocp payload using digest (#978) #978
OCPBUGS-44449: Fix batch info log for delete scenario (#967) #967
OCPBUGS-43275: De-duplicate release images when several releases are chosen (#969) #969
OCPBUGS-44448: Skip deletion of images with same source and different destination tag (#968) #968
OCPBUGS-43731, OCPBUGS-44836: Ability to generate delete-images.yaml with v1 tags (#959) #959
OCPBUGS-44818: Fix mirroring catalogs with full:true (#963) #963
OCPBUGS-42862: oc-mirror fails to find the image-references (#966) #966
OCPBUGS-44789: Fix mirroring OCI catalogs multiple times (#962) #962
OCPBUGS-44033: Failed to mirror ocp payload using digest (#961) #961
Full changelog

olm-catalogd

NO-ISSUE: Synchronize From Upstream Repositories #322
NO-ISSUE: Synchronize From Upstream Repositories #315
NO-ISSUE: Synchronize From Upstream Repositories #312
NO-ISSUE: Synchronize From Upstream Repositories #309
NO-ISSUE: Synchronize From Upstream Repositories #308
NO-ISSUE: Synchronize From Upstream Repositories #306
NO-ISSUE: Synchronize From Upstream Repositories #305
NO-ISSUE: Synchronize From Upstream Repositories #303
NO-ISSUE: Synchronize From Upstream Repositories #300
NO-ISSUE: Synchronize From Upstream Repositories #299
NO-ISSUE: Synchronize From Upstream Repositories #298
NO-ISSUE: Synchronize From Upstream Repositories through PR1871 #294
OCPBUGS-23055: Synchronize From Upstream Repositories through PR1811 #290
NO-ISSUE: Synchronize From Upstream Repositories #285
NO-ISSUE: Synchronize From Upstream Repositories #282
NO-ISSUE: Synchronize From Upstream Repositories #279
NO-ISSUE: Synchronize From Upstream Repositories #278
NO-ISSUE: Synchronize From Upstream Repositories #277
NO-ISSUE: Synchronize From Upstream Repositories #276
OPRUN-3722: Synchronize From Upstream Repositories #273
NO-ISSUE: Synchronize From Upstream Repositories #271
NO-ISSUE: Synchronize From Upstream Repositories #270
NO-ISSUE: Synchronize From Upstream Repositories #266
NO-ISSUE: Manual Synchronize from upstream #224
NO-ISSUE: (Manual) Synchronize From Upstream Repositories #216
NO-ISSUE: (Manual) Synchronize From Upstream Repositories #214
NO-ISSUE: Synchronize From Upstream Repositories #212
NO-ISSUE: Synchronize From Upstream Repositories #210
NO-ISSUE: Synchronize From Upstream Repositories #209
NO-ISSUE: Synchronize From Upstream Repositories #207
NO-ISSUE: Synchronize From Upstream Repositories #205
NO-ISSUE: Synchronize From Upstream Repositories #204
NO-ISSUE: Synchronize From Upstream Repositories #203
NO-ISSUE: Synchronize From Upstream Repositories #202
NO-ISSUE: Synchronize From Upstream Repositories #199
NO-ISSUE: Synchronize From Upstream Repositories #195
NO-ISSUE: Synchronize From Upstream Repositories #193
NO-ISSUE: Synchronize From Upstream Repositories #189
NO-ISSUE: Synchronize From Upstream Repositories #190
NO-ISSUE: Synchronize From Upstream Repositories #188
NO-ISSUE: Synchronize From Upstream Repositories #187
NO-ISSUE: Synchronize From Upstream Repositories #184
NO-ISSUE: Synchronize From Upstream Repositories #183
NO-ISSUE: Synchronize From Upstream Repositories #182
NO-ISSUE: Synchronize From Upstream Repositories #181
NO-ISSUE: Synchronize From Upstream Repositories #179
NO-ISSUE: Synchronize From Upstream Repositories #178
NO-ISSUE: Synchronize From Upstream Repositories #177
NO-ISSUE: Synchronize From Upstream Repositories #176
NO-ISSUE: Synchronize From Upstream Repositories #175
NO-ISSUE: Synchronize From Upstream Repositories #174
NO-ISSUE: Synchronize From Upstream Repositories #173
NO-ISSUE: Synchronize From Upstream Repositories #172
NO-ISSUE: Synchronize From Upstream Repositories #171
NO-ISSUE: Synchronize From Upstream Repositories #170
NO-ISSUE: Synchronize From Upstream Repositories #169
NO-ISSUE: Synchronize From Upstream Repositories #168
NO-ISSUE: Synchronize From Upstream Repositories #167
NO-ISSUE: Synchronize From Upstream Repositories #165
NO-ISSUE: Synchronize From Upstream Repositories #164
NO-ISSUE: Synchronize From Upstream Repositories #163
NO-ISSUE: Synchronize From Upstream Repositories #162
NO-ISSUE: Synchronize From Upstream Repositories #161
NO-ISSUE: Synchronize From Upstream Repositories #160
NO-ISSUE: Synchronize From Upstream Repositories #158
NO-ISSUE: Synchronize From Upstream Repositories #153
NO-ISSUE: Synchronize From Upstream Repositories #150
NO-ISSUE: Synchronize From Upstream Repositories #149
NO-ISSUE: Synchronize From Upstream Repositories #147
NO-ISSUE: Synchronize From Upstream Repositories #145
NO-ISSUE: Synchronize From Upstream Repositories #144
NO-ISSUE: Synchronize From Upstream Repositories #143
NO-ISSUE: Synchronize From Upstream Repositories #141
NO-ISSUE: Synchronize From Upstream Repositories #140
NO-ISSUE: Synchronize From Upstream Repositories #139
NO-ISSUE: Synchronize From Upstream Repositories #138
NO-ISSUE: Synchronize From Upstream Repositories #137
NO-ISSUE: Synchronize From Upstream Repositories #135
NO-ISSUE: Synchronize From Upstream Repositories #133
