4.21.0-0.okd-scos-2026-02-12-222117

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2026-02-12-222117

Team Approvals:

Tests:

Blocking jobs
- aws Succeeded periodic-ci-openshift-release-main-okd-scos-4.21-e2e-aws-ovn
Informing jobs
- aws-upgrade Succeeded (1 retries) periodic-ci-openshift-release-main-okd-scos-4.21-e2e-aws-ovn-upgrade
- aws-upgrade-minor Succeeded periodic-ci-openshift-release-main-okd-scos-4.21-upgrade-from-okd-scos-4.20-e2e-aws-ovn-upgrade

Upgrades from:

Loading changelog, this may take a while ...

Changes from 4.20.0-0.okd-scos-2026-02-07-001639

Created: 2026-02-12 22:24:50 +0000 UTC

Image Digest: sha256:3094cd4df66a393ef0fe7b9b8a71f140a450fb6d1e1e6f1b3120ab5e577728cd

Components

Kubectl upgraded from 1.33.3 to 1.34.1
Kubernetes upgraded from 1.33.6 to 1.34.2
Kubernetes Tests upgraded from 1.33.4 to 1.34.1
CentOS Stream CoreOS 10 upgraded from 10.0.20260203-0 to 10.0.20260211-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
DynamicResourceAllocation (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
IngressControllerLBSubnetsAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
InsightsConfigAPI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NoRegistryClusterOperations (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NodeSwap (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SetEIPForNLBIngressController (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPClusterHostedDNSInstall (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ImageStreamImportMode (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ManagedBootImagesAzure (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ManagedBootImagesvSphere (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
SigstoreImageVerificationPKI (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VolumeAttributesClass (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
NewOLMWebhookProviderOpenshiftServiceCA (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled	Disabled	Enabled
BootImageSkewEnforcement (0 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
IngressControllerDynamicConfigurationManager (0 tests)	Disabled	Disabled	Enabled	Enabled	Disabled (Changed)	Disabled (Changed)
VSphereMixedNodeEnv (0 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
HyperShiftOnlyDynamicResourceAllocation (0 tests)	Enabled (New)		Enabled (New)		Enabled (New)
AWSDualStackInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureDualStackInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
CBORServingAndStorage (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
CRDCompatibilityRequirementOperator (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClientsAllowCBOR (0 tests)
ClientsPreferCBOR (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIMachineManagement (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIMachineManagementVSphere (0 tests)			Enabled (New)	Enabled (New)
EventTTL (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPDualStackInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesCPMS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MutableCSINodeAllocatableCount (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLMBoxCutterRuntime (0 tests)
NoRegistryClusterInstall (0 tests)				Enabled (New)		Enabled (New)
OSStreams (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
OnPremDNSRecords (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ProvisioningRequestAvailable (0 tests)			Enabled (New)	Enabled (New)

New images

agent-installer-ui git 479a68f3 sha256:fbba0b823ab7e72a7ff8dd2984583e7306fa4ba29024bf85017459dc0e1cdf1f

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

azure-kms-encryption-provider git ea0b9944 sha256:e6f687946579d7c267b0d417d5b9b52a9b0f1c67852f4880cad1f73b3ea50538
egress-router-cni git 5e0f8d1b sha256:80dc87e4796746223b10d98d158748f2dcd2b1c7c814e0c480653b397ffcf4d9

agent-installer-api-server

AGENT-1431: Backport feature NoRegistryClusterInstall to 4.21 #8806
OCPBUGS-72519: Fix YAML marshaling for Kubernetes types in disconnected ignition #8736
MGMT-18971: Backup and restore for BMH #8563
NO-ISSUE: Add documentation for creating RHCOS template and configuring MachineSets on vSphere clusters #8441
MGMT-22278: Allow Agent deletion when InfraEnv is deleted #8416
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.16, 4.18, 4.19 #8564
OCPBUGS-66947: Fix OLM manifest configMap metadata names #8496
OCPBUGS-61237: Prevent race in agent-installer kubeconfig generation #8440
OCPBUGS-66374: Compare usable memory fairly in validations #8476
MGMT-21809: Limit TNF Clusters’ platform to either baremetal or none #8390
MGMT-22181: [4.18] ODF compact mode with 5 masters fails #8471
NO-ISSUE: [master] Bump OCP versions: 4.13 #8491
MGMT-22103: Add EVENT_RATE_LIMITS configuration support #8466
MGMT-22297: synch NTP in discovery #8478
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.16, 4.17, 4.19, 4.12 #8477
MGMT-22078: Add readOnlyRootFilesystem to assisted-service template #8229
NO-ISSUE: Update module github.com/golangci/golangci-lint to v1.64.8 #8464
AGENT-1216: HostStage for ‘Copying registry data to disk’ #8423
MGMT-22280: remove loki dependency from logging op #8458
NO-ISSUE: [master] Bump OCP versions: 4.18 #8456
NO-ISSUE: [master] Bump OCP versions: 4.20 #8454
MGMT-22280: new logging operators (loki, logging) #8445
NO-ISSUE: Update go.mod Hive dependency to 715614a9f379395dbb5b5091276ec59cacfd0599 #8450
NO-ISSUE: [master] Bump OCP versions: 4.14, 4.19 #8442
MGMT-22193: Fix dual-stack BMH NIC creation to support multiple NICs per interface #8426
MGMT-22292: Add url label #8425
MGMT-22244: add AgentServiceConfig ctrl watch for mirror regsitry configmap changes #8391
MGMT-22246: Allow late binding for arbiter hosts #8395
MGMT-22263: Fix Image service health check timeout too short for onprem deployments #8405
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.21, 4.19 #8404
MGMT-21691: Reorder networks and VIPs after each DB fetch before install-config generation #8400
ACM-26371: Update go.mod Hive dependency #8392
OCPBUGS-56913: Retry incomplete cluster registration in ABI #8241
NO-ISSUE: [master] Bump OCP versions: 4.20 #8398
MGMT-21982: Remove –interactive flag from the unconfigured ignition #8389
NO-JIRA: Add project documentation to CLAUDE.md #8209
MGMT-22154: return bad request when cluster or host are missing in v2uploadLogs #8356
NO-JIRA: Fix database initialization in unit tests #8353
NO-ISSUE: [master] Bump OCP versions: 4.12, 4.18 #8387
ACM-25423: CVE-2024-45339 Bump github.com/golang/glog to v1.2.4 using replace directive (api module) #8372
NO-ISSUE: Remove unused ISO_CACHE_DIR variable #8361
MGMT-22154: enable 400 status code in V2UploadLogs endpoint #8355
MGMT-22081: Add proxy, NTP, network config, and rendezvous IP to OVE #8144
NO-ISSUE: [master] Bump OCP versions: 4.16 #8354
MGMT-19212: Update PreprovisioningImage status when InfraEnv not found #8264
MGMT-21604: Remove OCP 4.15 support from assisted-service #8248
MGMT-22184: Sanitize HTTP request logging to exclude authorization headers #8293
NO-ISSUE: [master] Bump OCP versions: 4.20 #8288
MGMT-22052: Allow single API and Ingress VIPs in dual-stack with IPv6 primary #8250
MGMT-22153: increase log capacity from 100MB to 250MB #8260
NO-ISSUE: [master] Bump OCP versions: 4.15 #8267
MGMT-22127: Stop non-existing InfraEnv reconcile #8252
MGMT-9154: agent auto approval #8234
MGMT-22053: Add Feature Support for Dual-Stack Primary IPv6 #8258
NO-ISSUE: Add maorfr to OWNERS_ALIASES file #8262
AGENT-1248: Create configmap containing operator manifests #7818
ACM-2554: inject imagePullSecrets when available under k8s-mode #8196
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.19, 4.17 #8249
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.18 #8247
MGMT-22042: add cve-automation github app to owners_aliases #8243
MGMT-22066: Enable TNA clusters support by default #8242
MGMT-21904: Improve Duplicate certificate Detection used by the infrastructure operator #8233
ACM-25980: Introduce PreprovisioningImage finalizer #8221
MGMT-21848: Allow matching host’s disk using byPath #8113
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.14, 4.16, 4.18 #8219
MGMT-21230: Use XTS for disk encryption #8115
MGMT-21870: Add new parameters for bundle routes #8101
MGMT-22038: Only check TNF version for day-1 bound hosts #8213
MGMT-22025: Filter out irrelevant RHCOS images in operator deployment scripts #8194
MGMT-20681: Improve discovery ISO password change script #7683
MGMT-21624: Fix dual-stack primary IPv6 migrations and update #8145
NO-ISSUE: [master] Bump OCP versions: 4.13, 4.17, 4.21, 4.19 #8156
MGMT-21958: Prepare 4.20 stable versions assisted-service upstream #8142
NO-ISSUE: Update konflux pipelines to use a remote pipeline #8143
NO-ISSUE: adds example Agent resource to docs #8120
NO-ISSUE: migrate renovate config #8060
MGMT-21135: Unexpected Additional Subnet Appears in Machine Network Selection #7953
MGMT-21810: Support TNF cluster installation using kube-api #8085
MGMT-21759: Update Assisted Service webhook away from deprecated webhook.Validator API #8135
MGMT-21859: Move osc operators to supported #8056
MGMT-19836: Add ClusterID field on HostRoleUpdatedEvent #8111
MGMT-21624: Add Dual-Stack with primary IPv6 support in Assisted #8026
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.12, 4.18, 4.20, 4.19, 4.17 #8134
AGENT-1303: Allow InfraEnv registration to use late binding #8059
NO-ISSUE: Update Konflux references #8128
NO-ISSUE: bump ocp dockerfile base image to 4.21 #8110
MGMT-20588: Align kube descheduler activation CR with OVE needs #7960
NO-ISSUE: Update Konflux references #8050
ACM-25137: Remove the SERVICE_EL8_IMAGE env vars #8108
MGMT-21725: Update Renovate for legacy EL8 Dockerfiles #8090
OCPBUGS-62580: Fix edge jobs to be consistent with ART for 4.21 #8104
NO-ISSUE: [master] Bump OCP versions: 4.19 #8095
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.18 #8089
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.15, 4.14 #8084
MGMT-20192: add possibility to disable image service #7955
And 29 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

AGENT-1216: support new HostStage (HostStageCopyingRegistryDataToDisk) #1384
AGENT-1216: copy registry data to disk in ABI/Appliance flow #1359
MGMT-22292: Add url label #1375
AGENT-1072: Apply operator manifests from ConfigMap for agent-installer #1175
MGMT-22042: add cve-automation github app to owners_aliases #1328
MGMT-20756: assisted installer naive string concatenation for partiti… #1308
NO-ISSUE: Update konflux pipelines to use a remote pipeline #1301
NO-ISSUE: Update Konflux references #1299
MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1289
OCPBUGS-62361: Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.21 #1276
OCPBUGS-62398: Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.21 #1277
NO-ISSUE: Update Konflux references #1283
NO-ISSUE: Update Konflux references #1265
And 7 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-node-agent

MGMT-22292: Add url label #1208
MGMT-22042: add cve-automation github app to owners_aliases #1171
NO-ISSUE: Fix missing serviceAccountName in tekton pipelines #1187
NO-ISSUE: migrate renovate config #1123
MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1148
OCPBUGS-62390: Bump dockerfile images to 4.21 #1147
NO-ISSUE: Update konflux pipelines to use a remote pipeline #1118
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-utils

OCPBUGS-76411: Include additional operators in OVE config #253
AGENT-1431: Backport feature NoRegistryClusterInstall to 4.21 #248
OCPBUGS-74935: Update Konflux references #220
OCPBUGS-74304: Increase Konflux build pipeline memory #243
OCPBUGS-71230: bump github.com/sirupsen/logrus to v1.9.3 #234
OCPBUGS-73671: Increase capabilities passed via buildah #231
OCPBUGS-69877: Update Konflux files to build for 4.21 #217
OCPBUGS-69841: Red Hat Konflux kflux-prd-rh02 update ove-ui-iso-4-21 #215
OCPBUGS-69443: Remove operator manifests; now applied by assisted-installer #214
OCPBUGS-66426: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 13cf619 #188
OCPBUGS-66423: Update Konflux references #187
AGENT-1378: Add additional operators #201
NO-JIRA: Add project documentation to CLAUDE.md #191
OCPBUGS-64745: Update mtv-operator channel name #194
AGENT-1302: Read template from .template path #156
OCPBUGS-63704: Removed unneeded params from Makefile #192
AGENT-1302: Check for presence of registry instead of WorkflowType #157
OCPBUGS-63487: AGENT-1203: Simplify isobuilder #173
: OCPBUGS-63323: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan #181
OCPBUGS-63322: Update Konflux references #180
OCPBUGS-62912: Resolve violations detected by registry-standard #175
OCPBUGS-62986: Update Konflux references #177
OCPBUGS-62958: Update Konflux references #168
OCPBUGS-62905: Dockerfile cleanup #174
OCPBUGS-62347: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.21 #165
OCPBUGS-62704: remove hardcoded versions from iso_builder #171
AGENT-1336: Add release label to build #170
OCPBUGS-62646: Update Konflux references #167
OCPBUGS-62645: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 0697723 #146
AGENT-1258: Build PipelineRun changes for Konflux #155
OCPBUGS-61946: Include only final ISO in OVE UI container image #162
OCPBUGS-61956: Disable Konflux go.mod PR updates #163
OCPBUGS-61875: Add 4.21 config #160
AGENT-1258: Red Hat Konflux kflux-prd-rh02 update ove-ui-iso #154
AGENT-1258: Red Hat Konflux kflux-prd-rh02 purge agent-installer-utils #153
AGENT-1286: Red Hat Konflux kflux-prd-rh02 update agent-installer-utils #143
Full changelog

apiserver-network-proxy

OCPBUGS-62355: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.21 #86
Full changelog

aws-cloud-controller-manager

SPLAT-2253: tests/ote: fix parser issue when listing images #122
SPLAT-2337: tests/ote: Fix platform name in the spec build #121
SPLAT-2337: tests/ote: Introduce openshift test extension binary #117
OCPCLOUD-3092: Merge https://github.com/kubernetes/cloud-provider-aws:master (bea9adf) into main #112
OCPBUGS-62354: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.21 #118
NO-JIRA: Update OWNERS #116
Full changelog

aws-cluster-api-controllers

OCPCLOUD-3102: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.10.0 (175074f) into main #582
NO-JIRA: openshift: rename manager binary #581
OCPBUGS-63046: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.2 (d3a7da1) into main #576
OCPBUGS-62540: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.21 #575
NO-JIRA: Update OWNERS #567
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.1 (9c17049) into main #569
Full changelog

aws-ebs-csi-driver

STOR-2597, STOR-2627: Rebase aws-ebs-csi-driver to v1.48.0 for OCP 4.21 #294
OCPBUGS-62380: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.21 #292
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-74215: [release-4.21] Add VAC manifest for tests in AWS EBS #485
OCPBUGS-72509: deploy prometheus role and binding on hypershift guest #489
OCPBUGS-72527: Add SupportedSizeRange for azurefile-nfs #490
NO-JIRA: Migrate away from deprecated ioutil #474
CNTRLPLANE-1285: enable readOnlyRootFilesystem #419
OCPBUGS-65858: allow all-egress for efs operator #472
STOR-2538: Migrate aws sdk to v2 #442
No-JIRA: Update owners #471
STOR-2627: Enable nodeAllocatableUpdatePeriodSeconds in AWS EBS #435
OCPBUGS-65606: adds the csi-external-resizer to the image-references #469
STOR-2592: Bump all deps for 4.21 and remove hypershift client #468
STOR-2523: Add hypershift managed-by labels for csi driver operators #446
OCPBUGS-62802: Add RBAC ClusterRole and Binding for driver node #443
NO-JIRA: add ai-helpers claude marketplace #451
NO-JIRA: Normalize generation of driver metrics RBAC proxy sidecar #380
OCPBUGS-61436, OCPBUGS-61450, STOR-2600: Bump OLM metadata to 4.21 #430
OCPBUGS-62404: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.21 #438
STOR-1945: STOR-2056: add Azure File NFS test manifest #445
OCPBUGS-62374: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.21 #437
MULTIARCH-5554: update smb-csi-driver-operator support to add ppc64le #428
OCPBUGS-62427: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.21 #439
OCPBUGS-62348: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.21 #436
OCPBUGS-61955: Add withCABundleDaemonSetHook() to AWS EFS operator #433
OCPBUGS-60637: add runAsUser hook for operator deployment controller #431
NO-JIRA: Centralize injection of hosted-kubeconfig volume #311
NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 #429
OCPBUGS-54385: Avoid informer resync #432
NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 #427
NO-JIRA: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.21 #425
NO-JIRA: azure-disk, azure-file sync code de-duplication #303
Full changelog

aws-karpenter-provider-aws

AUTOSCALE-446: Rebase to 1.4.2 to match Hypershift dependencies #20
AUTOSCALE-446: Downrev/pin Karpenter 1.8.2 deps to Kube 1.34 for Hypershift 4.21 integration #19
AUTOSCALE-401: Post rebase cleanup - move kubernetes-sigs-karpenter back to main, re-add payload image label #18
AUTOSCALE-401: Karpenter rebase 1.8.2 #16
OCPBUGS-62388: Updating aws-karpenter-provider-aws-container image to be consistent with ART for 4.21 #15
Full changelog

aws-kms-encryption-provider

OCPBUGS-62458: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.21 #31
Full changelog

aws-machine-controllers

OCPBUGS-72523: Fix reconciler consistency checks in Update and Exists #163
CORS-4277: Ensure Throughput setting is honoured on gp3 volumes #155
NO-JIRA: bump k8s 1.34: bump Makefile and Dockerfile #158
OCPCLOUD-3085: Bump k8s to 1.34 #156
NO-JIRA: Update OWNERS #138
OCPCLOUD-3072: Add support for AMD SEV-SNP #141
OCPBUGS-62395: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.21 #139
OCPBUGS-38759: client: re-use a single file for building the session instead of randomly named files #140
Full changelog

aws-pod-identity-webhook

OCPBUGS-74170: Fix GOTOOLCHAIN env var #213
CCO-664: merge upstream changes #205
OCPBUGS-62587: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.21 #206
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPCLOUD-3093: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (aa50e43) into main #148
OCPBUGS-62487: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART for 4.21 #151
OCPBUGS-62392: Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.21 #150
NO-JIRA: Update OWNERS #149
Full changelog

azure-cluster-api-controllers

OCPBUGS-74398, OCPCLOUD-3101: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.22.0 (4523016) into release-4.21 #361
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:main (37d47aa) into master #355
OCPCLOUD-3101: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:main (e695d87) into master #354
OCPBUGS-62387: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.21 #352
NO-JIRA: Update OWNERS #351
Full changelog

azure-disk-csi-driver

OCPBUGS-69390: fix ASH static provision segmentation fault #117
OCPBUGS-67186: fix: disk creation failure in AzureStack env #114
STOR-2585: Rebase to upstream v1.33.5 for OCP 4.21 #112
NO-JIRA: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.21 #110
Full changelog

azure-file-csi-driver

OCPBUGS-65555: UPSTREAM: 2860: fix: CreateVolume to return actual provisioned capacity after rounding #110
STOR-2587: Rebase to upstream v1.34.1 for OCP 4.21 #109
OCPBUGS-62547: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.21 #106
Full changelog

azure-machine-controllers

OCPBUGS-63729: Set updateDomainCount to one when faultDomainCount is one #170
OCPCLOUD-3088: Bump k8s 1.34 #169
OCPBUGS-56664: Support DataDisks on Azure Stack Hub #164
OCPBUGS-62335: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.21 #163
NO-JIRA: Update OWNERS #162
Full changelog

azure-service-operator

OCPBUGS-62368: Updating ose-azure-service-operator-container image to be consistent with ART for 4.21 #13
NO-JIRA: Update OWNERS #12
Full changelog

azure-workload-identity-webhook

OCPBUGS-62364: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.21 #39
CCO-665: Merge upstream changes #40
Full changelog

baremetal-cluster-api-controllers

METAL-1703: Add AGENTS and “merge-upstream” slash command #55
OCPBUGS-62565: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.21 #53
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-73878: handle SSH rule deletion for Azure private #10225
OCPBUGS-76358: [release-4.21] Fix destroy bootstrap command for Azure #10293
AGENT-1431: Backport feature NoRegistryClusterInstall to 4.21 #10250
OCPBUGS-74672: [release-4.21] GCP: skip AI zones #10272
OSDOCS-17769: [release-4.21] Add AWS m7 instance types #10266
OCPBUGS-74493: add support for NVIDIA H100 and H200 enabled machine series #10259
OCPBUGS-74414: Remove region option for the GCP Private Service Connect Endpoint #10253
OCPBUGS-73891: add newly detected instance types for Azure during 4.21 regression test #10227
OCPBUGS-73773: ensure deterministic zone ordering for control plane machines #10214
OCPBUGS-72521: Fix nil pointer exception in azure mapiImage #10201
OCPBUGS-72578: CORS-4108: bump default channel to stable-4.21 #10204
OCPBUGS-69685, SPLAT-2584: Added ability to install different IPAM version when in TP. #10174
OCPBUGS-66355: Update the RHCOS 4.21 bootimage metadata to 9.6.20251212-1 #10191
OCPBUGS-69752: installing into GCP Shared VPC with minimal permissions #10173
OCPBUGS-69927: PowerVC: fix PostProvision #10180
OCPBUGS-69876: rename “var-ostree\x2dcontainer.mount” to something more computer-friendly #10178
OCPBUGS-69722: use CAPZ to provision ssh rule #10172
OCPBUGS-68363: azure: allow hive to pass empty rhcos image string #10163
OCPBUGS-67314: AGENT-1357 remove AgentWorkflowTypeInstallInteractiveDisconnected workflow #10161
OCPBUGS-68372: Fix ignition warning about agent-extract-tui.service #10164
OCPBUGS-62125: baremetal: allow multi-arch #10156
OCPBUGS-34950: Fix OpenStack infrastructure bootstrap issues #10148
NO-JIRA: Fix UPI Gate #10154
NO-JIRA: Minor fixes to openstack UPI guide #10149
AGENT-1389: create InternalReleaseImage registry TLS certificate #10147
CORS-4212: AWS: Add the ability to configure throughput on GP3 volumes #10132
OCPBUGS-63710: PowerVS: Fix all zones invalid in lon region #10135
OCPBUGS-65512: Removing resources on destroy by other filters #10100
NO-JIRA: bump capa to latest upstream version #10122
MULTIARCH-5817: Upgrade az version in upi-installer image to fix ‘az sig image-version create’ issue #10067
OPNET-678: Allow disabling internal DNS #9924
no-jira: Upgrade GolangCI-lint to v2 #10121
AGENT-1326, MCO-1961: copy image-references for machine-config-controller bootstrap #10134
OCPBUGS-60765: Bump capv to v1.14.0 #10120
OCPBUGS-62790: Use separate tmpfs for ostree checkout on live ISO #10133
OCPBUGS-60071: abort uninstall process if owned subnets contain shared tags #9942
MULTIARCH-5553: PowerVS: Introduce group division #10095
OSASINFRA-3965: Update cluster-api-provider-openstack to v0.13.0 #10090
TRT-2440: Revert #9945 “CORS-4212: AWS: Add the ability to configure throughput on GP3 volumes” #10131
OCPBUGS-65938: increase IAM waiter timeout and remove custom delay options #10124
CORS-4249: bump ARO marketplace images #10117
CORS-4212: AWS: Add the ability to configure throughput on GP3 volumes #9945
no-jira: Remove the GCP Custom Endpoints Feature Gate #10114
CORS-3657: Default Azure Installs to Marketplace Images #10076
METAL-1105: support specifying CA to verify BMC connections #10072
CORS-4259, CORS-4260, CORS-4265: Move the gcp permission check to a common file in install config. #10018
OCPBUGS-65893: CORS-4055: configure AWS SDK v2 clients with common config #10112
OCPBUGS-42871: pkg/infrastructure/network: update NumberOfProbes to ProbeThreshold #9423
CORS-4188: AWS - Add support to AMD SEV-SNP confidential VMs #10012
NO-JIRA: Add project documentation to CLAUDE.md #10040
CORS-4064, CORS-4187: Add support for multi zonal NAT gateways #9773
OKD-279: Enabled secureboot for cs10 testing #9959
NO-JIRA: Update ShiftStack OWNERS #10115
no-jira: generate powervc deep copy #10116
OSASINFRA-3965: Bump cluster-api to v1.11.3 #10110
CORS-4266: Add generated DeepCopy implementations for pkg/types/installconfig #10025
no-jira: bump CAPA controller #10107
MULTIARCH-5358: PowerVC: Add new platform for PowerVC #9806
OCPBUGS-65748: vSphere upi - change to infra id for folders #10106
AGENT-1303: Run agent-register-infraenv in interactive mode #9960
no-jira: add support for g2-standard* GCP instances #10101
OCPBUGS-65659: Add StandardFXmdsv2Family to azure tested instance type list #10088
OCPBUGS-65661: continue to update 02_storage.json using new property storageAccountId #10089
OCPBUGS-56451: Use the ImageDigest SourcePolicy to configure image registry on bootstrap host #10073
OPNET-678: Bump openshift/api #10097
OCPBUGS-59105: pkg/asset/manifests/azure: save cidr blocks #10034
CORS-4282: Remove the installer gcp service endpoints. #10075
NO-ISSUE: Generate the agent systemd diagrams from the unit files #10052
TRT-2424: Revert “Update the RHCOS 4.21 bootimage metadata to 9.6.20251113-0” #10092
OCPBUGS-65585: Update the RHCOS 4.21 bootimage metadata to 9.6.20251113-0 #10083
CORS-4262: update openshift/api & capi v1.11 #10060
CORS-4082, CORS-4086: Azure UserProvisionedDNS: Update bootstrap, master and worker ignition files #10058
OCPBUGS-61167: pkg/types/valication: explain overlapping internal subnets better #10039
CORS-4258: Create a Private DNS Zone for PSC #9992
CORS-4126: add descriptions for ap-southeast-6 #10062
OCPBUGS-64839: Azure UPI ARM template: use storageAccountId #10065
OCPBUGS-63584: vSphere-don’t use template,ClusterOSImage together #10043
AGENT-1302, OCPBUGS-61668: Merge interactive ignition into unconfigured-ignition #9941
OCPBUGS-64603: PowerVC: Validate Manual Load Balancer #10057
CORS-4087: Azure UserProvisionedDNS: Set PrivateDNSZone within CAPZ’s NetworkSpec #10059
OCPBUGS-56451: Provide a way to configure a fallback policy for imageDigestSources #10050
no-jira: cleanup old terraform configs & altinfra image #10053
OCPBUGS-63386: Increase agent-installer pre-network-manager timeout #10029
no-jira: Prune unused terraform packages #10051
OCPBUGS-63711: Remove pending items on gcp no-op #10049
CORS-4275: Add Windows support #10041
OCPBUGS-63632: Update RHCOS 4.21 bootimage metadata to 9.6.20251023-0 #10036
OCPBUGS-57126: Add node-image-pull to the list of services to check their logs in /etc/motd #9962
OCPBUGS-62136: Eliminate duplicate logs on bootstrap/rendezvous host #9957
OCPBUGS-60873: Prevent duplicate noProxy when adding nodes #10024
OCPBUGS-36360: Support certificate authentication with CAPZ #10019
OCPBUGS-62870: Fix firewall checks #10017
OCPBUGS-62824, OCPBUGS-62826: Fix console info for interactive agent installer #10003
OCPBUGS-62085: Update the RHCOS 4.21 bootimage metadata #9998
OKD-237: Remove fcos references #9970
OSASINFRA-3915: openstack: Start setting CredentialsMode #9734
NO-JIRA: shiftstack: Update OWNERS #9994
OCPBUGS-62125: baremetal: set baremetalhost architecture #9987
OCPBUGS-60752: Add MTU validation for networkConfig #9919
OCPBUGS-62907: AGENT-1269: Use agent-installer-ui image from release #9995
OCPBUGS-62430: None: Allow IPv6 Primary DualStack installs on platforms None and External #9983
OCPBUGS-41567: Clean up baremetal bootstrap systemd dependencies #8986
OCPBUGS-62452: Updating ose-installer-container image to be consistent with ART for 4.21 #9980
OCPBUGS-62471: Updating ose-baremetal-installer-container image to be consistent with ART for 4.21 #9981
OCPBUGS-60538: Update assisted-service dependencies #9956
CORS-4256: Add PSC Endpoint to the installconfig #9991
OCPBUGS-62514: Updating ose-installer-artifacts-container image to be consistent with ART for 4.21 #9984
SPLAT-2511: vSphere - do not block on vSphere >7.0.2, allow 9 #9963
CORS-4078: allow toggling AWS client logging #9976
OCPBUGS-62363: Set agent-extract-tui start timeout #9975
no-jira: Revert “Merge pull request #9939 from barbacbd/CORS-4058-release-4.21” #9974
CORS-4078: bump AWS SDK v2 max backoff duration to 300s #9966
CORS-4107: Update default release image to 4.21 #9954
OCPBUGS-61514: Add check for gcp firewall deletion permission #9935
OCPBUGS-62293: Set default for PrivateDNSZone Project ID #9967
CORS-4078: disable rate limiter for AWS SDK v2 #9958
OCPBUGS-61901: Update explain for Publish #9950
no-jira: OWNERS: switch to joelcapitao #9951
OCPBUGS-61935: Wildcards not reliable for copying container files #9948
CORS-4058: Migrate AWS Destroy to SDK v2 #9939
OCPBUGS-61353: Generated Redacted nutanix config for operator #9931
CORS-3550: add ability to opt out of the sigstore signing requirement #9940
CORS-4162: Remove GCPClusterHostedDNSInstall featuregate #9944
OCPBUGS-61490: Update code to retrieve ICSP instead of ICP #9933
MGMT-21586: Add an option in image-based installation to specify architecture #9934
SPLAT-2430: Update vSphere version validations for 7 EOL and VCF 9 #9914
OCPBUGS-61373: Fix shellcheck issues in bootstrap #9929
OCPBUGS-61373: Fix agent shellcheck issues #9928
no-jira: Fix logging and error messages #9917
SPLAT-2465: Changed LB VM creation to not be hard coded and use from variables.ps1 #9926
OCPBUGS-61111: Allow user to BYO private zone without specifying name #9922
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-machine-controllers

OCPBUGS-62365: Updating baremetal-machine-controller-container image to be consistent with ART for 4.21 #237
Full changelog

baremetal-operator

Bug OCPBUGS-76492: BMO fails to start servicing despite updates to HFC spec #459
OCPBUGS-68369: Abort inspection/cleaning before powering off during deletion #449
OCPBUGS-74365: Fix invalidDNSNameinvalidipv6 test for Go 1.24+ #450
OCPBUGS-67294: Require PreprovisioningImage for deprovisioning when cleaning is enabled #443
NO-ISSUE: Merge upstream #436
OCPBUGS-61349, OCPBUGS-62112: Merge upstream #432
OCPBUGS-62460: Updating ose-baremetal-operator-container image to be consistent with ART for 4.21 #433
NO-ISSUE: Merge upstream #430
Full changelog

baremetal-runtimecfg

OCPBUGS-72566: Fix TNA and TNF dummy ip for ipv6 #378
OCPBUGS-59477: Add deterministic sorting for addresses with identical priority #372
OCPBUGS-63709: dynkeepalived: Watch debug logging ConfigMap #371
OCPBUGS-62581: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.21 #370
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-73911: Fix unit test failure by updating ruby version to 3.3 #2186
OCPBUGS-65925: Fall back to simpler behavior, if setsid,ps,pkill are not installed #2153
NO-JIRA: .claude: Improve pr-review command/skill #2156
OCPBUGS-63189: Unify ErrAlreadyExists to correctly match #2155
OCPBUGS-59774: Update documentation of oc adm must-gather timeout flag #2154
OCPBUGS-58038: Clear defaultNodeSelector to run on any node #2149
CNTRLPLANE-1538: extend –auto-open-browser to work with –web #2115
OCPBUGS-64743: fix(must-gather): do not set node affinity if nodename is set #2135
OCPBUGS-63354: Increase Node ISO creation timeout from 15 to 30 minutes #2119
OCPBUGS-63311: pkg/cli/admin/upgrade: Tighten force warnings #2125
OCPBUGS-63683: Replace IPv4-mapped IPv6 addresses with valid IPv6 in tests #2123
NO-JIRA: Add pr-review Claude command and effective-go skills #2120
NO-ISSUE: pkg/cli/admin/upgrade/recommend: Drop obsolete precheckEnabled knob #2113
OCPBUGS-62875: Pass dry-run option to all create API calls #2117
CNTRLPLANE-1676: Update k8s dependencies to 1.34 #2118
NO-JIRA: Migrate to aws-sdk-go-v2 from archived aws-sdk-go #2114
NO-JIRA: adm upgrade status: capture testcase for OCPBUGS-60768 #2081
OCPBUGS-62445: prevent crash when rootDeviceHints format is invalid #2109
NO-JIRA: Update shellescape and sspi to newer versions #2116
NO-JIRA: Remove myself from update approvers, add Hongkai #2112
OCPBUGS-62550: Updating ose-cli-artifacts-container image to be consistent with ART for 4.21 #2111
OCPBUGS-61491: Update code to retrieve ICSP instead of ICP #2095
OCPBUGS-62362: Updating ose-tools-container image to be consistent with ART for 4.21 #2108
OCPBUGS-62548: Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.21 #2110
NO-JIRA: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.21 #2107
OCPBUGS-59311: oc adm must-gather: Add support for context #2105
OCPBUGS-59311: pkg/…/inspect: Add support for context.Context #2100
WRKLDS-593: oc adm must-gather: Improve cleanup order #2080
NO-JIRA: Add tchap as reviewer in oc #2099
NO-JIRA: oc adm groups sync: Use client.Unbind #2094
OCPBUGS-61063: pkg/cli/admin/upgrade/recommend: Enable precheck and accept gates #2088
OCPBUGS-52936: oc adm policy: Only initialize UserClient if built-in OAuth is enabled #2090
OCPBUGS-61311: Introduce auto-open-browser flag for external OIDC issuer login #2089
NO-ISSUE: pkg/cli/admin/upgrade/recommend/examples/4.19.0-okd-scos.16: Add OKD example #2093
OCPBUGS-59951: oc adm must-gather: Wrap gather in a session #2087
NO-JIRA: Add some warnings into excluded list #2092
OCPBUGS-56691: Rely on overall available disk space of the mounted volume #2084
Full changelog

cloud-credential-operator

OCPBUGS-74545: Resolve nil pointer exception in hasResourceTags #969
OCPBUGS-63714: ccoctl azure: retry custom role creation on consistency errors #944
CNTRLPLANE-1544: webhooks: Enable user namespaces #926
CNTRLPLANE-1544: manifests: Enable user namespace for the operator #927
CCO-690: Integrate OpenShift Test Extension framework for CCO #886
CCO-714: Add preserve-existing-roles flag to ccoctl auzre #922
NO-JIRA: docs: token migration to use next-bound-service-account-signing-key #932
OCPBUGS-63541: ccoctl: add public-key-file flag to create-all #933
OCPBUGS-63561: ccoctl: use pagination when listing resources in aws #935
NO-JIRA: Update output directory when extracting issuer URL #925
CCO-661: Update go modules #930
OCPBUGS-63238: Ensure ccoctl aws commands use their own region option #931
CCO-709: Upgrade Kubernetes v1.34 #929
CCO-644: Upgrade msgraph-sdk-go v1.86.0 #924
CCO-435: Migrate away from deprecated ioutil package. #920
OCPBUGS-62495: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.21 #923
OCPBUGS-62184: aws: remove endpoint overrides for s3 and cf clients #921
CCO-692: Migrate to aws-ask-go-v2 #905
OCPBUGS-61475: set cloud-credential-operator as default-container #914
OCPBUGS-60078: ccoctl: aws to use proper issuer url on subsequent runs #904
Full changelog

cloud-network-config-controller

OCPBUGS-54805: Handle deleted nodes #182
CORENET-6349: rebase k8s to 1.34.1 #187
OCPBUGS-63348: Fix capacity calculation #184
OCPBUGS-60806: Change the capacity struct from int to ptrOfInt #183
OCPBUGS-55625: Retrieve subnet from vnet subnets.addressPrefixes field #179
OCPBUGS-62437: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.21 #181
Full changelog

cluster-authentication-operator

NO-JIRA: Add agents.md file #818
OCPBUGS-65675: externaloidc: return errors when node statuses cannot be used to determine oidc state #801
API-1835: test/oauth-server-configobserver: adds a test to show which input resources are required to run the operator and the configObserver controller #785
NO-JIRA: om: add a test for the oauth-apiserver controller #811
CNTRLPLANE-1789: Bump kube to 1.34 #807
OCPBUGS-65473: fix: remove route and oauth service from clusteroperator expected output #808
CNTRLPLANE-947: operator: set oauth-specific relatedObjects dynamically in the operator status #800
OCPBUGS-62941: (bugfix): configure status controller to remove unset versions #798
OCPBUGS-62447: Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.21 #793
API-1835: test/oauth-server-staticresource: adds a test to show which input resources are required to run the operator and the staticResourceController #790
NO-JIRA: Update OIDC e2e test to expect admission-time validation error of invalid CEL expression #797
API-1835: fix integration tests #795
OCPBUGS-57444: set appropriate rolling update settings #789
NO-JIRA: om: fix integration testing #788
Full changelog

cluster-autoscaler

OCPBUGS-57131: update node info processors to include unschedulable nodes #390
AUTOSCALE-433: Fixup vpa tests downstream #394
OCPBUGS-60790: refactor cloud provider options #380
AUTOSCALE-335, AUTOSCALE-336, OCPBUGS-62383, OCPBUGS-62477: 1.34.0 upstream rebase #386
OCPBUGS-62383: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.21 #383
OCPBUGS-62477: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.21 #384
NO-JIRA: Remove OWNERS automation preamble #382
Full changelog

cluster-autoscaler-operator

AUTOSCALE-369: Add networkpolicies for CAO and CA #357
AUTOSCALE-172: add ProvisioningRequest CRD and flag #340
AUTOSCALE-336: Prepare for 4.21 #355
OCPBUGS-62589: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.21 #354
AUTOSCALE-384: Add “cordon node before terminating” option to cluster autoscaler resource #356
Full changelog

cluster-baremetal-operator

OCPBUGS-74204: Fix libguestfs /tmp access in machine-os-downloader init container #551
OCPBUGS-70163: Remove the writable ironic CA cert volume mount at /certs/ca/ironic path, ironic will use the writable /conf mount if needed #541
OCPBUGS-70218: Add sharedVolumeMount to machine-os-downloader init container #542
OCPBUGS-66144: Enable readOnlyRootFS flag for machine-os-images container #533
OCPBUGS-66134: Delete cbo-hostedcluster deployment from non-hosted clusters #531
METAL-1104: support specifying CA to verify BMC connections #527
METAL-1351: Add readOnlyRootFilesystem flag to baremetal containers deployed using CBO #497
METAL-1664: Remove regular cluster profile from hostedcluster CBO deployment #529
NO-ISSUE: Parameterize Makefile container build tool #520
METAL-1656: Remove entity_id from PrometheusRule alert descriptions #528
METAL-1238: Add annotation to enable CBO install via CVO in Hosted Clusters #493
METAL-1239: Add ExternalIPs field to Provisioning CRD #522
METAL-1459: add default PrometheusRule deployment for IPE and watch Servicemonitor #504
METAL-1620: Upgrade Go modules and dependencies #521
OCPBUGS-61477: Mount /etc/pki/ca-trust to machine-os-images #517
OCPBUGS-61477: Enable runtime extraction of aarch64 images #508
OCPBUGS-62577: Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.21 #507
OCPBUGS-60498: Always have a service for ironic-api port #510
METAL-1449: optionally deploy IPE #490
Full changelog

cluster-bootstrap

OCPBUGS-62558: Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.21 #120
Full changelog

cluster-capi-controllers

OCPBUGS-69685: openshift: CAPI IPAM TechPreviewNoUpgrade: set webhooks failurepolicy: Ignore #257
OCPBUGS-66948: Pin IPAM CRDs to release-4.20 #253
OCPCLOUD-3104: Merge https://github.com/kubernetes-sigs/cluster-api:v1.11.3 (7b1cf36) into master #243
NO-JIRA: openshift: rename manager binary #252
OCPBUGS-62579: Updating ose-cluster-api-container image to be consistent with ART for 4.21 #249
NO-JIRA: Update OWNERS #246
OCPBUGS-57605: Updating ose-cluster-api-container image to be consistent with ART for 4.20 #242
Full changelog

cluster-capi-operator

OCPBUGS-74650: fix: e2e: workaround for flakes caused by OCPBUGS-74571, until it is fixed #450
OCPBUGS-73908: Remove references to cluster-api-operator image #445
OCPBUGS-69772, OCPCLOUD-3105: make use of sigs.k8s.io/cluster-api’s v1beta2 #435
OCPBUGS-69417: fix: e2e: CAPI creation issue/scale-down wait issue/machine nodeRef comparison issue #433
NO-JIRA: capiinstaller: fix error wrapping #427
OCPBUGS-66948: manifests-gen: Don’t separate IPAM CRDs #425
NO-JIRA: capiinstaller: keep caBundle for CRDs and conversion webhooks #423
NO-JIRA: fix: e2e: increase timeouts for storage init / verify replicas #421
NO-JIRA: fix: CAPI/CAPA bump conversion loops #420
NO-JIRA: fix: e2e: azure: convert new image format mapz -> capz #419
OCPCLOUD-3105: Bump CAPI to v1.11 and Providers #417
OSASINFRA-3960: Migrate OpenStack InfraCluster controller in-tree #411
NO-JIRA: Set scheme during AWSCluster conversion #418
OCPCLOUD-2997: Disallow authoritativeAPI swap when CAPI Machine is deleting or its infra is not ready #408
OCPCLOUD-3104: machinesync: add compatibility for v1beta2 when syncing CAPI to MAPI #416
NO-JIRA: Update OWNERS, adding stephenfin #414
NO-JIRA: capiinstaller: drop manager replacement #410
OCPCLOUD-2992: refactor: split machineset migration testing into multiple files #390
OCPCLOUD-3188: Prevent MAPI MachineSet creation when CAPI MachineSet with same name exists #405
NO-JIRA: Migrates coderabbit schema to v2 #409
NO-JIRA: Fix Feedback agent #407
OCPBUGS-62892: openstack: Handle empty MAPO network subnets #381
OCPCLOUD-3170: Adds CAPI Machine VAP #361
NO-JIRA: e2e: fix controller-runtime logging warning #406
No-JIRA: yaml was not rendering correctly #401
NO-JIRA: Make help, unbind metrics port #328
NO-JIRA: conversion: CAPI2MAPI set openshift labels for zone, region and instance-type #393
OCPBUGS-62325: Updates InfraMachine watch_filters for MachineSync controller #371
OCPCLOUD-2640: Adds MachineSet VAP test suite #404
OCPCLOUD-3104: pkg/util/sync: fix ignoring the Cluster API conversion-data annotation #403
NO-JIRA: machinesync: improve createOrUpdateCAPIMachine and implement unit tests #396
OCPCLOUD-3104: sync: allow Cluster API v1beta2 version for ownerrefs and set Cluster v1beta2 ControlPlaneInitialized #391
OCPCLOUD-2636: Warn users when attempting to change Authoritative API but Synchronized condition is false #398
OCPCLOUD-2992: machine migration round trip test #366
OCPCLOUD-2996: Prevent changing .spec.authoritativeAPI on MAPI when Phase Provisioning or is being deleted #388
OCPCLOUD-2999: AWSMachine status conversion and syncing #372
OCPCLOUD-3104: manifests-gen: re-enable conversion, validating and mutating webhook configurations #389
OCPCLOUD-3104: Fix v1beta2 condition setting #385
OCPCLOUD-2709: Implement MAPI2CAPI conversion of loadbalancers #348
OCPBUGS-62570: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.21 #357
OCPCLOUD-2995: Machine status conversion and syncing #365
NO-JIRA: hack/test.sh use eval for starting ginkgo so GINKO_EXTRA_ARGS having whitespaces works #380
OCPCLOUD-2641: Validate creation of Machine API Machines #368
OCPBUGS-62620: kubeconfig controller: do not error on token secret not yet populated #373
NO-JIRA: lint: add aliases for machine api’s and controller-runtime log #367
OCPCLOUD-2992: refactor: split machine migration testing into multiple files #364
NO-JIRA: machine_sync: assorted fixes #370
OCPCLOUD-2992: Enable MAPI machine synchronized e2e tests (re-enable after OCPBUGS-54703 fix) #359
NO-JIRA: Update OWNERS #353
OCPCLOUD-3162: conversion: do not set ignition version on AWSMachine #363
NO-JIRA: use go workspaces #358
OCPCLOUD-2714: Add VAPs to prevent setting of CAPI fields that are not supported by MAPI #334
No-JIRA: increased timeout #354
NO-JIRA: Adds AGENTS.md #349
OCPBUGS-54703: Fix conversion of Machines without MachineSet #351
OCPCLOUD-2992: migration e2e for deleting machine #345
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-cloud-controller-manager-operator

