4.17.0-okd-scos.2

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.17.0-okd-scos.2

Team Approvals:

Tests:

Blocking jobs
- upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
- upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

4.17.0-okd-scos.ec.4 (changes) - Success
4.17.0-okd-scos.1 (changes) - Success
4.17.0-okd-scos.0 (changes) - Success
4.16.0-okd-scos.1 - Success

Upgrades to:

4.18.0-okd-scos.0 (changes) - Success
4.17.0-okd-scos.3 (changes) - Success

Changes from 4.16.0-okd-scos.1

Created: 2025-01-20 16:22:58 +0000 UTC

Image Digest: sha256:86eae13f86908aa4673750f35a28a4aac124dd53c739c58379559cf3af03faff

Release 4.17.0-okd-scos.2 was created from registry.ci.openshift.org/origin/release-scos:4.17.0-0.okd-scos-2025-01-20-061611

Components

Kubectl upgraded from 1.29.7 to 1.30.5
Kubernetes upgraded from 1.29.10 to 1.30.7
Kubernetes Tests upgraded from 1.29.0 to 1.30.0
CentOS Stream CoreOS upgraded from 416.9.202411211032-0 to 417.9.202501192032-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ClusterAPIInstallAzure (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
ImagePolicy (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ServiceAccountTokenNodeBindingValidation (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ServiceAccountTokenPodNodeInfo (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (Changed)
ChunkSizeMiB (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallGCP (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ClusterAPIInstallPowerVS (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
GCPLabelsTags (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ManagedBootImages (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
NodeDisruptionPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ValidatingAdmissionPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
AWSEFSDriverVolumeMetrics (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
IngressControllerLBSubnetsAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MultiArchInstallAWS (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MultiArchInstallGCP (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
SetEIPForNLBIngressController (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AdditionalRoutingCapabilities (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
BootcNodeManagement (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterMonitoringConfig (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MachineAPIMigration (0 tests)
ManagedBootImagesAWS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MultiArchInstallAzure (0 tests)
NetworkSegmentation (28 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
OVNObservability (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
PersistentIPsForVirtualization (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ProcMountType (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
RouteAdvertisements (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
UserNamespacesSupport (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

baremetal-cluster-api-controllers git 8754bf63 sha256:ae177eb7ae5892497fd6de38fccf97145b5768a21653916769dd0c2c464e7e4a
gcp-workload-identity-federation-webhook git 08579e9f sha256:c745d30328955c16c034204d44b6bb25585cdde54072d65a7ee8be0123d8afb9
metallb-frr git 377d02f9 sha256:974675734bfc43fb64ff0fa84618d65f41cb7d2d9df95470e4c57b4fc0599b21
networking-console-plugin git 0244dffb sha256:2f6852f96d25eac1a88b4b4075d404239b5a5ec813453b847a1bed7c0da8119f
operator-framework-tools git b31ed59e sha256:bb70b855652900b243df357cbc6bc6b51ddaf27f78b6934e8d245278cfd397f9

Removed images

alibaba-cloud-controller-manager
alibaba-machine-controllers
k8s-prometheus-adapter
olm-rukpak
sdn

Rebuilt images without code change

libvirt-machine-controllers git a336f0b5 sha256:d4719053e26f1c4c1e38546fb345826f68de653956c7819ebe221569d83e4562
ovirt-csi-driver git 1db726a9 sha256:603fe5da67f29d5e4e49f358eb9f2327a48d80456979006ec6ec0eb0948b1bbf
ovirt-machine-controllers git abb91c84 sha256:b20e2d4b93a30924e5d6fe295016ca660edd6130b60a9d5231d827ebaa994062
stream-coreos sha256:dfc196da40a81b10e6219f34da0d5ec97a0704b42e9093230ef0463fec813b18
stream-coreos-extensions sha256:17f8f51a1b9b43ea5562ae18ba05820329f06fdb8720f837350b61402787a575

agent-installer-api-server

MGMT-19537: Bump golang.org/x/net to 0.33.0 (#7129) #7129
OCPBUGS-42525: Disable pprof for agent-based installer (#6897) #6897
OCPBUGS-43020: Update go-jose to v2.6.3 to mitigate CVE-2024-28180 (#6892) #6892
Updating ose-agent-installer-api-server-container image to be consistent with ART for 4.17 (#6709) #6709
OCPBUGS-42569: Libraries bump to mitigate CVE-2024-27289 (#6832) #6832
MGMT-17805: Fix MCO reboot error for s390x (#6727) #6727
OCPBUGS-36577: Switch to github.com/docker/distribution/reference to mitigate CVE-2024-3727 (#6750) #6750
MGMT-18575, MGMT-18694, OCPBUGS-41820: Don’t require mapping for names matching physical interfaces (#6745) #6745
OCPBUGS-27238: Use both the OCP cluster trusted certs and user certs (#6649) #6649
MGMT-18560: Fix AutomatedCleaningMode behavior (#6662) #6662
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.15 (#6663) #6663
NO-ISSUE: Fix debug image by adding required packages (#6659) #6659
MGMT-17560: Append kargs for iSCSI boot (#6602) #6602
NO-ISSUE: [master] Bump OCP versions: 4.16 (#6658) #6658
NO-ISSUE: Add missing kube api flag on kube api subsystem test (#6655) #6655
NO-ISSUE: Print subsystem environment variables before test (#6654) #6654
MGMT-17560: validation to support iSCSI boot volume (#6434) #6434
MGMT-18313: Replace golang base image as it is based on Centos Linux 7 (#6637) #6637
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.16, 4.13 (#6644) #6644
MGMT-18231: Block iSCSI as an installation disk when its holder is multipath (#6612) #6612
MGMT-18505: Fix installation from a 4.17 hub with converged flow (#6639) #6639
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.15, 4.12 (#6638) #6638
AGENT-930: For the agent installer, parse the expiration time from the token and verify if the token is valid. (#6605) #6605
NO-ISSUE: Use skipepr to build images as debug image requires nmstate packages for building (#6629) #6629
MGMT-16242: Suggest OCP images based on availability for architecture (#6262) #6262
NO-ISSUE: [master] Bump OCP versions: 4.16 (#6621) #6621
MGMT-18451: Enable debugging assisted-service on kind (#6613) #6613
Revert “MGMT-18127: User name and password in a proxy url should be url encod…” (#6619) #6619
NO-ISSUE: Tidy golang dependencies before vendoring in base image (#6599) #6599
NO-ISSUE: [master] Bump OCP versions: 4.17 (#6611) #6611
MGMT-18446: Correct hostname max length validation (#6604) #6604
MGMT-18448: Allow local cluster import to be disabled. (#6606) #6606
MGMT-17773: Enforce go modules tidy (#6600) #6600
NO-ISSUE: [master] Bump OCP versions: 4.15 (#6598) #6598
Add -L option to curl command to follow redirects (#6594) #6594
NO-ISSUE: Adjust permissions on /data directory (#6587) #6587
Revert “Add certs to ingress when deploying in non-OCP clusters (#6564)” (#6590) #6564
Fix OKD podman deploy (#6588) #6588
MGMT-18411: Add NTP sources to discovery environment (#6591) #6591
NO-ISSUE: Fix python client generation (#6593) #6593
fix: dev-requirements.txt to reduce vulnerabilities (#6576) #6576
MGMT-18155: handle state of day2 node in Done stage (#6570) #6570
Remove unused extracter struct (#6586) #6586
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.13 (#6584) #6584
KONFLUX-1611: Add labels, licenses & user to Dockerfile (#6484) #6484
Refactor package in generator_test.go to use _test suffix for implementing black-box testing methodology (#6578) #6578
Add certs to ingress when deploying in non-OCP clusters (#6564) #6564
MGMT-18333: Remove the python client from the image (#6579) #6579
NO-ISSUE: Exclude vendor directory from snyk code analysis (#6572) #6572
(‘#6552’): Update registry.svc.ci.openshift.org to registry.ci.openshift.org (#6553) #6553
NO-ISSUE: Fix subsystem tests in the CI - Wiremock stubs script is failing to reach wiremock from time to time (#6569) #6569
NO-ISSUE: [master] Bump OCP versions: 4.14 (#6568) #6568
MGMT-18171: Make manifest metadata storage more transactional in nature (#6457) #6457
fix: dev-requirements.txt to reduce vulnerabilities (#6551) #6551
NI-ISSUE: Fix skipper configuration (#6560) #6560
MGMT-17478: Use ICC config secret for converged flow info when available (#6533) #6533
Fix kind deploy (#6561) #6561
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.15 (#6558) #6558
MGMT-18160: Use cert-manager to handle tls certs for webhooks (#6546) #6546
MGMT-17893: Don’t destroy cluster on detach (#6532) #6532
NO-ISSUE: Add renovate config to limit number of PR (#6536) #6536
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16 (#6547) #6547
NO-ISSUE: Mount emptyDir for data in image service (#6544) #6544
MGMT-18131: Make application work on non-OCP kubernetes (#6446) #6446
NO-ISSUE: [master] Bump OCP versions: 4.15 (#6511) #6511
MGMT-18286: Internal Documentation for using and testing multipath (#6505) #6505
MGMT-18269: Reset finalizing stage in DB while resetting cluster (#6499) #6499
MGMT-8356: Fix postgres deployment script in ‘kind’ target to set static nodePort correctly, Remove static nodePorts for deployment targets other then ‘kind’ (#6504) #6504
NO-ISSUE: Add 4.17 OS/OCP images (#6503) #6503
OCPBUGS-35932: Allow auth in docker credentials to be empty (#6465) #6465
NO-ISSUE: Retrieve ‘subsystem-clean’ target as it is used by the QE (#6494) #6494
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.12, 4.15 (#6502) #6502
MGMT-18073: update OCP 4.16 GA version, add 4.17 beta versions (#6501) #6501
NO-ISSUE: Increase Konflux git clone depth (#6495) #6495
Allow agent-installer-client to use a secure port when adding a new node in day2 (#6464) #6464
Update quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks:0.1 Docker digest to 8838d3e (#6479) #6479
Update quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check:0.4 Docker digest to d70d970 (#6478) #6478
Update quay.io/konflux-ci/tekton-catalog/task-clamav-scan:0.1 Docker digest to 46fcff2 (#6477) #6477
Update quay.io/konflux-ci/tekton-catalog/task-clair-scan:0.1 Docker digest to f38e274 (#6474) #6474
Update quay.io/konflux-ci/tekton-catalog/task-buildah:0.1 Docker digest to cdcb8b8 (#6473) #6473
Update quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check:0.1 Docker digest to a74dae0 (#6481) #6481
Update quay.io/konflux-ci/tekton-catalog/task-git-clone:0.1 Docker digest to 9ea6101 (#6480) #6480
MGMT-16102: Generated code returns inconsistent error codes (#6433) #6433
MGMT-18127: User name and password in a proxy url should be url encoded (#6467) #6467
NO-ISSUE: Red Hat Konflux update assisted-service-saas-main (#6471) #6471
NO-ISSUE: Add missing ‘make’ command (#6466) #6466
NO-ISSUE: Add pastequo as approver (#6460) #6460
Red Hat Konflux purge assisted-service-q2vh (#6453) #6453
fix: dev-requirements.txt to reduce vulnerabilities (#6445) #6445
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.16, 4.15, 4.13 (#6449) #6449
NO-ISSUE: Create ‘build’ dir if missing (#6448) #6448
MGMT-18029: Enhancement for manifest storage improvement (#6431) #6431
MGMT-8356: Deploy assisted-service and its components to kind cluster (#6385) #6385
MGMT-18067: Update operator bundle channel to 2.12 (#6440) #6440
NO-ISSUE: Add omer-vishlitzky to OWNERS_ALIASES file (#6432) #6432
NO-ISSUE: [master] Bump OCP versions: 4.16 (#6442) #6442
NO-ISSUE: Refactor uploader pkg (#6435) #6435
NO-ISSUE: Push cluster_installation_failed event each time the state machine go to failed state (#6439) #6439
MGMT-18092: infraenv cannot be created while deploying vlan spokes with previous configuration (#6420) #6420
MGMT-18130: Allow infra-operator to start in non OCP kubernetes clusters (#6427) #6427
fix: dev-requirements.txt to reduce vulnerabilities (#6438) #6438
NO-ISSUE: [master] Bump OCP versions: 4.12, 4.14, 4.15 (#6428) #6428
Differentiate between monitoring failures and component issues (#6437) #6437
MGMT-17708: Adjust the logs to show values when registering the cluster (#6429) #6429
Add Linoy Hadad to OWNER_ALIASES file (#6430) #6430
MGMT-18041: Expose helper to parse uploaded events (on-prem) (#6415) #6415
MGMT-18096: Make sure correct cluster name and base domain is set by local cluster import controller (#6419) #6419
NO-ISSUE: Remove double ‘required: false’ in openshift template (#6423) #6423
NO-ISSUE: [master] Bump OCP versions: 4.16 (#6421) #6421
MGMT-17300: adding has partition field for disks (#6383) #6383
MGMT-18086: Clean subsystem tests resources correctly (#6418) #6418
MGMT-18059: Mark OCI as supported integration (#6403) #6403
NO-ISSUE: [master] Bump OCP versions: 4.15, 4.14, 4.12, 4.16, 4.13 (#6409) #6409
MGMT-17802: Ensure that manifest patches may be placed in either manifests or openshift (#6411) #6411
MGMT-17794: Make sure that uploaded manifest files have valid filename before extensions (#6410) #6410
NO-ISSUE: Adding verification if file exist before sourcing it in force (#6407) #6407
AGENT-869: Implement a new auth type for ABI (#6174) #6174
MGMT-17984: [soft timeout] operators timeout after 10 hours without events (#6382) #6382
MGMT-18046: Create an infraenv for the local cluster during import (#6401) #6401
NO-ISSUE: Fix Failed to download metadata for dnf repositories in centos8 by using archived centos8 repositories (#6397) #6397
Use the static installer for 4.16 nightlies when not FIPS-enabled (#6386) #6386
MGMT-17353: Debug pod left in ImagePullBackOff after install in disconnected environment (#6333) #6333
MGMT-17901: Add the exteranl registry to the list of ignored registires for pull secret validation instead of the mirror one (#6377) #6377
MGMT-17353: Debug pod left in ImagePullBackOff after install in disconnected environment (#6332) #6332
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.15, 4.13, 4.16 (#6378) #6378
Use the EL8 assisted-service image when requested by annotation (#6349) #6349
MGMT-17763: Setting Machine network CIDR is forbidden” error is only present on cluster updates (#6359) #6359
MGMT-17901: Add mirror registries to the list of ignored registires for pull secret validation (#6371) #6371
MGMT-9589: Distribute sdist package to PyPI in addition to wheel one (#6294) #6294
MGMT-17848: Assisted service should not format multipath devices (#6360) #6360
Deprecate and disable support for OCM offline token (#6307) #6307
NO-ISSUE: wait for lso to be installed (#6374) #6374
MGMT-17849: escape ‘%’ in agent.service proxy urls (#6356) #6356
MGMT-17700: Assign none platform node-ips based on connected addresses and etcd restrictions (#6257) #6257
MGMT-17823: Cleanup the install manifest generator (#6361) #6361
MGMT-17896: Add separate Dockerfile for assisted-service with an el8 base (#6347) #6347
fix: deploy/olm-catalog/requirements.txt to reduce vulnerabilities (#6346) #6346
OCPBUGS-31727: Invalid Pull-Secret when using password which contains a colon character (#6258) #6258
fix: dev-requirements.txt to reduce vulnerabilities (#6348) #6348
MGMT-17618: NMStateConfig interfaces presence should be validated (#6305) #6305
MGMT-17850: Bump k8s.io modules to v0.29 (#6345) #6345
NO-ISSUE: Add 4.16 rhcos images (#6326) #6326
MGMT-17770: Split ignition handling file (#6283) #6283
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.12, 4.15 (#6358) #6358
MGMT-17811: Do not create local cluster namespace (#6314) #6314
OCPBUGS-34181: Don’t use the statically linked installer if FIPS is enabled (#6355) #6355
MGMT-17866: Assisted service change for F5 DNS load balancer (#6339) #6339
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

