4.19.0-ec.4

PullSpec:

quay.io/openshift-release-dev/ocp-release:4.19.0-ec.4-multi

Team Approvals:

Tests:

Informing jobs
- e2e-aws-ovn-multi-x-ax Succeeded periodic-ci-openshift-multiarch-master-nightly-4.19-ocp-e2e-aws-ovn-multi-x-ax
- e2e-aws-ovn-multi-x-x Succeeded periodic-ci-openshift-multiarch-master-nightly-4.19-ocp-e2e-aws-ovn-multi-x-x

Upgrades from:

Untested upgrades: 4.18.6, 4.18.7, 4.19.0-ec.0, 4.19.0-ec.1, 4.19.0-ec.2, 4.19.0-ec.3

Loading changelog, this may take a while ...

Changes from 4.19.0-ec.3

Created: 2025-03-28 17:34:18 +0000 UTC

Image Digest: sha256:337b358106b387ad5826de39da970417c901a052873df19fedab15769eead1ca

Release 4.19.0-ec.4 was created from quay.io/openshift-release-dev/ocp-release-nightly@sha256:6c7327677f06177de2a8742d80148ed5d040b3303f967de2c8b2fbafaf181afb

Components

Kubectl 1.32.1
Kubernetes upgraded from 1.32.2 to 1.32.3
Kubernetes Tests 1.32.2
Red Hat Enterprise Linux CoreOS upgraded from 419.96.202503032242-0 to 419.96.202503251418-0 (diff)

FeatureGate Changes

FeatureGate	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
DualReplica (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
DyanmicServiceEndpointIBMCloud (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GatewayAPIController (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
SELinuxChangePolicy (0 tests)	Enabled (New)	Enabled (New)
SELinuxMount (6 tests)	Enabled (New)	Enabled (New)
ShortCertRotation (0 tests)	Enabled (New)	Enabled (New)
VSphereConfigurableMaxAllowedBlockVolumesPerNode (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

