4.20.0-rc.0

PullSpec:

quay.io/openshift-release-dev/ocp-release:4.20.0-rc.0-multi

Team Approvals:

Tests:

Informing jobs
- e2e-aws-ovn-multi-x-x Succeeded periodic-ci-openshift-multiarch-main-nightly-4.20-ocp-e2e-aws-ovn-multi-x-x
- hypershift-e2e-aks-multi-x-ax Succeeded (1 retry) periodic-ci-openshift-hypershift-release-4.20-periodics-e2e-aks-multi-x-ax
  - Attempt 1 Failed
  - Attempt 2 Succeeded

Upgrades from:

Untested upgrades: 4.19.0, 4.19.1, 4.19.10, 4.19.2, 4.19.3, 4.19.4, 4.19.5, 4.19.6, 4.19.7, 4.19.8, 4.19.9, 4.20.0-ec.0, 4.20.0-ec.2, 4.20.0-ec.3, 4.20.0-ec.4, 4.20.0-ec.5, 4.20.0-ec.6

4.19.11 (changes) - Failed Success

Upgrades to:

4.20.0-rc.1 (changes) - Success
4.19.12 (changes) - F F F

Loading changelog, this may take a while ...

Changes from 4.19.30

Created: 2025-09-05 18:01:52 +0000 UTC

Image Digest: sha256:3a582cfdcd98c05654913afd77f5c3229236d89e5285aa6c7d93e5f21a77ebb4

Release 4.20.0-rc.0 was created from quay.io/openshift-release-dev/ocp-release-nightly@sha256:95fe45083a466b3f14db9644e9f4477198795363e89769e54959d0a62bc46376

Components

Kubectl upgraded from 1.32.1 to 1.33.3
Kubernetes upgraded from 1.32.13 to 1.33.3
Kubernetes Tests upgraded from 1.32.8 to 1.33.3
Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260504-0 to 9.6.20250826-1

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AWSEFSDriverVolumeMetrics (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
BareMetalLoadBalancer (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ChunkSizeMiB (5 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CloudDualStackNodeIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DisableKubeletCloudCredentialProviders (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPLabelsTags (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HardwareSpeed (3 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
InsightsRuntimeExtractor (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIProviderOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MultiArchInstallAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MultiArchInstallGCP (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NodeDisruptionPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
OnClusterBuild (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PersistentIPsForVirtualization (18 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PlatformOperators (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PrivateHostedZoneAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SELinuxChangePolicy (19 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
StreamingCollectionEncodingToJSON (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
StreamingCollectionEncodingToProtobuf (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereDriverConfiguration (5 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiVCenters (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ValidatingAdmissionPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
HighlyAvailableArbiter (8 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ProcMountType (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
SigstoreImageVerification (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UpgradeStatus (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesPodSecurityStandards (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesSupport (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereMultiDisk (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereMultiNetworks (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ImageVolume (7 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StoragePerformantSecurityPolicy (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterVersionOperatorConfiguration (0 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
DualReplica (5 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
SELinuxMount (17 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
SigstoreImageVerificationPKI (0 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
AWSClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AWSDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AWSServiceLBNetworkSecurityGroup (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureMultiDisk (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
BootImageSkewEnforcement (0 tests)			Enabled (New)	Enabled (New)
ExternalSnapshotMetadata (0 tests)			Enabled (New)	Enabled (New)
GCPClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPCustomAPIEndpointsInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ImageModeStatusReporting (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
IrreconcilableMachineConfig (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesAzure (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesvSphere (6 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MultiDiskSetup (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MutatingAdmissionPolicy (3 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLMWebhookProviderOpenshiftServiceCA (0 tests)				Enabled (New)		Enabled (New)
NoRegistryClusterOperations (0 tests)				Enabled (New)		Enabled (New)
PreconfiguredUDNAddresses (6 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereMixedNodeEnv (0 tests)			Enabled (New)	Enabled (New)

New images

csi-external-snapshot-metadata git 693a8264 sha256:1b2202839e2cbfddf8c51610c8497c4679a7b45dcb8e68a5d908ffbfd7bd9be6
volume-data-source-validator git 0e61642f sha256:c60d02881def3d5e6534621c67a8a562588d877863deb38eba4fdda53f91d7c6

Rebuilt images without code change

cluster-kube-cluster-api-operator git 3ec30377 sha256:e73cddd55664b52e9b50da76e31435044b3561af2e22f43df4d3a160beecd9d1
kubevirt-cloud-controller-manager git 3f4542ec sha256:b84ad38411ecc921d8f58fadb7163df2d16e704111b878d44ee463a8b2656b9a
multus-cni git cf0f68ec sha256:878f36b226b3574ada237542d06c5301352c268a441b3d2d2549ff3b7c6c2f0f
multus-cni-microshift git cf0f68ec sha256:7b2b7ced383d39bf6d1ac1abf6a03f65f439989a9ccfde80500397e3f6108cfc
multus-route-override-cni git 391c1b03 sha256:5b31c484fe6f62adb2521f4c7504fd5a27ed265e3bb0d45ed6789da11d59b65b
ovirt-csi-driver git 1db726a9 sha256:0177eeea90b9286bb9e5b6243e0d84289392d9f1679d143ab9c491c2befeb7c4

agent-installer-api-server

MGMT-20464: Fix NFD detection of NVIDIA GPUs #7696
And 138 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update Konflux references (#1225) #1225
Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.20 (#1144) #1144
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.20 (#1146) #1146
MGMT-21454: update Go to 1.24 and adapt unit-tests (#1220) #1220
NO-ISSUE: Update Konflux references (#1216) #1216
NO-ISSUE: Add yoavsc0302 to OWNERS_ALIASES file (#1213) #1213
NO-ISSUE: Update Konflux references (#1212) #1212
MGMT-20756: assisted installer naive string concatenation for partition finding (#1198) #1198
NO-ISSUE: Update Konflux references (#1202) #1202
NO-ISSUE: Update Konflux references (#1184) #1184
NO-ISSUE: Update Konflux references (#1177) #1177
MGMT-18518: Linter fixes & renovate config for linter and golang (#1147) #1147
NO-ISSUE: Update Konflux references (#1160) #1160
NO-ISSUE: Update Konflux references (#1156) #1156
MGMT-20868: Trust also system certs (#1145) #1145
NO-ISSUE: CVE-2025-30204 Update openshift-online/ocm-sdk-go to v0.1.467 (#1152) #1152
NO-ISSUE: Update Konflux references (#1149) #1149
MGMT-20858: apply-tag migration (#1143) #1143
NO-ISSUE: Update Konflux references (#1139) #1139
ACM-21380: Make ACM builds multi-arch (#1136) #1136
NO-ISSUE: Update Konflux references (#1131) #1131
NO-ISSUE: Update Konflux references (#1130) #1130
NO-ISSUE: Add konflux service account migration (#1129) #1129
NO-ISSUE: Modify Konflux YAMLs to ocm-2.15 (#1126) #1126
MGMT-11622: assisted-installer controller: operator status should be logged (#1079) #1079
Use rsync over cp to set up networking files for first boot (#1123) #1123
Konflux build pipeline service account migration for assisted-installer-controller-acm-ds-main (#1108) #1108
Konflux build pipeline service account migration for assisted-installer-ds-main (#1110) #1110
Konflux build pipeline service account migration for assisted-installer-controller-ds-main (#1109) #1109
Konflux build pipeline service account migration for assisted-installer-acm-ds-main (#1107) #1107
MGMT-20567: Enable HTTP endpoint for MCO ignition (#1117) #1117
NO-ISSUE: Update Konflux references (#1114) #1114
Full changelog

agent-installer-node-agent

Update ghw package to v0.19.0 to resolve LVMs issue (#1093) #1093
NO-ISSUE: Add yoavsc0302 to OWNERS_ALIASES file (#1089) #1089
NO-ISSUE: Update Konflux references (#1078) #1078
MGMT-20141: collecting and uploading ironic-agent logs (#1028) #1028
NO-ISSUE: Update Konflux references (#1064) #1064
NO-ISSUE: Update Konflux references (#1043) #1043
OCPBUGS-59297: Bump glog to 1.25 (#1061) #1061
NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.24 (#1052) #1052
NO-ISSUE: Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.23 (#1038) #1038
MGMT-20669 Fix hostname update for inventory get host request (#1007) #1007
MGMT-20025: Route inventory deleted when route without next hop interface (#999) #999
NO-ISSUE: Update module github.com/golangci/golangci-lint to v1.64.8 (#1037) #1037
MGMT-18518: Linter fixes & renovate config for linter and golang (#1031) #1031
MGMT-20868: Trust also system certs (#1029) #1029
NO-ISSUE: CVE-2025-30204 Update openshift-online/ocm-sdk-go to v0.1.467 (#1036) #1036
NO-ISSUE: Update Konflux references (#1033) #1033
MGMT-20858: apply tags migration (#1027) #1027
MGMT-18993: When installing a node configured with a bond interface comprising of (#1021) #1021
Revert “NO ISSUE: Test (#1015)” (#1016) #1015
NO-ISSUE: Update Konflux references (#1013) #1013
ACM-21380: Make ACM builds multi-arch (#1017) #1017
NO ISSUE: Test (#1015) #1015
NO-ISSUE: Modify Konflux YAMLs to ocm-2.15 (#1009) #1009
NO-ISSUE: Update Konflux references (#1003) #1003
NO-ISSUE: Update Konflux references (#1002) #1002
Konflux build pipeline service account migration for assisted-installer-agent-acm-ds-main (#992) #992
NO-ISSUE: Update Konflux references (#984) #984
Full changelog

agent-installer-utils

OCPBUGS-60920: Update ISOBuilder OCP 4.19 Dev Preview Release notes #141
AGENT-1252: Add Dockerfile for OVE UI ISO #138
AGENT-1256: Fix hyperconverged and kube descheduler contents #140
AGENT-1256: Version the ISO builder configuration and script #128
AGENT-1254: Switch to agent-installer-ui image #132
AGENT-1205: Do not include agent-tui and related services #123
OCPBUGS-60019: Add ISOBuilder Release notes #135
AGENT-1270: use agent-preinstall-image-builder image for building the ISO #134
NO-ISSUE: Move mtv-operator back to v2.8 for 4.20 #133
OCPBUGS-59724: add back NHR and FAR operators #130
OCPBUGS-59187: invalid default channel configuration for package “mtv… #124
OCPBUGS-58226: OVE ISOBuilder works only if and when the script is ex… #120
NO-ISSUE: Bump the 4.xx dependencies #119
OCPBUGS-57679: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.20 #116
OCPBUGS-57862: Update operators list in ISOBuilder #117
OCPBUGS-57346: Bump iso-builder appliance dependency #114
NO-ISSUE: Enable ‘q’ and ‘c’ hotkeys for quit and configure network #107
OCPBUGS-57297: Update mtv-operator to version used in 4.19 catalog #111
ART-13079: append .0 to go.mod version #105
OCPBUGS-56934: Disable ESC key on checks page #102
OCPBUGS-56977: OVE isobuilder fails on CentOS Stream 9 due to missing… #103
OCPBUGS-56880: Log error from nmtui and change modal background #101
OCPBUGS-56546: ISOBuilder- Remove default password for nodes #96
AGENT-1195: bump appliance to 936210 #98
OCPBUGS-56223: Fix nmtui redirection after quit #93
OCPBUGS-56147: Add operator CRs post-install in OVE build script #94
OCPBUGS-56210: OVE builder: Remove RHEL9 image from additionalImages #91
OCPBUGS-56112: configure the channel for each OLM operators #89
OCPBUGS-55769: Use internal image registry #78
AGENT-1195: bump appliance image to 4042ba #86
OCPBUGS-55708: Include RHEL 9 guest image to support VM launches via … #84
Full changelog

apiserver-network-proxy

OCPBUGS-57685: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.20 #84
ART-13079: append .0 to go.mod version #78
Full changelog

aws-cloud-controller-manager

OCPCLOUD-2928: Merge https://github.com/kubernetes/cloud-provider-aws:master (b0e098d) into main #106
OCPBUGS-57684: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.20 #110
Full changelog

aws-cluster-api-controllers

OCPBUGS-60943, OCPBUGS-61040, OCPBUGS-61044: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.0 (dcfaef0) into main #553
OCPCLOUD-2919: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:main (645f38e) into main #565
NO-JIRA: Update OWNERS #561
OCPBUGS-59243, OCPBUGS-59244: UPSTREAM: 5590: Bump golog v1.2.5 #557
OCPBUGS-53003: Remove references to master branch #551
OCPBUGS-55947: Update manifests to remove reliance on v1beta1 admission registration #549
Full changelog

aws-ebs-csi-driver

STOR-2402: Rebase to upstream v1.45.0 for OCP 4.20 #289
OCPBUGS-57707: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.20 #288
ART-12521: update go mod dependency for konflux #285
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

STOR-2477: Correct efs single-zone storageclass #404
OCPBUGS-60655: Disable LUN stress test for azure-file #418
OCPBUGS-60464: Bump library-go to fix panic #417
STOR-2394: Bump all deps for 4.20 #408
STOR-2479: Add CredentialsRequest for the EFS node DaemonSet #389
STOR-2330: Add labels to subscribe openstack cinder and manila CSI driver controllers to NPs #409
OCPBUGS-57395: Remove stale conditions #406
OCPBUGS-58254: Bump library-go #405
STOR-2331: Add labels to subscribe SMB CSI driver operator and controller to NPs #400
STOR-2330: Add labels to subscribe Azure disk and file CSI driver controllers to NPs #396
OCPBUGS-57768: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.20 #399
OCPBUGS-57739: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.20 #398
OCPBUGS-57700: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.20 #397
OCPBUGS-57565: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.20 #394
STOR-2331: Add labels to subscribe AWS-EFS CSI driver operator to NPs #391
OCPBUGS-57680: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.20 #395
STOR-2477: create-efs-volume: add single-zone support #390
OCPBUGS-57545: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.20 #393
Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.20 #392
STOR-2330: Add labels to subscribe AWS-EBS CSI driver controller to NPs #387
NO-JIRA: create-efs-volume: print files to log as a fallback #388
NO-JIRA: Update openstack approvers #385
OCPBUGS-54975: Fix Cinder, Manila driver metrics #379
OCPBUGS-56128: openstack-cinder: Set –with-topology flag for node driver also #383
STOR-2408: Bump OLM metadata to 4.20 #382
Full changelog

aws-karpenter-provider-aws

OCPBUGS-57717: Updating aws-karpenter-provider-aws-container image to be consistent with ART for 4.20 #13
AUTOSCALE-259: migrate upstream karpenter-core dependency to downstream #12
Full changelog

aws-machine-controllers

OCPCLOUD-2935: Bump k8s dependencies to 1.33; go 1.24 #136
NO-JIRA: Update OWNERS #135
OCPBUGS-56849, OCPCLOUD-2985, OCPCLOUD-2986: Bump machine-api-operator to pull in authoritativeAPI fix #134
OCPBUGS-57724: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.20 #133
OCPBUGS-57581: fix: machineset annotation controller: guard on status authoritativeAPI #132
OCPCLOUD-2717: bump openshift/api #131
OCPBUGS-56487: fix: make machineset annotation controller respect paused condition #129
OCPBUGS-55720: Update machine-api-operator pkg with fixes #127
Full changelog

aws-pod-identity-webhook

OCPBUGS-57618: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.20 #204
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPCLOUD-2927: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (bbb513c) into main #143
OCPBUGS-57834: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART for 4.20 #147
OCPBUGS-57720: Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.20 #145
Full changelog

azure-cluster-api-controllers

NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.20.2 (2a4b30d) into master #345
NO-JIRA: Update OWNERS #344
OCPCLOUD-2920: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.20.1 (e707afb) into master #341
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.19.4 (99a359a) into master #338
OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #337
Full changelog

azure-disk-csi-driver

STOR-2405: Rebase to upstream v1.33.1 for OCP 4.20 #108
OCPBUGS-57579: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.20 #107
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #103
Full changelog

azure-file-csi-driver

STOR-2407: Rebase to upstream v1.33.3 for OCP 4.20 #99
OCPBUGS-57884: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.20 #98
OCPBUGS-54897: UPSTREAM: 2515: allow deleting cross-subscription snapshots #92
Full changelog

azure-kms-encryption-provider

ART-13079: append .0 to go.mod version #17
Full changelog

azure-machine-controllers

OCPCLOUD-2932: Bump 1.33 #160
NO-JIRA: Update OWNERS #161
OCPBUGS-56849, OCPCLOUD-2985, OCPCLOUD-2986: Bump machine-api-operator to pull in authoritativeAPI fix #159
OCPBUGS-57671: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.20 #158
OCPBUGS-55372: Fix regression on ASH with armcompute/v5 #155
OCPBUGS-56380: Fix failure when attempting to modify immutable availabilitySet #148
OCPBUGS-55372: Update virtualmachines service to armcompute/v5 SDK #141
Full changelog

azure-service-operator

NO-JIRA: Update OWNERS #10
OCPBUGS-57694: Updating ose-azure-service-operator-container image to be consistent with ART for 4.20 #9
Full changelog

azure-workload-identity-webhook

OCPBUGS-57692: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.20 #37
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-58307: Merge upstream #49
OCPBUGS-57555: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.20 #48
OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #44
Full changelog