OCPBUGS-47493: MGMT-19537: Bump golang.org/x/net to 0.33.0 (#989) #989
OCPBUGS-44904: Rhcos fails to reboot for skip mco reboot on s390x (#942) #942
OCPBUGS-38466: Allow controller to continue when assisted-service (#918) #918
OCPBUGS-43023: Pick up latest CVE changes by bumping service (#919) #919
OCPBUGS-42156: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#904) #904
OCPBUGS-31570: Bump to latest preinstall utils for disk cleanup fixes (#886) #886
NO-ISSUE: fixing ARM images builds (#885) #885
OCPBUGS-36779: Reload host inventory on conflict (#877) #877
MGMT-18332: Use centos stream 9 as the base image for test container (#876) #876
NO-ISSUE: Replace base golang image in the build Dockerfile as it is based on centos7 and it is EOL, which results in yum can’t reach its repositories (#862) #862
MGMT-17353: Debug pod left in ImagePullBackOff after install in disconnected environment (#852) #852
MGMT-17353: Debug pod left in ImagePullBackOff after install in disconnected environment (#817) #817
MGMT-16843: Use hostnamectl to replace illegal hostname (#839) #839
Full changelog

agent-installer-node-agent

MGMT-19537: Bump golang.org/x/net to 0.33.0 (#873) #873
OCPBUGS-43024: Pick up latest CVE changes by bumping service (#805) #805
OCPBUGS-42157: Switch to github.com/docker/distribution/reference to Mitigate CVE-2024-3727 (#783) #783
NO-ISSUE: Bump the go-dependencies group with 3 updates (#763) #763
MGMT-17560: Report iSCSI host IP address in inventory (#727) #727
NO-ISSUE: fix for ARM and multi images (#754) #754
NO-ISSUE: Bump golang.org/x/sys in the go-dependencies group (#751) #751
NO-ISSUE: Use centos stream 9 as the base image for test container (#750) #750
NO-ISSUE: Migrate build image to use registry.access.redhat.com/ubi9/go-toolset:1.20 (#735) #735
MGMT-17867: fix multipath inventory to include wwn (#733) #733
NO-ISSUE: Bump the go-dependencies group with 2 updates (#726) #726
NO-ISSUE: Bump the go-dependencies group with 2 updates (#720) #720
MGMT-17353: Debug pod left in ImagePullBackOff after install in disconnected environment (#719) #719
NO-ISSUE: Bump github.com/hashicorp/go-version (#715) #715
OCPBUGS-33404: Make removable disks eligible (#716) #716
MGMT-17869: Agent changes for F5 DNS load balancer (#712) #712
Full changelog

agent-installer-utils

OCPBUGS-34187: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.17 #35
Full changelog

apiserver-network-proxy

OCPBUGS-37052: Revert “Agent: Respect HTTPS_PROXY env vars for proxied connections” #57
OCPBUGS-34199: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.17 #54
Full changelog

aws-cloud-controller-manager

NO-JIRA: Update OWNERS #91
OCPCLOUD-2608: Merge https://github.com/kubernetes/cloud-provider-aws:master (0445cf1) into master #62
OCPBUGS-33979: update for CVE-2023-45288 [release-4.17] #87
OCPBUGS-31572: Ensure that addresses are added in network device index order #86
Full changelog

aws-cluster-api-controllers

OCPBUGS-43921: OSD-25934: Only tag NetworkInterfaces in RunInstances if IAM Allows It #528
OCPCLOUD-2679: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.6.1 (6db1244) into master #519
NO-JIRA: Update OWNERS #517
OCPBUGS-34382: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.17 #515
OCPCLOUD-2620: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.5.0 (fb221b1) into master #512
Full changelog

aws-ebs-csi-driver

STOR-1598: Rebase to v1.32.0 for OCP 4.17 #272
OCPBUGS-36943: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.17 #273
OCPBUGS-34232: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.17 #268
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-44974: Set separate secrets for file and disk config on HyperShift #331
OCPBUGS-42949: add tag matching to Azure File storage class #291
OCPBUGS-43789: add ability to control kube rbac proxy container image… #310
OCPBUGS-42997: Correct aws efs csi driver config as removable #296
OCPBUGS-38355: Bump openshift/api to get EFS volume metrics #274
OCPBUGS-38736: Some CSI driver containers missing terminationMessagePolicy #263
OCPBUGS-38815: add init container in EFS CSI controller pod #265
OCPBUGS-38355: Volume Metrics for EFS CSI Driver #257
STOR-1819: Add manifest with OCP specific test config #254
NO-JIRA: use service account namespace placeholder for smb role bindings #250
STOR-2002: add Azure File snapshot support #253
OCPBUGS-37488: add init container in EBS CSI controller pod #248
STOR-1856: add STS hook for EFS credentials request controller #251
STOR-1874: Use real HyperShift API #236
OCPBUGS-37274: Add FIPS_ENABLED to env vars for aws-efs-csi-driver (2) #249
STOR-1856: remove aws efs operator legacy dir #244
STOR-1596: Bump all deps for 4.17 #240
STOR-1856: STOR-1606: migrate legacy AWS EFS operator code to csi-operator #237
OCPBUGS-36936: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.17 #241
OCPBUGS-36948: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.17 #243
OCPBUGS-36942: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.17 #242
STOR-1606: Bump OLM metadata to 4.17 #239
OCPBUGS-34451: Bump go version to be consistent with ART #238
STOR-1290: don’t pass credentials via environment variables in AWS EBS #202
STOR-1856: migrate AWS EFS operator to csi-operator #232
NO-JIRA: keep smb test storageclass consistent with official doc #234
OCPBUGS-34667: Ensure Node Metric Service is created in the openshift-cluster-csi-drivers namespace for both OpenShift and Hypershift #233
OCPBUGS-34189: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.17 #227
OCPBUGS-32370: Configure scraping of node metrics #223
OCPBUGS-33776: Adjust port for registrar sidecar in aws-ebs csi driver container #225
Full changelog

aws-kms-encryption-provider

OCPBUGS-34314: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.17 #19
hack: display diff on verify-mod-tidy failure #25
NO-JIRA: Bump to latest #20
Full changelog

aws-machine-controllers

OCPBUGS-45186: fix Associate*IpAddress flag when launch EC2 #118
OCPCLOUD-2565: Add feature gates flag #108
OCPBUGS-36469: Update placementGroupPartition to honour it as a pointer #107
CFE-1064: Add support for PlacementGroupPartition of placement group #101
NO-JIRA: Update OWNERS #105
OCPCLOUD-2615: Update dependencies to K8s 1.30 #104
OCPBUGS-34255: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.17 #103
Full changelog