SPLAT-2253: CCM-AWS config enforce to provision Service NLB with SG under gate #391
OCPCLOUD-3081: Update to Kube 1.34 deps #428
SPLAT-2297: Added new cmd flag to launch of vSphere CCM #394
OCPBUGS-62585: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.21 #414
OCPBUGS-51305: ccm: disable unused secure-serving port and webhook #415
OCPBUGS-60385: Add Microsoft.Network/publicIPAddresses/delete permission #416
NO-JIRA: Update OWNERS #413
OCPBUGS-54490: Add Azure permissions for Private Link Service operations #417
SPLAT-2341: Add feature gate support in the cloud-config sync controller #400
Full changelog

cluster-config-api

OCPBUGS-61678: Disable PSA for 4.21 #2623
OCPNODE-3759: Promote SigstoreImageVerificationPKI feature to default #2511
SPLAT-2169: Added AWS dedicated host support #2614
MCO-2005: Include missing OSImageStream TP CRDs #2612
AGENTS: Using API_GROUP_VERSIONS generates incorrect openapi #2575
AGENT-1385: Adding missing status field for InternalReleaseImage #2611
OCPNODE-3779, OCPNODE-3894, OCPNODE-3895: Enable DRA(DynamicResourceAllocation) featuregate by default #2498
Revert “Merge pull request #2448 from opokornyy/CCXDEV-15259-io-v1” #2608
OCPBUGS-65819: fix ClusterMonitoring CRD plural name #2588
CORS-4281: Remove the GCP Service Endpoints #2576
MULTIARCH-5190: Promote ImageStreamImportMode to default #2266
(OLMv1) Update EP link for SingleOwnNamespace feature #2572
OPRUN-4281: Disable OLMv1 Boxcutter FeatureGate #2602
AGENT-1330: machineconfiguration/v1alpha1: add InternalReleaseImage #2510
MCO-1927: Add osImageStream to MCPs #2555
Disable TPNU/DPNU ClientsAllowCBOR for large list decodes. #2593
Move ProfileCustomizations under a new GA gate #2590
CORS-4250: AWS: Add the ability to configure throughput on GP3 volumes #2480
OCPBUGS-60885: Add ClosedClientConnectionPolicy to IngressController API #2584
CONSOLE-4882: Support mailto: links in ConsoleLink href field #2592
OCPBUGS-61858: Use pointer type for HTTPKeepAliveTimeout in IngressController API #2591
AUTOSCALE-172: add feature gate for ProvisioningRequest CRD #2587
OCPBUGS-61858: Add HTTPKeepAliveTimeout to IngressController API #2547
OCPNODE-3874: Remove the unused constant CgroupModeV1 #2579
AGENT-1372: Rename NoRegistryClusterOperations to NoRegistryClusterInstall #2586
OPRUN-4246: Add BoxCutterRuntime feature gate #2577
OPNET-678: Add internalDNSRecords field #2460
SPLAT-2539: Promoted VSphereMixedNodeEnv to TechPreview #2582
SPLAT-2206: Added AWS dedicated host support #2484
Add test cases for all supported format markers #2570
CONSOLE-4666: ConsolePlugin v1alpha1 removal: Remove deprecated CRD version #2534
OCPCLOUD-3173: Enable gcp spot instances #2566
STOR-2297: remove oVirt from ClusterCSIDriver API #2519
OCPCLOUD-3214: Add ClusterAPIMachineManagement feature gate #2563
OCPCLOUD-3164: Add CRDCompatibilityRequirementOperator feature gate #2565
Create shared global parser/universe in codegen #2558
MCO-1962: Move skew enforcement feature gate to tech preview #2561
OCPBUGS-63311: config/v1/types_cluster_version: Fix “images that comes” typo #2560
Bring KAL up to date and enable new linters #2554
OCPBUGS-62987: Move DynamicConfigurationManager back to DevPreview #2552
envtest-releases: add v1.34.1 to index #2553
MCO-1941: Add OSStream FeatureGate #2549
hack: switch to /usr/bin/env bash #2551
CORS-4157: AWS, Azure: Add IPFamily to the PlatformStatus within Infra CR #2499
codegen: Improve performance of package loading #2543
Fix use of API_GROUP_VERSIONS running codegen #2530
STOR-2627: Add MutableCSINodeAllocatableCount to Dev- and TechPreview #2502
Switch to invoking codegen once in general updates #2540
route: improve .spec.tls.termination doc #2532
OPRUN-4156: Promote OLMv1 Webhook support to GA #2491
OCPBUGS-55192: Add IngressController .spec.domain validation #2308
OCPBUGS-63311: config/v1/types_cluster_version: Tighten force and rollback warnings #2539
CORENET-6005: network, virt: graduate preconfigured UDN addresses feature gate #2496
MCO-1861: Promote ManagedBootImagesvSphere feature gate to default #2529
MCO-1873: promote ManagedBootImagesAzure to default #2526
OCPBUGS-60457: payload-command: remove authentication CR from hypershift payload #2523
OCPSTRAT-2371: Update to Kubernetes v1.34.1 #2427
CNTRLPLANE-1576: add event-ttl configuration to kube-apiserver #2520
CNTRLPLANE-1614: add event-ttl feature gate #2525
: promote InsightConfigAPI and OnDemandDataGather to v1 #2448
Switch to slices stable sort on manifest merging #2524
Use separate serialization linting config for Machine API provider types #2522
Add initial AI api-review configuration #2489
Support AMD SEV-SNP on AWS #2424
MCO-1805: MCO-1806: Add ManagedBootImagesCPMS feature gate & CPMS type to ManagedBootImages API #2396
OCPBUGS-62482: Updating ose-cluster-config-api-container image to be consistent with ART for 4.21 #2513
OCPBUGS-55649: Remove SetEIPForNLBIngressController feature gate #2501
OCPBUGS-61382, STOR-2533: move VolumeAttributesClass to GA #2471
Promote BYO OIDC features #2454
OCPBUGS-55673: Remove IngressControllerLBSubnetsAWS featuregate #2400
OCPBUGS-62068: NodeSwap Feature Gate usage to be removed #2494
OCPBUGS-59939: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2507
OCPBUGS-59940: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2506
(bugfix): crdify generator returns aggregated error when validations fail #2493
MCO-1669: add BootImageSkewEnforcement API #2357
remove unused feature gate InsightsConfigAPI #2474
OCPBUGS-61689: Add ‘AGE’ print column to MachineConfigNode object #2476
NO-JIRA: tooling: add crdify generator to run crdify against CRD changes #2472
Update controller-tools to latest on fork #2478
Monitoring API: Add Metric server config #2322
CNTRLPLANE-5: Add CBOR feature gate #2235
NO-JIRA: New rules about CO’s conditions #2469
apiservers.config.openshift.io: remove spec.tlsSecurityProfile GoDoc caveats #2467
SPLAT-2482: create new featuregate for ClusterAPIMachineManagementVSphere #2466
MCO-1675: Update API for Status Reporting needs (REBASED) #2442
CORS-3993: Promote GCPClusterHostedDNS to Default #2300
Adjust typos #2243
Update schema checker to avoid incorrect new required fields checks #2470
config/v1/cluster_operator improve documentation #2344
Update NodeSwap with owner and doc blurb. #2053
CORS-4136: Add Feature gates for AWS, Azure and GCP Dual Stack support #2430
Full changelog

cluster-config-operator

CNTRLPLANE-1311: Simplified test infrastructure to single-module architecture #452
NO-Jira:Update owners for November 2025 #453
OCPBUGS-62330: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.21 #450
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-74588: Bump openshift/api to get latest AWSMachineProviderConfig type #386
OCPBUGS-69921: Fix Makefile to use vendor mode #380
OCPCLOUD-3042: use go workspace #376
OCPCLOUD-3042: Create cluster-control-plane-machine-set-operator-ext command #372
OCPCLOUD-3084: Bump k8s dependencies to 1.34 #371
OCPBUGS-62588: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 4.21 #369
NO-JIRA: Update OWNERS #367
MCO-1866: Ignore boot image differences while reconciling Provider Configs #368
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-74301: Re-add serving cert volume mount to hypershift guest cluster manifest #267
OCPBUGS-72391: Set client throttling parameters #263
OCPBUGS-65474: Add ClusterRole and other related objects to ClusterOperator relatedObjects #258
No-JIRA: Update owners #260
STOR-2560: Add readOnlyRootFilesystem to hypershift and ibm-cloud-managed #248
STOR-2534: Remove v1beta1 group snapshot API #259
STOR-2592: Bump all deps for 4.21 #253
TRT-2419: Revert “Merge pull request #255 from tchap/userns-operand” #256
CNTRLPLANE-1544: assets: Use restricted-v3 scc for the deployments #255
STOR-2534: Update CRDs from external-snapshotter 8.4.0 #252
STOR-2523: Add hypershift managed-by labels for csi-snapshot-controller operand #250
Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.21 #245
OCPBUGS-62247: add all-egress label to deployments on HCP and IBM #243
Full changelog

cluster-dns-operator

NE-2245: Bump cluster-dns-operator to Kubernetes 1.34 for 4.21 #453
NE-2138: Bump cluster-dns-operator to Kubernetes 1.33 for 4.21 #448
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #449
NO-JIRA: Add davidesalerno to OWNERS #447
Full changelog

cluster-etcd-operator

OCPBUGS-74489: configure inertia for all controllers, bump to 10m #1535
CNTRLPLANE-1791: bump k8s 1.34 #1517
CNTRLPLANE-1315: Refactor OTE to single-module architecture #1510
NO-JIRA: upkeep: add fonta and myself to owners file #1515
OCPBUGS-65927: fix: tnf setup fails when ipv6 is present #1514
CNTRLPLANE-1769: Update to v3.6.5 #1507
CNTRLPLANE-1544: manifests: Enable user namespace for deployment #1512
OCPBUGS-63543: fix: update redfish url validation #1504
OCPBUGS-63240: [TNF] Fix job controller startup reliability with retry and degraded status #1500
OCPEDGE-1885, OCPEDGE-2088: Updated state transitions & tests for TNF setup job #1481
OCPBUGS-60273: Ensure revision.json persists on ungraceful shutdown #1494
NO-JIRA: use scrapeClass for service monitors #1497
NO-JIRA: add runbook urls for alerting rules #1496
NO-JIRA: feat: update the ip parsing for the nodes #1479
OCPEDGE-2183: Updating Quorum detection logic to absolve TNF of quorum loss reports. #1483
NO-JIRA: remove etcd-backup-server from static pod lists #1492
CNTRLPLANE-1315: Add OpenShift Tests Extension (OTE) for cluster-etcd-operator #1488
OCPBUGS-62518: Updating cluster-etcd-operator-container image to be consistent with ART for 4.21 #1489
NO-JIRA: Use secure cipher suites #1477
ETCD-590: configure probes based on quota size #1460
NO-JIRA: Add priority field to prevent early shutdown #1476
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

OCPBUGS-66203: clear affinities on an individual API call #1273
CNTRLPLANE-1683: set up openshift-tests-extension for cluster-image-registry-operator: refactor: simplified single-module OTE infrastructure #1269
OCPBUGS-66153: use unambiguous path for minio image #1270
OCPBUGS-62573: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.21 #1256
Full changelog

cluster-ingress-operator

CORS-4229: Revert “dns/gcp: Allow configuring custom endpoints” #1302
OCPBUGS-61858: Implement HTTPKeepAliveTimeout tuning option #1297
CORS-4174: Azure: Add Ingress LB IPs to Infra CR when in-cluster DNS is enabled #1256
OCPBUGS-60885: Implement ClosedClientConnectionPolicy field #1307
NE-2203: Add PrometheusRule for Gateway API #1300
NE-2233: Bump to OSSM 3.2.0 and Istio 1.27.3 #1306
NE-2161: Fix Gateway API CRD metadata updates during operator upgrades #1309
OCPBUGS-64675: Fix variable shadowing in testGatewayAPIDNS e2e #1304
NE-2161: Bump Gateway API CRDs to v1.3.0 #1303
OCPBUGS-61508: IngressOperator not exposing some metrics for degraded… #1290
NE-1334: Enhancement to add operator channel when creating gatewayclass #1301
NE-1334: Enhancement to add brew and stage secrets for pre-release image testing #1291
OCPBUGS-43919: desiredWildcardDNSRecord: Check for nil LB field #1189
OCPBUGS-62400: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.21 #1286
NE-1334: Script to install ossm pre-release operator and run GWAPI e2e tests #1283
OCPBUGS-55649: Remove SetEIPForNLBIngressController feature gate #1280
OCPBUGS-55673: Remove IngressControllerLBSubnetsAWS featuregate #1242
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #1281
NE-2139: Kubernetes to 1.33.4 and controller-runtime to 0.21 #1279
NO-JIRA: Add davidesalerno to OWNERS #1278
OCPBUGS-60859: Fix logic on gatewayapi test cleanup #1273
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-74181: SCC: allow image volume type for all SCCs #2007
OCPBUGS-73561: Update openshift/library-go to get new default TLS configuration #1999
OCPBUGS-61297: revert dev cert rotation #1984
OCPSTRAT-2728: Update k8s version ranges for MutatingAdmissionPolicy #1980
CNTRLPLANE-1721: Ote infrastructure only #1977
OCPBUGS-65755: Stop serving VolumeAttributesClass v1beta1 #1949
CNTRLPLANE-180: check for user-based SCCs causing PSA violations #1881
CNTRLPLANE-1724: Refactor OTE to single-module architecture #1966
OCPBUGS-62366: remove beta enablement for resource api #1923
OCPBUGS-33013: deps: Update library-go to update staticpod pkg #1917
CNTRLPLANE-1721: Create separate Go module for test extension #1953
CNTRLPLANE-1544: scc: Grant authenticated users use of restricted-v3 #1944
CNTRLPLANE-1544: Enable user namespace for the operator #1934
CNTRLPLANE-1616: add event-ttl config observer #1938
CNTRLPLANE-1544: scc: restricted-v3: Fix runAsUser range #1947
NO-JIRA: Update the deprecated API usage alerts for 1.34 #1946
OCPSTRAT-2371: Update to Kubernetes v1.34.1 #1939
OCPNODE-3758: alpha/beta apis for DRA should not be enabled in 1.34 #1932
OCPBUGS-60045: Bump library-go to latest master #1928
OCPBUGS-62450: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.21 #1931
NO-JIRA: Add priority field to prevent early shutdown #1915
NO-ISSUE: Use scrapeClass for service monitors #1930
OCPSTRAT-2371: MutatingAdmissionPolicy e2es depend on both v1alpha1 and v1beta1 of admissionregistration.k8s.io being served in k8 1.34 #1927
OCPBUGS-15430: move alerting rules from CMO over #1922
Re-apply “OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry” #1910
OCPSTRAT-2371: promote MutatingAdmissionPolicy to v1beta1 for > 1.34.0 #1921
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-62569: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.21 #63
OCPBUGS-57562: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.20 #58
NO-JIRA: Update OWNERS #60
Full changelog

cluster-kube-controller-manager-operator

CNTRLPLANE-1275: Refactor OTE to single-module architecture #891
OCPBUGS-65502: manifests: Expand related objects in clusteroperator #894
no-jira: Migrate away from deprecated ioutil #896
OCPBUGS-33013: deps: Update library-go to update staticpod pkg #892
OCPSTRAT-2371: Update to Kubernetes v1.34.1 #888
no-jira: Add priority field to prevent early shutdown #865
CNTRLPLANE-1544: Enable user namespaces for the operator #886
NO-ISSUE: Use scrapeClass for service monitors #880
OCPBUGS-62408: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.21 #885
OCPBUGS-62255: Throttle resourcesynccontroller on pairs with dual writers. #881
WRKLDS-1556: Remove –cloud-provider=external from KCM #862
CNTRLPLANE-1275: Fixing arch issue #869
CNTRLPLANE-1275: Fixed hardcode arch issue #866
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-74592: [release-4.21] NO-JIRA: pkg/operator: Fix wrong ClusterOperator name #605
[release 4.21] OCPBUGS-74265: Add OPERATOR_IMAGE_VERSION to recovery container #603
OCPBUGS-60572: Use BoundServceAccountTokenVolume dy default #571
OCPBUGS-65503: manifests: Expand related objects in clusteroperator #588
CNTRLPLANE-1309: set up openshift-tests-extension for cluster-kube-scheduler-operator and add a sanity test #585
OCPNODE-3779: make config.Spec.ProfileCustomizations.DynamicResourceAllocation defunct #587
CNTRLPLANE-1544: deps: Update library-go #589
OCPSTRAT-2371: Update to Kubernetes v1.34.1 #583
no-jira: Add priority field to prevent early shutdown #572
CNTRLPLANE-1544: manifests: Align user namespaces for the operator #581
CNTRLPLANE-1544: Enable user namespace for the operator #580
OCPBUGS-62609: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.21 #579
NO-ISSUE: Use scrapeClass for service monitors #578
OCPBUGS-61301: Add readonlyRootFilesystem #575
Full changelog

cluster-kube-storage-version-migrator-operator

CNTRLPLANE-1306: Refactor OTE to single-module architecture #133
OCPBUGS-62444: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.21 #132
CNTRLPLANE-1306: Fixing arch issue #130
CNTRLPLANE-1306: Fix arch issue #128
Full changelog

cluster-machine-approver

OCPCLOUD-3082: K8s 1.34 bump and update dependencies #282
OCPBUGS-63519: port 9193 need to be internal and port 9194 need to have a service #279
OCPBUGS-62583: NO-JIRA: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.21 #277
NO-JIRA: Update OWNERS #276
NO-JIRA: set machine-approver-controller as default container #278
Full changelog

cluster-monitoring-operator

OCPBUGS-74622: update expr for AlertmanagerClusterFailedToSendAlerts to exclude value 0 #2804
OCPBUGS-74202: move endpointslice RBAC to Role #2795
NO-ISSUE: ensure CMO and its operands pods have the app.kubernetes.io/part-of: openshift-monitoring label #2771
NO-ISSUE: Migrate away from deprecated ioutil #2754
NO-ISSUE: rename manifests_test package to manifests #2768
MON-4436: Drop CHANGELOG.md #2755
NO-JIRA: [bot] Synchronize versions of the downstream components #2767
TRT-2442: revert enhance test for config_test.go and let CVO manage CMO networkpolicies” #2766
OCPBUGS-66137: update ghcr.io/rhobs/prometheus-example-app to 0.5.1 which aligns versions #2762
MON-3940: Add the collection of MTV migration metrics to Telemetry #2743
MON-4424: update ghcr.io/rhobs/prometheus-example-app to 0.5.0 #2749
MON-4444: thanos-ruler: set default retention from UWM Prometheus if present #2759
OCPBUGS-61088: revert PR #2738, enhance test for config_test.go and let CVO manage CMO networkpolicies #2740
MON-4435: EndpointSlice migration in UWM Prometheus Operator #2756
NO-ISSUE: update prometheus operator dependencies to v0.87.0 #2752
MON-4434: Migrate core monitoring ServiceMonitors to EndpointSlice #2745
NO-ISSUE: Bump openshift/library-go #2751
OCPBUGS-65630: add monitoring-plugin service account to deployment. #2748
MON-4420: Enable Gateway API collection by telemeter #2750
MON-4420: Gateway API telemetry #2734
OCPBUGS-65600: fetch misspell binary upon invocation and fix CHANGELOG typo #2747
NO-JIRA: [bot] Synchronize versions of the downstream components #2736
MON-4392: set serviceDiscoveryRole:EndpointSlice for kubelet and node-exporter servicemonitors #2742
NO-ISSUE: bump jsonnet dependencies #2741
MON-4296: Bump prometheus-operator libs to v0.86.2 #2720
TRT-2395: Revert “OCPBUGS-61088: create networkpolicy settings for in-cluster monitoring” #2738
NO-JIRA: [bot] Synchronize versions of the downstream components #2728
OCPBUGS-62310: Fix KSM deny-list typo #2677
NO-JIRA: [bot] Synchronize versions of the downstream components #2712
NO-JIRA: clarify ExternalLabels doc #2691
MON-4398: Enable UTF-8 by default in admission-webhook #2704
OCPBUGS-45671: chore(prometheus/remotewrite): clarify that the in-cluster proxy env vars set in prometheus container can be used in all configs that support proxyConfig.proxyFromEnvironment #2717
MON-4383: feat(auto_docs_examples): adjust and add more examples #2573
MON-4408: chore: make test/monitoring a seperate module to keep managing deps in root go.mod simple #2714
OCPBUGS-62276: add tls configuration for the monitoring plugin deployment #2706
NO-JIRA: [bot] Synchronize versions of the downstream components #2705
OCPBUGS-62972: enhance case 66736 #2708
NO-ISSUE: Update jsonnet dependencies #2696
OCPBUGS-62160: Remove AlertManager endpoints when disabled #2684
NO-JIRA: [bot] Synchronize versions of the downstream components #2703
MON-4395: Bump prometheus-operator to v0.86.0 #2698
NO-ISSUE: set openshift-state-metrics as default container #2693
OCPBUGS-61661: Remove cluster from non-multicluster dashboards #2679
MON-4384: adding Blackwell GPU device to accelerators configmap #2689
NO-ISSUE: chore: remove image locations in assets #2683
NO-ISSUE: [bot] Update jsonnet dependencies #2687
NO-ISSUE: chore: remove mentions of prometheus Adapter #2682
OCPBUGS-15430: remove Kubernetes API alerting rules #2671
NO-JIRA: chore: bump jsonnet dependencies #2649
OCPBUGS-62109: test: remove image registry e2e tests #2681
NO-ISSUE: update Go dependencies #2674
MON-4346: Bump Go to 1.24 #2655
NO-JIRA: [bot] Synchronize versions of the downstream components #2673
OCPBUGS-60161: Add mcd_local_unsupported_packages metric from MCO to telemetry #2638
NO-ISSUE: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.21 #2662
MON-4344: chore: port the test suite over from openshift-tests-private #2635
MON-4371: chore(prometheus): enable use-uncached-io feature flag #2637
NO-JIRA: [bot] Synchronize versions of the downstream components #2668
OCPBUGS-61113: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2657
NO-JIRA: [bot] Synchronize versions of the downstream components #2663
OCPBUGS-56568: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2660
OCPBUGS-61135: Revert “MON-4343: Cleanup deprecate pa config” #2658
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-network-operator

OCPBUGS-76285: Remove duplicated openssl parameter #2899
OCPBUGS-69941: Add kubevirt platform to dual-stack supported platforms #2861
OCPBUGS-72556: fix(hypershift): use net.JoinHostPort for URL construction #2873
OCPBUGS-67011: Fix frr-k8s-statuscleaner crash: move $(LOG_LEVEL) to end of args #2852
OCPBUGS-63443: Fix whereabouts-token-watcher DaemonSet improvements #2841
OCPBUGS-56173: Align frrk8s to upstream #2833
OCPBUGS-35387: rbac: Add network resources to cluster-reader role #2826
CORENET-6348: rebase k8s to 1.34.1 #2832
CORENET-6465: Remove unneeded logging config from managed ovn-kubernetes #2816
CORENET-6488: Preserve custom resource requests on ovn-control-plane pods #2825
NO-JIRA: add wiki link for using ./hack/run-locally.sh #2824
OCPBUGS-63743: Rename transit subnet flags #2828
OCPBUGS-60032: Configure CVO to delete default-account role binding #2758
SPLAT-2503: Fixed “null” value for vSphere api and ingress VIP in UPI scenario #2795
CORENET-6423: api, l2udn: subnets must be masked #2808
CORENET-6311: Skip running _stackmanager for libreswan 5.3+ #2787
OCPBUGS-62457: Updating cluster-network-operator-container image to be consistent with ART for 4.21 #2807
OCPBUGS-54806: Add recording rules for UDN telemetry #2697
OCPBUGS-61215: Tweak iptables-alerter to try to avoid crictl bug #2802
OCPBUGS-42303: Add drop flows for GARP #2801
OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes #2797
OCPBUGS-61561: Relax label req. of DPU/DPU Host/Smart NIC #2786
Revert “OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes” #2796
OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes #2605
OCPBUGS-60421: Set maxUnavailable 10% on MultiNetworkPolicy DS #2785
CORENET-6327: Update linter #2783
Full changelog

cluster-node-tuning-operator

NO-JIRA: Make changes for migrating to OTE in Dockerfile #1454
OCPBUGS-69757: E2E: Granular IRQ functional test cases #1449
OCPBUGS-66337: E2E:PPC:Use default worker mcp instead worker-cnf #1442
NO-JIRA:Update code for migrating nto test case from openshift-test-private to OTE #1436
OCPBUGS-66214: Add support for lscpu_check TuneD built-in #1439
OCPBUGS-55399: : Fix metrics for HyperShift #1438
OCPBUGS-64676: components: validate defaultHugePagesSize #1424
PSAP-2021: Vendor in latest dependencies and k8s 1.34.2 #1435
PSAP-1655: Make machineConfigLabels-related misconfiguration more visible #1316
OCPBUGS-63321: Watch MCP changes including spec and labels #1425
NO-JIRA: Revert “E2E: skip stalld test case checking sched_fifo” #1429
OCPBUGS-65489: Add more entries to relatedObjects #1431
CNTRLPLANE-1544: manifests: Use restricted-v3 scc for the operator #1430
OCPNODE-3874: Remove CgroupModeV1 reference from the code #1428
OCPBUGS-62836: E2E: Pass pull secret path to pull cnf-tests #1402
OCPBUGS-63190: e2e:hugepages: changing tests to use hugepages-allocator tool #1400
OCPBUGS-63724: e2e:llc: skip test when no BM worker is found #1419
OCPBUGS-60218: PPC: ghw: filter out namespaces dir #1403
NO-ISSUE: pkg/metrics/server: Log client-CA-bundle handling #1412
NO-JIRA: Address false reports of bootcmdline conflicts #1371
NO-JIRA: Fix support for nvidia-smi #1410
OCPBUGS-62940: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1414
NO-ISSUE: pkg/metrics/server: Log bind address #1411
OCPBUGS-62839: E2E: Add test cases related to schedulable control plane nodes #1405
OCPBUGS-62835: E2E: llc: make sure to remove any trailing newspaces #1407
OCPBUGS-62153: E2E: skip SMT disabled test when L3 cache spans entire NUMA node #1397
OCPBUGS-62605: e2e: refactor GetSMTLevel to remove Gomega assertions #1399
OCPBUGS-62578: Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.21 #1391
OCPBUGS-62091: E2E: Add function to check control plane nodes are schedulable. #1396
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-olm-operator

OPRUN-4271: Add AGENTS.md #154
NO-ISSUE: add jiazha as approver #153
OCPBUGS-62517: Add PodDisruptionBudget permissions to cluster-olm-operator #152
NO-ISSUE: Update dependencies and go to 1.24.6 #150
OCPBUGS-63617: Update both disable and enable lists when enabling/disabling features #148
OCPBUGS-62173: Add TLS config observer to update opcon/catd #145
OPRUN-4157: Update openshift/api to latest master for WebHook GA #146
OPRUN-4207: Update feature-gate processing to support disabled features #144
NO-ISSUE: Remove conditionals for cp-manifests use #142
OPRUN-4079: Use helm to generate manifests #140
NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.21 #138
OCPBUGS-61873: Update RBAC to update/patch/delete what we create #139
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-62500: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.21 #626
NO-JIRA: Bump library go rm co dep #625
Full changelog

cluster-openshift-controller-manager-operator

CNTRLPLANE-1307: Refactor OTE to single-module architecture #403
CNTRLPLANE-1676: Rebase k8s 1.34 #402
CNTRLPLANE-1544: Use user namespace for the operator #397
CNTRLPLANE-1544: Enable user namespaces for the operands #400
OCPBUGS-62494: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.21 #399
CNTRLPLANE-1307: set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test #395
Full changelog

cluster-policy-controller

CNTRLPLANE-1676: Update to Kubernetes v1.34.2 #170
OCPBUGS-62440: Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.21 #169
OCPBUGS-57191: fix(psalabelsyncer): return an error instead of panic when converting an unknown volume #167
NO-JIRA: scc allocation controller: Use server-side apply #165
Full changelog

cluster-samples-operator

Revert “CNTRLPLANE-1544: manifests: Use restricted-v3 scc for the operator” #670
CNTRLPLANE-1544: manifests: Use restricted-v3 scc for the operator #664
OCPBUGS-65840: Periodic sync of supported OCP samples #653
OCPBUGS-65756: Periodic sync of OKD samples #648
OCPBUGS-65717: Update the k8s API version to v0.34.2 #665
OCPBUGS-63481: references to github.com/sclorg/django-ex.git now also refer to the branch #654
OCPBUGS-62409: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.21 #651
OCPBUGS-62061: Re-sync OCP Samples Library for OCP 4.21 - 22Sep2025 #650
Full changelog

cluster-storage-operator

OCPBUGS-74569: add vsphere permissions for checking if users is authorized to see metrics #660
OCPBUGS-70318: volume-data-source-validator must use IfNotPresent image pull policy #652
STOR-2651: Alert users for mismatching parameters in VolumeAttributesClasses #646
STOR-2523: Set OPERATOR_IMAGE_VERSION for ibm-powervs-block-csi-driver-operator #641
No-JIRA: Update owners #647
STOR-2592: Bump all deps for 4.21 #644
SPLAT-2525: Removed VCF9 alert now that it has been tested. #640
NO-JIRA: Remove ibm-cloud-managed-cleanup yaml #586
STOR-2560: Add readOnlyRootFilesystem to hypershift and ibm-cloud-managed #629
NO-JIRA: Update OCP documentation links to latest versions #636
STOR-2523: Add hypershift managed-by labels for csi driver operators #627
OCPBUGS-62669: Move metrics to vsphere driver #625
OCPBUGS-60637: remove static value for runAsUser in securityContext #619
OCPBUGS-62421: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.21 #624
OCPBUGS-62172: Add app label to Manila deployment #628
OCPBUGS-61112: add Azure Disk CSI driver SA name to CredentialsRequest #618
STOR-2297: remove oVirt code from CSO #617
OCPBUGS-60637: HyperShift deployments should reflect user id security context #616
OCPBUGS-62121: add all-egress label to deployments on HCP and IBM #621
OCPBUGS-61175: Add RBAC rule to let manila-csi-driver-operator manage NetworkPolicy #615
SPLAT-2467: Updated VPD alerts to reflect current vSphere support #612
OCPBUGS-61161: Fix logging e2e also faster cleanup #611
Full changelog

cluster-update-keys

TRT-2426: Third run at default feature set cluster image policy #89
TRT-2426: Revert #85 “ \tOCPNODE-3611: promote openshift ClusterImagePolicy to default featureset” #87
OCPNODE-3611: promote openshift ClusterImagePolicy to default featureset #85
OCPBUGS-62464: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.21 #86
Full changelog

cluster-version-operator

OCPBUGS-74009: lib/resourcemerge/core: Reconcile ConfigMap binaryData too #1295
OCPBUGS-73601: vendor: Update openshift/library-go to get new default TLS configuration #1290
OCPBUGS-66215: update o/api vendoring #1269
OCPBUGS-60568: lib/resourcemerge: Add support for automountServiceAccountToken #1264
NO-JIRA: Remove $(BIN_DIR) in Makefile #1265
OCPBUGS-57646: Unify capitalization when comparing architectures for available updates #1255
NO-JIRA: Move constants of ClusterStatusConditionType into one place #1252
NO-JIRA: Add fao89 to OWNERS #1260
OTA-1585: test: Add quotation marks to the sanity test’s component name #1261
NO-JIRA: Clarify test names in OTE #1256
OCPBUGS-64732: lib/resourcemerge: Add support for hostUsers flag #1257
NO-JIRA: Clean up unused Dockerfile and Dockerfile.rhel7 #1254
OCPBUGS-63311: vendor: Update openshift/api to get new ClusterVersion force Godocs #1251
OCPBUGS-14246: Adding runbook URL for ClusterVersionOperatorDown #1250
OTA-1585: test: Include the compressed tests binary in the CVO container image #1236
NO-JIRA: Clean up code to remove ReconciliationIssues #1253
OTA-1585: Add conformance test suites to the CVO tests extension #1238
OCPBUGS-61872: Add ClusterVersionOperator manifests to TechPreviewNoUpgrade clusters #1232
OCPBUGS-62861: temporarily disable metrics auth for hypershift clusters #1243
OTA-1627: pkg/cincinnati: Centralize release metadata parsing #1231
NO-JIRA: Move myself to emeritus #1239
OCPBUGS-62416: Updating cluster-version-operator-container image to be consistent with ART for 4.21 #1237
OTA-1585: test: Rename an existing test to comply with the OTE integration guide #1235
OTA-1531: Rework error handling in FeatureGate processing #1206
NO-JIRA: Extend the development documentation regarding building and publishing a payload image #1227
NO-ISSUE: Update golang version to 1.24 in go.mod #1230
Full changelog

configmap-reloader

OCPBUGS-62503: Updating configmap-reload-container image to be consistent with ART for 4.21 #74
Full changelog

