Back to index
4.13.0-0.okd-scos-2023-03-29-124824 Download installer and client with:
oc adm release extract --tools quay.io/okd/scos-release:4.13.0-0.okd-scos-2023-03-29-124824 Team Approvals:
No tests for this release
Upgrades from:
Loading changelog, this may take a while ...
Created: 2023-03-29 19:19:49 +0000 UTC
Image Digest: sha256:9e31ffa320e60a68a3456b23d0be97de4a667d0d2b74e9ce6db132a7da0d2790
Release 4.13.0-0.okd-scos-2023-03-29-124824 was created from registry.ci.openshift.org/origin/release-scos:4.13.0-0.okd-scos-2023-03-29-124824
Components
New images
Removed images
ovn-kubernetes
ovn-kubernetes-microshift
Rebuilt images without code change
manifests: Add a shebang to NM dispatcher script (#5085) #5085
bminventory: throw Bad Request error on arm64 Nutanix clusters (#4906) #4906
Revert “MGMT-13471: SNO installation with OCP 4.13 lacks proper dnsmasq configuration (#4939)” (#5012) #4939
NO-ISSUE: customize the image path for disk creation (#5010) #5010
MGMT-13445 : Update Assisted Installer with the new LVMS requirements (#4986) #4986 MGMT-12956 : Add feature IDs for ppc64le and s390x (#5008) #5008 add 4.13 multi ec.3 dev preview images (#5005) #5005
NO-ISSUE: Bump gorm.io/gorm from 1.23.8 to 1.24.5 (#5006) #5006
MGMT-13580 : GC orphan hosts (#4997) #4997 Make get_image_without_tag work when registry has a port (#5007) #5007
MGMT-13374 : support Nutanix in kube-api (#4996) #4996 Updating ose-agent-installer-api-server images to be consistent with ART (#4752) #4752
Revert “Increase timeout waiting for image-service (#4871)” (#5001) #4871
Use the correct env var for the hub release image mirror (#4998) #4998
MGMT-12547 : Enhancement doc “api-for-skipping-validations” (#4870) #4870 Add registry config for ironic agent image (#4995) #4995
MGMT-13274 : Update time-synced-between-host-and-service message to remove bad advice (#4994) #4994 MGMT-13521 : Clearer messaging when non-overlapping-subnets validation is pending. (#4993) #4993 MGMT-13204 : Implement skipping of host and cluster validations (#4907) #4907 MGMT-13708 : allow overriding image service image in subscription (#4985) #4985 MGMT-13454 : Group Host and boot logs to a single tarball (#4975) #4975 MGMT-13711 : it takes the assisted-service few minutes to notice that the cluster installation is completed (#4988) #4988 MGMT-13620 : Make worker to use custom MCP if it was set as part of the host DB record (#4976) #4976 MGMT-13549 : Day1 implementation for K8S node labels (#4972) #4972 NO-ISSUE: Add logs to supported-platforms (#4982) #4982
MGMT-13045 : Enhancement document for node labeling (#4826) #4826 MGMT-13682 : Gather host logs on failure in day2 flow (#4983) #4983 MGMT-13292 : Add the installed version of the OLM operators in the monitor operators response (#4961) #4961 MGMT-13471 : SNO installation with OCP 4.13 lacks proper dnsmasq configuration (#4939) #4939 MGMT-13487 : handle day2 cluster authz (#4973) #4973 NO-ISSUE: added ENABLE_ORG_TENANCY to deploy-test target (#4974) #4974
MGMT-11805 : docs/change-iso-password.sh lint (#4971) #4971 Full changelog
Updating ose-agent-installer-csr-approver images to be consistent with ART (#587) #587
NO-ISSUE: controller logs optimizations (#646) #646
NO-ISSUE: Bump golang.org/x/sync (#644) #644
MULTIARCH-3387 : Set boot device to target disk for powervm (#626) #626 MGMT-13710 : assisted-installer-controller hangs for 2 minutes before uploading the ingress CA (#638) #638 NO-ISSUE: Bump golang.org/x/net from 0.5.0 to 0.7.0 (#640) #640
NO-ISSUE: Replace iotil by os and io in order to fix lint issues (#642) #642
NO-ISSUE: Bump openshift/release from golang-1.18 to golang-1.19 (#612) #612
MGMT-13568 : Add pause mcp while setting new role labels (#623) #623 MGMT-13292 : Add the installed version of the OLM operators in the monitor operators response (#622) #622 Remove uninitialized taint from vSphere nodes (#629) #629
Full changelog
OCPBUGS-8695 : vendor agent-installer-utils to v0.0.0-20230310220517-8506fbb6a346 (#518) #518 MGMT-13946 : Ignore Proliant Gen 11 serial (#523) #523 OCPBUGS-8677 : vendor agent-installer-utils to v0.0.0-20230308101916-306b7995977e (#515) #515 OCPBUGS-8390 : vendor agent-installer-utils to v0.0.0-20230307094740-57807526b660 (#512) (#513) #512 AGENT-565 : revendor agent-utils (#508) #508 vendor agent-installer-utils to v0.0.0-20230228190135-5b30a39dadf6 (#506) #506
vendor agent-installer-utils (#505) #505
NO-ISSUE: Bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#504) #504
NO-ISSUE: Bump github.com/coreos/ignition/v2 from 2.14.0 to 2.15.0 (#502) #502
MGMT-13758 : In connectivity check, ARPING checks should not run on nics without valid IPv4 address (#501) #501 Updating ose-agent-installer-node-agent images to be consistent with ART (#469) #469
AGENT-502 : Add agent based installer agent-tui (#482) #482 Make the agent team be the OWNERS of the Dockerfile.ocp file (#498) #498
Add sg3_utils package (#497) #497
NO-ISSUE: Bump github.com/onsi/gomega from 1.26.0 to 1.27.1 (#495) #495
MGMT-13665 : Bring full journal by default in log gather (#492) #492 NO-ISSUE: Bump golang.org/x/sys from 0.4.0 to 0.5.0 (#491) #491
Full changelog
OCPBUGS-10405 : feat: add workload annotation to deployment and daemonset #199 STOR-875 : Implement custom keys in AWS EBS CSI driver operator #185 OCPBUGS-7837 : do not inject-proxy when deploying in hypershift control plane #186 Bump github.com/spf13/cobra from 1.6.0 to 1.6.1 #182
Add ok-to-test label to dependabot PRs #184
Bump k8s.io/klog/v2 from 2.80.1 to 2.90.0 #183
Full changelog
Bug OCPBUGS-7408: UPSTREAM: 1725: Pin k8s.io/dynamic-resource-allocation version #38
Full changelog
OCPBUGS-10773 : bump repo sclorg/s2i-ruby-container location for newapp test #1381 OCPBUGS-10378 : Add microshift into generate-docs #1372 Microshift command docs #1357
Do not set master node selector if there’s no masters #1347
OCPBUGS-7190 : Reuse LDAP connection when performing group sync #1336 Adding CommitDate to the Changelog json output #1348
OCPBUGS-7780 : pkg/cli/admin/upgrade/channel: Use PATCH instead of POST for spec updates #1346 Use registry.k8s.io and update image version #1343
Add icsp file convert command #1238
OWNERS_ALIASES: Update approvers: add David, remove Jack #1340
oc debug: Use own fields instead directly depending on Attach’s #1337
Full changelog
OCPBUGS-10771 : updates: manually requeue when waiting for replicas being ready #181 OCPBUGS-8424 : machine’s node must be ready for CPMS machine to be ready #173 e2e: periodics: remove test with cluster-wide-proxy #170
Update ginkgo to 2.8.1 #169
Update OWNERS #168
Migrate test utils to actuator-pkg repository #159
Full changelog
OCPBUGS-10793 : bugfix in Node Exporter argument setting #1922 OCPBUGS-10476 : turn off netlink mode of netclass collector in Node Exporter. #1919 MON-2973 : test/e2e: Add cleanup func for alertmanager uwm secret test #1907 MON-2693 : Scrape profiles #1785 MON-2959 : test/e2e: Add test for alertmanager secret platform #1899 MON-2904 : add nodeExporter.collectors.buddyinfo settings. #1891 MON-2895 : toggle netlink implementation of netclass collector #1894 MON-2932 : jsonnet/dashboards: add role template variable to node related dashbo… #1879 MON-2900 : add nodeExporter.collectors.netclass settings. #1893 Update jsonnet dependencies #1903
MON-2951 : create Routes only with ingress operator #1885 OCPBUGS-7391 : wait for service CA secrets #1900 Synchronize versions of the downstream components #1902
MON-2973 : pkg/manifests: Allow configuring secrets in alertmanager (UWM) #1884 Synchronize versions of the downstream components #1898
pkg/operator: fix typo in info logs #1896
MON-2901 : add nodeExporter.collectors.netdev settings. #1888 STOR-1154 : Add vSphere topology to telemetry #1886 Add nodeExporter.collectors.tcpstat settings. #1876
Synchronize versions of the downstream components #1887
MON-2959 : Allow configuring secrets in alertmanager (platform) #1882 Full changelog
Fix failing HyperShift presubmits (#578) #578
Add a script to validate upstream TuneD (#577) #577
CNF-5900 : feat: added support for generating workload partitioning files (#431) #431 Re enable node selector tests in update tests (#574) #574
Handle different # of CPUs are in the same MCP (#558) #558
composable OCP: make NTO components optional (#524) #524
Update to TuneD v2.20.0 (#565) #565
Remove trailing spaces from test names (#570) #570
Remove optimization to allow full resync (#567) #567
Report host-level sysctls in conflict with TuneD ones (#566) #566
E2E: Per Core Runtime Tuning Test automation (#509) #509
Add test case to check single rx queue on veth interface (#562) #562
Full changelog
OCPBUGS-8710 : psalabelsyncer: invert the enforce/log logic to default to logging #106 update psa dependency version #103
update controller-manager dependency to point to v0.25.0 #101
Full changelog
OCPBUGS-10221 : pkg/cvo/availableupdates: Prioritize conditional risks for largest target version #912 pkg/cvo: code cleanups #902
OCPBUGS-7419 : Trigger new sync round on ClusterOperator Available changes #904 install/0000_90_cluster-version-operator_02_servicemonitor: Add ClusterReleaseNotAccepted #906
OCPBUGS-6097 : CVO hotloops on ImageStream and logs the information incorrectly #894 OCPBUGS-6292 : Update golang.org/x/net/http2 for CVE-2022-41717 #901 Bug 2090680 : RetrievePayload: Improve timeouts and cover behavior with tests #896 pkg/cvo: Set ‘controller’ in our ownerReferences #900
pkg/cvo/sync_worker: Fix “The sync worker already has a pending notification” formatting #898
vendor: update openshift/api for NodeTuning capability #883
Full changelog
OCPBUGS-10515 : UPSTREAM: 115328: apiserver: annotate early (server not ready) and late (during shutdown) requests #1517 OCPBUGS-8412 : Fix mounted volume expansion tests #1502 OCPBUGS-8308 : Bump to k8s 1.26.2 #1495 AUTH-336 : UPSTREAM: <carry>: PSa metrics: unset ocp_namespace on non-platform n… #1489 Bump to k8s 1.26.1 #1479
OCPBUGS-7267 : add SeccompProfile to Pod and Container accessors/mutators #1490 UPSTREAM: <drop>: OCPBUGS-5991: Kube APIServer panics in admission controller #1488
CNF-5901 : admission hook change for workload partition on all clusters #1312 UPSTREAM: 113799: tests: network: Prefer internal IPs first #1446
UPSTREAM: 115863: Remove global framework variable #1480
UPSTREAM: <carry>: add new approvers #1458
OCPBUGS-7555 : UPSTREAM: <carry>: add default kubelet sysctls within rpm #1475 AUTH-336 : UPSTREAM: <carry>: PSa metrics: log platform namespaces in audit denies #1454 Full changelog
AUTOSCALE-266 : Refactor karpenter-operator and karpenter into v2 components #6187 CNTRLPLANE-201 : feat(shared-ingress): Bump ubi10 out of beta #6200 OCPBUGS-56492 : Fix CatalogSource image check when unauthorized #6192 CNTRLPLANE-931 : update konflux references #6188 NO-JIRA: Add unit test for reconciling components with a WithManifestAdapter for SA #6191
NO-JIRA: Fix serviceaccounts with custom adapter not getting pull-secret #6185
OCPBUGS-56457 : Do not validate OCP API Server SANS if PKI reconciliation is disabled #6171 CNTRLPLANE-905 : feat(shared-ingress): add arm64 builds #6175 CNTRLPLANE-810 : Increase imageContentSources slice length validation #6166 CNTRLPLANE-914 : chore(deps): update konflux references #6165 CNTRLPLANE-905 : Red Hat Konflux update hypershift-shared-ingress-main #6174 CNTRLPLANE-201 : feat(shared-ingress): Add el10 Containerfile #6168 NO-JIRA: Remove ControlPlaneV2 API featuregate #6169
NO-JIRA: Move ControlPlaneComponent CRD installation to the CLI #6167
WRKLDS-1676 : ocm config: Update leaderElection.name #6156 CNTRLPLANE-844 : Refactor CAPI provider/manager into v2 #6159 CNTRLPLANE-844 : Refactor ControlPlaneOperator into v2 component #6148 CNTRLPLANE-844 : Remove DeploymentConfig usage #6157 NO-JIRA: Fix TestHostedClusterWatchesEverythingItCreates not working locally #6149
NO-JIRA: Keep checking for rollouts during upgrade HO test for five minutes #6097
OCPBUGS-56205 : Switch back to rh catalog #6154 OCPBUGS-56164 : Fix HyperShift Operator Enterprise contract konflux pipeline #6138 OCPBUGS-56011 : Configure ClusterServiceLoadBalancerHealthProbeMode a… #6099 CNTRLPLANE-565 : Remove NodePool CapacityReservation API featuregate #6132 CNTRLPLANE-645 : Rename NodeCount flag to Replicas #6094 CNTRLPLANE-844 : Remove unused DeploymentConfig references #6146 NO-JIRA: test/setup: use case-sensitive prometheusK8s in monitoring config #6150
NO-JIRA: Increase the content width in the upstream docs #6147
NO-JIRA: cpov2: fix structured authentication configuration serialization #6135
CNTRLPLANE-269 : Remove legacy machine approver and ign server reconciliation code #6133 OCPBUGS-55913 : Fix Job status returning empty reason and message #6134 CNTRLPLANE-269 : Remove DeploymentConfig usage from cpov2 #5724 OCPBUGS-37323 : MarkPersistentFlagRequired does not work since CLI refactoring #5649 NO-JIRA: Fix minor issues with Azure HC creation doc #6128
OCPBUGS-55504 : Add postStart hook to kube-apiserver container #6074 CNTRLPLANE-709 : Add ability to limit platform specific resources managed by HostedCluster #6039 CNTRLPLANE-261 : Enable pprof in hosted control plane etcd #6003 CNTRLPLANE-334 : Update KASv2 structured authentication configuration #6119 CNTRLPLANE-334 : Update KAS structured authentication configuration generation logic to use new uid and extra field #6073 OCPBUGS-54483 : Add support for registry root entry only in the IDMS/ICSP #6100 OCPBUGS-55357 : Only build main branch components #6078 CNTRLPLANE-265 : Enable staticcheck linter in golangci-lint #5836 CNTRLPLANE-740 : Add DR for HCP using OADP and Hypershift plugin #6077 NO-JIRA: bump HO supported version to 4.20 #6006
CNTRLPLANE-798 : ho: changes to ref’ed resources triggers HC reconciliation #6103 HYPBLD-642 : konflux build hcp cli #6072 OCPBUGS-53206 : Use a CPO image label to determine whether to run expired cert remediation #5943 OCPBUGS-55433 : Add control plane pull secret reference to control-plane-operator SA #6092 OCPBUGS-44439 : Add proxy trustedCA to ignition config #6053 OCPBUGS-53082 : Skip AWS cleanup check for 4.14 and earlier #6069 HOSTEDCP-2254 : Fix Karpenter deployment restarting #6009 NO-JIRA: Add e2e flags to test Azure KMS #6076
CNTRLPLANE-111 : Support KMSv2 encryption encryption for ARO HCP, with MIv3 #6048 NO-JIRA: Azure AKS Docs Updated to set Secrets in Key Vault #5754
CNTRLPLANE-713 : Pass featuregates for ocm and oapi in cpov2 #6071 HOSTEDCP-2059 : Support capacity reservation in NodePool API #5972 NO-JIRA: Fix hostedcluster_controller unit test for featuregate job #6067
CNTRLPLANE-713 : Pass featuregates to ocm and oapi #6068 CNTRLPLANE-713 : Use feature flags from release payload for control plane workloads #6060 CNTRLPLANE-711 : transition admissionregistration from v1beta1 to v1 #6005 AUTOSCALE-127 : fix e2e autonode drift test #6062 CNTRLPLANE-112 : Enable MIv3 for Ingress #6058 NO-JIRA: Remove kas from EnsureNoCrashingPods exceptions #5946
OCPBUGS-54863 : Add annotation to configure KAS goaway-chance #6019 AUTOSCALE-193 : Use payload karpenter image if present, otherwise don’t #6029 NO-JIRA: Red Hat Konflux update hypershift-release-mce-29 #6056
NO-JIRA: Add cpo container sync to verify job #6051
OCPBUGS-54867 : Use 135 for terminationGracePeriodSeconds for v2 KAS #6021 OCPBUGS-54810 : Don’t check if olm images exist if guest cluster #5982 OCPBUGS-54819 : Update OpenShift apiserver liveness and readiness probe endpoints to … #6016 NO-JIRA: Add README.md to docs folder #6050
NO-JIRA: version check csi-snapshot-webhook for EnsureSATokenNotMountedUnlessNecessary #6043
OCPBUGS-54225 : Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #5897 NO-JIRA: Improve API docs for configuration.Image #6034
Revert “Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure”” #6012
OCPBUGS-54533 : Update DNS names for ovn-kubernetes cp metrics #6007 OCPBUGS-54763 : openstack/cli: only set port security when specified #6036 NO-JIRA: Bump o/api version to 4.19 tag #6035
OCPBUGS-54916 : Set Azure KMS Configuration to v2 #6027 OCPBUGS-54309 : Drop isIP CEL check #6032 AUTOSCALE-127 : allow karpenter-provider-aws image to be overriden by hcp annotation #5999 CNTRLPLANE-217 : Add E2E to KubeAPIServerDNSName API to cover KAS custom certificate #5968 STOR-2281 : Remove snapshot webhook #6004 OCPBUGS-54763 : openstack: set port security only if explicitly specified #6015 OCPBUGS-52661 : KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #5798 NO-JIRA: Bump CAPZ to v1.19.2 #6018
NO-JIRA: update konflux references #5987
OCPBUGS-48540 : Mcd proxy #6011 AUTOSCALE-44 : add autonode karpenter drift hcp upgrade e2e test #5870 OCPBUGS-54602 : Set KAS GOMEMLIMIT node label to what OSDFM expects #5975 NO-JIRA: Add polling for kas-bootstrap kas network requests #5990
OCPBUGS-53261 : Add validation to avoid conflicts between KubeAPI server and NamedCertificates SANs #5875 OCPBUGS-41853 : Add documentation for API Server custom certificate in HCP #6001 OCPBUGS-54178 : Add missing servicemonitors and prometheusrules permissions for non-OVN #5893 ARO-15695 : test/e2e: run EnsureImageRegistryCapabilityDisabled on 4.18 #5984 NO-JIRA: Add OWNERS to kas-bootstrap #5991
CNTRLPLANE-233 : Add –kas-dns-name CLI flag to consume KubeAPIServerDNSName API #5969 CNTRLPLANE-334 : openshift/api dependency bumps #5971 NO-JIRA: Enable ppc64le builds #5985
OSASINFRA-3732 : openstack: Sync CA cert to new key #5702 chore(deps): update golang docker tag to v1.24 #5616
OCPBUGS-54431 : Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5942 NO-JIRA: Sync labels between CPO and RHTAP CPO dockerfile #5966
OCPBUGS-52983 : Add check for expected conditions before running NodePool tests #5970 NO-JIRA: test/e2e: output pod name on EnsureHCPPodsAffinitiesAndTolerations failure #5967
OCPBUGS-13292 : Add functionality to limit CAPI CRD installation on HO installation #5949 OCPBUGS-54439 : Change KASGoMemLimit to a string pointer type #5965 NO-JIRA: Red Hat Konflux update hypershift-operator-main #5974
NO-JIRA: Add doc on SecretProviderClass for managed Azure #5892
OCPBUGS-50562 : Sync RBAC for attaching volumes on VM level #5831 CNTRLPLANE-303 : [CPOv2 Refactor] Refactor ignition into cpov2 #5868 NO-JIRA: Create token Secret for dev cluster explicitly #5523