baremetal-installer, installer, installer-artifacts

CORS-4044, CORS-4045, CORS-4046, CORS-4047, CORS-4048, CORS-4049, CORS-4050, CORS-4051: Add private dns zone section to GCP install config #9792
OCPBUGS-60949: Update the RHCOS 4.20 bootimage metadata #9916
OCPBUGS-60687: PowerVS: Add lon04 support #9905
SPLAT-2463: Added ability to configure CoresPerSocket #9912
CORS-3652: RHCOS Stream Marketplace Images #9329
OCPBUGS-60634: Added logic to clean up potential leftover spbm entity configs #9894
OCPBUGS-60600: node-joner ignore error if SSH key was not found #9908
CORS-4061: migrate AWS SDK to v2 in quota/aws #9890
CORS-4056: migrate AWS SDK to v2 in asset/machines/aws #9889
OCPBUGS-57364: custom-dns: Set PrivateZone and PublicZone to nil in the DNS manifest #9886
OCPBUGS-55499: Misleading error when confidentialCompute: Enabled #9848
OCPBUGS-60162: reject installation into byo vpc/subnets owned by another cluster #9883
OCPBUGS-60545: Azure: change LB and pubic IP skus to Standard #9898
AGENT-1205: Update agent-installer-ui tar path #9896
OCPBUGS-59104: Set kernel dual-stack arg for all platforms #9865
OCPBUGS-51299: Add default values for validation to kms keys #9781
OCPBUGS-53473: Validate clusterNetwork hostPrefix #9594
no-jira: dev docs - add rr capi debugging #9887
OCPBUGS-60197: PowerVS: config variables not honored #9877
CORS-4078: centralize v2 aws client constructions #9882
OCPBUGS-50517: [Nuanix] installer should add the shared category to the preloaded rhcos image PC object #9450
MGMT-21212: Enable dual-stack clusters with image-based installations #9847
OCPBUGS-60284: Upgrading Cluster-API-Provider-Nutanix version from 1.5.4 to 1.7.0 #9869
OCPBUGS-60240: baremetal: always set external v6 URL on dualstack #9874
CORS-4177: clusterapi: use default envtest timeouts #9871
CORS-4067: Add support for single zone NAT gateway #9753
CORS-4178: handle deleting AWS egress-only internet gateway #9873
OCPEDGE-1997: bump(ocp/api): pull in HighlyAvailableArbiter promotion #9870
AGENT-1205: Extract agent-tui during boot for interactive workflow #9828
SPLAT-2355: Added vSphere support for disk setup #9863
CORS-4083, CORS-4084, CORS-4085: Add Azure custom-dns support in Tech Preview #9861
OCPBUGS-59542: Generated Nutanix MachineSets for Autoscaling with Failure Domains #9864
no-jira: OWNERS: add splat team as approvers #9862
CORS-3992: skip dns zone validation with custom DNS #9859
no-jira: Bump openshift/api to get renamed Featuregates #9854
OCPEDGE-1994: bump(ocp/api): pull in updated DualReplica #9849
SPLAT-2295: Setup additional disks via machine configs #9706
OCPBUGS-59630: Update RHCOS 4.20 bootimage metadata to 9.6.20250701-0 #9844
no-jira: images: bump images to go 1.24 #9850
CORS-3916, CORS-3920: Use gcp custom endpoints in the installer #9535
OCPBUGS-59430: Fail install config validation when base domain is invalid #9840
OCPBUGS-59678: PowerVS Support VPC and TG ids #9818
OCPBUGS-57732: Catch gcp destroy cases where the operation is nil #9823
OCPBUGS-57527: Add descriptions back to the aws survey #9816
MGMT-20992: feat: update determineTopologies function #9815
OCPBUGS-59220: Refine check for supported SNO platforms to include IBMCloud #9836
no-jira: Revert “Merge pull request #9736 from barbacbd/CORS-4058” #9837
OKD-241: Use CentOS Stream 10 bootimages #9817
CORS-4062: Migrate endpoints in pkg/types/aws/platform.go to sdk v2 #9759
OCPBUGS-57202: pkg/asset/tls: extend ShortCertRotation certs validity to 2 hours #9820
CORS-4058: Remove AWS SDK V1 from destroy/aws #9736
CORS-4053: Migrate AWS SDK to v2 in cluster/aws #9762
CORS-4054: Migrate from SDK v1 to v2 in installconfig #9760
OCPBUGS-58352: Increase timeout on gcp wait for operation #9825
OSASINFRA-3238: Improve API and Ingress VIPs validation #9438
SPLAT-2294: Azure - add mpool datadisks #9810
OCPEDGE-1740: feat: add arbiter role support to ABI #9780
CORS-4060: Migrate AWS sdk to v2 in infrastructure #9764
OCPBUGS-18658, OCPBUGS-45256: Unify agent install-complete with installer #7678
OCPBUGS-57923: When AWS_PROFILE is invalid ask for credentials #9803
OCPBUGS-57812: Updating ose-installer-container image to be consistent with ART for 4.20 #9799
OCPBUGS-58216: allow to deploy single nodes with UPI #9763
OCPBUGS-57856: Updating ose-installer-artifacts-container image to be consistent with ART for 4.20 #9801
OCPBUGS-57822: Updating ose-baremetal-installer-container image to be consistent with ART for 4.20 #9800
OCPBUGS-41879: vSphere - if regions are the same cannot dup zones #9787
OCPBUGS-18510: Refactor removing loadbalancer in OpenStack. #9724
OCPBUGS-57803: MCO: consider custom AMI for edge compute machine pool #9798
OCPBUGS-57192: Checking for selected PE retrieved data and returning errors for missing values #9785
CORS-4059: migrate gather code AWS SDK v2 #9737
no-jira: Update Generated Files #9784
CORS-3796: Update CVO channel to latest #9790
CORS-3795: Updating the release image to 4.20 #9789
CORS-4057: migrate EC2 quota checking code AWS SDK v2 #9740
OCPBUGS-57535: vSphere - remove unit tests using nip.io #9793
OCPBUGS-57021: Use less permissive access for /var/lib/etcd for SNO #9769
CFE-1119: Removes instances of deprecated experimentalPropagateUserTags #8917
OCPBUGS-56658: Prompt User for AWS Creds when none are found #9751
CORS-3998: Remove base domain from metadata #9711
OCPBUGS-56616: pkg/types/validation: Validate all SSH public keys #9770
OCPBUGS-51299: Set default project and location for KMS key manifest #9767
AGENT-997: Internal dev docs for authentication-authorization #9224
OCPBUGS-57000: Revert “CORS-3883: Remove user-assigned identity from ARM template” #9766
SPLAT-2045: [vsphere] promote multi-nic to default #9493
no-jira: Bump CAPZ Version #9704
NO-JIRA: openstack docs: Fix type of clusterOSImageProperties #9754
OCPBUGS-54885: Validate agent diskEncryption fields #9674
OCPBUGS-54413: Make swift containers removal not fatal for UPI. #9728
OCPBUGS-56808: Remove configv1.GCPServiceEndpointNameTagManager references #9749
no-jira: add unit tests for vsphere VIPS/machinenetworks population #9744
OCPBUGS-56713: update the punctuation #9746
OCPBUGS-54487: Power VS: Provide detailed error when entered VPCName cannot be found #9634
CORS-4066: Remove the function to check if multiarch is enabled/allowed #9750
OCPBUGS-6508: Update Control Plane replica validation for Single Node OpenShift #9048
CORS-3682: log falsy conditions when CAPI infra/machine provisioning failed #9722
MGMT-20702, OCPBUGS-56601: Avoid duplicate machine networks #9743
OCPBUGS-55671: AWS Mutliarch feature gate is enabled by default #9729
OCPBUGS-55672: Remove MultiArchInstallGCP featuregate #9725
OCPBUGS-56645: Update RHCOS 4.20 bootimage metadata to 9.6.20250523-0 #9741
OCPBUGS-56008: Remove unnecessary validation #9739
OCPBUGS-56268: pkg/types/azure: remove SystemAssignedID docs #9717
no-jira: Update team osasinfra #9732
OCPBUGS-56008: don’t expect identity on ASH #9733
OCPBUGS-56008: default Azure to create VM user-assigned identities #9718
NO-JIRA: add the instance types which test PASS #9723
OCPBUGS-55905: Update RHCOS 4.20 bootimage metadata to 9.6.20250513-0 #9720
OCPBUGS-56262: Added better logging for vSphere destroy #9716
OCPBUGS-56079: apply fixes for yaml-lint errors #9708
OCPBUGS-53107: Set appropriate KillMode for systemd services #9562
OCPBUGS-55683: Pre-create password files for agent installer OVE #9679
OCPEDGE-1673: [TNF] Render secret manifests from fencing credentials block. #9635
OCPBUGS-47719: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9693
OCPBUGS-55817: add Lsv4 and Lasv4 series as tested #9696
OCPBUGS-55772: Add support for Azure TDX confidential VM type #9691
no-jira: add jcpowermac to nutanix review/approve groups #9697
CORS-3960, OCPBUGS-55952: Remove Terraform Build Artifacts #9667
no-jira: add PeaceRebel (Bipin) to coreos approvers & reviewers list #9687
OCPBUGS-54502: ensure ctrplane nodes can access bootstrap MCS #9689
OCPBUGS-54566: Apply defaults then validate confidentialCompute #9637
OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
no-jira: fixes to get shellcheck to pass #9669
OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
OCPEDGE-1707: Add Disable Certificate Verification API #9640
no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-machine-controllers

OCPBUGS-57693: Updating baremetal-machine-controller-container image to be consistent with ART for 4.20 #236
Full changelog

baremetal-operator

METAL-1380: Sync july 24 #427
METAL-1238: Add annotation to install metal3 CRDs in hypershift hosted clusters #426
OCPBUGS-57472: merge from upstream #424
OCPBUGS-54634: Merge upstream #419
OCPBUGS-57817: Updating ose-baremetal-operator-container image to be consistent with ART for 4.20 #422
OCPBUGS-54629, OCPBUGS-54965: merge upstream #418
OCPBUGS-55717: Merge upstream #414
Full changelog

baremetal-runtimecfg

CORS-4175: Extend in-cluster DNS support to Azure #366
no-jira: Bump openshift/api version to bring updates to AzurePlatformStatus #367
NO-ISSUE: Update OWNERS #353
OCPBUGS-57607: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.20 #350
MGMT-20739: Add control-plane-topology as an arg to dynkeepalived and temporarily add a dummy backend when installing TNF/TNA with assisted-installer #348
OCPBUGS-55971: Re-add ENABLE_NODEIP_DEBUG env var #347
OCPBUGS-57065: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #349
NO-ISSUE: Add emy as reviewer #346
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-60989: pkg/cli/admin/release/info: Mention elided first-parent, non-merge commits #2086
OCPBUGS-60877: pkg/cli/admin/inspectalerts: Pass through –certificate-authority, etc. #2083
NO-JIRA: Remove mentioning about IRC channel in README #2082
OTA-1601: Better the Updating Cluster Operators table #2077
OCPBUGS-58393: oc login: Preserve ExecProvider on oc login -u #2075
OCPBUGS-60281: Fix panic in oc describe templateinstance when Secret is nil #2073
OTA-1560: pkg/cli/admin/upgrade: Promote ‘recommend’ to general availability #2076
NO-JIRA: Update containers/image and docker versions #2067
OTA-1600: pkg/cli/admin/upgrade/recommend: Don’t error on unaccepted issues when the feature gate is off #2069
CNTRLPLANE-1054: Update k8s dependencies to 1.33 with bumping the other dependencies #2058
OCPBUGS-50992: Help with must-gather scheduling through suggesting preferance of nodes #2060
Revert “WRKLDS-1713: Remove schema1” #2059
OTA-1575: pkg/cli/admin/upgrade/recommend: “accepted … via ConditionalUpdateRisk” #2040
CORENET-5412: adm, inspect, ns: Collect UserDefinedNetwork CRs #2011
OCPNODE-3426: Introduce a dedicated Pod label for the purpose of identifying debug pods #2055
NO-JIRA: Simplify TarEntryCallback #2047
OCPBUGS-55048: Return error in case of error #2049
OCPSTRAT-2147: Upgrade to go 1.24 and OCP 4.20 #2046
OCPBUGS-57635: Revert “OCPBUGS-56691: Rely on overall available disk space of the mounted volume” #2042
OCPBUGS-56691: Rely on overall available disk space of the mounted volume #2028
WRKLDS-1713: Remove schema1 #2037
WRKLDS-1716: oc image serve: Remove as deprecated #2033
OTA-1539: pkg/cli/admin/upgrade/recommend: Add a –quiet option #2023
OTA-1532: pkg/cli/admin/upgrade/recommend: New, feature-gated –accept #2017
OCPBUGS-49897: avoid transfering permissions when copying artifacts from node-joiner pod #2031
OCPBUGS-56598: pkg/cli/admin/mustgather: Include ClusterVersion in fallback inspect #2025
OCPBUGS-55220: Replace colon to hypen in the filename while extracting tar on Windows #2022
NO-JIRA: OCPBUGS-46604: Clarify behavior of since-time flag in oc adm must-gather command #2019
WRKLDS-1103: Adding sos.conf file for default sos config into the tools image #2003
NO-JIRA: make ‘oc status’ compatible with bare kube #1947
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cloud-credential-operator

NO-JIRA: docs: update sts migration to cause less service interruption #903
NO-JIRA: Add a badge in the repo’s README file to auto-refresh the wiki weekly. #898
OCPBUGS-34993: ccoctl azure dnszone-resource-group-name now optional #897
OCPBUGS-59889: Add retry logic for Azure federated identity credential creation #878
CCO-641: update dependencies #887
NO-JIRA: Drop lleshchi from OWNERS #889
OCPBUGS-43783: openstack: Set annotation even when credentials mode is unset #873
OCPBUGS-59402: github.com/golang/glog v1.2.5 #888
CCO-682: Update to k8s v0.33.2 #885
OCPBUGS-59511: add read only filesystem #884
OCPBUGS-53454: ccoctl: only add owned tag to azure resources on create #876
CCO-681: Add network policies with default deny #871
OCPBUGS-57840: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.20 #877
CCO-649: make update-go-dependencies to also update indirects #875
OCPBUGS-57296: Remove duplicate cluster role rules #864
OCPBUGS-57349: Use constant for first parameter of fmt.Errorf #874
CCO-645: Add new clock parameter when using library-go:NewKubeRecorder #872
OCPBUGS-55777: Add missing Role, RoleBinding #860
OCPBUGS-56607: Azure: resolve nil pointer exception when role assignment exists #861
OCPBUGS-53429: Render: configure proxy on bootstrap static pod #855
OCPBUGS-55777: Sync OpenStack CA Bundles from legacy location #850
OCPBUGS-54829: golang.org/x/net v0.38.0 #851
Full changelog

cloud-network-config-controller

CORENET-5958: Rebase k8s to 1.33 #176
NO-JIRA: Update OWNERS #177
OCPBUGS-57778: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.20 #175
Full changelog

cluster-authentication-operator

NO-JIRA: Bump library go rm co dep #782
OCPBUGS-59909: Don’t cache server errors when checking for password grant support #781
CNTRLPLANE-5: Wire a feature-gates config observer for oauth-apiserver. #773
AUTH-543: OIDC/OAuth resource configuration #740
AUTH-543, OCPBUGS-57808: (deps): Bump to Go 1.24 and k8s 1.33 #775
CNTRLPLANE-333: Add generation logic for new uid and extra fields in the Authentication CR #763
NO-JIRA: add logging when rendering bootstrap manifests #770
CNTRLPLANE-939: test/e2e-oidc: poll test preconditions for a short time instead of checking once #769
CNTRLPLANE-939: Create separate make rule for e2e oidc tests #768
AUTH-544: Extend e2e test to leverage new functionality #737
Full changelog

cluster-autoscaler

AUTOSCALE-242, AUTOSCALE-244: 1.33.0 upstream rebase #365
OCPBUGS-54231: revert openshift replica fix #369
AUTOSCALE-284: Rename Cluster Autoscaler component in OWNERS file #360
OCPBUGS-57710: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.20 #357
Full changelog

cluster-autoscaler-operator

AUTOSCALE-244: Allow cluster-operator service account to patch machinesets/scale subresource #352
AUTOSCALE-244: Prepare for 4.20 and fix missing volumeattachments rbac #351
AUTOSCALE-125: newPodScaleUpDelay field for CA #349
AUTOSCALE-284: Rename Cluster Autoscaler component in OWNERS file #347
NO-JIRA: Remove tombstones yamls #348
OCPBUGS-57621: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.20 #346
OCPBUGS-42875: mitigate operator Degraded status flapping #344
OCPBUGS-57041: update cluster provider type early #343
NO-JIRA: Add autoscale members to OWNERS file #345
Full changelog

cluster-baremetal-operator

METAL-1546: Set privileged to true for ironic-proxy container so it works with ironic-image custom directories #502
METAL-1508: Change deprecated pointer to ptr #495
OCPBUGS-53392: Remove webhookport (9447) as HostPort #496
METAL-1238: Enable CBO to run on hosted clusters #494
OCPBUGS-57419: Do not log “new CO status” unnecessarily #481
Revert “METAL-1404: Add annotation to enable CBO install via CVO in Hosted Clusters” #491
OCPBUGS-57591: Golang 1.24 and openshift 4.20 #488
METAL-1404: Add annotation to enable CBO install via CVO in Hosted Clusters #464
METAL-1437: Add (unsupported) overrides for the ironic agent image #483
OCPBUGS-56723: Treat ResourceNotFound as non-fatal #482
NO-ISSUE: Remove inactive OWNERS #480
OCPBUGS-54244: no default for provisioningIP when provisioningInterface is set #476
OCPBUGS-54965: Inform BMO when provisioning network is disabled #473
NO-ISSUE: Makefile: don’t run all linters when running unit tests #475
NO-ISSUE: Silence a bogus error with newer golangci-lint #477
OCPBUGS-52483: Allow provisioningIP when network disabled #466
Full changelog

cluster-bootstrap

OCPBUGS-57533: Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.20 #117
Full changelog

cluster-capi-controllers

NO-JIRA: Update OWNERS #244
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api:v1.10.2 (5255664) into master #240
OCPCLOUD-2917: Merge https://github.com/kubernetes-sigs/cluster-api:v1.10.1 (647a1b7) into master #238
OCPBUGS-55947: Regenerate manifests to drop v1beta1 admissionregistration usage #236
Full changelog

cluster-capi-operator

OCPCLOUD-2871: Machine conversion for the delete-machine annotation and unit tests #347
OCPCLOUD-2711: Implement VAP to prevent usage of unsupported AWSMachineSpec fields #333
NO-JIRA: lint: Replace tenv with usetesting #346
OSASINFRA-3690, OSASINFRA-3691: Add OpenStack CAPI-MAPI translation layer #188
NO-JIRA: Improve ergonomics of running tests #342
OCPBUGS-57195: Fix infra machine template deletion #326
OCPCLOUD-2992: migration e2e for creating machine with authoritativeAPI ClusterAPI #320
OCPCLOUD-2566: Adds MAPI Machine VAP and test suites #321
OCPCLOUD-2916: Bump to CAPI v1.10, k8s v1.33, go 1.24 #341
NO-JIRA: Get openshift/api directory from packages #339
OCPCLOUD-2979: ingress network policy for metrics #325
OCPCLOUD-2992: migration e2e for creating machinesets #330
NO-JIRA: Update OWNERS #335
OCPBUGS-56805, OCPBUGS-58880: fix: clusteroperator: do not update status.relatedobjects if only order changed #331
NO-JIRA: migration controllers: add comment for authority propagation logic #327
OCPCLOUD-2992: add machineset migration e2e utils #323
NO-JIRA: Remove manifest for validating-webhook-configuration #324
OCPBUGS-57563: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.20 #319
OCPBUGS-56010: Fix compareMAPIMachineSets function #315
OCPBUGS-54705: mapi2capi: Create new machine template when changing MAPI providerSpec #295
OCPBUGS-57013: Fix reset sync status in migration controllers #313
NO-JIRA: Assorted cleanups #312
OCPBUGS-57040: Fix failure to retry unpause #309
OCPBUGS-56604: fix: ensure CAPI machineset is created not paused when authoritative #299
OCPBUGS-56709: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #301
OCPBUGS-56487: fix: watch CAPI resources in the migration controllers #300
OCPCLOUD-2943: MachineSet deletion logic #286
OCPCLOUD-2893: Add related objects to must-gather config #267
OCPBUGS-55985: fix: machine: propagate non-authoritative deletion #290
OCPBUGS-55947: Should not use v1beta1 of the AdmissionRegistration API group #289
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-59251: Default cloud.conf if no configmap is found #404
OCPBUGS-53300: Adds service for cloud-controller-manager #399
OCPCLOUD-2940: Update dependencies for Kubernetes 1.33 #396
OCPBUGS-53300: Update service selector to match deployment label #398
NO-JIRA: Update OWNERS #397
OCPBUGS-57613: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.20 #392
OCPCLOUD-2978: add deny all network policy #395
NO-JIRA: Remove old deployment which is deleted #393
OCPBUGS-56508: Fix config-sync-controller logging #389
Full changelog

cluster-config-api

AGENT-1262: set NoRegistryClusterOperations as techPreviewNoUpgrade #2432
machineconfiguration/OWNERS: Drop me #2446
OTA-923: Promote ClusterVersionOperatorConfiguration to TechPreview #2457
OCPNODE-3121: Graduate ImageVolume to GA #2453
STOR-2549: Move StoragePerformantSecurityPolicy GA #2456
OTA-1580: Promote UpgradeStatus to Default #2418
CORS-4184: Add STS IAMCredentials and OAuth Service for GCP Endpoint Overrides #2444
OWNERS: update approvers/reviewers #2455
OCPBUGS-58212 Remove InsightsRuntimeExtractor Feature gate #2419
OCPNODE-3187: Promote SigstoreVerificatoin to Default #2340
OCPBUGS-55665: Remove featuregate ChunkSizeMib #2438
Fix feature promotion check single node variant name #2445
OCPBUGS-54287: MachineOSConfig name should match MachineConfigPool #2399
MCO-1744: Add knobs to allow irreconcilable changes #2433
Update KAL to support new guidance on required and optional fields #2440
Remove OnClusterBuild fg #2437
CNTRLPLANE-368: improve OIDC field validations for Authentication resources #2409
STOR-2481: Promote SELinuxMount feature gate #2426
Add new ImageBuildDegraded status option for MCO #2439
OCPEDGE-1945: feat: promote HighlyAvailableArbiter feature to default #2401
OCPNODE-3006: add back SigstoreImageVerification to techPreview #2406
MCO-1759: Add NonReconcilableMC Feature Gate #2429
Update crd-schema.json to release 1.33 branch #2436
Update KAL to include omitzero functionality on optional fields #2431
OCPNODE-3372: Update defaultRuntime doc to show options and set default to crun #2370
CORS-4155: Add Feature gate and update Infrastructure CR for Azure Cluster Hosted DNS #2404
SPLAT-2346: Moving VSphereMultiDisk FeatureGate to GA #2428
features: add installer replacement feature gates #2423
Remove “techpreview” filter on verify job #2422
Update KAL to latest #2420
OCPNODE-3006: Add clusterimgepolicy/imagepolicy to payload #2384
AGENT-1262: add NoRegistryClusterOperations feature gate #2417
OCPBUGS-55661: Remove HardwareSpeed featuregate #2416
OCPNODE-3121: Make FeatureGateImageVolume TechPreview #2403
OCPEDGE-1875: feat: promote tnf from devpreview to techpreview #2413
OCPBUGS-55668: ipam, virt: remove the PersistentIPsForVirt FG #2309
OCPBUGS-59574: Revert #2398 “Revert \“Revert \“CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload\”\“” #2414
STOR-2462: Add ExternalSnapshotMetadata FeatureGate #2381
Revert “Revert “CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload”” #2398
CONSOLE-4665: Disable serving of old v1alpha1 CRD version #2411
Fix kubebuilder tools/envtest index for v1.33.2 (add v prefix) #2410
makefile: bump-publish-kubebuilder-tools to 1.33.2 #2408
envtest-releases: add 1.33.2 to index #2407
Monitoring API: Add AlertmanagerMainConfig #2148
OAPE-232/OCPBUGS-55653: Remove GCPLabelsTags featuregate #2372
CNTRLPLANE-371: Update to Kubernetes v1.33.2 #2252
Disable schema checker overlap with KAL #2397
OCPBUGS-55674: remove AWSEFSDriverVolumeMetrics featuregate #2395
Register v1 (cluster)imagepolicy #2394
Update KAL and GolangCI-Lint to v2 #2321
Enable MutatingAdmissionPolicy in Dev/TechPreview #2385
SPLAT-2299: FeatureGate - MultiDiskSetup #2388
Revert “CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload” #2389
OCPBUGS-55465: Drop on-by-default ValidatingAdmissionPolicy featuregate #2306
STOR-2370: Add featuregates for storage performant security policies #2382
CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload #2138
OCPBUGS-34194: Modify api description for join, transit and masquerade subnets #2320
OCPBUGS-57828: Updating ose-cluster-config-api-container image to be consistent with ART for 4.20 #2375
NO-JIRA: Fix typos in the doc about clusterversion.spec.channel #2371
MCO-1524: Promote PinnedImageSet feature gate to default feature set #2269
MCO-1064: Promote MachineConfigNode feature gate to default #2288
Adding feature gate for image mode status reporting #2373
OCPNODE-3008: Add v1 type ClusterImagePolicy and ImagePolicy #2310
OCPBUGS-55663: Remove NodeDisruptionPolicy featuregate #2359
Register MutatingAdmissionPolicy in feature gates #2349
WRKLDS-1676: OCM config: Remove obsolete fields #2364
OCPBUGS-55652: Remove PrivateHostedZoneAWS feature gate #2338
CNTRLPLANE-337: authentication: oidc: make username claim mapping required #2352
NO-ISSUE: Remove redundant image stream #2358
Promote RouteAdvertisements feature gate to default feature set #2225
MCO-1671: Add feature gates for azure boot image updates & skew management #2353
SPLAT-2137: FG for Service Type LB NLB with Security Group #2354
OCPBUGS-56725: Add max length validation for apiserver namedCertificates #2342
Remove DataGather state print column #2350
OCPBUGS-44462: Remove PlatformOperators from feature list #2333
CORENET-6004: Add PreconfiguredUDNAddresses featuregate #2348
OCPCLOUD-2717: Deprecate DeleteOnTermination for EBS volumes #2341
SPLAT-2175: introduce AzureDedicatedHosts feature gate #2293
OCPBUGS-52556: Revert v1alpha1 removal #2343
SPLAT-2044: [vsphere] promote multi-nic to default #2204
OCPBUGS-55671: Remove MultiArchInstallAWS featuregate #2336
CNTRLPLANE-371: Remove SELinuxChangePolicy gate #2334
OCPNODE-3262: promote featuregate SigstoreImageVerificationPKI to techpreview #2328
OCPBUGS-55672: Remove MultiArchInstallGCP featuregate #2332
CORS-4041: Remove the TagManager from the GCP Custom Endpoints #2323
SPLAT-2213: Added vSphere mixed node env feature gate #2326
OCPBUGS-56382: Fix validation for Resource field in MOSB API #2327
OPRUN-3860: Add NewOLMWebhookProviderOpenshiftServiceCA feature gate #2324
OCPBUGS-55664: remove VSphereDriverConfiguration feature gate #2319
CNTRLPLANE-367: Update Authentication API GoDoc for OIDC-related fields #2314
OCPNODE-2557, OCPNODE-3225: features: set user namespace features on by default #2305
OCPBUGS-55662: Drop BareMetalLoadBalancer feature gate #2312
CCXDEV-14850: align insights DataGather with config #2248
Remove upstream on-by-default cloud feature gates (CloudDualStackNodeIPs, DisableKubeletCloudCredentialProviders) #2249
SPLAT-2168: introduce AWSDedicatedHosts feature gate #2291
OCPBUGS-55666: Remove MachineAPIProviderOpenStack feature gate #2307
MCO-1657: FeatureGate for Bootimage updates for the vSphere platform #2301
SPLAT-2072: Removed VSphereMultiVCenters feature gate #2231
SPLAT-2158: Azure Multi Disk feature gate #2289
README: Add criteria for featuregate test result windows and flake handling #2302
Full changelog