console

OCPBUGS-76389: Use Actions button instead of kebab menu on Subscription details page #16008
OCPBUGS-74998: Fix referenceFor parameter in SubscriptionDetailsPage #15984
OCPBUGS-74887: Add null checks to CRB subject #15974
OCPBUGS-74587: ‘0 of pods’ are shown in Status column on DaemonSets list page. #15953
OCPBUGS-74695: Bump lodash to latest #15962
OCPBUGS-74157: Do not resolve disabled catalog type extensions #15930
OCPBUGS-73870: Update the perspective name in dev-console guided tour #15922
OCPBUGS-73770: update operator details when changing channels #15917
OCPBUGS-73871: i18n upload/download routine task - 4.21 / 281 #15923
OCPBUGS-69931, OCPBUGS-69932: apiVersion is empty on YAML creation page - Runtime error occurs when create MachineConfig with default yaml from… #15871
OCPBUGS-73620: Improve VAC field on PVC details page #15907
OCPBUGS-73727: change OperatorHub strings to Software Catalog #15913
OCPBUGS-72416: make cloudCredentials optional so operators load when … #15900
OCPBUGS-69919: There should be no role ARN field as token-auth-aws/azure/gcp=false in csv annotations #15870
OCPBUGS-73097: Revert the console-shared.json to console-shared directory #15906
OCPBUGS-70266: Fix edit application via Deploy image internal registry doesn’t select correct image stream #15879
OCPBUGS-69388: Prevent application filter in Topology view from resetting to all applications unexpectedly #15848
OCPBUGS-69886: Prevent the display of events from projects other than the currently selected project #15867
OCPBUGS-70132: show DASH to routing labels column when receiver doesn’t have routing labels #15876
OCPBUGS-71200: Remove asterisk from Routing label field in alertManager receiver form #15894
OCPBUGS-69995: fix routing issues on packageserver PackageManifest de… #15873
OCPBUGS-69433: fix bug where Installed badge is not fully visible #15851
OCPBUGS-69376: disable guided tour when cypress is running #15845
Revert “OCPBUGS-66045: enhance cy.login flow to close guided tour properly” #15829
OCPBUGS-55746: Spread operand details across 2 col #15815
OCPBUGS-64652: Duplicate words in Console UI ‘See breakdown’ breakdown #15774
OCPBUGS-66254: VAC on PVC details page is displayed for failed state #15799
CONSOLE-4723: Migrate storage related tables to ConsoleDataView #15747
NO-JIRA: Add argument-hint to test slash command #15807
CONSOLE-4518: Remove Enzyme package in console #15805
OCPBUGS-66105: Lack of kebab list on projects list page for normal user #15801
OCPBUGS-66258: Don’t render block on QuickStartDrawer #15798
OCPBUGS-66166: Add data-checked-state to ConfigModalSwitch #15794
OCPBUGS-60245: Fix EditURL link for private git in Topology #15792
CONSOLE-4915: add auto scenario about custom icon in template to upstream #15771
OCPBUGS-66052: Fix Template placeholder {{name}} not resolved and runtime error shown on Add Users page #15780
CONSOLE-4709: Remove kebabFactory #15806
OCPBUGS-62126: Rename Administrator to Core platform perspective #15786
OCPBUGS-66385: Fix the redirection on switching the project on Helm release form page #15808
OCPBUGS-66345: Fix broken API exports #15802
NO-JIRA: Add Claude Code /test with arguments (frontend, backend, unit, all) #15613
OCPBUGS-65804: Update client initialization in checkPackageManifestHandler #15746
OCPBUGS-63401: Fix Pod selector links not navigating on Search page #15770
OCPBUGS-60141: Prevent the Software Catalog from reseting its scroll position, when closing the details view modal #15667
OCPBUGS-63457: Runtime error on switching to form view after invalid ‘metrics’ field on add/edit HPA yaml view page #15788
OCPBUGS-65890: redirect catalog traffic as needed #15764
OCPBUGS-62261: Remove unwanted semicolon from Serverless Channel and Broker list #15785
CONSOLE-4701: add e2e tests for yaml editor theme and font settings #15783
CONSOLE-4931: Add ability to blame loading components for debugging #15781
OCPBUGS-66045: enhance cy.login flow to close guided tour properly #15776
OCPBUGS-65892: Correct the position of the divider in the events card footer #15756
CONSOLE-4867: Move Helm nav option under Ecosystem nav section #15773
CONSOLE-4709: Remove kebab factory uses from resourceQuota and pod-list pages #15772
OCPBUGS-65690: Visiting Group Detail Page > RoleBindings will show error #15739
CONSOLE-4877: console assist command #15731
OCPBUGS-65883: Add missing sample for a ConsoleLink with mailto #15754
CONSOLE-3769: More openshift/dynamic-plugin-sdk prep work #15738
OCPBUGS-64943: Make GetUserFromRequestContext more nil safe #15711
OCPBUGS-65948: Add SDK-webpack 4.20 changelogs #15767
NO-JIRA: Add SDK 4.20 changelogs #15766
CONSOLE-4709: Remove kebab factory uses from devconsole and Topology plugin #15720
OCPBUGS-65776: Fix unnecessary rerenders with pod-connect #15745
CONSOLE-4840: Remove all plugin entry points + topology static extension cleanup #15699
OCPBUGS-65628: Use useActiveNamespace in search page #15730
CONSOLE-4846: add Trusted Software Supply Chain to Getting Started card #15744
CONSOLE-4701: Add fontsize+theme control to YAML editor #15735
CONSOLE-4838: Improvements to Console DataView code #15713
CONSOLE-4729, CONSOLE-4823: Enable OLMv1 Tech Preview #15715
CONSOLE-4814: Add UI for creating VACs and also applying VACs to PVCs #15643
OU-949: change dev-monitoring links to monitoring with ns param #15578
CONSOLE-4605: Migrate OLM core “packages/operator-lifecycle-manager” unit tests to React Testing Library #15704
CONSOLE-4709: Remove kebab factory uses from default-resouce list and details pages #15732
OCPBUGS-33487: Fix tsconfig so that VSCode can autocomplete imports correctly #15734
CONSOLE-4709: Remove kebab factory uses from OLM plugin #15714
OCPBUGS-65612: API Explorer list and Access review tab pagination #15728
CONSOLE-4709: part 1 - Remove kebab factory uses from Public #15721
OCPBUGS-65598: fix invalid project resource link in ProjectList #15726
OCPBUGS-65696: Preserve query string in perspective switch #15736
CONSOLE-4709: Remove kebab factory uses from console-app plugin #15719
CONSOLE-4840: Remove static extensions used by metal3 #15717
CONSOLE-4709: part 2 - Remove kebab factory uses from Public #15729
CONSOLE-4564: normalize ConsoleDataView columns and rows props #15722
OCPBUGS-62142: Fix cookie size limit error with large OIDC refresh tokens #15631
CONSOLE-4840: Migrate GuidedTour to dynamic #15679
NO-JIRA: add claude /plugin-api-review command #15658
OCPBUGS-64859: add empty state to ConsoleSelect when filter returns n… #15700
CONSOLE-4858: Fix 27 cycles #15723
CONSOLE-4722: Update Builds nav section pages to use DataView #15696
CONSOLE-4606: Refactor bareMetal modals and actions #15709
CONSOLE-4840: Fix 79 cycles #15718
NO-JIRA: Update Helm OWNERS with new team members #15677
CONSOLE-4834: Migrate static extensions to dynamic for Metal3-plugin #15712
CONSOLE-4860: Missed Enzyme to RTL migration tests #15694
OCPBUGS-62789: insights to lightspeed rebranding update #15531
CONSOLE-4832: Migrate Enzyme OLM descriptors & OperatorHub “packages/operator-lifec… #15676
OCPBUGS-64939: Fix logo max-height not respected on Safari #15663
NO-JIRA: Add AI context documentation and configuration #15491
CONSOLE-4858: Fix 53 cycles #15708
OCPBUGS-64851: EndpointList components Warning: Each child in a list should have a … #15701
CONSOLE-4850: update API Explorer to use DataView #15681
CONSOLE-4853: merge dynamic plugin tests #15649
OCPBUGS-63599: Fix broken operator links in OperatorHub install hints #15669
CONSOLE-4858: Fix 61 cycles #15689
CONSOLE-4842: merge HCP related scenarios #15662
CONSOLE-4733: Add catalogd metas endpoint support and refactor client/service boundary #15657
CONSOLE-4772: Update list pages to use DataView in Workloads Tab #15653
CONSOLE-4840: Remove Page/* and GlobalConfig #15674
OCPBUGS-64700, OCPBUGS-64701: Upgrading Helm to 3.18.5 #15682
OCPBUGS-63610: Convert standalone terminal route to extension #15672
CONSOLE-4858: Fix min-length cycles #15688
OCPBUGS-63388: fix breadcrumb link to ImageStream page #15661
CONSOLE-4840: Remove FeatureFlag/Model and ModelDefinition #15671
CONSOLE-4841: Move CSP from plugin to redux store + some sdk adoption prep work #15633
CONSOLE-4857: Merge image pull secret scenario #15678
CONSOLE-4725: follow-on fix to remove counts from Role and Binding filters #15652
CONSOLE-4719: Update Home nav section pages to use DataView #15656
CONSOLE-4721: Update Helm nav section to use ConsoleDataView #15646
OCPBUGS-62108: Lack Chinese/Japanese/Korean translations for ‘On/Off’ switch button on editor setting modal of yaml page. #15664
CNV-64586: show default storageclass for VMs info #15405
CONSOLE-4839: Remove/hardcode PostFormSubmissionAction #15637
OCPBUGS-44235: Fix Helm chart installation with CA/TLS certificates #15607
OCPBUGS-63339: HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … #15626
CONSOLE-4820: Redistribute OLMv0 CSS #15644
CONSOLE-4834: Clean up unused types in metal3 #15666
CONSOLE-4410: Use webpack 5 support for share scope init and access #15525
CONSOLE-4601: Migration of tests from Enzyme to React Testing Library #15510
OCPBUGS-63471: Render a button if there is 1 action #15636
OCPBUGS-63382: Display missing environment var values and correct styling #15625
CONSOLE-4835: Migrate topology to dynamic #15617
CONSOLE-4630: Add children prop to some places #15548
NO-JIRA: reintroduce load bearing import cycles #15651
OCPBUGS-63707: Never allow OTHER_CATEGORY in categories #15660
OCPBUGS-60937: Updated PromQL to include component specific namespace #15438
OCPBUGS-62296: Preserve path on perspective switch #15541
CONSOLE-4837: Migrate console-app to dynamic #15620
OCPBUGS-62939: “View events” and ‘View all events’ point to the same page on ‘Overview’->‘Activity’ card. #15606
CONSOLE-4718: Update Administrator nav section to use ConsoleDataView #15567
CONSOLE-4838: Make DataView component work with arbitrary data objects #15622
CONSOLE-4604: Migrate enzyme packages/console-shared unit tests to React Testing Li… #15581
OCPBUGS-61509: Fix “operator installing” hint in operator details panel #15480
CONSOLE-4836: Migrate console-demo-plugin to dynamic-demo-plugin #15618
OCPBUGS-61870: Automatically redirect all-namespaces catalog to default namespace #15584
OCPBUGS-63433: Turn on fContentSecurityPolicyEnabled by default #15630
OCPBUGS-63384: Fix eslint warnings and prevent future ones #15629
OCPBUGS-62937: Add telemetry events #15602
OCPBUGS-62483: limit node log length to 1000 lines #15597
OCPBUGS-63429: Expose prometheus tenancy label path as a proxy #15621
CONSOLE-4724: Update Compute nav section to use ResourceDataView #15604
OCPBUGS-60636: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15583
CONSOLE-4761: Add sort select field with Relevance, A-Z, Z-A options #15580
CONSOLE-3637: Bump rjsf to 4.x #15551
CONSOLE-4725: Update User Management list pages to use ResourceDataView #15579
OCPBUGS-63059: DRY up RTL configure #15615
CONSOLE-4776: Migrate enzyme packages/container-security unit tests to React Testin… #15611
OCPBUGS-62156: Unique “key” prop warning in the UserPreferencePage #15534
CONSOLE-4821: Remove gitops-plugin #15576
OCPBUGS-62593: Updating openshift-enterprise-console-container image to be consistent with ART for 4.21 #15542
CONSOLE-4615: Update DefaultList to use ResourceDataView #15560
OCPBUGS-61660: Fix Bare Metal Hosts nav item #15609
CONSOLE-4603: Migrate enzyme “packages/console-dynamic-plugin-sdk” unit tests to Re… #15540
OCPBUGS-61767: Duplicate CRs are shown as Operand instances in operator uninstallation modal #15557
CONSOLE-4820: Migrate olmv0 to dynamic #15566
OCPBUGS-33879: use tenancy path for project scoped status card #15585
OCPBUGS-62947: bump dompurify to latest #15586
CONSOLE-4819: Migrate container-security to dynamic #15565
CONSOLE-4602: Migrate enzyme “packages/console-app” unit tests to React Testing Library #15514
OCPBUGS-60603: Add bearer token file configuration to oc-environment script #15521
OCPBUGS-62315: Correct the width of the cluster config toolbar filter input #15546
CONSOLE-4795, CONSOLE-4797, CONSOLE-4801: Migrate some static extensions to dynamic #15552
CONSOLE-4804: Migrate TopologyCreateConnector to dynamic #15549
CONSOLE-4800: Migrate HorizontalNavTab to dynamic #15553
OCPBUGS-59529: Prevent the topology context menu items from truncating #15524
CONSOLE-4798: Migrate StorageClassProvisioner to dynamic #15550
OPRUN-4086: Add ClusterCatalog controller #15466
NO-JIRA: chore(OWNERS): remove Mylanos from OWNERS #15559
CONSOLE-4332: Update the secrets forms to use PF components #15513
OCPBUGS-62313: Returning from any Secret Create page does not return to secret page #15543
CONSOLE-4684: Refactor machine-set modals #15484
OCPBUGS-62281: InsecureSkipVerify to true for results proxy endpoint in off-cluster #14888
CONSOLE-4808: update resource-log.cy.ts #15539
CONSOLE-4799: update tests/app/debug-pod.cy.ts #15530
CONSOLE-4802: Migrate KebabActions to dynamic #15535
CONSOLE-3769: Add @openshift/dynamic-plugin-sdk to core and internal pkg deps #15518
OCPBUGS-61536: Fix incorrect handling of vSphere settings #15481
OCPBUGS-61937: Add Missing Periods to Error Messages and update try again button link #15511
NO-JIRA: Remove yarn-generate from post-install script #15373
CONSOLE-4796: Migrate some Dashboards extensions to dynamic #15526
OCPBUGS-61535: Cancel PVC creation redirect user to last visited page instead of PVC list #15502
CONSOLE-4764: Add tech preview feature flag support #15477
CONSOLE-4715: Migrate the Enzyme test tests root directory and remove tests… #15462
NO-JIRA: Update CHANGELOG based on 4.18 plugin SDK package release #15517
CONSOLE-4760: update CRD list to use ResourceDataView #15469
CONSOLE-3769: Install @openshift/dynamic-plugin-sdk #15509
OCPBUGS-60084: Help dropdown should be closed automatically after tour model opened #15483
OCPBUGS-55401: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15315
OCPBUGS-59634: Fix the events search input width, and incorporate PF Toolbar component #15501
NO-JIRA: Update README.md with instructions for logging out kube:admin in local #15482
NO-JIRA: chore(OWNERS): remove logonoff from reviewers #15505
CONSOLE-4710: use useOverlay to launch ErrorModal #15475
OCPBUGS-61087: Updation of label from edit label doesn’t work #15460
OCPBUGS-61519: Fix improper DescriptionList refactor #15495
OCPBUGS-59972: Add validation and type guards on healthHandler calls to prevent errors #15470
CONSOLE-4756: Convert more files to TypeScript #15472
OCPBUGS-61458: fix MachineSet YAML template #15478
OCPBUGS-58118: fix namespace path generation for non-namespaced resources #15467
OCPBUGS-61183: cluster in workload identity mode is not applied with the token-auth-… #15459
OCPBUGS-61133: Fix catalog search relevance scoring, so that operators with attribute.keywords are displayed and remove unnecessary metadataName from calculation #15444
OCPBUGS-61468: i18n upload/download routine task for OCP version 4.20 #15476
CONSOLE-4727: Update OWNERS files across the repo #15461
CONSOLE-4598: Migrate enzyme tests/components/utils unit tests to React Testing… #15442
OCPBUGS-61393: Change default tab size from 4 to 2 #15474
CONSOLE-4635: Refactor PDBActionFactory to hook form and cleanup. #15285
NO-JIRA: Update plugin SDK CHANGELOG post 4.18 package publish #15463
OCPBUGS-61139: Correct the ordering of Catalog categories to be alphabetized #15454
CONSOLE-4610: Drop use of ceateModalLauncher from Topology package #15446
OCPBUGS-61090: fix typo in update approval strategy label #15452
CONSOLE-4683: Refactor group action factory #15404
And 14 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-74152: Fix PDB blocking node drains during cluster upgrades + update donwloads deployment #1103
OCPBUGS-72550: Add missing console annotation to the quickstart #1089
CM-821, ESO-277, OCPBUGS-69766, SSCSI-235: Add quickstart guides for secrets management operators #1084
OCPBUGS-66402: Update path for browsing catalogs and operators in quickstarts. #1078
OCPBUGS-65638: Update RBAC role cluster with new ClusterCatalog API group “olm.operat… #1068
OCPBUGS-64685: Dont report Progressing status when operands arew being reconciled #1074
OCPBUGS-62126: Update perspective name from Administrator to Core platform in quickstarts #1076
OCPBUGS-65880: Reset StorageVersionMigrationDegraded condition #1071
CNTRLPLANE-947: Make oauthclients relatedObject dynamic depending on auth type #1048
CONSOLE-4882: Vendor API changes to support mailto: links in ConsoleLink href field #1070
CONSOLE-4666: Vendor ConsolePluginCRD v1alpha1 removal #1059
CONSOLE-4847: ADD TSSC Quickstarts #1062
NO-JIRA: Add /ci-prep Claude code command #1063
OCPBUGS-64601: Remove SVM console instance if v1alpha1 ConsolePlugin version in present in the CRDs status #1061
OCPBUGS-61432: Revert “#1052 fix(oidc): fix OIDCClientSecretGet condition” #1058
OCPBUGS-59939: Bumped to latest console-operator version #1055
OCPBUGS-62512: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.21 #1050
OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1052
CONSOLE-4765, CONSOLE-4767: Automate console tech preview flag via cluster FeatureSet, Grant console service account watch permissions for ClusterCatalogs #1043
OCPBUGS-61726: Revert “OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition” #1046
OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1041
OCPBUGS-61483: Update DEFAULT_DOC_URL to point to OpenShift Container Platform 4.21 #1044
OCPBUGS-61383: Update QuickStarts typo and doc link #1042
OCPBUGS-60863: Rename Dockerfile to Dockerfile.ocp #1039
OCPBUGS-60782: pluginOrder field should only contain available plugins #1038
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

CORENET-6533: containernetworking-plugins Upstream sync #217
no-jira: Update OWNERS #204
Full changelog

coredns

NE-2194: Rebase to v1.13.1 report & rebase work #157
NO-JIRA: Updating coredns-container image to be consistent with ART for 4.21 #154
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #153
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

NO-JIRA: Update ShiftStack OWNERS #356
OCPBUGS-64810: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.34 into main #346
OSASINFRA-3954: Rebase main onto release-1.34 #354
OCPBUGS-62582: Updating csi-driver-manila-container image to be consistent with ART for 4.21 #351
OCPBUGS-62544: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.21 #352
OCPBUGS-62575: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.21 #350
NO-JIRA: shiftstack: Update OWNERS #353
Full changelog

csi-driver-nfs

Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #158
NO-JIRA: Revert “<CARRY> Use go 1.23 to align with openshift” #166
NO-JIRA: Update ShiftStack OWNERS #165
NO-JIRA:shiftstack: Update OWNERS #162
OCPBUGS-62509: Updating csi-driver-nfs-container image to be consistent with ART for 4.21 #161
Full changelog

csi-external-attacher

STOR-2586: Rebase to v4.10.0 for OCP 4.21 #89
OCPBUGS-61394: UPSTREAM: 682: Skip VolumeAttachments of other drivers #88
NO-JIRA: Updating csi-attacher-container image to be consistent with ART for 4.21 #87
Full changelog

csi-external-provisioner

STOR-2586: Rebase to v6.0.0 for OCP 4.21 #117
OCPBUGS-62541: Updating csi-provisioner-container image to be consistent with ART for 4.21 #116
Full changelog

csi-external-resizer

STOR-2586: Rebase to v2.0.0 for OCP 4.21 #179
OCPBUGS-62504: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.21 #178
OCPBUGS-61547: Requeue PVC over PV creation #173
Full changelog

csi-external-snapshot-metadata

STOR-2586: Rebase to v0.2.0 for OCP 4.21 #7
NO-JIRA: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.21 #5
Full changelog

csi-external-snapshotter, csi-snapshot-controller

STOR-2534, STOR-2586: Rebase to v8.4.0 for OCP 4.21 #189
OCPBUGS-62423: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.21 #188
NO-JIRA: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.21 #187
Full changelog

csi-livenessprobe

STOR-2586: Rebase to v2.17.0 for OCP 4.21 #76
OCPBUGS-62403: Updating csi-livenessprobe-container image to be consistent with ART for 4.21 #77
Full changelog

csi-node-driver-registrar

STOR-2586: Rebase to v2.15.0 for OCP 4.21 #84
OCPBUGS-60108: update log level verbosity to not clutter logs #86
OCPBUGS-62506: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.21 #85
Full changelog

docker-builder

OCPBUGS-70149: bump buildah to 1.39.7 to fix CVE-2025-52881 #495
OCPBUGS-62210: BuildConfig inline Dockerfile fails with heredoc syntax #469
OCPBUGS-62340: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.21 #481
Full changelog

docker-registry

CNTRLPLANE-1684: set up openshift-tests-extension for image-registry: refactor: simplified single-module OTE infrastructure #455
AGENT-1311: Add support for distribution/distribution registry binary #450
OCPBUGS-62576: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.21 #448
OCPBUGS-60845: update OWNERS #447
Full changelog

driver-toolkit

Updating the OWNERS file. (#175) #175
Updating driver-toolkit-container image to be consistent with ART for 4.21 (#172) #172
Full changelog