OCPBUGS-52984 : annotate AWSEndpointServices with HostedClusterAnnotation #5960 OCPBUGS-53403 : Remove synced annotations from HCP when they are removed from HC #5879 NO-JIRA: set default expriationDate tag in AWS if not set #5951
NO-JIRA: chore: Remove Azure autorest dependency #5917
CNTRLPLANE-378 : Run kas-bootstrap binary for cpov2 #5947 NO-JIRA: Add version check for CAPI flag #5911
ARO-15578 : add disable cluster capabilities flag to cluster create cmd #5775 NO-JIRA: chore: Bump CAPZ to v1.19.1 #5916
CNTRLPLANE-378 : Move bootstrap apply bash into kas-bootstrap binary #5937 NO-JIRA: Disabling flaking EnsureKubeAPIDNSName E2E test #5939
NO-JIRA: Remove ppc64le from HO tekton files #5924
CNTRLPLANE-366 : Create Azure role assignments in the Azure HC CLI #5896 OCPBUGS-53904 : bump golang-jwt v4 and v5 #5904 CNTRLPLANE-350 : add NodePool minor version compatibility check #5873 NO-JIRA: fix(api): Adjust CRD validation rules to account for ignition server … #5782
ART-11792 : update go mod dependency for konflux #5918 CNTRLPLANE-112 : Enable MIv3 for azure file csi driver #5915 NO-JIRA: Revert “OCPBUGS-50915: Disable capi machineset preflights” #5910
CNTRLPLANE-112 : Fix CNCC RG Permissions & RBAC #5903 NO-JIRA: Remove TODO comment for AzureProviderConfig #5838
OCPBUGS-46379 : Kas bootstrap bin #5871 CNTRLPLANE-111 : Enable MIv3 for CAPZ #5825 ARO-15229 : add e2e tests for image registry capability #5810 CNTRLPLANE-336 : [CPOv2 Refactor] Refactor konnectivity-agent into cpov2 #5856 OCPBUGS-50915 : Disable capi machineset preflights #5653 CNTRLPLANE-111 : Authenticate to Azure only once in CPO #5862 OCPBUGS-52190 : Add konnectivity-proxy sidecar to openshift-oauth-apiserver #5876 NO-JIRA: Make serve-containerised in docs not defaulting to a running Docker container when Podman is installed #5859
OCPBUGS-53263 : Fixed cpov2 reconciliation making no-op calls to api-server #5861 OCPBUGS-53462 : Check for availability of individual catalog images #5881 NO-JIRA: Improve error output msg for Azure CLI role cmds #5877
STOR-2281 : Remove csi-snapshot-validation-webhook #5776 CNTRLPLANE-111 : Fix KMS Azure credentials mount path #5857 CNTRLPLANE-348 : Konflux tagged releases #5869 OCPBUGS-53407 : chore(deps): update konflux references #5846 NO-JIRA: feat(builds): Add area labels and OWNERS #5872
OCPBUGS-52424 : Set shutdown watch termination grace period on kube-apiserver #5760 NO-JIRA: Add Azure scheduler doc to mkdocs #5865
CNTRLPLANE-342 : Add missing area for support #5864 OCPBUGS-53050 : Handle multiple mirror entries for source #5827 OCPBUGS-52331 : CPO v2: rollout workloads on any changes to mounted configmaps/secrets #5767 NO-JIRA: openstack: revert OpenStackImageRetentionPolicy + use a unique image name per Hosted Cluster #5853
Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure” #5860
OCPBUGS-53083 : e2e: detect leader election failure in restarted pods #5830 CNTRLPLANE-112 : Enable MIv3 for CNO/CNCC on managed Azure #5837 METAL-1240 : Fix kube-controller-manager and openshift-route-controller-manager services’ ipFamilies wrt PreferDualStack policy #5829 OSASINFRA-3492 : feat(openstack): leverage ORC to manage the release image #5139 CNTRLPLANE-325 : rootless containerized builds #5835 CNTRLPLANE-265 : Enable gosimple, govet, and errcheck in golangci-lint #5759 CNTRLPLANE-111 : Fix Azure KMS SecretProviderClass volume name #5820 NO-JIRA: Bump msi-dataplane dependency #5796
OCPBUGS-52985 : filter watch events for HO AWSEndpointService reconciler #5818 NO-JIRA: Update Konflux references #5799
ARO-14354 , ARO-14355 , ARO-14356 : introduce image registry capability behind feature gate #5456 OCPBUGS-52819 : CPO Overrides for OCPBUGS-48519 #5808 PODAUTO-324 : PODAUTO-325: Allow autonode to run upstream karpenter core e2e tests #5680 OCPBUGS-51364 : fix oc patch command on doc #5807 NO-JIRA: Fix-dependabot-bumps #5797
OCPBUGS-52655 : Add flag to set etcd storage size #5795 CNTRLPLANE-111 : Fix KMS MIv3 Issues #5793 NO-JIRA: Disable GitHub Actions #5812
OCPBUGS-52821 : stop using dev mode for loggers #5801 HOSTEDCP-2237 : Auto approve Karpenter serving CSRs #5708 OLS-1370 : Add full aws permission list and point to it from “getting started” #5746 NO-JIRA: CPOv2 token-minter abstraction #5769
NO-JIRA: test/e2e: skip WaitForImageRollout in executeNodePoolTest on newer releases #5778
OCPBUGS-52323 : Make managed-trust-bundle optional #5763 CNV-57648 : document how to configure descheduler #5779 NO-JIRA: Remove WI step for cluster-image-registry-operator #5777
OTA-1405 : Add the ClusterVersionOperator API #5569 OCPBUGS-52419 : e2e: don’t call WaitForImageRollout in executeNodePoolTest #5771 OCPBUGS-50518 : Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5475 CNTRLPLANE-263 : Remove unused CAPZ CRDs from HyperShift install #5756 NO-JIRA: speed up image builds #5766
NO-JIRA: go.mod updates from Konflux #5761
OSASINFRA-3733 : (follow-up) deploy ORC on release payload >= 4.19 #5749 OCPBUGS-52223 : refactor aws identity health check into new controller #5751 OCPBUGS-50523 : Fix audit-logs container to properly handle SIGTERM #5491 NO-JIRA: Remove issues-exit flag for golangci-lint #5762
CNTRLPLANE-111 : Enable MIv3 for CP/CCM in managed Azure HCP #5755 NO-JIRA: Add CPO container sync check to GitHub Actions #5753
OCPBUGS-52226 , OCPBUGS-52227 : CVE Fix for potential denial of service in upstream libs #5750 NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 #5719
HOSTEDCP-2242 : [CPOv2 Refactor] Refactor image-registry-operator #5676 NO-JIRA: chore(deps): update konflux references #5527 #5747
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5424
OCPBUGS-51364 : Remove scaledown APIs from Backup/Restore procedure #5745 CNTRLPLANE-244 : Enable initial GitHub Action jobs #5706 OCPBUGS-49825 : use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5551 OSASINFRA-3733 : deploy ORC on release payload >= 4.19 #5710 CNTRLPLANE-112 : Enable MIv3 for azure disk csi driver #5703 HOSTEDCP-2262 : Karpenter openshift ec2class #5600 NO-JIRA: chore(owners): Update IBM reviewers #5717
CNTRLPLANE-111 : Enable MIv3 for Azure KMS #5704 NO-JIRA: doc: openstack: update go version #5716
CNTRLPLANE-112 : Enable image registry to use managed identity v3 #5655 HOSTEDCP-2246 : [CPOv2 Refactor] Refactor OLM #5663 HOSTEDCP-2247 : [CPOv2 Refactor] Refactor control-plane-pki-operator #5694 OCPBUGS-51007 : test/e2e: fix WaitForImageRollout to actually wait on upgrade case #5679 NO-JIRA: Bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.5 #5700
OCPBUGS-50907 : Propagate Reason for Available condition from HCP to HC #5650 NO-JIRA: Reenable ibm network cel #5698
NO-JIRA: ho: watch AWSEndpointServices #5674
NO-JIRA: test/e2e: use test name for HC name #5665
OSASINFRA-3719 : openstack: ORC deployed out of tree #5584 CNTRLPLANE-35 : skip EnsureValidatingAdmissionPoliciesExists/EnsureVal… #5672 NO-JIRA: Update-precommit-docs #5678
HOSTEDCP-2248 : [CPOv2 Refactor] Refactor snapshotcontroller #5632 OCPBUGS-50860 : Skip hashing configuration.image.imageStreamImportMode #5651 NO-JIRA: Add omitempty to CredentialsSecretName #5656
OCPBUGS-51039 : return marshalled dataplane even if assignprincipals is false #5610 HOSTEDCP-2241 : [CPOv2 Refactor] Refactor ingress operator #5602 CNTRLPLANE-220 : Update “Create an Azure Hosted Cluster on AKS” docs #5652 CNTRLPLANE-238 : Bump k8s to v1.32.2 and CAPZ to v1.18.0 #5623 NO-JIRA: Fix hc hcp cel inconsistency #5661
NO-JIRA: add secretproviderclass to dump #5654
OCPBUGS-50606 : Fix kubeadmin login failure #5631 NO-JIRA: bump Cluster API Provider OpenStack to v0.12 (for 4.19 only) #5622
NO-JIRA: update hypershift azure roles to use ids #5657
CNTRLPLANE-112 : Add UserAssignedIdentityCredentials environment variable for OpenShift operators #5621 NO-JIRA: CPOv2 refactor self service sa kubeconfig #5607
CNTRLPLANE-111 : Move CPO to use UserAssignedIdentityCredentials #5596 HOSTEDCP-2244 : Refactor machine approver into cpov2 #5594 OCPBUGS-50578 : add region to AWS creds passed to operators managed by CPO #5595 OCPBUGS-50014 : Restart HCP on stale serving certs #5601 NO-JIRA: Remove ARO HCP Managed Identity Tech Preview #5604
HOSTEDCP-2171 : add e2e test for aro scheduler #5568 NO-JIRA: Bump Golang to 1.23 #5466
NO-JIRA: Ensure ‘pull-secret’ is set properly on v2 serviceAccounts #5609
NO-JIRA: Bump to CAPI v1.9, CAPA v2.7 #5611
HOSTEDCP-2255 : e2e: ensure custom tolerations on all HCP pods #5543 HOSTEDCP-2243 : Refactor dns operator into cpov2 #5593 PODAUTO-318 : Implement HCP karpenter deletion #5540 NO-ISSUE: docs/content/how-to/disaster-recovery/etcd-recovery: Explicitly delegate to admin #5515
NO-JIRA: Bump the golang-dependencies group with 2 updates #5582
PODAUTO-302 : Relax cel rule for karpenter role to be required in an ec2NodeClass #5581 NO-JIRA: Remove haproxy generation error for normal flow #5583
OCPBUGS-49913 : Honor proxy vars in the util insecure http client #5572 CNTRLPLANE-221 : specify region in AWS credentials for operator-roles #5571 NO-JIRA: e2e: combine OpenStack advanced tests within one Nodepool #5579
OCPBUGS-49609 : Split binary builds #5499 NO-JIRA: Apply additional labels to CollectProfilesCronJob #5580
HOSTEDCP-2231 : Remove cloud connection, Set Transit Gateway as default #5293 CNTRLPLANE-209 : Add shared-ingress docs #5564 HOSTEDCP-2257 : Vendor karpenter CRDs #5522 ARO-14442 : introduce capabilities api #5554 NO-JIRA: add optional step for creating release image using cluster b… #5578
CNTRLPLANE-109 : Update Azure API for Phase 3 Managed Identity Work #5556 NO-JIRA: add watch permission to SecretProviderClass in ARO #5565
NO-JIRA: Update cpov2 docs #5560
NO-JIRA: e2e: don’t skip mirrorconfigs on OSP #5441
OCPBUGS-49791 : Use /livez for kubernetes scheduler liveness probe #5546 CNTRLPLANE-111 : Move secretproviderclass.go to support folder #5559 OCPBUGS-49838 : Watch NodePools in HostedCluster controller #5553 HOSTEDCP-2120 : Enable EnsureCustomLabels e2e test #5549 OCPBUGS-49724 : remove passed in image matching desired image check fr… #5524 OCPBUGS-48619 : Add HostedCluster additional trustbundles to konnectivity-https-proxy #5525 HOSTEDCP-2040 : Add TestCreateClusterCustomConfigV2 #5401 OCPBUGS-49748 : Duplicate hostDevices.name when hostDevices.deviceName has multiple types. #5535 OCPBUGS-49804 : Revert “HOSTEDCP-2120: Enable EnsureCustomLabels e2e test” #5547 HOSTEDCP-2259 : CLI: enable secure proxy creation #5526 CNTRLPLANE-172 : cli: azure: allow assigning custom HCP roles #5541 OCPBUGS-49686 : Add ObjectEncoding to the Azure API and SecretProviderClass Reconciliation in the CPO #5505 NO-JIRA: Bump github.com/Azure/go-autorest/autorest from 0.11.29 to 0.11.30 in the azure-github-dependencies group #5518
HOSTEDCP-2120 : Enable EnsureCustomLabels e2e test #5511 OCPBUGS-48688 : Remove Credentials from the Azure API #5510 HOSTEDCP-2249 : Reconcile karpenter user-data secret programmatically instead of creating a mock nodePool #5439 NO-JIRA: Bump the misc-dependencies group with 6 updates #5519
MON-4129 : adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #5508 OCPBUGS-49611 : Konnectivity: add agent readiness #4829 NO-JIRA: cpov2: switch to resource.k8s.io/v1beta1 after kube 1.32 rebase #5514
HOSTEDCP-2226 : Add ValidatingAdmissionPolicy for karpenter EC2NodeClass CRD #5395 HOSTEDCP-2256 : [CPO Refactor] Delete component and its resources when predicate changes to false #5509 HOSTEDCP-2245 : [CPO Refactor] Refactor cluster-node-tuning-operator #5473 NO-JIRA: add assignServicePrincipal check before assignign roles to WI #5498
HOSTEDCP-1706 : feat: add a metric for cluster size override annotation #4825 NO-JIRA: Add instructions for ccoctl and fix minor issues #5490
OCPBUGS-48688 : Add Tenant ID to Azure API & Remove Credentials from CPO #5495 OCPBUGS-48519 : fix overwriting PKI operator HCP conditions #5493 HOSTEDCP-2169 : Add aro scheduler #5417 OCPBUGS-48532 : Fix IsProgressing condition in HostedClusters #5487 NO-JIRA: switch to resource.k8s.io/v1beta1 after kube 1.32 rebase #5496
CNTRLPLANE-187 : Remove MachineIdentityID from Azure HyperShift API #5488 OCPBUGS-49370 : openstack: update CAPI provider deployment spec #5483 NO-JIRA: Fix a few bugs in Azure Upstream Docs #5489
NO-JIRA: chore(deps): update konflux references (main) #5476
NO-JIRA: Update managed Azure/ARO HCP contrib and upstream documents #5474
HOSTEDCP-2061 : [CPO Refactor] Refactor cluster-network-operator #5460 OCPBUGS-48626 : openstack: add DNS option to CLI #5446 NO-JIRA: Bump google.golang.org/grpc from 1.69.4 to 1.70.0 in the misc-dependencies group #5472
NO-JIRA: Sync v2 code #5467
CNTRLPLANE-173 : Assign known ARO roles for CP IDs for ARO HCP #5469 NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.5.0 to 1.6.0 in the azure-github-dependencies group #5471
PODAUTO-303 : Re enable karpenter e2e #5462 OCPBUGS-48688 : Remove client secret references now Workload Identity is supported #5455 OCPBUGS-48794 : Adds contributor role over VNET for Cloud Provider #5468 HOSTEDCP-2232 : Destroy DHCP Server before PowerVS Cloud Instance deletion #5227 NO-JIRA: [kubevirt] Skip KubeVirtAdvancedMultinetTest for v4.14 and below #5449
NO-JIRA: Remove OpenStack workaround for Ingress Floating IP #5176
OCPBUGS-48758 : Revert #5404 “PODAUTO-303: Add the most basic e2e for autoNode via Karpenter” #5461 HOSTEDCP-2176 : Enable unused & ineffassign linters in golangci-lint #5418 OCPBUGS-48708 : correct aro azureFile config and permissions #5453 NO-JIRA: add command for retrieving user account id for AKS dev env s… #5436
PODAUTO-303 : Add the most basic e2e for autoNode via Karpenter #5404 NO-JIRA: Bump the misc-dependencies group with 8 updates #5450
HOSTEDCP-1542 : Implement Workload Identity in Azure for Data Plane Components Part 4 #5361 HOSTEDCP-2062 : [CPO Refactor] Refactor kubevirt csi driver #5447 NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity #5440
HOSTEDCP-1971 : HyperShift operator upgrade test for rollout validation #4999 NO-JIRA: Update Konflux references #5423
Revert “Revert “CNTRLPLANE-26: Disable building HO for s390x platform on PR”” #5422
OCPBUGS-48510 : Allow ARM64 arch deployment on None platform type #5403 NO-JIRA: Fix dev docs for managed azure #5411
NO-JIRA: Drop openstack create rejection validation #5410
HOSTEDCP-1542 : Implement Workload Identity in Azure for Data Plane Components Part 3 #4587 NO-JIRA: Add GOWORK=off to clients in Makefile #5421
OCPBUGS-45511 : Compare contents of user-ca-bundle-config.yaml to the correct configmap #5420 NO-JIRA: doc/openstack: improve index layout #5412
AUTH-482 : set required-scc for openshift workloads #5310 OCPBUGS-48506 : Set ownership annotations for TLS artifacts #5355 NO-JIRA: add information about checking HO and e2e are from main on latest release branch #5419
CNTRLPLANE-129 : Move Microsoft Repo to CI dir in e2e dockerfile #5416 Revert “CNTRLPLANE-26: Disable building HO for s390x platform on PR” #5406
NO-JIRA: chore(deps): update konflux references (main) #5383
OCPBUGS-44960 : (OSASINFRA-3643) bump k8s and dependencies #4927 NO-JIRA: Bump github.com/go-git/go-git/v5 from 5.12.0 to 5.13.0 in /hack/tools #5400
NO-JIRA: Bump golang.org/x/net from 0.31.0 to 0.33.0 in /hack/tools #5399
NO-JIRA: test/e2e: move pre-removal metrics validation out teardown path #5234
NO-JIRA: Add make lint-fix to pre-commit hook #5387
NO-JIRA: Enforce EnsurePSANotPrivileged for 4.19 and later #5362
NO-JIRA: Update Create Azure HC document #5396
OCPBUGS-48216 : use rm -f in all CVO cmds for idempotency #5390 NO-JIRA: Bump the golang-dependencies and github.com/Azure/azure-sdk-for-go/sdk/azcore #5373
HOSTEDCP-2233 : [CPO Refactor] Refactor cluster-storage-operator #5312 NO-JIRA: docs/nit: fix missing spaces in md breaking rendered html #5392
OSASINFRA-3670 : doc/openstack: etcd on LVM #5391 NO-JIRA: cmd: dump: include ValidatingAdmissionPolicies in guest cluster dump #5165
HOSTEDCP-1542 : Introduce e2e flags for Workload Identity #5363 NO-JIRA: e2e: don’t check the KV’s LiveMigratable condition for <4.17 #5389
OCPBUGS-48152 : Fix mirror reference image name when ID is set #5353 OSASINFRA-3681 : improve the doc on OpenStack #5243 Revert “OCPBUGS-45265: Use /livez/ping endpoint rather than /version” #5381
NO-JIRA: test/e2e: improve VAP test assertions #5375
OCPBUGS-45265 : Use /livez/ping endpoint rather than /version #5211 NO-JIRA: Reoncile karpenter aws creds before running the operator #5360
NO-JIRA: Bump golang.org/x/crypto and golang.org/x/net #5357
HOSTEDCP-2176 : Introduce golangci-lint to make verify and only turn on gci linter #5322 CNTRLPLANE-68 : add flags for setting azure marketplace images in e2e #5356 HOSTEDCP-2234 : Karpenter auto machine approver #5349 OCPBUGS-47715 : fix disconnected via CLI #5341 chore(deps): update dependency mkdocs-material to v9.5.49 #5247
NO-JIRA: Move oauth kubeadminsecret hash annotation logic from HCCO to CPO #5286
HOSTEDCP-2199 : [CPO Refactor] Refactor cloud-credential-operator #5203 NO-JIRA: Update Konflux references (main) #5325
OCPBUGS-46354 : fix(ho): Add all supported config schemas for NodePool NTO reconcile #5280 NO-JIRA: Revert E2E test change which validates the CVO Image propagation #5323
NO-JIRA: Fix oauth-v2 and kcm-v2 #5306
CNTRLPLANE-26 : Disable building HO for s390x platform on PR #5314 OCPBUGS-46529 : kubevirt, Don’t break on hostname NodePort.Address #5313 CNTRLPLANE-25 : Fix valid release image update issue #5316 OCPBUGS-46483 : Correctly Reconcile CSO CSI Secrets for Managed Azure Deployments #5311 OCPBUGS-43083 , OCPBUGS-44655 : Fix IPv6 Disconnected HCP deployments #5168 HOSTEDCP-2220 : Autonode karpenter #5279 CNTRLPLANE-10 : Konflux build CPO only when needed #5287 NO-JIRA: Only use public IPs for 4.16 and above #5304
OSASINFRA-3685 : openstack: tag CAPI resources with InfraID #5262 STOR-2136 : Give delete permissions to snapshot-operator role #5277 NO-JIRA: chore(deps): update konflux references (main) #5288
NO-JIRA: set diskStorageAccountType in aks e2e #5273
CNTRLPLANE-9 : Red Hat Konflux update control-plane-operator-main #5282 OCPBUGS-44314 : Consistently look up and dial cloud API hostnames #5281 OCPBUGS-45595 : Updating ose-hypershift-container image to be consistent with ART for 4.19 #5272 NO-JIRA: test/e2e: detect rapidly updating deployments #5229
