4.16.0-ec.6

PullSpec:

quay.io/openshift-release-dev/ocp-release:4.16.0-ec.6-multi

Tests:

Informing jobs
- multi-e2e-ovn Succeeded periodic-ci-openshift-multiarch-master-nightly-4.16-ocp-e2e-aws-ovn-heterogeneous

Upgrades from:

Untested upgrades: 4.15.10, 4.15.11, 4.15.5, 4.15.6, 4.15.7, 4.15.8, 4.15.9, 4.16.0-ec.1, 4.16.0-ec.2, 4.16.0-ec.3, 4.16.0-ec.4, 4.16.0-ec.5

Loading changelog, this may take a while ...

Changes from 4.16.0-ec.5

Created: 2024-04-29 13:04:21 +0000 UTC

Image Digest: sha256:f6e654d688c7ba9a9b6a2294285955a77b59f029553406a64be41b937d1472d0

Release 4.16.0-ec.6 was created from quay.io/openshift-release-dev/ocp-release-nightly@sha256:5f98278a2f7308dc0183ff7c7ca98dc27aec7c20afbf74bfc915a4c1f82e1a0c

Components

Kubectl 1.29.1
Kubernetes upgraded from 1.29.2 to 1.29.4
Kubernetes Tests 1.29.0
Red Hat Enterprise Linux CoreOS upgraded from 416.94.202403300731-0 to 416.94.202404221555-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AlertingRules (0 tests)	Unconditional (Changed)	Unconditional (Changed)	Unconditional (New)	Unconditional (New)	Unconditional (Changed)	Unconditional (Changed)
AdminNetworkPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled (New)	Enabled (New)	Enabled	Enabled
NetworkDiagnosticsConfig (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereDriverConfiguration (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-utils git 6e6bb40d sha256:b4198ee23330b1d75d4baf7601d1e491d758d3398efe4b6af4b2ee14aac8cdc4
alibaba-cloud-controller-manager git 97e8335e sha256:31efc025dbc0ec7f2c8129a10c37e90309426eda6343bf2c5abf7275d79e4bf0
alibaba-machine-controllers git a57f2023 sha256:af4df358b1463602d317ec1c9a94ea45f44ff0f16a400c408101f983308243bc
aws-cloud-controller-manager git 51180c32 sha256:18ec3e154fcb056a3ca574c3c0bbc656de8b2cc384fa0e30301219ea23ade7c6
aws-ebs-csi-driver git 1d29a74a sha256:0f752d14315c68397deb6484b23b19d8965ea0a4b2b9e4db4a1868b84da05a96
aws-machine-controllers git 61d60f6c sha256:95109e430e2fcefd4a5fd72fc2ebcef742a3692341c7c06911c5288caba7a6b5
aws-pod-identity-webhook git 746491a6 sha256:2e372d7a703587c911c1f2490988325f367924e7cad4301441b5323536ba7f3c
azure-cloud-controller-manager git 8c9dff68 sha256:a22b38ea788923e424cea7271289827c6d2aa27355afce4867895b7432d994a2
azure-cloud-node-manager git 8c9dff68 sha256:530b2a217d6224cb6c112a22d47d251ecfb9a1fb697be09449bab0623311d9e7
azure-cluster-api-controllers git 03b594c3 sha256:ec4763b16d8009e955f1715a7f2ffa9e855bc9989fe8098213a1af3e0d88d45d
azure-disk-csi-driver git 6b55f6fb sha256:17089d63235c5da97e493f93811e4ea4d4293025a55466365f10948dd7437430
azure-machine-controllers git d6be293a sha256:8d6e94d020392ecd126a0a052c65db57e8d2574360a53da49056f27433b56949
baremetal-machine-controllers git 11ba601f sha256:3486d8288592f3638bbf605905fa7936e41ceeb689c63097ec5e6491f0326ec6
cluster-autoscaler git c8526794 sha256:72f104741315a4701c901a068c8500c29c6126dc295cccf249d6ec400674b6f2
cluster-bootstrap git 27bfb59f sha256:490d4e36ab22363d58169c48c698bd2cbd40af30df3c453fe3b7e330468d623c
cluster-capi-controllers git bb7f3787 sha256:f7d3fb504a79b2e8721696846b8110e6fb37485f27341d0d57f800b9f67b25d3
cluster-capi-operator git 8342a83c sha256:e105f4fd7ab03209a92e6c4e666e563b3e805cefb7a66a2b17b06eb234ba426f
cluster-kube-cluster-api-operator git bddf74a0 sha256:ddcfd745dc81a16470579b91f7b2f313a8c26ffdd0ad3a115ff21a702e877981
cluster-kube-storage-version-migrator-operator git ad45d571 sha256:51e583333b07e7644d61cf77ae028428dbfc3b8eb98b7fd76d1c87b1a35a3e15
cluster-machine-approver git d3b6e4ba sha256:d3d9a64af47b67bf8a87af34d293a445941e90e1ea60b194fe4e5fd7ae07387b
cluster-platform-operators-manager git 5fb399e9 sha256:583305b7ccc4eb442f26591ac53196ab2096354fd274c4f3a650ab642d1dcda6
cluster-policy-controller git eaea543f sha256:a34868e057a18001183ddcb89559e33f74a18c4cb0c84804b011ebc32a8831e8
configmap-reloader git dc91ddc4 sha256:397c6ad17a1c8ada93fb40b8ae2c616e0804c42fa2db71a146c71f954744b8e8
csi-driver-manila-operator git 256a6604 sha256:da9a5ebcbc64fca2e38281036ffdb39b6a8e159089228e73853176c83d48b335
csi-driver-nfs git 406cec72 sha256:69cb2b86bf72d7f0a515969abfc1af3010f62d3e92999e437122661e79b3c66b
csi-driver-shared-resource-operator git 8b1d7a6f sha256:0de2c605d634903b8652e87252b85925a69053c71e7b4f88e082911c2d3bcc76
gcp-cloud-controller-manager git 26b43dfc sha256:dd1a1a10bb032db6376d06df7be5e2c228c37de2b87df136555df1a2bb4a585b
gcp-cluster-api-controllers git c76ca403 sha256:2c06d81f9fd15fe775d50e1c786fa91e0913f120bf0576775f2d61b2276e568a
gcp-machine-controllers git fc80687e sha256:f277c3cfe5280225b61e0b98fa8c629c1f2288c0b16f86a10c5f46c9b7e94141
gcp-pd-csi-driver git 5ed71c64 sha256:b2df3a1ce5c6fa98e16730de27f745612fc69c59ec3c667cfcf1f08c910ac185
ibm-cloud-controller-manager git f961f16d sha256:b8485767fde3111214eaf12470650deeb9ae8df90da8780871da223000ee6830
ibm-vpc-block-csi-driver git 32b4c005 sha256:1a1499778b37f9b2456cb3df9a8e67922231c347e23f9e43196e7fd797805a97
ibm-vpc-block-csi-driver-operator git 9cc8f148 sha256:c19066d3d968f66f2d51309f4fbaf4a61d33d4e269d133cda7c8416d807f4648
ibmcloud-cluster-api-controllers git 3c01576e sha256:976c05eb7301d92440e49a51e45004f78d643a98e127a914a49e447a63d500fa
ibmcloud-machine-controllers git 1a3a3030 sha256:74d394af77624a21db74efdb37cb01d18fb82c6df61e68dde1a984bca44b3b9a
ironic-machine-os-downloader git 93b8b5fa sha256:1d387507330035a6584772e7b7e69e8c643f237aad0b6d548da2a19d23fad595
ironic-static-ip-manager git e78e4c3e sha256:177135e86182301eeac21ba9fd77c73765c33e8de7ce23959da6985e6585a1ce
keepalived-ipfailover git 2266a7f1 sha256:46984c1551f15a0ec3fd95f1eb412c88ae62661917f65fea70f48b7ca0b9fd78
kube-rbac-proxy git 04d0a781 sha256:fca556e620f0385d56592a5824149b5dbb70a5503fba849a5e6ae811b44500fd
kube-storage-version-migrator git 969a60e9 sha256:61ff4200cbb21c8296011a8f5cfa83c4ef6c8e55a8f90f47dc7c18409e68b8c7
libvirt-machine-controllers git a336f0b5 sha256:363679f558c927a158cf3b87d4acdb32a037f6e5c7301446b19dc222f888fea3
machine-api-operator git 99b3ec4b sha256:9c1182a41159f14db938a001a6b6477792bf4f75c80803d159c094c8923eb77e
machine-image-customization-controller git 39480963 sha256:8a1dd6ea9c42f2125cec33e8b1973b4a1ed3cc9cd8fc8b7d2e233f715cd55cf6
machine-os-images git 6aad9b0c sha256:c51638777598f1873f5e61cdd83466bf8675e5f1f99e60c2d46a415c6ae4a0cc
multus-route-override-cni git 6a04feea sha256:d67c233f451d94138651c1093782a5cbf6f5650eb808612cce1239082e95c527
multus-whereabouts-ipam-cni git 5e50ed86 sha256:02dd27381c3345aa214c3f5d406887ac2104dd8c7adcccbb7611e68e60c30243
network-interface-bond-cni git bb911451 sha256:9399edee8914e9d8bee982ebdcaa5b7eca4d881f33d8df299c68a77aef4f74fa
network-metrics-daemon git 710bd872 sha256:4d98acd873aeb81d5624e28547b90e627d847e1707224c417809f95ee832394c
nutanix-cloud-controller-manager git c9bbc44c sha256:382c6157c865402178bb810daa6d4d9ab51fe8f51f2b7eb053644c128a29263e
nutanix-machine-controllers git e98d068a sha256:758d847a4b2a7dbb216d1a94e729277926f9ad53f7090090e666ac445c1b7a57
oauth-proxy git 30f80124 sha256:be5be77dcfdbde9ab501a4a6087d33bd9d9cf4207463dabe9ff7b6023f278c60
olm-rukpak git 38965a71 sha256:190d454519e2173911fdc99db1b10b4bdac956ec0d6c6d167650bf1229f047e1
openshift-state-metrics git 59b8a0ff sha256:d85b755ae8c7d5e2f5948fd0cda6f533d50b4e56da113ae31fc2cecd1e138b56
openstack-machine-api-provider git bf45c1fb sha256:a3d3d367fab2820a8586b8d0dbdcc566f86da8f39185821e48f0360e7bc272d7
ovirt-csi-driver git 1db726a9 sha256:59115de32b8d5ab6b887fd5661b52f842276568d6901d59fe624b89228b82e39
ovirt-csi-driver-operator git ac852f3e sha256:a2cff8d76fa7ebb58fae3901f5388f77c8543df4f07188f4d79e77c308c26d02
ovirt-machine-controllers git 7679c125 sha256:5d2ae29065d14272b06714e71edf35be3db5a5a3a6c4d92baa0e1f4c21ab58d2
powervs-block-csi-driver-operator git 7cb92798 sha256:b89b67bc07d4d9e11b40eb0ab5de65594713255223a1021130769a0b73669090
powervs-machine-controllers git 6b57e6c1 sha256:ae512fd9f20027a52961c96889dcf54b0e771d0fcb59a7642c9972015ccd341e
prom-label-proxy git 5e14722e sha256:62fba7aa8af2d06b98d8dfce992294c3458f3505eb03c1901e246ae366c787ee
prometheus-alertmanager git 1e17979b sha256:b533319af73bdc03d70ca683f324a34f6fa0be58f7b6799798738035567e955d
prometheus-node-exporter git 4227555c sha256:c23477d86a6cae460b82cde641a4c0fcd324d67b292af2b67191672146a4d635
rhel-coreos sha256:af933dc4c43e8c5e29af1886a0f36b6d3dff45fdf28d3f81cd38aa5c860a5a4d
rhel-coreos-extensions sha256:c215399c6dc1e25f7c068752ae681ae51bf38cd3aa4d2ebaaab5e07cdfbd4cfa
route-controller-manager git 3112b458 sha256:6d701621a47b38b22f1d528109f08a9c716d8f6434bc7084bceca2b12c8d5124
service-ca-operator git cb3093f2 sha256:0272c03fd5e9a56e0d2bbe4b998b8777500b918194ee040a52474c481f21a82b
vsphere-cloud-controller-manager git d13aea81 sha256:d4bc110200681d54bc20e5d4600ef183968b4f3a119f1abad7da315aef1464fe
vsphere-cluster-api-controllers git 80c2c632 sha256:ecd69f377c667f1fba2cf8932e17db355ee6350ae880021c7dc41c0366a990d6
vsphere-problem-detector git d674e6d8 sha256:50bff8e927055aa507a86631d59709f0ddf6a59e42f1f6f6cc5b9347da981896