etcd, installer-etcd-artifacts

CNTRLPLANE-1414: Openshift 4.21 etcd 3.6 #343
Bump go to 1.24.7 #20664
[fix #20271] protect backend usage from concurrent applySnapshot and defrag #20650
Re-check that the lease still exists during the renew process #20615
Bump go to 1.24.6 #20527
back port tests: skip TestCorruptedBackupFileCheck test on big endian platforms #20534
Bump bbolt to v1.4.3 #20513
Remove checking confState during schema migration #20496
Bump go to 1.23.12 #20461
Remove the –experimental-snapshot-catch-up-entries from help #20422
Check promotion against v2store when updating v2store #20387
Fix v2store check returning wrong result even there isn’t any auth data #20370
Updated help for –quota-backend-bytes #20352
Prevent flakes with TestWatchRestore #20330
Bump go to 1.23.11 #20314
Avoid lowering revision of watchers in the future after restore #20286
Add verification to verify the watch response have a bigger revision than startRev #20277
Bump bbolt to v1.4.2 #20267
Disable progress notify validation until we can guarantee response #20246
Skip sending progress notification for watch with starting revision in the future #20241
Bump bbolt to v1.4.1 #20154
Bump Go to 1.23.9 #20128
Update ‘endpoint health’ command to avoid calling flags.SetPflagsFromEnv multiple times #20121
Add validation to ensure that there is NO empty discovery endpoint #20113
Fix the issue that --force-new-cluster can’t remove all other members in a corner case #20071
mvcc: avoid double decrement of watcher gauge on close/cancel race (3.6 backport) #20067
Add protection on PromoteMember and UpdateRaftAttributes #20051
Semi-Automated cherry pick of #20017 upstream release 3.6 ( was Update go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to work with v0.61.0 ) #20043
[Integration Test]: Add test for panic-free removal of non-existent members #19948
Update release script to exactly match the target tag #19951
release: Fix the tar unzip command, avoid permissions issues #19890
Bump Go to 1.23.9 #19867
fix: test-release checks #19853
remove DistributedTracing from feature gate list. #19851
chore(client/v3/naming): deprecate Metadata field in Endpoint struct #19842
make: upload partial coverage reports #19844
Add test-release-tests Makefile target #19845
pkg/featuregate: Return MutableFeatureGate interface in New function #19816
Replace resolver.State.Addresses with resolver.State.Endpoint.Addresses #19782
emit compaction pause duration metric in every compaction batch #19770
add verification to check whether membership data is in sync between … #19730
Bump Go to 1.23.8 #19724
Switch to validating v3 when v2 and v3 are synchronized #19703
remove CHANGELOG directory #19690
dependency: bump golang.org/x/net from v0.37.0 to v0.38.0 #19687
bump golang.org/x/net to v0.37.0 to address CVE-2025-22870 #19683
Move client/internal/v2 into server/internal/clientv2 #19673
e2e: add upgrade test for clusters set up by promoted members #19662
dependency: bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 #19647
github/workflows: remove coverage workflow #19648
Auto sync members in v3store is IsLearner differs between v2 and v3 store #19636
Returns the string representation of the ClusterVersion #19641
minor refactor DowngradeUpgradeMembersByID to not block on waiting fo… #19638
fix: grpcproxy can get stuck in and endless loop causing high cpu usage #19561
server: remove ExperimentalMaxLearners #19560
github/workflows: delete grpcproxy workflow #19551
github/workflows: remove fuzzing workflow. #19550
github/workflows: remove contrib workflow #19549
github workflows: remove release tests #19547
deflakey: TestCompactionHash in integration #19541
Add verify release assets GitHub workflow #19539
dependency: bump golang.org/x/net from v0.34.0 to v0.36.0 #19531
Bump go toolchain to 1.23.7 #19527
Fix the issue of etcdserver crashing on receiving REST watch stream requests #19522
tests: deflakey TestLeaseGrantKeepAliveOnce #19507
etcdserver: Fixing minor typos in v3election.proto and rpc.proto #19501
Add prometheus metric for server feature gate #19495
Fix flaky TestLeaseKeepAliveOneSecond #19483
Fix TestLeaseGrantTimeToLiveExpired flaky due to leader change #19481
depedency: bump golang.org/x/crypto from v0.32.0 to v0.35.0 #19480
Use RLock in Demoted method for read-only access to expiry #19443
etcdserver: Update description for count field in the RangeResponse message #19468
Backport DowngradeInfo proto change #19471
Move interface AlarmBackend from server/etcdserver/api/v3alarm to server/storage/schema to fix the unexported-return lint error #19455
codecov: improve coverage upload #19447
Fix release script prerelease GitHub template release #19420
Migrate –experimental-set-member-localaddr to using feature flag #19414
Fix a performance regression due to uncertain compaction sleep interval #19411
Fix more v3.6 deprecation comments #19409
server: Remove deprecated NewZapCoreLoggerBuilder #19404
Fix v3.6 deprecation notices #19402
Correct the expected version in downgrade test case #19400
Minor refacotr on the e2e test framework #19392
Fix a log formatting bug in the e2e downgrade tests #19390
migrate experimental-snapshot-catchup-entries flag to snapshot-catchup-entries #19389
Migrate experimental distributed tracing flags to non-experimental flags #19387
Migrate WALVersion to fix unexported-return of walVersion #19382
migrate experimental-peer-skip-client-san-verification flag to peer-skip-client-san-verification #19362
Update 3.6 changelog to cover the etcdutl status command change #19361
Add more debug info into waitTillSnapshot #19359
etcdutl: use map to count unique user keys in snapshot status #19344
migrate experimental-enable-lease-checkpoint and experimental-enable-lease-checkpoint-persist flag to feature gate. #19356
server: fix unexported-return lint issue #19052
migrate experimental-compaction-sleep-interval flag to compaction-sleep interval #19351
test: update robustness doc and new case to reproduce 19179 #19353
migrate experimental-downgrade-checktime to downgrade-checktime #19328
increase timeout for MemberDowngradeUpgrade test #19348
changelog: update GO entry to reflect 1.22.12 update #19338
Bump bbolt to v1.4.0 and raft to v3.6.0 #19349
Bump dependency updates identified by dependabot #19346
Update golang toolchain to 1.23.6 #19335
chore: use testify instead of testing in tests/integration #19332
Align NewConfig with AddFlags defaults #19254
Add downgrade cancellation e2e tests #19252
CHANGELOG(3.5): Add entry for #19280 #19331
Add learner id into log when being promoted #19329
fileutil: removes redundant continue statement in RemoveMatchFile #19326
build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 #19323
fix test.sh to download correct binary for mac os #19325
migrate experimental-memory-mlock flag to memory-mlock #19282
fix: use testify instead of t.Fatal or t.Error in pkg package #19315
fix: use testify instead of t.Fatal or t.Error in server package (part 1) #18971
fix: use require instead of t.Fatal(err) in tests/integration package #18820
fix: use testify instead of t.Fatal in tests/common package (part 2) #18860
Remove some HealthInterval to reduce the time to run DowngradeUpgradeMembers #19317
*: introduce (*Op) Limit() interface for robustness #19319
deflaky: TestSnapshotStatus #19313
Correct compaction period comments #19192
scripts/test_images.sh: refactor to import job into the prow infrastructure #19305
Update 3.6 changelog to cover the go-grpc-middleware/providers/promet… #19311
Switch from grpc-ecosystem/go-grpc-prometheus to grpc-ecosystem/go-grpc-middleware/providers/prometheus #19195
Mark etcd-local-tester as deprecated so we can remove it in future #19297
Fix goword errors #19310
fix(alerts): set severity of ‘ectdMembersDown’ from ‘critical’ to ‘wa… #19300
Close the http response body #19308
Add e2e metrics test case to ensure no any metrics missing in future PRs #19302
changelog: add entries regarding 3.5.18 dependency updates #19294
migrate to use max-learners flag #19298
changelog: add mixed rw performance evaluation backport #19291
Bump dependency updates identified by dependabot #19293
Format all prometheus metrics to ensure nice indent #19301
Add downgrade cancellation e2e tests #19244
Fix documentation of List method of Kubernetes interface #19281
build(deps): bump actions/setup-go from 5.2.0 to 5.3.0 #19289
build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 #19290
[Solution 2] Add DowngradeVersionTestRequest for Downgrade or migration test only #19276
tests/robustness: continue should ignore last key #19269
Add Version field to the robustness model #19255
Fix addMemberAsLearnerAndPromote to avoid error ‘etcdserver: can only… #19279
tests: Add retry if promote member fails. #19272
migrate to use bootstrap-defrag-threshold-megabytes flag #19267
docs(CHANGELOG): add release date of etcd v3.5.18 #19266
migrate to use warning-apply-duration flag #19264
Remove the code of checking ClusterVersionSet in MinimalEtcdVersion #19263
Remove explicit random seed in robustness tests #19265
build(deps): bump github.com/golang-jwt/jwt from v4 to v5 #19232
Refactoring the error handlers concurrent control implementation #19257
Test for etcd metrics #19242
CHANGELOG: update backport info for #19179 #19260
Update 3.5 changelog to cover the race condition fix #19259
Add tests for hardcoded flags in TestEtcdServerProcessConfig #19245
Fix race condition (also a regression of the PR 19139) #19221
etcdserver: add learner check to readyz #19086
Add tests for NewConfig matching AddFlags defaults #19247
Bump dependency updates identified by dependabot #19246
tests: address bridge unexported return issue #19105
Add compaction to kubernetes robustness tests #19233
build(deps): bump github/codeql-action from 3.28.0 to 3.28.1 #19239
build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.0 #19240
Fix passing compaction-batch-limit to etcd v3.4 and v3.5 #19218
mvcc: restore tombstone index if it’s first revision #19188
wait for the member to get started #19230
chore: enable early-return and superfluous-else from revive #19152
flags: optimise memory allocation #19201
server/proxy/tcpproxy: reuse addr in TCPProxy.Run #19198
Update golang toolchain to 1.23.5 #19214
robustness: do not panic when parsing unknown versions. #19226
changelog: update Go entry to reflect 1.22.11 update #19224
Bump dependency updates identified by dependabot #19209
Prevent leaking file descriptor during snapshotting and provide better logging of errors #19093
migrate flag experimental-compaction-batch-limit to use compaction-batch-limit #19196
Minor refactor on the etcdutl migrate command #19207
Add Robustness test to reproduce issue 18089 #19169
Minor refactor on RaftCluster.Recover() #19200
chore: enable use-any rule from revive #19120
Rename migrate_command_test.go to common_test.go #19199
add MemberDowngradeUpgrade failpoint #19125
tests/robustness/traffic: should use rev=0 for create #19194
build(deps): bump distroless/static-debian12 from 5c7e2b4 to 3f2b64e #19187
client/pkg/logutil: simplify MergeOutputPaths function #19170
migrate flag experimental-corrupt-check-time to use corrupt-check-time #19156
Update 3.⁴⁄₃.5 CHANGELOG with fix for deadlock in etcd.Close #19171
client/pkg/logutil: add test for MergeOutputPaths #19181
fix for #19066 Print warnings when deprecated options are configured in config file #19148
Enhance test case TestEtctlutlMigrate to support multiple member cluster #19174
Bump dependency updates identified by dependabot #19165
tests: use high burst value in limiter. #19176
tests: fix wrong number in comment. #19175
Move getLatestWALSnap into etcdutl/common.go #19173
rafthttp: Improve warn message in checkClusterCompatibilityFromHeader #19112
robustness: only run MemberDowngrade test for high SnapshotCatchUpEntries #19160
Fix release_notes.tpl.txt by adding a space between Docker image name and version #19153
CHANGELOG: update CHANGELOG-3.5.md #19151
Update etcdutl migrate command: load wal records from the latest snapshot #19128
all: simplify and clean up #19126
Avoid deadlock in etcd.Close when stopping during bootstrapping #19139
Use new interface in robustness tests #19137
Revert “Update the allowedErrors” to reduce e2e test flakiness #19146
Still return continuous WAL entries when running into ErrSliceOutOfRange #19095
Fix mixVersion test case: ensure a snapshot to be sent out #19140
Fix the inconsistent between listen peerURL and advertise peerURL #19136
Manual Dependency Bump #19121
Add MemberDowngrade failpoint #19038
Manual Dependency Bump #19108
docs(contributing): fix links and build tool list #19111
build(deps): bump actions/upload-artifact from 4.4.3 to 4.5.0 #19102
build(deps): bump github/codeql-action from 3.27.9 to 3.28.0 #19103
migrate --experimental-txn-mode-write-with-shared-buffer flag to feature gate. #19078
fix: use testify instead of t.Fatal or t.Error in client package (part 1) #18967
Manual Dependency Bump #19080
Add more info in the error message in downgrade detection #19081
backend: Remove logger nil checks #19077
scripts: remove receiver name check #19085
[tools/etcd-dump-logs] Fix the usage of –start-index in etcd-dump-logs #19082
fix: use testify instead of t.Fatal or t.Error in pkg package (part 1) #18970
scripts: remove duplicate bom fix in fix make target #19079
migrate experimental-compact-hash-check-enabled to feature gate. #19053
build(deps): bump github/codeql-action from 3.27.6 to 3.27.9 #19076
build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 #19075
Update the allowedErrors in TestNoErrorLogsDuringNormalOperations #19069
Add more debug info when running into ErrSliceOutOfRange when reading WAL #19067
Wait for cluster version to non-default value to remove errors when cluster is bootstrapping. #19068
fix: use testify instead of t.Fatal or t.Error in etcdctl packages #18969
fix(e2e): ignore error log about failed storage update #19060
Manual Dependency Bump #19065
scripts: fix shellws pass #19045
Remove duplicated <-s.ReadyNotify() #19057
Manual Dependency Bump #19048
Do not wait for ready notify if the server is stopping #19041
Set a 80% threshold for the codecov status.patch #19046
Add a TODO comment for UnsafeDetectSchemaVersion on how to simplify t… #19047
scripts: simplify mod tidy pass #19042
Documentation: consistent way to manage go version #19034
Mark –max-snapshots as deprecated in 3.6 and will be decommissioned … #19036
fix: use testify instead of t.Fatal or t.Error in contrib package #18968
Update TestMemberAdd’s context timeout by adding 5 more seconds #19032
build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 #19019
Deprecate --v2-deprecation and schedule to remove it in 3.8 #19006
docs: Add note on releasing a pre-release #19016
release: Allow “v” prefix when specifying release version #19011
chore: group tools/mod updates and update only direct dependencies #18992
fix: golangci-lint yamllint #19013
fix: enable gosimple linter #18973
Update 3.5 changelog to cover the warning message for the deprecated v2 flags if set #19008
Bump go toolchain to 1.23.4 #19003
GRPC Proxy TLS version Changelog updates #18897
Manual Dependency Bump #19002
fix: use testify instead of t.Fatal or t.Error in api package #18966
Mark –snapshot-count as deprecated in v3.6 and will be decommissioned in 3.7 #18998
build(deps): bump distroless/static-debian12 from f4a57e8 to 5c7e2b4 #18982
Reuse grpcOverheadBytes calculation by creating a function for that #18991
Reuse events used for syncing watchers #17563
Handle non-linearized MemberList in v3.4 for robustness tests #18977
Watch sync refactor #18976
fix: use require instead of t.Fatal(err) in tests/e2e package #18821
Fix gofump error due to merge race #18979
Add a threshold for codecov failure #18964
fix: enable gofumpt instead of gofmt linter globally #18956
Manual Dependency Bump #18961
Run a separate in memory snapshot to reduce number of entries stored in raft memory storage #18825
Fix benchmark indexing #18962
fix: enable gofumpt instead of gofmt linter in server #18954
fix: enable gofumpt instead of gofmt linter in tests #18953
Translate v2 requests into v3 ClusterMemberAttrSetRequest and ClusterVersionSetRequest #17008
CHANGELOG: Fix runtime panic that occurs when KeepAlive is called with a Context implemented by an uncomparable type #18893 #18951
fix runtime error: comparing uncomparable type #18893
build(deps): bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 #18941
build(deps): bump github/codeql-action from 3.27.4 to 3.27.5 #18942
Reduce QPS requirement to 100 #18928
Robustness duplicated puts 3 #18905
dependency: bump go.etcd.io/raft/v3 v3.6.0-beta.0 #18939
storage/backend: fatal if there is panic during defrag #17757
Manual Dependency Bump #18932
Add jitter to failpoint injection to cover periodily executed compaction #18930
Multiply return time by 100 in tests to detect off by one differences #18908
build(deps): bump github/codeql-action from 3.27.1 to 3.27.4 #18923
build(deps): bump distroless/static-debian12 from cc226ca to f4a57e8 #18918
Robustness duplicated puts 2 #18904
changelog: add GO-2024-3250 remediation entry #18901
Robustness refactor patch operations #18903
Fix displaying etcd logo in README on a dark theme #18891
Add robustness track record section to make tracking easier #18900
Manual Dependency Bump #18889
Add ivanvc as approver for .github, scripts and tools/rw-heatmaps #18894
add tls min/max version to grpc proxy #18816
docs(release): update GitHub release related instructions #18887
tests: add robustness test for issue 17780 #18099
CHANGELOG: Add release date of etcd v3.4.35 #18884
CHANGELOG: Add release date of etcd v3.5.17 #18883
build(deps): bump github/codeql-action from 3.27.0 to 3.27.1 #18874
Remove actuated badge from README.md #18875
Fix a format error in dependency_management.md #18862
fix: enable gofumpt instead of gofmt linter in tools #18858
fix: enable gofumpt instead of gofmt linter in contrib, etcdctl and etcdutl #18754
docs(CHANGELOG): update 3.⁴⁄₃.5 changelog with defrag close fix #18856
build: fix govet shadow err #18857
changelog: update go version for 3.4.35 and 3.5.17 #18852
fix(defrag): close temp file in case of error #18851
fix: enable usestdlibvars linter #18826
docs(CHANGELOG): update 3.⁴⁄₃.5 changelogs with defrag fixes #18844
Bump go toolchain to 1.23.3 #18848
Manual Dependency Bump #18840
fix(defrag): handle no space left error #18822
release: properly change working dir if tmp location already exists #18812
fix: enable go-require rule from testifylint #18827
fix: use require instead of t.Fatal(err) in tests/common package #18823
fix: enable errorlint linter #18818
fix: enable require-error rule from testifylint #18814
Update 3.4 changelog to cover the goroutine leakage issue #18824
chore(e2e): extend TestNoErrorLogsDuringNormalOperations with different TLS configs #18819
Bump dependency updates identified by dependabot #18817
fix: enable errorlint in etcdctl and etcdutl directories #18813
fix: enable require-error rule from testifylint in client, pkg and server packages #18800
fix: use require instead of t.Fatal(err) in tests/robustness package #18782
fix: enable errorlint in server directory #18780
Refactor Etcdserver.snapshot to extract compaction into a separate method #18808
chore(e2e): extend logging test to 3 node cluster #18806
Update 3.5 changelog to cover two major fixes #18804
build(deps): bump actions/checkout from 4.2.1 to 4.2.2 #18795
build(deps): bump github/codeql-action from 3.26.13 to 3.27.0 #18794
build(deps): bump actions/setup-go from 5.0.2 to 5.1.0 #18793
build(deps): bump distroless/static-debian12 from 69830f2 to cc226ca #18798
Bump dependency updates identified by dependabot #18755 #18786
fix: enable gofumpt instead of gofmt linter in client #18748
release: use GitHub’s gh to create GitHub release #18649
Fix e2e/ctl_v3_auth_test.go:123:5: declaration of err shadows declara… #18781
Ensure compaction is executed at even intervals to avoid overload #18771
fix: use require.NoError instead of t.Fatal(err) in tests package (part 1) #18753
etcdserver: terminate recvLoop on serverWatchStream.close() #18739
Fix risk of a partial write txn being applied #18749
fix: enable float-compare rule from testifylint #18776
fix: enable tenv linter #18774
tests: remaining errors.Is conversions #18634
Remove brackets from failpoint name #18770
Improve documentation of robustness test adding key concepts used in the test #18708
fix: enable thelper linter in client directory #18746
Add comment to clarify non-f-functions on golang standard lib #18766
build(deps): bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 #18760
fix: enable formatter rule from testifylint #18741
fix: enable errorlint in api, client and pkg #18722
Bump dependency updates identified by dependabot #18755
fix: use require.NoError instead of t.Fatal(err) in contrib and tools packages #18752
Update changelog-3.6 to cover the new flags for etcdctl #18747
embed: fix typo client-listen-x to listen-client-x #18750
fix: enable expected-actual rule from testifylint #18720
feat(etcdctl): add –max-send-bytes and –max-recv-bytes options #18718
fix: enable error-nil rule from testifylint #18716
fix: enable error-is-as rule from testifylint #18740
Update endpointsFromCluster to reuse clientConfigFromCmd #18742
CHANGELOG: add go 1.22.8 entry for 3.4 and 3.5 #18743
Update epHealthCommandFunc to reuse clientConfigFromCmd #18723
build(deps): bump actions/upload-artifact from 4.4.1 to 4.4.3 #18733
build(deps): bump github/codeql-action from 3.26.12 to 3.26.13 #18731
build(deps): bump aquasecurity/trivy-action from 0.24.0 to 0.27.0 #18734
Robustness dir cleanup #18684
deprecate testutil/assert.go #18717
fix: enable errorlint in module go.etcd.io/etcd/client/v2 #18721
fix: enable compares and negative-positive rules from testifylint #18715
fix: enable nil-compare rule from testifylint #18689
fix: enable gofmt and whitespace linters #18713
github/workflows: remove ARM integration jobs #18714
fix: enable empty and len rules from testifylint #18712
fix: use require.NoError instead of t.Fatal(err) in client package #18705
Update release steps on how to share quay.io password #18710
Bump dependency updates identified by dependabot #18706
build(deps): bump actions/upload-artifact from 4.4.0 to 4.4.1 #18697
build(deps): bump actions/checkout from 4.2.0 to 4.2.1 #18695
build(deps): bump github/codeql-action from 3.26.10 to 3.26.12 #18696
fix: enable bool-compare rule from testifylint #18686
github/workflows: use ECR mirror for Trivy’s DB #18672
Remove context from appliers #18677
Remove context from dispatch #18676
Remove context from top level apply #18675
build(deps): bump distroless/static-debian12 from b033683 to 69830f2 #18660
Bump dependency updates identified by dependabot #18673
etcdserver: fix panic when checking IsLearner of removed member #18606
api: address revive unexported-return issues #18645
server: remaining errors.Is conversions #18617
fix(v3compactor): flaky TestPeriodicSkipRevNotChange test by increasing timeout #18668
fix(tests/common): increase token ttl to fix flaky TestAuthLeaseTimeToLive test #18663
docs(contributing): document how to install stress tool #18651
fix(tests/e2e): ensure spawned cmds are closed #18664
Bump go version to 1.23.2 #18666
build(deps): bump actions/checkout from 4.1.7 to 4.2.0 #18658
build(deps): bump github/codeql-action from 3.26.8 to 3.26.10 #18659
Bump go toolchain to 1.23.1 #18644
Bump dependency updates identified by dependabot #18636
client: remaining errors.Is conversions #18614
Add function to create WAL files #18605
update: cobra.ExactValidArgs method is deprecated #18612
github: remove build job #18633
docs: fix description of WatchResponse.canceled #18580
command: Use errors.Is for error equality check in ep_command.go #18625
build(deps): bump github/codeql-action from 3.26.7 to 3.26.8 #18624
build(deps): bump distroless/static-debian12 from 95eb83a to b033683 #18623
Bump dependency updates identified by dependabot #18610
etcdctl: remaining errors.Is conversions #18615
contrib: remaining errors.Is conversions #18616
ioutil: remaining errors.Is conversions #18619
Fixed periodic compaction tests #18608
docs: update release.md with improvements from v3.4.34 release #18600
Use errors.Is for error equality checks #18510
Add tools/mod to module_dirs #18590
Rename modules_exp to modules_for_bom to improve code and clarity #18603
Ensure consistent file permissions on broken WAL files #18574
build(deps): bump github/codeql-action from 3.26.6 to 3.26.7 #18598
Ensure commits are signed in scripts/release.sh #18592
Bump dependency updates identified by dependabot #18575
CHANGELOG: set release 3.4.34 date #18577
Bump go toolchain to 1.22.7 #18444
Improve release documentation #18572
CHANGELOG: Update release date for v3.5.16 #18573
build(deps): bump distroless/static-debian12 from ce46866 to 95eb83a #18568
CHANGELOG: add note for the CompactionSleepInterval flag(PR 18514) #18556
Fix races in TestLessorRenewExtendPileup #18555
Support scan-keys command to scan the key space starting a specific revision #18539
benchmark: support InsecureSkipVerify #18545
CHANGELOG: add note regarding updating to go 1.22.7 #18553
Bump dependency updates identified by dependabot #18536
build(deps): bump actions/upload-artifact from 4.3.6 to 4.4.0 #18531
build(deps): bump github/codeql-action from 3.26.5 to 3.26.6 #18532
Bump dependency updates identified by dependabot #18515
Fix passing default grpc call options in Kubernetes client #18360
CHANGELOG: Add entries for bbolt dependency bump #18512
build(deps): bump github/codeql-action from 3.26.3 to 3.26.5 #18506
Bump dependency updates identified by dependabot #18490
KEP-4578: migrate experimental-initial-corrupt-check flag to feature gate. #18478
CHANGELOG: update changes for issue 18089 #18482
Revert “Disable robustness test detection of #18089 to allow detecting other issues #18453
build(deps): bump github/codeql-action from 3.26.0 to 3.26.3 #18468
github/workflows: remove e2e jobs #18454
CHANGELOG: Add entry for etcdutl hashkv command. #18460
test: extend leaseRevoke and leaseRenew test to support 5 members cluster #18450
deleted infra-guide #18449
*: keep tombstone if revision == compactAtRev #18274
Reduce number of concurrent clients to 8 and compactions to avoid flakes #18442
Update changelog for the performance regression caused by ensureLeadership in leaseRenew #18441
Skip leadership check if the etcd instance is active processing heartbeats #18428
build(deps): bump actions/upload-artifact from 4.3.5 to 4.3.6 #18434
build(deps): bump github/codeql-action from 3.25.15 to 3.26.0 #18435
Add genproto error troubleshoot step for manual bumps #18431
Keep release process documentation up to date #18399
Bump dependency updates identified by dependabot #18427
Update release-3.4 and release-3.5 CHANGELOG with go version bump #18423
go version bump from 1.22.5 to 1.22.6 #18420
Bump dependency updates identified by dependabot #18418
Remove arm64 robustness github actions workflows #18417
migrate experimental-stop-grpc-service-on-defrag flag to feature gate. #18359
build(deps): bump actions/upload-artifact from 4.3.4 to 4.3.5 #18408
Add examples to etcdctl snapshot command’s help #18183
Ensure proper gofail package version in robustness tests #18397
Remove flake caused failpoint in watch disrupting progress notifies #18392
Update release.md to reflect notes taken during 3.5.15 release #18383
tests/e2e: check compactOnRev > tombstoneRevs[0] #18387
Reduce client concurrency for high traffic robustness tests #18252
Manual Dependency Bump #18384
tests/e2e: add test cases related to HashKV #18369
Fix wait time docs, tests to indicate trigger deadline geq to wait deadline. #18373
build(deps): bump github/codeql-action from 3.25.13 to 3.25.15 #18379
build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 #18380
tests: remove Dockerfile #18371
github/workflows: set read-only default permissions to approve workflow #18368
Add config file field for feature-gates flag. #18365
github/workflows: pin robutness tests dependencies #18367
dependency: Bumps golang.org/x/image from 0.11.0 to 0.18.0 #18366
Manual Dependency Bump #18361
etcdserver: change the snapshot + compact into sync operation #18283
Introduce Kubernetes interface to etcd client #16333
Add “server-feature-gates” flag. #18279
CHANGELOG: Update release date for v3.5.15 #18355
build(deps): bump github/codeql-action from 3.25.12 to 3.25.13 #18354
mvcc/*_test.go: should not use duplicate revision.Main for one key #18321
Manual Dependency Bump #18342
marker(markdown linter): use released binary when running markdown lint #18318
build(deps): bump github/codeql-action from 3.25.11 to 3.25.12 #18333
build(deps): bump actions/setup-go from 5.0.1 to 5.0.2 #18332
build(deps): bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 #18331
fileutil: improve control flow readability of purgeFile function #17564
CHANGELOG/CHANGELOG-3.4.md: update changelog for gRPC metadata printing #18316
CHANGELOG/CHANGELOG-3.5.md: update changelog for gRPC metadata printing #18317
CHANGELOG Differentiate the warning message for rejected client and peer connections for release-3.5 #18320
Differentiate the warning message for rejected client and peer connections #18313
github: remove amd64 test actions #18314
Manual Dependency Bump #18310
client/v3/watch.go: use fmt go pkg for metadata map printing #18308
build(deps): bump distroless/static-debian12 from 4197211 to ce46866 #18304
build(deps): bump actions/download-artifact from 4.1.7 to 4.1.8 #18302
build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 #18301
client/pkg/testutil: update interestingGoroutines #18287
robustness: remove head rev match in validateGotAtLeastOneProgressNotify #18277
CHANGELOG: Update to reflect go version 1.21.12 bump #18282
Update CHANGELOG-3.5 with backported commit #18278
changed the scorecard badge link to the standard format #18281
Remove gsutil acl command for bucket permissions from release.sh #18250
make: Include tools/mod when checking dependency versions #18280
Follow up manual Dependency Bump #18273
Manual Dependency Bump #18266
Bump Go version to 1.22.5: GO-2024-2963 fix. #18270
etcdctl: add support for filtering by {min,max} x {create,mod} x {revision} #18233
Suppress noisy basic auth token deletion log #18245
build(deps): bump github/codeql-action from 3.25.10 to 3.25.11 #18256
github: remove govulncheck action #18249
changelog/3.4: set 3.4.33 release date #18246
etcd-client: Clean up unnecessary nil Logger check #18243
tests/e2e: add e2e test to reproduce issue 18089 #18201
Add failpoint name to test name allowing us to track a per failpoint failures in testgrid #18241
CHANGELOG: support multiple values for allowed client and peer … #18219
Bump dependency updates identified by dependabot #18228
Separate persisted responses without knowing their revision to prevent duplicating state during linearization #18214
Update release-3.6 changelog #18210
build(deps): bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 #18226
Add tests for patching history to check output and return values #18227
Bump shellcheck to latest v0.10.0 release #18217
Add verification on client.Sync to ensure the returned endpoints never empty #18220
Disable robustness test detection of #18089 to allow detecting other issues #18213
add changelog for bugfix 18164 prometheus metric register of walWriteSec #18218
mvcc: fix typo #18212
embed: add GRPCAdditionalServerOptions config #14066
Bump dependency update #18206
make: fix verify-dep target #18205
featuregate: adds EtcdServer.FeatureEnabled interface. #18062
Use $(MAKE) instead of make #18204
Update the error message when client certificate isn’t provided for secure metrics url #18203
fix(server): enforce listen-metrics-urls client TLS info when its scheme is https/unixs #18186
tests/robustness: fix access of ChoiceWeight #18202
Avoid sending Compact request when LazyFS is enabled #18181
robustness: change mixedVersionOption to use ChoiceWeight. #18060
Reproduce #17529 in robustness tests #17680
Add run-govulncheck Makefile target #18182
Bump dependency updates identified by dependabot #18199
build(deps): bump github/codeql-action from 3.25.8 to 3.25.10 #18198
build(deps): bump actions/checkout from 4.1.6 to 4.1.7 #18197
Improve snapshot status #15979
robustness: Separate compaction and LazyFS test scenario for cluster size 1 #18179
Remove robustness presubmits for amd64 arch #18177
Update release-3.5 changelog #18178
bugfix: register of walWriteSec #18164
Fix govulncheck CI check on main branch #18171
tests/robustness: update documentation to reflect Prow migration #18167
Fix typo in mvcc comment #18166
Update codecov config to support commenting in PR #18143
Bump dependency updates identified by dependabot #18161
build(deps): bump github/codeql-action from 3.25.7 to 3.25.8 #18152
build(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 #18151
CHANGELOG: support multiple values for allowed client and peer TLS identities #18140
Improve e2e error reporting #18107
Implement compaction support in robustness test #17833
Ignore connection reset error when triggering a failpoint #18133
tests/robustness: unlock Delete/LeaseRevoke ops #18135
fix ts with no trailing zeros #18108
Support multiple values for allowed client and peer TLS identities #18015
Bump Go version to 1.22.4: CVE 2024-24790 fix #18128
test: update CouldSetSnapshotCatchupEntries to use 3.5.14. #18126
build(deps): bump github/codeql-action from 3.25.6 to 3.25.7 #18116
Bump dependency updates identified by dependabot #18120
cli: Add etcdutl snapshot hashkv command #15965
Use Go 1.20 error joining instead of multierr #18098
Bump dependency updates identified by dependabot #18102
scripts/release: shallow clone repository #18095
Update release date for v3.5.14 #18093
Add build subtargets based on ARCH #18083
build(deps): bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 #18081
CHANGELOG: add support AllowedCN and AllowedHostname #18068
Support setting LocalAddr in peer communication - with e2e tests #17661
Complete migration of verify workflow to prow #18058
workflow: change the target of make test-robustness to test-robustness-main #18054
Increase robustness test request timeout to 200ms #18057
Add randomness in robustness cluster process version to test mixed version scenarios. #17923
Allow gofail trigger to fail as long as the member stops running #18046
Update printer.go for used/not-used ETCD storage percentage #17871
Bump dependency updates identified by dependabot #18045
Add siyuanfoundation to reviewers. #18033
build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 #18043
build(deps): bump actions/checkout from 4.1.5 to 4.1.6 #18044
Add ivanvc to reviewers #18029
embed: fix typo in comment #18028
etcdserver: add server range duration metrics #17983
Bump dependency updates identified by dependabot #18026
Bump dependency updates identified by dependabot #18024
changelog: add 3.4 and 3.5 note about go 1.21.10 #18019
add error constants in validate pkg #18008
split out subroutine from fix.sh to makefile target #18007
dependency(gh_actions): Manually bump codeql action from 3.25.3 to 3.25.5 #18005
build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 #18002
build(deps): bump actions/checkout from 4.1.4 to 4.1.5 #18003
build(deps): bump aquasecurity/trivy-action from 0.19.0 to 0.20.0 #18000
Prevent picking a failpoint that waiting till snapshot that doesn’t support lower snapshot catchup entries but allow reproducing issue #15271 #17989
Add nested owners files to automate labeling pull requests #17979
github workflow: fix all apt-install error return code #17984
changelog: add note from #17977 backport #17978
dependency: upgrade go to 1.22.3 #17975
Relax assumptions about all client request persisted in WAL to only require first and last request to be persisted #17966
Bump dependency updates identified by dependabot #17973
Add tests to serializable operations validation #17918
tools/benchmark/cmd: eliminate custom max function #17971
Update the robustness README and fix the #14370 reproduction case #17967
Fix caching by not depending on PHONY target in non-PHONY target #17965
Robustness operations failpoints #17889
Setup a way to consistently manage go versions across scripts and go.mods #17876
pkg/report: make use of builtin min/max function #17963
config: support AllowedCN and AllowedHostname through config file #17861
update changelog for experimental-stop-grpc-service-on-defrag #17962
robustness: add 2 more log lines when persistClientReports #17933
build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 #17949
dependency: bump go.etcd.io/bbolt from v1.4.0-alpha.0 to v1.4.0-alpha.1 #17947
Update changelog with bbolt bumps #17948
Update changelog with quota to endpoint status response #17942
github/workflows: remove golangci-lint-action step from static-analysis #17941
make: fix running fix target after verify #17937
Manually bump dependencies #17932
Enable var-naming linter rule #17921
Fix typo bootstrapedCluster #17930
Add etcd cloud project name #17927
add quota to endpoint status response #17877
Update jmhbnz project role in owners #17926
Chore: Use chain interceptors from grpc package #17922
pkg/netutil: avoid conversion between uint8 and int for GetDefaultHost #17895
changelog/3.4: add fix for member list not updated when node goes down #17916
Fix remove member failed. #17793
Fix deprecation comments from addressing var-naming work #17875
build(deps): bump github/codeql-action from 3.25.2 to 3.25.3 #17902
github/workflows: skip robustness tests in forks #17913
build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.1.0 #17903
build(deps): bump actions/download-artifact from 4.1.6 to 4.1.7 #17905
build(deps): bump actions/checkout from 4.1.3 to 4.1.4 #17904
Test: add tools/rw-heatmaps & tools/testgrid-analysis to module_dirs #17770
github workflow: drop measure test flakiness #17893
Add LeaseRevoke request to WAL parsing #17890
gofail: show error messages returned by gofail HTTP endpoints #17842
all: don’t convert byte slice to string when using verb %s #17878
Robustness wal validate watch #17731
Update Changelog for v3.4.32 #17885
github workflow: remove failfast in robustness nightly. #17880
CHANGELOG: update 3.4 and 3.5 with fix #17868
server/proxy/tcpproxy: use net.JoinHostPort rather than formatAddr #17834
robustness: Add option to not overwrite results dir. #17827
build(deps): bump actions/download-artifact from 4.1.4 to 4.1.6 #17850
build(deps): bump github/codeql-action from 3.25.0 to 3.25.2 #17866
fix version order when calling IsValidClusterVersionChange in UpdateCapability #17860
server/storage/mvcc: should update currentRev in revMu #17862
build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.3 #17849
Address remaining var naming linter warnings #17863
Update CHANGELOG - 3.4, 3.5 - fix PRISMA-2023-0056 #17826
build(deps): bump actions/checkout from 4.1.1 to 4.1.3 #17852
tests: set GOTOOLCHAIN var for report validation #17734
Bump dependency updates identified by dependabot #17841
Update 3.4 changelog for 2 new downgrade cases. #17859
Persist member data with lazyfs enabled #17856
server/config: address golangci var-naming issues #17854
Update the changelog for the change on compaction log on boostrap #17832
refactor IsValidVersionChange. #17847
fix revision loss issue caused by compaction - 17780 #17815
Don’t require minimal for failpoint injection period #17825
Handle watch responses with error #17835
Manually bump dependencies #17836
Add verification that the revision shouldn’t decrease on bootstrap #17791
Validate revisions between progress notify #17810
Update the compaction log when bootstrap and update compact’s signature #17792
server/embed: address golangci var-naming issues #17820
server/auth: simplify code for isValidPermissionRange #17816
Update CHANGELOG 3.4 and 3.5 - ignore raft messages if member id mismatch #17819
server/embed: address golangci var-naming issues #17674
server/etcdmain: eliminate deprecated tlsConfig.BuildNameToCertificate() #17787
Resumable handles watch with revision zero #17807
Validate bookmarkable checks the last event before progress notify #17771
Add filter validation to ensure watch only includes events within selector #17806
tests: fix some typos in comments #17809
build(deps): bump github/codeql-action from 3.24.10 to 3.25.0 #17805
Add tests to watch validation #17786
Robustness wal #16761
Remove limit from read requests after a failed write #17781
Enhance the etcd-dump-db: reuse revision in package mvcc #17788
testgrid: print out all failed tests for visibility. #17785
etcdserver: updated pre-vote flag description #17762
Add explicit checks for assumptions in robustness test validation #17759
Improve description for Kubernetes CAS operations #17783
Collect failed read operations to calculate request success rate #17768
test: refactor mix_version_test. #17776
fix: close profile in the mvccPutFunc func #17729
Don’t cache test-robustness-reports #17756
Bump dependency updates identified by dependabot #17767
build(deps): bump distroless/static-debian12 from 8cbe18a to 4197211 #17735
tools/rw-heatmaps: allow overriding running parameters #17755
Bump dependency updates identified by dependabot #17751
Improve documentation #17758
dependency(gh_action): bump upload and download artifact from 3 to 4 #17761
Document re-evaluating existing robustness test reports #17733
build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 #17745
CHANGELOG:add wal write system call metrics observation #17728
Make no failpoint error more readable #17730
Bump dependency updates identified by dependabot #17724
Limit a timeout in testing robustness validation #16764
Add script and workflow to detect flaky tests in testgrid. #17662
Revert “tests: temporary disable coverage redesign Go experiment” #17713
tools/benchmark/cmd: don’t panic with nil values in hashKV function #17710
CHANGELOG: update for LeaseTimeToLive returns error if leader changed #17718
Increase timeout for deactivating failpoint #17719
Update CHANGELOG 3.4 and 3.5 - initialization for epMu/mu in client context #17706
Bump go-version to 1.22.2 for release-3.6 due to CVE-2023-45288 #17707
Add trivy scan action for current branch HEAD #17679
server/storage: change deprecated bolt error to new error package #17701
changelog: add requests retry when receiving ErrGPRCNotSupportedForLearner #17698
Makefile: perfect .PHONY #17700
Replace run.skip-files with issues.exclude-files in golangci config #17694
Fix release git url & document lessons learned #17677
*: LeaseTimeToLive returns error if leader changed #17642
tests/e2e: ignore discovery tests when cluster_proxy tag is set #17691
client/pkg/testutil: eliminate copyToInterface function #17675
nit: Fix trailing whitespace in etcdmain/help.go #17690
build(deps): bump distroless/static-debian12 from 6dcc833 to 8cbe18a #17682
changelog: change livez/readyz HTTP endpoints to v3.5.11 #17678
client/pkg/testutil: add shouldSkip func for interestingGoroutines #17676
feat: add wal write system call metrics observation (main) #17618
Update release date for v3.5.13. #17672
server/storage: address golangci var-naming issues #17660
add 3.4 changelog of adding downgrade support. #17664
Fix tx buffer inconsistency if there are unordered key writes in one tx. #17263
tools/mod: remove reference to github.com/mikefarah/yq/v4 #17659
all: make regexp.Regexp variables global when not using configuration… #17652
Bump dependencies identified by dependabot #17650
tests/framework: address golangci var-naming issues [remove (*Member) GRPCURL()] #17655
tests/robustness: address golangci var-naming issues #17654
build(deps): bump github/codeql-action from 3.24.8 to 3.24.9 #17643
tests/framework: address golangci var-naming issues #17651
all: call Close() after reading http.Response.Body #17634
fix some typos #17640
Improve watch latency benchmark #17562
pkg: address golangci var-naming issues #17584
flaky: fix jwt test with increasing ttl #17588
Investigate arm64 robustness performance #17595
build(deps): bump distroless/static-debian12 from 0d6ada5 to 6dcc833 #17600
tests/common, tests/integration: Address tests var-naming lint rule #17635
tests/e2e: address golangci var-naming issues #17636
Weekly dependency update #17620
server: address golangci var-naming issues #17624
Update date of v3.4.31 release. #17632
Let dapendabot to auto-update docker for release 3.4&3.5. #17613
update 3.4 and 3.5 CHANGELOG of watch event loss after compaction fix #17617
etcdserver: address var naming lint rule #17614
build(deps): bump github/codeql-action from 3.24.6 to 3.24.8 #17599
Update community meeting docs to cover lead rotation #17597
Update format error for candidate links #17594
Update release guide and setup a pool of release candidates #17589
Use etcd maintainers ML for security related discussion #17590
api: address golangci var-naming issues #17585
Fix watch event loss #17555
Added changelog for the progress notification issue #17587
client: address golangci var-naming issues #17582
Bump dependencies identified by dependabot #17576
Fix progress notification for watch that doesn’t get any events #17557
Add patch version release criterion #17546
Reimplement tools/rw-heatmaps in go #17428
tests: temporary disable coverage redisign Go experiment #17561
Changelog: Add CVE-2024-24786 remediation #17559
changelog: add 3.4 and 3.5 note about go 1.21.8 #17542
Tweak golang version policy to avoid unsupported minor versions #17544
Bump dependencies identified by dependabot #17543
Migrate to go1.22 #17393
Add election test with auth enabled #17532
build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 #17524
etcdserver: skip when detect a removed peer #17518
Add a test status section to display testgrid status. #17508
build(deps): bump distroless/static-debian12 from 2eb0c79 to 0d6ada5 #17495
build(deps): bump github/codeql-action from 3.24.3 to 3.24.5 #17492
Add Cyberfusion to adopters #17469
Bump dependencies identified by dependabot #17503
Clarify the core dependencies mappings: bbolt and raft #17485
Update changelogs to cover the bumping bbolt to v1.3.9 for both 3.4.31 and 3.5.13 #17486
update CHANGELOG-3.5.md for #17447 #17488
Increased timeout to fix TestHashKVWhenCompacting test #17481
changelog: Add ignore old leader’s leases revoking requests #17480
Add VerifyTxConsistency to backend. #17359
Update flake issue template to include prow #17478
Bump dependencies identified by dependabot #17466
CHANGELOG: Add entries for updated compaction logs #17473
tests/robustness: use WithRequireLeader in Kubernetes traffic #17475
Revert “tests/robustness: check for compaction before prevKV validation” #17471
Fix typo in etcdctl/README.md #17446
update changelog for #15940 #15983
build(deps): bump distroless/static-debian12 from 4a2c1a5 to 2eb0c79 #17462
tests/robustness: check for compaction before prevKV validation #17450
build(deps): bump github/codeql-action from 3.24.0 to 3.24.3 #17461
Add Make CGO_ENABLED configurable to CHANGELOG #17449
Added client keepalive arguments to the grpc-proxy #17366
*: update logrus to v1.9.3 #17445
server/verify: use retErr to shadow local err #17441
Update membership process to reflect kubernetes/org automation #17429
cleanup contention.go docs, Observe param name #16603
tests/robustness: refactors, cleanups and followups #17426
feat: add TestNoErrorLogsDuringNormalOperations e2e test to validate error logs during etcd bootstrap #17423
etcdutl: Fix snapshot restore memory alloc issue #17277
tests/robustness: add robustness test for watch with PrevKV() #17352
Bump dependencies #17420
Make CGO_ENABLED configurable #17418
build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 #17406
build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 #17407
Remove the unused AuthTokenTTL parameter from integration test #17403
Add Hitoshi Mitake into the Emeritus Maintainers list #17395
Remove string dependent error handling in watch and auth #17384
Add go1.21 update to changelog #17380
add OpenBSD support to changelog 3.5 #17388
Manually bump dependencies #17392
feat: add memberReplaceLearnerTest test #17287
build(deps): bump github/codeql-action from 3.23.2 to 3.24.0 #17372
etcd: ignore SetKeepAlivePeriod errors on OpenBSD #15812
Update OWNERS: retire mitake #17385
Add backoff/retry config to changelog #17370
Update ahrtr’s email #17367
etcdserver: drain leaky goroutines before test completed #17365
build(deps): bump github/codeql-action from 3.23.1 to 3.23.2 #17335
build(deps): bump actions/upload-artifact from 4.2.0 to 4.3.0 #17334
Manually bump dependencies #17358
tests/robustness: fix out of index panic in model replay #17356
Update changelog for v3.4.30 #17354
Add v3.5.12 changelog #17351
Added a error log when learner is not sync with etcd leader. #17288
changelog: add 3.4 and 3.5 note about go 1.20.13 #17309
Add verification on keys: should be always mononically increasing #17325
test: fix TestHashKVWhenCompacting: ensure all goroutine finished #17313
Disable lazyfs test on arm64 machines #17323
Validate watch even if event history cannot be created #17260
Add backoff & retries to client config #17307
build(deps): bump github/codeql-action from 3.23.0 to 3.23.1 #17302
build(deps): bump actions/upload-artifact from 4.1.0 to 4.2.0 #17303
Print error log when creating peer listener failed #17314
Bump dependencies identified by dependabot #17319
Separate robustness test scenarios and increase number of times we run exploratory tests in nightly #17261
Fix golangci revive error-strings issues #17286
Fix test issue in TestScheduleCompaction #17284
Added container tools to devcontainer for debugging prow jobs #17273
Revert #17228 #17285
dependency: upgrade go to 1.21.6 #17274
Add changelog for 3.4.30 to cover the nil pointer log panicking issue #17271
build(deps): bump actions/upload-artifact from 4.0.0 to 4.1.0 #17253
Bump dependencies identified by dependabot #17264
Replace CreateBucket with CreateBucketIfNotExists #17249
mvcc: Printing etcd backend database related metrics inside scheduleCompaction function #17204
Migrate the raft changes to raft’s changelog #17244
integration: deflake TestMaintenanceSnapshotCancel #17235
Specify logger for bbolt #17237
Ensure bin/python directory is cleaned after install #17229
Fix tx buffer inconsistency if there are duplicate keys in one tx. #17228
server: fix learner metric incorrect issue #17176
Bump core dependencies bbolt and raft #17236
Update contributing guide to ensure there is an associated issue for each PR #17234
Fix delete inconsistencies in read buffer #17195
build(deps): bump github/codeql-action from 3.22.12 to 3.23.0 #17209
Adopt kubernetes issue priorities #17174
Fix Struct Config has methods on both value and pointer receivers. Such usage is not recommended by the Go Documentation. #17219
docs: update rotation worksheet #17225
Bump dependencies manually #17220
CHANGELOG: update changes for v3.4.29 #17221
Don’t flock snapshot files #17199
Automate installation of yamllint #17200
Update arm64 infra guide standard arm64 runner definition #17103
Improve logs around recovering snapshot backend and add an e2e test #17152
Enable org members to approve workflows for backports #17193
Bump dependencies #17191
Replace the deprecated x509.ParseCRL with x509.ParseRevocationList #17106
Update OWNERS: Retire ptabor #17156
build(deps): bump github/codeql-action from 3.22.11 to 3.22.12 #17167
Manually bump dependencies #17172
build(deps): bump google.golang.org/grpc from 1.59.0 to 1.60.1 #17150
Manually bump dependencies #17159
Test etcd fails to bootstrap with older db file #17153
Fix artifact upload github action for compatibility with v4.0 #17148
Add digest for base image and configure dependabot #17122
Correct typo from ‘Kuberntes’ to ‘Kubernetes’ #17149
Remove workflow telemetry github action #17131
changelog: update 3.4 3.5 changelogs to include livez/readyz changes. #17147
build(deps): bump github/codeql-action from 2.22.9 to 3.22.11 #17141
tests: add comments for clientv3test.TestWatchResumeInitRev #16888
Ignore old leader’s leases revoking request #16822
Update test case TestMemberReplace to always connect to stable endpoints #17125
testutils: return early instead of first breaking in LogObserver.Expe… #17107
changelog: update 3.4 changelog to include ssrf fix #17115
etcdclient: Fix memory leak caused by for + time.After #17117
Added some log messages for better diagnosis #17113
Add actuated badge #17102
contrib: add missing lock and mixin readme descriptions #17108
Bump dependencies identified by dependabot #17104
Add member replace e2e test #17079
Adjusted RAM Requirements for arm64 Workflows #17089
build(deps): bump github/codeql-action from 2.22.8 to 2.22.9 #17091
build(deps): bump actions/setup-go from 4.1.0 to 5.0.0 #17090
Install gofail in module-aware mode and ignore go.mod file #17088
Add status column for current release priorities #17086
Adding automated install of Protoc if not found on the system #17047
Update release-3.4 and 3.5 Changelog for go bump to 1.20.12 #17080
server: ignore raft messages if member id mismatch #17078
Update go version to 1.21.5 #17073
Bump dependencies manually #17072
Rollback the pull/14080: which fixed the potential deadlock #17058
server: disable redirects in peer communication #17066
add workflow telemetry to collect action metrics #17046
Revert “Switch to validating v3 when v2 and v3 are synchronized” #17056
Abort if failpoint injecton failed #17055
Support setting http client timeout when enable/disable failpoint #17050
*: dependabot dependency fix #17044
build(deps): bump github/codeql-action from 2.22.7 to 2.22.8 #17028
Fix message in case of unsupported platform #17040
changelog: Update changelog for 3.5.11 to include url redirect fix #17027
Extract membership applier #17015
Test ApplyConfState after restart #17021
Test v3 storage configuration validation #17026
Switch to validating v3 when v2 and v3 are synchronized #17017
CHANGELOG: Add 3.5.11 note for –experimental-distributed-tracing-sampling-rate #17023
Remove unused method and function #17020
add initialization for epMu in contetx client #17018
Add a simple test ensuring membership is properly bootstrapped #17014
Move duplicated shouldApplyV3 logic up into apply method #17013
etcd-e2d-test:rename e2e-arm64 file and runs it on every pull request… #16950
clientv3test: add comments for clientv3test #16920
Update changelog for 3.4.28 #16998
Remove v2 applier #17007
Remove v2 sync #17006
Remove v2 apply logic #16989
fix missing json flag when using VERBOSE=1 #17005
Refactor v2 deprecation tests to allow different cluster config #16991
Add tests for setting cluster version using v2 request #16994
Stop using v2 requests in server tests #16993
etcdserver: add linearizable_read check to readyz. #16984
client: add wasm for client transport #16909
build(deps): bump github/codeql-action from 2.22.5 to 2.22.7 #16983
Remove v2 proposals code #16967
build(deps): bump actions/github-script from 6.4.1 to 7.0.1 #16982
Bump dependencies identified by dependabot #16985
Disable following redirects when checking peer urls #16986
readme: fix slack link for sig-etcd #16968
github workflow: enable workflow approval #16965
Update 3.4 & 3.5 changelog. #16943
Get golangci-lint’t version from tools/mod for golangci/golangci-lint-action #16954
tests: fix failed prow test by adding golangci-lint to Makefile #16949
changelog: Update fix for CVE-2023-47108 #16953
Manually bump dependencies raised by dependabot #16952
Refactor mocking rand #16944
etcdserver: add metric counters for livez/readyz health checks. #16797
robustness test: add with functions of randomizable config params in robustness test #16914
dependency: bump go.opentelemetry.io/contrib/instrumentation/google.g… #16930
Exclude sleep failpoint from 1 node scenario #16929
github workflow: run arm64 tests on every push #16913
Increase client timeout for failpoint injection #16918
Fix typo in concurrent examples #16907
github workflow: update golangci-lint to 1.55.2 #16903
doc fix: add instruction to installling protoc and yamllint in contributing.md #16906
*: bump dependabot dependency #16896
fix test script and lint #16889
Complete migration to OWNERS file #16794
Update README to callout the issue triage meeting #16892
etcd: upgrade go version from 1.21.3 to 1.21.4 #16895
scripts: macOS support for scripts/genproto.sh #16883
etcd-io tests: trial arm64 on every pr with a small robustness workflow #16884
README.md: Add documentation for new snapshot restore flags #16885
update dependency in BOM check #16886
etcdctl,etcdutl,server,tests: update golang.org/x/time to v0.4.0 #16882
clientv3,server,tests: bump dependencies identified by dependabot #16864
osutil: remove unused Unsetenv function #16787
Add robustness failpoint for IO stall in raft loop #16859
build(deps): bump github/codeql-action from 2.22.4 to 2.22.5 #16854
build(deps): bump ossf/scorecard-action from 2.3.0 to 2.3.1 #16855
add livez readyz e2e tests #16835
v3rpc: online defrag toggles gRPC health server serving status #16836
Update date of v3.5.10 release #16840
Bump bbolt to 1.3.8 for main branch #16832
Fix arm64 robustness and stop running workflows in containers #16824
gRPC health server sets serving status to NOT_SERVING on defrag #16278
Revert runner change for main robustness nightly #16825
Schedule the arm64 related workflow nightly #16821
Switch over to managed Arm64 hosts #16801
Bump raft to latest commit #16810
Bump dependencies identified by dependabot #16820
build(deps): bump actions/checkout from 4.1.0 to 4.1.1 #16816
build(deps): bump github/codeql-action from 2.22.3 to 2.22.4 #16815
CHANGELOG-3.5.md: Upgrade gRPC to 1.58.3 #16762
add existing http health check handler e2e test #16698
Implement random packet dropping #16786
Direct questions to our discussion forums #16793
remove deprecated gRPC API usage #16791
*: enable and fix unparam lint #16622
*: cleanup main_test.go #16789
Fix cluster variable in mixins #16778
Add livez and readyz for etcd #16651
Add member replace failpoint to robustness tests #16766
Make the main_test the entrypoint and move senario generation to separate file #16767
Bump dependencies manually #16783
Split failpoints file #16777
Move failpoints to separate package #16775
build(deps): bump github/codeql-action from 2.22.1 to 2.22.3 #16774
Update 3.4 & 3.5 changelog #16763
Use the minimal time event was observed on watch #16757
Fix linearization failure not causing test failure #16759
Refactor and reorder validation to avoid reporting multiple correlated failures #16756
etcdserver: remove redundant len check in health check #16755
*: enable markdown_marker checker #16708
tests: deflake TestEtcdTLSVersion #16753
http health check bug fixes #16697
Dynamically generate flags passed to etcd binary #16707
Test dynamic flags v2 #16748
CHANGELOG: update 3.⁴⁄₃.5 golang version #16752
Continue on e2e failure #16737
Add tests to prepare to dynamic flag generation #16747
bump golang.org/x/net to v0.17.0, google.golang.org/grpc to v1.58.3 #16739
Bump go to 1.21.3 #16741
Return to default write scheduler since golang.org/x/net@v0.11.0 started using round robin #16735
Update changelog for 3.4 & 3.5 #16734
Bump dependencies generated by the bot manually #16731
Upgrade go version to 1.21.2 #16727
Refactor common revision code to pkg #16269
build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 #16726
*: cleanup unconvert_pass and remove revive tools #16714
build(deps): bump github/codeql-action from 2.21.9 to 2.22.1 #16725
Fix providing profile to robustness tests #16711
scripts: remove the markdown_you_pass #16709
Fix parsing failpoint names when failpoint has set value #16703
*: migrate nakedret_pass into golangci-lint #16705
Inject sleep during etcd bootstrap to reproduce etcd-io#16666 #16691
Fix typo in ci infra admins table #16696
Fix watch validation assuming that client requesting older watch revision #16695
Use default embed config in e2e tests #16688
Avoid timing out and provide a proper error in TestCtlV3GetFormat test #16692
test: add test cases to verify consistent reading right after writing #16678
Revert “etcd server shouldn’t wait for the ready notification infinitely on startup” #16677
Refactor mixin with grafonnet #16246
Bump dependencies identified by dependabot #16689
build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 #16681
Refactor registering flags to separate AddEmbedFlags function for future reuse #16676
Reuse embed.Config in e2e cluster config #16674
test: fix the TestCtlV3ConsistentMemberList: set the wait-cluster-ready-timeout as 1ns #16671
.github: ensure there is no change after make-fix #16670
Documented removal of etcdutl backup in CHANGELOG-3.6 #16668
Fix memberList may return incorrect intermediate results right after bootstrap #16658
Remove legacy etcdutl backup #16662
pkg/stringutil: sort ‘ss’ in TestUniqueStrings #16657
Add fuweid as reviewer #16652
dependency: bump some dependencies #16636
*: fix stylecheck/unused/unconvert linter issues #16638
build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 #16645
build(deps): bump actions/checkout from 4.0.0 to 4.1.0 #16646
*: fix revive linter #16634
*: fix goimports linter #16628
bump dependencies manually #16630
Add diagrams for etcd internals and consistent read/write workflows #16559
*: fix staticcheck lint #16626
*: fix ineffassign lint #16605
*: fix govet-shadow lint #16608
dependency: bump grpc-gateway from 2.17.1 to 2.18.0 #16621
Update 3.6 changelog to include the grpc-gateway upgrading from v1 to v2 and golang upgrading to 1.21 #16620
Upgrade grpc-gateway from v1 to v2 #16595
build(deps): bump github/codeql-action from 2.21.5 to 2.21.7 #16609
*: fix nakedret lint #16601
Use any instead of interface{} #16604
Add OWNERS file for etcd #16600
Update to go1.21 #16594
dependency: bump google.golang.org/grpc to 1.58.0 #16587
test: simply the expected output for some curl test cases #16572
dependency: bump golang.org/x/net from v0.14.0 to v0.15.0 #16584
mvcc: cleanup comment in HashStorage.Store #16586
build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 #16575
test: add test case to cover all election REST APIs #16570
CHANGELOG: update 3.5 with #16565 #16566
test: split watch and election tests to separate files #16564
dependency: bump yamlfmt,sys,otelgrpc,otlptracegrpc #16567
test: add test case to cover lock restful APIs #16553
server: optimizing memory overhead of copy operation in ConcurrentReadTxn #16508
changelog: update changelog to cover the goalng bump #16557
dependency: bump golang to 1.20.8 #16554
dependency: bump github.com/grpc-ecosystem/grpc-gateway/v2 from v2.7.0 to v2.16.2 #16357
test: add test cases to cover cluster RESTful APIs #16545
server/storage/mvcc: deflake TestHashKVWhenCompacting #16549
test: fix the flaky test case TestMemberList #16548
test: de-flake test case TestV3WatchProgressOnMemberRestart #16547
test: remove apiPrefix and withApiPrefix #16546
build(deps): bump github/codeql-action from 2.21.4 to 2.21.5 #16532
build(deps): bump actions/checkout from 3.6.0 to 4.0.0 #16533
test: add e2e test cases to cover all auth related RESTful APIs #16527
tests/integration: deflake TestV3AuthWithLeaseRevokeWithRootJWT #16523
Maintain a consistent naming standard for curlv3 tests #16525
test: move all auth related test cases into a separate test file #16518
Use test cases from TestCheckTxn to test Put and Range #16517
update the debian12 and bookworm remove –v 1.0 #16516
server: Test txn checking #16515
test: refactor the existing KV RESTful test cases and also add new cases #16511
server: Refactor checkTxn into single function handling all request types #16372
test: move all KV related RESTful APIs into a separate test file #16509
test: add v3 curl test to cover all maintenance REST API #16489
CHANGELOG: add #16490 item in CHANGELOG-3.5.md #16503
Bump dependencies identified by dependabot #16501
build(deps): bump actions/checkout from 3.5.3 to 3.6.0 #16499
api: fix duplicate gateway url issue #16464
test: support regular expression matching on the response #16472
Document project golang version policy #16463
dependency: bump honnef.co/go/tools from v0.4.3 to v0.4.5 #16466
Unit test for CLI flags and add missing flags #16465
Preserve the order of steps done for snapshot #16460
Use crypto/rand.Read instead of deprecated math/rand.Read #16459
Add membership changes to downgrade tests #16457
test: verify snap.Load() is sucessful #16458
Update to generate v2 snapshot from v3 state #16418
Minor update to test code to remove a local var #16455
build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 #16453
Run integration, e2e & grpcproxy tests in container. #16445
chore: pkg import more than once #16448
server: Unify arguments for mvcc methods #16373
*: enable ubuntu-latest-8-cores runner for amd64 robustness workflow #16440
Update test for v2 deprecation to verify membership match #16441
Use new and better canonical link to Google Groups #16446
all: stop using math/rand.Seed #16447
Fix unit tests and make targets to not fail in some environments #16433
fix: throughput typo #16449
Update changelog for go 1.20 update and socket options fix #16442
Handle ErrCompacted errors for Compact in raftexample #16423
tests/*: redirect metrics into file #16439
Update issues links in CONTRIBUTING.md #16430
Update the roadmap: etcd 3.6.0 will depend on bbolt 1.4.0 instead of 1.3.8 #16408
Update dependency management guide #16420
dependency: bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.37.0 to 0.42.0 #16417
test: increase the timeout for the flaky test TestCtlV3AuthCertCNWithWithConcurrentOperation #16421
Consolidate robustness github actions templates #16407
Add example config for TLS protocol version #16419
Bump dependencies #16414
build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 #16410
build(deps): bump github/codeql-action from 2.21.2 to 2.21.4 #16409
Update etcdutl restore to create v2 snapshot from v3 #16376
Migrate to golang 1.20 #16394
2023-08-10 bump up dependencies #16397
Add lazyfs support for arm64 robustness workflow #16392
replace github.com/gyuho/gocovmerge with github.com/wadey/gocovmerge #16384
Bump golang.org/x/sys from 0.10.0 to 0.11.0 #16379
tests/robustness: Reduce minimal QPS to eliminate flakes #16378
server: Separate txnRead from txnWrite #16371
Bump dependencies identified by dependabot #16360
server: Separate internal txn functions for recursion and have public function create transaction and trace #16355
clientv3: remove the experimental gRPC API grpccredentials.Bundle #16358
Add a method to export membership info to v2 store from RaftCluster #16132
Streamline test commands between branches #16359
Changelog: modify dependencies bumping go to 1.19.12 #16354
Fix 15877 and bump up gRPC from v1.52.0 to v1.57.0 #16338
bump go version to 1.19.12 #16346
clientv3: add Ctx() to return context of session #16265
clientv3: fix barrier.Wait() still block after barrier.Release() #16223
checks the client supported versions based on the current version #16313
build(deps): bump github/codeql-action from 2.21.0 to 2.21.2 #16335
Separate Writer interface from BatchTx interfaces #16325
Simplify go data race detection controls #16318
Fix http2 authority header in multiple endpoints scenario and bump up grpc from v1.51.0 to v1.52.0 #16324
Remove RLock/RUnlock from BatchTx #16320
Automate adding area/testing label to flake issues #16323
tests: Add support for lazyfs #14691
server: Remove Lock/Unlock from ReadTx #16312