csi-snapshot-validation-webhook

Rebuilt images without code change

apiserver-network-proxy git 0e116160 sha256:8eeb17b02afadc14b56e1b8a797ef57ad2cff4ad5a6d49367e648eee950c10f2
aws-cloud-controller-manager git 425c1c5b sha256:8bfe1ff154395e57c488560ef74e14b0af1b366c38b70919622ba46799bf04d5
aws-cluster-api-controllers git cda3c840 sha256:06c11ebc8bffb094e4418f44c1eff2de2f1648cb8d2646190e2114ef66b0ddf7
aws-kms-encryption-provider git 088dcaf7 sha256:f7d9fc203b08ef5c76c04f46aac0ab2ec4ec40a8bfa44a6eba138005cc758c48
aws-machine-controllers git d5523dc8 sha256:c9885976ef15fcd2f4040abe51a556b4dc3582c99d9fa685b50578adadd06878
azure-kms-encryption-provider git d4fb1b6d sha256:24b0aad1360cc789cc53111a8384343b475fff04862f91330697cd51247f6299
azure-service-operator git 11ced00e sha256:696a737f12a2bab06c7df07ac16ea1dac5308dac0533e002d506f9f3ea10b8c3
baremetal-cluster-api-controllers git 3e052bfb sha256:9577590bf40a22d7c5714286db195da6f75392d3b064ecca53b9c7f6dcae6aa5
baremetal-machine-controllers git 9abe67f1 sha256:a0e8f0eae6237850c592f60599fa4690392bfa9d640a74c716ee214a9c15a5c0
cluster-authentication-operator git eb6de2ec sha256:78969a3b75c64f5205d692738c0c1e9a14af6ce983d82a63d7d05ca09caf825e
cluster-autoscaler-operator git 227f7537 sha256:e978c6385f10cd7c83c4ebc630b085e10800a983504ebc7599b91116ff1425cd
cluster-kube-cluster-api-operator git 3ec30377 sha256:2ff62838629a26135fb0c71b0672a84fd9c1f1d4fd7a0a112322b55eede6791f
cluster-kube-scheduler-operator git 4210c04a sha256:38d79993b28b655169769ae0d1cdcde0538bac926df77b01da9dc90b7bbe2ed6
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:f5b78c49b6f41fcbfbec3013079f981357b624a0d6c2ca3f9d5bf12c8ba36fbc
cluster-machine-approver git a52da47f sha256:49ca0bd1c144afb8ae3d5aabfd3ee6ff10c0764cf4298a9efc0498ad435c8a40
cluster-olm-operator git f498726f sha256:4b125ca3ab72a8da37148a92cb7d5b99213d26e53a8541e26117dde144f7e9ec
cluster-openshift-apiserver-operator git 5f66a3e1 sha256:d4062d9c11f3abaf69d9d793501159ab1d239ffeecdf93fe48835c39cb9af821
cluster-openshift-controller-manager-operator git 0ab30996 sha256:ba7ad7a2bcc5c6fa1bf98a1a003bb1206d910ddbc4f5fb940a93624817af9037
configmap-reloader git 9bfbde86 sha256:89578d2340b15389064c3940ce03666ecc29635fd1883f0897abb1611bd22f4a
coredns git 7a1451db sha256:b064c567a0357b08b678ecce366d0819f2ba28a25e05a9d21de143e47a0fd641
csi-driver-nfs git c0632514 sha256:1bc9cce48c7588c811a04ecf5d1547e559c8e278cf61b4589f1590a42bc65232
csi-external-snapshotter git 1fc6ee15 sha256:e92a8ace3f23080d042fd488e6c6e292f79ffd9ecf7292ba179b967a0cc2ffca
csi-livenessprobe git e1566463 sha256:c06cd0088ece1707850a424198b10ef3d8e52f1401bebdc34935443d04a41dc9
csi-node-driver-registrar git 378f5c1b sha256:08b655f771a4c40021bdf59def1a8bae7799e155c43639a09dbe1938ec4bc98d
csi-snapshot-controller git 1fc6ee15 sha256:87f54401d9680a20f94f2b9695567a905aae9e3ac4635fe95474614df06136d5
docker-registry git 1b1c80a9 sha256:61c5aa78286ebcf60f014fede1c9632d49ab80f7aff38d2d98488e9a607f1a50
gcp-cloud-controller-manager git d8d3aeba sha256:d9f685ab2b0ac7f29dadafb863a201bcc61c39d7bcabfe95e3b588c4a312defc
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:bc275e1e9b85518254afa76c3351e90faffdd5ea6f7dc278619251cb30e3309c
haproxy-router git b41f9d05 sha256:0e7a5b6eeea9bb145d31ef2af463a8a507e0d87ac99d5349bb64bdddcdeb1993
ibm-cloud-controller-manager git 7422aab2 sha256:c3904debfefefc88c0a5d865070731c39d1bde130b3565ec77123abaec4020a7
ibm-vpc-block-csi-driver git b4596e5f sha256:7a884d6927000c2c5027bb18dcff1d22d2d59d747c2693768256faca0504d74c
ibmcloud-cluster-api-controllers git 0453d282 sha256:295d69bcb69c5bc66045bdefd75a758f6761c8c18c1fbbbbc7cd0a2d87fc9c3f
ironic-machine-os-downloader git dbe19772 sha256:b76cd3cb85cf0710f80ed2f638f610c3c61835da60e683416255077748af33f5
ironic-static-ip-manager git fcd9564e sha256:5c6a0763e3908169574c23ee199faa6b819a6e8e3b3305ed8d10ff769dd2b446
kube-metrics-server git 037a0e7e sha256:4ca01e5f91025a3b96317a3268b415dcf86b52de0640d9cb8aad6eb31a5c12ba
kube-rbac-proxy git 59127756 sha256:6e440994fd1bbc5956ae4ca3ed8cf6abba7dc51be767c946917dff7fd800cf45
kube-state-metrics git c3da3b5f sha256:b5d6dcc8a53fe6776fb32206429086baa2f2e8d09aa98af7c6ac3c1d9875bf61
kube-storage-version-migrator git 4c521b09 sha256:96cbb1e4ce446e049f18de6d6ecba5ad030324edd77d20dd84afc0709bbc90ad
kubevirt-cloud-controller-manager git 3f4542ec sha256:e1e333a1cb982f2fe230213a803132aefa23d5acb1ba52859977860b104c452f
kubevirt-csi-driver git ba2234bd sha256:281d203d5b21610f544e3a84871e1bceae5868614b1234a88ad5829b57efa4cc
libvirt-machine-controllers git a336f0b5 sha256:57e683b5962969fd0a5a3baa78d36ff18855bbe8d766a030d2b85e8136dd29ad
machine-image-customization-controller git d7f86005 sha256:1e5f7ed29de55ba907ad7af17fa6de372c312e8c8b612b265b2a9cd3d42f7f35
multus-admission-controller git 0b1b812e sha256:dccfecad2d62ec474771912ee75b21b6b3c03980497dad0525bcaa89902075f6
multus-route-override-cni git 391c1b03 sha256:1b6b03155b86724626a6e06fa6ee6a4f6a7e85f3d8b7df47add0d499aa23f8db
must-gather git 33763a32 sha256:c5c566d0752c4dbb342262d1c8ad98b956d2cd4caee242c2b51bcbe6bb16fffd
network-interface-bond-cni git f575d888 sha256:42f3c0eddffb6cf061d498f7785ba4110cd736472c72209918e511042fe155d7
network-metrics-daemon git 5ec8c6bd sha256:ee89ac6b116a11cd65cbeec20cad7776724676fd417e473de970b6f44db39f57
nutanix-machine-controllers git db327bdb sha256:f47b13772e980027d96632b5a2f84a95cb0dc09c49c988f8da033bcac57ed933
oauth-apiserver git 75914068 sha256:9b4e823e6088d49f1731268e1488f22c27ffa628c0f1a5a28b8d02de990caa4e
oauth-proxy git 3d12ccbe sha256:38d7898a7ae20278e88d6ff42bde6891f4430bf87eac57c4b6613e8380b35a73
oauth-server git 7c92a059 sha256:594aeb7dd1414cab58c71663acc601ae4528538d5d8c3cf6aa4be57ad0c34f98
openshift-apiserver git 85f6eb27 sha256:3499085dbf05456e7ed5ed57bf9cf3f2a0e2ab4145ec561a7d88f30fc4a40175
openshift-controller-manager git ed3eae5d sha256:a035414fcff0840014bf762b4dd789eb97af10dad5398a96a5b42bfba362571b
openshift-state-metrics git 3106bcc3 sha256:a893fb6607cb7327cb99739b5c0bc3925cab037a4c82e889bba7a69c2e134a08
openstack-machine-api-provider git d2fce230 sha256:cb8baacae31fd7b7c8ded6eefd724dfab0c8976355fd6bd23ab103dec87cded0
openstack-resource-controller git d00bab2b sha256:a15b33b81e98618af1d0b2ee3a215fb8c7c3fbb7b1461320f2cc353fe58a1ccb
ovirt-csi-driver git 1db726a9 sha256:5d5b8617263f04ba35dc63a15fcee3901dc4e59cf2d0666e2eaf630fbfb99707
ovirt-csi-driver-operator git c5b83033 sha256:2b9dacd68fd72cd859562b693b258ca9ac82ec7ea128769c668d07c14a6b4439
powervs-cloud-controller-manager git 7c51cd2b sha256:9b25e769ebd4b79df2a9962af94ba58e99affa681be74265216820b9cce64f7d
prom-label-proxy git 7184f58d sha256:aeb73153e5879d68dce46ce55e65df0fe136cd9dd2909d3140117358e235e86d
prometheus-alertmanager git 43131005 sha256:edb8ade225549ade10db008370303fbab639e864e93d211d30a98301e24f01ad
prometheus-config-reloader git 3779c1d5 sha256:0dfe645b1ab7b0d627af0f8ff59a7234f3db15b844d09d55bba679fcfa64fa48
prometheus-node-exporter git 57a4e998 sha256:555919c653c9523aa1af9df71883264d6dd5c55a177996025f9993dfff769c37
prometheus-operator git 3779c1d5 sha256:e2e515261ad238703634c851ef315adb8597280df3a365be26edb1b5f2456f98
prometheus-operator-admission-webhook git 3779c1d5 sha256:9e3b3c9fb27ac182d7cbe7cf25fe8f535b0833e458151e4c47d9b18f052d4cea
rhel-coreos sha256:e71c8ae387036d61b3578a413fbe9fda085bffcd3e874dd3f9cf89c029dc7350
rhel-coreos-extensions sha256:2ba5c347b63440ce2d1c30d2567fc21f330d2109f767d01fa0ebefa97bc293c2
route-controller-manager git bc97534a sha256:86b1c24f43a21cd1cec2de81b71a38d578286990eef9b6afbff31ee8b26e2d15
telemeter git f63fef91 sha256:c7ca0695ee5d11d69d204620f7dfbe5cb6adf4d19d1e1f7feb7fc97de297232c
vsphere-cloud-controller-manager git 2c21c8ce sha256:6c7db75fa5030571d4b67a2fa314149b615cfd1461b131f42aca7cc3c07fd767
vsphere-cluster-api-controllers git 8c61ba3d sha256:468a4094f4ed594080410a570c918f20121a7b8c1a20b8248fc66bb47259a24f

