# 4.8.0-0.okd-2023-04-19-211216 Created: 2023-04-19 21:12:22 +0000 UTC Image Digest: `sha256:eadc7dbb6c0d154c106597a17dc9364ce9eca6176eb6dfa3388bef891edf9fe4` ## Changes from 4.8.0-0.okd-2023-02-23-164510 ### Components * Kubernetes 1.21.14 * Fedora CoreOS 48.34.4 ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/) * [WRKLDS-1128](https://issues.redhat.com/browse/WRKLDS-1128): cli/admin/release/git: use optimized git flags [#1708](https://github.com/openshift/oc/pull/1708) * [WRKLDS-1076](https://issues.redhat.com/browse/WRKLDS-1076): oc idle: Remove redundant endpoint resource modification [#1692](https://github.com/openshift/oc/pull/1692) * [OCPBUGS-30703](https://issues.redhat.com/browse/OCPBUGS-30703): Bump coreos/go-oidc to 3.10.0 [#1713](https://github.com/openshift/oc/pull/1713) * [WRKLDS-1103](https://issues.redhat.com/browse/WRKLDS-1103): tools: extend the image with sosreport [#1704](https://github.com/openshift/oc/pull/1704) * [OTA-1165](https://issues.redhat.com/browse/OTA-1165): `adm upgrade status`: Add Worker Node Status [#1689](https://github.com/openshift/oc/pull/1689) * [OCPBUGS-29623](https://issues.redhat.com/browse/OCPBUGS-29623): Introduce certificate-authority flag for image related commands [#1693](https://github.com/openshift/oc/pull/1693) * [OCPBUGS-30212](https://issues.redhat.com/browse/OCPBUGS-30212): oc adm catalog mirror: use ToSlash and FromSlash to unify the path separators [#1680](https://github.com/openshift/oc/pull/1680) * [OCPBUGS-30244](https://issues.redhat.com/browse/OCPBUGS-30244): Add images mismatching kubectl version into warning to track [#1695](https://github.com/openshift/oc/pull/1695) * [OCPBUGS-30162](https://issues.redhat.com/browse/OCPBUGS-30162): Introduce --issuer-url flag in oc login [#1694](https://github.com/openshift/oc/pull/1694) * NO-JIRA: Bump k8s dependencies to 1.29.1 [#1684](https://github.com/openshift/oc/pull/1684) * [OCPBUGS-23386](https://issues.redhat.com/browse/OCPBUGS-23386): Extract oc also for linux/ppc64le [#1691](https://github.com/openshift/oc/pull/1691) * [OTA-1080](https://issues.redhat.com/browse/OTA-1080): pkg/cli/admin/inspectalerts: New tech-preview inspect-alerts subcommand [#1674](https://github.com/openshift/oc/pull/1674) * [OCPBUGS-29210](https://issues.redhat.com/browse/OCPBUGS-29210): Update some commands incorrect examples [#1686](https://github.com/openshift/oc/pull/1686) * NO-JIRA: Print log rather than returning an error when kubectl version mistmaches [#1685](https://github.com/openshift/oc/pull/1685) * Do not force the ancient OS version dist tag. [#1536](https://github.com/openshift/oc/pull/1536) * [TRT-1503](https://issues.redhat.com/browse/TRT-1503): Tools image no longer has python;adding [#1682](https://github.com/openshift/oc/pull/1682) * Revert "NO-JIRA: Bump k8s dependencies to 1.29.1" [#1683](https://github.com/openshift/oc/pull/1683) * NO-JIRA: Bump k8s dependencies to 1.29.1 [#1681](https://github.com/openshift/oc/pull/1681) * [OCPBUGS-29039](https://issues.redhat.com/browse/OCPBUGS-29039): fix copy-to-node [#1679](https://github.com/openshift/oc/pull/1679) * [OCPBUGS-28540](https://issues.redhat.com/browse/OCPBUGS-28540): Copy oc.rhel8 instead of symlink [#1669](https://github.com/openshift/oc/pull/1669) * [OCPBUGS-27732](https://issues.redhat.com/browse/OCPBUGS-27732): Bump joelanford/ignore to bump go-git to 5.11.0 [#1671](https://github.com/openshift/oc/pull/1671) * [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): Bump kube dependencies to 1.29.0 [#1661](https://github.com/openshift/oc/pull/1661) * [OCPBUGS-27957](https://issues.redhat.com/browse/OCPBUGS-27957): pkg/cli/admin/inspect: use since/since-time for previous container logs [#1666](https://github.com/openshift/oc/pull/1666) * NO-JIRA: Fix --parallelism flag formatting in help [#1664](https://github.com/openshift/oc/pull/1664) * NO-JIRA: pkg/cli/admin/inspect: format RFC3339 parse error [#1663](https://github.com/openshift/oc/pull/1663) * [OCPBUGS-28230](https://issues.redhat.com/browse/OCPBUGS-28230): add FallbackToLogsOnError for easier debugging [#1667](https://github.com/openshift/oc/pull/1667) * [OCPBUGS-27489](https://issues.redhat.com/browse/OCPBUGS-27489): Use correct hash sum of extracted tarball after re-signing with codesign [#1659](https://github.com/openshift/oc/pull/1659) * NO-JIRA: Simplified kubectl component version check [#1662](https://github.com/openshift/oc/pull/1662) * [CNV-37284](https://issues.redhat.com/browse/CNV-37284): Add --all-images flag to must-gather [#1633](https://github.com/openshift/oc/pull/1633) * Revert "WRKLDS-1016: Bump kube dependencies to 1.29.0" [#1660](https://github.com/openshift/oc/pull/1660) * [WRKLDS-1016](https://issues.redhat.com/browse/WRKLDS-1016): Bump kube dependencies to 1.29.0 [#1655](https://github.com/openshift/oc/pull/1655) * NO-JIRA: Consider kubectl version checks only from cli and cli-artifact images [#1656](https://github.com/openshift/oc/pull/1656) * [WRKLDS-998](https://issues.redhat.com/browse/WRKLDS-998): oc login: Built-in cred exec plugin implementation and wiring [#1640](https://github.com/openshift/oc/pull/1640) * NO-JIRA: adm update status: add TODOs to remind us to revise early decisions [#1654](https://github.com/openshift/oc/pull/1654) * [WRKLDS-1012](https://issues.redhat.com/browse/WRKLDS-1012): oc adm must-gather: pull gather container logs [#1641](https://github.com/openshift/oc/pull/1641) * [WRKLDS-950](https://issues.redhat.com/browse/WRKLDS-950): add since and since-time flags to limit log collection on must-gather [#1648](https://github.com/openshift/oc/pull/1648) * [WRKLDS-1010](https://issues.redhat.com/browse/WRKLDS-1010): pkg/cli/admin/inspect: use since/since-time for rotated logs [#1653](https://github.com/openshift/oc/pull/1653) * NO-ISSUE: add information about featuregate diff in a particular release [#1650](https://github.com/openshift/oc/pull/1650) * NO-JIRA: report kubectl version to the release controller [#1651](https://github.com/openshift/oc/pull/1651) * [OCPBUGS-25461](https://issues.redhat.com/browse/OCPBUGS-25461): Add RHEL9 and RHEL8 based oc as new targets in command extraction [#1647](https://github.com/openshift/oc/pull/1647) * [OTA-1087](https://issues.redhat.com/browse/OTA-1087): Add upgade health section to `adm update status` [#1636](https://github.com/openshift/oc/pull/1636) * [OCPBUGS-19807](https://issues.redhat.com/browse/OCPBUGS-19807): pkg/cli/admin/release/extract: Log a warning on --credentials-requests without --included [#1551](https://github.com/openshift/oc/pull/1551) * NO-JIRA: Sanitize path using filepath Clean [#1645](https://github.com/openshift/oc/pull/1645) * [OTA-492](https://issues.redhat.com/browse/OTA-492): pkg/cli/admin/upgrade/rollback: New rollback command [#1642](https://github.com/openshift/oc/pull/1642) * NO-JIRA: oc adm prune images: fix --certificate-authority flag name in validation code [#1644](https://github.com/openshift/oc/pull/1644) * [OCPBUGS-25703](https://issues.redhat.com/browse/OCPBUGS-25703): validate tag name on creation [#1643](https://github.com/openshift/oc/pull/1643) * NO-JIRA: Migrate from deprecated ioutils to relevant libraries [#1602](https://github.com/openshift/oc/pull/1602) * [OCPBUGS-23386](https://issues.redhat.com/browse/OCPBUGS-23386): Generate FIPS compatible RHEL9 oc binary [#1632](https://github.com/openshift/oc/pull/1632) * [OCPBUGS-25021](https://issues.redhat.com/browse/OCPBUGS-25021): Bump ocp images to 4.16 in addition to go 1.21 [#1628](https://github.com/openshift/oc/pull/1628) * [OCPNODE-1656](https://issues.redhat.com/browse/OCPNODE-1656): oc release extract: Introduce --idms-file and deprecate icsp-file [#1624](https://github.com/openshift/oc/pull/1624) * [OCPBUGS-24834](https://issues.redhat.com/browse/OCPBUGS-24834): Bump api to include the new CloudCredential cap [#1622](https://github.com/openshift/oc/pull/1622) * [OCPBUGS-24225](https://issues.redhat.com/browse/OCPBUGS-24225): Remove deprecated password defaulting in default config flag [#1619](https://github.com/openshift/oc/pull/1619) * [OCPBUGS-24375](https://issues.redhat.com/browse/OCPBUGS-24375): Overwrite template's namespace with the explicit one [#1612](https://github.com/openshift/oc/pull/1612) * [OCPBUGS-23723](https://issues.redhat.com/browse/OCPBUGS-23723): Add .snyk file to exclude vendor and ignore unit tests [#1604](https://github.com/openshift/oc/pull/1604) * [ACM-7713](https://issues.redhat.com/browse/ACM-7713): Skip related objects which are invalid [#1550](https://github.com/openshift/oc/pull/1550) * [OTA-1035](https://issues.redhat.com/browse/OTA-1035): `adm upgrade status` Add control plane update status [#1597](https://github.com/openshift/oc/pull/1597) * [OCPBUGS-23071](https://issues.redhat.com/browse/OCPBUGS-23071): Mention inspection completion in the error message [#1601](https://github.com/openshift/oc/pull/1601) * NO-JIRA: Add client version in must-gather summary [#1603](https://github.com/openshift/oc/pull/1603) * [WRKLDS-908](https://issues.redhat.com/browse/WRKLDS-908): Promote some experimental commands, deprecate others [#1596](https://github.com/openshift/oc/pull/1596) * [WRKLDS-860](https://issues.redhat.com/browse/WRKLDS-860): Add volume usage percentage checker script in must-gather's gather container [#1533](https://github.com/openshift/oc/pull/1533) * [OTA-1035](https://issues.redhat.com/browse/OTA-1035): Allow testing `adm upgrade status` on mock data [#1595](https://github.com/openshift/oc/pull/1595) * NO-JIRA: Drop the experimental info for registry login and must-gather commands [#1594](https://github.com/openshift/oc/pull/1594) * Updating content type variable name for CLI docs generation [#1591](https://github.com/openshift/oc/pull/1591) * [WRKLDS-874](https://issues.redhat.com/browse/WRKLDS-874): oc whoami: Ask from selfsubjectreview and fallback to internal oauth [#1588](https://github.com/openshift/oc/pull/1588) * moved cert sharing library [#1532](https://github.com/openshift/oc/pull/1532) * [OCPBUGS-21612](https://issues.redhat.com/browse/OCPBUGS-21612): Use mutex to prevent concurrent writes [#1589](https://github.com/openshift/oc/pull/1589) * [OCPBUGS-20500](https://issues.redhat.com/browse/OCPBUGS-20500): Add directive example to kubelet-restart command [#1586](https://github.com/openshift/oc/pull/1586) * pkg/cli/admin/upgrade/status: Add update duration [#1583](https://github.com/openshift/oc/pull/1583) * oc/*: gracefully fail when user group is not configured [#1585](https://github.com/openshift/oc/pull/1585) * create/identity: fail gracefully when no user API exists [#1582](https://github.com/openshift/oc/pull/1582) * pkg/cli/admin/update: Add tech-preview 'oc adm upgrade status' [#1554](https://github.com/openshift/oc/pull/1554) * [OCPBUGS-20500](https://issues.redhat.com/browse/OCPBUGS-20500): Fix some commands incorrect examples [#1581](https://github.com/openshift/oc/pull/1581) * [OCPBUGS-9340](https://issues.redhat.com/browse/OCPBUGS-9340): pkg/cli/admin/upgrade: Warn on unrecognized subcommands [#1557](https://github.com/openshift/oc/pull/1557) * [OCPBUGS-20381](https://issues.redhat.com/browse/OCPBUGS-20381): Bump golang.org/x/net to v0.17.0 [#1578](https://github.com/openshift/oc/pull/1578) * [OCPBUGS-20528](https://issues.redhat.com/browse/OCPBUGS-20528): Revert "OCPBUGS-7465: Bump distribution/v3 to sync with oc-mirror" [#1575](https://github.com/openshift/oc/pull/1575) * [OCPBUGS-20474](https://issues.redhat.com/browse/OCPBUGS-20474): Set ImportPolicy to PreserveOriginal to honor --keep-manifest-list when mirroring a payload to an image stream [#1572](https://github.com/openshift/oc/pull/1572) * [OCPBUGS-20342](https://issues.redhat.com/browse/OCPBUGS-20342): Reflect container's exit code for long running tasks not attached to terminal [#1571](https://github.com/openshift/oc/pull/1571) * [OCPBUGS-20063](https://issues.redhat.com/browse/OCPBUGS-20063): regeneratemco: explicitly check for PlatformStatus field [#1555](https://github.com/openshift/oc/pull/1555) * [OCPBUGS-7465](https://issues.redhat.com/browse/OCPBUGS-7465): Bump distribution/v3 to sync with oc-mirror [#1556](https://github.com/openshift/oc/pull/1556) * [OCPBUGS-20181](https://issues.redhat.com/browse/OCPBUGS-20181): Use quay redis image instead docker mysql [#1559](https://github.com/openshift/oc/pull/1559) * [OCPBUGS-7465](https://issues.redhat.com/browse/OCPBUGS-7465): Introduce refreshable dynamic credential store for image manifests [#1540](https://github.com/openshift/oc/pull/1540) * Updating excluded list of unsupported oc adm commands in MicroShift [#1558](https://github.com/openshift/oc/pull/1558) * [WINC-692](https://issues.redhat.com/browse/WINC-692): Add Windows node functionality to debug command [#1524](https://github.com/openshift/oc/pull/1524) * [WRKLDS-537](https://issues.redhat.com/browse/WRKLDS-537): oc adm release info: Add --first-parent to git log for simplification [#1552](https://github.com/openshift/oc/pull/1552) * [WRKLDS-806](https://issues.redhat.com/browse/WRKLDS-806): Bump kube dependencies to 1.28.2 [#1547](https://github.com/openshift/oc/pull/1547) * [OCPBUGS-19282](https://issues.redhat.com/browse/OCPBUGS-19282): Updating ose-tools images to be consistent with ART [#1545](https://github.com/openshift/oc/pull/1545) * [OCPBUGS-19281](https://issues.redhat.com/browse/OCPBUGS-19281): Updating openshift-enterprise-deployer images to be consistent with ART [#1544](https://github.com/openshift/oc/pull/1544) * [OCPBUGS-19517](https://issues.redhat.com/browse/OCPBUGS-19517): remove unsupported commands from microshift docs [#1548](https://github.com/openshift/oc/pull/1548) * [OCPBUGS-19283](https://issues.redhat.com/browse/OCPBUGS-19283): Updating ose-cli-artifacts images to be consistent with ART [#1546](https://github.com/openshift/oc/pull/1546) * [OCPBUGS-19129](https://issues.redhat.com/browse/OCPBUGS-19129): Updating openshift-enterprise-cli images to be consistent with ART [#1542](https://github.com/openshift/oc/pull/1542) * [OCPBUGS-17925](https://issues.redhat.com/browse/OCPBUGS-17925): pkg/cli/admin/prune/images: omit not found error for deployment configs [#1530](https://github.com/openshift/oc/pull/1530) * [OCPBUGS-17253](https://issues.redhat.com/browse/OCPBUGS-17253): Bump go x/net library to 0.13.0 [#1529](https://github.com/openshift/oc/pull/1529) * [OTA-559](https://issues.redhat.com/browse/OTA-559): Revert "Revert "pkg/cli/admin/release/extract: Add --included and --install-config"" [#1528](https://github.com/openshift/oc/pull/1528) * [OCPBUGS-17711](https://issues.redhat.com/browse/OCPBUGS-17711): Revert "pkg/cli/admin/release/extract: Add --included and --install-config" [#1527](https://github.com/openshift/oc/pull/1527) * Update openshift/api [#1525](https://github.com/openshift/oc/pull/1525) * [OTA-559](https://issues.redhat.com/browse/OTA-559): pkg/cli/admin/release/extract: Add --included and --install-config [#1521](https://github.com/openshift/oc/pull/1521) * Stop using deprecated github.com/docker/docker go APIs [#1514](https://github.com/openshift/oc/pull/1514) * [OCPBUGS-16735](https://issues.redhat.com/browse/OCPBUGS-16735): Truncate existing files when writing from inspect [#1520](https://github.com/openshift/oc/pull/1520) * introduce plugin and plugin shadowing tests for oc [#1424](https://github.com/openshift/oc/pull/1424) * pkg/cli/admin/upgrade: Newlines after --allow-upgrade-with-warnings errors [#1519](https://github.com/openshift/oc/pull/1519) * Add profiling functionality and flags in oc [#1516](https://github.com/openshift/oc/pull/1516) * Fix typo in /var/log folder [#1517](https://github.com/openshift/oc/pull/1517) * login: improve usage message for --web option [#1513](https://github.com/openshift/oc/pull/1513) * Bump k8s packages to 1.27.4 [#1515](https://github.com/openshift/oc/pull/1515) * [OTA-994](https://issues.redhat.com/browse/OTA-994): pkg/cli/admin/release/extract: Centralize manifest extraction [#1404](https://github.com/openshift/oc/pull/1404) * [OCPBUGS-16009](https://issues.redhat.com/browse/OCPBUGS-16009): reboot: set ignition version to 3.1 [#1499](https://github.com/openshift/oc/pull/1499) * Add tls-server-name when property exists in kubeconfig [#1456](https://github.com/openshift/oc/pull/1456) * [OCPBUGS-15776](https://issues.redhat.com/browse/OCPBUGS-15776): mcs cert: account for environments that use IP directly [#1497](https://github.com/openshift/oc/pull/1497) * [OCPNODE-1656](https://issues.redhat.com/browse/OCPNODE-1656): oc release info: Introduce --idms-file and deprecate --icsp-file [#1465](https://github.com/openshift/oc/pull/1465) * [AUTH-355](https://issues.redhat.com/browse/AUTH-355): Add OAuth2 Authorization Code Grant Flow for login [#1402](https://github.com/openshift/oc/pull/1402) * upgrade distribution No 2 [#1495](https://github.com/openshift/oc/pull/1495) * [WRKLDS-700](https://issues.redhat.com/browse/WRKLDS-700): bump(k8s) to v1.27.2 [#1420](https://github.com/openshift/oc/pull/1420) * [OCPBUGS-15012](https://issues.redhat.com/browse/OCPBUGS-15012): oc image extract: idms-file flag map to IDMSFile field [#1464](https://github.com/openshift/oc/pull/1464) * Correct incorrect command in observe command [#1419](https://github.com/openshift/oc/pull/1419) * Clarify the use of the filter without keep-manifest-list [#1414](https://github.com/openshift/oc/pull/1414) * [OCPBUGS-10612](https://issues.redhat.com/browse/OCPBUGS-10612): make registry auth prefence default to podman config locations [#1376](https://github.com/openshift/oc/pull/1376) * handle the error case of node retrieval while waiting for reboot [#1482](https://github.com/openshift/oc/pull/1482) * Fix the output of error prompt [#1433](https://github.com/openshift/oc/pull/1433) * pkg/cli/admin/upgrade: Surface Recommended=Unknown more prominently [#1442](https://github.com/openshift/oc/pull/1442) * pkg/cli/admin/upgrade: Add post-period to space to some error messages [#1330](https://github.com/openshift/oc/pull/1330) * Wait for reboot [#1473](https://github.com/openshift/oc/pull/1473) * tweak output format [#1471](https://github.com/openshift/oc/pull/1471) * [OCPNODE-1580](https://issues.redhat.com/browse/OCPNODE-1580): Add --print-mirror-instructions to oc adm release mirror to allow idms instructions [#1341](https://github.com/openshift/oc/pull/1341) * add reboot-nodes [#1468](https://github.com/openshift/oc/pull/1468) * Trust check [#1469](https://github.com/openshift/oc/pull/1469) * fix directories for consistency [#1467](https://github.com/openshift/oc/pull/1467) * ocpcertificates: add ability to rotate MCS CA/cert [#1450](https://github.com/openshift/oc/pull/1450) * [OCPNODE-1656](https://issues.redhat.com/browse/OCPNODE-1656): oc image extract: Introduce IDMS as alternative source [#1426](https://github.com/openshift/oc/pull/1426) * pernodepod: percent works like this [#1463](https://github.com/openshift/oc/pull/1463) * ocpcertificates: don't make assumptions on resources not to bring pip… [#1462](https://github.com/openshift/oc/pull/1462) * allow running a command while the kubelet is off [#1459](https://github.com/openshift/oc/pull/1459) * add command to create new bootstrap kubeconfig for kubelet [#1458](https://github.com/openshift/oc/pull/1458) * ocpcertificates: fix handling resources by names explicitly + other cosmetic fixes [#1460](https://github.com/openshift/oc/pull/1460) * tweaks needed for wait [#1455](https://github.com/openshift/oc/pull/1455) * Add a command to remove older trust [#1447](https://github.com/openshift/oc/pull/1447) * create command to create new adminkubeconfig [#1452](https://github.com/openshift/oc/pull/1452) * add a command to copy content to every node [#1454](https://github.com/openshift/oc/pull/1454) * Minor updates to CLI help text [#1453](https://github.com/openshift/oc/pull/1453) * add command for regenerating OCP leaf certs [#1443](https://github.com/openshift/oc/pull/1443) * add a new command to wait for all clusteroperators to go stable [#1444](https://github.com/openshift/oc/pull/1444) * add command to produce an updated CA bundle for trusting the kube-apiserver [#1446](https://github.com/openshift/oc/pull/1446) * add printing for new revisions [#1445](https://github.com/openshift/oc/pull/1445) * add oc adm ocp-certificates regenerate-top-level [#1439](https://github.com/openshift/oc/pull/1439) * [OCPBUGS-11652](https://issues.redhat.com/browse/OCPBUGS-11652): Extend adm node-logs to new API [#1403](https://github.com/openshift/oc/pull/1403) * [OCPBUGS-12793](https://issues.redhat.com/browse/OCPBUGS-12793): adds a mapping for exposed ports to DockerConfig when manifest listed [#1415](https://github.com/openshift/oc/pull/1415) * [OCPBUGS-14340](https://issues.redhat.com/browse/OCPBUGS-14340): Name containers w/'multi' when mirroring a multi release image [#1423](https://github.com/openshift/oc/pull/1423) * [OCPBUGS-11123](https://issues.redhat.com/browse/OCPBUGS-11123): oc adm groups sync: all groups: print warning before caching [#1436](https://github.com/openshift/oc/pull/1436) * [OCPBUGS-11632](https://issues.redhat.com/browse/OCPBUGS-11632): Skip invalid events yamls and continue [#1429](https://github.com/openshift/oc/pull/1429) * [OCPBUGS-14082](https://issues.redhat.com/browse/OCPBUGS-14082): Remove closed centos7 registry from newapp unit tests [#1430](https://github.com/openshift/oc/pull/1430) * [OCPBUGS-12901](https://issues.redhat.com/browse/OCPBUGS-12901): preserve explicit release image in ClusterVersion [#1416](https://github.com/openshift/oc/pull/1416) * [OCPBUGS-11123](https://issues.redhat.com/browse/OCPBUGS-11123): oc adm groups sync: fix the annotation key [#1427](https://github.com/openshift/oc/pull/1427) * [OCPBUGS-11123](https://issues.redhat.com/browse/OCPBUGS-11123): oc adm groups sync: print a warning when two or more groups are mapped to the same ldap uid [#1425](https://github.com/openshift/oc/pull/1425) * [OCPBUGS-13355](https://issues.redhat.com/browse/OCPBUGS-13355): Use RequestToken functions from library-go [#991](https://github.com/openshift/oc/pull/991) * [OCPBUGS-11632](https://issues.redhat.com/browse/OCPBUGS-11632): Improve error log messages in event filtering [#1417](https://github.com/openshift/oc/pull/1417) * [OCPBUGS-12143](https://issues.redhat.com/browse/OCPBUGS-12143): oc login: unwrap tls.CertificateVerificationError to use x509 errors [#1406](https://github.com/openshift/oc/pull/1406) * pkg/cli/admin/upgrade: Clarify client-side vs. server-side docs [#1181](https://github.com/openshift/oc/pull/1181) * replace trimLeft with trimPrefix [#1400](https://github.com/openshift/oc/pull/1400) * Support OCI manifest lists in image mirror [#1362](https://github.com/openshift/oc/pull/1362) * [OCPBUGS-8004](https://issues.redhat.com/browse/OCPBUGS-8004): Fix bug when recreating an index with fewer images [#1335](https://github.com/openshift/oc/pull/1335) * adm catalog mirror update example to idms [#1401](https://github.com/openshift/oc/pull/1401) * [OCPBUGS-10843](https://issues.redhat.com/browse/OCPBUGS-10843): oc debug unique pod name [#1393](https://github.com/openshift/oc/pull/1393) * adm catalog mirror generates idms manifest [#1389](https://github.com/openshift/oc/pull/1389) * [OCPBUGS-1115](https://issues.redhat.com/browse/OCPBUGS-1115): Use linux/arch when user's OS isn't in manifests [#1311](https://github.com/openshift/oc/pull/1311) * Remove already deprecated adm create-kubeconfig command [#1367](https://github.com/openshift/oc/pull/1367) * append: expose keep-manifest-list option and preserve manifestlist when appending to specific arch images [#1361](https://github.com/openshift/oc/pull/1361) * Updating ose-tools images to be consistent with ART [#1369](https://github.com/openshift/oc/pull/1369) * [OCPBUGS-8048](https://issues.redhat.com/browse/OCPBUGS-8048): pkg/cli/admin/upgrade: Client-side checks for --to-multi-arch [#1359](https://github.com/openshift/oc/pull/1359) * [IR-300](https://issues.redhat.com/browse/IR-300), [IR-301](https://issues.redhat.com/browse/IR-301): generates ImageStreamTags with import-mode when using oc new-build and oc-new-app [#1353](https://github.com/openshift/oc/pull/1353) * [OCPBUGS-10879](https://issues.redhat.com/browse/OCPBUGS-10879): Fix deprecated oc command suggestion [#1390](https://github.com/openshift/oc/pull/1390) * Exclude irrelevant commands from MicroShift documentation [#1375](https://github.com/openshift/oc/pull/1375) * Test Fix: Allow submodule using file transport with newer git [#1378](https://github.com/openshift/oc/pull/1378) * Updating openshift-enterprise-deployer images to be consistent with ART [#1368](https://github.com/openshift/oc/pull/1368) * Updating openshift-enterprise-cli images to be consistent with ART [#1364](https://github.com/openshift/oc/pull/1364) * [OCPBUGS-3393](https://issues.redhat.com/browse/OCPBUGS-3393): Always copy the blobs if the target isn't a registry [#1355](https://github.com/openshift/oc/pull/1355) * Updating ose-cli-artifacts images to be consistent with ART [#1370](https://github.com/openshift/oc/pull/1370) * [OCPBUGS-1117](https://issues.redhat.com/browse/OCPBUGS-1117): The architecture of oc in the cli-artifacts' /usr/bin folder should to the one of the built image [#1374](https://github.com/openshift/oc/pull/1374) * [OCPBUGS-10622](https://issues.redhat.com/browse/OCPBUGS-10622): bump repo sclorg/s2i-ruby-container location for newapp test [#1377](https://github.com/openshift/oc/pull/1377) * Add microshift into generate-docs [#1365](https://github.com/openshift/oc/pull/1365) * [OCPBUGS-5949](https://issues.redhat.com/browse/OCPBUGS-5949): Add subrepository support for ICSP [#1350](https://github.com/openshift/oc/pull/1350) * Microshift command docs [#1357](https://github.com/openshift/oc/pull/1357) * Do not set master node selector if there's no masters [#1347](https://github.com/openshift/oc/pull/1347) * [OCPBUGS-7190](https://issues.redhat.com/browse/OCPBUGS-7190): Reuse LDAP connection when performing group sync [#1336](https://github.com/openshift/oc/pull/1336) * Adding `CommitDate` to the Changelog json output [#1348](https://github.com/openshift/oc/pull/1348) * [OCPBUGS-7780](https://issues.redhat.com/browse/OCPBUGS-7780): pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates [#1346](https://github.com/openshift/oc/pull/1346) * Use registry.k8s.io and update image version [#1343](https://github.com/openshift/oc/pull/1343) * Add icsp file convert command [#1238](https://github.com/openshift/oc/pull/1238) * OWNERS_ALIASES: Update approvers: add David, remove Jack [#1340](https://github.com/openshift/oc/pull/1340) * oc debug: Use own fields instead directly depending on Attach's [#1337](https://github.com/openshift/oc/pull/1337) * Updating ose-tools images to be consistent with ART [#1308](https://github.com/openshift/oc/pull/1308) * [WRKLDS-594](https://issues.redhat.com/browse/WRKLDS-594): Bump to v1.26.1 [#1329](https://github.com/openshift/oc/pull/1329) * [OCPBUGS-3473](https://issues.redhat.com/browse/OCPBUGS-3473): oc adm release new: allow specifying crio and kernel versions [#1287](https://github.com/openshift/oc/pull/1287) * [OCPBUGS-6011](https://issues.redhat.com/browse/OCPBUGS-6011): Fix kube version from 1.24.1 to 1.25.2 [#1325](https://github.com/openshift/oc/pull/1325) * Removing unwanted character from changelog output [#1326](https://github.com/openshift/oc/pull/1326) * [WRKLDS-629](https://issues.redhat.com/browse/WRKLDS-629): release run-namspace functionality [#1322](https://github.com/openshift/oc/pull/1322) * [OCPBUGS-5010](https://issues.redhat.com/browse/OCPBUGS-5010): Remove must-gather pod after it completes when explicit namespace is used [#1320](https://github.com/openshift/oc/pull/1320) * Enable Changelog to output in JSON [#1321](https://github.com/openshift/oc/pull/1321) * [IR-261](https://issues.redhat.com/browse/IR-261): Add --import-mode to 'tag' [#1312](https://github.com/openshift/oc/pull/1312) * [IR-260](https://issues.redhat.com/browse/IR-260): Add CLI flag to set ImportMode when importing a tag [#1289](https://github.com/openshift/oc/pull/1289) * [OCPBUGS-4906](https://issues.redhat.com/browse/OCPBUGS-4906): oc process: Set original namespace if it differs [#1318](https://github.com/openshift/oc/pull/1318) * Updating ose-cli-artifacts images to be consistent with ART [#1309](https://github.com/openshift/oc/pull/1309) * Update errors when debug pod fails [#1314](https://github.com/openshift/oc/pull/1314) * Expose events command to land k8s 1.26 [#1315](https://github.com/openshift/oc/pull/1315) * handle admission webhook lists and CRD conversion webhooks [#1301](https://github.com/openshift/oc/pull/1301) * [OTA-818](https://issues.redhat.com/browse/OTA-818): pkg/cli/admin/upgrade: Support --to-multi-arch per OTA-818 [#1285](https://github.com/openshift/oc/pull/1285) * [WRKLDS-629](https://issues.redhat.com/browse/WRKLDS-629): oc adm must-gather: unhidden --run-namespace flag [#1313](https://github.com/openshift/oc/pull/1313) * [FDN-112](https://issues.redhat.com/browse/FDN-112): Parse any jira reference from commit text, not just OCPBUGS [#1306](https://github.com/openshift/oc/pull/1306) * [IR-266](https://issues.redhat.com/browse/IR-266): Add image manifests to 'describe image' [#1310](https://github.com/openshift/oc/pull/1310) * Updating openshift-enterprise-deployer images to be consistent with ART [#1307](https://github.com/openshift/oc/pull/1307) * Handle non-amd64 command pulls from amd64 payload [#1259](https://github.com/openshift/oc/pull/1259) * [OCPBUGS-4517](https://issues.redhat.com/browse/OCPBUGS-4517): oc adm release: Support extracting commands in specified architectures [#1305](https://github.com/openshift/oc/pull/1305) * Rename registry.svc.ci.openshift.org to registry.ci.openshift.org [#1304](https://github.com/openshift/oc/pull/1304) * [OCPBUGS-3526](https://issues.redhat.com/browse/OCPBUGS-3526): Proceed archive if Lsetxattr gets unsupported error [#1296](https://github.com/openshift/oc/pull/1296) * Updating openshift-enterprise-cli images to be consistent with ART [#1302](https://github.com/openshift/oc/pull/1302) * [OCPBUGS-4280](https://issues.redhat.com/browse/OCPBUGS-4280): oc import-image: reflect import image error [#1300](https://github.com/openshift/oc/pull/1300) * pkg/cli/admin/release/info: Render multi-arch release information [#1292](https://github.com/openshift/oc/pull/1292) * pkg/cli/admin/upgrade: Drop "force" from "No updates available" [#1291](https://github.com/openshift/oc/pull/1291) * [OCPBUGS-3714](https://issues.redhat.com/browse/OCPBUGS-3714): pkg/cli/admin/upgrade: Report on Failing!=False conditions [#900](https://github.com/openshift/oc/pull/900) * switch the deployer pod to use apply client to avoid conflicts [#1288](https://github.com/openshift/oc/pull/1288) * release: extract linux/arm64 binaries from all payloads [#1276](https://github.com/openshift/oc/pull/1276) * go.mod: update github.com/containers/image [#1278](https://github.com/openshift/oc/pull/1278) * Promote ardaguclu to oc approver [#1280](https://github.com/openshift/oc/pull/1280) * remove support for empty files and stdout in oc registry login [#1277](https://github.com/openshift/oc/pull/1277) * Bump go to 1.19 in go.mod [#1262](https://github.com/openshift/oc/pull/1262) * [Bug 2093046](https://bugzilla.redhat.com/show_bug.cgi?id=2093046): oc debug: Add priorityClassName into node debugging pod template [#1263](https://github.com/openshift/oc/pull/1263) * use correct namespace with sample templates [#1272](https://github.com/openshift/oc/pull/1272) * Do not try to load plugins for cobra commands [#1267](https://github.com/openshift/oc/pull/1267) * [Bug 2078694](https://bugzilla.redhat.com/show_bug.cgi?id=2078694): New-App Using Git via SSH [#1269](https://github.com/openshift/oc/pull/1269) * [OCPBUGS-2495](https://issues.redhat.com/browse/OCPBUGS-2495): pkg/cli/login: Warn, but do not fail, on surprise project-list errors [#1268](https://github.com/openshift/oc/pull/1268) * [IR-262](https://issues.redhat.com/browse/IR-262): Keep manifest list children [#1229](https://github.com/openshift/oc/pull/1229) * oc debug,version: minor todo improvements [#1265](https://github.com/openshift/oc/pull/1265) * pkg/cli/admin/release/extract: Don't print image metadata verification messages when extracting to stdout [#1264](https://github.com/openshift/oc/pull/1264) * pkg/cli/admin/release/extract: Unify extraction cases [#1237](https://github.com/openshift/oc/pull/1237) * OWNERS_ALIASES: Freshen update-approvers [#1260](https://github.com/openshift/oc/pull/1260) * [Bug 2059125](https://bugzilla.redhat.com/show_bug.cgi?id=2059125): release extract: Add binary re-signing for macos arm64 [#1242](https://github.com/openshift/oc/pull/1242) * [Bug 2000554](https://bugzilla.redhat.com/show_bug.cgi?id=2000554): oc inspect: Also gather namespaces in which webhook services are running [#1258](https://github.com/openshift/oc/pull/1258) * add support for --next flag in oc adm release new [#1243](https://github.com/openshift/oc/pull/1243) * oc 4.12 kubernetes 1.25.2 bump [#1250](https://github.com/openshift/oc/pull/1250) * [Bug 2033167](https://bugzilla.redhat.com/show_bug.cgi?id=2033167): oc extract: Create target directory if not exist [#1248](https://github.com/openshift/oc/pull/1248) * Update login.go [#1188](https://github.com/openshift/oc/pull/1188) * Add --overwrite flag into pod security violation error message [#1234](https://github.com/openshift/oc/pull/1234) * [OCPBUGS-613](https://issues.redhat.com/browse/OCPBUGS-613): oc adm logs: generate proper path for static pods [#1231](https://github.com/openshift/oc/pull/1231) * [OCPBUGS-852](https://issues.redhat.com/browse/OCPBUGS-852): cli/debug: Create temporary namespace for node debugging [#1236](https://github.com/openshift/oc/pull/1236) * [Bug 1879980](https://bugzilla.redhat.com/show_bug.cgi?id=1879980): Bump go-ldap module to v3 [#1226](https://github.com/openshift/oc/pull/1226) * Updating openshift-enterprise-deployer images to be consistent with ART [#1200](https://github.com/openshift/oc/pull/1200) * Updating ose-cli-artifacts images to be consistent with ART [#1202](https://github.com/openshift/oc/pull/1202) * Updating openshift-enterprise-cli images to be consistent with ART [#1195](https://github.com/openshift/oc/pull/1195) * [Bug 2087679](https://bugzilla.redhat.com/show_bug.cgi?id=2087679): [inspect] Add EgressQoS to inspect [#1148](https://github.com/openshift/oc/pull/1148) * Updating ose-tools images to be consistent with ART [#1201](https://github.com/openshift/oc/pull/1201) * Give a complete oc label command in pod security error message [#1228](https://github.com/openshift/oc/pull/1228) * [Bug 2112934](https://bugzilla.redhat.com/show_bug.cgi?id=2112934): Add servicemonitors into common namespaces for inspection [#1224](https://github.com/openshift/oc/pull/1224) * [Bug 2108307](https://bugzilla.redhat.com/show_bug.cgi?id=2108307): Set HostIPC to true when debugging node [#1218](https://github.com/openshift/oc/pull/1218) * [Bug 2111537](https://bugzilla.redhat.com/show_bug.cgi?id=2111537): (image info): Introduce show-multiarch flag [#1217](https://github.com/openshift/oc/pull/1217) * [Bug 2095708](https://bugzilla.redhat.com/show_bug.cgi?id=2095708): oc adm inspect: check a resource exists before its inspection [#1215](https://github.com/openshift/oc/pull/1215) * [Bug 2092731](https://bugzilla.redhat.com/show_bug.cgi?id=2092731): Change error message to signal passing keep-manifest-list flag [#1213](https://github.com/openshift/oc/pull/1213) * [Bug 1880865](https://bugzilla.redhat.com/show_bug.cgi?id=1880865): Avoid TLS cert checking when login with --insecure-skip-tls-verify=true [#1161](https://github.com/openshift/oc/pull/1161) * [Bug 2105325](https://bugzilla.redhat.com/show_bug.cgi?id=2105325): Add ManifestListDigest field to release info struct [#1203](https://github.com/openshift/oc/pull/1203) * Add unit tests for release new package [#1197](https://github.com/openshift/oc/pull/1197) * Support for identity token [#1199](https://github.com/openshift/oc/pull/1199) * release info bug printing: enable `--skip-bug-check` for `--output=json` [#1204](https://github.com/openshift/oc/pull/1204) * release: extract ccoctl [#1194](https://github.com/openshift/oc/pull/1194) * [Bug 2103126](https://bugzilla.redhat.com/show_bug.cgi?id=2103126): set proper pod security ns labels [#1187](https://github.com/openshift/oc/pull/1187) * [Bug 2100702](https://bugzilla.redhat.com/show_bug.cgi?id=2100702): Set hasMedataOverrides to true when ToImageBase is set [#1192](https://github.com/openshift/oc/pull/1192) * [Bug 2100166](https://bugzilla.redhat.com/show_bug.cgi?id=2100166): Add new IsManifestList flag into ReleaseInfo struct [#1185](https://github.com/openshift/oc/pull/1185) * [Bug 2101885](https://bugzilla.redhat.com/show_bug.cgi?id=2101885): Set completion function for get command [#1186](https://github.com/openshift/oc/pull/1186) * [Bug 2100702](https://bugzilla.redhat.com/show_bug.cgi?id=2100702): Use from-release as based image when base digest is invalid [#1183](https://github.com/openshift/oc/pull/1183) * [Bug 2100708](https://bugzilla.redhat.com/show_bug.cgi?id=2100708): Lower chosen platform architecture/OS log level [#1184](https://github.com/openshift/oc/pull/1184) * [Bug 1905850](https://bugzilla.redhat.com/show_bug.cgi?id=1905850): add a new option for checking a subresource to oc adm policy who-can [#1179](https://github.com/openshift/oc/pull/1179) * [Bug 2015321](https://bugzilla.redhat.com/show_bug.cgi?id=2015321): Add destdir special character validation in must-gather [#1178](https://github.com/openshift/oc/pull/1178) * [Bug 2100138](https://bugzilla.redhat.com/show_bug.cgi?id=2100138): Add json support for release info bug printing [#1177](https://github.com/openshift/oc/pull/1177) * [Bug 2099637](https://bugzilla.redhat.com/show_bug.cgi?id=2099637): Use filter options only when keep-manifest-list is true [#1176](https://github.com/openshift/oc/pull/1176) * [Bug 2096855](https://bugzilla.redhat.com/show_bug.cgi?id=2096855): extract linux/amd64 to read release metadata [#1174](https://github.com/openshift/oc/pull/1174) * [Bug 2057633](https://bugzilla.redhat.com/show_bug.cgi?id=2057633): add validations for a pod & container to rsync [#1087](https://github.com/openshift/oc/pull/1087) * [Bug 1957668](https://bugzilla.redhat.com/show_bug.cgi?id=1957668): show console URL when asking for Authentication [#883](https://github.com/openshift/oc/pull/883) * [Bug 2097334](https://bugzilla.redhat.com/show_bug.cgi?id=2097334): ensure kubectl name is replaced in plugin cmd [#1173](https://github.com/openshift/oc/pull/1173) * [Bug 1823143](https://bugzilla.redhat.com/show_bug.cgi?id=1823143): add --icsp-file option to adm release subcommands [#1169](https://github.com/openshift/oc/pull/1169) * [Bug 2090692](https://bugzilla.redhat.com/show_bug.cgi?id=2090692): fix version from 1.24.0 beta to 1.24.1 [#1168](https://github.com/openshift/oc/pull/1168) * [Bug 1999891](https://bugzilla.redhat.com/show_bug.cgi?id=1999891): bubble errors which happen prior to collection to BackupGathering [#1093](https://github.com/openshift/oc/pull/1093) * [Bug 2090266](https://bugzilla.redhat.com/show_bug.cgi?id=2090266): add --filter-by-os support in oc adm release extract and linux/amd64 for getting IS during mirror [#1167](https://github.com/openshift/oc/pull/1167) * [Bug 2093797](https://bugzilla.redhat.com/show_bug.cgi?id=2093797): deprecate --service-account flag for oc registry login [#1166](https://github.com/openshift/oc/pull/1166) * [Bug 2088483](https://bugzilla.redhat.com/show_bug.cgi?id=2088483): update 'oc adm catalog mirror' command to accept --continue-on-error flag [#1152](https://github.com/openshift/oc/pull/1152) * *: add relevant code owners for catalog alias [#1159](https://github.com/openshift/oc/pull/1159) * [Bug 2087103](https://bugzilla.redhat.com/show_bug.cgi?id=2087103): pkg/cli/admin/upgrade: "Updating to" -> "Requesting update to" [#1156](https://github.com/openshift/oc/pull/1156) * [Bug 2090692](https://bugzilla.redhat.com/show_bug.cgi?id=2090692): Beautify help and align with kubectl output [#1121](https://github.com/openshift/oc/pull/1121) * [Bug 2086519](https://bugzilla.redhat.com/show_bug.cgi?id=2086519): pkg/cli/debug: suggest pod security labels on violations [#1155](https://github.com/openshift/oc/pull/1155) * Add user coreydaley as an approver [#1144](https://github.com/openshift/oc/pull/1144) * [Bug 2090751](https://bugzilla.redhat.com/show_bug.cgi?id=2090751): Correcting skipMissing flag usage when a manifest cannot be found [#1105](https://github.com/openshift/oc/pull/1105) * [Bug 2083770](https://bugzilla.redhat.com/show_bug.cgi?id=2083770): Change release signature file extension to json [#1151](https://github.com/openshift/oc/pull/1151) * [Bug 2040654](https://bugzilla.redhat.com/show_bug.cgi?id=2040654): Pass pod exit error codes to user [#1150](https://github.com/openshift/oc/pull/1150) * [Bug 2083999](https://bugzilla.redhat.com/show_bug.cgi?id=2083999): Delete recently created images when --prune-over-size-limit is used [#1143](https://github.com/openshift/oc/pull/1143) * [Bug 2086459](https://bugzilla.redhat.com/show_bug.cgi?id=2086459): Continue inspection when some resources are not found [#1137](https://github.com/openshift/oc/pull/1137) * [Bug 2065507](https://bugzilla.redhat.com/show_bug.cgi?id=2065507): Add the ReleaseAccepted condition to the oc adm upgrade command [#1113](https://github.com/openshift/oc/pull/1113) * Update images to be consistent with ART [#1132](https://github.com/openshift/oc/pull/1132) * release: update oc source URL in client READMEs [#1129](https://github.com/openshift/oc/pull/1129) * [WRKLDS-370](https://issues.redhat.com/browse/WRKLDS-370): copy manifests from linux/amd64 to all manifests in a list [#1120](https://github.com/openshift/oc/pull/1120) * Enable using existing namespace for must-gather operations [#1080](https://github.com/openshift/oc/pull/1080) * [Bug 2023295](https://bugzilla.redhat.com/show_bug.cgi?id=2023295): [inspect] Add namespace-scoped networking resources to inspect [#1128](https://github.com/openshift/oc/pull/1128) * [Bug 2074237](https://bugzilla.redhat.com/show_bug.cgi?id=2074237): clarify use of --image-stream for oc new-app [#1119](https://github.com/openshift/oc/pull/1119) * Deprecate oc serviceaccounts command [#1126](https://github.com/openshift/oc/pull/1126) * Replace temporary show-managed fields hack with a proper solution [#1127](https://github.com/openshift/oc/pull/1127) * [Bug 2080416](https://bugzilla.redhat.com/show_bug.cgi?id=2080416): Fix project command auto completion [#1125](https://github.com/openshift/oc/pull/1125) * Remove long-deprecated commands oc adm migrate etcd-ttl|image-references|legacy-hpa|storage [#1124](https://github.com/openshift/oc/pull/1124) * Fix squash merge regex [#1118](https://github.com/openshift/oc/pull/1118) * [Bug 2007647](https://bugzilla.redhat.com/show_bug.cgi?id=2007647): Add squash-merge support into oc adm release info [#1116](https://github.com/openshift/oc/pull/1116) * [Bug 2071614](https://bugzilla.redhat.com/show_bug.cgi?id=2071614): Remove network CRDs scheme registration [#1110](https://github.com/openshift/oc/pull/1110) * [Bug 2074902](https://bugzilla.redhat.com/show_bug.cgi?id=2074902): Pass non-zero exit code to debug command [#1115](https://github.com/openshift/oc/pull/1115) * adm inspect: delete unused pod URL getting code [#1032](https://github.com/openshift/oc/pull/1032) * [Bug 2073113](https://bugzilla.redhat.com/show_bug.cgi?id=2073113): do not report docker conf deprecation warning when the docker is not available [#1106](https://github.com/openshift/oc/pull/1106) * Drop k8s carries and bump to kubectl v0.24.0-beta-0 [#1092](https://github.com/openshift/oc/pull/1092) * [Bug 2075647](https://bugzilla.redhat.com/show_bug.cgi?id=2075647): pkg/cli/admin/upgrade: Use PATCH instead of POST for spec updates [#1111](https://github.com/openshift/oc/pull/1111) * Add --keep-manifest-list support to `oc adm release *` commands [#1109](https://github.com/openshift/oc/pull/1109) * [Bug 2041454](https://bugzilla.redhat.com/show_bug.cgi?id=2041454): Validate reference-policy for import-image command [#1108](https://github.com/openshift/oc/pull/1108) * [Bug 1823143](https://bugzilla.redhat.com/show_bug.cgi?id=1823143): wire ICSP lookups to oc image info [#829](https://github.com/openshift/oc/pull/829) * Use ServerGroupResources instead deprecated ServerResources [#1101](https://github.com/openshift/oc/pull/1101) * Introduce Jira defects into release info [#1100](https://github.com/openshift/oc/pull/1100) * Fix component name for oc [#1102](https://github.com/openshift/oc/pull/1102) * pkg/cli/admin/mustgather: label must-gather ns as privileged [#1099](https://github.com/openshift/oc/pull/1099) * Obtain OpenShift version from ClusterVersion resource [#1091](https://github.com/openshift/oc/pull/1091) * Allow triggers on batch/v1 CronJobs [#1077](https://github.com/openshift/oc/pull/1077) * pkg/cli/admin/upgrade: Mention channel choices [#1088](https://github.com/openshift/oc/pull/1088) * Add Nutanix platform [#1046](https://github.com/openshift/oc/pull/1046) * [Bug 2057101](https://bugzilla.redhat.com/show_bug.cgi?id=2057101): remove klog format and update messages for docker config deprecation [#1082](https://github.com/openshift/oc/pull/1082) * [Bug 2056893](https://bugzilla.redhat.com/show_bug.cgi?id=2056893): pkg/cli/admin/upgrade: Drop --to-image help warning [#1078](https://github.com/openshift/oc/pull/1078) * [Bug 2049889](https://bugzilla.redhat.com/show_bug.cgi?id=2049889): logging / help improvements around 'oc new-app --search' [#1086](https://github.com/openshift/oc/pull/1086) * [Bug 2056122](https://bugzilla.redhat.com/show_bug.cgi?id=2056122): expose --keep-startup flag for oc debug [#1085](https://github.com/openshift/oc/pull/1085) * [Bug 2052578](https://bugzilla.redhat.com/show_bug.cgi?id=2052578): reuse SourceRepository.DetectAuth during argument classification for consistent interaction with private source repositories [#1059](https://github.com/openshift/oc/pull/1059) * Add support for batch/v1 CronJob [#1081](https://github.com/openshift/oc/pull/1081) * [OSDOCS-3257](https://issues.redhat.com/browse/OSDOCS-3257): Adding in new metadata requirement for docs [#1072](https://github.com/openshift/oc/pull/1072) * Update all images to be consistent with ART [#1071](https://github.com/openshift/oc/pull/1071) * Updating openshift-enterprise-cli images to be consistent with ART [#1039](https://github.com/openshift/oc/pull/1039) * [Bug 2049234](https://bugzilla.redhat.com/show_bug.cgi?id=2049234): Fix mirroring images that have dots in their namespace [#1063](https://github.com/openshift/oc/pull/1063) * [Bug 2052034](https://bugzilla.redhat.com/show_bug.cgi?id=2052034): make sure that we check for resorces and files before picking the