NO-ISSUE: Synchronize From Upstream Repositories #132
NO-ISSUE: Synchronize From Upstream Repositories #131
NO-ISSUE: Synchronize From Upstream Repositories #130
NO-ISSUE: Synchronize From Upstream Repositories #129
NO-ISSUE: Synchronize From Upstream Repositories #128
NO-ISSUE: Synchronize From Upstream Repositories #127
NO-ISSUE: Synchronize From Upstream Repositories #126
NO-ISSUE: Synchronize From Upstream Repositories #125
NO-ISSUE: Synchronize From Upstream Repositories #124
NO-ISSUE: Synchronize From Upstream Repositories #123
NO-ISSUE: Synchronize From Upstream Repositories #121
NO-ISSUE: Synchronize From Upstream Repositories #119
NO-ISSUE: Synchronize From Upstream Repositories #118
NO-ISSUE: Synchronize From Upstream Repositories #117
NO-ISSUE: Synchronize From Upstream Repositories #115
OCPBUGS-36471: Synchronize From Upstream Repositories #114
NO-ISSUE: Synchronize From Upstream Repositories #111
NO-ISSUE: Synchronize From Upstream Repositories #110
NO-ISSUE: Synchronize From Upstream Repositories #109
NO-ISSUE: Synchronize From Upstream Repositories #108
NO-ISSUE: Synchronize From Upstream Repositories #107
NO-ISSUE: Synchronize From Upstream Repositories #106
NO-ISSUE: Synchronize From Upstream Repositories #104
NO-ISSUE: Synchronize From Upstream Repositories #103
NO-ISSUE: Synchronize From Upstream Repositories #102
NO-ISSUE: Synchronize From Upstream Repositories #101
NO-ISSUE: Synchronize From Upstream Repositories #99
OCPBUGS-31459: Synchronize From Upstream Repositories #97
OPRUN-3268: Add pointer to tooling README for downstreaming info #94
OCPBUGS-31285: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 #89
NO-ISSUE: Synchronize From Upstream Repositories #92
NO-ISSUE: UPSTREAM: <carry>: update owners #91
NO-ISSUE: Synchronize From Upstream Repositories #90
NO-ISSUE: Synchronize From Upstream Repositories #88
OCPBUGS-31285: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 #86
NO-ISSUE: Synchronize From Upstream Repositories #87
NO-ISSUE: Synchronize From Upstream Repositories #84
NO-ISSUE: Synchronize From Upstream Repositories #83
NO-ISSUE: Synchronize From Upstream Repositories #82
NO-ISSUE: Synchronize From Upstream Repositories #81
NO-ISSUE: Synchronize From Upstream Repositories #80
NO-ISSUE: Synchronize From Upstream Repositories #79
NO-ISSUE: Synchronize From Upstream Repositories #78
NO-ISSUE: Synchronize From Upstream Repositories #77
NO-ISSUE: Synchronize From Upstream Repositories #76
NO-ISSUE: Synchronize From Upstream Repositories #75
NO-ISSUE: Synchronize From Upstream Repositories #74
NO-ISSUE: Synchronize From Upstream Repositories #73
NO-ISSUE: Synchronize From Upstream Repositories #72
NO-ISSUE: Synchronize From Upstream Repositories #70
NO-ISSUE: Synchronize From Upstream Repositories #67
NO-ISSUE: Synchronize From Upstream Repositories #66
NO-ISSUE: Synchronize From Upstream Repositories #65
NO-ISSUE: Synchronize From Upstream Repositories #64
NO-ISSUE: Synchronize From Upstream Repositories #63
NO-ISSUE: Synchronize From Upstream Repositories #62
NO-ISSUE: Synchronize From Upstream Repositories #61
NO-ISSUE: Synchronize From Upstream Repositories #60
NO-ISSUE: Synchronize From Upstream Repositories #59
OCPBUGS-24795: Updating ose-olm-operator-controller-container image to be consistent with ART #51
NO-ISSUE: Synchronize From Upstream Repositories #56
NO-ISSUE: Synchronize From Upstream Repositories #55
NO-ISSUE: Synchronize From Upstream Repositories #54
NO-ISSUE: Synchronize From Upstream Repositories #53
NO-ISSUE: Synchronize From Upstream Repositories #50
NO-ISSUE: Synchronize From Upstream Repositories #49
NO-ISSUE: Synchronize From Upstream Repositories #48
NO-ISSUE: Synchronize From Upstream Repositories #47
NO-ISSUE: Synchronize From Upstream Repositories #46
NO-ISSUE: Synchronize From Upstream Repositories #41
NO-ISSUE: UPSTREAM: <drop>: Remove GH activities #44
OPRUN-3081: UPSTREAM: <carry>: Drop commitchecker #37
OPRUN-3075: Update to Upstream v0.7.0 #31
OCPBUGS-20505: Bump golang.org/x/net to v0.17.0 #28
OCPBUGS-19096: UPSTREAM: <carry>: Updating ose-olm-operator-controller images to be consistent with ART #27
Update to upstream v0.3.0 #25
Add commitchecker #24
UPSTREAM: <carry>: add manifests to image #23
UPSTREAM: <carry>: add namespace management annotation #22
UPSTREAM: 290: Remove Resource Limits (#290) #21
UPSTREAM: <carry>: add scheduling preference/priorityClass annotations #20
Update main to upstream commit 83d0403 #19
UPSTREAM: <carry>: add USER to openshift dockerfile #18
Updating ose-olm-operator-controller images to be consistent with ART #17
UPSTREAM: <carry>: use image placeholders #16
Update to upstream main commit 98b6a9e #15
UPSTREAM: <carry>: conditionally rename manifests #13
UPSTREAM: <carry>: align dockerfile and manifests for bin target #14
UPSTREAM: <carry>: precision target manifest verification #12
Update to upstream main commit 3d30ad0 #5
UPSTREAM: <carry>: ci-operator #1
Full changelog

olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #322
NO-ISSUE: Synchronize From Upstream Repositories #315
NO-ISSUE: Synchronize From Upstream Repositories #312
NO-ISSUE: Synchronize From Upstream Repositories #309
NO-ISSUE: Synchronize From Upstream Repositories #308
NO-ISSUE: Synchronize From Upstream Repositories #306
NO-ISSUE: Synchronize From Upstream Repositories #305
NO-ISSUE: Synchronize From Upstream Repositories #303
NO-ISSUE: Synchronize From Upstream Repositories #300
NO-ISSUE: Synchronize From Upstream Repositories #299
NO-ISSUE: Synchronize From Upstream Repositories #298
NO-ISSUE: Synchronize From Upstream Repositories through PR1871 #294
OCPBUGS-23055: Synchronize From Upstream Repositories through PR1811 #290
NO-ISSUE: Synchronize From Upstream Repositories #285
NO-ISSUE: Synchronize From Upstream Repositories #282
NO-ISSUE: Synchronize From Upstream Repositories #279
NO-ISSUE: Synchronize From Upstream Repositories #278
NO-ISSUE: Synchronize From Upstream Repositories #277
NO-ISSUE: Synchronize From Upstream Repositories #276
OPRUN-3722: Synchronize From Upstream Repositories #273
NO-ISSUE: Synchronize From Upstream Repositories #271
NO-ISSUE: Synchronize From Upstream Repositories #270
NO-ISSUE: Synchronize From Upstream Repositories #266
NO-ISSUE: Manual Synchronize from upstream #224
NO-ISSUE: (Manual) Synchronize From Upstream Repositories #216
NO-ISSUE: (Manual) Synchronize From Upstream Repositories #214
NO-ISSUE: Synchronize From Upstream Repositories #212
NO-ISSUE: Synchronize From Upstream Repositories #210
NO-ISSUE: Synchronize From Upstream Repositories #209
NO-ISSUE: Synchronize From Upstream Repositories #207
NO-ISSUE: Synchronize From Upstream Repositories #205
NO-ISSUE: Synchronize From Upstream Repositories #204
NO-ISSUE: Synchronize From Upstream Repositories #203
NO-ISSUE: Synchronize From Upstream Repositories #202
NO-ISSUE: Synchronize From Upstream Repositories #199
NO-ISSUE: Synchronize From Upstream Repositories #195
Full changelog

openshift-apiserver

OCPBUGS-44432: Skip blocked registry check for registries with mirrors #475
OCPBUGS-49844: Prevent storage layer retries for methods with side effects. #495
OCPBUGS-45861: validate image property isn’t nil before using #483
OCPBUGS-45861: move on to the next digest/tag during failures #480
OCPBUGS-45861: prevent panic when no image and error are set #478
Full changelog

openshift-controller-manager

OCPBUGS-55642: Empty proxy variables are causing issues during the build #376
OCPBUGS-50507: Intermittent authentication issues when accessing OpenShift registry #365
WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #366
OCPBUGS-47527: Add team members to the OWNERS file #355
Full changelog

openshift-state-metrics

OCPBUGS-45624: Updating openshift-state-metrics-container image to be consistent with ART for 4.19 #119
Full changelog

openstack-cluster-api-controllers

Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #361
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #360
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #359
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #358
OCPCLOUD-2857: Set infrastructureRef.Namespace in Cluster object #357
OSASINFRA-3707: ⚠️ Manual sync from release-0.12 on main ⚠️ #352
OSASINFRA-3722: Deploy manifests for CustomNoUpgrade feature set also #356
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into main #349
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into main #348
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into main #347
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.11 into main #339
OCPBUGS-45387: Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.19 #345
Full changelog