agent-installer-api-server

WIP AGENT-538: Add ability for ABI UI to generate kubeconfig (#7391) #7391
MGMT-20149: Add required sast tasks for Konflux (#7441) #7441
NO-ISSUE: Remove eran ifrach account from OWNERS (#7446) #7446
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.13, 4.18, 4.14 (#7443) #7443
MGMT-20155: Add Node Healthcheck Operator alongside with remediation operators (#7436) #7436
OCPBUGS-53031: Bump oauth2 with v0.26.openshift.1 (#7410) #7410
MGMT-19903: Disable ODF and OpenShift AI Operators for Oracle (OCI) (#7341) #7341
MGMT-20183: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#7430) #7430
aantal-MGMT-19423: replacing HighAvailabilityMode with ControlPlaneCount. Some places like updating cluster params HighAvailabilityMode is still needed for backward compatibility. (#7373) #7373
NO-ISSUE: Update Konflux references (#7406) #7406
NO-ISSUE: Fix setuptools issue (#7415) #7415
NO-ISSUE: [master] Bump OCP versions: 4.15, 4.12 (#7408) #7408
NO-ISSUE: Only get the release image during install if it’s necessary (#7390) #7390
NO-ISSUE: [master] Bump OCP versions: 4.17 (#7400) #7400
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#7398) #7398
NO-ISSUE: [master] Bump OCP versions: 4.18, 4.19 (#7397) #7397
MGMT-19830: Enable installation of OCP clusters in vSphere environments with user-managed LB (#7272) #7272
MGMT-19596: Fixing broken KubeAPI tests (#7383) #7383
NO-ISSUE: Fix bug in MTU validation for CMN - validation should pass if all reports are checked (#7386) #7386
MGMT-19832: Fix time out during cluster last finalizing stage (#7372) #7372
MGMT-20099: add nmstate to /v2/supported-operators (#7378) #7378
MGMT-20022: Handle missing ManagedCluster in non MCE environments (#7348) #7348
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.18, 4.17 (#7380) #7380
MGMT-20095: Remove KMM operator from OpenShift AI NVIDIA bundle (#7376) #7376
MGMT-20010: Bump LSO override to 4.19 (#7366) #7366
MGMT-20043: Modify MTU Validation CMN to support multiple machine networks (#7357) #7357
NO-ISSUE: [master] Bump OCP versions: 4.18 (#7374) #7374
MGMT-19840: Gather operational metrics from installercache (#7281) #7281
MGMT-19939: Allow using the rootfs install method to add nodes (#7325) #7325
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-20149: Add required SAST tasks for Konflux (#1064) #1064
NO-ISSUE: Remove Paul account from OWNERS (#1073) #1073
MGMT-20198: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#1066) #1066
NO-ISSUE: Bump github.com/golang/glog from 1.2.0 to 1.2.4 (#1057) #1057
OCPBUGS-52696, OCPBUGS-52704: Bump crpto to v0.33.openshift.1 (#1053) #1053
NO-ISSUE: Update Konflux references (#1051) #1051
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#1049) #1049
Full changelog

agent-installer-node-agent

NO-ISSUE: Remove eran ifrach account from OWNERS (#947) #947
MGMT-20199: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#943) #943
NO-ISSUE: Update Konflux references (#929) #929
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#926) #926
Full changelog

agent-installer-utils

NO-ISSUE: iso_builder: Run appliance without sudo #54
AGENT-1087: Add logging #50
AGENT-1137: Support both –ocp-version and –release-image-url #49
AGENT-1118: Ensure the correct selinux labels are applied to agent tui files #57
OCPBUGS-45505: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.19 #37
AGENT-1147: Update operators #51
AGENT-1087: Support url in appliance-config.yaml #47
AGENT-1119: agent-setup-tui.service typo fix #48
AGENT-1087: Enable agent installer interactive flow #46
AGENT-464: Refactor UI for Rendezvous node IP entry #42
AGENT-1087: load agent tui #44
AGENT-1087: OVE ISO Builder script improvements #40
AGENT-464: Adds form to agent-tui to enter rendezvous IP address #38
AGENT-1087, AGENT-1118: Add script to generate agent-based installer OVE ISO #39
Full changelog

aws-ebs-csi-driver

OCPBUGS-51722: bump golang.org/x/crypto to v0.35.0 #284
OCPBUGS-46994: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #282
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

STOR-1877: Run operators without root user control #368
STOR-1880: Role and ClusterRole with too wide permissions #367
OCPBUGS-41827: update injector to use a secret rather than an environment variable #357
NO-JIRA: Fixed typo in README.md #348
STOR-2252: Bump all deps #361
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #363
CFE-1132: EFS Access Point Tags Update DAY2 #313
CFE-1131: AWS Tags DAY2 Update #297
Full changelog

aws-pod-identity-webhook

OCPBUGS-52509: github.com/go-jose/go-jose/v4 v4.0.5 #200
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-50969: UPSTREAM: 8504: Fix GovCloud Config #139
Full changelog

azure-cluster-api-controllers

CNTRLPLANE-105: Add new authentication type UserAssignedIdentityCredentials #333
Full changelog

azure-disk-csi-driver

OCPBUGS-51376: Rebase against v1.32.0 #102
OCPBUGS-51768: UPSTREAM: 2903: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #101
Full changelog

azure-file-csi-driver

OCPBUGS-51782: UPSTREAM: 2395: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #88
Full changelog

azure-machine-controllers

CORS-3883: Allow managed identity from other resource groups #133
Full changelog

azure-workload-identity-webhook

OCPBUGS-52508: github.com/go-jose/go-jose/v4 v4.0.5 #26
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

