Back to index
4.12.0-0.okd-2023-02-18-033438 Download installer and client with:
oc adm release extract --tools quay.io/openshift/okd:4.12.0-0.okd-2023-02-18-033438 Team Approvals:
No tests for this release
Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Created: 2023-02-18 09:44:44 +0000 UTC
Image Digest: sha256:fd08a1dae13a434729451cdb6edd969714a4329904e8d27eb45d94e96021dff4
Release 4.12.0-0.okd-2023-02-18-033438 was created from registry.ci.openshift.org/origin/release:4.12.0-0.okd-2023-02-18-033438
Components
Kubernetes 1.25.4
Fedora CoreOS upgraded from 37.20230110.3 to 37.20230122.3
HOSTEDCP-2019 : Use Client Cert Auth for ARO HCP deployments #1131
OCPBUGS-43508 : fix proxy config and leader election test flakes #1140
OCPBUGS-38667 : pkg/operator: wait for image registry config object cache sync #1138
OCPBUGS-42732 : pkg/storage/azure: also check for auth failure error code on deletion #1129
CFE-1129 : Added AWS TAGS reconciliation #1121
OCPBUGS-42514 : azureclient: stop validating credentials when creating the client #1127
OCPBUGS-42196 : pkg/storage/azure: use cluster-api tag key to discover vnet #1120
OCPBUGS-42106 : Continuous pull-secret updates / slow initialization on build01 (test platform infrastructure) #1122
OCPBUGS-42004 : Set the Managed Identity client ID #1116
OCPBUGS-39485 : Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.18 #1113
OCPBUGS-37543 : Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1095
MULTIARCH-4971 : Sync ImageStreamImportMode setting in the image config status #1090
OCPBUGS-38842 : pkg/resource: invoke update-ca-trust extract with –output #1096
OCPBUGS-37543 : Revert “Merge pull request #1087 from rajdeepc2792/rajdeepc2792/ARO-9391” #1093
ARO-9391 , OCPBUGS-37543 : Avoid Shared Access Key usage for Azure Storage Account when using Managed Identity based auth #1087
OCPBUGS-38287 : bump gophercloud to latest v2 #1086
IR-467 : Enable MSI override for ARO HCP #1082
SPLAT-1721 : Remove alibaba #1077
IR-471 : Removing featuregate for chunkSizeMiB config #1073
Revert “IR-467: Enable Azure MSI authentication” #1079
IR-467 : Enable Azure MSI authentication #1020
OCPBUGS-37207 : Power VS: Check endpoints against lower case strings #1076
IR-471 : Adding additional validation #1074
OCPBUGS-36038 : go.*,vendor: bump go-retryablehttp #1063
IR-477 : pkg/operator: deactivate azure path fix job #1061
IR-471 : Exposing chunksize variable to utilize docker registry config #1060
OCPBUGS-34107 : Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.17 #1045
OCPBUGS-34399 : Update rbac for featuregate #1056
OCPBUGS-33453 : add SAR capability to image-registry #1046
CFE-962 : Refactor code to mock GCP tag service for UTs #1027
OCPBUGS-34399 : Revert “Merge pull request #1026 from deepsm007/expose-chunksize” #1052
OCPBUGS-34399 : Exposing chunksize variable to utilize docker registry config #1026
OCPBUGS-34107 : Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.17 #1040
OCPBUGS-32710 : pkg/storage/s3: use force path style in favour of virtual hosted style config #1028
OCPBUGS-33149 : azure-path-fix: get client secret from k8s secret #1029
OCPBUGS-33868 : Bump openshift api, client-go & library-go #1036
OCPBUGS-33172 : azurepathfix: check if platform status is nil before accessing it #1030
OCPBUGS-32491 : Power VS: Add support for Power VS endpoint overrides #1024
OCPBUGS-29559 : Apply hypershift cluster-profile for ibm-cloud-managed #999
OCPBUGS-32328 : azure-path-fix: support auth via account key (without clientID) #1021
OCPBUGS-30484 : bump indirect google protobuf dependency #1015
NO-JIRA: remove bparees from owners #1019
OCPBUGS-29233 : bump aws-sdk-go from v1.44 to v1.50 #1012
AUTH-482 : set required-scc for openshift workloads #1008
NO-JIRA: bump golangci-lint to v1.56.2 #1013
OCPBUGS-29932 : cmd/move-blobs: log and exit 1 on error instead of panic #1006
OCPBUGS-29637 : azurepathfix: fix stack hub, government and workload identity setup #1003
OCPBUGS-29003 : move azure storage blobs from docker
back into /docker
#998
NO-JIRA: Add hack/local-dev.sh #996
OCPBUGS-28225 : pkg/storage/s3: enable bucket key on encryption settings #993
OCPBUGS-28230 : add FallbackToLogsOnError for easier debugging #992
NO-JIRA: build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.16.0 #989
OCPBUGS-26767 : MULTIARCH-4074: PowerVS: update supported regions #987
IR-409 : build(deps): bump github.com/IBM/platform-services-go-sdk from 0.18.15 to 0.55.0 #974
OCPBUGS-24997 : Updating ose-cluster-image-registry-operator-container image to be consistent with ART #979
IR-410 : build(deps): bump github.com/aliyun/alibaba-cloud-sdk-go from 1.61.1263 to 1.62.637 #980
OCPBUGS-11624 : manifests/02-rbac.yaml: stop using wild cards #964
OCPBUGS-24649 : add private endpoint permissions to Azure credentials request #971
OCPBUGS-24997 : Updating ose-cluster-image-registry-operator-container image to be consistent with ART #975
IR-412 : IBMCloud: Add support for endpoint overrides #955
CCO-248 : Revert “Merge pull request #965 from jstuever/TRT-1368” #967
OCPVE-790 : annotate credentials request manifests #959
OCPBUGS-24161 : Updating ose-cluster-image-registry-operator-container image to be consistent with ART #966
TRT-1368 : Revert “Merge pull request #935 from flavianmissi/CCO-248” #965
IR-366 , IR-367 , IR-411 : allow users to configure private storage accounts in Azure #930
IR-408 : request individual permissions for gcs #935
OCPBUGS-2889 : accept user/pass OR application credentials on Swift UPI secret #924
IR-406 , OCPBUGS-21853 : bump k8s and openshift packages #936
OCPBUGS-21853 : disable http2 for metrics endpoint #938
OCPBUGS-18969 : move pruner role creation from openshift-apiserver #925
OCPBUGS-19262 : Updating ose-cluster-image-registry-operator images to be consistent with ART #918
OCPBUGS-18469 : increase storage account key cache expiration #912
OCPBUGS-17060 : use Recreate on operator deployment #908
OCPBUGS-18103 : check if response is nil before using it #909
OCPVE-632 : add capability annotations to manifests #856
OCPBUGS-17882 : Add rbac permission IDMS, ITMS #891
TRT-1193 : Revert “IR-373: remove node-ca daemon” #899
CFE-846 : Add user defined tags to the GCP buckets created #873
IR-373 : remove node-ca daemon #867
build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 #877
