4.7.0-0.okd-2023-07-28-113631

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release:4.7.0-0.okd-2023-07-28-113631

Team Approvals:

No tests for this release

Loading changelog, this may take a while ...

Changes from 4.7.0-0.okd-2021-02-23-121606

Created: 2023-07-28 11:37:23 +0000 UTC

Image Digest: sha256:53550890148ec49fe9f3b6d8914183605d7a15026d3fd334274bed1ec6960d8f

Components

Kubernetes upgraded from 1.20.0-beta.2 to 1.20.15
Fedora CoreOS 47.34.0

New images

branding git [](https://github.com/openshift/origin-branding/commit/) sha256:6b4dc8f0b32726ee5ddd31eef6fac3c1054f7437935f76415e64afe21e2ad4b5
driver-toolkit git bcd11a1f sha256:9b1540cc58f820227a01c8612c11e2c1429e2f40c3a4dd2fc35eee27aaced0ca
operator-marketplace git 23f38d3c sha256:f9c50c480aac13c2821ca454096f0465aa72d153941cc02133de90be1f41c959

Rebuilt images without code change

baremetal-machine-controllers git [](https://github.com/openshift/cluster-api-provider-baremetal/commit/) sha256:1d414b1deaae3fd7356175ba4534ccf3cde77bbb3bcd7c75a4f2a2ce28739e8a
baremetal-operator git e36cbc13 sha256:8d667906a8230fb2f6262e4e364d25ecb87f5b3622e116453f0195482ce8b396
coredns git d4a3ba3f sha256:89b908a403d6c0d771daab45bc99cdaad38cf243d2e6b6eda69e4f9e0131a776
csi-external-snapshotter git 26773735 sha256:81e2185a9bc191c9c8228210b473650c519e371751c26d95c70742751aad5734
csi-node-driver-registrar git 2a77963e sha256:a7867af403524a47fde36dd9df7db4bf311f479b96075ca87331e35e52f273fe
csi-snapshot-controller git 26773735 sha256:292cfa81294a015e58ef0a934fd4458955db0fbec6db5c964f06ef1270b50afd
csi-snapshot-validation-webhook git 26773735 sha256:0cb89f34f95f8f4556f75f40b7ecce28f4af80ca717475460883d09c2e1025f1
ironic-static-ip-manager git 43d640a0 sha256:957d6d879c8af3423e7685f62dc411752037dddec0f61405c92e8175e250956e
k8s-prometheus-adapter git 212d80b4 sha256:0fd96409c78c80e2369452c4d45034094973b316335d8c9cb1c937eb9c89dee3
local-storage-static-provisioner git a0545238 sha256:435465220d3349bd2690fb63844e1fa32a9ee88c43aa361dc81ffbdfc412ed4c
ovirt-csi-driver git 72545e63 sha256:7f80bb4e839b8dd32cf54f661093b3a863ee107b0015db527d28939871c806c4

aws-ebs-csi-driver-operator

STOR-1437: Mark the repository as obsolete #297
STOR-1461: Remove existing path from .gitignore #294
OCPBUGS-22544: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.45.0 #291
STOR-1276: Enable support for mounting volumes with SELinux context #264
Bump k8s.io/apiextensions-apiserver from 0.28.2 to 0.28.3 #289
Bump k8s.io/client-go from 0.28.2 to 0.28.3 #285
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #290
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net@v0.17.0 #277
Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 #278
Bump github.com/prometheus/client_golang from 1.16.0 to 1.17.0 #275
Bump k8s.io/apiextensions-apiserver from 0.27.4 to 0.28.2 #269
OCPBUGS-19157: Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #268
STOR-1432: hypershift: deploy controller with control plane release images #252
OCPBUGS-16783: Chore: Update OWNERS #251
Bump k8s.io/apiextensions-apiserver from 0.27.1 to 0.27.4 #250
Bump k8s.io/component-base from 0.26.3 to 0.27.3 #240
OCPBUGS-15823: Change CSI RPC call timeouts #248
STOR-1065: Rework sidecar bindings to bind common ClusterRoles #244
OCPBUGS-14824: Bump efs-ebs-driver-operator library-go #247
STOR-1168: Bump common libraries #222
Bump Kubernetes libs to v0.27.1 #243
STOR-1167: Enable extra-create-metadata to tag snapshots #223
STOR-1300: Restart controller Pods if metrics-serving-cert changed #216
OCPBUGS-11882: Added safe-to-evict-local-volume annotation from bound-sa-token to ebs-controller #232
OCPBUGS-11882: Added safe-to-evict annotation to aws-ebs-csi-driver-controller pods #231
OCPBUGS-13017: assets/hypershift/controller_sa: Set controller ServiceAccount imagePullSecrets #219
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #217
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #215
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #214
Bump github.com/spf13/cobra from 1.6.1 to 1.7.0 #207
OCPBUGS-8691: Hypershift: set control plane operand properties #205
Bump k8s.io/apiextensions-apiserver from 0.26.2 to 0.26.3 #203
OCPBUGS-8752: fix: typo #198
OCPBUGS-8752: feat: add workload annotation to deployment and daemonset #194
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #195
Bump k8s.io/apiextensions-apiserver from 0.26.1 to 0.26.2 #189
Bump k8s.io/klog/v2 from 2.90.0 to 2.90.1 #190
STOR-875: Implement custom keys in AWS EBS CSI driver operator #185
OCPBUGS-7837: do not inject-proxy when deploying in hypershift control plane #186
Bump github.com/spf13/cobra from 1.6.0 to 1.6.1 #182
Add ok-to-test label to dependabot PRs #184
Bump k8s.io/klog/v2 from 2.80.1 to 2.90.0 #183
add dependabot config for gomod updates #181
STOR-1019: Bump to k8s 1.26 libs for OCP 4.13 #179
STOR-947: support disabling default StorageClass via ClusterCSIDriver #173
[#177] fix 404 in readme #178
Bug 2106736: Add multiplePVsSameID capability #175
STOR-1078: Add hostPaths necessary for SELinux mounts #174
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #172
OCPBUGS-4491: hypershift: use correct kubeconfig secret #169
OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars #168
OCPBUGS-3990: Add HyperShift specific priorityClass #167
OCPBUGS-3978: Don’t deploy VolumeSnapshotClass in static controller #165
STOR-1040: port to hypershift #159
OCPBUGS-1904: Only deploy VolumeSnapshotClass when CRD exists #164
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #162
Reformat for go 1.19 #163
STOR-858: Bump github.com/openshift/* and k8s.io/* #161
STOR-764: Change the default StorageClass to the CSI one (AWS) #160
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #158
Bug 2089973: bump libs to k8s 1.24 for OCP 4.11 #156
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #157
Bug 2074706: Set custom endpoint environment variable if available #153
Bug 2049671: avoid excessive GET and DELETE in ResourcesSync controller #151
Set CSIDriver fsGroupPolicy #150
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #148
Bug 2043130: aws-ebs: Add external-snapshotter permissions to patch snapshots #147
Bug 2038934: Add custom CA bundle support #146
Bug 2028484: AWS EBS CSI driver’s livenessprobe does not respect operator’s loglevel #144
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #143
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #141
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #139
Bug 1998174: Add StorageClass for gp3 #140
Bug 1993931: Storage operators use older kubernetes client #138
Bug 1990146: some controllers missing livenessProbe #134
Use generic deployment controller with additional manifest hooks #128
Start using “embed” module for static assets #131
Updating ose-aws-ebs-csi-driver-operator images to be consistent with ART #132
Updating .ci-operator.yaml build_root_image from openshift/release #130
Bug 1969538: Include default VolumeSnapshotClass #129
Bug 1960732: update manifest and readme #127
Bug 1947402: Deploy multiple replicas of CSI Controller Service #122
Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #126
Bug 1951952: Metrics for cloudprovider error requests are lost #125
Bug 1956411: Add custom tags from Infrastructure #116
Bug 1947774: fix imagePullPolicy to ifNotPresent #120
Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #121
Bug 1924470: Bump Kubernetes to 1.21 #119
Fix kube-rbac-proxy image reference #118
Add metrics scraping #117
Updating ose-aws-ebs-csi-driver-operator builder & base images to be consistent with ART #115
Bug 1933184: Add maxUnavailable to DaemonSets #114
Updating ose-aws-ebs-csi-driver-operator builder & base images to be consistent with ART #112
Cleanup: Remove serviceName from controller manifest #113
Full changelog

aws-machine-controllers

OCPBUGS-2862: Release 4.7 fix go list for 1.18 #451
Bug 1976192: update aws-sdk-go to v1.38.25 #415
Bug 1942966: Update EC2 instance types #398
Updating ose-aws-machine-controllers builder & base images to be consistent with ART #373
Bug 1924471: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #409
Bug 1952614: [OCPCLOUD-1115] Get instance tags from infrastructure object #405
Bug 1935636: Ensure response body is closed when we are finished with the request #391
Full changelog

aws-pod-identity-webhook

Bug 2046237: update go.mod for go1.15 #149
Updating ose-aws-pod-identity-webhook builder & base images to be consistent with ART #130
Full changelog

azure-machine-controllers

OCPBUGS-2864: Release-4.7 Fix go list for go1.18 #266
Bug 2057559: Requeue create on invalid credentials errors #254
And 7 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-installer

Bug 1977481: Dockerfile: repin libvirt #5043
Bug 1975819: upi/vsphere: Use Afterburn guestinfo for static IP and hostname config #5025
Bug 1974282: gather: collect networking information in log bundle #5017
Bug 1971163: Updating AWS instance types #4992
Bug 1945467: aws: allow use of unknown regions in known partitions #4807
Bug 1938426: Set default values to machine pools before validation #4750
Bug 1967355: pattern removed from sed to prevent expansion #4975
Bug 1956483: Bump boot images for RHCOS fixes #4961
Bug 1947427: add proxy params to bootstrap ignition #4830
Bug 1939014: generate glance url considering the region #4753
Bug 1947216: pkg/asset/installconfig/aws: Add iam permission for destorying clusters #4827
Bug 1948398: remove ovirt_cafile from ovirt-credentials secret #4842
Bug 1962435: aws: using dotted domain when looking for public hosted zone #4948
Bug 1940275: Revert “baremetal: send full ignition to masters” #4767
Bug 1943500: Bump gophercloud utils #4794
Bug 1958518: aws: restore setting aws platform spec in infra resource #4918
Bug 1958428: aws: support more auth options in manual mode #4914
Bug 1945907: Byo aws iam roles 4.7 #4813
Bug 1954803: aws: support for bring-your-own hosted zone #4887
Bug 1951571: registry.svc.ci.openshift.org is no longer valid #4853
Bug 1954152: manifests: populate aws user tags in infrastructure #4882
Bug 1935174: RHCOS bump for LUKS, prjquota, etc #4791
Bug 1947122: gcp: install google cloud sdk with yum the recommended way #4824
Bug 1933728: baremetal: include netmask in DNSMasq dhcp range #4698
Bug 1930106: bump ignition to v3_2 #4701
Bug 1922292: [release-4.7] data/rhcos.json: Update boot images #4635
Bug 1924701: Fix cluster destroy when byo is used with Kuryr #4616
Bug 1909978: update ignore-volume-az documentation #4617
Bug 1916692: OpenStack: Delete leftover LBs when destroying cluster #4563
Bug 1919407: openstack/validation: enforce control plane size #4585
Bug 1909978: update documentation for ignore-volume-az usage #4603
Bug 1896218: remove GCP role bindings before service accounts #4602
Bug 1921911: Revert “Merge pull request #4589 from patrickdillon/bz-1896218-gcp-se… #4600
Bug 1921655: OpenStack: fix error handling for cloudinfo #4599
Bug 1896218: remove GCP role bindings before service accounts #4589
Updating ose-installer-artifacts builder & base images to be consistent with ART #4546
maintenance: remove pools and volumes #3620
Bug 1810438: oVirt: Add missing piece for gathering bootstrap IP info #4524
Updating ose-baremetal-installer builder & base images to be consistent with ART #4544
Updating ose-installer builder & base images to be consistent with ART #4543
Bug 1920243: disable anonymous auth on bootstrap nodes #4590
Bug 1917101: UPI ovirt - remove RHCOS image from Network req #4577
Bug 1893117: terraform/vsphereprivate: ignore hosts in maintenance mode #4566
Bug 1919072: AWS cloudformation change protocol from ESP to 50 #4583
Bug 1916938: tolerate equal APIFloatingIP and LbFloatingIP #4575
Bug 1907822: Don’t panic on bad data in quota validations #4483
Bug 1912828: Rebase on the latest terraform provider/go-ovirt #4562
Bug 1916373: upi: allow IPsec ports #4552
Bug 1915460: ovirt: validate cluster name during install #4537
Bug 1910244: Go mod update for golang crypto #4569
Bug 1915617: update boot images for various fixes #4540
Bug 1909502: pkg/asset/manifests: remove etcd records from proxy config #4518
Bug 1915998: Set Additional Control Plane Security Groups on Bootstrap Node #4551
Bug 1916271: openstack known issues: ControlPlane anti-affinity #4548
Bug 1813949: ignore local env variables when we create a service client #4426
Bug 1916505: AWS IPI: Add IPsec master-to-worker flows #4554
Bug 1908468: azure/validation: some memory values are float and not int #4530
Bug 1908583: Set same additional networks on Bootstrap as Control Plane #4528
Bug 1914439: OpenStack Port Create Typo in SRIOV Docs #4529
Bug 1909587: openstack: Create Control plane nodes sequentially #4522
Bug 1910127: ovirt: UPI doc improvements #4498
Bug 1913151: KubeVirt user docs: change role example - add “update” verb to VM #4521
Bug 1910070: Set termination_grace_period_seconds to 10 minutes #4511
Bug 1786314: bump gophercloud/utils #4486
Bug 1911819: Fix docs/user/kubevirt/install-config.yaml to pass ./hack/yaml-lint.sh #4519
Bug 1911819: Add kubevirt user documentation #4516
Bug 1908743: Add validation that the KubeMacPool component is enabled for the namespace #4509
Bug 1910049: Revert “openstack UPI: Use ansible-galaxy” #4506
Bug 1882022: installconfig: enable vsphere folders for datacenters and clusters. #4493
Bug 1908782: terraform: Add rules to allow internal IPsec traffic #4491
Bug 1908171: fix Terraform issue with GCP custom machine types #4496
Bug 1907947: cloud-creds-secret creation with current context info only #4484
Bug 1907628: OpenStack Documentation for MachineSets with Multiple Networks #4463
Bug 1906517: OpenStack: Skip collecting info for empty subnet IDs #4474
Bug 1908280: update docs for Cinder AZs #4487
Bug 1907621: Bump cluster-api-provider-kubevirt version #4479
Bug 1890228: pkg/destroy/aws: Pass destroy if HostedZone does not exist #4477
Bug 1906459: openstack: fix quota checks when they’re unlimited #4470
Update GCP Customization doc to reflect CMEK additions #4468
Openstack: describes how to enable qemu agent for UPI. #4441
oVirt: update team members #4464
Bug 1904663: Fix comparison in pointer ignition customization asset #4455
openstack: Test Nova AZ manifest generation #4459
do not generate the cloud cred secret when credentialsMode is Manual #4416
update gophercloud/utils & terraform/provider-openstack #4457
hack/verify-vendor.sh: Fail early if error #4421
Bug 1899175: data/rhcos.json: Update boot images for RHEL 8.3 #4414
Openstack primary subnet using machine spec #4346
Deprecate computeFlavor in OpenStack platform #4321
openstack: Test manifest creation #4431
openstack: Allow to skip pre-flight validations #4452
Bug 1900138: Removed support for insecure mode for oVirt/RHV installation #4404
openstack: check quotas before creating cluster #4432
OpenStack: Adds clusterOSImageProperties to install-config.yaml #4401
Bug 1904125: Ensure the bootstrap ignition libvirt pool defaults to <clustername>.<id>.bootstrap rather than ‘default’ #4448
Bug 1868748: baremetal: rename JSON field for ClusterProvisioningIP #4053
Add KubeVirt platform as infrastructure for Openshift installation #4350
cloudproviderconfig: Refactor openstack #4447
Pass CLUSTER_PROFILE env var to CVO render #4444
vSphere Destroy: add log messages for tag destruction #4407
baremetal: send full ignition to masters #4427
asset/installconfig/Azure: Validate install-config instance types #4419
Update MCO doc references #4445
baremetal: Add ironic logwatch containers #4437
Create SR-IOV UPI Docs #4439
docs: update docs/design/resource_dep.svg #4443
Bug 1903277: destroy/aws: remove rules from default security group #4440
Set default release image to 4.7 #4409
baremetal: make cluster provisioning IP optional #4429
pkg/asset/quota: Typo in warning message presented to user #4430
Create a machineconfig for IPI pointer ignition customizations #4413
vSphere Docs: Update to include Permissions #4393
OSASINFRA-902: Update OpenStack Custom External LB and DNS Docs #4389
baremetal: correct the cacheImageURL when we don’t have a provisioningIP #4408
Bug 1895874: Use oVirt Engine certificate verified by the user for installation #4387
Bug 1899853: openstack: CP nodes port to use addtional SGs #4411
baremetal: Handle xz filenames for OKD #4392
Support user provided service-account-signing-key and issuer #4373
pkg: validation for previously existing ovirt configuration #4354
Bug 1898194: installconfig/gcp/validation: handle custom machine types #4386
baremetal: when networking is disabled make the bootstrap provisioning ip optional #4390
Bug 1898238: Validate the the API and Ingress FIPs are not the same #4385
Bug 1848945: OpenStack - Documentation for adding worker nodes using ansible #4205
Bug 1813012: Remove unused etcd discovery domain #4067
Bug 1894432: oVirt, add timeout to tmp_import_vm #4341
baremetal: validate that macs are EUI-48 and unicast #4378
Bug 1855351: standardize interrupt error messages #4360
Stop validating DefaultMachinePlatform #4391
Bug 1889779: vSphere destroy: handle failed clusters #4388
openstack UPI: Use ansible-galaxy #4379
Updating ose-baremetal-installer builder & base images to be consistent with ART #4370
Correcting normal typos #4363
Bug 1891543: openstack: remove platform flavor validation #4383
baremetal: remove root_gb from tfvars #4319
Cleanup: make conversion functions private #4376
Bug 1888464: add tag:UnTagResource perm for aws shared networks #4371
Remove the secrets directory recursively #4369
doc/openstack: update quota reqs for kuryr #4362
Fix ‘troubleshooting’ typo #4365
libvirt: Bump bootstrap size (primarily for OKD) #4364
data/data/aws/route53: use CNAME for us-iso-east-1 region #4367
Bug 1886435: Fix azure UPI az group deployment deprecation #4366
asset/installconfig/gcp: Validate install-config instance types #4329
Use ‘kubernetes.io/tls’ instead of SecretTypeTLS which is not being substituted #4342
aws: support custom trust bundle for c2s regions #4335
pkg/asset/cluster/aws: switch to ec2 tagging API #4356
Bug 1867165: baremetal: allow configuring bootstrap mac addresses #4052
doc/openstack/UPI: improvements #4355
Small corrections in ovirt/install_ipi.md #4353
data/bootstrap/files/usr/local/bin/installer-gather: Tee logs into tarball #4345
data/manifests/bootkube/cvo-overrides: Bump default to stable-4.7 #4347
owners: Add mdbooth to openstack-approvers #4348
owners: add dhellmann to baremetal-approvers/reviewers #4343
data/manifests/bootkube/cvo-overrides: Drop the explicit upstream #4112
Bug 1891543: openstack: consider volumes for storage requirements checks #4323
Document how to deploy cluster with BM and VM workers #4336
Wrap errors after OpenStack creds validation #4338
Bug 1855351: Handle CTRL+C in GCP survey #4334
Bug 1894144: baremetal: pin libvirt to 4.5.0 #4339
cmd/openshift-install/create: Use library-go’s IngressURI helper #4245
Bug 1888378: Ignore error if resource group already deleted #4325
Bug 1887863: Patch Flavor Not Found validation for OpenStack Install Config #4289
Use authentication for Ironic on baremetal bootstrap host #4256
Bug 1841381: oVirt, add memoryMB validation #4309
Bug 1878374: Adding more nitro and the AMD instance types (AWS, UPI) #4327
Bug 1866925: display Azure destroy auth error #4331
openstack: fixup markdown #4328
Revert “[Azure][Destroy] Check if resource group exists” #4322
Add Encryption Key reference to GCP MachinePool API #4318
aws: block cluster destroy in c2s region #4316
aws: ensure users set ami id for c2s regions #4315
Bug 1891702: pkg/asset/ignition/bootstrap: exit loop if pem.Decode() fails #4317
Bug 1888378: [Azure][Destroy] Check if resource group exists #4320
oVirt: change owners #4311
Code cleanup and optimizations #4272
Bug 1889267: oVirt, increase terraform template and release image timeout to 20m #4285
install-approvers: add staebler #4297
Bug 1880443: allow providing client options when generating OpenStack MachineSets #4196
openstack: Update CI base image #4291
pkg/asset/installconfig/aws: Validate install-config instance type #4258
go.mod Update #4294
Bug 1836017: Configure haproxy to check /readyz #4012
Bug 1870728: pkg/asset/ignition/bootstrap: Display warning if certificates are expired #4287
Bug 1889852: add new AWS regions #4288
Bug 1877116: aws: use file for bootstrap ign when uploading to s3 #4281
Bug 1886553: GCP - Increase worker NAT min ports #4273
cmd: split newlines in logrus stderr output to new entry #4282
openstack: Add a new team member #4290
Bug 1882649: Determine Glance disk format based on file extension #4279
vSphere: Update dockerfile removing certificate #4274
Update README.md - Broken Link - Spelling #4278
OpenStack: remove legacy image validation #4277
Bug 1882844: vsphere destroy: delete tag category created by installer #4265
Bug 1878900: openstack: Fix error messages in flavor validation #4269
OpenStack UPI: Custom API and Ingress vip addresses #4092
Bug 1888671: openstack: Document Cinder’s ignore-volume-az #4271
Bump K8s.io version to v0.19.0 #4266
destroy: return aws resources that could not be deleted #4270
install-complete: provide troubleshooting info when operators fail #4259
OpenStack: add clusterOSImage validations #3964
Bug 1887525: baremetal: Wait for master-bmh-update script to succeed #4262
openstack: Bump Ansible to 2.9 in UPI #4261
Bug 1874248: types/vsphere/validation: ensure vcenter is all lower case #4254
Bug 1884691: types: allow manual cred mode for gcp and azure #4238
Updating ose-installer builder & base images to be consistent with ART #4250
Remove dead code #4252
Updating ose-installer-artifacts builder & base images to be consistent with ART #4251
openstack privileges documented #4214
OpenStack: Rename lbFloatingIP to apiFloatingIP #4244
Bug 1882191: Add GODEBUG=x509ignoreCN=0 to systemd DefaultEnvironment #4248
Bug 1884435: vsphere - add delay if resolv.conf is not available; wait for dhcp #4237
Bug 1777224: pkg/asset: metadata to depend on ignition #4223
Bump RHCOS images for Ignition entropy fix #4241
Bug 1859174: Upgrade Terraform provider OpenStack #4216
Fix json tag for GCP auth service account #4166
installer/pkg/quota/gcp/limits.go: fix minor typo in comment #4160
IP address should be specified without underscore. #3204
Docs: OpenStack: Remove mention of cluster failing to destroy #4208
Bug 1876815: OpenStack: unset OS_CLOUD #4231
Bug 1884558: do not use local cacert path in generated clouds.yaml #4227
Bug 1878758: openstack UPI: Allow for no FIP or router #4219
Bug 1876844: openstack UPI: Ignition token needs Glance access #4236
Bug 1881703: Revert “Have the MCO manage the ignition stub config” #4228
Bug 1882752: openstack BM: Remove MachineSet on separate subnet #4230
Bug 1878900: openstack: Skip validation for baremetal flavors #4222
Bug 1881532: openstack: Only list external networks in prompt #4226
Bug 1882805: Bump bootimages for ppc64le and s390x to 46.82.202009240941-0 and 46.82.202009241338-0 #4215
Bug 1881757: tls: set mcs cert common name to not-valid-hostname #4210
Bug 1882810: vsphere - local dns prepender not named with template #4220
Bug 1853418: Ignore trailing dots in baseDomain #4146
Bug 1881487: data/rhcos.json: Update to 46.82.202009220041-0 #4206
Bug 1877984: Fix “OpenShiftSDN” to proper case when generating network config #4207
Bug 1879533: oVirt UPI - Better explanation of the inventory #4180
Bug 1878789: Add note about ignition certificates expiration #4171
Bug 1877854: OpenStack: Support multiple subnets #4093
Bug 1879649: oVirt UPI - Simplify create templates #4182
Bug 1880393: OpenStack UPI: Explain how to encode cert to base64 #4203
Bug 1880393: OpenStack UPI: Trim EOLs from the cacert trustbundle #4201
Bug 1878163: Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config #4186
Bug 1879891: Fix cluster destroy when fip less installation happened #4191
Bug 1878163: Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config #4185
Bug 1878163: Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config #4184
Bug 1876815: unset OS_CLOUD during config generator #4177
Bug 1878108: asset/quota/gcp: use GCP api to find CPU count for constraint and guess only on failure #4163
Bug 1877486: proxy: allow * for noProxy #4172
Bug 1880132: destroy/gcp: correct extract service account email from IAM policy binding member #4193
Bug 1861917: Add cpc config to bootstrap #4178
install: increase timeout to 40 minutes #4181
Bug 1879081: OpenStack: Switch to train/centos8 repos #4175
Bug 1877885: oVirt UPI - Add Ansible playbooks download #4169
Bug 1878758: openstack UPI: Optional floating IPs #3755
Bug 1877763: oVirt UPI - python code snippets without semicolons #4170
Bug 1874747: ovirt: dont start the temp VM before template creation #4168
Bug 1878243: openstack: Upgrade the CI build image #4161
Bug 1877440: oVirt UPI Assets_dir set according to env var #4153
Bug 1874457: Add support to clean custom router #4159
Bug 1877676: OpenStack: Refresh documentation about ingress FIP #4059
Bug 1877436: oVirt UPI RHCOS explanations, assets env var #4152
Bug 1877862: oVirt UPI - Fix templates check and optimize image check #4157
Bug 1877741: installer-masters-gather.sh: gather openshift-{azure,gcp}-routes logs #4148
Bug 1873125: Fix python syntax for OpenStack UPI scripts #4154
Bug 1870038: vmware upi: haproxy.service to rm haproxy pod on ExecStop #4132
Bug 1866925: pkg/destroy/azure: fail fast if unable to list resources for any reason #4025
Bug 1873125: OpenStack: UPI missing instructions to update apiVIP and ingressVIP #4133
Bug 1875855: increase timeout for bootstrap ignition downloading #4145
Bug 1856928: Fix Non yaml files in manifests/ or openshift/ directories preventing bootstrap from completing #4091
Bug 1876825: generate lbFloatingIP in OpenStack config #4147
Bug 1876792: oVirt UPI Move Network Requirements section #4142
Bug 1876783: oVirt UPI fix python cmd #4141
Bug 1876562: Small readability improvements to UPI on RHV documentation #4136
Bug 1871653: baremetal: set root device hints on host resources #4088
Bug 1875932: Update baremetal DNS design details #4101
Bug 1868439: openstack UPI: Fix JSON syntax #4140
Bug 1874656: Bump RHCOS for s390x/ppc64le to fix SSH authentication #4124
Bug 1861917: bootkube: add image for cluster-policy-controller #4131
Bug 1871712: pkg/destroy/aws: Detach attached policies during destroy #4126
Bug 1867975: aws: ensure users set ami id for us-gov and cn regions #4103
Bug 1868439: openstack UPI: Fix Ingition key error #4135
Bug 1872080: Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config #4086
Bug 1872080: Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config #4085
Bug 1872080: Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config #4087
BUG 1872646: oVirt, remove tmp VM disk on destroy #4129
hack/update-rhcos-bootimage: update usage example #4097
Bug 1813012: Remove unused flags previously needed for etcd static pod #4063
Bug 1842071: Add ppc64le and s390x documentation links #4115
Bug 1873448: Ensure proper tagging of compute nodes ports #4118
Bug 1872861: Update cli container image for UPI #4098
Bug 1873712: Add information about AZs limitations with Kuryr #4109
Bug 1871795: bump RHCOS images to fix SSH authentication #4095
Bug 1873123: omit deprecated parameters during config generation #4100
Bug 1813012: Remove unused etcd host service and endpoints #4068
Bug 1871030: data/data/gcp: be pedantic about setting the region #4089
Bug 1856270: Update known issues with info about provisioning state node bug #4083
Bug 1870082: Use index in MachineSet names for Openstack IPI #4070
Bug 1813012: Remove legacy code for unmanaged cluster-etcd-operator #4062
Bug 1863026: docs/user/azure: remove newlines from base64 encoding in UPI install doc #4090
Bug 1871048: OpenStack: dynamically set end of DHCP allocation pool #4077
Bug 1868773: Libvirt: Bump bootstrap memory to 4G #4080
Bug 1862209: aws: fix validation for user tags #4081
Bug 1871124: OpenStack: Improve snippet for playbooks download #4079
Bug 1871124: openstack UPI: Provide a way to get the playbooks #4078
Bug 1866534: fixes bootstrap DNS failure on bare metal #4015
Bug 1862957: bump RHCOS images for FIPS fix #4066
Bug 1870592: openstack: Document MachineSet availabilityZone #4074
Readme.md: Remove experimental tag for OpenStack UPI #3982
Bug 1866693: docs: drop kernel-devel from supported extensions #4030
Bug 1864092: baremetal: copy the implementation of rootdevicehints from baremetal-operator #4002
Bug 1862290: vendor/terraform-provider-vsphere: DiskPostCloneOperation patch carry #4060
Bug 1868439: openstack UPI: Fix Ignition v3 #4058
openstack: Known issue: no BMs on Kuryr #4051
Bug 1869329: OpenStack: Place Bootstrap in one of the master AZs #4056
Bump rhcos images for s390x #4050
OpenStack: Fixups to BM workers documentation #4057
Bug 1868439: openstack upi: fix Ignition key error #4047
OpenStack: baremetal worker documentation #3955
Bug 1866949: data/data/aws/route53: use CNAME for gov cloud partition #4043
Bug 1862044: deleting servers using metadata-based filtering #4032
Bug 1867972: destroy/aws: setup the resourcetagging api with correct region for gov cloud #4042
Bump rhcos images for ppc64le #4021
Bug 1867519: make externalNetwork optional #4029
And 16 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-runtimecfg

