Back to index
4.12.0-0.okd-2023-02-18-033438 Download installer and client with:
oc adm release extract --tools quay.io/openshift/okd:4.12.0-0.okd-2023-02-18-033438 Team Approvals:
No tests for this release
Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Created: 2023-02-18 09:44:44 +0000 UTC
Image Digest: sha256:fd08a1dae13a434729451cdb6edd969714a4329904e8d27eb45d94e96021dff4
Release 4.12.0-0.okd-2023-02-18-033438 was created from registry.ci.openshift.org/origin/release:4.12.0-0.okd-2023-02-18-033438
Components
Kubernetes 1.25.4
Fedora CoreOS upgraded from 37.20230110.3 to 37.20230122.3
NE-1334 : Enhancement to add brew and stage secrets for pre-release image testing #1291 OCPBUGS-43919 : desiredWildcardDNSRecord: Check for nil LB field #1189 OCPBUGS-62400 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.21 #1286 NE-1334 : Script to install ossm pre-release operator and run GWAPI e2e tests #1283 OCPBUGS-55649 : Remove SetEIPForNLBIngressController feature gate #1280 OCPBUGS-55673 : Remove IngressControllerLBSubnetsAWS featuregate #1242 NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #1281
NE-2139 : Kubernetes to 1.33.4 and controller-runtime to 0.21 #1279 NO-JIRA: Add davidesalerno to OWNERS #1278
OCPBUGS-60859 : Fix logic on gatewayapi test cleanup #1273 OCPBUGS-53432 : deflake TestIngressControllerCustomEndpoints by proper waiting for CCM to be ready #1267 OCPBUGS-59139 : Increase assertExpectedDNSRecords timeouts #1271 NE-2066 : Set degraded=true when OSSM 3 can’t be installed #1268 OCPBUGS-60620 : e2e: Deflake tests by using ReplicaSet for test workload #1262 OCPBUGS-54966 : Improve detection of missing DNSRecord for Gateway #1212 OCPBUGS-60302 : e2e - Reduce flakiness in testGatewayAPIResourcesProtection #1265 NE-2096 : Bump to OSSM 3.1.0 and Istio 1.26.2 #1257 NO-JIRA: Add rikatz to OWNERS #1259
OCPBUGS-59894 : Update GatewayAPI test to check if deployment has 1 or more pod #1250 NE-2108 : docs - correct Istio version format in ossm-overrides.md #1253 NE-2108 : Add OSSM channel and version override annotations #1246 NE-2104 : desiredIstio: Enable GIE if InferencePool found #1245 OCPBUGS-59839 : desiredIstio: Delete trustBundleName #1243 NE-2022 : Bump to OSSM 3.0.1 and Istio 1.24.4 #1227 OCPBUGS-58358 : desiredIstio: Do not enable a default PDB #1240 OCPBUGS-57728 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.20 #1236 OCPBUGS-55652 : Removed PrivateHostedZoneAWS from component #1230 OCPBUGS-54745 : status: Conditionally add CRDs to relatedObjects #1217 OCPBUGS-55317 : Check capabilities before watching OLM resource #1232 CNTRLPLANE-112 : Remove ARO HCP MIv2 Authentication for Ingress Operator #1222 CNTRLPLANE-112 : Add new Azure authentication type for managed Azure HCP for cluster-ingress #1191 NE-2009 : Relax pod bound validating admission rule for HyperShift #1221 NE-1969 : Set Degraded=True if unmanaged Gateway API CRDs exist #1205 NE-1957 : Add Gateway API DNS Feature e2e tests #1213 OCPBUGS-54650 , OCPBUGS-54651 , OCPBUGS-54652 : desiredSubscription: Specify annotations and SCC #1214 NE-2009 : Move VAP to Default featureset #1216 OCPBUGS-54568 : desiredIstio: Specify priorityClassName #1211 OCPBUGS-53424 : Wait for install plans to enter the “Requires Approval” phase before approving them #1203 NE-2008 : Add GRPC conformance tests #1208 NE-1277 : status: Add Gateway API objects to relatedObjects #933 NE-1994 : Add E2E test for Istio manual deployment #1204 NE-1969 : Add “v1” version to OpenShift GatewayClass controller name #1202 NE-1934 : Bump to OSSM 3.0 for Gateway API support #1152 CORS-3907 : Update ingress operator to with custom endpoints #1197 NE-1953 : Add experimental Gateway API group to Validating Admission Policy #1200 NE-1907 : Manage OSSM operator subscription manually to ensure a compatible version is installed #1112 NE-1981 : Move controller test helpers to dedicated package #1199 NE-1953 : Add Validating Admission Policy for Gateway API CRDs #1192 NE-1954 : Implement GatewayAPIController feature gate #1198 NE-1936 : Bump k8s.io dependencies to v0.32.1 #1184 OCPBUGS-31550 : Gateway API - recreating SMCP which breaks Gateway API #1115 OCPBUGS-32776 : Fix IBM Public Cloud DNS Provider Update Logic #1133 OCPBUGS-48780 : Fix IBMCloud DNS Propagation Issues in E2E #1164 OCPBUGS-43745 : Skip Test_IdleConnectionTerminationPolicyDeferred when DCM feature gate is enabled #1186 NE-1260 : Add Makefile target to run Gateway API conformance tests #1176 OCPBUGS-43745 : Add support for IdleCloseTerminationPolicy (Go http.Client) #1182 OCPBUGS-45585 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.19 #1173 OCPBUGS-41892 : Single Watch on GWAPI CRD #1165 NE-1790 : Follow up to enable Dynamic Configuration Manager feature gate #1174 SPLAT-1722 : Remove alibaba #1111 CORS-3755 : AWS: Add Ingress LB IPs to Infra CR when in-cluster DNS is enabled #1167 NE-1790 : Enable Dynamic Configuration Manager feature gate #1159 OSASINFRA-3642 : openstack: support setting external LB floating IP #1147 HOSTEDCP-2031 : Use Client Certificate Authentication for ARO HCP deployments #1151 OCPBUGS-43412 : Bump to k8s.io v0.31.1 (and deps) #1156 NE-1716 : Bump Gateway API to v1.0.0 and OSSM to v2.6 #1163 CFE-1134 : Watch infrastructure and update AWS tags #1148 OCPBUGS-43033 : e2e/ingress_dns: support both private & public #1153 OCPBUGS-37932 : Always log AWS service endpoints #1137 OCPBUGS-36340 : Retry IngressController and Route updates in E2E tests #1116 OCPBUGS-42004 : Set the MI client ID for the ARO HCP override #1144 AUTH-482 : set required-scc for openshift workloads #1031 OCPBUGS-36044 : Bump IBM/go-sdk-core to v5.17.4 #1120 OCPBUGS-41527 : Add tolerations to survive scheduler taint manager e2e tests on workers #1143 OCPBUGS-41112 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.18 #1140 OCPBUGS-39151 : Add Missing Scope Change Instructions #1135 OCPBUGS-38871 : ingress: deployment: explicitly set DeploymentStrategy in SingleReplica case #1134 OCPBUGS-37491 : Ingress operator status not degraded when canary route fails #1125 OCPBUGS-38217 : Clear LB Status Parameters on LB Type Change #1126 OCPBUGS-34418 : Allow router pods to use the “restricted” SCC #1064 OCPBUGS-38441 : Resolve DNS Resolution CI Flakes in Subnets and EIP E2E #1127 OCPBUGS-38079 : Bump controller-runtime to v0.18.4 #1122 NE-1798 : API bump for promotion of eipAllocation from feature gates to GA. #1118 NE-1688 : Enable Azure MSI authentication for ARO HCP #1119 NE-1674 : Add LB EIP Allocation for AWS #1109 NE-1531 : Fix Initialization of NLB Status Parameters #1114 NE-1531 : AWS Subnet Selection #1046 NE-1273 : Add a watch to the ingress operator so it will recreate the gwapi crds #1106 OCPBUGS-37627 : Fix getRouteHost error handling #1110 NE-1208 : Gateway API E2E Testing #1023 OCPBUGS-31664 : Fix SyncLoadBalancerFailed status message of IngressController #1102 OCPBUGS-36465 : Delete and recreate canary route to clear spec.host #1095 OCPBUGS-34413 : Refine logging for accurate infra CR status updates #1103 OCPBUGS-35342 : Add e2e test for connect timeout #1084 NO-JIRA: Add grzpiotrowski to OWNERS #1090
NO-JIRA: addowner-Thealisyed #1091