build(deps): bump the k8s-dependencies group with 1 update #895
IR-363 : Update Azure Credentials Request manifest of the Cluster Image Registry Operator to use new API field for requesting permissions #890
build(deps): bump github.com/prometheus/common from 0.37.0 to 0.44.0 #878
CFE-682 : Add user defined labels to the GCP buckets created #872
CFE-682 : Update openshift/api package to latest version #887
IR-390 : Make a configmap for MCO to consume CAs #880
build(deps): bump github.com/aws/aws-sdk-go from 1.44.291 to 1.44.298 #879
build(deps): bump golang.org/x/net from 0.8.0 to 0.11.0 #871
build(deps): bump github.com/aliyun/aliyun-oss-go-sdk from 2.1.10+incompatible to 2.2.7+incompatible #869
.github/dependabot.yml: group certain dependencies #865
IR-389 : bump aws-sdk-go #860
.github: configure dependabot #861
IR-369 , IR-370 : support Azure workload identity #857
OCPBUGS-12132 : Updating ose-cluster-image-registry-operator images to be consistent with ART #854
Updating ose-cluster-image-registry-operator images to be consistent with ART #849
OCPBUGS-8224 : fix storage selection on IBM cloud #847
OCPBUGS-6797 : Add nil validation for IBM Cloud and Power VS infrastructure status in ibmcos #845
MULTIARCH-3212 : Use IBM COS as storage backend for PowerVS #843
OCPBUGS-6621 : bump aws-sdk-go #844
Add UserTags while creating Azure Storage Account #829
IR-341 : bump openshift/api #828
IR-270 : allow registry to create image objects #823
OCPBUGS-6175 : OpenStack: Add support for Proxy #833
IR-308 : Add support for External platform #825
OCPBUGS-4090 : swift: Retry connecting to OpenStack #819
IR-311 : storage: azure: use azidentity with an adapter #807
Bug 2065166 : Remove roles/iam.serviceAccountUser role #824
Updating ose-cluster-image-registry-operator images to be consistent with ART #821
IR-314 : Bump dependencies #816
Add config for golangci-lint and fix errors #820
hack/test-go.sh: generate coverage reports #818
OCPBUGS-3974 : check for nil pointer before dereferencing #814
Bug 2066388 : Add example for s3.regionEndpoint #815
OCPBUGS-2941 : Bump gophercloud #808
add myself to OWNERS #809
Full changelog
API-1835 : migrate the installer controller to SSA #1756
NO-JIRA: Update “deprecated API in use” alert expressions for 1.31. #1750
OCPBUGS-42083 : Don’t rollout revision until three etcd endpoints are listed #1743
WRKLDS-1449 : bump(k8s): update k8s.io/* dependencies to v1.31.1 #1722
API-1835 : update to use the latest revision controller #1747
API-1835 : operator client update #1737
WRKLDS-1449 : cleanup flag validation after they have been added to the installer #1736
NO-JIRA: Re-apply “certrotationcontroller: set AutoRegenerateAfterOfflineExpiry for generated certificates” #1665
create CRDs from openshift/api #1735
OCPBUGS-41778 : increase kube-apiserver failureThreshold #1732
OCPBUGS-41173 : Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.18 #1730
NO-JIRA: Bump library-go to add audit logs about events #1723
OCPBUGS-41257 : introduce –operand-kubernetes-version flag and resolve API group versions accordingly #1731
OCPBUGS-38335 : Bump library-go #1721
NO-JIRA: nodekubeconfigcontroller: set ownership component for node kubeconfigs #1704
AUTH-521 : add disabled syncer as reason to CFE for PSA #1686
NO-JIRA: update library-go #1703
OCPEDGE-1102 : Revert high cpu usage alert description #1680
OCPEDGE-902 : add SNO control plane high cpu usage alert #1676
OCPBUGS-34782 : manifests: add ownership annotation for kubelet-bootstrap-kubeconfig #1694
OCPBUGS-34544 : Disable PersistentVolumeLabel admission plugin #1693
OCPBUGS-34800 : Update APIRemovedInNextReleaseInUse for kube 1.30 / ocp 4.17 #1697
OCPBUGS-33963 : Create one-shot migrations for the flowcontrol group. #1689
API-1783 : bump(k8s): update k8s version to v1.30.0 #1666
OCPBUGS-33522 : add a controller that reconciles SCCs’ volumes #1675
NO-ISSUE: Revert “add SNO control plane high cpu usage alert” #1674
OCPBUGS-33184 : Fix incorrect name for hostmount-anyuid SCC ClusterRole #1671
OCPEDGE-902 : add SNO control plane high cpu usage alert #1660
WRKLDS-1015 : tolerate node-role.kubernetes.io/control-plane:NoExecute #1664
OCPBUGS-22969 : Use v1 for flowcontrol API #1577
OCPBUGS-31384 : use RotatedSigningCASecret controller in update only mode #1659
NO-ISSUE: Revert “certrotationcontroller: set AutoRegenerateAfterOfflineExpiry for generated certificates #1661
NO-JIRA: certrotationcontroller: set AutoRegenerateAfterOfflineExpiry #1652
OCPBUGS-30119 : certrotation: Bump library-go to latest master #1651
OCPCLOUD-2514 : External CCM should no longer rely on feature gate access #1649
OCPBUGS-25894 : operator: stop removing kube-apiserver-slos asset #1642
NO-JIRA: extend node-system-admin-client validity to 2 years #1618
OBSDA-553 : add provider name to cluster_infrastructure_provider when external platform #1638
AUTH-481 : Add PSa labels to openshift-kube-apiserver-operator namespace #1637
OCPBUGS-27842 : Add sno section to alert description #1633
NO-JIRA: Add Vu and Vadim to OWNERS #1634
OCPBUGS-24005 : when skipping a webhook check because of missing CA log the name of the webhook #1632
NO-JIRA: Add ownership for the admin kubeconfig #1584
OCPBUGS-18939 : manifest: drop slo latency metrics in favor of sli #1546
NO-ISSUE: prevent update status conflicts #1621
OCPBUGS-21846 : sync(library-go): revision_controller: update last revision only when a revision is completely rendered #1619
OCPBUGS-14496 : manifests: fix the scope of the TechPreviewNoUpgrade alert #1512
OCPBUGS-24907 : Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART #1606
OCPNODE-1892 : Rebase 1.29.0 #1608
OCPBUGS-24005 : webhookcontroller: report when a webhook resource is missing a caBundle provided by the service-ca-operator #1587
TRT-1420 : revert #1586 #1596 #1607
OCPNODE-1890 : Bump k8s api to v0.29.0 #1586
OCPNODE-1892 : Set flag to skip setting cloud-provider=external #1596
OCPBUGS-24701 : ignore vendor folder in SAST scan #1599
AUTH-442 : psa cluster fleet evaluation #1588
OCPBUGS-24213 : Annotate managed certs #1568
OCPBUGS-23796 : use AlwaysAllow UnhealthyPodEvictionPolicy option #1579
OCPBUGS-21836 : use external load balancer url for jwks-uri #1578
manifests: set owning component for TLS artifacts #1583