openstack-machine-api-provider

OSASINFRA-3746: Consume CA cert from CCO secret #131
NO-JIRA: Update golang.org/x/net to v0.33.0 #128
NO-JIRA: Upgrade Gophercloud to v1.14.1 #129
OCPBUGS-48288: Stop ignoring port.tags field #130
OCPBUGS-45684: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.19 #127
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #994
OCPBUGS-52923: pin go-jose/v4@v4.0.5 #993
OCPBUGS-52923: Synchronize From Upstream Repositories (with a revert) PR 988 with revert #991
NO-ISSUE: Synchronize From Upstream Repositories #986
NO-ISSUE: Synchronize From Upstream Repositories #984
NO-ISSUE: Synchronize From Upstream Repositories #966
NO-ISSUE: Update DOWNSTREAM owners files #973
OCPBUGS-42526: Ensure that PSA label is latest instead of pinning versions #972
NO-ISSUE: Synchronize From Upstream Repositories #964
NO-ISSUE: Synchronize From Upstream Repositories #963
NO-ISSUE: Synchronize From Upstream Repositories #962
NO-ISSUE: Synchronize From Upstream Repositories #961
NO-ISSUE: Synchronize From Upstream Repositories #952
NO-ISSUE: Synchronize From Upstream Repositories #937
OCPBUGS-48486: Fix concurrent namespace resolution #936
NO-ISSUE: Manual Synchronize From Upstream Repositories #933
NO-ISSUE: Synchronize From Upstream Repositories #928
NO-ISSUE: Synchronize From Upstream Repositories #927
NO-ISSUE: Synchronize From Upstream Repositories #919
NO-ISSUE: Synchronize From Upstream Repositories #915
NO-ISSUE: Remove m1kola from owners #914
OCPBUGS-45420: Updating operator-registry-container image to be consistent with ART for 4.19 #909
OCPBUGS-45396: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.19 #908
OCPBUGS-42815: Synchronize From Upstream Repositories #910
OCPBUGS-45490: Synchronize From Upstream Repositories #907
OCPBUGS-45381: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.19 #906
NO-ISSUE: Synchronize From Upstream Repositories #904
NO-ISSUE: Synchronize From Upstream Repositories #903
NO-ISSUE: Synchronize From Upstream Repositories #899
Full changelog

operator-marketplace

OPRUN-3835: Update to 4.19 community-operators catalog #621
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.4 #618
NO-ISSUE: Bump github.com/onsi/gomega from 1.36.2 to 1.37.0 #617
OPRUN-3621: Replace 4.18 image references with 4.19 #579
NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 #616
OPRUN-3818: Bump sigs.k8s.io/controller-runtime from 0.20.2 to 0.20.3 #611
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.23.0 #605
NO-ISSUE: Bump github.com/onsi/gomega from 1.36.1 to 1.36.2 #608
NO-ISSUE: Upgrade github.com/operator-framework/api from v0.23.0 to v0.30.0 and github.com/prometheus/client_golang v1.21.0 => v1.21.1 #598
NO-ISSUE: Add dependabot to help keep the project maintained #599
OCPBUGS-52340: Ensure that PSA label is latest instead of pinning versions #600
NO-ISSUE: Upgrade controller-runtime from v0.17.2 to 0.20.2 and consequently k8s version from 1.29 to 1.32 #594
OCPBUGS-49378: Upgrade golang.org/x/net (CVE-2024-45338) #583
OCPBUGS-45566: Updating marketplace-operator-container image to be consistent with ART for 4.19 #580
Full changelog

ovirt-csi-driver-operator

NO-JIRA: Readme update #139
OCPBUGS-45766: Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART for 4.19 #138
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-51165, OCPBUGS-52278: Downstream Merge 28th april 2025 #2522
CORENET-5786: Downstream merge 2025-04-25 #2521
CORENET-5389, OCPBUGS-51040, OCPBUGS-54577: [DownstreamMerge] 2025-04-16 #2516
CORENET-5721, CORENET-5856, OCPBUGS-51317: [DownstreamMerge] 2025-04-14 #2513
CORENET-5371: Dockerfile: Bump OVS version to 3.5.0-0.9 #2472
CORENET-5382: unpin libreswan version #2498
OCPBUGS-49994: [DownstreamMerge] 7th april #2509
CORENET-5666, OCPBUGS-43004, OCPBUGS-54199: Downstream Merge 2025-04-02 #2505
OCPBUGS-45410: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.19 #2379
OCPBUGS-45741: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.19 #2380
OCPBUGS-54245, SDN-5772: Downstream merge 2025-03-21 #2501
OCPBUGS-48678: Update OVN to FDP25.A.1 24.09.2-41 #2493
OCPBUGS-48781: [DownstreamMerge] 2-27-25 #2474
OCPBUGS-49393, OCPBUGS-49598: [DownstreamMerge] 13 feb 2025 #2459
OCPBUGS-49613, OCPBUGS-49933: Downstream Merge 7th Feb 2025 #2446
OCPBUGS-49840: Bump OVN to 24.09.2-14 for FDP-1131 #2435
OCPBUGS-45469, OCPBUGS-49337: [DownstreamMerge] 2-6-25 #2441
OCPBUGS-45745: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.19 #2381
OCPBUGS-45893: [DownstreamMerge] 2-4-25 #2434
OCPBUGS-49621, OCPBUGS-49727: [DownstreamMerge] 1-31-25 #2431
SDN-4930: [DownstreamMerge] 1-29-25 #2429
SDN-4930: Downstream Merge [01-28-2025] #2427
OCPBUGS-42609, OCPBUGS-46585, OCPBUGS-48330, SDN-4930: Downstream Merge [01-23-2025] #2420
OCPBUGS-42707: Bump OVN to ovn24.09-24.09.1-10.el9fdp #2390
Full changelog

powervs-block-csi-driver

MULTIARCH-5364: Rebase ibm-powervs-block-csi-driver with upstream #97
MULTIARCH-5281: Rebase ibm-powervs-block-csi-driver with upstream #96
OCPBUGS-45423: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.19 #93
MULTIARCH-5191: Rebase with upstream k8s-sigs/ibm-powervs-block-csi-driver #95
Full changelog