CORS-3918: Send service endpoint overrides to CAPG through cluster spec #9528
OCPBUGS-53465: Update RHCOS 4.19 bootimage metadata to 9.6.20250321-0 #9593
OCPEDGE-1513: Fixed topology logic for 2-node installs and added unit tests #9579
OCPBUGS-53379: Update RHCOS 4.19 bootimage metadata to 9.6.20250319-0 #9582
AGENT-467: show the agent ui url when available #9584
CORS-3861, CORS-3883, CORS-3937: Azure Machine Identity API #9538
AGENT-537: Run agent installer command to create certificates #9574
OCPBUGS-52959: Issue short lived certificates if ShortCertRotation featuregate is enabled #8784
OCPBUGS-53173: PowerVS: remove TF code #9568
no-jira: add dev docs for bumping CAPI provider version #9567
OCPBUGS-53183: Avoid adding duplicate entries to NO_PROXY #9573
SPLAT-2078: Removed VSphereStaticIPs feature gate #9560
OCPBUGS-53280: PowerVS: Re-enable disconnected installs #9551
AGENT-537: Add agent command to generate certificates #9557
OCPBUGS-39146: Validate sgdisk partition start in image based installer config #9541
AGENT-1113: additional refinement for loading the agent UI #9565
SPLAT-2072: Removed VSphereMultiVCenters feature gate #9553
OCPEDGE-1513: feat(topologies): add DualReplica topology mode #9534
OCPBUGS-45692: Modified ova template name to use failure domain name #9300
OCPBUGS-50552: Power VS: Disallow clusterOSImage install-configuration parameter #9417
NO-JIRA: OWNERS: add thuan #9555
OCPBUGS-51209: Changed kernelFileType name from kernel.img to vmlinuz for s390x #9533
OCPBUGS-6271: Adding VIPs Validation for agent based vsphere installation #9532
AGENT-1113: enhance the unconfigured-ignition command to support the interactive workflow #9529
OCPBUGS-33370: Improve baremetal gather error message #9120
OCPBUGS-36553: VSphere: add vips to machinenetwork #9526
OCPBUGS-49737: Custom-DNS: Update master and worker user data secrets #9451
CORS-2508: aws: remove unused autoscaling:DescribeAutoScalingGroups perm #9223
OCPBUGS-51378: Change vsphere conversion govmomi err to be clear #9524
CORS-3278: Bump IBM Cloud CAPI to v0.10.0 #9523
OCPBUGS-44840: Mount the user-ca-bundle into ICC #9227
OCPBUGS-50637: Remove error logging when determining image arch #9531
OCPBUGS-51171: aws: add ec2:ReplaceRoute permission #9525
OCPBUGS-47724: AWS: Copy static MCO resources needed for custom-dns #9489
OCPBUGS-49623: IBMCloud: Missing ca-mon region due to static region list #9421
OCPBUGS-47681: Support regions only available in v2 of the aws sdk #9383
OKD-235: Add stream metadata for scos to be used by OKD #9520
OCPEDGE-1635: Set default values for arbiter #9530
OCPBUGS-39583: Remove tmp directory used for agent pxe files #9527
No-ISSUE: (dep) Bump openshift/api #9522
CORS-3917: Add install config validation for service endpoints #9517
NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer #9515
OCPBUGS-51350: PowerVS: Extra network routes for disconnected install #9510
NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage #9508
OCPBUGS-50961: Power VS: Log accurate error when deploying Internal with no vpcName #9497
SPLAT-1995: vsphere on destroy remove cns volumes #9425
OCPBUGS-47459: IBMCloud: CAPI add permitted network #9397
OCPBUGS-47652: IBMCloud: Set CAPI boot volumes #9385
CORS-3869: static validation for new vpc.subnets field #9505
OSASINFRA-3695: openstack: Create security group rules in batches #9042
OCPBUGS-46051: IBMCloud: Fix CAPI AZ handling #9415
Full changelog

baremetal-operator

OCPBUGS-53233: Sync mar 18 #403
NO-ISSUE: Upstream Sync Mar 10 #401
OCPBUGS-52215: Bump x/oauth2 to 0.27.0 #400
Full changelog

baremetal-runtimecfg

OCPEDGE-1689: Include Arbiter nodes in the API backends if there is only one master #344
OCPBUGS-48469: Include cloud platform specific parameters to argument list for corednsmonitor #341
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-54168: Use ProxyFromEnvironment when creating HTTP transport #1995
NO-JIRA: debug: suggest nsenter instead of chroot #1991
OCPBUGS-53389: Use fedora image in unit tests instead of centos #1992
OCPBUGS-23514: status: Adjust impact summary for Failing=Unknown #1989
OCPBUGS-52504: pkg/cli/admin/upgrade/recommend: Populate RESTConfig #1987
Full changelog

cloud-credential-operator

NO-JIRA: Report the error when syncing STS secrets #827
OSASINFRA-3657: Add support for storing OpenStack CA bundles #780
OCPBUGS-52505: golang.org/x/oauth2 v0.28.0 #821
CCO-647: Enable readOnlyRootFilesystem on all containers #819
OCPBUGS-52507: github.com/go-jose/go-jose/v4 v4.0.5 #823
NO-JIRA: Add dry-run on aws create-all command #818
NO-JIRA: add example of how to build from source #820
Full changelog

cloud-network-config-controller

OCPBUGS-53201: Revert “CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller” #164
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #161
SDN-5690: Rebase k8s to 1.32 #163
Full changelog

cluster-autoscaler

OCPBUGS-11115: improve failed machine detection in clusterapi #347
OCPBUGS-11115: make DecreaseTargetSize more accurate #343
OCPBUGS-11115: improve replica counting on openshift #278
Full changelog

cluster-baremetal-operator

OCPBUGS-52216: Bump x/oauth2 to 0.27.0 #463
OCPBUGS-51275: Add new resources to controller relatedObjects #465
OCPBUGS-44839: Mount the user-ca-bundle into ICC #455
Full changelog

cluster-bootstrap

OCPEDGE-1683: feat: add support for arbiter and dual replica: #116
Full changelog

cluster-capi-controllers

OCPCLOUD-2860: Enable propagation of Machine annotations to Nodes #233
OCPCLOUD-2680: Enable machine to node propagation #229
Full changelog

cluster-capi-operator

NO-JIRA: fix: e2e: azure conditionally set identity #276
TRT-2048: Revert “OCPCLOUD-2792: corecluster: set controller level conditions + tests” #273
OCPBUGS-53057: Fix misspelled CAPI IBMPowerVSCluster kind name in corecluster generation logic #266
OCPCLOUD-2858: Bump dependencies to CAPI v1.9.z #270
NO-JIRA: Update TODOs with new Jira issues #269
OCPCLOUD-2718: Add default VolumeSize for MAPI to CAPI conversion #260
OCPCLOUD-2792: corecluster: set controller level conditions + tests #256
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-41827: update injector to use a secret rather than an environment variable #380
Full changelog