OCPBUGS-35356 : Retry IngressController updates in router status E2E #1085 OCPBUGS-9037 : Change Canary to use passthrough route #978 OCPBUGS-35368 : Add Regexp Anchor to TestAll #1087 OCPBUGS-23221 : internalServiceChanged: Fix target port logic #1052 OCPBUGS-34262 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.17 #1067 NE-1400 : Bump to OSSM 2.5 and Gateway API v0.6.2 CRDs #1018 OCPBUGS-33792 : Bump openshift/library-go to resolve NewPrometheusClient E2E failures #1054 OCPBUGS-32887 : Allow operator to update Route spec.subdomain #1047 OCPBUGS-32942 : Bump controller-runtime to v0.17.3 #1050 OCPBUGS-28673 : implement connect timeout tuning option #1035 NE-1317 : manifests - add ingress capability annotation #950 OCPBUGS-32371 : Bump openshift/api, and update CRD generation #1045 OCPBUGS-25193 : Add vnet subnet read and join permission for azure #1029 OCPBUGS-30834 : Update to go 1.21 #1040 OCPBUGS-31722 : Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1037 OCPBUGS-3522 : Include recent errors in canary checks fail #865 OCPBUGS-30091 : TestHostNetworkPortBinding: Delete t.Parallel() #1032 CFE-987 : Use RouterExternalCertificate feature gate for adding ROUTER_ENABLE_EXTERNAL_CERTIFICATE env var to the router pods #1017 CORS-2317 : Add Ingress LB IPs to Infra CR and set DNS unmanaged when BYO DNS is enabled #1016 OCPBUGS-28596 : Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.16 #1020 OCPBUGS-28230 : add FallbackToLogsOnError for easier debugging #1019 NE-1490 : update to go v1.20 #1012 OCPBUGS-15253 : Include namespace in prometheus alerts IngressWithoutClassName and UnmanagedRoutes #980 CCO-249 : Replace GCP role with explicit permissions #844 OCPBUGS-25006 : Updating ose-cluster-ingress-operator-container image to be consistent with ART #1006 OCPBUGS-24531 : Revert “ OCPBUGS-24531 Skip CI for scope change until OCPBUGS-24044 is resolved” #1011 OCPBUGS-24531 : Revert “Merge pull request #1007 from candita/OCPBUGS-24531-SkipScopeChangeTest” and add changes to skip test only for Azure and GCP #1008 OCPBUGS-24531 : Skip CI for scope change until OCPBUGS-24044 is resolved #1007 OCPVE-780 : annotate credentials request manifests #995 OCPBUGS-23742 : Bump controller-runtime to v0.16.3 #1001 NE-1402 : Add service endpoint override capability to IBM DNS provider #990 OCPBUGS-16762 : Revert “OCPBUGS-16762: Bump openshift/api for container.maxLength fix” #982 OCPBUGS-14994 : Don’t add clientca-configmap finalizer if deleting #948 OCPBUGS-22020 : Bump golang.org/x/net for CVE-2023-44487 #985 OCPBUGS-21803 : test/e2e: Add test case for 2000000 maxConnections #983 OCPBUGS-20192 : Require non-readonly filesystem in router container #981 OCPBUGS-16762 : Bump openshift/api for container.maxLength fix #979 OCPBUGS-3541 : Don’t create route metrics for ingress controllers that are not admitted #869 OCPBUGS-18248 : Prevent GatewayClass from getting recreated #975 OCPBUGS-19268 : Updating ose-cluster-ingress-operator images to be consistent with ART #977 OCPBUGS-15900 : TestMTLSWithCRLs: only try to parse HTTP status code from curl output when stdout is long enough. #973 OCPBUGS-3356 : E2E test for cookie length truncation #871 OCPBUGS-15978 : Check public DNS zone when reporting status #967 OCPBUGS-17359 : test/e2e: Don’t use openshift/origin-node #970 NE-1140 , NE-1145 : Set/delete HTTP request/response headers via IngressController API #872 OCPBUGS-16089 : Set spec.subdomain on the canary route #965 OCPBUGS-14995 : desiredRouterDeployment: Set HostPort if needed #947 OCPBUGS-10875 : gateway-service-dns: Set DNS policy appropriately #934 NE-1244 : Use permissions instead of the “Contributor” role in Azure CredentialsRequest #929 OCPBUGS-12790 : README: Fix Bugzilla link #968 RFE-3007 : Expose option-contstats as an unsupported option #887 NE-1189 : Refactor Test_desiredLoadBalancerService #886 NE-1187 : Use t.Run for table-driven tests #884 NE-1183 : Rename unit tests for specific functions #880 NE-1269 : Replace bindata using embed #905 RFE-3765 : Allow Ingress to Modify the HAProxy Log Length when using a Sidecar #900 OCPBUGS-9274 : canary: Tolerate infra node NoExecute taint #932 OCPBUGS-7546 : Allow only 1 disruption with 3 replicas #931 OCPBUGS-15100 : Fix previous attempt of adding a missing trailing dot to hostname #956 OCPBUGS-14396 : Set controller-runtime logger to a null logger for E2E #946 OCPBUGS-14998 : Only use RoleARN for Route53 API #951 OCPBUGS-15100 : Create valid DNS names for Gateway API on GCP #949 OCPBUGS-13106 : Add ingress controller status logging on waitForIngressControllerCondition #924 OCPBUGS-13190 : Avoid spurious updates for internalTrafficPolicy #927 OCPBUGS-13810 : Update TestAWSELBConnectionIdleTimeout to not use wildcard DNS record #944 NE-1294 : Add support for AWS shared VPC in another account #928 CCO-318 : Enable Azure Workload Identity authentication. #906 OCPBUGS-6661 , OCPBUGS-9464 : Move mTLS CRL handling into the router, and fix accidental duplication of CRLs #939 OCPBUGS-13963 : Bump vendors k8s libraries to 0.27.2 #936 Revert “OCPBUGS-6661, OCPBUGS-9464: Move mTLS CRL handling into the router, and fix accidental duplication of CRLs” #938
OCPBUGS-6661 , OCPBUGS-9464 : Move mTLS CRL handling into the router, and fix accidental duplication of CRLs #930 OCPBUGS-5478 : add UBI based Dockerfile #925 CCO-318 : Read feature gates for future usage #908 OCPBUGS-12913 : Deflake TestRouterCompressionOperation #920 OCPBUGS-6784 : bump controller-runtime to fix the multi namespace cache indexing #913 OCPBUGS-12579 : Address CVE-2022-41723 #915 OCPBUGS-12790 : Replace Bugzilla link with Red Hat Issue Tracker #916 OCPBUGS-10714 : gatewayclass: Update for OSSM 2.4 API change #901 OCPBUGS-10189 : Updating ose-cluster-ingress-operator images to be consistent with ART #898 OCPBUGS-10846 : Fix TestClientTLS flakes #904 NE-1184 : Test_desiredHttpErrorCodeConfigMap: Kill dead code and fix format #881 OCPBUGS-4054 : configurable-route: Don’t use NewKindWithCache #860 NE-1186 : Test_getRR: Fix typo: “excepted” → “expected” #883 CORS-2467 : dns: azure: use azidentity with an adapter #846 NE-1105 : Add support for Gateway API #890 OCPBUGS-7424 : Bump vendored k8s libraries to 1.26.1 #888 CFE-679 : Add user defined tags to the created DNS resources #874 OCPBUGS-6247 : Updating ose-cluster-ingress-operator images to be consistent with ART #862 CORS-2072 : GCP - Parse Zone ID with a project ID embedded #855 NE-1092 : Add proxy protocol support for IBMCloud loadbalancers #812 OCPBUGS-6384 : Address CVE-2022-41717 #876 OCPBUGS-4827 : Add missing AWS permission for ListTagsForResources #868 OCPBUGS-6701 : Avoid spurious updates for scope in IngressClass #879 OCPBUGS-6698 : Fix conflict error message in ensureNodePortService #877 OCPBUGS-6700 : updateIngressClass: Fix log message #878 NE-1124 : Add support for External platform to CIO #873 OCPBUGS-4573 : Target metrics port by name in internal service #864 OCPBUGS-434 : Absorb PodsScheduled condition into MinAvailable #854 OCPBUGS-4759 : Do not manage DNS for an ingresscontroller with domain mismatch in GCP #866 OCPBUGS-4703 : Replace liveness-grace-period-seconds annotation #863 OCPBUGS-3404 : Bump openshift/api for matchExpressions doc fix #856 OPNET-133 : Support remote worker #858 OCPBUGS-1725 : Ingress controller should not have affinity policy in single-replica clusters #810 OCPBUGS-1807 : Fix bad handleSingleNode4Dot11Upgrade log message #808 And 5 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-62444 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.21 #132 CNTRLPLANE-1306 : Fixing arch issue #130 CNTRLPLANE-1306 : Fix arch issue #128 CNTRLPLANE-1306 : set up openshift-tests-extension and add a sanity test #126 OCPBUGS-57807 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.20 #124 OCPBUGS-45640 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.19 #122 API-1835 : bump library-go #120 OCPBUGS-20062 : “gracefully” shutdown KSVM pod. #118 NO-JIRA: operator/starter.go: don’t report an error on shutdown #117
OCPBUGS-41169 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.18 #116 NO-JIRA: bump(*) #113
OCPBUGS-34306 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.17 #110 OCPBUGS-34306 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.17 #109 AUTH-482 : set required-scc for openshift workloads #107 OCPBUGS-29567 : Apply hypershift cluster-profile for ibm-cloud-managed #106 OCPBUGS-27930 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.16 #103 OCPBUGS-24989 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART #101 OCPBUGS-21738 : bump library-go to include switch to HTTP/1.1 #95 OCPBUGS-19253 : Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #94 Revert “specify master node selector on migrator pod” #93
OCPBUGS-17170 : specify master node selector on migrator pod #92 OCPBUGS-16513 : bump(*): update to 1.27.1 #91 Fix operator doc in README #90
Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #89
OCPBUGS-6240 : Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #87 Full changelog
NO-JIRA: clarify ExternalLabels doc #2691
MON-4398 : Enable UTF-8 by default in admission-webhook #2704 OCPBUGS-45671 : chore(prometheus/remotewrite): clarify that the in-cluster proxy env vars set in prometheus container can be used in all configs that support proxyConfig.proxyFromEnvironment #2717 MON-4383 : feat(auto_docs_examples): adjust and add more examples #2573 MON-4408 : chore: make test/monitoring a seperate module to keep managing deps in root go.mod simple #2714 OCPBUGS-62276 : add tls configuration for the monitoring plugin deployment #2706 NO-JIRA: [bot] Synchronize versions of the downstream components #2705