agent-installer-api-server

MGMT-17620: Change the way release images are handled in RestAPI flow to retrieve multiarch release image in case a multi-arch OpenShift version, single-arch requested and it exist. (#6227) #6227
OCPBUGS: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (api go.mod) (#6212) #6212
NO-ISSUE: Change only-latest api response to compare versions according to pre-release suffix as well instead of just base version (#6209) #6209
MGMT-17558: Allow installation on iSCSI volume (#6218) #6218
MGMT-17412: Change fallbck behavior when error occuring in OpenShift Release Syncer - if there are release images already in the DB, continue using the stale data instead of failing / truncating the table (#6145) (#6186) #6145
MGMT-17503: Fix the cpu architectures retrieved in ../openshift-versions endpoint (#6184) #6184
MGMT-17365: Add support for setting agent labels in BMH as annotations (#6124) #6124
MGMT-17313: Create day 2 BMH and Machine for control plane nodes (#6142) #6142
MGMT-17513: Change the latest release image retrieved in GetReleaseImage using major.minor OpenShift version to latest non-beta release image if exists, or latest beta release image otherwise (#6185) #6185
MGMT-17468: Use x86_64 over amd64 and arm64 over aarch64 for CPU architecture of both release and OS images to comply with ABI current behavior (#6190) #6190
MGMT-17518: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#6176) #6176
NO-ISSUE: Bump OCP versions: 4.16, 4.15, 4.12, 4.14, 4.13 (#6199) #6199
MGMT-17414: Adding new requirements for LVM on 4.16 (#6165) #6165
MGMT-17181: Add a LocalClusterImportController (#6079) #6079
NO-ISSUE: Prevent false positive host connectivity (#6162) #6162
MGMT-17489: Fix disconnected capi tests (#6163) #6163
Update RHTAP references (#6148) #6148
MGMT-17412: Change fallbck behavior when error occuring in OpenShift Release Syncer - if there are release images already in the DB, continue using the stale data instead of failing / truncating the table (#6145) #6145
NO-ISSUE: Bump OCP versions: 4.15, 4.14, 4.12 (#6157) #6157
MGMT-17438: bugfix, make sure ODF and LVM requirements do not change if MCE is not selected (#6150) #6150
NO-ISSUE: replace minio quay.io image repository (#6151) #6151
OCPBUGS-31631: Deploy dual stack with IPv6 on top of bond/vlan fails (#6149) #6149
NO-ISSUE: Add doc for iPXE HTTP (#6146) #6146
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-17518: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#818) #818
Move to rhel9, decouple from cli image (#760) #760
NO-ISSUE: Decouple inventoryClient from ops (#811) #811
NO-ISSUE: Decouple inventoryClient from ops (#810) #810
NO-ISSUE: Bump the go-dependencies group with 3 updates (#809) #809
MGMT-16587: Update to mitigate CVE-2024-21626 (#806) #806
MGMT-17305: Wipe installation disk on IBI (#808) #808
MGMT-17384: Change waiting for encapsulated machine config from retry to wait-for-predicate (#807) #807
Full changelog