cluster-config-api

Migrate DeepCopy and Compatibility gen to Gengo v2 #1776
CCXDEV-10455: update insightsDataGather to v1alpha2 with GathererConfig #2195
API-1843: FeatureGate(d) KMS encryption #2035
CONSOLE-4448, OCPBUGS-53412: Add the ability to specify a second custom logo for PatternFly 6 #2177
MCO-1521: Promote PinnedImageSet to GA #2198
Remove inactive reviewers and ex-Red Hatters from OWNERS, add everettraven #2238
Update KAL and remove patch strategy tags #2241
STOR-2141: add MaxAllowedBlockVolumesPerNode field to VSphereCSIDriverConfigSpec #2190
MCO-1590: Add explicit opt-out & status field for boot image update configuration #2223
API-1689: features: add ShortCertRotation #1977
NE-1954: Introduce GatewayAPIController feature gate #2219
CCXDEV-14850: insights add storage spec #2200
Support SEV_SNP and TDX confidential instance type selection on GCP #2165
OCPBUGS-48641: config/v1/types_cluster_version: Explain image and version both set #2158
OCPEDGE-1512: feat: add dualreplica featuregate #2196
STOR-2267: Add SELinuxMount and SELinuxChangePolicy to DevPreview #2212
Add changes to infrastructure object to contain service endpoints and feature flag added #2078
Full changelog

cluster-config-operator

OCPEDGE-1643: bump: ocp/api ocp/library-go k8s #431
Full changelog

cluster-control-plane-machine-set-operator

OAPE-147: Add E2E tests for MachineNamePrefix with OnDelete update strategy #353
OCPBUGS-52224: Bump to golang.org/x/oauth2@v0.27.0 #352
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2281: Remove csi-snapshot-validation-webhook references #231
OCPBUGS-24588: bump library-go #233
STOR-2252: Bump all deps #228
Full changelog

cluster-dns-operator

OCPBUGS-51193: Add runbook_url for CoreDNSErrorsHigh #426
Full changelog

cluster-etcd-operator

OCPEDGE-1500: Added scaling strategies for TNF #1396
Full changelog

cluster-image-registry-operator

CNTRLPLANE-112: Bump msi-dataplane dependency #1187
CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication #1186
Full changelog

cluster-ingress-operator

NE-1934: Bump to OSSM 3.0 for Gateway API support #1152
CORS-3907: Update ingress operator to with custom endpoints #1197
NE-1953: Add experimental Gateway API group to Validating Admission Policy #1200
NE-1907: Manage OSSM operator subscription manually to ensure a compatible version is installed #1112
NE-1981: Move controller test helpers to dedicated package #1199
NE-1953: Add Validating Admission Policy for Gateway API CRDs #1192
NE-1954: Implement GatewayAPIController feature gate #1198
NE-1936: Bump k8s.io dependencies to v0.32.1 #1184
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-35102: Bump library-go #1824
Full changelog

cluster-kube-controller-manager-operator

STOR-2267: Run SELinux warning controller #834
Full changelog

cluster-monitoring-operator

MON-4188: Add docs for proxy_url alertmanager #2582
NO-JIRA: [bot] Synchronize versions of the downstream components #2577
MON-4189: Updating node-exporter accelerators configmap #2558
MON-4043: Configuring external Alertmangers with proxy_url #2580
MON-4136: set up the PrometheusPossibleNarrowSelectors alert #2554
MON-3960: test: enable back TestTLSSecurityProfileConfiguration and m… #2545
NO-JIRA: chore: versions: kubeRbacProxy’s primary branch isn’t main yet #2574
OU-515: remove old nginx configmap deletion #2575
Full changelog

cluster-network-operator

OCPBUGS-52280: Move to use newer IPsec DaemonSets irrespective of MCP state #2454
CNTRLPLANE-112: Update managed Azure HCP cloud network config #2647
OCPBUGS-52972: Correct namespace ref and cert dir #2665
NO-JIRA: ovn-k: sync EgressService with upstream #2664
OCPBUGS-52361: frr-k8s: rename validatingwebhook name #2659
Full changelog

cluster-node-tuning-operator

CNF-16638: Reduce code duplication of RPS enabled checks (#1301) #1301
Add observedGeneration to Profile status (#1305) #1305
Manage TuneD profiles with the same name and different content (#1216) #1216
OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) #1303
NO-JIRA: PPC: unit: test sortTopology for expected output (#1217) #1217
Switch builder image to multi-arch image (#1297) #1297
Full changelog

cluster-policy-controller

CNTRLPLANE-55: Add MinimallySufficientPodSecurityStandard annotation to namespaces #161
Full changelog

cluster-samples-operator

OCPBUGS-54149: Updates to README.md #613
OCPBUGS-52848: Unrevert the revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #609
OCPBUGS-52848: Unrevert the revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #608
OCPBUGS-52848: Revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #606
OCPBUGS-52848: Revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #607
OCPBUGS-52379: relevant references to master renamed in README.md #603
OCPBUGS-52346: bump x/oauth2 to version 0.27.0 #602
OCPBUGS-45049: Adding mutex to func createSamples on handler.go #601
Full changelog

cluster-storage-operator

STOR-1881: Role and ClusterRole with too wide permissions #569
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #568
OCPBUGS-24588: bump library-go #566
STOR-2252: Bump all deps #554
CFE-1131: Added token minter Sidecar for aws-ebs hypershift-deployments #528
Full changelog

cluster-update-keys

NO-JIRA: Updating openshift-ci-release-key for 2 years #70
Full changelog

cluster-version-operator

OTA-1403: Move the CVO CLI Application to a Separate Folder #1169
OTA-209: Add CVOConfiguration controller #1163
OTA-1427: Reconcile all nodes via a special event #1164
OCPBUGS-52258: pkg/cvo/updatepayload: Context around ValidateDirectory calls #1166
NO-JIRA: Use k8s.sets for the fields of ClusterCapabilities #1159
Full changelog