cluster-config-operator

CNTRLPLANE-1311: set up openshift-tests-extension of cluster-config-operator and add a sanity test #448
OCPEDGE-1970: bump(ocp/api): pull in HighlyAvailableArbiter promotion #446
OCPEDGE-1876: bump(o/api,k8s/api,go-version) #445
OCPBUGS-57187: featuregates: always complete featuregates when feature set is CustomNoUpgrade #440
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-52448: Remove gathering of failure domains from machine sets #356
OCPBUGS-59919: Prevent activation of CPMS with deletionTimestamp #364
OCPBUGS-59919: Fix authoritativeAPI recreate loop #365
OCPCLOUD-2937: Bump k8s dependencies to 1.33; go 1.24 #360
NO-JIRA: Update OWNERS #361
Full changelog

cluster-csi-snapshot-controller-operator

CNTRLPLANE-385: enable readonly root filesystem #242
OCPBUGS-60242: Use protobuf when connecting to kube client #217
STOR-2465: Add ExternalSnapshotMetadata CRD #239
STOR-2394: Bump all deps for 4.20 #240
STOR-2340: Subscribe to Network Policies for csi-snapshot-controller + operator #238
OCPBUGS-57655: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.20 #237
Full changelog

cluster-dns-operator

OCPBUGS-59781: Read only root filesystem #445
OCPBUGS-59781: Read only root filesystem #439
NO-JIRA: Add rikatz to OWNERS #442
OCPBUGS-57704: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.20 #438
Full changelog

cluster-etcd-operator

OCPBUGS-60941: add individual context to the health check #1474
OCPBUGS-60237: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1471
OCPBUGS-60522: Set terminationMessagePolicy to FallbackToLogsOnError on TNF job pods #1468
OCPBUGS-60547: Revert “Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace” #1469
NO-JIRA: Add more unit tests for JobController #1459
OCPEDGE-1998: TNF: Use pcmk_delay_base on 1st fence device to prevent fencing races #1463
OCPBUGS-60237: Vendor latest mixin, including additional and modified alerts for etcdDatabaseQuotaLowSpace #1464
NO-JIRA: hack/generate.sh provides helpful errors when missing tools #1465
NO-JIRA: create dedicated cluster-wide informer #1457
ETCD-590: start to refactor the probe injection #1456
OCPBUGS-57859: Updating cluster-etcd-operator-container image to be consistent with ART for 4.20 #1452
NO-JIRA: Migrate bindata to go:embed #1445
OCPBUGS-44570: add missing informer syncs #1449
NO-JIRA: Update owners file #1451
OCPBUGS-50488: add missing ports to svc and pod spec #1444
OCPBUGS-55404: fix ordering on bootstrap IP selection #1443
OCPBUGS-58294: Use 1 pod manifest only, set fields dynamically, deduplicate job creation #1439
OCPBUGS-57372: Wait for 2 cp nodes before starting TNF jobs #1431
CNTRLPLANE-806: Explicitly use podman-etcd from two-node-ha extension #1438
CNTRLPLANE-805: Add TNF pacemaker fencing setup #1421
OCPBUGS-57779: feat: update logic to list arbiter nodes #1435
OCPEDGE-1920: Comply with OCP pod standards for TNF jobs #1430
NO-JIRA: remove grafana-dashboard-etcd #1429
OCPBUGS-56199: increase tnf job timeouts #1426
CNTRLPLANE-340: Issue shorter certs when ShortCertRotation feature gate is set #1315
OCPBUGS-55757: adjust alerts according to platform #1422
OCPBUGS-55111: Remove ‘meta’ keyword from pcs resource create command #1417
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

OCPBUGS-59734: fix(azure): resolve credential caching issues around UAMI support #1238
OSASINFRA-3756: Add support for token-based authentication in clouds.yaml configuration file #1221
OCPBUGS-58424: mount /etc/pki/ca-trust/extracted/pem/ as empty dir #1239
NO-JIRA: Set ownership annotation for image-registry-ca CA bundle #1225
OCPBUGS-57577: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.20 #1226
OCPSTRAT-1076: Add readonlyRootFilesystem #1215
OCPBUGS-56606: bump github.com/golang-jwt/jwt #1212
OCPBUGS-56361: bump golang.org/x/oauth2 to the latest version #1206
Full changelog

cluster-ingress-operator

OCPBUGS-53432: deflake TestIngressControllerCustomEndpoints by proper waiting for CCM to be ready #1267
OCPBUGS-59139: Increase assertExpectedDNSRecords timeouts #1271
NE-2066: Set degraded=true when OSSM 3 can’t be installed #1268
OCPBUGS-60620: e2e: Deflake tests by using ReplicaSet for test workload #1262
OCPBUGS-54966: Improve detection of missing DNSRecord for Gateway #1212
OCPBUGS-60302: e2e - Reduce flakiness in testGatewayAPIResourcesProtection #1265
NE-2096: Bump to OSSM 3.1.0 and Istio 1.26.2 #1257
NO-JIRA: Add rikatz to OWNERS #1259
OCPBUGS-59894: Update GatewayAPI test to check if deployment has 1 or more pod #1250
NE-2108: docs - correct Istio version format in ossm-overrides.md #1253
NE-2108: Add OSSM channel and version override annotations #1246
NE-2104: desiredIstio: Enable GIE if InferencePool found #1245
OCPBUGS-59839: desiredIstio: Delete trustBundleName #1243
NE-2022: Bump to OSSM 3.0.1 and Istio 1.24.4 #1227
OCPBUGS-58358: desiredIstio: Do not enable a default PDB #1240
OCPBUGS-57728: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.20 #1236
OCPBUGS-55652: Removed PrivateHostedZoneAWS from component #1230
OCPBUGS-54745: status: Conditionally add CRDs to relatedObjects #1217
OCPBUGS-55317: Check capabilities before watching OLM resource #1232
Full changelog

cluster-kube-apiserver-operator

Revert “OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry” #1907
OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry #1870
CNTRLPLANE-1248: Add README to test extension #1904
OCPBUGS-60628: certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set #1900
CNTRLPLANE-1248: Standardized scaffolding for tests extension #1899
RFE-4153: enabled readonly filesystem #1864
Revert “Revert “OCPBUGS-56551: certregenerationcontroller: start configInformers again”” #1891
CNTRLPLANE-1248: set up openshift-tests-extension and add a sanity test #1892
OCPBUGS-55217: Optimistically update Kube Server and Client CA bundles #1812
OCPBUGS-59527: certrotationcontroller: extend node-system-admin-signer lifetime #1872
OCPBUGS-59626: operator: don’t react to events all namespaces #1874
OCPNODE-2559: SCC: add nested-podman and restricted-v3 #1847
NO-JIRA: Add negative tests of GOAWAY-chance #1882
OCPBUGS-44842: Set not-before/not-after annotations #1873
OCPBUGS-50489: Add missing service ports to apiserver service #1875
OCPBUGS-58232: Don’t wait for 2 etcd members when the cluster is TNF installed with assisted-installer #1866
OCPBUGS-43521: Set goaway chance to 0.001 #1863
NO-JIRA: Update the deprecated API usage alerts for 1.33. #1871
Revert “OCPBUGS-56551: certregenerationcontroller: start configInformers again” #1869
CNTRLPLANE-371: Update to Kubernetes v1.33.2 #1849
OCPBUGS-57811: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.20 #1865
OCPBUGS-58158: Enable watch termination grace period #1862
NO-JIRA: Enable watch termination grace period #1846
OCPBUGS-56551: certregenerationcontroller: start configInformers again #1853
OCPBUGS-55465: Stop serving admissionregistration.k8s.io/v1beta1. #1836
CNTRLPLANE-79: Disable oauth admission plugins #1810
NO-JIRA: remove unused yaml #1856
NO-JIRA: Enable MutatingAdmissionPolicy group version #1854
NO-JIRA: Use new PSS annotation #1833
OCPBUGS-55013: SCC: add hostmount-anyuid-v2 #1834
OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects - reapply #1831
OCPBUGS-52466: bump library-go to bring in updated audit policies #1837
OCPBUGS-55274: Change validity / refresh for some certs which should not be affected by dev cycle rotation change #1832
Full changelog

cluster-kube-controller-manager-operator

CNTRLPLANE-1275: Add JUnit reporter configuration and README for OTE #863
CNTRLPLANE-1275: set up openshift-tests-extension and add a sanity test #859
OCPBUGS-60473: Optimistically update Kube Server and Client CA bundles #854
RFE-4154: Remove readOnlyRootFilesystem from KCM container #856
NO-JIRA: targetconfigcontroller: set description for csr-controller-ca #851
OCPBUGS-53290: Missing endpoint slices for open ports the operator uses #848
RFE-4154: Fix readonly filesystem error when kcm trying to mkdir on /etc/kubern… #847
CNTRLPLANE-371: Update Kubernetes to v1.33.2 #840
Revert “Revert “CNTRLPLANE-343: certrotationcontroller: use minutes instead of days when FeatureShortCertRotation is enabled”” #843
Revert “CNTRLPLANE-343: certrotationcontroller: use minutes instead of days when FeatureShortCertRotation is enabled” #842
CNTRLPLANE-343: certrotationcontroller: use minutes instead of days when FeatureShortCertRotation is enabled #817
WRKLDS-954: pkg/operator: Remove expired conditional resources #839
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-kube-scheduler-operator

OCPSTRAT-2001: Add readOnlyRootFilesystem to kube-scheduler-operator #568
OCPSTRAT-2001: Add readonlyRootFilesystem #564
CNTRLPLANE-371: Update to Kubernetes v1.33.2 #562
OCPBUGS-57855: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.20 #566
OCPNODE-3192: enable the scheduler plugin if the feature gate DynamicResourceAllocation is enabled #561
Full changelog

cluster-kube-storage-version-migrator-operator

CNTRLPLANE-1306: set up openshift-tests-extension and add a sanity test #126
OCPBUGS-57807: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.20 #124
Full changelog

cluster-machine-approver

NO-JIRA: Fix some lints and nits #273
OCPCLOUD-2939: Bump k8s 1.33 #272
NO-JIRA: Update OWNERS #274
OCPBUGS-57610: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.20 #271
OCPBUGS-19856: Improve log message when searching for node by InternalDNS #269
No-Jira: ignore test file csr_check_test.go #270
Full changelog

cluster-monitoring-operator

NO-JIRA: [bot] Synchronize versions of the downstream components #2654
NO-JIRA: chore: drop check for AlertmanagerV1 #2650
OCPBUGS-56158: Bump prometheus-operator to v0.85.0 #2652
OCPBUGS-34568, OCPBUGS-35095, OCPBUGS-60689, OCPBUGS-60691, OCPBUGS-60692: non-HA alert cases #2630
OCPBUGS-58475: Enforce secure TLS settings in CMO server #2647
NO-JIRA: [bot] Synchronize versions of the downstream components #2642
MON-4312: Adding new accelerator to the accelerator configmap #2636
MON-4318: Add debug image manifest to CMO #2623
OCPBUGS-60221: remove managed_cluster from reserved external labels #2641
NO-JIRA: Use label matchers for Rules API in prom-label-proxy #2640
NO-JIRA: [bot] Synchronize versions of the downstream components #2639
NO-JIRA: [bot] Synchronize versions of the downstream components #2620
MON-4299: chore(thanos): replace CLI args that will disappear in future versions #2626
OCPBUGS-58475: Enforce secure TLS settings in CMO #2618
OCPBUGS-57215: operator: increase wait time till degraded to max 4 times 5m #2624
MON-4255: Bump prometheus-operator dependencies to v0.84.0 #2619
MON-4255: Bump prometheus-operator to v0.83 #2614
OCPBUGS-57561: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.20 #2611
MON-4288: set up openshift-tests-extension and add a sanity test #2616
MON-4282: Multi-tenant support for KSM’s CRS #2595
NO-JIRA: [bot] Synchronize versions of the downstream components #2615
OCPBUGS-58427: pkg/manifests: don’t reset annotations for metrics client CA #2612
OCPBUGS-57184: chore(alerts): adjust PrometheusPossibleNarrowSelectors description and add link to to-be-added runbook #2608
NO-JIRA: [bot] Synchronize versions of the downstream components #2607
NO-JIRA: [bot] Synchronize versions of the downstream components #2606
OCPBUGS-18282: provide more context in externalLabels unmarshalling error #2605
NO-JIRA: metrics-client-ca: set owner annotation #2602
OCPBUGS-18282: prevent use of reserved labels keys in Prometheus externalLabels #2604
MON-4242: chore(metrics-server): allow setting log verbosity #2599
NO-JIRA: [bot] Synchronize versions of the downstream components #2603
OCPBUGS-33691: mixin: longer rate interval for Alertmanager[Cluster]FailedToSendAlerts #2598
NO-JIRA: [bot] Synchronize versions of the downstream components #2600
MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2549
Full changelog

cluster-network-operator

OCPBUGS-57815: Updating cluster-network-operator-container image to be consistent with ART for 4.20 #2728
CORENET-6092, CORENET-6130, CORENET-6261: Implement PreconfiguredUDNAddresses API changes #2743
MGMT-21485: Enable dpu-host mode that matches DPF requirements #2778
CORENET-6276: Use priorityClass from HostedControlPlane for OVN and NNI #2769
CORENET-6290: Restrict access to mounted secrets in ovnkube-control-plane #2774
OCPBUGS-55962: Allow overriding OVN-Kubernetes configuration #2752
OCPBUGS-60264: Fix multus webhook match condition for spec changes #2772
MGMT-20706: fix DPU host mode support for OVN templates #2740
CORENET-6279: ovn-k, virt: update IPAMClaim CRD #2770
CORENET-6247: Set runAsUser for ovnkube-control-plane #2757
CORENET-5957: Rebase k8s to 1.33 #2723
NO-JIRA: Update CNO reviewers/approvers #2756
CORENET-6228: Allow network-node-identity to be enabled for IBMCloud PlatformType #2755
NO-JIRA: remove PersistentIPsForVirt FG #2759
CORENET-6127: ovn-k: Enable OVN-K feature when PreconfiguredUDNAddresses is enabled #2734
OCPBUGS-59134, OCPBUGS-59135: Annotate whereabouts-controller #2749
NO-JIRA: deprecate exportloopref #2750
CORENET-5881: Reconfigure NBDB for route advertisements in LGW #2735
OCPBUGS-58448: fg, virt: remove FeatureGatePersistentIPsForVirtualization #2737
OCPBUGS-58155: CNO must skip watching IngressController if Ingress capability is disabled in HyperShift #2731
OCPBUGS-57643: Add release version annotation to whereabouts-controller/whereabouts-token-watcher #2727
OCPBUGS-55763: stop frr from listening for incoming connection in the bgp daemon #2708
CNF-18237: Align frrk8s manifests to upstream #2730
CNF-18236: FRRK8s webhook: webhook liveness / readiness from metrics to webhook #2716
NO-JIRA: remove unused clusterrolebinding default-account-cluster-network-operator #2725
OCPBUGS-56086: Validate NAD name and spec only in multus admission controller #2718
CORENET-5704: Consume latest vendoring from ocp api repo #2720
OCPBUGS-56878: whereabouts-config is a reserved name for user interaction. #2707
CNTRLPLANE-341: Issue shorter certificates when ShortRotation featuregate is enabled #2556
OCPBUGS-56051: Configure the terminationMessagePolicy for all containers deployed in HyperShift #2709
OCPBUGS-51093, OCPBUGS-55157: Pass ‘–gateway-mode’ flag for ovnkube-cluster-manager #2696
OCPBUGS-55488: Remove environment variables related to ARO HCP MIv2 for CNO #2686
Full changelog

cluster-node-tuning-operator

OCPBUGS-41219: Only enable timer.migration on RT kernel (#1384) #1384
OCPBUGS-60838: e2e: arm: add validation tests for hugepages with 4k and 64k kernelPageSize (#1363) #1363
OCPBUGS-60461: E2E: llc test fix: Get updated Performance profile before modifying (#1373) #1373
Fix hack/update-codegen.sh (#1379) #1379
E2E: RPS: avoid multiple profile updates (#1378) #1378
Return 401 Unauthorized without client cert (#1377) #1377
E2E: skip stalld test case checking sched_fifo (#1374) #1374
Bump vendor dependencies (#1367) #1367
CNF-16638: Disable RPS by default (#1370) #1370
Sync the upstream and downstream Containerfiles (#1368) #1368
machineconfig: log kernelType (#1366) #1366
feat: add arbiter role to default pinning gen (#1364) #1364
OCPBUGS-59354: E2E add test to verify guaranteed pod is running after kubelet restart (#1361) #1361
Bump to golangci-lint 2.x (#1360) #1360
NO-JIRA: performance profile: internal cleanup (#1359) #1359
Add support for running binaries from NVIDIA driver directory (#1353) #1353
NO-JIRA: Remove dependency on k8s.io/kubernetes (#1356) #1356
Run update-codegen.sh (#1352) #1352
e2e: replace Getenv with LookEnv (#1351) #1351
OCPBUGS-52853: Do not add iommu.passthrough to ARM by default (#1354) #1354
gather-sysinfo: update debug-tools to v0.2.3 (#1347) #1347
Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.20 (#1338) #1338
Bump golangci-lint to 1.64.8 (#1339) #1339
e2e: llc: initial tests for cpu allocation (#1308) #1308
Set minimum TLS 1.3 for metrics and webhook servers (#1325) #1325
Change /master to /control-plane node label (#1327) #1327
NO-JIRA: E2E: Additional Functional tests for align cpus by UncoreCache Feature (#1324) #1324
Update performance_profile.md (#1329) #1329
fix: stop referencing non existing git references in go.mod (#1332) #1332
e2e: arm: fix ginkgo doesn’t recognize kernelPageSize suite (#1330) #1330
E2E: use 4 cpus for reserved from available cpus (#1326) #1326
Add NetworkPolicy k8s resources (#1323) #1323
OCPBUGS-55989: E2E: Functional tests for align cpus by UncoreCache Feature (#1302) #1302
NO-JIRA:e2e:daemonset: pod phase and events (#1289) #1289
Full changelog

cluster-olm-operator

OPRUN-4034: Handle CustomNoUpgrade better #134
OCPBUGS-58992: Bump helm to v3.18.4 #132
OPRUN-4026: Add support for all NoUpgrades #131
OCPSTRAT-2075: add missing tmp mounting to fix write to read only fil… #129
OPRUN-3999: Validate feature-gate arguments #128
OPRUN-3970: Add support for experimental manifests #127
OCPBUGS-57601: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.20 #124
OCPSTRAT-1976: Add readonlyRootFilesystem #120
OCPBUGS-56903: fix: report correct next version when incompatible operators are installed #123
OCPBUGS-56813: fix olm.maxOpenShiftVersion float parsing #121
OPRUN-3904: Add static network policies to govern namespace and controller pod #118
OPRUN-3861: Webhook support feature flag #119
OPRUN-3883: Add network-policy support #117
Full changelog

cluster-openshift-apiserver-operator

CNTRLPLANE-1257: Add README to test extension #624
CNTRLPLANE-1257: set up openshift-tests-extension and add a sanity test #623
: NO-JIRA: Bump to Go 1.24 and k8s 1.33 #620
NO-JIRA: operator: annotate image-import-ca configmap with owner #616
Full changelog