powervs-block-csi-driver-operator

NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #83
STOR-2252: Bump all deps #81
OCPBUGS-46577: Provision for user-configured endpoints for IBMCLOUD_IAM_API_ENDPOINT, IBMCLOUD_IAM_API_ENDPOINT,etc #79
OCPBUGS-45550: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.19 #80
OCPBUGS-44978: bump openshift/api #77
Full changelog

powervs-cloud-controller-manager

No-Jira: Update packages in go.mod #85
No-Jira: Manual rebase of upstream release 1.32 #82
OCPBUGS-45728: Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.19 #81
Full changelog

powervs-machine-controllers

OCPBUGS-54620: CVE-2025-30204: github.com/golang-jwt/jwt allows excessive memory allocation during header parsing #112
OCPBUGS-53309: Update dependencies to k8s 1.32 #110
OCPBUGS-51276: Fix for CVE-2024-45338 in golang.org/x/net/html in main #100
OCPBUGS-49733: Uses VPC endpoint override in Disconnected case #99
OCPBUGS-47764: Honors custom ResourceController endpoint URL in NewValidatedClient(), if provided #98
OCPBUGS-47476: Overrides URL for ResourceController client if provided #97
OCPBUGS-46471: Sets Authenticator.URL with IAM endpoint override if provided #95
OCPBUGS-45732: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.19 #93
MULTIARCH-5186: Update k8s and Openshift dependencies #94
Full changelog

prom-label-proxy

OCPBUGS-45713: Updating prom-label-proxy-container image to be consistent with ART for 4.19 #377
Full changelog

prometheus

MON-4199: chore: update to v3.2.1 #246
OCPBUGS-53025: Scraping: Bump cache iteration after error to avoid false duplicate detection. #245
MON-4104: Update to 3.0 #227
OCPBUGS-48273: fix(main.go): avoid closing the query engine until it is guaranteed to no longer be in use #241
OCPBUGS-45586: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.19 #238
Full changelog

prometheus-alertmanager

NO-JIRA: Bump openshift/prometheus-alertmanager to v0.28.1 #99
MON-4155: Bump openshift/prometheus-alertmanager to v0.28.0 #98
OCPBUGS-45623: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.19 #97
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

MON-4207: Bump openshift/prometheus-operator to v0.81.0 #329
NO-JIRA: Bump openshift/prometheus-operator to v0.80.1 #325
MON-4126: [bot] Bump openshift/prometheus-operator to v0.80.0 #324
OCPBUGS-18656: Bump openshift/prometheus-operator to v0.79.2 #321
OCPBUGS-45644: Updating prometheus-config-reloader-container image to be consistent with ART for 4.19 #319
OCPBUGS-45736: Updating prometheus-operator-container image to be consistent with ART for 4.19 #320
OCPBUGS-45453: Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.19 #317
NO-JIRA: [bot] Bump openshift/prometheus-operator to v0.78.2 #314
Full changelog

prometheus-node-exporter

MON-4204: Use slog for accelerators (and version bump) #164
MGMT-19498: Add configmap support to the accelerator’s collector #155
OCPBUGS-46498: adding new NVIDIA accelerators to monitor #161
OCPBUGS-46498: updating monitored accelerator list #159
OCPBUGS-45424: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.19 #157
MGMT-19361: Adding new device for accelerators monitoring #156
Full changelog

route-controller-manager

OCPBUGS-29354: Added error event for failed ingress to route conversion #48
OCPBUGS-45441: Updating ose-route-controller-manager-container image to be consistent with ART for 4.19 #52
NO-JIRA: Updated OWNERS file to reflect current team #54
NO-JIRA: Added HACKING.md file #51
OCPBUGS-13181: ingress: Reset metrics when ingress is deleted #49
Full changelog

service-ca-operator

OCPBUGS-55057: Don’t check featuregates on operand #263
CNTRLPLANE-339: Issue short lived certificates if ShortCertRotation featuregate is enabled #245
OCPBUGS-48171: Update go 1.23 and ocp 4.19 #254
OCPBUGS-40772: Bump go to 1.22.0 #248
Full changelog

telemeter

OCPBUGS-50837: Drop nil metrics during elide transform and capture metric for same #556
OCPBUGS-50837: Check nil metric in elide label #555
SWATCH-3413: Add acm_capacity_effective_cpu_cores:sum recording rule #554
OCPBUGS-48381: rename doc references to master branch to main #553
OCPBUGS-45763: Updating telemeter-container image to be consistent with ART for 4.19 #552
Full changelog