Bug 1962949: Keepalived- verify that unicast peers list isn’t empty on master nodes #140
Bug 1942488: sort AddressesDefault by route priority, ifindex, and IPv4/IPv6 preference #132
Full changelog

cli, cli-artifacts, deployer, tools

Fix oc builds #1493
Bug 2039763: Remove git:// from new-app tests #1024
Bug 2004194: Registry mirror panic #927
Bug 1995074: revert incorrect allowance of ssh:// prefix with scp styled URLs #902
Bug 1974264: make oc logs work with BuildConfig’s JenkinsPipeline strategy #864
Bug 1976284: skip-multiple-scopes with adm catalog mirror #869
Bug 1963784: Preserve AuthInfo when switching projects #861
Bug 1970811: set User-Agent when talking with registries #848
Bug 1969928: exclude security during exctraction #844
Fix unit test failure #838
Bug 1942938: [release-4.7] inspect clusteroperators as a backup to must-gather if it fails #766
Bug 1924453: Bump github.com/gogo/protobuf to v1.3.2 #753
Bug 1942059: when mirroring to a file destination, mount images under the index location #779
Bug 1939477: Fix unit test to use new IS #769
Full changelog

cloud-credential-operator

Bug 2064428: Remove Azure mint mode support as Active Directory Graph API will be sunset #455
Bug 2027750: Check for aws status in infra platform status field before client setup #427
Bug 1958983: rework GCP passthrough permissions checking #338
Bug 1948396: oVirt credentials secret contains unnecessary “ovirt_cafile” #322
Bug 1948702: [release-4.7] manifests/0000_90_cloud-credential-operator_04_alertrules: Drop CloudCredentialOperatorDown #324
Bug 1928151: spell fix user-visible string #301
Full changelog

cluster-authentication-operator

Bug 2003633: manifests, bindata: explicitely set runAsUser for operator and operand #485
Updating ose-cluster-authentication-operator builder & base images to be consistent with ART #408
Bug 1971087: add a controller to remove webhooktokenauthenticator config #418
Bug 1956797: bump kube to 0.20.6 to prevent delegated authz panics #443
Bug 1941840: endpoints controller: close response bodies #440
Bug 1949941: add a scraper and an alert to check for old-style tokens #437
Full changelog

cluster-autoscaler

Bug 1924416: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #204
Updating atomic-openshift-cluster-autoscaler builder & base images to be consistent with ART #187
Updating vertical-pod-autoscaler builder & base images to be consistent with ART #190
Full changelog

cluster-autoscaler-operator

Updating ose-cluster-autoscaler-operator images to be consistent with ART #239
Bug 1961341: manifests: use v1 for RBAC #206
Bug 1924478: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #207
Full changelog

cluster-baremetal-operator

Bug 1976924: Update bmh crd #190
Bug 1933726: provisioning: configure DHCP range with netmask #112
Bug 1973367: Pass IP_OPTIONS=dhcp|dhcp6 down to OS Downloader container #171
Bug 1972291: Use a cache URL with the .svc.cluster.local suffix #161
Bug 1936544: Inject proxy environment variables everywhere #117
Full changelog

cluster-config-operator

CNTRLPLANE-1311: set up openshift-tests-extension of cluster-config-operator and add a sanity test #448
OCPEDGE-1970: bump(ocp/api): pull in HighlyAvailableArbiter promotion #446
OCPEDGE-1876: bump(o/api,k8s/api,go-version) #445
OCPBUGS-57187: featuregates: always complete featuregates when feature set is CustomNoUpgrade #440
OCPEDGE-1833: feat: bump api dep to pull in change in DualReplica #439
OCPBUGS-52744: Bump golang.org/x/crypto #433
OCPEDGE-1643: bump: ocp/api ocp/library-go k8s #431
OCPBUGS-45477: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.19 #430
OCPEDGE-1308: bump(api,k8s) #428
OCPBUGS-39572: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.18 #426
CFE-921: Update openshift/api package to latest version #423
OCPBUGS-34178: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.17 #419
SPLAT-1630: Bump API version to get new VSphereMultiVCenters featuregate. #418
AUTH-482: set required-scc for openshift workloads #410
OCPBUGS-24871: Updating ose-cluster-config-operator-container image to be consistent with ART #390
TRT-1581: default to self-managed clusterprofile #414
NO-JIRA: change the customnoupgrade featureset to work as force enable and force disable #412
OCPBUGS-29576: Apply hypershift cluster-profile for ibm-cloud-managed #408
NO-JIRA: add check to ensure clusterprofile matches for featuregates #411
OCPBUGS-28621: Fix PSa labels #406
STOR-1700: Bump(openshift/api): to get new VolumeGroupSnapshot API #405
OCPBUGS-28621: Add required PSa labels #401
SPLAT-1400: promote vSphere control plane machinesets from tech preview #400
OCPBUGS-26541: remove duplicate manifests in image #399
Revert “OCPBUGS-26541: remove duplicate manifests in image” #397
OCPBUGS-26541: remove duplicate manifests in image #392
OCPNODE-1671: Update api,client-go to add imagepolicy api #376
Revert “OCPBUGS-19106: Updating ose-cluster-config-operator-container image to be consistent with ART” #388
OCPBUGS-19106: Updating ose-cluster-config-operator-container image to be consistent with ART #385
read featuregates from openshift/api #349
yield CRDs and empty resource rendering to api imge #379
CNF-10479: Bump up api to pull mixed cpu allocation feature gate #386
NP-793: Bump github.com/openshift/api #375
create manifest directory during rendering #382
SPLAT-1272: Update for Nutanix failure domains api changes #378
create parent dir for output #381
Allow split rendering between cluster-config and openshift/api #380
MON-3480: Add MetricsServer FeatureGate #377
NO-JIRA: pkg/cmd/render/config: Remove ReadFeatureGateV1OrDie #361
MCO-813: add MCN featuregate #368
SPLAT-1127: bring in vSphere CPMSO API updates #342
OCPBUGS-21781: Update openshift/api package to latest version #365
OCPBUGS-21744: bump library-go to include switch to HTTP/1.1 #366
CFE-887: Bump openshift/api to add DNSNameResolver. #364
Enable ValidatingAdmissionPolicy in TechPreviewNoUpgrade. #358
OCPBUGS-20164: Remove Build CRD #360
Remove AdmissionWebhookMatchConditions feature gate #359
OCPVE-708: feat: bump(api) #357
OCPCLOUD-1989: Promote GCP CCM from TPNU to default #319
OCPBUGS-19106: Updating ose-cluster-config-operator images to be consistent with ART #353
CCO-412: Bump API to promote azureWorkloadIdentity to defaultFeatures #351
Revert “Bump to enable ValidatingAdmissionPolicy in tech preview.” #346
Bump to enable ValidatingAdmissionPolicy in tech preview. #343
Bump openshift/api to add ValidatingAdmissionPolicy feature gate. #340
OCPVE-626: bump(openshift/api@master) #341
CFE-689: Update openshift/api package to latest version #335
OCPBUGS-16614: go.mod: bump openshift/api #338
OCPBUGS-16614: go.mod: update openshift/api #334
OCPBUGS-16507: bump sigs.k8s.io/kube-storage-version-migrator #333
OCPCLOUD-2010: Remove feature gate for external platform #331
SDN-4024: Vendor openshift/api to get ANP feature-gate changes #330
Promote privateHostedZoneAWS from Tech Preview to Default #328
Update openshift/api #327
OCPBUGS-13547: Promote Azure CCM from TPNU to default #307
OCPBUGS-15877: go upgradeable=false when latencysensitive is used and not corrected #325
Enable feature gate for externalCertificate on Route API #326
stomp the latencysensitive featureset for equivalent default #324
WRKLDS-757: Sync with openshift/api to drop MatchLabelKeysInPodTopologySpread from TechPreviewNoUpgrade #322
SPLAT-1099: bump openshift/api for vSphere static IP feature gate and platform spec #323
remove dead flag for file #309
Changes to move to api@2d36f53 #321
OCPBUGS-12767: Add CustomNoUpgrade CRD versions to payload #320
OCPCLOUD-2010: Re-vendor api to support external platform #306
Update openshift/api to disable EventedPLEG featuregate in techpreview #317
update openshift/api for types and gates #316
Update github.com/openshift/api to pull in evented pleg and sigstore feature flags #312
Update github.com/openshift/api to pull in feature gates #311
OCPBUGS-6266: Rename config-operator_00_namespace run level to 00 #303
Update library-go dependency #305
Add JoelSpeed to owners #302
Update API and library-go #301
Require consistency in rendered artifacts #299
specify all known featureGates in disabled #297
update render to handle directories of manifests #295
adjust to refined openshift/api types #296
update ordering and featuregates #294
add featuregate status #288
Updating ose-cluster-config-operator images to be consistent with ART #287
OCPBUGS-10037: update openshift/api to get new apiserver schema #289
update openshift/api to get new techprevew apiserver schema #286
CFE-601: Update openshift/api package version #279
OSASINFRA-3097: update openshift/api to get External LB fields #278
OCPBUGS-6185: Update go version and ART images #280
OCPBUGS-4207: Revert “Increase verbosity level to track probe timeouts” #274
Update go.mod api,client-go to register crd #270
OCPBUGS-3123: add –feature-set option to render options #271
NE-975: Update openshift/api for updated ingress config loadBalancer fields #268
Increase verbosity level to track probe timeouts #267
Bug 1843043: Update openshift/api for modified config resource description #264
update openshift/api for new ingress manifest #263
Update go.mod api,client-go to register crd #262
This is not the repo you’re looking for. #261
Bump k8s dependencies #260
Update images to be consistent with ART #253
Bug 2082763: Drop the OperatorHub CR instance #245
bump openshift/api, client-go #251
manifests/deployment: comply to restricted pod security level #248
Reorder the empty Node CR resource to ensure it is applied after the Node CRD #244
Bump(o/client-go); Add empty config/v1/node/cluster object #238
Bug 2074243: Bump openshift/api to c3bb724c28 #243
Revert config/v1/Node crd.yaml #242
Bump openshift/api, openshit/client-go to add ImageMirrorSet CRDs #236
bumped openshift API to have node object related changes #233
Bug 2043709: fix component-base logging flags #230
Bug 2034484: feat: bumped library-go version #227
Bug 2033536: vendor: update openshift/api to include alibaba CRD update #229
bump openshift/api #228
Bump golang to 1.17 #225
Bug 1986504: bump openshift/api #223
OWNERS: add Abu as approver #221
Bug 1992592: bump api #219
Bump openshift/api, openshit/client-go #220
Updating openshift/api, openshift/client-go, and openshift/library-go #218
Bug 1993002: Bump API to fix kubebuilder directives #214
Bug 1984635: use new default leader election values to handle SNO environments #213
Bug 1984635: use new default leader election values to handle apiserver rollout on SNO #211
Bug 1986148: Bump API for Ingress RequiredHSTSPolicies #212
Add missing include annotation for ibm-cloud-managed #210
bump: get updated operator API content #209
bump(openshift/api): to get latest CRDs #208
Add AzureStack support #186
Bug 1957822: bump o/api to get the apiserver.TLSProfile doc update #206
Bug 1960339: openshift-user-critical: unset globalDefault #205
bump(*): openshift/api to pickup updated CRD’s #203
Bug 1953563: Add .ci-operator.yaml with build_root_image #198
Bug 1960339: manifests: add preemptionPolicy for openshift-user-critical #202
Bug 1947803: quota: switch to v1 crd #201
Rename workload annotations #194
Bug 1950113: vendor: bump to the latest openshift/api #199
Bug 1878199: remove log level normalizer #197
Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #195
Bug 1947800: Bump openshift/api (and Kube 1.21 release) #192
Add management workload annotations #190
Bug 1949145: Add missing annotations to upc #193
Bug 1949145: Add user facing priority class #191
Add IBM Cloud managed annotations to CVO manifests #166
pkg/operator/kube_cloud_config: Fix “kuberneted” -> “Kubernetes” doc typo #172
Bug 1901535: Update openshift/api dependency #187
Mark operator pod as system-cluster-critical #184
Updating ose-cluster-config-operator builder & base images to be consistent with ART #188
Updating ose-cluster-config-operator builder & base images to be consistent with ART #182
bump openshift/api to support new field controlPlaneToplogy in #175
Full changelog

cluster-csi-snapshot-controller-operator

Bug 1961719: manifests/05_operator_rbac: Drop the unused namespace property #89
Bug 1967328: Remove exclude annotation from manifests to include in ROKS #91
Bug 1929881: Fix installation on ROKS #80
Full changelog

cluster-dns-operator

Bug 1967766: Corefile: Set bufsize to 512 bytes for all servers #277
Bug 1953097: Corefile: Enable bufsize plugin for all servers #267
Bug 1953609: Enable errors plugin for custom upstream resolvers #268
Bug 1942228: Fix spurious reconciliation of DNS daemonset and service #250
Bug 1943826: Corefile: Use 30 second max TTL for caching of negative responses #254
Bug 1937089: Configure CoreDNS to shut down gracefully #247
Bug 1936587: Set CoreDNS’s cache’s maximum TTL to 900 seconds #245
Bug 1928304: Set CoreDNS readiness probe period and timeout each to 3 seconds #235
Full changelog

cluster-etcd-operator

Bug 1976988: [release-4.7]: Increase inertia duration for the EtcdMembersDegraded condition #618
Bug 1976287: Validate the status of the etcd snapshot during backup and restore #617
Bug 1951447: pkg/etcdenvvar/etcd_env.go: Sort endpoints to prevent rollout #568
Bug 1958416: pkg/dnshelpers: fallback to spec if status is not populated for serviceNetwork #594
Bug 1955418: manifests: Shift FlowSchema to level 50 #582
Bug 1954121: [release-4.7] Improve cert controller detection and correction of invalid certs #577
OWNERS: add lilic as reviewer #588
Bug 1954073: bindata, pkg: Propagate operator log level to etcd itself #578
Bug 1925739: pkg/operator/metriccontroller: cleanup transports #537
Full changelog

cluster-image-registry-operator

Bug 1988388: Properly set custom tolerations #708
Bug 1984979: Creating StorageAccount V2 instead of V1 #707
Updating ose-cluster-image-registry-operator builder & base images to be consistent with ART #651
Bug 1977159: bump aws-sdk-go to v1.38.35 #704
Bug 1973693: Setting required pod anti-affinity rules #697
Bug 1960562: manifests: fix selector in image-registry-operator #689
Bug 1957308: Setting user tags always when Storage is Managed #684
Bug 1955176: Setting user provided tags on bucket creation #682
Full changelog

cluster-ingress-operator

Bug 1996897: Add startup probe to the router deployment #645
Bug 1978845: Specify topology spread constraints #632
Bug 1973983: Canary: Handle downgrades from 4.8 to 4.7 properly #627
Bug 1960776: Reconcile openshift-ingress namespace on upgrade #616
Bug 1942603: [release-4.7] Add the new NetworkPolicy-matching label to the namespace #615
Bug 1954097: Annotate services of type LoadBalancer with user tags (AWS only) #606
Bug 1937214: Fix spurious reconciliation of NodePort services #570
Bug 1935891: Canary: Perform canary test probes over https #566
Bug 1936093: Canary: Use cluster-wide proxy for canary client #568
Bug 1934904: Canary: Schedule canary server pods to worker and infra nodes #564
Bug 1932649: Canary: Add edge termination to canary route #558
Bug 1927080: Verify that Serivce resources have idle annotations from corresponding Endpoint resources, should they exist. #546
Full changelog

cluster-kube-apiserver-operator

Bug 2001243: Enforce OpenShift’s defined kubelet version skew policies #1223
Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #1041
Bug 1927644: bootstrap: add –advertise-address=pod.status.hostIP #1042
Full changelog