aws-pod-identity-webhook

OCPBUGS-34147: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.17 #194
OCPBUGS-34147: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.17 #193
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-46039: Prevent panic when informer receives cache.DeletedFinalStateUnknown #132
NO-JIRA: Update OWNERS #123
OCPCLOUD-2607: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (e6f5e9a) into master #113
Full changelog

azure-cluster-api-controllers

OCPCLOUD-2584: Add manifest generation #300
OCPBUGS-34246: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.17 #312
OCPBUGS-36026: Update go-retryablehttp to v0.7.7 #309
NO-JIRA: Update OWNERS #308
OCPCLOUD-1640: Add DisableExtensionOperations field #301
OCPCLOUD-2621: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.15.0 (e1f1f75) into master #305
Full changelog

azure-disk-csi-driver

STOR-1601: Rebase to upstream v1.29.7 for OCP 4.17 #81
OCPBUGS-36939: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.17 #83
OCPBUGS-34111: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.17 #79
Full changelog

azure-file-csi-driver

OCPBUGS-38669: bump mount-utils to treat ENODEV error as corrupted mount #75
STOR-2002: UPSTREAM: 2040: fix snapshot size #73
STOR-1604: Rebase v1.30.3 for OCP 4.17 #70
OCPBUGS-34464: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.17 #72
Full changelog

azure-kms-encryption-provider

OCPBUGS-34277: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.17 #7
OCPBUGS-33805: Use exec form entrypoint #5
Full changelog

azure-machine-controllers

OCPCLOUD-2565: Adds –feature-gates CLI argument #116
NO-JIRA: Update OWNERS #114
OCPCLOUD-2614: Update to K8s 1.30 #113
OCPBUGS-34184: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.17 #108
CFE-1050: Add support of capacity reservation group in openshift/machine-api-provider-azure #107
Full changelog

