4.16.0-ec.2

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.16.0-ec.2-s390x

No tests for this release

Upgrades from:

Untested upgrades: 4.15.0-rc.0, 4.15.0-rc.1, 4.15.0-rc.2, 4.15.0-rc.3, 4.15.0-rc.4, 4.15.0-rc.5, 4.16.0-ec.0, 4.16.0-ec.1

Loading changelog, this may take a while ...

Changes from 4.16.0-ec.1

Created: 2024-02-05 21:07:02 +0000 UTC

Image Digest: sha256:f9969d4379e440fd519c23eab043b1f561ed9a3acf7144bf9500d9c5a272fefe

Components

Kubectl 1.29.0
Kubernetes upgraded from 1.29.0 to 1.29.1
Kubernetes Tests 1.29.0
CentOS Stream CoreOS upgraded from 416.92.202401090024-0 to 416.94.202401300012-0 (diff)

Removed images

alibaba-cloud-csi-driver
alibaba-disk-csi-driver-operator

Rebuilt images without code change

agent-installer-utils git de13699f sha256:5209ee5747e2473c74b82777109846c10b3558bb190ca1a5b84c2dea08c965bf
baremetal-machine-controllers git ca6d0ed9 sha256:f557bd04749ee1fe08b55b87f14dd5e7862dd84342a7d75b924216a452926204
cloud-network-config-controller git 724f9efc sha256:bd48d5c9500beb7028ec638d558de192f56320bf577831b9badf5973c8fc47dc
cluster-bootstrap git 27bfb59f sha256:33bc27169a49e3f3a221ccd46638b6b7357c06e3cb5d5da93c5deb101abc92d3
cluster-dns-operator git 75c5dc17 sha256:e3b13c9d35920ec5e4f45af053e0ff76ff85fdb97db2824f6386c4fe9d16395a
cluster-kube-cluster-api-operator git 7ac1549f sha256:72f060ce534aac0b70be6e498df5a11dc1b5c9c6840fcaa0e8b160d7c11b81d5
cluster-olm-operator git 4929daf2 sha256:e71c204bfd5ae829708a1d8a0c15b2bfbae8f6b51f2038b0ab8eea8a1de13986
cluster-platform-operators-manager git cf737e27 sha256:a66e9918360210512880c72071e4e18573ce94923723320f1b172e3f81800f5a
cluster-samples-operator git cca2553c sha256:e94162c31fa15d12bae56daa96adfa70b3b9503faa83e56a95b4437af8212b2f
cluster-update-keys git 8045f1bd sha256:17dc4eb0ec695c13c77ad35a902bfc05fd2956a4fe5c2d1092c6c7000665d5aa
container-networking-plugins git 1e207576 sha256:9b7dcd0871ee87e4c3e0a92a6eec454c0654acd988ff955ba70d0b13d7f57598
csi-external-resizer git 17cd5190 sha256:2dad63098f4643e67ae553ff5cf7765841b454b1a32b541b852613e331d63893
csi-external-snapshotter git 1e876f97 sha256:7f0bacd3946c4a52a980dade320d425bb8637b2751a4d6421a724cb0a45018d9
csi-livenessprobe git a5a99fc1 sha256:285a5a1097a2bb0d37ee66f67c99d06b9c1524718fe57797cc4a2fd39db9c763
csi-snapshot-controller git 1e876f97 sha256:2fa30c7798bf1c075fead83425de46e32a3e7e48aacafc0bf0081df6f90886fb
csi-snapshot-validation-webhook git 1e876f97 sha256:ecf81a64012ef3dc7b45a43a626f45e756acf951f597fbcc0dc9fcb780495477
docker-builder git 0c0a73b2 sha256:6d583c819ae684a426cab6b844fadb5558910618c42585030eb2e33ff3491f3c
driver-toolkit git e279170d sha256:d4630a8b8496c0527352bf0d219b3488083a767379ac9df0f10bfc2032670ab1
egress-router-cni git 7592f41b sha256:c031b45243412ddbdfb1790ed032b1f163be30822680da4afd5f3fa186f4885d
etcd git 66af0e5d sha256:4b15e5848abf8e872b729848de67c252bd156aa739208c9543ebfcb8d0d85585