tests

OCPBUGS-55897: bump limits #29767
OCPBUGS-55265: Bump 1.32.4 #29707
OKD-243: Skip GatewayAPIController tests for OKD #29749
OCPBUGS-55510: Update node selection in MCN scope test for two-node Openshift #29744
OCPBUGS-55392: Exclude imagestream import mode toggle tests for SNO #29715
OCPBUGS-55441: Fix MCN tests for two-node clusters & add more logs to scope tests #29732
OCPBUGS-54700: aws/edge: prevent test using unschedulable nodes #29655
TRT-2092: Fix default cert issuer name in RouteExternalCertificate test case #29735
OCPBUGS-42044: [build] Ensure Git Clone Does Not Run Privileged #29686
OCPBUGS-54869: bump limits #29722
OPRUN-3783: OLMv1: Add support for preflight permissions checks (fixed) #29730
TRT-2092: Fix default cert issuer name for Managed Service cluster (ROSA classic) in RouteExternalCertificate test case #29731
TRT-2091: Revert #29714 “OPRUN-3782: OLMv1: Add support for preflight permissions checks” #29726
OPRUN-3782: OLMv1: Add support for preflight permissions checks #29714
MCO-1646: API & client-go bumps for MCN V1 API updates #29717
NO ISSUE: Temporarily skip PinnedImageSet tests on SNO & metal #29721
Revert “TRT-2049: check for any watch requests” #29719
MCO-1519: Adapt MCN tests to use V1 API #29701
OPRUN-3692: Olmv1-catalogd tests for API endpoints #29580
TRT-2049: check for any watch requests #29674
NO-ISSUE: Automated - Update synthetic test data #29677
OCPBUGS-55342: Skip Hypershift for MachineConfigNodes and PinnedImages tests #29712
NO-JIRA: Revert “Add monitortest for elevated etcd disk fsync intervals” #29648
TRT-2043: look for high latency audit requests #29571
OCPBUGS-22413: Add myql-80 to fix known image check test for OKD #29659
OCPBUGS-54869: bump limits #29700
OCPBUGS-55214: Fix default cert issuer name for HyperShift in RouteExternalCertificate test case #29698
OCPEDGE-1680: Fix failed arbiter tests on ci run #29691
OCPBUGS-54906: Remove [Skipped:Disconnected] from the test name to allow metal ipv6 #29685
OCPBUGS-54651: resources: Add limit exceptions for Istio #29690
OCPBUGS-55175: Add cleanup to MCN test #29695
OCPBUGS-55132: gatewayapicontroller: Increase timeouts #29693
OCPBUGS-54951: MCO-1520: Reintroduction of MachineConfigNode e2e tests #29683
OCPBUGS-54869: bump limits #29688
NE-1970: 5 e2e origin tests for gatewayApiController featureGate #29670
TRT-2082: Revert “MCO-1520: Add MachineConfigNode e2e tests” #29682
OCPBUGS-54906: Change the test image to registry.k8s.io/e2e-test-images/agnhost #29672
OCPEDGE-1675: feat: update some tests to account for the arbiter node #29639
MCO-1636: skip PIS custom pool checks on SNO cluster #29673
MCO-1520: Add MachineConfigNode e2e tests #29596
OCPBUGS-54869: bump limits #29679
OCPBUGS-54661: Route ExternalCertificate: Fix e2e tests for metal platform #29656
SPLAT-2060: Registered Machine API tests extension #29579
MCO-1523: PinnedImageSet v1alpha1 Testing #29599
SDN-5217: Add tests for OVN-K default pod network route advertisement #29419
NO-JIRA: add api error rate observed by kubelet, kcm, and scheduler #29070
TRT-2049: Track Watch Counts via Audit Events #29628
OAPE-91: Route ExternalCertificate: Skip e2e jobs for bare metal platform #29651
OCPBUGS-18865: Reapply “kube-apiserver disruption incluster monitors” #29282
NO-ISSUE: Automated - Update synthetic test data #29600
OCPBUGS-53279: add failure case to skip in testPodSandboxCreation() #29631
CNTRLPLANE-371: Use endpointslices in idling tests instead of deprecated endpoints #29647
OAPE-91: Add E2E tests for Route ExternalCertificate feature #29499
OCPBUGS-53249: feat: support platform type external #29623
MCO-1631: Remove “[sig-arch][Early] CRDs for openshift.io should have a status in the CRD schema” #29643
TRT-1854: add synthetic test to check for presence of “Skipped” annotations in OTE tests #29606
OCPBUGS-53014: Bump to kubernetes 1.32.3 #29612
NE-1968: add e2e tests for FeatureGate GatewayAPI #29597
NO-ISSUE: Clean up MachineConfiguration fixture apply #29626
NO-ISSUE: Wait for MachineConfiguration status to be upto date #29625
TRT-2052: Fix broken intervals charts #29616
NO-JIRA: Alert intervals should have the display flag for charting #29624
OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.redhat.com to redhat.com #29618
CNTRLPLANE-5: Fix decoding of CBOR data in etcd test #29614
SDN-5768: virt, udn: use l2bridge binding #29439
OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.openshift.com to docs.redhat.com after docs migration #29604
CNTRLPLANE-5: Decode CBOR data in etcd test #29601
MCO-1594: updates for ManagedBootImageStatus #29598
SDN-4168: Fix IPsec tests for monitor failures #29437
TRT-2026: validate that the binary extraction was successful via existence check #29595
OSD-26270: re-enabled managed-upgrade-operator test by removing exclusion #29585
NO-ISSUE: Automated - Update synthetic test data #29570
NO-ISSUE: replace hardcoded ClusterVersionCapability string in olmv1 tests #29577
TRT-1575: Fail the test when an expected operator goes to degraded #29566
OCPBUGS-52578: Use payload pullspec for image info test #29586
OCPBUGS-51373: use non-fake boot image for patch #29574
NO-JIRA: Support known namespaces for terminationMessagePolicy tests #29534
Revert “OCPNODE-2596: Add SigstoreImageVerification e2e tests” #29572
OCPNODE-2596: Add SigstoreImageVerification e2e tests #29530
NO-ISSUE: Automated - Update synthetic test data #29559
WRKLDS-1653: update pathological ScalingReplicaSet event exception #29569
TRT-1874: rename master->main #29565
OCPBUGS-50587: Rely on unstructured for update status instead of type conversion #29560
OCPQE-28543: Check load balancer healthcheck port and path on aws #29544
NO-JIRA: Allow overriding extension binary to local path #29557
CNTRLPLANE-1: Update to Kubernetes v1.32.2 #29549
OCPBUGS-26601: Re-enable AWS for router HTTP/2 test #29326
TRT-1286: List images from external binaries #29450
OCPBUGS-49600: Display etcd bootstrap event on timeline #29490
NO-ISSUE: Automated - Update synthetic test data #29531
Revert “NO-JIRA: use quay.io/openshift/origin-cli:latest directly” #29543
CNTRLPLANE-1: Bump to latest downstream version of ginkgo #29538
TRT-2006: Revert “NO-JIRA: Add test case for checking EgressFirewall DNS names in caps” #29540
NO-JIRA: Add test case for checking EgressFirewall DNS names in caps #29414
CNTRLPLANE-1: Update to Kubernetes v1.32.1 #29493
MULTIARCH-5318: Add tests for ImageStreamImportMode feature gate #29524
OCPBUGS-45893: Allows for backwards compatibility with upcoming network name change #29525