OCPBUGS-62972 : enhance case 66736 #2708 NO-ISSUE: Update jsonnet dependencies #2696
OCPBUGS-62160 : Remove AlertManager endpoints when disabled #2684 NO-JIRA: [bot] Synchronize versions of the downstream components #2703
MON-4395 : Bump prometheus-operator to v0.86.0 #2698 NO-ISSUE: set openshift-state-metrics as default container #2693
OCPBUGS-61661 : Remove cluster from non-multicluster dashboards #2679 MON-4384 : adding Blackwell GPU device to accelerators configmap #2689 NO-ISSUE: chore: remove image locations in assets #2683
NO-ISSUE: [bot] Update jsonnet dependencies #2687
NO-ISSUE: chore: remove mentions of prometheus Adapter #2682
OCPBUGS-15430 : remove Kubernetes API alerting rules #2671 NO-JIRA: chore: bump jsonnet dependencies #2649
OCPBUGS-62109 : test: remove image registry e2e tests #2681 NO-ISSUE: update Go dependencies #2674
MON-4346 : Bump Go to 1.24 #2655 NO-JIRA: [bot] Synchronize versions of the downstream components #2673
OCPBUGS-60161 : Add mcd_local_unsupported_packages metric from MCO to telemetry #2638 NO-ISSUE: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.21 #2662
MON-4344 : chore: port the test suite over from openshift-tests-private #2635 MON-4371 : chore(prometheus): enable use-uncached-io feature flag #2637 NO-JIRA: [bot] Synchronize versions of the downstream components #2668
OCPBUGS-61113 : add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2657 NO-JIRA: [bot] Synchronize versions of the downstream components #2663
OCPBUGS-56568 : chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2660 OCPBUGS-61135 : Revert “MON-4343: Cleanup deprecate pa config” #2658 OCPBUGS-60948 : Add selinux_warning_controller_selinux_volume_conflict to telemetry #2653 MON-4343 : Cleanup deprecate pa config #2651 NO-JIRA: [bot] Synchronize versions of the downstream components #2654
NO-JIRA: chore: drop check for AlertmanagerV1 #2650
OCPBUGS-56158 : Bump prometheus-operator to v0.85.0 #2652 OCPBUGS-34568 , OCPBUGS-35095 , OCPBUGS-60689 , OCPBUGS-60691 , OCPBUGS-60692 : non-HA alert cases #2630 OCPBUGS-58475 : Enforce secure TLS settings in CMO server #2647 NO-JIRA: [bot] Synchronize versions of the downstream components #2642
MON-4312 : Adding new accelerator to the accelerator configmap #2636 MON-4318 : Add debug image manifest to CMO #2623 OCPBUGS-60221 : remove managed_cluster from reserved external labels #2641 NO-JIRA: Use label matchers for Rules API in prom-label-proxy #2640
NO-JIRA: [bot] Synchronize versions of the downstream components #2639
NO-JIRA: [bot] Synchronize versions of the downstream components #2620
MON-4299 : chore(thanos): replace CLI args that will disappear in future versions #2626 OCPBUGS-58475 : Enforce secure TLS settings in CMO #2618 OCPBUGS-57215 : operator: increase wait time till degraded to max 4 times 5m #2624 MON-4255 : Bump prometheus-operator dependencies to v0.84.0 #2619 MON-4255 : Bump prometheus-operator to v0.83 #2614 OCPBUGS-57561 : Updating cluster-monitoring-operator-container image to be consistent with ART for 4.20 #2611 MON-4288 : set up openshift-tests-extension and add a sanity test #2616 MON-4282 : Multi-tenant support for KSM’s CRS #2595 NO-JIRA: [bot] Synchronize versions of the downstream components #2615
OCPBUGS-58427 : pkg/manifests: don’t reset annotations for metrics client CA #2612 OCPBUGS-57184 : chore(alerts): adjust PrometheusPossibleNarrowSelectors description and add link to to-be-added runbook #2608 NO-JIRA: [bot] Synchronize versions of the downstream components #2607
NO-JIRA: [bot] Synchronize versions of the downstream components #2606
OCPBUGS-18282 : provide more context in externalLabels unmarshalling error #2605 NO-JIRA: metrics-client-ca: set owner annotation #2602
OCPBUGS-18282 : prevent use of reserved labels keys in Prometheus externalLabels #2604 MON-4242 : chore(metrics-server): allow setting log verbosity #2599 NO-JIRA: [bot] Synchronize versions of the downstream components #2603
OCPBUGS-33691 : mixin: longer rate interval for Alertmanager[Cluster]FailedToSendAlerts #2598 NO-JIRA: [bot] Synchronize versions of the downstream components #2600
MON-4200 : disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2549 NO-JIRA: Synchronize versions of the downstream components #2594
MON-4207 : Bump prometheus-operator to v0.81.0 #2593 NO-JIRA: [bot] Synchronize versions of the downstream components #2589
MON-4161 : add topology telemetry signals #2588 MON-4126 : set fallbackScrapeProtocol: ‘PrometheusText1.0.0’ as default for all UWM Prometheus targets for backward compatibility with Prometheus v2 until a better migration process is available #2590 MON-4150 : chore: update prometheus-operator go dep #2586 OCPBUGS-54516 : provide context-rich and case-sensitive config validation #2584 MON-4149 : chore: update library-go #2587 OCPBUGS-54223 : Fix opentelemetry processor/receiver/exporter/extensions labels #2583 MON-4188 : Add docs for proxy_url alertmanager #2582 NO-JIRA: [bot] Synchronize versions of the downstream components #2577
MON-4189 : Updating node-exporter accelerators configmap #2558 MON-4043 : Configuring external Alertmangers with proxy_url #2580 MON-4136 : set up the PrometheusPossibleNarrowSelectors alert #2554 MON-3960 : test: enable back TestTLSSecurityProfileConfiguration and m… #2545 NO-JIRA: chore: versions: kubeRbacProxy’s primary branch isn’t main yet #2574
OU-515 : remove old nginx configmap deletion #2575 NO-JIRA: Bump prometheus-operator to 0.80.1 #2572
MON-4147 : test: remove unnecessary UWM configuration in TestUserWorkloadMonitoringXXX #2567 OCPBUGS-50837 : Fix opentelemetry metrics to use regexp on label match #2568 OCPBUGS-50703 : Add incidents metric to telemetry #2569 NO-JIRA: Bump prometheus-operator to v0.80.0 #2565
MON-3866 : create separate metrics client cert for metrics server #2536 NO-JIRA: tweak asciiDocs formatting to ease the mapping into the monitoring Docs #2563
OCPBUGS-48381 : jsonnet: switch telemeter to main #2560 OCPBUGS-48376 : jsonnet: switch openshift-state-metrics to main branch #2559 OCPBUGS-48370 : chore: rename default branch in various places #2561 NO-JIRA: [bot] Synchronize versions of the downstream components #2531
OCPBUGS-48074 : Fixing telemetry rule for accelerators #2551 MON-4107 : chore: add logs (at v=3 level) regarding the deactivation of components #2546 OCPBUGS-31356 : chore(client): DeleteXXX short-circuit if the resource doesn’t exist as a GET is less expensive than a no-op DELETE #2547 MON-4118 : chore: use alertmanager v2 in tests as v1 is not longer supported in Prometheus 3 #2544 NO-JIRA: fix TestPrometheusRemoteWrite to align the image used for th… #2543
NO-JIRA: Bump prometheus-operator to 0.79.2 #2542
MGMT-19498 : Fixing the configmap data fields #2540 NO-JIRA: Bump prometheus-operator to v0.79.1 #2538
MGMT-19498 : Adding accelerators configuration file to the node-exporter #2530 OCPBUGS-35095 : unpin kubernetes-mixin #2422 OCPBUGS-45389 : update image to be consistent with ART for 4.19 #2533 OCPBUGS-35726 : remove certificate hash annotation for monitoring-plugin #2524 OCPBUGS-45179 : Use explicit name label for logging telemetry metrics #2529 NO-JIRA: [bot] Synchronize versions of the downstream components #2527
OCPBUGS-44831 : disable token automount for alertmanager-user-workload SA #2522 NO-JIRA: use scrape class to avoid TLS config repetitions #2492
AUTH-482 : set required-scc for openshift workloads #2498 MON-4046 : add early validation for Platform and UWM monitoring configmaps #2490 OCPBUGS-38655 : take cluster proxy into account for UWM Prometheus rem… #2523 MON-4058 : Fix api-docs for ThanosRuler EvaluationInterval #2518 MON-3934 : make TestImageRegistryPods more robust and split it into Pl… #2468 MON-4058 : Expose evaluationInterval setting for UWM Prometheus and ThanosRuler #2517 MON-4078 : report vendor_model:node_accelerator_cards:sum to Telemetry #2515 MON-4057 : Expose scrapeInterval setting for UWM Prometheus #2503 NO-JIRA: [bot] Synchronize versions of the downstream components #2516