OCPBUGS-19160 : Updating ose-cluster-kube-apiserver-operator images to be consistent with ART #1550
OCPBUGS-20331 : manifests/0000_90_kube-apiserver-operator_04_servicemonitor-apiserver: Rename to kube-apiserver-performance-recording-rules #1566
OCPBUGS-20331 : manifests: rename API performance dashboard #1565
OCPBUGS-21729 : bump library-go to include switch to HTTP/1.1 #1567
Update required GV for ValidatingAdmissionPolicy gate. #1561
Update “deprecated API in use” alert expressions for 1.28. #1562
bump(openshift/client-go,library-go) #1560
OCPBUGS-16794 : installerpod: change pod manifest mode to 0600 #1557
OCPBUGS-19024 : remove featuregate upgradeable controller that moved to cluster-config-operator #1547
OCPBUGS-18247 : manifests: don’t include recording rules when Console capability is not enabled #1542
OCPBUGS-15504 : manifest: remove kube-apiserver PrometheusRule #1543
Bump openshift/* libs #1549
Update to Kubernetes 1.28.2 #1548
STOR-1425 : Update to Kubernetes 1.28.1 #1534
OCPBUGS-17436 : Unrevert 1536 and 1538. #1541
Reverts DynamicResourceAllocation enablement on techpreview #1540
OCPBUGS-17436 : Enable DynamicResourceAllocation API in kube-apiserver #1538
Set runtime-config in lockstep with feature-gates, if needed. #1536
bump(api) #1535
OCPBUGS-16511 : bump(*): vendor update #1529
OCPBUGS-16511 : remove dependency on typed prometheus client #1527
OCPBUGS-13635 : make webhook connection failure a warning in log #1526
OCPBUGS-15489 : manifests: add new PrometheusRule for recording rules #1521
certrotation: rotate kube-apiserver-to-kubelet-signer when 80% of validity is over #1523
OCPBUGS-13946 : do not use one second timeout when asserting a webhook connection #1510
OCPBUGS-14008 : Enable “send-retry-after-while-not-ready-once” on SNO #1500
update probes for best practices and consistency #1516
api_performance_dashboard: show apiserver_longrunning_requests metric #1518
allow greater timeout for etcd health check #1517
api_performance_dashboard: show apiserver_request_total instead of apiserver_dropped_requests #1520
OCPBUGS-8404 : pkg/operator/configobserver: check that the serving certificate refer… #1482
OCPBUGS-3986 : dashboard: use recording rules for most metrics #1484
OCPBUGS-14940 : api_performance_dashboard: show apiserver_longrunning_requests metric #1511
OCPBUGS-13946 : degraded_webhook.go x509: certificate signed by unknown authority #1503
OCPBUGS-14323 : Change manifest directory permissions #1505
OCPBUGS-13547 : Remove featureset flag and use only the manifest #1491
OCPBUGS-13303 : pkg/operator/startupmonitor: skip openshift-apiserver readiness check… #1492
OCPBUGS-14038 : Update APIRemovedInNextRelease alerts #1497
STOR-1263 : Bump k8s 1.27 #1469
read featureset from the manifests #1490
Read feature manifest #1488
Cover featuregate access errors in PSA configobserver unit tests. #1486
switch to featuregates via the API #1485
OCPBUGS-10831 : pod security: use v1 api #1481
OCPBUGS-11361 : Revert “Merge pull request #1474 from benluddy/oapi-bump” #1477
Bump dependency on openshift/api. #1474
Updating ose-cluster-kube-apiserver-operator images to be consistent with ART #1460
OCPBUGS-10713 : PSA Violation alert: add ocp_namespace label #1435
OCPBUGS-10039 : update openshift/api to include aesgcm provider in the default apiserver schema #1462
OCPBUGS-10577 : update apf configuration to use v1beta3 #1413
OCPBUGS-8711 : API-1509: Enable AES-GCM encryption #1449
OCPBUGS-8478 : Disable TestBoundTokenSignerController #1455
STOR-1051 : Allow CSI inline volumes in all SCCs #1434
WRKLDS-705 : Bump openshift/api to enable DynamicResourceAllocation through TechPreviewNoUpgrade #1447
bump(api) #1444
bump(*) #1442
Update OWNERS to remove/replace adambkaplan #1438
OCPBUGS-5873 : dashboard: use apiserver_storage_objects metric #1432
API-1520 : Update SLO alerts based on upstream improvements #1431
WRKLDS-649 : Guard pod set readiness probe endpoint explicitly #1437
update APIRemovedInNextRelease alerts #1436
OCPBUGS-6202 : Updating ose-cluster-kube-apiserver-operator images to be consistent with ART #1415
OCPBUGS-6258 : bump(k8s): 1.26.1 #1433
increase audit log size to contain an entire upgrade+e2e run #1430
OCPBUGS-3985 : enable pod security admission for techpreview #1403
OCPBUGS-272 : Remove duplicate find word in error msg for degraded webhook #1428
Fix typo in PodSecurityViolation alert’s description #1391
make the bootstrap kube-apiserver honor cluster-wide featuregates #1419
remove use of deprecated klog flags #1427
Revert “drop log-file flag removed in 1.26” #1425
make api team approver #1377
drop log-file flag removed in 1.26 #1420
bump(api) #1418
Drop flags removed in k8s 1.26 #1417
OCPBUGS-3041 : guard controller: set an explicit hostname to avoid name collisions #1410
STOR-829 : Enable CSIInlineVolumeSecurity admission plugin #1385
OCPBUGS-3985 : update for featureset rendering #1409
OCPBUGS-3929 : update apf configuration to use v1beta2 #1408
bootstrap-kube-apiserver: specify resources.requests #1398
OCPBUGS-1601 : CVE-2022-3259: enable HSTS for kube-apiserver #1392
Bug 2100429 : Allow ephemeral volumes in all SCCs #1380
Full changelog
NO-JIRA: operator/starter.go: don’t report an error on shutdown #117
OCPBUGS-41169 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.18 #116
NO-JIRA: bump(*) #113
OCPBUGS-34306 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.17 #110
OCPBUGS-34306 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.17 #109
AUTH-482 : set required-scc for openshift workloads #107
OCPBUGS-29567 : Apply hypershift cluster-profile for ibm-cloud-managed #106
OCPBUGS-27930 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.16 #103
OCPBUGS-24989 : Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART #101
OCPBUGS-21738 : bump library-go to include switch to HTTP/1.1 #95
OCPBUGS-19253 : Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #94
Revert “specify master node selector on migrator pod” #93
OCPBUGS-17170 : specify master node selector on migrator pod #92
OCPBUGS-16513 : bump(*): update to 1.27.1 #91
Fix operator doc in README #90
Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #89
OCPBUGS-6240 : Updating ose-cluster-kube-storage-version-migrator-operator images to be consistent with ART #87
Full changelog