cluster-kube-controller-manager-operator

WRKLDS-1556: Remove –cloud-provider=external from KCM #862
CNTRLPLANE-1275: Fixing arch issue #869
CNTRLPLANE-1275: Fixed hardcode arch issue #866
CNTRLPLANE-1275: Add JUnit reporter configuration and README for OTE #863
CNTRLPLANE-1275: set up openshift-tests-extension and add a sanity test #859
OCPBUGS-60473: Optimistically update Kube Server and Client CA bundles #854
RFE-4154: Remove readOnlyRootFilesystem from KCM container #856
NO-JIRA: targetconfigcontroller: set description for csr-controller-ca #851
OCPBUGS-53290: Missing endpoint slices for open ports the operator uses #848
RFE-4154: Fix readonly filesystem error when kcm trying to mkdir on /etc/kubern… #847
CNTRLPLANE-371: Update Kubernetes to v1.33.2 #840
Revert “Revert “CNTRLPLANE-343: certrotationcontroller: use minutes instead of days when FeatureShortCertRotation is enabled”” #843
Revert “CNTRLPLANE-343: certrotationcontroller: use minutes instead of days when FeatureShortCertRotation is enabled” #842
CNTRLPLANE-343: certrotationcontroller: use minutes instead of days when FeatureShortCertRotation is enabled #817
WRKLDS-954: pkg/operator: Remove expired conditional resources #839
OCPBUGS-54945: Bump library-go #838
STOR-2267: Run SELinux warning controller #834
NO-JIRA: readme: describe mapping between operatorLogLevel and log level #835
NO-JIRA: readme: describe mapping between logLevel and log level #833
NO-ISSUE: Bump TraceAll log level to v=10 #828
OCPBUGS-48701: Bump to latest library-go #831
CNTRLPLANE-21: Update to Kubernetes 1.32.1 #830
OCPBUGS-48701: Bump library-go for static pod controller apply fixes. #829
OCPBUGS-45825: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.19 ++ #826
API-1835: bump library-go #824
WRKLDS-1449: bump(k8s): update k8s.io/* dependencies to v1.31.1 #816
API-1835: operator client update #823
WRKLDS-1449: disable cloud provider controllers #822
create CRDs from openshift/api #821
OCPBUGS-41121: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.18 #819
no-jira: Update OWNERS #820
NO-JIRA: update library-go #814
OCPBUGS-34859: manifests: set owning-component for csr-signer-signer #812
OCPBUGS-34281: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.17 #813
API-1783: bump(k8s): bump k8s version to v1.30.0 #803
OCPCLOUD-2513: Remove cloud-provider, cloud-config, and cloud-volume-plugin flags #806
API-1800: bindata: convert SecretTypeTLS secrets #804
WRKLDS-1169: tolerate node-role.kubernetes.io/control-plane:NoExecute #802
OCPBUGS-31384: use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode #800
WRKLDS-1071: revision_controller: do not create a new revision when a required object is missing #796
OCPCLOUD-2515: remove CloudControllerOwner condition #795
OCPBUGS-30488: bump(google.golang.org/protobuf)=v1.33.0 #798
OCPCLOUD-2514: Remove reliance on Cloud Provider feature gates for determining if CCM should be deployed. #794
OCPBUGS-29565: Apply hypershift cluster-profile for ibm-cloud-managed #793
OCPBUGS-21846: sync(library-go): revision_controller: update last revision only when a revision is completely rendered #786
OCPBUGS-26117: Add .snyk file to exclude vendor and ignore unit tests #784
OCPBUGS-25587: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART #780
NO-JIRA: Make render unit pass consistently #782
TRT-1420: Bump openshift/library-go to pick up revision_controller revert #781
OCPNODE-1890: Bump k8s api to v0.29.0 #770
OCPBUGS-5825: Removes legacy cloud-provider resources #778
OCPBUGS-25001: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART #777
OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #757
OCPBUGS-25001: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART #775
OCPBUGS-24162: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART #772
OCPBUGS-24215: Annotate rotated certificates #769
OCPBUGS-23462: bump(library-go) #771
bump(k8s) #763
OCPBUGS-21722: bump(openshift/api|client-go|library-go) to pick up http2 disablement #762
OCPBUGS-21722: Bump deps to address CVE-2023-44487 #755
bump(openshift/client-go,library-go) #753
OCPBUGS-16794: installerpod: change pod manifest mode to 0600 #750
OCPBUGS-19263: Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #747
Bump openshift/* libs #746
Update to Kubernetes 1.28.2 #744
STOR-1425: Update to Kubernetes 1.28.1 #742
add roles for the new privileged namespaces PSa syncer controller #743
OCPBUGS-15256: Sync openshift/api to reduce installerpod configmap based file permissions to 0600 #740
OCPCLOUD-2010: Re-vendor api and library-go for external platform support #736
OCPBUGS-14323: Change manifest directory permissions #739
OCPBUGS-13579: remove RBAC for cluster-policy-controller CM leader election #738
OCPBUGS-13579: Drop flags removed in k8s 1.26 #737
Remove featureset flag and use only the manifest #735
Update cloud provider tests with feature gate changes #731
STOR-1263: Bump k8s 1.27 #713
Read feature manifest #733
Restricted featuregate reader #732
use new featuregate API #730
OCPBUGS-12709: Reset library-go branch after Azure revert #729
OCPBUGS-12133: Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #727
Revert azure out of tree provider change #724
OCPBUGS-11352: AWS should not use external-cloud-volume-plugin post CSI migration #721
OCPBUGS-7440: do not degrade KCM when when monitoring stack rollout is in progress #706
OCPBUGS-10568: migrate to using lease objects for leader election #715
Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #709
OWNERS: remove ravi from the owners #714
Reset library-go to openshift fork #708
Update library-go dependency to move Azure to out of tree #705
Update library-go dependency to move AWS to out of tree #707
WRKLDS-705: Bump openshift/api to enable DynamicResourceAllocation through TechPreviewNoUpgrade #701
WRKLDS-649: Guard pod set readiness probe endpoint explicitly #693
OCPBUGS-6259: bump(k8s): 1.26.1 #691
OCPBUGS-3985: Enforce PSA when techpreview is enabled #663
Fixup vendor after library-go update #689
Update library-go dependency to move vSphere to out of tree #687
honor feature gates during bootstrapping #686
remove use of deprecated klog flags #685
OCPBUGS-5269: remove unnecessary leader election RBAC #681
OCPBUGS-5006: add leader-elect-renew-deadline into defaultconfit.yaml #678
Revert “Drop log flags removed in k8s 1.26” #684
bump (openshift/api) for CSIMigration* feature gates #682
Drop log flags removed in k8s 1.26 #680
Drop flags removed in k8s 1.26 #679
Bump library-go #677
Fix typo in podsecurity-admission-label-syncer-controller cluster role #671
Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #673
OCPBUGS-3283: remove unnecessary RBAC #661
OCPBUGS-4401: limit cluster-policy-controller RBAC permissions #670
OCPBUGS-3041: guard controller: set an explicit hostname to avoid name collisions #664
remove not needed RemoveStaleConditionsController #662
bootstrap-kube-controller-manager: specify resources.requests #660
library-go vendoring for installer cmd timeout #659
trt-589 bump library-go #658
Update go mod go version #657
add nodes.config.openshift.io to resource-graph #655
Bug 2101843: Label openshift-infra namespace as privileged #647
k8s 1.25.0 #652
Bug 2118286: always report and reconcile GarbageCollectorDegraded condition #650
OCPBUGS-212: gc watcher should close connections after throwing away a client #649
Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #638
Bug 2001409: add runbook urls to KCM-o alerts #635
Reset Go mod after openstack library-go bump #642
fix TestPodDisruptionBudgetAtLimitAlert by adding SecurityContext to a pod #643
Update library-go to set OpenStack provider to external #641
Make KCM-O conditionally dependent on monitoring stack availability #639
Bug 2103940: Decouple KCM-O’s status from monitoring stack #636
Bug 2099668: introduce GC Watcher controller and add alerts for GarbageCollector #623
Bug 2087684: Reject transition from/to extreme latency profiles (default<->low) #629
Bug 1902307: Let vsphere-legacy-cloud-provider update node objects #631
Bug 2097186: add rbac roles for the podsecuritylabelsyncer even outside bootkube #632
Bug 2053622: PodDisruptionBudgetAtLimit should not alert when no app/pods exist #630
Bug 2086092: bump to k8s v0.24.0 #614
Bug 2086519: bindata/../namespace-openshift-infra: label namespace as privileged #628
Bug 2086958: e2e: Fix test pod disruption budget at limit alert #627
Bug 2086959: e2e: fix flaky TestLogLevel #626
Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #624
Config Observer and Latency Controller for nodes.config.openshift.io WorkerLatencyProfile #611
add RBAC for PSa label syncing controller #616
Fix debugging information #621
manifests/deployment: comply to restricted pod security level #619
policy-controller RBAC: use the new leases API #618
Bug 1918690: update resource-graph to include current resources #613
Update OWNERS #612
Bump(openshift/api): to get CSI changes #601
Bug 2053582: Track static pod lifecycle #608
Bug 2053582: Track static pod lifecycle #606
Update to use configmapleases #602
Bug 2029470: update library-go to get rapid installer pod fixes #597
Bug 2045872: allow cluster-policy-controller to fallback to default cert #594
Bug 2042049: Delete feature gates removed from k8s.io/kubernetes/pkg/features/kube_features.go #592
Bug 2005901: Sync library go #591
Bug 2037856: bump library go #590
Bug 2040132: drop –port flag #589
Bug 2005901: Bump library-go #588
Bug 2038968: bump(openshift/api): to get CSI migration gates switched off #587
Bug 2035986: Replace deprecated annotation #586
Bug 2005901: Guard controller pdb #568
Bug 2034484: fix:library-go nil pointer issue #585
bump k8s to 1.23 #581
bump(library-go): to gather a fix for static pod UID version #579
Bug 2026352: Sync with the latest openshift/library-go@master to pick pruner cert dir check #578
Collect kube-system namespace as a related resource to kube-controller-manager operator #577
update KCM metrics service selector #575
Revert “Merge pull request #554 from atiratree/cpc-metrics” #574
Bug 2010352: add summary, description and namespace to prometheus alerts #573
introduce creation of openshift-infra ns and recycler SA #570
collect metrics for cluster-policy-controller #554
Fix gomod #572
Updating ose-cluster-kube-controller-manager-operator images to be consistent with ART #563
bump(*): vendor update #571
bump(openshift/api): to get fix for typo in feature gate #569
Set operator condition that it doesn’t own cloud provider #558
Switch from experimental-cluster-signing-duration to cluster-signing-duration #567
Bump library go for enabling gcp and vsphere platforms ccm #566
podsecurity: enforce privileged for openshift-kube-controller-manager namespace #565
Bug 2001856: bump library-go and dependencies #562
Bug 1986829: metrics: use client cert auth for metrics scraping #556
Bug 1989073: Exclude openshift only CloudProvider feature gate from KCM config #555
Bug 1986003: Bump k8s.io to 1.22.0-rc.0 #550
Bug 1986437: Bump github.com/openshift/api #551
Cloud Volume Observer: Extended arguments must be a slice #552
remove unused cluster-policy-controller configuration #553
Add ObserveCloudVolumePlugin config observer for KCM config #525
update cluster-policy-controller configuration #545
fix clusterroles for the CSR approver #548
allow upgraded clusters to use the vulnerable service-ca.crt #546
Start using embed module for assets #547
Bump openshift/api #542
Set –cloud-provider=external for supported platforms #450
Refactor remaining controllers to factory #541
Bug 1965562: recycler-for-nfs-… does not set requests or priorityClassName #538
bump library-go to get context fixes #540
Update OWNERS #539
AUTH-26: CSR Approver manifests #535
Bug 1963730: kube-apiserver failed to load SNI cert and key #532
Bug 1938636: Set logLevel for policy and recovery controllers #511
Bug 1954790: pdb: Increase PDBAtLimit timeout #534
Bug 1946479: manifests: use manual service account mounts #531
Bug 1954790: Use appropriate metric for PDB alerts #527
Bug 1966126: manifests: drop root_ca_cert_publisher_sync_duration_seconds metric #526
Bug 1963079: a smoke test for preferred host for KCM #510
Bug 1961173: bump(*): vendor update #524
Rename workload annotations #521
Bug 1953563: Makefile: add verify-golang-versions #523
Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #522
Add management workload annotations #516
Bug 1949418: bump(*): vendor update #519
Remove tnozicka from OWNERS #502
Bug 1948431: Bump openshift api version to get CSIMigrationXXX feature gates #518
bump(k8s.io/*): 1.21 #515
update library-go to fix tight loops #514
Migrate to using keypair generation and validation from library-go #512
Updating ose-cluster-kube-controller-manager-operator builder & base images to be consistent with ART #513
defines test-e2e-preferred-host job for running smoke tests to check if KCM talks to Kube over a preferred host #509
Bug 1934132: Bump github.com/gogo/protobuf to v1.3.2 #507
Bug 1844989: Allow to set –tls-cipher-suites and –tls-min-version of KCM instances through observed config #506
Updating ose-cluster-kube-controller-manager-operator builder & base images to be consistent with ART #504
Bug 1911211: Update build-machinery-go to the latest master HEAD #505
fixes Developing and debugging the operator section in the readme file. #503
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-kube-scheduler-operator

Bug 1924490: Bump github.com/gogo/protobuf to v1.3.2 #334
Full changelog

cluster-kube-storage-version-migrator-operator

Updating ose-cluster-kube-storage-version-migrator-operator builder & base images to be consistent with ART #38
Full changelog

cluster-machine-approver

Bug 1924492: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #120
Updating ose-cluster-machine-approver builder & base images to be consistent with ART #103
Full changelog

cluster-monitoring-operator

Bug 2014023: Backport etcd telemetry #1433
Bug 1986591: node exporter calls /proc/cpuinfo multiple times causing the node to freeze #1300
Bug 1969963: Recording rule for builds by strategy #1206
Bug 1967966: Switch back anti-affinity to soft from hard for Prometheus #1200
Bug 1956565: manifest allowlist: add acm_managed_cluster_info in 4.7 #1144
Bug 1961069: remove dependency of e2e tests on AWS #1162
Bug 1957703: [4.7]: Add hard anti-affinity constraints to Prometheuses #1150
Bug 1950290: remove KubeClientCertificateExpiration alert rule #1171
Bug 1955482: fix kube-state-metrics regexp patterns #1163
Bug 1955482: Drop high-cardinality metrics from kube-state-metrics which aren’t used #1141
Bug 1955469: remove node_mountstatsnfs* metrics #1154
Bug 1955462: drop container_memory_failures_total metric backport #1160
Bug 1952149: oc adm top reporting unknown status for Windows node #1130
Bug 1955449: drop crio image metrics #1134
Bug 1945856: Revert “Bug 1934516: [4.7]: jsonnet/prometheus.jsonnet: Apply system-cluster-critical class to cluster Prometheus ” #1103
Bug 1945851: Backport Remove the “instance” and “pod” labels for kube-state-metrics metrics #1101
Bug 1926876: pkg/manifests: fix prometheus-proxy trustedCA #1051
Bug 1932820: Remove kube-apiserver-availability.rules #1069
Bug 1930876: etcdInsufficientMembers is wrong when etcd is in a pod #1066
Full changelog

cluster-network-operator

OCPBUGS-16891: Use pods oc vs host #1925
OCPBUGS-16686: pick the ovn-k8s-cni-overlay and openshift-sdn shims from right directories #1917
Bug 2058675: ip-reconciler cronjob specification requires hostnetwork, api-int lb usage & proper backoff [backport 4.7] #1325
Adds dougbtv to owners [release-4.7] #1404
[release 4.8] Updates owners #1337
Bug 2041893: Allow to use proxy to connect to OSP cloud #1284
Bug 2021224: ovnkube: set ovn-controller lflow cache limit to 1GB #1217
Bug 2034355: Whereabouts IP Reconciliaton [backport 4.7] #1266
Bug 1924839: [release-4.7] Update protobuf version to address CVE-2021-3121 #1084
Bug 1990932: [Backport 4.7] Whereabouts should have RBAC for leases #1186
Bug 2003800: Use 10% for sdn maxUnavailable for rolling update #1202
Bug 1996063: Use 10% for nw-check-target maxUnavailable #1184
Bug 1988426: Change to use mountPath: /host #1170
Bug 1962036: Use the election mechanism provided by library-go #1098
Bug 1972549: Remove reference to v1beta1 API #1134
Bug 1982217: Use 10% for ovnkube-node for maxUnavailable #1153
Bug 1969860: Escape characters on ini file #1127
Bug 1967994: Backport daemonset to drop icmp frag needed packets received from other nodes in the cluster to Rel 4.7 #1119
Bug 1972183: config: Set enable-profiling true by default and allow enable-profiling as a proxy argument #1129
Bug 1967388: annotate flowcontrol with networkoperator.openshift.io/ignore-errors #1118
Bug 1967972: Add tokenreviews permissions for kube-proxy #1120
Bug 1942603: [release-4.7] Allow from router policy support for cluster network operator #1087
Bug 1937396: kuryr/alerts: change the rule for free count #1011
Bug 1957749: ovnkube: add missing resource requests for SBDB #1088
Bug 1954302: Remove OVS daemonsets #1076
Bug 1956352: [4.7] OVN kubernetes dual-stack conversion #1082
Bug 1941214: Use 10% for ovs maxUnavailable for rolling update #1031
Bug 1936719: OSD-6600 network-metrics missing priorityClass #1007
Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #1050
Bug 1941212: The Multus daemonset should handle 10% maxUnavailable #1030
Bug 1940806: OVN Upgrade: fix upgrade order of node and master #1029
Bug 1929371: Don’t set ClusterOperator Version until rollout is complete #983
Bug 1937829: Cherry-pick dual stack migration #1017
Bug 1928028: Kuryr: Let Kuryr autodetect primary CNI interface #978
Bug 1935473: Include LB members for Machines created on day-2 operation #1002
Bug 1929168: Kuryr: Always set worker_nodes_subnets #987
Full changelog

cluster-node-tuning-operator

Bug 2014430: stalld: update to v1.13.0 #281
Bug 1986739: gather all Tuned CRs #255
Bug 1958885: Switch to client-go leader-with-lease election. #238
Bug 1960542: manifests: fix selector in node-tuning-operator ServiceMonitor #228
Bug 1928614: Keep ignition units in sync with [service] plugin. #215
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-openshift-apiserver-operator

Bug 1996045: bindata: run openshift-apiserver as root explicitly. #468
Updating ose-cluster-openshift-apiserver-operator builder & base images to be consistent with ART #427
Bug 1955502: explicitly allow apiserver pods to write to their root FS #449
Bug 1927321: competing connectivitycheckcontrollers cause pod restarts during upgrades #444
Full changelog

cluster-openshift-controller-manager-operator

CNTRLPLANE-1307: set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test #395
CNTRLPLANE-926: Add readonlyRootFilesystem #392
CNTRLPLANE-1054: Update k8s deps to 1.33.2 #393
WRKLDS-844: sync: Use more descriptive variable name #390
WRKLDS-844: pkg/operator: Split OCM/RCM status conditions #387
WRKLDS-954: pkg/operator: Remove expired conditional resources #388
WRKLDS-1676: ocm deployment: Add POD_NAME #386
WRKLDS-1676: controller manager config: Set leaderElection.name #385
WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #381
OCPBUGS-47528: Add team members to the OWNERS file #373
OCPBUGS-45698: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.19 #372
API-1835: bump library-go #370
WRKLDS-1492: Update k8s dependencies to 1.31.1 #368
OCPBUGS-41227: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.18 #364
create CRDs from openshift/api #367
no-jira: OWNERS: remove former employees #354
OCPBUGS-35801: nil pointer reference in ocm-operator #355
WRKLDS-1327: Replace wildcards by explicit list of verbs #353
WRKLDS-1292: Bump k8s dependencies to 1.30.1 #352
OCPBUGS-34395: Move cluster Build CR to runlevel 10 to match CRD #351
OCPBUGS-34077: Always Disable Default Rolebindings Controller #346
OCPBUGS-34054: lots of churn during image registry managed/removed transition #347
OCPBUILD-9: Adds capabilities for builder & deployer rolebindings controller #335
AUTH-482: set required-scc for openshift workloads #336
OCPBUGS-23848: Bumps opentelemetry dependencies #341
OCPBUGS-29973: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.16 #337
OCPBUGS-29581: Apply hypershift cluster-profile for ibm-cloud-managed #334
OCPBUGS-22969: Use v1 for flowcontrol API #316
BUILD-854: Add adambkaplan as approver #338
OCPBUGS-24888: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART #321
OCPBUGS-28666: Replace ‘coreydaley’ with ‘sayan-biswas’ in OWNERS file #326
OCPBUGS-23624: Add .snyk file to exclude vendor and ignore unit tests #325
WRKLDS-1016: Bump k8s dependencies to 1.29.0 #324
OCPBUGS-24190: Disable deployer-controller when deploymentconfig is disabled #320
OCPBUGS-22956: Remove blockage of ConfigObserver by build informer HasSynced flag #315
Revert “Revert #300 “API-1666: add image pull secret cleanup controller”” #314
Revert #300 “API-1666: add image pull secret cleanup controller” #313
API-1642: add image pull secret cleanup controller #300
API-1642: Do not generate image pull secrets for internal registry when internal registry is disabled. #298
OCPBUGS-21830: bump(k8s,openshift) to address CVE-2023-44487 #308
OCPBUGS-20164: Include Build CRD in manifests #306
WRKLDS-806: Bump kube dependencies to 1.28.2 #305
OCPBUGS-19136: Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #304
OCPBUGS-18932: Always sort disabled controller list #302
OCPBUGS-18498: Disable BuildConfigChange controller when Build cap is disabled #299
route-controller-manager deployment updates #295
OCPBUGS-16072: Updating Kubernetes and other associated dependencies #296
OCPBUGS-13926: change the operator log level to default normal in the deployment #289
BUILD-582, OCPBUGS-14638: bump(k8s): 1.27.1 #294
OCPBUGS-13926: add loglevel controller for OCM-o #292
Revert “13895: [WRKLDS-730] route-controller-manager deployment updates” #293
OCPBUGS-13895: [WRKLDS-730] route-controller-manager deployment updates #288
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #287
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #286
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #285
Bump golang.org/x/net from 0.5.0 to 0.7.0 #284
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #279
OCPBUGS-10568: migrate to using lease objects for leader election #282
Add Divyanshu Agrawal as a reviewer #283
OCPBUGS-4343: update apf configuration to use v1beta3 #273
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #274
WRKLDS-594: bump(k8s): 1.26.1 #277
OCPBUGS-5275: remove unnecessary RBAC for leader-locking-ingress-to-route-controller #276
OCPBUGS-3929: update apf configuration to use v1beta2 #272
let deployer pods patch/apply replication controllers #270
Bug 2111979: Set openshift.io/run-level to nil in openshift-controller-manager nam… #269
BUILD-534: Rebase to k8s 1.25 #268
manage openshift-controller-manager as a Deployment #264
Bug 2055620: Add permissions for image trigger controller #244
switch to route-controller-manager image and use ApplyDeployment no. 2 #267
Revert “switch to route-controller-manager image and use ApplyDeployment” #265
switch to route-controller-manager image and use ApplyDeployment #258
rename operator queue to OpenshiftControllerManagerOperator #257
fix README links #263
OCPBUGS-722: handle errors during operand creation and update #262
OCPBUGS-722: Fix NPD when accessing rote controller spec.deployment.replicas #259
Manage route controllers in separate ns #255
Adding leader election leases permissions for openshift-controller-manager-sa #253
BUILD-417: Adding leader election leases #250
Bug 2110629: Set openshift.io/run-level to nil in openshift-controller-manager namespace #248
Bug 2110617: Add namespace and RBAC needed for ingress-to-route #247
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #245
BUILD-418: Rebase to k8s 1.24 #242
Add user coreydaley as an approver #241
Bug 2086519: AUTH-133: bindata: comply to restricted pod security level #240
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #236
manifests/deployment: comply to restricted pod security level #239
Bug 2067820: Update prometheus client_golang from 1.11.0 => 1.11.1 #238
Bug 2042587: Simplify Sync of Global CA ConfigMap #233
update cert injection annotations to beta #237
Bug 2042587: Fix Conflict Error in Operator Tests #235
Bug 2034484: feat: library-go bump #232
update controller-manager service selectors #231
Bug 2012770: honor labels in openshift-controller-manager metrics #230
BUILD-281: add library-go watch/update of new OCM feature gate field #227
Bug 2004127: bump library-go and dependencies #228
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #226
Bug 1986003: Rebase to Kubernetes 1.22 #225
Bug 1986829: metrics: use client cert auth for metrics scraping #223
Fix config merge order #221
Update OWNERS #220
Updating ose-cluster-openshift-controller-manager-operator images to be consistent with ART #219
Updating .ci-operator.yaml build_root_image from openshift/release #217
Bug 1965283: Static Resources Controller for Sync #216
Bug 1925409: Let openshift-controller-manager create service account tokens #213
Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #212
Bug 1948011: seed upgradeable condition in ocm-o cluster operator status so library-go union code can find it #210
Add management workload annotations #206
Bug 1947793: Deprecated API in use #208
Updating ose-cluster-openshift-controller-manager-operator builder & base images to be consistent with ART #202
Bug 1941526: Bump kubernetes to 0.20.5 #203
BUILD-186: add buildconfig/status permissions to ocm #201
switch to v1beta1 for the p&f APIs #192
Bug 1911470: Set registry routes in operand config #197
Updating ose-cluster-openshift-controller-manager-operator builder & base images to be consistent with ART #198
Remove tnozicka from OWNERS #196
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-policy-controller