OCPBUGS-45322 : consolidating upgradingConfig/Version nodepool status update from CAPI controller to Conditions controller #5222 OCPBUGS-46342 : Allow ARM64 arch deployment on Agent platform #5276 OCPBUGS-44438 : Remove non-matching feature-gated CVO manifests from payload #5093 NO-JIRA: Fix expected AWS HC conditions during e2e tests #5266
NO-JIRA: Allow multiple yaml def in a file for pre-commit #5271
HOSTEDCP-2203 : Create e2e clusters with public IP instances only #5269 NO-JIRA: Fix spelling mistakes from PR #5265 #5270
HOSTEDCP-2215 : Expand pre-commit hooks to check on commit and push #5245 HOSTEDCP-2203 : Add support for public only AWS clusters #5242 NO-JIRA: contrib: update route53 zone cleaning utility #5265
NO-JIRA: Fix pre-commit hook issues #5264
HOSTEDCP-2193 : documenting –managed-identities-file flag #5199 NO-JIRA: Update Konflux References and Perform Migration #5260
HOSTEDCP-2206 : Improve Unit Test Runtime #5257 OCPBUGS-42320 : Prevent IgnitionServer from flooding the API server with patch requests #5220 NO-JIRA: Remove SP creation/deletion in the HyperShift CLI #5240
NO-JIRA: Relax networking cel validation for IBMCloud #5258
NO-JIRA: openstack/e2e: allow to change AZ name #5138
OCPBUGS-42338 : Update KCM node monitor grace period #5166 NO-JIRA: e2e: followup cleanup for OpenStack Manila #5221
HOSTEDCP-2181 : bump base images in dockerfiles to 4.19 #5195 HOSTEDCP-1958 : Integrate codespell in Makefile #4700 OCPBUGS-44236 : Use system trust bundle in CPO IDP https client #5241 HOSTEDCP-2204 : adding contributor role to nodepoolManagement SP #5244 HOSTEDCP-2201 : add DNS RG to contributor role assignments and add new flag for skipping role assignments #5230 NO-JIRA: openstack/doc: add a requirement for Octavia #5223
NO-JIRA: updating ocp release task notes #5239
OCPBUGS-44967 : Pass only the certificate name for CNO deployment #5216 OCPBUGS-45182 , OCPBUGS-45189 : e2e/openstack: adjustments for missing manila apps & pods #5202 OCPBUGS-42434 : Enable Managed Identity w/ Certificates in HyperShift Control Plane Components #5160 HOSTEDCP-2197 : Fix TLS config documentation for disconnected #5212 NO-JIRA: cpov2: revert oauth reconciliation #5217
OCPBUGS-44968 : Reconcile SecretProvider for CSO on ARO HCP #4904 NO-JIRA: chore(deps): update konflux references (main) #5205
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.5.46 (main) #5206
HOSTEDCP-2193 : allow reuse of SP for e2e #5194 OCPBUGS-44380 : Reconcile proxy CA bundle into hosted cluster #5197 HOSTEDCP-2075 : Dns cel e2e #5171 OCPBUGS-44934 : Fix error message when kas is route and hostname is not set #5192 NO-JIRA: CPO V2 cleanup #5188
HOSTEDCP-2075 : Nodeport address cel #5172 OCPBUGS-44967 : Reconcile SecretProvider for CNCC on ARO HCP #4903 OCPBUGS-44910 : openstack: don’t reconcile image registry config during bootstrap #5178 OCPBUGS-44957 : Use fleet manager configmaps to determine placeholder pod node antiaffinity #5191 OCPBUGS-44698 : Create AWS clients on every reconcile instead of at initialization #5179 OCPBUGS-44964 : Reconcile SecretProviderClass for Ingress on ARO HCP #4884 OCPBUGS-44929 : e2e: fix manila CSI operator #5186 OCPBUGS-44326 : Separate CPO containerfiles #5177 HOSTEDCP-2181 : update latest supported version for 4.19 branching #5146 NO-JIRA: chore(deps): update konflux references (main) #5180
NO-JIRA: chore(deps): update dependency mkdocs-mermaid2-plugin to v1.2.1 (main) #5185
NO-JIRA: chore(deps): update dependency mkdocs to v1.6.1 (main) #5181
HOSTEDCP-2187 : [CPO Refactor] Refactor cluster-policy-controller #5170 HOSTEDCP-2178 : Add CLI flag to support shared vpc private zones in cluster account #5127 HOSTEDCP-2183 : [CPO Refactor] Refactor hcp-router #5157 NO-JIRA: bump nodepoolConfigUpdate start timeout to 1min to reduce flakes #5152
HOSTEDCP-2166 : Add ability to set Labels on HCP Pods #5114 HOSTEDCP-2022 : Reconcile SecretProviderClass for Image Registry on ARO HCP #4888 OSASINFRA-3644 : openstack: allow to pre-define a floating IP for Ingress router-default #4835 OSASINFRA-3639 : Enable cluster-storage-operator for OpenStack Manila #4988 NO-JIRA: Disable ASOAPI feature gate for CAPz #5167
OSASINFRA-3636 : Enable cluster-storage-operator for OpenStack Cinder #4936 NO-JIRA: chore(deps): update konflux references (main) #5153
HOSTEDCP-2182 : Sync main and api go module vendoring to fix go workspaces #5156 NO-JIRA: Relax cel 4.16 #5155
OCPBUGS-41365 : use controlplaneCLI image in CNO init containers #5089 HOSTEDCP-2177 : [CPO Refactor] Refactor cluster-version-operator #5125 OCPBUGS-44689 : skip np image validation when skipReleaseImageValidation annotation is present on HC #5149 HOSTEDCP-2173 : [CPO Refactor] Refactor oauth-server #5104 NO-JIRA: Fix unit tests #5150
OCPBUGS-44568 : update diskStorageAccountType consts #5124 chore(deps): update konflux references (main) #5134
NO-JIRA: remove out of date releas notes #5147
OCPBUGS-44476 : Use ingress role in private link controller for DNS operations #5126 HOSTEDCP-2075 : Hostedcluster api validation #5090 NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.4.1 to 1.5.0 in the azure-github-dependencies group #5131
NO-JIRA: Bump golang.org/x/net from 0.30.0 to 0.31.0 in the golang-dependencies group #5132
chore(deps): update konflux references (main) #5117
NO-JIRA: e2e: skip OSP multinet before 4.18 #5123
HOSTEDCP-1542 : Add developer instructions on how to setup workload identity on Azure #5128 OCPBUGS-44041 : add –skip-service-principal-deletion flag #5107 OCPBUGS-44504 : doc, fix kubevirt –attach-default-network opt #5115 OCPBUGS-44473 : Add openshift to the groups of system:hosted-cluster-config #5111 chore(deps): update konflux references (main) #5108
NO-JIRA: docs: minor fix for OpenStack #5116
NO-JIRA: docs/openstack: clarify CLI #5103
OSASINFRA-3565 : openstack: additional ports #4515 OCPBUGS-44336 : add missing comment in v2 openstack ccm #5084 OCPBUGS-44041 : add flags for passing in ManageIdentities on Azure HC … #5092 OCPBUGS-44375 : openstack: make external network ID really optional #5091 HOSTEDCP-2077 : [CPO Refactor] Refactor kube-scheduler #5083 HOSTEDCP-2063 : [CPO Refactor] Refactor openshift-oauth-apiserver #5071 CNF-14742 : HCCO: copy KubeletConfigs to hosted-cluster #4833 OCPBUGS-44413 : add missing assets and RBAC for OpenStack with newer CAPO #5095 NO-JIRA: improve OpenStack documentation #5066
NO-JIRA: Fix Spec retrieval from infra for PowerVS platform #5063
NO-JIRA: Change globalConfigString to drop empty imageStreamImportMode #4942
NO-JIRA: Update Konflux references (main) #5097
NO-JIRA: Bump the golang-dependencies group with 3 updates #5087
NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys from 1.2.0 to 1.3.0 in the azure-github-dependencies group #5086
HOSTEDCP-2070 : add az cli to e2e dockerfile #5081 chore(deps): update konflux references (main) #5080
OCM-12313 : expose NodeStartupTimeout in MHC as annotation in HC/NP #5049 HOSTEDCP-2063 : [CPO Refactor] Refactor openshift-apiserver #5065 NO-JIRA: Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 #5039
NO-JIRA: remove namespace wide node check on nodepool specific tests #5027
HOSTEDCP-2073 : Review NodePool API validations and doc #5046 OCPBUGS-44163 : Configure OAuth https proxy to dial cloud endpoints directly #5057 HOSTEDCP-1826 : Remove API wording on setting AzureDiskPersistence to a default value of Persistent #5051 NO-JIRA: Update Konflux references #5052
OCPBUGS-44221 : remove hard dependcy on kubeconfig for hypershift CLI #5045 HOSTEDCP-2072 : [CPO Refactor] Refactor openshift-controller-manager #5035 NO-JIRA: Add API promotion criteria #5050
OCPBUGS-42422 : Fix order rendering HCP objects #5038 HOSTEDCP-2000 : Add E2E test validating the node runtime #4945 Update Konflux references #5008
HOSTEDCP-2070 : add e2e flags for controlling AKS keyvault name and te… #5032 HOSTEDCP-2067 : [CPO Refactor] Refactor cloud-controller-manager #5007 NO-JIRA: Add rpms-signature-scan task #5036
HOSTEDCP-1989 : Prevent kubevirt from removing valid machine config condition #4991 OCPBUGS-43883 : openstack: bump CAPO to v0.11.0 #4990 OCPBUGS-43943 : add retry timeout to nodepoolUpgradeTest #4996 NO-JIRA: cmd: add support to configure machine networts via CLI #4287
OSASINFRA-3623 : openstack: Only upload required cloud credentials #4848 OCPBUGS-36387 : resource group not found should not prevent azure infr… #5015 OCPBUGS-43985 : failure to retrieve techPreview CM in azure cli should… #5014 NO-JIRA: Document how to disable kubevirt csi #4967
OCPBUGS-44001 : handle errors returned by createServicePrincipalWithCe… #5001 OCPBUGS-41365 : use appropriate images to avoid overrides in dataplane #4791 HOSTEDCP-2055 : [CPO Refactor] Refactor kube-controller-manager #4986 HOSTEDCP-2046 : Parametrize Control Plane Dockerfile #4995 OCPBUGS-42434 : Update Azure CLI to Handle Authenticating with Service Principal Backed by Certificates #4877 HOSTEDCP-2057 : [CPO Refactor] Refactor ETCD #4987 HOSTEDCP-1826 : review Azure API #4963 ARO-11084 : Helm chart generator #4872 NO-JIRA: Move left over conditions funcs into their own file #4989
HOSTEDCP-967 : Drop alpha api and conversion #4977 NO-JIRA: Bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys from 1.1.0 to 1.2.0 in the azure-github-dependencies group #4982
HOSTEDCP-1989 : Move NTO reconcile logic into their own file #4962 NO-JIRA: chore(deps): update konflux references (main) #4968
HOSTEDCP-2054 : [CPO Refactor] Refactor kube-apiserver #4941 NO-JIRA: Add API label #4984
OCPBUGS-43756 : update eventuallyDaemonSetRollsOut to only watch ready… #4973 NO-JIRA: Make api module dependencies consistent with main module dependencies #4978
NO-JIRA: Update azure and AKS upstream docs #4966
OCPBUGS-43707 : Add crd override for NodePool scale subresource #4970 NO-JIRA: doc/openstack: install operator with --tech-preview-no-upgrade #4976
OCPBUGS-38357 : openstack: add option to configure nodepool AZ #4531 HOSTEDCP-1994 : Add generic create function for SecretProvider #4960 OCPBUGS-43698 : dump: make ControlPlaneComponent’s GKV optional #4965 HOSTEDCP-1472 : update TestNodePoolPrevRelease tests to use RFC 1123 nodepool name #4950 HOSTEDCP-1883 : Remove hardcoded catalog images in CPO #4612 NO-JIRA: chore(deps): update konflux references #4952
HOSTEDCP-2002 : fix typo in doc commands #4951 HOSTEDCP-2018 : Reorder Nodepool conditions #4859 NO-JIRA: chore(deps): update capz to v1.17.0 #4808
OCPBUGS-38132 : cpo: produce valid oauth config even if idp config is invalid #4955 OCPBUGS-42434 : Add Managed Identity Support in Azure HC API behind AROHCPManagedIdentities Feature gate #4811 NO-JIRA: Bump the azure-github-dependencies group with 2 updates #4938
NO-JIRA: Split API into platform files #4944
NO-JIRA: KubeVirt CSI Security and Isolation Documentation #4937
NO-JIRA: chore(deps): update konflux references (main) #4930
HOSTEDCP-2002 : Add documentation around crun migration for HCP #4912 HOSTEDCP-1994 : Pass Azure Key Vault’s Managed Identity’s Client ID to HO and CPO Deployments #4926 HOSTEDCP-2040 : Add README.md for ControlPlaneComponent #4915 HOSTEDCP-2040 : [CPO Refactor] Refactor HCCO #4860 HOSTEDCP-1773 : Feature gates openshift markers #4918 OCPBUGS-43448 : Pass feature flags to clusterpolicy controller #4925 NO-JIRA: chore(deps): update konflux references #4920
HOSTEDCP-1472 : add CP with n-2 NP test #4911 OCPBUGS-38132 : add ValidIDPConfiguration condition to report IDP config issues #4852 HOSTEDCP-2028 : e2e: use TechPreviewNoUpgrade feature set in TestCreateCluster #4902 OCPBUGS-43087 : openstack/e2e: re-work nodepool tests #4868 NO-JIRA: Bump the golang-dependencies group with 3 updates #4891
HOSTEDCP-1801 : [CPO Refactor] Introduced ControlPlaneComponent CRD #4839 NO-JIRA: chore(deps): update konflux references (main) #4892
NO-JIRA: e2e: rename file to avoid IDE errors #4901
HOSTEDCP-2026 : Add support for static control plane operator overrides #4889 HOSTEDCP-1994 : Add Secrets Store CSI RBAC Policies for HO and CPO #4878 NO-JIRA: statically link CLI binaries #4871
HOSTEDCP-2025 : Allow setting the VPC CIDR when creating AWS infrastructure #4866 HOSTEDCP-1994 : Remove infra create MI for Azure NP #4874 OCPBUGS-43064 : move resource.k8s.io to v1alpha3 for kube 1.31 #4887 NO-JIRA: cli: add feature-set flag to create cluster #4886
NO-JIRA: Enforce EnsurePSANotPrivileged for 4.18 and later #4875
HOSTEDCP-1994 : Create separate secrets for Azure disk and file #4861 NO-JIRA: switch to using ptr instead of pointer #4856
HOSTEDCP-2009 : change from NumberOfProbes to ProbeThreshold #4863 OCPBUGS-42873 : Do not send traffic to local audit-webhook through konnectivity #4864 OCPBUGS-42783 : Use guest DNS resolution in Konnectivity HTTPS proxy by default #4858 CNV-39662 : Document HCP KubeVirt GPU device usage #4844 NO-JIRA: Fixes kubevirt image cacher #4847
OCPBUGS-42579 : Add network policies for konnectivity server and ignition server proxy #4840 NO-JIRA: chore(deps): update konflux references to cf9edf8 (main) #4849
OCPBUGS-39369 : Add TokenMinter container and RBAC for the CNO #4765 HOSTEDCP-1930 : Add AWS Shared VPC support #4814 NO-JIRA: disable ensurePSANotPrivileged test on <4.17 #4842
OSASINFRA-3623 : openstack: Auto-discover clouds.yaml #4837 OCPBUGS-42100 : Run 2 replicas of active/passive HA components #4738 HOSTEDCP-1801 : [CPO Refactor] Introduced an abstraction for CP Components #4708 NO-JIRA: e2e: skip ValidKubeVirtInfraNetworkMTU condition check on 4.14 and ea… #4836
NO-JIRA: Fix recover-etcd cmd marking a missing flag required #4826
HOSTEDCP-1815 : feat(ignition): Add option to disable ignition server reconciliation #4417 CNV-48479 : Add documentation for KubeVirt hosted cluster backup and restore #4804 chore(deps): update konflux references (main) #4818
HOSTEDCP-1976 : Nodepool controller cleanup #4823 OCPBUGS-42306 : hash additionalTrustBundle as part of ignition config … #4775 NO-JIRA: Bump the azure-github-dependencies group with 2 updates #4819
HOSTEDCP-1788 : use getResourceGroupName for infra deletion in azure so destroy infra can be ran without –resource-group-name #4809 HOSTEDCP-1984 : Refactor capi logic out from NodePool controller #4795 NO-JIRA: e2e: openstack: fix nil deref in route53 teardown #4803
OCPBUGS-42433 : Retry reconciliation with invalid configuration #4802 NO-JIRA: clarify use of render and render-sensitive cli flags #4797
HOSTEDCP-1569 : add dockerfile for e2e #4800 OTA-1349 : *: Propagate RetrievedUpdates from ClusterVersion up to HostedCluster #4744 NO-JIRA: e2e: add service and cluster CIDRs as flags to the e2e framework #4782
HOSTEDCP-1732 : add PDB to sharedIngress router pod #4596 HOSTEDCP-1788 : Create seperate RGs for NSG and VNet #4282 NO-JIRA: chore(deps): update konflux references to 5ac9b24 (main) #4779
NO-JIRA: Add Dockerfile.dev to build all-in-one container image for development purposes #4776
NO-JIRA: chore(deps): update konflux references (main) #4771
NO-JIRA: Fix docker check ‘AS’ as uppercase in container and docker files #4772
NO-JIRA: chore(deps): update konflux references #4756
NO-JIRA: cmd/dump: add OpenStack CAPI resources #4768
HOSTEDCP-1966 : wrap nodePool tenancy API field in Placement struct #4731 NO-JIRA: repo cleanup #4755
NO-JIRA: Remove hack for CI in 4.11 release #4745
NO-JIRA: remove CPO/CPPKIO from the hypershift-operator image build #4754
HOSTEDCP-1442 : Split worker and vpc endpoint security groups #4742 OCPBUGS-32592 : Add Annotation to skip deleting hcp namespace #4741 HOSTEDCP-1569 : e2e: add version gating for 4.14 #4743 OCPBUGS-41824 : Conditionally manage kubeconfig secrets for DNS and Ingress operators #4709 OCPBUGS-42107 : Allow the control plane operator to finish deleting VPC endpoint for PrivateLink clusters #4740 OCPBUGS-41992 : Sanitize ignition payload #4735 HOSTEDCP-1968 : Refactor nodepool token management #4734 NO-JIRA: Add ddcache entry into gitignore #4730
HOSTEDCP-1569 : e2e: add version gating for 4.15 #4732 NO-JIRA: Bump the azure-github-dependencies group with 4 updates #4713
chore(deps): update konflux references #4725
HOSTEDCP-1678 : Refactor config generation for NodePool #4717 HOSTEDCP-1965 : Ignore vendor and resources.go from snyk code test #4722 OCPBUGS-41935 : Sanitize the IgnitionPayload (XSS) #4723 NO-JIRA: Add log for ignition provider using mirrored release image #4720
OCPBUGS-39039 : Add EncryptionAtHost to create azure cluster CLI #4711 HOSTEDCP-1569 : e2e: add version gating for 4.16 #4712 ARO-10259 : add install render option to write manifests to file #4703 OCPBUGS-38425 : Return the right tagReference on Catalogs ImageStream #4707 HOSTEDCP-1569 : e2e: add version gating for 4.17 #4704 OCPBUGS-39039 : Allow Encryption at Host to be Independently Toggled from DiskEncryptionSetID #4701 HOSTEDCP-1942 : Add functional tests for Etcd Recovery #4668 OCPBUGS-39123 : Add external kas address to no proxy skip list #4693 HOSTEDCP-1940 : Add alert for Etcd recovery #4679 OCPBUGS-41328 : Use KubeClientCABundle for HostedClusterConfigOperator cluster-signer-ca #4676 OCPBUGS-39420 : Let payload generation pick the release for the NodePool #4686 NO-JIRA: Bump the golang-dependencies group with 4 updates #4675
OCPBUGS-38349 : CPO oauth idp converter: resolve names before dialing #4516 NO-JIRA: docs: add diagram to konnectivity reference #4674
OCPBUGS-41120 : Updating ose-hypershift-container image to be consistent with ART for 4.18 #4672 OCPBUGS-37052 : Use http dialer when dialing through proxy #4671 HOSTEDCP-1850 : HyperShift operator: Allow setting Kube APIServer maximum requests inflight #4554 OSASINFRA-3584 : openstack: remove support for floating IP #4669 CNV-45889 : Add –labels hcp cli arg for adding labels to HostedCluster #4451 NO-JIRA: Bump github.com/opencontainers/runc from 1.1.12 to 1.1.14 #4663
OCPBUGS-33628 : Add oauth domain for kas cert #4670 OCPBUGS-39525 : Fix uses of MustParse* on non-constant input #4546 OCPBUGS-24400 : Reconcile over an ETCD failing member #4503 OCPBUGS-39396 : Fix multi-arch validation by prioritizing ReleaseImage check #4660 chore(deps): update konflux references (main) #4652
OCPBUGS-38794 : handle version skewed NodePools that do not have rhel9 binaries #4656 NO-JIRA: Bump gotest.tools/gotestsum from 1.11.0 to 1.12.0 in /hack/tools in the misc-dependencies group #4641