console

(chores) Add approvers #14895
OCPBUGS-52864: Edit form for key/value secrets should be showing decoded base64 values. #14852
ODC-7773: Add e2e tests for Favorites feature #14802
CONSOLE-4437: Add CSP test to the test-prow-e2e.sh #14858
RHSTOR-6927: Removes LSO static plugin from console #14740
OCPBUGS-53119: Add support for extensibility in SnapshotClass and StorageClass pages #14878
OCPBUGS-52489: Fixed the typo ‘enivornments’ on tour page #14857
CONSOLE-4081: Refactor EditSecret component #14853
OCPBUGS-53030: Fix type-only dynamic module import build warnings for plugins #14861
CONSOLE-3960: Migrate react-helmet to react-helmet-async #14876
CONSOLE-3247: Remove react-measure #14844
OCPBUGS-34737: Disable pipeline ci tests due to failure in task creation #14893
OCPBUGS-53103: Apply plugin-api-changed label to plugin SDK shared modules #14872
ODC-7776: Add getting started alert #14830
ODC-7766: Test updates pertaining to perspective merge #14717
CONSOLE-4515, CONSOLE-4516, CONSOLE-4517: Update react-modal, react-tagsinput #14874
OCPBUGS-53118: Include init containers in readiness count if ready and started is true #14877
CONSOLE-4461: Notification drawer move to Page props, fixing the small overlap on the notification drawer #14723
OCPBUGS-45847: Remove barrel file references in static plugin exposedModules #14683
OCPBUGS-52589: Fix hooks in CaptureTelemetry #14870
CONSOLE-3414: Fix flaky Loading tests #14873
OCPBUGS-53047: Disable guided tour in admin perspective #14866
OCPBUGS-52166: Fix sort function on Access review table #14848
OCPBUGS-52589: update @types/react to v17, use new JSX transform #14864
ODC-7775: Update content in Getting started resources on cluster and project overview page #14829
OCPBUGS-52325: fix Node Logs toolbar layout at mobile #14836
CONSOLE-4430: Content Security Policy E2E testing with Puppeteer & Chrome #14675
CONSOLE-3414: Replace Loading with PF Spinner #14842
ODC-7727: Add hover effect to favourites icon #14839
CONSOLE-4504: set LogViewer theme using console’s theme #14827
OCPBUGS-48491: Namespace is not persisting when switching to developer view from the topology page of admin page #14812
OCPBUGS-49348: Fix Secret form drag and drop issue #14798
OCPBUGS-37101: Remove logoutOpenShift method call #14658
OCPBUGS-52316: enable clicking outside NodeLogs Selects to close them #14826
OCPBUGS-52214: add missing v5 patternfly-addons.scss and patternfly-charts.scss styles #14813
CONSOLE-4409: Update monaco theming and sidebar logic #14835
CONSOLE-4503: Replace custom Banner with PatternFly equivalent #14825
OCPBUGS-52298: Add breadcrumbs to ODC Project details page #14824
OCPBUGS-51372: Filter ‘Name’ on resource list page doesn’t align well when language is set to Chinese/Japanese/Korean #14822
ODC-7727: Favoriting page in the Console admin perspective #14765
OCPBUGS-51355: VolumeSnapshots are not displayed in OpenShift Web Console #14820
CONSOLE-4498: Replace checkboxes with Switch in ResourceLog #14815
OCPBUGS-30973: Remove @ts-ignore comment missed in #14680 #14814
CONSOLE-4496: Replace custom Checkbox filter with PatternFly Switch #14807
OCPBUGS-51037: Update the monitoring topic used by the console team #14781
OCPBUGS-50650: Retain original path when detecting perspective #14810
CONSOLE-4407, CONSOLE-4409: Update monaco and YAML language server, use PF6 CodeEditor #14663
OCPBUGS-51076: Console UI Displays Incorrect Subscription Values #14790
CONSOLE-4399: Added ‘createdTime’ in Jobs.tsx #14786
OCPBUGS-48413: Sorted Links based on OS in CLI #14819
Full changelog

console-operator

NETOBSERV-2029: add netobserv ConsoleCLIDownload #958
OCPBUGS-53164: Add annotations to Enable developer perspective quick start to include in the console quick starts #970
ODC-7723: Add quick start to enable developer perspective #968
CONSOLE-4508: Enable CSP e2e test #969
OCPBUGS-51256: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #965
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-53198: Sync 25-03-2025 #177
OCPBUGS-45272: Ds merge 3/7/25 #175
OCPBUGS-48190: Ds merge 2/5/2025 #173
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into master #311
Full changelog

csi-external-attacher

OCPBUGS-41719: UPSTREAM: 624: Reorder API calls after successful detach #82
Full changelog

csi-external-provisioner

OCPBUGS-51561: bump golang.org/x/crypto to v0.36.0 #112
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #113
OCPBUGS-49805: Fix the managed-by-label getting populated with invalid value #110
Full changelog

csi-external-resizer

STOR-2251: Rebase external-resizer to upstream v1.13.2 for OCP 4.19 #169
Full changelog

docker-builder

OCPBUGS-43812: Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 #458
Full changelog

driver-toolkit

test/e2e: adapt for layered node image (#167) #167
Full changelog

egress-router-cni

OCPBUGS-53096: Build openshift container based on 4.19 image #89
Full changelog

etcd

OCPBUGS-52181: Ensure cluster id changes during force-new-cluster #313
OCPBUGS-50510: Add configurable option for hardware-related timeout delay #311
OCPBUGS-45488: Updating ose-etcd-container image to be consistent with ART for 4.19 #306
ETCD-717: Rebase etcd 3.5.19 openshift 4.19 #315
Full changelog

gcp-cluster-api-controllers

OCPCLOUD-2856: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.9.0 (b822ce2) into master #239
Full changelog

gcp-machine-controllers

CORS-3906: Update MAPI GCP Provider to use custom GCP endpoints #111
OCPCLOUD-2882, OCPCLOUD-2889: Provision AMD SEV-SNP and Intel TDX confidential instances #110
Full changelog

gcp-pd-csi-driver

STOR-2257: Rebase to upstream v1.17.4 for OCP 4.19 #75
Full changelog

gcp-pd-csi-driver-operator

NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #140
STOR-2252: Bump all deps #139
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-45273: Properly annotate networking skip according to Jira ticket #2235
OCPBUGS-53014: Bump 1.32.3 #2241
TRT-1854: translate test annotations to use: include/exclude CEL, labels, filtering #2215
STOR-2285: UPSTREAM: <carry>: Add volume group snapshot test driver #2232
OCPBUGS-44693: Revert “disable ResilientWatchCacheInitialization feature” #2192
OCPBUGS-52477: Revert #2229: Initialize testContext before enumerating tests #2236
NO-JIRA: Initialize testContext before enumerating tests #2229
UPSTREAM: <carry>: OCPBUGS-45274: Enable PodRejectionStatus test #2231
OCPBUGS-45274: UPSTREAM: 130097: Modify how to check the status #2228
Full changelog