agent-installer-node-agent

MGMT-17518: Bump x/net to 0.24.0 to mitigate CVE-2023-45288 (#690) #690
OCPBUGS-31423: Try to pull installer image before installing (#679) #679
NO-ISSUE: Bump the go-dependencies group with 2 updates (#683) #683
MGMT-16587: Update to mitigate CVE-2024-21626 (#676) #676
NO-ISSUE: Bump the go-dependencies group with 2 updates (#678) #678
NO-ISSUE: subsystem test failing due image format version (#677) #677
Full changelog

apiserver-network-proxy

OCPBUGS-31716: Bump golang.org/x/net to v0.23.0 #50
Full changelog

aws-cluster-api-controllers

NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.4.2 (1c23009) into master #507
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator

OCPBUGS-28230: Add terminationMessagePolicy to all containers #216
STOR-1726: Delete static resources when ClusterCSIDriver is removed #215
AUTH-482: set required-scc for openshift workloads #170
NO-JIRA: Remove unused assests for azure-file #213
OCPBUGS-31044: Add cluster-wide proxy in the azure-file driver node container #207
OCPBUGS-31306: Azure Disk: Add cluster-wide proxy in the driver container in the node #206
OCPBUGS-28230: enforce termination message policy on all platform pods #214
STOR-1726: Add OLM metadata for SMB operator #210
STOR-1726: Add test manifest for SMB CSI driver #212
STOR-1818: enable pvcDataSource capability for tests #204
STOR-1726: Simple rename of objects in assets/overlays/samba/generated/standalone/ #211
STOR-1726: Add Dockerfile for Samba operator #209
Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 #168
STOR-1726: Minimal implementation of CIFS/Samba CSI driver operator #205
Full changelog

azure-file-csi-driver

OCPBUGS-32046: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.16 #60
OCPBUGS-31869: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.16 #59
STOR-1794: use azcopy base image to build driver #56
Full changelog

azure-workload-identity-webhook

OCPBUGS-31283: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.16 #16
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

SPLAT-1585: capv - allow no auth to vcenter #8276
SPLAT-1208: replace UPI terraform with powercli #7699
OCPBUGS-29765: Fills CIS or DNS CRN in Metadata, never both #8057
OCPBUGS-32042: fix usage of addtionalTrustBundle field #8253
METAL-872: Remove terraform libvirt provider #8160
MULTIARCH-4549: Logic for creating private DNS records for PowerVS CAPI #8246
OCPSTRAT-915: Nutanix capi support #8211
OCPBUGS-32133: GCP: Fixing GCP Bootstraping #8248
METAL-939: baremetal: monitor bootstrap process #8181
no-jira: gather: replace deprecated errors package #8280
no-jira: azure: Update capz version to 1.14.2 #8268
OCPBUGS-31017: aws: add ec2:DisassociateAddress permission #8247
OCPBUGS-31563: sdk/aws: add ssh security group rule for compute #8229
MULTIARCH-4550: Power VS: Use a custom resolver when publish strategy is Internal #8243
MULTIARCH-2678, OCPBUGS-14478: Refactored updateIgnitionImg to use NewIgnitionImageReader from isoeditor to support s390x #8205
CORS-3050: capi/aws: copy AMI to target region, if needed #8157
SPLAT-1592: bump capv to v1.9.3 #8267
OCPBUGS-30774: always save serial logs if they were gathered #8263
CORS-3261: GCP cluster api add disk encryption #8222
CORS-3419, OCPBUGS-30941: Include baremetal IPI in openshift-installer #8161
no-jira: PowerVS: Open port 10258 #8261
OCPBUGS-31711: AWS update explain docs #8258
OCPBUGS-27965: escape ‘%’ in proxy settings #8265
OCPBUGS-32174: save correct bootstrap public IP #8264
CORS-3420: Remove libvirt platform from openshift-baremetal-install #8244
no-jira: capi: replace deprecated --metrics-bind-addr arg #8251
CORS-3436: capi: save log output to file #8218
no-jira: PowerVS: Add destroy Power Server subnets #8260
OCPBUGS-32091: Add Top-level Context for Create Commands #8063
CORS-3063: Support control plane disk encryption #8124
CORS-3269: Azure CAPI Ignite Bootstrap #8255
no-jira: PowerVS: add AddIPToLoadBalancerPool #8257
SPLAT-1293: Bump API version to promote vSphereStaticIPs from TechPreview. #7943
no-jira: capi/aws: bump controller log level to debug #8252
CORS-3254: Update google.golang.org/api/cloudresourcemanager library version #8213
MULTIARCH-4111: Update the CI image with virt-install #8259
CORS-3218: GCP Remove the use case of users passing contents for json secret data #8234
OCPBUGS-27844: Fix task for attaching IPv6 subnet to router. #8087
CORS-3270: azure: tag installer-created LB resources #8236
OCPBUGS-31813: AWS: bump CCO for permission fix #8233
CORS-3289, CORS-3308, CORS-3426: Bump CAPA provider for various fixes #8232
OCPBUGS-32041: update RHCOS 4.16 bootimage metadata to 416.94.202404101051-0 #8256
no-jira: docs: Fix typos #8245
no-jira:PowerVS: Wait for IPs #8239
CORS-3075: Allow for installation in existing resource group #8123
CORS-3446: Add instructions for obtaining correct binary #8230
AGENT-858: Agent day2 ignition services #8093
CORS-3418: images: move installer images to static builds #8215
CORS-3417: capi/aws: support ignition proxy and CA bundle #8170
OSASINFRA-3365: clusterapi: Add worker asset to PreProvision #8237
HIVE-2476: OpenStack.MachineSets(): Allow nil Replicas #8227
CORS-3195: Azure CAPI Supplemental Load Balancers #8115
no-jira: PowerVS: Set VPC service region #8217
OCPBUGS-12890: Create bucket, signed url and use proxy info for installs #8056
no-jira: PowerVS: Fix COS region and VPC subnets #8219
Full changelog

baremetal-operator

NO-ISSUE: Sync with upstream #344
NO-ISSUE: Merge upstream #340
Full changelog

baremetal-runtimecfg

OCPBUGS-32348: Make log level configurable #305
OCPBUGS-29067: Do not add VRRP config to Node on Cloud Platforms #303
OCPBUGS-29931: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.16 #300
OCPBUGS-29919: Decrease log level when detecting node IP #301
Full changelog