HOSTEDCP-1939 : Trigger SharedIngress reconciliation immediately on start #4650 NO-JIRA: Konflux migration #4649
HOSTEDCP-1767 : chore: organize install command for readability #4643 NO-JIRA: custom tolerations docs #4639
OSASINFRA-3573 : openstack: when using floating IP, don’t create a dedicated service for Ingress #4589 OSASINFRA-3572 : e2e/openstack: handle DNS for ingress using route53 #4586 OCPBUGS-38921 : Set Image as mutable and trigger upgrades on Azure NodePool spec changes #4606 HOSTEDCP-1933 : Expose AWS Tenancy through NodePool API #4635 OCPBUGS-39147 : regroup KAS certs into public and private certs #4632 OCPBUGS-39078 : e2e: skip VAP checks if platform is None #4629 OCPBUGS-39001 : Fix CAPA ROSA feature gate being set on releases where its not available #4619 OCPBUGS-38474 : copy image-registry AdditionalTrustedCA configmap into HC openshift-config #4621 OCPBUGS-38878 : allow changes to infrastructures global config for Openstack #4609 OCPBUGS-38936 : Fixed NodePool version validation #4608 OCPBUGS-38709 : Join default HTTPS port to Spec.Configuration.Proxy.HTTPSProxy if missing #4603 NO-JIRA: fix a typo in the architecture doc #4610
OCPBUGS-38755 : Remove go workspaces from source control #4582 OCPBUGS-38925 : copy oapi ca-trust recursively when building trust anchor #4605 OCPBUGS-38183 : Update CSO deployment file #4542 HOSTEDCP-1483 : update cloud-credential-operator in go.mod #4532 OCPBUGS-36680 : ensure additionalTrustBundle propogates to workers #4331 NO-JIRA: add 4.14 and 4.15 HO base images to docker cve scan scripts #4591
OCPBUGS-38739 : [Azure] Use infraID from infra-json if provided #4579 chore(deps): update konflux references #4568
chore(deps): update golang docker tag to v1.23 #4569
OCPBUGS-38463 : nodepoolcontroller: List() PerformanceProfile status per NodePool #4556 HOSTEDCP-1565 : external-dns: add proxy env vars if cluster proxy is configured #4580 NO-JIRA: [kubevirt] Fix KubeVirtNodesLiveMigratable condition for NodePools with 0 replicas #4494
HOSTEDCP-1861 : cpo: separate KAS cert into internal and external #4566 OCPBUGS-34816 : Block data plane HC configuration requests #4303 HOSTEDCP-1868 : Pause CAPI cluster when HostedCluster is paused #4578 OCPBUGS-38409 : Update CPO and HO base images to 4.18 #4543 HOSTEDCP-1903 : Remove unused ROSA/EKS CRDs from hypershift install #4576 NO-JIRA: add docker script to find package versions in HO & CPO #4537
CONSOLE-3952 : Add networking-console-plugin image to CNO as an env var #4558 NO-JIRA: fix(KONFLUX-3663): format PipelineRun files and upload SAST results #4533
OCPBUGS-36261 : label routes when using SharedIngress #4562 OCPBUGS-37052 : HTTPS proxy: do not proxy communication to cloud providers #4560 OSASINFRA-3567 : openstack: fix setting external DNS on create #4517 OCPBUGS-38154 : Fix bug where nodes were not triggering dedicated serving reconciliation #4563 OSASINFRA-3553 : relax PodAffinityTerm for zone spreading in HA #4513 OCPBUGS-38467 : allow for shared-ingress router pod creation without p… #4557 NO-JIRA: Fix CEL rules in the CRD #4512
HOSTEDCP-1475 : Remove hard-coded konnectivity agenty image URI #4548 HOSTEDCP-1609 : Support configuring Azure diagnostics via CLI flags #4529 OCPBUGS-38437 : Stop building mce-2.7 from main #4549 OCPBUGS-36261 : label routes only when HCP router used #4495 HOSTEDCP-1707 : Update version support and upgrade docs #4347 HOSTEDCP-1874 : Remove saas_template.yaml #4521 NO-JIRA: Bump LatestSupportedVersion to 4.18.0 after branch-out #4530
chore(deps): update konflux references (main) #4522
chore(deps): update quay.io/openshift/origin-base docker tag to v4.16 (main) #4526
NO-JIRA: Update golang Docker tag to v1.22 (main) #4523
CNV-42532 : KubeVirt: add label to DataVolume #4509 OCPBUGS-38183 : make use of azure-disk-driver-control-plane-image #4514 OSASINFRA-3546 : docs/openstack: fix typo #4510 OCPBUGS-25937 : Support KMS v2 on AWS #4502 OSASINFRA-3555 : openstack: e2e adjustments #4492 HOSTEDCP-1776 : Set KCM node monitor grace period #4404 HOSTEDCP-1853 : Add Arm NodePool Support Through Azure Marketplace #4455 OCPBUGS-38041 : test: e2e: handle 409 conflict in EnsureHostedClusterImmutability #4493 HOSTEDCP-1850 : Allow setting Kube APIServer maximum requests in flight #4488 OSASINFRA-3550 : openstack: ingress API & octavia ingress provider #4474 OCPBUGS-37488 : CSO: add environment variable for tools image #4483 NO-JIRA: Update Konflux 4.17 and perform migration #4486
NO-JIRA: Update Konflux and perform migration #4485
OSASINFRA-3554 : OpenStack: Use external network ID in favor of Name #4477 OCPBUGS-37934 : Reverting ETCD cluster rebuild #4475 OCPBUGS-37052 : Use konnectivity HTTP proxy for ingress controller #4456 HOSTEDCP-1669 : Add first azure services validation #4466 NO-JIRA: Remove non relevant OVNSbDb service type declarations #4465
HOSTEDCP-1565 : add VPC Endpoint Service proxy support #4470 OCPBUGS-37832 : set proxy envvars on aws and azure CCMs #4468 HOSTEDCP-1851 : Use a multi-arch haproxy image for shared ingress #4454 HOSTEDCP-1669 : Make hostedcluster.spec.services immutable for non IBM platforms #4449 NO-JIRA: Ensure VolumeSnapshots are deleted during cloud resource cleanup #4306
OCPBUGS-37753 : Let the CPO oidc check resolve through data plane #4273 NO-JIRA: Update IBM go sdk #4435
NO-JIRA: Flaky cert validation test #4448
CNF-12681 : Added support for performance profile status #4020 HOSTEDCP-1778 : Default multi-arch flag to true and default release stream for HCP CLI #4447 OCPBUGS-36932 : Add HTTP konnectivity proxy to OAuth server #4381 OSASINFRA-3550 : docs/openstack: adds content for Ingress with MetalLB #4439 OCPBUGS-37703 : fix release stream flag/rhcos image for create cluste… #4445 CNV-32074 : Add Kubevirt live-migratable condition for HC and NP #4361 OCPBUGS-37698 : mce-2.7 enablement for main #4442 OCPBUGS-36689 : Omit the unused 0000_50_olm_06-psm-operator.service.ya… #4348 OSASINFRA-3546 : openstack: document how to create a cluster #4414 NO-JIRA: chore(deps): update konflux references (main) #4426
HOSTEDCP-1798 : Update AWS multi-arch docs to include migration #4421 OCPBUGS-37625 : DedicatedRequestServing scheduler: make taken labels list consistent #4425 OCPBUGS-37486 : Set right endpointSlice port #4422 OCPBUGS-24400 : Only recreate etcd if hasn’t ever been ready #4419 OSASINFRA-3319 : implements required OpenStack credentials #4410 HOSTEDCP-1791 : dont render any secrets in manifest file #4420 HOSTEDCP-1798 : Refactor multi-arch validation algorithm #4405 OSASINFRA-3538 : openstack: small fixes for CLI #4415 OCPBUGS-34820 : Keep in sync the HC and HCP ICS field #4412 HOSTEDCP-1813 : Moves MachineIdentity from the HostedCluster API to the NodePool API #4408 HOSTEDCP-1791 : dont render cloud-credentials secret #4406 OSASINFRA-3312 : Implements OpenStack Node pools #4409 OSASINFRA-3539 : Add ipam to cluster-api assets #4399 OSASINFRA-3538 : openstack: cluster CLI #4396 HOSTEDCP-1838 : Migrate buildah config in tekton files for migration from 0.1 to 0.2 #4403 HOSTEDCP-1836 : Fix Snyk vulnerability with python deps #4394 OCPBUGS-36897 : fix(api): Nodepool CEL validation fix #4378 OSASINFRA-3311 : openstack: CAPO provider deployment #4373 OCPBUGS-37222 : extract rhel9 MCO binaries for rhel8 based MCO images #4382 HOSTEDCP-1834 : Fix Dependabot Issue By Updating Azure RHCOS Image Copy Process #4379 OCPBUGS-37102 : Separate ibmcloud kms encryption configuration types #4372 NO-JIRA: Fix OADP backup objects #4376
HOSTEDCP-1832 : Document konnectivity in HyperShift #4374 CNV-39630 : Add ability to set tolerations on the HostedCluster #4339 OSASINFRA-3525 : Initial PR to start supporting OpenStack platform #4350 CNF-11845 : nodepoolcontroller: mirror containerruntimeconfig to HCP NS #4150 HOSTEDCP-1795 , HOSTEDCP-1796 : Customize the self-generated cert validity and rotation #4335 OCPBUGS-34816 : Fix the resource from is checking the MHC platform #4365 HOSTEDCP-1820 : Add snyk helper scripts to contrib #4359 NO-JIRA: Update Konflux references #4362
OCPBUGS-35899 : Doubled machineHealthCheck timeout on Agent and None #4345 OCPBUGS-24400 : Recreate the ETCD statefulSet on HostedCluster deployment when stays failing #4354 OCPBUGS-35905 : E2E test to verify openshift-apiserver TLS certificates #4322 OSASINFRA-3310 : Adds cluster-api-provider-openstack assets #4355 HOSTEDCP-1734 , HOSTEDCP-1737 : use proxy-protocol-v2 for shared ingress #4330 NO-JIRA: Let cmd unit tests run without a running Kubernetes cluster #4310
NO-JIRA: Default azure to run as managed-service=aro #4316
OCPBUGS-34865 : Fix name resolution for HTTPS konnectivity proxy #4351 NO-JIRA: add ignition payload inspect docs #4346
OCPBUGS-33934 : Add newline after TLS certs referenced by image.config #4343 NO-JIRA: Update catalog annotation based on an OCP version #4344
HOSTEDCP-1818 : fix(build): update to the fixed clamav image #4342 OCPBUGS-36681 : Set Azure VM identity if user assigned identity set #4332 HOSTEDCP-1716 : When running the HO locally it should no required a running pod #4268 CNF-12951 : hypershift:performanceprofile: associate profile name with user input #4108 NO-JIRA: Add net policy to allow ingress from sharedingress namespace #4336
OCPBUGS-34865 : Add HTTP(s) konnectivity proxy for openshift-apiserver #4218 OCPBUGS-34820 : Delete IDMS in dataplane once HCP ICS field is removed #4333 NO-JIRA: KubeVirtJsonPatchTest: fix vmi slice assignment #4319
NO-JIRA: Update ci image of capk to 4.17 #4183
NO-JIRA: Dump capz azure resources #4329
NO-JIRA: Remove Steve Kuznetsov from approvers/owners #4334
NO-JIRA: Update Konflux references #4324
NO-JIRA: Update AKS contrib docs #4314
HOSTEDCP-1808 : Update Mkdocs, dependencies and dockerfile #4323 NO-JIRA: Dump sharedingress manifest #4321
NO-JIRA: Enhance aks docs #4311
NO-JIRA: e2e tests: skip checking ValidKubeVirtInfraNetworkMTU if no workers #4313
Revert “HOSTEDCP-1778: Enable MultiArch flag by default” #4312
NO-JIRA: skip validate metrics on azure e2e #4305
NO-JIRA: skip multiarch test before HC creation #4292
OCPBUGS-30986 : remove weak ciphers from security profile #4294 NO-JIRA: Add release notes to commit and print proper output when release errors #4304
HOSTEDCP-1778 : Enable MultiArch flag by default #4272 CNV-39589 : [Kubevirt] Add support for passing GPU devices to NodePools #4101 NO-JIRA: chore(deps): update squidfunk/mkdocs-material docker tag to v8.5.11 - abandoned #4300
NO-JIRA: chore(deps): update konflux references #4297
OCPBUGS-23922 : hcco: reconcile apiserver config into hosted cluster #4278 OCPBUGS-36230 : Use a reconciled proxy config when generating nodepool userdata #4277 OCPBUGS-35521 : Move infra-volumesnapshot-class-mapping to core binding #4290 OCPBUGS-33060 : enable audit log for oauth-openshift #3994 NO-JIRA: test/e2e: remove api budget checks #4286
NO-JIRA: fixup azure aks docs #4293
NO-JIRA: Update HC on AKS doc for new flags for infra #4274
HOSTEDCP-1342 : Add new metrics to check CA bundle validity and expiry [OSD-15414] #3442 NO-JIRA: cmd/cluster/kubevirt: add a test from dvossel #4220
HOSTEDCP-1709 , HOSTEDCP-1777 : test/e2e: complete move to eventually blocks #4263 OCPBUGS-36188 : kubevirt-csi-driver: Pass infra kubeconfig in case of external infra #4271 OCPBUGS-31840 : Make guest cluster components use the correct KAS port #3849 HOSTEDCP-1447 : test/e2e: tar.gz hosted cluster content #4256 Update Konflux references #4258
OCPBUGS-35979 : Keep old user data for aws < 4.16 #4269 NO-JIRA: Fix the getting started page by adding export to BUCKET_NAME #4207
HOSTEDCP-1221 : add heterogenous NP e2e #4005 OCPBUGS-35874 : check mgmt cluster for route capability before DeleteIfNeeded for ovn sbdb route #4254 HOSTEDCP-1709 : test/e2e: actually wait for guest cluster client #4262 NO-JIRA: OWNERS: add stevekuznetsov #4255
HOSTEDCP-1709 : test/e2e: use the eventually abstraction in chaos test #4247 HOSTEDCP-1709 : test/e2e: updates to the eventually construct #4253 HOSTEDCP-1684 : remove CLI requirement for RG flag when NSG ID is supp… #4232 CNV-30445 : KubeVirt: Enable multiqueue by default #4221 NO-JIRA: chore(deps): update konflux references #4249
HOSTEDCP-1729 : Support for on-demand global routing when creating transit gateway #4081 NO-JIRA: test/e2e: reduce logging for ssh and oc adm inspect #4242
NO-JIRA: test/e2e: reduce logging on guest cluster infra cleanup #4239
NO-JIRA: remove CI_TESTS_RUNS from e2e script as we now directly pass… #4226
OCPBUGS-35450 : Remove KMS V1 provider support for IBM Cloud #4215 NO-JIRA: chore(deps): update konflux references to ff44cf3 #4244
HOSTEDCP-1709 : test/e2e: add a harness for asynchronous assertions #4206 NO-JIRA: test: e2e: bump CPO mutate budget #4237
OCPBUGS-34544 : Disable PersistentVolumeLabel admission plugin #4107 NO-JIRA: Shared ingress tests #4229
NO-JIRA: Bump golang.org/x/net from 0.20.0 to 0.23.0 in /contrib/aws-tag-lb-service-webhook #3914
NO-JIRA: chore(deps): update konflux references to 2be7c9c (main) #4222
NO-JIRA: Revert “kubevirt, e2e: Skip advanced multinet for CI” #4203
OCPBUGS-35513 : cluster/core: fix nodepool naming #4219 OCPBUGS-33428 : Complete KAS migration to none endpoint reconciler type #4133 CNV-42626 : Transition kubevirt vms to use topology spread constraints #4145 NO-JIRA: Fix tests to avoid race conditions #4214
HOSTEDCP-1542 : cmd: use validated and completed opts pattern #4212 NO-JIRA: feat(olm): Set packageserver replicas to 2 for IBMCloudPlatform #4184
NO-JIRA: Added markdown for storage table support #4213
HOSTEDCP-1542 : Fixed infra-id not being defaulted first #4210 HOSTEDCP-1721 : Enable shared ingress for Azure #4188 HOSTEDCP-1542 : cmd/cluster: refactor to remove example fixtures #4018 HOSTEDCP-1402 : cmd/infra/aws/destroy: allow using component credentials #3975 HOSTEDCP-1446 : hack: remove old arguments and scripts #4186 OCPBUGS-34650 : Allow specifying the volume detach timeout for machines via NodePools #4136 HOSTEDCP-1709 : test/e2e: misc context fixes: #4172 IR-471 : registry operator: Add missing env var, wait for rbac #4123 HOSTEDCP-1514 : support Azure diagnostics on NodePools #3970 OCPBUGS-34807 : Fixed ValidReleaseInfo condition #4129 OCPBUGS-33951 : Documentation for disconnected MGMT Cluster #4182 kubevirt, e2e: Skip advanced multinet for CI #4187
OCPBUGS-35205 : Add hypershift-cluster-version-operator image to release providers #4138 chore(deps): update konflux references #4165
HOSTEDCP-1446 : hack: make the e2e script generic #4176 NO-JIRA: Delete references to the openshift-sdn image in CNO #4164
HOSTEDCP-1709 : test/e2e: always bound assertions in time #4170 HOSTEDCP-1712 : Initialize infra id for e2e-azure tests #4163 OCPBUGS-34274 : Generate default worker security group rules based on machineCIDR #4085 NO-JIRA: test/e2e: remove dead code #4171
HOSTEDCP-1709 : hack/test: remove timeouts #4169 OCPBUGS-34987 : Add missing Tag permissions to cli role #4166 HOSTEDCP-1553 : Add annotation to customize log verbosity of kube-apiserver #4026 HOSTEDCP-1689 : add PodMonitor for external-dns #4147 OCPBUGS-33953 : Document how ICSP/IDMS work in HCP #4098 OCPBUGS-33952 : Documented HCP service exposure #4086 NO-JIRA: Dependabot updates #4152
HOSTEDCP-1709 : test/e2e: constrain actions to context, timeout #4142 HOSTEDCP-1709 : e2e/util: improve logging during node readiness poll #4153 OCPBUGS-34607 : Disable machine pool feature gate #4109 HOSTEDCP-1694 : Automate HO Deployment Tag & Commit Updates for ROSA HCP #4102 OCPBUGS-32467 : nodepool_controller: add a reconciler for cleanup #3969 OCPBUGS-34699 : Allow access to root-ca configmap in cluster-network-operator role #4122 HOSTEDCP-1542 : cmd: add an option to render into a file, use it in e2e #4036 OCPBUGS-33724 : Fixes update issue with KubeVirt platform #4039 HOSTEDCP-1564 : Ensure VNET, NSG, & Managed RG locations match #4071 HOSTEDCP-1687 : Allow arm64 baremetal nodes to a nodepool in a multi-arch cluster #4060 NO-JIRA: test/e2e: don’t validate metrics after failure #4143
OCPBUGS-32186 : cmd: report server version, supported OCP #3987 NO-JIRA: Add link to agent heterogeneous nodepools doc #4135
OCPBUGS-34734 : Fix disconnected metadata inspection for nodepool #4130 HOSTEDCP-1697 : Allow overriding hosted cluster size label #4121 OCPBUGS-18711 : add AWS STS URL to OIDC provider audiences #4094 HOSTEDCP-1558 : use openshift/api instead of thirdparty for machineconfig #3983 OCPBUGS-34741 : Fix fleet manager pair label check #4132 HOSTEDCP-1683 : Use go workspaces #3980 OCPBUGS-31568 : Prevent hypershift install render –template and –outputs from being used together #3824 NO-JIRA: chore(deps): update rhtap references #4118
NO-JIRA: Update RHTAP references #4113
HOSTEDCP-1688 : Use operator namespace for openshift-config-managed-trusted-ca-bundle #4088 HOSTEDCP-1570 : remove liveness and readiness probes using metrics endpoint #4001 OCPBUGS-33987 : Use configmaps to track hosted cluster pair labels and set controller concurrency #4103 MULTIARCH-4668 : Add how to doc for heterogeneous node pools on Agent platform #3991 OCPBUGS-34540 : Fix RegistryMirrorProvider modifying the cached image directly #4100 TRT-1685 : bump openshift/api #4095 OCPBUGS-33428 : Reconcile KAS endpoints and endpoint slice #3942 OCPBUGS-33181 : Fixed audit-logs sigterm failing to terminate gracefully #3972 OCPBUGS-31446 : Add TrustedBundles to OAS container #4031 NO-JIRA: Align kv min version to the default min version (now that default is >= 4.14 #4083
OCPBUGS-30986 : remove weak cipher #3855 OCPBUGS-34071 : Do not scale down legacy nodes #4076 NO-JIRA: test: relax mgmt KAS egress check #4082
HOSTEDCP-1681 : Skip konflux when not necessary #4080 OCPBUGS-33977 : Allow specifying machine health check timeout in cluster sizing config #4075 OCPBUGS-34095 : Sync the autoscaler periodically #4074 OCPBUGS-25758 : fix router on 4.14 y-stream upgrade #4033 NO-JIRA: Reinstate wrongly removed fields from cert rotation objects #4070
OCPBUGS-34019 : Make active & backup Azure KMS containers use different –metrics-addr #4066 OCPBUGS-33742 : setting higher priority class for external-dns pods #4050 OCPBUGS-32257 : Fix userReleaseProvider not using icsp/idms from mgmt cluster #4043 CNF-12792 : nto: add configmaps/finalizers under operator Role #3992 CNV-40881 : kubevirt, e2e, add test for advanced multinet #3902 OCPBUGS-33377 : Modify token secret MCS hash in place #4057 chore(deps): update rhtap references #4063