azure-workload-identity-webhook

OCPBUGS-34208: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.17 #22
OCPBUGS-34208: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.17 #21
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-45340: move GCP zone filtering client-side #9264
OCPBUGS-48257: remove the types which failed by RHEL-59521 and add the new gpu vm type #9354
OCPBUGS-45813: Remove unused variable from ASH arm template 06_workers.json #9285
OCPBUGS-48359: Allow more time for Service Account Creation #9362
OCPBUGS-45344: support additionalNTPSources in node-joiner tool #9265
OCPBUGS-48119: Always set AllowCrossTenantReplication parameter to false #9346
OCPBUGS-46432: Power VS: Create region-zone-sysType hierarchy #9319
OCPBUGS-46360: aws: add ec2:AllocateAddress perm requirement. #9313
no-jira: Collect bootstrap logs when control plane provisioning fails #9308
OCPBUGS-45726: IBMCloud: Add service overrides #9267
OCPBUGS-42117: Remove destroy search for regional target tcp proxies #9025
OCPBUGS-45484: PowerVS: Listen to machineNetwork #9271
OCPBUGS-44848: aws: user right perm for untagging BYO IAM profiles #9228
OCPBUGS-45276: Bump Azure Machine Timeout #9257
ARO-12457: Include bootstrap docker config file in go module #9258
OCPBUGS-43047: fix slice init length #9089
OCPBUGS-43800: pkg/asset/installconfig/azure: send full certifcate chain #9140
CORS-3753: Allow mocking of the Azure client everywhere #9219
OCPBUGS-44611: [release-4.17] capi/aws: set Node Port Service CIDR override #9209
OCPBUGS-44230: Add C4A instance types #9181
OCPBUGS-44231: [release-4.17] capi/aws: bump provider for LB DNS lookup fix #9179
OCPBUGS-44261: Ensure rendezvousIP is checked against host IP #9184
OCPBUGS-43972: Cherrypick oci ccm fix to 4.17 #9152
OCPBUGS-44247: PowerVS: Update 4.17 CAPI ibmcloud to 9b077049 #9182
OCPBUGS-41642: vendor: Update openshift/api to pick up v4.17 capability sets #9013
OCPBUGS-44226: PowerVS: Fix MissingSecurityGroupRules #9175
OCPBUGS-44227: PowerVS: Fix destroy persistent TG #9176
OCPBUGS-44228: PowerVS: Change CAPI verbosity level #9177
OCPBUGS-43846: add chrony.conf file when additional NTP sources are configured #9142
OCPBUGS-43735: Add C4 instance validation #9130
OCPBUGS-43897: Revendor assisted service external platform oci #9147
OCPBUGS-43786: Limit GCP API firewall rule for internal clusters #9138
OCPBUGS-43547: Power VS: Fix incorrect error handling for AddSecurityGroupRule #9112
OCPBUGS-43088: GCP Validate Disk and Instance Type #9091
OCPBUGS-43329: IBMCloud: Handle pagination for subnets #9096
OCPBUGS-42716: Update RHCOS 4.17 bootimage metadata to 417.94.202410090854-0 #9092
OCPBUGS-42806: gather: simplify service regex for analyze #9079
OCPBUGS-42996: Power VS Ensure Metadata populated for CAPI/private cluster case on PowerVS #9086
OCPBUGS-42115: Add validation for gcp disk and instance types #9023
OCPBUGS-42842: add new tested azure instance types detected during QE 4.17 full function test #9080
OCPBUGS-41812: Validate MTU for custom network #9084
OCPBUGS-42794: PowerVS: Add support for persistent Transit Gateways #9078
OCPBUGS-42699: machines: don’t sort mpool zones #9065
OCPBUGS-42483: PowerVS: update capi ibmcloud c6bcd313 for 4.17 #9054
OCPBUGS-39414: OpenStack: Install CI dependencies from rpm #8994
OCPBUGS-42142: Skip private managed zone creation for xpn installs #9033
OCPBUGS-42183: Add GCP N4 Machine Series to tested instances for OCP #9041
OCPBUGS-42126: add tested IBMCloud instance types in 4.17 test #9030
OCPBUGS-42118: Set default release image to 4.17 #9026
OCPBUGS-42116: Remove bindings for XPN installs #9024
OCPBUGS-39409: Fix IPv6 security group rule for schedulable master #8970
OCPBUGS-41622: update RHCOS 4.17 bootimage metadata to 417.94.202409120353-0 #9019
OCPBUGS-42051: Fix integration tests #9018
OCPBUGS-41300: Azure CAPI: Improve handling of security features configured on the MachinePools and OSDisk #9007
OCPBUGS-39286: Fix var_files syntax to work on older version of ansible #8933
OCPBUGS-41896: Add AWS c7g,m7g,r8g to tested instance types #9005
OCPBUGS-41542: Azure CAPI: Update publicAccess for Blob Containers #9006
OCPBUGS-41702: aws: bump capa to fix EIP leak on bootstrap when BYOIP #8991
OCPBUGS-38933: install-status reflects day 2 services #8899
OCPBUGS-39239, OCPBUGS-39240: vSphere - If template is defined skip downloading #8926
OCPBUGS-41300: Azure CAPI: Set SecurityType as a Feature while creating Gallery Image #8990
OCPBUGS-41500: Bump extract-machine-os timout to 20m #8981
OCPBUGS-38963: IngressController subnet selection in AWS #8909
OCPBUGS-41542: Azure CAPI: Fix storage account and vhd container public access #8984
OCPBUGS-41539: Pick the next available IP address for internal LB #8980
OCPBUGS-38568: Azure: Add master and worker VM IPs to both the backend pools API LoadBalancer #8968
OCPBUGS-39545, OCPBUGS-39546, OCPBUGS-39547: update vault version to 1.13.10 #8954
OCPBUGS-38568: Azure CAPI: Add check for APIServer OperatorPublishingStrategy #8870
OCPBUGS-41283: update RHCOS 4.17 bootimage metadata to 417.94.202408270355-0 #8975
OCPBUGS-39495: capi/aws/byo-vpc/multi-cidr: fix group rules #8952
OCPBUGS-39433: dropping this warning as the move from terraform is transparent to the end user #8950
OCPBUGS-38752: Remove firewall rules created by CAPG #8948
OCPBUGS-38738: pkg/infrastructure/azure: set correct cloud for BYO vnet #8972
OCPBUGS-39308: Fix to validation for GCP pre-created ServiceAccount #8931
OCPBUGS-39467: Enable TLS for virtual media in initial ironic deployment #8947
OCPBUGS-39092: Use infrastructure resource to retrieve platform type #8914
OCPBUGS-38934: failed to install Nutanix OCP 4.16 cluster with DHCP network #8900
OCPBUGS-38841: ic: validate release arch is compatible with cluster arch #8895
OCPBUGS-38600: GCP Global Address failed to destroy #8884
OCPBUGS-38616: incorrect folder gen, workaround govmomi vm folder path bug #8867
OCPBUGS-39002: Add new disk types GCP Control Plane nodes #8903
OCPBUGS-38301: upi/aws: update lambda runtime python version #8896
OCPBUGS-38832: aws: validate public-only subnets configs #8893
OCPBUGS-38497: vsphere, if secureboot is enabled, disable it in the template #8841
OCPBUGS-38560: import failure when esxi config is not the same in the cluster #8857
OCPBUGS-38604: Updated powercli configuration to allow multi vcenters #8865
OCPBUGS-38738: CAPZ USGovernmentCloud fixes #8885
OCPBUGS-38534: Resource deletion is holding up deletion process #8849
OCPBUGS-38677: upstream capv bug causes session timeout #8874
OCPBUGS-38246: Add roles needed for shared VPC #8866
OCPBUGS-38692: aws: add support for clusters with public-only subnets #8878
OCPBUGS-38700: pkg/infrastructure/azure: limit storage account to 24 characters or less #8879
OCPBUGS-38602: pkg/asset/machines: fix Azure zones #8862
OCPBUGS-38730: Fix typo #8881
OCPBUGS-38488: AGENT-938: Enhance console logging to display node ISO expiry date during addNodes workflow #8839
OCPBUGS-38569: only allow a single network in failure domain topology #8859
OCPBUGS-38604: Enhanced vSphere UPI scripts for multi vcenter support #8863
OCPBUGS-38387: aws: do not allow edge pools of different arch #8828
OCPBUGS-38244: Do not create firewall rules for xpn installs #8847
OCPBUGS-38447: [release-4.17] bump capa for instance register fix #8836
OCPBUGS-38439: PowerVS: Fix mad system pool #8834
OCPBUGS-38393: [release-4.17] CFE-920: Update GCP userLabels and userTags configs description #8821
OCPBUGS-38356: Update control plane tags to match CAPI networks #8823
AGENT-944: Enable assisted-service debug logging #8816
OCPBUGS-37770: data/bootstrap/files/usr/local/bin/bootkube: Pass CVO render –feature-gate-manifest-path #8813
OCPBUGS-37821: Remove timed context for gcp client #8792
CORS-3575: Azure: remove azure terraform code and resources #8764
OCPBUGS-37540: Gather Azure Logs through load balancer #8812
AGENT-937: Check Authentication Token for Node Boot-Up on day2 #8802
Revert “Revert #8221 “SPLAT-1553: Added multi vCenter support for capi installer.”” #8638
MULTIARCH-4770: MULTIARCH-4776: bump o/api for MultiArchInstall FGs #8808
MULTIARCH-4098: Power VS: Make CAPI the default deployment method #8814
CORS-3617: Make Azure CAPI the default (& only) install option #8809
no-jira: PowerVS: Block disconnected deploys in 4.17 #8798
CORS-3608: aws: deprecate platform.aws.amiID field #8755
NO-ISSUE: Remove unnecessary code #8805
AGENT-890: Simplify Agent ISO kargs setting #8513
CORS-3546: Nutanix: add gpus and dataDisks support #8765
OCPBUGS-38055: fix/aws/edge: IAM profile must be same of workers #8803
CORS-3594: MOVE GCP CAPI to default feature set #8723
no-jira: doc: minor update to installation doc #8795
AGENT-870: Update AUTH_TYPE #8108
OCPBUGS-37594: pkg/infrastructure/azure: Set architecture when creating gallery image #8800
CORS-3609: aws: support existing IAM instance profiles #8689
MULTIARCH-4828: Pass ServiceEndpoints from install-config to CAPI for PowerVS #8781
MGMT-18364: add image-based installation ISO integration tests #8797
CORS-3565: CAPZ private clusters #8732
OCPBUGS-36361: Azure: If credentialsMode is manual, pass the identity through #8786
CORS-3299: Azure: Use Customer Managed Key to enable Storage Account Encryption #8736
MULTIARCH-4770: bump o/api for MultiArchInstall TechPreview gates #8791
OCPBUGS-34953: fix bogus analyze message when gather fails #8787
AGENT-928: allow user to specify sshKey via config file #8779
OCPBUGS-35262: Upgrade to latest cluster-api-provider-gcp #8780
AGENT-862: Change day-2 monitor timeout back to 90 minutes #8783
AGENT-919: Authenticate day2 operations #8717
OCPBUGS-35959: azure: Fix Accelerated network enablement #8667
CORS-3209: Set UserTags on CAPG resources #8691
no-jira: bootstrap: add shellcheck directives to follow sourced files #8741
CORS-3580: Update GCP Disk Types #8773
no-jira: Azure: remove stale DNS migration images #8775
OCPBUGS-37217: CAPI GCP - retry SetIAMPolicy #8763
OCPBUGS-37427: bootstrap gather fails in vsphere, only ipv6 address used #8759
OCPBUGS-37356: vSphere validation fails if dc is in a folder #8758
OCPBUGS-35366: Update upi references to api-internal #8582
AGENT-862: Extend monitor-add-nodes to support multiple nodes #8507
AGENT-854: day2 add-nodes workflow validations #8740
AGENT-900: enable fips for add-nodes workflow #8760
CORS-3568: Support GCP pre-created Service Accounts for CAPG #8750
OCPBUGS-36302: pkg/asset/machines/azure: Don’t set disk encryption set to nil #8756
OCPBUGS-36780: ic: fix typo in warning message #8744
OCPBUGS-36913: openstack: Fix security group tagging #8757
OCPBUGS-36390: aws: do not require create permissions when BYO IAM role #8688
MULTIARCH-4814: ic: add release arch validation for multi-arch clusters #8761
AGENT-922: Remove misleading inClusterConfig warning #8715
OCPBUGS-36904: aws: bump CAPA for subnet tagging fix #8730
no-jira: Replace Equal with ErrorContains for image-based nmstatectl unit tests #8762
OCPBUGS-37226: Persist image-based config manifests from state instead of template #8752
MGMT-18364: Add image-based config ISO integration tests #8737
OCPBUGS-36917: openstack: Fix apiVIPs and ingressVIPs docs #8728
no-jira: docs/user/azure: fix byo vnet security groups #8485
CORS-3607: Azure CAPI Installs within Tech Preview featureset #8754
MULTIARCH-4777: gcp: support multi-arch nodes #8701
OCPBUGS-35406: Use service CIDRs to determine bootstrap kubelet IP family #8681
AGENT-910: node-joiner multi-arch support #8644
METAL-1039: Allow baremetal platform without MAPI #8521
CORS-3569: UDR for Capz #8731
MULTIARCH-4569: aws: support multi-arch nodes #8698
no-jira: Revert “Merge pull request #8714 from r4f4/bump-default-release-4.17” #8753
OCPBUGS-37104: openstack: Validate controlPlanePort has subnet #8739
OCPBUGS-37164: Handle empty config for image-based create image #8745
OCPBUGS-37107: Power VS: Disable SNAT when specifying imageContentSources #8697
STOR-1353: Attempt to cleanup GCP Filestore instances on destroy #8699
CORS-3073: azure: Allow for installs in existing vnets #8662
MGMT-17842: Add image-based installer create config ISO #8514
MGMT-17226: Add image-based installer create installation ISO #8679
OCPBUGS-35440: capi/aws: bump provider for ingress rules fix #8596
OCPBUGS-34638: destroy/gcp: set value for DiscardLocalSsd #8649
CORS-3302: port forward SSH to bootstrap host #8669
OCPBUGS-36713: CAPG use existing subnets and VPC #8722
MGMT-17226: Add imagebased installer skeleton #8709
CORS-3485: Azure: modify control plane outbound LB into submission as an API LB #8652
OCPBUGS-36378: capi: start controllers after WaitGroup is created #8693
CORS-2775: cmd: destroy: remove deprecated github.com/pkg/errors #8720
OCPBUGS-33973: Openstack UPI - Reintroduce unique resource names. #8477
MULTIARCH-4568: Print release image arch and default arch when the payload is multi #8515
CORS-3593: go.mod: bump k8s dependencies #8713
OCPBUGS-35262: Skip firewall rule creation if permission is missing #8706
OCPBUGS-36142: azure: Fix HyperVGeneration for gen2 images. #8666
OCPBUGS-35542: Cleanup capi artifacts #8599
CORS-3590: releaseimage: update default version #8714
AGENT-875: Authenticate agents #8395
OCPBUGS-34708: CORS-3582: capi: remove unused feature gates #8703
OCPBUGS-36660: CORS-3591: 4.17 default channel incorrectly points to stable-4.16 #8708
CORS-3296: CAPG - configure Internal LoadBalancer in the provider #8421
CORS-3547: Upgrade cluster-api-provider-gcp to v1.7 #8700
AGENT-876: Authenticate systemd services and curl requests #8393
SPLAT-1670: install pwsh from ci mirrored image #8643
OCPBUGS-36453: PowerVS: add .ssh directory #8686
OCPBUGS-35262: Fix shared vpc issues with capg installs #8583
AGENT-925: retrieve ignition endpoint to add a new node #8650
OCPBUGS-35752: capi/aws: disable EKS controller in CAPA #8628
OSASINFRA-3402: Use Gophercloud v2.0.0 #8685
AGENT-871: Authenticate wait for #8270
OCPBUGS-36318: update RHCOS 4.17 bootimage metadata to 417.94.202407010929-0 #8690
OCPBUGS-36316: Power VS: Allow pending network for internal publishing strategy #8677
OCPBUGS-36242: vSphere - If the folder pre-exists do not tag #8671
OSASINFRA-3510: Change ‘Generate’ to accept a context #8562
OCPBUGS-36284: Remove etcd store when provisioning fails #8673
OCPBUGS-36092: bump go-retryablehttp for CVE fix #8653
no-jira: Update documentation on libvirt installs for devs #8675
OCPBUGS-36176: PowerVS: Add ibmcloud plugins #8661
OCPBUGS-35382: CAPG marketplace image use for control plane nodes #8665
OCPBUGS-35852: capi: shutdown local controlplane as the last step #8639
OCPBUGS-35188: aws: remove terraform configs #8557
CORS-3435: Create user assigned identity for Azure VM’s #8645
MULTIARCH-4515: Add new files for agent-based installer (LPAR support for s390x) #8536
OCPBUGS-35420: OSASINFRA-1962: openstack: Validate additionalNetworkIDs and additionalSecurityGroupIDs #8592
CORS-3483: Update CAPI and CAPZ versions to set Machine DisableExtensionOperations #8627
OCPBUGS-34978: Power VS: Ensure that VPC has prerequesite resources for private #8532
OCPBUGS-35547: Configured logger for controller-runtime #8641
OSASINFRA-3465: openstack: Update Gophercloud to v2 #8493
CORS-3562: azure: Setting experimental MachinePool featuregate to false #8637
CORS-3434: azure: Skip image upload if env var is set #8283
OCPBUGS-14963: IBMCloud: Ignore failed VPC regions #8556
OCPBUGS-33735: Remove GCP bootstrap ssh firewall rule #8523
OCPBUGS-31275: gcp: Validate install-config examples #8198
no-jira: images: upi-installer image cleanup #8216
OCPBUGS-33702: baremetal: bootstrap: bind icc to localhost #8445
Revert #8221 “SPLAT-1553: Added multi vCenter support for capi installer.” #8630
OCPBUGS-35426: Update cluster-api-provider-openstack to v0.10.3 #8625
OCPBUGS-35523: remove terraform libvirt from the installer #8610
OCPBUGS-30025: fix: changed validation for olm and marketplace #8609
OCPBUGS-35430: Support CAPI provider custom timeouts #8568
OCPBUGS-35533: Fix ethertype for masters service router SG creation #8615
CORS-3265: capz: Add Accelerated Networking #8418
OCPBUGS-35494: capi/aws: allow 6443 for private cluster NLB #8620
OCPBUGS-35530: capi/aws: retry SSH ingress rule removal #8616
OCPBUGS-35400: For GCP, only configure kmsKeyServiceAccount if set #8597
SPLAT-1553: Added multi vCenter support for capi installer. #8221
OCPBUGS-34037: bump github.com/container/images for CVE fix #8564
OCPBUGS-35511: capi aws: append random string in caller ref #8593
SPLAT-1437: CAPI/AWS/BYOIP: supporting Public IPv4 Pool #8175
OCPBUGS-35467: capi/aws: disable CAPA’s TagUnmanagedNetworkResources feature gate #8602
OCPBUGS-33745: save etcd data to its own directory #8424
NO-JIRA: Remove dulek from openstack-{approvers,reviewers} #8413
OCPBUGS-34819: capi/aws: bump provider for fixes #8545
OCPBUGS-34618: vsphere - allow network selection on cluster name #8505
OCPBUGS-35037: aws: delete ignition bucket on bootstrap destroy #8584
OCPBUGS-35293: Add ELB V2 permission to set security groups on API server load balancer #8572
OCPBUGS-34712: add tested instance type for IBMCloud #8549
OCPBUGS-35315: capi: use polling instead of exponential backoff #8522
OCPBUGS-35197: capi/aws: do not set proxy for masters #8570
OCPBUGS-34005: openstack: Attach a bootstrap FIP to the cluster network port #8578
OCPBUGS-35309: Add S3 permission to allow attaching S3 bucket policy #8573
OCPBUGS-33661: capi/aws: rename preserveBootstrapIgnition #8460
OCPBUGS-35180: Prevent multiple invocations on CAPI #8565
OCPBUGS-33681: Cleanup bootstrap resources for capg install #8489
OCPBUGS-34713: AWS remove extra tags from awsmachines for security groups and subnets #8567
OCPBUGS-35041: capi: do not override KUBECONFIG #8542
OCPBUGS-34325: Updating ose-baremetal-installer-container image to be consistent with ART for 4.17 #8559
OCPBUGS-35182: write etcd and kube-apiserver logs #8441
OCPBUGS-34456: bump envtest binaries version #8471
no-jira: hack: bump golangci-lint version #8535
OCPBUGS-34416: Validate OnHostMaintenance and ConfidentialCompute #8541
OCPBUGS-35039: PowerVS: Destroy DHCP in ERROR state #8544
OCPBUGS-34082: baremetal: check if HardwareDetails is nil #8443
OCPBUGS-34368: OCPBUGS-34325: OCPBUGS-34311: OCPBUGS-34221: Bump golang 1.22 #8473
OCPBUGS-34295: wait for ip addresses to be present on machines #8450
OCPBUGS-35099: OCPBUGS-4466: Prevent cluster installation with mismatched worker assets and worker replicas #8370
OCPBUGS-35038: capi/aws: add BootstrapDestroyer guard #8543
OCPBUGS-34915: Add network tags to capg control plane machines #8531
OCPBUGS-35020: capi/aws: don’t use S3 stub for masters #8538
OCPBUGS-33662: aws: don’t always require s3:Delete* permissions #8410
OCPBUGS-34969: Power VS: Add ports needed for private clusters to security group #8530
OCPBUGS-34900: Increase timeout for bootstrap complete #8534
no-jira: Minor updates to fix linting issues. #8529
OCPBUGS-34869: PowerVS: fix AddIPToLoadBalancerPool #8508
MULTIARCH-4640: Add 4 new regions for PowerVS #8484
OCPBUGS-34493: baremetal: Don’t always enable provisioning-interface.service #8491
No-jira: Revert “Cleanup GCP Filestore instances on destroy” #8527
OCPBUGS-33793: Make Ingress capability required for all baselines #8525
OCPBUGS-34692: update RHCOS 4.17 bootimage metadata to 417.94.202405291927-0 #8516
OCPBUGS-33789: [Nutanix] installer intermittent failed at uploading the bootstrap image to PC when CAPI enabled #8468
STOR-1353: Cleanup GCP Filestore instances on destroy #7251
OSASINFRA-3456: OpenStack: do not use trunk for the Machines by default #8497
OCPBUGS-33508: capi/aws: fix setting custom AMI #8466
OCPBUGS-33793: Make Ingress capability required for standalone OpenShift #8502
CORS-3523, CORS-3524: aws: terraform: add spot instance support for masters #8349
OCPBUGS-33410: attach tag to folder,fix folder destroy #8373
OCPQE-22479: add machine series ‘A3’ and ‘C3D’ to ‘Tested instance types for GCP’ #8504
OCPBUGS-33840: Warn before trimming cluster name #8367
OCPBUGS-33234: azure: bump profile used for network #8351
OCPBUGS-33925: tfvars: change asset’s name #8464
OCPBUGS-33561, OCPBUGS-33615: capv - missing cores/socket,disk type #8446
no-jira: Removing unused users from owners aliases #8498
OCPBUGS-30860: Use infrastructure API to detect cluster topology #8429
MGMT-17468: Detect Release Image Arch in a Disconnected Env. #8378
MULTIARCH-4076: PowerVS: Default region bug fix #7862
OCPBUGS-34243: unique AWS HostedZone Caller Ref #8453
OCPBUGS-30516: bump golang-protobuf for CVE fix #8379
no-jira: images: delete Dockerfile.upi.ci.rhel8 #8377
OCPBUGS-33570: Nutanix IPI install with capi failed to set bootType #8454
OCPBUGS-34389: aws/cluster: restrict SSH on private clusters #8462
OCPBUGS-34368: Updating ose-installer-artifacts-container image to be consistent with ART for 4.17 #8459
OCPBUGS-34354: PowerVS: update capi ibmcloud to release 0 8 0 #8458
OCPBUGS-33926: capi/aws: don’t modify BYO role’s policy #8457
OCPBUGS-33912: PowerVS: Use random subnet #8420
OCPBUGS-34221: Updating ose-installer-altinfra-container image to be consistent with ART for 4.17 #8449
OCPBUGS-34311: Updating ose-installer-container image to be consistent with ART for 4.17 #8455
OCPBUGS-34040: Add –dir /tmp to node-joiner-monitor.sh #8444
OCPBUGS-30860: bootstrap: hit readyz when checking LB status #8400
OCPBUGS-33877: bump aws bootstrap destroy timeout #8427
OCPBUGS-33995: PowerVS: Also fill out PlatformSpec for custom endpoints #8439
TRT-1674: 4.17 capi revert 1 #8433
OCPBUGS-33493: Enable leader election for baremetal operator #8391
OCPBUGS-33890: SPLAT-1469: Remove vsphere terraform #8254
CORS-2840: promote capi-installers to default feature set #8416
Full changelog