cli, cli-artifacts, deployer, tools

WRKLDS-1190: oc adm must-gather: print timestamp when logging in fallback mode #1738
OTA-1202: Changing the conditional risk to known issues #1739
OTA-1174: upgrade status: Expand health insights with --detailed=health #1736
OTA-1174: upgrade status: add --detailed=nodes that shows all nodes #1735
MCO-1056: MCO-1057: Implement oc adm prune machineconfigs command #1723
NO-JIRA: Report tests for feature #1728
OTA-1036: adm update status: Refactor node status #1732
OTA-1036: adm upgrade status: Add control plane nodes status #1731
OCPBUGS-31498: Add OIDC specific certificate authority bundle flag #1720
WRKLDS-1171: Add openshift-install-fips target to oc release extract #1725
OCPBUGS-31615: Add help text the behavior of filter-by-os against single image #1721
Full changelog

cloud-credential-operator

OCPBUGS-31290: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.16 #693
OCPBUGS-31290: Add binaries for RHEL8 and RHEL9, defaulting to RHEL9 #692
OCPBUGS-31678: aws: remove non-existent permission #690
AUTH-482: set required-scc for openshift workloads #681
Full changelog

cloud-network-config-controller

OCPBUGS-29915: GCP: Explicitly set UniverseDomain to the default universe domain #136
OCPBUGS-27422: Avoid nil pointer panic while assigning private IP on Azure #133
OCPBUGS-30146: Serialize scheme construction to prevent panic #134
Full changelog

cluster-authentication-operator

OCPBUGS-24195: the apiservice controller waits until bootstrap complete #662
OCPBUGS-22969: Use v1 for flowcontrol API #640
NO-JIRA: e2e Keycloak: retry logging in as admin #666
OCPBUGS-32089: wellknown-readiness: perform several attempts to connect before going unavailable #664
NO-ISSUE: bump to the latest version of openshift/api #663
Full changelog

cluster-autoscaler-operator

OCPBUGS-31960: Bump x/net to v.0.24.0 #318
Full changelog

cluster-baremetal-operator

OCPBUGS-28230: enforce termination message policy on all platform pods #413
METAL-979: Add RBAC for newer CRDs hostfirmwarecomponents and dataimages #412
METAL-904: Move parts of ICC config to a new secret #406
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-13680: Pass –cluster-name to OpenStack CCM #337
Full changelog

cluster-config-api

Revert #1851 “MON-3538: Promote MetricsServer FeatureGate to GA” #1863
MCO-838: machineconfiguration/v1: update MCP feature gated field to omitempty #1862
NO-JIRA: Change PreviousFlakePercentage value type from int to float #1861
MON-3538: Promote MetricsServer FeatureGate to GA #1851
Provide a small help when invoking tests/hack/gen-minimal-test.sh #1860
NO-JIRA: Add DevPreviewNoUpgrade as a featureset #1825
OCPBUGS-30954: Reintroduce CEL IP/CIDR validation for Config APIs #1817
remove alpha level of AlertingRules which are GA since 4.14 #1854
add explanation of how to provide automated testing for FeatureGate #1855
MCO-838: machineconfig/v1: add PoolSynchronizers to MCP status #1852
STOR-1803: add vsphere snapshot configuration fields to ClusterCSIDriver #1783
NO-JIRA: add command to restrict features from promotion without tests #1843
NO-JIRA: add type for recording tests per featuregate #1848
MCO API Cleanup #1850
OCPBUILD-9: Adds seperate controllers for default rolebindings #1770
MCO-993: MachineOSBuild API #1773
OCPBUGS-28673: Ingress - add connect timeout to tuning options #1829
SDN-4599: Configurable network diagnostics pod placement #1800
MCO-838: machineconfiguration/v1alpha1: add PinnedImageSet to MCN #1824
SDN-4596: Promote AdminNetworkPolicy to GA #1840
Proposed new api structure for ovnkubernetes / transit switch api #1626
OCPBUGS-31058: config/ingress: Make Hostname godoc user-friendly #1819
Full changelog

cluster-config-operator

OCPBUGS-24871: Updating ose-cluster-config-operator-container image to be consistent with ART #390
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-31808: Fix ExportFailureDomain to handle empty platform spec #287
OCPBUGS-32295: Modified webhook to allow templates by name instead of just by path. #288
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #193
STOR-1573: Update manifests to v7.0.0 #201
OCPBUGS-31497: create suitable role and roleBinding for csi-snapshot-webhook #202
Full changelog

cluster-dns-operator

CFE-852: Enable ocp_dnsnameresolver CoreDNS plugin #393
Full changelog

cluster-etcd-operator

ETCD-583: add signer expiration metric and alert #1249
API-1800: manifests: convert SecretTypeTLS secrets to kubernetes.io/tls #1247
NO-ISSUE: use IsBootstrapComplete from library-go #1244
OCPBUGS-32217: avoid race conditions during render cert creation #1246
OCPBUGS-32176: immediately return on dynamic certs errors #1245
Revert “ETCD-579: store revision at which signers are rotated” #1243
ETCD-579: store revision at which signers are rotated #1235
ETCD-580: Decrease validity period to prevent cert expiry for offline clusters #1238
OCPBUGS-31658: Fix feature set custom no upgrade #1233
NO-JIRA: fail certsignercontroller sync when secret can not be applied #1226
Full changelog

cluster-image-registry-operator

OCPBUGS-29559: Apply hypershift cluster-profile for ibm-cloud-managed #999
OCPBUGS-32328: azure-path-fix: support auth via account key (without clientID) #1021
OCPBUGS-30484: bump indirect google protobuf dependency #1015
NO-JIRA: remove bparees from owners #1019
Full changelog

cluster-ingress-operator

NE-1317: manifests - add ingress capability annotation #950
OCPBUGS-32371: Bump openshift/api, and update CRD generation #1045
OCPBUGS-25193: Add vnet subnet read and join permission for azure #1029
OCPBUGS-30834: Update to go 1.21 #1040
OCPBUGS-31722: Use centos7 tag for quay.io/centos7/httpd-24-centos7 image #1037
Full changelog

cluster-kube-apiserver-operator

WRKLDS-1015: tolerate node-role.kubernetes.io/control-plane:NoExecute #1664
OCPBUGS-22969: Use v1 for flowcontrol API #1577
OCPBUGS-31384: use RotatedSigningCASecret controller in update only mode #1659
NO-ISSUE: Revert “certrotationcontroller: set AutoRegenerateAfterOfflineExpiry for generated certificates #1661
Full changelog

cluster-kube-controller-manager-operator

API-1800: bindata: convert SecretTypeTLS secrets #804
WRKLDS-1169: tolerate node-role.kubernetes.io/control-plane:NoExecute #802
OCPBUGS-31384: use RotatedSigningCASecret and RotatedSelfSignedCertKeySecret only in update mode #800
WRKLDS-1071: revision_controller: do not create a new revision when a required object is missing #796
Full changelog

cluster-kube-scheduler-operator

WRKLDS-1168: tolerate node-role.kubernetes.io/control-plane:NoExecute #539
Full changelog