HOSTEDCP-1556 : Support Priority based expander for cluster-autoscaler #4029 NO-JIRA: Bump library-go dependency and bump LatestSupportedVersion to 4.17.0 #4044
OCPBUGS-33726 : Remove service-ca annotation from azure csi & file controller metrics services #4035 OCPBUGS-33802 : don’t delay new cluster creation #4045 TRT-1672 : e2e: proceed with teardown even if dump fails #4051 OCPBUGS-33659 : Improve resliency of size tagging when hostedcluster KAS down #4034 NO-JIRA: Update RHTAP references #4042
OCPBUGS-33729 : Do not ignore single placeholder pods for a specific hosted cluster #4037 HOSTEDCP-1668 : remove dns-operator leader-elect flags #4038 OCPBUGS-33595 : Cluster sizing controller: do not error on not found HC #4023 HOSTEDCP-1655 : Don’t Ignore SubnetID and Network Security Group ID flags when values are passed through #4021 HOSTEDCP-1518 : Preserve container resource requests and limits #3864 HOSTEDCP-1310 : use kms images from payload #3996 OCPBUGS-32257 : Restrict image registry overrides to control plane components #3952 HOSTEDCP-1560 : Create AWS STS Role for the hypershift/hcp cli #4003 HOSTEDCP-1566 : Bump Azure SDK, IBM, AWS, ectd, & gomega dependencies #4012 HOSTEDCP-1566 : Bump CAPI dependencies #4011 OCPBUGS-33320 : Fix nil dereference in clustersizingconfig validation #4016 HOSTEDCP-1525 : Fixed azure using incorrect kms socket #3981 HOSTEDCP-1563 : Refine the Azure API in the NodePool Spec #4004 OCPBUGS-33320 : Autoscaler for non request serving nodes #4007 HOSTEDCP-1557 : Allow the NSG ID to drive the NSG Resource Group for the Azure Cloud Provider Config #4006 NO-JIRA: Remove CLI inspection of release image #3548
OCPBUGS-33237 : Run haproxy to connect to kas from data plane if noproxy settings contain kas #3999 OCPBUGS-26762 : Disable DNS resolving for CNO #3986 MULTIARCH-4637 : Set arch to ppc64le within PowerVS platform func #4002 MULTIARCH-4637 : Support ppc64le arch for Agent and PowerVS platform #3979 HOSTEDCP-1544 : Allow user to specify subnet ID for Hosted Cluster & NodePool Creation #3945 CNV-36073 : Set time out for external snapshotter on kubevirt csi driver #3968 HOSTEDCP-1523 : Bump k8s to v0.29.3 #3878 OCPBUGS-25012 : Updating ose-hypershift-container image to be consistent with ART #3303 OCPBUGS-33203 , OCPBUGS-33274 : Autoscaler: scale down unused machinesets #3988 NO-JIRA: chore(deps): update rhtap references #3973
HOSTEDCP-1513 : Add operator scoping support to nodepool controller #3928 OCPBUGS-33132 : Restore ingresscontroller rbac #3965 NO-JIRA: sizing: add logging for what we’re doing #3961
chore(deps): update rhtap references #3966
NO-JIRA: Minor doc updates to creating Azure HC on AKS #3964
OCPBUGS-29110 : Reconcile over ICSP/IDMS #3933 OCPBUGS-33101 : Fix nil pointer deref when effects not specified in CSC #3959 OCPBUGS-32110 : disable OCM pull secret controller when imageregistry config managementstate is Removed #3906 HOSTEDCP-1552 : Update RHTAP tekton files for 0.3 -> 0.4 migration #3956 OCPBUGS-31398 : Recycler-pod image now points to the OCP Payload reference #3901 HOSTEDCP-1525 : Support Azure KMS key rotation #3940 CNV-40687 : Detect machine and cluster-network cidr collision #3880 OCPBUGS-32930 : Allow specifying resource requests per cluster size #3941 OCPBUGS-32760 : Request serving scheduler: omit deleting nodes #3929 OCPBUGS-14383 : fix setting replicas on autoscaler #3947 OCPBUGS-32378 : Ensure placeholder deployments are deleted #3931 OCPBUGS-32255 : Remove kube-scheduler readiness probe #3889 HOSTEDCP-1484 : Disaster recovery documentation with OADP #3950 OCPBUGS-32492 : Set ImportMode for catalog #3937 HOSTEDCP-1522 : Add API definitions and CEL for AzurePlatformSpec vars #3879 NO-JIRA: Kubevirt on Azure: Change KAS LB Port to 7443 #3821
chore(deps): update rhtap references (main) #3943
OCPBUGS-30260 : Ignore subnet annotations for control plane load balancers #3944 OCPBUGS-32759 : Fix invalid node selector in autosizing placeholder #3930 HOSTEDCP-1044 : Add NodePool Size/Replicas to Telemetry #3593 NO-JIRA: remove obsolete konnectivity image code #3932
HOSTEDCP-1219 : Add arch & multi-arch flags to HCP CLI #3926 NO-JIRA: reduce autoscaling test memory requests #3938
NO-JIRA: chore(deps): update rhtap references #3934
ACM-11259 : Add mapping documentation for KubeVirt CSI driver snaphotting #3925 OCPBUGS-32496 : Controller to assist autoscaling for placeholder nodes #3922 Revert “Revert “HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters”” #3895
chore(deps): update rhtap references #3919
OCPBUGS-32487 : Fix OLM intilization args #3918 OCPNODE-2096 : Add ClusterImagePolicy to the list of valid config manifests #3894 CNV-36073 : KubeVirt, Add snapshot side car and volumesnapshot class #3640 NO-ISSUE: placeholders: ignore auto-sizer placeholders #3877
OCPBUGS-32228 : Fix failure to create a second hostedcluster in the same namespace #3900 OCPBUGS-32248 : Replace periods with commas in subnet label value #3885 chore(deps): update rhtap references #3886
HOSTEDCP-1462 : set HostPath.Type on volumesource in CloudNodeManagerD… #3892 NO-JIRA: fixed e2e teardown failing the outer test instead of subtest #3891
HOSTEDCP-1519 : feat(api): Add ingress-controller-load-balancer-scope annotation #3848 NO-JIRA: remove ovnkube-control-plane from expected component token m… #3850
CNV-40622 : Docs: Avoid cidr Collisions b/w Infra &Guest cluster #3863 NO-JIRA: Disable kubevirt-csi crash detection in e2e #3896
Revert “HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters” #3890
HOSTEDCP-1465 : Create HCPs with externalDNS on AKS Clusters #3688 chore(deps): update rhtap references #3872
OSD-19085 : Replaced hypershift_cluster_cores metric with hypershift_cluster_vcpus metric #3697 NO-ISSUE: *: use the api package constant for the size label #3876
NO-JIRA: bump capk ci image #3830
NO-JIRA: chore(deps): update rhtap references (main) #3867
OCPBUGS-29466 : Fix ICSP and IDMS inclusion as registriesOverrides #3862 STOR-1805 : Set RUN_AS_USER if mgmt cluster doesn’t have SCC #3819 OCPBUGS-29494 : Fix disconnected metadata inspection #3860 OCPBUGS-31012 : Disable audit-log container in kas when profile is None #3765 NO-JIRA: [e2e test framework] Add a flag to add an annotation to HostedCluster #3854
NO-JIRA: update private cluster IAM policy doc #3851
NO-JIRA: chore(deps): update rhtap references (main) #3856
OCPBUGS-14383 : disable autoscaler when no nodepool requires it #3846 NO-JIRA: Document additional known issues for the disconnected scenario #3611
NO-JIRA: Update RHTAP references (main) #3834
OCPBUGS-29391 : Add new permission required in CAPA #3779 CNF-11885 : nto: add events resources under operator Role #3827 OCPBUGS-31444 : use dnsPolicy: Default for konnectivity-agent in data plane #3810 NO-JIRA: docs: fixing wrong key name #3833
NO-JIRA: Update expected condition to false for ValidAzureKmsConfig s… #3837
OCPBUGS-31725 : include hostnetwork SCC CPO role for 4.13 and earlier #3838 HOSTEDCP-1511 : enable and document kubevirt custom default network #3832 HOSTEDCP-1513 : Support annotation scoping for hostedcluster resources #3702 OCPBUGS-31415 : update desired image even when HCP doesn’t exist yet #3829 NO-JIRA: Added regression tests to ensure certain deployment fields do not get set. #2707
OCPBUGS-31585 : disable http2 for ignition server and proxy #3817 OTA-1211 : api/v1beta1/hostedcluster_types: Add spec.updateService #3576 HOSTEDCP-1365 : kubevirt, Generate kccm lb endpointslices #3528 NO-JIRA: Add –auto-repair flag to hcp create nodepool #3163
NO-JIRA: Set control plane to HA by default #3788
NO-JIRA: Fix docs commands related to Azure ephemeral OS disks #3809
Update RHTAP references #3814
NO-JIRA: Documentation overview of HCP KubeVirt Storage #3763
OCPBUGS-31465 : remove max function usage from deicated request serving nodes #3815 OCPBUGS-31106 : Reduce log file size for hypershift apiservers #3781 HOSTEDCP-1462 : Enable TestNodePool and CreateCluster tests on Azure #3732 OCPBUGS-31319 : copy issuerCertificateAuthority configmap into HC openshift-config #3799 HOSTEDCP-1478 : Request serving node scheduler that uses HC size label #3776 OCPBUGS-31076 : Support other azure clouds #3804 OCPBUGS-31110 : Fix empty RHCOSImage error when creating Azure Infrastructure #3782 HOSTEDCP-1104 : Skip CPU Check on Render & Get Mgmt Cluster CPU from API Server #3797 OCPBUGS-13726 : fix race between ignition payload generation and MCS configmap update #3795 NO-JIRA: Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 in /hack/tools #3752
NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 #3710
OCPBUGS-31089 : Fix empty resourceGroupName error when deleting Azure infra #3775 OCPBUGS-31090 : Fix empty subnet name error when creating Azure infrastructure #3778 OCPBUGS-31263 : Add missing PodSecurityViolation alert #3733 OCPBUGS-31118 : fix(ignition): Fix priority class override #3784 OCPBUGS-31088 : Fix loopvar issue #3770 Update RHTAP references #3790
HOSTEDCP-1104 , HOSTEDCP-1105 : Validate multi-arch aspects in an AWS Hosted Cluster #3769 HOSTEDCP-1501 : Create default ClusterSizingConfig CR on start #3787 NO-JIRA: Remove unused ref to hostnetwork in cpo role #3789
OCPBUGS-30930 : Add CEL validation for NodePool autoScaling / replicas #3786 OCPBUGS-31102 : inject built-in MCP selector for KubeletConfigs and ContainerRuntimeConfigs #3780 NO-JIRA: Adding Disable PKI Reconciliation annotation as an option #2989
OCPBUGS-30991 : external OIDC: fix certificateAuthority field in structured auth config #3773 HOSTEDCP-1429 : Add install flag to enable/disable size tagging #3766 OCPBUGS-30968 : ibmcloud KMS: remove breaking image check and enable KMS v2 support #3760 HOSTEDCP-1487 : Add managed service constants to HyperShift API #3762 OCPBUGS-30260 : Support subnet labels separated by periods #3767 HOSTEDCP-1429 : hypershift-operator: wire up placeholder pods for sizes #3749 NO-JIRA: Increase stability in autoscaled environments #3757
NO-JIRA: Bump HO read budget in e2e to 6000 #3761
HOSTEDCP-1220 : Add multi-arch flag to CLI & associated validation #3743 HOSTEDCP-1467 : ARO HCP - Add ability to specify subnet at nodepool level #3748 NO-JIRA: Update RHTAP references #3753
OCPBUGS-30260 : Support specifying AWS LB subnets #3746 HOSTEDCP-1487 : Add ability to set managed service type in HO #3736 NO-ISSUE: hypershift-operator: react to hosted cluster changes #3735
HOSTEDCP-1429 : hypershift-operator: add a controller for t-shirt sizing #3686 HOSTEDCP-929 : Add nodepool annotation to allow requesting IMDSv2 #3584 NO-JIRA:Bump CPO Read API budget to 4000 in EnsureApiBudget #3745
OCPBUGS-30320 : speed up HCP rollout durations #3734 STOR-1805 : Set env var when the mgmt cluster supports SCC #3701 HOSTEDCP-1488 : Use regionalized STS endpoints in AWS #3742 NO-JIRA: Update RHTAP references #3737
OCPBUGS-30242 : consider nigthly images in payoad version check #3727 OCPBUGS-28634 : Update agentserviceconfig.md to remove PUBLIC_CONTAINER_REGISTRIES #3687 HOSTEDCP-1478 : Support additional node selectors for request serving nodes #3729 Revert “HOSTEDCP-1220: Add multi-arch flag to CLI & associated validation” #3731
OCPBUGS-13726 : honor HC image configuration #3714 HOSTEDCP-1220 : Add multi-arch flag to CLI & associated validation #3689 OCPBUGS-30769 : include node local client loadbalancer address in kube-apiserver signing ips #3699 NO-JIRA: Temporary remove promtool from hack/tools to unblock RHTAP pipeline #3728
HOSTEDCP-1460 : Remove resource limits on azure-cloud-node-manager #3725 HOSTEDCP-1479 : Update IBM/networking-go-sdk package #3722 HOSTEDCP-1480 : Update TLS cert hash creation with sha512 #3718 NO-JIRA: Fixes Dependabot PR #3712 #3716
HOSTEDCP-1466 : support/metrics: don’t filter HCCO metrics #3715 MCO-392 : ignition-server/controllers: drop MCSIgnitionProvider #3709 HOSTEDCP-1469 : Set GOMEMLIMIT annotation based on request serving node label #3708 OCPBUGS-30574 : Update OLM Default Catalog Sources to 4.16 on main #3707 chore(deps): update rhtap references #3704
OCPBUGS-30242 : Use cluster-config-operator for 4.14 payload #3685 NO-JIRA: Dependabot#3659 #3665
Revert “NO-JIRA: test/e2e: temporarily skip NTO machineconfig test” #3700
NO-JIRA: cleanup: nilness check failures #3698
HOSTEDCP-1464 : Add pull secret to install CLI & create k8s secret #3682 OCPBUGS-30060 : Set OPERATOR_IMAGE environment variable #3667 OCPBUGS-28370 : Use correct return error when destroying AWS SG #3661 OCPBUGS-30301 : [kubevirt] Fix virt-launcher netpol to allow missing access #3680 OCPBUGS-30124 : do not set KAS OAuthMetadataFile with Authentication type OIDC #3678 NO-JIRA: Bump the misc-dependencies group in /hack/tools with 1 update #3658
NO-JIRA: Bump the golang-dependencies group with 1 update #3657
chore(deps): update rhtap references #3674
NO-JIRA: test/e2e: temporarily skip NTO machineconfig test #3683
NO-JIRA: chore(deps): update rhtap references #3671
NO-JIRA: Remove specific pull secret watch in HCCO #3605
OCPBUGS-30102 : Support to disable machine management components #3570 NO-JIRA: Minor cleanup of Azure create cluster document #3663
NO-JIRA: chore(deps): update rhtap references #3650
OCPBUGS-29613 : test: add a test for invalid CSRs #3612 NO-JIRA: test: skip CCO in pod crash check #3652
OCPBUGS-29773 : set Konnectivity cipher suites #3618 OCPBUGS-30030 : rollout kas on auth config change #3647 NO-JIRA: test: increase CPO mutate budget #3649
NO-JIRA: test: debug certificates on unauthz error #3642
NO-JIRA: Remove replace statements #3631
NO-JIRA: DEPENDABOT#3613 #3617
NO-JIRA: chore(deps): update rhtap references #3638
NO-JIRA: Bump the misc-dependencies group in /hack/tools with 2 updates #3636
NO-JIRA: Bump the misc-dependencies group with 5 updates #3634
OCPBUGS-28370 : Skip SG deletion if it has dependancy violation #3622 NO-JIRA: Update RHTAP references #3621
NO-JIRA: Update RHTAP references (main) #3623
OCPBUGS-23457 : Switch to use service endpoint for Konnectivity #3627 OCPBUGS-27180 : Update the oauth API server’s shutdown delay duration #3608 NO-JIRA: Re-enable InPlace NodePool upgrade test for kubevirt (CNV-36608) #3600
OCPBUGS-29855 : feat(ho): Add flag for dedicated request serving isolation #3601 OCPBUGS-28607 : feat(config): Default RevisionHistoryLimit to 2 for deployments #3477 NO-JIRA: adjust pdb for oauth-apiserver #3619
OCPBUGS-29645 : control-plane-pki-operator: fix CA used for SRE client credentials #3615 HOSTEDCP-1424 : ARO HCP Support Disabling Outbound SNAT #3583 NO-JIRA: always set minAvailable on PDBs to 1 #3616
OCPBUGS-29723 : CLI: create nodepool aws - remove sg requirement #3614 NO-JIRA: Bump the misc-dependencies group with 15 updates #3609
NO-JIRA: Ignore kubectl version mistmaches in Component Versions #3575
NO-JIRA: Bump the k8s-dependencies group in /api with 2 updates #3598
OCPBUGS-28538 : Add an SCC for validation pods with Cilium SDN #3602 NO-JIRA: chore(deps): update rhtap references #3603
HOSTEDCP-1411 : Add capability to specify additional tags to azure resource… #3490 NO-JIRA: chore(deps): update rhtap references #3590
OCPBUGS-29435 : Use structured authentication config #3574 HOSTEDCP-1428 : hcco: report node count on HCPs #3557 HOSTEDCP-1436 : Make nodepool.spec.aws.subnet required #3581 OCPBUGS-29586 : use 2040 for apiserver svc in IBM provider #3569 HOSTEDCP-1438 : Preserve container resources for more hosted control plane components #3120 NO-JIRA: contrib/aws-tag-lb-service-webhook: JSONPatch improvements #3585
NO-JIRA: KubeVirt Platform Documentation for Additional Network, CPU Performance, and VM NodeSelector #3464
NO-JIRA: remove dead code from kas config #3578
OCPBUGS-29115 : Default NodeUpgradeType on day2 nodepool creation #3572 Revert “CNV-36608: Enable InPlace NodePool upgrade test for kubevirt” #3547
NO-JIRA: Update RHTAP references #3577
OCPBUGS-28538 : Added docs to get other sdn providers deployed with agent provider #3405 Update RHTAP references #3568
CNF-6516 : NTO: Enable PerformanceProfile #1782 OCPBUGS-29209 : hypershift-operator: don’t create PKI rbac when disabled #3544 OCPBUGS-29104 : control-plane-pki-operator: add a signer for SRE break-glass #3542 NO-ISSUE: test: wait longer for certificate signing, revocation #3560
NO-JIRA: Reduce nodepool test cases for KubeVirt due to infra perf issues #3562
NO-JIRA: Developer namespace template for CI clusters #3561
HOSTEDCP-1419 : Always include AWS default security group in worker security groups #3527 HOSTEDCP-1407 : Add steps for seting up azure CI cluster #3545 Update RHTAP references (main) #3546
HOSTEDCP-1420 : Set a fixed minimum supported version #3525 NO-JIRA: Update RHTAP references #3518
OCPBUGS-29103 : control-plane-pki-operator: validate CN for CSR #3538 NO-JIRA: stevekuznetsov approver on CPPO and integration tests #3540
NO-JIRA: Fix issue with release note tool #3429
HOSTEDCP-336 : Hypershift API separation #3390 HOSTEDCP-1344 : control-plane-pki-operator: add a revocation controller #3339 CNV-36608 : Enable InPlace NodePool upgrade test for kubevirt #3517 OCPBUGS-27282 : Make ControllerAvailabilityPolicy immutable #3513 NO-JIRA: remove unneeded code to copy Authentication refs #3512
OCPBUGS-28659 : Add ValidatingAdmissionPolicy to KAS config #3488 OCPBUGS-28741 : Fix default release image lookup #3450 NO-JIRA: Add app labels to KubeVirt CCM component #3510
MULTIARCH-4084 : Reduce the policy access scope to specific instance #3491 NO-JIRA: Bump the misc-dependencies group with 5 updates #3503
OCPBUGS-28625 : cpo: honor user provided oauthmetadata configmap passed in Authentication config #3511 NO-JIRA: Bump github.com/go-resty/resty/v2 from 2.10.0 to 2.11.0 in /hack/tools #3505
Update RHTAP references (main) #3508
OCPBUGS-28763 : Ensure cloud resources are destroyed for all platforms when –destroy-cloud-resources is used #3494 OCPBUGS-28601 : Remove webhook validations that introduce resource ordering #3484 NO-JIRA: manifests: Skip pod anti affinity for nil labels #3507
MULTIARCH-3882 : Support PER solution for powervs platform via transit gateway #3277 HOSTEDCP-1408 : Update CAPZ Identity Type to Service Principal #3501 OCPBUGS-27161 : reflect NodePool replica count nil in status #3472 NO-JIRA: Fix dependabot pr 3414 #3453