hypershift

CNTRLPLANE-111: Authenticate to Azure only once in CPO #5862
OCPBUGS-52190: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #5876
NO-JIRA: Make serve-containerised in docs not defaulting to a running Docker container when Podman is installed #5859
OCPBUGS-53263: Fixed cpov2 reconciliation making no-op calls to api-server #5861
OCPBUGS-53462: Check for availability of individual catalog images #5881
NO-JIRA: Improve error output msg for Azure CLI role cmds #5877
STOR-2281: Remove csi-snapshot-validation-webhook #5776
CNTRLPLANE-111: Fix KMS Azure credentials mount path #5857
CNTRLPLANE-348: Konflux tagged releases #5869
OCPBUGS-53407: chore(deps): update konflux references #5846
NO-JIRA: feat(builds): Add area labels and OWNERS #5872
OCPBUGS-52424: Set shutdown watch termination grace period on kube-apiserver #5760
NO-JIRA: Add Azure scheduler doc to mkdocs #5865
CNTRLPLANE-342: Add missing area for support #5864
OCPBUGS-53050: Handle multiple mirror entries for source #5827
OCPBUGS-52331: CPO v2: rollout workloads on any changes to mounted configmaps/secrets #5767
NO-JIRA: openstack: revert OpenStackImageRetentionPolicy + use a unique image name per Hosted Cluster #5853
Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure” #5860
OCPBUGS-53083: e2e: detect leader election failure in restarted pods #5830
CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure #5837
METAL-1240: Fix kube-controller-manager and openshift-route-controller-manager services’ ipFamilies wrt PreferDualStack policy #5829
OSASINFRA-3492: feat(openstack): leverage ORC to manage the release image #5139
CNTRLPLANE-325: rootless containerized builds #5835
CNTRLPLANE-265: Enable gosimple, govet, and errcheck in golangci-lint #5759
CNTRLPLANE-111: Fix Azure KMS SecretProviderClass volume name #5820
NO-JIRA: Bump msi-dataplane dependency #5796
OCPBUGS-52985: filter watch events for HO AWSEndpointService reconciler #5818
NO-JIRA: Update Konflux references #5799
ARO-14354, ARO-14355, ARO-14356: introduce image registry capability behind feature gate #5456
OCPBUGS-52819: CPO Overrides for OCPBUGS-48519 #5808
PODAUTO-324: PODAUTO-325: Allow autonode to run upstream karpenter core e2e tests #5680
OCPBUGS-51364: fix oc patch command on doc #5807
NO-JIRA: Fix-dependabot-bumps #5797
OCPBUGS-52655: Add flag to set etcd storage size #5795
CNTRLPLANE-111: Fix KMS MIv3 Issues #5793
NO-JIRA: Disable GitHub Actions #5812
OCPBUGS-52821: stop using dev mode for loggers #5801
HOSTEDCP-2237: Auto approve Karpenter serving CSRs #5708
OLS-1370: Add full aws permission list and point to it from “getting started” #5746
NO-JIRA: CPOv2 token-minter abstraction #5769
NO-JIRA: test/e2e: skip WaitForImageRollout in executeNodePoolTest on newer releases #5778
OCPBUGS-52323: Make managed-trust-bundle optional #5763
CNV-57648: document how to configure descheduler #5779
NO-JIRA: Remove WI step for cluster-image-registry-operator #5777
OTA-1405: Add the ClusterVersionOperator API #5569
OCPBUGS-52419: e2e: don’t call WaitForImageRollout in executeNodePoolTest #5771
OCPBUGS-50518: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5475
CNTRLPLANE-263: Remove unused CAPZ CRDs from HyperShift install #5756
NO-JIRA: speed up image builds #5766
NO-JIRA: go.mod updates from Konflux #5761
OSASINFRA-3733: (follow-up) deploy ORC on release payload >= 4.19 #5749
OCPBUGS-52223: refactor aws identity health check into new controller #5751
OCPBUGS-50523: Fix audit-logs container to properly handle SIGTERM #5491
NO-JIRA: Remove issues-exit flag for golangci-lint #5762
CNTRLPLANE-111: Enable MIv3 for CP/CCM in managed Azure HCP #5755
NO-JIRA: Add CPO container sync check to GitHub Actions #5753
OCPBUGS-52226, OCPBUGS-52227: CVE Fix for potential denial of service in upstream libs #5750
NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 #5719
HOSTEDCP-2242: [CPOv2 Refactor] Refactor image-registry-operator #5676
Full changelog

ibm-vpc-block-csi-driver-operator

NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #140
STOR-2252: Bump all deps #137
Full changelog

ibmcloud-machine-controllers

OCPBUGS-51864: IBMCloud: MAPI replacing unhealthy CP nodes #61
Full changelog

insights-operator

NO-JIRA: refactor gather commands (#1076) #1076
NO-JIRA: feat: add gatherer name validation to gendocs (#1075) #1075
fix: allow running enabled functions from disabled gatherer (#1077) #1077
Full changelog

insights-runtime-exporter, insights-runtime-extractor

New runtimes tests #40
SB 3.4.3 test app and 3.1.4 app simplified #39
plain-java runtime sample #38
Full changelog

ironic

NO-JIRA: Sync with upstream metal3/main 2025-03-24 #650
METAL-1297: Update ironic-image to the latest commit hash #644
METAL-1299: Do not use openstack packages #645
Full changelog

ironic-agent

METAL-1299: Do not use openstack packages #177
METAL-1297: Update commit hash of ironic-python-agent #176
Full changelog

machine-api-operator

SPLAT-2078: Removed VSphereStaticIPs feature gate #1346
SPLAT-2060: Create e2e tests for vSphere Data Disk feature #1338
OCPCLOUD-2882, OCPCLOUD-2889: support AMD SEV_SNP and TDX confidential computing machines on GCP #1326
Full changelog

machine-config-operator

NO-ISSUE: MCN changes for API validation #4949
OCPNODE-2340: update (Cluster)Imagepolicy PKI config to policy.json #4886
OCPBUGS-52827: Fixing typos for MachineConfigNode #4914
OCPBUGS-51130: In OCL. Cannot install extensions #4870
OCPBUGS-52280, SDN-5330: Add ipsec connect wait service #4854
OCPNODE-2842: Set Upgradeable=False when cluster is on cgroup v1 #4822
“NO-ISSUE: ensure that client configs are not mutable” #4915
MCO-1501: Add support for custom MCPs in MCN #4876
OCPBUGS-53085: Add scc label to arbitor crio-metrics-proxy #4912
OCPBUGS-51150: daemon: ensure ostree-finalize-staged is started before rebooting #4907
OCPBUGS-44185: Race in configure-ovs.sh affects bonding interface configuration. #4609
OCPBUGS-52213: Update ObservedGeneration in KubeletConfig #4900
RHEL-79554: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4866
MCO-1485: MCO:1486: MCO-1324: Attempt stub Ignition upgrade #4885
MCO-1537: Add MCDRebootError runbook to prometheus rules #4895
NO-JIRA: Update the MCS iptables debug command in docs #4896
OCPBUGS-43896: add revert logic to OCL path in MCD #4825
MCO-1515: Kube bump to 1.32 #4797
Full changelog