ibm-vpc-block-csi-driver git 9ee12267 sha256:285bc815fc56bd840e45a97f0646df9946289abca7c3071d724e6d2bed79c341
ibm-vpc-node-label-updater git 66efff84 sha256:1c19b85dd29abf875a74808fa6e5b3ba83105af25b730a22a56e8bddd6f49b17
k8s-prometheus-adapter git 60d217ce sha256:8b1074e4039224a167859664c17aa42db5bea1da22ea400f8b5ede3ed53ba045
keepalived-ipfailover git 676f4f6c sha256:950e77ba4f1ab9322ca526ef282eb9567b41a7a95b39fb17282cc5b4e78a956e
kube-state-metrics git 8969a07c sha256:c33eade44caee5aa5b964c519e6825a9bb11f2a2366bec16a9e9724061fbdb64
kubevirt-cloud-controller-manager git e465e606 sha256:03d61cc646a93b85218c862517ab0d0db4135fe12313c79d3a3811438f1e47bd
libvirt-machine-controllers git a336f0b5 sha256:1f95e5480c6301b591eb1de611379174cc2f0204b1200d47bb99df44fc65d3d8
machine-os-content sha256:2c574a5a4fa91571d8f88b01049ae4f725ff0a28443f583d216ad48cedcf7d73
machine-os-images git 6aad9b0c sha256:4115669ae22742e095e52ac96a91640a8c9146f1f8e7f4a70173734e819ece2e
multus-admission-controller git d1150b7c sha256:19dea731378507c1f567622a26f4b9397ddc9680d82f671b1cfd9285976f776b
network-interface-bond-cni git d164fbab sha256:68129d7a36d1e4d6a4ee04144a6e64f18c0ef3ab611c583c9c2b0612685a6e22
network-metrics-daemon git 710bd872 sha256:9c41fbf20fd44ebd243874f25d59fa7766af944d1593a96bc3d26b5d45339a69
oauth-proxy git 30f80124 sha256:dbe6715093185ae9900ae7aeac4be16de08be06584f982764c69619a9cb9c3bb
oauth-server git 8296c054 sha256:7c57219ba2ac193d3d74fb1fa932a3ca81c695f45d54aff52cf18627256584cc
olm-rukpak git 664e875e sha256:aad5db522c7f64f117a4bc6b1da2d7d0650ce599911d1e3c56f88103114afedb
openshift-controller-manager git 2a28a782 sha256:20542b7e2838ad842b3ef3ede39cfd30cf7e670ed026eb1f0fc440cd5d85104f
openshift-state-metrics git 59b8a0ff sha256:aa1ad5e751b6655683f564d6c608cd64df1a02640f27675c511979b862ecda05
openstack-cinder-csi-driver git 663972f4 sha256:caf2ade2eee6b8fce5918ccedb936c58d71e194b19a8d864c8b7bd4becb7161b
openstack-cloud-controller-manager git 663972f4 sha256:47c81c30e38827df1c80e06e40e9fe23788d747698cf2e8fca22cd49ae7d374e
openstack-cluster-api-controllers git 20e33ac0 sha256:1d307362fcc343cf94ba9bf3e21e4e46e82056e018459e758d6c357b195a8c9d
ovirt-csi-driver-operator git 5a9f33a2 sha256:73ac57e43f95b8da7c6fd5ab9d457f1a08fd6dc41abdf996a91504659e7e771b
prom-label-proxy git a89e4b40 sha256:657dcff13181534dee2341c222986988c4c7c41d5373e283befb21fdb69d6dcb
prometheus-alertmanager git 225d7ca4 sha256:16b0a8f65ea46d67ff8852abe57a3b113f16390cedb60d53c6dabbb81607226e
rhel-coreos sha256:86fcb6add61f66a21c5ceb3f818020de12c6d96620da6a54c8cd5147f3dd2673
rhel-coreos-extensions sha256:9a88f49d7b25dacd5088dc04ec3c26583a4adf7ca1fbad9262c73df5919d1ee8
route-controller-manager git 95aa561e sha256:2643a7a3375d711d6f97b43c1b1cb41a80fd00e2593ca5021eabdb43c6c971ec
thanos git f137238f sha256:ace2ca096a00f1e29dfe614810d344c789e8f69d2b7ac662709995fed666638d