Bug 1924496: Bump github.com/gogo/protobuf to v1.3.2 #58
Full changelog

cluster-samples-operator

Bug 2001977: delete hello-openshift in payload imagestream #393
Bug 1923036: Update Jenkins monitored templates names #359
Bug 1961518: manifests: fix selector in ServiceMonitor #375
Bug 1950808: add DeepCopy to avoid SharedInformer cache mutation #370
Full changelog

cluster-storage-operator

Bug 2104632: Add missing ibm cloud annotations to prometheus rbac #297
Bug 2030740: Add trusted CA bundle to vsphere operators #248
Bug 1986030: Manila CSI driver is not in must-gather #193
Bug 1961719: manifests: remove namespace from cluster-storage-operator-role binding #170
Bug 1959546: Add alert about vsphere-problem-detector unable to connect #169
Full changelog

cluster-update-keys

Pack both keys in one verifier-public-key-ci entry #36
Adding the new Openshift CI Signer key #34
Full changelog

cluster-version-operator

Bug 2117347: pkg/cvo: retain initial completed update history entry #819
Bug 2030628: [release-4.7] Respect noProxy #711
Bug 2007674: pkg/cvo/egress: Load HTTPS proxy from Proxy status #664
Bug 1961341: Remove rbacv1beta1 support #652
Bug 1991010: pkg/cvo/metrics: Ignore Degraded for cluster_operator_up #638
Bug 1924428: CVE-2021-3121 gogo/protobuf lacks certain index validation #625
Bug 1970272: Fixing the log message in rbac.go for clusterrole #609
Bug 1970272: Log object updates and show existing/required diff #589
Bug 1969501: install/0000_90_cluster-version-operator_02_servicemonitor: Soften ClusterOperatorDegraded #587
Bug 1969378: avoid hotlooping on RoleBindings with empty APIGroup #584
Bug 1966977: Prevent hotlooping in ImageStreams #580
Bug 1959238: pkg/cvo/sync_worker: Shift ClusterOperator pre-creation into the manifest-task node #557
Bug 1943754: Ensure automountServiceAccountToken is synced on service account updates #539
Bug 1941217: pkg/cvo/sync_worker: Skip precreation of baremetal ClusterOperator #534
Bug 1926795: install/0000_90_cluster-version-operator_02_servicemonitor.yaml: adjust “CannotRetrieveUpdates” to “warning” #516
Bug 1921413: pkg/start: Fix shutdown deadlock when die before getting a leader lock #521
Full changelog

configmap-reloader

OCPBUGS-57846: Updating configmap-reload-container image to be consistent with ART for 4.20 #72
MON-4257: Bump configmap-reload to v0.15.0 #71
ART-13079: append .0 to go.mod version #67
OCPBUGS-45705: Updating configmap-reload-container image to be consistent with ART for 4.19 #66
NO-JIRA: Update downstream to v0.14.0 #65
OCPBUGS-41241: Updating configmap-reload-container image to be consistent with ART for 4.18 #64
OCPBUGS-34355: Updating configmap-reload-container image to be consistent with ART for 4.17 #62
OCPBUGS-34355: Updating configmap-reload-container image to be consistent with ART for 4.17 #61
MON-3671: add machine424 and rexagod to OWNERS #55
OCPBUGS-24912: Updating configmap-reload-container image to be consistent with ART #58
Updating configmap-reload-container image to be consistent with ART #57
OCPBUGS-19171: Updating configmap-reload images to be consistent with ART #56
Updating configmap-reload images to be consistent with ART #52
OCPBUGS-10106: Updating openshift-state-metrics images to be consistent with ART #51
Updating configmap-reload images to be consistent with ART #48
Updating configmap-reload images to be consistent with ART #47
OWNERS: Add Joao and myself, and move former team members to emeritus #46
Updating configmap-reload images to be consistent with ART #45
Bug 2067745: Merge Upstream Master Branch #44
Updating configmap-reload images to be consistent with ART #42
Updating configmap-reload images to be consistent with ART #41
Updating configmap-reload images to be consistent with ART #40
OWNERS: cleanup #39
Updating configmap-reload images to be consistent with ART #38
Updating configmap-reload images to be consistent with ART #37
OWNERS: update #36
Updating configmap-reload images to be consistent with ART #35
Updating .ci-operator.yaml build_root_image from openshift/release #34
Update OWNERS file to reflect new maintainers #33
vendor: fix inconsistent vendoring #30
Updating configmap-reload builder & base images to be consistent with ART #28
vendor: regenerate #29
Full changelog

console

Bug 2090384: Eliminate use of lookaside cache and move to Cachito #11574
Bug 2073602: (Topology) Performance improvement by reducing rerenderings and deep-copy toJSON() calls #11309
Bug 2060451: Fix a crash when the preferred namespace contains just numbers #11135
Bug 2052859: override normal namespace hiding for pods view in node details #11027
Bug 2055411: Filter superseded helm secrets and fix firehose to support partial metadata #11078
Bug 2044949: fix dev-catalog stuck in loading state #10923
Bug 2055403: Add support for fetching partial metadata and fix helm list page crash #11077
Bug 2049313: Topology performance: Do not fetch HPA for each Deployment (Pod Ring) #10991
Bug 2052858: Add subject name selector field to SinkBinding form #11026
(4.7 Backport) Bug 1981412: Change OCM links from cloud. to console.redhat.com #9470 #9471
Bug 2005298: Block and File and Object dashboards should not be part of OCP Console for ODF Managed Services #10097
Bug 2005138: Console overview operators shown upgrading when still waiting on approval #10093
[release 4.7] Bug 1969754: windows vms fail to start rls 4.7 #9657
Bug 2004946: Use httpd in workload YAML templates #10089
Bug 1973707: Add chart URl to annotations during helm install/upgrade #9299
Bug 1995617: Fix Pipeline Download All #9839
Bug 1986724: Show the content of Insights widget when there are 0 recommendations for cluster #9655
Bug 1989642: Preserve user annotations while editing an app #9714
Bug 1975560: Fix typo in olm message #9335
Bug 1975469: Handle array to string conversion for HTTPS checkbox value #9332
Updating openshift-enterprise-console images to be consistent with ART #8596
Bug 1973572: Hardcode strings in Home->Overview page #9322
Bug 1942864: Warning Alert for Encrypted PVs in Create StorageClass #8464
Bug 1965526: Removing library charts from the merged helm repo index entries. #9076
Bug 1970796: update cluster-local label for ksvc #9220
Bug 1970720: fix rotated pipelinerun status icon issue in safari #9216
Bug 1969536: Omit bitbucket branch in URL if it contains slash #9180
Bug 1954962: removes extra annotations form spec template for ksvc #8823
Bug 1948537: add hide/reveal button for kms token #8616
Bug 1942160: Update the scope of GitOpsService resource #8450
Bug 1971667: Track and show error messages in modals #9232
Bug 1969791: fixes: WebTerminal widget should send resize events #9190
Bug 1969105: Update IP address on pods list to show podIP other than … #9172
Bug 1967106: can’t open terminal for pods that have more than one co… #9117
Bug 1966275: Fix Pipeline Parameters in Modals accept empty string defaults #9085
Bug 1961567: Remove the broken Devfile Sample for BuildConfigs #8956
Bug 1963025: Fix documentation link to network policies #8953
Bug 1953606: Fixing failure domain issue with custom pools (4.7 backport) #8775
Bug 1970485: Add pipeline annotation to secrets for private git repo import with pipeline #9207
Bug 1964400: Fix RGW Total Used Query #9038
Bug 1958873: Fix disk replacement during second replacement #9083
Bug 1961887: Update Taskrun tab to make namespace based calls #8968
Bug 1959356: Tech preview badge for arbiter #8870
Bug 1964322: The status of “Used Capacity Breakdown [Pods]” is “Not available” #9028
Bug 1957499: OperatorHub - console accepts any value for infraFeatures #8859
Bug 1960686: Fix hot loop in global config page #8935
Bug 1947091: Fix skipped task status when using conditions #8582
Bug 1962493: Hide TaskRun edit actions for rows in Pipelinerun’s TaskRun tab #8987
Bug 1966798: [release-4.7] Remove monitoring labelling step for 4.7 tests #9073
Bug 1951210: Fix default resource log download file name #8707
Bug 1944046: Warn using an unsupported IE browser #8494
[release 4.7] Bug 1939553: Support binary file type secret entries #8389
Bug 1960544: Overly generic CSS rules for dd and dt elements breaks styling elsewhere in console #8925
Bug 1960093: Make console works against api proxy #8914
Bug 1942027: Fix RBAC check when creating a resource #8448
Bug 1956336: Fix Triggers section in eventlistener details page #8842
Bug 1953937: Fixing PVC creation page issue in 4.7(Reverting wrong commit) #8784
Bug 1952578: Don’t poll ClusterVersion when user doesn’t have authority #8749
Bug 1950489: Fix “Create binding” link from Role page, RoleBindings tab #8685
Bug 1948958: Fix ingress details page to show referenced secret name #8633
Bug 1944955: Fix close button in the new ‘Storage cluster exists’ warning alert modal #8524
Bug 1956313: Save additional parameters from build guidance container and drop it #8841
Bug 1953728: Fix issues related to loading dynamic plugins #8780
Bug 1945594: fixing-project-creation-and-updated-packageJson #8536
Bug 1950214: Fix start pipeline action access review #8681
Bug 1948369: Remove cluster label from predefined monitoring queries #8613
Bug 1954109: Backport telemetry dynamic extension to release-4.7 #8783
Bug 1952209: Consistent formatting of dates and times #8734
Bug 1952293: adds check for templates #8736
Bug 1942843: Modified description for storage class encryption - 4.7 Backport #8462
Bug 1948938: [release-4.7] Prow script point to deleted resource #8619
Bug 1944855: Update Dockerfile.product for nodejs v14.16.0 #8488
Bug 1945153: Remove pipeline Tech preview badge for pipelines GA operator #8528
Bug 1943643: fix pipeline metrics endpoint for 1.4 osp #8489
Bug 1944349: fix backwards incompatible trigger api changes #8503
Bug 1943441: Add ‘Roll Back’ action for Replication Controllers and Replica Sets #8475
Bug 1925792: Fix translation for edit annotation #8078
Bug 1941468: Change link for not available state #8431
Bug 1939608: Fix null handling in FilterToolbar_ to prevent possible exceptions #8394
Bug 1937356: Fix to show correct internal image-stream name in container image edit flow’s internal registry image-stream dropdown for kn service #8353
Bug 1927198: fix pvc string in pvc.view #8126
Bug 1927311: avoid 404 errors attempting to load en-US #8128
Bug 1931382: Hide pipeline section in container image edit flow #8209
Bug 1933665: [release-4.7] Create ImageStream and other resources for samples step by step #8255
Bug 1935672: [release-4.7] fix pipelinerun status icon rendering issue #8311
Bug 1932272: Fix KMS validation error for 4.7 release #8221
Bug 1937313: Removed loaded prop and nested component #8351
Bug 1936803: support service binding operator version 0.5.0 #8335
Bug 1937469: Pod/node/ip/template isn’t showing when vm is running #8357
Bug 1932277: Create new pool with arbiter - wrong replica (4.7 release) #8234
Bug 1930152: Do not fail new VM wizard when no storage classes are available #8190
Bug 1937086: Fix topology crash due to selfLink deprecation #8317
Bug 1928228: retry co-fetch on 409 POST or 429 #8154
Bug 1932151: Fix rendering of access-mode selector #8229
Bug 1929198: allow choice of binding type when creating RoleBinding #8172
Bug 1928023: Consider finally tasks when calculating task status #8149
Bug 1927407: update pf virtualized dependency to fix breakpoint prop missing in virtualized table #8130
Bug 1932968: Fix to avoid overriding of d/dc pod template container values #8248
Bug 1926830: [CI][e2e] Add storage.bind.immediate.requested annotation to golden image dvs #8245
Full changelog

console-operator

OCPBUGS-61726: Revert “OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition” #1046
OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1041
OCPBUGS-61483: Update DEFAULT_DOC_URL to point to OpenShift Container Platform 4.21 #1044
OCPBUGS-61383: Update QuickStarts typo and doc link #1042
OCPBUGS-60863: Rename Dockerfile to Dockerfile.ocp #1039
OCPBUGS-60782: pluginOrder field should only contain available plugins #1038
OCPBUGS-58094: Consolidate telemetry values oscilation #1034
CONSOLE-4665: Vendor ConsolePluginCRD v1alpha1 changes #1018
OCPBUGS-60219: make console operator responsible for creating oauth client #1032
OCPBUGS-57854: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.20 #996
OCPBUGS-57736: bump github.com/openshift/client-go #1030
OCPBUGS-45300: Wire synced OIDC Auth CM to Console #1024
OCPBUGS-45300: Fetch synced CM for the CertificateAuthority issuer #1017
OCPBUGS-59099: Bump docs version #1015
OCPBUGS-58434: Console-operator should report plugin services as relatedObjects #1012
NO-JIRA: Remove ocs-install-tour #1003
OCPBUGS-58320: Fix deprecated API Version in RHDH Operator Quickstart #1009
OCPBUGS-57630: Update downloads deployment configuration to use master node selector #1005
OCPBUGS-57129: Revert adding Console capability into SVM #1004
OCPBUGS-57519: Revert #981 “CONSOLE-4523, OCPBUGS-57468: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads” #994
OCPBUGS-57129: Add missing Console capability annotation #992
CONSOLE-4523, OCPBUGS-57468: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #981
ODC-7790: Remove ODO download link #987
OCPBUGS-52556: Revert v1alpha1 removal #990
OCPBUGS-43792: Add plugins order to console config #980
OCPBUGS-55698: Lift FeatureGate by bumping openshift/api #984
ODC-7780: update quick starts to work in the converged perspective #977
OCPBUGS-55082: Revert “Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads” #979
CONSOLE-4523: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #976
NETOBSERV-2023: Implement a quickstart for netobserv operator #955
CONSOLE-4481: Add additional CSP test #975
OCPBUGS-45514: Report email_domain to telemetry #971
CONSOLE-4481: Add junit generation for unit and e2e testing #974
ART-12521: update go mod dependency for konflux #973
NETOBSERV-2029: add netobserv ConsoleCLIDownload #958
OCPBUGS-53164: Add annotations to Enable developer perspective quick start to include in the console quick starts #970
ODC-7723: Add quick start to enable developer perspective #968
CONSOLE-4508: Enable CSP e2e test #969
OCPBUGS-51256: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #965
OCPBUGS-51379: Re-revert Report email_domain to telemetry + fix panic for uninitialized mail value. #964
OCPBUGS-45514: Report email_domain to telemetry + fix panic for uninitialized mail value. #962
OCPBUGS-51156: Revert #950 “OCPBUGS-45514: Report email_domain to telemetry” #961
OCPBUGS-45514: Report email_domain to telemetry #950
OCPBUGS-48536: Bump documentationBaseURL to 4.19 #956
OCPBUGS-48740: Vendor the missing CSP directives #960
OCPBUGS-46513: Add ConsolePluginContentSecurityPolicy feature gate to… #957
OCPEDGE-1345: feat: add arbiter node support for HA #939
OCPBUGS-45722: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.19 #946
OCPBUGS-45222: Dont disable console when authConfig type is set to None #944
OCPBUGS-44953: don’t set current clients when no OIDC providers are configured #945
OCPBUGS-44362: Remove the v1alpha1 schema for ConsolePlugin CRD #942
OCPBUGS-44556: console/status: set initial value of Message field #940
CONSOLE-4292: Console-operator should configure console with the CSP allowed directives #938
OCPBUGS-43837: Bump docs version #937
NO-JIRA: Update owners file: Update my github username) #936
OCPBUGS-41258: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.18 #929
NO-JIRA: Remove unused code #934
OCPBUGS-42534: Console-operator’s route healthcheck should have longer retry #933
CONSOLE-4055: Have GettingStartedBanner enabled by default #930
NO-JIRA: Update OWNERS files #931
CONSOLE-4055, OCPBUGS-39357: Vendor API changes #927
OCPBUGS-38549: Get externalOrganizationID instead of the organizationID #925
CONSOLE-4163: Add RBAC for console to GET PackageManifests #921
CONSOLE-4161: Add Capabilities to config builder #920
OCPBUGS-35941: Bump documentationBaseURL to 4.17 #912
OCPBUGS-36213: Bump openshift/api to pick up removal of conversion webhook server reference #919
OCPBUGS-33715: Add logging for determining the ORG_ID source #918
OCPBUGS-33715: Cache organization ID when the ID changes #913
TRT-1733: Revert #914 “OCPBUGS-29547: Apply hypershift cluster-profile for ibm-cloud-managed” #915
OCPBUGS-29547: Apply hypershift cluster-profile for ibm-cloud-managed #914
OCPBUGS-33787: Add cluster wide trusted CA bundle to operator #911
OCPBUGS-33787: Tolerate the absence of ingress capability on HyperShift clusters #886
OCPBUGS-33787: deps: bump openshift/api #907
AUTH-482: set required-scc for openshift workloads #871
OCPBUGS-34364: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.17 #906
OCPBUGS-31777: Updates message verbs to use %q where appropriate. #902
OCPBUGS-33715: Cache organization ID #904
CONSOLE-4047: Console-operator should be internally using listers for fetching data #901
OCPBUGS-33505: Add missing return statement to fix crash in healthcheck controller #900
OKD-214: Dockerfile: Add ARG TAGS=ocp #896
TRT-1664: Revert #895 “CONSOLE-4047: Console-operator should be internally using listers for fetching data” #899
CONSOLE-4047: Console-operator should be internally using listers for fetching data #895
CONSOLE-3943: Default telemetry values #890
CONSOLE-4014: Pass OCM organization ID and OCP cluster ID to console-config.yaml #893
TRT-1623: Revert “Merge pull request #889 from jhadvig/CONSOLE-4014” #892
CONSOLE-4014: Pass OCM organization ID and OCP cluster ID to console-config.yaml #889
OCPBUGS-20129: Fix triggering upgradenotification in the cluster installation time #790
OCPBUGS-20466: Tighten console operator permissions for cluster operators #873
OCPBUGS-32400: base OIDC status updates on the ExternalOIDC feature gate #887
OCPBUGS-29547: Apply hypershift cluster-profile for ibm-cloud-managed #868
OCPBUGS-30458: Bump k8s.io/component-base to latest #884
CONSOLE-3944, OCPBUGS-31020: Disable segment analytics when cluster telemetry is disabled #877
CONSOLE-3910: Add quickstart to impersonate a system:admin user #865
OCPBUGS-31482: oidc: synchronize the CM with a CA to trust the issuer, if configured #879
OCPBUGS-29331: Update RHDH QuickStarts and add CR examples #878
OCPBUGS-24913: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.16 #827
OCPBUGS-28541: Remove Janus IDP and update RHDH quickstarts #862
OCPBUGS-29479: Add startupProbe to console container. #869
OCPBUGS-29532: ouathclients: further split oidc and integrated oauth handling #861
CONSOLE-3912: always sync oidcClients in authn status if the field is present #857
OCPBUGS-28982: oauthclients: fix oauthclients degraded condition that never gets removed #855
CONSOLE-3912: OAuthClients: only add oidcClients to authentication status if the field exists #847
CONSOLE-3912: OIDC: setup the volume name properly when custom CA is configured #849
OCPBUGS-27335: use InfrastructureTopology for clusters using external CP as the console deploys on the worker nodes #841
CONSOLE-3912: Merge auth cert configmap deployment annotations into one #842
OCPBUGS-25484: make it impossible double set conditions in a single loop #848
CONSOLE-3912: Add secrets for session encryption/authentication in OIDC #839
OCPBUGS-27335: The console-deployment should set the number of replicas based on the ControlPlaneTopology #838
NO-JIRA:(chore) remove unused loglevel #830
OCPBUGS-25484: Bump library-go to deal with GET conflict #836
OCPBUGS-24041: Prevent healthcheck controller from Available=False blipping #834
OCPBUGS-7656: Remove service ca controller annotation from console-redirect service. #826
OCPBUGS-15827: Revert #831 and fix cluster proxy annotation on console conversion webhook deployment #833
Revert #822 “OCPBUGS-15827: Update console conversion webhook server to use sig.k8s.io certwatcher” #831
OCPBUGS-15827: Update console conversion webhook server to use sig.k8s.io certwatcher #822
OCPBUGS-25618: Bump documentationBaseURL to 4.16 #824
OCPBUGS-24913: Updating openshift-enterprise-console-operator-container image to be consistent with ART #823
CONSOLE-3804: Reapply separation of the oauthclients controller #814
CONSOLE-3652: Create StorageVersionMigration for ConsolePlugin CRD v1 migration #816
OCPBUGS-24203: ConsolePlugin metrics must no longer be grouped by the vendor #819
CONSOLE-3791: Add “readOnlyRootFilesystem” to all console conta… #809
OCPBUGS-23300: Disable route controller health check for NLB setup #815
ODC-7418: Add Janus IDP and RHDH Quick starts #806
TRT-1361: Revert #808 “CONSOLE-3804: split oauthclient controller from the common logic” #813
CONSOLE-3804: split oauthclient controller from the common logic #808
CONSOLE-3613: Update vendor bundle after removing multicluster code #810
CONSOLE-3613: Remove multicluster code from console operator #799
OCPBUGS-21972: Disable HTTP/2 for webhook #802
OCPVE-719: feat: add support for olm capability #795
HOSTEDCP-1250: remove redundant cert check #801
CONSOLE-3717: Dockerfile.rhel7: Drop explicit runlevels from some CRD manifests #782
OCPBUGS-19173: Updating openshift-enterprise-console-operator images to be consistent with ART #794
OCPBUGS-19080: Reset console operator’s conditions #796
CONSOLE-3438: Switch to using assets #783
OCPBUGS-17424: Really handle DeletedFinalStateUnknown correctly #786
OCPBUGS-17424: Handle cache.DeletedFinalStateUnknown correctly #785
chore: manifests/09-console-link-*: Drop obsolete deletion manifests #784
CONSOLE-3624: Add haproxy timeout annotation to console routes #777
ODC-7333: Bump openshift/api to include ConsoleSample CRD #771
OCPBUGS-15893: Add missing watch permission for helm-chartrepos-viewers #775
ODC-7333: Add consolesamples to ClusterRole console-extensions-reader to give all users readonly access #776
OCPBUGS-14716: Handle branding based on API changes #769
ODC-7339: Follow up ticket for ODC-7292 #773
OCPBUGS-15499: Remove managed cluster logic from the operator’s controller #774
ODC-7292: Add new quickstart for installing Cryostat #770
ODC-7312: Add OpenShift Quickstart for JBoss EAP 7 #760
ODC-7262: Add QuickStart approvers and reviewers #772
CONSOLE-3278: Add client certificate and key to service monitor #668
OCPBUGS-11751: Remove multicluster conditions from console operator #763
OCPBUGS-12990: Update command line tools URL with custom downloads route #761
Updating openshift-enterprise-console-operator images to be consistent with ART #756
OCPBUGS-5059: Make enabled plugins unique #710
OCPBUGS-12165: Proper cleanup of route sync conditions #757
OCPBUGS-12439: Add new PrometheusRule to collect metrics for cluster-monitoring-operator #755
OCPBUGS-11298: Disable multicluster tech preview #751
OCPBUGS-11531: Bump documentationBaseURL to 4.14 #750
CONSOLE-3279: Add node operating systems to console config #742
Revert “OCPBUGS-11164: Disable multicluster tech preview” #749
OCPBUGS-11164: Disable multicluster tech preview #743
OCPBUGS-4009: Console operator should report ConsolePlugins as relate… #706
OCPBUGS-7111: Filter out managed clusters that are not available #724
OCPBUGS-10108: ART image update #738
OCPBUGS-2783: Distinguish between route conditions and remove the old ones #734
CONSOLE-2843, CONSOLE-3394: Add ManagedProxyServiceResolver for thanos-querier on all managed clusters #707
ACM-2781: Have operator as a prerequisite #717
OCPBUGS-4008: Add managed cluster config map resource version to cons… #723
OCPBUGS-6488: Recover ConsoleNotificationSync after being degraded #725
OCPBUGS-6520: Test if all tested resrouces are available before launching Unmanaged* e2e tests #726
PD-1365: Add quickstart - Get started with multicluster engine #698
ODC-7182: Export pinned resources to console-config ConfigMap #697
OCPBUGS-4008: Add app: console label to managed-clusters configmap #705
OCPBUGS-4630: Bump docs docs link #704
CONSOLE-3355: Console operator should sync managed cluster ‘copiedCSVsDisabled’ flag to managed cluster config #701
OCPBUGS-1617: Remove unused node.kubernetes.io/not-reachable toleration #696
ACM-2063: Add host inventory quickstart #699
Bug 1770297: State that odo is comunity supported #695
OCPBUGS-3109: Change text colour for ConsoleNotification that notifies user that the cluster is being #694
CONSOLE-3286: Set disabledCopiedCSVs in console #693
CONSOLE-3252: Create a ConsoleNotification when cluster is performing an upgrade #687
OCPBUGS-2219: Empty string should be valid for i18n loadType #689
CONSOLE-3337: Dynamic plugin proxy reference issue #691
OCPBUGS-1708: Set i18n LoadType to Lazy when v1alpha1 i18n annotation is set to false #684
update to release.openshift.io/feature-set to match OCP 4.12 #688
CONSOLE-3125: Add cluster filtering by product and ocp version #677
ODC-6778: Bump openshift/api to get devcatalog disable types cuztomization changes #676
CONSOLE-3069: Handle new v1 ConsolePlugin api in the operator #683
OCPBUGS-785: Bump documentationBaseURL to 4.12 #682
ODC-6783: Export perspectives to console-config ConfigMap #678
CONSOLE 3096: Promote ConsolePlugin CRD to v1 #670
Bug 2100860: Retrieve user-defined Alertmanager services from shared configmap #658
CONSOLE-3242: Heterogeneous architecture clusters #669
CONSOLE-3220: Add console capability to all manifests #665
OCPBUGS-457: TestEditUnmanagedPodDisruptionBudget flakes #675
OCPBUGS-498: Update with latest openshift/api changes #674
Bug 2117646: Changing field on any of routes in the openshift-console namespace wont trigger sync loop #672
Bug 2117142: update annotations for project-helm-chartrepository-editor #673
Bug 2117142: Update permission for projecthelmchartrepositories with an aggregator role #667
Bug 2089950: Deleting downloads deployment should not fail if already deleted #663
Bug 2093852: InfrastructureTopology must be driving console affinity rule creation #657
Bug 2021297: Pass RELEASE_VERSION envar into the console pod #659
CONSOLE-3063: PDB for console pods avoid too many replicas down #655
CONSOLE-3162: Implement check for the new i18n annotation for dynamic plugins #654
ODC-6670: Sync consoleConfig telemetry annotations to console-config.yaml #653
Bug 2086519: AUTH-133: manifests: comply to restricted pod security #652
Bug 2067155: Modify the operator display name to match it with the name displayed in operatorhub #650
Bug 2075478: Bump docs version to 4.11 #648
MGMT-9797: Bump openshift/api dependency to 04e1813ebb11 #644
Bug 2046497: Metrics e2e should not fail on first failed polling attempt #645
Bug 2057696: Console operator should not block installation/upgrade process when set to Removed state #642
CONSOLE 3070: Console-operator should pass infrastructure config’s ControlPlaneToplogy to the console-config.yaml #639
Bug 2046497: Re-enable TestMetricsEndpoint e2e test case #640
Bug 2048541: ODF quickstart permissions check #634
Dockerfile.rhel7: add new Helm CRD, ProjectHelmChartRepository #635
Add QS for installing namespeced Helm Chart Repos #631
Implement multicluster tech preview #630
Add Jon Jackson to approvers list #625
Bug 2041605: Fix plugin proxy path #628
CONSOLE-3005: Provide alias for dynamic plugin’s proxy #613
Bug 2037635: Fix setting of custom cert for default route #623
Bug 2033434: clidownloads: add darwin/arm64 oc #620
Bug 2030574: Console resources are using older ‘service.alpha.openshift.io’ annotation #621
Bug 2036937: Update download odo link to new mirror #622
Library go bump #615
Bug 2021400: Bump documentationBaseURL to 4.10 #611
CONSOLE-2892: Allow dynamic plugins to proxy to services on the cluster #603
Bug 2013632: Correct grammar error in ODF quickstart #608
Bug 2018380: Migrate docs links to access.redhat.com #607
manifests: resources required for adding helm metrics in console #601
Bug 2013632: Correction/Changes in Quick Start Guides for ODF #598
Bug 2008185: Console operator go.mod should use go 1.16 version #597
Bug 2009454: Change web terminal subscription permissions from get to list #588
CONSOLE-2768: Update default and download deployments to use bindata #550
Updating openshift-enterprise-console-operator images to be consistent with ART #592
Bug 1999314: Resync all controllers periodically #590
Bug 2001240: Remove SimpleHTTP ‘server’ response header value #585
Updating openshift-enterprise-console-operator images to be consistent with ART #586
Bug 1994443: console-operator should report Available=true when at least available replica exists #580
Bug 2000768: Fix 4 Quick Starts #581
Bug 1989055: Revoke usage of Default Ingress Cert for console route healthcheck #582
Bug 2000440: OCS Quick Start should not be shown unless you have proper privileges #578
Bug 1989055: logins to the web console fail with custom oauth cert #571
Bug 1986129: Bump openshift/api to add missing ‘include.release.openshift.io/single-node-developer’ annotation to the ConsolePlugin CRD #573
Bug 1992508: Update base doc URL to 4.9 #572
Bug 1980531: Add release.openshift.io/delete annotation to consoleLink CRDs #565
reduce initial steps to setup project #533
Support External control plane topology #569
Adds ODF install tour #559
pkg/console/subresource/route: Drop GetCanonicalHost and IsAdmitted #568
Remove references to upstream UI components and config #562
Rename Monitoring tab to Observe tab in monitoring sampleapp quickstart #563
Bug 1975379: Only use kubernetes.io/hostname for workload anti-affinity #566
fix: Update the Node.js quickstart example repo. #564
Bug 1975379: Use hard requirement for anti-affinity rules on both console’s deployments #560
Bug 1966480: Console-operator’s controllers are passed resourceSyncer which is not used #551
Bug 1975714: Add policy-group label to the openshift-console namespace manifest #557
Updating openshift-enterprise-console-operator images to be consistent with ART #556
Updating .ci-operator.yaml build_root_image from openshift/release #555
Bug 1971690: clidownloads: ARM 64 is supported #554
Bug 1952405: Console operator should report Available:False when it’s route is not accessible #552
Switching the URL of the default openshift helm repo. #545
Bug 1962698: Console-operator can not create resource console-public configmap in the openshift-config-managed namespace #548
CONSOLE-2768: Update the console public configmap manifests to use bindata #543
Bug 1960324: quickstarts: remove “spec.version” #546
Bug 1959696: Add warning log message when custom domain is configured on console-operator config #544
Bug 1957198: Remove misspelled console-operator condition #541
Bug 1954866: Add necessary priority class to downloads #542
Bug 1948524: Update operator’s status with downloads deployment generation && pull route health check into a standalone controller #531
Bug 1956610: Add missing cluster profile annotations to manage-helm-repos quickstart manifest #539
Copy AddPage customization object #527
CONSOLE-2793: Implement console-operator changes to consume new CustomDomains API #522
Bug 1947794: Pull HelmChartRepository CRD v1 #535
Update README.md for MacOS #536
Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #532
Rename workload annotations #530
update to non-deprecated NewCommand method #534
Bug 1948782: remove stale annotation for single-node #529
Export quickStarts data to console-config ConfigMap #528
Add management workload annotations #523
Bug 1948524: Remove ResyncEvery method from the operator sync loop #525
Bug 1947789: Bump deps to pickup CRD apiVersion bump #524
Export project access details to console-config ConfigMap #514
IBM Cloud manifest profile patch #520
Bug 1945326: Resync controllers every minute #521
Bump openshift/api to get project access role cuztomization changes #519
Add in get subscriptions to console service account #513
Add e2e test to check correct deployment replicas, based on the Infrastructure config TopologyMode #510
CONSOLE-2792: Bump openshift/api dependecy in console-operator to get CustomDomain API for Ingress config #517
Updating openshift-enterprise-console-operator builder & base images to be consistent with ART #518
Bug 1937627: Bump DEFAULT_DOC_URL for 4.8 #515
Bug 1935541: Check for error when generating default and user-defined config for the console-config configmap #511
CONSOLE-2526: Update console operator for single-node clusters #508
Bug 1931760: Non-unified reference to OCS in quickstarts #509
CONSOLE-2366: Move the operator’s controllers to lib-go controller factory #500
CONSOLE-2757: Bump github.com/openshift/api #506
Updating openshift-enterprise-console-operator builder & base images to be consistent with ART #505
Bump polling interval when checking for resource unavailability #507
RetryOnConflict should be fetching latest version of console-operator config #504
And 9 elided commits (e.g. from squash or rebase merges)
Full changelog