tests: Make EtcdServerProcess substruct of proxyEtcdProcess to dummy methods when extending EtcdProcess interface #16317
Replace unnecessary Lock()/Unlock()s with RLock()/RUnlock()s #16248
pkg/flags: fix UniqueURLs’Set to remove duplicates in UniqueURLs’uss #16272
tests/robustness: enhance compact failpoint #16310
server: switch to semconv v1.17.0 #16288
Manual Dependency Bump #16306
Documentation: add roadmap #16279
build(deps): bump github/codeql-action from 2.20.4 to 2.21.0 #16294
update typo in raft.go #16283
Fix typo in triage_issues.md #16281
build(deps): bump github.com/cheggaaa/pb/v3 from 3.1.2 to 3.1.4 #16257
build(deps): bump github.com/mikefarah/yq/v4 from 4.34.1 to 4.34.2 in /tools/mod #16261
tests: cleanup unnecessary assignment in cluster.go #16271
pkg/ioutil: deflake TestPageWriterRandom #16268
Ensure release is run for arm64 e2e nightly tests #16230
Fix flaky integration/clientv3/naming TestEtcdGrpcResolverRoundRobin #16263
etcdctl/ctlv3/command: simplify code using fmt.Printf with ‘\n’ #16256
pkg/expect: avoid hardcoding when checking ErrProcessDone #16252
build(deps): bump github/codeql-action from 2.20.3 to 2.20.4 #16258
Add changelog for backport 13577 to 3.4&3.5. #16251
Update linter and protoc #16249
expose op.isOptsWithFromKey and op.isOptsWithPrefix #16224
Add new job for nightly release35 arm64 robustness #16231
clientv3: create keepAliveCtxCloser goroutine only if ctx can be canc… #16200
Changelog: add items to cover the fix of bumping go to 1.19.11 #16229
Add jmhbnz as etcd reviewer #16234
remove repetitive the #16232
pkg/expect: fix data race #16173
Bump go version to 1.19.11 to fix CVE GO-2023-1878 #16226
tools/benchmark: support –count-only for range #16196
Clientv3 prevent nil pointer #16198
Changelog: update etcd 3.4.27’s release date #16219
Templated arm64 integration and e2e workflows for main and release-3.5 #16152
Update community meeting frequency to fortnightly #16189
CHANGELOG: add item for 3.4.27 #16218
Bump dependencies #16210
build(deps): bump github/codeql-action from 2.20.2 to 2.20.3 #16205
Asking for approval to regain maintainer status #16197
Update CHANGELOG for #16029 #16165 #16193 #16194
tests: exclude learner endpoint from MemberPromote #16191
etcdutl: fix db double closed #16120
add tests for uber applier #16154
update changelog for #16188 #16190
Adding test for updateClusterVersionV3 #16067
clientv3: remove v3.WithFirstKey() in Barrier.Wait() #16156
Add cluster id check for hash kv handler #15924
auth: Support for EdDSA JWT algorithm #16174
update changelog for #15939 #15962
update README about profile learner #16155
tests/robustness: Prevent to many concurrent non-unique writes which are causing linearization to timeout #16161
build(deps): bump gotest.tools/v3 from 3.4.0 to 3.5.0 in /tools/mod #16168
build(deps): bump github/codeql-action from 2.20.1 to 2.20.2 #16169
etcdutl: update description for --mark-compacted and and --bump-revision flags in snapshot restore command #16166
Adding optional revision bump to snapshot restore #16029
tests/robustness: Implement loading client reports #16153
Manual Dependency Bump #16149
raft node notifies configure when confChanged #15708
Enable test to verify membership recovery from backend #16074
build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 #16145
build(deps): bump github/codeql-action from 2.20.0 to 2.20.1 #16146
add runtime reconfiguration tests #16127
fix action tag comment pattern to be consistent #16148
Robustness watch validation #16136
etcdserver: add tests for apply_auth.go #16086
*: should return exitCode even if cmd isn’t nil #16137
tests/robustness: Store whole watch operations #16135
Update 3.4 and 3.5 changelogs for compile with 1.19.10 #16117
Robustness fix patch txn onfailure #16129
tests/robustness: Combine watch histories #16131
tests/robustness: Implement Kubernetes pagination #16111
Manual dependency Bump #16128
Enable failpoint in integration test #16099
Document steps for setting up new arm64 self hosted actions runner #16116
tests/robustness: Implement proper range requests #16113
tests/robustness: Fix multi txn key prefix #16123
Verify consistent index is latest at the time of snapshot #16100
tests/robustness: Add List and StaleList requests to etcd traffic #16122
update change logs with lease put improvements #16090
build(deps): bump github/codeql-action from 2.3.6 to 2.20.0 #16110
tests/robustness: Tune Kubernetes tests to reduce number of delete requests #16115
tests/robustness: Separate traffic name from cluster setup in test name #16114
Validate stale read #16072
Robustness etcd traffic client #16092
dependency: bump golang.org/x/net from 0.10.0 to 0.11.0 #16102
Document new arm64 infra process #16087
tests/robustness: Implement stale reads without validation #16091
Robustness retry failpoint #16094
tests/robustness: Limit model to start only from fresh state #16096
tests/robustness: Disable blackhole until snapshot for v3.5 and v3.4 #16085
Ensure goimports can be fixed individually #16093
update 3.4 and 3.5 changelogs #16051
Robustness Allow errors and partial responses from deterministic model #16083
Early exit auth check on lease puts #16005
Robustness range request #16079
manual dependency bump #16073
tests/robustness: Extract validation to separate package #16066
tests/robustness: Move get to list of randomized operations #16075
Update downgrade test to use a snapshot #16041
build(deps): bump actions/checkout from 3.5.2 to 3.5.3 #16062
build(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 #16061
tests/robustness: Assume starting from empty etcd instead of throwing out first failed request #16044
tests/robustness: Provide a response diff in model test to make debugging easier #16046
add experimental-compact-hash-check-enabled to help #16031
add uds test cases into e2e TestAuthority #16037
tests/robustness: Put traffic type on second place before cluster size in test name #16045
.github/workflows: Read .go-version as a step and not separate workflow #16043
tests/e2e: Use epc.Etcdctl #16042
Remove Procfile.v2 and Procfile.learner #16040
Documenting etcd infrastructure and establish basic controls #15998
Update the go version to 1.19.10 patch release #16027
Check ScheduledCompactKeyName and FinishedCompactKeyName before writing hash #15985
2023-06-06: bump up dependencies update identified by dependabot #16023
ci: move .golangci.yaml to tools dir #16022
build(deps): bump github/codeql-action from 2.3.5 to 2.3.6 #16015
build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 #16014
Promote etcd frequently asked questions in our bug report template and readme #16003
Clean golang test cache for remaining ci workflows #16004
ci: add fix-yamllint rule in Makefile #15966
Add the rotation worksheet into the dependency management document #15946
etcdctl: update the description for flag ‘–rev’ #15997
Clean golang cache for arm64 ci workflows #15989
Strengthen etcd support policy in issue triage docs #15957
Update roles reference #15984
Bump dependencies identified by dependabot #15981
build(deps): bump arduino/setup-protoc from 1.2.0 to 1.3.0 #15980
build(deps): bump github/codeql-action from 2.3.3 to 2.3.5 #15970
ci: Introduce yamllint for actions workflow files #15960
tests/robustness: Use traffic.RecordingClient in watch #15959
Run arm64 tests in containers on self hosted runners #15927
*: use strings.Builder instead of bytes.Buffer #15908
Documentation: describe onboarding process #15911
tools/benchmark: support limit flag for range #15948
update code comments #15947
Bump dependencies identified by dependabot #15950
tests/robustness: Expect revisions to be unique for Kubernetes Traffic #15909
benchmarks: pin dependencies of rw-heatmaps #15942
Add example format for initial-cluster in configuration file #15938
build(deps): bump arduino/setup-protoc from 1.1.2 to 1.2.0 #15937
clientv3: refactor snapshot SaveWithVersion #15906
tests: deflake TestKVDelete/ClientAutoTLS #15920
update changelog for https://github.com/etcd-io/etcd/pull/15907 #15926
server/storage/schema: prefer equal to compare for equality comparisons #15915
Update maintainers emails #15912
tests/robustness: Validate all etcd watches opened to etcd #15893
tests/robustness: Unify model test cases #15889
Bump dependencies identified by dependabot #15904
build(deps): bump actions/setup-go from 4.0.0 to 4.0.1 #15899
tests/robustness: Implement Kubernetes optimistic concurrency operations #15888
tests/robustness: Implement kubernetes list watch protocol #15891
tests/robustness: use monotonic clock for watch events #15892
grpcproxy: fix memberlist results not update when proxy node down #15835
Run robustness tests on arm64 #15886
workflow: grant only read permission to all workflows #15887
migrate e2e auth tests to common #8 #15867
Initial re-write for contributor issue triage guide #15881
tests/robustness: Improve naming of Txn fields #15882
Changelog: update the release date of 3.4.26 and 3.5.9 #15883
dependency: bump dependabot dependencies #15862
tests/robustness: Separate stream id from client id and improve AppendableHistory doc #15880
tests/robustness: Add safeguards to client and history #15873
tests/robustness: Fix pointer causing all cluster tests using kuberne… #15874
tests/e2e: add graceful shutdown test #15828
tests: Deflake TestEtcdGrpcResolverRoundRobin #15868
changelog: add items to cover the fix that LeaseTimeToLive API may re… #15870
tests/robustness: Move request progress field from traffic to watch c… #15869
Add an option to keep_going with run for modules on failure #15839
server: default value for config file field auto-compaction-mode is n… #15741
test/robustness: Create dedicated traffic package #15845
Move go version to dedicated .go-version file #15859
tests/robustness: Make weighted pick random generic #15851
server/etcdserver: swap order of return types #15844
log time when open backend db took too long #15842
Update 3.4 and 3.5 changelogs for compile with 1.19.9. #15841
tests/robustness: Implement Range limit and count #15840
tests/robustness: Implement delete request for kubernetes scenario #15827
tests/robustness: Split model code into deterministic and non-deterministic #15819
build(deps): bump actions/upload-artifact from 2 to 3 #15830
build(deps): bump github/codeql-action from 2.3.2 to 2.3.3 #15831
remove invalid arm64 workflow config #15829
tests/robustness: Implement first step in validating the Kubernetes-etcd contract #15817
Updated go to latest patch release 1.19.9 #15821
keep going with other test suite runs when failure with one #15813
dependency_management.md: document go.opentelemetry.io/otel version update is blocked #15816
protect LeaseTimeToLive with RBAC #15656
build(deps): bump github/codeql-action from 2.3.0 to 2.3.2 #15809
tests: Deflake TestEtcdGrpcResolverRoundRobin #15795
refactor(util): remove duplicate lg check #15762
tests/robustness: tune timeout policy #15792
Provide release date for v3.5.8 #15786
Add -failfast flag when the mode is fail_fast #15790
test: forcibly save data on panicking #15789
close the session to avoid leak goroutine #15785
chore: deprecate github.com/hexfusion/schwag #15779
Incorporate xkcd dependency meme into README #15781
Consolidate etcd dockerfiles #15783
tests: Add new test for round robin resolver #15577
Bump dependencies identified by dependabot #15776
server/etcdserver: togRPCError for maintenance API #15759
Document: add guidance on dependency management #15744
build(deps): bump github/codeql-action from 2.2.12 to 2.3.0 #15772
Change the minimum recommended etcd versions to run in production to 3.4.22+ and 3.5.6+ #15761
fixes for “improve description of –initial-cluster-state flag” #15743 #15752
tests: increases unit test coverage for etcd/server/auth isRangeOpPermitted #15751
Bump dependencies identified by dependabot #15737
Adds a reusable workflow to setup the GoVersion #15748
fix some comments #15745
tests: cover txn.CheckTxnAuth logic with unit tests #15721
tests: make log monitor as common helper (followup #15667 #15718
build(deps): bump github/codeql-action from 2.2.11 to 2.2.12 #15736
build(deps): bump actions/checkout from 3.5.0 to 3.5.2 #15735
change v3.4.25’s release date #15716
Add issue template for new membership nominations. #15713
chore: cleanup #15514 (Rewrite etcd scripts in strict mode) #15672
Robustness merge failpoints #15611
tests/framwork/e2e/cluster.go: revert back to sequential cluster stop to reduce e2e test run time #15637
server/auth: fix panic a malformed jwt generation and add test-cases #15639
Bump some dependencies #15694
changelog: add items to cover some fixes for 3.5.8 and 3.4.25 #15678
Fix link for maintainers role and responsibilities in README.md #15679
Fix gofmt for client/pkg/fileutil/preallocate.go #15693
Show darwin as supported in fileutil.Preallocate docstring #15281
tests: deflake TestV3WatchRestoreSnapshotUnsync #15667
fix: different errc to avoid confused when timeout #15675
chore: remove pkg/expect TODO comment #15673
build(deps): bump github/codeql-action from 2.2.10 to 2.2.11 #15670
build(deps): bump github/codeql-action from 2.2.9 to 2.2.10 #15650
tests/robustness: Document analysing watch issue #15646
Require 2FA enabled for all members #15663
changelog: update items to cover the some new changes in 3.5 and 3.4 #15654
tests: Make using etcdctl expicit in e2e tests #15617
Update maintainer list #15657
changelog: Refactor changelog and add changes for v3.5.8 #15586
security: clear password after authenticating the user #15648
security: bump golang to 1.19.8 to fix four CVEs #15649
tests/framework: Cleanup alternative binaries in e2e tests #15645
tests/robustness: Ensure that etcdctl binary is provided #15644
etcdserver: Send requested progress notifications through watchStream (fix #15220) #15237
Move to community membership model closer to kubernetes one #15593
tests/robustness: Detect trigger timeout and exit #15642
changelog: add items to cover 15294 #15641
tests: Ensure healthy cluster before and after robustness failpoint #15604
tests: Enfoce timeout on failpoints #15633
tests: Ensure that operation history finishes with successful request #15603
Bump some dependencies #15638
tests: increase maxWatchDelay to prevent flaky TestWatchDelay* #15636
tests: Fix comparing etcd version #15632
fix flaking auth member remove test #15580
tests: Fix building incorrect etcd version and make switch strict #15618
tests: Cleanup endpoints #15592
test: fix typo in robustness test #15616
tests/robustness: Support running snapshot tests on older versions #15615
server/auth: disallow creating empty permission ranges #15294
Robustness fix blackhole #15610
CHANGELOG: add item into 3.5 #15614
build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3 #15607
Use makefile as entrypoint in CI #15561
contrib/raftexample: fix raftexample README’s raft library link. #15602
tests/robustness: Disable testing network blackhole until #15595 is fixed #15601
client: Hide v2 client package #15591
Fixes: #15266 All docker images of Architecture show amd64 #15270
Remove e2e from coverage calculation #15544
server: Fix defer function closure escape #15588
Allow user to separate http and grpc server #15446
tests: Ensure watch catches all events generated in traffic #15575
skip verification if db file does not exist #15582
tests: Refactor watch validation #15319
Document defining ciphers in example etcd config file #15576
add etcd test analyzer build and integrate into measure-test-flakiness workflow #15513
migrate auth tests to common #7 #15578
tests: Document robustness tests #14838
CHANGELOG: Add new tls configuration options #15553
build(deps): bump github.com/mikefarah/yq/v4 from 4.31.2 to 4.33.1 in /tools/mod #15564
build(deps): bump github/codeql-action from 2.2.8 to 2.2.9 #15574
changelog: added item to cover reverting 14548 in release-3.4 #15559
build(deps): bump actions/checkout from 3.4.0 to 3.5.0 #15554
scripts: Add testing of etcd in local image in release workflow. #15505
Update status of postmortem action items #15552
build(deps): bump github/codeql-action from 2.2.7 to 2.2.8 #15551
chore: introduce strict bash mode for scripts,.github #15519
etcd-mixin: Limit etcdDatabaseHighFragmentationRatio to 100MB+ #15291
CHANGELOG: add ‘server/embed: fix data race when starting both secure & insecure gRPC servers on the same address’ into 3.⁴⁄₃.5 #15546
Bump some dependencies #15538
build(deps): bump actions/setup-go from 3.5.0 to 4.0.0 #15536
build(deps): bump actions/checkout from 3.3.0 to 3.4.0 #15534
build(deps): bump github/codeql-action from 2.2.6 to 2.2.7 #15535
Point coverage to correct branch #15521
Fix 15271 #15492
deflake: mvcc storage ut #15489
server/embed: fix data race when start insecure grpc #15509
Add detailed long description for etcdctl txn #15494
document measure-test-flakiness.sh #15500
deflake member_test: enable pre-vote by default and add retry #15502
deflake TestTracing #15501
Rename pr and issue triage docs to fix links #15493
Add verify-goimport to verify all import items are well sorted #15485
Test connection multiplexing. #15479
server/auth: fix auth panic bug when user changes password #15432
Refactor: Use proper variable names for urls #15473
build(deps): bump github.com/mikefarah/yq/v4 from 4.31.1 to 4.31.2 in /tools/mod #15456
Update CONTRIBUTING.md reference for Codespaces #15455
build(deps): bump github/codeql-action from 2.2.5 to 2.2.6 #15466
Refactor url names #15453
test: fix format error #15467
tests/integration: deflake TestEtcdVersionFromWAL #15449
FIX #13389 #15447
Watch random scheduler #15431
Bump some dependencies #15420
Update contributing guide with new codespaces developement option #15433
Updated go to latest 1.19.7 release #15427
pkg/schedule: correct comparison for FIFO schedule test #15201
tests/integration: Update TestLeasingDeleteRangeContendTxn #15425
Return default snapshot count to 10,000 #15408
migration auth tests to common #5 #15378
CHANGELOG: Add entries for 3.4 and 3.5 go version 1.19. #15405
Add initial .devcontainer for go 1.19 #15383
Fixing flaky TestLeasingDeleteRangeContendTxn #15401
migrate auth tests to common #6 #15379
rpctypes: use status.Error() instead of status.New().Err() #15384
rafthttp: replace inline code with existing function #15398
dependency: bump go.opentelemetry.io/otel to v1.14.0 #15399
workflows: Remove non-root gomod dependabot rules #15313
Dependencies: bump some dependencies #15376
clientv3: support serializable MemberList operation #15261
tests: Rename linearizability tests to robustness #15359
migrate auth test to common #4 #15351
build(deps): bump golang.org/x/sys from 0.0.0-20210603125802-9665404d3644 to 0.1.0 in /client/pkg #15358
build(deps): bump github/codeql-action from 2.2.4 to 2.2.5 #15357
Ensure we are using an up to date govulncheck #15356
dependency: bump github.com/golang-jwt/jwt/v4 to v4.5.0 #15345
migrate 6 auth test cases to common #3 #15320
tests: Refactor file structure #15325
test: Report watch histories #15282
tests: Detect duplicate watch event #15324
tests: use monotonic clock for linearizability test history #15323
Codify kubernetes using response header revision as bookmark #15293
tests: Implement multi operation Txn #15259
Do not run arm64 jobs on forks #15316
Allow multiple operations with same mod revisions, but forbid … #15318
tests: Refactor blackholing and add separate BlackholePeerUntilSnapsh… #15283
tests: Remove functional testing as they were replaced by linearizabi… #15284
Adjust time resolution to microseconds #15239
tests: trigger raftBeforeFollowerSend failpoint in linearizability test #15268
etcdserver: add failpoints walBeforeSync and walAfterSync #15252
tests: Validate watch responses in linearizability tests #15250
Update @serathius email address just in case #15249
tests linearizability: trigger snapshot related failpoints #15104
tests/linearizability: force stop cluster with signal kill #15242
Add integration test for Arm64 #15233
Add E2E tests on arm64 #15230
tests/linearizability: remove PeerProxy for ClusterSize=1 #15232
Linearizability disable defragment request in traffic to remove flakes #15227
Add TLSv1.3 support. #15156
tests: Propagage logger through linearizability tests #15202
tests: Increase failpoint timeout and add more logs #15191
tests: Implement LargePut requests #15180
tests: Add defragment request to linearizability tests #15178
tests: Deduplicate cluster test scenarios #15179
Add functional tests on arm64 #15172
tests: Stop cluster after tests finish #15176
tests: Separate request type from Txn operation type #15159
Cleanup #15158
tests: Set artifact name based to avoid file override from different subruns #15149
tests: Fix linearizability nightly #15142
etcd: fix typo in bug.yaml #15146
etcdserver: use time.Ticker instead of time.After #15130
tests: Persist operation history #15133
Reproduce issue 13766 in linearizability tests #14682
CHANGELOG: add item about improvement for count-only range #15135
tests: Fix linearizability nightly variable name #15132
changelog: add items to cover the issue of promoting a non-started learner member #15098
tests: Move linearizability model and identity to dedicated packages #15128
Bump some dependencies #15129
etcdserver: return membership.ErrIDNotFound when the memberID not found #15095
Add linearizability nightlies for release 3.⁴⁄₃.5 #15106
clientv3: refactor getToken automatically #15071
tests: Reduce number of runs in nightly action #15105
tests: Fix history patch window #15101
Lease support for linearizability tests : address review feedback #15093
CHANGELOG: add dep update item to 3.4 #15094
tests: Move stopping proxy to after process stop to speed up cluster … #15091
tests: Fix putWithLease traffic timeout/limit and double overall timeout to reduce number of failed requests #15084
tests: Use watch events to patch history to speed up linearization #15078
Add support for lease api to linearizability tests #15080
etcdserver: process the case of the last WAL record being partially synced to disk [backport 3.5] #15068
Bump go to 1.19.5 #15081
changelog: add 3.5 item to cover the fix for last partically synced WAL record #15070
Watch events during linearizability test and compare history #15044
tests: Trigger only failpoints available in binary #15046
build(deps): bump golang.org/x/net from 0.4.0 to 0.5.0 in /server #15073
build(deps): bump actions/upload-artifact from 3.1.1 to 3.1.2 #15074
build(deps): bump actions/checkout from 3.2.0 to 3.3.0 #15075
tests: Rewrite etcd requests to use operations #15059
tests: Implement network delay and blackholing in linearizability tests #15048
client/v3: fix comment typo #15067
externalize snapshot catchup entries to etcd flag #15033
tests/common: migrate auth tests #2 #15028
etcd-dump-logs: Expand to allow diagnosing CRC corrupted problems in WAL log #15043
etcd-dump-logs: Make the tests work again. #15055
Goimports: Apply automated fixing to test files as well. #15056
tests: Support multiple keys in linearizability tests #14924
./scripts/fix.sh: Takes care of goimports across the whole project. #15052
enhancement(ctlv3): display as learner when member add as learner #15053
chore: delete // +build buildtag by go fix #15054
tests: Refactor etcd model #15045
etcdserver: fix typo in comment #15051
Added ‘secrets.GITHUB_TOKEN’ for the static-analysis workflow #15050
build(deps): bump ossf/scorecard-action from 2.1.0 to 2.1.2 #15047
clientv3/naming/endpoints: fix endpoints prefix bug #15021
tests: Reproduce issue 14685 #14909
Update nsswitch.conf file #15040
Changelog: update base image to static-debian11 and removd dependency on busybox #15039
remove the dependency on busybox #15036
clientv3: add protection code to prevent SnapshotWithVersion from panicking #15031
test(client): add TestIsUnavailableErr #15024
Improve memberList output consistency #15023
test(client): add credentials_test.go #15012
build(deps): bump ossf/scorecard-action from 2.0.6 to 2.1.0 #15026
build(deps): bump github/codeql-action from 2.1.36 to 2.1.37 #15027
build(deps): bump github.com/mikefarah/yq/v4 from 4.30.5 to 4.30.6 in /tools/mod #15025
changelog: update items to address the critical and high Vulnerabilities #15020
clientv3/concurrency: add logger to session, add unit test #14993
lease: fix potential goroutine leak in lessor_test.go #14875
maintenance: add test to verify content of Snapshot #14918
tests/common: migrate auth tests #1 #14998
e2e: deflake TestCtlV3AuthGracefulDisable #14999
Move trivy scan workflow of specific versions to respective branches #15005
fix doc etcdd.io -> etcd.io #15004
tests(etcdserver): add server_access_control_test.go #15000
changelog: added item to cover the rollback to fix ‘auth invalid token and old revision errors in watch’ #14996
build(deps): bump actions/setup-go from 2.2.0 to 3.5.0 #14978
build(deps): bump github.com/alexkohler/nakedret from 1.0.0 to 1.0.1 in /tools/mod #14982
etcd: add trivy-nightly-scan for etcd images #14928
build(deps): bump honnef.co/go/tools from 0.3.0 to 0.3.3 in /tools/mod #14979
build(deps): bump github.com/anishathalye/porcupine from 0.1.2 to 0.1.4 in /tests #14981
deps: bump some dependencies suggested by dependabot #14973
dependabot: change schedule interval to weekly #14972
resolver: cleanup of deprecated grpc resolver target.Endpoint field #14922
client: enhance the function shouldRetryWatch and added unit test #14935
build(deps): bump actions/checkout from 2.5.0 to 3.2.0 #14946
build(deps): bump actions/upload-artifact from 2.3.1 to 3.1.1 #14940
build(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 #14937
security: add dependabot.yml #14936
Trigger release in current branch for github workflow case #14860
Secure the github workflows #14930
test: fix nil pointer panic in testMutexLock #14927
tests: Update gofail to v0.1.0 #14925
Pin govulncheck to v0.0.0-20221208180742-f2dca5ff4cc3 #14919
tests: Increase test timeout for nighly runs to match job timeout min… #14917
Bump go to 1.19.4 and golang.org/x/net to v0.4.0 to address CVEs #14916
tests: Add Txn operation to linearizability tests #14903
Refactor etcd model #14902
Update PSC members #14913
Create a nightly job for linearizability tests #14911
Set Github workflows default permissions to read-only #14905
chore: use Getter in WarnOfExpensiveReadOnlyTxnRequest #14907
changelog: add items for the nil pointer panic of readonly txn #14901
Improve support for failed requests in linearizability tests #14880
etcdserver: fix nil pointer panic for readonly txn #14895
Allow failpoint requests to fail assuming that process exists within 1 second #14897
linearizability tests - Add support for delete api #14802
changelog: added non mutating requests pass through quotaKVServer when NOSPACE in 3.7 #14898
Make sure shellcheck exist #14872
changelog: added item for the decoupling raft from etcd in 3.6 #14892
Linearizability recreate cluster #14885
Remove raft from etcd #14882
test: fix typo #14889
docs: Update raft package to go.etcd.io/raft/v3 in modules SVG #14887
Update etcd to use the new raft module go.etcd.io/raft/v3 #14881
Read Go Build Flags from env GO_BUILD_FLAGS (#14396) #14868
Bump golang.org/x imports to address a bunch of CVEs #14871
test: fix unit test Instability #14865
add more debug info for opening WAL files failure #14862
Identify corrupted member depending on quorum #14828
tests: Cleanup gofail #14859
Deflake transport timeout case #14861
fix release pipeline failure #14858
bump github.com/stretchr/testify from v1.7.2 to v1.8.1 #14856
Display hash_revision for etcdctl endpoint hash #14812
fix TestSignal test #14847
changelog: add items for both 3.4 and 3.5 changelog to cover the case of removing memberid from corrupt alarm #14854
bump grpc to v1.51.0 from v1.47.0 #14834
Shell func go_srcs_in_module to list go src+test files (#14827) #14840
tests: fix anti-pattern name in NewEtcdProcessCluster #14825
Add missing copyright headers #14831
tests/integration: deflake Corruption cases #14824
client: update comment for clarity #14822
Update changelog for v3.5.6 release #14817
Fixed https://github.com/etcd-io/etcd/issues/14709 #14795
release: build with consistent paths #13552
Graduate --experimental-warning-unary-request-duration to --warning-unary-request-duration #14803
tool: bump gofail version #14804
all: goimports -w . #14788
Linearizability raft before leader send #14752
.github: make govuln-check generic #14669
Fix TestCtlV3Lock/Elect flakes #14798
docs: fix max recv msg size description #14794
changelog: add items to cover the issue of refreshing token on CommonName based authentication #14793
clientv3: do not refresh token when users use CommonName based authentication #14770
Avoid getting gofail/runtime when failpoints are disabled #14766
tests: refactor EtcdProcessClusterConfig using Functional Options Pattern #14785
all: Change Printf and friends to Print if there is no formatting #14767
client/v3: replace deprecated grpc.WithInsecure() issue #14732 #14731
Linearizability compact #14765
Update CodeQL to v2 #14761
etcdserver: add failpoints for backend #14757
tests: refactor EtcdProcessClusterConfig using Functional Options Pattern #14744
all: Change time unit #14756
client: Use func without format #14754
feat: raft/log_test se testify packages in tests #14747
tests: Make linearizability traffic extendable #14755
raft: don’t apply entries when applying snapshot #14721
Merge #14723
all: Use ReplaceAll instead of Replace with -1 pos #14753
Revision inconsistency caused by panic during defrag #14685
tests/e2e: disable testShellCompletion if enable cov flag #14742
Expect exit code enhancement #14672
Merge #14624
changelog: add item for 3.5 to cover the revision inconsistency issue #14734
etcdserver: Add gofailpoints for pre commit hook #14746
e2e: test DowngradeVersion with latest point release #14743
Add a new field hash_revision into HashKVResponse #14537
Merge #14717
etcdserver: call the OnPreCommitUnsafe in unsafeCommit #14730
README: remove Tobias Grieger from the Emeritus Maintainers list #14741
tests: refactor EtcdProcessClusterConfig using Functional Options Pattern #14725
raft: rename raftLog.nextEnts to raftLog.nextCommittedEnts #14719
Merge #14722
Merge #14720
test: Create a subdirectory for each member when DataDirPath is specified #14718
tests: Preserve data dir from failed linearizability tests #14714
etcdclient: check mutex state in Unlock method of concurrency.Mutex #14704
raft: make Message.Snapshot nullable, halve struct size #14592
Merge #14708
Take binary version in Downgrade/Upgrade Test #14710
test: support mix versions sending snapshot test #14707
raft: send empty appends when replication is paused #14633
tests: refactor EtcdProcessClusterConfig using Functional Options Pattern #14711
raft: Remove dependency on etcd api #14705
etcdserver: fix log typo when checking version compatiblity #14706
raft: remove the raft dependency on go.etcd.io/etcd/client/pkg/v3 #14703
tests: Add triggering random go failpoints to linearizability tests #14687
raft: change the log from debug to warning when uncommitted size exceeds threshold #14698
raft: simplify auto-leave joint config on entry application logic #14545
changelog: update 3.4.22’s release date #14677
test: support mix versions testing #14697
Merge #14659
clientv3: fix init client error #14368
changelog: add item to cover the fix on adding protection on maintenance requests when auth is enabled #14695
test: fix pipeline errors due to PRs conflict #14693
auth: check permission when performing maintainenence operations if auth is enabled #14663
test: refactor the framework structure to make it clearer #14683
tests: Pass only etcd related environment variables during e2e tests #14560
(Re-) add @tbg as maintainer #14681
test: deflake TestDowngradeUpgradeClusterOf3 timeout #14657
bump go version to 1.19.3 to address security fixes #14678
ci: ensure the generated code is up-to-date #14664
server: add more context to panic message #14667
tests: TestRunner.NewCluster accepts options #14660
clientv3: fix the implementation of double barrier #14604
test: terminate functional test on failure and code cleanup #14621
update changelogs of 3.4 and 3.5 for backporting PR 14574 and 14647 #14650
server: add a unit test case for authStore.Reocver() with empty rangePermCache #14647
remove inactive reviewers #14644
chore: update the warn message on startup when the server name is default #14642
Update 3.4, 3.5, and 3.6 changelogs for adding configurable cipher list to gRPC proxy #14524
Fix error on Scorecard run by upgrading the action version #14646
.github: add govuln check #14625
*: bump to go1.19.2 from 1.19.1 #14639
etcdserver: call refreshRangePermCache on Recover() in AuthStore. #14574
tests: add a ClusterOption interface for ClusterSize in config.Cluster #14632
don’t pass –endpoints flag in test HashKV implementation #14637
fix: close conn #14635
fix: add a warning message on startup if the server name is default #14613
common test: update auth test interface #14626
test: fix anti-pattern naming problem in config.ClusterConfig #14629
test: define a default WithAuth to resolve Unresolved reference error #14628
etcd-dump-db: enhance metaDecoder #14630
tests: Add linearizability tests scenario for #14370 #14611
test: add common function “WithAuth” #14618
chore: commit the change generated by scripts/genproto.sh #14612
test: refactor the client interface #14615
Ensure that input validation between API and Apply is consistent #14561
Validate etcd linearizability #14398
functional_test: code cleanup and minor enhancements #14602
raft: remove duplicate letter in comment. #14609
Fix AuthEnable/Disable e2e test implementations #14608
lessor: simplify expireExists to make it more clear #14600
Fix bug in EtcdctlV3.HashKV() e2e implementation. #14607
Simplify e2e coverage code #14596
server: Handle cluster version equal downgrade version #14588
etcdmain: Corrects the link to supported-platform.md docs #14590
tests: Move MustAbsPath function to testutils #14597
Tests: Check Watch response error not nil to avoid runtime panic. #14591
Support dynamically adding & starting new member #14589
Update changelog readme to add rules on how to add changelog items #14570
Test port allocating using net.Listen #14585
tests: Use bash like patterns in TestAuthority instead of string fo… #14586
Update both 3.4 and 3.5 changelog to cover two fixes #14583
functional-test: move the check on log-outputs out of the ‘if clientTLS’ branch #14584
etcdserver: fix corruption check when server has just been compacted #14457
embed: add integration test for distributed tracing #14348
client/v3: Add backoff before retry when watch stream returns unavailable #14556
functional_test: stop etcd and cleanup data when test is successful #14565
etcdserver: added more debug log for the purgeFile goroutine #14576
update changelogs of 3.4 and 3.5 for fixing avoid closing a watch with ID 0 incorrectly #14567
Merge #14555
Replace egrep with grep -E #14568
functional: remove SIGQUIT_ETCD_AND_REMOVE_DATA_AND_STOP_AGENT command #14387
Remove mention of ETCDCTL_API environment variable as it was removed from etcdctl #14559
integration: deflaking TestMaintenanceSnapshotCancel/Timeout #14552
Update changelog 3.6 to clearly requiring applications which depend on etcd 3.6 packages must be built with go version >= 1.18 #14551
update changelogs of 3.4 and 3.5 for handling auth invalid token and old revision errors in watch #14549
raft: update prevHardSt on Ready accept, not advance #14539
raft: broadcast MsgApp on auto-leave joint config proposal #14538
common tests framework: cluster client creation could fail with invalid auth #14331
etcdserver: get peer’s hash using the same revision as the value used by leader #14536
golangci: add import order check #14534
golangci: add unconvert check #14535
Update changelog-3.4 to cover the issue: memberID equals zero in corruption alarm #14531
upate:use google/btree in the genric way #14515
membership: Remove PickPeerURL Method #14521
Fixed unexpected cancelled watch with WatchID=0. #14296
wal: Fix the walWriteBytes metric #14506
Enable the OpenSSF Scorecard Github Action #14512
Update changelog-3.6 to reflect the bumping of go 1.19 #14504
etcdserve: revert the etcdserver side change for the data loss in one node cluster #14505
Bump golang version to 1.19.1 #14463
raft: don’t emit unstable CommittedEntries #14413
etcd: remove redundant type conversion #14494
Improve static analysis fixing scripts #14488
etcd: format import order #14493
e2e: make maxstream test stable #14482
etcd: Bump golang-jwt/jwt/ version to 4.4.2 #14491
*: Update golang.org/x/net to latest #14492
etcd: modify declaring empty slices #14479
Doc: Add feature graduation and deprecation policies #14483
*: handle auth invalid token and old revision errors in watch #14322
makefile: Split fmt into separate verify commands #14481
Build: remove the invalid quote character ‘ for flag -ldflags #14485
CI: remove hardcode go version in .golangci.yaml #14484
Test: increase the TestKVDelete’s timeout to 15s #14486
server/etcdmain: add configurable cipher list to gRPC proxy listener #14308
makefile: Make static analysis commands easier to use #14470
Changelog: cleanup 3.6 changelog to remove all bug fixes #14480
Update changelog for v3.5.5 release #14472
pkg: replace the deprecated Expect with ExpectWithContext in pkg/expect/expect_test.go #14471
remove redundant log messsages #14422
Add features dev and support guidelines doc #14428
really fix measure-test-flakiness #14475
Fix measuring test flakiness #14473
Changelog: correct the 3.4 changelog item #14469
Update changelog for 3.4.21 #14468
mvcc: Remove unused revisions and change comment rev to modified #14464
Improve contributor guidelines and simplify development commands #14458
changelog: update the recommended version to 3.5.4+ #14461
Integration_test: fix the flaky test TestV3AuthRestartMember #14460
Just some cleanup of expect #14451
github: Improve issue templates to speed up issue triage #14459
add a verification on the pagebytes which must be > 0 #14452
add verification on nil log #14455
Updated changelog to cover the two issues #14443
etcdctl: fix move-leader for multiple endpoints #14445
tests: Migrate member remove tests to common framework #14437
Move inactive maintainers to emeritus #14373
Document compact-hash-check flags in changelog #14435
testing: fix TestOpenWithMaxIndex cleanup #14421
Mockserver can handle requests to the leases API #14427
Update changelog to cover some PRs #14430
tests: Migrate member add tests to common framework #14281
Update changelog for 3.4, 3.5 and 3.6 for the potential data loss in one-node cluster #14425
Move consistent_index forward when executing alarmList operation #14419
[Second Solution] Fix the potential data loss for clusters with only one member (simpler solution) #14400
tests: unify --strict-reconfig-check config of common framework #14360
Procfiles: Update Goreman Installation Command #14418
Add revive to the list of linters. #14391
Setup golangci-lint GitHub action #14392
chore: remove duplicate word in comments #14405
Fix test code compiling error due to not enough arguments #14401
Reduce redundant code and memory allocation. #14374
tests: Add context to e2e cluster start #14383
add the missing parameter ‘name’ into SpawnCmdWithLogger for cov test #14395
chore: remove duplicate word in comments #14390
server/auth: refresh cache on each NewAuthStore #14358
Readme: Removed unnecessary comma. #14386
etcdmain: Honour ExperimentalWaitClusterReadyTimeout in startEtcd #14388
Cleanup some e2e test configurations #14389
Add context to tests common client interface #14381
Added client-auto-sync-interval argument to the grpc-proxy #14354
tests: Migrate watch test to common framework #14345
Cleanup the go.mod for etcdctl #14380
Add ErrTimeoutDueToLeaderFail as expected error #14377
Fixed infinite loop in ExpectProcess.ExpectFunc #14376
Remove IRC ref #14378
Update changelog-3.5 to cover the change for refactoring the keepAliveListener and keepAliveConn #14367
Documentation: Update Broken Links #14375
Add process to remove maintainers that don’t fulfill their duties #14238
Add test name to e2e cluster members #14292
Add logging grpc request and response content with grpc-proxy mode #14266
Cleanup all etcd-agent and etcd processes when the test finishes #14359
clientv3: close streams after use in lessor keepAliveOnce method #14357
chore: log when an invalid watch request is received #14351
Minor refactoring on the keepAliveListener and keepAliveConn #14356
etcdctl: add –max-txn-ops flag to make-mirror command #14340
Improve functional test code #14346
tests: e2e and integration share TickDuration constant #14344
tests: add WaitLeader function to common framework #14304
server: don’t panic in readonly serializable txn #14149
Print clusterID, memberID and leaseID in hexdecimal #14208
more logging around auto sync #14334
logging RoleGrantPermission key and range end #14330
add .DS_Store into .gitignore #14327
benchmark: Fix the panic when running benchmark watch #14212
pkg/types: Support Unix sockets in NewURLS #12469
Add alarms metrics for server #14276
tests: fix status responses size and nil #14299
clientv3: fix –insecure-skip-tls-verify not working when not specify… #14317
CHANGELOG: update version recommendation #14306
Bump OpenTelemetry to 1.0.1 and gRPC to 1.41.0 #14320
Enhance the WAL file related error #14300
Update the release date for 3.4.20 #14319
Fixed goroutine leak in server/etcdserver/raft_test.go #14286
server/etcdserver: check whether raftNode has stopped #14262
rafthttp: test multiple transport removes #14284
Fixed goroutine leak in tests/integration/clientv3/watch_test.go #14288
Fixed goroutine leak #14287
Fixed goroutine leak in tests/integration/v3_watch_restore_test.go #14289
Add golangci-lint config file and make target. #14255
Reduce ExpectFunc polling interval #14283
update contrib/lock example #14261
fix: code cleanup #14280
memberID equals zero in corruption alarm #14272
tests: Migrate member list tests to common framework #14278
server: Implement compaction hash checking #14120
Update changelog for 3.4.20 #14277
tests: fix the logic of testNonleaderElectionTimeoutRandomized in raft_paper_test.go #14273
update changelog-3.4 to protection for rangePermCache with a RW lock #14231
No need to manually remove tmp directory created by t.TempDir() #14248
readme: remove broken roadmap link #14247
delete unreachable code #14235
etcd-mixin: fix etcdDatabaseQuotaLowSpace alert name #14242
etcd-mixin: use-last_over_time-with-etcdBackendQuotaLowSpace-alert #14237
etcd-mixin:add etcdDatabaseHighFragmentationRatio alert #14221
update changelog-3.5 to protection for rangePermCache with a RW lock #14228
fix:etcd-mixin:use-predictlinear-insteadof-increase #14196
clientv3: Fix parsing of ETCD_CLIENT_DEBUG #14203
Fix syntax errors in comments #14201
Update both 3.5 and 3.6 changelog to cover the new flag --max-concurrent-streams #14220
Make Benjamin an official v3.4 release manager #14215
Support configuring MaxConcurrentStreams for http2 #14169
update v3.4.19 release date #14214
Update goreman installation command in local_cluster.md #14207
Update scripts/release.sh to remove message related to travis.yml #14206
Update 3.4 changelog to prepare for the release of 3.4.19 #14202
lease: Rename Poll to Peek in the LeaseExpiredNotifier #14198
Fix a typo in etcdctl readme for the elect command #14194
ectdctl: Add the SilenceErrors config For the cobra.Command #14173
Update 3.4 change log to cover fixes for two issues #14154
snap: Delete the nil judgment of the log object #14172
server/auth: protect rangePermCache with a mutex #13954
Remove duplicate certificate configuration for proxy test #14184
Client: fix check for WithPrefix op #14182
pkg/expect: send SIGTERM to target expect process instead of SIGKILL for Stop() #14165
fix #14162 #14166
removes empty option in JSON tag #14160
proxy: Put the pb object into the struct #14157
verify: Get backend using simple api #14153
fix #14161 #14163
sync-changelog: /health break change was reverted #14152
config: Add the default case when failing to parse the log rotate config json #14146
Update 3.4 change log item for 3.4.19 #14141
tools/benchmark: migrate cheggaaa/pb.v1 to cheggaaa/pb/v3 #14082
mvcc:add ut for Revisions/CountRevisions and remove RangeSince as it … #14124
update changelog for both 3.5 and 3.6 to cover the authBundle overwrite issue #14133
Doc: provide more clarify to the usage of check perf command #14111
Update dependencies - including zap (1.21) #14126
Update to grpc-1.47 (and fix the connection-string format) #14125
Update 3.5 and 3.6 changelog to cover the fix of restricting the max WAL entry #14129
replace ioutil with os package #14128
Restrict the max size of each WAL entry to the remaining size of the WAL file #14122
fix: typo gouroutine #14123
Embed server should log errors (and not get stuck) #14116
schedule: Provide logs when the fifo job panic happens #14109
Extend .gitignore to ignore intelij config/generated files. #14117
Fix a syntax error in a code comment #14121
wal: remove the repeated test case #14106
Calculate hash during compaction #14049
Use single “stage/tracked” label to prevent issue from getting stale #14108
Update build file to run with an argument #14097
Get all constant etcd versions defined in a centralized place #14107
add flag range for del in etcdctl #13747
Update 3.5 changelog to add an entry to cover the new flag ---experimental-bootstrap-defrag-threshold-megabytes #14103
mvcc: improve the use of locks in index.go #14084
server: Fix broken code during merge #14101
Fix potential deadlock between Revoke and (Grant or Checkpoint) #14080
skip compact when rev not change at period compact mode #13829
Update link to tuning page #14099
Fix the DATA RACE issue of TestCloseProposerInflight #14095
Update 3.5 changelog to cover the two bug fixes related to leases revoke and checkpoint #14088
Clean up the local variable cps so that it will not continue to schedule checkpoint #14078
Fix the race condition between goroutine and channel on the same leases to be revoked #14067
Move lease related code into a separate file lease.go #14079
Update changelog-3.5 to correct the entry for decommissioning etcdctl migrate #14069
Add etcd tool binaries into .gitignore #14063
use go install instead of go get #14060
Encapsulation of applier logic: Move Txn related code out of applier.go. #13878
Governance: Use lazy consensus when needed to make decision #14053
Fix a typo: print the correct error info #14052
scripts: Detect staged files before building release #14051
scripts: Avoid additional repo clone #14044
Documentation: Publish v3.5 data inconsistency postmortem #14046
tests: Make common framework context aware #14042
Hide the revision field when it isn’t populated #14033
tests: Refactor spawn json command #14029
tests: Extract cluster test cases #14038
Remove v2 http proxy #14034
server: Director can be stopped #14032
Provide a generic assert function #14036
tests: Migrate Txn tests to common framework #14000
migrate e2e & integration role_test to common #14020
Update 3.4 change log for 3.4.19 #14017
Update 3.5 and 3.6 changelog for recent merged PRs #14018
Enhance the ‘/version’ endpoint to add storageVersion #13772
coverage: Run coverage only on push #14016
tests: Use zaptest.NewLogger in places we missed #13881
Implement HA E2e for downgrades #13696
Nomination for Benjamin (ahrtr@) as a project maintainer #14011
Cleanup healthcheck code after V2 removal #13655
Remove the workflow/transparency.yaml #14014
Update CHANGELOG for PR 13999 #14005
Verify consistent_index in snapshot must be greater than the snapshot index #13988
github: Add necessery permissions for CodeQL #14010
change ARCH to GOARCH in build.yaml #14007
Fix data race in testWatchOverlapContextCancel #14003 #14004
tests/common/lease: don’t use revision to wait for leases #13940
Simply etcdutl backup command to cleanup v2 related implementation #13972
Fixed potential goroutine leak due to p.Ready() receive in pkg/proxy and dependents. #13966
*: Update golang.org/x/crypto to latest #13969
Doc: add installtion instructions for tools #13994
allocate unique port for each member in v3_snapshot_test cases #13982
scripts: Add tests for release scripts #13981
doc: Fix Markdown code block #13986
Add verification consistent index is (nearly) never decreasing #13963
etcdctl: Remove V2 API commands #13643
Documentation: Create a data inconsistency postmortem #13967
Update the release date of 3.5.4 #13977
embed: Fix logger spelling in NewZapLoggerBuilder godoc #13974
Documentation: Update contributor guide and remove outdated ROADMAP.md #13965
Update changelog for 3.5.4 and 3.6 #13970
Doc: update logging convention #13971
Update consitent_index when applying fails #13942
Add contributor docs #13962
Fix code scanning alert: This log write receives unsanitized user input #13959
Revert #13712 #13949
test.sh script improvement (OsX centric) #13955
smoke test:fix license header check #13956
Use lineariziable range request in TestKVGet #13957
Rollback the opentelemetry bumpping to recover the pipeline failures #13945
Update production recommendation for v3.5.3 #13941
go.mod: upgrade opentelemetry deps #13888
contrib/raftexample: Save snapshot and WAL before hard state #13929
cv3/mirror: Fetch the most recent revision from the prefix #13923
CHANGELOG-3.5: Add #13862 #13935
scripts: Remove Windows build scripts #13710
Update 3.6 and 3.5 change log to cover two issues #13934
Set backend to cindex before recovering the lessor in applySnapshot #13930
Leases wait for entries to be applied #13690
clientv3: filter learner members during autosync #13837
MAINTAINERS: update Sam’s contact email #13916
Update 3.5 and 3.6 changelog to cover the data inconsistency issue #13914
*: update golang.org/x/crypto #13910
*: drop use of humanize.Time() in favour of zap.Duration and time.Duration #13906
Use readTx in (*store).restore #13907
tests: Add tests for snapshot compatibility and recovery between versions #13756
tools/mod: Update tools #13898
server: Save consistency index and term to backend even when they decease #13903
tests/framework/integration: Fail BeforeTest nesting early #13807
Fix the data inconsistency issue by moving the SetConsistentIndex into the transaction lock #13854
go.mod: Bump prometheus/client_golang to v1.12.1 #13897
Makefile: Drop log tee calls #13869
migrate e2e/users tests to common framework #13819
fix unexpose todo #13893
etcd-dump-logs will panic if there is no WAL entry after the snapshot #13880
tests: Pass logger to backend #13886
server: Add verification of whether lock was called within out outside of apply #13885
scripts: add script to measure percentage of commits with failed status #13175
tests/common/lease: Wait for correct lease list response #13868
tests: Use zaptest.NewLogger in tests #13867
Integration tests flake fixes #13876
fix WARNING: DATA RACE issue when multiple goroutines access the backend #13875
Makefile: Additional logic fix #13860
Fix TestauthTokenBundleOnOverwrite on OsX: #13872
fix comment in raft.go #13870
Fix inconsistent log format #13864
The file server/storage/mvcc/util.go isn’t used at all, so removing it #13856
Makefile: Fix wrong target #13857
changelog: Update and deduplicate production recommendations #13852
Fix the etcd api dependency in pkg. And Update Cobra Version to1.4.0 #13802
enhance etcd-dump-db to display keys in meta more friendly #13834
test: set etcdutl to default #13836
Update go to 1.17.8 #13831
Move the newClientCfg into clientv3 package so as to be reused by both etcdctl and v3discovery #13821
Fix panic in etcd validate secure endpoints #13810 #13824
Removing deprecated commands in etcdctl & etcdutl #13809
server/auth: avoid logging for JWT token #13301
Add unit test for newClientCfg #13830
Update changelog to cover the fix for the watchablestore runlock bug #13835
tests: Migrate noquorum kv tests to common framework #13754
tests/integration: re-enable TestV3AuthOldRevConcurrent #13828
tests: Migrate alarm tests to common framework #13823
Migrate e2e Lease tests to common #13812
tests: Migrate defrag tests to common framework #13820
Add one more field storageVersion into StatusResponse #13773
expect_test: Look up binaries from the path #13803
integration/client/watch.TestWatchCancelRunning: remove duplicate setup #13804
integration/clientv3/exp/recipes: Fix lock tests #13806
tests: Migrate endpoint tests to common framework #13774
*: Restore release documentation #13799
delete offline defrag in etcdctl #13793
Move clientconfig into clientv3 so that it can be reused by both etcd… #13751
Add fuzzing audit report #13788
tests: Migrate compact tests to common framework #13770
Fix some log format typos #13771
Fix some typos related to downgrade #13769
clean up unnecessary stack log when restore #13767
Update the confstate before sending snapshot #13760
fix some typos #13759
tests: Migrate kv delete tests to common framework. #13753
add timeout for http client #13750
Migrate key value Get to common framework #13740
mvcc: clean up duplicate metrics name #13752
Updated servePeers to remove the grpc server #13565
server/etcdserver: fix oss-fuzz issue #13700
scripts: Fix release scripts #13744
delete duplicate metrics rangeCounterDebug #13746
fix: a little grammar issue #13704
Update 3.5 changelog to cover the PR of always printing raft_term in decimal #13728
Add failover test cases #13737
Add ahrthr@ to reviewers #13731
Create common framework for e2e and integration tests and migrate TestKVPut test #13708
Change v3 discovery url to endpoints so as to support failover #13733
Add downgrade commands #13687
Always print the raft_term in decimal #13711
Update 3.5 changelog to cover the PR of improving health check #13725
e2e: Call WithStopSignal on proxyV2 object #13309
support v3 discovery to bootstrap a new etcd cluster #13635
*: use T.TempDir to create temporary test directory #13644
Update changelog for both 3.5 and 3.6 for the PRs of trimming the suffix dot from target in SRV record #13720
server: Snapshot after cluster version downgrade #13686
server: Switch to publishV3 #13683
Fix typo, renamed ErrGPRCNotSupportedForLearner to ErrGRPCNotSupportedForLearner #13721
fix panic when restart after removeMember #13645
Trim the suffix dot from the srv.Target for etcd-client DNS lookup #13712
contrib/mixin: Generate rules, fix tests #13671
server/storage/wal: fix oss-fuzz issue 44433 #13689
server/etcdserver: fix oss-fuzz issue 42181 #13695
Load all leases from backend #13676
Fix coverage failures #13693
server/storage/backend: restore original bolt db options after defrag #13679
server: Make –v2-deprecation=write-only the default and remove not-y… #13612
tests: Fix cluster version and downgrade request timeout #13694
server/storage/mvcc: fix oss-fuzz issue 44449 #13681
server/auth: fix oss-fuzz issue 44478 #13682
Cleanup scripts in root directory #13649
Replace gobin with go install #13673
Etcd server shouldn’t wait for the ready notification infinitely on startup #13525
Remove v2 server #13636
release: Post v3.5.2 release updates and fixes #13663
Implement WAL static analysis to ensure that new entries will be properly annotated #13490
Add Marek as a project maintainer #13652
Remove unused .words file #13647
Remove travis #13157
Add bug report issue template #13638
Re-enable code coverage upload #13651
tests: Parallelize grpcproxy tests #13657
Move changelogs to subdirectory #13646
Remove badge for disabled test suite #13650
tests: Move revision tests out of concurrency #13640
Remove V2 API usage from Integration tests #13621
Add protection code for Range when the sortTarget is an invalid value #13555
Use Distroless as base image #13556
Avoid always update meta term. #13568
Revert CodeQL permission #13633
Add required permissions for CodeQL #13631
README: fix go version that development required #13627
contrib/mixin: add missing summary to alerts #13626
Update maintainers #13625
mvcc: add a fast return at put method #13601
format listenning address correctly for IPv6 ip address #13551
Add protection code to prevent etcd from panic when the client api version is not valid UTF-8 string #13560
Update dep: gopkg.in/yaml.v2 v2.2.8 -> v2.4.0 due to: CVE-2019-11254 #13614
Code clean: make rangeKeys close to storeTxnRead. #13561
raft: fix out-of-bounds in maybeAppend #13603
client: retry_interceptor.go: Log the method that failed #13607
Use test.sh instead of test for linux-386-unit-1-cpu #13605
v2auth: fix out of bounds in test #13575
The public key doesn’t match if any field doesn’t match #13382
raft: avoid jump tag to make code more understandable #13438
Add a new flag “–rev” to make-mirror command to support incremental mirror #13519
*: Bump to go 1.17.6 #13487
fixing goroutine leaks #13558
server: –enable-v2 and –enable-v2v3 is decomissioned #13595
Update Cobra version to 1.2.1 #13571
ctlv3: add forgotten member promote method to printerRPC #13597
fixing the goroutine leaks in TestHashKVWhenCompacting #13549
Fix goroutine leaks in TestNodeProposeAddDuplicateNode #13562
Fix goroutine leaks in TestCommitPagination #13563
tests: Add integration test for revision monotonic under failure injection #13584
Remove CodeQL errors #13591
update CHANGELOG-3.5.md to cover the fix for issue 13494 #13594
README: Cleanup community meetings video recordings #13590
update dump db tool #13572
Update supported versions and ref to the policy #13581
Golang Client docs: defer cancel(), avoid erroring #13574
Disable auth gracefully without impacting existing watchers #13577
fixing one panic and two goroutine leaks #13540
server/etcdmain: add build support for Apple M1 #13545
Set the backend again after recovering v3 backend from snapshot #13500
fix potential goroutine leaks #13537
images: Use Kubernetes debian-base:bullseye-v1.1.0 as base image #13546
Remove the redundant line from test.sh #13528
fix watchablestore runlock bug #13505
Lease Checkpoints fix #13508
etcdctl: enhance the make-mirror command to return error asap when invalid flags are provided #13513
*: Upgrade to use go.opentelemetry.io/otel@v1.2.0 #13498
fix etcd benchmark binary not found #13497
Update CHANGELOG for PR 13477 #13492
etcdctl/ctlv3/command: add use time for defrag command #13461
CHANGELOG: add experimental-max-learners #13481
Enhance health check endpoint to support serializable request #13399
Add experimental-max-learners flag #13377
Fix undefined io #13470
server/etcdserver/api/etcdhttp: exclude the same alarm type activated by multiple peers #13467
client/v2: remove unsafe json-iterator/reflect2 #13439
Fix genproto path error:./server/wal/walpb #13358
v3compactor: refine some code and fix a typo #13404
Implement single node downgrades #13405
*: move from io/ioutil to io and os packages #13447
*: fixup go 1.17 bump #13450
Merge #13440
raft: add test for leadership transfer in joint configuration #13436
etcdserver: Expose metrics with all known peers #13412
etcdserver: non-mutating requests pass through quotaKVServer when NOS… #13435
MAINTAINERS: update Gyuho’s contact email #13437
Move e2e/integration cluster setup to separate package #13411
contrib/mixin: Update dashboard promql to use $__rate_interval. #13388
Grafana datasource template should be labelled ‘Data Source’. #13430
server: update OpenTelemetry to 1.0.1 #13361
CHANGELOG: add v3.5 to recommended version list #13427
Merge #13339
contrib/mixin/mixin.libsonnet: Include gRPC method in alert description #13419
add autoSync flag in benchmark tool #13416
scripts/genproto.sh: fix module path of wal proto files #13424
CHANGELOG: 3.5.1 #13422
CHANGELOG: 3.4.18 #13421
CHANGELOG: 3.3.27 #13420
contrib/mixin: omit Defragment method from etcdGRPCRequestsSlow #13407
Refactor code to make place for downgrade logic #13391
client/pkg/fileutil: add missing logger to {Create,Touch}DirAll #13401
netutil: add url comparison without resolver to URLStringsEqual #13224
CHANGELOG updating changelogs for etcd_disk_defrag_inflight backport #13398
storage/backend: Add a gauge to indicate if defrag is active #13371
CHANGELOG: 3.3.26 #13384
CHANGELOG: 3.4.17 #13383
Dockerfile: bump debian image to bullseye-20210927 #13376
Fix http2 authority header in single endpoint scenario #13359
Decouple prefixArgs from os.Env dependency #13343
etcdserver: remove code duplication from the peer.send func #13238
etcdserver,clientv3: server-side ignore sort-ascend-key for range reqs #13261
Move storage bootstrap to its package #13230
mvcc: simplify watchable_store addVictim code #13366
client/pkg/v3: fixes Solaris build of transport #13311
Stop using golang tip version in CI #13338
Implement schema migration and panic when trying to downgrade storage #13200
fix IsOptsWithFromKey #13334
rw benchmark add val-size #13318
Fix a few typos #13321
Merge #13308
doc, log: fix typo in wal doc, log #13288
server: Add sampling rate to distributed tracing #13248
client/v3: refresh the token when ErrUserEmpty is received while retrying #13262
etcdserver: add zap.AddCallerSkip in NewRaftLoggerZap #13239
etcdserver: remove always true or false in if statement #13252
Benchmark: remove redundant function call #13290
migrate_command: Fix typo in migrate #13282
MINOR: Fix typos(hearbeat -> heartbeat) #13279
Cleanup remaining TODOs for/past 3.5 release #13278
Annotate proto messages with version and detect etcd version generated the wal #13216
contrib/mixin/mixin.libsonnet: Add dashboard for peer round trip time #13275
etcdutl: Implement migrate –force command #13220
*: Bump release tests to use v3.5.0 #13270
Move storage bootstrap dependencies to storage package #13268
Replace github.com/form3tech-oss/jwt-go with https://github.com/golang-jwt/jwt #13256
CHANGELOG: add missing PR number #13265
*: Cleanup Makefile #13245
Mixin: Support configuring cluster label #13255
etcdserver: configure “expensive” requests duration #13236
client: call .Endpoints() in dial() in client/v3/client.go instead of accessing cfg.Endpoints directly #13203
fix self-signed-cert-validity parameter cannot be specified in the co… #13237
update makefile for test egrep #13214
etcdctl|etcdutl: Invaild args #13246
Introduces Backend interfaces for alarm and auth bucket #13190
Merge #13221
etcdserver: Restructure storage packages to make place for schema #13198
test: Bump release tests to use 3.5.0 #13218
Use method const in package http instead of literal #13197
test: Prevent TestMaintenanceSnapshotWithVersionVersion & TestSaveSnapshotVersion from flaking #13204
server/auth: enable tokenProvider if recoved store enables auth #13172
README: link maintainers role details #13171
Add Lili, Marek & Wilson as etcd reviewers. #13199
Skip empty query value(alarm) from the query parameter #13188
Refactor NewServer function #13194
fix typo #13195
etcdserver: Move Read/Update methods on Meta bucket to one place #13155
workflows: disable ARM64 job for maintenance #13181
docs: fix broken links in README #13180
etcdserver: Extract functions for setting and reading compaction information in backend #13160
*: Upload test junit results #13152
etcdserver: Membership uses MembershipStorage interface instead of directly accessing Backend #13161
etcdserver: Move read/update methods on Auth bucket to one place #13162
etcdserver: Move all get/put/delete on AuthUsers and AuthRoles to buckets module #13163
etcdserver: Move put/read/delete on Alarm bucket to bucket package #13164
etcdserver: Move get/put/delete on Lease bucket to bucket package #13165
CHANGELOG: add 3.6, highlight completion commands #13143
README: explain “MAINTAINERS” #13170
client/pkg/fileutil: use golang.org/x/sys/windows for FileLockEx #13146
client/v3: do not overwrite authTokenBundle on dial #12992
etcdutl: add command to generate shell completion #13142
CHANGELOG-3.5: fix broken link #13158
*: Add missing file licenses and Fix the static analysis to prevent skipping them #13159
etcdserver: Move all named keys to buckets module #13151
fix health endpoint not usable when authentication is enabled #13145
[Version in Snapshot] Preserve etcd version in backend allowing etcdutl to read it from snapshot #13094
scripts: add option to generate junit xml reports #13112
Bump etcd version to 3.5.0 and 3.6.0-pre #13114
etcdserver: Move version monitor logic to separate module #13132
etcdctl: add command to generate shell completion #13133
contrib/mixin/mixin.libsonnet: Adjust gRPC failed requests #13127
[Version in Snapshot] SnapshotResponse includes local etcd version #13073
Update Readme for install etcd client v3 more visibility #13108 #13118
Merge #13113
embed: unlimit the recv msg size of grpc-gateway #13077
CHANGELOG-3.5: Fix a typo, add dates #13098
–log-outputs relative path are not supported when –log-rotate-config-json is defined #13049
Update client_golang dependency to v1.11.0 #13091
tools: rw-heatmaps output format bug fix #13090
Merge #13089
client/v3/maintenance.go: Add Downgrade support to client #13083
CHANGELOG: etcdserver: don’t attempt to grant nil permission to a role #13087
etcdserver: don’t attempt to grant nil permission to a role #13086
etcdserver: don’t activate alarm w/missing AlarmType #13084
tests: Switch regenerating functional/rpcpb proto to scripts/genproto.sh #13071
tools: update mixed read/write perf testing script for a larger range of value size #13082
server: skip unnecessary sprintf which executes proto.Size() #13075
Update of dependencies in go.mod: zap, bbolt, grpc, … #13078
tools: fix small rw-heatmaps python plot script argument parsing bug #13074
updating scripts/genproto.sh #13062
client, raft: Log unhandled errors #13069
client/v3/README.md: Remove warning #13072
integration: Use subtests to defer cluster.Terminate call #13063
Improve output of the ‘functional’ tests #13058
etcdserver: Fix invalid count returned on Range with Limit #13060
tools/benchmark/README.md: Update installation as go get does not work #13027
integration.BeforeTest can be run without leak-detection. #13052
tool: save test parameters in mixed read/write benchmark script. #13045
limit tx lock scope in store.scheduleCompaction #13010
tools: no hardcoded repeat times in rw-benchmark scripts #13042
Expose clientv3.CreateDefaultZapLoggerConfig #13039
tools: update mixed read/write benchmark script #13040
tools: add mixed read-write performance evaluation scripts #13038
add bolt compaction sleep interval #13018
server: set multiple concurrentReadTx instances share one txReadBuffer #12933
CHANGELOG: add missing default setting for grpc gateway flag #13034
CHANGELOG: added missing entry for ClientCertFile #13032
Fix the goroutine leak in StubServer #13024
*: Replace internal testutil AssertEqual function #13017
tests/functional: Set socket-reuse-port and socket-reuse-address #13014
WIP: client,server: Expose reuse-port and reuse-address so they can be configured via a config file #13011
Correct typo #13012
Enhance getRole output when the role is ‘root’. #12979
Fix not retryable error codes from: Unavailable -> FailedPrecondition #12985
applyV2 should apply on backend only once #13000
Represent bucket as object instead of []byte name. #12991
scripts: add missing etcdutl to release pipeline #12997
Simplify client’s logger configuration in tests. #12995
backend: fix buffer range bug #12587
github/workflow: run arm64 tests for all branches startin from 3.5 #12989
use v2 api to update cluster version #12988
Reset ‘seq’ flags between transactions and track per ‘bucket’ #12986
And 64 elided commits (e.g. from squash or rebase merges)
Full changelog