cluster-openshift-controller-manager-operator

CNTRLPLANE-926: Add readonlyRootFilesystem #392
CNTRLPLANE-1054: Update k8s deps to 1.33.2 #393
WRKLDS-844: sync: Use more descriptive variable name #390
WRKLDS-844: pkg/operator: Split OCM/RCM status conditions #387
WRKLDS-954: pkg/operator: Remove expired conditional resources #388
WRKLDS-1676: ocm deployment: Add POD_NAME #386
WRKLDS-1676: controller manager config: Set leaderElection.name #385
Full changelog

cluster-policy-controller

CNTRLPLANE-1054: rebase k8s (1.33.2), openshift (4.20) and other underlying dependencies #164
Full changelog

cluster-samples-operator

OCPBUGS-60665: Periodic sync of supported OCP samples #646
OCPBUGS-60606: Periodic sync of OKD samples - Return to Open Liberty 25.0.0.3 to fix failing tests #649
OCPBUGS-59325: Periodic sync of OKD samples #630
OCPBUGS-60179: Bump Kubernetes Version to v0.33.3 #644
OCPBUGS-60179: Bump Kubernetes Version to v0.33.3 - update Dockerfile.okd #645
OCPBUGS-59324: Periodic sync of supported OCP samples #631
OCPBUGS-57745: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.20 #643
NO-JIRA: cleanup hello-openshift yaml #642
Full changelog

cluster-storage-operator

OCPBUGS-60948: Rename the SELinuxMount metric to :count #609
STOR-1064: add volume-data-source-validator controller #592
STOR-2576: Collect overall SELinux warning controller metrics #608
STOR-2463: add csi-external-snapshot-metadata to image-references #606
STOR-2549: Remove TP label from VAP files #607
STOR-2330: Add labels to subscribe ibm-powervs-block CSI driver operator to NPs #600
STOR-2370: Add e2e storage performant policy #593
STOR-2330: Add labels to subscribe ibm-vpc-block CSI driver operator to NPs #599
OCPBUGS-60064: hypershift: add app label to csdriveroperators running in HCP #603
STOR-2330: Add labels to subscribe openstack cinder and manila CSI driver operators to NPs #601
STOR-2330: Add RBAC rule to let ibm-vpc-block-csi-driver-operator manage NetworkPolicy #602
STOR-2394: Bump all deps for 4.20 #598
STOR-2330: Add labels to subscribe vSphere CSI driver operator to NPs #597
STOR-2340: Add Network Policies and subscriptions for CSO and VPD (redux) #596
OCPBUGS-58368: Revert #589 “STOR-2340: Add Network Policies and subscriptions for CSO and VPD” #595
OCPBUGS-44128: OCPBUGS-44127: Sync azure permissions #582
STOR-2340: Add Network Policies and subscriptions for CSO and VPD #589
STOR-2330: Add labels to subscribe Azure disk and file CSI driver operators to NPs #587
STOR-2330: Add labels to subscribe GCP PD CSI driver operator to NPs #591
Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.20 #588
STOR-2330: Add labels to subscribe AWS-EBS CSI driver operator to NPs #584
STOR-2330: Network Policies for CSI drivers and operators #579
OSASINFRA-3675: Add credentialRequest for manila namespace #573
OCPBUGS-56201: improve message template for PodStartupStorageOperationsFailing alert #583
NO-JIRA: Update openstack approvers #581
OCPBUGS-54491: sync Azure File permissions with upstream docs #2 #578
Full changelog

cluster-update-keys

Revert “OCPNODE-3611: manifests.rhel/0000_90_openshift-cluster-image-policy: Drop TechPreviewNoUpgrade limitation” #83
OCPNODE-3611: manifests.rhel/0000_90_openshift-cluster-image-policy: Drop TechPreviewNoUpgrade limitation #82
OCPNODE-3006: OCPBUGS-59860: OpenShift verification uses v1 CRD #74
NO-ISSUE: OWNERS: Add Mrunal, remove folks who are no longer active in OpenShift-core #77
OCPNODE-3006: Drop openshift policy to DevPreviewNoUpgrade for ClusterImagePolicy to v1 #76
OCPBUGS-57820: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.20 #73
Full changelog

cluster-version-operator

OCPBUGS-57585: CVO protects /metrics with authorization #1215
OTA-1480: Add readonlyRootFilesystem #1208
NO-JIRA: Generate junitfile for unit tests #1217
OTA-1578: Disable ResourceReconciliationIssues condition #1216
OTA-1521: Add a default-deny network policy for CVO namespace #1198
OCPBUGS-57756: Updating cluster-version-operator-container image to be consistent with ART for 4.20 #1204
OTA-1531: [⁶⁄₆] cvo: use early gate checker to avoid delayed initialization #1196
NO-JIRA: test: remove unnecessary integration tests layers #1202
NO-JIRA: tests: fix make integration-test target #1203
NO-JIRA: Add myself as an approver #1201
OCPBUGS-56114: Fix ImplicitlyEnabledCapabilities #1191
OTA-1531: [5/x] cvo: read cluster FeatureGate early #1190
OTA-1403: Update and Verify Test Metadata Using Makefile #1179
OTA-1531: [4/x] cvo: extract config informer creation #1189
OTA-1010: Add a new version of GetImplicitlyEnabledCapabilities #1133
OTA-1531: [3/x] cvo: read version from release metadata on startup #1188
OTA-1531: [2/x] cvo: refactor LoadUpdate #1185
OTA-1531: [1/x] cvo: refactor option processing #1184
OTA-209: Add sync logic to the CVO configuration controller #1170
OCPBUGS-53062: add the ports Field into the CVO’s container spec #1180
NO-JIRA: Makefile: verify -> verify-yaml #1183
Full changelog

configmap-reloader

OCPBUGS-57846: Updating configmap-reload-container image to be consistent with ART for 4.20 #72
MON-4257: Bump configmap-reload to v0.15.0 #71
ART-13079: append .0 to go.mod version #67
Full changelog

console

OCPBUGS-52165, OCPBUGS-60753: Fix issues with Raw/Download in resource logs page #15436
NO-JIRA: Remove Lucifergene from Code Reviewers List #15449
CONSOLE-4607: Drop createModalLauncher from knative-plugin and use useOverlay hook instead #15349
ODC-7803: Adjust MAX_UPLOAD_SIZE formula #15428
OCPBUGS-56091: fix log line overlap when Wrap lines is enabled #15426
CONSOLE-4661: Fix double scrollbar #15427
CONSOLE-4235: Update Xterm.js CSS #15425
CONSOLE-4647: Refactor removeVolume action to use RemoveVolumeModal hook launcher #15230
CONSOLE-4661: Align LogViewer toolbar with CodeEditor toolbar #15414
ODC-7802: Add e2e for custom icon flow #15416
CONSOLE-4689: Replace deprecated “withHandlePromise” with “usePromiseHandler” in console #15346
CONSOLE-4235: Bump xterm to 5.5.0 #15408
CONSOLE-4500: Segment Analytics integration code cleanup #15288
CONSOLE-4630: React.SFC -> FCC #15421
CONSOLE-4609: Refactor toggleCloudShellExpanded #15365
ODC-7808: Migrate enzyme “packages/knative-plugin” unit tests to React Testing Library #15390
CONSOLE-4688: Remove maxMenuHeight from ConsoleSelect #15415
CONSOLE-4631: Run ‘react’ namespace import codemod #15412
CONSOLE-4692: Enable SNC to true in access-modes, admission-webhook-warnings, cluster-configuration #15401
CONSOLE-4686: Refactor subscription.tsx menuActions to accept actions… #15395
OCPBUGS-59862: Only show a link to OperatorHub if the logged in user has access to view OperatorHub #15340
OCPBUGS-59204: Alignment of / and : within imagestream tag selection form fields #15399
NO-JIRA: Update CHANGELOG for latest 4.20 prerelease plugin SDK package publish #15407
OCPBUGS-45297: Refactor DroppableEditYAML #15386
CONSOLE-4680: Refactor bindings.jsx menuActions to accept actions fro… #15372
ODC-7806: Migrate enzyme “packages/dev-console” unit tests to React Testing Library #15335
CONSOLE-4609: Refactor testHook to RTL, add useWarningModal #15389
ODC-7810: Migrate enzyme “packages/topology” unit tests to React Testing Library #15293
OCPBUGS-60373: QuickStarts Link buttons to other quickstarts are duplicate #15387
CONSOLE-4713: Refactor PodConnect and Terminal to TypeScript #15377
OCPBUGS-60010: Fix i18n string for event stream (again) #15384
OCPBUGS-56155: Click ‘View operator details’ in Plugin available popover will close the modal #15316
OCPBUGS-60130: Remove ancient X-XSS-Protection header #15360
OCPBUGS-59382: OpenShift Console’s “Start Job” action overrides configured “backoffLimit” to “6” #15357
CONSOLE-4600: Migrate Enzyme “tests/components/factory and modals” unit tests to RTL #15281
OCPBUGS-60151: Update Guided tour -> Guided Tour in help menus #15363
CONSOLE-4617: follow-on fix for DetailsItem popover #15361
OCPBUGS-59001: Bump helm version #15282
CONSOLE-4688: Dropdown -> ConsoleSelect #15284
CONSOLE-4616: add additionalPrinterColumns to CustomResource list page #15350
OCPBUGS-44972: Make sure CSP violations are only reported to telemetry once per day per browser #14778
CONSOLE-4703: Remove routes component in console #15343
OCPBUGS-60056: update timestamp unit test to be more stable #15356
ODC-7811: enzyme -> RTL: webterminal-plugin #15352
CONSOLE-4617: add additionalPrinterColumns to CustomResource details page #15336
OCPBUGS-60010: Fix i18n string for event stream #15351
CONSOLE-4705: Convert some files to TypeScript #15348
CONSOLE-4688: Use PF instead of noSelection Dropdown #15342
OCPBUGS-59563: Resolving API Version Conflicts in Tekton Pipeline Runs #15307
OCPBUGS-59215: switch to dev perspective for /dev-monitoring #15268
OCPBUGS-59725: Refactor RegistryPollIntervalModal #15337
OCPBUGS-55946: Move ACM perspective back to perspective selector. #15310
CONSOLE-4704: Update ThemeContext type #15339
OCPBUGS-57481: fix: Fix negative CPU util graphs #15332
OCPBUGS-58469: Fix hot reload in GlobalConfigPage component #15287
OCPBUGS-59196: fix runtime exception in CreateYAMLInner #15341
CONSOLE-4699: Update dynamic demo plugin e2e tests #15319
CONSOLE-4608: Drop createModalLauncher from helm-plugin and use useOverlay hook instead #15303
ODC-7802: Remove custom Drawer and Tabs from web-terminal #15077
ODC-7620: Use PF isLoading in CreateProjectModal #15318
OCPBUGS-57466: Default name is comprised of ‘-’ on ‘Add to favorites’ page when language is Korean/Japanese/Chinese. #15314
OCPBUGS-56248: Improve Console plugin API doc gen script #15167
OCPBUGS-56466: The warning msg ‘CPU and memory resource requests must be set’ still shows up after deployment has resource requests set. #15117
CONSOLE-4669: Refactor Alertmanager forms to only use PatternFly comp… #15275
OCPBUGS-59771: Move alertmanager settings route #15325
NO-JIRA: Update README.md by adding removing co-disabled styling #15323
CONSOLE-4700: Address tech debt in TogglePlay and ButtonBar #15308
OCPBUGS-57654: Updating openshift-enterprise-console-container image to be consistent with ART for 4.20 #15186
ODC-7803: Add custom icons in import flow #15242
OCPBUGS-59231: PipelinesList: increase width of ns column #15311
OCPBUGS-59550: add data-test attrs to console plugins table #15302
OCPBUGS-58858: Update model flags when plugins load #15296
CONSOLE-4633, CONSOLE-4672, CONSOLE-4682: Refactor JobActionFactory, ReplicationControllerFactory and remove global menuActions for job.tsx #15279
CONSOLE-4491: Deanonymize Developer Sandbox users #15201
CONSOLE-4499, CONSOLE-4654, CONSOLE-4656, CONSOLE-4657: Implement some CodeEditor RFEs #15254
CONSOLE-4623: Add support for optional Console plugin dependencies #15183
CONSOLE-4634: Refactor DeploymentActionFactory to hook form. #15209
OCPBUGS-59195: Clicking on container dropdown button has no response when pod log is in fullscreen. #15278
CONSOLE-4663: Replace Bootstrap .has-feedback with custom rule #15264
CONSOLE-4659: Replace Bootstrap Responsive utilities with PatternFly … #15261
ODC-7807: Migrate enzyme test to react testing library for helm-plugin #15244
OCPBUGS-59277: update guided tour selector for Software catalog #15277
CONSOLE-4655: Replace Bootstrap List group with PatternFly List #15259
CONSOLE-4653: Allow custom icons in template annotation #15248
ODC-6775: Jest 21 -> 22 #14939
OCPBUGS-32157: Always show edit-yaml header if defined #15274
OCPBUGS-55340: Not able to launch terminal window from OCP web console due to console plugin conflicts #15255
CONSOLE-4578: OpenShift ConsoleCONSOLE-4578 Move “Installed Operators” from “Operators” to “Ecosystem” nav section #15187
OCPBUGS-57715: Fix Made - Clicking Cancel on YAML Creation now redirects to Secrets Page #15253
OCPBUGS-59163: Show possible enum values in ExploreTypeSidebar #15265
CONSOLE-4662: remove screenfull #15262
CONSOLE-4658: Replace Bootstrap Small text with PatternFly Extra Smal… #15256
CONSOLE-4619: Fix ExternalLinkWithCopy visual regression #15266
ODC-7794: Add event-source, channel, and broker form page automation in CI #15226
ODC-7779: Tests to enable the developer perspective through UI #15179
CONSOLE-4619: _blank removal followup #15251
OCPBUGS-43792: Make assumption about allowedDynamicPluginNames array order explicit #15249
OCPBUGS-52835: change ‘/metrics/usage’ endpoint to ‘/api/metrics/usage’ #15252
CONSOLE-4642: replace Bootstrap radio with PatternFly equivalent #15217
OCPBUGS-56803: Deleted objects remain in favorites and cause 404 errors #15193
OCPBUGS-58334: hide Namespace column in MachineSets list when project… #15247
OCPBUGS-54237: click resource dropdown button on Operand form page will always put use to page top when scrolling #14941
OCPBUGS-58273: Add the Origin header to the HeaderBlacklist in the co… #15233
OCPBUGS-58258: fix bug where / in console.tab/horizontalNav href breaks navigation #15231
OCPBUGS-58208: fix runtime error when editing HPA using the form #15225
CONSOLE-4640: replace Bootstrap checkbox with PatternFly equivalent #15207
OCPBUGS-57088: Update dynamic-plugin-demo/oc-manifest.yaml to use fresh image #15128
CONSOLE-4502, OCPBUGS-52835, OCPBUGS-55514: Implement sessions in openshift authenticator #15037
OCPBUGS-58311: test fix for web-terminal by changing start terminal implemntation #15232
OCPBUGS-55815: Breadcrumb Link fixed in Explore-type-sidebar.tsx #15219
OCPBUGS-57954: Remove deprecated link for Red Hat Marketplace webpage #15199
CONSOLE-4596: Migrate enzyme tests/components/cluster-settings unit tests to RTL #15143
NO-JIRA: Remove locale files and service-binding-plugin #15208
OCPBUGS-58166: only show the correlation masthead in admin #15210
OCPBUGS-58050: fix missing form styles in Create PVC page + Clone PVC… #15205
OCPBUGS-57898: Incorrect i18n translations in 4.19 batch #15194
OCPBUGS-56699: ContainerResource metric data for HPAs isn’t visible i… #15198
NO-JIRA: Update Console plugin SDK changelogs #15211
WTO-324: Fix for WTO regular user tests #15048
CONSOLE-4595: Remove network-policies component in console-app #15125
OCPBUGS-56629: Update QuickStartEmptyState link #15190
OCPBUGS-57746: customize actions in default resource page #15185
OCPBUGS-49709: Add the ability to launch multiple modals with useModal hook #15139
CONSOLE-4577: Move “Software Catalog” nav item from “Home” to “Ecosystem” nav section #15169
OCPBUGS-57503: Default to unordered plugins list #15182
CONSOLE-4619: Create ExternalLinkButton component and use it #15177
CONSOLE-4550: Remove Bootstrap Grid from console #15155
OCPBUGS-55828: Edit paralelism modal has unresponsive decrease button in the number spinner #15126
OCPBUGS-49709: Fix webpack build warnings for dynamic-core-api exports #15149
OCPBUGS-56629: use EmptyState for quick starts empty state #15081
OCPBUGS-56050: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15170
OCPBUGS-57174: Percent sign on creating HPA page doesn’t align in the center of outer box. #15162
OCPBUGS-56174: ConfigMap form stuck after making input errors. #15166
OCPBUGS-56845: OpenShift console PVC clone cannot use B as the unit #15163
OCPBUGS-57205: i18n upload/download routine task - Sprint 270 #15158
OCPBUGS-56186: Add Select project field in import forms #15150
OCPBUGS-57074: Incorrect property name requests in ContainerSpec.resources type #15148
OCPBUGS-57087: Update Dockerfile.dev to use latest build images #15129
OCPBUGS-43792: Follow-on fix. Add new “plugins-order” flag to bridge cli args #14981
OCPBUGS-56985: Getting “Oh no something went wrong” error message in web console. #15147
CONSOLE-4550: Remove usage of Bootstrap grid in Console #15119
OCPBUGS-56999: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15122
OCPBUGS-57147: Disable tests A-02-TC02 and A-02-TC05 #15146
OCPBUGS-56804: clarify verbiage for Lightspeed hide button #15144
OCPBUGS-56050: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console #15121
OCPBUGS-56044: fix VirtualizedTable runtime error if sortColumn is no… #15112
OCPBUGS-56986: Fix runtime error when navigating alert actions #15118
OCPBUGS-49709: Add useOverlay hook to dynamic plugin SDK and deprecate useModal hook #14707
OCPBUGS-56179: Add isAllNamespacesKey function to dynamic plugin API #15066
OCPBUGS-56707: fix bug where Roles list was displaying invalid data f… #15115
OCPBUGS-56917, OCPBUGS-56922: Remove ExternalLink and Timestamp reexport #15110
OCPBUGS-56889: Add flags in console static plugin for all the components of this epic #15101
OCPBUGS-56700: UI for search by label is distorted in topology #15090
OCPBUGS-55431: Add initialization link annotation support to csv anno… #15020
OCPBUGS-54185: Helm resource list error in console #15084
OCPBUGS-56439: Remove duplicate sinkUri code #15085
OCPBUGS-56137: Added developer getting started card in Admin project overview page #15079
OCPBUGS-52842: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15092
OCPBUGS-56628: Fix regression with drawers and modals #15080
OCPBUGS-56087: Opening Edit Secret modal and saving without changes throws error #15058
ODC-7722: Remove service binding plugin #15035
OCPBUGS-55456: Fix and enable web terminal tests #15082
OCPBUGS-54726: Layout of Welcome to the new OpenShift experience! buttons is wonky on mobile #14951
OCPBUGS-56353: Initialize log package #15069
ODC-7797: Expose PodRingSet via Dynamic Plugin SDK #15068
OCPBUGS-55806: fix bug where AlertItem is missing info icon #15052
ODC-7782: Test adjustments to perspective merge #14970
OCPBUGS-54434: Update vSphere configuration form to support CM YAML f… #15065
OCPBUGS-49291: Set proper type for the CSP field for the serverconfig #15064
OCPBUGS-56410: Recognize Detached BMH status #15056
ODC-7786: Add flags in console static plugin for all the components of this epic #14992
OCPBUGS-54195: Enable pipeline tests by installing operator version 1.17 #14903
CONSOLE-3644: app.jsx -> app.tsx #14997
OCPBUGS-55368: [knative] Self-provisioner user can not access or create event sources via ODC #15017
OCPBUGS-55208: Should show default OpenShift Logo for a theme when there is not custom logo set for the theme. #14999
OCPBUGS-56245: Remove dead code for deployment and deployment config #15054
OCPBUGS-37977: Refresh console TLS certs at runtime #14971
OCPBUGS-55419: improve description of the custom logos CLI args #15003
CONSOLE-4572: classnames -> react-styles #15050
OCPBUGS-55808: fix cy.createProject command #15026
OCPBUGS-55896: Refactor Kebab+ActionsMenu to use PF #15028
OCPBUGS-56039: Update supported languages in Internationalization docs #15046
OCPBUGS-55919: remove 60 day alert from cluster update modal #15045
CONSOLE-4550: col-sm-6 => GridItem sm={6} #15014
OCPBUGS-54234: Fix impersonate group action #14915
OCPBUGS-46385: fix alignment of Getting Started item icons #15025
CONSOLE-4393: Update to Node.js® v22 #14841
OCPBUGS-55412: Wrap ListPageHeader action with a div #15008
OCPBUGS-55323: Add patternfly/react-topology to shared modules list of dynamic plugin sdk #14993
OCPBUGS-55430: resolve http Context and Client handling #15009
OCPBUGS-55629: get go mod tidy to pass #15024
OCPBUGS-53428: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15001
OCPBUGS-55375: add data-quickstart-id to quick create button #14998
OCPBUGS-54157: Sample segment sessions #14990
OCPBUGS-49291: Improving the DevExp for passing the CSP directives to console per flag + Make use of connect-src and object-src directives #14701
OCPBUGS-53320: Add DEVCONSOLE_PROXY flag #15006
OCPBUGS-55633: fix bug where Critical Alerts section cannot be collapsed #15015
And 23 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-58094: Consolidate telemetry values oscilation #1034
CONSOLE-4665: Vendor ConsolePluginCRD v1alpha1 changes #1018
OCPBUGS-60219: make console operator responsible for creating oauth client #1032
OCPBUGS-57854: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.20 #996
OCPBUGS-57736: bump github.com/openshift/client-go #1030
OCPBUGS-45300: Wire synced OIDC Auth CM to Console #1024
OCPBUGS-45300: Fetch synced CM for the CertificateAuthority issuer #1017
OCPBUGS-59099: Bump docs version #1015
OCPBUGS-58434: Console-operator should report plugin services as relatedObjects #1012
NO-JIRA: Remove ocs-install-tour #1003
OCPBUGS-58320: Fix deprecated API Version in RHDH Operator Quickstart #1009
OCPBUGS-57630: Update downloads deployment configuration to use master node selector #1005
OCPBUGS-57129: Revert adding Console capability into SVM #1004
OCPBUGS-57519: Revert #981 “CONSOLE-4523, OCPBUGS-57468: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads” #994
OCPBUGS-57129: Add missing Console capability annotation #992
CONSOLE-4523, OCPBUGS-57468: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #981
ODC-7790: Remove ODO download link #987
OCPBUGS-52556: Revert v1alpha1 removal #990
OCPBUGS-43792: Add plugins order to console config #980
OCPBUGS-55698: Lift FeatureGate by bumping openshift/api #984
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-59568: stop installing rpms that are already in the base image #206
Full changelog