container-networking-plugins

Updating ose-containernetworking-plugins builder & base images to be consistent with ART #41
Bug 1925077: vendor: bump libcni #44
Full changelog

csi-driver-manila, openstack-cinder-csi-driver

Bug 1969345: Backport ignore proxy connecting to CSI sockets #54
Bug 1933659: Add udev to the driver image #47
Full changelog

csi-driver-manila-operator

Bug 2002555: Do not degrade cluster on failure to reach Manila #126
Bug 1987036: Use cluster Proxy when available #110
Bug 1996070: Add maxUnavailable to DaemonSets #116
Full changelog

csi-external-resizer

OCPBUGS-61547: Requeue PVC over PV creation #173
STOR-2392: Rebase to upstream v1.14.0 for OCP 4.20 #171
OCPBUGS-57847: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.20 #170
STOR-2251: Rebase external-resizer to upstream v1.13.2 for OCP 4.19 #169
OCPBUGS-45706: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.19 #167
STOR-2018: Rebase external-resizer to upstream v1.12.0 for OCP 4.18 #166
OCPBUGS-41244: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.18 #165
STOR-1593: Rebase to upstream v1.11.1 for 4.17 #164
OCPBUGS-34356: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.17 #163
OCPBUGS-34356: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.17 #162
STOR-1573: Rebase external-resizer to v1.10.0 for OCP 4.16 #160
OCPBUGS-30502: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #159
OCPBUGS-29984: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.16 #158
OCPBUGS-25540: Updating ose-csi-external-resizer-container image to be consistent with ART #154
STOR-1688: Chore: add .snyk file to ignore false positives #153
OCPBUGS-24846: Updating ose-csi-external-resizer-container image to be consistent with ART #152
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #146
STOR-1404: Rebase external-resizer to v1.9.0 for OCP 4.15 #145
OCPBUGS-19224: Updating ose-csi-external-resizer images to be consistent with ART #144
STOR-1169: Rebase external-resizer to v1.8.0 for OCP 4.14 #141
OCPBUGS-14812: Chore: Update OWNERS and OWNERS_ALIASES #142
Updating ose-csi-external-resizer images to be consistent with ART #140
Updating ose-csi-external-resizer images to be consistent with ART #139
Updating ose-csi-external-resizer images to be consistent with ART #138
Updating ose-csi-external-resizer images to be consistent with ART #137
STOR-1020: Rebase external-resizer to v1.7.0 for OCP 4.13 #136
Updating ose-csi-external-resizer images to be consistent with ART #135
Updating ose-csi-external-resizer images to be consistent with ART #134
UPSTREAM: <carry>: Remove .github files #133
STOR-859: Rebase to v1.6.0 for OCP 4.12 #132
Updating ose-csi-external-resizer images to be consistent with ART #131
Bug 2097503: Rebase external-resizer against v1.5 #130
Updating ose-csi-external-resizer images to be consistent with ART #129
Updating ose-csi-external-resizer images to be consistent with ART #128
Bug 2043130: Rebase resizer v1.4.0 #127
Updating ose-csi-external-resizer images to be consistent with ART #126
Updating ose-csi-external-resizer images to be consistent with ART #125
Updating ose-csi-external-resizer images to be consistent with ART #124
Bug 1993934: Update CSI sidecars #123
Updating ose-csi-external-resizer images to be consistent with ART #122
Updating .ci-operator.yaml build_root_image from openshift/release #121
Bug 1924503: Rebase v1.2.0 #120
Updating ose-csi-external-resizer builder & base images to be consistent with ART #119
Updating ose-csi-external-resizer builder & base images to be consistent with ART #118
Full changelog

csi-livenessprobe

STOR-2392: Rebase to upstream v2.16.0 for OCP 4.20 #75
OCPBUGS-57738: Updating csi-livenessprobe-container image to be consistent with ART for 4.20 #74
STOR-2251: Rebase livenessprobe to v2.15.0 for OCP 4.19 #71
OCPBUGS-45588: Updating csi-livenessprobe-container image to be consistent with ART for 4.19 #70
STOR-2018: Rebase livenessprobe to v2.14.0 for OCP 4.18 #69
OCPBUGS-41116: Updating csi-livenessprobe-container image to be consistent with ART for 4.18 #68
OCPBUGS-36456: Rename Dockerfile #67
OCPBUGS-34275: Updating csi-livenessprobe-container image to be consistent with ART for 4.17 #66
OCPBUGS-34275: Updating csi-livenessprobe-container image to be consistent with ART for 4.17 #65
STOR-1573: Rebase livenessprobe to v2.12.0 for OCP 4.16 #64
OCPBUGS-30440: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #63
OCPBUGS-29972: Updating csi-livenessprobe-container image to be consistent with ART for 4.16 #62
OCPBUGS-25534: Updating csi-livenessprobe-container image to be consistent with ART #58
STOR-1688: Chore: add .snyk file to ignore false positives #57
OCPBUGS-25093: Updating csi-livenessprobe-container image to be consistent with ART #56
OCPBUGS-24815: Updating csi-livenessprobe-container image to be consistent with ART #55
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #49
STOR-1404: Rebase livenessprobe to v2.11.0 for OCP 4.15 #48
OCPBUGS-19132: Updating csi-livenessprobe images to be consistent with ART #47
STOR-1169: Rebase livenessprobe to v2.10.0 for OCP 4.14 #44
OCPBUGS-14810: Chore: Update OWNERS and OWNERS_ALIASES #45
Updating csi-livenessprobe images to be consistent with ART #40
Updating csi-livenessprobe images to be consistent with ART #38
STOR-1020: Rebase csi-livenessprobe to v2.9.0 for OCP 4.13 #37
Updating csi-livenessprobe images to be consistent with ART #36
Updating csi-livenessprobe images to be consistent with ART #35
UPSTREAM: <carry>: Remove .github files #34
Updating csi-livenessprobe images to be consistent with ART #33
Updating csi-livenessprobe images to be consistent with ART #32
Updating csi-livenessprobe images to be consistent with ART #31
Updating csi-livenessprobe images to be consistent with ART #30
Updating csi-livenessprobe images to be consistent with ART #29
Updating csi-livenessprobe images to be consistent with ART #28
Bug 1993934: Update CSI sidecars #27
Updating csi-livenessprobe images to be consistent with ART #25
Updating .ci-operator.yaml build_root_image from openshift/release #24
Updating csi-livenessprobe builder & base images to be consistent with ART #23
Updating csi-livenessprobe builder & base images to be consistent with ART #22
Full changelog

docker-builder

Bug 1995074: bump(s2i): revert incorrect ssh scp fix #261
Bug 1924455: Update dependencies to address CVE-2021-3121 #258
Updating openshift-enterprise-builder builder & base images to be consistent with ART #188
Bug 1943726: add bracket logging on openshift/builder calls into buildah to assist test-platform team triage #237
Bug 1945692: move entitlement related secrets back to mounts.conf #240
Bug 1924554: bump(cni) 0.8.1 #234
Bug 1940052: retry image pulls during builds #226
Bug 1939218: bump(containers/*): #224
Full changelog

docker-registry

Bug 1984094: use apimachinery with HTTP/2 health checks enabled #288
Updating openshift-enterprise-registry builder & base images to be consistent with ART #262
Bug 1977159: bump aws-sdk-go to v1.38.35 #282
Full changelog

etcd

Update OWNERS #126
Bug 1970141: discover-etcd-initial-cluster: retry if member is not part of member list and dataDir exists #82
ETCD-178: Bug 1944386: openshift-tools: fix on off flow and add unit tests #74
Updating ose-etcd builder & base images to be consistent with ART #67
Full changelog

gcp-machine-controllers

Updating ose-gcp-machine-controllers builder & base images to be consistent with ART #143
Bug 1924508: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #164
Bug 1935636: Ensure response body is closed when we are finished with the request #151
Full changelog

gcp-pd-csi-driver

Updating ose-gcp-pd-csi-driver builder & base images to be consistent with ART #10
Full changelog

gcp-pd-csi-driver-operator

Bug 1996070: Add maxUnavailable to DaemonSets #33
Bug 1940005: Add CSIDriver object #18
Updating ose-gcp-pd-csi-driver-operator builder & base images to be consistent with ART #11
Full changelog

grafana

OCPBUGS-656: Fix static patch matching issue #91
Updating grafana builder & base images to be consistent with ART #54
Full changelog

haproxy-router

Bug 1994645: config template: accept IPv6 IPs for whitelisting #325
Bug 1967733: template helper - generateHAProxyWhiteListFile, use right arg type #297
Bug 1965402: Revert ‘Bug 1896977: Enhance host name validation in router’ #293
Bug 1963243: Add a condition to check if the Endpoints ID is duplicated #288
Bug 1942534: [4.7 backport] Route gets admitted with invalid host name if override annotation is used #273
Bug 1938921: router/template: Cache compiled regular expressions #269
Full changelog

hello-openshift, tests

Bug 2034370: test: Nodes that are deleted should not fire the unready alert #26716
Bug 2031104: Skipping Django Test until bug is fixed #26688
Bug 2022188: Add more tests for image policy #26626
Bug 2019520: Skip test ‘clone repository using git:// protocol should clone using git:// if no proxy is configured’ #26563
Bug 1983616: Wait longer in tests where namespace cleanup is slow #26282
Bug 1982929: Improve GC Check for Builds #26334
Re-enable quota test #26284
Bug 1980540: Use cluster-logging for operator installation smoke test. #26315
Bug 1977383: [release-4.7] Update resource quota test for compatibility with service ca configmap publishing #26303
Bug 1928862: [4.7] Bump openshift/kubernetes #26259
Bug 1978000: builds: comment out multi-namespace template test #26296
NOOP - Trigger a new CI build #26291
Bug 1977383: [release-4.7] Skip cluster quota test to enable service ca publisher to merge to o/k #26283
Bug 1970411: properly remove project after test ends #26217
Bug 1966358: Dockerfile.rhel: fix a bash typo #26194
Bug 1961367: Add Cinder client to the test image #26171
Bug 1955600: test/extended/router: Fix-up Unidling test #26120
Bug 1963115: narrow verify /run test to /run/secrets #26180
Bug 1963115: move verify run test from tools to cli image to avoid additional /run content #26176
Bug 1958797: test/extended/router/idle: Only run on OVNKubernetes or OpenShiftSDN #26145
Bug 1947705: Add test of documented backup/restore procedure #26110
Bug 1955669: flake testKubeletToAPIServerGracefulTermination #26121
Bug 1942055: upgrade/upgrade.go: Enhance upgrade ack time out error #26012
Bug 1941574: test/extended/router/idle: skip test on virt platforms #25999
Bug 1940866: Add BareMetalPlatformType into e2e upgrade service unsupported list #25989
Bug 1927953: test/extended/router/idle: address flakes/failures seen in CI #25892
Bug 1931622: test: add vsphere to unsupported platforms for LB service #25913
Bug 1932806: release-4.7: e2e: test OAuth API connections in the tests by that name #25894
Bug 1935707: [release-4.7] test: Detect when the master pool is still updating after upgrade #25941
Bug 1931401: fix sig-cli flakes #25910
Bug 1939477: Update tests to use Ruby 2.7 #25966
Bug 1927554: adjust route host for redis/nodejs/cakephp to accomodate new apiserver restrictions #25884
Full changelog

hyperkube

Fix mounted volume expansion tests #1643
Bug 2082029: Rebase 1.20.15 #1253
Bug 2043804: IPs with leading zeros are still valid in the apiserver #1234
Bug 2060528: Backport inotify patch to 4.7 #1205
Bug 2024640: Rebase v1.20.14 #1101
Bug 2054669: UPSTREAM: 89885: SQUASH: Retry fetching clouds.conf #1178
Bug 2024996: Fix subpath source check #1068
Bug 2022720: UPSTREAM: 106261: Don’t guess SELinux support on error #1055
Bug 2022188: Image policy should mutate DeploymentConfigs, StatefulSets, and new CronJobs #1073
Bug 2022259: Rebase v1.20.12 #1046
Bug 1939537: UPSTREAM: 100678: apf: exempt probes /healthz /livez /readyz #658
Bug 1926724: UPSTREAM: 98028: add auto update for priority & fairness bootstrap configuration objects #563
Bug 2008508: Rebase v1.20.11 #982
Bug 1993753: UPSTREAM: 104348: Pass additional flags to subpath mount to avoid fla… #941
Bug 2003027: Rebase 1.20.10 #935
Bug 1996846: UPSTREAM: 98571: kubelet: Stop probing a pod during graceful shutdown #901
Bug 1973766: 4.7: Do not throw error when we can’t get canonical path #881
Bug 1981775: Bump apiserver libary go 4.7 #879
Bug 1981634: UPSTREAM: <drop>: use the legacy service-ca.crt content for clusters started in 4.7 or before #857
Bug 1977383: [release-4.7] Ensure service ca configmap is created in all namespaces #834
Bug 1977383: [release-4.7] Fix watch conformance test #843
Bug 1977383: Update resource quota test for compatibility with service ca configmap publishing #839
Bug 1975553: only chown if non-windows machine with projected volumes #826
Bug 1928862: [release-4.7] UPSTREAM: <carry>: kube-apiserver: ignore SIGTERM/INT after the first one #739
Bug 1966810: UPSTREAM: 102224: Fix expired unit test certs #780
Bug 1963263: UPSTREAM: 102000: Ref counting is only applicable to Remote endpoints #763
Bug 1955883: UPSTREAM: 99095: Prevent Kubelet stuck in DiskPressure when imagefs minreclaim is set #725
Bug 1951726: Speed up PV provisioning for vsphere driver (ocp-4.7) #690
Bug 1942141: fixes cinder PV labelling #635
Bug 1951815: UPSTREAM: 99393: kubelet: reduce configmap and secret watch #692
Bug 1955231: UPSTREAM: 101345: kubelet: improve the node informer sync check #721
Bug 1952917: UPSTREAM: 100228: For LoadBalancer Service type don’t create a HNS policy for empty or invalid external loadbalancer IP #697
Bug 1928862: Enable snapshot tests #569
Bug 1945856: 99729:Only system-node-critical pods should be OOM Killed last #642
Bug 1927717: UPSTREAM: 98939: fixes race in TestSyncPodsDeletesWhenSourcesAreReady #567
Bug 1931702: UPSTREAM: 96958: kubelet: remove periodic messages from log-level 2 #589
Bug 1931745: UPSTREAM: 98956: Fix race when KillPod followed by IsPodPendingTermining #590
Bug 1929674: kubelet: fix create sandbox delete pod race #591
Bug 1933094: UPSTREAM: 98742: Sync completed pods until their containers have been terminated #595
Full changelog