simplest path [#1062](https://github.com/openshift/oc/pull/1062) * [Bug 2049133](https://bugzilla.redhat.com/show_bug.cgi?id=2049133): Fix catalog mirror from files [#1058](https://github.com/openshift/oc/pull/1058) * Comment tolerations used in must-gather [#1004](https://github.com/openshift/oc/pull/1004) * Remove unused methods and re-use pre-existing ones where needed [#951](https://github.com/openshift/oc/pull/951) * Show managedFields in inspect [#1051](https://github.com/openshift/oc/pull/1051) * [Bug 2046319](https://bugzilla.redhat.com/show_bug.cgi?id=2046319): improve error message for debug [#1053](https://github.com/openshift/oc/pull/1053) * [Bug 2047895](https://bugzilla.redhat.com/show_bug.cgi?id=2047895): release: handle aarch64/arm64 naming disparity in mirror [#1038](https://github.com/openshift/oc/pull/1038) * [Bug 2044140](https://bugzilla.redhat.com/show_bug.cgi?id=2044140): pkg/cli/admin/upgrade: Fix nextStep option sense [#1050](https://github.com/openshift/oc/pull/1050) * Add TMOUT env to debug node pod [#1048](https://github.com/openshift/oc/pull/1048) * [Bug 2044140](https://bugzilla.redhat.com/show_bug.cgi?id=2044140): Updated the error message to include the suggestion [#1041](https://github.com/openshift/oc/pull/1041) * [Bug 2035717](https://bugzilla.redhat.com/show_bug.cgi?id=2035717): Enhancing the output provided when backup collections are attempted [#1013](https://github.com/openshift/oc/pull/1013) * [Bug 1976894](https://bugzilla.redhat.com/show_bug.cgi?id=1976894): Idling a StatefulSet seems to work however accessing the Services Route does not wake up the application ("Application is not available" error page is returned). [#1026](https://github.com/openshift/oc/pull/1026) * [Bug 2039359](https://bugzilla.redhat.com/show_bug.cgi?id=2039359): Fix adm prune rs orphans [#1030](https://github.com/openshift/oc/pull/1030) * [Bug 1972962](https://bugzilla.redhat.com/show_bug.cgi?id=1972962): Add validation for max-icsp-size flag [#851](https://github.com/openshift/oc/pull/851) * [Bug 1999246](https://bugzilla.redhat.com/show_bug.cgi?id=1999246): adm catalog mirror should ignore .indexignore files [#918](https://github.com/openshift/oc/pull/918) * [Bug 2042059](https://bugzilla.redhat.com/show_bug.cgi?id=2042059): bump discovery burst and qps [#1033](https://github.com/openshift/oc/pull/1033) * [Bug 2038160](https://bugzilla.redhat.com/show_bug.cgi?id=2038160): Inform user about inability to schedule a debug pod [#1029](https://github.com/openshift/oc/pull/1029) * [Bug 1990014](https://bugzilla.redhat.com/show_bug.cgi?id=1990014): Throw error when debugging Windows nodes [#1028](https://github.com/openshift/oc/pull/1028) * [Bug 2039311](https://bugzilla.redhat.com/show_bug.cgi?id=2039311): Add support for build csi volume source [#994](https://github.com/openshift/oc/pull/994) * [Bug 2039491](https://bugzilla.redhat.com/show_bug.cgi?id=2039491): Remove `git://` from new-app tests [#1020](https://github.com/openshift/oc/pull/1020) * [Bug 2036826](https://bugzilla.redhat.com/show_bug.cgi?id=2036826): Improved prune deployments [#1019](https://github.com/openshift/oc/pull/1019) * Ignore VSCode files [#1018](https://github.com/openshift/oc/pull/1018) * [Bug 2036826](https://bugzilla.redhat.com/show_bug.cgi?id=2036826): Fix prune deploy resolver [#1015](https://github.com/openshift/oc/pull/1015) * [Bug 2036940](https://bugzilla.redhat.com/show_bug.cgi?id=2036940): allow empty files and stdout in oc registry login [#1011](https://github.com/openshift/oc/pull/1011) * [Bug 1992596](https://bugzilla.redhat.com/show_bug.cgi?id=1992596): Remove admin bashcomp func [#1014](https://github.com/openshift/oc/pull/1014) * [Bug 2035393](https://bugzilla.redhat.com/show_bug.cgi?id=2035393): properly handle --dry-run=server [#1010](https://github.com/openshift/oc/pull/1010) * [Bug 2034889](https://bugzilla.redhat.com/show_bug.cgi?id=2034889): Fix another prune panic [#1008](https://github.com/openshift/oc/pull/1008) * [Bug 2034889](https://bugzilla.redhat.com/show_bug.cgi?id=2034889): Fix prune deployment panic [#1005](https://github.com/openshift/oc/pull/1005) * [Bug 2033751](https://bugzilla.redhat.com/show_bug.cgi?id=2033751): Revert "Modified MG pod tolerations" [#1003](https://github.com/openshift/oc/pull/1003) * [Bug 2033751](https://bugzilla.redhat.com/show_bug.cgi?id=2033751): pkg/cli/admin/inspect: Fix "ocurred" -> "occurred" typos [#1002](https://github.com/openshift/oc/pull/1002) * [Bug 2033751](https://bugzilla.redhat.com/show_bug.cgi?id=2033751): Bump k8s.io to v0.23.0 [#1001](https://github.com/openshift/oc/pull/1001) * [Bug 2032111](https://bugzilla.redhat.com/show_bug.cgi?id=2032111): requestproject: use agnhost serve-hostname [#995](https://github.com/openshift/oc/pull/995) * Modified MG pod tolerations [#942](https://github.com/openshift/oc/pull/942) * Adding the flag --allow-not-recommended to oc adm upgrade [#986](https://github.com/openshift/oc/pull/986) * release: extract darwin/arm64 openshift-install [#1000](https://github.com/openshift/oc/pull/1000) * Add darwin/arm64 oc [#990](https://github.com/openshift/oc/pull/990) * oc adm prune deployments for ReplicaSets [#987](https://github.com/openshift/oc/pull/987) * Fix documentation issue #937 [#944](https://github.com/openshift/oc/pull/944) * feat/oc-release-extract-cco: add support for alibabacloud [#978](https://github.com/openshift/oc/pull/978) * fix registry-config messages and imports [#983](https://github.com/openshift/oc/pull/983) * [Bug 1982498](https://bugzilla.redhat.com/show_bug.cgi?id=1982498): default to podman credential configs [#893](https://github.com/openshift/oc/pull/893) * [Bug 1858760](https://bugzilla.redhat.com/show_bug.cgi?id=1858760): allow Authorization Service URL to differ from Registry URL when retrieving tokens [#924](https://github.com/openshift/oc/pull/924) * Adding an example for oc adm upgrade [#977](https://github.com/openshift/oc/pull/977) * [Bug 2020377](https://bugzilla.redhat.com/show_bug.cgi?id=2020377): add linux capability for host network packet captures [#962](https://github.com/openshift/oc/pull/962) * Fix docs for oc adm policy add-role-to-user vs oc policy add-role-to-user [#973](https://github.com/openshift/oc/pull/973) * Drop patches for apimachinery and client-go forks [#976](https://github.com/openshift/oc/pull/976) * mustgather: add NodeName to destDir folder name [#965](https://github.com/openshift/oc/pull/965) * Bump go.mod for go1.17 [#974](https://github.com/openshift/oc/pull/974) * Updating ose-tools images to be consistent with ART [#932](https://github.com/openshift/oc/pull/932) * Display conditional and not-recommended versions [#961](https://github.com/openshift/oc/pull/961) * Introduce an option to retrieve rotated log files for a pod [#958](https://github.com/openshift/oc/pull/958) * Updating ose-cli-artifacts-alt images to be consistent with ART [#933](https://github.com/openshift/oc/pull/933) * GitHub-38217: Removing old example that mentions limitSecretReferences [#967](https://github.com/openshift/oc/pull/967) * pkg/cli/admin/upgrade: Indent multi-line messages [#952](https://github.com/openshift/oc/pull/952) * [Bug 1952230](https://bugzilla.redhat.com/show_bug.cgi?id=1952230): pkg/cli/admin/upgrade: Always run all client-side checks [#812](https://github.com/openshift/oc/pull/812) * [Bug 1878925](https://bugzilla.redhat.com/show_bug.cgi?id=1878925): pkg/cli/admin/upgrade: Remove help text around history lookups [#566](https://github.com/openshift/oc/pull/566) * bump openshift/library-go [#949](https://github.com/openshift/oc/pull/949) * fix update-generated-completions.sh [#948](https://github.com/openshift/oc/pull/948) * [Bug 1987257](https://bugzilla.redhat.com/show_bug.cgi?id=1987257): Always set User-Agent header for registries [#915](https://github.com/openshift/oc/pull/915) * PowerVS support [#955](https://github.com/openshift/oc/pull/955) * [Bug 1970805](https://bugzilla.redhat.com/show_bug.cgi?id=1970805): Replace slashes in suggested ImageStream name [#922](https://github.com/openshift/oc/pull/922) * Re-use DialContext and Proxy configuration from original http.Transport [#837](https://github.com/openshift/oc/pull/837) * runAsNonRoot in Pod SCC should be nil when oc debug run with `--as-root` [#880](https://github.com/openshift/oc/pull/880) * Adjust oc with kubectl and several cleaning items [#946](https://github.com/openshift/oc/pull/946) * [Bug 1926522](https://bugzilla.redhat.com/show_bug.cgi?id=1926522): oc adm catalog mirror tmp directory cleanup [#935](https://github.com/openshift/oc/pull/935) * Drop policy mentions in oc adm policy help [#943](https://github.com/openshift/oc/pull/943) * Add MacOS local building instructions to README [#936](https://github.com/openshift/oc/pull/936) * [Bug 1977414](https://bugzilla.redhat.com/show_bug.cgi?id=1977414): check BuildConfig Secrets and ConfigMaps before start-build creates a build [#919](https://github.com/openshift/oc/pull/919) * OWNERS: Prune crawford [#930](https://github.com/openshift/oc/pull/930) * [Bug 2002950](https://bugzilla.redhat.com/show_bug.cgi?id=2002950): Define a Command instead of Arguments for Container [#925](https://github.com/openshift/oc/pull/925) * [Bug 1992680](https://bugzilla.redhat.com/show_bug.cgi?id=1992680): pkg/cli/admin/upgrade: Changing "Updates" string to "Available Updates" [#903](https://github.com/openshift/oc/pull/903) * [Bug 1992591](https://bugzilla.redhat.com/show_bug.cgi?id=1992591): ensure the same oc is used everywhere in cli-artifacts [#904](https://github.com/openshift/oc/pull/904) * [Bug 1990014](https://bugzilla.redhat.com/show_bug.cgi?id=1990014): Use cmd for Windows pods [#907](https://github.com/openshift/oc/pull/907) * [Bug 1996881](https://bugzilla.redhat.com/show_bug.cgi?id=1996881): adm catalog mirror: log deprecation message when sqlite-based catalog is in use [#908](https://github.com/openshift/oc/pull/908) * [Bug 1994872](https://bugzilla.redhat.com/show_bug.cgi?id=1994872): Fix manifest path regression [#906](https://github.com/openshift/oc/pull/906) * [Bug 1989504](https://bugzilla.redhat.com/show_bug.cgi?id=1989504): The code logic of channel clear is ambiguous, as well as the help info and output messages [#891](https://github.com/openshift/oc/pull/891) * [Bug 1989505](https://bugzilla.redhat.com/show_bug.cgi?id=1989505): bump kubernetes-client-go library [#909](https://github.com/openshift/oc/pull/909) * [Bug 1999159](https://bugzilla.redhat.com/show_bug.cgi?id=1999159): Update the catalog-related owner alias' [#910](https://github.com/openshift/oc/pull/910) * [Bug 1995291](https://bugzilla.redhat.com/show_bug.cgi?id=1995291): Remove docker adjective whenever possible. [#767](https://github.com/openshift/oc/pull/767) * [Bug 1995573](https://bugzilla.redhat.com/show_bug.cgi?id=1995573): Replacing kubectl with oc adm in help for certificate ap… [#905](https://github.com/openshift/oc/pull/905) * [Bug 1989391](https://bugzilla.redhat.com/show_bug.cgi?id=1989391): Revert to UnstructuredList to fix yaml output [#895](https://github.com/openshift/oc/pull/895) * [Bug 1992680](https://bugzilla.redhat.com/show_bug.cgi?id=1992680): pkg/cli/admin/upgrade/upgrade: Copy edits, including "assists with cluster upgrades" [#899](https://github.com/openshift/oc/pull/899) * [Bug 1786835](https://bugzilla.redhat.com/show_bug.cgi?id=1786835): Check for out of range condition [#894](https://github.com/openshift/oc/pull/894) * [Bug 1903545](https://bugzilla.redhat.com/show_bug.cgi?id=1903545): Replace colons with dashes in Windows file paths [#897](https://github.com/openshift/oc/pull/897) * [Bug 1986003](https://bugzilla.redhat.com/show_bug.cgi?id=1986003): Bump k8s.io to 1.22.0-rc.0 [#890](https://github.com/openshift/oc/pull/890) * [Bug 1971332](https://bugzilla.redhat.com/show_bug.cgi?id=1971332): revert incorrect allowance of ssh:// prefix with scp styled URLs [#875](https://github.com/openshift/oc/pull/875) * Add support for declarative configs to "adm catalog mirror" [#868](https://github.com/openshift/oc/pull/868) * Support ibmcloud provider in release extract [#852](https://github.com/openshift/oc/pull/852) * [Bug 1980118](https://bugzilla.redhat.com/show_bug.cgi?id=1980118): Keep workload annotations during the `oc debug` call. [#887](https://github.com/openshift/oc/pull/887) * [Bug 1978629](https://bugzilla.redhat.com/show_bug.cgi?id=1978629): Add oc describe output for build volumes [#874](https://github.com/openshift/oc/pull/874) * [Bug 1955292](https://bugzilla.redhat.com/show_bug.cgi?id=1955292): show consistent unit format in cluster resource quota describe [#882](https://github.com/openshift/oc/pull/882) * contrib/completions/OWNERS: Delegate to all approver aliases [#878](https://github.com/openshift/oc/pull/878) * pkg/cli/admin/upgrade/channel: Add 'oc adm upgrade channel ...' [#576](https://github.com/openshift/oc/pull/576) * [Bug 1976112](https://bugzilla.redhat.com/show_bug.cgi?id=1976112): Fixed warnings about deprecated CronJob in image-pruner pods [#876](https://github.com/openshift/oc/pull/876) * release: extract Linux binaries for multiple architectures [#816](https://github.com/openshift/oc/pull/816) * [BUILD-87](https://issues.redhat.com/browse/BUILD-87): bumping openshift/api with new fields for build volumes [#843](https://github.com/openshift/oc/pull/843) * [Bug 1925534](https://bugzilla.redhat.com/show_bug.cgi?id=1925534): Add proxy to oc [#751](https://github.com/openshift/oc/pull/751) * Updating openshift-enterprise-cli-alt images to be consistent with ART [#855](https://github.com/openshift/oc/pull/855) * Updating openshift-enterprise-deployer images to be consistent with ART [#856](https://github.com/openshift/oc/pull/856) * Updating ose-cli-artifacts-alt images to be consistent with ART [#858](https://github.com/openshift/oc/pull/858) * Updating ose-tools images to be consistent with ART [#857](https://github.com/openshift/oc/pull/857) * fix typo in examples template [#739](https://github.com/openshift/oc/pull/739) * [Bug 1973643](https://bugzilla.redhat.com/show_bug.cgi?id=1973643): make oc logs work with BuildConfig's JenkinsPipeline strategy [#863](https://github.com/openshift/oc/pull/863) * Update ruby-hello-world images [#860](https://github.com/openshift/oc/pull/860) * Add json.Valid check before trying to read docker config [#747](https://github.com/openshift/oc/pull/747) * [Full changelog](https://github.com/openshift/oc/compare/61f31e904c2ad33d390e068e84dd83fd840177c6...) ### [hyperkube, pod](https://github.com/openshift/kubernetes/tree/) * [OCPBUILD-13](https://issues.redhat.com/browse/OCPBUILD-13): UPSTREAM: <carry>: fix [sig-auth] ServiceAccounts no secret-based service account token should be auto-generated [#1909](https://github.com/openshift/kubernetes/pull/1909) * [CFE-910](https://issues.redhat.com/browse/CFE-910): [o/k-apis] Add context to ObjectValidator; Consume FeatureGate(s) in kube-apiserver [#1852](https://github.com/openshift/kubernetes/pull/1852) * UPSTREAM: <carry>: OCPBUGS-29520: fix cpu manager cpuset check [#1892](https://github.com/openshift/kubernetes/pull/1892) * [OCPBUGS-30954](https://issues.redhat.com/browse/OCPBUGS-30954): Set up CEL IP/CIDR library from 4.14 onwards [#1911](https://github.com/openshift/kubernetes/pull/1911) * [OCPBUGS-24481](https://issues.redhat.com/browse/OCPBUGS-24481): Enable SELinux tests [#1908](https://github.com/openshift/kubernetes/pull/1908) * [MCO-392](https://issues.redhat.com/browse/MCO-392): openshift-hack/images/os: delete [#1805](https://github.com/openshift/kubernetes/pull/1805) * [OCPBUGS-23900](https://issues.redhat.com/browse/OCPBUGS-23900): UPSTREAM: 123512: system:kube-scheduler: extend the RBAC with pods/finalizers [#1900](https://github.com/openshift/kubernetes/pull/1900) * [OCPBUGS-10996](https://issues.redhat.com/browse/OCPBUGS-10996): Fix race condition between resizer and kubelet [#1899](https://github.com/openshift/kubernetes/pull/1899) * [OCPBUGS-29437](https://issues.redhat.com/browse/OCPBUGS-29437): Upstream: <carry>: RPM: Split apiserver, scheduler, k-c-m, kubelet into subpackages [#1882](https://github.com/openshift/kubernetes/pull/1882) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s to 1.29.2 [#1888](https://github.com/openshift/kubernetes/pull/1888) * NO-JIRA: Clean carry patches [#1880](https://github.com/openshift/kubernetes/pull/1880) * [OCPBUGS-29435](https://issues.redhat.com/browse/OCPBUGS-29435): UPSTREAM: 123165: Add AudienceMatchPolicy and support multiple audien… [#1881](https://github.com/openshift/kubernetes/pull/1881) * [CORS-3191](https://issues.redhat.com/browse/CORS-3191): Add Dockerfile to buld kube-apiserver for openshift-install architectures [#1872](https://github.com/openshift/kubernetes/pull/1872) * NO-JIRA: Revert "OCPBUGS-24404: add ignore for SAST scan" [#1870](https://github.com/openshift/kubernetes/pull/1870) * [OCPBUGS-24404](https://issues.redhat.com/browse/OCPBUGS-24404): UPSTREAM <carry>: use snyk file [#1871](https://github.com/openshift/kubernetes/pull/1871) * [OCPBUGS-26058](https://issues.redhat.com/browse/OCPBUGS-26058): UPSTREAM: <carry>: watch-termination: termination.log file with restricted permissions [#1841](https://github.com/openshift/kubernetes/pull/1841) * [OCPBUGS-16760](https://issues.redhat.com/browse/OCPBUGS-16760): permanently disable NodeLogQuery e2e test [#1792](https://github.com/openshift/kubernetes/pull/1792) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s to 1.29.1 [#1858](https://github.com/openshift/kubernetes/pull/1858) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Switch to golang 1.21 [#1845](https://github.com/openshift/kubernetes/pull/1845) * [OCPBUGS-24606](https://issues.redhat.com/browse/OCPBUGS-24606): UPSTREAM: <carry>: Update management webhook pod admission logic [#1821](https://github.com/openshift/kubernetes/pull/1821) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: <carry>: update test rules [#1849](https://github.com/openshift/kubernetes/pull/1849) * [OCPBUGS-17249](https://issues.redhat.com/browse/OCPBUGS-17249): UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin [#1787](https://github.com/openshift/kubernetes/pull/1787) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: 122683: Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies [#1848](https://github.com/openshift/kubernetes/pull/1848) * [OCPBUGS-23896](https://issues.redhat.com/browse/OCPBUGS-23896): Fix device uncertain errors on reboot [#1829](https://github.com/openshift/kubernetes/pull/1829) * [OCPBUGS-24404](https://issues.redhat.com/browse/OCPBUGS-24404): add ignore for SAST scan [#1824](https://github.com/openshift/kubernetes/pull/1824) * [AUTH-439](https://issues.redhat.com/browse/AUTH-439): loosen authentication.spec.type validation [#1770](https://github.com/openshift/kubernetes/pull/1770) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): UPSTREAM: 122643: Add a new neverTerminate job behavior just for upgrade [#1846](https://github.com/openshift/kubernetes/pull/1846) * [OCPBUGS-26067](https://issues.redhat.com/browse/OCPBUGS-26067): Backport CEL IP and CIDR validations [#1828](https://github.com/openshift/kubernetes/pull/1828) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Bump k8s api to 1.29.0 [#1840](https://github.com/openshift/kubernetes/pull/1840) * [OCPNODE-1895](https://issues.redhat.com/browse/OCPNODE-1895): temporarily disable reporting e2e text bugs [#1836](https://github.com/openshift/kubernetes/pull/1836) * [OCPNODE-1892](https://issues.redhat.com/browse/OCPNODE-1892): Rebase 1.29.0 [#1815](https://github.com/openshift/kubernetes/pull/1815) * [CNF-8809](https://issues.redhat.com/browse/CNF-8809): admission: add new admission for handling shared cpus request [#1799](https://github.com/openshift/kubernetes/pull/1799) * [CNF-8326](https://issues.redhat.com/browse/CNF-8326): advertise shared cpus for mixed cpus feature [#1795](https://github.com/openshift/kubernetes/pull/1795) * [OCPBUGS-23565](https://issues.redhat.com/browse/OCPBUGS-23565): Update to kubernetes 1.28.4 [#1806](https://github.com/openshift/kubernetes/pull/1806) * [OCPBUGS-23073](https://issues.redhat.com/browse/OCPBUGS-23073): .spec.numberOfUsersToReport is not correctly applied in some circumstances [#1794](https://github.com/openshift/kubernetes/pull/1794) * [OCPBUGS-22724](https://issues.redhat.com/browse/OCPBUGS-22724): UPSTREAM: 121881: Use golang library instead of mklink [#1800](https://github.com/openshift/kubernetes/pull/1800) * [OCPBUGS-16922](https://issues.redhat.com/browse/OCPBUGS-16922): Remove skip flag for e2e tests related to AdmissionWebhookMatchConditions [#1790](https://github.com/openshift/kubernetes/pull/1790) * Update REBASE.openshift.md [#1788](https://github.com/openshift/kubernetes/pull/1788) * [STOR-1278](https://issues.redhat.com/browse/STOR-1278): Fixes for SELinux mount context metrics [#1771](https://github.com/openshift/kubernetes/pull/1771) * Update to Kubernetes v1.28.3 [#1776](https://github.com/openshift/kubernetes/pull/1776) * openshift-hack: Fix sporadic 141 errors in build-rpms [#1769](https://github.com/openshift/kubernetes/pull/1769) * UPSTREAM: <carry>: support for both icsp and idms objects [#1685](https://github.com/openshift/kubernetes/pull/1685) * [OCPBUGS-21584](https://issues.redhat.com/browse/OCPBUGS-21584): UPSTREAM: 121128: [CVE-2023-39325] .: bump golang.org/x/net to v0.17.0 [#1757](https://github.com/openshift/kubernetes/pull/1757) * Do not allow nodes to set forbidden openshift labels [#1735](https://github.com/openshift/kubernetes/pull/1735) * [OCPBUGS-20096](https://issues.redhat.com/browse/OCPBUGS-20096): bump pause image to RHEL9 [#1734](https://github.com/openshift/kubernetes/pull/1734) * Revert #1731 "Revert #1703 "Update builder & base images"" [#1732](https://github.com/openshift/kubernetes/pull/1732) * Revert #1703 "Update builder & base images" [#1731](https://github.com/openshift/kubernetes/pull/1731) * Update builder & base images [#1703](https://github.com/openshift/kubernetes/pull/1703) * UPSTREAM: <drop>: bump(openshift/client-go,library-go,apiserver-library-go) [#1726](https://github.com/openshift/kubernetes/pull/1726) * [OCPBUGS-19666](https://issues.redhat.com/browse/OCPBUGS-19666): kubelet/cm: use MkdirAll when creating cpuset to ignore file exists error [#1724](https://github.com/openshift/kubernetes/pull/1724) * [OCPBUGS-17534](https://issues.redhat.com/browse/OCPBUGS-17534): UPSTREAM: <carry>: vendor: bump cadvisor and runc to 1.1.9 [#1711](https://github.com/openshift/kubernetes/pull/1711) * UPSTREAM: 120817: e2e: bootstrap vsphere tests earlier [#1714](https://github.com/openshift/kubernetes/pull/1714) * [OCPBUGS-19452](https://issues.redhat.com/browse/OCPBUGS-19452): UPSTREAM: 119317: change rolling update logic to exclude sunsetting nodes [#1716](https://github.com/openshift/kubernetes/pull/1716) * Update to new openshift/* dependencies [#1704](https://github.com/openshift/kubernetes/pull/1704) * [STOR-1425](https://issues.redhat.com/browse/STOR-1425): Update to Kubernetes 1.28.1 [#1646](https://github.com/openshift/kubernetes/pull/1646) * [OCPBUGS-16080](https://issues.redhat.com/browse/OCPBUGS-16080): UPSTREAM: <carry>: watch-termination: termination.log file [#1638](https://github.com/openshift/kubernetes/pull/1638) * UPSTREAM: <carry>: disable test removed in 1.28 [#1698](https://github.com/openshift/kubernetes/pull/1698) * <carry>: Export cpu stats of ovs.slice via prometheus [#1686](https://github.com/openshift/kubernetes/pull/1686) * [OCPBUGS-17654](https://issues.redhat.com/browse/OCPBUGS-17654): cm: reorder setting of sched_load_balance for sandbox slice [#1665](https://github.com/openshift/kubernetes/pull/1665) * [OCPBUGS-18608](https://issues.redhat.com/browse/OCPBUGS-18608): UPSTREAM: <carry>: Force using host go always and use host libriaries [#1688](https://github.com/openshift/kubernetes/pull/1688) * [OCPBUGS-18149](https://issues.redhat.com/browse/OCPBUGS-18149): UPSTREAM: <carry>: retry etcd Unavailable errors [#1681](https://github.com/openshift/kubernetes/pull/1681) * [OCPBUGS-18149](https://issues.redhat.com/browse/OCPBUGS-18149): UPSTREAM: <carry>: retry etcd Unavailable errors [#1676](https://github.com/openshift/kubernetes/pull/1676) * [OCPBUGS-14301](https://issues.redhat.com/browse/OCPBUGS-14301): UPSTREAM: 117245: Fix TopologyAwareHint not working when zone label is added after Node creation [#1673](https://github.com/openshift/kubernetes/pull/1673) * [OCPBUGS-14301](https://issues.redhat.com/browse/OCPBUGS-14301): UPSTREAM: 117249,118189: fix TopologyCache crashes [#1668](https://github.com/openshift/kubernetes/pull/1668) * [OCPBUGS-7415](https://issues.redhat.com/browse/OCPBUGS-7415): grant user:full scope to self-SARs [#1493](https://github.com/openshift/kubernetes/pull/1493) * UPSTREAM: 118280: Set all PSa labels in tests [#1663](https://github.com/openshift/kubernetes/pull/1663) * [OCPBUGS-17119](https://issues.redhat.com/browse/OCPBUGS-17119): UPSTREAM: <drop>: bump apiserver-library-go for updated required-scc errors [#1661](https://github.com/openshift/kubernetes/pull/1661) * [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): UPSTREAM: <carry>: merge v3 openapi discovery and specs for special groups [#1654](https://github.com/openshift/kubernetes/pull/1654) * [OCPBUGS-16166](https://issues.redhat.com/browse/OCPBUGS-16166): Update to Kubernetes 1.27.4 [#1660](https://github.com/openshift/kubernetes/pull/1660) * Update to Kubernetes 1.27.4 [#1653](https://github.com/openshift/kubernetes/pull/1653) * [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): UPSTREAM: 118879: make apiservices.apiregistration.k8s.io discoverabl… [#1630](https://github.com/openshift/kubernetes/pull/1630) * [OCPBUGS-16166](https://issues.redhat.com/browse/OCPBUGS-16166): Update to Kubernetes 1.27.4 [#1645](https://github.com/openshift/kubernetes/pull/1645) * [OCPBUGS-15726](https://issues.redhat.com/browse/OCPBUGS-15726): UPSTREAM: 118881: fix openapi/v3 non local apiservices aggregation [#1629](https://github.com/openshift/kubernetes/pull/1629) * UPSTREAM: <drop>: hack/update-vendor.sh [#1634](https://github.com/openshift/kubernetes/pull/1634) * UPSTREAM: 119107: Stop using deprecated API [#1624](https://github.com/openshift/kubernetes/pull/1624) * [OCPBUGS-13392](https://issues.redhat.com/browse/OCPBUGS-13392): UPSTREAM: 118915: remove legacy NetworkPolicy tests [#1623](https://github.com/openshift/kubernetes/pull/1623) * UPSTREAM: <drop>: update openshift/api,openshift/apiserver-library-go [#1621](https://github.com/openshift/kubernetes/pull/1621) * UPSTREAM: <carry>: when only this kube-apiserver can fulfill the kube… [#1616](https://github.com/openshift/kubernetes/pull/1616) * Update to Kubernetes 1.27.3 [#1609](https://github.com/openshift/kubernetes/pull/1609) * UPSTREAM: <carry>: STOR-1270: Admission plugin to deny deletion of storages.operator.openshift.io [#1550](https://github.com/openshift/kubernetes/pull/1550) * [OCPBUGS-7181](https://issues.redhat.com/browse/OCPBUGS-7181): UPSTREAM: <drop>: bump apiserver-library-go [#1605](https://github.com/openshift/kubernetes/pull/1605) * [STOR-1263](https://issues.redhat.com/browse/STOR-1263): Add csimock tests [#1595](https://github.com/openshift/kubernetes/pull/1595) * [OCPBUGS-4053](https://issues.redhat.com/browse/OCPBUGS-4053): UPSTREAM: 118383: bump cadvisor for upstream patch 3301 [#1594](https://github.com/openshift/kubernetes/pull/1594) * Update test wrapper to match new k8s [#1584](https://github.com/openshift/kubernetes/pull/1584) * [STOR-1263](https://issues.redhat.com/browse/STOR-1263): Bump to k8s 1.27.2 [#1583](https://github.com/openshift/kubernetes/pull/1583) * `cherry-pick`: #117785 from `k/k` - disable external IPs on e2e net tests [#1581](https://github.com/openshift/kubernetes/pull/1581) * UPSTREAM: 117893: When expecting pods count only active ones [#1577](https://github.com/openshift/kubernetes/pull/1577) * [OCPBUGS-13854](https://issues.redhat.com/browse/OCPBUGS-13854): UPSTREAM: 117371: kubelet: Don't reference the pod manager interface directly from components [#1578](https://github.com/openshift/kubernetes/pull/1578) * [OCPBUGS-11652](https://issues.redhat.com/browse/OCPBUGS-11652): UPSTREAM: <carry>: Extend NodeLogQuery feature [#1579](https://github.com/openshift/kubernetes/pull/1579) * [OCPBUGS-13148](https://issues.redhat.com/browse/OCPBUGS-13148): kubelet/cm: disable cpu load balancing on slices when using static cpu manager policy [#1573](https://github.com/openshift/kubernetes/pull/1573) * UPSTREAM: <carry>: move test rules from origin [#1574](https://github.com/openshift/kubernetes/pull/1574) * [OCPBUGS-11143](https://issues.redhat.com/browse/OCPBUGS-11143): Azure: move to kube-proxy LB probes, don't detach masters when unready [#1569](https://github.com/openshift/kubernetes/pull/1569) * [OCPBUGS-10048](https://issues.redhat.com/browse/OCPBUGS-10048): UPSTREAM: <carry>: add conditional shutdown response header [#1555](https://github.com/openshift/kubernetes/pull/1555) * [OCPBUGS-2474](https://issues.redhat.com/browse/OCPBUGS-2474): UPSTREAM: 116995: kubelet: Ensure pods that have not started track pendingUpdate [#1561](https://github.com/openshift/kubernetes/pull/1561) * [STOR-1263](https://issues.redhat.com/browse/STOR-1263): Update to Kubernetes 1.27.1 [#1558](https://github.com/openshift/kubernetes/pull/1558) * [OCPBUGS-10829](https://issues.redhat.com/browse/OCPBUGS-10829): UPSTREAM: 117310: kube-aggregator: correctly use client-go TLS cache with custom dialer [#1548](https://github.com/openshift/kubernetes/pull/1548) * UPSTREAM: <carry>: add shutdown annotation to response header [#1537](https://github.com/openshift/kubernetes/pull/1537) * UPSTREAM: <carry>: OCPNODE-1548,OCPNODE-1584: disable load balancing on created cgroups when managed is enabled [#1518](https://github.com/openshift/kubernetes/pull/1518) * Add wrapper which will allow running o/k tests as external binary in origin [#1485](https://github.com/openshift/kubernetes/pull/1485) * [OCPBUGS-7267](https://issues.redhat.com/browse/OCPBUGS-7267): More fixes to SCC PSa extractor [#1482](https://github.com/openshift/kubernetes/pull/1482) * [OCPBUGS-10048](https://issues.redhat.com/browse/OCPBUGS-10048): UPSTREAM: 115328: apiserver: annotate early (server not ready) and late (during shutdown) requests [#1456](https://github.com/openshift/kubernetes/pull/1456) * [OCPBUGS-8220](https://issues.redhat.com/browse/OCPBUGS-8220): CSI Inline Volume admission plugin does not log object name correctly [#1499](https://github.com/openshift/kubernetes/pull/1499) * [OCPBUGS-8092](https://issues.redhat.com/browse/OCPBUGS-8092): Fix mounted volume expansion tests [#1498](https://github.com/openshift/kubernetes/pull/1498) * UPSTREAM: <carry>: update rebase doc [#1464](https://github.com/openshift/kubernetes/pull/1464) * Bump to k8s 1.26.2 [#1494](https://github.com/openshift/kubernetes/pull/1494) * [AUTH-336](https://issues.redhat.com/browse/AUTH-336): UPSTREAM: <carry>: PSa metrics: unset ocp_namespace on non-platform n… [#1489](https://github.com/openshift/kubernetes/pull/1489) * Bump to k8s 1.26.1 [#1479](https://github.com/openshift/kubernetes/pull/1479) * [OCPBUGS-7267](https://issues.redhat.com/browse/OCPBUGS-7267): add SeccompProfile to Pod and Container accessors/mutators [#1490](https://github.com/openshift/kubernetes/pull/1490) * UPSTREAM: <drop>: OCPBUGS-5991: Kube APIServer panics in admission controller [#1488](https://github.com/openshift/kubernetes/pull/1488) * [CNF-5901](https://issues.redhat.com/browse/CNF-5901): admission hook change for workload partition on all clusters [#1312](https://github.com/openshift/kubernetes/pull/1312) * UPSTREAM: 113799: tests: network: Prefer internal IPs first [#1446](https://github.com/openshift/kubernetes/pull/1446) * UPSTREAM: 115863: Remove global framework variable [#1480](https://github.com/openshift/kubernetes/pull/1480) * UPSTREAM: <carry>: add new approvers [#1458](https://github.com/openshift/kubernetes/pull/1458) * [OCPBUGS-7555](https://issues.redhat.com/browse/OCPBUGS-7555): UPSTREAM: <carry>: add default kubelet sysctls within rpm [#1475](https://github.com/openshift/kubernetes/pull/1475) * [AUTH-336](https://issues.redhat.com/browse/AUTH-336): UPSTREAM: <carry>: PSa metrics: log platform namespaces in audit denies [#1454](https://github.com/openshift/kubernetes/pull/1454) * add icsp validation: reject one of icsp idms.itms resources [#1310](https://github.com/openshift/kubernetes/pull/1310) * UPSTREAM: 114027: make GetSubnetPrefix IP family agnostic [#1469](https://github.com/openshift/kubernetes/pull/1469) * disable tests dependent on StackDriver [#1466](https://github.com/openshift/kubernetes/pull/1466) * UPSTREAM: 115484: Don't explicitly set image version in tests [#1465](https://github.com/openshift/kubernetes/pull/1465) * UPSTREAM: 114994: kubelet: fix readiness probes with pod termination [#1450](https://github.com/openshift/kubernetes/pull/1450) * [OCPBUGS-6030](https://issues.redhat.com/browse/OCPBUGS-6030): Rebase onto kube v1.26 [#1432](https://github.com/openshift/kubernetes/pull/1432) * Fix the mutated PodSpec extractor for warns if no SCC matches [#1453](https://github.com/openshift/kubernetes/pull/1453) * [OCPBUGS-4900](https://issues.redhat.com/browse/OCPBUGS-4900): remove in-tree volume limits test now that CSIMigration is GA [#1448](https://github.com/openshift/kubernetes/pull/1448) * [OCPBUGS-4658](https://issues.redhat.com/browse/OCPBUGS-4658): Apply shared defaulters to CRD-based routes. [#1440](https://github.com/openshift/kubernetes/pull/1440) * [OCPBUGS-4657](https://issues.redhat.com/browse/OCPBUGS-4657): Bump library-go. [#1431](https://github.com/openshift/kubernetes/pull/1431) * UPSTREAM: <carry>: make the PSA workload admission warnings honor the… [#1393](https://github.com/openshift/kubernetes/pull/1393) * UPSTREAM: <carry>: Ensure balanced brackets in annotated test names [#1410](https://github.com/openshift/kubernetes/pull/1410) * [STOR-829](https://issues.redhat.com/browse/STOR-829): Add CSIInlineVolumeSecurity admission plugin [#1384](https://github.com/openshift/kubernetes/pull/1384) * [OCPBUGS-3501](https://issues.redhat.com/browse/OCPBUGS-3501): UPSTREAM: <carry>: Add host assignment plugin for CRD-based routes. [#1419](https://github.com/openshift/kubernetes/pull/1419) * UPSTREAM: <drop>: Bump openshift/api. [#1424](https://github.com/openshift/kubernetes/pull/1424) * [OCPBUGS-3499](https://issues.redhat.com/browse/OCPBUGS-3499): UPSTREAM: <carry>: Add validation plugin for CRD-based route parity. [#1416](https://github.com/openshift/kubernetes/pull/1416) * [Bug 2117374](https://bugzilla.redhat.com/show_bug.cgi?id=2117374): UPSTREAM: <drop>: update apiserver-library-go to add message about wo… [#1395](https://github.com/openshift/kubernetes/pull/1395) * Bug OCPBUGS-2991: Disable expansion in SC, if driver does not support it [#1402](https://github.com/openshift/kubernetes/pull/1402) * [OCPBUGS-3093](https://issues.redhat.com/browse/OCPBUGS-3093): Tag AWS security groups at creation [#1411](https://github.com/openshift/kubernetes/pull/1411) * UPSTREAM: <drop>: Bump library-go. [#1406](https://github.com/openshift/kubernetes/pull/1406) * [OCPBUGS-2946](https://issues.redhat.com/browse/OCPBUGS-2946): Revert: 1340: tag AWS security group at creation [#1401](https://github.com/openshift/kubernetes/pull/1401) * [OCPBUGS-3084](https://issues.redhat.com/browse/OCPBUGS-3084): UPSTREAM: 113481: kubelet: fix pod log line corruption when using timestamps and long lines [#1404](https://github.com/openshift/kubernetes/pull/1404) * [OCPBUGS-2774](https://issues.redhat.com/browse/OCPBUGS-2774): UPSTREAM: 112807 Fix Load balancer services with xTP local [#1400](https://github.com/openshift/kubernetes/pull/1400) * UPSTREAM: 113208: Set default test timeouts first, only then modify the required ones [#1396](https://github.com/openshift/kubernetes/pull/1396) * UPSTREAM: <carry>: Bug 2098054: tag AWS security group at creation [#1340](https://github.com/openshift/kubernetes/pull/1340) * UPSTREAM: 113135: Wait for pod not running or gone in storage tests [#1394](https://github.com/openshift/kubernetes/pull/1394) * Bump to k8s 1.25.2 [#1380](https://github.com/openshift/kubernetes/pull/1380) * [Bug 2041317](https://bugzilla.redhat.com/show_bug.cgi?id=2041317): Fix replica calculation at start of HPA scaling policy period [#1391](https://github.com/openshift/kubernetes/pull/1391) * UPSTREAM: <carry>: allow annotating with a specific suite [#1388](https://github.com/openshift/kubernetes/pull/1388) * k8s 1.25.0 [#1360](https://github.com/openshift/kubernetes/pull/1360) * UPSTREAM: <carry>: Dockerfile: use centos:stream9 [#1366](https://github.com/openshift/kubernetes/pull/1366) * [OCPBUGS-718](https://issues.redhat.com/browse/OCPBUGS-718): UPSTREAM: 112267: aws: skip health rules if they are a subnet of the client rule [#1358](https://github.com/openshift/kubernetes/pull/1358) * UPSTREAM: <carry>: optionally enable retry after until apiserver is ready [#1346](https://github.com/openshift/kubernetes/pull/1346) * UPSTREAM: 110639: endpointslices: node missing on Pod scenario [#1359](https://github.com/openshift/kubernetes/pull/1359) * UPSTREAM: <carry>: Update kubensenter to use exec instead of subprocess [#1350](https://github.com/openshift/kubernetes/pull/1350) * UPSTREAM: 110039: Add readinessProbe to aggregated api service test [#1307](https://github.com/openshift/kubernetes/pull/1307) * [Bug 2118318](https://bugzilla.redhat.com/show_bug.cgi?id=2118318): UPSTREAM: 110939: don't quota events.k8s.io events by default [#1344](https://github.com/openshift/kubernetes/pull/1344) * UPSTREAM: 111789: Update Netpol e2e tests to use framework CreateName… [#1349](https://github.com/openshift/kubernetes/pull/1349) * UPSTREAM: <carry>: Skip session affinity timeout tests [#1339](https://github.com/openshift/kubernetes/pull/1339) * [Bug 2117569](https://bugzilla.redhat.com/show_bug.cgi?id=2117569): UPSTREAM: 110888: feat: fix a bug thaat not all event be ignored by gc controller [#1338](https://github.com/openshift/kubernetes/pull/1338) * Add kubensenter to the openshift RPM [#1327](https://github.com/openshift/kubernetes/pull/1327) * UPSTREAM: 111306: Make scheduling e2e tests run PSa-restricted pods [#1333](https://github.com/openshift/kubernetes/pull/1333) * trt-393: add plugin name to caches not synchronized error [#1330](https://github.com/openshift/kubernetes/pull/1330) * [Bug 2102383](https://bugzilla.redhat.com/show_bug.cgi?id=2102383): UPSTREAM: 89885: Fix panic in openstack.InstanceExistsByProviderID() [#1315](https://github.com/openshift/kubernetes/pull/1315) * [Bug 2088606](https://bugzilla.redhat.com/show_bug.cgi?id=2088606): Overly loose admission check when configuring UpstreamResolvers or ForwardPlugin [#1247](https://github.com/openshift/kubernetes/pull/1247) * [Bug 2081194](https://bugzilla.redhat.com/show_bug.cgi?id=2081194): UPSTREAM: <carry>: update list of deprecated apis [#1091](https://github.com/openshift/kubernetes/pull/1091) * [Bug 2082773](https://bugzilla.redhat.com/show_bug.cgi?id=2082773): Fix resizing of ephemeral volumes [#1296](https://github.com/openshift/kubernetes/pull/1296) * UPSTREAM: <carry>: Remove reserved CPUs from default set [#1295](https://github.com/openshift/kubernetes/pull/1295) * [Bug 2094012](https://bugzilla.redhat.com/show_bug.cgi?id=2094012): UPSTREAM: 110652: fix: --chunk-size with selector returns missing result [#1303](https://github.com/openshift/kubernetes/pull/1303) * [Bug 2063414](https://bugzilla.redhat.com/show_bug.cgi?id=2063414): UPSTREAM: 109441: kubelet: parseResolvConf: Handle "search ." [#1283](https://github.com/openshift/kubernetes/pull/1283) * [Bug 2086519](https://bugzilla.redhat.com/show_bug.cgi?id=2086519): get SCC admission default securityContext.runAsNonRoot to true on positive UIDs [#1290](https://github.com/openshift/kubernetes/pull/1290) * [Bug 2078778](https://bugzilla.redhat.com/show_bug.cgi?id=2078778): UPSTREAM: 110408: apiserver: printers should use int64 [#1288](https://github.com/openshift/kubernetes/pull/1288) * [Bug 2089933](https://bugzilla.redhat.com/show_bug.cgi?id=2089933): Backport 110191 Re-enable Kubelet Pod Readiness Probes on Termination and Pod probes should be handled by pod worker [#1285](https://github.com/openshift/kubernetes/pull/1285) * [Bug 2087685](https://bugzilla.redhat.com/show_bug.cgi?id=2087685): Worker Latency Profiles: Config node object validation for extreme profile transition [#1287](https://github.com/openshift/kubernetes/pull/1287) * [Bug 2065749](https://bugzilla.redhat.com/show_bug.cgi?id=2065749): UPSTREAM: 109103: cpu/memory manager containerMap memory leak [#1229](https://github.com/openshift/kubernetes/pull/1229) * [Bug 2094954](https://bugzilla.redhat.com/show_bug.cgi?id=2094954): UPSTREAM: 110258: Fix pod eviction ip [#1282](https://github.com/openshift/kubernetes/pull/1282) * UPSTREAM: <carry>: provide unique reason for pod probe event during t… [#1281](https://github.com/openshift/kubernetes/pull/1281) * [Bug 2086092](https://bugzilla.redhat.com/show_bug.cgi?id=2086092): UPSTREAM: 108284: fix: exclude non-ready nodes and deleted nodes from azure load balancers [#1261](https://github.com/openshift/kubernetes/pull/1261) * Fixes probe readiness shutdowns [#1269](https://github.com/openshift/kubernetes/pull/1269) * [Bug 2086092](https://bugzilla.redhat.com/show_bug.cgi?id=2086092): update kube to v1.24.0 [#1252](https://github.com/openshift/kubernetes/pull/1252) * [Bug 2086519](https://bugzilla.redhat.com/show_bug.cgi?id=2086519): UPSTREAM: <carry>: e2e-framework: don't autosync PodSecurity labels [#1268](https://github.com/openshift/kubernetes/pull/1268) * [Bug 2062459](https://bugzilla.redhat.com/show_bug.cgi?id=2062459): Identify if there are multiple schedulers running [#1251](https://github.com/openshift/kubernetes/pull/1251) * [Bug 2075621](https://bugzilla.redhat.com/show_bug.cgi?id=2075621): UPSTREAM: 109487: Disable JobTrackingWithFinalizers due to unresolved bug [#1243](https://github.com/openshift/kubernetes/pull/1243) * [Bug 1999325](https://bugzilla.redhat.com/show_bug.cgi?id=1999325): Backport 107821 and 107831 [#1225](https://github.com/openshift/kubernetes/pull/1225) * UPSTREAM: 109283: test/e2e/*: use restricted policy by default, default existing tests to privileged [#1238](https://github.com/openshift/kubernetes/pull/1238) * [Bug 2051985](https://bugzilla.redhat.com/show_bug.cgi?id=2051985): UPSTREAM: <carry>: An APIRequestCount without dots in the name can cause a panic [#1172](https://github.com/openshift/kubernetes/pull/1172) * [Bug 2066865](https://bugzilla.redhat.com/show_bug.cgi?id=2066865): Skip azure topology tests [#1230](https://github.com/openshift/kubernetes/pull/1230) * UPSTREAM: 106454: test/e2e: fix e2e tests for restricted policy [#1227](https://github.com/openshift/kubernetes/pull/1227) * Revert "UPSTREAM: <carry>: Unskip OCP SDN related tests" [#1228](https://github.com/openshift/kubernetes/pull/1228) * bump apiserver-library-go [#1218](https://github.com/openshift/kubernetes/pull/1218) * UPSTREAM: <carry>: update list of deprecated apis [#1204](https://github.com/openshift/kubernetes/pull/1204) * UPSTREAM: 106454: test/e2e: fix e2e tests for restricted policy [#1226](https://github.com/openshift/kubernetes/pull/1226) * [Bug 1957668](https://bugzilla.redhat.com/show_bug.cgi?id=1957668): UPSTREAM: <carry>: use console-public config map for console redirect [#1110](https://github.com/openshift/kubernetes/pull/1110) * UPSTREAM: 106454: test/e2e: fix e2e tests for restricted policy [#1212](https://github.com/openshift/kubernetes/pull/1212) * [Bug 2022507](https://bugzilla.redhat.com/show_bug.cgi?id=2022507): Backport 108366: OutofCpu Fixes [#1199](https://github.com/openshift/kubernetes/pull/1199) * [Bug 1945329](https://bugzilla.redhat.com/show_bug.cgi?id=1945329): enable should drop INVALID conntrack entries test [#897](https://github.com/openshift/kubernetes/pull/897) * [Bug 2063938](https://bugzilla.redhat.com/show_bug.cgi?id=2063938): UPSTREAM: <carry>: use hardcoded rest mapper from library-go [#1215](https://github.com/openshift/kubernetes/pull/1215) * [Bug 2062459](https://bugzilla.redhat.com/show_bug.cgi?id=2062459): Generate event when cache update is failed [#1210](https://github.com/openshift/kubernetes/pull/1210) * UPSTREAM:<carry>:Unskip OCP SDN related tests [#1201](https://github.com/openshift/kubernetes/pull/1201) * [Bug 2034958](https://bugzilla.redhat.com/show_bug.cgi?id=2034958): enable "Conntrack should be able to preserve UDP traffic when initial… [#1197](https://github.com/openshift/kubernetes/pull/1197) * UPSTREAM: 106454: SQUASH: test/e2e: let e2e tests specify pod security admiss… [#1128](https://github.com/openshift/kubernetes/pull/1128) * [Bug 2040715](https://bugzilla.redhat.com/show_bug.cgi?id=2040715): UPSTREAM: 108284: fix: exclude non-ready nodes from azure load balancer [#1190](https://github.com/openshift/kubernetes/pull/1190) * UPSTREAM: <drop>: zero-diff to pick up tags for versions [#1193](https://github.com/openshift/kubernetes/pull/1193) * [Bug 2040715](https://bugzilla.redhat.com/show_bug.cgi?id=2040715): upstream 108149: do not return early in the node informer when there is no change [#1184](https://github.com/openshift/kubernetes/pull/1184) * [Bug 2040533](https://bugzilla.redhat.com/show_bug.cgi?id=2040533): UPSTREAM: <drop>: Ignore container notfound error while getPodstatuses [#1176](https://github.com/openshift/kubernetes/pull/1176) * [Bug 2040533](https://bugzilla.redhat.com/show_bug.cgi?id=2040533): UPSTREAM: 107900: Pods that have terminated before starting should not block startup [#1157](https://github.com/openshift/kubernetes/pull/1157) * UPSTREAM: 107847: service REST: Call Decorator(old) on update path [#1156](https://github.com/openshift/kubernetes/pull/1156) * [Bug 1979671](https://bugzilla.redhat.com/show_bug.cgi?id=1979671): UPSTREAM <carry>: Remove pod warning annotation when workload partitioning is disabled [#977](https://github.com/openshift/kubernetes/pull/977) * [Bug 2044824](https://bugzilla.redhat.com/show_bug.cgi?id=2044824): UPSTREAM: 107786: Ensure the execHostnameTest() compares hostnames [#1153](https://github.com/openshift/kubernetes/pull/1153) * [Bug 2044347](https://bugzilla.redhat.com/show_bug.cgi?id=2044347): bump to k8s 1.23.3 [#1145](https://github.com/openshift/kubernetes/pull/1145) * [Bug 2039539](https://bugzilla.redhat.com/show_bug.cgi?id=2039539): Revert "UPSTREAM: <drop>: revert upstream PR 106306" [#1143](https://github.com/openshift/kubernetes/pull/1143) * [Bug 2041583](https://bugzilla.redhat.com/show_bug.cgi?id=2041583): UPSTREAM: <carry>: set correctly static pods CPUs when workload partitioning is disabled [#1136](https://github.com/openshift/kubernetes/pull/1136) * [Bug 2040533](https://bugzilla.redhat.com/show_bug.cgi?id=2040533): UPSTREAM: 107695: kubelet: fix podstatus not containing pod full name [#1140](https://github.com/openshift/kubernetes/pull/1140) * [Bug 2039539](https://bugzilla.redhat.com/show_bug.cgi?id=2039539): UPSTREAM: <drop>: revert upstream PR 106306 [#1130](https://github.com/openshift/kubernetes/pull/1130) * [Bug 2022824](https://bugzilla.redhat.com/show_bug.cgi?id=2022824): Fix the leak of vSphere client sessions [#1104](https://github.com/openshift/kubernetes/pull/1104) * [Bug 2042169](https://bugzilla.redhat.com/show_bug.cgi?id=2042169): UPSTREAM: <carry>: remove egressnetworkpolicies from gc ignored resources [#1123](https://github.com/openshift/kubernetes/pull/1123) * [Bug 2040793](https://bugzilla.redhat.com/show_bug.cgi?id=2040793): Fix ordering issues with snapshot e2e [#1119](https://github.com/openshift/kubernetes/pull/1119) * [Bug 2038968](https://bugzilla.redhat.com/show_bug.cgi?id=2038968): Restore upstream feature gates [#1112](https://github.com/openshift/kubernetes/pull/1112) * [Bug 2004542](https://bugzilla.redhat.com/show_bug.cgi?id=2004542): UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf [#1099](https://github.com/openshift/kubernetes/pull/1099) * [Bug 2041641](https://bugzilla.redhat.com/show_bug.cgi?id=2041641): Backport k8s.io/utils fix for a memory leak within the inotify utilities [#1122](https://github.com/openshift/kubernetes/pull/1122) * [Bug 2042493](https://bugzilla.redhat.com/show_bug.cgi?id=2042493): UPSTREAM 107564: kube-apiserver integration test: allow IPs with leading zeros on the API [#1124](https://github.com/openshift/kubernetes/pull/1124) * [Bug 2039414](https://bugzilla.redhat.com/show_bug.cgi?id=2039414): UPSTREAM: <carry>: allows for switching KS to talk to Kube API over localhost-squash to other [#1121](https://github.com/openshift/kubernetes/pull/1121) * [Bug 2042493](https://bugzilla.redhat.com/show_bug.cgi?id=2042493): UPSTREAM: <carry>: Fix conformance and serial tests by stopping node cordoning [#1129](https://github.com/openshift/kubernetes/pull/1129) * [Bug 1933144](https://bugzilla.redhat.com/show_bug.cgi?id=1933144): hardens the aggregated API e2e tests in an HA setup [#1114](https://github.com/openshift/kubernetes/pull/1114) * [Bug 2001442](https://bugzilla.redhat.com/show_bug.cgi?id=2001442): empty termination.log file for the kube-apiserver has too permissive mode [#1096](https://github.com/openshift/kubernetes/pull/1096) * [Bug 2034705](https://bugzilla.redhat.com/show_bug.cgi?id=2034705): UPSTREAM 107136: Don't log vSphere configuration data in storage e2e tests [#1098](https://github.com/openshift/kubernetes/pull/1098) * [Bug 2033751](https://bugzilla.redhat.com/show_bug.cgi?id=2033751): fix -rt builds and copy extensions into resulting image [#1106](https://github.com/openshift/kubernetes/pull/1106) * [Bug 2033751](https://bugzilla.redhat.com/show_bug.cgi?id=2033751): Kube 1.23.0 rebase [#1087](https://github.com/openshift/kubernetes/pull/1087) * Switch to go1.17 [#1080](https://github.com/openshift/kubernetes/pull/1080) * [Bug 2021629](https://bugzilla.redhat.com/show_bug.cgi?id=2021629): UPSTREAM: <carry>: api request counts for current hour are incorrect [#1037](https://github.com/openshift/kubernetes/pull/1037) * UPSTREAM: 105910: retry PV create in e2e-test on API quota failure [#1078](https://github.com/openshift/kubernetes/pull/1078) * UPSTREAM: <drop>: revert to go1.16 [#1079](https://github.com/openshift/kubernetes/pull/1079) * Updating openshift-enterprise-hyperkube images to be consistent with ART [#934](https://github.com/openshift/kubernetes/pull/934) * UPSTREAM: <drop>: remove creation of openshift-infra ns and recycler SA [#1039](https://github.com/openshift/kubernetes/pull/1039) * [Bug 2008532](https://bugzilla.redhat.com/show_bug.cgi?id=2008532): Fix subpath sources check [#1065](https://github.com/openshift/kubernetes/pull/1065) * [Bug 2017276](https://bugzilla.redhat.com/show_bug.cgi?id=2017276): UPSTREAM: 105934: Don't guess SELinux support on error [#1052](https://github.com/openshift/kubernetes/pull/1052) * Rebase Automation Script [#1040](https://github.com/openshift/kubernetes/pull/1040) * Updating openshift-enterprise-pod images to be consistent with ART [#933](https://github.com/openshift/kubernetes/pull/933) * UPSTREAM: <carry>: delay queuing deletion for PV to allow nodes some time to unmount [#1062](https://github.com/openshift/kubernetes/pull/1062) * [Bug 1978528](https://bugzilla.redhat.com/show_bug.cgi?id=1978528): UPSTREAM: <carry>: bump cadvisor for 2957, 2999 and 2979 upstream patches [#1049](https://github.com/openshift/kubernetes/pull/1049) * [Bug 2023779](https://bugzilla.redhat.com/show_bug.cgi?id=2023779): Fix patch 104847 [#1059](https://github.com/openshift/kubernetes/pull/1059) * [Bug 2022811](https://bugzilla.redhat.com/show_bug.cgi?id=2022811): UPSTREAM: 106382: defer close the rotated log open [#1051](https://github.com/openshift/kubernetes/pull/1051) * [Bug 2007495](https://bugzilla.redhat.com/show_bug.cgi?id=2007495): UPSTREAM: 105213: remove StartedPodsErrorsTotal metrice message [#988](https://github.com/openshift/kubernetes/pull/988) * [Bug 2021936](https://bugzilla.redhat.com/show_bug.cgi?id=2021936): Read k8s version from hyperkube Dockerfile [#1038](https://github.com/openshift/kubernetes/pull/1038) * [Bug 2002759](https://bugzilla.redhat.com/show_bug.cgi?id=2002759): UPSTREAM: <carry>: verify required http2 cipher suites [#1022](https://github.com/openshift/kubernetes/pull/1022) * UPSTREAM: <carry>: update rebase doc [#1031](https://github.com/openshift/kubernetes/pull/1031) * [Bug 2000216](https://bugzilla.redhat.com/show_bug.cgi?id=2000216): Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs [#1014](https://github.com/openshift/kubernetes/pull/1014) * [Bug 1970331](https://bugzilla.redhat.com/show_bug.cgi?id=1970331): UPSTREAM: <drop>: bump apiserver-library-go [#1017](https://github.com/openshift/kubernetes/pull/1017) * [Bug 1990190](https://bugzilla.redhat.com/show_bug.cgi?id=1990190): Remove Error Message Check Dynamic PV Tests [#1011](https://github.com/openshift/kubernetes/pull/1011) * [Bug 2011513](https://bugzilla.redhat.com/show_bug.cgi?id=2011513): kubelet: do not arbitrarily create a podSyncStatus for finished pods [#1007](https://github.com/openshift/kubernetes/pull/1007) * UPSTREAM: <drop>: bump apiserver-library-go [#1008](https://github.com/openshift/kubernetes/pull/1008) * [Bug 1997478](https://bugzilla.redhat.com/show_bug.cgi?id=1997478): Ensure terminal pods maintain terminal status [#999](https://github.com/openshift/kubernetes/pull/999) * [Bug 2010348](https://bugzilla.redhat.com/show_bug.cgi?id=2010348): UPSTREAM: 105352: revert pie build mode [#993](https://github.com/openshift/kubernetes/pull/993) * UPSTREAM: <carry>: allow SCC to be disabled on a per-namespace basis [#984](https://github.com/openshift/kubernetes/pull/984) * [Bug 2000754](https://bugzilla.redhat.com/show_bug.cgi?id=2000754): UPSTREAM: 104865: e2e iperf2 change threshold to 10MBps = 80 Mbps [#980](https://github.com/openshift/kubernetes/pull/980) * [Bug 1965368](https://bugzilla.redhat.com/show_bug.cgi?id=1965368): UPSTREAM: <drop>: bump(apiserver-library-go) [#971](https://github.com/openshift/kubernetes/pull/971) * Remove Error Message for Unsupported Volume Test [#905](https://github.com/openshift/kubernetes/pull/905) * Add CSI migration feature gates for vSphere and Azure File [#961](https://github.com/openshift/kubernetes/pull/961) * etcd-client starts retrying transient errors from the etcd cluster [#959](https://github.com/openshift/kubernetes/pull/959) * UPSTREAM: <carry>: openshift-hack/images/os/Dockerfile: Add io.openshift.build.versions, etc. [#963](https://github.com/openshift/kubernetes/pull/963) * [Bug 2005182](https://bugzilla.redhat.com/show_bug.cgi?id=2005182): UPSTREAM: <carry>: update list of deprecated apis to be removed [#965](https://github.com/openshift/kubernetes/pull/965) * [Bug 1999133](https://bugzilla.redhat.com/show_bug.cgi?id=1999133): kubelet: Handle UID reuse in pod worker [#938](https://github.com/openshift/kubernetes/pull/938) * UPSTREAM: <carry>: add control plane to allowed roles [#957](https://github.com/openshift/kubernetes/pull/957) * UPSTREAM: <drop>: bump openshift, k8s to 1.22.1 [#950](https://github.com/openshift/kubernetes/pull/950) * [Bug 2003269](https://bugzilla.redhat.com/show_bug.cgi?id=2003269): UPSTREAM: 104817: kubelet: Rejected pods should be filtered from admission [#948](https://github.com/openshift/kubernetes/pull/948) * Bugzilla 2001763: UPSTREAM: <carry>: 104437: run etcd healthcheck in the background and… [#893](https://github.com/openshift/kubernetes/pull/893) * UPSTREAM: 104314: legacy-cloud-providers: aws: Add support for consuming web identity credentials [#927](https://github.com/openshift/kubernetes/pull/927) * [Bug 1996689](https://bugzilla.redhat.com/show_bug.cgi?id=1996689): Tighten up RestrictedEndpointsAdmission [#899](https://github.com/openshift/kubernetes/pull/899) * [Bug 1996779](https://bugzilla.redhat.com/show_bug.cgi?id=1996779): Fix bug with goroutine capturing loop variable [#904](https://github.com/openshift/kubernetes/pull/904) * [Bug 2000451](https://bugzilla.redhat.com/show_bug.cgi?id=2000451): UPSTREAM: <drop>: Disable broken sig-storage test [#925](https://github.com/openshift/kubernetes/pull/925) * [Bug 1994643](https://bugzilla.redhat.com/show_bug.cgi?id=1994643): UPSTREAM: 104630: remove server option startup-send-retry-after-until… [#922](https://github.com/openshift/kubernetes/pull/922) * [Bug 1992016](https://bugzilla.redhat.com/show_bug.cgi?id=1992016): UPSTREAM: <carry>: add OPENSHIFT_MAX_HOUSEKEEPING_INTERVAL_DURATION and OPENSHIFT_EVICTION_MONITORING_PERIOD_DURATION [#909](https://github.com/openshift/kubernetes/pull/909) * [Bug 1994927](https://bugzilla.redhat.com/show_bug.cgi?id=1994927): Revert "Remove Endpoints write access from aggregated edit role" [#908](https://github.com/openshift/kubernetes/pull/908) * [Bug 1997657](https://bugzilla.redhat.com/show_bug.cgi?id=1997657): UPSTREAM: 104577: kubelet: Admission must exclude completed pods and avoid races [#920](https://github.com/openshift/kubernetes/pull/920) * [Bug 1948089](https://bugzilla.redhat.com/show_bug.cgi?id=1948089): openshift-apiserver should not set Available=False APIServicesAvailable on update [#915](https://github.com/openshift/kubernetes/pull/915) * [Bug 1986003](https://bugzilla.redhat.com/show_bug.cgi?id=1986003): Rebase 1.22.1 [#916](https://github.com/openshift/kubernetes/pull/916) * [Bug 1994643](https://bugzilla.redhat.com/show_bug.cgi?id=1994643): UPSTREAM: <carry>: sets X-OpenShift-Internal-If-Not-Ready HTTP Header for GC and Namespace controllers [#907](https://github.com/openshift/kubernetes/pull/907) * [Bug 1994643](https://bugzilla.redhat.com/show_bug.cgi?id=1994643): UPSTREAM: <carry>: send Retry-After when not ready with a caller opt in [#906](https://github.com/openshift/kubernetes/pull/906) * [Bug 1993980](https://bugzilla.redhat.com/show_bug.cgi?id=1993980): UPSTREAM: 104529: [1.22] vendor: bump runc to 1.0.2 [#910](https://github.com/openshift/kubernetes/pull/910) * [Bug 1948089](https://bugzilla.redhat.com/show_bug.cgi?id=1948089): openshift-apiserver should not set Available=False APIServicesAvailable on update [#903](https://github.com/openshift/kubernetes/pull/903) * [Bug 1986307](https://bugzilla.redhat.com/show_bug.cgi?id=1986307): UPSTREAM: <carry>: re-enable networking tests [#885](https://github.com/openshift/kubernetes/pull/885) * [Bug 1995804](https://bugzilla.redhat.com/show_bug.cgi?id=1995804): UPSTREAM: <carry>: rename termination events to use lifecycleSignals [#896](https://github.com/openshift/kubernetes/pull/896) * [Bug 1950993](https://bugzilla.redhat.com/show_bug.cgi?id=1950993): UPSTREAM: <drop>: bump cadvisor for 2868 and 2925 upstream patches [#892](https://github.com/openshift/kubernetes/pull/892) * [Bug 1997465](https://bugzilla.redhat.com/show_bug.cgi?id=1997465): UPSTREAM: 104466: bump k8s.io/util to get fix for LRU cache [#898](https://github.com/openshift/kubernetes/pull/898) * [Bug 1994643](https://bugzilla.redhat.com/show_bug.cgi?id=1994643): UPSTREAM: 104281: send retry-after until the apiserver is ready [#889](https://github.com/openshift/kubernetes/pull/889) * [Bug 1982868](https://bugzilla.redhat.com/show_bug.cgi?id=1982868): UPSTREAM: <carry>: admission/managementcpusoverride: cover the roll-back case [#877](https://github.com/openshift/kubernetes/pull/877) * [Bug 1986306](https://bugzilla.redhat.com/show_bug.cgi?id=1986306): Kubectl client kubectl wait should ignore not found error with --for=delete [#891](https://github.com/openshift/kubernetes/pull/891) * [Bug 1994643](https://bugzilla.redhat.com/show_bug.cgi?id=1994643): UPSTREAM: <carry>: use lifeCycleSignals for isTerminating [#887](https://github.com/openshift/kubernetes/pull/887) * [Bug 1980118](https://bugzilla.redhat.com/show_bug.cgi?id=1980118): UPSTREAM: <carry>: drop the warning to use --keep-annotations [#860](https://github.com/openshift/kubernetes/pull/860) * [Bug 1992900](https://bugzilla.redhat.com/show_bug.cgi?id=1992900): Fix build with multiple GOFLAGS [#886](https://github.com/openshift/kubernetes/pull/886) * [Bug 1986003](https://bugzilla.redhat.com/show_bug.cgi?id=1986003): Bump k8s.io to 1.22.0-rc.0 [#862](https://github.com/openshift/kubernetes/pull/862) * UPSTREAM: <carry>: prevent the kubecontrollermanager service-ca from getting less secure [#853](https://github.com/openshift/kubernetes/pull/853) * [Bug 1981477](https://bugzilla.redhat.com/show_bug.cgi?id=1981477): Do not throw error when we can't get canonical path [#817](https://github.com/openshift/kubernetes/pull/817) * UPSTREAM: <carry>: add a way to inject a vulnerable, legacy service-c… [#852](https://github.com/openshift/kubernetes/pull/852) * produce events for readyz going true [#807](https://github.com/openshift/kubernetes/pull/807) * UPSTREAM: <drop>: remove the openshift authenticator from the apiserver [#822](https://github.com/openshift/kubernetes/pull/822) * UPSTREAM: <drop>: bump(apiserver-library-go) [#846](https://github.com/openshift/kubernetes/pull/846) * UPSTREAM: <carry>: add CSI migration feature gates for GCE PD and Azure Disk [#831](https://github.com/openshift/kubernetes/pull/831) * UPSTREAM: 103385: Fix Multi-AZ test [#837](https://github.com/openshift/kubernetes/pull/837) * [Bug 1977920](https://bugzilla.redhat.com/show_bug.cgi?id=1977920): Ensure scc compatibility with BoundServiceAccountTokenVolume [#841](https://github.com/openshift/kubernetes/pull/841) * UPSTREAM: 103050: Bug 1975325: Fix NodeAuthenticator tests in dual stack [#823](https://github.com/openshift/kubernetes/pull/823) * Updating openshift-enterprise-hyperkube images to be consistent with ART [#814](https://github.com/openshift/kubernetes/pull/814) * [Bug 1976379](https://bugzilla.redhat.com/show_bug.cgi?id=1976379): UPSTREAM: <carry>: Reject the pod creation when we can not decide the cluster type [#832](https://github.com/openshift/kubernetes/pull/832) * Updating openshift-enterprise-pod images to be consistent with ART [#812](https://github.com/openshift/kubernetes/pull/812) * UPSTREAM: <carry>: update rebase doc [#824](https://github.com/openshift/kubernetes/pull/824) * [Bug 1975283](https://bugzilla.redhat.com/show_bug.cgi?id=1975283): update Multi-AZ Cluster Volumes test name [#825](https://github.com/openshift/kubernetes/pull/825) * UPSTREAM: <carry>: update rebase doc [#818](https://github.com/openshift/kubernetes/pull/818) * UPSTREAM: <carry>: crd: add ClusterOperator condition message table column [#810](https://github.com/openshift/kubernetes/pull/810) * [Bug 1971745](https://bugzilla.redhat.com/show_bug.cgi?id=1971745): only chown if non-windows machine with projected volumes [#804](https://github.com/openshift/kubernetes/pull/804) * [Full changelog](https://github.com/openshift/kubernetes/compare/a17bdb3cb039e17a2d1d68c5d4f9662964c4c68e...) ### [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes/tree/) * [OCPBUGS-27821](https://issues.redhat.com/browse/OCPBUGS-27821): [DownstreamMerge] 3-8-24 [#2093](https://github.com/openshift/ovn-kubernetes/pull/2093) * [OCPBUGS-29350](https://issues.redhat.com/browse/OCPBUGS-29350), [OCPBUGS-29389](https://issues.redhat.com/browse/OCPBUGS-29389), [SDN-4542](https://issues.redhat.com/browse/SDN-4542): Downstream Merge 29th Feb 2024 [#2089](https://github.com/openshift/ovn-kubernetes/pull/2089) * [OCPBUGS-17207](https://issues.redhat.com/browse/OCPBUGS-17207), [OCPBUGS-28742](https://issues.redhat.com/browse/OCPBUGS-28742): Downstream Merge 22nd Feb 2024 [#2081](https://github.com/openshift/ovn-kubernetes/pull/2081) * [OCPBUGS-12876](https://issues.redhat.com/browse/OCPBUGS-12876), [OCPBUGS-13665](https://issues.redhat.com/browse/OCPBUGS-13665), [OCPBUGS-23519](https://issues.redhat.com/browse/OCPBUGS-23519), [OCPBUGS-28724](https://issues.redhat.com/browse/OCPBUGS-28724): Downstream Merge 15th Feb 2024 [#2073](https://github.com/openshift/ovn-kubernetes/pull/2073) * [OCPBUGS-27093](https://issues.redhat.com/browse/OCPBUGS-27093): Dockerfile: Bump OVN to ovn-23.09.0-112.el9fdp [#2066](https://github.com/openshift/ovn-kubernetes/pull/2066) * [OCPBUGS-27853](https://issues.redhat.com/browse/OCPBUGS-27853): [DownstreamMerge] 9 Feb 2024 [#2063](https://github.com/openshift/ovn-kubernetes/pull/2063) * [OCPBUGS-20336](https://issues.redhat.com/browse/OCPBUGS-20336), [OCPBUGS-28558](https://issues.redhat.com/browse/OCPBUGS-28558): [DownstreamMerge] 7 Feb 2024 [#2057](https://github.com/openshift/ovn-kubernetes/pull/2057) * [USHIFT-2256](https://issues.redhat.com/browse/USHIFT-2256): updating ovn kubernetes microshift image to golang-1.21 [#2051](https://github.com/openshift/ovn-kubernetes/pull/2051) * [OCPBUGS-20209](https://issues.redhat.com/browse/OCPBUGS-20209), [OCPBUGS-20220](https://issues.redhat.com/browse/OCPBUGS-20220), [OCPBUGS-22923](https://issues.redhat.com/browse/OCPBUGS-22923), [OCPBUGS-24271](https://issues.redhat.com/browse/OCPBUGS-24271), [OCPBUGS-26979](https://issues.redhat.com/browse/OCPBUGS-26979), [OCPBUGS-27215](https://issues.redhat.com/browse/OCPBUGS-27215): Downstream Merge 2nd Feb 2024 [#2048](https://github.com/openshift/ovn-kubernetes/pull/2048) * [OCPBUGS-22221](https://issues.redhat.com/browse/OCPBUGS-22221), [OCPBUGS-24219](https://issues.redhat.com/browse/OCPBUGS-24219), [OCPBUGS-25670](https://issues.redhat.com/browse/OCPBUGS-25670): Downstream Merge 31st Jan 2024 [#2038](https://github.com/openshift/ovn-kubernetes/pull/2038) * [OCPBUGS-27933](https://issues.redhat.com/browse/OCPBUGS-27933): Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.16 [#2027](https://github.com/openshift/ovn-kubernetes/pull/2027) * [OCPBUGS-23430](https://issues.redhat.com/browse/OCPBUGS-23430), [OCPBUGS-24363](https://issues.redhat.com/browse/OCPBUGS-24363), [OCPBUGS-26023](https://issues.redhat.com/browse/OCPBUGS-26023), [OCPBUGS-27211](https://issues.redhat.com/browse/OCPBUGS-27211): [DownstreamMerge] Merge 1-16-24 [#2018](https://github.com/openshift/ovn-kubernetes/pull/2018) * [OCPBUGS-27285](https://issues.redhat.com/browse/OCPBUGS-27285): Dockerfile: Bump OVS to openvswitch3.1-3.1.0-73.el9fdp [#1995](https://github.com/openshift/ovn-kubernetes/pull/1995) * [OCPBUGS-25030](https://issues.redhat.com/browse/OCPBUGS-25030): Updating ovn-kubernetes-microshift-container image to be consistent with ART [#1979](https://github.com/openshift/ovn-kubernetes/pull/1979) * [OCPBUGS-18716](https://issues.redhat.com/browse/OCPBUGS-18716): [DownstreamMerge] 1-5-24 [#2010](https://github.com/openshift/ovn-kubernetes/pull/2010) * [OCPBUGS-24965](https://issues.redhat.com/browse/OCPBUGS-24965): Updating ose-ovn-kubernetes-base-container image to be consistent with ART [#1978](https://github.com/openshift/ovn-kubernetes/pull/1978) * [OCPBUGS-25810](https://issues.redhat.com/browse/OCPBUGS-25810): CARRY: Updates owners and adds Surya [#2000](https://github.com/openshift/ovn-kubernetes/pull/2000) * [OCPBUGS-25032](https://issues.redhat.com/browse/OCPBUGS-25032): Updating ose-ovn-kubernetes-container image to be consistent with ART [#1980](https://github.com/openshift/ovn-kubernetes/pull/1980) * [OCPBUGS-24055](https://issues.redhat.com/browse/OCPBUGS-24055), [OCPBUGS-25394](https://issues.redhat.com/browse/OCPBUGS-25394), [SDN-4194](https://issues.redhat.com/browse/SDN-4194): [DownstreamMerge] 14 Dec 2023 [#1990](https://github.com/openshift/ovn-kubernetes/pull/1990) * [OCPBUGS-24322](https://issues.redhat.com/browse/OCPBUGS-24322), [OCPBUGS-25357](https://issues.redhat.com/browse/OCPBUGS-25357): Dockerfile: Bump OVN to ovn-23.09.0-91.el9fdp [#1986](https://github.com/openshift/ovn-kubernetes/pull/1986) * [OCPBUGS-22847](https://issues.redhat.com/browse/OCPBUGS-22847): Downstream merge 12-7-23 [#1976](https://github.com/openshift/ovn-kubernetes/pull/1976) * [NP-618](https://issues.redhat.com/browse/NP-618), [OCPBUGS-22847](https://issues.redhat.com/browse/OCPBUGS-22847), [SDN-4124](https://issues.redhat.com/browse/SDN-4124), [SDN-4149](https://issues.redhat.com/browse/SDN-4149), [SDN-4150](https://issues.redhat.com/browse/SDN-4150): [DownstreamMerge] 1 Dec 2023 [#1965](https://github.com/openshift/ovn-kubernetes/pull/1965) * [OCPBUGS-24014](https://issues.redhat.com/browse/OCPBUGS-24014): Downstream merge 28th November 2023 [#1962](https://github.com/openshift/ovn-kubernetes/pull/1962) * [OCPBUGS-21773](https://issues.redhat.com/browse/OCPBUGS-21773): Downstream Merge 22nd November 2023 [#1958](https://github.com/openshift/ovn-kubernetes/pull/1958) * [NHE-805](https://issues.redhat.com/browse/NHE-805), [OCPBUGS-19050](https://issues.redhat.com/browse/OCPBUGS-19050), [OCPBUGS-22691](https://issues.redhat.com/browse/OCPBUGS-22691), [OCPBUGS-22767](https://issues.redhat.com/browse/OCPBUGS-22767), [SDN-4173](https://issues.redhat.com/browse/SDN-4173): [DownstreamMerge] 11 November 2023 [#1952](https://github.com/openshift/ovn-kubernetes/pull/1952) * [OCPBUGS-16634](https://issues.redhat.com/browse/OCPBUGS-16634), [OCPBUGS-19635](https://issues.redhat.com/browse/OCPBUGS-19635), [OCPBUGS-20210](https://issues.redhat.com/browse/OCPBUGS-20210): Downstream Merge 24th October 2023 [#1942](https://github.com/openshift/ovn-kubernetes/pull/1942) * [OCPBUGS-11710](https://issues.redhat.com/browse/OCPBUGS-11710): Downstream Merge 18th Oct 2023 [#1939](https://github.com/openshift/ovn-kubernetes/pull/1939) * [OCPBUGS-15538](https://issues.redhat.com/browse/OCPBUGS-15538), [OCPBUGS-19961](https://issues.redhat.com/browse/OCPBUGS-19961): Downstream merge 2023-10-10 [#1935](https://github.com/openshift/ovn-kubernetes/pull/1935) * [OCPBUGS-14787](https://issues.redhat.com/browse/OCPBUGS-14787): Dockerfile: stop installing CNI plugins RPM [#1702](https://github.com/openshift/ovn-kubernetes/pull/1702) * [OCPBUGS-19289](https://issues.redhat.com/browse/OCPBUGS-19289): Updating ose-ovn-kubernetes images to be consistent with ART [#1884](https://github.com/openshift/ovn-kubernetes/pull/1884) * [OCPBUGS-20178](https://issues.redhat.com/browse/OCPBUGS-20178), [OCPBUGS-20238](https://issues.redhat.com/browse/OCPBUGS-20238): Downstream merge 2023-10-09 [#1931](https://github.com/openshift/ovn-kubernetes/pull/1931) * [OCPBUGS-16217](https://issues.redhat.com/browse/OCPBUGS-16217), [OCPBUGS-18071](https://issues.redhat.com/browse/OCPBUGS-18071), [OCPBUGS-18598](https://issues.redhat.com/browse/OCPBUGS-18598), [OCPBUGS-19698](https://issues.redhat.com/browse/OCPBUGS-19698): DownStream Merge 4th October 2023 [#1923](https://github.com/openshift/ovn-kubernetes/pull/1923) * [OCPBUGS-19900](https://issues.redhat.com/browse/OCPBUGS-19900): DownStream Merge: 29th-September-2023 [#1919](https://github.com/openshift/ovn-kubernetes/pull/1919) * [OCPBUGS-18317](https://issues.redhat.com/browse/OCPBUGS-18317): DownStream Merge: 28th-September-2023 [#1917](https://github.com/openshift/ovn-kubernetes/pull/1917) * [OCPBUGS-18162](https://issues.redhat.com/browse/OCPBUGS-18162), [OCPBUGS-19792](https://issues.redhat.com/browse/OCPBUGS-19792), [OCPBUGS-19836](https://issues.redhat.com/browse/OCPBUGS-19836): [DownstreamMerge] 9-27-23 [#1911](https://github.com/openshift/ovn-kubernetes/pull/1911) * [OCPBUGS-17455](https://issues.redhat.com/browse/OCPBUGS-17455), [OCPBUGS-17641](https://issues.redhat.com/browse/OCPBUGS-17641), [OCPBUGS-18352](https://issues.redhat.com/browse/OCPBUGS-18352), [OCPBUGS-18549](https://issues.redhat.com/browse/OCPBUGS-18549), [OCPBUGS-19456](https://issues.redhat.com/browse/OCPBUGS-19456): [DownstreamMerge] 9-26-23 [#1907](https://github.com/openshift/ovn-kubernetes/pull/1907) * [OCPBUGS-19013](https://issues.redhat.com/browse/OCPBUGS-19013): Dockerfile: Copy ovnkube-trace file for RHEL8 platform [#1887](https://github.com/openshift/ovn-kubernetes/pull/1887) * [OCPBUGS-19501](https://issues.redhat.com/browse/OCPBUGS-19501): Add additonal certificate acceptance condition feature in ovnkube-ide… [#1895](https://github.com/openshift/ovn-kubernetes/pull/1895) * Add ovnkube-identity binary to the downstream image [#1897](https://github.com/openshift/ovn-kubernetes/pull/1897) * [OCPBUGS-19288](https://issues.redhat.com/browse/OCPBUGS-19288): Updating ovn-kubernetes-microshift images to be consistent with ART [#1883](https://github.com/openshift/ovn-kubernetes/pull/1883) * [OCPBUGS-19278](https://issues.redhat.com/browse/OCPBUGS-19278): Updating ovn-kubernetes-base images to be consistent with ART [#1882](https://github.com/openshift/ovn-kubernetes/pull/1882) * [OCPBUGS-16641](https://issues.redhat.com/browse/OCPBUGS-16641), [OCPBUGS-18572](https://issues.redhat.com/browse/OCPBUGS-18572), [OCPBUGS-19331](https://issues.redhat.com/browse/OCPBUGS-19331): [DownstreamMerge] 9-18-23 [#1885](https://github.com/openshift/ovn-kubernetes/pull/1885) * [OCPBUGS-19004](https://issues.redhat.com/browse/OCPBUGS-19004), [OCPBUGS-19010](https://issues.redhat.com/browse/OCPBUGS-19010): Dockerfile: bump OVN to ovn23.09-23.09.0-beta.31.el9fdp [#1875](https://github.com/openshift/ovn-kubernetes/pull/1875) * OCPBUGS-18895,OCPBUGS-14549,OCPBUGS-18402 [DownstreamMerge] 9-11-23 [#1868](https://github.com/openshift/ovn-kubernetes/pull/1868) * [OCPBUGS-18467](https://issues.redhat.com/browse/OCPBUGS-18467): Fix OVN SNATing on GR by enabling gateway_mtu on rtoe port of GR [#1854](https://github.com/openshift/ovn-kubernetes/pull/1854) * [OCPBUGS-14709](https://issues.redhat.com/browse/OCPBUGS-14709), [OCPBUGS-16617](https://issues.redhat.com/browse/OCPBUGS-16617), [OCPBUGS-18603](https://issues.redhat.com/browse/OCPBUGS-18603): Bump to OVN 23.09 [#1842](https://github.com/openshift/ovn-kubernetes/pull/1842) * [OCPBUGS-18378](https://issues.redhat.com/browse/OCPBUGS-18378): LGW: Fix the precedence of rules in FORWARD chain [#1851](https://github.com/openshift/ovn-kubernetes/pull/1851) * [OCPBUGS-17773](https://issues.redhat.com/browse/OCPBUGS-17773): Perf increases to pod deletion [#1847](https://github.com/openshift/ovn-kubernetes/pull/1847) * [OCPBUGS-17731](https://issues.redhat.com/browse/OCPBUGS-17731): move clearInitialNodeNetworkUnavailableCondition to clustermanager [#1839](https://github.com/openshift/ovn-kubernetes/pull/1839) * [OCPBUGS-18110](https://issues.redhat.com/browse/OCPBUGS-18110): Fix encap port configuration for remote chassis [#1836](https://github.com/openshift/ovn-kubernetes/pull/1836) * [OCPBUGS-17406](https://issues.redhat.com/browse/OCPBUGS-17406), [OCPBUGS-17844](https://issues.redhat.com/browse/OCPBUGS-17844), [OCPBUGS-17970](https://issues.redhat.com/browse/OCPBUGS-17970): [DownstreamMerge] 24 Aug 2023 [#1833](https://github.com/openshift/ovn-kubernetes/pull/1833) * [OCPBUGS-17867](https://issues.redhat.com/browse/OCPBUGS-17867): CARRY: Removes restriction for ip scope universe on node ips [#1822](https://github.com/openshift/ovn-kubernetes/pull/1822) * 8-16-23 [#1820](https://github.com/openshift/ovn-kubernetes/pull/1820) * [OCPBUGS-17666](https://issues.redhat.com/browse/OCPBUGS-17666): Downstream Merge august 15th 2023 [#1817](https://github.com/openshift/ovn-kubernetes/pull/1817) * Downstream Merge 2023-8-10 [#1813](https://github.com/openshift/ovn-kubernetes/pull/1813) * [OCPBUGS-17147](https://issues.redhat.com/browse/OCPBUGS-17147): [DownstreamMerge] 8 Aug 2023 [#1803](https://github.com/openshift/ovn-kubernetes/pull/1803) * Downstream Merge 2023-08-03 [#1798](https://github.com/openshift/ovn-kubernetes/pull/1798) * 8-1-23 [#1795](https://github.com/openshift/ovn-kubernetes/pull/1795) * [OCPBUGS-16767](https://issues.redhat.com/browse/OCPBUGS-16767), [SDN-3507](https://issues.redhat.com/browse/SDN-3507), [SDN-3733](https://issues.redhat.com/browse/SDN-3733): [DownstreamMerge] 7-27-23 [#1789](https://github.com/openshift/ovn-kubernetes/pull/1789) * [OCPBUGS-15811](https://issues.redhat.com/browse/OCPBUGS-15811): SDN-3733: Downstream Merge: 25th July 2023 [#1784](https://github.com/openshift/ovn-kubernetes/pull/1784) * [OCPBUGS-10650](https://issues.redhat.com/browse/OCPBUGS-10650), [OCPBUGS-12747](https://issues.redhat.com/browse/OCPBUGS-12747), [OCPBUGS-16413](https://issues.redhat.com/browse/OCPBUGS-16413), [SDN-3732](https://issues.redhat.com/browse/SDN-3732), [SDN-3733](https://issues.redhat.com/browse/SDN-3733): [DownstreamMerge] 7-19-23 [#1750](https://github.com/openshift/ovn-kubernetes/pull/1750) * Dockerfile: build both RHEL8 and RHEL9 shims [#1760](https://github.com/openshift/ovn-kubernetes/pull/1760) * [SDN-3733](https://issues.redhat.com/browse/SDN-3733): [DownstreamMerge] 7-13-23 [#1757](https://github.com/openshift/ovn-kubernetes/pull/1757) * 11 jul 23 [#1752](https://github.com/openshift/ovn-kubernetes/pull/1752) * 07 jul 23 [#1747](https://github.com/openshift/ovn-kubernetes/pull/1747) * [SDN-3993](https://issues.redhat.com/browse/SDN-3993): [DownstreamMerge] 06 jul 23 [#1742](https://github.com/openshift/ovn-kubernetes/pull/1742) * [OCPBUGS-14632](https://issues.redhat.com/browse/OCPBUGS-14632): [DownstreamMerge] 30 jun 23 [#1729](https://github.com/openshift/ovn-kubernetes/pull/1729) * [OCPBUGS-15127](https://issues.redhat.com/browse/OCPBUGS-15127): Dockerfile: bump to ovn 23.03.0-69 (for LB templates) and ovs 3.1.0-32 (upgrade perf) [#1710](https://github.com/openshift/ovn-kubernetes/pull/1710) * [OCPBUGS-15523](https://issues.redhat.com/browse/OCPBUGS-15523): [DownstreamMerge] 6-27-23 [#1726](https://github.com/openshift/ovn-kubernetes/pull/1726) * [OCPBUGS-15227](https://issues.redhat.com/browse/OCPBUGS-15227): [DownstreamMerge] 6-21-23 [#1718](https://github.com/openshift/ovn-kubernetes/pull/1718) * [OCPBUGS-15226](https://issues.redhat.com/browse/OCPBUGS-15226): EgressIP: do not patch the status if the object no longer exists [#1717](https://github.com/openshift/ovn-kubernetes/pull/1717) * 6-18-2023 [#1714](https://github.com/openshift/ovn-kubernetes/pull/1714) * [OCPBUGS-14769](https://issues.redhat.com/browse/OCPBUGS-14769), [SDN-3885](https://issues.redhat.com/browse/SDN-3885): Downstream Merge 13th June 2023 [#1707](https://github.com/openshift/ovn-kubernetes/pull/1707) * [OCPBUGS-10592](https://issues.redhat.com/browse/OCPBUGS-10592), [OCPBUGS-10841](https://issues.redhat.com/browse/OCPBUGS-10841), [OCPBUGS-11180](https://issues.redhat.com/browse/OCPBUGS-11180), [OCPBUGS-12747](https://issues.redhat.com/browse/OCPBUGS-12747), [OCPBUGS-1715](https://issues.redhat.com/browse/OCPBUGS-1715), [OCPBUGS-4370](https://issues.redhat.com/browse/OCPBUGS-4370), [OCPBUGS-4485](https://issues.redhat.com/browse/OCPBUGS-4485), [SDN-3733](https://issues.redhat.com/browse/SDN-3733), [SDN-3838](https://issues.redhat.com/browse/SDN-3838), [SDN-3840](https://issues.redhat.com/browse/SDN-3840): Downstream Merge 6th June 2023 [#1697](https://github.com/openshift/ovn-kubernetes/pull/1697) * [OCPBUGS-12352](https://issues.redhat.com/browse/OCPBUGS-12352): Updating ovn-kubernetes-base images to be consistent with ART [#1700](https://github.com/openshift/ovn-kubernetes/pull/1700) * [OCPBUGS-14636](https://issues.redhat.com/browse/OCPBUGS-14636): Fix Downstream Unit Tests [#1696](https://github.com/openshift/ovn-kubernetes/pull/1696) * [OCPBUGS-12800](https://issues.redhat.com/browse/OCPBUGS-12800), [OCPBUGS-13863](https://issues.redhat.com/browse/OCPBUGS-13863), [OCPBUGS-14286](https://issues.redhat.com/browse/OCPBUGS-14286), [OCPBUGS-14449](https://issues.redhat.com/browse/OCPBUGS-14449), [OCPBUGS-4485](https://issues.redhat.com/browse/OCPBUGS-4485), [SDN-3555](https://issues.redhat.com/browse/SDN-3555), [SDN-3790](https://issues.redhat.com/browse/SDN-3790): Downstream Merge 1st June [#1692](https://github.com/openshift/ovn-kubernetes/pull/1692) * [OCPBUGS-9825](https://issues.redhat.com/browse/OCPBUGS-9825): LoadBalancer Templates Merge Downstream: 25th May 2023 [#1683](https://github.com/openshift/ovn-kubernetes/pull/1683) * [OCPBUGS-6013](https://issues.redhat.com/browse/OCPBUGS-6013): Call SyncEndpoints from AddService [#1671](https://github.com/openshift/ovn-kubernetes/pull/1671) * [OCPBUGS-13716](https://issues.redhat.com/browse/OCPBUGS-13716): Use ovsver and ovnver to infer the short version numbers for ovs and ovn [#1664](https://github.com/openshift/ovn-kubernetes/pull/1664) * [OCPBUGS-12971](https://issues.redhat.com/browse/OCPBUGS-12971): Fix bug that resulted in routes not be restored to a new vnic [#1665](https://github.com/openshift/ovn-kubernetes/pull/1665) * [OCPBUGS-11567](https://issues.redhat.com/browse/OCPBUGS-11567): Check the status of a pod before trying to get its ip [#1663](https://github.com/openshift/ovn-kubernetes/pull/1663) * [OCPBUGS-11716](https://issues.redhat.com/browse/OCPBUGS-11716): [release-4.14] Use loadbalancer.Name as client index [#1652](https://github.com/openshift/ovn-kubernetes/pull/1652) * [OCPBUGS-11534](https://issues.redhat.com/browse/OCPBUGS-11534): Stack migration [#1643](https://github.com/openshift/ovn-kubernetes/pull/1643) * Remove no-longer-used rhel9-specific dockerfiles [#1635](https://github.com/openshift/ovn-kubernetes/pull/1635) * [OCPBUGS-283](https://issues.redhat.com/browse/OCPBUGS-283), [OCPBUGS-3176](https://issues.redhat.com/browse/OCPBUGS-3176): Downstream merge 3rd April 2023 [#1626](https://github.com/openshift/ovn-kubernetes/pull/1626) * Updating ovn-kubernetes-microshift images to be consistent with ART [#1620](https://github.com/openshift/ovn-kubernetes/pull/1620) * [OCPBUGS-6947](https://issues.redhat.com/browse/OCPBUGS-6947): CARRY: use "prefer local" for annotated services [#1622](https://github.com/openshift/ovn-kubernetes/pull/1622) * [OCPBUGS-10839](https://issues.redhat.com/browse/OCPBUGS-10839), [OCPBUGS-10962](https://issues.redhat.com/browse/OCPBUGS-10962): [DownstreamMerge] 28 March 2023 [#1611](https://github.com/openshift/ovn-kubernetes/pull/1611) * [OCPBUGS-10485](https://issues.redhat.com/browse/OCPBUGS-10485): Bump OVS to 3.1.0-10 [#1613](https://github.com/openshift/ovn-kubernetes/pull/1613) * node: small downstream CARRY patch cleanup [#1549](https://github.com/openshift/ovn-kubernetes/pull/1549) * [OCPBUGS-10889](https://issues.redhat.com/browse/OCPBUGS-10889), [OCPBUGS-8473](https://issues.redhat.com/browse/OCPBUGS-8473): Downstream Merge [27-mar-2023] [#1608](https://github.com/openshift/ovn-kubernetes/pull/1608) * [OCPBUGS-7932](https://issues.redhat.com/browse/OCPBUGS-7932), [OCPBUGS-7988](https://issues.redhat.com/browse/OCPBUGS-7988), [OCPBUGS-8080](https://issues.redhat.com/browse/OCPBUGS-8080), [OCPBUGS-8278](https://issues.redhat.com/browse/OCPBUGS-8278), [OCPBUGS-8280](https://issues.redhat.com/browse/OCPBUGS-8280), [OCPBUGS-9990](https://issues.redhat.com/browse/OCPBUGS-9990): Downstream Merge [10-mar-2023] [#1574](https://github.com/openshift/ovn-kubernetes/pull/1574) * Dockerfiles: copy RHEL-9 bits over top of unused RHEL8 bits [#1553](https://github.com/openshift/ovn-kubernetes/pull/1553) * [OCPBUGS-10395](https://issues.redhat.com/browse/OCPBUGS-10395): Bump OVN to disable CT flush [#1590](https://github.com/openshift/ovn-kubernetes/pull/1590) * Updating ovn-kubernetes-microshift images to be consistent with ART [#1576](https://github.com/openshift/ovn-kubernetes/pull/1576) * Updating ose-ovn-kubernetes images to be consistent with ART [#1578](https://github.com/openshift/ovn-kubernetes/pull/1578) * Updating ovn-kubernetes-base images to be consistent with ART [#1575](https://github.com/openshift/ovn-kubernetes/pull/1575) * [OCPBUGS-8222](https://issues.redhat.com/browse/OCPBUGS-8222), [OCPBUGS-8397](https://issues.redhat.com/browse/OCPBUGS-8397), [OCPBUGS-8464](https://issues.redhat.com/browse/OCPBUGS-8464): [DownstreamMerge] 7 Mar 2023 [#1556](https://github.com/openshift/ovn-kubernetes/pull/1556) * [OCPBUGS-7952](https://issues.redhat.com/browse/OCPBUGS-7952): Dockerfile: bump to ovn23.03-23.03.0-4.el9fdp for RHEL9 [#1554](https://github.com/openshift/ovn-kubernetes/pull/1554) * [OCPBUGS-5889](https://issues.redhat.com/browse/OCPBUGS-5889): [DownstreamMerge] 2023-03-03 [#1552](https://github.com/openshift/ovn-kubernetes/pull/1552) * Removal of small code delta from upstream [#1548](https://github.com/openshift/ovn-kubernetes/pull/1548) * rhel9: bump to ovn23.03-23.03.0-preview.4 [#1550](https://github.com/openshift/ovn-kubernetes/pull/1550) * Downstream Merge [March 2nd 2023] [#1551](https://github.com/openshift/ovn-kubernetes/pull/1551) * 2-28-23 [#1546](https://github.com/openshift/ovn-kubernetes/pull/1546) * OCPBUGS-2663, Bug 2091780, OCPBUGS-6739: Downstream merge 2023-02-20 [#1533](https://github.com/openshift/ovn-kubernetes/pull/1533) * rhel9: bump to openvswitch3.1-3.1.0-2.el9fdp [#1544](https://github.com/openshift/ovn-kubernetes/pull/1544) * [OCPBUGS-7296](https://issues.redhat.com/browse/OCPBUGS-7296): Remove ICNIv1 from ovn-kubernetes [#1531](https://github.com/openshift/ovn-kubernetes/pull/1531) * Dockerfiles: switch to dnf [#1539](https://github.com/openshift/ovn-kubernetes/pull/1539) * iptables package is missing in microshift image [#1530](https://github.com/openshift/ovn-kubernetes/pull/1530) * Updating ovn-kubernetes-microshift images to be consistent with ART [#1443](https://github.com/openshift/ovn-kubernetes/pull/1443) * rhel9: no longer need to use iptables wrappers [#1526](https://github.com/openshift/ovn-kubernetes/pull/1526) * cleanup: drop redundant selinux-policy install in onvkube dockerfiles [#1525](https://github.com/openshift/ovn-kubernetes/pull/1525) * iptables: use container iptables, not the host's [#1481](https://github.com/openshift/ovn-kubernetes/pull/1481) * rhel9: oc RPM does the kubectl symlink [#1523](https://github.com/openshift/ovn-kubernetes/pull/1523) * rhel9: no longer need python3-pyOpenSSL [#1519](https://github.com/openshift/ovn-kubernetes/pull/1519) * rhel9: remove stray `oc` install [#1518](https://github.com/openshift/ovn-kubernetes/pull/1518) * Add RHEL9 image Dockerfiles [#1495](https://github.com/openshift/ovn-kubernetes/pull/1495) * Downstream merge 2023-02-07 [#1510](https://github.com/openshift/ovn-kubernetes/pull/1510) * [OCPBUGS-6953](https://issues.redhat.com/browse/OCPBUGS-6953), [OCPBUGS-6955](https://issues.redhat.com/browse/OCPBUGS-6955): [Downstream Merge 6th Feb 2023] [#1509](https://github.com/openshift/ovn-kubernetes/pull/1509) * [OCPBUGS-4909](https://issues.redhat.com/browse/OCPBUGS-4909): Dockerfile: bump OVN to 22.12.0-18 [#1487](https://github.com/openshift/ovn-kubernetes/pull/1487) * Bug 2078222, OCPBUGS-4119, OCPBUGS-5930, OCPBUGS-4425: [DownstreamMerge] 1-31-23 [#1496](https://github.com/openshift/ovn-kubernetes/pull/1496) * Bug 2047299, OCPBUGS-2337: [DownstreamMerge] 13 Jan 2023 [#1474](https://github.com/openshift/ovn-kubernetes/pull/1474) * [Bug 2041746](https://bugzilla.redhat.com/show_bug.cgi?id=2041746): Bump OVN to 22.12.0-4 [#1468](https://github.com/openshift/ovn-kubernetes/pull/1468) * [Bug 2075548](https://bugzilla.redhat.com/show_bug.cgi?id=2075548): [DownstreamMerge] 09 Jan 2023 [#1466](https://github.com/openshift/ovn-kubernetes/pull/1466) * 15 Dec 2022 [#1454](https://github.com/openshift/ovn-kubernetes/pull/1454) * Updating ose-ovn-kubernetes images to be consistent with ART [#1430](https://github.com/openshift/ovn-kubernetes/pull/1430) * [OCPBUGS-4825](https://issues.redhat.com/browse/OCPBUGS-4825): [DownstreamMerge] 12-14-22 [#1449](https://github.com/openshift/ovn-kubernetes/pull/1449) * [OCPBUGS-4659](https://issues.redhat.com/browse/OCPBUGS-4659): [DownstreamMerge] - 12-12-22 [#1437](https://github.com/openshift/ovn-kubernetes/pull/1437) * Updating ovn-kubernetes-base images to be consistent with ART [#1431](https://github.com/openshift/ovn-kubernetes/pull/1431) * Fix product build issue with more straight forward bash [#1432](https://github.com/openshift/ovn-kubernetes/pull/1432) * [OCPBUGS-4502](https://issues.redhat.com/browse/OCPBUGS-4502): Downstream Merge 7th-December-2022 [Support service session affinity timeout] [#1418](https://github.com/openshift/ovn-kubernetes/pull/1418) * [OCBUGS-4502](https://issues.redhat.com/browse/OCBUGS-4502): Dockerfile: bump OVN to 22.09.0-25 [#1424](https://github.com/openshift/ovn-kubernetes/pull/1424) * Update base image of Dockerfile [#1239](https://github.com/openshift/ovn-kubernetes/pull/1239) * [OCPBUGS-3739](https://issues.redhat.com/browse/OCPBUGS-3739): [DownstreamMerge] 12-02-22 [#1410](https://github.com/openshift/ovn-kubernetes/pull/1410) * [OCPBUGS-2319](https://issues.redhat.com/browse/OCPBUGS-2319): [DownstreamMerge] 11-30-22 [#1405](https://github.com/openshift/ovn-kubernetes/pull/1405) * [OCPBUGS-799](https://issues.redhat.com/browse/OCPBUGS-799): Bump OVN to 22.09.0-22 [#1403](https://github.com/openshift/ovn-kubernetes/pull/1403) * Bug OCPBUGS-1352: [DownstreamMerge] 11-18-22 [#1400](https://github.com/openshift/ovn-kubernetes/pull/1400) * [Bug 2092567](https://bugzilla.redhat.com/show_bug.cgi?id=2092567): [Downstream Merge] 16/11/2022 [#1381](https://github.com/openshift/ovn-kubernetes/pull/1381) * [OCPBUGS-3797](https://issues.redhat.com/browse/OCPBUGS-3797): [4.13] Dockerfile: bump OVS to 2.17.0-62.el8fdp [#1362](https://github.com/openshift/ovn-kubernetes/pull/1362) * [OCPBUGS-3292](https://issues.redhat.com/browse/OCPBUGS-3292): downstream windows fixes [#1377](https://github.com/openshift/ovn-kubernetes/pull/1377) * Update images to be consistent with ART [#1371](https://github.com/openshift/ovn-kubernetes/pull/1371) * Downstream merge 11-08-2022 [#1364](https://github.com/openshift/ovn-kubernetes/pull/1364) * EIP: remove downstream's duplicate node delete test [#1358](https://github.com/openshift/ovn-kubernetes/pull/1358) * [SDN-3589](https://issues.redhat.com/browse/SDN-3589): downstream merge 11-02-2022 [#1355](https://github.com/openshift/ovn-kubernetes/pull/1355) * [OCPBUGS-2770](https://issues.redhat.com/browse/OCPBUGS-2770): Allow empty nexthop in L3GatewayConfig node annotation [#1337](https://github.com/openshift/ovn-kubernetes/pull/1337) * [OCPBUGS-2569](https://issues.redhat.com/browse/OCPBUGS-2569): Fix netpol races [#1323](https://github.com/openshift/ovn-kubernetes/pull/1323) * [OCPBUGS-1427](https://issues.redhat.com/browse/OCPBUGS-1427): Ignore non-ready endpoints when processing endpointslices [#1330](https://github.com/openshift/ovn-kubernetes/pull/1330) * [OCPBUGS-2826](https://issues.redhat.com/browse/OCPBUGS-2826): ovnkube-trace: Fix ofproto/trace for IPv6 [#1338](https://github.com/openshift/ovn-kubernetes/pull/1338) * [OCPBUGS-1520](https://issues.redhat.com/browse/OCPBUGS-1520): Fixes SNAT-ing Logic for EgressIPs [#1331](https://github.com/openshift/ovn-kubernetes/pull/1331) * [OCPBUGS-1520](https://issues.redhat.com/browse/OCPBUGS-1520): Prioritize adding events to handlers for shared resources [#1333](https://github.com/openshift/ovn-kubernetes/pull/1333) * [OCPBUGS-1643](https://issues.redhat.com/browse/OCPBUGS-1643): Add logging verbosity to configuring OVN logs [#1324](https://github.com/openshift/ovn-kubernetes/pull/1324) * [OCPBUGS-2175](https://issues.redhat.com/browse/OCPBUGS-2175): Allocate Hybrid Overlay IP on node updates too [#1319](https://github.com/openshift/ovn-kubernetes/pull/1319) * [OCPBUGS-2004](https://issues.redhat.com/browse/OCPBUGS-2004): egress IP: fix log when gRPC connection fails [#1304](https://github.com/openshift/ovn-kubernetes/pull/1304) * [OCPBUGS-2176](https://issues.redhat.com/browse/OCPBUGS-2176): add endpointSlice informer in master process [#1302](https://github.com/openshift/ovn-kubernetes/pull/1302) * [OCPBUGS-2085](https://issues.redhat.com/browse/OCPBUGS-2085): CARRY: Dockerfile.base: bump to openvswitch2.17.0-37.4.el8fdp [#1298](https://github.com/openshift/ovn-kubernetes/pull/1298) * [OCPBUGS-1705](https://issues.redhat.com/browse/OCPBUGS-1705): Don't use ACL names ever! [#1300](https://github.com/openshift/ovn-kubernetes/pull/1300) * Dockerfile: bump to ovn22.09-22.09.0-5.el8fdp [#1284](https://github.com/openshift/ovn-kubernetes/pull/1284) * 9-23-22 b - dualstack fixed [#1289](https://github.com/openshift/ovn-kubernetes/pull/1289) * [OCPBUGS-1705](https://issues.redhat.com/browse/OCPBUGS-1705): Trim ACL names according to RFC1123 [#1281](https://github.com/openshift/ovn-kubernetes/pull/1281) * [OCPBUGS-1553](https://issues.redhat.com/browse/OCPBUGS-1553): Dockerfile: bump to openvswitch2.17.0-37.4.el8fdp [#1273](https://github.com/openshift/ovn-kubernetes/pull/1273) * Use iptables-restore to add MCS/metadata blocking in the pod [#1262](https://github.com/openshift/ovn-kubernetes/pull/1262) * 9-12-22 merge [#1267](https://github.com/openshift/ovn-kubernetes/pull/1267) * 9-7-22 merge [#1264](https://github.com/openshift/ovn-kubernetes/pull/1264) * 9-2-22 merge [#1263](https://github.com/openshift/ovn-kubernetes/pull/1263) * [OCPBUGS-165](https://issues.redhat.com/browse/OCPBUGS-165): [DownstreamMerge] 8-29-2022 merge [#1255](https://github.com/openshift/ovn-kubernetes/pull/1255) * 8-25-2022 [#1253](https://github.com/openshift/ovn-kubernetes/pull/1253) * revert endpoints [#1248](https://github.com/openshift/ovn-kubernetes/pull/1248) * 8-8-2022 [#1237](https://github.com/openshift/ovn-kubernetes/pull/1237) * Fix ovn version in Dockerfile.base [#1236](https://github.com/openshift/ovn-kubernetes/pull/1236) * Introduce ovn-kubernetes-{base|singlenode} images [#1213](https://github.com/openshift/ovn-kubernetes/pull/1213) * [Bug 2109945](https://bugzilla.redhat.com/show_bug.cgi?id=2109945): [Downstream Merge: 04-08-2022] [#1231](https://github.com/openshift/ovn-kubernetes/pull/1231) * [Bug 2111534](https://bugzilla.redhat.com/show_bug.cgi?id=2111534): Downstream Merge: 27-07-2022 [#1214](https://github.com/openshift/ovn-kubernetes/pull/1214) * Updating ose-ovn-kubernetes images to be consistent with ART [#1174](https://github.com/openshift/ovn-kubernetes/pull/1174) * [Bug 2111733](https://bugzilla.redhat.com/show_bug.cgi?id=2111733): Bump OVN to 22.06.0-27 [#1222](https://github.com/openshift/ovn-kubernetes/pull/1222) * [OCPBUGSM-45393](https://issues.redhat.com/browse/OCPBUGSM-45393): Bug 2078691: [Downstream Merge] 22-07-2022 [#1210](https://github.com/openshift/ovn-kubernetes/pull/1210) * 4.12 initial merge from upstream: 7-18-22 [#1205](https://github.com/openshift/ovn-kubernetes/pull/1205) * [Bug 2106862](https://bugzilla.redhat.com/show_bug.cgi?id=2106862): Append the SNAT rule in management chain [#1199](https://github.com/openshift/ovn-kubernetes/pull/1199) * [Bug 2095444](https://bugzilla.redhat.com/show_bug.cgi?id=2095444): EGW: Clean Stale Conntrack Entries [#1189](https://github.com/openshift/ovn-kubernetes/pull/1189) * [Bug 2106298](https://bugzilla.redhat.com/show_bug.cgi?id=2106298): populate sock address for ovndb connection in unix mode [#1188](https://github.com/openshift/ovn-kubernetes/pull/1188) * [Bug 2100507](https://bugzilla.redhat.com/show_bug.cgi?id=2100507): Remove redundant log lines in obj_retry.go [#1162](https://github.com/openshift/ovn-kubernetes/pull/1162) * [Bug 2097243](https://bugzilla.redhat.com/show_bug.cgi?id=2097243): Fix egressips for pods recreated with same name [#1169](https://github.com/openshift/ovn-kubernetes/pull/1169) * [Bug 2097221](https://bugzilla.redhat.com/show_bug.cgi?id=2097221): Dockerfile: bump to ovn22.06-22.06.0-7.el8fdp [#1170](https://github.com/openshift/ovn-kubernetes/pull/1170) * [Bug 2091238](https://bugzilla.redhat.com/show_bug.cgi?id=2091238): Fix Panic in Network Policy deletion [#1166](https://github.com/openshift/ovn-kubernetes/pull/1166) * [Bug 2100220](https://bugzilla.redhat.com/show_bug.cgi?id=2100220): Fix completed pods releasing IP address on update [#1158](https://github.com/openshift/ovn-kubernetes/pull/1158) * [Bug 2089807](https://bugzilla.redhat.com/show_bug.cgi?id=2089807): Release Leader election lock on errors [#1167](https://github.com/openshift/ovn-kubernetes/pull/1167) * [Bug 2100249](https://bugzilla.redhat.com/show_bug.cgi?id=2100249): Revert "Bug 2082599: add upper bound to number of failed attempts" [#1161](https://github.com/openshift/ovn-kubernetes/pull/1161) * [Bug 2085089](https://bugzilla.redhat.com/show_bug.cgi?id=2085089): Add support for enabling UDP packet aggregation on veth interfaces [#1129](https://github.com/openshift/ovn-kubernetes/pull/1129) * [Bug 2099755](https://bugzilla.redhat.com/show_bug.cgi?id=2099755): Add new EgressIP config option "egressip-reachability-total-timeout" [#1156](https://github.com/openshift/ovn-kubernetes/pull/1156) * [Bug 2073378](https://bugzilla.redhat.com/show_bug.cgi?id=2073378): Add node name into egress ip status for the removal [#1114](https://github.com/openshift/ovn-kubernetes/pull/1114) * [Bug 2079012](https://bugzilla.redhat.com/show_bug.cgi?id=2079012): Fix egressIP object deletion if the node is deleted first [#1143](https://github.com/openshift/ovn-kubernetes/pull/1143) * [Bug 2089392](https://bugzilla.redhat.com/show_bug.cgi?id=2089392): Update logging for specific policy when creating it [#1145](https://github.com/openshift/ovn-kubernetes/pull/1145) * [Bug 2082599](https://bugzilla.redhat.com/show_bug.cgi?id=2082599): add upper bound to number of failed attempts [#1147](https://github.com/openshift/ovn-kubernetes/pull/1147) * [Bug 2094088](https://bugzilla.redhat.com/show_bug.cgi?id=2094088): Fixes Updating non-default columns as well as libovsdb fixes for empty values [#1146](https://github.com/openshift/ovn-kubernetes/pull/1146) * [release 4.11] Bug 2092579: pods: deleteLogicalPort should not fail if port is already deleted [#1123](https://github.com/openshift/ovn-kubernetes/pull/1123) * [Bug 2092889](https://bugzilla.redhat.com/show_bug.cgi?id=2092889): update all egress ACLs' direction to "from-lport" [#1128](https://github.com/openshift/ovn-kubernetes/pull/1128) * [Bug 2089716](https://bugzilla.redhat.com/show_bug.cgi?id=2089716): Downstream fix for OVN-Kube node cardinality [#1135](https://github.com/openshift/ovn-kubernetes/pull/1135) * [Bug 2095113](https://bugzilla.redhat.com/show_bug.cgi?id=2095113): Dockerfile: bump to openvswitch2.17-2.17.0-22.el8fdp [#1117](https://github.com/openshift/ovn-kubernetes/pull/1117) * [Bug 2094039](https://bugzilla.redhat.com/show_bug.cgi?id=2094039): egressIP: node retrieval failure is not respected, causes panic [#1130](https://github.com/openshift/ovn-kubernetes/pull/1130) * [Bug 2093396](https://bugzilla.redhat.com/show_bug.cgi?id=2093396): Remove node-tainting for too-small MTU [#1127](https://github.com/openshift/ovn-kubernetes/pull/1127) * [Bug 2091634](https://bugzilla.redhat.com/show_bug.cgi?id=2091634): Use ovs-appctl dpctl/* instead of ovs-dpctl [#1118](https://github.com/openshift/ovn-kubernetes/pull/1118) * [Bug 2091990](https://bugzilla.redhat.com/show_bug.cgi?id=2091990): fix lflow-cache-limit-kb ovs external-id [#1116](https://github.com/openshift/ovn-kubernetes/pull/1116) * [Bug 2070674](https://bugzilla.redhat.com/show_bug.cgi?id=2070674): improve performance of service sync [#1110](https://github.com/openshift/ovn-kubernetes/pull/1110) * [Bug 2092473](https://bugzilla.redhat.com/show_bug.cgi?id=2092473): libovsdb perf backports [#1119](https://github.com/openshift/ovn-kubernetes/pull/1119) * [Bug 2089930](https://bugzilla.redhat.com/show_bug.cgi?id=2089930): Dockerfile: bump OVN to ovn22.06 [#1102](https://github.com/openshift/ovn-kubernetes/pull/1102) * [Bug 2090843](https://bugzilla.redhat.com/show_bug.cgi?id=2090843): addLogicalPort() optimization cherry-picks [#1109](https://github.com/openshift/ovn-kubernetes/pull/1109) * [Bug 2090537](https://bugzilla.redhat.com/show_bug.cgi?id=2090537): OVNDBManager: Retry migrations [#1108](https://github.com/openshift/ovn-kubernetes/pull/1108) * [Bug 2081069](https://bugzilla.redhat.com/show_bug.cgi?id=2081069): Bumps OVN to 22.03.0-37.el8fdp [#1100](https://github.com/openshift/ovn-kubernetes/pull/1100) * [Bug 2086851](https://bugzilla.redhat.com/show_bug.cgi?id=2086851): enable `exportloopref` linter and fix violations [#1092](https://github.com/openshift/ovn-kubernetes/pull/1092) * [Bug 2084249](https://bugzilla.redhat.com/show_bug.cgi?id=2084249): [DownstreamMerge] 5-12-22 [#1090](https://github.com/openshift/ovn-kubernetes/pull/1090) * [Bug 2077357](https://bugzilla.redhat.com/show_bug.cgi?id=2077357): Bump OVN to ovn22.03-22.03.0-24 [#1052](https://github.com/openshift/ovn-kubernetes/pull/1052) * 5-4-22 [#1081](https://github.com/openshift/ovn-kubernetes/pull/1081) * [Bug 2070929](https://bugzilla.redhat.com/show_bug.cgi?id=2070929): Downstream Merge: 04-05-2022 [#1078](https://github.com/openshift/ovn-kubernetes/pull/1078) * [Bug 2079439](https://bugzilla.redhat.com/show_bug.cgi?id=2079439): [DownstreamMerge] 4-29-22 [#1064](https://github.com/openshift/ovn-kubernetes/pull/1064) * Downstream Merge 25-04-2022 [#1050](https://github.com/openshift/ovn-kubernetes/pull/1050) * [Bug 2023691](https://bugzilla.redhat.com/show_bug.cgi?id=2023691): Downstream merge 2022-04-22 [#1049](https://github.com/openshift/ovn-kubernetes/pull/1049) * [Bug 2072134](https://bugzilla.redhat.com/show_bug.cgi?id=2072134): [DownstreamMerge] 4-18-22 [#1040](https://github.com/openshift/ovn-kubernetes/pull/1040) * Dockerfile: bump to OVS 2.17 [#1031](https://github.com/openshift/ovn-kubernetes/pull/1031) * Fix gofmt for downstream files [#1028](https://github.com/openshift/ovn-kubernetes/pull/1028) * [Bug 2026461](https://bugzilla.redhat.com/show_bug.cgi?id=2026461): 4-4-22 merge [#1010](https://github.com/openshift/ovn-kubernetes/pull/1010) * [Bug 2047710](https://bugzilla.redhat.com/show_bug.cgi?id=2047710): Bump OVS version to 2.16.0-57.el8fdp [#980](https://github.com/openshift/ovn-kubernetes/pull/980) * Downstream merge 2022-03-22 [#1006](https://github.com/openshift/ovn-kubernetes/pull/1006) * [Bug 2063321](https://bugzilla.redhat.com/show_bug.cgi?id=2063321): [DownstreamMerge] Downstream merge 17-03-2022 [#1000](https://github.com/openshift/ovn-kubernetes/pull/1000) * [Bug 2060549](https://bugzilla.redhat.com/show_bug.cgi?id=2060549): Downstream merge 3-8-22 [#989](https://github.com/openshift/ovn-kubernetes/pull/989) * [Bug 2052975](https://bugzilla.redhat.com/show_bug.cgi?id=2052975): Downstream merge 07-03-2022 [#988](https://github.com/openshift/ovn-kubernetes/pull/988) * Merge 3-4-22 [#987](https://github.com/openshift/ovn-kubernetes/pull/987) * [Bug 2052975](https://bugzilla.redhat.com/show_bug.cgi?id=2052975): Bump OVN to ovn-2021-21.12.0-30.el8fdp [#982](https://github.com/openshift/ovn-kubernetes/pull/982) * [Bug 2052398](https://bugzilla.redhat.com/show_bug.cgi?id=2052398): [DownstreamMerge] 2-25-22 [#975](https://github.com/openshift/ovn-kubernetes/pull/975) * Bump OVS to 2.16.0-53.el8fdp [#968](https://github.com/openshift/ovn-kubernetes/pull/968) * [Bug 2048538](https://bugzilla.redhat.com/show_bug.cgi?id=2048538): [DownstreamMerge] 2-22-22 [#966](https://github.com/openshift/ovn-kubernetes/pull/966) * [Bug 2045577](https://bugzilla.redhat.com/show_bug.cgi?id=2045577): Bump OVN to ovn-2021-21.12.0-15.el8fdp [#958](https://github.com/openshift/ovn-kubernetes/pull/958) * [Bug 2048538](https://bugzilla.redhat.com/show_bug.cgi?id=2048538): [DownstreamMerge] 2-14-22 [#956](https://github.com/openshift/ovn-kubernetes/pull/956) * [Bug 2011525](https://bugzilla.redhat.com/show_bug.cgi?id=2011525): [DownstreamMerge] Downstream merge 08-02-2022 [#947](https://github.com/openshift/ovn-kubernetes/pull/947) * Update project owners [#950](https://github.com/openshift/ovn-kubernetes/pull/950) * Downstream merge 2-1-22 [#940](https://github.com/openshift/ovn-kubernetes/pull/940) * [Bug 2040357](https://bugzilla.redhat.com/show_bug.cgi?id=2040357): Dockerfile: bump OVN to ovn-2021-21.12.0-11.el8fdp [#902](https://github.com/openshift/ovn-kubernetes/pull/902) * [Bug 2039253](https://bugzilla.redhat.com/show_bug.cgi?id=2039253): avoid passing duplicate Flow endpoints to ovs-vsctl [#930](https://github.com/openshift/ovn-kubernetes/pull/930) * [Bug 2031926](https://bugzilla.redhat.com/show_bug.cgi?id=2031926): Shared gateway: Modification of ClusterIPs shall trigger svc update [#924](https://github.com/openshift/ovn-kubernetes/pull/924) * [Bug 2042001](https://bugzilla.redhat.com/show_bug.cgi?id=2042001): Adds wait method for ovsdb operations that created named objects [#934](https://github.com/openshift/ovn-kubernetes/pull/934) * [Bug 2044303](https://bugzilla.redhat.com/show_bug.cgi?id=2044303): Fix update of CloudPrivateIPConfig [#923](https://github.com/openshift/ovn-kubernetes/pull/923) * [Bug 2046297](https://bugzilla.redhat.com/show_bug.cgi?id=2046297): libovsdb: give connects more time to process than normal transactions [#931](https://github.com/openshift/ovn-kubernetes/pull/931) * [Bug 2044680](https://bugzilla.redhat.com/show_bug.cgi?id=2044680): libovsdb performance and resource consumption fixes [#927](https://github.com/openshift/ovn-kubernetes/pull/927) * [Bug 2017650](https://bugzilla.redhat.com/show_bug.cgi?id=2017650): EF: Pull up switch names from cache [#908](https://github.com/openshift/ovn-kubernetes/pull/908) * [Bug 2025467](https://bugzilla.redhat.com/show_bug.cgi?id=2025467): ETP=local,SGW: Add DNAT rule towards 169.254.169.3 [#907](https://github.com/openshift/ovn-kubernetes/pull/907) * [Bug 2043961](https://bugzilla.redhat.com/show_bug.cgi?id=2043961): Fix pod-creation-retry [#926](https://github.com/openshift/ovn-kubernetes/pull/926) * [Bug 2040540](https://bugzilla.redhat.com/show_bug.cgi?id=2040540): Fix String formatting error [#904](https://github.com/openshift/ovn-kubernetes/pull/904) * Clean up OWNERS a bit [#919](https://github.com/openshift/ovn-kubernetes/pull/919) * [Bug 2039880](https://bugzilla.redhat.com/show_bug.cgi?id=2039880): Metrics: Increase log level for CP recorder [#899](https://github.com/openshift/ovn-kubernetes/pull/899) * [Bug 2039099](https://bugzilla.redhat.com/show_bug.cgi?id=2039099): EgressIP fixes for 4.10 [#917](https://github.com/openshift/ovn-kubernetes/pull/917) * [Bug 2032998](https://bugzilla.redhat.com/show_bug.cgi?id=2032998): perf/scale backports [#911](https://github.com/openshift/ovn-kubernetes/pull/911) * [Bug 2034577](https://bugzilla.redhat.com/show_bug.cgi?id=2034577): Set l3GWConfig.mode correctly [#909](https://github.com/openshift/ovn-kubernetes/pull/909) * [Bug 2034155](https://bugzilla.redhat.com/show_bug.cgi?id=2034155): Make egressIPs compatible with ICNI [#915](https://github.com/openshift/ovn-kubernetes/pull/915) * [Bug 2029742](https://bugzilla.redhat.com/show_bug.cgi?id=2029742): egressip: fix usage of clientModel doAfter [#910](https://github.com/openshift/ovn-kubernetes/pull/910) * [Bug 2041830](https://bugzilla.redhat.com/show_bug.cgi?id=2041830): Fix panic in Hybrid Overlay [#913](https://github.com/openshift/ovn-kubernetes/pull/913) * [Bug 2039698](https://bugzilla.redhat.com/show_bug.cgi?id=2039698): Hacky way of doing ITP:preferLocal for openshift-dns:default [#896](https://github.com/openshift/ovn-kubernetes/pull/896) * [Bug 2039516](https://bugzilla.redhat.com/show_bug.cgi?id=2039516): Dockerfile: bump OVN to ovn21.12-21.12.0-25 [#883](https://github.com/openshift/ovn-kubernetes/pull/883) * [Bug 2022536](https://bugzilla.redhat.com/show_bug.cgi?id=2022536): Validate ExGW Cache and fix cache keys [#895](https://github.com/openshift/ovn-kubernetes/pull/895) * [Bug 2031012](https://bugzilla.redhat.com/show_bug.cgi?id=2031012): Create iptables NAT rules also for loadbalancer services [#888](https://github.com/openshift/ovn-kubernetes/pull/888) * [Bug 2033728](https://bugzilla.redhat.com/show_bug.cgi?id=2033728): Dockerfile: bump OVS to 2.16.0-33.el8fdp [#833](https://github.com/openshift/ovn-kubernetes/pull/833) * Merge 21-12-16 [#875](https://github.com/openshift/ovn-kubernetes/pull/875) * Block access to metadata service based on platform type [#873](https://github.com/openshift/ovn-kubernetes/pull/873) * Downstream merge 2021-12-10 [#871](https://github.com/openshift/ovn-kubernetes/pull/871) * 21-12-9 [#869](https://github.com/openshift/ovn-kubernetes/pull/869) * Merge 21-12-7 [#867](https://github.com/openshift/ovn-kubernetes/pull/867) * ovn: bump to ovn21.12-21.12.0-24.el8fdp [#818](https://github.com/openshift/ovn-kubernetes/pull/818) * 03-12-2021 [#863](https://github.com/openshift/ovn-kubernetes/pull/863) * [Bug 2019809](https://bugzilla.redhat.com/show_bug.cgi?id=2019809): [DownstreamMerge] 11-29-21 [#851](https://github.com/openshift/ovn-kubernetes/pull/851) * [Bug 2009873](https://bugzilla.redhat.com/show_bug.cgi?id=2009873): [4.10.0] Avoid stale annotations by re-subscribing to netlink [#843](https://github.com/openshift/ovn-kubernetes/pull/843) * Revert revert [#834](https://github.com/openshift/ovn-kubernetes/pull/834) * Revert "[DownstreamMerge] Fix previous downstream merge" [#831](https://github.com/openshift/ovn-kubernetes/pull/831) * Fix previous downstream merge [#812](https://github.com/openshift/ovn-kubernetes/pull/812) * [Bug 2017909](https://bugzilla.redhat.com/show_bug.cgi?id=2017909): EgressGW: only return unique elements from getRouteInfosForGateway() [#816](https://github.com/openshift/ovn-kubernetes/pull/816) * Revert #796 and #807 [#810](https://github.com/openshift/ovn-kubernetes/pull/810) * fixup: reduce delta from upstream [#807](https://github.com/openshift/ovn-kubernetes/pull/807) * Merge 2021-10-13 [#796](https://github.com/openshift/ovn-kubernetes/pull/796) * CARRY: go-ovn: prevent deadlock processing Updates during initial DB dump [#800](https://github.com/openshift/ovn-kubernetes/pull/800) * [Bug 2016479](https://bugzilla.redhat.com/show_bug.cgi?id=2016479): Update iface-id-ver for existing ports [#802](https://github.com/openshift/ovn-kubernetes/pull/802) * [Bug 1987445](https://bugzilla.redhat.com/show_bug.cgi?id=1987445): Fix gateway routers answer ARP/NDP requests for LoadBalancer/ExternalIP services [#793](https://github.com/openshift/ovn-kubernetes/pull/793) * [Bug 2011386](https://bugzilla.redhat.com/show_bug.cgi?id=2011386): pods: fix overwriting returned error from defer() [#787](https://github.com/openshift/ovn-kubernetes/pull/787) * [Bug 2007443](https://bugzilla.redhat.com/show_bug.cgi?id=2007443): bump OVN to ovn21.09-21.09.0-20.el8fdp [#784](https://github.com/openshift/ovn-kubernetes/pull/784) * pods: remove unnecessary LSPGet() calls [#781](https://github.com/openshift/ovn-kubernetes/pull/781) * [Bug 1959352](https://bugzilla.redhat.com/show_bug.cgi?id=1959352): phase 2 scale improvements [#750](https://github.com/openshift/ovn-kubernetes/pull/750) * ovs: bump to 2.16.0-15.el8fdp [#775](https://github.com/openshift/ovn-kubernetes/pull/775) * [Bug 2006325](https://bugzilla.redhat.com/show_bug.cgi?id=2006325): Bump OVN to ovn21.09-21.09.0-19.el8fdp [#768](https://github.com/openshift/ovn-kubernetes/pull/768) * Updating ose-ovn-kubernetes images to be consistent with ART [#744](https://github.com/openshift/ovn-kubernetes/pull/744) * [Bug 1999261](https://bugzilla.redhat.com/show_bug.cgi?id=1999261): filter out KubeAPIAuth when logging CNI requests [#742](https://github.com/openshift/ovn-kubernetes/pull/742) * [Bug 2002010](https://bugzilla.redhat.com/show_bug.cgi?id=2002010): Fixes skipping pods accidentally in retry [#739](https://github.com/openshift/ovn-kubernetes/pull/739) * [Bug 2000057](https://bugzilla.redhat.com/show_bug.cgi?id=2000057): panic after EgressFirewall deletion and DNS record expiration [#741](https://github.com/openshift/ovn-kubernetes/pull/741) * [Bug 2003195](https://bugzilla.redhat.com/show_bug.cgi?id=2003195): Ensure host interfaces are deleted by CNI [#738](https://github.com/openshift/ovn-kubernetes/pull/738) * Fix bad merge on egressip test [#732](https://github.com/openshift/ovn-kubernetes/pull/732) * [Bug 2002372](https://bugzilla.redhat.com/show_bug.cgi?id=2002372): Fixes misuse of pod annotations during update event [#735](https://github.com/openshift/ovn-kubernetes/pull/735) * [Bug 1995335](https://bugzilla.redhat.com/show_bug.cgi?id=1995335): Add "iface-id-ver=${POD_UID}" tuple to the external-ids of logical and OVS ports [#729](https://github.com/openshift/ovn-kubernetes/pull/729) * [Bug 1903408](https://bugzilla.redhat.com/show_bug.cgi?id=1903408): Merge externalTrafficPolicy ONLY [#663](https://github.com/openshift/ovn-kubernetes/pull/663) * [Bug 1976399](https://bugzilla.redhat.com/show_bug.cgi?id=1976399): DBChecker: reconcile the election timeouts when specified [#647](https://github.com/openshift/ovn-kubernetes/pull/647) * [Bug 1998614](https://bugzilla.redhat.com/show_bug.cgi?id=1998614): Ensure client handling of canceled/dropped OVSDB monitor [#717](https://github.com/openshift/ovn-kubernetes/pull/717) * [Bug 1997438](https://bugzilla.redhat.com/show_bug.cgi?id=1997438): egressfirewall not set after upgrade [#716](https://github.com/openshift/ovn-kubernetes/pull/716) * [Bug 1998423](https://bugzilla.redhat.com/show_bug.cgi?id=1998423): kube master don't fail trying to cache same GW LRP IPs as already exist [#705](https://github.com/openshift/ovn-kubernetes/pull/705) * [Bug 1986946](https://bugzilla.redhat.com/show_bug.cgi?id=1986946): Fix ensurePod to call addPodExternalGW only for annotation updates [#691](https://github.com/openshift/ovn-kubernetes/pull/691) * [Bug 2000721](https://bugzilla.redhat.com/show_bug.cgi?id=2000721): bump OVS userland to openvswitch2.16-2.16.0-6.el8fdp [#714](https://github.com/openshift/ovn-kubernetes/pull/714) * [Bug 1999852](https://bugzilla.redhat.com/show_bug.cgi?id=1999852): bump OVN to ovn21.09-21.09.0-18.el8fdp [#704](https://github.com/openshift/ovn-kubernetes/pull/704) * [Bug 1999138](https://bugzilla.redhat.com/show_bug.cgi?id=1999138): Revert "Taint node with NoSchedule effect when ovnkube pod is down" [#708](https://github.com/openshift/ovn-kubernetes/pull/708) * README: Add doc links [#669](https://github.com/openshift/ovn-kubernetes/pull/669) * [Bug 1998146](https://bugzilla.redhat.com/show_bug.cgi?id=1998146): Fix lb delete during node deletion [#698](https://github.com/openshift/ovn-kubernetes/pull/698) * [Bug 1962344](https://bugzilla.redhat.com/show_bug.cgi?id=1962344): Use DGP to connect logical switches to the cluster router. [#688](https://github.com/openshift/ovn-kubernetes/pull/688) * [Bug 1997270](https://bugzilla.redhat.com/show_bug.cgi?id=1997270): bump OVN to ovn21.09-21.09.0-15.el8fdp [#685](https://github.com/openshift/ovn-kubernetes/pull/685) * [Bug 1995816](https://bugzilla.redhat.com/show_bug.cgi?id=1995816): [4.9] backport "attempting to reduce cardinality in the interest of memory performance" [#672](https://github.com/openshift/ovn-kubernetes/pull/672) * [Bug 1997114](https://bugzilla.redhat.com/show_bug.cgi?id=1997114): Fixes ensure address set [#684](https://github.com/openshift/ovn-kubernetes/pull/684) * [Bug 1994647](https://bugzilla.redhat.com/show_bug.cgi?id=1994647): Add quotes around nexthop and dst-ip fields [#677](https://github.com/openshift/ovn-kubernetes/pull/677) * [Bug 1973215](https://bugzilla.redhat.com/show_bug.cgi?id=1973215): fix reserve joinSwitch LRP IPs [#679](https://github.com/openshift/ovn-kubernetes/pull/679) * [Bug 1989615](https://bugzilla.redhat.com/show_bug.cgi?id=1989615): Fix GetPortAddresses for HBO [#670](https://github.com/openshift/ovn-kubernetes/pull/670) * [Bug 1943334](https://bugzilla.redhat.com/show_bug.cgi?id=1943334): Taint node with NoSchedule when ovnkube pod is down [#671](https://github.com/openshift/ovn-kubernetes/pull/671) * [Bug 1995330](https://bugzilla.redhat.com/show_bug.cgi?id=1995330): Cherry-pick of per-service loadbalancers [#666](https://github.com/openshift/ovn-kubernetes/pull/666) * [Bug 1959352](https://bugzilla.redhat.com/show_bug.cgi?id=1959352): scale fixes 1 [#667](https://github.com/openshift/ovn-kubernetes/pull/667) * [Bug 1978797](https://bugzilla.redhat.com/show_bug.cgi?id=1978797): Sync exgw routes on startup [#658](https://github.com/openshift/ovn-kubernetes/pull/658) * [Bug 1994069](https://bugzilla.redhat.com/show_bug.cgi?id=1994069): bump OVN to ovn21.09-21.09.0-13.el8fdp [#659](https://github.com/openshift/ovn-kubernetes/pull/659) * [Bug 1976215](https://bugzilla.redhat.com/show_bug.cgi?id=1976215): Fix: sync egress IP for missed events on start-up [#655](https://github.com/openshift/ovn-kubernetes/pull/655) * [Bug 1991793](https://bugzilla.redhat.com/show_bug.cgi?id=1991793): [4.9] bump OVN to ovn21.09-21.09.0-12.el8fdp [#652](https://github.com/openshift/ovn-kubernetes/pull/652) * [Bug 1989694](https://bugzilla.redhat.com/show_bug.cgi?id=1989694): Bump OVN to ovn21.09-21.09.0-10.el8fdp [#643](https://github.com/openshift/ovn-kubernetes/pull/643) * [Bug 1986440](https://bugzilla.redhat.com/show_bug.cgi?id=1986440): Bump OVN to ovn21.09-21.09.0-9.el8fdp [#630](https://github.com/openshift/ovn-kubernetes/pull/630) * [Bug 1986443](https://bugzilla.redhat.com/show_bug.cgi?id=1986443): Fix pod handler race downstream [#628](https://github.com/openshift/ovn-kubernetes/pull/628) * Bump OVN to ovn21.09-21.09.0-8.el8fdp [#621](https://github.com/openshift/ovn-kubernetes/pull/621) * Bump OVS to openvswitch2.15-2.15.0-28.el8fdp [#622](https://github.com/openshift/ovn-kubernetes/pull/622) * [Bug 1985512](https://bugzilla.redhat.com/show_bug.cgi?id=1985512): Add v6 management interface address for host network policy [#623](https://github.com/openshift/ovn-kubernetes/pull/623) * Merge 2021-07-21 2nd [#619](https://github.com/openshift/ovn-kubernetes/pull/619) * Merge 2021-07-18 [#609](https://github.com/openshift/ovn-kubernetes/pull/609) * [Bug 1973286](https://bugzilla.redhat.com/show_bug.cgi?id=1973286): Merge 2021-07-06 [#600](https://github.com/openshift/ovn-kubernetes/pull/600) * [Bug 1973813](https://bugzilla.redhat.com/show_bug.cgi?id=1973813): 6-21-2021 merge [#582](https://github.com/openshift/ovn-kubernetes/pull/582) * Updating