gcp-cloud-controller-manager

CORS-4264: Update the GCP provider to allow users to manage their own firewall rules #94
OCPCLOUD-3094: Merge https://github.com/kubernetes/cloud-provider-gcp:master (2e53900) into main #93
OCPBUGS-62572: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.21 #92
NO-JIRA: Update OWNERS #90
OCPBUGS-61006: Adjust vendoring to use go.work to get rid of the symlink #91
Full changelog

gcp-cluster-api-controllers

OCPBUGS-74915: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0 (1cb204d) into release-4.21 #262
OCPBUGS-66893: fix: Regenerate v1.11.0 beta.0 manifests #255
OCPCLOUD-3103: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0-beta.0 (3b04ea4) into master #253
NO-JIRA: openshift: rename manager binary #252
OCPBUGS-62417: Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.21 #249
NO-JIRA: Update OWNERS #248
Full changelog

gcp-machine-controllers

CORS-4228: GCP revert custom endpoints #134
NO-JIRA: JN-2789: added H200 support #131
OCPCLOUD-3173: Implement Spot instances #133
OCPCLOUD-3089: Bump k8s dependencies to 1.34 #135
OCPBUGS-62520: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.21 #130
NO-JIRA: Update OWNERS #129
no-jira: Machine Api Operator GCP must search for the GCP Custom Endpoints Installer feature gate #128
Full changelog

gcp-pd-csi-driver

OCPBUGS-65627: Check for nil waitOp before examining error code #86
STOR-2582: Rebase gcp-pd-csi-driver to v1.21.6 for OCP 4.21 #85
Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.21 #84
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-74222: [release-4.21] Add VAC manifest to support tests on GCP PD #167
No-JIRA: Update owners #156
CNTRLPLANE-1289: enable readOnlyRootFilesystem #149
NO-JIRA: Fix invalid field names #155
STOR-2592: Bump all deps for 4.21 #154
CORS-4227: Revert gcp custom endpoints #153
NO-JIRA: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.21 #151
CORS-4201: Search for the feature gate for GCP Custom Endpoints #150
Full changelog

gcp-workload-identity-federation-webhook

OCPBUGS-62591: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.21 #10
Full changelog

haproxy-router

OCPBUGS-49908: dynamicallyReplaceEndpoints: Check for idled svc #685
NE-2249: Bump openshift/api to 4.21, and k8s.io to v0.34.1 #692
OCPBUGS-60885: Add option abortonclose to HAProxy configuration template #688
OCPBUGS-62501: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.21 #679
OCPBUGS-62555: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.21 #680
OCPBUGS-49769: Validate the key and cert content before accepting #669
NE-2137: Bump router k8s libraries to 0.33.4 #671
OCPBUGS-60257: fix extra space in haproxy template #676
OCPBUGS-57896: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.20 #660
OCPBUGS-57845: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.20 #659
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #675
OCPBUGS-61224: Revert Prevent startup failures due to name resolution” #672
NO-JIRA: Add davidesalerno to OWNERS #670
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPBUGS-74975: UPSTREAM: 136594: raise kubelet CSI init backoff to cover ~140s DNS delays #2580
OCPBUGS-73910: UPSTREAM: 135340: cbor: bump limits #2565
OCPBUGS-68375: enable InPlace resize test #2539
OCPBUGS-63477: OCPBUGS-60546: UPSTREAM: 135680: test/e2e: increase memory limits in pod resize tests #2533
OCPBUGS-66063: Filter out the nodes created by other tests #2535
OCPBUGS-66354: UPSTREAM: 135623: Fix the preemption test #2534
OCPBUGS-57665: UPSTREAM: <drop>: pin cadvisor to downstream fork #2530
NO-JIRA: Extend HPA test timeout #2528
OCPBUGS-61376: Introduce HPA OTE suite #2526
NO-JIRA: UPSTREAM: <drop>: Remove duplicate VolumeGroupSnapshottableTestSuite from CSISuites #2494
OCPBUGS-61376: move disabled HPA tests from Broken to DedicatedJob #2492
OCPBUGS-65548: Bump to k8s 1.34.2 #2514
OCPBUGS-65755: Update CSI manifests #2522
STOR-2534: UPSTREAM: 135069: Update group snapshot tests to v1beta2 #2508
OCPBUGS-57477: UPSTREAM: 133392: test: add retry to getMetricsFromNode #2401
STOR-2534: UPSTREAM: <drop>: Disable volume group snapshot tests #2507
TRT-2113: Remove annotation framework in favor of environment selectors #2393
OCPBUGS-61377: UPSTREAM: <carry>: Re-enable temporarily disabled kuberc tests #2501
NO-JIRA: enable CBOR tests #2500
OCPBUGS-62270: UPSTREAM: <carry>: Skip CPU resource status for workload-pinned pods #2490
OCPSTRAT-2371: Update to Kubernetes v1.34.1 #2484
OCPBUGS-62608: Updating openshift-enterprise-pod-container image to be consistent with ART for 4.21 #2481
OCPBUGS-60610: UPSTREAM: 134199: Promote regression-issue-74839 to 1.4 #2472
OCPBUGS-43994: UPSTREAM: <carry>: kube-apiserver: wire through isTerminating into handler chain #2477
OCPBUGS-61554: Bump 1.33.5 #2459
OCPBUGS-61754: UPSTREAM: <carry>: Add retries for GetCurrentResourceVersion. #2467
OCPBUGS-61222: Do not remove PVC ClaimRef to fix flaky VAC test #2452
OCPBUGS-58313: apiserver library go bump #2457
NO-JIRA: UPSTREAM: 133682: Increase port-forward broken connection detection client timeout #2428
OCPBUGS-60507: Unrevert bump to v1.33.4 #2441
OCPBUGS-56594: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2443
OCPBUGS-61196: UPSTREAM: 133625: Remove patch/update from ServiceCIDR API conformanc… #2444
OCPBUGS-60946: UPSTREAM: 133425: Fix SELinux label comparison #2417
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