OCPBUGS-43987 : Bump library-go to get latest tls suite changes #2513 OCPBUGS-27250 : bump prometheus-operator to v0.78.1 #2514 MON-4051 : Add new metrics for OpenShift logging telemetry #2512 MON-4065 : [bot] Synchronize versions of the downstream components #2504 OCPBUGS-18007 : Add runbook url for TelemeterClientFailures #2506 MON-4060 : Bump prometheus-operator to v0.77.2 #2502 OCPBUGS-42671 : make config unmarshalling more strict to help detect #2493 OCPBUGS-42148 : Fix api doc on Thanos Ruler default retention #2500 MON-3850 : Lint CMO tests #2292 MON-4021 : feat: add the required utils for automated tests and integration with the docs #2443 NO-JIRA: fix CMO config for Alertmanager e2e tests #2495
NO-JIRA: [bot] Update jsonnet dependencies #2486
MON-3523 : Disable http2 in metrics-server by default #2485 MON-3802 : implement cross-namespace rules for UWM #2307 MON-3991 : set noProxy for Prometheus remote-write via the CR. #2453 OCPBUGS-30122 : chore: Bump to prometheus-operator 0.77.1 #2480 OCPBUGS-30122 : Bump openshift/prometheus-operator to v0.77.1 #2484 NO-JIRA: vendor Kubernetes dashboards #2482
NO-JIRA: update Go dependencies #2481
OCPBUGS-41158 : add pod-metrics-reader cluster role #2475 MON-3896 : Add OpenTelemetry operator metrics #2450 NO-JIRA: clean-up generated dashboards #2479
NO-JIRA: remove 4.17 TODOs #2478
NO-JIRA: Update ConsolePlugin to include specs for i18n.loadType : Preload. #2477
MON-3367 : chore: enable delayed-compaction feature flag on Platform and UWM Prometheuses #2469 OCPBUGS-39246 : filter alerts sent to Telemeter #2466 MON-3934 : move port forward setup inside retry loop for more resiliency #2465 MON-3934 : merge TestAlertManagerHasAdditionalAlertRelabelConfigs into… #2464 MON-3994 : [bot] Synchronize versions of the downstream components #2462 OCPBUGS-39133 : Configure graceful shutdown for metrics-server #2460 MON-3994 : [bot] Synchronize versions of the downstream components #2457 OCPBUGS-39126 : disable user-defined monitoring per object #2452 OU-450 : Migrate Monitoring Plugin Deployment from nginx to Go server #2412 MON-3992 : [bot] Synchronize versions of the downstream components #2454 NO-JIRA: Update README.md #2456
Updating cluster-monitoring-operator-container image to be consistent with ART for 4.18 #2455
MON-3990 : make TestClusterMonitorConsolePlugin check that one of the pods can serve /plugin-manifest.json #2444 MON-3989 : [bot] Synchronize versions of the downstream components #2446 MON-3895 : Add tempo operator metrics #2421 OCPBUGS-38780 : update links to OpenShift documentation #2442 OCPBUGS-38289 : fix(prometheus): avoid passing the cluster-wide proxy config to a remote endpoint when noProxy will prevent the proxuying anyway #2441 MON-3982 : [bot] Synchronize versions of the downstream components #2440 MON-3982 : Upgrade to Prometheus operator v0.76.0 #2438 MON-3967 , MON-3981 : [bot] Synchronize versions of the downstream components #2437 MON-3962 : set proxy_from_environment to true #2431 OCPBUGS-33863 : use UserWorkloadInvalidConfiguration reason when UWM config only is invalid #2436 HOSTEDCP-1044 : Add nodepools telemetry metrics for HyperShift #2265 NO-JIRA: [bot] Synchronize versions of the downstream components #2435
MON-3972 : [bot] Synchronize versions of the downstream components #2434 OCPBUGS-17506 : Make error messages clearer on poll timeouts #2417 MON-3964 : set scrape timestamp tolerance for user workload monitoring #2429 MON-3961 : inject proxy env variables in Alertmanager #2424 MON-3949 : [bot] Synchronize versions of the downstream components #2419 MON-3900 : follow-up: clean up operator logic and some tests now that metrics-server is the default Metrics API backend #2425 OCPBUGS-37686 : fix documentation typos #2427 NO-JIRA: fix: fix a small typo #2426
MON-3921 : Revert “Revert “Merge pull request #2392 from machine424/f-… #2403 MON-3959 : Skip TestTLSSecurityProfileConfiguration as disruptive #2423 MON-3900 : Remove prometheus-adapter code #2409 MON-3947 : [bot] Synchronize versions of the downstream components #2418 MON-3947 : [bot] Synchronize versions of the downstream components #2414 MON-3947 : Bump prometheus-operator to 0.75.1 #2416 MON-2065 : jsonnet: exclude kubernetes-storage rules #2377 OCPBUGS-36495 : Add deprecated config runbook #2410 OCPBUGS-31250 : Exclude windows nodes from kubelet servicemonitor #2368 OCPBUGS-36406 : add runbook_url annotations #2401 MON-3914 : add a regression test for gogc based on the go_gc_gogc_percent metric #2393 MON-3914 : [bot] Synchronize versions of the downstream components #2394 OCPBUGS-36299 : Revert #2392 “MON-3800: jsonnet: update prometheus dep to fetch the PrometheusKuber…” #2398 MON-3800 : jsonnet: update prometheus dep to fetch the PrometheusKuber… #2392 OCPBUGS-35480 : Add deprecation for prometheus adapter #2381 MON-3915 : chore: bump Go dependencies #2387 MON-3914 : adjust Prometheus GOGC based on infra topology #2390 OCPBUGS-32696 : opt-out of multi-cluster Prometheus dashboard #2351 OCPBUGS-35397 : attach runbook to the PrometheusDuplicateTimestamps alert #2365 MON-3905 : [bot] Synchronize versions of the downstream components #2382 MON-3894 : revert(monitoring-plugin): undo nginx caching tweaks as the issue was… #2380 MON-3795 , SDN-3817 : Expose OVNKubernetes:AdminNetworkPolicy Metrics via telemetry #2297 MON-3897 : [bot] Synchronize versions of the downstream components #2378 OBSDOCS-883 : change docs to correct retention time uwm prometheus #2277 MON-3884 : Send metric acm_managed_cluster_worker_cores via Telemetry #2367 MON-3887 , MON-3889 : [bot] Synchronize versions of the downstream components #2376 MON-3888 : bump go tools 1.22 #2375 MON-3882 : [bot] Synchronize versions of the downstream components #2371 MON-3701 : clean-up injection of CA bundle for user Alertmanager #2361 OCPBUGS-33645 : inject trusted CA bundle into UWM Alertmanager #2349 OCPBUGS-34437 : Updating cluster-monitoring-operator-container image to be consistent with ART for 4.17 #2372 MON-3881 : chore: remove hack/ocp-images.sh #2366 MON-3801 : clean-up unused OAuth proxy references #2359 MON-3701 : clean-up injection of CA bundle for user Prometheus #2362 MON-3874 : chore: poll immediately in the e2e tests #2356 MON-3701 : clean-up tests #2360 OCPBUGS-33955 : remove deprecated logtostderr argument #2355 OCPBUGS-33686 : [bot] Synchronize versions of the downstream components #2363 OCPBUGS-23000 : node-exporter: Prevent cluster-autoscaler from evicting #2346 MON-3763 : Add cnv_abnormal #2291 OCPBUGS-34080 : Updating cluster-monitoring-operator-container image to be consistent with ART for 4.17 #2358 : NO-JIRA: Fix formatting in the resources documentation #2353
MON-3861 : Bump go tools 1.21 #2348 MON-3856 : Bump openshift/prometheus to v2.52.0 #2342 OCPBUGS-32510 : change metrics-server probes for SNO #2337 MON-3851 : Bump openshift/thanos to v0.35.0 #2338 MON-3847 : Bump openshift/node_exporter to v1.8.0 #2336 OCPBUGS-32510 : tweak Prometheus RBAC setup as a temp fix. #2334 AUTH-482 : set required-scc for openshift workloads #2335 MON-3163 : support VPAs #2078 OCPBUGS-23801 : update OTEL google.golang.org/grpc/otelgrpc #2321 NO-JIRA: Increase checkAlertmanagerAPIVerbs timeout #2330