cluster-monitoring-operator

MON-3701: clean-up injection of trusted CA bundle for k8s Prometheus #2323
MON-3839: test: add skip tests for prometheus adapter tests #2328
MON-3820: allow read-only access for Alertmanager API #2319
MON-3701: remove trusted CA bundle from Thanos Querier #2325
MON-3701: follow-up of PR #2308 #2324
MON-3825: Synchronize versions of the downstream components #2322
OCPBUGS-30430: update google.golang.org/protobuf #2320
MON-3701: clean-up injection of trusted CA bundle for main Alertmanager #2310
MON-3783: add controller-id annotation to pods deployments and operator #2309
OCPBUGS-18643: address lint warnings #2284
WINC-1180: assets, jsonnet: Add container_network openshift-kubernetes.rules #2314
OCPBUGS-31847: Synchronize versions of the downstream components #2318
MON-3701: remove references to OAuth proxy #2308
MON-3706: chore: simplify GetServiceAccountToken() #2272
MON-3621: Enable extra-scrape-metrics feature in PrometheusUWM #2302
OCPBUGS-31411: add runbook link for KubeAggregatedAPIErrors alert #2316
OCPBUGS-29531: Add include.release.openshift.io/hypershift label #2264
MON-3778, OLS-117: Add OLS metrics to telemetry whitelist #2300
OCPBUGS-31920: go.mod: bump openshift/api #2290
MON-3700: replace OAuth proxy for Thanos Ruler #2294
MON-3799: Synchronize versions of the downstream components #2301
MON-3749: enable request headers flags for metrics server #2293
OCPBUGS-28650: fix generation of telemeter token hash #2298
MON-3801: remove oauth-redirectreference annotations #2299
MON-3793: Synchronize versions of the downstream components #2295
MON-3793: jsonnet: Bump jsonnet deps for prometheus-operator #2296
MON-3792: fix metrics-server path for /test versions #2286
MON-3789: add a golangci-lint-fix makefile target to fix golangci-lint errros when possible #2275
Full changelog

cluster-network-operator

SDN-4163: Improved prometheus rule for ipsec metric #2346
OCPBUGS-32402: Fix wait logic for IPsec certificate signing request #2342
SDN-4688: ANP: Add RBAC for cluster-manager #2338
OCPBUGS-32347: Improve IPsec MachineConfig readiness check #2341
SDN-4163: Add ipsec state to telemetry #2270
OCPBUGS-22969: Use v1 for flowcontrol API #2095
OCPBUGS-28230: enforce termination message policy on all platform pods #2340
SDN-4519: Configure CNO as per new API changes for join and transit switch subnet #2318
OCPBUGS-28230: enforce termination message policy on all platform pods #2334
NP-956: Remove managed cluster checking for live migration #2321
OCPBUGS-26408: automountServiceAccountToken:false hosted CP pods #2306
SDN-4596: Update (B)ANP CRDs; prepare for GA #2328
Full changelog

cluster-node-tuning-operator

CNF-6517: [Part 1] Hypershift PAO adoption (#1032) #1032
PSAP-1354: Updated a script for deploying a custom NTO image to a cluster (#1030) #1030
OCPBUGS-30111: Negative net interface name does not reduce queues (#973) #973
Enhance latency cnf-tests UX (#1041) #1041
pao:controller: remove depracated function (#1039) #1039
Replaced tuned hard-included repo with a git submodule (#1029) #1029
OCPBUGS-31694: E2E: Workload hints test cases fixes (#1012) #1012
OCPBUGS-30647: NTO operand (openshift-tuned) fixes (#1024) #1024
NO-JIRA: E2E: use strings.CutPrefix instead of trim function to get containerID (#1031) #1031
NO-JIRA: deps: Bump OCP dependencies and remove MCO deps (#1022) #1022
Update the awk print field to fetch rhcos-image (#1033) #1033
set Cgroups V2 as default (#1010) #1010
E2E: Adjust Dynamic ovs pinning tests with cgroupv2 (#1011) #1011
NO-JIRA: deps: Bump to K8s 1.29.2 (#990) #990
Delete duplicate mixedcpus e2e test (#1015) #1015
e2e: Enhance tests related to crio annotations (#955) #955
NO-JIRA: E2E: Adjust tests for cgroupv2 changes (#993) #993
OCPBUGS-30569: Systemd processes not being moved to cpuset/systemd.slice fix (#992) #992
NO-JIRA: E2E: Add systemd package to fetch properties of cgroup slice (#991) #991
e2e: when crun is enabled by default skip checking runc config (#948) #948
Full changelog

cluster-olm-operator

OCPBUGS-31280: manual art compliance #50
OCPBUGS-32188: Update README.md #49
OCPBUGS-30491: Update kube dep to 1.27.12 #48
OCPBUGS-29553: Apply hypershift cluster-profile for ibm-cloud-managed #46
Full changelog

cluster-openshift-apiserver-operator

WRKLDS-1015: tolerate node-role.kubernetes.io/control-plane:NoExecute #574
OCPBUGS-29580: Apply hypershift cluster-profile for ibm-cloud-managed #572
OCPBUGS-32346: the apiservice controller waits until bootstrap complete #575
NO-ISSUE: Makefile: fixes test-e2e-encryption-rotation targets #577
NO-ISSUE: fix: TestRedeployOnConfigChange #576
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-23848: Bumps opentelemetry dependencies #341
Full changelog

cluster-samples-operator

SO-121: Syncing the library for only S2i Samples for OCP 4.16 #543
Revert “SO-121: Resync Libray for 4.16” #542
SO-121: Resync Libray for 4.16 #540
OCPBUGS-31303: bump K8s version to 29.2 #536
Full changelog

cluster-storage-operator

STOR-1804: update ClusterCSIDriver CRDs #464
AUTH-482: set required-scc for openshift workloads #459
Full changelog

cluster-update-keys

OCPBUGS-29570: Apply hypershift cluster-profile for ibm-cloud-managed #54
Full changelog

cluster-version-operator

OCPBUGS-9133: pkg/cvo/metrics: Connect ClusterVersion to ClusterOperatorDown and ClusterOperatorDegraded #746
AUTH-482: set required-scc for openshift workloads #1038
NO-ISSUE: docs/user/tasks-*by-number-and-component.svg: Update to 4.15 #1042
OTA-1159: pkg/cvo: Render status.Failure in ReconciliationIssues #1041
Full changelog