CNF-14628 : e2e: Adjust profile nodeSeletcor on hypershift (#1183) #1183
CNF-13014 : Align dockerfile ocp version (#1194) #1194
OCPBUGS-43666 : Fix kernel arguments ordering on Intel (#1197) #1197
OCPBUGS-43665 : Drop amd_iommu=on from amd tuning (#1198) #1198
NO-JIRA: Fix typo in codegen script (#1199) #1199
Fix linter warnings (#1196) #1196
Bump the latest k8s and OpenShift dependencies (#1195) #1195
CNF-13014 : Check for tuned patches before attempting to apply them in the dockerfile script (#1193) #1193
CNF-14090 : Add vendor and architecture specific tuning options (#1083) #1083
CNF-13193 : Update NTO Hugepages size validation (#1086) #1086
NO-JIRA: Default to username and timestamp for custom NTO push (#1190) #1190
logs: avoid spamming when PerformanceProfile is missing (#1181) #1181
E2E: fix modify node selector to use lowercase (#1185) #1185
Remove upstream TuneD patch (#1151) #1151
Make ocp-tuned-one-shot.service restart on-failure (#1177) #1177
OCPBUGS-38900 : Drop sched_migration_cost_ns setting (#1163) #1163
NO-JIRA: CI: unblock (#1182) #1182
NO-JIRA: hypershift:handler: add KubeletConfig unique label (#1169) #1169
Fix context deadlines in ExecCommandOnPod() (#1174) #1174
Fix failing pao-functests after a MCO change (#1175) #1175
Add a script to test internal TuneD FDP releases (#1167) #1167
hypershift: make target for perf profile update suites (#1168) #1168
OCPBUGS-41486 : E2E: Add support for hypershift to memory manager (#1161) #1161
NO-JIRA: deferred updates: fix in-place update handling on reboot (#1162) #1162
Fixing empty tuned submodule when using Dockerfile (#1159) #1159
E2E: wait for ovs services affinity to reset after deployment deletion (#1158) #1158
Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.18 (#1155) #1155
hypershift: Adjusted mustgather suite for hosted cluster compatibility (#1143) #1143
E2E: Remove explicitly setting Realtime kernel and realtime hint (#1060) #1060
OCPBUGS-36431 Fix generated cpu mask for 512+ cpus (#1131) #1131
OCPBUGS-39005 : Add cluster-wide proxy env file (#1144) #1144
E2E: Add test to verify cpuset.cpus.exclusive is writeable (#1127) #1127
OCPBUGS-38795 : Fix defer status during recommended profile change (#1142) #1142
NO-JIRA:E2E: Remove checking of reserved cpus in irqbalance file (#1140) #1140
Add support for setting operand verbosity (#1114) #1114
Allow specifying $TAG separately from the full image path (#1139) #1139
CNF-13014 : Add cross compiling support to Makefile (#1135) #1135
PSAP-1428 : Read-only filesystem for the operator (#1136) #1136
Remove vestiges of annotation ignore-cgroups-version from tests (#1059) #1059
OCPBUGS-28647 : tuned: distinguish deferred updates (#1129) #1129
OCPBUGS-34917 : Operator: do not use /tmp (#1132) #1132
CNF-13391 : ppc: adjust for Hypershift (#1124) #1124
OCPBUGS-37865 : E2E: Verify ovs threadpool inherits parent cpu affinity (#1123) #1123
e2e:document: how to run locally on HCP platform (#1122) #1122
NO-JIRA:e2e:hypershift: remove/rename deprecated env variables (#1121) #1121
controller: predicate for containerruntimeconfig (#1108) #1108
CNF-12711 : hypershift: enable feature gate support (#1115) #1115
NO-JIRA: Project cleanups (#1120) #1120
CNF-12680 : CNF-13488: Add performance profile status for hypershift support (#1089) #1089
OCPBUGS-28647 : deferred updates: cleanups (#1119) #1119
Fix the destination of asset’s copy (#1112) #1112
OCPBUGS-28647 : tuned: operand: add support for deferred updates (#1019) #1019
makefile: ensure bindata (#1116) #1116
e2e: performance: skip test on env with insufficient cpus (#1111) #1111
e2e: performance: verify tuned one-shot service vs kubelet (#1106) #1106
CNF-7123 : Enable and adjust 1_performance suite on Hypershift (#1084) #1084
NO-JIRA: Rename and reorganize hypershift labels (#1090) #1090
E2E: Add ginkgo labels to respective test suites (#1097) #1097
NO-JIRA: hypershift: implements missing client calls needed for e2e tests (#1107) #1107
CNF-13530 : hypershift: support containerruntimeconfig
(#1100) #1100
CNF-13394 : Changed node inspector to have lazy initialization (#1093) #1093
NO-JIRA: hypershift:unitests: adjust controller unit-tests (#1105) #1105
Fix requested profile doesn’t exist (#1104) #1104
NO-JIRA:pao:hypershift: fix client implementation (#1094) #1094
hypershift: check updatingConfig condition to be false instead of missing (#1096) #1096
e2e:run-test.sh: match ginkgo CLI to ginkgo package (#1092) #1092
e2e:performance: decode to valid kubeletconfig object (#1091) #1091
OCPBUGS-34972 : perfprof: bump verbosiness of logs (#1075) #1075
e2e:label: platform labels (#1076) #1076
NO-JIRA: remove 4.13->4.14 compatibility code (#1079) #1079
Dockerfile:bump go-builder to 1.22 (#1078) #1078
CNF-11559 : [Part 3 ⁄3 ] Hypershift PAO adoption (#1057) #1057
e2e: Added mixed cpus negative tests (#1026) #1026
OCPBUGS-28647 : tuned: operand: deferred updates prepare: cleanups from #1019 (#1073) #1073
Add tier0 and tier1 tags to non reboot test cases (#1064) #1064
Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.17 (#1068) #1068
CNF-11815 : e2e: Added node inspector for inspecting nodes configuration (#1008) #1008
e2e: latency: Add negative tests (#1071) #1071
e2e: Added hwlatdetect default window size (#926) #926
E2E: Fetch pod node instead of relying on first worker-cnf node (#1070) #1070
Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.17 (#1063) #1063
OCPBUGS-33682 : right-hand-side profile_dirs take precedence (#1061) #1061
No-Jira: E2E: Extend mixed cpus tests to test cpu load balancing annotation (#1028) #1028
NO-JIRA: E2E: Add test for checking cpuset.cpus.exclusive (#1046) #1046
CNF-11817 : e2e: control and data planes clients (#1004) #1004
Unify OKD and OCP Dockerfiles (#1058) #1058
OCPBUGS-33460 : E2E: change tuned profile path (#1055) #1055
E2E: modify test use HaveKey matchter instead of ContainElement (#1056) #1056
E2E: Add automation to check default cpuset from cpu manager state file (#1050) #1050
perfprof: latency e2e: adjust failure message (#1044) #1044
set required-scc for openshift workloads (#968) #968
OCPBUGS-26401 : TuneD prior to kubelet in one-shot mode (#1045) #1045
perfprof: e2e: account for node base load (#1047) #1047
CNF-6517 : [Part 2] Hypershift PAO adoption (#1037) #1037
CNF-11099 : set intel_pstate driver to automatic as default (#950) #950