baremetal-machine-controllers

OCPBUGS-46646: Bump x/net to 0.33.0 #225
OCPBUGS-34210: Updating baremetal-machine-controller-container image to be consistent with ART for 4.17 #219
OCPBUGS-34210: Updating baremetal-machine-controller-container image to be consistent with ART for 4.17 #217
Full changelog

baremetal-operator

OCPBUGS-39489: Disallow fetching secrets from namespaces different from the host’s one #377
OCPBUGS-38937: [OCP] Ability to disable agent power off after deployment #371
OCPBUGS-36425: Sync jul 30 #367
NO-ISSUE: Bmo sync jul9 #364
OCPBUGS-35559: Bmo sync jul5 #362
OCPBUGS-29687: Merge upstream #360
OCPBUGS-34318: Updating ose-baremetal-operator-container image to be consistent with ART for 4.17 #357
OCPBUGS-34318: Updating ose-baremetal-operator-container image to be consistent with ART for 4.17 #356
Full changelog

baremetal-runtimecfg

OCPBUGS-38423: Distinguish NotExist from nil for keepalived sentinel file errors. #329
OCPBUGS-38562: Handle errors in iptables healthcheck #330
OCPBUGS-32348: Change mechanism of debug flag #309
OCPBUGS-32141: Fix handling of ELB Node IP detection #316
OCPBUGS-34706: Add support for OVN HostCidrs annotation #317
OCPBUGS-34136: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.17 #314
OCPBUGS-32141: Handle scenario when VIP does not belong to L2 #313
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-45344: additional rbac policy rules #1937
OCPBUGS-45517: add retry in case of image pull error #1940
OCPBUGS-44508: Show node-joiner container logs when error occurs #1912
OCPBUGS-44830: Fix newapp unit test failure by using different image #1913
OCPBUGS-43696: Bump k8s dependencies to 1.30.5 #1902
OCPBUGS-41642: vendor: Update openshift/api to pick up the v4.17 capability set #1876
OCPBUGS-42176: Fix copy artifacts for all CPU architectures #1880
OCPBUGS-42721: Update push targets of digest with new appended tags #1892
OCPBUGS-42580: fix outputname flag for node-image create command #1888
OCPBUGS-42164: Check cast result in adm prune deployments to prevent panic #1879
OCPBUGS-39090: use proxy settings when required #1860
make the idle command’s scale update unconditional #1856
OCPBUGS-38720: Add examples for some oc adm policy commands #1850
WRKLDS-1318: flags for single node interface #1841
OTA-1309: upgrade-status: test a compact cluster and a single-node cluster #1829
WRKLDS-1429: Adds a guardrail for node-image commands which is supported only for Openshift version 4.17+ #1837
OTA-1153: upgrade-status: communicate control plane completion clearly #1831
NO-JIRA: upgrade-status: fix HasOSImage function #1834
WRKLDS-1316: Retry and do not fail when logs cannot be updated #1836
NO-JIRA: upgrade-status: fix a typo in README #1830
WRKLDS-1316: Remove clusterversions from certificates api group #1835
AGENT-854: add the required role to support platform type validation #1832
WRKLDS-1316: oc adm node-image monitor command #1823
OTA-1291: upgrade status: removes custom nodes from the worker pool (2) #1825
NO-JIRA: Minor wording tweaks for CLI help #1826
OCPBUGS-37345: Revert “OCPBUGS-35994: pkg/cli/admin/upgrade/rollback: Drop this command” #1827
OTA-1291: upgrade status: removes custom nodes from the worker pool #1822
: MULTIARCH-4568: Inject ReleaseArch into openshift-install #1792
OCPBUGS-35994: pkg/cli/admin/upgrade/rollback: Drop this command #1806
no-jira: Extend the kube version check for images/tools/Dockerfile #1813
OCPBUGS-36525: Bump k8s to 1.30.2 #1812
WRKLDS-1310: pkg/cli/admin/mustgather: GA since and since-time flags #1811
OCPBUGS-36183: pkg/cli/admin/prune/renderedmachineconfigs: ‘Error dry-run deleting’ #1807
OCPBUGS-33897: upgrade status: control plane completion estimate #1742
OCPBUGS-31848: don’t manually delete must-gather’s cluster role binding #1790
OCPBUGS-34877: Ignore pruning when deployment points to replicationcontroller #1797
NO-JIRA: pkg/helpers: remove legacy pkg #1791
WRKLDS-1292: oc k8s 1.30 bump #1789
NO-JIRA: Update comment about using OpenFileSequential #1793
OCPBUGS-33896: upgrade status: polish alert insights #1787
OCPBUGS-32108: stop loading legacy schemes on global scheme #1775
OCPBUGS-33896: status/inspect-alerts: handle non-200 by Thanos #1782
OCPBUGS-34465: Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.17 #1785
OCPBUGS-33903: Simplify output when not updating #1774
OCPBUGS-34207: Updating ose-tools-container image to be consistent with ART for 4.17 #1780
OCPBUGS-34154: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.17 #1779
OCPBUGS-33762: Hardcode resource groups/kinds for now #1773
AUTH-482: set required-scc annotation to privileged for node debug pods #1763
OCPBUGS-33905: pkg/cli/admin/upgrade/rollback: Gate on OC_ENABLE_CMD_UPGRADE_ROLLBACK #1764
OCPBUGS-33651: Add s390x based oc into extraction target #1766
OCPBUGS-33896: add alert data to upgrade health in oc adm upgrade status #1740
Full changelog

cloud-credential-operator

OCPBUGS-47071: golang.org/x/net v0.33.0 #804
OCPBUGS-45938: Add AWS region to aws-pod-identity-webhook #799
OCPBUGS-45006: Add retry to ccoctl gcp create functions #793
OCPBUGS-45001: github.com/golang-jwt/jwt/v4 v4.5.1 #787
OCPBUGS-44123: Add GCP pod identity webhook #776
OCPBUGS-43644: Only attempt timed token credentials on supported platforms. #773
OCPBUGS-43335: Update github.com/sirupsen/logrus v1.9.3 #766
OCPBUGS-41233: List secrets in batches to avoid api timeout #756
OCPBUGS-38952: Follow-up bug fixes for CCO-572 #751
OCPBUGS-38375: update google.golang.org/grpc v1.65.0 #747
SPLAT-1718: Remove alibaba #737
CCO-572: STS OLM for GCP (WIF) #708
CCO-580: Upgrade to Kubernetes 1.30 #725
OCPBUGS-37334: SNYK ignore go-client misreporting #734
OCPBUGS-35016: Update to azidentity v1.7.0 #716
OCPBUGS-34347: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.17 #719
OCPBUGS-36032: IBM/go-sdk-core update to v5.6.3 #715
OCPBUGS-36140: GCP passthrough permissions check to ignore problematic permissions. #712
NO-JIRA: Fix Makefile for developer install #711
OCPBUGS-33566: AWS STS should not error when a credentailsRequest does not have awsSTSIAMRoleARN #703
OCPBUGS-33621: docs: Azure WI migration to extract only the credentialRequests needed by the cluster. #702
Full changelog

cloud-network-config-controller

SDN-4773: Add support for Azure Managed Service Identity authentication #151
NO-JIRA:Update linter file #146
SDN-4924: Rebase 1.30 #150
OCPBUGS-34302: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.17 #148
Full changelog