coredns

OCPBUGS-57652: Updating coredns-container image to be consistent with ART for 4.20 #136
NO-JIRA: Add rikatz to OWNERS #147
OCPBUGS-60008: UPSTREAM: 7083 and 6836: Fix failing TestZoneExternalCNAMELookupWithProxy #146
ART-13079: append .0 to go.mod version #132
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OSPRH-18263: UPSTREAM: 2915 [manila-csi-plugin] Support muilple share rules #349
OCPBUGS-59650: Rebase main onto release-1.33 #334
OCPBUGS-58497: CARRY: don’t ignore json files #337
OCPBUGS-57798: Rebase main onto release-1.33 #329
NO-JIRA: OWNERS: Update team osasinfra #326
OCPBUGS-56028: [cinder-csi-plugin] Don’t report topology capability when –with-topology=False #325
Full changelog

csi-driver-nfs

NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #154
OCPBUGS-57851: Updating csi-driver-nfs-container image to be consistent with ART for 4.20 #157
NO-JIRA: OWNERS: Update team osasinfra #155
Full changelog

csi-external-attacher

STOR-2392: Rebase to upstream v4.9.0 for OCP 4.20 #86
OCPBUGS-57569: Updating csi-attacher-container image to be consistent with ART for 4.20 #85
Full changelog

csi-external-provisioner

STOR-2392: Rebase to upstream v5.3.0 for OCP 4.20 #115
OCPBUGS-57915: Updating csi-provisioner-container image to be consistent with ART for 4.20 #114
Full changelog

csi-external-resizer

STOR-2392: Rebase to upstream v1.14.0 for OCP 4.20 #171
OCPBUGS-57847: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.20 #170
Full changelog

csi-external-snapshotter, csi-snapshot-controller

STOR-2392: Rebase to upstream v8.3.0 for OCP 4.20 #181
OCPBUGS-55689: UPSTREAM: 1303: Fix requeueing snapshot content after deletion error #180
Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.20 #179
OCPBUGS-57552: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.20 #178
Full changelog

csi-livenessprobe

STOR-2392: Rebase to upstream v2.16.0 for OCP 4.20 #75
OCPBUGS-57738: Updating csi-livenessprobe-container image to be consistent with ART for 4.20 #74
Full changelog

csi-node-driver-registrar

STOR-2392: Rebase to upstream v2.14.0 for OCP 4.20 #82
OCPBUGS-57849: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.20 #81
Full changelog

docker-builder

OCPBUGS-57676: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.20 #472
OCPBUGS-56106: S2I build cpu limits observed by assemble are limited to 1 cpu #470
Full changelog

docker-registry

OSASINFRA-3756: Bump docker-distribution to support v3token authentication for swift #439
OCPBUGS-57583: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.20 #435
OCPBUGS-56483: bump jwt and oauth dependencies #427
Full changelog

driver-toolkit

Updating driver-toolkit-container image to be consistent with ART for 4.20 (#170) #170
fix: Use VERSION_ID for RHEL minor version (#168) #168
Full changelog

egress-router-cni

CORENET-6300: Port egress-router CNI plugin from iptables to nftables #90
Full changelog

etcd

OCPBUGS-60874: Revert “OCPBUGS-52181: Ensure cluster id changes during force-new-cluster” #339
OCPBUGS-57675: Updating ose-etcd-container image to be consistent with ART for 4.20 #334
Full changelog

gcp-cloud-controller-manager

OCPBUGS-60772: Reuse instance groups #86
NO-JIRA: UPSTREAM: 894: Adding SyncMutex to nodeipam unit tests #88
OCPCLOUD-2926: Merge https://github.com/kubernetes/cloud-provider-gcp:master (c0af057) into main #77
NO-JIRA: Update OWNERS #83
OCPBUGS-57575: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.20 #81
Full changelog

gcp-cluster-api-controllers

NO-JIRA: Update OWNERS #246
OCPCLOUD-2918: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.10.0 (6518ef9) into master #245
OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #242
Full changelog

gcp-machine-controllers

OCPCLOUD-2931: Update Kubernetes deps to v1.33 #123
NO-JIRA: Update OWNERS #127
OCPBUGS-59376: Add max-concurrent-reconciles flag to machine actuator #124
OCPBUGS-56849, OCPCLOUD-2985, OCPCLOUD-2986: Bump machine-api-operator to pull in authoritativeAPI fix #122
OCPBUGS-57867: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.20 #121
OCPBUGS-46387: allow instances with unknown quotas to be created #114
Full changelog

gcp-pd-csi-driver

STOR-2396: Rebase to upstream v1.20.0 for OCP 4.20 #79
OCPBUGS-57712: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.20 #78
Full changelog

gcp-pd-csi-driver-operator

STOR-2394: Bump all deps for 4.20 #147
OCPBUGS-57568: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.20 #146
Full changelog

gcp-workload-identity-federation-webhook

OCPBUGS-57909: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.20 #8
Full changelog

haproxy-router

NO-JIRA: Add rikatz to OWNERS #665
OCPBUGS-55506: Prevent startup failures due to name resolution #656
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-60851: UPSTREAM: <carry>: Revert “Bump 1.33.4” #2425
NO-JIRA: UPSTREAM: <carry>: Filter featuregates by FeatureGate label instead of using OffByDefault label #2398
OCPBUGS-60507: Bump 1.33.4 #2416
STOR-2530: Storage performant security policy (update audit labels) #2409
STOR-1064: improve CRD handling in VolumePopulator test #2419
OCPBUGS-59641: cleanup: fetch individual PodResourceInfo from allocated resource state #2410
NO-JIRA: add rphillips as downstream kubelet approver #2414
UPSTREAM: <drop>: OKD-276: Fix InPlacePodVerticalScaling tests #2407
CNTRLPLANE-5: UPSTREAM: 132960: Configure JSON content type for generic webhook RESTClient. #2362
OCPBUGS-52169: Workload partitioning of static init containers #2224
OCPBUGS-59756: Fix IntOrString cost estimation when schema has a MaxLength constraint #2375
OCPBUGS-46422: Disable ServiceCIDR tests #2382
CNTRLPLANE-940: Add CEL expression compile validation for Authentication admission #2353
STOR-2370: Storage performant security policy #2344
OCPBUGS-59603: Restore “Bump external snapshotter for vgs tests” #2392
OCPBUGS-59533: Rebase v1.33.3 to master/4.20 #2369
OCPBUGS-57666: Adjust durations for PodLifecycleSleepAction e2e tests #2363
STOR-2481: UPSTREAM: <carry>: Skip SELinux test with Feature:SELinuxMountReadWriteteOncePodOnly #2389
OCPBUGS-60047: disable slow and flaky tests rather than labeling them #2390
OCPBUGS-56785: UPSTREAM: 132028: podresources: list: use active pods #2361
NO-JIRA: UPSTREAM: <drop>: Revert “Bump external snapshotter for vgs tests” #2387
OCPBUGS-59603: Bump the external-snapshotter for vgs tests #2373
TRT-2068: Skip specific LoadBalancer test for “none” platform #2383
TRT-2068: Reintroduce non-suite annotation removal #2331
CNTRLPLANE-371: Update to Kubernetes v1.33.2 #2314
OCPBUGS-57861: Bump 4.20 1.32.6 #2339
OCPBUGS-55678: Fix flake caused by invalid detection of active policies in VAP integration tests #2346
NO-JIRA: UPSTREAM: <carry>: Update rebase.sh to handle go versions major.minor.patch #2319
TRT-2097: UPSTREAM: <carry>: Fix up kube test suite definitions for OTE #2330
Revert “TRT-2068: Reintroduce removal of non-suite annotation rules, and fix topology selector” #2329
TRT-2068: Reintroduce removal of non-suite annotation rules, and fix topology selector #2322
OCPNODE-3010: openshift-hack: enable userns e2e tests #2239
TRT-2141: Revert #2299 “TRT-1854: remove annotation rules that don’t relate to suites” #2318
TRT-1854: remove annotation rules that don’t relate to suites #2299
OCPBUGS-56436: Bump 4.20 1.32.5 #2308
CNTRLPLANE-179: apiserver library go bump #2285
OCPBUGS-55944: UPSTREAM: <carry>: unrevert: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2295
OCPBUGS-55631: UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes #2288
NO-JIRA: Fix generation of test names #2296
OCPBUGS-54208: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2277
OCPBUGS-54318: UPSTREAM: 131236: RWX tests should create RWX volumes #2279
OCPBUGS-55945: Bump main 1.32.4 #2292
TRT-2103: Revert “NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2291
NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2287
OCPBUGS-55632: Fix node expansion on older kubelets #2282
TRT-2066: Use OTE generated labels for skips in test-kubernetes-e2e.sh #2255
Full changelog

hypershift

OCPBUGS-60152: test/e2e: enable EnsureAppLabel check for 4.19 #6697
CNTRLPLANE-202: feat(sharedingress): add infrastructure node scheduling preferences #6709
CNTRLPLANE-1361: fix(infra/azure): make role assignment creation idempotent and robust #6722
NO-JIRA: docs(rules): expand Jira item creation guidelines and epic details #6705
chore(deps): update konflux references #6669
NO-JIRA: fix(contrib): Make setup_aks_mi.sh executable #6708
OCPBUGS-60891: set default goaway-chance to 0.001 #6696
OCPBUGS-60649: add availibility-prober to all capi-providers #6695
STOR-1064: fix(cpo): add missing image to env replacement #6691
OCPBUGS-60907: Update Azure overrides to include HC deletion time bug fix #6698
CNTRLPLANE-935: e2e test for new Azure metrics #6315
OSASINFRA-3675: Add credentials to openshift-manila-csi-driver namespace for Hypershift #6683
STOR-1064: add validator image to CSO manifest #6686
OCPBUGS-59194: fix(registry): delete ValidatingAdmissionPolicy and binding during HCP deletion for ARO cleanup #6616
OCPBUGS-60653: test(e2e): Workaround for external oidc tests to bypass the teardown … #6684
CNTRLPLANE-1209: exposing IPv4OVNKubernetesConfig for hcp’s ClusterNetworking #6554
NO-JIRA: Update-overrides for ARO HCP Fixes #6685
NO-JIRA: docs(cursor): add Jira creation rule for CNTRLPLANE/OCPBUGS with components and story template #6680
NO-JIRA: fix(doc): remove note about mandatory annotation in BM deployment #6682
OCPBUGS-60651: fix mce 2.10 Konflux EC violation #6676
OCPBUGS-60602: Cache Azure KMS TokenCredential for ARO HCP and clarify CPO credentials cache naming #6673
OCPBUGS-56914: fix: Do not admit OAuth route by private router unless it has external DNS #6218
OCPBUGS-56430: fix: Add recovery monitoring stack fixes #6642
CNTRLPLANE-1271: HyperShift Operator CPO override for Azure. versions 4.19.6 - 4.19.9 #6662
CNTRLPLANE-1270: Fix ProjectDevelopmentStreamTemplates #6661
OCPBUGS-60381: feat(validations): add wildcard support to DNS SAN conflict detection #6643
CNTRLPLANE-1251, CNTRLPLANE-1255: Introduce ProjectDevelopmentStreams #6632
OCPBUGS-57450: fix: routes are not used in case of IBM Cloud #6622
NO-JIRA: docs(agents): add AGENTS.md and centralize assistant guidance #6634
NO-JIRA: feat(rules): Add cursor rules for PR and Code review #6633
OCPBUGS-60399: wrap EnsureKubeAPIDNSNameCustomCert and EnsureGlobalPullSecret in their own test #6536
OCPBUGS-59880: add HostedCluster config requirements for DR #6522
NO-JIRA: feat(docs): Add new videos section in the documentation #6635
CNTRLPLANE-946: test(e2e): Add e2e test for ExternalOIDCWithUIDAndExtra feature set #6631
CNTRLPLANE-996: feat(e2e): Use ROSAManagedPolicies by default #6534
CNTRLPLANE-1234: update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.24.4-1754467841 #6608
OCPBUGS-57336: fix(hostedcluster): remove additionalTrustBundle from hcp when removed from HostedCluster #6605
CNTRLPLANE-993: feat(CPOv2): Monitor operands rollout status #6492
NO-JIRA: Update ingress-and-dns.md - update Metallb install link #6619
OCPBUGS-60187: chore: Split shared proxy acls #6621
NO-JIRA: Fix typo causing ‘make verify’ to fail #6620
CNTRLPLANE-995: Fix incorrect usage of util.UpdateObject #6615
CNTRLPLANE-1034: chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks #6614
OCPBUGS-60190: chore: Improve security context uid allocation to reuse released uids #6612
NO-JIRA: docs: Document workloadContext #6589
CNTRLPLANE-204: feat: Add Shared Ingress Config Generator #6555
NO-JIRA: chore: Add cursor rule statements for unit tests #6611
NO-JIRA: test(e2e): add new test for external OIDC #6419
OCPBUGS-57626: order ICSPs for determinism of OPENSHIFT_IMG_OVERRIDES #6607
NO-JIRA: docs: enhance commit message formatting and gitlint configuration #6613
CNTRLPLANE-995: Fix Default SG day2 tags feature being triggered without changes #6603
CNTRLPLANE-1190: Support control plane overrides by platform #6523
OCPBUGS-60064: fix(OCPBUGS-60064): add missing app label to some components #6591
CNTRLPLANE-1186: update github.com/golang/groupcache digest to 2c02b82 #6389
CNTRLPLANE-1228: Update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.24.4-1753853351 #6541
OCPBUGS-58061: Always compress and encode payload in token secret for inplace upgrades #6352
CNTRLPLANE-1225: feat(konflux): Use hermetic builds for CPO #6595
CNTRLPLANE-1197: Add EnsureGlobalPullSecret to be executed in 4.19 test suite #6508
OCPBUGS-59194: fix(OCPBUGS-59194): Allow HCCO to set registry managementState to Removed #6593
NO-JIRA: feat(azure): Add deletion scripts and cleanup documentation for managed Azure clusters #6560
OCPBUGS-59886: Add selinux-warning-controller to KCM #6550
CNTRLPLANE-1116: build(gitlint): add gitlint to verify target #6559
CORENET-6229: Use networking.advertiseAddress for CNO apiserver override for IBMCloud PlatformType #6553
OCPBUGS-59736: Add support for generating a SC UID per namespace if SCC are not avalable #6520
CNTRLPLANE-263: Remove all AzureManaged* CRDs #6518
CNTRLPLANE-262: Support print operator version in CLI #5821
CNTRLPLANE-1198, CNTRLPLANE-1199: Bump AllowedCIDRBlocks limit #6556
NO-JIRA: refactor(azure): extract AKS managed identity setup into separate script #6488
CNTRLPLANE-1116: Fix CI git commits for run-gitlint #6519
OCPBUGS-59959: Set explicit FSGroup and RunAsUser for etcd when there’s no SCC #6548
NO-JIRA: add CLAUDE.md with comprehensive development guidance #6549
CNTRLPLANE-1191: add sa-token-issuer-private-key-path flag to create cluster aws #6526
CNTRLPLANE-1184: update registry.access.redhat.com/ubi10/ubi docker tag to v10.0-1752573517 #6343
OCPBUGS-59927: Fix MCE 2.10 konflux EC violations #6531
MGMT-20948: Enable Multus Disabling for NetworkType=Other #6358
NO-JIRA: fix(cmd): match infraID exactly on OIDC provider delete #6538
NO-JIRA: fix(test/e2e): add KCM leader elect failure msg to isLeaderElectionFailure #6537
CNTRLPLANE-777: Create an Arm64 NodePool e2e Test for ARO HCP #6509
CNTRLPLANE-996: feat(cli): Add support for using ROSA managed policies #6467
CNTRLPLANE-204: feat(shared-ingress): Add reloader sidecar to avoid restarts on config changes #6447
MGMT-20826: Add CLI validation to ensure Console is disabled when Ingress is disabled #6479
NO-JIRA: feat(cmd/dump): add CronJobs to dump #6494
OCPBUGS-53265: Use the image reference for the cache in the image metadata provider #6155
OCPBUGS-59835: MCE 2.10 konflux #6524
OCPBUGS-57336: Delete unused AdditionalTrustBundle from CP namespace #6504
Fix OCPBUGS-54720: HCP payload doesn’t respect multiple #6486
OCPSTRAT-2173: feat(hcco): add support for hosted OIDC client secrets #6375
OCPBUGS-43824: Help fix flaky NTO tests #6480
feat(shared-ingress): Fix Konflux hermetic build config #6503
CNTRLPLANE-1116: add gitlint support for conventional commit enforcement #6462
NO-JIRA: feat(contrib): add kubelet config daemonset #6495
NO-JIRA: Fix a typo in the documentation #6501
NO-JIRA: increase the pod limit per node in AKS cluster #6487
NO-JIRA: Add new doc from HCP OADP Plugin #6299
OCPBUGS-59759: fix(konflux): Add missing backslash for dot escaping #6491
NO-JIRA: test: replace context.Background/TODO with t.Context in unit tests #6475
NO-JIRA: Dummy change to shared-ingress Containerfile to trigger a build #6478
NO-JIRA: test: remove CPOv2 annotation from upgrade test #6485
OCPBUGS-57316: hypershift version in CLI returns panics for Server Version when HyperShift operator is deployed #6473
CNTRLPLANE-980: chore(contrib): add ansible playbook for setting up external OIDC #6294
NO-JIRA: test/e2e: skip kubevirt pods when checking labels, tolerations, and term msg policy #6476
NO-JIRA: test/e2e: add TerminationMessagePolicyFallbackToLogsOnError check to 4.19 #6291
CNTRLPLANE-735: Document steps to configure Microsoft backup extension in AKS #6456
NO-JIRA: chore(deps): update konflux references #6267
OCPBUGS-59232: fix(test): resolve Azure DNS race condition in EnsureCustomAdminKubeconfigReachesTheKAS #6461
MGMT-20826: Enable disabling of Ingress capability #6319
NO-JIRA: unique clusterrole per hosted cluster for kubevirt CSI #6321
CNTRLPLANE-952: New API to support specifying cluster-autoscaler flags #6236
CNTRLPLANE-993: Skip azure 4.19 cp upgrade for now to let the 4.20 suite be covered. #6416
CNTRLPLANE-204: feat(shared-ingress): Add socat tool to container image #6458
OCPBUGS-43824: fix(test): reduce API call frequency to prevent rate limiting in NTO machineconfig test #6453
OCPBUGS-58299: remove annotation is not working #6420
MGMT-20793: Enable Disabling NodeTuning Capability #6356
CNTRLPLANE-800: Remove code associated with Managed Identity v2 for ARO HCP #6105
NO-JIRA: Update Created Azure Hosted Cluster on AKS doc #6451
OCPBUGS-57742: Updating ose-hypershift-container image to be consistent with ART for 4.20 #6307
CNTRLPLANE-1113: Add renovate configuration #6452
CNTRLPLANE-201: migrate to konflux-built image for shared ingress #6381
Revert “OCPBUGS-56701: Update the LookupDefaultOCPVersion function to use the multi-arch release API” #6445
OCPBUGS-56701: Update the LookupDefaultOCPVersion function to use the multi-arch release API #6353
OCPBUGS-58837: Override CPO image to apply KAS certificate hotfix #6402
NO-JIRA: konflux: manually update task bundles #6418
CNTRLPLANE-995: Support day2 tags changes for AWS default Security Group #6320
NO-JIRA: Exit miv3 script early if cp file exists #6417
NO-JIRA: Fix up contrib scripts for aro like env #6395
MGMT-20771: Enable disabling of Console capability #6183
OCPBUGS-57790: add custom kube-apiserver DNS name to shared ingress #6338
OCPBUGS-58387: Add karpenter to skip api-server deps #6379
OCPBUGS-58149: fix(hcco): Don’t fail for public OIDC clients with no client secret #6367
NO-JIRA: Ensure that capi-provider deployment does not have outdated labels #6335
OCPBUGS-57957: Increase MaxItems for Mirrors and ImageContentSources #6325
CNTRLPLANE-1042: Disable createClusterNone for azure and scope down verifyResourceGroupLocationsMatch check #6376
CNTRLPLANE-1042: Add nodepool rollout test for azure #6364
NO-JIRA: Enable MutatingAdmissionPolicy runtime config #6362
OCPBUGS-58299: webhook, replace “delete” by “remove” for jpatch #6363
OCPSTRAT-2173: Revert “Merge pull request #6227 from sjenning/hcco-empty-client-secret” #6365
CNTRLPLANE-1046: Fix hack/tools go module name and bump golangci-lint to last v1 minor #6361
Update github.com/openshift/cluster-api-provider-agent/api digest to 899af65 #5803
ACM-21713: fix(konflux): go-toolset runs as default(1001) #6360
NO-JIRA: Run validate conditions after ho upgrade test #6351
NO-JIRA: Update ROSA envs #6326
OCPBUGS-58200: Drop version history length #6329
OCPBUGS-58031: AKS: HCP operator should set Shared ClusterServiceLoadBalancerHealthProbeMode #6314
ACM-21713: adding .git in .dockerignore to fix version info #6317
OCPBUGS-56701: Fix LookupDefaultOCPVersion to use the supported-versions ConfigMap to find a default release image #6297
CNTRLPLANE-777: Update manifest.go to use latest oc committed code #6316
OCPBUGS-56430: Fix restarting prometheus Sts after HCP restoration #6322
HOSTEDCP-2253: doc/aws-autoNode: initial deployment guide #5443
OCPBUGS-49812: Sanitize PowerVS image name to comply with updated naming standards #6249
CNTRLPLANE-902: New metrics for HCP Azure #6180
NO-JIRA: Add Azure DNS Zone Clean-up Instructions #6312
CORENET-6094: CNO: add FRR-k8s image #6290
METAL-1404: Allow enabling capabilities and make baremetal capability opt-in by default on hosted clusters #6158
OCPBUGS-57497: Revert “Add proxy trustedCA to ignition config” #6288
OCPBUGS-57115: Update PSA from v1beta1 to v1 #6287
MGMT-20801: Enable disabling of Insights capability #6246
CNTRLPLANE-983: Enable codespell in verify and fix all spelling mistakes #6262
NO-JIRA: Add misspell to golangci-lint #6253
CNV-61396: set kubevirt cis rbac valid only for kubevirt platform #6254
CNTRLPLANE-942: update KAS bootstrapping to get RBR from CAO #6137
AUTOSCALE-119: Add pod monitors to karpenter components #6206
OCPBUGS-45265: Don’t use /version for haproxy health checks #6202
CNTRLPLANE-374: hcco: handle post-install creation of OIDC client secrets #6227
OCPBUGS-56861: Remove CapacityReservation validation that requires aws access #6248
CNTRLPLANE-977: Update Konflux references #6217
OCPBUGS-55892: make image registry managed identity optional #6127
CNV-61396: Sync RBAC for expansion support in kubevirt CSI driver #6226
OCPBUGS-57125: Support deserializing monitoring manifests when RHOBS enabled #6238
OCPBUGS-56966: Fix ignition server route getting constantly recreated #6225
OCPBUGS-57125: Support RHOBS when loading cpov2 monitoring manifests by replacing the API group #6228
OCPBUGS-53259: Reuse hosted cluster release and metadata providers #6095
OCPBUGS-54720: HCP payload doesn’t respect multiple mirrors #6222
ARO-15626: Disallow users from setting .spec.managementState to Removed in the image registry operator config on Azure #6013
NO-JIRA: cpo/oidc: remove validation functions that use default CEL compiler #6221
NO-JIRA: Create test fixtures for all resources in TestControlPlaneComponents #6216
OCPBUGS-42938: Support proxy authentication when user/pass is included in URL #6207
OCPBUGS-30260: Allow setting target node selector for control plane router #3946
OCPBUGS-56930: test/e2e: fix version gate checks on minor upgrade #6219
NO-JIRA: Follow up PR from #6192 #6204
MGMT-20682: Enable disabling of openshift-samples capability #6197
OCPBUGS-56430: Add DR operations after HC restoration #6195
CNTRLPLANE-936: fix(tekton): drop multiarch builds on PR #6223
CNTRLPLANE-844: Delete legacy unused DeploymentConfig code #6210
CNTRLPLANE-206: Add NetworkPolicy to shared-ingress #6173
WRKLDS-1676: ocm: Make config compatible with library-go #6203
NO-JIRA: Fix documentation field name for KubeAPIServerDNSName #6220
OCPBUGS-56814: PodSecurityConfiguration Kas config render from gate #6213
OCPBUGS-56777: Move EnsurePSANotPrivileged to AtLeast(t, Version420) #6211
AUTOSCALE-266: Refactor karpenter-operator and karpenter into v2 components #6187
CNTRLPLANE-201: feat(shared-ingress): Bump ubi10 out of beta #6200
OCPBUGS-56492: Fix CatalogSource image check when unauthorized #6192
CNTRLPLANE-931: update konflux references #6188
NO-JIRA: Add unit test for reconciling components with a WithManifestAdapter for SA #6191
NO-JIRA: Fix serviceaccounts with custom adapter not getting pull-secret #6185
OCPBUGS-56457: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6171
CNTRLPLANE-905: feat(shared-ingress): add arm64 builds #6175
CNTRLPLANE-810: Increase imageContentSources slice length validation #6166
CNTRLPLANE-914: chore(deps): update konflux references #6165
CNTRLPLANE-905: Red Hat Konflux update hypershift-shared-ingress-main #6174
CNTRLPLANE-201: feat(shared-ingress): Add el10 Containerfile #6168
NO-JIRA: Remove ControlPlaneV2 API featuregate #6169
NO-JIRA: Move ControlPlaneComponent CRD installation to the CLI #6167
WRKLDS-1676: ocm config: Update leaderElection.name #6156
CNTRLPLANE-844: Refactor CAPI provider/manager into v2 #6159
CNTRLPLANE-844: Refactor ControlPlaneOperator into v2 component #6148
CNTRLPLANE-844: Remove DeploymentConfig usage #6157
NO-JIRA: Fix TestHostedClusterWatchesEverythingItCreates not working locally #6149
NO-JIRA: Keep checking for rollouts during upgrade HO test for five minutes #6097
OCPBUGS-56205: Switch back to rh catalog #6154
OCPBUGS-56164: Fix HyperShift Operator Enterprise contract konflux pipeline #6138
OCPBUGS-56011: Configure ClusterServiceLoadBalancerHealthProbeMode a… #6099
CNTRLPLANE-565: Remove NodePool CapacityReservation API featuregate #6132
CNTRLPLANE-645: Rename NodeCount flag to Replicas #6094
CNTRLPLANE-844: Remove unused DeploymentConfig references #6146
NO-JIRA: test/setup: use case-sensitive prometheusK8s in monitoring config #6150
NO-JIRA: Increase the content width in the upstream docs #6147
NO-JIRA: cpov2: fix structured authentication configuration serialization #6135
CNTRLPLANE-269: Remove legacy machine approver and ign server reconciliation code #6133
OCPBUGS-55913: Fix Job status returning empty reason and message #6134
CNTRLPLANE-269: Remove DeploymentConfig usage from cpov2 #5724
OCPBUGS-37323: MarkPersistentFlagRequired does not work since CLI refactoring #5649
NO-JIRA: Fix minor issues with Azure HC creation doc #6128
OCPBUGS-55504: Add postStart hook to kube-apiserver container #6074
CNTRLPLANE-709: Add ability to limit platform specific resources managed by HostedCluster #6039
CNTRLPLANE-261: Enable pprof in hosted control plane etcd #6003
CNTRLPLANE-334: Update KASv2 structured authentication configuration #6119
CNTRLPLANE-334: Update KAS structured authentication configuration generation logic to use new uid and extra field #6073
OCPBUGS-54483: Add support for registry root entry only in the IDMS/ICSP #6100
OCPBUGS-55357: Only build main branch components #6078
CNTRLPLANE-265: Enable staticcheck linter in golangci-lint #5836
CNTRLPLANE-740: Add DR for HCP using OADP and Hypershift plugin #6077
NO-JIRA: bump HO supported version to 4.20 #6006
CNTRLPLANE-798: ho: changes to ref’ed resources triggers HC reconciliation #6103
And 13 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-cloud-controller-manager