OCPBUGS-32469 : Remove tuned/rendered object (#1036) #1036
NO-JIRA: 4.16 go deps (#1042) #1042
CNF-6517 : [Part 1] Hypershift PAO adoption (#1032) #1032
PSAP-1354 : Updated a script for deploying a custom NTO image to a cluster (#1030) #1030
OCPBUGS-30111 : Negative net interface name does not reduce queues (#973) #973
Enhance latency cnf-tests UX (#1041) #1041
pao:controller: remove depracated function (#1039) #1039
Replaced tuned hard-included repo with a git submodule (#1029) #1029
OCPBUGS-31694 : E2E: Workload hints test cases fixes (#1012) #1012
OCPBUGS-30647 : NTO operand (openshift-tuned) fixes (#1024) #1024
NO-JIRA: E2E: use strings.CutPrefix instead of trim function to get containerID (#1031) #1031
NO-JIRA: deps: Bump OCP dependencies and remove MCO deps (#1022) #1022
Update the awk print field to fetch rhcos-image (#1033) #1033
set Cgroups V2 as default (#1010) #1010
E2E: Adjust Dynamic ovs pinning tests with cgroupv2 (#1011) #1011
NO-JIRA: deps: Bump to K8s 1.29.2 (#990) #990
Delete duplicate mixedcpus e2e test (#1015) #1015
e2e: Enhance tests related to crio annotations (#955) #955
NO-JIRA: E2E: Adjust tests for cgroupv2 changes (#993) #993
OCPBUGS-30569 : Systemd processes not being moved to cpuset/systemd.slice fix (#992) #992
NO-JIRA: E2E: Add systemd package to fetch properties of cgroup slice (#991) #991
e2e: when crun is enabled by default skip checking runc config (#948) #948
NO-JIRA: Update tuned profile degraded test (#1005) #1005
Change .snyk format (#1000) #1000
Remove removePerformanceOLMOperator() (#997) #997
CNF-11213 : added mixedCpus e2e test (#967) #967
NO-JIRA: Add positive tests with ginkgo timeout (#964) #964
OCPBUGS-30647 : Remove TuneD timeout code and reload on ERRORs (#998) #998
Add sync for rendering extra ctrcfgs (#980) #980
OCPBUGS-29594 : Reduce number of reboots in offline tests (#940) #940
makefile:hypershift: initial make target (#995) #995
e2e:mixedcpus: check env variables of init process (#961) #961
CVE-2024 : 24786: update protobuf (#985) #985
Ignore scheduler plugin IRQs when globally enabled (#987) #987
E2E: skip ovs affinity test due to OCPBUGS-30806 (#988) #988
Remove RELEASE_VERSION from test-upstream-tuned.sh (#969) #969
Update OWNERS file (#872) #872
e2e: perf-prof: increase logging for debugging (#974) #974
OCPBUGS-26400 : scheduler plugin: ignore IRQs (#976) #976
e2e: testdata: remove the annotated profile (#962) #962
OCPBUGS-29641 : fix rendering extra ctrcfgs (#972) #972
NTO operand cleanup (#970) #970
Render: Don’t fail if there is no recommended profile. (#935) #935
OCPBUGS-23167 : Add performance real time tuned template (#954) #954
Add support to inject owner-ref argument to render command (#960) #960
OCPBUGS-29546 : Apply hypershift cluster-profile for ibm-cloud-managed (#958) #958
OCPBUGS-29594 : e2e: fix comparing incompatible types (#957) #957
Render: Add MCSelector to missing default MCPs (#956) #956
e2e: check if shared CPUs survive Kubelet restart (#912) #912
render: perfprofile: don’t annotate perfprof (#951) #951
CNF-9173 : e2e: mixedcpus test (#892) #892
e2e: fix typo in label name (#947) #947
skip realtime disabled tests due to OCPBUGS-28828 (#944) #944
OCPBUGS-29183 : Enable crun as runtime only if missing (#937) #937
Fix e2e tests on SNO (#939) #939
e2e: classifying tests using labels (#936) #936
Bump TuneD to the latest OCP-shipped TuneD upstream version (#938) #938
CNF-9173 : e2e: cgroups: introduce cgroup package (#906) #906
New flags in Performance profile creator (#908) #908
NO-JIRA: e2e: set performance profile cpus using env vars (#909) #909
CNF-11091 : Change webhook failure policy to ignore (#933) #933
CNF-11145 : Enhance render sync to include bootstrap rendering tests (#932) #932
NO-JIRA: perfprof: render: make ownerReference optional (#907) #907
Revert “NO-JIRA: skip crun configuration test” (#918) #918
Render MC without additional PP (#924) #924
Report duplicate priority only for multiple matching profiles (#890) #890
e2e: UpdateWithRetry
only update spec (#914) #914
Skip PerformanceProfile update test (#929) #929
Export ValidateBasicFields for Hypershift (#916) #916
e2e: log: set ctrl-runtime logger (#911) #911
OCPBUGS-22095 : Add default MCP objects for rendering (#833) #833
README Doc Typo Fix (#920) #920
HyperShift code linter PR837 followup (#910) #910
CNF-10786 : e2e: general improvements and cleanup (#898) #898
dnm: skip crun configuration test (#917) #917
Add .snyk file for static code analysis (#902) #902
OCPBUGS-25699 : irqbalance: set banned cpus list to ‘0’ (#899) #899
rps: fail silently when rps application failed (#895) #895
OCPBUGS-20368 : E2E: Add tests for Dynamic ovs pinning (#746) #746
NTO: Add MCP name to filter PP (#878) #878
OCPBUGS-24581 : rps: fix mask update for SR-IOV devices (#877) #877
OCPBUGS-24792 : Make MC names deterministic (#875) #875
makefile: add target to trigger mixedcpus e2e test (#883) #883
Fix error logging in metrics server.go (#882) #882
e2e-test: Call SetLogger (#881) #881
Use go 1.21 (#879) #879
OCPBUGS-24638 : Do not set default RPS sysctl twice (#868) #868
Updating cluster-node-tuning-operator-container image to be consistent with ART (#867) #867
e2e: images: bump default test image to 4.14 (#856) #856
cpuset-configure: exit gracefully on cgroup v2 (#866) #866
CNF-7610 : Mixed CPUs plugin deployment support (#853) #853
New MachineConfig render command (#844) #844
Report duplicate profiles as ERRORs (#864) #864
CNF-10473 : featuregates: main: add feature gates support for PAO controller (#858) #858
e2e:latency: omit LatencyTestRun env variable (#857) #857
OCPBUGS-18649 : E2E: PPC Test cases (#708) #708
OCPBUGS-18640 : Fix Racing Machine Configs and add Day 0 Support (#854) #854
Avoid k8s.io/kubernetes as dep (#848) #848
Remove most //nolint:* overrides (#837) #837
CNF-10294 : main: remove deprecated multi ns function (#770) #770
OCPBUGS-22519 : bump opentelemetry package (#840) #840
Disable HTTP/2 for webhook and metrics servers (#834) #834
Remove obsolete protocols and weak ciphers (#827) #827
OCPBUGS-18662 : rps: trigger udev even per queue (#816) #816
render: change dir path (#824) #824
Makefile: remote tmp folder on clean target (#823) #823
Add golangci-lint (#793) #793
Updating cluster-node-tuning-operator images to be consistent with ART (#795) #795