NO-JIRA: kubevirt, e2e, Add additional network test #3449
NO-JIRA: remove PrivateIngressController cleanup #3489
HOSTEDCP-1373 : ARO HCP - Add capability for Azure VMs to be created with ephemeral disks #3483 NO-JIRA: contrib: add code for aws-tag-lb-service-webhook #3493
NO-JIRA: Bump the misc-dependencies group with 3 updates #3486
NO-JIRA: Bump the misc-dependencies group in /hack/tools with 1 update #3469
HOSTEDCP-1364 : kubevirt, use selector less services for ingress #3343 OCPBUGS-22899 : node spread anti-affinity for HA HCP #3286 NO-JIRA: Bump the misc-dependencies group with 17 updates #3476
HOSTEDCP-1401 : Enable BYO NSG #3455 NO-JIRA: Update go-jose to the latest version to fix CVE #3475
HOSTEDCP-1344 : re-revert api stuff #3463 OCPBUGS-26940 : Include OperatorHubSpec sync with HC when Config is empty #3454 NO-JIRA: Simplified kubectl component version check #3458
NO-JIRA: Remove ‘–attach-default-network’ from productized cli #3462
NO-JIRA: Tolerate restarts for kubevirt external infra #3451
NO-ISSUE: .ci-operator.yaml: base off of RHEL 9 #3466
OCPBUGS-27366 : indicate cluster profile to render the correct manifests #3443 OCPBUGS-26977 : Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. #3403 TRT-1456 : Revert #3448 “api: move CSRA to a new group” #3460 HOSTEDCP-1344 : api: move CSRA to a new group #3448 HOSTEDCP-1397 : Add documentation on how to debug Azure nodes #3452 NO-JIRA: Update Dockerfiles to use publicly available RHEL9 images #3426
HOSTEDCP-1308 : Add e2e to ensure SA token not mounted on mgmt workloa… #3301 NO-JIRA: Fix promql testdata missing issue #3438
NO-JIRA: Update RHTAP references (main) #3446
HOSTEDCP-1188 : Add docs for control plane scheduling topologies #3434 HOSTEDCP-1283 : Set outbound LoadBalancer name on AzureCluster #3445 NO-JIRA: Bump misc dependencies 21f825371d #3433
HOSTEDCP-1207 : Automated etcd backup #3034 NO-JIRA: Document machine configuration in HyperShift #3331
HOSTEDCP-1382 : [Subtask] Restore Ability to Create HCPs on Azure #3404 HOSTEDCP-1314 : Ensure all e2e HCs use NLB for ingress controller #3293 OCPBUGS-26757 : Change KAS bootstrap image to cluster-config-api #3400 NO-JIRA: Improve nodepool’s machine condition message #3354
OCPBUGS-23228 : Add storage, csisnapshotcontroller and clustercsidrive… #3396 OCPBUGS-27027 : availability-prober: wait for infrastructure name to be set #3409 NO-JIRA: remove non-existent v1beta2 from webhook #3407
HOSTEDCP-1376 : Bump the sigs.k8s-dependencies group and update dependabot groupings #3392 OCPBUGS-25696 : Apply Scheduling Configuration for kCCM #3382 OCPBUGS-26547 : remove LoadBalancer filter from external-dns #3410 OCPBUGS-26547 : fix up external-dns flags #3408 OCPBUGS-26547 : reduce external-dns route53 call volume #3394 Update RHTAP references (main) #3401
OCPBUGS-25897 : hcco: use manual mode for CCO #3375 HOSTEDCP-1309 : Add GC knobs for KAS #3384 NO-JIRA: [KubeVirt] Fix external infra permissions documentation #3391
HOSTEDCP-1374 : external OIDC: copy Authentication OIDC client secrets through to guest #3373 OCPBUGS-25974 : Do not use CPO image from status if it’s not a valid image reference #3361 OCPBUGS-23518 : consider HCP upgradeable if CVO has no upgradable condition #3239 OCPBUGS-26232 : set KAS runtime-config in alignment with feature gates #3377 HOSTEDCP-1372 : Bumps k8s to v0.29 #3360 OCPBUGS-25342 : Add extra resources to be encrypted. #3341 OCPBUGS-26197 : hostedcontrolplane: don’t start pki operator when disabled #3368 CNV-36656 : Documenting the mimimum RBAC required for External Infra cluster with KubeVirt provider #3364 NO-JIRA: Update RHTAP references (main) #3365
HOSTEDCP-1371 : Bump Golang to v1.21 #3359 HOSTEDCP-1328 : Add Ability to Encrypt VM OS Disks #3281 HOSTEDCP-1122 : Etcd defrag controller #2869 NO-JIRA: Update RHTAP references (main) #3275
HOSTEDCP-336 : Move fixtures out of API #3342 OCPBUGS-23362 : Set new condition on SG deletion. #3307 NO-JIRA: Bump the k8s-dependencies group in /hack/tools with 1 update #3251
NO-JIRA: Add rbac permission for kubevirt capi #3344
OCPBUGS-22399 : Disable UWM Telemetry writer when telemeter-client cm not exists #3348 NO-JIRA: Approvers update #3347
HOSTEDCP-1262 : Add additional CEL to Arch in NodePoolSpec #3333 NO-JIRA: Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /hack/tools #3334
NO-JIRA: Bump golang.org/x/crypto from 0.16.0 to 0.17.0 #3335
OCPBUGS-22399 : Disable UWM Telemetry remote writer when MGMT cluster is disconnected #3332 HOSTEDCP-336 : Move CAPI imports from /api package into support/api #3270 OCPBUGS-24308 : Add PodDisruptionBudget for router deployment #3337 HOSTEDCP-1355 : Remove unused functions from repo #3325 NO-JIRA: RHTAP Multi-Arch PipelineSpec #3340
HOSTEDCP-1329 : Allow user to specify resource group for NodePool resources #3279 HOSTEDCP-1353 : Improve description for agent APIServerAddress CLI flag #3314 ACM-8917 : Add agentLabelSelector to nodepool agent create to CLI #3285 CCO-388 : control-plane-operator: reconcile the CCO #2794 NO-JIRA: Bump github.com/prometheus/alertmanager from 0.25.0 to 0.25.1 in /hack/tools #3045
NO-JIRA: Bump github.com/docker/docker from 23.0.3+incompatible to 24.0.7+incompatible in /hack/tools #3145
HOSTEDCP-1344 : use library-go crypto where we can #3326 OCPBUGS-25332 : Force KMSv1 on #3318 HOSTEDCP-1273 : Added support for OLM Disable default sources on HC creation #3320 HOSTEDCP-1327 : Remove Old Azure SDKs from Azure Infra #3274 OCPBUGS-25306 : Use k8s.io/kube-scheduler/config/v1 #3313 TRT-1406 : Revert #3283 “HOSTEDCP-1273: Added support for OLM Disable default sources on HC creation” #3306 OCPBUGS-25103 : Remove reference to v1alpha1 flowcontrol #3304 HOSTEDCP-1257 : control-plane-pki-operator: add a CSR flow for break-glass creds #3267 NO-JIRA: Align kubevirt MinSupportedVersion with the default one (4.14.0) #3305
OCPBUGS-24261 : Konnectivity agent update strategy #3294 CNV-36056 : Expose NodeSelector for KubeVirt VMs in NodePool #3280 ACM-8466 : Add Kubernetes SCC V2 options to HO containers #3284 OCPBUGS-23511 : Remove IAM path when applying control-plane-operator ARN to VPC Endpoint Service allowed principals #3215 NO-JIRA: Update Latest Supported Version to 4.16 After Branch-out #3302
HOSTEDCP-1343 : docs(ibmcloud): Add HC/HCP yamls for IBM Cloud #3287 HOSTEDCP-1273 : Added support for OLM Disable default sources on HC creation #3283 HOSTEDCP-1272 : Added CLI support to create DualStack clusters using default values #3276 OCPBUGS-20035 : Add HostedCluster false conditions sumamry when cluste… #3190 HOSTEDCP-1336 : bump openshift/api #3282 NO-JIRA: Fix wrong annotation on cluster deletion #3289
OTA-855 : Enable CVO to evaluate conditional updates on self-managed HyperShift deployed on OpenShift #2807 HOSTEDCP-1318 : correct typo for OAS internal-oauth-disabled flag #3278 NO-JIRA: Bump the golang-dependencies group with 3 updates #3254
OCPBUGS-23126 : Fix a bug on deletion of a hostedcluster #3234 CNV-35774 : Improve CRD defaulting for HostedCluster and NodePool #3116 HOSTEDCP-1322 : NodeUpgradeType defaulted by provider via CLI #3273 NO-JIRA: cmd/cluster/core/dump: Gather PodDisruptionBudgets too #3263
CNV-34093 : kubevirt: verify release image falls within supported release window #3184 CNV-29003 : Re-enable NodePoolUpgradeTest for KubeVirt (Replace Only) #3189 OCPBUGS-22459 : Add prestop to konnectiviy server #3250 HOSTEDCP-1318 : pass internal-oauth-disable flag to openshift-apiserver when Auth type is OIDC #3244 OCPBUGS-23397 : Set shutdown-delay-duration to 15s #3204 HOSTEDCP-1234 : Add KMS support on Azure clusters using Azure Key Vault #3183 OCPBUGS-23555 : set respondWithChallenges false on CLI OAuth client #3249 WRKLDS-925 : remove duplicate passing of kubeconfig into route-controller-manager #3220 HOSTEDCP-1256 : control-plane-pki-operator: add an operator for managing PKI #3193 HOSTEDCP-1319 : Fix Dependabot & Group Dependency Updates #3246 OCPBUGS-24062 : fix(cpo): Set restart annotation on network-node-identity #3245 kubevirt, hcp, HOSTEDCP-1311: Add multinet knobs #3235
HOSTEDCP-1312 : Fixed update-codegen.sh to work locally #3214 OCPBUGS-23555 : add CLI oauthclient #3238 HOSTEDCP-1300 : Bump k8s.io/client-go to v0.28.3 #3191 OCPBUGS-19834 : add watch for HCP pullsecret to HCCO #3237 Update RHTAP references (main) #3230
HOSTEDCP-1236 : Enable public router+external DNS for azure #3233 OCPBUGS-23921 : Use correct kubeconfig in CCM and remove CCMs access t… #3222 OCPBUGS-22473 : Added OLMCatalogPlacement option to the CLI #3206 OSD-19085 : New hypershift_cluster_cores metric giving the total number of worker cores #3089 OCPBUGS-20246 : Added brackets to IPv6 KAS address on kubeconfig #3207 OCPBUGS-23737 : remove machine-approver probes #3227 OCPBUGS-23350 : Added IPFamilyPolicy to services exposed at the HCP in DualStack mode #3210 OCPBUGS-23466 : Let router use svc ips #3218 HOSTEDCP-1256 : api/hypershift: mark more conditions with list key types #3212 OCPBUGS-23472 : unset ServiceAccount on ignition-server-proxy #3209 OCPBUGS-23528 : Fix error when removing finalizer on cluster destroy #3219 HOSTEDCP-1256 : api/v1beta1: annotate hostedcontrolplane conditions #3211 OCPBUGS-23398 : Fixed AWS KMS Backup container args #3216 HOSTEDCP-1311 : kubevirt, Add support for secondary networks #3066 HOSTEDCP-1256 : expose cert rotation scale parameter #3208 OCPBUGS-23314 : SetLogger for CLI #3199 HOSTEDCP-1237 : Retrieve RHCOS VHD image from release image #3177 HOSTEDCP-1284 : Bumps k8s.io/pod-security-admission to v0.28.3 #3181 CNV-23418 : Validate jsonpatch annotation + add condition on wrong patch #3197 HOSTEDCP-1285 : Kas port svc cleanup #3186 HOSTEDCP-1254 : disable deployment of integrated oauth when authentication type is OIDC and set KAS flags #3151 CNV-23418 : fix the jsonpath annotation implemetation #3201 HOSTEDCP-1305 : Simplify HostedControlPlaneNamespace().Name #2619 OCPBUGS-22912 : Set value of elb tag to 1 instead of true #3198 CNV-30444 : Document recommended MTU settings for KubeVirt HCP #3129 HOSTEDCP-1306 : Bump Golang builder to 1.20 for RHTAP dockerfile #3196 NO-JIRA: chore(deps): update rhtap references #3192
CNV-23418 : unsupported escape hatch mechanism custom HS/KV vms #3187 HOSTEDCP-1256 : generate typed clients for apis #3179 NO-JIRA: *: Fix “succesfully” -> “successfully” typos #3188
OCPBUGS-20179 : Stop defining time series for hosted clusters or node pools which do not exist anymore. #2671 HOSTEDCP-1285 : Consume kas Pod port by name #3185 OCPBUGS-23083 : adding permission to CNO RBAC Calico path for network-node-identity deploy #3172 HOSTEDCP-1256 : Update Dependencies #3154 HOSTEDCP-1283 : Fixed Azure nodes not joining #3174 HOSTEDCP-1227 : Retrieve CAPZ image from OCP release image #3074 NO-JIRA: fix formatting for releaseImage log #3156
HOSTEDCP-1206 : Req serving isolation e2e enxebre #3150 OCPBUGS-23015 : Configure HSTS for kube-apiserver #3088 HOSTEDCP-1281 : Fix a bug in the validating webhook #3164 CNV-33847 : KubeVirt: create the etcd encryption key secret, if missing #3148 HOSTEDCP-1278 : Adjustment cluster-cidr,service-cidr to support dualstack #3161 OCPBUGS-10423 : Update regex validation for nodepool.spec.taints.value #3141 OCPBUGS-20161 : Stop exposing kas on 6443 private route service load balancer #3149 OCPBUGS-16079 : No error for overlapping service network and API IP #3067 OCPBUGS-22868 : Fixed accessTokenInactivityTimeout validation #3157 CNV-34094 : Add validating webhook #3132 Stop defaulting aws private haproxy external port to 6443 #3147
Remove GITHUB_ACCESS_TOKEN requirement from release notes script #3134
HOSTEDCP-1215 : Use the same etcd snapshot for all replicas during etcd restore #3081 Bump google.golang.org/grpc from 1.53.0 to 1.56.3 in /hack/tools #3136
OCPBUGS-20033 : Make the OLMCatalogPlacement field immutable #3113 HOSTEDCP-1113 : Improve NodePool CPU arch & platform check #3072 HOSTEDCP-1253 : bump openshift/api for new authentication config #3135 HOSTEDCP-1229 : Move azure cloud provider to out of tree #3086 contrib: increase HC quota to 40 #3140
HOSTEDCP-1200 : Remove pod exceptions from EnsureNoCrashingPods #3138 run EnsurePSANotPrivileged for TestCreateCluster only #3137
OCPBUGS-21776 : Cluster-policy-controller: add missing RBAC for privileged namespaces PSA syncer controller #3115 OCPBUGS-21626 : Validate accessTokenInactivityTimeout >= 300s #3110 OCPBUGS-20246 : Added brackets to the kubeconfig server address when IPv6 #3097 Bump golang.org/x/net from 0.13.0 to 0.17.0 #3092
OCPBUGS-22195 : Fix label selector check for CAPI provider #3108 Bump golang.org/x/net from 0.9.0 to 0.17.0 in /hack/tools #3093
Update RHTAP references #3062
OCPBUGS-21822 : Add ign proxy label selector for LabelTopologyZone PodAntiAffinity #3103 OCPBUGS-19419 change trusted bundle volume mount for CPO #3099
Disabling unused monitoring services #2730
OCPBUGS-18341 : change required pod anti-affinity rule to preferred rule #3095 SDN-4062 : Revert “SDN-4042: Increase upgrade rollout timers” #3090 CNV-31891 : Document port 80 is not supported with default ingress for KubeVirt #3079 MULTIARCH-3760 : Rename depricated flag for PowerVS capi deployment #3028 HOSTEDCP-1051 addition of grace period for aws infra destruction #2967
HOSTEDCP-1232 : Add clusterName label to CAPI kubeconfig secret #3087 OCPBUGS-19957 : Reconcile CNCC secret to CPO namespace #3065 OCPBUGS-20105 : OCPBUGS-20109: Update the scheduler to only accept paired Nodes and check scheduler HCs has two Nodes #3077 OCPBUGS-16189 , OCPBUGS-19746 : Added network validations #3047 CNV-30697 : Dedicated CPU for KubeVirt node pool #3048 Add record rules for kas qps #2858
Fix a typo in KubeVirt troubleshooting script #3073
HOSTEDCP-1184 : Document IPv6/IPv4/DualStack deployments for Hypershift in Baremetal #3008 Add aws-ebs-csi-driver-operator to allowed NeedManagementKASAccessLab… #3076
Upate azure docs #3075
OCPBUGS-13348 : Hypershift Audit configuration not working (part2). #3014 OCPBUGS-11939 , OCPBUGS-18128 , OCPBUGS-18460 , OCPBUGS-18602 , OCPBUGS-18879 : Support Disconnected HCP #2950 Add private link perms to docs and clarify log message #3063
OCPBUGS-14819 : Add konnectivity-proxy container to CNO #2974 OCPBUGS-19784 : Update capi agent version for CRD label #3050 KubeVirt platform troubleshooting documentation #3055
Remove EgressFirewall Creation in HCP namespace #3049
HOSTEDCP-1212 : Bump Golang to v1.20 #3038 Update RHTAP references (main) #3054
OCPBUGS-15215 : OAuth template config in HostedCluter.configuration.ouath is not honored in HyperShift #3041 Update RHTAP references (main) #3042
OCPBUGS-19271 : Updating hypershift images to be consistent with ART #3017 Update kubevirt csi driver deployment with proper timeouts #3044
OCPBUGS-19516 : Upgrade agent APIs to v1beta1 #3022 [kubevirt platform] Detect Suboptimal MTU and raise HostedCluster Condition accordingly #2976
OCPBUGS-19674 : Report correct port when API exposed via route #3037 OCPBUGS-13829 : set accesstoken-inactivity-timeout flag to openshift-oauth-apiserver #3025 HOSTEDCP-1209 : set ubi Containerfile labels #3039 Use example versions for KubeVirt platform that are supported #3027
OCPBUGS-17669 : Remove cluster name validation from HCC #3036 KubeVirt: document VMs logs collection #3031
Update RHTAP references (main) #3033
OCPBUGS-19381 : Let NodePools skip min version when SkipReleaseImageValidation is in HC #3024 OCPBUGS-19346 : set default deploymentconfig params on AWS CCM #3021 ACM-7278 : Remove marking pull secret as required in hcp cli #3013 OCPBUGS-19332 : Use impersonated client for fetching the localhost-kubeconfig from ma… #3011 Relax network policy e2e for private #3020
Dump KubeVirt pod logs #3000
Update RHTAP references #2995
OCPBUGS-19014 : Apply private-router network policy only if running OCP 4.14 #3012 Validate KubeVirt platform required versioning #2948
OCPBUGS-18720 : amend OLM catalogs ImageStream according to annotation #3001 OCPBUGS-17906 : reconcile Authentication global config #3009 feat: add _id label to all hypershift operator metrics #2991
OCPBUGS-18122 : Rename isUpgradeable to isUpgrading according to its return value #2955 OCPBUGS-18762 : unset ControlPlaneReleaseImage on HCP when ControlPlaneRelease is unset on HC #3004 OCPBUGS-18754 : tuned DS should not use controlPlaneReleaseImage #3003 HYPBLD-99 : enable CGO_ENABLED for building FIPS compliant images #2997 e2e: fixed gomega created from parent test context #2987
bump HO supported version for 4.15 #2927
HOSTEDCP-1075 : Document instructions for recovering etcd cluster from lost quorum #2952 HOSTEDCP-1185 : Add flag to create a single NAT gateway #2984 Dump kubevirt external infra clusters #2992
OCPBUGS-18568 : Use MCO and CCO image references when looking up mappings #2985 HOSTEDCP-591 : Amend OLM catalog IS according to OpenShiftImageRegistryOverrides #2947 e2e: skip CNO pod restart check #2986
HOSTEDCP-1133 : Signal NodePool rolling upgrade because of platform changes #2973 OCPBUGS-18127 : Enable caching of Unstructured Objects in HO #2988 e2e: run Ensure functions after Main part of test #2983
OCPBUGS-18127 : Ensure machineTemplate name length respects RFC1123 spec #2975 ACM-6435 : add pausedUntil create cluster option in CLI #2965 OCPBUGS-7840 : Untangle kas port #2964 OCPBUGS-18399 : Preserve mirror order when serializing ICSP to env #2977 OCPBUGS-18336 : make konnectivity routes roundrobin #2971 Use the correct pull secret for HCP KubeVirt components #2919
Disable nto inplace test for kubevirt #2980
OCPBUGS-18438 : Properly format IPv6 address when proxying it through Konnectivity #2969 OCPBUGS-18127 : Trigger a rolling upgrade on NodePool .spec.platfrom changes #2956 HOSTEDCP-1156 : Add defaulting webhook to installation and notes #2922 HOSTEDCP-979 : Re-enable nodepool in-place upgrade tests #2960 Add a default value (32Gi) for nodepool in create nodepool kubevirt command #2940
OCPBUGS-16221 : Adds trust bundle to ignition-server when configured in HC #2819 Avoid creating tar archive if –archive-dump=false #2963
OCPBUGS-3873 adding rbac for UserOAuthAccessToken #2962
HOSTEDCP-1178 fix limited support label key #2958