NO-ISSUE: Automated - Update synthetic test data #29418
SDN-4930: Increases timeouts for live migration #29517
OCPBUGS-45153: address malformed configmap post-test #29333
SDN-4930: Bump wait for UDN CR ready timeout #29509
SDN-4930: increase probe initialDelaySeconds from 1 to 5 #29501
SDN-4930: Bump UDN pod ready timeout #29510
SDN-4930: Make CUDN ready timeout use constant #29511
TRT-1575: Add a few more exception outside of upgraded window #29485
OCPBUGS-44238: Add Readiness Probe to Router Status Tests #29395
NO-JIRA: upkeep: add err check for failed cleanup step #29505
TRT-1958: pass EXTENSION_ARTIFACT_DIR to binaries #29464
SDN-4930: UDN: wait for moar openshift #29494
OCPBUGS-48445: Ignore an error intentionally generated by a test case #28590
SDN-4930: Fix live migration test detecting dualstack #29482
OCPBUGS-43777: tests: extend kubeconfig tests #29335
SDN-4930: UDN tests wait for SCC annotation on namespace #29479
no-jira: add a monitor test to detect concurrent installer pod or static pod #29462
OCPBUGS-26603: e2e: Fix IPv6 handling in router tests. #29224
SDN-4930: Fix live migration tests #29477
OCPBUGS-48053: auditLogAnalyzer: fix flake error message #29402
NO-JIRA: managed services: add hcp crd to unstable list #29460
SDN-4168: Fix for nmstate deployment related failures #29452
OCPBUGS-48126: kubeapiserver auditloganalyzer: show resources updated too often #29397
OCPBUGS-48340: skip OperatorHubSourceError metric checking when disableAllDefaultSources is true #29435
Revert “Revert “TRT-1803: Wait for operators to become stable before test”” #29401
NO-JIRA: use quay.io/openshift/origin-cli:latest directly #29466
SDN-4930: Network segmentation add missing eventually #29468
OCPBUGS-48320, SDN-4930: Bump KAPI server timeout to be 5seconds #29469
OCPBUGS-48320, SDN-4930: Increase probe timeouts on UDN pod #29458
OCPBUGS-48629: Use max time for netpol pods curl requests #29457
OCPBUGS-48629: move initialization of OC to test instead of package level #29459
OCPBUGS-45607: network, net-seg use different http port per network #29415
SDN-4930: E2Es for net seg: increase server connect timeout to reduce flakes #29463
OCPBUGS-42609: Updates UDN tests with required NS label #29417
SDN-4930: virt, udn: read the primary UDN interface IPs from the vmi status (in an eventually block) #29429
SDN-4930: Refactor and fix UDN/CUDN readiness checks #29454
SDN-4930: Fix CUDN manifest to account for IPV6 singlestack #29451
SDN-4930: Make UserDefinedNetwork status backwards compatible #29446
OCPBUGS-48569, SDN-4930: ovn-k,net-seg: Use the right IP family according to env #29445
SDN-4930: Fix pods cleanup in ClusterUserDefinedNetwork test #29448
OCPBUGS-48569, SDN-4930: e2e,ovn-k,net-seg: Wait for UDN condition populate #29436
OCPBUGS-48238, OCPBUGS-48449, OCPBUGS-48450: Set the poll timeout and poll interval in eventually directly for the tests #29428
SDN-5473: OVN-K: Port e2e tests for CUDN functionality, connectivity and isolation #29274
OCPBUGS-43777: apiserver: add tests to verify kube-apiserver is accessible via different endpoints #29339
SDN-5579: virt, feat gates: the UDN CRD depends on the NetSeg feat gate #29407
SDN-4930: Verify that a UDN pod can reach the kapi service in the default network #29253
SDN-4930: networksegmentation, udn: Wait for NetworkCreated or NetworkReady condition #29381
SDN-5017: Fix subnet check for assigned pod IPs #29394
OCPBUGS-47529: Add team members to the OWNERS file for PR approvals #29384
OCPBUGS-43478: generalize the RHEL8 and RHEL9 subscription_content.go test #29315
OCPBUGS-39315: remove ingress operator exclusion #29093
OCPBUGS-48076: external binary: in-line registry auth file fetching #29396
OCPBUGS-47700: images: Fix layers test to work with manifestlisted imagestreams #29392
OCPBUGS-47796: fix year for string compare #29398
NO-ISSUE: Automated - Update synthetic test data #29332
Revert “TRT-1803: Wait for operators to become stable before test” #29399
OCPBUGS-44257: Fixing build s2i ruby test data inline with latest ruby version(>=3.0) #29355
SDN-5031: e2e,networking: add UDN open-default-ports annotation test. #29346
SDN-4168: Optimize timing for IPsec tests #28797
SDN-5567: virt: add GA placeholder test #29375
SDN-5566: virt, udn: primary UDN requires the net seg FG #29374
TRT-1803: Wait for operators to become stable before test #29367
TRT-1575: Use catchall card for operator degraded exceptions for major operators #29354
OCPBUGS-45756: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.19 #29349
SDN-5568: only provision workloads when network creation has started #29348
SDN-5017: Add UDN Network Policy e2e tests #29195
STOR-2136: Remove CSI snapshot webhook tests #29383
CNTRLPLANE-1: Update etcd test data for 1.32 release #29376
STOR-2136: Remove CSI snapshot webhook conditions checks #29365
CNTRLPLANE-1: Add incoming images k8s 1.32 #29362
NO-JIRA: managed services: bump series limit #29369
NO-ISSUE: Remove m1kola from owners #29368
trt-1892: check for pod security audit violations #29320
NE-1870: Fix the Network Ingress & DNS OWNERS files and add aliases to OWNERS_ALIASES #29247
OCPBUGS-45994: managed services: allow KubeDaemonSetMisScheduled alert #29357
OCPBUGS-45838: managed services: add more missing namespaces #29356
OCPBUGS-42618: Replace RunHostCmd with Exec function to censor bearer token being ex… #29176
OCPBUGS-42610: filter out pod events during vsphere snapshot options #29311
OCPBUGS-45838: managed services: add missing namespaces to list #29351
OCPBUGS-44970: Excluding loki prod-bearer-token container from excessive restarts test in SNO #29329
OCPBUGS-44808: reenable OLMv1 test for maxOpenShiftversion #29328
OCPBUGS-45363: Parse node logs also when encountered with standard html header #29340
NO-JIRA: managed services: add known image check for gcp #29336
TRT-1895: External binary caching and code clean-up #29300
OCPBUGS-44961: Fix “Enforce the required-scc monitor test and validate usage of non-standard OCP SCCs” #29323
TRT-1898: Revert “NO-JIRA: address malformed CMO configmap post-test” #29330
NO-JIRA: add additional managed namespaces #29325
NO-JIRA: watch CRDs #29308
TRT-1761: Allow the test for kubelet DiskPressure to fail job runs #29318
NO-JIRA: address malformed CMO configmap post-test #29309
NO-ISSUE: Automated - Update synthetic test data #29317
NO-JIRA: Revert “Enforce the required-scc monitor test and validate usage of non-standard OCP SCCs #29321
Full changelog