MON-3487 : base CP enablement on dedicated feature gate #2153 OCPBUGS-32177 : fix wrong dir hack/tools of tools.go #2327 MON-3707 : Add ipsec state metric into telemetry #2326 MON-3701 : clean-up injection of trusted CA bundle for k8s Prometheus #2323 MON-3839 : test: add skip tests for prometheus adapter tests #2328 MON-3820 : allow read-only access for Alertmanager API #2319 MON-3701 : remove trusted CA bundle from Thanos Querier #2325 MON-3701 : follow-up of PR #2308 #2324 MON-3825 : Synchronize versions of the downstream components #2322 OCPBUGS-30430 : update google.golang.org/protobuf #2320 MON-3701 : clean-up injection of trusted CA bundle for main Alertmanager #2310 MON-3783 : add controller-id annotation to pods deployments and operator #2309 OCPBUGS-18643 : address lint warnings #2284 WINC-1180 : assets, jsonnet: Add container_network openshift-kubernetes.rules #2314 OCPBUGS-31847 : Synchronize versions of the downstream components #2318 MON-3701 : remove references to OAuth proxy #2308 MON-3706 : chore: simplify GetServiceAccountToken() #2272 MON-3621 : Enable extra-scrape-metrics feature in PrometheusUWM #2302 OCPBUGS-31411 : add runbook link for KubeAggregatedAPIErrors alert #2316 OCPBUGS-29531 : Add include.release.openshift.io/hypershift label #2264 MON-3778 , OLS-117 : Add OLS metrics to telemetry whitelist #2300 OCPBUGS-31920 : go.mod: bump openshift/api #2290 MON-3700 : replace OAuth proxy for Thanos Ruler #2294 MON-3799 : Synchronize versions of the downstream components #2301 MON-3749 : enable request headers flags for metrics server #2293 OCPBUGS-28650 : fix generation of telemeter token hash #2298 MON-3801 : remove oauth-redirectreference annotations #2299 MON-3793 : Synchronize versions of the downstream components #2295 MON-3793 : jsonnet: Bump jsonnet deps for prometheus-operator #2296 MON-3792 : fix metrics-server path for /test versions #2286 MON-3789 : add a golangci-lint-fix makefile target to fix golangci-lint errros when possible #2275 MON-3771 : update Prometheus operator to v0.72.0 #2288 MON-3498 : Modify prometheus-adapter e2e tests to compact with metrics server #2196 OCPBUGS-30257 : Making sure proxy settings are correctly forwarded in the generated remote write configs #2269 OCPNODE-2100 : jsonnet: update crio port to TLS port 9637 #2257 MON-3694 : chore: encourage the use of the new ‘slices’ package instead of ‘golang.org/x/exp/slices’ #2243 MON-3748 : Enable audit logs by default for metrics-server #2280 MON-3380 : adjust prometheus-k8s service openshift.io/description #2279 MON-3747 : Increase e2e test timeout to 150 min #2278 MON-3381 : replace OAuth proxy for Alertmanager #2260 OCPBUGS-28246 : fix Thanos ruler alert generator url #2267 MON-3706 : Revert “chore: poll immediately in the e2e tests” #2271 MON-3717 : pkg/client.go: make some CreateOrUpdateXXX functions use library-go’s resourceapply utils. #2226 MON-3717 : update library-go to get https://github.com/openshift/libra… #2266 MON-3380 : re-add kube-rbac-proxy for /metrics and /federate #2261 MON-3172 : describe monitoring services #2188 MON-3706 : chore: poll immediately in the e2e tests #2258 MON-3380 : replace OAuth proxy for prometheus-k8s #2246 OCPBUGS-18326 : add Console cap annotation to dashboards #2254 TRT-1489 : Revert “jsonnet: update crio port to TLS port 9637” #2255 OCPNODE-2022 : jsonnet: update crio port to TLS port 9637 #2229 MON-3705 : [bot] Update jsonnet dependencies #2208 MON-3699 : chore: merge OmitFromDoc with HideFromDoc introduced in https://github.com/https://github.com/openshift/cluster-monitoring-operator/pull/2210 to hide fields from the doc #2247 MON-3697 : use maximumStartupDurationSeconds instead of container patch #2251 OCPBUGS-28246 : fix: set externalURL in UWM Prometheus #2250 MON-3689 : Synchronize versions of the downstream components #2245 OCPBUGS-27289 : followup of https://github.com/openshift/cluster-monitoring-operator/pull/2242 #2244 STOR-1289 : Move vSphere prometheus rules to cluster-storage-operator #2235 OCPBUGS-27289 : rollout metrics-server on cert rotations #2242 OCPBUGS-27213 : Adjust lastError injection to wait.PollUntilContextTimeout’s final error #2234 MON-3676 : move raptorsun out of reviewer list #2240 MON-3673 : [bot] Synchronize versions of the downstream components #2238 MON-2853 : add runbook link to TargetDown alert #2237 MON-3661 : [bot] Synchronize versions of the downstream components #2236 OCPBUGS-26983 : rollout monitoring plugin on TLS rotation #2233 MON-3661 : chore: update Prometheus operator to v0.71.0 #2230 MON-3667 : remove outdated documentation #2232 OCPBUGS-25849 : make PrometheusAdapter and MetricsServer tasks less conflict prone #2218 OCPBUGS-25378 : drop InfoInhibitor from default Alertmanager config #2225 MON-3664 : chore: avoid issues with std.set* functions #2231 MON-3654 : use Go standard errors package instead of github.com/pkg/errors #2224 MON-1047 : fix: add terminationMessagePolicy: FallbackToLogsOnError to all conta… #2228 MON-3552 : remove temporary cleanup code and no longer needed tests #2210 MON-3650 : Synchronize versions of the downstream components #2222 MON-3649 : Synchronize versions of the downstream components #2221 MON-3644 : Ease the tracking of monitoring components versions. #2220 OCPBUGS-25803 : make CMO ConsolePluginComponents task resilient to dependencies #2193 OCPBUGS-25676 : fix(tasks): adjust ‘trusted CA bundle ConfigMap’ related logs for alertmanagers. #2219 MON-3633 : Synchronize versions of the downstream components #2214 OCPBUGS-24977 : Updating cluster-monitoring-operator-container image to be consistent with ART #2211 OCPBUGS-25403 : go.mod update k8s.io/api* to v0.29.0 #2205 MON-3589 : Refactor assertExemplarsEnabled check for UWM Prometheus xand add a check for –scrape.timestamp-tolerance on Platform Prometheus #2194 OCPBUGS-24977 : use 1.20 in go.mod #2199 MON-3592 : Use strict yaml unmarshaling #2195 OCPBUGS-25025 : go.mod: bump prometheus-operator to v0.70.0 #2191 OCPBUGS-24977 : Updating cluster-monitoring-operator-container image to be consistent with ART #2190 OCPBUGS-24630 : additionalArgs: list items must have named fields #2189 MON-3553 : Set scrape.timestamp tolerance #2187 OCPBUGS-23516 : prevent plugin entry assets from caching #2186 OCPBUGS-21610 : Detect ipv4/ipv6 socket in pod ip for nginx conf #2173 MON-3134 : allow to query alerts from thanos-querier tenancy port #2184 MON-3551 : fix: simplify jq script avoids error with jq1.7 #2180 MON-3454 : Add track timestamps staleness #2160 OCPBUGS-24212 : Add ownership annotation for certificates #2158 MON-3379 : Replace the oauth-proxy before thanos-querier with kube-rbac-proxy #2136 MON-3544 : Adjust NodeClock* alerting rules to work with PTP operator #2182 OCPBUGS-23745 : Wait for 3 (instead of 2) consecutive failing reconcil… #2179 MON-3548 : [bot] Synchronize versions of the downstream components #2183 MON-3543 : Update API docs for Metrics Server #2181 OCPBUGS-24323 : synchronize versions of the downstream components #2174 OCPBUGS-24340 : patch securityContext for Thanos querier #2178 OCPBUGS-24323 : update prometheus-operator jsonnet to v0.70.0 #2177 MON-3287 : Remove openshift-etcd related RBAC as they will be manager by #2165 OCPBUGS-21610 : revert #2166 #2172 MON-3524 : Update metrics-server in CHANGELOG and README #2169 MON-3533 : Update cluster:kube_persistentvolume_plugin_type_counts:sum #2171 STOR-1277 : Add SELinux metrics to telemetry #2155 MON-3500 : Enable sending exemplars over RW in UWM #2161 OCPBUGS-21610 : Change config to allow ipv6/4 #2166 MON-3511 : hack/local-cmo.sh: pass desired version in cmo run command #2168 MON-3211 : Implement switching to metrics-server #2022 MON-3505 : move aggregated-metrics-reader role to cmo jsonnet #2163 MON-3503 : Synchronize versions of the downstream components #2162 OCPBUGS-23495 : Change UWM Prometheus’ kube-rbac-proxy-thanos port num… #2164 MON-3479 : update Prometheus operator assets to v0.69.1 #2152 MON-3503 : Synchronize versions of the downstream components #2150 MON-3421 : improve the detection of CMO unavailability/degradation due to U… #2129 MON-3476 : Add code block to check FeatureGate status #2151 OCPBUGS-17035 : fix KRP permissions for Thanos Querier #2057 OCPBUGS-22742 : go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to 0.44.0 #2138 OCPBUGS-21621 : Set the new –disable-http2 flag for prometheus-adapter to disable HTTP2 #2145 MON-3398 : Add RHACM telemetry metric #2100 Synchronize versions of the downstream components #2135
Fix UWM alert access permissions #2131
Synchronize versions of the downstream components #2133
OCPBUGS-4069 : Prometheus Adatper takes metrics from kubelet job only. #2117 MON-3422 : Remove temporary no more needed code #2132 fix: force HTTP/1.1 connections #2128
OCPVE-711 : feat: add olm capability annotation #2105 OCPBUGS-21631 : upgrade golang.org/x/net to v0.17.0 #2120 OCPBUGS-18326 : revert previous fix to avoid activating console capability during update #2118 MON-3286 : Remove no longer needed code. #2116 OCPBUGS-17850 : replace nonResourceURLs permissions by subresource #2099 Synchronize versions of the downstream components #2115
Update jsonnet dependencies #2076
OWNERS: remove sthaha #2114
build: add -e to go list command to install tools #2112
Change kube-rbac-proxy-thanos port #2113
OCPBUGS-11344 : alertmanager: use alertmanager CRD’s automountServiceAccountToken option #2111 Remove deprecated ioutil #2108
OCPBUGS-18326 : add console capability annotation to dashboards and monitoring-plugin. #2101 MON-3302 : add RHACS telemetry metrics #2062 add machine424 and rexagod to OWNERS #2083