hypershift

OCPBUGS-71133: fix(ingress): clear LoadBalancerSourceRanges when AllowedCIDRBlocks is removed #7433
OCPBUGS-74893: fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment #7618
OCPBUGS-74648: feat(cpo): check components have rolled out before setting available #7604
OCPBUGS-72556: fix(cno): use brackets only for IPv6 in server URL #7452
OCPBUGS-72400: Fix Konflux EC voilation, update deprecated base … #7443
OCPBUGS-70216: fix(Portieris): Fix Portieris by mounting emptyDir to ‘./.trust’ work dir #7422
OCPBUGS-69440: fix(vendor): bump openshift/api dependency to current master [release-4.21] #7398
OCPBUGS-68937: test: remove network-dependent unit tests for image metadata #7390
NO-JIRA: fix(aws): retry delete role for openshift-ingress on failure #7362
CNTRLPLANE-451: Document HyperShift API certificate rotation workflow #7360
CNTRLPLANE-2205: fix(hcco): allow for ARN reuse across components #7366
NO-JIRA: chore(e2e): collapse ingress operator test into existing test cluster #7359
NO-JIRA: docs(contributing): convert mkdocs syntax to GitHub markdown #7358
Revert “CNTRLPLANE-2205: Auto-detect shared role use and enable for e2e” #7365
CNTRLPLANE-2205: Auto-detect shared role use and enable for e2e #7356
GCP-262: feat(gcp): add destroy IAM infrastructure command #7338
OCPBUGS-56701: Filter RC versions and validate against supported OCP versions #7228
CNTRLPLANE-2152: fix(capi): override CAPI images starting 4.21.0 #7340
OCPBUGS-44436: fix(HostedClusterReconciler): check service nodeport address to avoid a panic #7311
CNTRLPLANE-2049: chore(lint): remove unused exclusion rules #7333
NO-JIRA: docs(azure): standardize credential file naming and improve script va… #7213
OCPBUGS-66067: fix(kas): apply LoadBalancerSourceRanges only for LoadBalancer service type #7298
CNTRLPLANE-1814: Add support for setting max expiration duration for KAS service account tokens #7310
NO-JIRA: feat(aws): add shared-role support for IAM operations #7331
CNTRLPLANE-1693: Implement hypershift create oadp-schedule command and some enhancements #7280
GCP-181: add infrastructure create and destroy CLI commands for GCP #7290
GCP-231: feat(api): add GCP Workload Identity Federation types and validation #7285
NO-JIRA: docs(aws): migrate getting-started to STS-based authentication #7321
OCPBUGS-61296: Override CPO for 4.17.20-4.17.43 with 4.17.44 image #7319
CNTRLPLANE-1857: feat(contrib): add cleanzones-azure tool for orphaned DNS cleanup #7312
CNTRLPLANE-2152: chore: override capi images #7320
NO-JIRA: Update expected digest for busybox:latest in TestGetDigest #7322
NO-JIRA: feat(owners): add automated platform labeling #7296
OCPBUGS-63717: Fix flaky EnsureGlobalPullSecret test race condition #7294
CNTRLPLANE-1262: build(tools): upgrade golangci-lint to v2.6.2 #7268
NO-ISSUE: test(install): validate DynamicResourceAllocation field exists in CRD #7277
CNTRLPLANE-1772: feat(audit): add persistent audit log feature with automatic snapshots #7241
NO-JIRA: chore: Add more IBM codeowner reviewers #6448
CNTRLPLANE-1956: add logic to check control-plane to data-plane connectivity #7260
NO-JIRA: build(deps): bump golang.org/x/crypto from 0.37.0/0.41.0 to 0.45.0 #7292
NO-JIRA: fix(build): replace sysctl with getconf in Makefile #7282
CNTRLPLANE-1387: Remove redundant RHCOSImage flag from Azure CLI #7261
CNTRLPLANE-2050: feat(azure): update default VM size to Standard_D4s_v5 #7293
CNTRLPLANE-1551: feat(nodepool): add HAProxy image override via annotation #7187
CNTRLPLANE-1015: docs: add resource-based control plane autoscaling guide #7275
GCP-196: Implement GCPPrivateServiceObserver controller #7207
CNTRLPLANE-1893: Create an ARO HCP override test #7206
CNTRLPLANE-1934: Add devguyio to core-approvers #7238
NO-JIRA: test(e2e): extend timeouts for Azure and KubeVirt platforms #7288
GCP-232: refactor(rbac): apply extension-apiserver-authentication rolebinding unconditionally #7259
GCP-251: feat(install): Add GCP provider support for external-dns with Workload Identity #7274
CNTRLPLANE-1661: Add endpointPublishingStrategy conf for ingress controller #6974
CNTRLPLANE-1692: feat: add disaster recovery restore command #7252
GCP-238: add GCP Platform support to private-router NetworkPolicy #7254
OCPBUGS-63353: Fix ValidAWSIdentityProvider status when KAS is unavailable #7151
OCPBUGS-65818: fix(cli): align version validation with controller logic #7266
OCPBUGS-65702: test: Fix control plane components rollout failure when NetworkType is not OVNKubernetes #7243
OCPBUGS-65701: test: fix ovnKubernetesConfig forbidden when networkType is not OVNKubernetes #7244
CNTRLPLANE-1015: Add support for control plane autoscaling in request serving architecture #6102
CNTRLPLANE-377: Add NodePool minor version compatibility check to HO #5931
GCP-230: Add gcp-reviewers to OWNERS files #7217
NO-JIRA: Add claude cluster debugging skill #7249
GCP-179: feat(gcp): add service account creation and IAM bindings to IAM infra #7231
AROSLSRE-218: allow hypershift install cmd to accept env vars to be passed to the hypershift operator deployment #7223
GCP-205: feat(gcp): ensure restricted PodSecurity compliance for control plane components #7219
OCPBUGS-65617: fix(conformance): set priorityClass on global-pull-secret-syncer DaemonSet #7236
OCPBUGS-64628: add hypershift-no-cgo to the latest operator conta… #7222
OCPBUGS-62226: fix: Use annotations for AWS and Azure load balancer health probe configuration #6927
OCPBUGS-60185: Fix MIRRORED_RELEASE_IMAGE flapping with mirror availability cache #7184
CNTRLPLANE-1398, OCPBUGS-59649: feat(globalps): security enhancements on GlobalPullSecret feature #6745
CNTRLPLANE-1924: Update Konflux Tekton task digests and fix pipeline triggers #7225
OCPBUGS-64792: fix(api): Check imageType exists before accessing in CEL validation #7205
OCPBUGS-61299: fix(shared-vpc): vpc share doesn’t work with public-only when create hypershift aws cluster #6766
NO-JIRA: docs: update Azure self-managed cluster marketplace image documentation #7156
GCP-179: feat(cmd/infra): add GCP IAM infrastructure creation command #7209
OCPBUGS-33372: fix(azure): make Azure SDK clients cloud-agnostic #7144
OCPBUGS-62949: fix(resources): prevent indefinite blocking on cloud resource cleanup during deletion #7024
GCP-174: configure router service with Internal Load Balancer for PSC support #7183
CNTRLPLANE-1892: test(e2e-v2): add ginkgo-based v2 test suite #7192
MULTIARCH-5629: Added support to pick s390x boot image for s390x Nodepool for type kubevirt #7058
NO-JIRA: docs(azure): add self-managed Azure setup without external DNS #7191
OCPQE-29333: Add hypershift-ci-python Image #5851
OCPBUGS-64763: MCE 2.11 konflux pipeline #7189
GCP-152: feat:(gcp)Add basic GCP platform recognition support #7137
OCPBUGS-64817: Update 4.19 control-plane-operator image overrides #7196
CNTRLPLANE-1850: test(e2e): add N-3 and N-4 release image flags #7159
CORENET-6484: Restart ovnkube-control-plane pods when restart-date annotation is set #7100
OCPBUGS-63613: Fix –image-generation flag being ignored in Azure cluster creation #7108
OCPBUGS-56444: feat: Promote ExternalOIDCWithUIDAndExtraClaimMappings feature to GA for Hypershift #6025
OCPBUGS-60457: test(e2e): Revert “Workaround for external oidc tests to bypass the teardown” #6979
CNTRLPLANE-408: feat(api) add imagetype to AWS nodepool api #6746
GCP-114: add API types and CRD infrastructure for GCP Private Service Connect (PSC) #7131
OCPBUGS-63594: fix(konnectivity): bind health server to localhost to prevent external exposure #7106
GCP-120: feat(cli): add support for GCP cluster creation and destruction #7146
OCPBUGS-38358: Fix nil pointer dereference in AWS CloudProviderConfig #7129
OCPBUGS-60637: feat(cpo): enable tests for UID security context in storage components #6934
OCPBUGS-51136: revert scc annotation for components in kube-system #7130
OCPBUGS-62060: fix(cmd/destory/aws): detach managed policies before deleting inline policies #7033
NO-JIRA: fix(ai): fix plugin marketplace name #7127
CNTRLPLANE-1756: fix(ai-skill): prevent security warning in git-commit-format skill #7125
CNTRLPLANE-1644: Request serving topology end to end test #7031
OCPBUGS-62496: fix: delete old profile during replacement #7089
CNTRLPLANE-1650: chore(tekton): consolidate main branch pipelines #7053
OCPBUGS-63639: add support for control-plane-operator hotfix builds #7119
CNTRLPLANE-1687: feat(e2e): add support for azure-workload-identities-file flag #7101
CNTRLPLANE-1681: chore(deps): update mvdan.cc/unparam digest to 0df0534 #7049
OCPBUGS-61296: fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7087
OCPBUGS-51136: specify SCC annotation for pods in data plane #7091
CNTRLPLANE-1681: chore(deps): update sigs.k8s.io/cluster-api-provider-openstack/orc digest to e4f56a2 #7096
OCPBUGS-63205: fix(e2e): correct readOnlyRootFilesystem test logic #7076
NO-JIRA: docs(ai): add reference to AGENTS.md for AI agent guidance #7085
OCPBUGS-61941: fix(ingress): add LoadBalancerSourceRanges support for external router service #6859
OCPBUGS-63175: remove NTO Service and ServiceMonitor #7086
NO-JIRA: fix(ibm): Update version information for Red Hat OpenShift on IBM Cloud #6776
OCPBUGS-62871: fix(e2e): refactor createHostedCluster to remove deps between option settings #6997
CNTRLPLANE-475: Enable Azure NodePool API happy path to pick image #6904
NO-JIRA: Add Claude Code skills and Azure unit tests #7074
NO-JIRA: refactor(ignitionserver): move lookupMappedImage to shared util package #6778
GCP-97: Add initial GCP platform support to Hosted Cluster API #6960
OCPBUGS-63130: fix: routes are not used in case of IBM Cloud #7054
OCPBUGS-63153: Revert “fix(capi-provider): wait for infrastructure resource before startup” #7057
CNTRLPLANE-1550, CNTRLPLANE-1552: Implement environment variable override for shared ingress HAProxy image #6989
OCPBUGS-63049: Make the hypershift CLI binary FIPS-compliant #7032
OCPBUGS-61164: Add per-pod crash toleration #6958
OCPBUGS-60472: fix kubevirt, use 100.66.0.0/16 for join subnet #6978
OCPBUGS-36389: Omit metadata for telemetry remote write and ensure _id label #6208
OCPBUGS-63172: control-plane-operator/…/ingress-operator/deployment: Declare a metrics port #7052
OCPBUGS-63215: fix: hosted cluster CRD compatibility with ocp 4.15 #7069
CNTRLPLANE-1673: feat(claude): add /test-tag-pipeline command #7062
NO-JIRA: Configure team marketplace for openshift-eng/ai-helpers plugins #7068
OCPBUGS-63194: fix(konflux): correct ADDITIONAL_BASE_IMAGES parameter typo in tag pipeline #7064
OCPBUGS-61881: Red Hat Konflux update hypershift-gomaxprocs-webhook #7063
OCPBUGS-63194: fix(konflux): fix tag pipeline EC failures #7060
OCPBUGS-55751: Fix Konflux tag pipeline template variable substitution #6910
CNTRLPLANE-1620: feat(gomaxprocs-webhook): introduce admission webhook to auto-set GOMAXPROCS #6994
OCPBUGS-63148: bump Konflux build images #7055
CNTRLPLANE-1615: Add repo metrics tool for tracking AI-assisted commits #6983
CNTRLPLANE-980: feat(api): Validation for hc.status.configuration.authentication status #6883
OCPBUGS-61829: resolve initContainer permission issue after node reboot #6990
NO-JIRA: test: update external-oidc e2e tests to dynamically determine tests to run #6924
NO-JIRA: migrate renovate config #7029
CNTRLPLANE-1643: implement multi-branch strategy with security-focused release management #7023
CNTRLPLANE-1641: update Tekton tasks to latest trusted versions #6998
OCPBUGS-62172: Add OpenStack node drivers to allowed non-read-only root filesystem containers #6946
OCPBUGS-62863: feat(cmd): collect ServiceMonitor and PodMonitor resources in dump #6970
NO-JIRA: chore(ai): add ability for jira-solve to save a plan spec first #6995
CNTRLPLANE-1493: Add Claude command for automated Konflux task updates #6921
CNTRLPLANE-1484: Expose cluster autoscaler metrics in HCP #6902
CNTRLPLANE-1582: Prevent azure cluster destroy command from deleting managed/main resource group #6956
CNTRLPLANE-1543: fix(aws): use clean image for placeholder nodes #6935
CNTRLPLANE-1468: feat(install): add command line argument for ImagePullPolicy configuration #6875
NO-JIRA: feat(claude): add e2e-analyze command for CI failure analysis #6737
CNTRLPLANE-1374: feat(azure): add setup scripts for self-managed Azure hosted clusters #6752
NO-JIRA: chore(ai): configure all agents to inherit model configuration #6906
CNTRLPLANE-1332: docs(azure): add self-managed Azure HyperShift overview guide #6948
CNTRLPLANE-1432: Make PSA test conditional on OpenShiftPodSecurityAdmission feature gate #6923
CNTRLPLANE-1581: feat(azure): relax API to make externalDNS optional for self-managed clusters #6951
OCPBUGS-62446: fix(hcco): add retry mechanism for HCP retrieval to handle transient connectivity issues #6918
NO-JIRA: docs(jira-solve): require godoc comments and unit tests for new functions #6957
OCPBUGS-60637: feat(cpo): add UID security context to CSO deployment #6786
OCPBUGS-62407: chore(build): update container images to 4.21 #6936
NO-JIRA: Add openstack-reviewers, openstack-approvers #6911
GCP-96: add GCPPlatform feature gate #6929
CNTRLPLANE-1332: docs(readme): correct spelling mistake #6943
CNTRLPLANE-1332: docs(azure): add self-managed cluster setup documentation #6808
OCPBUGS-61245: Fix driver-config ConfigMap content flapping due to random ordering #6907
CNTRLPLANE-1545: docs(commands): improve jira-solve command with logical commit organization #6937
NO-JIRA: chore(ci): update Konflux Tekton tasks to latest trusted versions #6928
OCPBUGS-62328: Add missing svc-kubeconfig mount to CAPO Deployment #6909
OCPBUGS-62324: Fix test-e2e annotations flag parsing #6908
AUTOSCALE-322: fix karpenter token secret leak #6790
CNTRLPLANE-980: feat(api): add hc.status.configuration.authentication status field #6261
NO-JIRA: fix(e2e): extend ValidateHostedClusterConditions timeout #6913
KFLUXSPRT-5246: update base images from RHEL9 ELS to UBI9 minimal 9.4 #6916
OCPBUGS-62172: Add Manila, Cinder to list of pods allowed readOnlyRootFileSystem=false #6885
NO-JIRA: fix(test): support external oidc settings on non-aws platform #6754
NO-JIRA: chore(ai): ensure jira-solve run make pre-commit #6901
NO-JIRA: chore(ai): let jira-solve show the executed command in the PR desc #6898
OCPBUGS-61936: fix(capi-provider): wait for infrastructure resource before startup #6860
OCPBUGS-62224: fix(e2e): add stabilization wait in GlobalPullSecret test to reduce flakiness #6892
CNTRLPLANE-1478: chore: add AI directory paths to OWNERS file #6884
NO-JIRA: chore(ai): add claude slash command jira solve #6882
OCPBUGS-62099: make TestAutoscalingBalancing more robust #6877
OCPBUGS-61850: fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races #6843
NO-JIRA: ci(dev-cluster): Fix dev token secret annotation #6876
OCPBUGS-62056: test(e2e): fix flaky EnsureOAPIMountsTrustBundle with retry logic #6872
OCPBUGS-62128: hcco: sync watched resource types to availability-prober #6879
CNTRLPLANE-1331: Get self-managed Azure working again #6703
OCPBUGS-59885: [e2e][KubeVirt] Ignore KubeVirtNodesLiveMigratable Condition on HC #6826
CNTRLPLANE-1455: docs(contribute): consolidate contributing guide; refresh PR template; add landing page #6866
OCPBUGS-61776: fix(ignition-server): Don’t delete user-managed cert secrets #6836
OCPBUGS-61894: Enable VolumeAttributesClass runtime config #6855
CNTRLPLANE-1452: docs(ci): add documentation for checking CI status #6849
OCPBUGS-61438: fix(security): harden konnectivity-agent DaemonSet security context #6835
OCPBUGS-61828: refactor FeatureGate status check #6862
OCPBUGS-61329: skip EnsureReadOnlyRootFilesystemTmpDirMount check for kubevirt HCP pods #6842
OCPBUGS-61825: test(e2e,kubevirt): skip break-glass-credentials on kubevirt #6856
OCPBUGS-61862: ci: Remove the MCE 2.10 konflux pipeline #6848
OCPBUGS-61719: fix: propagate AWSLoadBalancerTargetNodesAnnotation to… #6823
OCPBUGS-61334: fix(kas): Set correct container port in postStart handler, 2 #6824
OCPBUGS-61177: ci: use common MCE konflux pipeline #6743
NO-JIRA: Update Branch Tasks Docs #6840
OCPBUGS-56249: fix lint-fix Makefile rule #6151
OCPBUGS-61048: test(e2e): add autoscaler deployment verification to autoscaling test #6779
OCPBUGS-61687: fix(capi-provider): use single replica deployment for aws and azure #6807
fix(disable-psa): disable PSA check for 4.20 #6831
OCPBUGS-61482: fix(proxy): ensure URLs have scheme before proxy resolution #6789
OCPBUGS-61587: fix(oauth): oauth-openshift deployment should be HA #6802
CNTRLPLANE-1277: Enable TestCreateClusterCustomConfig for Azure #6706
Revert “OCPBUGS-61334: fix(kas): Set correct container port in postStart handler” #6805
OCPBUGS-60185: resolve MIRRORED_RELEASE_IMAGE flapping #6751
OCPBUGS-61499: fix(control-plane): remove resource limits from kube-controller-manager #6785
CNTRLPLANE-1364: feat: enable global pull secret for AWS #6736
OCPBUGS-61334: fix(kas): Set correct container port in postStart handler #6773
NO-JIRA: fix karpenter metric validation in e2e #6714
NO-JIRA: chore(AI): add claude agents for different SMEs #6787
OCPBUGS-61329: test(e2e): skip kubevirt pods in EnsureReadOnlyRootFilesystem #6770
OCPBUGS-61462: temporarily use v4.20 catalogs #6782
NO-JIRA: add permissions to role policy #6783
CNTRLPLANE-1385: docs: add MCP setup guide for Cursor with sample config #6775
CNTRLPLANE-1383: docs(aro-e2e): add ARO HCP e2e artifacts navigation guide and Cursor rule #6774
OCPBUGS-61218: test(e2e): add control plane component rollout validation to upgrade test #6767
CNTRLPLANE-203: feat(sharedingress): add Azure Public IP tagging support for router service #6730
OCPBUGS-61219: fix: cleanup old PKI operator deployment during upgrades #6758
OCPBUGS-61282: rename CCM deployments to align with 4.19 #6757
NO-JIRA: fix(api): enhance API NodePool’s API docs #6753
NO-JIRA: chore(tests): validate conditions after executing tests #6738
OCPBUGS-60376: fix token rotation causing Karpenter to stop working #6561
NO-JIRA: contrib: add utility for cleaning roles #5945
CNTRLPLANE-267: Restructure the OWNERS usage in the whole repo #5784
AUTOSCALE-332: allow karpenter-operator to support rhobs monitoring #6704
CNTRLPLANE-1370: feat(supportedversion): add OCP 4.21 support; update e2e constants and tests #6739
NO-JIRA: docs(create-jira-items): document OCPBUGS issue creation and default versions #6741
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-cloud-controller-manager

OCPCLOUD-3095: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.34 (64b1744) into main #82
OCPBUGS-62342: Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 4.21 #86
NO-JIRA: Update OWNERS #85
Full changelog

ibm-vpc-block-csi-driver

STOR-2589: Rebase to upstream v5.2.19 for OCP 4.21 #113
Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.21 #112
Full changelog

ibm-vpc-block-csi-driver-operator

No-JIRA: Update owners #158
CNTRLPLANE-1287: enable readOnlyRootFilesystem #155
STOR-2592: Bump all deps for 4.21 #157
OCPBUGS-62375: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.21 #156
Full changelog

ibmcloud-cluster-api-controllers

OCPCLOUD-3099: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.12.0 (2c7ff37) into main #127
NO-JIRA: openshift: rename manager binary #132
OCPBUGS-62486: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.21 #130
NO-JIRA: Update OWNERS #126
Full changelog

ibmcloud-machine-controllers

OCPCLOUD-3090: Bump k8s dependencies to 1.34 #72
OCPBUGS-62491: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.21 #71
NO-JIRA: Update OWNERS #70
Full changelog

insights-operator

OCPBUGS-74479: set Progressing condition on cluster update #1217
OCPBUGS-74233: [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1214
OCPBUGS-63655: add missing nil checks for DataGather CR #1192
NO-JIRA: add permissions to list nodefeatures #1187
CCXDEV-15393: Refactor network anonymization #1149
OCPBUGS-64936: update DataGather status after job failure #1178
NO-JIRA: add AGENTS.md #1180
CCXDEV-15601: Refactor wasDataProcessed function #1169
NO-JIRA: update go version to 1.24.0 #1176
CCXDEV-15544: nodefeature gathering #1173
OCPBUGS-63747: [bugfix] The archive’s records may include files whose names are out of bounds #1168
OCPBUGS-63396: Add filtering to add other possible pod status to QEMU gatherer #1167
NO-JIRA: remove trailing commas from ConfigMap example #1166
OCPBUGS-63015: QEMU logs are not gathered if there are pending status virt-launcher pods #1164
NO-JIRA: add CLAUDE.md #1162
CCXDEV-15577: retry mechanism for network error #1161
NO-JIRA: remove CRD manifests #1156
CCXDEV-15551: Decouple CRD storage specs #1157
OCPBUGS-60870: The Gather Job did not check the current configuration before running #1154
OCPBUGS-61893: set extractor as default container #1141
OCPBUGS-62215: operator is not set as degraded when failed #1151
And 9 elided commits (e.g. from squash or rebase merges)
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Ocp421 new tests #55
Add runtime sample for JBoss EAP 8.1 #56
OCPBUGS-62351: Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 #53
OCPBUGS-62433: Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 #54
Full changelog

ironic

OCPBUGS-65969: Set the tls cacert path to writable mount when the IRONIC_CACERT_FILE is unset #728
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #745
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #743
OKD-310: Minor cleanup #741
NO-ISSUE: Remove rootwrap installation #744
METAL-1695: OKD: install Ironic from the OpenShift fork #739
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #732
METAL-1659: Run EFI build loop based on actual arch #737
METAL-1685: Split setup for OKD #735
METAL-1659: Multi arch efi #723
METAL-1104: Guard against empty BMC CA volume #726
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #719
OKD-304: Fix python dependencies for OKD #718
OKD-306: Adding the missing httpd-ironic-proxy.conf.j2 in OKD #729
METAL-1598: Update ipe to latest #725
METAL-1569: Use custom data directory to store the master iso images on ironic-conductor node #722
METAL-1105: support default bmc verify ca #721
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #717
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #714
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #709
NO-ISSUE: Add project changes section only if we change something #712
NO-ISSUE: Documented prerequisites for building ironic-image locally #710
METAL-1597: Fix update workflow #708
NO-ISSUE: Update ironic and sushy commit #704
METAL-1597: Install curl-minimal in update workflow #706
METAL-1597: Automatically update requirements.cachito #705
METAL-1599: Allow additional PXE file mount point #702
OCPBUGS-62443: Updating ironic-container image to be consistent with ART for 4.21 #699
OCPBUGS-62201: Bump ironic to include idrac10 fix #697
METAL-1446, METAL-1566, METAL-1577: Sync Ironic and Sushy #695
METAL-1574: Remove temporary dependencies from source #692
OKD-283: fixing OKD ironic-image errors and metal3 pod crashes (centos9) #688
OCPBUGS-61459: sync with Ironic changes, including the local RPC revert #687
METAL-1528: Use custom directories in the runironic-proxy script #679
OCPBUGS-60455: set [json_rpc]port unconditionally #684
Full changelog

ironic-agent

NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #220
METAL-1695: OKD: install IPA from the OpenShift fork #222
OCPBUGS-65961: Filter out more USB network devices #217
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #218
METAL-1685: Split setup for OKD #219
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #213
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #209
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #208
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #205
METAL-1597: Fix update workflow #204
METAL-1597: Install curl-minimal in update workflow #202
METAL-1597: Automatically update requirements.cachito #201
OKD-297: Fix broken OKD4.20 ironic-agent-image #200
OKD-295: Fix broken OKD ironic-agent-image #199
OCPBUGS-62329: Updating ironic-agent-container image to be consistent with ART for 4.21 #197
METAL-1574: Update deps pkgs versions #196
Full changelog

ironic-machine-os-downloader

OCPBUGS-62357: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.21 #107
Full changelog

ironic-static-ip-manager

OCPBUGS-62511: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.21 #54
Full changelog

keepalived-ipfailover

OCPBUGS-67357: Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.22 #218
OCPBUGS-62497: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.21 #215
Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.21 #214
Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.21 #213
Full changelog

kube-metrics-server

OCPBUGS-62397: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.21 #47
Full changelog

kube-rbac-proxy

OCPBUGS-62563: Updating kube-rbac-proxy-container image to be consistent with ART for 4.21 #126
Full changelog

kube-state-metrics

OCPBUGS-71205: fix: only close existing channels #127
OCPBUGS-62356: Updating kube-state-metrics-container image to be consistent with ART for 4.21 #125
NO-ISSUE: [bot] Bump openshift/kube-state-metrics to v2.17.0 #124
Full changelog

kube-storage-version-migrator

OCPBUGS-62566: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.21 #234
Full changelog

kubevirt-cloud-controller-manager

Update OWNERS #58
OCPBUGS-62592: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART for 4.21 #56
Full changelog

kubevirt-csi-driver

OCPBUGS-62564: Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.21 #70
Full changelog

libvirt-machine-controllers

OCPBUGS-63352: Updating ose-libvirt-machine-controllers-container image to be consistent with ART for 4.21 #291
Full changelog

machine-api-operator

SPLAT-2573: Update AWS dedicated hook logic with new API changes #1444
OCPBUGS-66244: default Azure to marketplace image #1441
OCPCLOUD-3268: Update cluster-api to v1.11.3 #1438
CORS-4280: AWS: Add throughput validation for gp3 volumes #1430
METAL-1655: add port for Ironic Prometheus Exporter to NetworkPolicy #1437
SPLAT-2167: Added logic to webhook for AWS dedicated host support #1436
Revert “SPLAT-2167: Added dedicated hosts support for AWS” #1434
OCPBUGS-59627: Adding E2E test for multi-subnet featureGate #1425
SPLAT-2167: Added dedicated hosts support for AWS #1419
OCPCLOUD-3173: Validating webhooks for GCP ProvisioningModel #1428
OCPCLOUD-3080: Bump k8s dependencies to 1.34 #1431
OCPBUGS-63738: Revert “SPLAT-2526: Refactor openshift-tests-ext” #1426
SPLAT-2526: Refactor openshift-tests-ext #1423
OCPCLOUD-3072: Support AMD SEV-SNP on AWS #1420
OCPBUGS-62333: Updating ose-machine-api-operator-container image to be consistent with ART for 4.21 #1421
OCPBUGS-61728: Fixed multi nic e2e to wait for node removal after machineset tests #1417
OCPBUGS-61728: Adjusted machine e2e tests to wait for nodes to clean up #1415
NO-JIRA: Update OWNERS_ALIASES #1414
OCPBUGS-60901: bump openshift/api #1407
Full changelog

machine-config-operator

OCPBUGS-73805: Prevent unnecessary systemd unit disable #5648
MCO-2017: Backport OSImageStreams to 4.21 #5515
OCPBUGS-76356: crio: disable short_name_mode until we introduce ctrcfg api for it #5636
OCPBUGS-76359: Update AMI script and list #5639
OCPBUGS-76271: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5624
AGENT-1431: Backport InternalReleaseImage support #5610
OCPBUGS-74145: enable nodeip-configuration for platform external #5581
OCPBUGS-74542: Stale operator metrics Service and ServiceMonitor resources need to be deleted #5600
OCPBUGS-74431: CVE-2025-58183 ose-machine-config-operator-container: Unbounded allocation when parsing GNU sparse map [openshift-4.21] #5596
OCPBUGS-73819: Set NodeDegraded MCN condition when node state annotation is set to Degraded #5554
OCPBUGS-74103: Fix up bootstrap-e2e #5568
OCPBUGS-73872: CPMS boot image config should not override standard MachineSet configuration #5559
OCPBUGS-74102: Fixes the issue in the test TestKubeletConfigMaxPods when AutoNodeSizing is enabled by default #5567
OCPBUGS-71196: Enable existing units without content #5561
OCPBUGS-73344: Fix timeout during configMap cleanup #5544
OCPBUGS-72398: Move operator metrics into the controller #5536
OCPNODE-3973: Default CPU/Memory changes to Workers - AutoSizingReserved #5530
OCPBUGS-69878: clusteroperator/machine-config blips Degraded=True in CI jobs #5510
OCPBUGS-69965: Skip boot image updates if arch annotation is not found #5513
OCPBUGS-68377: MCO degraded when an empty pull-secret is configured #5499
OCPBUGS-68403: MCP is not correctly degraded when a pivotError happens #5502
OCPBUGS-67318: Revert “Default Enablement of Auto Sizing Reserved in OpenShift 4.21” #5493
OCPBUGS-66403: Remove log exposing kubeconfig #5469
OCPBUGS-65544: add a relevant svc to the crio ports and missing contatier port to the machineconfig server daemonset #5463
OCPBUGS-63131: Fix cleanup in TestInstallRPMAndCheckMCDMetrics to decrease risk of test failures due to interference #5471
OCPBUGS-65731: Skip Azure Confidential Compute Clusters for boot image updates #5432
OCPBUGS-64825: Add MachineConfigNode informer to trigger MCP machine count syncs #5422
“NO-ISSUE: Add rhel-10-coreos{,-extensions} to image-references” #5448
OCPBUGS-59925: Fix keepalived SIGTERM handling #5403
OCPBUGS-66314: Add hostIP 127.0.0.1 to machine-config-daemon port 8798 #5456
NO-ISSUE: fix-up for ami collection script #5464
MCO-1999: align extended tests code with private repo. Pointers and pe… #5453
MCO-1961: OSImageStream follow up #5458
AGENT-1326: Add InternalReleaseImage controller #5452
OCPBUGS-65959: Revert “OCPBUGS-50492: Add kube_rbac_proxy service” #5445
MCO-1961: Add the OSImageStream Controller #5457
MCO-1930, MCO-1967: migrate ControlPlaneMachineset tests #5391
OCPNODE-3719: Default Enablement of Auto Sizing Reserved in OpenShift 4.21 #5390
MCO-1956: Osimagestream fetching #5442
OKD-294: Migrate runtime from runc to crun on an upgrade for OKD #5389
OPNET-678: Allow disabling internal DNS records #5427
OCPBUGS-62232: Set -fin timeouts in HAProxy config #5310
NO-JIRA: Update ShiftStack OWNERS #5431
MCO-1956: Stream image utils #5409
MCO-1529, MCO-1530: Implement install time support for Image Mode #5318
MCO-1976: [Dev] Fix RHEL9-specific MCD Logic for RHEL10/CentOS10 Compatibility #5415
OCPBUGS-65544: Add kube_rbac_proxy service #5378
MCO-1956: Extract image utils from build package #5400
OCPNODE-3874: Remove the dead code of setting the operator status for cgroupv1 based clusters #5399
MCO-1714: MCO-1715: MCO-1716: MCO-1717: MCO-1718: Add regression tests for the ImageModeStatusReporting FeatureGate #5363
OCPBUGS-56648: fixes systemd unit creation for empty units #5086
OCPBUGS-65726: Remove –mount directives #5423
MCO-1940: Enhance MCS layered image serving safety during node scale-up by requiring node validation #5382
OCPBUGS-61114: Fix ImageBuildDegraded Status updates #5279
OCPBUGS-57364: Fix IP address for default AWS DNS resolver #5402
MCO-1966: Filter extended tests by platform #5388
OCPBUGS-63006: Ensure MOSC updates rolls out new image built to nodes #5383
OCPBUGS-63593: Need to persist NIC device names on RHEL9 #5406
CORS-4170: Fix IP address for default Azure DNS resolver #5401
OCPBUGS-51041: Update nodeip-configuration.service service files to use SyslogIdentifier #4867
OCPBUGS-59543: Watch openshift-config CMs #5181
MCO-1911: Use the right naming in migrated test cases #5386
OCPBUGS-60157: ensure that images are rebuilt if they do not exist #5268
OCPBUGS-63734: Fix error reporting on OS image failure #5385
NO-ISSUE: Split extended directory #5394
MCO-1933: Pick up openshift/kubernetes 1.34 rebase updates #5380
MCO-1886: add the missing service to the expose ports 22623 and 22624 #5371
MCO-1228: MCO-1728: Calculate MCP updated machine counts using MCN properties #5141
MCO-1911: Migrate the mco_password test suite from the private repository to the MCO repository #5374
MCO-1898: MCS serves image-aware first-boot config #5357
OCPBUGS-62714: Temporary policy.json for PIS rpm-ostree rebasing #5345
MCO-1807: Add CPMS support in the MCO’s boot image controller #5332
OCPNODE-3806: Do not change default PSI setting in MCO #5343
OCPBUGS-62925: RHEL10 RT kernel packages filtering #5362
NO-ISSUE: Add AMI update automation script #5351
OCPBUGS-62376: Updating ose-machine-config-operator-container image to be consistent with ART for 4.21 #5316
OCPBUGS-52302: MCO-1713: Update MachineConfigNode resource to include on cluster image mode fields #5282
OCPBUGS-54682: Fix - NetworkManager restart or crash renders br-ex unusable #5304
OCPNODE-3747: Disable Swap mode in Kubelet and enable drop-in directory #5294
OCPEDGE-2188: embed fencing validator into TNF MCO #5285
NO-JIRA: shiftstack: Update OWNERS #5334
OCPBUGS-62510: Skip rpm-ostree local rebase if no PIS #5333
OCPBUGS-62493: Only fire OSImageURLOverridden and set metrics on changes #5319
MCO-1844: Remove MissingMachineConfig Alert #5261
MCO-1685: Add mco-sanitize utility main logic #5303
OCPBUGS-59968: Cert Controller should live fetch SAN IPs during cert rotation #5245
OCPBUGS-62341: Ensure the node passed to RunCordonOrUncordon comes from the latest updated state #5305
OCPBUGS-60805: configure-ovs: work around a Cisco switch issue #5274
MCO-408: Add OpenShift-native access to change logLevel for MachineConfigOperator components #5291
OCPBUGS-42303: Networking: reset ovn-remote config and allow ovnkube controller to s… #5123
MCO-1685: Add mco-sanitize file processing logic #5298
MCO-1685: Add mco-sanitize redactor #5295
OCPBUGS-58198: Fix MCP updated machine count for image mode disabling case #5271
MCO-1673: Add Component Readiness tests for Azure boot image updates #5257
MCO-1840: Remove MCN CRD cleanup cronjob #5234
OCPBUGS-60120: Add nil/null checks to image registry secret decode #5253
NO-ISSUE: Add delays to reduce TestOSBuildController failures #5239
MCO-1808: MCO-1790: Implement Azure boot image updates #5202
OCPBUGS-61695: Override NMState service definition #5284
OCPBUGS-60161: Add mcd_local_unsupported_packages recording rule #5242
CORS-4170: Extending in-cluster DNS support to Azure #5216
OCPBUGS-60537: Machine-config controller should actively manage cordon while draining #5276
OCPBUGS-56558: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5259
Full changelog

machine-image-customization-controller

METAL-1564: Use available images #147
OCPBUGS-62505: Updating ose-image-customization-controller-container image to be consistent with ART for 4.21 #148
Full changelog

machine-os-images

OCPBUGS-65971: Use the writable mount /shared/html/images to store coreos iso images #72
OCPBUGS-61477: Write sha checksum file to /coreos #71
OCPBUGS-61477: Provide SHA checksum for aarch64 iso #70
OCPBUGS-61477: Acquire aarch64 ISO at runtime #67
OCPBUGS-56049: Force rebuild for OCP 4.21 #66
OCPBUGS-62596: Updating ose-machine-os-images-container image to be consistent with ART for 4.21 #69
Full changelog

metallb-frr

OCPBUGS-56173: Align to upstream 02-10 #107
Dockerfile: unpin FRR rpm #110
OCPBUGS-62371: Bump the root image version #109
Full changelog

monitoring-plugin

OCPBUGS-74909: fix: update vulnerable dependencies #751
NO-JIRA: [release-4.21] fix: remove unnecessary package.lock #729
OCPBUGS-71223: fix: update qs vulnerable dependency #718
OU-1145: remove random multiplication #703
NO-JIRA: [release-4.21] automation - dev user scenarios fixes with namespace level changes #698
OCPBUGS-67297: [release-4.21] fix: upgrade node-forge vulnerable dependency #685
NO-JIRA: [release-4.21] - automation - monitoring stabilization presubmit #687
OU-1130: Add missing commits to 4.21 #682
Full changelog

multus-admission-controller

CORENET-6497: Upstream sync for kube rebase 1.34 #112
OCPBUGS-62412: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.21 #110
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-66109: Updating multus-cni-container image to be consistent with ART for 4.21 #272
CORENET-6354: Downstream merge for kube rebase 1.34.1 #271
Full changelog

multus-networkpolicy

CORENET-6496: [multus-networkpolicy]Downstream merge kube rebase 1.34.1 #79
OCPBUGS-45980: Downstream merge 2025-10-29 #76
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

multus-route-override-cni

CORENET-6357: update route-override-cni go version to 1.24 #63
Full changelog

multus-whereabouts-ipam-cni

CORENET-6478: [DownstreamMerge] of Whereabouts repo from upstream #391
Full changelog

must-gather

OCPBUGS-64781: Add olm v1 resources to default must-gather #512
STOR-2692: Collect volume group snapshot objects #510
STOR-2691: Collect VolumeAttributesClasses in must-gather #509
OSSM-10530: add Istio/Gateway API gather scripts #503
OCPBUGS-62551: Updating ose-must-gather-container image to be consistent with ART for 4.21 #507
Full changelog

network-interface-bond-cni

OCPBUGS-66239: disable DependaBot downstream #105
OCPBUGS-62415: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.21 #97
Full changelog

network-metrics-daemon

CORENET-6357: Bump network-metrics-daemon to kube 1.34 #139
OCPBUGS-62414: Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.21 #137
Full changelog

network-tools

NO-JIRA:Add three new members #169
NO-JIRA: Fix jira ID for new members #164
OCPBUGS-62553: Updating ose-network-tools-container image to be consistent with ART for 4.21 #162
NO-JIRA:Add two new team members #163
NO-JIRA: Add Marty P to bug tooling #161
OCPBUGS-53196: Update references of master to main #160
Full changelog

networking-console-plugin

CNV-77540: fix Enable MultiNetworkPolicies lead to invalid URL #341
CNV-74687: Fixing the title and redirect when deleting a vm network #340
CNV-76879: Allow passing the physical network name via URL parameter in the VM network wizard #332
CNV-75831: list all NetworkPolicies in “All projects” #324
OCPBUGS-73790: remove whitelist for allowlist #323
CNV-76211: Remove deprecated badge from localnet #322
CNV-76277: Fix name generator with unprofessional names #316
CNV-72230: fix networking links #310
OCPBUGS-60823: fix flickerying in synced editor #303
CNV-70948: adding networking telemetry #302
CNV-71965: replacing the broken link to VirtualMachine network docs #297
CNV-71610: Allow to delete UDN/CUDN object directly from UserDefinedNe… #296
CNV-70637: Improve MTU validation in VM Networks form #295
CNV-70637: VirtualMachine networks enhancements #281
CNV-71649: hide NAD create button for non-admin users #294
CNV-71915: display the Description field for NetworkAttachmentDefinition #293
CNV-70776: Problematic suggestion for UDN subnet and a typo #291
CNV-71585: fix primaryUDN broken link and have red hat docs as default documentation #292
CNV-70637: replace useProjectsWithPrimaryUserDefinedLabel hook for VM networks #287
CNV-70637: fix selecting multiple projects for VM network #286
CNV-70637: rename VirtualMachine networks to Virtual Machine Networks #289
CNV-70637: show VirtualMachine network pages only if nmstate plugin is installed #288
CNV-70637: SelectTypeahead selection fixes #285
CNV-60063: fixing the Create ClusterUserDefinedNetwork form appearance #280
CNV-62168: Typos in Networking Pages #277
CNV-56937: Hiding the option to create cluster user defined networks or non-priv users, allowing the option to create CUDN for users with access not just admin #284
CNV-56937: Hiding the option to create cluster user defined networks or non-priv users #283
CNV-61569: Mark OVN K8s secondary localnet as deprecated #282
OCPBUGS-62442: Updating networking-console-plugin-container image to be consistent with ART for 4.21 #279
CNV-70018: fix null error #278
Merge #273
CNV-59876: use correct name space when switching tabs #276
OCPBUGS-61531: show VM network menu only on admin #275
OCPBUGS-61548: use console extension to render same nad actions #274
CNV-59629: set default MTU visible in form and yaml #272
CNV-68685: add primary UDN label info to VirtualMachine network creation form #271
CNV-68643: fix documentation links #270
CNV-68676: fix wizard cancel button #269
Full changelog

nutanix-cloud-controller-manager

OCPCLOUD-3096: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (810c3de) into main #52
OCPBUGS-62418: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.21 #51
NO-JIRA: Update OWNERS #50
Full changelog

nutanix-machine-controllers

OCPCLOUD-3091: Bump k8s dependencies to 1.34 #124
OCPBUGS-62378: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.21 #123
NO-JIRA: Update OWNERS #122
Full changelog

oauth-apiserver

NO-JIRA: (chore): update OWNERS file #167
OCPBUGS-62584: Updating ose-oauth-apiserver-container image to be consistent with ART for 4.21 #144
OCPBUGS-62612: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #148
OCPBUGS-61754: Bump openshift/kubernetes-apiserver for consistent list etcd retries. #146
CNTRLPLANE-5: Bump openshift/kubernetes-apiserver #142
Full changelog

oauth-proxy

OCPBUGS-74131: test/e2e - do not use ambiguous container image short names #344
OCPBUGS-62590: Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART for 4.21 #337
Full changelog

oauth-server

OCPBUGS-56915: Add i18n for AuthenticationErrorMessage and GrantErrorMessage #174
CNTRLPLANE-1314: Update openshift/oauth-server to latest Kubernetes 1.33 version #197
OCPBUGS-62391: Updating oauth-server-container image to be consistent with ART for 4.21 #199
Full changelog

oc-mirror

OCPBUGS-76126: Fix reg config detection for explicit false values #1349
OCPBUGS-74981: fix conversion issue for catalog #1346
OCPBUGS-74577: fix duplicated channel bug in filtered catalogs #1345
CLID-504: fix broken links in docs #1322
CLID-459: changes the flag remove-signatures default to false #1290
OCPBUGS-63480: Remove empty status field from generated IDMS/ITMS files #1311
CLID-477: Add in missing temp GraphDataDir in cincinnati tests #1304
OCPBUGS-61497: fix: return only requested version #1299
NO-JIRA: Changes the dependabot directories #1301
CLID-474: add AI configuration #1298
CLID-405: move v2 code to base folder #1294
no-jira: v2: add golangci-lint v2 config #1295
CLID-460: Adds a column with the actual implemented logic #1288
CLID-443: add mandatory –v1/–v2 flag #1284
OCPBUGS-60571: reject configurations with duplicated keys and/or entries #1275
CLID-430: migration to containers/container-libs #1255
OCPBUGS-55489: removes unintended exec permissions #1285
OCPBUGS-56398: Removes the clean up of logs directory #1289
OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 (missing files of pr 1280) #1283
OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 #1280
OCPBUGS-60929: generate the archive only after mirroring #1272
OCPBUGS-62106: v2/cli: show binary version in output #1273
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-catalogd, olm-operator-controller