machine-os-images

NO-JIRA: Change to new host #54
Full changelog

metallb-frr

Align to upstream #79
Syncoperator03032025 #78
Full changelog

monitoring-plugin

OU-700: don’t show metrics links in acm perspective #367
COO-768: add plugin proxy to perses proxy path #365
COO-759: update datasource whenerver the csrf token changes #363
RHINENG-12634: incident utils typescript conversion #359
CNV-55987: Aggregated alerts #348
COO-684: add mui/material as is required as peer dependency #360
OU-681: fix typo in the predefined metrics list #358
OU-499: remove deprecated components #356
Full changelog

multus-cni, multus-cni-microshift

TRT-2057: Properly structure empty CNI result #267
OCPBUGS-54153: Ds merge ³⁄₂₄ #264
OCPBUGS-53087: Tolerate issues writing network status annotation on CNI ADD #263
Full changelog

multus-networkpolicy

Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.19 (#67) #67
OCPBUGS-44354: Sync 20250204 (#66) #66
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-52415: replace entrypoint #349
Full changelog

network-tools

NO-JIRA: Add Peng #138
Full changelog

networking-console-plugin

add adam to the approves #223
CNV-56305: upgrade Network UI to PatternFly 6 #221
CNV-58015: fix delete label row #224
Upgrade dockerfile for node 18 and 4.19 #222
Full changelog

nutanix-cloud-controller-manager

OCPCLOUD-2847: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (1771fdb) into main #42
Full changelog

oc-mirror

OCPBUGS-52960: v2: fix setting version during build (#1109) #1109
OCPBUGS-52978: delete: fix typo in –help output (#1115) #1115
OCPBUGS-52969: remove TechPreview mentions of v2 in –help (#1110) #1110
OCPBUGS-52588: fix: error when no related image was found (#1105) #1105
OCPBUGS-50680: v2/operator: refactor operator FilteredCollector (#1093) #1093
no-jira: v2/manifest/oci-manifest: refactor and dedup the code (#1098) #1098
v2: filter wrapcheck warnings for oc-mirror (#1104) #1104
OCPBUGS-51328: Fix CVE-2025-27144 (#1097) #1097
CLID-325: adds cpu and memory profiling (#1100) #1100
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #299
NO-ISSUE: Synchronize From Upstream Repositories #298
NO-ISSUE: Synchronize From Upstream Repositories through PR1871 #294
OCPBUGS-23055: Synchronize From Upstream Repositories through PR1811 #290
NO-ISSUE: Synchronize From Upstream Repositories #285
Full changelog

openstack-cluster-api-controllers

Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #361
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #360
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #986
NO-ISSUE: Synchronize From Upstream Repositories #984
NO-ISSUE: Synchronize From Upstream Repositories #966
NO-ISSUE: Update DOWNSTREAM owners files #973
OCPBUGS-42526: Ensure that PSA label is latest instead of pinning versions #972
Full changelog

operator-marketplace

OPRUN-3818: Bump sigs.k8s.io/controller-runtime from 0.20.2 to 0.20.3 #611
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.23.0 #605
NO-ISSUE: Bump github.com/onsi/gomega from 1.36.1 to 1.36.2 #608
NO-ISSUE: Upgrade github.com/operator-framework/api from v0.23.0 to v0.30.0 and github.com/prometheus/client_golang v1.21.0 => v1.21.1 #598
NO-ISSUE: Add dependabot to help keep the project maintained #599
OCPBUGS-52340: Ensure that PSA label is latest instead of pinning versions #600
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-48678: Update OVN to FDP25.A.1 24.09.2-41 #2493
Full changelog

powervs-block-csi-driver

MULTIARCH-5364: Rebase ibm-powervs-block-csi-driver with upstream #97
Full changelog

powervs-block-csi-driver-operator

STOR-2252: Bump all deps #81
Full changelog

powervs-machine-controllers

OCPBUGS-53309: Update dependencies to k8s 1.32 #110
Full changelog

prometheus

OCPBUGS-53025: Scraping: Bump cache iteration after error to avoid false duplicate detection. #245
Full changelog

service-ca-operator

OCPBUGS-48171: Update go 1.23 and ocp 4.19 #254
Full changelog

tests

OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.redhat.com to redhat.com #29618
CNTRLPLANE-5: Fix decoding of CBOR data in etcd test #29614
SDN-5768: virt, udn: use l2bridge binding #29439
OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.openshift.com to docs.redhat.com after docs migration #29604
CNTRLPLANE-5: Decode CBOR data in etcd test #29601
MCO-1594: updates for ManagedBootImageStatus #29598
SDN-4168: Fix IPsec tests for monitor failures #29437
TRT-2026: validate that the binary extraction was successful via existence check #29595
OSD-26270: re-enabled managed-upgrade-operator test by removing exclusion #29585
NO-ISSUE: Automated - Update synthetic test data #29570
NO-ISSUE: replace hardcoded ClusterVersionCapability string in olmv1 tests #29577
TRT-1575: Fail the test when an expected operator goes to degraded #29566
OCPBUGS-52578: Use payload pullspec for image info test #29586
OCPBUGS-51373: use non-fake boot image for patch #29574
Full changelog

thanos

MON-4139: feat: replace github.com/prometheus/prometheu dep with one having an xtra check in the parser to help identify le/quantile selectors misuses in Prometheus v3 #158
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #141
OCPBUGS-51973, OCPBUGS-52808: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #140
OCPBUGS-46317, OCPBUGS-46331, OCPBUGS-47367, OCPBUGS-47437: bump golang.org/x/net to v0.33.0 #138
Full changelog

vsphere-csi-driver-operator

NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #298
STOR-2252: Bump all deps #296
Full changelog

vsphere-problem-detector

SPLAT-1801: Add support for host groups #175
No-JIRA: Update owners #178
STOR-2252: Bump all deps #177
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #179
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github