NO-JIRA: Update OWNERS #83
OCPCLOUD-2925: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.33 (1ccdaca) into main #80
OCPBUGS-57678: Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 4.20 #81
Full changelog

ibm-vpc-block-csi-driver

STOR-2393: Rebase to upstream v5.2.16 for OCP 4.20 #102
Full changelog

ibm-vpc-block-csi-driver-operator

STOR-2330: Add labels to subscribe ibm-vpc-block CSI driver controller and node pods to NPs #148
STOR-2394: Bump all deps for 4.20 #147
OCPBUGS-57701: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.20 #145
Full changelog

ibmcloud-cluster-api-controllers

NO-JIRA: Update OWNERS #117
OCPCLOUD-2922: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.11.0 (9369909) into main #113
OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #111
NO-JIRA: Do not gitignore files inside vendor #112
Full changelog

ibmcloud-machine-controllers

OCPCLOUD-2930: Bump k8s 1.33 #67
NO-JIRA: Update OWNERS #68
OCPBUGS-57837: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.20 #65
OCPBUGS-56849, OCPCLOUD-2985, OCPCLOUD-2986: Bump machine-api-operator to pull in authoritativeAPI fix #66
Full changelog

insights-operator

OCPBUGS-60611: virt launcher logs gatherer (#1110) #1110
fix: incorrect anonymization of domains (#1111) #1111
feat: add permissions to gather clusterrole (#1106) #1106
feat: Allow on-demand gathering during initial periodic run (#1109) #1109
RFE-4152: Add missing readonlyRootFilesystem (#1104) #1104
CCXDEV-15041: update on-demand gathering docs (#1097) #1097
CCXDEV-15045: update code to use v1alpha2 api version (#1093) #1093
feat: update the manifest crds to be applied during DevPreview and Custom featuresets (#1099) #1099
Add readonlyRootFilesystem (#1101) #1101
chore(lint): bump golang-ci version (#1102) #1102
Updating ose-insights-operator-container image to be consistent with ART for 4.20 (#1095) #1095
fix(docs): update new SCA endpoint (#1096) #1096
feat: copy proxy envs from IO pod to gathering pods (#1094) #1094
NO-JIRA: update github.com/openshift/api and openshift/client-go to latest version (#1092) #1092
feat: add Progressing condition (#1090) #1090
OCPBUGS-55805 Enhance insights-runtime-extractor errors (#1085) #1085
OCPBUGS-55804 Report an error when the insights-runtime-extractor is not running (#1086) #1086
feat: update DataGather condition reasons (#1084) #1084
feat: ensure the etc-entitlement-pki secret exists (#1082) #1082
feat: move HTTP status code from condition.Reason to condition.Message (#1083) #1083
feat: add gatheringDisabled condition (#1078) #1078
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Liborfuka ocp420 new tests #51
Sidecar containers test case #44
test: Fix JBoss EAP 8.0 version #50
OCPBUGS-57682: Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.20 #47
OCPBUGS-57773: Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.20 #48
test: Fix JBoss EAP 8.0 version #45
test: Fix JBoss EAP 8.0 version #46
Full changelog

ironic

OCPBUGS-60455: Change default json-rpc port to avoid conflict with knmstate #682
METAL-1368: Bring in fixes implementing servicing abort. #683
METAL-1461: Add IPE and Gunicorn packages #680
METAL-1503: Upstream sync 20250728 #673
METAL-1419: Update ironic project hashes #677
METAL-1461: update config to allow Ironic to work with ironic-prometheus-exporter #674
METAL-1379: Bump ironic to include NIC Firmware Updates #672
METAL-1414: Use Python 3.12 to build and run ironic #658
OCPBUGS-55298: Bump ironic to unresponsive bmc commit #670
METAL-1496: Force download and install from source #669
METAL-1496: Revert “OCPBUGS-55298: Bump ironic to latest” #668
OCPBUGS-55298: Bump ironic to latest #667
OCPBUGS-56755, OCPBUGS-57454: Bump sushy and ironic commit #666
OCPBUGS-57806: Updating ironic-container image to be consistent with ART for 4.20 #664
OCPBUGS-52427: Bump sushy to include Targets fix #663
METAL-1376: Make sushy support NetworkAdapters #662
Bug OCPBUGS-55434: Bump sushy to include SuperMicro boot device string workaround #659
METAL-1344: Do not install sushy-oem-idrac separately #653
METAL-1345: Install scciclient from source #652
METAL-1264: Update to latest upstream content #655
OCPBUGS-55381: Extract files one-by-one in logwatch #654
Full changelog

ironic-agent

OCPBUGS-45385: Ignore USB network devices #195
METAL-1419: Update ironic projects hashes #193
METAL-1414: Use python3.12 to build and run ironic-agent #191
METAL-1496: Force download and install from source #192
OCPBUGS-56029: Erase software RAID when install_coreos is used #187
OCPBUGS-57663: Updating ironic-agent-container image to be consistent with ART for 4.20 #190
METAL-1264: Update to latest upstream content #186
OCPBUGS-55350: collect the entire journal from the host #184
Full changelog

ironic-machine-os-downloader

OCPBUGS-57687: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.20 #105
ART-13079: append .0 to go.mod version #101
Full changelog

ironic-static-ip-manager

OCPBUGS-57853: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.20 #52
Full changelog

keepalived-ipfailover

OCPBUGS-57842: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.20 #211
OCPBUGS-57831: Updating ose-egress-http-proxy-container image to be consistent with ART for 4.20 #210
OCPBUGS-57624: Updating openshift-enterprise-egress-router-container image to be consistent with ART for 4.20 #209
OCPBUGS-57572: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.20 #208
OCPBUGS-57510: Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.20 #207
OCPBUGS-48318: Change default value for OPENSHIFT_HA_VRRP_ID_OFFSET #206
Full changelog

kube-metrics-server

OCPBUGS-41851: Bump openshift/kubernetes-metrics-server to v0.8.0 #46
OCPBUGS-57726: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.20 #44
Full changelog

kube-rbac-proxy

OCPBUGS-57550: Updating kube-rbac-proxy-container image to be consistent with ART for 4.20 #122
NO-JIRA: v0.19.1 #119
Full changelog

kube-state-metrics

MON-4277: [bot] Bump openshift/kube-state-metrics to v2.16.0 #122
OCPBUGS-57686: Updating kube-state-metrics-container image to be consistent with ART for 4.20 #121
Full changelog

kube-storage-version-migrator

OCPBUGS-57556: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.20 #222
OCPBUGS-38523: Reduce the page size on list requests to the Kube API server #211
NO-JIRA: Add DOWNSTREAM_OWNERS. #219
Fix verify job failure with build-machinery bump #214
ART-13079: append .0 to go.mod version #212
Full changelog

kubevirt-csi-driver

CNV-61396: Implement volume expansion #61
Full changelog

machine-api-operator

OCPBUGS-60145: Added [Serial] to serial e2e tests #1404
fix for OCPBUGS-55135: userDataSecret.name should be a Required value on AWS #1399
SPLAT-2381: Fixed e2e test to generate machines with cluster name prefix #1398
OCPCLOUD-2980: add ingress/egress network policy v2 #1396
Revert “OCPCLOUD-2980: add ingress/egress network policy” #1395
OCPCLOUD-2980: add ingress/egress network policy #1387
OCPCLOUD-2941: Bump k8s dependencies to 1.33; go 1.24 #1393
OCPBUGS-59376: Enabled 10 concurrent reconciles on GCP #1390
OCPBUGS-58429: Fixed test logic to wait for machines ready and clean up #1388
OAPE-232: Remove GCPLabelsTags featuregate checks and references #1385
OCPBUGS-56849, OCPCLOUD-2985, OCPCLOUD-2986: Fix controllers guard on empty status authoritative api + defaulting #1386
SPLAT-2082: Create e2e for vSphere vm-host zonal feature #1374
Revert “OCPCLOUD-2986,OCPBUGS-56849: fix: controllers: guard on empty .status.authoritativeAPI” #1383
OCPBUGS-56849, OCPCLOUD-2986: fix: controllers: guard on empty .status.authoritativeAPI #1380
NO-JIRA: Make crds-sync module-configuration agnostic #1382
SPLAT-2039: Fixed test logic for hybrid env scenario #1379
OCPBUGS-57018: Fixed test logic for UPI scenario #1375
OCPBUGS-56923: Revert “SPLAT-2082 - Create e2e for vSphere vm-host zonal feature” #1373
SPLAT-2082: Create e2e for vSphere vm-host zonal feature #1369
OCPCLOUD-2717: bump openshift/api #1372
OCPBUGS-56159: correct aws kms permissions #1370
OCPBUGS-55461: Changed machineset tests to be serial #1365
OCPBUGS-55720: fix: use patch for machine/machineset status #1362
OCPBUGS-55461: Fixes machineset paused condition nil pointer #1361
OCPBUGS-55461: Revert “Added skip for when config not multi nic” #1363
Full changelog

machine-config-operator

OCPBUGS-61016: Fix wait failure on MCO pods #5270
OPNET-683: Automatically copy over configs applied by MCO #5162
MCO-1743: Irreconcilable validations reporting #5254
MCO-1536: Add new ImageBuildDegraded status option to MCP #5251
OCPBUGS-57979: Update Kubelet Config MachineConfig upon FeatureGate update #5228
OCPBUGS-60559: Update the OnClusterBuild payload tests to reflect the validation rule requiring MCP & MOSC names to match #5249
OCPBUGS-60526: Remove escape chars when installing extensions in OCL Containerfile #5247
NO-JIRA: clean up node cluster dashboard #4612
OCPEDGE-1733: feat: consolidate arbiter template files #5232
OCPBUGS-59723: Reintroduce cronjob that deletes MCN v1alpha1 CRD #5238
OCPBUGS-60287: Remove OnClusterBuild FG #5241
NO-ISSUE: Revert “OCPBUGS-59723: Add mechanism to delete MCN v1alpha1 CRD in 4.16+ clusters” #5237
OCPBUGS-59723: Add mechanism to delete MCN v1alpha1 CRD in 4.16+ clusters #5215
MCO-1810: Support kernelType in OCL #5172
OCPBUGS-60119: Invalid architecture value found in annotation during 4.19 update #5222
MCO-1777: Run build as an init container for OCL #5200
MCO-1811: add MachineConfigControllerPoolAlert runbook to alert #5214
TRT-2232: Revert #5148 “OCPBUGS-58023: Prevent unnecessary systemd unit disable” #5213
OCPNODE-3522: Generate deterministic order namespacedPolicyJSON #5196
OCPNODE-3466: Remove containernetworking-plugins directory from crio.conf #5173
NO-ISSUE: Balance runtime of e2e-gcp-op shards #5203
OCPBUGS-58023: Prevent unnecessary systemd unit disable #5148
MCO-1773: Pick up openshift/kubernetes 1.33 rebase updates #5182
OCPBUGS-59780: ARO clusters cannot scale on upgrade to 4.19 #5195
OCPBUGS-58443: In OCL for reboot, after applying ssh/file/password based MC the MCP is stuck in updating state #5191
OCPBUGS-57484, OPNET-681: Support migration to NMState #5064
OCPNODE-3006: Migrate ClusterImagePolicy/ImagePolicy to v1 #5143
OCPBUGS-43406: Add workaround fix for static pod race #5185
MCO-1813: Simplify boot image reconciliation with Go generics #5183
NO-ISSUE: Split gcp-op into two tests #5197
MCO-1815: vSphere bootimage update reconciliation should handle bootimage name diverging #5187
OCPBUGS-58191: fixes image registry secret handling #5171
OCPBUGS-55971: Enable debug logging for nodeip-configuration #5043
OCPBUGS-59776: Revert “OCPBUGS-52302: Fix timing of Spec.ConfigVersion.Desired update in MCN” #5190
OCPBUGS-52302: Fix timing of Spec.ConfigVersion.Desired update in MCN #5121
OCPBUGS-59672: TestMCNPoolNameCustom should clean up resources properly #5184
OCPBUGS-58238: Image Mode creates new MOSBs when osbuilder is drained and it results in degraded MCPs #5161
OCPBUGS-59367: Set our test suite as global #5179
OCPBUGS-56115: Understand and eliminate noisy logs for MCN #5136
OCPBUGS-57024: use channel to signal controller shutdown #5104
NO-ISSUE: Add emy to baremetal-reviewers #5164
MCO-1739: Tell origin our suite is disruptive and set timeout #5167
MCO-1307: Add support for VSphere for BootImage Update #4677
OCPBUGS-44290: Fix when machines are considered Degraded in MCP status based on MCN NodeDegraded condition #5110
MGMT-20810: pass control plane topology to keepalived-monitor #5113
NO-ISSUE: Update ImageMode tests Polarion ID #5159
OCPEDGE-1858: Remove podman-etcd machine config source #5129
MCO-1741: Fix missing OTE logs #5158
MCO-1741: Bump OTE framework to add skip reason #5160
MCO-1661: Feature Gate handling rework #5029
OCPBUGS-57702: Update images to be consistent with ART #5146
NO-ISSUE: API & client-go version bumps #5142
MCO-1624: Make MCN e2e tests blocking #4972
MCO-1741: Add cloud providers to the kubernetes vendor #5145
OCPBUGS-58180: Add control-plane label for master nodes on legacy clusters #5147
MCO-1719: MVP port of the MCO extended QE test suite #5108
MCO-1282: Remove all code related to the Image Registry workaround Config Map #5093
OCPBUGS-57426: OCPBUGS-57506: Boot image controller should correctly handle marketplace boot images #5122
MCO-1591: Ignition recursive converter #4913
OCPBUGS-57072: configure-ovs: don’t escape : in nmcli output #5106
OCPBUGS-57458: add MachineConfiguration to CO related objects #5124
MCO-1580: MCO-1581: Achieving parity with MCO node disruption frequency #4996
OCPBUGS-56220: Ensure the build controller restarts on upgrade #5100
OCPBUGS-56555: openvswitch3.5-ipsec package not included with ipsec os extension #5112
NO-ISSUE: Add Jetbrains IDEs files to .gitignore #5116
OCPBUGS-55663: Remove NodeDisruptionPolicy featuregate #5092
OCPBUGS-7747: Do not set cpu system reserve below the default value #5046
OCPBUGS-45459: Remove trailing period from hostnames #4966
OCPBUGS-56744: Fix typo in MCN’s MachineConfigNodePinnedImageSetsDegraded message #5099
OCPBUGS-55830: Only update boot disks during GCP boot image updates #5084
OCPBUGS-55365: Regardless of Pool configuration wait on other sub-controllers to Render #5022
OCPBUGS-45621: Fix dynamic-system-reserved-calc.sh when only true parameter is used #4733
NO-JIRA: OWNERS: Update team osasinfra #5066
OCPBUGS-36859: Support NODEIP_HINT in IPI deployments too #4973
OCPBUGS-56446: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5067
OCPBUGS-55681: Give keepalived container chroot cap #5032
NO-JIRA: operator: use component annotation for ownership #5056
OCPBUGS-56211: Boot Image Controller should not degrade when golden configmap is slow to update #5051
OCPBUGS-53390: Fix interrupt state to account for failure correctly #5054
OCPBUGS-55967: Add hot loop detection in the boot image controller #5037
OCPBUGS-55439: scope MCD node listers to current node #5015
OCPBUGS-55770: Compare the osImageURLs for OS validation check #5041
MCO-1654: Add new runbook for KubeletHealthState to alert #5042
OCPBUGS-49728: Adapt MCC to use LayeredNodeState and remove LayeredPoolState #4841
OCPBUGS-54697: error from generateAndValidateRenderedMachineConfig function can be misleading #5033
OCPNODE-3173: Disable OCI artifact mount by default. #5016
OCPBUGS-55597: OWNERS: update owners file with current MCO team members #5024
OCPBUGS-55450: Only populate Status.PinnedImageSets.CurrentGeneration on valid generation value #5023
OCPBUGS-55327: Bugfix Ignition compression merge #5006
OCPBUGS-55262: Use auto=start only for IPsec out connections #5017
OCPBUGS-55713: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5030
OCPBUGS-52940: AWS Custom-DNS: Update services that run on control plane nodes #4939
OCPBUGS-41485: Update MCD Log Output to Clarify No Configuration Change #5019
Full changelog