insights-operator

Bug 2028092: gather webhook configurations (#508) (#561) #508
Bug 2026659: Gather all the container logs from related namespaces of degraded clusteroperator (#516) (#555) #516
Bug 2026410: Fix PDB gatherer (#552) #552
Bug 2024614: Anonymize identity provider attributes in the (#520) (#527) (#541) (#549) #520
Bug 2022637: Anonymize the ImageRegistry storage information also in status (#546) #546
Bug 2002539: Fix wrong rebase of PSP gatherer (#512) #512
Bug 2002539: Gather installed PSP names (#489) (#493) #489
Bug 1982170: Set also the summary operation when updating status (#480) #480
[release 4.7] Bug 1960645: Adds virt_platform metric to the collected metrics (#428) #428
[release 4.7] Bug 1953579: GatherClusterOperators and GatherClusterOperatorsPodAndEvents (#410) #410
Add vsphere_node_hw_version_total metric (#416) #416
Bug 1950926: Extend OLM data with CSV display name (#400) (#402) #400
Bug 1942068: Gahter datahubs.installers.datahub.sap.com resources from SAP clusters (#383) #383
Bug 1939061: Sap license management logs gatherer 4.7 (#372) #372
Adds memory usage to the metadata (#364) #364
Bug 1935070: Extend the OLM operator data with related … (#362) #362
Bug 1934442: Gather info about unhealthy SAP pods (#360) #360
Bug 1936802: Authentication log gatherer - do not scan all the pods in openshfit-authentication (#369) #369
Bug 1936861: Include namespace name in binarydata configmap path & test (#368) (#370) #368
Bug 1925659: Relax the recent log gatherers to avoid degrading during… (#331) #331
Full changelog

installer-artifacts

Bug 1964753: Bump RHCOS 4.7 boot image #5229
Update OWNERS #5243
Bug 1980866: [4.7] Prefer IPv6 hostIP on bootstrap IPv6 deployments #5067
Bug 1981553: [release-4.7] aws: move elastic ip permissions to create networking category #5055
Bug 1954595: Validate noProxy input and add prefix for proxy urls #5060
OWNERS: add more core team members as approvers #5123
Bug 1977481: Dockerfile: repin libvirt #5043
Bug 1975819: upi/vsphere: Use Afterburn guestinfo for static IP and hostname config #5025
Bug 1974282: gather: collect networking information in log bundle #5017
Bug 1971163: Updating AWS instance types #4992
Bug 1945467: aws: allow use of unknown regions in known partitions #4807
Bug 1938426: Set default values to machine pools before validation #4750
Bug 1967355: pattern removed from sed to prevent expansion #4975
Bug 1956483: Bump boot images for RHCOS fixes #4961
Bug 1947427: add proxy params to bootstrap ignition #4830
Bug 1939014: generate glance url considering the region #4753
Bug 1947216: pkg/asset/installconfig/aws: Add iam permission for destorying clusters #4827
Bug 1948398: remove ovirt_cafile from ovirt-credentials secret #4842
Bug 1962435: aws: using dotted domain when looking for public hosted zone #4948
Bug 1940275: Revert “baremetal: send full ignition to masters” #4767
Bug 1943500: Bump gophercloud utils #4794
Bug 1958518: aws: restore setting aws platform spec in infra resource #4918
Bug 1958428: aws: support more auth options in manual mode #4914
Bug 1945907: Byo aws iam roles 4.7 #4813
Bug 1954803: aws: support for bring-your-own hosted zone #4887
Bug 1951571: registry.svc.ci.openshift.org is no longer valid #4853
Bug 1954152: manifests: populate aws user tags in infrastructure #4882
Bug 1935174: RHCOS bump for LUKS, prjquota, etc #4791
Bug 1947122: gcp: install google cloud sdk with yum the recommended way #4824
Bug 1933728: baremetal: include netmask in DNSMasq dhcp range #4698
Bug 1930106: bump ignition to v3_2 #4701
Bug 1922292: [release-4.7] data/rhcos.json: Update boot images #4635
Bug 1924701: Fix cluster destroy when byo is used with Kuryr #4616
Bug 1909978: update ignore-volume-az documentation #4617
Bug 1916692: OpenStack: Delete leftover LBs when destroying cluster #4563
Bug 1919407: openstack/validation: enforce control plane size #4585
Bug 1909978: update documentation for ignore-volume-az usage #4603
Bug 1896218: remove GCP role bindings before service accounts #4602
Bug 1921911: Revert “Merge pull request #4589 from patrickdillon/bz-1896218-gcp-se… #4600
Bug 1921655: OpenStack: fix error handling for cloudinfo #4599
Bug 1896218: remove GCP role bindings before service accounts #4589
Updating ose-installer-artifacts builder & base images to be consistent with ART #4546
maintenance: remove pools and volumes #3620
Bug 1810438: oVirt: Add missing piece for gathering bootstrap IP info #4524
Updating ose-baremetal-installer builder & base images to be consistent with ART #4544
Updating ose-installer builder & base images to be consistent with ART #4543
Bug 1920243: disable anonymous auth on bootstrap nodes #4590
Bug 1917101: UPI ovirt - remove RHCOS image from Network req #4577
Bug 1893117: terraform/vsphereprivate: ignore hosts in maintenance mode #4566
Bug 1919072: AWS cloudformation change protocol from ESP to 50 #4583
Bug 1916938: tolerate equal APIFloatingIP and LbFloatingIP #4575
Bug 1907822: Don’t panic on bad data in quota validations #4483
Bug 1912828: Rebase on the latest terraform provider/go-ovirt #4562
Bug 1916373: upi: allow IPsec ports #4552
Bug 1915460: ovirt: validate cluster name during install #4537
Bug 1910244: Go mod update for golang crypto #4569
Bug 1915617: update boot images for various fixes #4540
Bug 1909502: pkg/asset/manifests: remove etcd records from proxy config #4518
Bug 1915998: Set Additional Control Plane Security Groups on Bootstrap Node #4551
Bug 1916271: openstack known issues: ControlPlane anti-affinity #4548
Bug 1813949: ignore local env variables when we create a service client #4426
Bug 1916505: AWS IPI: Add IPsec master-to-worker flows #4554
Bug 1908468: azure/validation: some memory values are float and not int #4530
Bug 1908583: Set same additional networks on Bootstrap as Control Plane #4528
Bug 1914439: OpenStack Port Create Typo in SRIOV Docs #4529
Bug 1909587: openstack: Create Control plane nodes sequentially #4522
Bug 1910127: ovirt: UPI doc improvements #4498
Bug 1913151: KubeVirt user docs: change role example - add “update” verb to VM #4521
Bug 1910070: Set termination_grace_period_seconds to 10 minutes #4511
Bug 1786314: bump gophercloud/utils #4486
Bug 1911819: Fix docs/user/kubevirt/install-config.yaml to pass ./hack/yaml-lint.sh #4519
Bug 1911819: Add kubevirt user documentation #4516
Bug 1908743: Add validation that the KubeMacPool component is enabled for the namespace #4509
Bug 1910049: Revert “openstack UPI: Use ansible-galaxy” #4506
Bug 1882022: installconfig: enable vsphere folders for datacenters and clusters. #4493
Bug 1908782: terraform: Add rules to allow internal IPsec traffic #4491
Bug 1908171: fix Terraform issue with GCP custom machine types #4496
Bug 1907947: cloud-creds-secret creation with current context info only #4484
Bug 1907628: OpenStack Documentation for MachineSets with Multiple Networks #4463
Bug 1906517: OpenStack: Skip collecting info for empty subnet IDs #4474
Bug 1908280: update docs for Cinder AZs #4487
Bug 1907621: Bump cluster-api-provider-kubevirt version #4479
Bug 1890228: pkg/destroy/aws: Pass destroy if HostedZone does not exist #4477
Bug 1906459: openstack: fix quota checks when they’re unlimited #4470
Update GCP Customization doc to reflect CMEK additions #4468
Openstack: describes how to enable qemu agent for UPI. #4441
oVirt: update team members #4464
Bug 1904663: Fix comparison in pointer ignition customization asset #4455
openstack: Test Nova AZ manifest generation #4459
do not generate the cloud cred secret when credentialsMode is Manual #4416
update gophercloud/utils & terraform/provider-openstack #4457
hack/verify-vendor.sh: Fail early if error #4421
Bug 1899175: data/rhcos.json: Update boot images for RHEL 8.3 #4414
Openstack primary subnet using machine spec #4346
Deprecate computeFlavor in OpenStack platform #4321
openstack: Test manifest creation #4431
openstack: Allow to skip pre-flight validations #4452
Bug 1900138: Removed support for insecure mode for oVirt/RHV installation #4404
openstack: check quotas before creating cluster #4432
OpenStack: Adds clusterOSImageProperties to install-config.yaml #4401
Bug 1904125: Ensure the bootstrap ignition libvirt pool defaults to <clustername>.<id>.bootstrap rather than ‘default’ #4448
Bug 1868748: baremetal: rename JSON field for ClusterProvisioningIP #4053
Add KubeVirt platform as infrastructure for Openshift installation #4350
cloudproviderconfig: Refactor openstack #4447
Pass CLUSTER_PROFILE env var to CVO render #4444
vSphere Destroy: add log messages for tag destruction #4407
baremetal: send full ignition to masters #4427
asset/installconfig/Azure: Validate install-config instance types #4419
Update MCO doc references #4445
baremetal: Add ironic logwatch containers #4437
Create SR-IOV UPI Docs #4439
docs: update docs/design/resource_dep.svg #4443
Bug 1903277: destroy/aws: remove rules from default security group #4440
Set default release image to 4.7 #4409
baremetal: make cluster provisioning IP optional #4429
pkg/asset/quota: Typo in warning message presented to user #4430
Create a machineconfig for IPI pointer ignition customizations #4413
vSphere Docs: Update to include Permissions #4393
OSASINFRA-902: Update OpenStack Custom External LB and DNS Docs #4389
baremetal: correct the cacheImageURL when we don’t have a provisioningIP #4408
Bug 1895874: Use oVirt Engine certificate verified by the user for installation #4387
Bug 1899853: openstack: CP nodes port to use addtional SGs #4411
baremetal: Handle xz filenames for OKD #4392
Support user provided service-account-signing-key and issuer #4373
pkg: validation for previously existing ovirt configuration #4354
Bug 1898194: installconfig/gcp/validation: handle custom machine types #4386
baremetal: when networking is disabled make the bootstrap provisioning ip optional #4390
Bug 1898238: Validate the the API and Ingress FIPs are not the same #4385
Bug 1848945: OpenStack - Documentation for adding worker nodes using ansible #4205
Bug 1813012: Remove unused etcd discovery domain #4067
Bug 1894432: oVirt, add timeout to tmp_import_vm #4341
baremetal: validate that macs are EUI-48 and unicast #4378
Bug 1855351: standardize interrupt error messages #4360
Stop validating DefaultMachinePlatform #4391
Bug 1889779: vSphere destroy: handle failed clusters #4388
openstack UPI: Use ansible-galaxy #4379
Updating ose-baremetal-installer builder & base images to be consistent with ART #4370
Correcting normal typos #4363
Bug 1891543: openstack: remove platform flavor validation #4383
baremetal: remove root_gb from tfvars #4319
Cleanup: make conversion functions private #4376
Bug 1888464: add tag:UnTagResource perm for aws shared networks #4371
Remove the secrets directory recursively #4369
doc/openstack: update quota reqs for kuryr #4362
Fix ‘troubleshooting’ typo #4365
libvirt: Bump bootstrap size (primarily for OKD) #4364
data/data/aws/route53: use CNAME for us-iso-east-1 region #4367
Bug 1886435: Fix azure UPI az group deployment deprecation #4366
asset/installconfig/gcp: Validate install-config instance types #4329
Use ‘kubernetes.io/tls’ instead of SecretTypeTLS which is not being substituted #4342
aws: support custom trust bundle for c2s regions #4335
pkg/asset/cluster/aws: switch to ec2 tagging API #4356
Bug 1867165: baremetal: allow configuring bootstrap mac addresses #4052
doc/openstack/UPI: improvements #4355
Small corrections in ovirt/install_ipi.md #4353
data/bootstrap/files/usr/local/bin/installer-gather: Tee logs into tarball #4345
data/manifests/bootkube/cvo-overrides: Bump default to stable-4.7 #4347
owners: Add mdbooth to openstack-approvers #4348
owners: add dhellmann to baremetal-approvers/reviewers #4343
data/manifests/bootkube/cvo-overrides: Drop the explicit upstream #4112
Bug 1891543: openstack: consider volumes for storage requirements checks #4323
Document how to deploy cluster with BM and VM workers #4336
Wrap errors after OpenStack creds validation #4338
Bug 1855351: Handle CTRL+C in GCP survey #4334
Bug 1894144: baremetal: pin libvirt to 4.5.0 #4339
cmd/openshift-install/create: Use library-go’s IngressURI helper #4245
Bug 1888378: Ignore error if resource group already deleted #4325
Bug 1887863: Patch Flavor Not Found validation for OpenStack Install Config #4289
Use authentication for Ironic on baremetal bootstrap host #4256
Bug 1841381: oVirt, add memoryMB validation #4309
Bug 1878374: Adding more nitro and the AMD instance types (AWS, UPI) #4327
Bug 1866925: display Azure destroy auth error #4331
openstack: fixup markdown #4328
Revert “[Azure][Destroy] Check if resource group exists” #4322
Add Encryption Key reference to GCP MachinePool API #4318
aws: block cluster destroy in c2s region #4316
aws: ensure users set ami id for c2s regions #4315
Bug 1891702: pkg/asset/ignition/bootstrap: exit loop if pem.Decode() fails #4317
Bug 1888378: [Azure][Destroy] Check if resource group exists #4320
oVirt: change owners #4311
Code cleanup and optimizations #4272
Bug 1889267: oVirt, increase terraform template and release image timeout to 20m #4285
install-approvers: add staebler #4297
Bug 1880443: allow providing client options when generating OpenStack MachineSets #4196
openstack: Update CI base image #4291
pkg/asset/installconfig/aws: Validate install-config instance type #4258
go.mod Update #4294
Bug 1836017: Configure haproxy to check /readyz #4012
Bug 1870728: pkg/asset/ignition/bootstrap: Display warning if certificates are expired #4287
Bug 1889852: add new AWS regions #4288
Bug 1877116: aws: use file for bootstrap ign when uploading to s3 #4281
Bug 1886553: GCP - Increase worker NAT min ports #4273
cmd: split newlines in logrus stderr output to new entry #4282
openstack: Add a new team member #4290
Bug 1882649: Determine Glance disk format based on file extension #4279
vSphere: Update dockerfile removing certificate #4274
Update README.md - Broken Link - Spelling #4278
OpenStack: remove legacy image validation #4277
Bug 1882844: vsphere destroy: delete tag category created by installer #4265
Bug 1878900: openstack: Fix error messages in flavor validation #4269
OpenStack UPI: Custom API and Ingress vip addresses #4092
Bug 1888671: openstack: Document Cinder’s ignore-volume-az #4271
Bump K8s.io version to v0.19.0 #4266
destroy: return aws resources that could not be deleted #4270
install-complete: provide troubleshooting info when operators fail #4259
OpenStack: add clusterOSImage validations #3964
Bug 1887525: baremetal: Wait for master-bmh-update script to succeed #4262
openstack: Bump Ansible to 2.9 in UPI #4261
Bug 1874248: types/vsphere/validation: ensure vcenter is all lower case #4254
Bug 1884691: types: allow manual cred mode for gcp and azure #4238
Updating ose-installer builder & base images to be consistent with ART #4250
Remove dead code #4252
Updating ose-installer-artifacts builder & base images to be consistent with ART #4251
openstack privileges documented #4214
OpenStack: Rename lbFloatingIP to apiFloatingIP #4244
Bug 1882191: Add GODEBUG=x509ignoreCN=0 to systemd DefaultEnvironment #4248
Bug 1884435: vsphere - add delay if resolv.conf is not available; wait for dhcp #4237
Bug 1777224: pkg/asset: metadata to depend on ignition #4223
Bump RHCOS images for Ignition entropy fix #4241
Bug 1859174: Upgrade Terraform provider OpenStack #4216
Fix json tag for GCP auth service account #4166
installer/pkg/quota/gcp/limits.go: fix minor typo in comment #4160
IP address should be specified without underscore. #3204
Docs: OpenStack: Remove mention of cluster failing to destroy #4208
Bug 1876815: OpenStack: unset OS_CLOUD #4231
Bug 1884558: do not use local cacert path in generated clouds.yaml #4227
Bug 1878758: openstack UPI: Allow for no FIP or router #4219
Bug 1876844: openstack UPI: Ignition token needs Glance access #4236
Bug 1881703: Revert “Have the MCO manage the ignition stub config” #4228
Bug 1882752: openstack BM: Remove MachineSet on separate subnet #4230
Bug 1878900: openstack: Skip validation for baremetal flavors #4222
Bug 1881532: openstack: Only list external networks in prompt #4226
Bug 1882805: Bump bootimages for ppc64le and s390x to 46.82.202009240941-0 and 46.82.202009241338-0 #4215
Bug 1881757: tls: set mcs cert common name to not-valid-hostname #4210
Bug 1882810: vsphere - local dns prepender not named with template #4220
Bug 1853418: Ignore trailing dots in baseDomain #4146
Bug 1881487: data/rhcos.json: Update to 46.82.202009220041-0 #4206
Bug 1877984: Fix “OpenShiftSDN” to proper case when generating network config #4207
Bug 1879533: oVirt UPI - Better explanation of the inventory #4180
Bug 1878789: Add note about ignition certificates expiration #4171
Bug 1877854: OpenStack: Support multiple subnets #4093
Bug 1879649: oVirt UPI - Simplify create templates #4182
Bug 1880393: OpenStack UPI: Explain how to encode cert to base64 #4203
Bug 1880393: OpenStack UPI: Trim EOLs from the cacert trustbundle #4201
Bug 1878163: Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config #4186
Bug 1879891: Fix cluster destroy when fip less installation happened #4191
Bug 1878163: Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config #4185
Bug 1878163: Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config #4184
Bug 1876815: unset OS_CLOUD during config generator #4177
Bug 1878108: asset/quota/gcp: use GCP api to find CPU count for constraint and guess only on failure #4163
Bug 1877486: proxy: allow * for noProxy #4172
Bug 1880132: destroy/gcp: correct extract service account email from IAM policy binding member #4193
Bug 1861917: Add cpc config to bootstrap #4178
install: increase timeout to 40 minutes #4181
Bug 1879081: OpenStack: Switch to train/centos8 repos #4175
Bug 1877885: oVirt UPI - Add Ansible playbooks download #4169
Bug 1878758: openstack UPI: Optional floating IPs #3755
Bug 1877763: oVirt UPI - python code snippets without semicolons #4170
Bug 1874747: ovirt: dont start the temp VM before template creation #4168
Bug 1878243: openstack: Upgrade the CI build image #4161
Bug 1877440: oVirt UPI Assets_dir set according to env var #4153
Bug 1874457: Add support to clean custom router #4159
Bug 1877676: OpenStack: Refresh documentation about ingress FIP #4059
Bug 1877436: oVirt UPI RHCOS explanations, assets env var #4152
Bug 1877862: oVirt UPI - Fix templates check and optimize image check #4157
Bug 1877741: installer-masters-gather.sh: gather openshift-{azure,gcp}-routes logs #4148
Bug 1873125: Fix python syntax for OpenStack UPI scripts #4154
Bug 1870038: vmware upi: haproxy.service to rm haproxy pod on ExecStop #4132
Bug 1866925: pkg/destroy/azure: fail fast if unable to list resources for any reason #4025
Bug 1873125: OpenStack: UPI missing instructions to update apiVIP and ingressVIP #4133
Bug 1875855: increase timeout for bootstrap ignition downloading #4145
Bug 1856928: Fix Non yaml files in manifests/ or openshift/ directories preventing bootstrap from completing #4091
Bug 1876825: generate lbFloatingIP in OpenStack config #4147
Bug 1876792: oVirt UPI Move Network Requirements section #4142
Bug 1876783: oVirt UPI fix python cmd #4141
Bug 1876562: Small readability improvements to UPI on RHV documentation #4136
Bug 1871653: baremetal: set root device hints on host resources #4088
Bug 1875932: Update baremetal DNS design details #4101
Bug 1868439: openstack UPI: Fix JSON syntax #4140
Bug 1874656: Bump RHCOS for s390x/ppc64le to fix SSH authentication #4124
Bug 1861917: bootkube: add image for cluster-policy-controller #4131
Bug 1871712: pkg/destroy/aws: Detach attached policies during destroy #4126
Bug 1867975: aws: ensure users set ami id for us-gov and cn regions #4103
Bug 1868439: openstack UPI: Fix Ingition key error #4135
Bug 1872080: Updating images/baremetal/Dockerfile.ci baseimages to mach ocp-build-data config #4086
Bug 1872080: Updating images/installer-artifacts/Dockerfile.rhel baseimages to mach ocp-build-data config #4085
Bug 1872080: Updating images/installer/Dockerfile.ci baseimages to mach ocp-build-data config #4087
BUG 1872646: oVirt, remove tmp VM disk on destroy #4129
hack/update-rhcos-bootimage: update usage example #4097
Bug 1813012: Remove unused flags previously needed for etcd static pod #4063
Bug 1842071: Add ppc64le and s390x documentation links #4115
Bug 1873448: Ensure proper tagging of compute nodes ports #4118
Bug 1872861: Update cli container image for UPI #4098
Bug 1873712: Add information about AZs limitations with Kuryr #4109
Bug 1871795: bump RHCOS images to fix SSH authentication #4095
Bug 1873123: omit deprecated parameters during config generation #4100
Bug 1813012: Remove unused etcd host service and endpoints #4068
Bug 1871030: data/data/gcp: be pedantic about setting the region #4089
Bug 1856270: Update known issues with info about provisioning state node bug #4083
Bug 1870082: Use index in MachineSet names for Openstack IPI #4070
Bug 1813012: Remove legacy code for unmanaged cluster-etcd-operator #4062
Bug 1863026: docs/user/azure: remove newlines from base64 encoding in UPI install doc #4090
Bug 1871048: OpenStack: dynamically set end of DHCP allocation pool #4077
Bug 1868773: Libvirt: Bump bootstrap memory to 4G #4080
Bug 1862209: aws: fix validation for user tags #4081
Bug 1871124: OpenStack: Improve snippet for playbooks download #4079
Bug 1871124: openstack UPI: Provide a way to get the playbooks #4078
Bug 1866534: fixes bootstrap DNS failure on bare metal #4015
Bug 1862957: bump RHCOS images for FIPS fix #4066
Bug 1870592: openstack: Document MachineSet availabilityZone #4074
Readme.md: Remove experimental tag for OpenStack UPI #3982
Bug 1866693: docs: drop kernel-devel from supported extensions #4030
Bug 1864092: baremetal: copy the implementation of rootdevicehints from baremetal-operator #4002
Bug 1862290: vendor/terraform-provider-vsphere: DiskPostCloneOperation patch carry #4060
Bug 1868439: openstack UPI: Fix Ignition v3 #4058
openstack: Known issue: no BMs on Kuryr #4051
Bug 1869329: OpenStack: Place Bootstrap in one of the master AZs #4056
Bump rhcos images for s390x #4050
OpenStack: Fixups to BM workers documentation #4057
Bug 1868439: openstack upi: fix Ignition key error #4047
OpenStack: baremetal worker documentation #3955
Bug 1866949: data/data/aws/route53: use CNAME for gov cloud partition #4043
Bug 1862044: deleting servers using metadata-based filtering #4032
Bug 1867972: destroy/aws: setup the resourcetagging api with correct region for gov cloud #4042
Bump rhcos images for ppc64le #4021
Bug 1867519: make externalNetwork optional #4029
And 21 elided commits (e.g. from squash or rebase merges)
Full changelog