console

OCPBUGS-32222: Add warning about service binding operator will not be supported from 4.15 #13766
ODC-7554: Update the UI according to the recent changes from UX #13723
ODC-7565: Update owners files (remove reviewers and add Avik and Prabhu as approvers for ODC) #13773
OCPBUGS-13114: Add visual connector between VMs and non VMs workloads #13617
OCPBUGS-31809: Pipeline details page Metrics tab crashed due to no custom data #13733
OCPBUGS-30426: Bump github.com/cloudevents/sdk-go/v2 to 2.15.2 #13661
OCPBUGS-28723: Improve Create serverless function error message #13591
OCPBUGS-32218: fix runtime error on Pending pod details page #13768
ODC-7479: automation of quick-starts-cluster-overview.feature #13715
OCPBUGS-12857: Add NaN handling for Stacked Graphs #13712
OCPBUGS-26073: setting correct image trigger annotation #13492
CONSOLE-3944: Disable segment analytics when cluster telemetry is disabled #13677
OCPBUGS-32019: Handle loading issue for PLR status in PLR list page #13747
OCPBUGS-29377: Routes created by devfiles do not always use HTTPS #13725
OCPBUGS-32307: Increase Max node limit for topology page to 300 #13761
OCPBUGS-22405: Add a button to enable autoscaling for a deployment that is scaled to 0 #13711
OCPBUGS-32189: Fix PatternFly version resolution check script for MacOS #13757
CONSOLE-3759: Update file-loader pkg #13743
OCPBUGS-31430: Re-enable Pipelines e2e tests #13700
OCPBUGS-32175: Update i18n docs : Change “traditional Chinese” to “simplified Chinese” #13754
OCPBUGS-32117: Add flag to hide Output tab contributed by pipelines-plugin #13751
CONSOLE-3997: Bump Yarn to v1 latest & add script to check PatternFly modules #13706
OCPBUGS-31745: TaskRun status is not displayed near the name #13746
CONSOLE-3916: Direct OIDC tech debt #13647
OCPBUGS-31082: Remove deprecated resources from spec of the Pipeline #13741
OCPBUGS-31759: Update i18n docs on how to update Phrase Project Template #13730
OCPBUGS-31843: Use UserInfo username field when logging out as kubeadmin #13740
OCPBUGS-31680: Correct the button text for VolumeSnapshotContent #13742
WINC-1182: [node] Modify filesystem queries to include Windows metrics #13662
OCPBUGS-31703: Resource yaml with create #13722
CONSOLE-4014: Consume the telemetry parameter ORGANIZATION_ID and pass it as organizationId parameter to segment #13728
OCPBUGS-23319: fix bug where paused MCPs were incorrectly unpausing w… #13717
OCPBUGS-31744: Add fr and es languages to i18n script for Memsource upload #13729
OCPBUGS-29616, OCPBUGS-29823, OCPBUGS-31613: Add validation for vSphere fields #13726
OCPBUGS-23480: Improve PipelineRun list view performance #13676
OCPBUGS-31732: Hide the cluster configuration for analytics #13727
OCPBUGS-31482: oidc: use our own pre-configured client for token refreshes #13716
OCPBUGS-31695: Use bearer-token for local dev with auth #13720
OCPBUGS-31355: add readOnly option to ResourceYAMLEditor #13694
ODC-7436: shipwright test package update concerning pf5 update #13660
OCPBUGS-31431: Hide dev perspective Pipelines nav option if dynamic plugin nav option is enable #13701
ODC-7431: dev-console test package update concerning pf5 update #13685
OCPBUGS-31315: i18n upload/download routine task - Sprint 249 #13692
Full changelog

console-operator

OCPBUGS-20466: Tighten console operator permissions for cluster operators #873
OCPBUGS-32400: base OIDC status updates on the ExternalOIDC feature gate #887
OCPBUGS-29547: Apply hypershift cluster-profile for ibm-cloud-managed #868
OCPBUGS-30458: Bump k8s.io/component-base to latest #884
CONSOLE-3944, OCPBUGS-31020: Disable segment analytics when cluster telemetry is disabled #877
CONSOLE-3910: Add quickstart to impersonate a system:admin user #865
Full changelog

container-networking-plugins

OCPBUGS-32212: modify to invoke SAST test #159
OCPBUGS-28559: Updating ose-containernetworking-plugins-container image to be consistent with ART for 4.16 #150
Full changelog

coredns

CFE-963: UPSTREAM: <carry>: openshift: Add ocp_dnsnameresolver external plugin #115
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-13680: Allow changing cluster-name on existing deployments #276
OCPBUGS-29605: Remove enforcement of IPv6 LB as internal #275
NO-JIRA: More snyk ignores #265
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-30501: bump google.golang.org/grpc to 1.63.0 #172
Full changelog

csi-external-attacher

STOR-1573: Rebase external-attacher to v4.5.1 for OCP 4.16 #72
Full changelog

csi-external-provisioner

STOR-1573: Rebase external-provisioner to v4.0.1 for OCP 4.16 #95
Full changelog

csi-external-resizer

STOR-1573: Rebase external-resizer to v1.10.0 for OCP 4.16 #160
Full changelog

csi-external-snapshotter, csi-snapshot-controller, csi-snapshot-validation-webhook

OCPBUGS-31746: Backport volumegroupsnapshot fixes to OCP 4.16 #148
OCPBUGS-31439: Backport volumegroupsnapshot fixes to OCP 4.16 #146
Full changelog

csi-livenessprobe

STOR-1573: Rebase livenessprobe to v2.12.0 for OCP 4.16 #64
Full changelog

csi-node-driver-registrar

STOR-1573: Rebase node-driver-registrar to v2.10.0 for OCP 4.16 #70
Full changelog

docker-builder

OCPBUGS-31930: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.16 #385
Full changelog

docker-registry

OCPBUGS-29233: vendor: bump aws-sdk-go to support ca-west-1 #395
Full changelog

driver-toolkit

Add importMode and set it to PreserveOriginal to import (#144) #144
Full changelog

egress-router-cni

OCPBUGS-28581: Updating ose-egress-router-cni-container image to be consistent with ART for 4.16 #80
Full changelog

etcd

OCPBUGS-31624: Rebase etcd 3.5.13 openshift 4.16 #259
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-28230: enforce termination message policy on all platform pods #119
Full changelog

haproxy-router

OCPBUGS-26498: Upgrade Validation plugin for SHA1 certs #555
OCPBUGS-32044: Introduce ‘idle-close-on-response’ option for frontends #573
Full changelog

hyperkube, pod

OCPBUGS-32296: Bump K8s api to 1.29.4 #1947
OCPBUGS-22301: UPSTREAM: <carry>: Fix garbage-collection for CRDs. #1811
OCPBUGS-26440: UPSTREAM: <carry>: create readyz event for kubeapi server #1914
UPSTREAM: <carry>: OCPEDGE-807: add support for cpu limits into management workloads #1902
CFE-910: RouteExternalCertificate validation in openshift-kube-apiserver custom resource validator #1904
NO-JIRA: UPSTREAM: <carry>: featureset validation moved to CEL #1944
CFE-910: bump library-go #1941
OCPBUGS-11933: UPSTREAM: <drop>: bump apiserver-library-go #1910
OCPBUGS-31663: UPSTREAM: <carry>: add management workload check for guaranteed qos #1928
OCPBUGS-30957: Use the right feature gate when updating uncertain … #1919
OCPBUGS-31384: UPSTREAM: <carry>: allow type mutation for specific secrets #1932
OCPNODE-1886: Bump k8s 1.29.3 #1925
OCPBUGS-31384: UPSTREAM: <carry>: allow type mutation for specific secrets #1929
OCPBUGS-31384: UPSTREAM: <carry>: allow type mutation for specific secrets #1924
OCPBUGS-30767: UPSTREAM: 124110: retry policy creation for CRD type checking E2E test #1922
Full changelog