OCPBUGS-18065 : enable aws-pod-identity-webhook on AWS #2957 OCPBUGS-18308 : Do not use mgmt cluster ICSP to mutate CCO image in KAS pod #2966 OCPBUGS-18266 : fix Progressing condition when ControlPlaneRelease is set #2959 fix(ho): Restore match label selector behavior #2951
OCPBUGS-18072 : Set emptyDir storage for the image registry only on initial time for None and Kubevirt platform #2895 OCPBUGS-18024 : Set Arch to amd64 for HCP NodePool Create #2941 chore(deps): update rhtap references (main) #2920
OCPBUGS-16813 : switch konnectivity-server to additional container in KAS pods #2942 Updating hostedcluster controller to stop using deprecated flags #2946
OCPBUGS-17827 : e2e: remove private-router from NeedManagementKASAccessLabel allowlist #2939 MULTIARCH-3709 : PowerVS - Add reuse resource flags to e2e test #2902 MULTIARCH-3478 : Minor bug fix on PowerVS infra #2451 OCPBUGS-18069 : Ensure load balancers are not exist before declaring load balancers are cleaned up #2887 MULTIARCH-3708 : PowerVS - Fix cluster deletion when existing resources passed #2867 MGMT-15368 : Document scaling down NodePools #2944 OCPBUGS-13348 : Hypershift Audit configuration not working. #2945 TRT-1202 : set SkipReleaseImageValidation annotation properly on e2e clusters #2943 OCPBUGS-17678 : Reconcile cloud credentials configuration to hosted cluster #2937 Add e2e test for etcd member recovery #2930
OCPBUGS-17827 : remove NeedManagementKASAccessLabel from router pods #2934 OCPBUGS-17985 : Handle empty mirrorImage result for ignition disconnected registry #2935 OCPBUGS-17827 : e2e: refactor checkPodsHaveLabel to be allowlist rather than exact match #2928 OCPBUGS-16813 : do not hardcode ignition-server-proxy replicas #2933 fix(ho): Restore match label selector behavior #2893
TRT-1202 : add annotation to skip release image validation #2929 OCPBUGS-17812 : Update Etcd health check to mirror standalone etcd #2918 STOR-1443 : Sync 05_operator_role-hypershift.yaml manifest from cluster-csi-snapsht-controller-operator #2915 HOSTEDCP-1065 : CNO deployed hosted-cluster-kubecfg-setup initContainers use CPR image #2917 HOSTEDCP-1001 : Image registryOverride included in the image metadata extraction flow #2909 OCPBUGS-17669 : Validate HostedCluster name against RFC1123 #2914 HOSTEDCP-1075 : Document how to recover single etcd member #2916 HOSTEDCP-1085 : Create a monitoring dashboard per HostedCluster #2907 chore(deps): update rhtap references (main) #2903
HOSTEDCP-1063 : Account for guest webhook URLs without a port #2898 OCPBUGS-17680 : Remove immutable note from PullSecret #2910 Revert “HOSTEDCP-1001: Image registryOverride included in the image metadata extraction flow” #2908
OCPBUGS-16076 : Validate HostedCluster name against RFC1123 in CLI #2906 OCPBUGS-15331 , OCPBUGS-16049 : Enable AdvertiseAddress dual stack and IPv6 support and added the changes to be included in the certificates #2779 HOSTEDCP-1081 : Perform etcd recovery when etcd member data is lost #2900 SDN-4057 : Pass ControlPlane image to OVN #2896 test: e2e: remove SingleReplica etcd chaos test #2901
Allow overriding pod security admission label #2886
HOSTEDCP-1146 : cpo: use CPO spec container image if it is a sha256 reference #2899 HOSTEDCP-1022 : Set Arch to amd64 #2897 Re-introducing defaulting webhook for self managed HCP #2892
fix-CNV-30260: KubeVirt: fix failed conformance test #2891
OCPBUGS-16298 : Prevent the kube-apiserver from connecting to the managment kas #2888 HOSTEDCP-1001 : Image registryOverride included in the image metadata extraction flow #2820 HOSTEDCP-1046 , HOSTEDCP-1102 : Follow-on Items #2847 Revert “[HOSTEDCP-1041] Defaulting webhook for self managed HCP” #2889
OCPBUGS-17446 : Set advertise-address in HCP etcd to resolvable name #2884 Defaulting webhook for self managed HCP #2864
STOR-1432 : cso: add envvars for CSI driver controller images #2882 HOSTEDCP-1025 : Add HCP CLI Command to Create a NodePool on AWS #2852 SDN-4042 : Increase upgrade rollout timers #2881 skip olm-collect-profiles in EnsureComponentsHaveNeedManagementKASAccessLabel #2874
HOSTEDCP-1064 : Add egress policy for private-router #2792 HOSTEDCP-1121 : Ensure SG reconciliation for aws endpoint #2872 chore(deps): update rhtap references #2865
HOSTEDCP-1065 : add ControlPlaneImage API for provider-side HCP updates #2848 HOSTEDCP-1063 : Disallow webhooks URLs targeting control plane services #2775 OCPBUGS-17374 : Fast specific dockerignore #2879 Kubevirt how-to docs updates #2875
Fix nodepool upgrade docs link #2880
OCPBUGS-17171 : Update OLM catalog image tags #2877 HOSTEDCP-1029 : Add HCP CLI Command to Destroy a Cluster on AWS #2853 Add workload management annotation to kubevirt-csi daemonset #2840
WRKLDS-730 : use default /healthz path for readiness probe in OCM and RCM #2873 Add api and cli validation for kubevirt volume mode #2862
HOSTEDCP-1079 : RHTAP HO Containerfile #2857 OCPBUGS-16770 : add need-management-kas-access label to olm-collect-profiles pods #2854 MULTIARCH-3684 : PowerVS - Upgrade capi to use v1beta2 APIs #2831 HOSTEDCP-1046 : Add ImageDigestMirrorSet to Config API comment #2868 MULTIARCH-3683 : Add dev flags in destroy cluster powervs command #2764 kubevirt: Reconcile EgressFirewall only for ovn-k #2849
HOSTEDCP-1046 : Add IDMS to the list of valid config manifests #2837 OCPBUGS-17059 : Add volume mode to kubevirt root volume api #2860 Update RHTAP references (main) #2832
OCPBUGS-16809 : Configured IgnitionProxy to support IPv4 and IPv6 #2850 OCPBUGS-14163 : Fixed ETCD to work in Ipv6 and Dual stack envs #2846 HOSTEDCP-1112 : Add config to set creation frequency of RHTAP PRs #2838 HOSTEDCP-1020 : Remove name as a persistent flag required field #2836 OCPBUGS-16232 : skip z-stream version check when upgrade is forced #2823 OCPBUGS-16033 : ClusterNetwork’s HostPrefix validation for dual stack #2795 OCPBUGS-14783 : Fix NetworkPolicy to work over IPv4 and IPv6 #2704 Revert “HOSTEDCP-710: Make ImageContentSource immutable” #2829
Update RHTAP references (main) #2814
HOSTEDCP-1062 : Make CAPI pod selector backward compatible #2825 HOSTEDCP-1093 : Add default flags to HCP create cluster CLI cmd #2802 Revert “HOSTEDCP-1094: e2e autoscaler balancing similar node groups” #2828
HOSTEDCP-1090 : Use statically configured haproxy for router #2778 HOSTEDCP-1046 : Allow HCP Specification to Support ICSP & IDMS #2720 HOSTEDCP-710 : Make ImageContentSource immutable #2815 OCPBUGS-11835 : Add missing probes to two services #2430 HOSTEDCP-1094 : e2e autoscaler balancing similar node groups #2808 OCPBUGS-16113 : unshare ignition-server reconciliation between HO and CPO #2817 OCPBUGS-11939 : Fix additional issues with OCPBUGS-11939 #2804 OCPBUGS-16135 : fix deletion bug when hostedzone is already deleted #2811 OCPBUGS-14862 Improve clarity around hypershift operator permissions #2782
HOSTEDCP-1062 : Management kas policy #2796 Revert “HOSTEDCP-1062: Add management cluster KAS network policy” #2793
HOSTEDCP-1020 : Add pullSecret & NodePool replica flags to HCP CLI #2774 HOSTEDCP-1101 : Add snyk-secret HO RHTAP scripts #2788 OCPBUGS-15991 : use ignition-proxy Service to populate ignitionEndpoint with strategy NodePort #2787 OCPBUGS-15769 : Include hypershift specific labels to be ignored by similar autoscaler groups #2784 Add management cluster KAS network policy #2717
HOSTEDCP-1019 : Add create cluster for Agent for HCP CLI #2754 CNV-30407 : KubeVirt Platform: Support NetworkInterfaceMultiQueue #2760 HOSTEDCP-1030 : Add destroy cluster for Agent for HCP CLI #2756 OCPBUGS-15594 : Get valid arch image for cluster-config-operator #2753 kubevirt: Annotate VMs to be live migratable #2772
Revert “Merge pull request #2770 from dharaneeshvrd/upgrade-capi-ibmcloud #2776
MULTIARCH-3684 : PowerVS - Upgrade capi to use v1beta2 APIs #2770 OCPBUGS-14862 : Reject VPCE Connections during VPCE Service cleanup #2700 Update RHTAP references #2768
HOSTEDCP-1023 : Add create NodePool for Agent for HCP CLI #2755 HOSTEDCP-1061 : Implement dedicated request serving nodes for HostedClusters #2722 OCPBUGS-15769 : Set –balance-similar-node-groups for autoscaler #2769 Leader election config update. #2282
OCPBUGS-15723 : Let getMachinesForNodePool return machines ordered by creation Timestamp #2766 Fix KAS HealthCheck for non DNS-Based ingress points in LB service #2765
Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible #2741
Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible in /hack/tools #2740
Bump google.golang.org/protobuf from 1.29.0 to 1.29.1 in /hack/tools #2737
OCPBUGS-12208 ensureExists pullSecret resource reconciliation strategy #2732
Bump github.com/coreos/ignition/v2 from 2.10.1 to 2.14.0 #2739
Bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible in /hack/tools #2738
Remove hardcoded AWS CI References #2742
TRT-1118 : Remove DisableStrictZoneCheck from AWS CCM config #2757 Update RHTAP references #2750
add OWNERS for new ci-tooling area label #2743
Add production cli (hcp) to dockerfile #2747
feat: Enable priority class override #2661
test/e2e: retry configmap create in etcd chaos tests #2746
OCPBUGS-14578 : Set allocate-node-cidrs to false in the cluster-kube-controller-manager #2731 Revert “HOSTEDCP-1016: Validate publishing strategies” #2733
HOSTEDCP-1027 : Add Create kubeconfig for HCP CLI #2719 HOSTEDCP-1016 : Validate publishing strategies #2651 KubeVirt Platform documentation for Advanced Storage Configurations and External Infrastructure #2712
Follow up to PR comments on #2642 #2690
HOSTEDCP-1067 : Add dependabot dependency management #2708 HOSTEDCP-1073 : enforce blocked rollout of HCP #2726 Revert “HOSTEDCP-967: [Re-revert] Disable v1alpha1 and conversion webhook by default” #2705
Remove –service-publishing-strategy from production cli #2721
HOSTEDCP-1024 : Add Create NodePool for KubeVirt for HCP CLI #2718 HOSTEDCP-1032 : e2e: ensure default PSA policy is not privileged #2714 HOSTEDCP-1031 : Add Destroy Cluster Cmd for KubeVirt for HCP CLI #2673 Expose annotation to allow release image overrides #2595
HOSTEDCP-1060 : add ignition-server proxy #2668 OCPBUGS-14637 : Check OwningIngressController also in Labels #2706 HOSTEDCP-1020 : Add Create Cluster for KubeVirt for HCP CLI #2672 properly handle user CA bundle not existing #2703
OCPBUGS-15168 : fix(oauth): Do not proxy IBM Cloud IAM endpoints #2699 OCPBUGS-14859 : Skip AWS resource deletion for ‘Unknown’ OIDC state #2691 Whitelist access from virt-launchers to NodeIP if NodePort ServicePublishingStrategy is used #2688
OCPBUGS-13829 : cpo: oauth: honor AccessTokenInactivityTimeout #2693 Update NodePool docs to include data propagation #2687
HOSTEDCP-1008 : Add NodePoolTransitionSeconds metric #2631 HOSTEDCP-967 : [Re-revert] Disable v1alpha1 and conversion webhook by default #2685 Make NodePool arch input immutable #2689
Update autocaler RBAC to accomodate machinepools support added upstream #2663
Enforce Immutability of some KubeVirt Platform Values #2654
CNV-24818 : Add fsGroup support to kubevirt-csi-driver #2563 Let payload provider render feature gate yaml #2664
OCPBUGS-14633 : Check for OPENSHIFT_IMG_OVERRIDES before using #2660 HOSTEDCP-965 : Add impersonate feature to the CLI and document HC dump procedure #2653 OCPBUGS-11882 : Annotate HCP pods with the safe-to-evict-local-volume CA annotation #2647 Update RHTAP references #2657
Disable nodepool replace upgrade test #2665
OCPBUGS-14784 : Honor global ingress configuration LoadBalancer type on AWS #2669 OCPBUGS-14620 : Set DisableStrictZoneCheck = true in the AWS Cloud Provider config #2659 HOSTEDCP-992 : refactor ignition-server reconcilation #2662 Minor fix in KAS LB HealthCheck #2656
HOSTEDCP-1036 : Create Makefile path to create productized CLI #2633 Extend np test timeout for KubeVirt platform #2655
HOSTEDCP-1003 : Set AWS conditions only for AWS platform #2604 Remove alsologtostderr flag form CAP* #2648
OCPBUGS-14575 : Check for IDMS only if mgmt cluster has req API #2650 Network isolation of VirtualMachines for KubeVirt provider #2622
OCPBUGS-14428 : remove OLM alerts from the HCCO #2636 KubeVirt Openstack image annotation override #2629
Red Hat Trusted App Pipeline update hypershift-operator-main #2638
Red Hat Trusted App Pipeline purge hypershift-azjx #2635
cli: Add release-stream flag #2644
OCPBUGS-13547 : Pass payload-version to MCS and MCC #2643 KubeVirt: Handle deletion of the cache DV on an edge case #2620
OCPBUGS-14087 : Enable HCCO to reconcile over the OperatorHub’s disableAllDefaultSources object #2632 HOSTEDCP-1009 : Allow external-dns image to be set in install cli #2623 Ensure FeatureGate is copied from cluster to MCO render source #2581
OCPBUGS-12972 : Use different ports for MCS in the ignition provider #2628 hypershift dump: use random local port for kas port-forwarding #2625
OCPBUGS-11939 : Initialize RegistryOverrides w/ mgmt cluster ICSP #2437 Revert “Merge pull request #2596 from muraee/disable-valpha1” #2627
Add ‘Creating Arm NodePools Through the API’ Section #2587
HOSTEDCP-967 : Disable v1alpha1 and conversion webhook by default #2596 OCPBUGS-13113 : Add ClusterUpgradeDuration metric #2566 chore(deps): update rhtap references #2612
OCPBU-609 : agent infrastructure docs #2618 OCPBUGS-14169 : Remove external-dns –events flag #2616 OCPBUGS-13970 : Reconcile oauthDeployment annotations even if kubeadmin secret is not found #2593 cmd: infra: aws: retry on AuthorizeSecurityGroup failure #2605
Fix dump for Kubevirt #2589
Kubevirt CSI StorageClass mapping API #2528
Remove Arm e2e test #2591
HOSTEDCP-947 : Set ETCD Storage Size as immutable field and equalised the default size among both api versions #2588 OCPBUGS-13735 : Fixed revoking some permissions to CAPI Manager Clusterrole #2586 HOSTEDCP-445 : Add script to migrate hosted control plane #2598 Use newly introduced KubeVirt Platform rhcos Image #2576
OCPBUGS-13168 : Include default ingress CA in root CA bundle #2584 HOSTEDCP-975 : Add new grafana panels for nodepools SLOs #2592 HOSTEDCP-926 : Send metric when HO/CPO decide to skip cloud resource deletion #2531 Update RHTAP references #2420
OCPBUGS-13897 : Use cluster-config-operator to render featuregate status on KAS bootstrap #2585 HOSTEDCP-975 : Add cluster_name label to nodepools metrics #2580 Fix broken tests for non-aws platforms #2577
Updated secret permissions for openshift-route-controller-manager #2575
HOSTEDCP-987 : Update go version and dependencies in /hack/tools/go.mod #2551 remove flags set by CI env var #2521
HOSTEDCP-975 : Add NodePool DeletionDuration and InitialRolloutDuration metrics #2558 ARMOCP-412 : Add ARM nodepool to AWS x86 Hosted Cluster #1594 OCPBUGS-11939 : Fix minor codebase nits #2502 control-plane-operator/controllers/hostedcontrolplane: Align reconcileCloudControllerManager error strings #2500
HOSTEDCP-960 : Add e2e to validate HC/NP conditions expected status #2482 HOSTEDCP-830 : Update auto scaler role to get and list agentmachinetemplates #2564 HOSTEDCP-445 : Included how to fix image-registry clusteroperator after a disaster recovery migration #2481 OCPBUGS-13547 : Pass release image version to MCO bootstrap via –payload-version #2572 Cache KubeVirt Boot Image #1918
contrib: ci: increase HC quota in clusters namespace #2547
HOSTEDCP-996 : CLI: enable guest cluster dump for private clusters #2571 MULTIARCH-3205 : Support IBM COS as storage for PowerVS in image registry operator #2207 fix nil deref in DefaultWorkerSecurityGroupID check #2573
remove unused OLM catalog rollout code #2568
OCPBUGS-13034 : Cluster-api SA can’t create events #2565 ACM-4277 : docs: Add L2Advertisement CR to the Handling Ingress section in the agent docs #2470 HOSTEDCP-947 : Increases default etcd PV size to 8Gi #2549 Add a new e2e option for the ETCD storage class #2560
Red Hat Trusted App Pipeline update hypershift-azjx #2555
HOSTEDCP-975 : Revised nodePoolSize metric and added AvailableReplicasMetric #2532 OCPBUGS-11383 : Sync proxy TrustedCA to guest cluster #2550 Removed unused KMS permissions for nodePool role #2456
Lock down kubevirt csi storageclass mappings #2534
OCPBUGS-13021 : Add internal/external elb tags to subnets #2541 HOSTEDCP-918 : Add validation for NodePool security Group condition when using default SG #2498 HOSTEDCP-981 : Minor updates to Getting Started & Contribute pages #2527 OCPBUGS-13111 : Fix errors from HCP controller removeServiceCAAnnotationAndSecret() #2513 Stop triggering rollout on labels/taint change #2533
Validate HO private platform input #2536
OCPBUGS-13021 : Health check load balancers only on public clusters #2535 OCPBUGS-13309 : set FeatureGate global config #2543 Add audit-log-maxbackup setting for openshift-api-server #2509
OCPBUGS-11894 : Let the aws endpoint to use the hypershift owned SG #2475 HOSTEDCP-980 : Include HostedClusterDegraded in hypershift_hostedclusters_failure_conditions metric #2523 HOSTEDCP-788 : Configurable SRE MetricsSet #2505 OCPBUGS-13112 : Add timeout to KAS health check client #2522 HOSTEDCP-978 : Bump openshift/api version and fixed KCM flags (k8s 1.27) #2519 OCPBUGS-7841 : Account for expectedState == false when capturing hostedClustersWithFailureCondition #2507 OCPBUGS-11719 : Ensure ingress controllers are removed before load balancers #2444 Fixed assignment to entry in nil map #2508
Add new –featuregate-manifest to /usr/bin/cluster-config-operator render #2506
ACM-5116 : Increase KubeVirt default Mem and Root Volume Sizes #2471 HOSTEDCP-937 : New metric to expose Hypershift operator info #2443 HOSTEDCP-969 : Consolidate labels for metrics #2494 HOSTEDCP-969 : Move proxy, silence alerts and limited support metrics into HC controller #2489 HOSTEDCP-969 : Only track available metric once #2479 OCPBUGS-11738 : Delete kubeadmin secret when an idp is defined #2452 Add PollImmediate for e2e metrics to avoid race with prom scrape interval #2483
HOSTEDCP-969 : Move HC creation metrics #2477 OCPBUGS-12153 : fix(hcco): Get OLM CatalogSource images from defined map #2454 HOSTEDCP-917 : Add publicAndPrivate <-> Private e2e test #2383 add hyperv1.SilenceClusterAlertsLabel to HostedCluster on deletion #2476
HOSTEDCP-969 : Move guest cluster resource deletion metric #2463 OCPBUGS-11450 : Pass OPENSHIFT_RELEASE_IMAGE env variable to CNO #2384 HOSTEDCP-972 : Add pre-commit command to Make file #2465 HOSTEDCP-969 : Move cluster deletion duration metric into controller #2459 Fix kubevirt csi daemonset reconcile loop #2466