cluster-authentication-operator

OCPBUGS-43657: audit: do not log requests to /livez #724
OCPBUGS-42784: manifests should not use APIs that are removed in upcoming releases #712
OCPBUGS-42545: when no type is specified, don’t make illegal condition #703
OCPBUGS-39021: increase oauth-apiserver failureThreshold #693
OCPBUGS-35828: controller: set ownership annotation for webhook-auth secret #678
NO-JIRA: endpoint test: use httpbin #680
NO-JIRA: Several fixes for Keycloack IDP test #679
NO-JIRA: OWNERS: add ibihim, liouk, rm old #677
OCPBUGS-33654: update OpenShift favicon to new brand standard #674
OCPBUGS-33654: update OpenShift favicon to new brand standard #670
Full changelog

cluster-autoscaler

OCPBUGS-45147: [release-4.17] VPA: Update OWNERS file #324
OCPBUGS-37498: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.17 #311
PODAUTO-202: Update VPA ocp/builder Dockerfile images to openshift/release images #310
PODAUTO-199: Upstream rebase to VPA 1.1.2 #309
OCPBUGS-34242: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.17 #304
NO-JIRA: Update OWNERS #307
OCPCLOUD-2616: rebase on upstream 1.30.1 release #306
OCPBUGS-34428: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.17 #305
OCPBUGS-33904: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.17 #302
OCPBUGS-33592: fix: scale up broken for providers not implementing NodeGroup.GetOptions() #300
Full changelog

cluster-autoscaler-operator

OCPBUGS-45929: set max soft bulk taint count to zero #337
NO-JIRA: Update OWNERS #329
OCPBUGS-35952: add aws zone-id to ignore labels #328
OCPCLOUD-2617: Bump k8s to 1.30 #327
OCPBUGS-34151: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.17 #323
Full changelog

cluster-baremetal-operator

OCPBUGS-41926: SCC-pinning for metal3-baremetal-operator #444
OCPBUGS-29660: Ignore provisioning ip config if disabled #429
METAL-1040: Allow CBO to run without MAPI #423
METAL-503: Remove ironic-inspector #430
OCPBUGS-29687: Move Secrets from environment variables to VolumeMounts in metal3-httpd container #408
AUTH-482: set required-scc for openshift workloads #407
OCPBUGS-29687: Move pull secret from env var to VolumeMount in metal3-image-customization container #428
OCPBUGS-35211: Add capability to metal3-ramdisk-logs container #424
OCPBUGS-34649: provisioning: add ownership for tls secret #422
OCPBUGS-34119: Upgrade controller-tools and library-go #421
OCPBUGS-34119: Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.17 #419
OCPBUGS-32304: Run metal3 containers as specific users and groups #417
Full changelog

cluster-bootstrap

OCPBUGS-34034: Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.17 #108
Full changelog

cluster-capi-controllers

NO-JIRA: Update OWNERS #211
OCPCLOUD-2625: Merge https://github.com/kubernetes-sigs/cluster-api:v1.7.2 (a5898a2) into master #210
OCPBUGS-34133: Updating ose-cluster-api-container image to be consistent with ART for 4.17 #208
Full changelog

cluster-capi-operator

OCPBUGS-48493: fix: always update clusteroperator status versions when differing #250
OCPBUGS-41576: Use CAPO v0.10 and API v1beta1 #205
OCPBUGS-39309: manifests-gen: fix: readd missing metadata #198
OCPBUGS-37718: fix: align openstack e2e branch #191
OCPBUGS-36296: fix: sort CredentialsRequest manifests after namespace #183
OCPCLOUD-2638: Add stricter linting configuration #186
OCPCLOUD-2204, OCPCLOUD-2205, OCPCLOUD-2206, OCPCLOUD-2207: Add InfraCluster controller + AWSCluster implementation #169
OCPCLOUD-2584: Implement compression of components in configMap #170
NO-JIRA: Update OWNERS #179
OCPCLOUD-2619: Bump CAPI 1.7 and k8s 1.29 #176
OCPBUGS-34085: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.17 #174
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-43389: update goimports targets #371
OCPBUGS-41941: IBMCloud: Modify liveness probe for IBM Cloud CCM to use loopback address #365
SPLAT-1720: Remove Alibaba #324
OCPBUGS-35798: PowerVS: Remove bind address #355
NO-JIRA: Update OWNERS #357
OCPCLOUD-2609: rebase for kubernetes 1.30 #356
NO-JIRA: openstack: Remove dulek from OWNERS #345
OCPBUGS-34144: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.17 #346
OCPBUGS-34938: Refactor resourceapply tests #352
OCPBUGS-34689: Nutanix CCM pods Cipher Suites vulnerability issue #348
Full changelog

cluster-config-api

OCPBUGS-41642: config/v1/types_cluster_version: Add v4.17 capability set #2023
OCPBUGS-34333: Updating ose-cluster-config-api-container image to be consistent with ART for 4.17 #1903
features: disable PSA #2018
OCPBUGS-38355: Promote AWSEFSDriverVolumeMetrics to GA #2020
OCPBUGS-39300: clean up openshift-sdn references in the API [4.17] #2008
OCPBUGS-38958: [4.17] add UserNamespacesSupport/ProcMountType to tech preview features #2011
OCPBUGS-38605: remove duplicate featuregate ‘ExternalRouteCertificate’ #2004
CFE-921: Enable GCPLabelsTags featureGate by default for GA #1971
MULTIARCH-4776: MULTIARCH-4770: installer: promote MultiArchInstall FGs #1991
Power VS: Move Power VS to CAPI by default #1979
CORS-3617: Promote Azure CAPI as the default Install method #1987
STOR-1422: Add field for enabling EFS volume metrics #1853
SDN-5086: Add API and feature gates for OVN-K BGP support #1944
NE-1794: Promote eipAllocations API in GA #1989
SDN-5186: Add OVNObservability feature gate as Tech Preview. #1986
AUTH-527: security/v1 - add constant for enforcing psa annotation #1980
IR-471: Removing featuregate for chunkSizeMiB config #1948
Run update-payload-crds after update-codegen-crds #1974
CORS-3594: Setting CAPG as the default infra provider #1958
NE-1774: Promote IngressControllerLBSubnetsAWS to GA #1966
OCPBUGS-35906: a rule to check if the featureSet is one of the known set of features #1952
featuregate promotion: use latest release instead of hard coding #1984
Add MCP and Config Version columns to MCN output #1972
MCO-1065: MCO-1171: Promoting ManagedBootImages and NodeDisruptionPolicy to default featureset #1975
MULTIARCH-4770: features: move MultiArchInstall[AWS|GCP] to TechPreview #1973
Nutanix mapi: gpus and dataDisks support #1935
CONSOLE-4161: Add support for lightspeed button integration #1956
NE-1516: Add configuration for AWS Elastic IPs (EIPs) via Ingress Controller CR. #1826
Added Feature Gate for Bootc Update Path #1969
CORS-3607: Add Azure CAPI installer to tech preview feature set #1967
OCPNODE-2436: SigstoreImageVerification featuregate marker for the ClusterImagePolicy and ImagePolicy #1964
Feature gate sippy queries to use variant registry #1909
NE-1530: Fix empty subnet list CEL validation #1961
OCPBUGS-36523: Rename Dockerfile #1949
NE-1530: IngressController LB Subnet Selection in AWS #1841
MCO-1215: add ManagedBootImagesAWS to Feature Gate #1945
OCPBUGS-36469: Update placementGroupPartition to pointer #1953
OCPNODE-2358: Update (cluster)imagepolicy doc no restriction on release repo scopes #1927
OCPBUGS-36213: Remove the conversion webhook reference from the ConsolePlugin CRD spec #1946
features: add multi-arch feature gate per platform #1947
MON-3546: Add ClusterMonitoringCRD feature gate #1930
SDN-4934: Add NetworkSegmentation Feature Gate #1941
OCPBUGS-34906: Fix IngressController missing listTypes #1917
METAL-1038 Remove baremetal dependency on MachineAPI capability #1916
NO-JIRA: remove beta enabled features from feature gates #1934
OCPBUGS-34907: prevent removing featureSet entirely #1932
CFE-1063: Add PlacementGroupPartition in AWSMachineProviderConfig #1897
Update published Kubebuilder tools #1924
OCPBUGS-34974: IBMCloud: Add IBM Cloud Services #1919
CNV-41151: ipam, virt: add persistent ips feature gate #1913
Adds conditions to MachineSet #1907
Feature gates for platforms, architecture, and installs #1895
API-1783: Bump 1.30.1 #1906
OCPBUGS-33787: add console and download URLs to console operator config #1887
OCPCLOUD-2563: Add Machine/MachineSet API for MAPI to CAPI migration #1818
OCPBUGS-33882: Streamline bootstrap crds #1899
STOR-1839: promote VSphereDriverConfiguration feature to Accessible-by-default #1902
API-1783: bump(k8s): update k8s to v1.30 #1813
CFE-1047: Add the field “CapacityReservationGroupID” to “AzureMachineProviderSpec” in openshift/api #1866
remove console v1alpha1 which was present since 4.12 #1856
ETCD-488: Move etcd hardware speed feature to GA #1844
API-1783: Promote ValidatingAdmissionPolicy to GA #1888
NO-JIRA: Enable the ibm-cloud-managed cluster profile on network.operator CRD #1896
Full changelog

cluster-config-operator

CFE-921: Update openshift/api package to latest version #423
OCPBUGS-34178: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.17 #419
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-44047: relax validation on delete and if failureDomains not configured #330
OCPBUGS-38643: Add 1 minute stabilisation for clusteroperators after rollout #321
OCPBUGS-36469: Bump openshift/api #315
CFE-1087: API Bump for capacity Reservation #313
NO-JIRA: Update OWNERS #311
NO-JIRA: CPMS Cluster Operator should set related objects #310
OCPBUGS-35416: Wait for ControlPlaneMachineSet to be created when waiting for it to be updated #305
OCPBUGS-35069: Improved debugging of API listing errors #297
OCPBUGS-20061: Add unreadyNodeGracePeriod for allowing brief node hiccups #294
OCPCLOUD-2600: Bump deps to k8s v1.30, go 1.22 #295
Full changelog

cluster-csi-snapshot-controller-operator

CNV-43972: HCP custom tolerations integration #214
STOR-1593: Update api extensions to upstream #215
STOR-1596: Bump all deps for 4.17 #213
OCPBUGS-36528: Rename Dockerfile #212
OCPBUGS-34449: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.17 #210
OCPBUGS-34174: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.17 #209
Full changelog

cluster-dns-operator

OCPBUGS-33750: Bump version of DNSNameResolver controller #415
OCPBUGS-34229: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.17 #414
OCPBUGS-34229: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.17 #413
Full changelog