hypershift

chore(deps): update rhtap references #3919
OCPBUGS-32487: Fix OLM intilization args #3918
OCPNODE-2096: Add ClusterImagePolicy to the list of valid config manifests #3894
CNV-36073: KubeVirt, Add snapshot side car and volumesnapshot class #3640
NO-ISSUE: placeholders: ignore auto-sizer placeholders #3877
OCPBUGS-32228: Fix failure to create a second hostedcluster in the same namespace #3900
OCPBUGS-32248: Replace periods with commas in subnet label value #3885
chore(deps): update rhtap references #3886
HOSTEDCP-1462: set HostPath.Type on volumesource in CloudNodeManagerD… #3892
NO-JIRA: fixed e2e teardown failing the outer test instead of subtest #3891
HOSTEDCP-1519: feat(api): Add ingress-controller-load-balancer-scope annotation #3848
NO-JIRA: remove ovnkube-control-plane from expected component token m… #3850
CNV-40622: Docs: Avoid cidr Collisions b/w Infra &Guest cluster #3863
NO-JIRA: Disable kubevirt-csi crash detection in e2e #3896
Revert “HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters” #3890
HOSTEDCP-1465: Create HCPs with externalDNS on AKS Clusters #3688
chore(deps): update rhtap references #3872
OSD-19085: Replaced hypershift_cluster_cores metric with hypershift_cluster_vcpus metric #3697
NO-ISSUE: *: use the api package constant for the size label #3876
NO-JIRA: bump capk ci image #3830
NO-JIRA: chore(deps): update rhtap references (main) #3867
OCPBUGS-29466: Fix ICSP and IDMS inclusion as registriesOverrides #3862
STOR-1805: Set RUN_AS_USER if mgmt cluster doesn’t have SCC #3819
OCPBUGS-29494: Fix disconnected metadata inspection #3860
OCPBUGS-31012: Disable audit-log container in kas when profile is None #3765
NO-JIRA: [e2e test framework] Add a flag to add an annotation to HostedCluster #3854
NO-JIRA: update private cluster IAM policy doc #3851
NO-JIRA: chore(deps): update rhtap references (main) #3856
OCPBUGS-14383: disable autoscaler when no nodepool requires it #3846
NO-JIRA: Document additional known issues for the disconnected scenario #3611
NO-JIRA: Update RHTAP references (main) #3834
OCPBUGS-29391: Add new permission required in CAPA #3779
CNF-11885: nto: add events resources under operator Role #3827
OCPBUGS-31444: use dnsPolicy: Default for konnectivity-agent in data plane #3810
NO-JIRA: docs: fixing wrong key name #3833
NO-JIRA: Update expected condition to false for ValidAzureKmsConfig s… #3837
OCPBUGS-31725: include hostnetwork SCC CPO role for 4.13 and earlier #3838
HOSTEDCP-1511: enable and document kubevirt custom default network #3832
HOSTEDCP-1513: Support annotation scoping for hostedcluster resources #3702
OCPBUGS-31415: update desired image even when HCP doesn’t exist yet #3829
NO-JIRA: Added regression tests to ensure certain deployment fields do not get set. #2707
OCPBUGS-31585: disable http2 for ignition server and proxy #3817
OTA-1211: api/v1beta1/hostedcluster_types: Add spec.updateService #3576
HOSTEDCP-1365: kubevirt, Generate kccm lb endpointslices #3528
Full changelog

insights-operator

OCPBUGS-31959: bump golang.org/x/net version (#924) #924
feat: increase archive size (#923) #923
DVO metrics gatherer minor changes (#922) #922
Full changelog

ironic

OCPBUGS-32390: Use unix sockets by default for reverse proxy communication #472
OCPBUGS-32162: Bump eventlet version #471
METAL-949: Force pysnmp-lextudio and pyasn1 min version #464
METAL-952: Install sushy from source #466
Full changelog

ironic-agent

OCPBUGS-32172: Fix name in setup.cfg #122
METAL-925: Fix permission of check reqs script #120
METAL-925: Add makefile with build and check reqs #119
METAL-925: Install ironic-python-agent from source #118
Full changelog

k8s-prometheus-adapter

OCPBUGS-30532: upgrade github.com/golang/protobuf to v1.5.4 for bette… #101
Full changelog

kube-metrics-server

OCPBUGS-25164: Bump to 0.7.1 #25
OCPBUGS-31288: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.16 #24
Full changelog

kube-proxy, sdn

SDN-4404: Kube 1.29 bump #618
SDN-4114: Do per-pod MCS/metadata blocking with nftables rather than iptables #581
Full changelog

kube-state-metrics

NO-JIRA: Merge v2.11.0 and v2.12.0 tags #110
Full changelog

kubevirt-cloud-controller-manager

OCPBUGS-30518: Upstream rebase 18 04 2024 #41
OCPBUGS-24936: Updating ose-kubevirt-cloud-controller-manager-container image to be consistent with ART #30
OCPBUGS-26182: Upstream rebease 4 5 2024 #40
Full changelog

kubevirt-csi-driver

CNV-36073: Sync upstream kubevirt-csi 2024-04-19 #39
“NO-JIRA: Sync upstream kubevirt-csi 2024-04-08” #38
Full changelog

machine-config-operator

MCO-424: cleanup: update references in docs from machine-os-contenet to rhel-coreos #4329
MCO-1029: MCO-678: Implement Boot Image update opt-in API #4281
MCO-1117: Make local MCO image builds faster #4296
OCPBUGS-32278: Fix configure-ip-forwarding.sh #4323
MCO-1102: OCPBUGS-32277: Add a ValidatingAdmissionPolicy for the boot images update opt-in API #4285
OCPBUGS-28230: enforce termination message policy on all platform pods #4318
MCO-1129: Re-land Adapting the MCO featuregate usage to new API #4315
OCPBUGS-28230: enforce termination message policy on all platform pods #4319
OCPNODE-1632: Support Cluster ImagePolicy CRD #4160
OCPBUGS-32028: Decrease logs of haproxy #4245
OCPBUGS-30192: Move StartLimitIntervalSec to Unit section #4304
OCPBUGS-28577: MCO-1030, MCO-910: Updating MCO base image to RHEL9 #4241
OCPBUGS-22910: Remove the condition for checking the multiple ovs-if-br-ex profiles #4016
OCPBUGS-18955: make sure CO degrades if OCL config is invalid #4294
OCPBUGS-31630: fix: resources were in the wrong indentation level #4299
Full changelog

monitoring-plugin

OCPBUGS-12857: Gracefully Handle NaN values in stacked graphs #111
OU-395: Alert detail page renders buttons and links from the plugin extension #114
OCPBUGS-31931: make createdBy mandatory and auto fill with the current user #113
OU-379: Add datasource parameter to handle metrics from custom datasources #112
OU-370: Split Dashboard Label and Line Chart Queries #109
Full changelog

multus-admission-controller

OCPBUGS-32303: Add .snyk file to fix SAST warning messages #84
OCPBUGS-32219: Upstream sync 2024 04 #83
Full changelog

multus-cni

OCPBUGS-32440: Update snyk file to add exclude vendor #229
OCPBUGS-32393: April 2024 #228
OCPBUGS-30449: Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 #226
Full changelog

multus-networkpolicy

WIP: test for SAST security fix (#53) #53
OCPBUGS-32030: Upstream sync 2404 (#52) #52
Bump google.golang.org/protobuf from 1.30.0 to 1.33.0 (#61) (#50) #61
Full changelog

must-gather

MON-3754: Enable metrics-server audit log collection #413
OCPBUGS-32210: Collect Assisted Installer Namespace Logs #417
CNF-9168: MetalLB: adjust to support frrk8s and small fix #412
OCPBUGS-31900: Updating ose-must-gather-container image to be consistent with ART for 4.16 #409
SDN-4597: Add cluster scoped ANP resource to collection #411
NO-JIRA: Add ARO support to must-gather client #392
OCPBUGS-30349: Updating ose-must-gather-container image to be consistent with ART for 4.16 #406
Full changelog