ironic-hardware-inventory-recorder

Updating ironic-hardware-inventory-recorder-image builder & base images to be consistent with ART #502
Full changelog

ironic-machine-os-downloader

Bug 1948538: Clear proxy env variables if go would have #77
Bug 1963210: Add support for no_proxy #53
Bug 1973367: Modify dhcp kernel args based on ipv4/ipv6 #55
Bug 1971549: Unconditionally remove TMPDIR #45
Updating ironic-rhcos-downloader builder & base images to be consistent with ART #34
Full changelog

jenkins, jenkins-agent-base, jenkins-agent-maven, jenkins-agent-nodejs

Bug 2076250: Mitigate multiple CVEs #1436
Bug 2069142: [release-4.7] 2022-02-15 Security Advisory #1415
Bug 2044939: Jenkins Fixes for CVE-2022-20617 and CVE-2022-20612 #1371
Bug 2020613: Update Jenkins and plugins per 2021-11 advisory #1348
Bug 1972361: Bump jenkins version 2.289.2 #1281
[release 4.7] Bug 1947810: Update Jenkins to 2.277.3 and disable setup wizard #1259
Bug 1952562: bump config-file-provider to 3.7.1 #1265
[release 4.7] Bug 1929118: update kubernetes-client-api #1230
Bug 1925484: Upgrade Jenkins to 2.263.3 #1220
Full changelog

kube-proxy, sdn

OCPBUGS-16891: Add /usr/bin/oc to image simiar to openshift-ovn-kubernetes #566
OCPBUGS-16254: Dockerfile changes to build both rhel7 and rhel8 binaries #562
Bug 2005494: Support allow-from-router feature using openshift-host-network namespace #300
Bug 2002291: [4.7] proxy: don’t re-check every userspace proxy rule on every change #348
Bug 1987297: when assigning and releasing egressIP try more than once before failing #327
Bug 2001531: improve SDN’s OVS healthcheck and logging #343
Bug 1995872: Disable conntrack for vxlan traffic #338
Bug 1971669: Fix 4.7 SDN Egress Network Policy #334
Bug 1962637: ValidateMTU: check only the interface that holds the node ip #304
Bug 1923231: rebase to sdn-4.7-kubernetes-1.20.0-rc.0 #286
Bug 1941993: Fix incorrect unmonitoring of egress nodes #279
Bug 1924830: CVE-2021-3121 gogo/protobuf lacks certain index validation #265
Bug 1936920: networkpolicy: pass traffic through NAT to handle possible tuple collisions #272
Bug 1928304: Prefer local endpoint for cluster DNS service #259
Full changelog

kube-rbac-proxy

Updating kube-rbac-proxy builder & base images to be consistent with ART #42
Full changelog

kube-storage-version-migrator

Updating ose-kube-storage-version-migrator builder & base images to be consistent with ART #167
Full changelog

kuryr-cni, kuryr-controller

Bug 2028396: Make completed Pods Ports reusable #608
Bug 2018244: Update TOX_CONSTRAINTS_FILE for stable/xena #588
Bug 2001518: Increase keystoneauth’s connection pool size #554
Bug 1972631: Workaround OVN bug causing subports to be DOWN #525
Bug 1970320: Fix Subnet retrival when creating Service without Selector #522
Bug 1949541: Fixing bug, Kuryr-Controller crashes when it’s missing the status #501
Bug 1959766: Fix NPs for OVN LBs with hairpin traffic #516
Bug 1929066: Skip pool pre population if no Status is present on CRD #505
Bug 1941941: Include service subnet to be open for namespaceSelector set to all. #504
Bug 1929066: Fix port pools #455
Bug 1949551: kuryr-controller restarting after 3 days cluster running - pools without members #502
Bug 1938960: Ignore headless services in NP code #487
Bug 1938960: Do not default protocol to TCP for allow-all NPs #480
Bug 1930017: Narrow connection to the cluster only on namespaceSelector #460
Bug 1928029: Get trunks more diligently #449
Bug 1929168: OpenShift: Add configured subnets to the detected #457
Full changelog

libvirt-machine-controllers

Updating ose-libvirt-machine-controllers builder & base images to be consistent with ART #212
Bug 1938316: [release-4.7] Update MAO and set metrics on :8081 address #219
Full changelog

machine-api-operator

Bug 2022839: GCP CI runs are complaining about APIs not being enabled #954
Bump some SHAs #937
Bug 1993118: Make sure nodes don’t have attached volumes before vm deletion #904
Bug 1999590: [release-4.7] add alert for machine with long deletion phase #907
Bug 1989648: Prevent machine from stucking in Deleting phase on vSphere if related node object not found #895
Bug 1933586: Make sure phase is always set before creation #858
Bug 1924517: Bump dependencies to Kubernetes 1.20.6 to mitigate CVE-2021-3121 #867
Bug 1955689: Webhook filter should check for both mutating and validating webhooks #861
Bug 1947372: vSphere, detach virtual disks before virtual machine destroy if node not available #841
Bug 1954610: Update GCP default image to match 4.7 release #856
Bug 1929721: Add SecurityProfile.EncryptionAtHost parameter to enable host-based VM encryption #818
Bug 1934798: reuse mgr client in webhooks #821
Full changelog

machine-config-operator

Bug 1975174: configure-ovs: fix nondeterministic master in slave profiles #2640
Bug 2008692: Don’t write empty static pod manifests #2783
Bug 1995621: Backport fix 1 to 1 relation to kubelet configs and machine config pools #2759
Bug 2011375: templates: Silence audit events from container infra by default #2792
Bug 2008759: Set timeoutSeconds for keepalived liveness probe #2773
Bug 2008588: Check suffix annotation is a number #2781
Bug 2004581: Set ovs syslog level to info #2767
Bug 2000501: bump SystemMemoryExceedsReservation alert threshold to 95% #2749
Bug 1989751: [on-prem] Disable liveness probe until keepalived.conf exists #2701
Bug 1995853: Gracefully shutdown taking around 6-7 mins (libvirt provider) #2727
Bug 1988102: [release-4.7] On-prem: add default ingress track script to Keepalived #2697
Bug 1998112: vSpehere: disable vmxnet3 tx csum offload #2738
Bug 1995810: crio: complete crio default config #2725
Bug 1992240: change system-connections-merged directory to systemConnectionsMerged #2709
Bug 1956462: ensure SSH key uniqueness #2563
Bug 1993386: crio: use conmon from path #2715
Bug 1992687: alerts: SystemMemoryExceedsReservation triggers too quickly #2710
Bug 1970166: MCO: maxUnavailable of ds/machine-config-daemon does not get updated due to missing resourcemerge check #2682
Bug 1977432: crio: enable internal_wipe option #2649
Bug 1970590: daemon: Change runGetOut to not intermix stdout/stderr #2609
Bug 1976232: Explicitly set keyfile as the default plugin of NetworkManager for RHEL7 #2641
Bug 1971864: Stop setting nopreempt on bootstrap keepalived.conf #2616
Bug 1973006: daemon: cordon the node before performing drain #2623
Bug 1961341: rbac: update remaining apis to v1 #2620
Bug 1971374: daemon/drain.go: bump initial drain sleeps down to 1min #2612
Bug 1970154: operator/sync.go confirm renderedconfig osimageurl matches cvo #2607
Bug 1968759: Bump drain timeout to 1h #2605
Bug 1949348: gcp-routes should wait until network is stopped #2593
Bug 1962288: [ovirt] Stop using db file for static internal records #2581
Bug 1964568: Delete duplicated generated mc #2591
Updating ose-machine-config-operator builder & base images to be consistent with ART #2399
Bug 1949348: not allow healthcheck traffic to loop through the node #2526
Bug 1953475: daemon: return nil for unsupported operation on an OS #2544
docs/README: Useless bump to get a new commit hash #2584
Bug 1956749: vsphere: platform none, vmxnet3v4 fix move to base #2564
Bug 1950261: create the ovs-config-executed file to signal ovs is running on the host #2532
Bug 1957015: [on-prem] Backport duplicate VIP fixes #2566
Bug 1932383: Connect default NIC to cluster network #2427
Bug 1942488: Use new –prefer-ipv6 flag to “runtimecfg node-ip” as appropriate #2525
Bug 1950498: Add on-prem namespaces to relatedObjects #2533
Bug 1951028: configure-ovs doesn’t handle bond interfaces correctly for OVNKubernetes #2536
Bug 1944394: Do “systemctl daemon-reload” after running “runtimecfg node-ip” #2497
Fixes: Bug 1943143: [vsphere] hostnames are changed when upgrading from 4.6 to 4.7.x causing upgrades to fail #2490
Bug 1941246: vSphere: Disable tx-udp-tnl offload #2495
Bug 1941128: pkg/operator/status: Use ‘DegradedPool’ reason for Upgradeable=False #2473
Bug 1941367: Make getting the suffix of an MC more robust #2476
Bug 1933205: Revert “pkg/daemon: Add IgnitionVersion to Daemon” #2438
Bug 1927783: [vsphere] set hostname with –static to provide consistent node name for CSR approval #2405
Bug 1931863: Apply system-connections-merged to all platforms #2426
Bug 1936008: templates: add After=ostree-finalize-staged.service to kubelet.service #2455
Bug 1929257: Fix 1:1 mapping for kubeletconfig:MC and some e2e test fixes #2462
Bug 1939278: Backport kubelet CA no-drain rotation #2464
Bug 1933368: operator/sync.go restore err when required pools not leveled #2441
Bug 1932860: Remove recycler pod templates #2434
Bug 1931615: OVS Config: fixes detecting bond NM files with static IP #2452
Bug 1927405: Fixes ovs-configuration with cloned connections #2418
Bug 1932638: handle Passwd.Users removal more gracefully #2430
And 10 elided commits (e.g. from squash or rebase merges)
Full changelog

machine-os-content

Dockerfile.template: add machine-os version label #261
Remove .github, dependabot doesn’t work for non-default branches #255
Update Fedora CoreOS stable #245
Bump fedora-coreos-config to latest stable #238
dependabot: make PRs for release-4.7 branch #225
Add dependabot config to get gitsubmodule updates #223
Periodic rebase Oct 22 #219
Remove NM 1.32 repo #215
Bump fedora-coreos-config to latest stable #208
overlay: Disable zincati.service via dropin on bootstrap node #205
okd-repos: remove failovermethod #201
overlay: add NetworkManager config to prevent requesting additional MAC #198
Bump fedora-coreos-config to latest stable #194
Bump fedora-coreos-config to latest stable #187
Bump fedora-coreos-config to latest stable #181
Bump fedora-coreos-config to latest stable #173
Periodic submodule bump #170
Bump fedora-coreos-config #162
Undo systemd-resolved change in https://github.com/systemd/systemd/pu… #160
manifest: fasttrack NetworkManager 1.32 #152
manifests: add CVO annotations #155
Revert “manifests: unset OKD extensions” #149
Dockerfiles: /extensions needs to be a valid RPM repo #144
Update fedora-config-devel to latest stable #147
manifests: unset OKD extensions #145
overlay: make sure we explicitely disable DNS Stub Listener #142
Convert into Cosa manifest repo #135
Update NetworkManager-ovs to 1.30 #131
Bump NM to NetworkManager-ovs-1:1.26.8 #124
Pin NetworkManager-ovs #120
Strip xattrs #112
overlay: add NetworkManager config to prevent requesting additional MAC #109
overlay: add dhcp-client-identifier #101
manifests: add include.release annotations #98
Switch to stable FCOS stream #96
Full changelog

mdns-publisher

Bug 2004537: Update zeroconf vendoring #39
Bug 1983695: [release-4.7] Truncate long service names to 63 characters #34
Full changelog

multus-admission-controller

Updating ose-multus-admission-controller builder & base images to be consistent with ART #30
Full changelog

multus-cni

Bug 1927896: make a copy of global RuntimeConfig on merge #91
Bug 1936334: Updating multus-cni builder & base images to be consistent with ART #81
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-58405: Ds merge 7/15/25 #372
OCPBUGS-54422: Ds merge ⁴⁄₃ #356
OCPBUGS-53397: Upstream sync 20-03-2025 #353
OCPBUGS-52415: replace entrypoint #349
NP-1128: Ds merge 2/25/25 #346
NP-1100: Add nodeslicecontroller to dockerfile #341
OKD-232: fix entrypoint.sh for new SCOS builds #322
NP-1110: Allow go vet to be skipped #327
NP-1110: Remove build from make test-skip-static #326
NP-1110: <Carry> Add test dockerfile #325
NP-1111: replace ls line #323
NP-1111: Commit for test logs <temp> #321
<Carry> OCPBUGS-45854: Add test dockerfile #319
NP-1108: <Carry> Add test dockerfile #318
NP-1107: Ds merge 11/27/2024 #317
OCPBUGS-6869: Ds merge 10/25/25 #315
OCPBUGS-33946: Ds merge 10/9/24 #314
NP-1057: Ds merge 08/02/2024 #307
OCPBUGS-33941: upstream sync 23072024 #303
NP-1045: Update owners #285
OCPBUGS-29648: upstream sync 13062024 #290
OCPBUGS-24663: upstream sync 2024/05/23 #284
OCPBUGS-33565: Upstream sync may24 #278
OCPBUGS-32931: Add .snyk file #254
OCPBUGS-28556: Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART for 4.16 #242
OCPBUGS-26986: Downstream sync - includes configurable schedule for reconciler #227
OCPBUGS-26017: Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART #223
OCPBUGS-24608: Downstream sync - includes assignment error fix #211
OCPBUGS-24720: Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART #213
OCPBUGS-24720: Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART #212
OCPBUGS-22075: update golang.org/x/net to v0.17.0 #206
OCPBUGS-18893: Rechecking pending Pods (conflict resolved) #196
OCPBUGS-18847: Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #192
Bug 16002: Change default binary to RHEL8 image #172
OCPBUGS-15905: Denormalize IP name before checking if pod is alive [Backport 4.14] #167
Bug 16136: Introduce entrypoint.sh to call ip-control-loop based on RHEL ver #147
Downstream sync july23 #137
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #150
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #149
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #148
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #146
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #143
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #142
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #141
Restores RHEL specific binary copy and updates to rhel9/8 #140
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #136
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #130
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #129
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #128
OCPBUGS-11324: respect requested allocation range when exluding ranges [backport 4.14] #121
Upstream sync 2023 03 29 #119
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #115
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #112
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #111
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #110
Upstream sync: IP reconciler controller and dual stack #107
OCPBUGS-2948: Excluded ranges bug (#282) #102
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #100
Fix commitish for non-default interfaces fix #96
ip-reconciler: Add all non default interfaces to Pod IP list #95
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #81
Bug 2065785: Sync upstream for context improvements #87
Bug 2050409: ip-reconciler should have known errors from api server on instantiation #84
Bug 2052055: client-go bump to v1.22 #82
Configurable sleep_for_race parameter #74
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #66
Reconciler: kubeconfig update #73
build, ip reconciler: have configurable logging #72
Bug 2004632: Sync for release on cancel #68
Updating ose-multus-whereabouts-ipam-cni images to be consistent with ART #60
Downstream sync: July ‘21 #62
Adds Miguel and Nikhil to OWNERS #61
Updating ose-multus-whereabouts-ipam-cni-alt images to be consistent with ART #57
Updating .ci-operator.yaml build_root_image from openshift/release #55
Fix IP address type size to 16 bytes #51
Bug 1919048: Fix for IPv6 when leading hextets equal zero #48
The README should direct users to the upstream source. #46
Full changelog

must-gather

Updating ose-must-gather builder & base images to be consistent with ART #202
Bug 1954302: Add ovs related services to GENERAL_SERVICES #229
Full changelog

network-metrics-daemon

Updating ose-network-metrics-daemon images to be consistent with ART #62
And 37 elided commits (e.g. from squash or rebase merges)
Full changelog

oauth-apiserver

Bug 2043804: IPs with leading zeros are still valid in the apiserver #76
Bug 1917904: bump k8s.io/apiserver to 1.20.4 #43
Full changelog

oauth-proxy

Updating golang-github-openshift-oauth-proxy builder & base images to be consistent with ART #198
Full changelog

oauth-server

Updating oauth-server images to be consistent with ART #90
Bug 1965932: bump kube to 0.20.4 #79
Full changelog

openshift-apiserver

Add coreydaley as reviewer/approver for pkg/build #301
Bug 2043804: IPs with leading zeros are still valid in the apiserver #287
Bug 2022188: Image policy should mutate DeploymentConfigs #261
Bug 1995074: revert incorrect ssh scp fix #242
Bug 1965402: Revert ‘Bug 1965402: Enhance API host name validation’ #211
Bug 1961557: sets shutdown-delay-duration from OpenShiftAPIServerConfig #199
Bug 1917904: bump k8s.io/apiserver to 1.20.4 #187
Full changelog

openshift-controller-manager

Bug 1924531: Update k8s.io dependencies to address CVE-2021-3121 #191
Bug 1955210: fixed LANG for the builder container #180
Full changelog

openstack-cinder-csi-driver-operator

NO-JIRA: OWNERS: Update team osasinfra #183
OSASINFRA-3609: Mark the repository as obsolete #180
OSASINFRA-3531: Bump Gophercloud to v2 #178
NO-JIRA: Use config map hooks from library-go #179
OCPBUGS-41117: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.18 #177
NO-JIRA: Add more docs for configuration options #167
STOR-1596: Bump all deps for 4.17 #176
OCPBUGS-30949: Add config map hooks #168
OCPBUGS-34870: Correct out-of-bounds check #170
OCPBUGS-34276: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.17 #169
OCPBUGS-28230: enforce termination message policy on all platform pods #166
OCPBUGS-26924: Add healtcheck for node-registrar #161
OCPBUGS-30951: Relax requirement to enable topology #164
STOR-1574: Bump all deps #159
OCPBUGS-28937: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.16 #160
STOR-1574: Bump library-go #158
STOR-1714: Release leadership on SIGTERM #155
OCPBUGS-25340: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART #152
STOR-1688: Chore: add .snyk file to ignore false positives #151
OCPBUGS-24226: setting TLSSecurityProfile with no minTLSVersion crashes controller #150
OCPBUGS-25340: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART #149
OCPBUGS-24844: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART #145
OCPBUGS-23306: Add annotation to CSI driver Pod preventing eviction from the cluster-autoscaler #146
STOR-1281: Make Cinder CSI Driver Topology feature configurable #127
OCPBUGS-23878: OCPBUGS-22624: CVE-2023-45142: bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.46.0 #141
STOR-1402, STOR-1453: update libraries and specify TLS_MIN_VERSION #143
OCPBUGS-22357: CVE-2023-44487: bump github.com/openshift/library-go to master #140
OCPBUGS-21593: CVE-2023-44487: bump golang.org/x/net to v0.17.0 #134
STOR-1276: Enable support for mounting volumes with SELinux context #129
OCPBUGS-19213: Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #133
OSASINFRA-2139: Document how we manage configuration #110
STOR-1436: Restart openstack-cinder-csi-driver-controller Pods if metrics-serving-cert changed #128
Remove Dockerfile.rhel7 #126
Configure User Agent #123
OCPBUGS-16654: Revert revert “STOR-1065: Rework sidecar bindings to b… #119
OCPBUGS-16783: Chore: Update OWNERS and OWNERS_ALIASES #121
OCPBUGS-16526: Bump library-go to remove dependency on goproxy #122
OCPBUGS-16678: Fix SCC admission failure race during initial deployment #120
Revert “STOR-1065: Rework sidecar bindings to bind common ClusterRoles” #118
STOR-1065: Rework sidecar bindings to bind common ClusterRoles #117
OCPBUGS-14824: Bump cinder-csi-driver-operator library-go #116
STOR-1168: Bump common libraries #115
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #113
OCPBUGS-12651: Bump golang.org/x/net@v0.9.0 #114
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #112
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #111
OSASINFRA-3000 Prefer a Cinder CSI-specific config map #82
OCPBUGS-8683: Add management workloads annotations #109
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #108
STOR-1019: Bump to k8s 1.26 libs for OCP 4.13 #107
STOR-947: support disabling default StorageClass via ClusterCSIDriver #103
Bug 2106736: Add multiplePVsSameID capability #106
STOR-1078: Add hostPaths necessary for SELinux mounts #105
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #101
OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars #100
Bug OCPBUGS-2845: Add SecretHashAnnotation to node service #96
OCPBUGS-1904: Only deploy VolumeSnapshotClass when CRD exists #94
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #93
STOR-858: Bump github.com/openshift/* and k8s.io/* #92
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #90
Bug 2090662: SWEET32: Improve TLS configuration for Kube RBAC Proxy (cont) #88
Bug 2090662: SWEET32: Improve TLS configuration for Kube RBAC Proxy #85
Bug 2089973: bump libs to k8s 1.24 for OCP 4.11 #84
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #83
Bug 2065597: Add support for dynamic, user-managed config #78
Mark CSI StorageClass as the default one #80
Add OpenStack team to approvers #81
Bug 2074292: Address CVE-2022-27191 #79
Bug 2067869: Address CVE-2022-21698 #77
Remove Ephemeral mode from the CSI driver #76
Bug 2061732: Fail gracefully on failure to populate cloud info #74
Set fsGroupPolicy in CSIDriver #75
Bump gophercloud #73
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #68
Bug 2043130: openstack-cinder: Add external-snapshotter permissions to patch snapshots #67
Bug 2038934: Add custom CA bundle support #66
Bug 2038053: Bump k8s to 1.23 #65
Bug 2027685: relax health probes against Cinder API #63
Bug 2028484: CSI driver’s livenessprobe does not respect operator’s loglevel #62
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #60
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #57
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #56
Bug 1993931: Storage operators use older kubernetes client #55
Bug 1989215: [openstack-cinder-csi-driver-operator] csi-liveness-probe is not deployed #52
Bug 1948090: Fix number of replicas #53
Bug 1948090: Deploy multiple replicas of CSI Controller Service #51
Remove Fedosin from Owners #46
Bug 1909058: Explicitly set default value for ReclaimPolicy #50
Start using embed for assets #42
Updating ose-openstack-cinder-csi-driver-operator images to be consistent with ART #48
Updating .ci-operator.yaml build_root_image from openshift/release #47
Bug 1960732: delete manifests and update readme #45
Bug 1936871: support clouds with multiple availability zones #43
Bug 1905849: create default VolumeSnapshotClass #40
Bug 1952211: Fix error when mounting /var/lib/kubelet/pods #41
Bug 1957149: Revert “Bug 1905849: create default VolumeSnapshotClass” #38
Bug 1905849: create default VolumeSnapshotClass #36
Bug 1954003: Fix snapshotter metrics endpoint #37
Bug 1947774: fix imagePullPolicy to ifNotPresent #35
Cinder: Add metrics scraping #34
Bug 1909136: Pass cluster ID to CSI driver #33
Updating ose-openstack-cinder-csi-driver-operator builder & base images to be consistent with ART #32
Bug 1918562: bump library-go #30
Bug 1933184: Add maxUnavailable to DaemonSets #28
Fix logLevel propagation to the operands #27
Updating ose-openstack-cinder-csi-driver-operator builder & base images to be consistent with ART #25
Cleanup: Remove serviceName from controller manifest #26
Full changelog