cluster-etcd-operator

OCPBUGS-38574: use pooled client for etcd single member health checks #1327
OCPBUGS-38454: prefer env var over hardcoding ciphers #1316
NO-JIRA: degrade targetconfigcontroller on quorum loss #1309
OCPBUGS-36462: ensure ordering in member health checks #1308
NO-JIRA: only update envvar listeners on real changes #1300
ETCD-636: expose PruneOpts #1297
ETCD-493: Reflect etcd grafana dashboard mixin from upstream #1291
ETCD-604: Prune revisioned resources #1292
OCPBUGS-36621: Force sync on missing etcd-all-bundles configmap #1296
Revert “OCPBUGS-36621: add etcd-all-bundles to cvo create-only” #1295
ETCD-574: Update TLS artifact descriptions according to registry requ… #1294
OCPBUGS-36621: add etcd-all-bundles to cvo create-only #1293
NO-JIRA: only read signer/bundles on forced leaf generation #1288
OCPBUGS-36301: parallelize member health checks #1286
OCPBUGS-36407: Rename Dockerfile.rhel7 to Dockerfile.ocp #1289
NO-JIRA: cert rotation same assertions #1285
NO-JIRA: fix false positive bootstrap in cert signer controller #1283
NO-JIRA: update library-go #1281
ETCD-607: gate leaf cert generation (with bundle revision) #1275
NO-JIRA: Update etcd-tls-assets.md #1195
ETCD-606: Batch bundle revision rollout #1271
NO-JIRA: update library go #1274
ETCD-620: Update api vendor libraries to get GA’ed tuning profiles #1264
TRT-1687: Revert #1268 “ETCD-606: Batch bundle revision rollout” #1270
ETCD-603: add revision helpers #1267
OCPBUGS-34376: Updating cluster-etcd-operator-container image to be consistent with ART for 4.17 #1263
NO-JIRA:check the cluster is healthy or not after getting env var, to ensure it is safe to rollout #1262
Full changelog

cluster-image-registry-operator

OCPBUGS-43564: fix proxy config and leader election test flakes #1144
OCPBUGS-43350: pkg/storage/azure: also check for auth failure error code on deletion #1139
OCPBUGS-42812: azureclient: stop validating credentials when creating the client #1130
OCPBUGS-42394: pkg/storage/azure: use cluster-api tag key to discover vnet #1125
OCPBUGS-42362: Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1124
OCPBUGS-38538: Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1103
OCPBUGS-38885: pkg/resource: invoke update-ca-trust extract with –output #1097
IR-467, OCPBUGS-38379: Enable MSI override for ARO HCP #1088
SPLAT-1721: Remove alibaba #1077
IR-471: Removing featuregate for chunkSizeMiB config #1073
Revert “IR-467: Enable Azure MSI authentication” #1079
IR-467: Enable Azure MSI authentication #1020
OCPBUGS-37207: Power VS: Check endpoints against lower case strings #1076
IR-471: Adding additional validation #1074
OCPBUGS-36038: go.*,vendor: bump go-retryablehttp #1063
IR-477: pkg/operator: deactivate azure path fix job #1061
IR-471: Exposing chunksize variable to utilize docker registry config #1060
OCPBUGS-34107: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.17 #1045
OCPBUGS-34399: Update rbac for featuregate #1056
OCPBUGS-33453: add SAR capability to image-registry #1046
CFE-962: Refactor code to mock GCP tag service for UTs #1027
OCPBUGS-34399: Revert “Merge pull request #1026 from deepsm007/expose-chunksize” #1052
OCPBUGS-34399: Exposing chunksize variable to utilize docker registry config #1026
OCPBUGS-34107: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.17 #1040
OCPBUGS-32710: pkg/storage/s3: use force path style in favour of virtual hosted style config #1028
OCPBUGS-33149: azure-path-fix: get client secret from k8s secret #1029
OCPBUGS-33868: Bump openshift api, client-go & library-go #1036
Full changelog

cluster-ingress-operator

OCPBUGS-39220: Ingress operator status not degraded when canary route fails #1136
OCPBUGS-38646: Clear LB Status Parameters on LB Type Change #1131
OCPBUGS-38540: Resolve DNS Resolution CI Flakes in Subnets and EIP E2E #1129
OCPBUGS-38079: Bump controller-runtime to v0.18.4 #1122
NE-1798: API bump for promotion of eipAllocation from feature gates to GA. #1118
NE-1688: Enable Azure MSI authentication for ARO HCP #1119
NE-1674: Add LB EIP Allocation for AWS #1109
NE-1531: Fix Initialization of NLB Status Parameters #1114
NE-1531: AWS Subnet Selection #1046
NE-1273: Add a watch to the ingress operator so it will recreate the gwapi crds #1106
OCPBUGS-37627: Fix getRouteHost error handling #1110
NE-1208: Gateway API E2E Testing #1023
OCPBUGS-31664: Fix SyncLoadBalancerFailed status message of IngressController #1102
OCPBUGS-36465: Delete and recreate canary route to clear spec.host #1095
OCPBUGS-34413: Refine logging for accurate infra CR status updates #1103
OCPBUGS-35342: Add e2e test for connect timeout #1084
NO-JIRA: Add grzpiotrowski to OWNERS #1090
NO-JIRA: addowner-Thealisyed #1091
OCPBUGS-35356: Retry IngressController updates in router status E2E #1085
OCPBUGS-9037: Change Canary to use passthrough route #978
OCPBUGS-35368: Add Regexp Anchor to TestAll #1087
OCPBUGS-23221: internalServiceChanged: Fix target port logic #1052
OCPBUGS-34262: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.17 #1067
NE-1400: Bump to OSSM 2.5 and Gateway API v0.6.2 CRDs #1018
OCPBUGS-33792: Bump openshift/library-go to resolve NewPrometheusClient E2E failures #1054
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-43657: audit: do not log requests to /livez #1758
OCPBUGS-34310: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.17 #1738
OCPBUGS-41874: increase kube-apiserver failureThreshold #1733
OCPBUGS-34679: revert dev cert rotation 4.17 #1729
OCPBUGS-34942: Update APIRemovedInNextReleaseInUse for kube 1.30 / ocp 4.17 #1698
NO-JIRA: nodekubeconfigcontroller: set ownership component for node kubeconfigs #1704
AUTH-521: add disabled syncer as reason to CFE for PSA #1686
NO-JIRA: update library-go #1703
OCPEDGE-1102: Revert high cpu usage alert description #1680
OCPEDGE-902: add SNO control plane high cpu usage alert #1676
OCPBUGS-34782: manifests: add ownership annotation for kubelet-bootstrap-kubeconfig #1694
OCPBUGS-34544: Disable PersistentVolumeLabel admission plugin #1693
OCPBUGS-34800: Update APIRemovedInNextReleaseInUse for kube 1.30 / ocp 4.17 #1697
OCPBUGS-33963: Create one-shot migrations for the flowcontrol group. #1689
API-1783: bump(k8s): update k8s version to v1.30.0 #1666
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-42612: Sync Release 4.17 with UPSTREAM #48
UPSTREAM: <carry>: OCPBUGS-30487: Bump google.golang.org/protobuf #39
NO-JIRA: Update OWNERS #40
OCPBUGS-34084: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.17 #38
Full changelog

cluster-kube-controller-manager-operator

NO-JIRA: update library-go #814
OCPBUGS-34859: manifests: set owning-component for csr-signer-signer #812
OCPBUGS-34281: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.17 #813
API-1783: bump(k8s): bump k8s version to v1.30.0 #803
OCPCLOUD-2513: Remove cloud-provider, cloud-config, and cloud-volume-plugin flags #806
Full changelog

cluster-kube-scheduler-operator

NO-JIRA: update library-go #544
OCPBUGS-34367: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.17 #543
API-1783: bump(k8s): bump k8s version to v1.30.0 #540
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-46593: “gracefully” shutdown KSVM pod. #123
NO-JIRA: bump(*) #113
OCPBUGS-34306: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.17 #110
OCPBUGS-34306: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.17 #109
Full changelog

cluster-machine-approver

OCPBUGS-48155: Fix race condition in CO status controller test #266
OCPBUGS-46429: Filter CSRs by signerName #261
OCPBUGS-45918: Ensure trailing dots on DNS names do not block serving cert auth #256
OCPBUGS-45918: Client internal DNS checks should ignore trailing dot #250
OCPBUGS-43312: Client internal DNS checks should be case insensitive #242
NO-JIRA: Update OWNERS #236
OCPCLOUD-2602: Update dependencies to Kube 1.30 #235
OCPBUGS-34138: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.17 #232
OCPBUGS-33644: check for machine crd before listing machines #231
Full changelog

cluster-monitoring-operator

OCPBUGS-44971: Add new metrics for OpenShift logging telemetry #2526
OCPBUGS-44003: fix(monitoring-plugin): disable emitting nginx version on error pages #2511
OCPBUGS-43690: chore: introduce a config parsing check via a strict unmarshaller for… #2494
OCPBUGS-43788: Add runbook url for TelemeterClientFailures #2507
OCPBUGS-43545: Fix api doc on Thanos Ruler default retention #2501
OCPBUGS-41341: disable user-defined monitoring per object #2458
OCPBUGS-41908: filter alerts sent to Telemeter #2470
OCPBUGS-41580: Configure graceful shutdown for metrics-server (4.17 backport) #2463
OCPBUGS-39029: Backport #2441 for 4.17 #2445
MON-3972: [bot] Synchronize versions of the downstream components #2434
OCPBUGS-17506: Make error messages clearer on poll timeouts #2417
MON-3964: set scrape timestamp tolerance for user workload monitoring #2429
MON-3961: inject proxy env variables in Alertmanager #2424
MON-3949: [bot] Synchronize versions of the downstream components #2419
MON-3900: follow-up: clean up operator logic and some tests now that metrics-server is the default Metrics API backend #2425
OCPBUGS-37686: fix documentation typos #2427
NO-JIRA: fix: fix a small typo #2426
MON-3921: Revert “Revert “Merge pull request #2392 from machine424/f-… #2403
MON-3959: Skip TestTLSSecurityProfileConfiguration as disruptive #2423
MON-3900: Remove prometheus-adapter code #2409
MON-3947: [bot] Synchronize versions of the downstream components #2418
MON-3947: [bot] Synchronize versions of the downstream components #2414
MON-3947: Bump prometheus-operator to 0.75.1 #2416
MON-2065: jsonnet: exclude kubernetes-storage rules #2377
OCPBUGS-36495: Add deprecated config runbook #2410
OCPBUGS-31250: Exclude windows nodes from kubelet servicemonitor #2368
OCPBUGS-36406: add runbook_url annotations #2401
MON-3914: add a regression test for gogc based on the go_gc_gogc_percent metric #2393
MON-3914: [bot] Synchronize versions of the downstream components #2394
OCPBUGS-36299: Revert #2392 “MON-3800: jsonnet: update prometheus dep to fetch the PrometheusKuber…” #2398
MON-3800: jsonnet: update prometheus dep to fetch the PrometheusKuber… #2392
OCPBUGS-35480: Add deprecation for prometheus adapter #2381
MON-3915: chore: bump Go dependencies #2387
MON-3914: adjust Prometheus GOGC based on infra topology #2390
OCPBUGS-32696: opt-out of multi-cluster Prometheus dashboard #2351
OCPBUGS-35397: attach runbook to the PrometheusDuplicateTimestamps alert #2365
MON-3905: [bot] Synchronize versions of the downstream components #2382
MON-3894: revert(monitoring-plugin): undo nginx caching tweaks as the issue was… #2380
MON-3795, SDN-3817: Expose OVNKubernetes:AdminNetworkPolicy Metrics via telemetry #2297
MON-3897: [bot] Synchronize versions of the downstream components #2378
OBSDOCS-883: change docs to correct retention time uwm prometheus #2277
MON-3884: Send metric acm_managed_cluster_worker_cores via Telemetry #2367
MON-3887, MON-3889: [bot] Synchronize versions of the downstream components #2376
MON-3888: bump go tools 1.22 #2375
MON-3882: [bot] Synchronize versions of the downstream components #2371
MON-3701: clean-up injection of CA bundle for user Alertmanager #2361
OCPBUGS-33645: inject trusted CA bundle into UWM Alertmanager #2349
OCPBUGS-34437: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.17 #2372
MON-3881: chore: remove hack/ocp-images.sh #2366
MON-3801: clean-up unused OAuth proxy references #2359
MON-3701: clean-up injection of CA bundle for user Prometheus #2362
MON-3874: chore: poll immediately in the e2e tests #2356
MON-3701: clean-up tests #2360
OCPBUGS-33955: remove deprecated logtostderr argument #2355
OCPBUGS-33686: [bot] Synchronize versions of the downstream components #2363
OCPBUGS-23000: node-exporter: Prevent cluster-autoscaler from evicting #2346
MON-3763: Add cnv_abnormal #2291
OCPBUGS-34080: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.17 #2358
: NO-JIRA: Fix formatting in the resources documentation #2353
Full changelog