network-tools

NO-JIRA: Fix alphabetical ordering of packages in Dockerfiles #123
OCPBUGS-31699: replace wireshark with wireshark-cli #116
Full changelog

oauth-apiserver

OCPBUGS-30319: bump lib-go to fix SAs acting as OAuth2 clients #108
Full changelog

oauth-server

OCPBUGS-32331: Updating oauth-server-container image to be consistent with ART for 4.16 #145
OCPBUGS-24987, OCPBUGS-30319: bump lib-go to fix SAs acting as OAuth2 clients #142
Full changelog

oc-mirror

CLID-19: Replace the prepare subcommand by dry-run flag (#829) #829
CLID-95 removes the concurrency and adds a progress bar on batch pkg (#832) #832
CLID-53: Introduce env var to provide OCP release signature verification key (#831) #831
CLID-35: introduce filtering operators by selecting specific bundles (#824) #824
OCPBUGS-31024, OCPBUGS-31529, OCPBUGS-31530: Remove creationTimestamp from the generated yaml catalogSource (#826) #826
CLID-46, CLID-47: Use of TargetCatalog and TargetTag on all catalogs (#827) #827
CLID-20: feat: Delete functionality for v2 enclave support (#812) #812
CLID-85: Change string replacement in registry config to use templates (#828) #828
OCPBUGS-31466: Fix for oc-mirror new defaultChannel override (#815) #815
Bump version to include v5.11.0 of go-git (#821) #821
CLID-54: Mirror to mirror workflow (#811) #811
OCPBUGS-31024: Ommit icon from catalogSource if empty (#816) #816
OCPBUGS-31344: fix: issue when different versions of the same operator catalog (#820) #820
OCPBUGS-31084: feat: changes the code to have retro-compatible version command with v1 (#817) #817
Full changelog

olm-catalogd

OCPBUGS-31286: Updating ose-olm-catalogd-container image to be consistent with ART for 4.16 #48
Full changelog

olm-operator-controller

OPRUN-3268: Add pointer to tooling README for downstreaming info #94
Full changelog

openshift-apiserver

OCPBUGS-22301: make GarbageCollection supported for ClusterResourceQuotas as it is backed by a CRD #405
CFE-1048: Bump Kubernetes to 1.29.2 #425
Full changelog

openshift-controller-manager

OCPBUGS-31213: Unable to look up the service account secrets for build #292
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-26924: Add healtcheck for node-registrar #161
OCPBUGS-30951: Relax requirement to enable topology #164
Full changelog

openstack-cluster-api-controllers

OCPBUGS-31277: Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.16 #301
Full changelog

operator-lifecycle-manager, operator-registry

OCPBUGS-31073: Synchronize From Upstream Repositories #737
NO-ISSUE: Synchronize From Upstream Repositories #735
OCPBUGS-28230: enforce termination message policy on all platform pods #733
NO-ISSUE: Synchronize From Upstream Repositories #734
NO-ISSUE: Synchronize From Upstream Repositories #732
NO-ISSUE: Synchronize From Upstream Repositories #729
NO-ISSUE: Synchronize From Upstream Repositories #727
Full changelog

operator-marketplace

OCPBUGS-28230: enforce termination message policy on all platform pods #559
OCPBUGS-29575: Apply hypershift cluster-profile for ibm-cloud-managed #556
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

SDN-4458: Do per-pod MCS/metadata blocking with nftables rather than iptables #1946
SDN-4606, SDN-4688: Downstream Merge April 18th 2024 #2132
OCPBUGS-31419: [DownstreamMerge] 4-16-24 #2129
SDN-4403: Downstream merge 20240415 #2124
OCPBUGS-25889, OCPBUGS-29952, SDN-3931: Downstream merge 12 04 24 #2120
OCPBUGS-27093, OCPBUGS-29511, SDN-4157: [DownstreamMerge] 4 April 2024 #2110
SDN-4157: DownstreamMerge 25th march 2024 #2100
OCPBUGS-31557: Revert “Remove unnecessary rhel8 build layer” #2104
Full changelog

powervs-block-csi-driver

MULTIARCH-4581: Rebase with upstream: go modules updates #77
Full changelog

powervs-cloud-controller-manager

MULTIARCH-4610: UPSTREAM: <carry>: Override service endpoints #65
Full changelog

prometheus

MON-3825: Bump openshift/prometheus to v2.51.2 #200
MON-3825: Bump openshift/prometheus to v2.51.2 #199
MON-3794: Bump openshift/prometheus to v2.51.1 #198
MON-3794: Bump openshift/prometheus to v2.50.1 #196
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-31847: Bump openshift/prometheus-operator to v0.73.1 #285
MON-3793: Bump openshift/prometheus-operator to v0.73.0 #284
Full changelog

telemeter

RHOBS-1036: Harden integration tests #529
MON-3819: Update tools go 1.21 #526
MON-3737: Update binaries to new version #525
Full changelog

tests

OCPBUGS-32484: chart template: limit tooltip width to first word #27965
OCPBUGS-31030, OCPBUGS-31032: Reduce deploymentconfig test 3GBi memory size to reasonable #28680
NO-ISSUE: Automated - Update synthetic test data #28723
OCPBUGS-32485: upkeep: update test pinned workloads #28704
OCPBUGS-20097: Switch to use cli image, as the scratch image #28695
TRT-1545: Complete removal of non-structured locator/message use #28663
OCPBUGS-32320: revert: removing static pod skip for crio check #28708
Revert “OCPBUGS-28230: enforce termination message policy on all platform pods” #28721
OCPBUGS-31860: ppc64le without python-cinder #28692
OCPBUGS-28230: enforce termination message policy on all platform pods #28547
NO-JIRA: Unskip volume populator tests that were disabled in the test suite #28475
USHIFT-2985: Fix MicroShift crash and router tests skipping #28716
NO-JIRA: Remove test dir OWNERS file, rely on top-level instead #28714
NO-JIRA: split the per-user summary to include verbs for resources #28705
NO-JIRA: add to the operator list #28703
NO-ISSUE: Automated - Update synthetic test data #28701
NO-JIRA: need to make manifest dir to place content #28700
NO-JIRA: Record tests by feature #28694
OCPBUGS-31868: Add debug logging for SLB monitortest cleanup #28697
SO-121: Samples Release, fix test cases #28685
AUTH-483: Reapply #28589 #28660
no-jira: Ignore alerts on CustomNoUpgrade clusters #28678
NO-JIRA: bump golang to 1.21 and to latest o/k master #28672
NO-ISSUE: automated update synthetic test data #28693
NO-JIRA: add service accounts to resourcewatcher #28689
OCPBUGS-20097: Switch to use must-gather image in build multi-stage #28687
TRT-1545: Begin removing use of the legacy locator on intervals #28597
OCPBUGS-31513: feat: update regex for rt kernel version match #28665
OCPBUGS-31492: Add a test that will fail on over 10k etcd took too long messages #28674
Full changelog

thanos

MON-3799: Bump openshift/thanos to v0.34.1 #141
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

STOR-1698: Fix volume provisioning when duplicate region or zone tags exist #114
OCPBUGS-30545: CVE-2024-24786: bump google.golang.org/protobuf to v1.33.0 #115
Full changelog

vsphere-csi-driver-operator

STOR-1804: use new snapshot options from ClusterCSIDriver #226
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github