thanos

MON-4139: feat: replace github.com/prometheus/prometheu dep with one having an xtra check in the parser to help identify le/quantile selectors misuses in Prometheus v3 #158
OCPBUGS-48730: Update golang.org/x/net to v0.33 #156
MON-4117: Bump to v0.37.2 and use go1.23 #154
Full changelog

vsphere-cloud-controller-manager

OCPCLOUD-2838: Merge https://github.com/kubernetes/cloud-provider-vsphere:master (ed2b673) into master #75
OCPBUGS-45406: Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.19 #81
Full changelog

vsphere-cluster-api-controllers

NO-JIRA: Update manifests generator tooling #54
OCPCLOUD-2853: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.12.0 (8c1c84c) into master #53
OCPBUGS-45478: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.19 #52
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-55700: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #143
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #141
OCPBUGS-51973, OCPBUGS-52808: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #140
OCPBUGS-46317, OCPBUGS-46331, OCPBUGS-47367, OCPBUGS-47437: bump golang.org/x/net to v0.33.0 #138
OCPBUGS-45413: Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.19 #136
OCPBUGS-45402: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.19 #135
Full changelog

vsphere-csi-driver-operator

OCPBUGS-53059: Fix panic issues when LegacyConfig is nil #304
SPLAT-2072: Removed VSphereMultiVCenters feature gate #300
STOR-2141: add support for maxAllowedBlockVolumesPerNode #287
STOR-2245: add manifest-topology.yaml for topology related feature and test #302
OCPBUGS-44374: Bump library-go #301
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #298
STOR-2252: Bump all deps #296
OCPBUGS-43273: fix panic when vcenter address is incorrect #283
STOR-2319: Remove code for CNS migration tool #286
OCPBUGS-48103: Update master to main #281
OCPBUGS-49406: Set reconcile-sync to 10 minute for ListVolume #284
OCPBUGS-46574: Escape backslash in vCenter username #279
OCPBUGS-46089: List only linux nodes #278
OCPBUGS-45563: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.19 #275
OCPBUGS-45563: Move SyncRemove to AbstractStorageClass #276
Full changelog

vsphere-problem-detector

OCPBUGS-52964: improve datastore check messages #181
SPLAT-1801: Add support for host groups #175
No-JIRA: Update owners #178
STOR-2252: Bump all deps #177
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #179
Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.19 #174
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github