machine-image-customization-controller

METAL-1509: Add support for multi arch image files #144
METAL-1484: Support using a block device as the base ISO #143
OCPBUGS-57848: Update image to be consistent with ART for 4.20 #139
NO-ISSUE: Remove inactive OWNERS, add Riccardo #136
Full changelog

machine-os-images

METAL-1509: Add aarch64 images #65
OCPBUGS-57659: Updating ose-machine-os-images-container image to be consistent with ART for 4.20 #64
OCPBUGS-55810: Dummy change to force a rebuild for 4.20 #62
Full changelog

metallb-frr

OCPBUGS-57696: Updating ose-frr-container image to be consistent with ART for 4.20 #101
Align2006 #98
Full changelog

multus-admission-controller

OCPBUGS-57749: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.20 #98
OCPBUGS-59304: Update the github.com/golang/glog module to v1.2.4 #99
ART-13079: append .0 to go.mod version #94
Full changelog

multus-networkpolicy

Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.20 (#72) #72
Downstream sync 2025-06-19 (#74) #74
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-58405: Ds merge 7/15/25 #372
Full changelog

must-gather

CORENET-5412: network: Gather OVN-Kubernetes CUDN CRs #486
OCPBUGS-57890: Updating ose-must-gather-container image to be consistent with ART for 4.20 #497
OCPBUGS-52367: Fix collecting IPsec data for upgrade #482
CORENET-5882: network: gather routeadvertisements.k8s.ovn.org #485
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

network-interface-bond-cni

OCPBUGS-57944: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.20 #76
OCPBUGS-57754: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.20 #73
CNF-17883: Upstream Sync 26052025 #71
OCPBUGS-54229: Upstream sync 07-05-2025 #67
NO-JIRA: Add ci-operator file #68
Full changelog

network-metrics-daemon

Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.20 (#107) #107
create .snyk file to skip vendor folder (#108) #108
OCPBUGS-59612: Bump github.com/golang/glog to v1.2.4 (#109) #109
no-jira: Replace e2e test image (#118) #118
Full changelog

network-tools

NO-JIRA: Bug backlog tooling: add arg for listing stale bugs (>4 months) #158
NO-JIRA: add tooling to reduce bug backlog toil for viewing bz comment updates #157
NO-JIRA:Remove Tim from members list #153
OCPBUGS-57894: Updating ose-network-tools-container image to be consistent with ART for 4.20 #150
NO-JIRA:Update OWNERS file #152
ART-13079: append .0 to go.mod version #145
NO-JIRA: Add aurko, comment jakob, remove nadia #143
NO-JIRA: Fix github epic ID and username matching #142
Full changelog

networking-console-plugin

CNV-52160: VLAN fields #268
CNV-52160: add awareness checkbox #267
CNV-52160: edit project mapping #266
CNV-52160: Creation form #257
CNV-52160: Vmnetwork details page #263
NO-JIRA: fix(i18n): use right namespace #262
OCPBUGS-60122: Fix ingress details #258
CNV-52160: add vm network list #256
OCPBUGS-49652: Fix requiremenets with no value #254
CNV-63471: Replace Bootstrap Grid CSS with PatternFly Grid and Table #253
OCPBUGS-57805: Updating networking-console-plugin-container image to be consistent with ART for 4.20 #252
OCPBUGS-56929: Add fileupload translation #245
OCPBUGS-49386: Fix pod contenxt #246
CNV-61902: fetch description of terms for popovers #244
CNV-61827: fix styling issues #243
CNV-61536: align Modals with PatternFly default #242
CNV-60062: fix links to upstream documentation #241
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-59794: Adding nil checks to avoid Panic #47
OCPCLOUD-2924: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (109de6e) into main #44
OCPBUGS-57759: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.20 #45
Full changelog

nutanix-machine-controllers

OCPCLOUD-2929: Align dependencies with k8s 1.33 and Go 1.24 for 4.20 #120
NO-JIRA: Update OWNERS #118
OCPBUGS-56849, OCPCLOUD-2985, OCPCLOUD-2986: Bump machine-api-operator to pull in authoritativeAPI fix #113
OCPBUGS-57705: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.20 #103
NO-JIRA: go.keploy.io/server@v0.8.6: checksum mismatch fix #112
Full changelog

oauth-apiserver

CNTRLPLANE-1305: Update openshift/oauth-apiserver to latest Kubernetes 1.33 version #139
CNTRLPLANE-1259: Add README to test extension #141
CNTRLPLANE-1259: Update Jira component name to oauth-apiserver #140
OCPBUGS-57611: Updating ose-oauth-apiserver-container image to be consistent with ART for 4.20 #137
CNTRLPLANE-1259: set up openshift-tests-extension and add a sanity test #138
CNTRLPLANE-5: Accept client-go feature gates and unrecognized feature gates via –feature-gates. #136
NO-JIRA: Bump to Kubernetes v1.32 #135
Full changelog

oauth-proxy

CNTRLPLANE-1313: Update openshift/oauth-proxy to latest Kubernetes 1.33 version #330
NO-JIRA: Update README.md #316
NO-JIRA: 4.20 kube 1.32 #319
APPSRE-11869: Fixing CVEs not related to k8s bump #324
OCPBUGS-57487: fix e2e tests #321
Full changelog

oauth-server

OCPBUGS-58267: Fix mixup with Spanish and French locale variable names #188
OCPBUGS-57719: Updating oauth-server-container image to be consistent with ART for 4.20 #190
Use newer build-machinery-go #177
ART-13079: append .0 to go.mod version #175
OSASINFRA-3534: Bump Gophercloud to v2 #170
Full changelog

oc-mirror

fixes parser issue in the dependabot yaml (#1251) #1251
Bump helm.sh/helm/v3 in /v2 in the oc-mirror-v2 group (#1248) #1248
Bump the oc-mirror-v2 group in /v2 with 5 updates (#1245) #1245
Bump the oc-mirror-v2 group in /v2 with 2 updates (#1243) #1243
CLID-389: v2: validate access to destination registry (#1201) #1201
reduces the dependabot config interval (#1242) #1242
Bump the oc-mirror-v2 group across 1 directory with 5 updates (#1241) #1241
Bump github.com/docker/docker in /v2 in the go_modules group (#1239) #1239
clid-415: adds a warn message to v1 (#1238) #1238
Bump the oc-mirror-v2 group in /v2 with 17 updates (#1232) #1232
OCPBUGS-59949: fixes the result output showing the wrong total (#1236) #1236
prevents panic when helm chart is nil (#1233) #1233
OCPBUGS-59646: revert #1220 and print a warning instead (#1228) #1228
updates dependabot config (#1231) #1231
OCPBUGS-55114: v2/operator: support manifest lists with one arch (#1140) #1140
NO-JIRA: OKD compatibility - Allow custom value for SignatureURL (#1165) #1165
adds build-machinery-go as a tool dependency (#1226) #1226
OCPBUGS-59714: Detect images from a Helm Chart with an aliased chart dependency (#1038) #1038
OCPBUGS-52562: Ensure release collection does not include duplicates (#1218) #1218
OCPBUGS-59396: v2/archive: handle 0b mirror archive files (#1219) #1219
OCPBUGS-54622: cli/delete: fix workflow mode name output (#1214) #1214
OCPBUGS-59646: cmd: unpack v2 to $HOME instead of /tmp (#1220) #1220
OCPBUGS-58956: bump helm for CVE fix (#1213) #1213
OCPBUGS-56398: Bug fix not to overwrite log files (#1208) #1208
OCPBUGS-58467: Add range check for –parallel-images and –parallel-l… (#1211) #1211
Revert “v2: remove build-machinery-go as a dependency (#1197)” (#1209) #1197
OCPBUGS-58193: v2/archive: error d2m when no tar files found (#1200) #1200
v2: remove build-machinery-go as a dependency (#1197) #1197
OCPBUGS-57370: v2/defaults Fix rate limiting issues by enabling exponential backoff retries (#1202) #1202
OCPBUGS-52470: Fixes the tag when rebuilt catalog by digest only (#1185) #1185
adds README.md for v2 and rename v1 readme to README_v1.md (#1191) #1191
OCPBUGS-57362: v2/mirror: retry in case of ContextDeadlineExceeded (#1181) #1181
upgrades distribution to v3.0.0 (#1156) #1156
OCPBUGS-57826: Updating oc-mirror-plugin-container image to be consistent with ART for 4.20 (missing files of pr 1189) (#1190) #1190
Updating oc-mirror-plugin-container image to be consistent with ART for 4.20 (#1189) #1189
OCPBUGS-55374: Add console warning if bad umask is detected (#1186) #1186
OCPBUGS-54473: Bug fix - incomplete error messages for helm charts (#1172) #1172
OCPBUGS-57461: v2/operator: add rebuilt catalog to tar file (#1184) #1184
OCPBUGS-57387: v2/archive: fix sanitization of . (#1179) #1179
OCPBUGS-51157: Bug fix for invalid release image does not cause mirro… (#1150) #1150
skips invalid helm image from templates (#1178) #1178
OCPBUGS-55074: deletes cosign tag based signatures (#1169) #1169
adds code to handle signature errors in the archive pkg (#1162) #1162
OCPBUGS-55078: skips signature mirroring for rebuilt operator catalogs (#1154) #1154
OCPBUGS-56009: Bug fix for no release signature found (#1147) #1147
OCPBUGS-56486: v2/config: allow delete and mirror words (#1164) #1164
OCPBUGS-56642: update the Dockerfile to work with the 1.23 go.mod (#1159) #1159
disables the signature verification on operator catalog collection (#1151) #1151
OCPBUGS-55966: v2/archive: print unarchive progress (#1141) #1141
OCPBUGS-54443: v2/cli: always remove past archives before m2d (#1144) #1144
OCPBUGS-56117: Make v2 blockedImages use regular expressions (#1145) #1145
changes the signature mirroring default to disabled (#1143) #1143
OCPBUGS-54587: v2: bump containers/common dep to 0.63.0 (#1138) #1138
CLID-182: Add spinner to release collector mirror to disk or mirror to mirror (#1085) #1085
no-jira: Disable go workspace and build v2 as a binary (#1078) #1078
OCPBUGS-55100: implements registries.d file as specified in containers/image docs (#1131) #1131
OCPBUGS-54220: v2/imgbuilder: use –authfile when set (#1129) #1129
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #453
NO-ISSUE: Synchronize From Upstream Repositories #449
NO-ISSUE: Synchronize From Upstream Repositories #444
NO-ISSUE: Synchronize From Upstream Repositories #435
NO-ISSUE: Synchronize From Upstream Repositories #431
NO-ISSUE: Synchronize From Upstream Repositories #421
NO-ISSUE: Synchronize From Upstream Repositories #411
OPRUN-4017: Synchronize From Upstream Repositories #408
NO-ISSUE: Synchronize From Upstream Repositories #405
NO-ISSUE: Synchronize From Upstream Repositories #398
NO-ISSUE: Synchronize From Upstream Repositories #397
NO-ISSUE: Synchronize From Upstream Repositories #396
NO-ISSUE: Synchronize From Upstream Repositories #394
NO-ISSUE: Synchronize From Upstream Repositories #388
OCPBUGS-55051: Synchronize From Upstream Repositories #384
OPRUN-3957: Synchronize From Upstream Repositories #382
NO-ISSUE: Synchronize From Upstream Repositories #381
NO-ISSUE: Synchronize From Upstream Repositories #380
NO-ISSUE: Synchronize From Upstream Repositories #377
NO-ISSUE: Synchronize From Upstream Repositories #375
NO-ISSUE: Synchronize From Upstream Repositories #367
NO-ISSUE: Synchronize From Upstream Repositories #365
NO-ISSUE: Synchronize From Upstream Repositories #363
NO-ISSUE: Synchronize From Upstream Repositories #359
NO-ISSUE: Synchronize From Upstream Repositories #356
NO-ISSUE: Synchronize From Upstream Repositories #352
NO-ISSUE: Synchronize From Upstream Repositories #346
NO-ISSUE: Synchronize From Upstream Repositories #344
NO-ISSUE: Synchronize From Upstream Repositories #339
NO-ISSUE: Synchronize From Upstream Repositories #337
NO-ISSUE: Synchronize From Upstream Repositories #336
NO-ISSUE: Synchronize From Upstream Repositories #333
NO-ISSUE: Synchronize from upstream #331
And 62 elided commits (e.g. from squash or rebase merges)
Full changelog

openshift-apiserver

CNTRLPLANE-1304: Update openshift/openshift-apiserver to latest Kubernetes 1.33 version #539
CNTRLPLANE-1258: Add README to test extension #540
OCPBUGS-47773: Bump library-go to fix route validation #535
OCPBUGS-57858: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.20 #538
CNTRLPLANE-1258: set up openshift-tests-extension and add a sanity test #536
OCPBUGS-59262: Revert “Drop support for image manifest schema 1” #533
WRKLDS-1599: Drop support for image manifest schema 1 #528
NO-JIRA: Add Apache 2.0 License file #523
OCPBUGS-45729: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.19 #486
OCPBUGS-56736: Revert “OCPBUGS-38120: project: run validation function when deleting an object” #519
OCPBUGS-35944: Allow updates to ImageStreams that violate existing LimitRanges #513
OCPBUGS-35855: Wire dry run option to Image API server operations #511
OCPBUGS-38120: project: run validation function when deleting an object #508
OCPBUGS-54458: Fix image reference in TestImageStreamImportQuayIO #509
Full changelog

openshift-controller-manager

OCPBUGS-55650: Drop BuildCSIVolumes feature gate logic (Build CSI Volumes in OpenShift Builds is GA since 4.14) #407
CNTRLPLANE-1054: Update k8s dependencies to 1.33.2 #405
OCPBUGS-57918: ignore error failing to find pull/push secrets #397
WRKLDS-1676: cmd: Refactor to use NewControllerCommand #378
OCPBUGS-57198: Make the pull secrets volume mounts in build containers read-only. #387
WRKLDS-1676: pkg/cmd: Add –kubeconfig and –namespace flag #385
WRKLDS-1676: Delete unused pkg/serviceaccounts #381
OCPBUGS-52193: legacy image pull secret rollback controller #380
OCPBUGS-54695: Empty proxy variables are causing issues during the build #373
Full changelog

openshift-state-metrics

OCPBUGS-48747: Dedup *_status metrics for Routes #120
OCPBUGS-57771: Updating openshift-state-metrics-container image to be consistent with ART for 4.20 #125
ART-13079: append .0 to go.mod version #121
Full changelog

openstack-cluster-api-controllers

Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #369
OCPBUGS-57559: Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.20 #368
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #367
OWNERS: Update team osasinfra #363
Full changelog

openstack-machine-api-provider

OSASINFRA-3690: Bump machine-api-operator #136
OCPBUGS-57823: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.20 #135
NO-JIRA: OWNERS: Update team osasinfra #133
NO-JIRA: Unignore generated files in the vendor directory #134
Full changelog

openstack-resource-controller

NO-JIRA: Update OWNERS_ALIASES #21
OCPBUGS-57814: Updating openstack-resource-controller-container image to be consistent with ART for 4.20 #19
NO-JIRA: Merge https://github.com/k-orc/openstack-resource-controller:release-1.0 into main #18
NO-JIRA: Merge from upstream #17
NO-JIRA: Merge https://github.com/k-orc/openstack-resource-controller:release-1.0 into main #16
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-JIRA: Remove deleted yamls #1032
NO-ISSUE: Update OWNERS to reflect current team makeup #1057
NO-ISSUE: Synchronize From Upstream Repositories #1055
NO-ISSUE: Enable readonlyRootFilesystem by default #1043
NO-ISSUE: Synchronize From Upstream Repositories #1046
NO-ISSUE: Synchronize From Upstream Repositories #1045
NO-ISSUE: Synchronize From Upstream Repositories #1044
NO-ISSUE: Synchronize From Upstream Repositories #1041
NO-ISSUE: Synchronize From Upstream Repositories #1039
NO-ISSUE: Synchronize From Upstream Repositories #1038
NO-ISSUE: Synchronize From Upstream Repositories #1035
OCPBUGS-58275: Fix networkpolicy filter for microshift manifests #1031
NO-ISSUE: Synchronize From Upstream Repositories #1029
OCPBUGS-57554: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.20 #1026
OCPBUGS-57595: Updating operator-registry-container image to be consistent with ART for 4.20 #1028
OCPBUGS-57566: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.20 #1027
NO-ISSUE: Synchronize From Upstream Repositories #1024
NO-ISSUE: Synchronize From Upstream Repositories #1016
OCPBUGS-43966, OCPBUGS-57222: Synchronize From Upstream Repositories #1014
NO-ISSUE: Synchronize From Upstream Repositories #1013
OCPBUGS-56467: Synchronize From Upstream Repositories #1005
OPRUN-3903, OPRUN-3906, OPRUN-3923, OPRUN-3926: Add NetworkPolicy support to OLMv0 components #1008
NO-ISSUE: Synchronize From Upstream Repositories #1003
NO-ISSUE: Synchronize From Upstream Repositories #1002
NO-ISSUE: Synchronize From Upstream Repositories #1000
NO-ISSUE: Synchronize From Upstream Repositories #997
OCPBUGS-53161, OPRUN-3880: Synchronize From Upstream Repositories #996
Full changelog

operator-marketplace

OCPBUGS-59566, OCPBUGS-59570: Move Network Policy manifests #652
OCPBUGS-60060: (fix) Update the operator-ibm-cloud-managed with the same configuration applied to operator manually #649
OPRUN-3888, OPRUN-3889: Upgrade catalog images from 4.19 to 4.20 #650
OPRUN-3981: Upgrade Go from 1.23 to 1.24.3 and k8s deps to 1.33 for release 4.20 #647
OPRUN-3981: Update dockerfile to use go 1.24 and OCP image 4.20 #645
OPRUN-3902: Add static NetworkPolicy for marketplace-operator #644
NO-ISSUE: Add readonlyRootFilesystem #634
OCPBUGS-57711: Updating marketplace-operator-container image to be consistent with ART for 4.20 #641
NO-ISSUE: (cleanup): Update Owner Alias - remove inactive maintainers #631
NO-JIRA: OWNERS: Add camilamacedo86 and tmshort as approvers #632
NO-ISSUE: Bump github.com/operator-framework/api from 0.30.0 to 0.31.0 #627
NO-ISSUE: (CI) - Add check to avoid we upgrade by mistake the go vers… #625
NO-ISSUE: Add dependabot k8s and go library groupings #626
NO-ISSUE: Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 #620
Full changelog

powervs-block-csi-driver

MULTIARCH-5572: Rebase ibm-powervs-block-csi-driver with upstream #106
MULTIARCH-5572: Rebase ibm-powervs-block-csi-driver with upstream #105
no-jira: Add Kishen V as a reviewer #101
MULTIARCH-5572: Rebase ibm-powervs-block-csi-driver with upstream for go toolchain issue with ose builds #100
OCPBUGS-57598: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.20 #98
MULTIARCH-5572: Rebase ibm-powervs-block-csi-driver with upstream #99
Full changelog

powervs-block-csi-driver-operator

CNTRLPLANE-1290: enable readOnlyRootFilesystem #87
STOR-2394: Bump all deps for 4.20 #85
OCPBUGS-57699: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.20 #84
Full changelog

powervs-cloud-controller-manager

No-Jira: Bump golang and Update oauth2 package in go.mod #87
OCPBUGS-57857: Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.20 #86
Full changelog