fix: add if check for no resource match error (#801) #801
nto: avoid timeout when there are too many CSV (#731) #731
Set non-default UserAgent for easier debugging (#807) #807
Improve co/node-tuning operand version reporting (#792) #792
Add the k8s reporter to the configuration suite (#815) #815
OCPBUGS-18783 : e2e: perfprof: enhance the scheduling domain tests (#791) #791
Add kubeconfig path for IBM Managed OpenShift (#810) #810
Add k8s reporter to e2e tests (#666) #666
OCPBUGS-19459 : check for object being nil (#804) #804
Memory manager E2E test fixes (#784) #784
Some unit tests fail with go1.19 as some modules require 1.20 (#794) #794
e2e: add expected max latancy to hwlatdetec test & rename constant (#719) #719
OCPBUGS-18662 : e2e:rps: improve logging (#787) #787
Sync DaemonSet if operand image changes (#785) #785
OCPBUGS-18392 : Change the OVN trigger file name to adapt to OVN IC (#777) #777
OCPBUGS-15044 : e2e:irqloadbalance: wait for profile revert (#768) #768
Add SetLogger() prior to controller-runtime start (#779) #779
OCPBUGS-18052 : feat: added logic to handle legacy sno install (#778) #778
OCPBUGS-17943 : Add rtentsk plugin to pp tuned profile (#767) #767
Tighten the rules for modifying Tuned Profiles (#775) #775
Revert “Tighten the rules for modifying Tuned Profiles (#765)” (#771) #765
Tighten the rules for modifying Tuned Profiles (#765) #765
OCPBUGS-14026 : cgroup: Match the name of the cgroup to what is expected by kubelet (#758) #758
e2e: irqbalance: improve test troubleshooting (#753) #753
OCPBUGS-16348 : OSLAT latency spikes due to tsc karg setting (#756) #756
Makefile: hack: add helpers to compile testsuites (#751) #751
OCPBUGS-17219 : Render mode should not segfault w/ no matching MCP (#754) #754
Release leader election on manager exit (#745) #745
generate missing files (#752) #752
vendor: bump OCP dependencies 08082023 (#750) #750
OCPBUGS-7980 : e2e:ht-aware: exec on the correct worker node (#729) #729
bump k8s to 1.27.4 (#748) #748
e2e: wait for objects deletion (#749) #749
e2e:wait: return updated pod object explicitly (#744) #744
OCPBUGS-17258 : CVE-2023-3978: golang.org/x/net/html (#747) #747
e2e: remove image parameter from must gather (#743) #743
Update the config.openshift.io/node
object’s cgroupMode
to “v1” (#737) #737
Fix a race in e2e test rollback.go code (#739) #739
e2e:irqbalance: applied condition exists (#727) #727
Improve render error handling (#724) #724
e2e:irqbalance: wait for tuned profile to be ready (#721) #721
pao:status: do not take address of loop var (#720) #720
nto:tuned: remove sched_min_granularity_ns settings (#722) #722
Align TuneD with the latest shipped FDP version (#716) #716
E2E: update cpu load balancing test for latest cgroup related changes (#712) #712
Build gather-sysinfo (#714) #714
e2e: overhaul Performance-Addon-Operator tests (#590) #590
e2e: latency testing: increase the expected threshold (#706) #706
e2e: perf-prof: disable truncating gomega output (#702) #702
Configure OVS for dynamic cpu pinning (#559) #559
OCPVE-382 : fix: add default state for crio config (#700) #700
e2e: devmgr: fine tune kubelet restart test (#701) #701
e2e: RPS: fix expected cpu set (#703) #703
Switch to rslave/HostToContainer volume mount propagation (#692) #692
Do not rollback settings on TuneD exit (#699) #699
e2e: reboot: add kubelet restart test (#697) #697
remove conditional skip (#690) #690
e2e: memorymanager fix: check the hugepage size condition (#693) #693
Use RHEL9 as a base (#665) #665
Expose TuneD socket to host. (#651) #651
E2E: Use appropriate device path for rpsmask test (#691) #691
chore: replace github.com/ghodss/yaml
with sigs.k8s.io/yaml
(#628) #628
test: perfprof: devices: fix default test image (#672) #672
e2e: verify latency tests run with LATENCY_TEST_DELAY>120 (#662) #662
E2E: Add memory manager sanity test case (#573) #573
modify owners (#634) #634
Add minLength restriction to Tuned CR (#689) #689
OCPBUGS-14934 : consistent use of ginkgo flags in Makefile (#682) #682
OCPBUGS-14622 : Do not fail creating cgroups if they exist already (#683) #683
OCPBUGS-14193 : pao e2e: Split e2e PAO update lane to more lanes (#631) #631
OCPBUGS-4194 : rps: use default rps mask kernel API (#650) #650
OCPBUGS-14756 : [test] [e2e] Check ci lanes are executing the right test suites (#679) #679
check ocp version and export CNF_TEST_IMAGE variable with appropriate cluster version (#584) #584
OCPBUGS-5529 : Fix updating numa core siblings map in GetCpuSiblings function (#564) #564
Remove cpu-quota.crio.io: disable annotation (#663) #663
OCPBUGS-14137 : e2e: perfprof: add SNO device recovery test (#653) #653
Add PerformanceProfiles to ‘oc adm must-gather’ (#655) #655
Revert “Add PerformanceProfiles to ‘oc adm must-gather’ (#582)” (#654) #582
Add PerformanceProfiles to ‘oc adm must-gather’ (#582) #582
OCPBUGS-13148 : Configure cpu balancing cpu sets for all clusters (#646) #646
OCPBUGS-12978 use WatchNamespace() when deleting Profiles (#644) #644
Updating cluster-node-tuning-operator images to be consistent with ART (#579) #579
OCPBUGS-11083 : pao e2e: fix update test suit timeouts (#626) #626
e2e: Fix RPS test for multi-worker cluster (#641) #641
Revert PR558 and PR585 partially (#639) #639
e2e: add missing test id (#622) #622
OCPNODE-1539 : perf profile: add script for preparing cgroups for CPU load balance disabling (#601) #601
Remove subPaths, they are broken (#623) #623
OCPBUGS-10293 : performance-profile: enable crun for high-performance runtime (#588) #588
Revert #567 and cleanup PPC-generated TuneD config (#611) #611
Backup and revert profile when hugepages test completes (#597) #597
tuned: Handle UserLevelNetworking nil pointer gracefully (#608) #608
A new env var NO_BZ_CHECKS disables Bz and Jira status checks (#607) #607
OCPBUGS-9959 : check scheduler settings under /sys/kernel/debug/sched/ (#581) #581
workload-hints: disable stalld when rt disabled (#592) #592
render: remove uid from render-sync target (#594) #594
OCPBUGS-11083 : e2e: profile updates tests revised (#600) #600
Update to the latest k8s and OpenShift deps (#580) #580
Make the enable-leader-election option work (#586) #586
Update NTO-generated MC on MachineCount <= 1 (#585) #585
remove BZ 2181546 from skip list (#602) #602