Fixes loop between HC controller and pod security label syncer #2460
docs: update OIDC bucket create with bucket policy #2461
OCPBUGS-11946 : Add new OCP 4.13 storage admission plugin #2445 OCPBUGS-11773 : remove ACL for aws bucket #2423 OCPBUGS-7841 : Set metrics to 0 when needed to keep time series honest #2440 OCPBUGS-11930 : Clean up existing VPC endpoint connections #2438 Revert “Add validation for default Security Group conditions during N… #2453
HOSTEDCP-918 : Add validation for default Security Group conditions during NodePool upgrade test #2342 OCPBUGS-11649 : Always requeue AWSEndpointService controllers #2424 Add IBMers as reviewers #2436
e2e: Cleanup shared OIDC provider on SIGTERM #2435
HOSTEDCP-950 : Fix haproxy image name in ignition server #2441 OCPBUGS-7091 : Restart kube-scheduler when its configuration changes #2421 OCPBUGS-11749 : Add pod security labels to hcp namespace #2415 HOSTEDCP-950 : Validate release payload images #2368 kubevirt: Block metadata server egress #2399
Bring latest MCO API #2434
Relax MCO API strict decoding #2433
docs: update OIDC s3 bucket creation procedure #2425
json export for a common grafana dashboard for SLOs #2422
Enable monitoring for hypershift namespace #2419
MULTIARCH-3449 : set priority class for cloud controller manager pod for PowerVS #2390 Fixes HCCO reconcile error for kubevirt csi driver #2259
Add monitoring label to HCP namespace #2393
Update tekton references #2308
add OWNERS for new area labels #2414
fix typo #2411
HOSTEDCP-807 : Requeue HCP always #2408 OCPBUGS-11640 : Update HostedCluster oauthCallbackURLTemplate #2400 e2e: Fixed idp test conflict error on HosterCluster update #2389
dump: Store guest worker node logs and increase kubevirt logs verbosity #2317
HOSTEDCP-568 : Update Konnectiviy socks5 proxy for IBM exception #2366 OCPBUGS-11442 : properly reconcile with user specified changes for in proxy configuration #2382 Updated kubevirt docs #2318
OCPBUGS-11439 : allow z-stream upgrade even if CVO Upgradeable is false #2381 HOSTEDCP-954 : Remove ec2:ReleaseAddress #2379 HOSTEDCP-802 : add cli flag to enable upgrade type #2367 e2e: Fix oauth idp e2e test #2377
HOSTEDCP-951 : Let install apply to aggregate errors #2372 Revert “Create a second scheme that always registers prometheusoperatorv1 GVKs” #2374
HOSTEDCP-807 : Check KAS loadbalancer health #2264 e2e: fix for non-AWS platform #2360
HOSTEDCP-445 : Fix the storage ClusterOperator during a DR migration #2358 HOSTEDCP-850 : Fix nodepool autoscaler logic #2354 support/releaseinfo/pod_provider: Drop unused legacy PodProvider #2341
Fix nodepool upgrade e2e test #2359
HOSTEDCP-806 : Fix ValidAWSKMSConfig condition #2322 HOSTEDCP-939 : Setup shared OIDC provider for e2e clusters #2335 OCPBUGS-10227 : Preserve false status of ValidAWSIdentityProvider condition #2344 ACM-4615 get pull secret instead of dockerconfigjson from mce credentials #2338
Slo alerts #2049
HOSTEDCP-943 : Add hypershift_hosted_cluster_transition_seconds histogram #2348 HOSTEDCP-944 : Add more expectedHCConditionStates metrics #2347 OCPBUGS-10227 : Create new EC2 client for AWS identity provider health check #2346 OCPBUGS-10823 ensure well known public domains do not get proxied on image imports #2321
SDA-8609 : No more specifying the scrape interval at servicemonitors & podmonitors level #2327 OCPBUGS-10807 : Pass runAsUser to CNO so it can run its managed services with proper security context #2319 Appstudio update hypershift-azjx #2332
Revert “cpo: cno: follow image name change in release payload” #2345
support/supportedversion: Include the problematic version strings in error messages #2334
OCPBUGS-10864 : fix external APIServer address selection based on endpointAccess #2328 OCPBUGS-8073 : Do not proxy when guest cluster resolution fails #2261 MULTIARCH-3028 : handle PowerVS instance which goes to failed state during infra create and destroy process. #2088 HOSTEDCP-938 : Added PSA default profile to RunTimeDefault in operator deployment #2333 HOSTEDCP-934 : Validate PublishingStrategyMapping #2324 OCPBUGS-7091 : Honor scheduler profile in HostedCluster configuration #2330 HOSTEDCP-736 : Docs on how we handle aws permissions #2311 Add support for external infra clusters in KubeVirt platform #2017
Create a second scheme that always registers prometheusoperatorv1 GVKs #2292
OCPBUGS-10504 : Deletion of the VPCEnpoint on conflicting service names #2290 HOSTEDCP-801 : Expose external DNS for private cluster endpoints #2286 HOSTEDCP-903 : Propagate AWSEndpointService conditions #2278 Appstudio update hypershift-azjx #2287
OCPBUGS-8691 : Add storage operators perms. to watch HostedControlPlane #2301 OCPBUGS-10423 : Add validation for taint.value in nodePool #2298 HOSTEDCP-839 : Audit log sidecars for openshift-apiserver and openshift-oauth-apiserver #2232 Route to kubevirt VMs using infra id as service label selector #2092
Force controleplane upgrade always #2288
HOSTEDCP-900 : Modified AWSPrivateLinkController and AWSEndpointServiceController to respect PausedUntil spec field #2265 HOSTEDCP-919 : Clean up and API doc #2280 HOSTEDCP-688 : E2E Test NodePool Upgrade #2256 HOSTEDCP-445 : Documented the possible issues found during a HostedCluster migration #2276 OCPBUGS-10227 : Ensure identity provider health check condition is persisted and remove awsendpoint control plane finalizer if invalid aws creds #2281 OCPBUGS-8040 : Switch NTO metrics auth to certs generated by HCP controller #2050 OCPBUGS-8381 : Use appropriate serving certificate for OAuth #2279 HOSTEDCP-501 : Added detailed documentation about Hypershift release process #2272 HOSTEDCP-919 : Add AWS cloud controller manager #2271 Update PowerVS prereq doc with install and authorization details #2172
Remove webhook validation #2217
HOSTEDCP-809 : Clone CA key/cert to TLS key/cert #2246 Refactor e2e nodepool tests #2228
Update HCP version in capi cluster ref #2119
Validate etcd KMS config #2174
OCPBUGS-8421 : fix API documentation for audit webhook field #2258 Add a debug section to the Node Tuning docs #2254
Destroy cloud resources by default #2224
Add e2e test for identity providers #2166
HOSTEDCP-638 : Add latest ocp supported info to -v command for cli and operator #2233 OCPBUGS-8231 : Fix cleanup of volumes on cluster deletion #2243 fix(cpo): Delete multus validatingwebhookconfiguration on CNO init #2231
add pull-secret to imagePullSecrets for NTO, CNO, and olm-collect-profiles #2248
Update images and hypershift operator to 4.14 #2249
HOSTEDCP-904 : Add release automation and docs #2236 kms addition for pod identity workflow #2214
fix(ho): No network validation for IBM Cloud #2225
feat(HCCO): Block DNS operator delete until Cluster Version updated #2223
Add configuration for automatic labeling and label commands #2238
Skip pod restart check for NTO #2239
cpo: cno: follow image name change in release payload #2230
Added documentation around supported-versions configmap #2220
Add comment for BaseDomainPrefix #2219
Add condition to NodePool indicating whether a security group for it is available #2216
HOSTEDCP-827 : Add root volume encryption e2e test #2192 fix(hypershift): reduce CAPI rbac access #2173
Validate Network Input for HostedCluster #2215
Add labels info #2218
HOSTEDCP-826 : Customize DNS base domain prefix #2213 ensure reconcilation of apiserver port #2197
Cleanup default security group only if authorized #2211
HOSTEDCP-593 : Update the pull secret source for ignition payload #2187 fix(ibmcloud): Explicitly set HCCO controllers #2185
Adding NTO again to find the issue with data recollection #2152
cli: Add –cli-root-volume-access-modes #2188
feat: Add pod gone check to prober + DNS operator leader elect #2155
HOSTEDCP-833 : Add Golang check for ‘go list’ errors in Makefile #2193 HOSTEDCP-833 : Set kubevirt.io/client-go version to fix ART Issue #2194 add KAS egress network policy #2181
cpo: kcm: add nfs pv recycler pod template #2183
Fix kubevirt how-to doc formatting issues #2178
Update cluster api provider kubevirt dependencies #2157
fix(cpo): Set restart annotation on multus-admission-controller #2150
fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac #2141
Add default NodePool name clarification to docs #2186
fix(cpo): Reduce CNO access if Calico used as network provider #2159
add PSA labels to openshift-infra in guest cluster #2180
Add cli flag to enable root volume encryption #2177
Update KubeVirt platform how-to documentation #2108
Filtering data recolection only for aws instances running #2153
Add PodMonitor for ingress-operator pods in HCP namespaces #2136
fix regex in registry operator pod monitor #2171
Add e2e test for hosted cluster behind a proxy #2077
Skip destroyAWSDefaultSecurityGroup if not AWS #2167
Give kubevirt csi controller get VMI RBAC #2154
set default PSA enforce to restricted #2097
Full changelog
OCPBUGS-10239 : service_accounts.go Marshal fix (#750) #750 test(clusterconfig): add unit test for silenced_alerts.go and rename it to gather_silenced_alerts.go (#728) #728
test(clusterconfig): add unit test for ingresses.go and rename it to gather_cluster_ingress.go (#729) #729
test(oauth): add unit test for oauth.go and rename it to gather_cluster_oauth.go (#738) #738
gather logs - update “FilterLogFromScanner” function and add some tests (#735) #735
Add unit tests to openshift sdn controller logs gatherer (#733) #733
OCPBUGS-6731 : Anonymize env vars from containers: HTTP_PROXY, HTTPS_PROXY (#723) #723 OCPBUGS-6832 : feat(recent_metrics) adds openshift_apps_deploymentconfigs_strategy_total (#726) #726 Full changelog
OCPBUGS-45715 : Updating ironic-static-ip-manager-container image to be consistent with ART for 4.19 #46 OCPBUGS-38507 : Fix subnet validation #45 OCPBUGS-38282 : Updating ironic-static-ip-manager-container image to be consistent with ART for 4.18 #44 OCPBUGS-33907 : Updating ironic-static-ip-manager-container image to be consistent with ART for 4.17 #43 OCPBUGS-24790 : Updating ironic-static-ip-manager-container image to be consistent with ART #41 OCPBUGS-18864 : Updating ironic-static-ip-manager images to be consistent with ART #40 OCPBUGS-14614 : Remove provisioning netowrk route from “lo” #39 OCPBUGS-4501 : Flush addresses on provisioning interface with global scope only #35 Updating ironic-static-ip-manager images to be consistent with ART #34
Full changelog
Updating ose-prometheus-adapter-container image to be consistent with ART for 4.18 #108
MON-3906 : Bump prometheus adapter to 0.12.0 #106 OCPBUGS-34299 : Updating ose-prometheus-adapter-container image to be consistent with ART for 4.17 #105 OCPBUGS-34299 : Updating ose-prometheus-adapter-container image to be consistent with ART for 4.17 #104 OCPBUGS-30532 : upgrade github.com/golang/protobuf to v1.5.4 for bette… #101 OCPBUGS-25583 : Updating ose-prometheus-adapter-container image to be consistent with ART #100 OCPBUGS-24986 : Updating ose-prometheus-adapter-container image to be consistent with ART #99 OCPBUGS-24986 : Updating ose-prometheus-adapter-container image to be consistent with ART #98 MON-3584 : Remove trailing spaces from Dockerfile.ocp #97 OCPBUGS-24155 : Updating ose-prometheus-adapter-container image to be consistent with ART #95 MON-3489 : Bump openshift/k8s-prometheus-adapter to v0.11.2 #94 OCPBUGS-21621 : Add a toggle to disable HTTP/2 on the server to mitigate CVE-2023-44487 #88 add machine424 and rexagod to OWNERS #73
OCPBUGS-21621 : upgrade golang.org/x/net to 0.17.0 to address CVE-2023… #80 OCPBUGS-18971 : limit number of simultaneous client requests #76 OCPBUGS-19251 : Updating ose-prometheus-adapter images to be consistent with ART #74 Bump openshift/k8s-prometheus-adapter to v0.11.0 #72
OCPBUGS-12659 : bump golang.org/x/net version #71 Updating ose-prometheus-adapter images to be consistent with ART #69
OCPBUGS-10172 : Updating ose-prometheus-adapter images to be consistent with ART #68 Full changelog
OCPBUGS-10519 : Revert “bump RHEL8 egress-dns-proxy image to haproxy26” #135 Add jupierce as approver / remove Clayton #127
rhel9 base image: Fix build failure #126
Dockerfile: add RHEL9 base image dockerfile #124
Full changelog
OCPBUGS-52192 : [bot] Bump openshift/kube-state-metrics to v2.15.0 #119 OCPBUGS-45519 : Updating kube-state-metrics-container image to be consistent with ART for 4.19 #118 Updating kube-state-metrics-container image to be consistent with ART for 4.18 #116
OCPBUGS-33620 : [bot] Bump openshift/kube-state-metrics to v2.13.0 #115 OCPBUGS-34202 : Updating kube-state-metrics-container image to be consistent with ART for 4.17 #113 OCPBUGS-34202 : Updating kube-state-metrics-container image to be consistent with ART for 4.17 #112 NO-JIRA: Merge v2.11.0 and v2.12.0 tags #110
OCPBUGS-25585 : Updating kube-state-metrics-container image to be consistent with ART #109 OCPBUGS-24993 : Updating kube-state-metrics-container image to be consistent with ART #108 MON-3548 : Bump openshift/kube-state-metrics to v2.10.1 #107 MON-3548 : Merge tag v2.10.1 #106 OCPBUGS-21760 : bump x/net to v0.17.0 #100 add machine424 and rexagod to OWNERS #96
OCPBUGS-19256 : Updating kube-state-metrics images to be consistent with ART #97 Merge with upstream/release-2.9 #95
OCPBUGS-12347 : Update 4.14 kube-state-metrics image to be consistent with ART #94 Bump openshift/kube-state-metrics to v2.8.2 #92
OCPBUGS-10177 : Updating kube-state-metrics images to be consistent with ART #91 Bump openshift/kube-state-metrics to v2.8.1 #90
OCPBUGS-6320 : Merge upstream/release-2.8 #89 Full changelog
NO-JIRA: Add awels as approver #59
OCPBUGS-50562 : Ensure unpublish works for volumes carried over upgrades #58 OCPBUGS-50562 : Ensure volume stays attached through reboots #53 OCPBUGS-44350 : During detach don’t return error if VM is not found #47 OCPBUGS-39451 : Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.18 #46 CNV-45886 : Add csi-clone support to kubevirt-csi (#118) #45 CNV-44899 : Sync upstream 2024-07-22 #44 OCPBUGS-35093 : Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.17 #43 OCPBUGS-34058 : Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.17 #41 CNV-36073 : Enable snapshot tests #40 CNV-36073 : Sync upstream kubevirt-csi 2024-04-19 #39 “NO-JIRA: Sync upstream kubevirt-csi 2024-04-08” #38
OCPBUGS-31276 : Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.16 #37 CNV-32073 : Sync upstream 2024-03-15 #36 NO-JIRA: Address CVE-2024-1725: Restrict access to infrastructure PVCs by requiring matching infraClusterLabels on tenant PVCs #32
NO-JIRA: Snapshot backport #31
NO-JIRA: Auto sync upstream 2024 01 05 18 36 #27
OCPBUGS-24805 : Updating ose-kubevirt-csi-driver-container image to be consistent with ART #26 OCPBUGS-19115 : Updating ose-kubevirt-csi-driver-rhel8 images to be consistent with ART #23 Ensure volume is removed before returning success (#90) #22
Updating ose-kubevirt-csi-driver-rhel8 images to be consistent with ART #20
CNV-29315 : kubevirt-csi unable to unpublish volumes in the event a VM is unexpectedly destroyed #21 Auto sync upstream 2023 02 12 09 #19
Full changelog
OCPBUGS-26046 : Replace genisoimage with xorriso in 4.15 to allow rhel9 bump #281 OCPBUGS-25630 : Add Snyk file to exclude vendor directory on scan #276 OCPBUGS-25173 : Updating ose-libvirt-machine-controllers-container image to be consistent with ART #275 OCPBUGS-25101 : Updating ose-libvirt-machine-controllers-container image to be consistent with ART #274 OCPBUGS-24833 : Updating ose-libvirt-machine-controllers-container image to be consistent with ART #273 Add workaround for SLOF regression #263
client/domain: Remove spice as domain grahics #260
OCPBUGS-19187 : Updating ose-libvirt-machine-controllers images to be consistent with ART #262 OCPBUGS-18338 : Fix CI by running tests natively by default #261 Updating ose-libvirt-machine-controllers images to be consistent with ART #259
Updating ose-libvirt-machine-controllers images to be consistent with ART #258
Updating ose-libvirt-machine-controllers images to be consistent with ART #257
Updating ose-libvirt-machine-controllers images to be consistent with ART #254
Remove myself (frobware) from OWNERS #253
refactor: replace github.com/ghodss/yaml with sigs.k8s.io/yaml #252
Full changelog
Force updating rhcos image to version 413.92.202303190222-0 #27
Updating ose-machine-os-images images to be consistent with ART #25
Full changelog
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #112
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #111
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #110
Upstream sync: IP reconciler controller and dual stack #107
Full changelog
Updating ose-network-metrics-daemon images to be consistent with ART #62
Full changelog
Updating ose-nutanix-cloud-controller-manager images to be consistent with ART #4
Update OWNERS #8
Full changelog
Support categories and project fields of NutanixMachineProviderConfig #38
: Port to ginkgo v2 #41
Update OWNERS #39
: Update k8s packages to 1.26 #40
Full changelog
Remove “unsupported” wording from info on console (#594) #594
Bugfix for destination registry nested paths length (#583) #583
Fix OCPBUGS-5168: Upgrade helm.sh/helm/v3 to v3.11.2 fixing CVE-2022-23526 and CVE-2022-23525 (#592) #592
OCPBUGS-10051 : fix: remove catalog reference from ImageContentSourcePolicy.yaml (#587) #587 OCPBUGS-8216 : fix: remove an unecessary error message (#581) #581 docs: add information about unsupported scenario (#578) #578
Updating oc-mirror-plugin images to be consistent with ART (#570) #570
Fix usage of registries.conf for OCI feature (#569) #569
CFE-739 : Add skip pruning flag and logic (#567) #567 CFE-749 : add e2e test for oci catalog feature to include release and additiona… (#562) #562 CFE-764 : Introduce v1alpha2.Operator.TargetCatalog (#565) #565 docs: adds clarification to imageset reference and examples (#555) #555
CFE-768 : Update to allow for incremental and pruning for oci feature (#564) #564 use new cincinnati endpoint to download tarball (#552) #552
feat: OCI catalog filtering implementation (#559) #559
CFE-761 : Improve user experience of oc-mirror with the OCI FBC feature (#557) #557 Full changelog
Adding storage team to OWNERS so they can perform lib-go updates. #22
add proxy to node-update-controller #18
Full changelog
Source code for this page located on github