powervs-machine-controllers

OCPCLOUD-3027: Bump k8s 1.33 #121
NO-JIRA: Bump machine-api-operator to pull in authoritativeAPI fix #120
OCPBUGS-57860: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.20 #119
NO-ISSUE: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #118
Full changelog

prom-label-proxy

NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.0 #384
OCPBUGS-57850: Updating prom-label-proxy-container image to be consistent with ART for 4.20 #383
NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.11.1 #379
Full changelog

prometheus

MON-4300: update prometheus to 3.5 #260
OCPBUGS-39089: Clarify prometheus pod NFS warning message #243
OCPBUGS-57729: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.20 #259
MON-4245: chore(image): reduce binary size by excluding unused SD deps #251
MON-4251: update prometheus to v3.3.1 #252
Full changelog

prometheus-alertmanager

OCPBUGS-59400: Include go-verify-deps expected files in gitignore #106
OCPBUGS-57770: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.20 #103
OCPBUGS-57770: fix: inconsistency vendored dir due to Konflux migration #105
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-56158: Bump openshift/prometheus-operator to v0.85.0 #338
NO-JIRA: [bot] Bump openshift/prometheus-operator to v0.84.1 #337
MON-4255: Bump openshift/prometheus-operator to v0.84.0 #333
OCPBUGS-57881: Updating prometheus-operator-container image to be consistent with ART for 4.20 #334
OCPBUGS-57809: Updating prometheus-config-reloader-container image to be consistent with ART for 4.20 #332
OCPBUGS-57629: Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.20 #331
Full changelog

prometheus-node-exporter

OCPBUGS-57600: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.20 #168
Full changelog

rhel-coreos, rhel-coreos-extensions

Merge #1854
NO-JIRA: Add PeaceRebel (Bipin) to approvers list #1812
COS-3418: add kola-denylist for skipping kola tests #1836
NO-JIRA: Add Johan-Liebert1 (Pragyan Poudyal) to owners #1766
COS-3294: extensions/rhel-10.1: skip crun-wasm dependency due to missing repo #1825
OCPEDGE-1706: [TNF] OCP Two Node with Fencing symlink begone! #1826
COS-3294: extensions/rhel-10.1: drop kernel-rt-kvm package from RHEL 10 builds #1824
Merge #1823
NO-JIRA: faq: add info about querying rpmdb and extensions #1820
NO-JIRA: bump verison to 4.20 #1804
NO-JIRA: c9s/c10s repos: use basearch var for extras repo #1819
NO-JIRA: README.md: add Mermaid diagram #1816
NO-JIRA: tree: delete base compose files, rework README #1811
NO-JIRA: Remove kernel-rt-kvm for cs9 and cs10 #1814
NO-JIRA: tests: fix RHEL 10.1 handling in kernel replace test #1813
Full changelog

route-controller-manager

OCPBUGS-59575: Update all dependencies #63
OCPBUGS-57616: Updating ose-route-controller-manager-container image to be consistent with ART for 4.20 #62
Full changelog

service-ca-operator

CNTRLPLANE-1260: Add README to test extension #272
CNTRLPLANE-1260: set up openshift-tests-extension and add a sanity test #270
NO-JIRA: Update Owners #269
OCPBUGS-57703: Updating ose-service-ca-operator-container image to be consistent with ART for 4.20 #268
Full changelog

telemeter

OCPBUGS-57537: Updating telemeter-container image to be consistent with ART for 4.20 #563
ART-13079: append .0 to go.mod version #559
OCPBUGS-56425: Accept and discard metadata requests over remote write #558
NO-JIRA: README.md: fix command to create an auth token #557
Full changelog

tests

CNTRLPLANE-1257: Enable OTE for apiserver Operators and servers #30120
OCPBUGS-57496: Account for system:hosted-cluster-config service account in HyperShift #30075
TRT-2260: Create High CPU intervals for nodes #30152
trt-2257: annotate zstd as sig-builds #30190
CORENET-6232: add PreconfiguredUDNAddresses FG tests #30010
TRT-2268: Add support for OTE test lifecycles #30166
OCPBUGS-60842: fix: add exception for csi snapshot controller on two node #30153
OCPBUGS-56691: Pass volume-percentage to 100 in must-gather executions #30182
OPRUN-4089: Remove OLMv1 Tests remaning since all is migrated to OTE/operator-controller repo #30173
trt-2257: separate builds tests #30171
NO-JIRA: test/extended: update auth-related test OWNERS #30149
CNTRLPLANE-945: oidc/keycloak: make keycloak client use environment proxy for HTTP requests #30148
NO-JIRA: Stop setting feature gate conditional #30146
CNTRLPLANE-945: monitor: auditloganalyzer: skip watch channels processing when cluster stability is explicitly marked as Disruptive #30174
OPRUN-4056: [OLMv1] Remove Preflight checks since those were migrated to OTE #30074
SREP-1622: Fix endpoint admission test namespace creation for ROSA #30134
OCPNODE-3004: Run ImageVolume tests in all clusters. #30122
OCPBUGS-52968: Drop the etcd should not log excessive took too long messages test #30143
OCPBUGS-57477: Allow three long term flaky k8s tests to retry #30140
OCPBUGS-60550: Increase curl timeout from 3s to 5s for egress firewall DNS rule test #30133
OCPBUGS-60454: Update the Control Plane Machine name pattern to support the master’s names used on OpenStack #30125
NO-JIRA: Stop ignoring the targets from openshift-cluster-version #30111
OTA-1581: Skip UpgradeStatus test on HyperShift #30132
STOR-1064: OCPBUGS-59256: bump kubernetes version to fix provisioning e2e test #30126
OCPBUGS-52968: Expand and rate limit tests watching for etcd logging anomalies #30013
Revert “TRT-2197: use fixed seed for test ordering” #30127
NO-JIRA: fix: update arbiter test #30112
OCPBUGS-59526: TLS registry update #30116
OCPBUGS-57032: upgrade.go: wait some time after node upgrade #29960
OCPBUGS-60530: Fix panics in inclusterapi disruption during ROSA jobs #30129
MCO-1656: Component Readiness for vSphere Bootimage Update #29741
CNTRLPLANE-945: suites/external-oidc: explicitly mark cluster stability as disruptive #30128
OCPBUGS-60375: Use ubi9 as latest imagestream for perl #30117
OCPBUGS-60530: Log full stack traces for panics in monitortest cleanup #30118
OCPBUGS-60562: SigstoreImageVerification:update waitForMCP different config name #30115
OCPEDGE-1755: Add TNF E2E tests for ungraceful node shutdown #29986
OCPBUGS-60238: images/tests: Remove rteval #30077
NO-JIRA: Ensure Platform Prometheus targets are protected #30014
OCPBUGS-60375: Fix perl hotdeploy test #30114
OTA-1580: Further tests for oc adm upgrade status #30109
NO-JIRA: Add compat_otp package with openshift-tests-private (OTP) util implementation #30081
OCPBUGS-60375: Remove Perl 5.32 on UBI8 #30092
CNTRLPLANE-945: oidc: configure an oidc client secret for the console to consume #30094
NO-JIRA: [TNF] add Two Node Fencing exception to accept less than two etcd endpoints #30058
OCPBUGS-58037: increase timeout of image extract test #30068
OCPNODE-3520: UserNamespaces: Increase build timeout duration #30071
OPRUN-4055: [OLMv1] Remove olmv1.go tests since those has been executed by OTE #30072
TRT-2226: Exclude ephemeral cni-sysctl-allowlist-ds from maxUnavailable/maxSurge check #30095
CNTRLPLANE-945: OIDC/enable skipped tests #30087
CNTRLPLANE-1248: Enable OTE for cluster-kube-apiserver Operator #30078
STOR-2370: Add openshift-test tags for CSO #30042
OCPEDGE-1969: add recovery tests for TNA #30022
CNTRLPLANE-945: oidc: fix test issues #30040
OTA-1580: Monitortest framework test for oc adm upgrade status #30031
OCPBUGS-59603: Fix vgs tests #30008
OCPBUGS-57032: Add wait.Poll retry logic to checkUpgradeability with 30s timeout #30062
OCPNODE-3004: ImageVolume: Increase timeout duration #30070
OTA-1559: test/extended/cli/admin: Add ‘oc adm upgrade recommend’ smoke test #29831
NO-JIRA: Export GetIPFamilyForCluster #30065
NO-JIRA: Allow only including / excluding specific extension images #29980
NO-JIRA: Update extended/networking OWNERS #30026
NO-JIRA: Update image mirroring instructions to avoid using external binary #30060
TRT-2197: use fixed seed for test ordering #29997
NO-JIRA: Get enabled featuregates from metrics endpoint #29952
CORENET-6203: Enable test for LGW L2 #30009
OPRUN-3964: [olmv1] - Remove test [sig-olmv1][OCPFeatureGate:NewOLM] OLMv1 CRDs should be installed migrated to operator-controller repository/OTE #30036
OCPBUGS-56506: Don’t check for remote node subnet BGP routes #30029
OCPNODE-3004: Increase the time to wait until the pod becomes ImagePullBackOff #30030
OCPBUGS-59218: feat(azure): skip metrics collection for ARO HCP hypershift #30006
NO-JIRA: Revert “OCPBUGS-55238: spyglass: hide disruption events for localhost” #30034
TRT-2224: Fix edge case where failures are not counted #30039
TRT-2163: incluster disruption images #30007
OCPNODE-3004: Accept ErrImagePull for non-existent image volume test. #30027
OCPNODE-3454: OCPFeatureGate:SigstoreImageVerification update test on v1 (Cluster)ImagePolicy #29973
CNTRLPLANE-945: Add tests for ExternalOIDC and ExternalOIDCWithUIDAndExtraClaimMappings features #29917
OCPNODE-3004: Add ImageVolume e2e tests #30015
OCPBUGS-59750: Move the legacy container failures #30017
OPRUN-3768: Add OLMv1 Single/OwnNamespace tests #29998
OCPBUGS-55238: spyglass: hide disruption events for localhost #29710
API-1802: chart template: show cert rotation events #29279
NO-ISSUE: Automated - Update synthetic test data #29802
OTA-1580: Add basic test for oc adm upgrade status CLI #29954
NO-JIRA: Skip cert collection tests on hypershift #28937
OCPBUGS-59555: Add ubi10 images to image-ecosystem #30001
OPRUN-3965: Enable OTE for Operator Controller (OLMv1) #29949
NO-JIRA: fix: nil pointer reference in pod count #30002
NO-JIRA: oc idle: Increase timeout of endpointslice status check #29994
CNTRLPLANE-371: Update to Kubernetes v1.33.2 #29709
MULTIARCH-5390: Reapply “Merge pull request #29808 from Prashanth684/4552-cvo-test” #29967
Revert “Revert “Revert “trt-2163: return error”“” #30000
OCPEDGE-1983: [TNF] Fix test suite filtering to include Disrupted tagged tests #29996
OCPBUGS-59203: OCPBUGS-57524: Improve MCN test stability #29981
OCPBUGS-59159: Adjust DNS success rate to 98.0% for SNO upgrade test. #29978
MON-4288: register CMO tests extension #29974
OCPBUGS-58354: disruptioninclusterapiserver: bump timeout to 10 mins #29970
Revert “Revert “trt-2163: return error”” #29964
OCPBUGS-59372: revert: remove openshift/two-node suite from tna tests #29991
Revert “CNF-17748: Add a comparing between static entry test” #29993
NO-JIRA: Improve performance of run-resourcewatch #29955
NO-JIRA: OWNERS_ALIASES: Update OTA members / team lead #29953
MON-4287: chore(test/extended/prometheus): bump the series limit of total series sent via telemetry from each cluster #29975
MCO-1739: Add MCO’s OTE tests to origin #29922
MCO-1797: Fix transient errors while checking status of PIS #29962
OCPBUGS-59157: Ensure CSI tests are defined before OTE initialization #29979
OCPBUGS-58895: bump watch count limits #29972
OCPBUGS-58449: replace Php 8.1 ubi9 with Php 8.2 ubi9 in origin #29963
TRT-2097: Fix a few things in suite selection #29971
TRT-2097, TRT-2098: Migrate origin to use OTE, and implement extension-derived suites #29888
NO-JIRA: test/extended/operators: skip wildcard certificate #29956
Revert “trt-2163: return error” #29959
TRT-2172: Generate autodl artifact to study e2e tests correlated with high CPU #29932
MCO-1741: Pass output to tests results in skipped OTE cases #29951
WRKLDS-1716: test/extended/cli: Test oc create token #29895
trt-2163: return error #29946
OPRUN-3973: (olmv1) Refractor tests for better readability #29840
NO-JIRA: upkeep: change to use image shell image #29948
TRT-2068: additional defaults for MicroShift #29904
CNF-17748: Add a comparing between static entry test #29782
OKD-267: Support RFC339 based timestamp layout for reboot tests #29942
OCPBUGS-58036: Fix MCN test on agent compact FIPS jobs #29938
OCPBUGS-57632: Revert “Merge pull request #29808 from Prashanth684/4552-cvo-test” #29926
OCPBUGS-58132: OCPFeatureGate:SigstoreImageVerification use multi arch image for testing #29915
OPNET-582, OPNET-585: Add monitor test for on-prem keepalived #29387
CNF-12146: Add communication matrix test under networking #29633
OCPEDGE-1947: fix: resolve timeout problems during some arbiter tests #29939
NO-JIRA: OVNK BGP: use a config map to allocate EIPs and UDN subnets #29901
OCPBUGS-57517: Remove Python 3.8-ubi8 from Origin #29921
CORENET-5668: Update IPsec e2e test to validate NAT-T encapsulation option #29563
NO-JIRA: We should always run tests where we have no opinion on their gate #29828
OCPBUGS-57892: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.20 #29931
OCPBUGS-57426: Boot image controller should correctly handle marketplace boot images #29919
OCPBUGS-57397: properties should wrap around property #29914
NO-JIRA: auditloganalyzer: update test name, remove duplicated test #29930
TRT-2165: Include select pending alert intervals in spyglass #29925
OCPBUGS-57294: Fix e2e-aws-ovn-image-ecosystem test - Part 2 - remove old nodejs 18,ruby 3.1 ubi9 #29905
OCPBUGS-57421: Add sustaining engineers to owners on image ecosystem #29916
OCPNODE-3330: SigstoreImageVerification uses client-go to create test CRs #29896
MULTIARCH-5391: Add new featuregate test to check if desired.Architecture is set as intended #29808
OCPBUGS-57169: Fix failed tests of e2e-aws-ovn-tls-13 #29872
OCPBUGS-50701: Add test case for checking EgressFirewall DNS names in caps #29898
MCO-1652: Add MCO disruptive suite #29776
OCPBUGS-56786: RouteExternalCertificate : Add fix for None platform type #29868
OCPBUGS-56512: updates ruby to version 3.3 #29832
OCPBUGS-57049: TLS registry: refactor testcase annotations #29327
OCPBUGS-49441: Use different certificates for gRPC interoperability test routes #29757
OCPBUGS-56436: Bump 4.20 1.32.5 #29889
TRT-1854: set network for MicroShift to OVNKubernetes #29887
add smg247 as root approver #29860
OCPBUGS-56037: Stabilize custom MCP cleanup on MCN tests #29874
Revert “OCPNODE-2849: Add testcase to verify removal of cgroupv1 in OCP 4.19” #29886
OCPBUGS-56698: Skip tests modifying cluster/network.config when it is not permitted #29859
OCPBUGS-54412: Do not retry extension-sourced tests #29867
OCPBUGS-35855: Add dry-run server test for imagestreamtag #29834
OCPBUGS-56933: fix deployment rollout wait to wait for desired replicas #29876
SPLAT-2231: Updated tests to work with hybrid environments #29827
MCO-1722: Handle check for Disconnnected Clusters for PIS Testing using curl #29870
OCPBUGS-55830: Only update boot disks during GCP boot image updates tests #29869
Add oceanc80 to olm owners #29864
NO-JIRA: OVNK BGP: workaround OCPBUGS-56488 #29853
OCPBUGS-56743: Poll project deletion to fix flaky behavior #29850
OCPEDGE-1922: feat: rename and move arbiter tests #29846
CNTRLPLANE-353: Add test which verifes that only short duration tests are present #29629
NO-JIRA: ovn, virt, skip ipv6 for secondaries #29858
OCPBUGS-55721, OCPBUGS-55832: Fix RouteExternalCertificate tests for few other on-prem jobs #29764
ODC-7790: Remove ODODownloadsSyncDegraded #29835
NO-JIRA: router: Rename MarshalPrivateKeyToDERFormat to MarshalPrivateKeyToPEMString #29855
NO-JIRA: OVNK: ignore stderr when running commands #29845
NO-JIRA: OVNK BGP: set VRF-Lite timeout #29844
MULTIARCH-5390: tagimportmode: Do not skip tests if the import mode is the same as the import mode of the cluster #29801
OCPBUGS-56381: feat: update test to account for two node fencing #29807
MCO-1652: Add new MCO disruptive suite #29800
NE-2031: Enhancing the gateway controller test cases with two more function #29806
OCPBUGS-55394: Handle Metal CI test cases for PIS #29745
NO-JIRA: ovn, virt: Support proxy when downloading virtctl #29824
OCPBUGS-56196: Check to see if SamplesOperator managementState is Removed #29817
NO-JIRA: TLS registry update #29787
OCPNODE-3138: Add zstd:chunked image test #29713
OCPNODE-2849: Add testcase to verify removal of cgroupv1 in OCP 4.19 #29640
OCPBUGS-56047: OLMv1: Update test bundles [main/release-4.20] #29820
NO-JIRA: tls/violations: add sjenning to OWNERS #29819
NO-JIRA: ovnk, virt: Filter out ipv6 LLA #29816
NO-JIRA: Fix egressIP advertisements tests flake #29803
MCO-1615: Mco node degraded mcn condition #29684
NO-JIRA: Report back source for openshift-tests-extension #29733
TRT-2061: throttle monitor startup refactor #29637
OCPBUGS-55317: Skip GatewayAPIController tests on clusters without OLM capabilities #29784
CORS-3989: set proxy for http transport in router and imageregistry cases #29759
NO-JIRA: Revert: NO-JIRA: support skipping [OCP]FeatureGate… #29796
OCPBUGS-55211: use regular user to create httproute #29697
Revert “Revert “TRT-2049: check for any watch requests”” #29723
CORENET-5854: networking: add VRF-Lite test cases #29669
OCPEDGE-1678: Fix failed etcd test on arbiter ci run #29694
NO-JIRA: update networking owners #29786
NO-JIRA: increase api client timeout to match those allowed by kube-apiserver #29761
NO-JIRA: support skipping [OCP]FeatureGate tests #29760
OCPBUGS-55384: OCPBUGS-55968: Fix PIS tests on SNO & Enable applicable MCN & PIS tests on SNO #29785
OCPNODE-2315: Add nested container test #29781
OCPBUGS-55994: Do not set the MTU when using NetworkAttachementDefinition #29768
NO-JIRA: Test load balancer metrics #29675
NO-JIRA: Fix bearer token exposure in exit condition as well #29575
NO-ISSUE: Automated - Update synthetic test data #29716
TRT-2106: Fix race in MCN test cleanup #29775
OCPBUGS-55785: bump limits #29778
Revert “OCPNODE-2315: Add nested container test” #29779
CNTRLPLANE-371: Update etcd test data for k8s 1.33 release (missing data) #29773
OCPBUGS-55712: (olmv1 tests) Use exponential backoffs for verifyAPIEndpoints #29756
OCPBUGS-55945: Bump main 1.32.4 #29772
CORENET-5875, CORENET-5876, OCPBUGS-55910: Add EgressIP and L2 UDN route advertisements tests #29727
OCPNODE-2315: Add nested container test #29594
NO-JIRA: faultyloadbalancer test: pass instead of skip #29753
OCPBUGS-55902: pkg/monitortestlibrary/allowedalerts: Ignore KubeJobFailingSRE for now #29747
NO-ISSUE: OLMv1: Preflight: Relax checking of error message #29766
CNTRLPLANE-371: Update etcd test data for k8s 1.33 release #29699
OCPBUGS-55785: bump limits #29763
OCPNODE-2999: Add SigstoreImageVerification e2e tests #29652
OKD-243: Skip GatewayAPIController tests for OKD #29742
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

MON-4299: update to 0.39.2 #163
OCPBUGS-57564: Updating ose-thanos-container image to be consistent with ART for 4.20 #162
Full changelog

vsphere-cloud-controller-manager

NO-JIRA: Update OWNERS #96
OCPCLOUD-2933: Rebase onto main #95
OCPBUGS-57574: Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.20 #92
OCPBUGS-56720: gitignore doesn’t ignore certain files in vendor/ #91
Full changelog

vsphere-cluster-api-controllers

NO-JIRA: Update OWNERS #63
OCPCLOUD-2921: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.13.0 (7cc3899) into master #58
NO-JIRA: Do not gitignore files inside vendor #57
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

STOR-2404: Rebase to upstream v3.5.0 for OCP 4.20 #147
OCPBUGS-57582: Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.20 #146
OCPBUGS-57570: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.20 #145
OCPBUGS-55020: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #142
Full changelog

vsphere-csi-driver-operator

STOR-2394: Bump all deps for 4.20 #308
STOR-2330: Add labels to subscribe vSphere CSI driver controller and webhook to NPs #307
OCPBUGS-57708: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.20 #306
Full changelog

vsphere-problem-detector

STOR-2394: Bump all deps for 4.20 #187
OCPBUGS-59319: Check for number of FailureDomain-s in GetVCenter() #186
OCPBUGS-57656: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.20 #185
OCPBUGS-53217: replace operator client #182
Full changelog

Node Image Info

Loading node image info, this may take a while ...