Remove bparees from approvers #2104
Revert “feat: add olm capability annotation” #2103
MON-3270 : Add kube-metrics-server to image-references #2102 OCPVE-711 : feat: add olm capability annotation #2095 chore: fix imports order #2098
Set Thanos version in the Thanos Ruler spec #2094
OCPBUGS-19237 : Updating cluster-monitoring-operator images to be consistent with ART #2084 Synchronize versions of the downstream components #2093
Synchronize versions of the downstream components #2089
MON-3383 : Remove weak cryptograhic primitive usage #2086 OCPBUGS-18390 : jsonnet/rules: exclude -1 from etcd objects count #2081 OCPBUGS-19059 : Enable ipv6 on monitoring-plugin nginx #2090 MON-3376 : Remove deprecated –logtostderr argument #2077 OCPBUGS-19356 : Topology spread constraints admission webhook #2073 OCPBUGS-17682 : add topologySpreadConstraints to UWM prometheus operator #2072 Synchronize versions of the downstream components #2082
MON-2642 : Improve e2e tests for alertrelabelconfigs CRD #2080 MON-3304 : Add option to specify resource limits for all components #2067 OCPBUGS-17690 : remove deprecated argument #2075 OCPBUGS-17691 : replace outdated repository link #2074 MON-2641 : Add e2e tests for AlertingRule controller #2054 Add telemeter client SA to rbac proxy #2043
OCPBUGS-1062 : update webhook configuration only if required #2065 MON-988 : remove alert “MultipleContainersOOMKilled” #2071 Remove deprecated visual_web_terminal_sessions metric #2059
OCPBUGS-17487 : fix typo for ThanosRulerConfig.Resources #2070 Update jsonnet dependencies #2063
OCPBUGS-17346 : Avoid recreating some resources, created by prometheus-operator, during 4.13->4.14 upgrade #2066 MON-3291 : Adjust node-exporter’s MaxProcs documentation now that we s… #2055 Synchronize versions of the downstream components #2061
MON-3093 : fix single node replica issue #2060 OCPBUGS-17191 : add namespace label to alerting rules #2058 Synchronize versions of the downstream components #2056
MON-2645 : remove unnecessary RBAC permissions #2051 Synchronize versions of the downstream components #2052
OCPBUGS-10699 : remove Kube*QuotaOvercommit alerts #2049 MON-2645 : remove unused rebalancer code #2048 Synchronize versions of the downstream components #2050
Remove OADP metrics from the Telemetry #2040
MON-669 : Remove etcd ServiceMonitors management code as they’ll be no… #2039 MON-3216 : Add ownership labels to kube resources #1986 MON-3177 : Expose and propagate TopologySpreadConstraints for kube state metrics #2026 OCPBUGS-16203 : correct docs for metric node_systemd_timer_last_trigger_seconds. #2045 MON-3178 : Expose and propagate TopologySpreadConstraints for prometheus-operator #2033 MON-3274 : collect the number of LIST and WATCH requests to the apiserver from telemetry #2044 MON-2903 : add nodeExporter.collectors.systemd settings. #1892 MON-3179 : Expose and propagate TopologySpreadConstraints for openshift state metrics #2034 MON-3176 : Expose and propagate TopologySpreadConstraints for prometheus-adapter #2025 OCPBUGS-9835 : Add Content-Security-Policy headers to prometheus and alertmanager #2012 MON-3182 : Expose and propagate TopologySpreadConstraints for UWM alertmanager #2037 MON-3180 : Expose and propagate TopologySpreadConstraints for telemeter-client #2017 MON-3183 : Expose and propagate TopologySpreadConstraints for UWM prometheus #2038 MON-3181 : Expose and propagate TopologySpreadConstraints for thanos-querier #2035 MON-3231 : add metric for the configured profile #2030 MON-3269 : add nodeExporter.collectors.processes settings. #2032 MON-3222 : Make netdev/netclass interfaces configurable #1963 e2e-tests: ensure pod assertions find at least one pod #2028
test/e2e/framework: remove unused function #2020
OCPBUGS-15440 : fix CMO to apply console-plugin pod.spec config #2018 chore: update dependencies #2013
OCPBUGS-14922 : skip console-plugin installation if console CO is absent #2011 OCPBUGS-12714 : turn on netlink mode of netclass collector for node exporter #2015 MON-3249 : Update telemeter-client to allow TLS through rbac proxy #2005 Synchronize versions of the downstream components #2024
OCPBUGS-13153 : Limit the value of GOMAXPROCS on node-exporter. #1996 hack/local-cmo: show the correct logged-in user #2019
MON-3253 : refactor local-cmo.sh to use CMO SA by default #2010 test/e2e: validate CMO and UWM configs #2006
pkg/operator: reduce duplication in CSR controllers #2007
Synchronize versions of the downstream components #2009
OCPBUGS-15210 : manifest: rename TP roleBinding to cluster-monitoring-operator-alert-… #2008 MON-3127 : add nodeExporter.collectors.ksmd settings. #1931 Synchronize versions of the downstream components #2004
MON-3229 : Remove the dependency on the apiserver auth #1904 Synchronize versions of the downstream components #2003
Fix link metrics #1999
OCPBUGS-11958 : Add the trusted CA bundle in UWM Prometheus pods #1970 OCPBUGS-14123 : make TestBodySizeLimit less flaky #1991 Update OWNERS list #1951
MON-3113 : add nodeExporter.collectors.mountstats settings. #1936 OCPBUGS-12903 : Fix console metrics doc typo #1997 OCPBUGS-14816 : Add misspell target in Makefile #1994 OCPBUGS-14887 : [bot] Synchronize versions of the downstream components #1995 MON-2967 : CMO deploys monitoring console-plugin #1890 OCPBUGS-14772 : Add federate-client-certs #1990 OCPBUGS-14072 : test: increase poll wait time for alertmanager #1973 OCPBUGS-14618 : Synchronize versions of the downstream components #1988 OCPBUGS-14378 : Skip some errcheck golangci-lint violations #1983 MON-2981 : alertingrule and relabel: promote to v1 #1945 OCPBUGS-11889 : disable CORS headers on Thanos querier #1950 OCPBUGS-14606 : Remove remaining staticcheck violations #1989 OCPBUGS-14375 : Fix golangci-lint gosimple violations #1979 OCPBUGS-14381 : Skip golang-ci lint unused false positives #1985 OCPBUGS-14561 : Prevent ci/prow/versions from failing on PR against release-xxx #1969 OCPBUGS-10387 : label for infra nodes for metric cluster:capacity_cpu_cores:sum #1926 OCPBUGS-14379 : Skip specific govet violation on operator main.go #1984 OCPBUGS-14371 : Fix golangci-lint misspell violations #1978 OCPBUGS-14380 : Fix golangcilint whitespace violations #1977 OCPBUGS-14377 : Fix golangci-int wastedassign violations #1981 OCPBUGS-14376 : Fix golangci-lint ineffassign violations #1980 OCPBUGS-14366 : Fix golangci-lint unconvert violations #1982 OCPBUGS-13147 : Add golangci-lint linters #1949 OCPBUGS-1626 : update jsonnet dependencies #1961 OCPBUGS-12903 : Add new web console usage metrics #1910 OCPBUGS-13939 : Extend remote write test timeout #1971 OCPBUGS-14007 : test/e2e: don’t fail on telemeter remote write failed samples #1972 OCPBUGS-13095 : Uncomment cluster:vsphere_infrastructure_failure_domains:max #1960 OCPBUGS-12995 : go.mod: update golang.org/x/net to v0.7.0 #1958 OCPBUGS-13006 : Add build number to vsphere vcenter information #1946 OCPBUGS-12343 : Update 4.14 cluster-monitoring-operator image to be consistent with ART #1952 jsonnet: add comment why empty prometheus container needed #1943
OCPBUGS-11434 : node-exporter: disable btrfs collector #1937 4.14: OCPBUGS-11269: Add CSI migration for vSphere to telemetry #1933
Speedup jsonnet generation by running in parallel #1908
OCPBUGS-10690 : jsonnet: Add prometheus container in UWM #1930 OCPBUGS-7694 : add startup probe for prometheus-adapter #1917 OCPBUGS-10161 : Updating cluster-monitoring-operator images to be consistent with ART #1914 OCPBUGS-8215 : bugfix in Node Exporter argument setting #1909 OCPBUGS-7282 : Node Exporter ignores network interface under name “cali[a-f0-9]*” #1905 Update jsonnet dependencies #1913
OCPBUGS-8282 : turn off netlink mode of netclass collector in Node Exporter. #1912 MON-2894 : add nodeExporter.maxProcs setting. #1895 MON-2973 : test/e2e: Add cleanup func for alertmanager uwm secret test #1907 MON-2693 : Scrape profiles #1785 MON-2959 : test/e2e: Add test for alertmanager secret platform #1899 MON-2904 : add nodeExporter.collectors.buddyinfo settings. #1891 MON-2895 : toggle netlink implementation of netclass collector #1894 MON-2932 : jsonnet/dashboards: add role template variable to node related dashbo… #1879 MON-2900 : add nodeExporter.collectors.netclass settings. #1893 Update jsonnet dependencies #1903