openstack-machine-controllers

Bug 2000551: Adds Proxy to provider client http transport #200
Full changelog

operator-lifecycle-manager

Fix kubebuilder installation in the build root Dockerfile #2351
Bug 1982693: remove cleanup from startup #2287
Bug 1972075: Add OperatorCondition status sync and update operator upgradeable check #2206
Bug 1945702: Fix inconsistent dependency candidate order. #2149
Bug 1962314: Explicitly set readOnlyRootFilesystem: false on created registry pods. #2171
Bug 1963141: Make ClusterOperator Available condition sticky. #2173
Bug 1962312: Simplify deployment status check to reduce flapping. #2170
Bug 1962302: Set reason/message for Available condition in packageserver co #2168
Bug 1959009: Use DeploymentAvailable instead of custom test for CSV status. #2151
Bug 1924467: Bumps k8s.io dependencies to v0.20.6 #2121
Bug 1949139: Preserve existing ServiceAccount owner references during installs. #2088
Bug 1951657: fix(catalog): Reduce namespace resync in resolution failure #2107
Bug 1952851: Add resource requests for bundle unpacker #2109
Bug 1951232: Fix resolution error if inner entry doesn’t provide a required API. #2106
Bug 1947909: Do not adopt copied CSVs #2089
Bug 1937375: only override deployment resources when explicitly defined in subscription config #2036
Bug 1933839: bump k8s.io/apiserver for webhook authorizer panic fix #2022
Bug 1936707: Allow non-CSV-owned ServiceAccounts to satisfy CSV requirements. #2034
Bug 1938405: Support jittering relatively small resync intervals. #2041
Updating operator-lifecycle-manager builder & base images to be consistent with ART #2013
Bug 1934724: fix(resolver): Allow skipped versions to be installed initially #2027
Bug 1929904: Infer package name property for unannotated CSVs, if possible. #2033
Bug 1932002: Only one of multiple subscriptions to the same package is honored #2009
And 10 elided commits (e.g. from squash or rebase merges)
Full changelog

operator-registry

Bug 1968680: fix(containerd): drop xattrs during unpack #676
Bug 1924468: Bump the k8s dependencies to v1.20.6 #638
Bug 1937097: Add retries to opm index add #643
Bug 1931903: add missing closes #597
Updating operator-registry builder & base images to be consistent with ART #584
Full changelog

ovirt-csi-driver-operator

Bug 1996070: Backport maxUnavailable: 10% for DaemonSets #69
Bug 1929777: Run config informers when starting the operator #49
Full changelog

ovirt-machine-controllers

OCPBUGS-24925: Updating ose-ovirt-machine-controllers-container image to be consistent with ART for 4.16 #177
OCPBUGS-24925: Updating ose-ovirt-machine-controllers-container image to be consistent with ART #176
15143237: Updating ose-ovirt-machine-controllers images to be consistent with ART #174
Fix swapped CPU socket and thread mapping #172
Updating ose-ovirt-machine-controllers images to be consistent with ART #171
Updating ose-ovirt-machine-controllers images to be consistent with ART #170
Improve logging #168
update go-ovirt-client #167
added wrapped klogr for unified logging #166
Remove duplicate MemoryMB validation #165
Ocprhv 681 automatic credentials update #161
Added @Darth-Mera as approver #164
Add validations tests #163
updated readme and custom capo docs #162
Refactor controller structure #160
Disable memory ballooning in high perf workers #143
Fix OCPRHV-789 #159
OCPRHV-788: added check for high_performance to set placement_policy_affinity #144
added functional test for automatically updating credentials #158
set serial console enabled for high performance VMs #157
enable headless for high performance VMs #156
disable soundcard for high performance VMs #155
dedicated functional test run script #154
update envtest setup for CI #153
added generation of crds #150
removed test stage in dockerfile #151
OCPRHV-806: added functional test for actuator #148
added first set unit tests for machine validation #147
Updating ose-ovirt-machine-controllers images to be consistent with ART #146
Bug 2100496: VM creation fails w. AG without description #145
Bug 2099293: cluster API provider should use latest go-ovirt-client #142
Bug 2094806: Update dependencies to K8s 1.24, go 1.18 #141
Added @engelmi as approver #137
Updating ose-ovirt-machine-controllers images to be consistent with ART #139
Bug 2082535: clone flag doesn’t work #138
Bug 2077597: bump go-ovirt-client to v1.0.0-alpha4 #136
Bug:2076270 better VM deletion handling #134
Bug 2076277: add Storage Domain Configuration to the machineset #133
Bug 2074710: Transition to go ovirt client #131
Bug 2056454: Preallocated disks for OCP nodes #129
Updated OCP on RHV team members #130
Updating ose-ovirt-machine-controllers images to be consistent with ART #128
update to golang 1.17 #126
Bug 2024328: detach non-bootable disks before removing the VM #123
Update machine-api-operator dependencies to latest version #122
Updating ose-ovirt-machine-controllers images to be consistent with ART #119
Bug 1994410: minor error changes #117
Bug 1984481: correct IPAddress detection for OVNKubernetes #114
Add support for guaranteed memory field #113
Refactor Provider - part 1 #107
Updated owners because of GitHub account change #112
Updating ose-ovirt-machine-controllers images to be consistent with ART #111
Bug 1972747: allow auto pinning new names #110
Updating .ci-operator.yaml build_root_image from openshift/release #109
Removing Roy, adding myself to the OWNERS file #108
Bug 1948719: update controller-runtime dependency #106
Bug 1954177: Update mao dependency for webhook v1 changes #103
move to go 1.16 #104
Updating ose-ovirt-machine-controllers builder & base images to be consistent with ART #101
Bug 1948963: add support for hugepages #102
Bug 1941334: Add support for auto pinning policy #100
Bug 1917485: Add validations to machine object #96
Bug 1937694: providerIDController ignore nodes that have no machine #95
Bug 1931215: Add support for affinity group #80
Bug 1920905: extract node machine ipaddress from the engine instead using DNS . #85
credentials: handle error in the strconv.Parsebool #94
add custom capo readme #88
Updating ose-ovirt-machine-controllers builder & base images to be consistent with ART #91
Bug 1926346: move to go 1.15 and registry.ci.openshift.org #87
Updating ose-ovirt-machine-controllers builder & base images to be consistent with ART #83
Bug 1926278: Bump K8s dependencies to 1.20 #86
Full changelog

ovn-kubernetes

Add jcaamano to top level OWNERS #1781
OCPBUGS-16209: Dockerfile: build both RHEL7 and RHEL8 shims #1777
Bug 2117078: [release-4.7] Multiple ExGW cache validation/improvements #1241
Bug 2105274: EGW: Clean Stale Conntrack Entries #1194
Bug 2063245: Fix Netpol retry mechanisms #1051
Bug 2070339: Fix egress IP allocator sync #1017
Bug 2069247: egressgw: Fix deadlocks #1013
Bug 2021224: Add ovn-controller logical flow cache options #891
Bug 2047325: Fix node connectivity to service backed by egress IP pods #946
Bug 2043677: Fix pod handlers and pod IP parsing for egress IP #920
Bug 2039282: filter out KubeAPIAuth when logging CNI requests #906
Bug 2034506: Make config parsing more resilient for unknown fields #882
Bug 2027874: [4.7z] Fixes race between node handler and pod sync #859
Bug 2019093: Not exit when ovnkube runs with ‘–gateway-interface none’ #820
Bug 2027468: 4.7 backport #850
Bug 2014360: [4.7z] Scale fixes for pods/exgws #799
Bug 2011402: [4.7] bump OVN to 20.12.0-183.el8fdp #786
Bug 1935149: Resync node management port on subnet change #456
Bug 2005519: [4.7z] Remove waiting for namespace and namespace lock contention #766
Bug 2005468: [4.7z] Fixes skipping pods accidentally in retry #759
Bug 2007653: Fix ensurePod to call addPortExternalGW only for annotation updates #765
Bug 2006159: Fix duplicate incrementing of subnet allocation metric #764
Bug 2004489: panic after EgressFirewall deletion and DNS record expiration #751
Bug 2007665: [4.7z] Ensure host interfaces are deleted by CNI #769
Bug 2005391: [4.7z] Fixes misuse of pod annotations during update event #754
Bug 2005913: [4.7z] Sync ECMP routes on startup and fixes stale ECMP routes #763
Bug 2001543: fix reserve joinSwitch LRP IPs #721
Bug 2001364: [4.7z] Ensure client handling of canceled/dropped OVSDB monitor #719
Bug 2001998: egressfirewall not set after upgrade #724
Bug 1988495: Fix LocalGatway ExternalIP #638
Bug 1999896: Revert “[release-4.7] fix reserve joinSwitch LRP IPs” #707
Bug 1997574: Fix: sync egress IP for missed events on start-up #687
Bug 1976242: Update existing policy ACLs on start #650
Bug 1997104: fix reserve joinSwitch LRP IPs #683
Bug 1995910: Backport ovnkube-trace requires ip package to be installed #674
Bug 1991445: Bump OVN to 20.12.0-140.el8fdp #649
Bug 1967132: policy: handle NetworkPolicies single “from” multiple “ipBlock” #562
Bug 1985516: Add v6 management interface address for host network policy #625
Bug 1962608: ensure missed events are handled during a reconnection #547
Bug 1972484: egress firewall as ACLs + service connectivity fixes #592
Bug 1940566: Properly log when hybrid overlay errors out #543
Bug 1970779: Remove getDefaultIfAddr and use getNetworkInterfaceIPAddresses #571
Bug 1962590: NewAddressSet: return nil in case of error #546
Bug 1970322: revert 487 #570
Bug 1962819: CNI cmdCheck: treat ingress_policing_rate=0 as not found #548
Bug 1965075: CARRY: fix missed learn for hybrid exgw #556
Bug 1946682: egress firewall as ACLs #487
Bug 1942603: [release-4.7] Allow from router network policy support #526
Bug 1956980: [release-4.7] fix ForEachAddressSet() as it is not calling the callback functions #523
Bug 1959737: Fix: egress IP route health check detection state on restart #538
Bug 1956270: service controller should not use the target-port #519
Bug 1947097: [4.7z] Ensure no SNAT on GR for DisableSNATMultipleGws #533
Bug 1939488: Backport Handle Multus network-status annotations on pod update #467
Bug 1956318: Revert “removing the hybrid overlay externalGW code” #521
Bug 1951064: master: cancel leader election on exit #505
Bug 1950131: fix deadlock in EgressFirewall DNS code #513
Bug 1951552: master: Delay deleting Namespace’s address set for 20 seconds #507
Bug 1950432: [4.7] pods: bind pod logical switch ports to the node’s chassis with requested-chassis #503
Bug 1924826: Backport Update gogo/protobuf to v1.3.2. #464
Bug 1943316: [4.7] master: enable logical datapath groups for OVN >= 20.12 #478
Bug 1946696: iptables: add filter on node local traffic #489
Bug 1947835: Fix service update for policy type assertion #493
Bug 1942702: backport lr-nat-del/add fixes #484
Bug 1931520: Backport Fix ACL syntax for dual-stack #465
Bug 1943310: [4.7] Enable DB memory trimming on compaction #477
Bug 1932268: detect if the cluster has endpoint slices #442
Bug 1935180: Backport Fix mcast querier #468
Bug 1937829: Cherry-pick dual-stack conversion #460
Bug 1934645: Backport enable support for BFD on external gateway routes #462
Bug 1925475: Bump OVN to ovn2.13-20.12.0-24.el8fdp #451
Bug 1937238: Refactor chain setup for NodePort and ExternalIP #457
Full changelog

prom-label-proxy

Updating prom-label-proxy builder & base images to be consistent with ART #330
Full changelog

prometheus

NO-JIRA: [bot] sync rh-manifest.txt #261
OCPBUGS-56568: chore: compute highestTimestamp at queryManager level #262
MON-4300: update prometheus to 3.5 #260
OCPBUGS-39089: Clarify prometheus pod NFS warning message #243
OCPBUGS-57729: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.20 #259
MON-4245: chore(image): reduce binary size by excluding unused SD deps #251
MON-4251: update prometheus to v3.3.1 #252
MON-4199: chore: update to v3.2.1 #246
OCPBUGS-53025: Scraping: Bump cache iteration after error to avoid false duplicate detection. #245
MON-4104: Update to 3.0 #227
OCPBUGS-48273: fix(main.go): avoid closing the query engine until it is guaranteed to no longer be in use #241
OCPBUGS-45586: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.19 #238
NO-JIRA: [bot] Bump openshift/prometheus to v2.55.1 #236
NO-JIRA: [bot] Bump openshift/prometheus to v2.55.1 #235
NO-JIRA: [bot] Bump openshift/prometheus to v2.55.0 #234
MON-4065: [bot] Bump openshift/prometheus to v2.55.0 #232
OCPBUGS-43378: fix(discovery): Handle cache.DeletedFinalStateUnknown in node informers’ DeleteFunc #229
OCPBUGS-41113: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.18 #226
MON-3989: [bot] Bump openshift/prometheus to v2.54.1 #223
MON-3989: [bot] Bump openshift/prometheus to v2.54.1 #222
OCPBUGS-38622: Restore Prometheus functionality to accept samples with different timestamps from the same series in a single scrape. #220
MON-3981: [bot] Bump openshift/prometheus to v2.54.0 #219
MON-3981: [bot] Bump openshift/prometheus to v2.54.0 #218
MON-3914: [bot] Bump openshift/prometheus to v2.53.1 #215
OCPBUGS-37370: backport of upstream fix #216
OCPBUGS-37244: [bot] Bump openshift/prometheus to v2.53.1 #211
OCPBUGS-35483: cherry-pick upstream fix to make PrometheusRemoteWriteBehind fire when remote endpoint is never reached. #213
OCPBUGS-36768: cherry-pick upstream remote-write fix #210
MON-3914: [bot] Bump openshift/prometheus to v2.53.0 #208
MON-3914: [bot] Bump openshift/prometheus to v2.53.0 #206
OCPBUGS-34264: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.17 #205
MON-3856: Bump openshift/prometheus to v2.52.0 #202
MON-3856: Bump openshift/prometheus to v2.52.0 #201
MON-3825: Bump openshift/prometheus to v2.51.2 #200
MON-3825: Bump openshift/prometheus to v2.51.2 #199
MON-3794: Bump openshift/prometheus to v2.51.1 #198
MON-3794: Bump openshift/prometheus to v2.50.1 #196
OCPBUGS-29981: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.16 #197
MON-3673: [bot] Bump openshift/prometheus to v2.49.1 #193
MON-3676: move raptorsun out of reviewer list #194
MON-3673: Bump Prometheus to v2.49.1 #192
MON-3633: Bump openshift/prometheus to v2.48.1 #188
OCPBUGS-24745: Updating golang-github-prometheus-prometheus-container image to be consistent with ART #187
MON-3528: [bot] Bump openshift/prometheus to v2.48.0 #186
OCPBUGS-22743: bump Prometheus to 2.48.0 (manual) #185
Bump openshift/prometheus to v2.47.2 #181
Bump openshift/prometheus to v2.47.2 #180
Bump openshift/prometheus to v2.47.2 #179
OCPBUGS-21633: update golang.org/x/net to v0.17.0 #173
update OWNERS file #172
Bump openshift/prometheus to v2.47.0 #168
OCPBUGS-18846: Updating golang-github-prometheus-prometheus images to be consistent with ART #169
Bump openshift/prometheus to v2.46.0 #167
Bump openshift/prometheus to v2.45.0 #166
Bump openshift/prometheus to v2.44.0 #164
Dockerfile.ocp: update note about UI assets after switching to embed #165
OCPBUGS-12996: Add missing assets after manual merge #162
OCPBUGS-12825: Updating golang-github-prometheus-prometheus images to be consistent with ART #160
Bump openshift/prometheus to v2.43.0 #158
Updating golang-github-prometheus-prometheus images to be consistent with ART #156
Bump openshift/prometheus to v2.42.0 #154
Bump openshift/prometheus to v2.41.0 #153
Bump openshift/prometheus to v2.40.7 #152
Bump openshift/prometheus to v2.40.6 #151
Bump openshift/prometheus to v2.40.5 #150
OCPBUGS-4273: Bump openshift/prometheus to v2.40.4 #148
OCPBUGS-2873: fix certificate reloads after rotation #145
Updating golang-github-prometheus-prometheus images to be consistent with ART #147
Revert unwanted downstream patch #144
OCPBUGS-1718: [bot] Bump openshift/prometheus to v2.39.1 #142
Updating golang-github-prometheus-prometheus images to be consistent with ART #141
Bump openshift/prometheus to v2.38.0 #140
OWNERS: Add myself, and move former team members to emeritus #139
Updating golang-github-prometheus-prometheus images to be consistent with ART #137
Bump openshift/prometheus to v2.37.0 #138
Bug 2099561: Bump openshift/prometheus to v2.36.2 #136
Bug 2064984: Update Prometheus to v2.36.1 #133
Updating golang-github-prometheus-prometheus images to be consistent with ART #132
web/ui/.gitignore: unignore generated assets for downstream build #130
Bump openshift/prometheus to v2.35.0 #128
Updates OWNERS file #124
Bump openshift/prometheus to v2.34.0 #123
Bump openshift/prometheus to v2.33.5 #122
Bug 2056802: scrape: Fix label_limits cache usage #121
Bump openshift/prometheus to v2.33.4 #120
Updating golang-github-prometheus-prometheus images to be consistent with ART #119
Bug 2034192: [bot] Bump openshift/prometheus to v2.32.1 #117
Don’t use dependabot #115
Bump openshift/prometheus to v2.32.0 #104
Bump openshift/prometheus to v2.31.1 #103
Update scripts/rh-manifest.sh replacing yarn by npm #99
Updating golang-github-prometheus-prometheus images to be consistent with ART #102
OWNERS: cleanup #101
Bump v2.30.3 #98
Bug 1943860: Bump 2.30.0 #96
Updating golang-github-prometheus-prometheus images to be consistent with ART #94
openshift: Add script to generate rh-manifest.txt #90
Updating golang-github-prometheus-prometheus images to be consistent with ART #93
Bug 1999397: Bump 2.29.2 #92
Bug 1986243: bump 2.29 #91
Bug 1934324: Update to 2.28.1 #89
Updating golang-github-prometheus-prometheus images to be consistent with ART #88
Update OWNERS file to reflect new maintainers #87
Bug 1964332: Update Version to 2.26.1 #86
Bug 1931281: Bump Prometheus to v2.26.0 #84
Updating golang-github-prometheus-prometheus builder & base images to be consistent with ART #79
Updating golang-github-prometheus-prometheus builder & base images to be consistent with ART #72
MON-1208: Bump Prometheus to v2.24.1 #69
Full changelog

service-ca-operator

OCPBUGS-56599: don’t hotloop on secret creation errors #274
CNTRLPLANE-1260: Add README to test extension #272
CNTRLPLANE-1260: set up openshift-tests-extension and add a sanity test #270
NO-JIRA: Update Owners #269
OCPBUGS-57703: Updating ose-service-ca-operator-container image to be consistent with ART for 4.20 #268
OCPBUGS-55057: Don’t check featuregates on operand #263
CNTRLPLANE-339: Issue short lived certificates if ShortCertRotation featuregate is enabled #245
OCPBUGS-48171: Update go 1.23 and ocp 4.19 #254
OCPBUGS-40772: Bump go to 1.22.0 #248
NO-JIRA: fix outdated doc links #241
OCPBUGS-24916: Bump to rhel9 #240
OCPBUGS-29583: Apply hypershift cluster-profile for ibm-cloud-managed #234
AUTH-482: set required-scc for openshift workloads #235
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #230
API-1673: Add description annotations to service CA secret and configmap #225
add ownership for unshared secrets and configmaps #220
OCPBUGS-21798: go.mod: bump golang.org/x/net to v0.17.0 #223
OCPBUGS-19176: Updating ose-service-ca-operator images to be consistent with ART #221
OCPBUGS-8512: fix admission webhook CA injection #219
OCPBUGS-16536: bump lib-go to get rid of the goproxy dep #213
OCPBUGS-12662: bump kube to 1.27.1 #212
Updating ose-service-ca-operator images to be consistent with ART #211
API-1525: Add openshift_service-ca namespace yaml to manifests dir #208
OCPBUGS-3195: Return nil from start funcs after context is cancelled. #202
Bug 2048349: make the operator react to workload logLevel configuration #196
Quality of life changes, fix e2e tests failing too often #197
Updating ose-cluster-authentication-operator images to be consistent with ART #192
Bug 2101880: operator NS manifest: Set empty openshift.io/run-level #194
manifests/deployment: comply to restricted pod security level #190
Bug 2034484: feat: library-go bump #185
Golang bump 1.17 #183
Updating ose-service-ca-operator images to be consistent with ART #176
OWNERS: Add Bugzilla component #153
OWNERS: remove s-urbaniak #175
Bug 1987029: Support external control plane topology #171
Bug 1984644: bump lib-go to get 60s leaderelection tolerance for API outage + bump k8s #174
Bug 1986829: metrics: use client cert auth for metrics scraping #173
Add s-urbaniak, remove marun from OWNERS #163
Bug 1981498: add vulnerable legacy injector to allow for upgrade clusters to use … #167
Updating .ci-operator.yaml build_root_image from openshift/release #164
readme: update references to developer guide #161
Bug 1948012: Report the operator status as always upgradeable in serviceCA/cluster #154
Bug 1953563: Add .ci-operator.yaml with build_root_image #158
Rename workload annotations #156
Bug 1948311: DelegatingAuthenticationOptions TokenReview request timeout #157
Add management workload annotations #152
IBM Cloud manifest profile patch #151
Generate wildcard certificates matching pod host names for headless services #149
Updating ose-service-ca-operator builder & base images to be consistent with ART #148
Various e2e test fixes and cleanups #147
Random cleanups #150
Don’t ignore the minTimeLeft parameter to requiresRegeneration #143
Bug 1914446: manifests: run the operator’s pod as non-root user #136
Fix (make verify) with Go 1.16 #142
Remove cleanup of 4.3 deployments that was safe to remove in 4.5 #141
Updating ose-service-ca-operator builder & base images to be consistent with ART #139
Full changelog

telemeter

Updating telemeter builder & base images to be consistent with ART #369
Full changelog

thanos

Bug 1994123: dockerignore: remove vendor from ignored list #69
Bug 1944575: pkg/rules: fix deduplication of equal alerts with different labels #52
Bug 1957646: cmd/thanos: use miekgdns resolver as default #56
Full changelog

vsphere-problem-detector

Bug 2039341: Deferred logout after checks are run #70
Bug 1959546: Update to current master #40
Bug 1936975: Fix deadlock when enqueing functions into the pool #35
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github