Fix updating nodeSelector test (#595) #595
Remove the preStop hook for openshift-tuned (#587) #587
Skip tests depending on Jira or Bz issue status (#591) #591
kubectl explain to explicitly state workloadHint default values (#576) #576
Fix failing HyperShift presubmits (#578) #578
Add a script to validate upstream TuneD (#577) #577
CNF-5900 : feat: added support for generating workload partitioning files (#431) #431
Re enable node selector tests in update tests (#574) #574
Handle different # of CPUs are in the same MCP (#558) #558
composable OCP: make NTO components optional (#524) #524
Update to TuneD v2.20.0 (#565) #565
Remove trailing spaces from test names (#570) #570
Remove optimization to allow full resync (#567) #567
Report host-level sysctls in conflict with TuneD ones (#566) #566
E2E: Per Core Runtime Tuning Test automation (#509) #509
Add test case to check single rx queue on veth interface (#562) #562
Add update-manifests Makefile target (#560) #560
render: initialize klog flag (#538) #538
Refactor IRQ load balancing enable/disable test (#561) #561
update to ginkgo 2 (#517) #517
Skip watch on CA ConfigMap in HyperShift (#550) #550
update owners 20230109 (#542) #542
Add authentication to the /metrics endpoint (#541) #541
Run node selector tests only if we 2 non Performanceworker nodes (#532) #532
Updating profile new lane (#536) #536
Remove trailing space from test name (#540) #540
skip multiple ranges test if cores < 20 and use core as key to delete cpu siblings (#537) #537
Generate must-gather data (#442) #442
e2e:latency: count LATENCY_TEST_DELAY in timeout (#535) #535
E2E: Network stack Pinning tests (#501) #501
refactor: move command func to seperate file (#522) #522
performance-profile: render: make target for render sync (#528) #528
Switch to golang 1.19 (#521) #521
Add Containerfile for RHEL-9 (#519) #519
Fix two irqbalance tests - smp affinity vs online (#518) #518
Fix default hard eviction threshold when PCC is applied (#505) #505
e2e: performance profile: add logs and minor fixes (#485) #485
PPCreator: If rt-kernel enabled, power consumption mode default cannot be selected (#512) #512
Configuration hotfixes documentation fixes (#513) #513
E2E: Automation offline CPUs test (#380) #380
pao: latency-tests: read test log directly from pod (#499) #499
Configure ktimers scheduler prio same as ksoftirqs (#507) #507
Run rps mask tests when Reserved cpu are not nil (#483) #483
Set RPS for all rx queues (#495) #495
Full changelog
NO-JIRA: bump dependencies #598
API-1835 : update to use the latest API #597
API-1835 : switch OpenshiftDeploymentLatestRevisionClient to use the generic client #595
API-1835 : update for more apply loops #592
MULTIARCH-4557 : Sync import mode image config status field in the observed config #582
NO-JIRA: remove unused OperatorClient #594
API-1835 : last transition time update #593
API-1835 : update library-go to use new operator client #584
create CRDs from openshift/api #591
OCPBUGS-41617 : increase openshift-apiserver failureThreshold #588
OCPBUGS-41232 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.18 #586
NO-JIRA: Bump library-go to add audit logs about events #587
OCPBUGS-39589 : Rebase 1.30 #585
OCPBUGS-30492 : bump google.golang.org/protobuf #583
OCPBUGS-34349 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #580
OCPBUGS-34349 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.17 #579
AUTH-482 : Set required-scc for openshift workloads #573
WRKLDS-1015 : tolerate node-role.kubernetes.io/control-plane:NoExecute #574
OCPBUGS-29580 : Apply hypershift cluster-profile for ibm-cloud-managed #572
OCPBUGS-32346 : the apiservice controller waits until bootstrap complete #575
NO-ISSUE: Makefile: fixes test-e2e-encryption-rotation targets #577
NO-ISSUE: fix: TestRedeployOnConfigChange #576
OCPBUGS-22969 : Use v1 for flowcontrol API #559
OCPBUGS-18115 : Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #566
OCPBUGS-18939 : manifest: drop slo latency metrics in favor of sli #547
WRKLDS-1004 : use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #562
OCPBUGS-24972 : Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART #561
OCPBUGS-18115 : Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #551
OCPBUGS-19231 : Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #548
OCPBUGS-21733 : bump library-go to include switch to HTTP/1.1 #552
WRKLDS-728 : Capabilities: drop build/apps APIService when capabilities are not enabled #532
switch image-registry cert CM #545
OCPBUGS-16554 : update dependencies to get rid of goproxy #546
AUTH-408 : bindata: set required-scc #544
Plumb featuregates to the openshift-apiserver #542
allow etcd healthcheck timeout closer to probe timeouts to avoid failing on slower etcd #540
Add AES-GCM encryption tests #539
OCPBUGS-14010 : increase timeout for probes #536
OCPBUGS-2765 : Library go bump #538
OCPBUGS-12813 : Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #534
Updating ose-cluster-openshift-apiserver-operator images to be consistent with ART #525
OCPBUGS-10040 : update openshift/api to include aesgcm provider in the default apiserver schema #526
API-1509 : Enable AESGCM encryption #521
OCPBUGS-4343 : update apf configuration to use v1beta3 #509
OCPBUGS-6233 : Bump dependencies and images #517
OCPBUGS-5300 : routes/status resources can leak sensitive data, exclude it from audit #511
make api team approver #506
OCPBUGS-3929 : update apf configuration to use v1beta2 #508
Full changelog
WRKLDS-1492 : Update k8s dependencies to 1.31.1 #368
OCPBUGS-41227 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.18 #364
create CRDs from openshift/api #367
no-jira: OWNERS: remove former employees #354
OCPBUGS-35801 : nil pointer reference in ocm-operator #355
WRKLDS-1327 : Replace wildcards by explicit list of verbs #353
WRKLDS-1292 : Bump k8s dependencies to 1.30.1 #352
OCPBUGS-34395 : Move cluster
Build CR to runlevel 10 to match CRD #351
OCPBUGS-34077 : Always Disable Default Rolebindings Controller #346
OCPBUGS-34054 : lots of churn during image registry managed/removed transition #347
OCPBUILD-9 : Adds capabilities for builder & deployer rolebindings controller #335
AUTH-482 : set required-scc for openshift workloads #336
OCPBUGS-23848 : Bumps opentelemetry dependencies #341