OCPBUGS-74967: [release-4.21] enhance qe cases to make it more stable #626
OCPBUGS-74633: config watchnamespace api cases #620
OCPBUGS-74562: enhance ocp-79770 #617
OCPBUGS-72576: update 83026 to specify the clustercatalog #591
: OCPBUGS-72574: [release-4.21]: update 80458’s timeout to 180s #585
OPRUN-4268: Add AGENTS.md to allow agents to make contributions to the codebase #580
TRT-2460: Disable upstream PodDisruptionBudget #574
NO-ISSUE: Synchronize From Upstream Repositories #572
NO-ISSUE: Synchronize From Upstream Repositories #570
OCPQE-31063: add agent for olmv1 qe cases #571
OCPQE-30673: migrate olmv1 QE cases #569
NO-ISSUE: Synchronize From Upstream Repositories #566
OPRUN-4300: Use busybox/httpd to simulate probes #567
NO-ISSUE: Synchronize From Upstream Repositories #565
OCPQE-31152: migrate olmv1 QE stress cases #563
NO-ISSUE: Synchronize From Upstream Repositories #561
OCPQE-30673: migrate some clustercatalog cases to ote #525
OCPQE-30672: migrate jiazha test cases to OTE #558
NO-ISSUE: Synchronize From Upstream Repositories #556
OCPQE-31108: add disconnected environment support with custom prow job for migrated qe cases #557
OPRUN-4251: [Default Catalog Tests] Upgrade go 1.24.6 and dependencies ( OPM 1.57.0 ; max version that works ) #554
NO-ISSUE: Synchronize From Upstream Repositories #555
NO-ISSUE: Synchronize From Upstream Repositories #548
OPRUN-4252: fix(OTE): fix OpenShift Kubernetes replace version format #549
OPRUN-4252: [OTE]: Upgrade dependencies used and to go 1.24.6 ( Aim for compatibility and maintainability ) #544
OCPQE-30671: Add [OTP] to migrated tests-private cases Per ERT #547
OPRUN-4212: [OTE]: Add webhook cleanup validation on extension uninstall #542
OCPBUGS-62942: Synchronize from Upstream #546
NO-ISSUE: Synchronize From Upstream Repositories #540
OCPQE-31083: Update OwnSingle template to use inline.watchNamespace for QE cases #541
NO-ISSUE: Synchronize From Upstream Repositories #538
OCPBUGS-63347: [OTE]: Enhance single/own ns based on review comments ( Follow-Up of: 714977c69 ) #539
OCPBUGS-63347: Fix flake for single/own ns tests by ensuring uniquess and waiting for k8s cleanups #536
NO-ISSUE: Update to new feature-gate options in helm #537
NO-ISSUE: Synchronize From Upstream Repositories #532
OCPBUGS-63347: Define Default timeouts and apply their usage accross to avoid flakes #535
NO-ISSUE: UPSTREAM: <carry>: fix cases 81696 and 74618 for product code changes #528
OPRUN-4181: UPSTREAM: <carry>: support singleown cases in disconnected #524
NO-ISSUE: Synchronize From Upstream Repositories #526
OPRUN-4194: Update OCP catalogs to v4.21 #518
NO-ISSUE: Synchronize From Upstream Repositories #523
OPRUN-4197: Upgrade OCP image from 4.20 to 4.21 #517
OPRUN-4134: Add 2 new tests for Single/Own Namespace install mode support #502
OPRUN-4199: [Default Catalog Tests] - Change logic to get ocp images from openshift/catalogd/manifests.yaml #521
OCPBUGS-62517: Synchronize from upstream #519
OPRUN-4176: Consolidate build API #514
OPRUN-4156: UPSTREAM: <carry>: support webhook case in disconnected #508
NO-ISSUE: Synchronize From Upstream Repositories #512
OPRUN-4176: Update does-not-exist and simple install to work i… #510
NO-ISSUE: Clean up cp-manifests #511
NO-ISSUE: Synchronize From Upstream Repositories #506
NO-ISSUE: UPSTREAM: <carry>: check kubeconfig only run-test and run-suite #507
NO-ISSUE: Fix VERSION replacement in catalog bindata #505
NO-ISSUE: Synchronize From Upstream Repositories #498
OCPBUGS-62753: for incompatible test add func to wait SA creation #501
NO-ISSUE: Synchronize From Upstream Repositories #497
OPRUN-4169: OTE building controller image #483
OPRUN-4080: Remove kustomize manifests from images and repo #494
NO-ISSUE: Synchronize From Upstream Repositories #493
OCPBUGS-62372: Updating ose-olm-catalogd-container image to be consistent with ART for 4.21 #491
NO-ISSUE: Synchronize From Upstream Repositories #492
OCPBUGS-62370: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.21 #490
OCPQE-30671: UPSTREAM: <carry>: migrate more cases from tests-private #488
NO-ISSUE: Synchronize From Upstream Repositories #489
OPRUN-4160: Fix cp-manifests copying of helm charts #482
OPRUN-4164: Synchronize From Upstream Repositories #487
OPRUN-4164: Synchronize From Upstream Repositories #484
NO-ISSUE: Add pedjak and trgeiger as reviewers #463
NO-ISSUE: Synchronize From Upstream Repositories #480
NO-ISSUE: Synchronize From Upstream Repositories #479
OCPQE-29416: Init OLMv1 OTE Framework for tests-private to migrate first case #467
OPRUN-4076, OPRUN-4078: Replace kustomize config with helm config #475
NO-ISSUE: add jiazha to approvers #477
NO-ISSUE: Synchronize From Upstream Repositories #476
NO-ISSUE: Synchronize From Upstream Repositories #473
NO-ISSUE: Synchronize From Upstream Repositories #471
NO-ISSUE: Synchronize From Upstream Repositories #465
NO-ISSUE: Grant QE approver permissions for OTE contributions #457
NO-ISSUE: Synchronize From Upstream Repositories #464
NO-ISSUE: Synchronize From Upstream Repositories #456
OCPBUGS-60868: Revert “Handle service-ca cert availability/rotation” #460
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

openshift-apiserver

CNTRLPLANE-1258: Migrate to single-module OTE test infrastructure #579
OCPBUGS-61056: Add ValidatingAdmissionPolicy and check for omissions next time. #546
CNTRLPLANE-1722: Create separate Go module for test extension #571
NO-JIRA: Created an OWNERS file for the tests-extension directory for separate ote scaffold #567
OCPBUGS-62516: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.21 #560
OCPBUGS-61768: update pkg/image/OWNERS #555
OCPBUGS-61754: Bump openshift/kubernetes-apiserver for consistent list etcd retries. #556
OCPBUGS-61228: Bump Route generation when spec is updated #550
OCPBUGS-37215: pkg/image: conditionally parse raw image manifest #551
CNTRLPLANE-5: Bump openshift/kubernetes-apiserver #549
OCPBUGS-57474: ensure cache invalidation after a time #547
Full changelog

openshift-controller-manager

CNTRLPLANE-1308: Refactor OTE to single-module architecture #424
CNTRLPLANE-1676: Rebase k8s 1.34 #423
OCPBUGS-62559: Updating ose-openshift-controller-manager-container image to be consistent with ART for 4.21 #414
OCPBUGS-61899: CNTRLPLANE-1308: Fix Dockerfile.rhel: Add OTE binary build and packaging #419
CNTRLPLANE-1308: set up openshift-tests-extension for openshift-controller-manager and add a sanity test #417
Full changelog

openshift-state-metrics

OCPBUGS-62431: Updating openshift-state-metrics-container image to be consistent with ART for 4.21 #126
Full changelog

openstack-cluster-api-controllers

NO-JIRA: Update ShiftStack OWNERS #384
OSASINFRA-3976: Sync main with latest upstream (release-0.13) #387
OSASINFRA-3960: Fix rehearsals #388
OSASINFRA-3960: Remove in-tree infracluster controller #385
OCPBUGS-62567: Updating openstack-cluster-api-controllers-container image to be cons… #379
NO-JIRA: Fix internal vendoring #378
NO-JIRA: shiftstack: Update OWNERS #377
Full changelog

openstack-machine-api-provider

OCPBUGS-69644: Don’t record event for every reconcile #146
NO-JIRA: Update ShiftStack OWNERS #141
OCPBUGS-65712: Re-vendor CAPO #140
OCPBUGS-62473: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.21 #138
NO-JIRA: shiftstack: Update OWNERS #139
Full changelog

openstack-resource-controller

OCPBUGS-62455: Updating openstack-resource-controller-container image to be consistent with ART for 4.21 #22
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-76325: [release-4.21]remove qe case of testing collect-profiles #1222
OCPBUGS-76266: Remove the collect-profiles job #1220
OCPBUGS-72580: [release-4.21] OCPQE-31297: enhance ocp and microshift olm case #1189
NO-ISSUE: re-apply enhance oc case to apply for metal step #1167
Trt-2457: olm subscription revert #1165
OCPQE-30680: migrate ocp-43975 to OTE #1162
OCPQE-30679: enhance oc case to apply for metal step #1163
OCPQE-30680: migrate OLMv0 test cases to OTE #1159
OCPQE-30677: Migrate test cases 21080, 21953, 43135 from private repo #1161
OPRUN-4250: Upgrade indirects and remove pinned because of incompatibility with k8s.io/apiserver #1149
OCPQE-31151: Migrate OLM v0 stress test cases #1158
OCPQE-30677: migrate jiazha’s OLMv0 test cases to OTE #1153
OCPQE-30680: Fix OPM test cases failure: Ensure container policy.json exists #1144
NO-ISSUE: Synchronize From Upstream Repositories #1154
OCPQE-31108: add disconnected support with custom prow job for migrated qe cases #1155
NO-ISSUE: Synchronize From Upstream Repositories #1151
NO-ISSUE: Synchronize From Upstream Repositories #1150
NO-ISSUE: Remove no longer required replaces #1143
NO-ISSUE: Synchronize From Upstream Repositories #1142
OCPQE-30679: add Label OTP per ERT required #1141
NO-ISSUE: Synchronize From Upstream Repositories #1140
OCPQE-30679: Continue migration of OLM v0 test cases from tests-private to tests-extension #1137
NO-ISSUE: Synchronize From Upstream Repositories #1135
NO-ISSUE: Synchronize From Upstream Repositories #1134
NO-ISSUE: Update verify_commits.sh to use main branch #1127
OCPQE-30995: Define AI Guide for OLMv0 QE Migration cases #1128
OCPBUGS-59768: Synchronize From Upstream Repositories #1129
OCPQE-30680: migrate opm cases to OTE #1126
OCPQE-30741: support opm cases #1121
OCPQE-30781: support hypershift binary #1119
OCPQE-30679: migrate more cases from tests-private to make layout #1118
OCPQE-29415: correct suite name #1117
OCPQE-29415: enhance filters to add more suites #1116
NO-ISSUE: Synchronize From Upstream Repositories #1115
OCPQE-29415: add testing framework based on OTE and the first tests-private case #1113
OCPQE-29415: move golangci-lint and go-bindata to new location to fix sync #1114
OCPQE-29415: add OTE into olmv0 with new location #1108
NO-ISSUE: Synchronize From Upstream Repositories #1112
NO-ISSUE: UPSTREAM: <carry>: add jiazha to approvers #1110
Revert “OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0” #1109
NO-ISSUE: Updating operator-registry-container image to be consistent with ART for 4.21 #1106
OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0 #1105
NO-ISSUE: set package-server-manager as default container #1104
NO-ISSUE: Synchronize From Upstream Repositories #1103
NO-ISSUE: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.21 #1100
NO-ISSUE: Synchronize From Upstream Repositories #1101
NO-ISSUE: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.21 #1094
NO-ISSUE: make downstream csv namespace labeler plugin e2e more resilient to race conditions #1092
NO-ISSUE: Synchronize From Upstream Repositories #1088
Full changelog

operator-marketplace

OCPBUGS-73881: Increase default catalog polling interval to 4h (240m) #705
OPRUN-4272: Add AGENTS.md #690
OCPBUGS-59763: enforce client side auth requirement for metrics endpoint #684
OPRUN-4204: Update OCP Catalog index from 4.20 to 4.21 #679
OPRUN-4248: (Minor Upgrades) Upgrade dependencies and go version from 1.24.4 to 1.24.6 #683
NO-ISSUE: add jiazha to approvers #675
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.26.0 to 2.27.1 #682
NO-ISSUE: 🌱 Upgrade dependencies ( github.com/openshift/api, github.com/openshift/library-go and indirect github.com/prometheus/procfs ) #681
NO-ISSUE: Upgrade OCP dependencies #680
OPRUN-4198: Upgrade deps to have compatible k8s version #676
OPRUN-4198: upgraded github.com/openshift/api, github.com/openshift/library-go and ginkgo #677
NO-ISSUE: Update Dockerfile.okd to use OCP image 4.21 #678
OCPBUGS-62384: Updating marketplace-operator-container image to be consistent with ART for 4.21 #674
NO-ISSUE: Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.2 #661
OCPBUGS-62132: Remove Expect func so that the test case can use the retry logic #665
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.25.1 #658
NO-ISSUE: Update CRD version installed via makefile target #648
NO-ISSUE: Fix hyperlink #651
OCPBUGS-60669: Add NetworkPolicy for hypershift #656
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-74267: release-4.21 fix(localnet, ipamless): Prevent LSP deletion on sync #2940
CORENET-6352, OCPBUGS-61378: DownStream Merge [12-02-2025] #2887
OCPBUGS-61742, OCPBUGS-62013: DownStream Merge [11-19-2025] #2864
OCPBUGS-57053, OCPBUGS-61285: DownStream Merge [11-13-2025] #2859
NO-JIRA: DownStream Merge [11-11-2025] #2852
OCPBUGS-50709, OCPBUGS-62262: DownStream Merge [11-06-2025] #2846
NO-JIRA: DownStream Merge [10-30-2025] #2838
OCPBUGS-50709: DownStream Merge [10-28-2025] #2832
OCPBUGS-56749: DownStream Merge [10-24-2025] #2829
OCPBUGS-59552, OCPBUGS-61865, OCPBUGS-62636: DownStream Merge [10-19-2025] #2817
OCPBUGS-62546: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.21 #2772
CORENET-6160: DownStream Merge [10-10-2025] #2798
OCPBUGS-62545: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.21 #2771
CORENET-6055: Dockerfile: Unpin OVN and consume the latest from FDP. #2721
OCPBUGS-42303, OCPBUGS-56783: DownStream Merge [10-08-2025] #2790
OCPBUGS-62574: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.21 #2756
OCPBUGS-60468: DownStream Merge [09-23-2025] #2762
OCPBUGS-42303, OCPBUGS-58501, OCPBUGS-59657, OCPBUGS-61566: DownStream Merge [09-09-2025] #2750
OCPBUGS-61065: Adding ovndb-raft-functions.sh to ovnk image #2740
NO-JIRA: DownStream Merge [08-27-2025] #2736
Full changelog

powervs-block-csi-driver

Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.21 #107
Full changelog

powervs-block-csi-driver-operator

NO-JIRA: Fix invalid field names #92
STOR-2592: Bump all deps for 4.21 #91
STOR-2523: Add hypershift managed-by labels for csi driver operators #89
OCPBUGS-62373: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.21 #88
Full changelog

powervs-cloud-controller-manager

OCPBUGS-62515: Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.21 #88
Full changelog

powervs-machine-controllers

OCPCLOUD-3097: Bump k8s 1.34 #130
OCPBUGS-62519: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.21 #129
Full changelog

prom-label-proxy

OCPBUGS-62508: Updating prom-label-proxy-container image to be consistent with ART for 4.21 #386
NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.1 #385
Full changelog

prometheus

MON-4446: update Prometheus to v3.7.3 #282
OCPBUGS-65902: Revert “chore(scrape): default to legacy validation/escaping scheme until utf-8 is fully supported” #281
NO-ISSUE: [bot] Bump openshift/prometheus to v3.6.0 #278
NO-JIRA: update Prometheus to v3.6.0 #277
OCPBUGS-62401: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.21 #274
OCPBUGS-62166: chore(scrape): default to legacy validation/escaping scheme until utf-8 is fully supported by prometheus-operator #272
NO-JIRA: [bot] sync rh-manifest.txt #261
OCPBUGS-56568: chore: compute highestTimestamp at queryManager level #262
Full changelog

prometheus-alertmanager

NO-JIRA: Bump openshift/prometheus-alertmanager to v0.29.0 #108
OCPBUGS-62428: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.21 #107
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-67943: [bot] Bump openshift/prometheus-operator to v0.87.1 #350
NO-ISSUE: [bot] Bump openshift/prometheus-operator to v0.87.0 #348
NO-JIRA: Bump openshift/prometheus-operator to v0.86.2 #346
NO-JIRA: Bump openshift/prometheus-operator to v0.86.1 #345
MON-4395: Bump openshift/prometheus-operator to v0.86.0 #344
OCPBUGS-62448: Updating prometheus-config-reloader-container image to be consistent with ART for 4.21 #341
OCPBUGS-62542: Updating prometheus-operator-container image to be consistent with ART for 4.21 #342
Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.21 #340
Full changelog

prometheus-node-exporter

OCPBUGS-62727: Bump openshift/node_exporter to v1.10.2 #172
NO-ISSUE: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.21 #170
Full changelog

route-controller-manager

NE-2186: Propagate ingress labels to routes #67
OCPBUGS-62586: Updating ose-route-controller-manager-container image to be consistent with ART for 4.21 #65
NE-2169: Move annotations and metrics to a constants file #66
NO-JIRA: Add new team members to OWNERS #64
Full changelog

service-ca-operator

CNTRLPLANE-2159: cmd: add OTE infrastructure and clean up legacy test extension #295
CNTRLPLANE-1544, OCPBUGS-65713: Revert “manifests: Use user namespace for the deployment” #293
CNTRLPLANE-1544, OCPBUGS-65713: Revert “controller deployment: Use user namespace” #291
CNTRLPLANE-1260: Simplify test infrastructure to single-module architecture #290
CNTRLPLANE-1544: manifests: Use user namespace for the deployment #277
CNTRLPLANE-1544: controller deployment: Use user namespace #278
TRT-2385: Remove all tests and add fake test that always passes #289
CNTRLPLANE-1720: Separate OTE scaffold for service-ca-operator #285
CNTRLPLANE-1720: Separate ote scaffold for test extension #283
NO-JIRA:Created an OWNERS file for the tests-extension directory #284
OCPBUGS-62377: Updating ose-service-ca-operator-container image to be consistent with ART for 4.21 #276
OCPBUGS-63124: Fix e2e-aws-operator e2e test failures #281
OCPBUGS-56599: don’t hotloop on secret creation errors #274
Full changelog

stream-coreos, stream-coreos-extensions

NO-JIRA: Remove (commented) WASM mentions #1888
OCPBUGS-72560: package: add ose-crio-credential-provider #1880
NO-JIRA: update the okd repo for 4.21 #1862
NO-JIRA: OWNERS: switch to joelcapitao #1861
NO-JIRA: bump version to 4.21 #1860
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

telemeter

NO-ISSUE: Migrate away from deprecated ioutil #570
OCPBUGS-15495: telemeter-client: set default LogLevel to info #568
OCPBUGS-63248: Remove elide label filter from telemeter server receive handler #569
Updating telemeter-container image to be consistent with ART for 4.21 #565
Full changelog

tests

OCPBUGS-75513: adjust olm test to pass on a degraded run #30749
OCPBUGS-75513: update test logic for degraded cluster run #30748
OCPBUGS-74499: Update MCN tests to better handle condition transitions through the “Unknown” state #30729
OCPBUGS-74503: VsphereConfigurationTestsRollOutTooOften event matcher should use broader regex #30730
OCPBUGS-74372: Add/RemoveSigtermProtection event matcher for SigstoreImageVerification test #30723
OCPBUGS-74303: Add filter for openshift-copy-to-node ns #30715
OCPBUGS-74094: Ignore repeated TopologyAwareHintsDisabled events #30699
OCPBUGS-73808: update watch request limits for cluster-autoscaler-operator #30691
OCPBUGS-67016: Isolate and reduce parallelism for OrderedNamespaceDeletion tests. #30661
OCPBUGS-70143: Fix race condition in external binary extraction #30641
OCPBUGS-72414: change iperf2 test to serial from parallel #30673
OCPBUGS-72414, OCPBUGS-72415: only run Netpol two at a time #30667
OCPBUGS-72386: Add more exceptions for CO/image-registry’s Degraded=True #30663
OCPBUGS-71229: Unrevert tls tests with fixes #30660
OCPBUGS-69816: BeforeEach was indirectly called in DetermineReleasePayloadImage #30622
OCPBUGS-69903: add test for MutableCSINodeAllocatableCount feature #30630
OCPBUGS-69389: exculude Flaky tests for openshift/csi test suite #30613
OCPSTRAT-2728: Remove pod label length check in oc debug test #30576
CNTRLPLANE-1309: register the OTE binary of cluster-kube-scheduler-operator #30577
TRT-1678: write the install upgrade and e2e duration metrics #30534
Revert “OCPNODE-3720: Add auto-sizing-reversed test to origin” #30580
OCPBUGS-65970: Fix MachineConfigNode test in two-node fencing clusters #30532
OCPBUGS-62264: OCPBUGS-66262: improve log messages for vSphere snapshot options test and increase timeout #30563
OCPNODE-3720: Add auto-sizing-reversed test to origin #30465
NO-ISSUE: update olm team lead #30565
OCPNODE-3238: Add [Skipped:Disconnected] to imagepolicy test #30507
OCPBUGS-66060: update watch request limits for marketplace-operator #30564
TRT-2458: Revert #30262 “CNTRLPLANE-1437: add monitor test for checking default service account in pods” #30557
NO-JIRA: Remove the exception for CO/control-plane-machine-set’s Available=False #30555
NO-JIRA: Track CO/image-registry’s Available=False issue #30549
“NO-ISSUE: Replace MCO-1447 with OCPBUGS-66209” #30548
OCPEDGE-2159: [TNF] cert rotation validation in degraded mode #30545
CNTRLPLANE-1437: add monitor test for checking default service account in pods #30262
TRT-2292: Add support for test isolation #30478
TRT-2454: allow more grace of disruption for SNO cluster #30544
OCPEDGE-2232: degraded TNF testing - pdb + MCO reboot validation #30510
NO-ISSUE: Automated - Update synthetic test data #30511
NO-JIRA: Simplify exceptionCallback’s signature #30531
NO-JIRA: Add a new exception for CO’s Available=False in non-upgrade tests #30541
NO-JIRA: Add exception for co/baremetal on Progressing #30542
NO-JIRA: Fix highcpu intervals picking up the wrong e2etest intervals #30503
OCPBUGS-62264: vSphere snapshot options test should wait for operator to settle #30336
NO-JIRA: net(virt) remove virtctl if not correctly retrieved #30485
TRT-2439: Revert “TLS 1.3 / Modern profile tests” #30533
NO-JIRA: Add exception for co/kube-scheduler on Progressing #30521
NO-JIRA: Use a more general exception for co/olm becoming unavailable #30514
CORENET-6491: Delete test namesapces for UDN testing #30500
OCPCLOUD-3042: Added OTE binary for cpmso #30452
OTA-1585: Register the CVO tests extension #30316
NO-JIRA: Add exception for co/authentication on scaling test #30517
NO-JIRA: Add more exceptions for CO degraded #30515
OCPNODE-3009: nested-podman test: use nested-containers SCC #30061
OTA-1643: Skip a couple of ClusterOperator tests in a multi-upgrade test #30516
OCPBUGS-63307: Add ConfigDriftMonitorStoppedTooOften matcher #30474
MCO-1870: Skip MCN condition transition test in clusters with ImageModeStatusReporting FeatureGate is enabled #30505
TRT-2429: Revert “SPLAT-2337: Added OTE binary for ccm-aws” #30513
OCPEDGE-2082: Added TNF control-plane node replacement test. #30494
MCO-1930: Skip legacy-cvo-invariants for disruptive #30499
OCPNODE-3877: Update grace period for cluster upgrade to 10 minutes #30506
OCPBUGS-57523: Handle Multus UID mismatch during rapid pod recreation #30486
NO-JIRA: Add docs about junits of a monitortest #30428
OCPBUGS-65779: Remove Php 8.0-ubi8, add Php 8.2-ubi8 to Origin #30501
SPLAT-2337: Added OTE binary for ccm-aws #30235
CNTRLPLANE-180: rm renamed PSA condition #30159
TRT-2275: minor update for e2e_analysis test #30492
NO-ISSUE: Automated - Update synthetic test data #30491
OTA-1643: Add more exceptions for COs not reporting Progressing #30489
OTA-1626: Handle unknown operators #30402
TRT-2292: Update openshift-tests-extension #30490
TRT-2350: Include additional OTE metadata in JUnit results #30431
OCPNODE-3877: add normal grace period allow non-drain updates to complete #30480
NO-JIRA: Fix compat_otp.DebugNode() to support guest kubeconfig for HyperShift #30484
TRT-2403: Extension spec 2 #30483
OCPBUGS-64738: add support of hypershift #30482
TRT-2403: Extension spec k8s isolation #30470
NO-JIRA: Add an exception for co/network #30481
TRT-2072: remove skipped annotations synthetic test #30463
OCPBUGS-62930: Wait for egressfirewall rules to be applied successfully before sending traffic #30433
OTA-1643: Each CO must go Progressing during upgrade #30333
NO-ISSUE: Automated - Update synthetic test data #30464
TRT-2403: Separate cli tests #30469
CNTRLPLANE-1315: Register ote binary for etcd-o #30459
TRT-2254: extract Operator Progressing / Degraded Counts and Timing #30449
OCPBUGS-64688: Add an exception for CO/console #30461
NO-JIRA: OVNK BGP: use vrf name instead of table number when fetching routes #30456
NO-JIRA: oidc: ensure console and cli OIDC clients are available when enabling OIDC #30406
TRT-2403: Removed k8s filtering due to annotation change #30466
OCPBUGS-62703: Relax duplicate events detection for Prometheus #30372
OCPBUGS-63478: Check operators for pod deletion #30457
OCPBUGS-14246: Remove exceptions for missing CVO alert runbook URLs #30454
NO-ISSUE: Automated - Update synthetic test data #30444
NO-JIRA: Add showInfo flag to control CLI command logging #30442
NO-JIRA: OWNERS: Add myself, clean up #30453
TRT-2257: Restore fixed seed #30392
OCPBUGS-55755: Create intervals when etcd disk metrics are over upstream recommended thresholds #30413
TRT-2386: Revert “Revert “Merge pull request #30296 from hongkailiu/OTA-1637-reboot”” #30438
OCPBUGS-63333: Add Dot Net 9.0 to Origin Tests #30401
STOR-2340: Add e2e tests for storage network policy #30359
TRT-2373: Revert “Revert “Merge pull request openshift#30269 from hongkailiu/OTA-1626”” #30426
CNTRLPLANE-1485: fix(disruption): Using correct internal LB of apiserver for monitor test on ARO and Baremetal Hypershift #30307
TRT-2386: Revert #30296 “OTA-1637: ClusterOperators should not go Progressing only for a node reboot” #30437
NO-ISSUE: Automated - Update synthetic test data #30416
OCPBUGS-63201: Updated the upgrade duration limit to 100 minutes for ppc64le #30390
CNF-18661: Revert “ flake the missing port 9194 and 9193 once the team will fix will remove it” #30430
OTA-1637: ClusterOperators should not go Progressing only for a node reboot #30296
CNTRLPLANE-1544: tests: authorization/rbac: Align restricted-v3 rule #30427
OCPBUGS-57334: Redact bearertoken in TestContext #29912
OCPBUGS-63383: Fix empty operator name #30407
OCPBUGS-61376: Isolate HPA tests #30411
TRT-2373: Revert #30269 “OTA-1626: fail CI if any ClusterOperator takes too long to update” #30425
OCPBUGS-63519: flake the missing port 9194 and 9193 once the team will fix will remove it #30424
TRT-2144: Add tcpdump to in cluster disruption monitor test when disruption is … #30177
NO-JIRA: fix hcpclustername #30422
NO-ISSUE: Fixing and investigating flakes during overlapping test execution #30410
CNTRLPLANE-1544: tests: authorization/rbac: Add restricted-v3 scc #30384
OCPSTRAT-2371: Update to Kubernetes v1.34.1 #30346
CNF-18661: add a test that should validate the communication matrix ports match the node’s listening ports #30003
NO-JIRA: known-image-checker: do nothing in WriteContentToStorage #30344
OTA-1626: fail CI if any ClusterOperator takes too long to update #30269
NO-JIRA: Extend project deletion timeout #30393
NO-JIRA: enhance TNF e2e test to handle quick member promotion #30385
CNTRLPLANE-1662: Migrate OCP-32383 to upstream #30378
CORENET-6373: ovn-k, virt, preconfigured udn addresses: Test MAC conflict detection #30314
NO-ISSUE: Automated - Update synthetic test data #30334
OCPBUGS-56281: gatewayapicontroller: Use dynamic client for OLM #30397
MULTIARCH-5391: Add Disruptive ImageStreamImportMode Tests into a Disruptive Suite #30239
OCPBUGS-62359: Check more operatorsProgressing #30367
TRT-2275: some enhancement for e2e-analysis #30276
OCPBUGS-63149: revert https://github.com/openshift/origin/pull/30054 #30386
NO-JIRA: Combine global and command args in BackgroundRC #30382
NO-JIRA: MCO add GetAlerts to the Monitor thanos struct #30379
NO-JIRA: enhance-waitnodeready-util #30377
OCPBUGS-63040: Add imagestream update dryrun test #30357
OCPEDGE-1565: [TNF] Add double node failure recovery test #30370
NO-JIRA: implement WithoutKubeconf method to clear config path #30371
NO-JIRA: oc adm upgrade status: Record err and outputs #30151
NO-JIRA:I Fixing race condtion #30360
OCPBUGS-62552: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.21 #30327
NO-JIRA: init lease-checker namespaces #30373
NO-JIRA: generate unique namespace names for UDN tests #30348
NO-JIRA: update namespace privilege check to use PSA label #30355
OCPBUGS-56281: gatewayapicontroller: Clean up resources when done #29900
NO-JIRA: another attempt at disabling blank issues #30369
NO-JIRA: Make it clear that we do not monitor GH issues #30368
NO-JIRA: Update OWNERS for compat_otp #30361
NO-ISSUE: Add webhook image for the olmv1 tests #30356
OTA-1637: ClusterOperators should not go Progressing only for cluster scaling #30297
OCPBUGS-60593: Skip oauth test for external control plane topology #30200
TRT-2351: Revert “NO-JIRA: Improve case execution time” #30363
TRT-2349: Revert “make TLS registry tests required” #30358
OCPNODE-3238: Add SigstoreImageVerificationPKI image policy validation tests #30315
TRT-2346: Fix not initializing adminRESTConfig #30345
OCPBUGS-60853: make TLS registry tests required #29074
TRT-1854: remove upstream annotation framework #30340
NO-JIRA: Filter preconfiguredIPs based on cluster IP family support #30338
NO-JIRA: Improve case execution time #30329
CORENET-6363: Add PreconfiguredUDNAddresses duplicate IP detection tests #30197
OCPBUGS-62701: Revert TRT-1854: remove upstream annotation framework #30337
Revert “Revert “NO-JIRA: Add olm into the known operator set”” #30325
NO-JIRA: BugFix- don’t modify finalArgs in Template func #30328
OCPNODE-3659: Not fail upgrade checks if all nodes are ready #30318
OCPBUGS-62249: Tweak Endpoints admission test for upcoming change #30304
MCO-1828: Remove pathological test in disruptive #30272
OCPBUGS-61196: Add test that the ServiceCIDR API is blocked #30234
NO-JIRA: oc adm upgrade status: Skip test in multihop update jobs #30150
MCO-1865: Update MCO tests to be in only one test suite each #30309
OCPBUGS-62474: CNTRLPLANE-1308: Enable OTE for OCM and OCM Operator #30270
TRT-1854: remove upstream annotation framework #30305
Revert “NO-JIRA: Add olm into the known operator set” #30313
NO-JIRA: Add olm into the known operator set #30308
MCO-1875: Bump timeout for vSphereBootimageUpdate tests #30288
NO-ISSUE: Automated - Update synthetic test data #30277
OCPBUGS-62227: bump telemetry series limit to 1000 #30302
OCPERT-151: Migrate new func for Compare structured data instead of string from openshift-test-private repo #30291
OCPBUGS-61398: fix(ginkgo): avoid nil deref and harden env var setup #30289
OCPQE-30698: enable OTE for olmv0 #30285
OTA-1626: Fail CI if alert/ClusterOperatorDegraded is fired #30282
TRT-2071: Remove annotations and replace with environment selector based test skipping and disablement #30064
trt-2246: lower parallelism based on worker nodes #30226
OCPSTRAT-2045: Automating OCPSTRAT-2045 feature in upstream #30067
OCPBUGS-61980: Temporarily remove commatrix documentation test for rework #30280
OCPBUGS-61905: oidc: improve rollout wait times #30274
OCPSTRAT-2371: image: add busybox to list of allowed images #30281
CORENET-6418: drop openshift-sdn tests #29085
OCPEDGE-1483: Add TNF E2E tests for network failure #30110
OCPBUGS-61196: Skip ServiceCIDR in etcd_storage_path test #30254
OCPBUGS-61855: Temporarily disable InstallPlanStepAppliedWithWarnings for k8s 1.34 rebase #30275
OCPBUGS-61398: fix(test): prevent nil pointer dereference in ginkgo test runner #30224
OCPBUGS-61855: CRD Apply Alert Allowance #30265
NE-2090: adding one GIE automation test #30189
OTA-1601: upgrade status: recover checking the updating COs #30154
NO-JIRA: Allow systemd-coredump test to fail #30261
OCPSTRAT-2371: Update etcd test data for k8s 1.34 release #30242
OCPBUGS-61733: Restore retries for port-forward test #30255
OCPEDGE-2090: Add validation tests for tnf topology effects #30252
TRT-2275: introduce cluster e2e-analysis sub command for openshift-tests #30211
MON-4290: add test for must-gather gather_metrics #30054
OCPBUGS-61193: chore(extended/prometheus): ²⁄₂: make ‘targets auth’ test more lenient and more resilient #30256
OCPBUGS-57325: update machines scale test #30028
Trt-2246: network test isolation #30192
NO-ISSUE: Automated - Update synthetic test data #30244
NO-JIRA: Remove runbook exceptions for fixed bugs #30246
trt-2230: Add monitor test annotation #30196
NO-JIRA: Increase request-timeout to deflake test #30248
NO-JIRA: Deflake oc observe test by using explicit port number #30247
OTA-1559: test/extended/cli/adm_upgrade/recommend: TestRiskA PromQL use max_over_time #30160
NO-JIRA: Add intervals and a test for systemd-coredumps #30222
CNTRLPLANE-945: oidc: add retry logic for Keycloak route creation #30233
CNF-18661: Update vendor to include communication matrix bug fix #30232
CNTRLPLANE-945: images: add keycloak images and use them in ExternalOIDC tests #30221
NO-JIRA: Migrate new func for non-Job pods readiness helper for OCL from openshift-test-private repo #30193
NO-ISSUE: test/extended/util/framework: Poll in IsMicroShiftCluster #30161
OCPBUGS-61538: Skip config-operator checking when featureSet is DevPreviewNoUpgrade #30236
OCPBUGS-61193: chore(extended/prometheus): make ‘targets auth’ test more lenient and more resilient. #30219
NO-ISSUE: Automated - Update synthetic test data #30020
OCPBUGS-61287: Add flaky kubectl logs test to the retry list to clean signal for release #30215
OCPBUGS-60507: Bump to latest openshift/kubernetes (v1.33.4) #30227
CNF-18661: update the commatrix vendor version to contain new changes #30220
Trt-2257: track run options #30195
OCPBUGS-61063: test/extended/cli/adm_upgrade/recommend: Enable precheck and accept #30113
NO-JIRA: Fix Node NotReady intervals being left open when a node is deleted #30188
OCPBUGS-61194: Mark etcd net overload logging test as a flake #30210
CORENET-5329: revert primary udn test workaround from virt tests #29386
CNTRLPLANE-945: improve logging, add startup probe to Keycloak Deployment #30184
CNTRLPLANE-1306: Enable OTE for cluster-kube-storage-version-migrator-operator #30199
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

Updating ose-thanos-container image to be consistent with ART for 4.21 #164
Full changelog

volume-data-source-validator

STOR-2604: Rebase to upstream v1.5.0 for OCP 4.21 #6
OCPBUGS-62367: Updating volume-data-source-validator-container image to be consistent with ART for 4.21 #5
Full changelog

vsphere-cloud-controller-manager

OCPCLOUD-3087: Merge https://github.com/kubernetes/cloud-provider-vsphere:master (5691b82) into main #97
OCPBUGS-62571: Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.21 #100
NO-JIRA: Update OWNERS #99
Full changelog

vsphere-cluster-api-controllers

OCPCLOUD-3100: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.14.0 (57a59ca) into master #60
OCPBUGS-62332: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.21 #75
OCPBUGS-57668: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.20 #59
NO-JIRA: Update OWNERS #65
OCPBUGS-61498: UPSTREAM: 3636: VSphereClusterIdentity: ensure namespace in tests exists when not using the default #67
OCPBUGS-61498: Fix openshift/unit-tests.sh #66
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

STOR-2593: Rebase to upstream v3.6.0 for OCP 4.21 #151
Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.21 #150
NO-JIRA: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.21 #148
Full changelog

vsphere-csi-driver-operator

STOR-2634: Add code for degrading the cluster if node is not vsphere #317
No-JIRA: Update owners #318
CNTRLPLANE-1286: Enable readonlyRootFilesystem #309
NO-JIRA: Fix invalid field names #316
STOR-2592: Bump all deps for 4.21 #315
OCPBUGS-62344: Fix escaping of password #312
OCPBUGS-57797: Degrade OCP cluster on storagepolicy sync errors #310
Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.21 #311
Full changelog

vsphere-problem-detector

OCPBUGS-74706: fix concurrent map writes #207
OCPBUGS-63598: Fixed logic for vSphere compute cluster permission #196
STOR-2592: Bump all deps for 4.21 #193
NO-JIRA: Add cursor command to debug the operator #192
OCPBUGS-62595: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.21 #191
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github