MON-2951 : create Routes only with ingress operator #1885 OCPBUGS-7391 : wait for service CA secrets #1900 Synchronize versions of the downstream components #1902
MON-2973 : pkg/manifests: Allow configuring secrets in alertmanager (UWM) #1884 Synchronize versions of the downstream components #1898
pkg/operator: fix typo in info logs #1896
MON-2901 : add nodeExporter.collectors.netdev settings. #1888 STOR-1154 : Add vSphere topology to telemetry #1886 Add nodeExporter.collectors.tcpstat settings. #1876
Synchronize versions of the downstream components #1887
MON-2959 : Allow configuring secrets in alertmanager (platform) #1882 Update jsonnet dependencies #1880
Synchronize versions of the downstream components #1878
pkg/manifests/manifests.go: move constants to jsonnet #1873
Synchronize versions of the downstream components #1877
add nodeExporter.collectors.cpufreq settings. #1855
Update jsonnet dependencies #1869
Fix ‘make run-local’ target #1874
*: remove kube-rbac-proxy sidecar container #1870
OCPBUGS-2729 : unify ignored network device list of Node Exporter. #1871 OCPBUGS-5353 : unstack dashboards with limit markers. #1868 Update jsonnet dependencies #1865
Synchronize versions of the downstream components #1867
Update jsonnet dependencies #1864
Synchronize versions of the downstream components #1863
OCPBUGS-4521 : check that all targets are up after certificate recreation #1848 Synchronize versions of the downstream components #1861
OCPBUGS-4219 : Adds runbook link to PrometheusRuleFailures #1860 MON-2807 : Use bearer token file for remote write authentication with telemeter #1733 OCPBUGS-1998 : pkg/client: Update daemonset degrade condition #1812 Synchronize versions of the downstream components #1859
Bug 2114515 : jsonnet: ignore /var/lib/ibmc-s3fs/ mountpoints #1854 Synchronize versions of the downstream components #1853
Synchronize versions of the downstream components #1852
OCPBUGS-4793 : fix object reference in Kubernetes events #1842 Synchronize versions of the downstream components #1849
Updating cluster-monitoring-operator images to be consistent with ART #1846
OCPBUGS-2729 : Node Exporter ignore virtual network device ‘enP.*’. #1843 Unpin and update jsonnet dependencies #1818
OCPBUGS-2141 : compute doc link in PVC not configured message #1836 Synchronize versions of the downstream components #1838
go.mod: switch to go 1.19 #1839
Synchronize versions of the downstream components #1835
OCPBUGS-2260 : add alert KubePodNotScheduled to group openshift-kubernetes.rules #1830 Synchronize versions of the downstream components #1831
Remove deprecated option from kube-state-metrics args #1832
OCPBUGS-4184 : use mTLS authentication for metrics scraping #1827 OCPBUGS-4168 : Increase startupProbe for prometheus #1824 OCPBUGS-4181 : Fixes externalURL field for Prometheus and Alertmanager #1826 Synchronize versions of the downstream components #1823
OCPBUGS-1453 : Fixed TargetDown expression to join on the proper label #1767 Bug 2095719 : Updates CreateOrUpdateServiceAccounts #1745 OCPBUGS-4024 : test: increase timeout when checking remote write metrics #1817 OCPBUGS-3331 : Pin Jsonnet Deps + Update go.mod for 4.12 + Patch Alert KubePodNotRead #1816 Revert “OCPBUGS-3331: Pin Jsonnet Deps + Update go.mod for 4.12” #1815
OCPBUGS-3331 : Pin Jsonnet Deps + Update go.mod for 4.12 #1814 Switch ksm registry to registry.k8s.io #1809
MGDAPI-4488 : RHOAM fleet wide observability metrics #1771 Full changelog
NO-JIRA: Fix support for nvidia-smi #1410
OCPBUGS-62940 : Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1414 NO-ISSUE: pkg/metrics/server: Log bind address #1411
OCPBUGS-62839 : E2E: Add test cases related to schedulable control plane nodes #1405 OCPBUGS-62835 : E2E: llc: make sure to remove any trailing newspaces #1407 OCPBUGS-62153 : E2E: skip SMT disabled test when L3 cache spans entire NUMA node #1397 OCPBUGS-62605 : e2e: refactor GetSMTLevel to remove Gomega assertions #1399 OCPBUGS-62578 : Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.21 #1391 OCPBUGS-62091 : E2E: Add function to check control plane nodes are schedulable. #1396 And 444 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-62500 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.21 #626 NO-JIRA: Bump library go rm co dep #625
CNTRLPLANE-1257 : Add README to test extension #624 CNTRLPLANE-1257 : set up openshift-tests-extension and add a sanity test #623 : NO-JIRA: Bump to Go 1.24 and k8s 1.33 #620
NO-JIRA: operator: annotate image-import-ca configmap with owner #616
OCPBUGS-48177 : Exclude etcd readiness checks from /readyz to ignore temporary etcd hiccups #612 MON-4129 : adjust Prometheus classic histograms ‘le’ related selectors in relabel config to accommodate the update to Prometheus v3 #611 OCPBUGS-45701 : Updating ose-cluster-openshift-apiserver-operator-cont… #607 NO-JIRA: Revert Disable ResilientWatchCacheInitialization #604
OCPBUGS-44693 : Disable ResilientWatchCacheInitialization #603 OCPBUGS-23435 : bump library-go to bring in workload-conditions fix #600 NO-JIRA: bump dependencies #598
API-1835 : update to use the latest API #597 API-1835 : switch OpenshiftDeploymentLatestRevisionClient to use the generic client #595 API-1835 : update for more apply loops #592 MULTIARCH-4557 : Sync import mode image config status field in the observed config #582 NO-JIRA: remove unused OperatorClient #594
API-1835 : last transition time update #593 API-1835 : update library-go to use new operator client #584 create CRDs from openshift/api #591
OCPBUGS-41617 : increase openshift-apiserver failureThreshold #588 OCPBUGS-41232 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.18 #586 NO-JIRA: Bump library-go to add audit logs about events #587
OCPBUGS-39589 : Rebase 1.30 #585 OCPBUGS-30492 : bump google.golang.org/protobuf #583 OCPBUGS-34349 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #580 OCPBUGS-34349 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #579 AUTH-482 : Set required-scc for openshift workloads #573 WRKLDS-1015 : tolerate node-role.kubernetes.io/control-plane:NoExecute #574 OCPBUGS-29580 : Apply hypershift cluster-profile for ibm-cloud-managed #572 OCPBUGS-32346 : the apiservice controller waits until bootstrap complete #575 NO-ISSUE: Makefile: fixes test-e2e-encryption-rotation targets #577
NO-ISSUE: fix: TestRedeployOnConfigChange #576
OCPBUGS-22969 : Use v1 for flowcontrol API #559 OCPBUGS-18115 : Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #566 OCPBUGS-18939 : manifest: drop slo latency metrics in favor of sli #547 WRKLDS-1004 : use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #562 OCPBUGS-24972 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART #561 OCPBUGS-18115 : Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #551 OCPBUGS-19231 : Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #548 OCPBUGS-21733 : bump library-go to include switch to HTTP/1.1 #552 WRKLDS-728 : Capabilities: drop build/apps APIService when capabilities are not enabled #532 switch image-registry cert CM #545
OCPBUGS-16554 : update dependencies to get rid of goproxy #546 AUTH-408 : bindata: set required-scc #544 Plumb featuregates to the openshift-apiserver #542
allow etcd healthcheck timeout closer to probe timeouts to avoid failing on slower etcd #540
Add AES-GCM encryption tests #539
OCPBUGS-14010 : increase timeout for probes #536 OCPBUGS-2765 : Library go bump #538 OCPBUGS-12813 : Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #534 Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #525
OCPBUGS-10040 : update openshift/api to include aesgcm provider in the default apiserver schema #526 API-1509 : Enable AESGCM encryption #521 OCPBUGS-4343 : update apf configuration to use v1beta3 #509 OCPBUGS-6233 : Bump dependencies and images #517 OCPBUGS-5300 : routes/status resources can leak sensitive data, exclude it from audit #511 make api team approver #506
OCPBUGS-3929 : update apf configuration to use v1beta2 #508 Full changelog