OCPBUGS-29973 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.16 #337
OCPBUGS-29581 : Apply hypershift cluster-profile for ibm-cloud-managed #334
OCPBUGS-22969 : Use v1 for flowcontrol API #316
BUILD-854 : Add adambkaplan as approver #338
OCPBUGS-24888 : Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART #321
OCPBUGS-28666 : Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #326
OCPBUGS-23624 : Add .snyk file to exclude vendor and ignore unit tests #325
WRKLDS-1016 : Bump k8s dependencies to 1.29.0 #324
OCPBUGS-24190 : Disable deployer-controller when deploymentconfig is disabled #320
OCPBUGS-22956 : Remove blockage of ConfigObserver by build informer HasSynced flag #315
Revert “Revert #300 “API-1666: add image pull secret cleanup controller”” #314
Revert #300 “API-1666: add image pull secret cleanup controller” #313
API-1642 : add image pull secret cleanup controller #300
API-1642 : Do not generate image pull secrets for internal registry when internal registry is disabled. #298
OCPBUGS-21830 : bump(k8s,openshift) to address CVE-2023-44487 #308
OCPBUGS-20164 : Include Build CRD in manifests #306
WRKLDS-806 : Bump kube dependencies to 1.28.2 #305
OCPBUGS-19136 : Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #304
OCPBUGS-18932 : Always sort disabled controller list #302
OCPBUGS-18498 : Disable BuildConfigChange controller when Build cap is disabled #299
route-controller-manager deployment updates #295
OCPBUGS-16072 : Updating Kubernetes and other associated dependencies #296
OCPBUGS-13926 : change the operator log level to default normal in the deployment #289
BUILD-582 , OCPBUGS-14638 : bump(k8s): 1.27.1 #294
OCPBUGS-13926 : add loglevel controller for OCM-o #292
Revert “13895: [WRKLDS-730] route-controller-manager deployment updates” #293
OCPBUGS-13895 : [WRKLDS-730] route-controller-manager deployment updates #288
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #287
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #286
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #285
Bump golang.org/x/net from 0.5.0 to 0.7.0 #284
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #279
OCPBUGS-10568 : migrate to using lease objects for leader election #282
Add Divyanshu Agrawal as a reviewer #283
OCPBUGS-4343 : update apf configuration to use v1beta3 #273
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #274
WRKLDS-594 : bump(k8s): 1.26.1 #277
OCPBUGS-5275 : remove unnecessary RBAC for leader-locking-ingress-to-route-controller #276
OCPBUGS-3929 : update apf configuration to use v1beta2 #272
let deployer pods patch/apply replication controllers #270
Bug 2111979 : Set openshift.io/run-level to nil in openshift-controller-manager nam… #269
Full changelog
OCPBUGS-43380 : psalabelsyncer: add image volume type to list #157
WRKLDS-1492 : Update k8s dependencies to 1.31.1 #156
OCPBUGS-41166 : Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.18 #152
no-jira: Update OWNERS #155
AUTH-537 : pkg/psalabelsyncer: switch to PSA version ‘latest’ #153
WRKLDS-1292 : bump(k8s.io)=1.30.1 #151
OCPBUGS-34304 : Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.17 #150
OCPBUGS-34304 : Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.17 #149
OCPBUGS-30496 : bump(google.golang.org/protobuf)=v1.33.0 #147
WRKLDS-1016 : bump k8s to 1.29.1 #146
OCPBUGS-24877 : Updating ose-cluster-policy-controller-container image to be consistent with ART #144
OCPBUGS-26190 : Add .snyk file to exclude vendor and ignore unit tests #145
OCPBUGS-24078 : Updating ose-cluster-policy-controller-container image to be consistent with ART #143
go.mod: remove replaces #138
OCPBUGS-21638 : bump(k8s,openshift) to address CVE-2023-44487 #137
OCPBUGS-21638 : Bump deps to address CVE-2023-44487 #133
WRKLDS-806 : bump k8s to 1.28 #132
OCPBUGS-19119 : Updating cluster-policy-controller images to be consistent with ART #131
OCPBUGS-17458 : ps syncer: don’t hotloop on a missing namespace #130
OCPBUGS-17989 : pkg/psalabelsyncer: enforce syncing in case label is set #129
AUTH-413 : ps syncer: only sync labels if noone else is managing them #127
ps syncer: add a controller for run-level 0 namespaces #128
Adjust logs per generic troubleshooting #126
OCPBUGS-15568 : Add timeout into cache sync wait to prevent hanging forever #124
OCPBUGS-15568 : Remove debugs logs in workqueuebucket #125
Add more logs for queue operations #122
OCPBUGS-15568 : Handle error if caches are not synced instead silently exit #121
Add ingvagabund to owners #120
Add logs for quota namespace syncing with verbosity level 2 #119
OCPBUGS-13649 : fix ClusterResourceQuotas to work for all api resources including custom resources #115
OCPBUGS-13579 : bump(k8s) to v0.27.1 #113
OCPBUGS-8271 : external template and route Informer #100
Updating cluster-policy-controller images to be consistent with ART #110
complete controller description #104
OCPBUGS-160 : psalabelsyncer: handle empty namespace of a rolebinding subject #107
Updating cluster-policy-controller images to be consistent with ART #105
update psa dependency version #103
update controller-manager dependency to point to v0.25.0 #101
OCPBUGS-723 : clusterquotareconciliation: do not sync quota monitor cache with no monitors registered #94
OCPBUGS-3985 : enforce pod security admission when techpreview is enabled #89
Updating cluster-policy-controller images to be consistent with ART #91
Full changelog
Bump fedora-coreos to latest stable #531
overlay: prevent NM from modifying resolv.conf #528
Bump fedora-coreos to latest stable #526
Dockerfile.rpms: use stable CRIO releases #521
Full changelog
fix(cpo): Remove OLM collect for IBM Cloud to reduce artifacts and rbac #2189
fix(cpo): Reduce CNO access if Calico used as network provider #2184
Skip destroyAWSDefaultSecurityGroup if not AWS #2168
Create default security group for AWS clusters #2162
AUTH-323 : pki: split out konnectivity certs from the rootCA #2156
fix(ibmcloud): Initialize image registry config on creates and bad config #2104
fix(cpo): Allow KAS profiling disablement #2122
reduce ignition server scope #2140
OpenID add support for groups claim in the config #2129
fix(cpo): Restart registry operator on annotation #2121
Full changelog
Updating ose-network-interface-bond-cni images to be consistent with ART #37
Full changelog
Source code for this page located on github