cluster-network-operator

OCPBUGS-43714: Skip including default crypto policies to avoid authby issue #2597
OCPBUGS-46146: Remove ip xfrm state when IPsec is disabled #2594
OCPBUGS-44415: Pass transit_switch_subnet options in ovnkube-node pod #2561
OCPBUGS-44807, SDN-4930, SDN-5297: OVN-Kubernetes node RBAC tightening #2568
OCPBUGS-44807, SDN-5297, SDN-5472: bindata, ovn-k: Add ClusterUserDefinedNetwork CRD and RBAC #2566
OCPBUGS-44807, SDN-4930, SDN-5297: ovn-k, udn: Update UserDefinedNetwork CRD #2551
OCPBUGS-44807, SDN-4930, SDN-5297: Adds UDN list/watch to ovnknode rbac #2540
OCPBUGS-44779, SDN-5436: Provide support for user owned IPsec machine configs #2564
OCPBUGS-44330: Add controlplane cli image envar for use with hypershift #2542
OCPBUGS-43343: OCPBUGS-42244: Exporting environment varialbe NODE_CNI for live migration #2536
OCPBUGS-43317: Use CNIConfDir for mounting directory to ovn-ipsec-host pod #2533
OCPBUGS-39300: rebase openshift/api for openshift-sdn removal [4.17] #2477
OCPBUGS-39121: Live migration: report network overlap via live_migration_blocked metric #2483
OCPBUGS-42260: Configure narrowing=yes for IPsec connections #2510
OCPBUGS-41674: Add configurable subnets while running hybrid-overlay-node binary #2497
OCPBUGS-41591: Set required-scc for openshift workloads #2490
OCPBUGS-39313: HyperShift: do not use antiaffinity on single replica control planes #2486
OCPBUGS-39387: add required-scc annotation to console-plugin deployment #2487
OCPBUGS-39425: Preload networking plugin locales #2489
OCPBUGS-38932: Deploy networking-console-plugin by CNO #2478
OCPBUGS-38932: Add networking-console-plugin image to release payload #2474
OCPBUGS-38654: [release-4.17] Verify that the codegen changes were commited #2475
OCPBUGS-38364: OVN-K, UDN CRD: Add missing permissions to control-plane #2472
OCPBUGS-38176: multus, Add openshift-cnv to globalNamespace #2466
SDN-4919: Change the masquerade subnet default value for new clusters #2460
SDN-5072: Deploy FRR-K8s #2450
SDN-5144: Add UserDefinedNetwork CRD and RBAC #2464
SDN-4773: Add Azure MSI Env Var for ARO HCP #2465
NO-JIRA: more openshift-sdn cleanup #2455
SDN-5070: Allow day 2 customization of masquerade subnet #2421
OCPBUGS-37786: Add proxy env vars to onvkube-node #2453
OCPBUGS-37713: Handle random crictl errors in iptables-alerter #2451
CNV-43973: HCP custom tolerations integration #2441
SDN-4919: OVN-Kubernetes UDN: EndpointSlice mirror controller RBAC permissions #2448
SDN-4934: Enable TechPreview FeatureGate for NetworkSegmentation #2433
OCPBUGS-33758: Fix IC distributed control plane alerts #2406
SDN-5029: ipam, virt: enable the persistent ips feature #2431
SDN-4916: Bump to k8s v1.30 latest #2429
OCPBUGS-30950: Set mount propagation to HostToContainer for /var/lib/kubelet #2368
SDN-4934: Network Segmentation Feature Gate Vendoring from API #2428
OCPBUGS-23758: Set global IP forwarding sysctl parameters while starting ovnkube-node #2385
OCPBUGS-29648: update whereabouts crd #2414
OCPBUGS-31878: Propogate hypershift control plane priority class override to multus and preserve container resource requests #2335
OCPBUGS-35316: Create the configmap mtu if not found #2410
OCPBUGS-34313: Updating cluster-network-operator-container image to be consistent with ART for 4.17 #2381
OCPBUGS-30948: Use applyconfigurations for updating network.oprerator status #2333
SDN-5029: linter: removed deprecated linters #2408
OCPBUGS-23000: Adds cluster-autoscaler annotation to prevent eviction #2369
OCPBUGS-33497: Limit iptables-alerter’s cpu #2401
SDN-4896: Drop openshift-sdn support #2384
NP-976, OCPBUGS-34658: Live migration: add metrics to observe CNI live migration #2388
OCPBUGS-34858, OCPBUGS-34916: Validate live migration before setting the progressing condition #2399
OCPBUGS-34524: Fix DNSResolver feature gate enablement #2387
MON-3795, SDN-3817: Add ANP metric rule expressions for telemetry exposure #2347
OCPBUGS-33497: Handle pod exiting race conditions in iptables-alerter #2377
OCPBUGS-31876: Enable UDP aggregation on s390x #2331
OCPBUGS-34359: Ensure that the node-identity webhook address contains colons for IPv6 #2382
NP-975: Align new node subnet allocation between OVN-K and SDN during live migration #2367
OCPBUGS-32991: Add conditions for ignored-namespaces #2358
NP-974: Validation for live migration from OpenShiftSDN to OVNKubernetes #2344
OCPBUGS-33728: Add custom masquerade subnet against right key at ovnkube-config CM #2371
Full changelog

cluster-node-tuning-operator

OCPBUGS-43664: Add vendor and architecture specific tuning options (#1191) #1191
OCPBUGS-44644: cmd: PPC: support tolerating heterogeneous core IDs (#1252) #1252
OCPBUGS-45264: Normalize cpu sets when rendering to Tuned profiles (#1238) (#1248) #1238
e2e: wait for node inspector deletion (#1205) #1205
Fixing empty tuned submodule when using Dockerfile (#1211) #1211
E2E: fix modify node selector to use lowercase (#1186) #1186
OCPBUGS-38900: Drop sched_migration_cost_ns setting (#1201) #1201
Make ocp-tuned-one-shot.service restart on-failure (#1187) #1187
Fix context deadlines in ExecCommandOnPod() (#1189) #1189
OCPBUGS-43566: CI: unblock (#1188) #1188
E2E: wait for ovs services affinity to reset after deployment deletion (#1160) #1160
OCPBUGS-38721: tuned: distinguish deferred updates (#1149) #1149
OCPBUGS-39005: Add cluster-wide proxy env file (#1145) #1145
OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1147) #1147
OCPBUGS-39321: E2E: Remove checking of reserved cpus in irqbalance file (#1148) #1148
E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1146) #1146
CNF-13391: ppc: adjust for Hypershift (#1124) #1124
OCPBUGS-37865: E2E: Verify ovs threadpool inherits parent cpu affinity (#1123) #1123
e2e:document: how to run locally on HCP platform (#1122) #1122
NO-JIRA:e2e:hypershift: remove/rename deprecated env variables (#1121) #1121
controller: predicate for containerruntimeconfig (#1108) #1108
CNF-12711: hypershift: enable feature gate support (#1115) #1115
NO-JIRA: Project cleanups (#1120) #1120
CNF-12680: CNF-13488: Add performance profile status for hypershift support (#1089) #1089
OCPBUGS-28647: deferred updates: cleanups (#1119) #1119
Fix the destination of asset’s copy (#1112) #1112
OCPBUGS-28647: tuned: operand: add support for deferred updates (#1019) #1019
makefile: ensure bindata (#1116) #1116
e2e: performance: skip test on env with insufficient cpus (#1111) #1111
e2e: performance: verify tuned one-shot service vs kubelet (#1106) #1106
CNF-7123: Enable and adjust 1_performance suite on Hypershift (#1084) #1084
NO-JIRA: Rename and reorganize hypershift labels (#1090) #1090
E2E: Add ginkgo labels to respective test suites (#1097) #1097
NO-JIRA: hypershift: implements missing client calls needed for e2e tests (#1107) #1107
CNF-13530: hypershift: support containerruntimeconfig (#1100) #1100
CNF-13394: Changed node inspector to have lazy initialization (#1093) #1093
NO-JIRA: hypershift:unitests: adjust controller unit-tests (#1105) #1105
Fix requested profile doesn’t exist (#1104) #1104
NO-JIRA:pao:hypershift: fix client implementation (#1094) #1094
hypershift: check updatingConfig condition to be false instead of missing (#1096) #1096
e2e:run-test.sh: match ginkgo CLI to ginkgo package (#1092) #1092
e2e:performance: decode to valid kubeletconfig object (#1091) #1091
OCPBUGS-34972: perfprof: bump verbosiness of logs (#1075) #1075
e2e:label: platform labels (#1076) #1076
NO-JIRA: remove 4.13->4.14 compatibility code (#1079) #1079
Dockerfile:bump go-builder to 1.22 (#1078) #1078
CNF-11559: [Part ³⁄₃] Hypershift PAO adoption (#1057) #1057
e2e: Added mixed cpus negative tests (#1026) #1026
OCPBUGS-28647: tuned: operand: deferred updates prepare: cleanups from #1019 (#1073) #1073
Add tier0 and tier1 tags to non reboot test cases (#1064) #1064
Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.17 (#1068) #1068
CNF-11815: e2e: Added node inspector for inspecting nodes configuration (#1008) #1008
e2e: latency: Add negative tests (#1071) #1071
e2e: Added hwlatdetect default window size (#926) #926
E2E: Fetch pod node instead of relying on first worker-cnf node (#1070) #1070
Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.17 (#1063) #1063
OCPBUGS-33682: right-hand-side profile_dirs take precedence (#1061) #1061
No-Jira: E2E: Extend mixed cpus tests to test cpu load balancing annotation (#1028) #1028
Full changelog

cluster-olm-operator

OCPBUGS-37544: add version flag #62
OPRUN-3403: Remove Rukpak references from code #63
OPRUN-3405: Stop building rukpak #60
OPRUN-3437: update configmap permissions #59
OCPBUGS-36686: Re-enable cluster-olm-operator #58
OCPBUGS-34126: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.17 #55
OCPBUGS-36684: Disable cluster-olm-operator #56
NO-ISSUE: Update owners #57
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-43657: audit: do not log requests to /livez #599
OCPBUGS-41850: increase openshift-apiserver failureThreshold #589
OCPBUGS-34349: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #580
OCPBUGS-34349: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #579
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-47770: Add team members to the OWNERS file #375
no-jira: OWNERS: remove former employees #354
OCPBUGS-35801: nil pointer reference in ocm-operator #355
WRKLDS-1327: Replace wildcards by explicit list of verbs #353
WRKLDS-1292: Bump k8s dependencies to 1.30.1 #352
OCPBUGS-34395: Move cluster Build CR to runlevel 10 to match CRD #351
OCPBUGS-34077: Always Disable Default Rolebindings Controller #346
OCPBUGS-34054: lots of churn during image registry managed/removed transition #347
OCPBUILD-9: Adds capabilities for builder & deployer rolebindings controller #335
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github