ose-ovn-kubernetes images to be consistent with ART [#578](https://github.com/openshift/ovn-kubernetes/pull/578) * [Bug 1972287](https://bugzilla.redhat.com/show_bug.cgi?id=1972287): 6-17-21 merge [#579](https://github.com/openshift/ovn-kubernetes/pull/579) * add JacobTanenbaum to the list of approvers [#544](https://github.com/openshift/ovn-kubernetes/pull/544) * [Bug 1958375](https://bugzilla.redhat.com/show_bug.cgi?id=1958375): Bump OVN to 20.12.0-140.el8fdp [#580](https://github.com/openshift/ovn-kubernetes/pull/580) * Updating .ci-operator.yaml `build_root_image` from openshift/release [#574](https://github.com/openshift/ovn-kubernetes/pull/574) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/57259fee9817277db21c44e68018040c5109fdf1...) ### [prometheus](https://github.com/openshift/prometheus/tree/) * [OCPBUGS-29981](https://issues.redhat.com/browse/OCPBUGS-29981): Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.16 [#197](https://github.com/openshift/prometheus/pull/197) * [MON-3673](https://issues.redhat.com/browse/MON-3673): [bot] Bump openshift/prometheus to v2.49.1 [#193](https://github.com/openshift/prometheus/pull/193) * [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#194](https://github.com/openshift/prometheus/pull/194) * [MON-3673](https://issues.redhat.com/browse/MON-3673): Bump Prometheus to v2.49.1 [#192](https://github.com/openshift/prometheus/pull/192) * [MON-3633](https://issues.redhat.com/browse/MON-3633): Bump openshift/prometheus to v2.48.1 [#188](https://github.com/openshift/prometheus/pull/188) * [OCPBUGS-24745](https://issues.redhat.com/browse/OCPBUGS-24745): Updating golang-github-prometheus-prometheus-container image to be consistent with ART [#187](https://github.com/openshift/prometheus/pull/187) * [MON-3528](https://issues.redhat.com/browse/MON-3528): [bot] Bump openshift/prometheus to v2.48.0 [#186](https://github.com/openshift/prometheus/pull/186) * [OCPBUGS-22743](https://issues.redhat.com/browse/OCPBUGS-22743): bump Prometheus to 2.48.0 (manual) [#185](https://github.com/openshift/prometheus/pull/185) * Bump openshift/prometheus to v2.47.2 [#181](https://github.com/openshift/prometheus/pull/181) * Bump openshift/prometheus to v2.47.2 [#180](https://github.com/openshift/prometheus/pull/180) * Bump openshift/prometheus to v2.47.2 [#179](https://github.com/openshift/prometheus/pull/179) * [OCPBUGS-21633](https://issues.redhat.com/browse/OCPBUGS-21633): update golang.org/x/net to v0.17.0 [#173](https://github.com/openshift/prometheus/pull/173) * update OWNERS file [#172](https://github.com/openshift/prometheus/pull/172) * Bump openshift/prometheus to v2.47.0 [#168](https://github.com/openshift/prometheus/pull/168) * [OCPBUGS-18846](https://issues.redhat.com/browse/OCPBUGS-18846): Updating golang-github-prometheus-prometheus images to be consistent with ART [#169](https://github.com/openshift/prometheus/pull/169) * Bump openshift/prometheus to v2.46.0 [#167](https://github.com/openshift/prometheus/pull/167) * Bump openshift/prometheus to v2.45.0 [#166](https://github.com/openshift/prometheus/pull/166) * Bump openshift/prometheus to v2.44.0 [#164](https://github.com/openshift/prometheus/pull/164) * Dockerfile.ocp: update note about UI assets after switching to embed [#165](https://github.com/openshift/prometheus/pull/165) * [OCPBUGS-12996](https://issues.redhat.com/browse/OCPBUGS-12996): Add missing assets after manual merge [#162](https://github.com/openshift/prometheus/pull/162) * [OCPBUGS-12825](https://issues.redhat.com/browse/OCPBUGS-12825): Updating golang-github-prometheus-prometheus images to be consistent with ART [#160](https://github.com/openshift/prometheus/pull/160) * Bump openshift/prometheus to v2.43.0 [#158](https://github.com/openshift/prometheus/pull/158) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#156](https://github.com/openshift/prometheus/pull/156) * Bump openshift/prometheus to v2.42.0 [#154](https://github.com/openshift/prometheus/pull/154) * Bump openshift/prometheus to v2.41.0 [#153](https://github.com/openshift/prometheus/pull/153) * Bump openshift/prometheus to v2.40.7 [#152](https://github.com/openshift/prometheus/pull/152) * Bump openshift/prometheus to v2.40.6 [#151](https://github.com/openshift/prometheus/pull/151) * Bump openshift/prometheus to v2.40.5 [#150](https://github.com/openshift/prometheus/pull/150) * [OCPBUGS-4273](https://issues.redhat.com/browse/OCPBUGS-4273): Bump openshift/prometheus to v2.40.4 [#148](https://github.com/openshift/prometheus/pull/148) * [OCPBUGS-2873](https://issues.redhat.com/browse/OCPBUGS-2873): fix certificate reloads after rotation [#145](https://github.com/openshift/prometheus/pull/145) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#147](https://github.com/openshift/prometheus/pull/147) * Revert unwanted downstream patch [#144](https://github.com/openshift/prometheus/pull/144) * [OCPBUGS-1718](https://issues.redhat.com/browse/OCPBUGS-1718): [bot] Bump openshift/prometheus to v2.39.1 [#142](https://github.com/openshift/prometheus/pull/142) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#141](https://github.com/openshift/prometheus/pull/141) * Bump openshift/prometheus to v2.38.0 [#140](https://github.com/openshift/prometheus/pull/140) * OWNERS: Add myself, and move former team members to emeritus [#139](https://github.com/openshift/prometheus/pull/139) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#137](https://github.com/openshift/prometheus/pull/137) * Bump openshift/prometheus to v2.37.0 [#138](https://github.com/openshift/prometheus/pull/138) * [Bug 2099561](https://bugzilla.redhat.com/show_bug.cgi?id=2099561): Bump openshift/prometheus to v2.36.2 [#136](https://github.com/openshift/prometheus/pull/136) * [Bug 2064984](https://bugzilla.redhat.com/show_bug.cgi?id=2064984): Update Prometheus to v2.36.1 [#133](https://github.com/openshift/prometheus/pull/133) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#132](https://github.com/openshift/prometheus/pull/132) * web/ui/.gitignore: unignore generated assets for downstream build [#130](https://github.com/openshift/prometheus/pull/130) * Bump openshift/prometheus to v2.35.0 [#128](https://github.com/openshift/prometheus/pull/128) * Updates OWNERS file [#124](https://github.com/openshift/prometheus/pull/124) * Bump openshift/prometheus to v2.34.0 [#123](https://github.com/openshift/prometheus/pull/123) * Bump openshift/prometheus to v2.33.5 [#122](https://github.com/openshift/prometheus/pull/122) * [Bug 2056802](https://bugzilla.redhat.com/show_bug.cgi?id=2056802): scrape: Fix label_limits cache usage [#121](https://github.com/openshift/prometheus/pull/121) * Bump openshift/prometheus to v2.33.4 [#120](https://github.com/openshift/prometheus/pull/120) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#119](https://github.com/openshift/prometheus/pull/119) * [Bug 2034192](https://bugzilla.redhat.com/show_bug.cgi?id=2034192): [bot] Bump openshift/prometheus to v2.32.1 [#117](https://github.com/openshift/prometheus/pull/117) * Don't use dependabot [#115](https://github.com/openshift/prometheus/pull/115) * Bump openshift/prometheus to v2.32.0 [#104](https://github.com/openshift/prometheus/pull/104) * Bump openshift/prometheus to v2.31.1 [#103](https://github.com/openshift/prometheus/pull/103) * Update scripts/rh-manifest.sh replacing yarn by npm [#99](https://github.com/openshift/prometheus/pull/99) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#102](https://github.com/openshift/prometheus/pull/102) * OWNERS: cleanup [#101](https://github.com/openshift/prometheus/pull/101) * Bump v2.30.3 [#98](https://github.com/openshift/prometheus/pull/98) * [Bug 1943860](https://bugzilla.redhat.com/show_bug.cgi?id=1943860): Bump 2.30.0 [#96](https://github.com/openshift/prometheus/pull/96) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#94](https://github.com/openshift/prometheus/pull/94) * openshift: Add script to generate rh-manifest.txt [#90](https://github.com/openshift/prometheus/pull/90) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#93](https://github.com/openshift/prometheus/pull/93) * [Bug 1999397](https://bugzilla.redhat.com/show_bug.cgi?id=1999397): Bump 2.29.2 [#92](https://github.com/openshift/prometheus/pull/92) * [Bug 1986243](https://bugzilla.redhat.com/show_bug.cgi?id=1986243): bump 2.29 [#91](https://github.com/openshift/prometheus/pull/91) * [Bug 1934324](https://bugzilla.redhat.com/show_bug.cgi?id=1934324): Update to 2.28.1 [#89](https://github.com/openshift/prometheus/pull/89) * Updating golang-github-prometheus-prometheus images to be consistent with ART [#88](https://github.com/openshift/prometheus/pull/88) * Update OWNERS file to reflect new maintainers [#87](https://github.com/openshift/prometheus/pull/87) * [Full changelog](https://github.com/openshift/prometheus/compare/f3beb880dbde817bf5ed2befc1880445884e4be0...) ### [prometheus-config-reloader, prometheus-operator](https://github.com/openshift/prometheus-operator/tree/) * [OCPBUGS-29304](https://issues.redhat.com/browse/OCPBUGS-29304): fix: don't fail metadata transform on unknown types (#6298) [#277](https://github.com/openshift/prometheus-operator/pull/277) * [OCPBUGS-28251](https://issues.redhat.com/browse/OCPBUGS-28251): fix: convert `continue` field between v1beta1 and v1alpha1 [#275](https://github.com/openshift/prometheus-operator/pull/275) * [MON-3689](https://issues.redhat.com/browse/MON-3689): Bump openshift/prometheus-operator to v0.71.2 [#274](https://github.com/openshift/prometheus-operator/pull/274) * [MON-3689](https://issues.redhat.com/browse/MON-3689): Bump openshift/prometheus-operator to v0.71.1 [#273](https://github.com/openshift/prometheus-operator/pull/273) * [MON-3676](https://issues.redhat.com/browse/MON-3676): move raptorsun out of reviewer list [#272](https://github.com/openshift/prometheus-operator/pull/272) * [MON-3661](https://issues.redhat.com/browse/MON-3661): Bump openshift/prometheus-operator to v0.71.0 [#271](https://github.com/openshift/prometheus-operator/pull/271) * [OCPBUGS-26147](https://issues.redhat.com/browse/OCPBUGS-26147): configure Snyk scanner [#269](https://github.com/openshift/prometheus-operator/pull/269) * [OCPBUGS-25560](https://issues.redhat.com/browse/OCPBUGS-25560): Updating prometheus-config-reloader-container image to be consistent with ART [#270](https://github.com/openshift/prometheus-operator/pull/270) * [OCPBUGS-24947](https://issues.redhat.com/browse/OCPBUGS-24947): Updating prometheus-operator-admission-webhook-container image to be consistent with ART [#266](https://github.com/openshift/prometheus-operator/pull/266) * [OCPBUGS-24914](https://issues.redhat.com/browse/OCPBUGS-24914): Updating prometheus-config-reloader-container image to be consistent with ART [#268](https://github.com/openshift/prometheus-operator/pull/268) * [OCPBUGS-24914](https://issues.redhat.com/browse/OCPBUGS-24914): Updating prometheus-config-reloader-container image to be consistent with ART [#265](https://github.com/openshift/prometheus-operator/pull/265) * [OCPBUGS-24872](https://issues.redhat.com/browse/OCPBUGS-24872): Updating prometheus-operator-container image to be consistent with ART [#264](https://github.com/openshift/prometheus-operator/pull/264) * [OCPBUGS-24323](https://issues.redhat.com/browse/OCPBUGS-24323): Bump openshift/prometheus-operator to v0.70.0 [#263](https://github.com/openshift/prometheus-operator/pull/263) * [OCPBUGS-24126](https://issues.redhat.com/browse/OCPBUGS-24126): Updating prometheus-operator-admission-webhook-container image to be consistent with ART [#260](https://github.com/openshift/prometheus-operator/pull/260) * [OCPBUGS-24073](https://issues.redhat.com/browse/OCPBUGS-24073): Updating prometheus-operator-container image to be consistent with ART [#258](https://github.com/openshift/prometheus-operator/pull/258) * [OCPBUGS-24105](https://issues.redhat.com/browse/OCPBUGS-24105): Updating prometheus-config-reloader-container image to be consistent with ART [#259](https://github.com/openshift/prometheus-operator/pull/259) * [MON-3479](https://issues.redhat.com/browse/MON-3479): [bot] Bump openshift/prometheus-operator to v0.69.1 [#256](https://github.com/openshift/prometheus-operator/pull/256) * [OCPBUGS-18707](https://issues.redhat.com/browse/OCPBUGS-18707): [bot] Bump openshift/prometheus-operator to v0.69.0 [#255](https://github.com/openshift/prometheus-operator/pull/255) * [OCPBUGS-22946](https://issues.redhat.com/browse/OCPBUGS-22946): fix: remove verbose logging admission-webhook [#254](https://github.com/openshift/prometheus-operator/pull/254) * [OCPBUGS-21637](https://issues.redhat.com/browse/OCPBUGS-21637): fix: disable HTTP2 connections by default [#252](https://github.com/openshift/prometheus-operator/pull/252) * [OCPBUGS-21637](https://issues.redhat.com/browse/OCPBUGS-21637): Bump golang.org/x/net to v0.17.0 [#246](https://github.com/openshift/prometheus-operator/pull/246) * update OWNERS file [#245](https://github.com/openshift/prometheus-operator/pull/245) * [OCPBUGS-19108](https://issues.redhat.com/browse/OCPBUGS-19108): Updating prometheus-operator images to be consistent with ART [#242](https://github.com/openshift/prometheus-operator/pull/242) * [OCPBUGS-19204](https://issues.redhat.com/browse/OCPBUGS-19204): Updating prometheus-operator-admission-webhook images to be consistent with ART [#244](https://github.com/openshift/prometheus-operator/pull/244) * [OCPBUGS-19174](https://issues.redhat.com/browse/OCPBUGS-19174): Updating prometheus-config-reloader images to be consistent with ART [#243](https://github.com/openshift/prometheus-operator/pull/243) * : Bump openshift/prometheus-operator to v0.68.0 [#241](https://github.com/openshift/prometheus-operator/pull/241) * Bump openshift/prometheus-operator to v0.67.1 [#240](https://github.com/openshift/prometheus-operator/pull/240) * Bump openshift/prometheus-operator to v0.67.0 [#239](https://github.com/openshift/prometheus-operator/pull/239) * [OCPBUGS-14466](https://issues.redhat.com/browse/OCPBUGS-14466): bump openshift/prometheus-operator to v0.66.0 [#236](https://github.com/openshift/prometheus-operator/pull/236) * [OCPBUGS-14033](https://issues.redhat.com/browse/OCPBUGS-14033): cmd/prometheus-config-reloader: add SIGTERM handler [#234](https://github.com/openshift/prometheus-operator/pull/234) * [OCPBUGS-1626](https://issues.redhat.com/browse/OCPBUGS-1626): [bot] Bump openshift/prometheus-operator to v0.65.1 [#233](https://github.com/openshift/prometheus-operator/pull/233) * [OCPBUGS-12324](https://issues.redhat.com/browse/OCPBUGS-12324): Update 4.14 prometheus-config-reloader image to be consistent with ART [#230](https://github.com/openshift/prometheus-operator/pull/230) * Updating prometheus-operator images to be consistent with ART [#229](https://github.com/openshift/prometheus-operator/pull/229) * Updating prometheus-config-reloader images to be consistent with ART [#227](https://github.com/openshift/prometheus-operator/pull/227) * Updating prometheus-operator-admission-webhook images to be consistent with ART [#226](https://github.com/openshift/prometheus-operator/pull/226) * Updating prometheus-config-reloader images to be consistent with ART [#225](https://github.com/openshift/prometheus-operator/pull/225) * [OCPBUGS-10109](https://issues.redhat.com/browse/OCPBUGS-10109): Updating openshift-state-metrics images to be consistent with ART [#221](https://github.com/openshift/prometheus-operator/pull/221) * [OCPBUGS-10137](https://issues.redhat.com/browse/OCPBUGS-10137): Updating openshift-state-metrics images to be consistent with ART [#222](https://github.com/openshift/prometheus-operator/pull/222) * Updating prometheus-operator images to be consistent with ART [#220](https://github.com/openshift/prometheus-operator/pull/220) * [OCPBUGS-6055](https://issues.redhat.com/browse/OCPBUGS-6055): [bot] Bump openshift/prometheus-operator to v0.63.0 [#216](https://github.com/openshift/prometheus-operator/pull/216) * Bump openshift/prometheus-operator to v0.62.0 [#215](https://github.com/openshift/prometheus-operator/pull/215) * Updating prometheus-operator-admission-webhook images to be consistent with ART [#214](https://github.com/openshift/prometheus-operator/pull/214) * Updating prometheus-config-reloader images to be consistent with ART [#213](https://github.com/openshift/prometheus-operator/pull/213) * Updating prometheus-operator images to be consistent with ART [#212](https://github.com/openshift/prometheus-operator/pull/212) * [OCPBUGS-2778](https://issues.redhat.com/browse/OCPBUGS-2778): [bot] Bump openshift/prometheus-operator to v0.61.1 [#209](https://github.com/openshift/prometheus-operator/pull/209) * Bump openshift/prometheus-operator to v0.60.1 [#208](https://github.com/openshift/prometheus-operator/pull/208) * Bump openshift/prometheus-operator to v0.60.0 [#207](https://github.com/openshift/prometheus-operator/pull/207) * Updating prometheus-operator-admission-webhook images to be consistent with ART [#206](https://github.com/openshift/prometheus-operator/pull/206) * Updating prometheus-config-reloader images to be consistent with ART [#205](https://github.com/openshift/prometheus-operator/pull/205) * Bump openshift/prometheus-operator to v0.59.2 [#203](https://github.com/openshift/prometheus-operator/pull/203) * Bump openshift/prometheus-operator to v0.59.1 [#200](https://github.com/openshift/prometheus-operator/pull/200) * OWNERS: Add myself, and move former team members to emeritus [#198](https://github.com/openshift/prometheus-operator/pull/198) * Bump openshift/prometheus-operator to v0.58.0 [#197](https://github.com/openshift/prometheus-operator/pull/197) * Updating prometheus-operator-admission-webhook images to be consistent with ART [#195](https://github.com/openshift/prometheus-operator/pull/195) * Updating prometheus-config-reloader images to be consistent with ART [#194](https://github.com/openshift/prometheus-operator/pull/194) * Updating prometheus-operator images to be consistent with ART [#193](https://github.com/openshift/prometheus-operator/pull/193) * [Bug 2097716](https://bugzilla.redhat.com/show_bug.cgi?id=2097716): pkg/apis/monitoring/v1beta1: fix httpConfig conversion [#191](https://github.com/openshift/prometheus-operator/pull/191) * [Bug 2091595](https://bugzilla.redhat.com/show_bug.cgi?id=2091595): bump to Prometheus operator v0.57.0 [#190](https://github.com/openshift/prometheus-operator/pull/190) * [Bug 2079679](https://bugzilla.redhat.com/show_bug.cgi?id=2079679): pkg/prometheus: fix curl exec probe [#189](https://github.com/openshift/prometheus-operator/pull/189) * Revert "Bug 2091595: Bump openshift/prometheus-operator to v0.56.3" [#188](https://github.com/openshift/prometheus-operator/pull/188) * [Bug 2091595](https://bugzilla.redhat.com/show_bug.cgi?id=2091595): Bump openshift/prometheus-operator to v0.56.3 [#185](https://github.com/openshift/prometheus-operator/pull/185) * Updating prometheus-operator-admission-webhook images to be consistent with ART [#180](https://github.com/openshift/prometheus-operator/pull/180) * Updating prometheus-config-reloader images to be consistent with ART [#178](https://github.com/openshift/prometheus-operator/pull/178) * [Bug 2084288](https://bugzilla.redhat.com/show_bug.cgi?id=2084288): Revert "Bump openshift/prometheus-operator to v0.56.2" [#177](https://github.com/openshift/prometheus-operator/pull/177) * Updating prometheus-operator images to be consistent with ART [#176](https://github.com/openshift/prometheus-operator/pull/176) * Bump openshift/prometheus-operator to v0.56.2 [#174](https://github.com/openshift/prometheus-operator/pull/174) * Revert "Bump openshift/prometheus-operator to v0.56.1" [#171](https://github.com/openshift/prometheus-operator/pull/171) * Bump openshift/prometheus-operator to v0.56.1 [#170](https://github.com/openshift/prometheus-operator/pull/170) * Add myself to OWNER file [#166](https://github.com/openshift/prometheus-operator/pull/166) * [Bug 2079679](https://bugzilla.redhat.com/show_bug.cgi?id=2079679): Revert "[bot] Bump openshift/prometheus-operator to v0.56.0" [#168](https://github.com/openshift/prometheus-operator/pull/168) * Bump openshift/prometheus-operator to v0.56.0 [#165](https://github.com/openshift/prometheus-operator/pull/165) * Bump openshift/prometheus-operator to v0.55.1 [#164](https://github.com/openshift/prometheus-operator/pull/164) * Bump openshift/prometheus-operator to v0.55.0 [#162](https://github.com/openshift/prometheus-operator/pull/162) * Fix typo in admission webhook bin output [#163](https://github.com/openshift/prometheus-operator/pull/163) * Add Dockerfile and targets for standalone admission webhook image [#160](https://github.com/openshift/prometheus-operator/pull/160) * Standalone webhook server [#159](https://github.com/openshift/prometheus-operator/pull/159) * Bump openshift/prometheus-operator to v0.54.1 [#158](https://github.com/openshift/prometheus-operator/pull/158) * Updating prometheus-config-reloader images to be consistent with ART [#155](https://github.com/openshift/prometheus-operator/pull/155) * Bump openshift/prometheus-operator to v0.54.0 [#151](https://github.com/openshift/prometheus-operator/pull/151) * Updating prometheus-operator images to be consistent with ART [#154](https://github.com/openshift/prometheus-operator/pull/154) * [Bug 2030539](https://bugzilla.redhat.com/show_bug.cgi?id=2030539): Address race condition in recreate flow for statefulset [#152](https://github.com/openshift/prometheus-operator/pull/152) * [Bug 2036717](https://bugzilla.redhat.com/show_bug.cgi?id=2036717): [bot] Bump openshift/prometheus-operator to v0.53.1 [#147](https://github.com/openshift/prometheus-operator/pull/147) * Bump openshift/prometheus-operator to v0.53.0 [#146](https://github.com/openshift/prometheus-operator/pull/146) * Release 0.52 [#141](https://github.com/openshift/prometheus-operator/pull/141) * Updating prometheus-config-reloader images to be consistent with ART [#144](https://github.com/openshift/prometheus-operator/pull/144) * OWNERS: cleanup [#140](https://github.com/openshift/prometheus-operator/pull/140) * Bump v0.51.2 [#139](https://github.com/openshift/prometheus-operator/pull/139) * Updating prometheus-operator images to be consistent with ART [#136](https://github.com/openshift/prometheus-operator/pull/136) * Bump to v0.50.0 [#133](https://github.com/openshift/prometheus-operator/pull/133) * Updating prometheus-config-reloader images to be consistent with ART [#135](https://github.com/openshift/prometheus-operator/pull/135) * Updating prometheus-operator images to be consistent with ART [#134](https://github.com/openshift/prometheus-operator/pull/134) * [Bug 1977435](https://bugzilla.redhat.com/show_bug.cgi?id=1977435): Bump prometheus-operator to v0.49.0 [#131](https://github.com/openshift/prometheus-operator/pull/131) * Updating prometheus-config-reloader images to be consistent with ART [#130](https://github.com/openshift/prometheus-operator/pull/130) * Updating prometheus-operator images to be consistent with ART [#129](https://github.com/openshift/prometheus-operator/pull/129) * Update OWNERS file to reflect new maintainers [#127](https://github.com/openshift/prometheus-operator/pull/127) * Updating .ci-operator.yaml `build_root_image` from openshift/release [#128](https://github.com/openshift/prometheus-operator/pull/128) * [Full changelog](https://github.com/openshift/prometheus-operator/compare/8f4efab9e7fa34f79a5900d95113f62908889168...)