OCPBUGS-62494 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.21 #399 CNTRLPLANE-1307 : set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test #395 CNTRLPLANE-926 : Add readonlyRootFilesystem #392 CNTRLPLANE-1054 : Update k8s deps to 1.33.2 #393 WRKLDS-844 : sync: Use more descriptive variable name #390 WRKLDS-844 : pkg/operator: Split OCM/RCM status conditions #387 WRKLDS-954 : pkg/operator: Remove expired conditional resources #388 WRKLDS-1676 : ocm deployment: Add POD_NAME #386 WRKLDS-1676 : controller manager config: Set leaderElection.name #385 WRKLDS-1653 : bump(k8s): update k8s.io/* dependencies to v1.32.2 #381 OCPBUGS-47528 : Add team members to the OWNERS file #373 OCPBUGS-45698 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.19 #372 API-1835 : bump library-go #370 WRKLDS-1492 : Update k8s dependencies to 1.31.1 #368 OCPBUGS-41227 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.18 #364 create CRDs from openshift/api #367
no-jira: OWNERS: remove former employees #354
OCPBUGS-35801 : nil pointer reference in ocm-operator #355 WRKLDS-1327 : Replace wildcards by explicit list of verbs #353 WRKLDS-1292 : Bump k8s dependencies to 1.30.1 #352 OCPBUGS-34395 : Move cluster Build CR to runlevel 10 to match CRD #351 OCPBUGS-34077 : Always Disable Default Rolebindings Controller #346 OCPBUGS-34054 : lots of churn during image registry managed/removed transition #347 OCPBUILD-9 : Adds capabilities for builder & deployer rolebindings controller #335 AUTH-482 : set required-scc for openshift workloads #336 OCPBUGS-23848 : Bumps opentelemetry dependencies #341 OCPBUGS-29973 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.16 #337 OCPBUGS-29581 : Apply hypershift cluster-profile for ibm-cloud-managed #334 OCPBUGS-22969 : Use v1 for flowcontrol API #316 BUILD-854 : Add adambkaplan as approver #338 OCPBUGS-24888 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART #321 OCPBUGS-28666 : Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #326 OCPBUGS-23624 : Add .snyk file to exclude vendor and ignore unit tests #325 WRKLDS-1016 : Bump k8s dependencies to 1.29.0 #324 OCPBUGS-24190 : Disable deployer-controller when deploymentconfig is disabled #320 OCPBUGS-22956 : Remove blockage of ConfigObserver by build informer HasSynced flag #315 Revert “Revert #300 “API-1666: add image pull secret cleanup controller”” #314
Revert #300 “API-1666: add image pull secret cleanup controller” #313
API-1642 : add image pull secret cleanup controller #300 API-1642 : Do not generate image pull secrets for internal registry when internal registry is disabled. #298 OCPBUGS-21830 : bump(k8s,openshift) to address CVE-2023-44487 #308 OCPBUGS-20164 : Include Build CRD in manifests #306 WRKLDS-806 : Bump kube dependencies to 1.28.2 #305 OCPBUGS-19136 : Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #304 OCPBUGS-18932 : Always sort disabled controller list #302 OCPBUGS-18498 : Disable BuildConfigChange controller when Build cap is disabled #299 route-controller-manager deployment updates #295
OCPBUGS-16072 : Updating Kubernetes and other associated dependencies #296 OCPBUGS-13926 : change the operator log level to default normal in the deployment #289 BUILD-582 , OCPBUGS-14638 : bump(k8s): 1.27.1 #294 OCPBUGS-13926 : add loglevel controller for OCM-o #292 Revert “13895: [WRKLDS-730] route-controller-manager deployment updates” #293
OCPBUGS-13895 : [WRKLDS-730] route-controller-manager deployment updates #288 Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #287
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #286
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #285
Bump golang.org/x/net from 0.5.0 to 0.7.0 #284
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #279
OCPBUGS-10568 : migrate to using lease objects for leader election #282 Add Divyanshu Agrawal as a reviewer #283
OCPBUGS-4343 : update apf configuration to use v1beta3 #273 Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #274
WRKLDS-594 : bump(k8s): 1.26.1 #277 OCPBUGS-5275 : remove unnecessary RBAC for leader-locking-ingress-to-route-controller #276 OCPBUGS-3929 : update apf configuration to use v1beta2 #272 let deployer pods patch/apply replication controllers #270
Bug 2111979 : Set openshift.io/run-level to nil in openshift-controller-manager nam… #269 And 1 elided commits (e.g. from squash or rebase merges)
Full changelog
OCPBUGS-62440 : Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.21 #169 OCPBUGS-57191 : fix(psalabelsyncer): return an error instead of panic when converting an unknown volume #167 NO-JIRA: scc allocation controller: Use server-side apply #165
CNTRLPLANE-1054 : rebase k8s (1.33.2), openshift (4.20) and other underlying dependencies #164 CNTRLPLANE-55 : Add MinimallySufficientPodSecurityStandard annotation to namespaces #161 WRKLDS-1653 : bump(k8s): update k8s.io/* dependencies to v1.32.2 #160 MON-3866 : chore: csr: Add approver for monitoring CSRs issued for metrics-server #148 OCPBUGS-45829 : Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.19 ++ #159 OCPBUGS-43380 : psalabelsyncer: add image volume type to list #157 WRKLDS-1492 : Update k8s dependencies to 1.31.1 #156 OCPBUGS-41166 : Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.18 #152 no-jira: Update OWNERS #155
AUTH-537 : pkg/psalabelsyncer: switch to PSA version ‘latest’ #153 WRKLDS-1292 : bump(k8s.io)=1.30.1 #151 OCPBUGS-34304 : Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.17 #150 OCPBUGS-34304 : Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.17 #149 OCPBUGS-30496 : bump(google.golang.org/protobuf)=v1.33.0 #147 WRKLDS-1016 : bump k8s to 1.29.1 #146 OCPBUGS-24877 : Updating ose-cluster-policy-controller-container image to be consistent with ART #144 OCPBUGS-26190 : Add .snyk file to exclude vendor and ignore unit tests #145 OCPBUGS-24078 : Updating ose-cluster-policy-controller-container image to be consistent with ART #143 go.mod: remove replaces #138
OCPBUGS-21638 : bump(k8s,openshift) to address CVE-2023-44487 #137 OCPBUGS-21638 : Bump deps to address CVE-2023-44487 #133 WRKLDS-806 : bump k8s to 1.28 #132 OCPBUGS-19119 : Updating cluster-policy-controller images to be consistent with ART #131 OCPBUGS-17458 : ps syncer: don’t hotloop on a missing namespace #130 OCPBUGS-17989 : pkg/psalabelsyncer: enforce syncing in case label is set #129 AUTH-413 : ps syncer: only sync labels if noone else is managing them #127 ps syncer: add a controller for run-level 0 namespaces #128
Adjust logs per generic troubleshooting #126
OCPBUGS-15568 : Add timeout into cache sync wait to prevent hanging forever #124 OCPBUGS-15568 : Remove debugs logs in workqueuebucket #125 Add more logs for queue operations #122
OCPBUGS-15568 : Handle error if caches are not synced instead silently exit #121 Add ingvagabund to owners #120
Add logs for quota namespace syncing with verbosity level 2 #119
OCPBUGS-13649 : fix ClusterResourceQuotas to work for all api resources including custom resources #115 OCPBUGS-13579 : bump(k8s) to v0.27.1 #113 OCPBUGS-8271 : external template and route Informer #100 Updating cluster-policy-controller images to be consistent with ART #110
complete controller description #104
OCPBUGS-160 : psalabelsyncer: handle empty namespace of a rolebinding subject #107 Updating cluster-policy-controller images to be consistent with ART #105
update psa dependency version #103
update controller-manager dependency to point to v0.25.0 #101
OCPBUGS-723 : clusterquotareconciliation: do not sync quota monitor cache with no monitors registered #94 OCPBUGS-3985 : enforce pod security admission when techpreview is enabled #89 Updating cluster-policy-controller images to be consistent with ART #91
Full changelog
Bump fedora-coreos to latest stable #531
overlay: prevent NM from modifying resolv.conf #528
Bump fedora-coreos to latest stable #526
Dockerfile.rpms: use stable CRIO releases #521
Full changelog
fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac #2189
fix(cpo): Reduce CNO access if Calico used as network provider #2184
Skip destroyAWSDefaultSecurityGroup if not AWS #2168
Create default security group for AWS clusters #2162
AUTH-323 : pki: split out konnectivity certs from the rootCA #2156 fix(ibmcloud): Initialize image registry config on creates and bad config #2104
fix(cpo): Allow KAS profiling disablement #2122
reduce ignition server scope #2140
OpenID add support for groups claim in the config #2129
fix(cpo): Restart registry operator on annotation #2121
Full changelog
Updating ose-network-interface-bond-cni images to be consistent with ART #37
Full changelog
Source code for this page located on github