agent-installer-api-server

ACM-9504: Remove unecessary dependency on go-git (#5913) #5913
NO-ISSUE: Bump OCP versions: 4.13, 4.11 (#5919) #5919
MGMT-16660: OCI is tech-preview from OCP 4.15 (#5920) #5920
OCPBUGS-27376: Allow domain names starting with a number (#5914) #5914
NO-ISSUE: Bump OCP versions: 4.14 (#5915) #5915
Update RHTAP references (#5899) #5899
NO-ISSUE: migrate rhtap init step to v0.2 (#5908) #5908
MGMT-16208: Add controller stages to assisted service (#5880) #5880
NO-ISSUE: Bump OCP versions: 4.15 (#5907) #5907
NO-ISSUE: Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 (#5903) #5903
NO-ISSUE: Bump github.com/google/uuid from 1.4.0 to 1.5.0 (#5902) #5902
NO-ISSUE: Bump golang.org/x/sys from 0.13.0 to 0.16.0 (#5904) #5904
NO-ISSUE: Bump gorm.io/gorm from 1.24.5 to 1.25.5 (#5901) #5901
NO-ISSUE: Bump OCP versions: 4.15, 4.13, 4.14, 4.12 (#5897) #5897
OCPBUGS-24428: Redact passwords logged in installConfigOverrides (#5868) #5868
NO-ISSUE: migrate pipeline task init from 0.1 to 0.2 (#5896) #5896
NO-ISSUE: Bump the go-major-dependencies group with 2 updates (#5895) #5895
MGMT-16501: Add request headers to api_vip_connectivity check request (#5870) #5870
NO-ISSUE: Use latest hypershift image in CI gather (#5886) #5886
NO-ISSUE remove filanov from approves (#5888) #5888
NO-ISSUE: Bump OCP versions: 4.15 (#5887) #5887
MGMT-16332: allow lvms on multi node (#5871) #5871
NO-ISSUE: Bump OCP versions: 4.14, 4.13, 4.11 (#5875) #5875
NO-ISSUE: testing go1.20 in all packages (#5850) #5850
MGMT-16371: Fix additionial kargs in case of DHCP (#5818) #5818
Removes unused assistedservice CRD (#5830) #5830
MGMT-16494: Move ip hint file creation to ignition in order to change it in IBI process (#5861) #5861
MGMT-16505: Huge amount of “Cluster was updated with api-vip <IP ADDRESS>, ingress-vip <IP ADDRESS>” in cluster events (#5872) #5872
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Bump the go-dependencies group with 1 update (#776) #776
NO-ISSUE: Bump the go-dependencies group with 2 updates (#772) #772
NO-ISSUE remove filanov from approves (#773) #773
Full changelog

agent-installer-node-agent

NO-ISSUE: Bump the go-dependencies group with 6 updates (#653) #653
ACM-9504: Remove unecessary dependency on go-git (#652) #652
MGMT-16501: Use updated api_vip connectivity check API (#648) #648
NO-ISSUE remove filanov from approves (#647) #647
Full changelog

alibaba-cloud-controller-manager, alibaba-machine-controllers, aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, gcp-cloud-controller-manager, gcp-cluster-api-controllers, gcp-machine-controllers, gcp-pd-csi-driver, gcp-pd-csi-driver-operator, hyperkube, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

NO-JIRA: Revert “OCPBUGS-24404: add ignore for SAST scan” #1870
OCPBUGS-24404: UPSTREAM <carry>: use snyk file #1871
OCPBUGS-26058: UPSTREAM: <carry>: watch-termination: termination.log file with restricted permissions #1841
OCPBUGS-16760: permanently disable NodeLogQuery e2e test #1792
OCPNODE-1892: Bump k8s to 1.29.1 #1858
OCPNODE-1892: Switch to golang 1.21 #1845
OCPBUGS-24606: UPSTREAM: <carry>: Update management webhook pod admission logic #1821
OCPNODE-1892: UPSTREAM: <carry>: update test rules #1849
OCPBUGS-17249: UPSTREAM: <carry>: openshift-kube-apiserver: pod .spec.nodeName should not override project node selector in podNodeEnvironment admission plugin #1787
OCPNODE-1892: UPSTREAM: 122683: Use v1beta1 endpoints when cleaning up ValidatingAdmissionPolicies #1848
OCPBUGS-23896: Fix device uncertain errors on reboot #1829
OCPBUGS-24404: add ignore for SAST scan #1824
AUTH-439: loosen authentication.spec.type validation #1770
Full changelog

apiserver-network-proxy

OCPBUGS-27932: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.16 #47
OCPBUGS-25004: Updating ose-apiserver-network-proxy-container image to be consistent with ART #46
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

CORS-3139: Move CAPI behind infrastructure provider interface #7824
OCPBUGS-27507: bump containerd for vulnerability fix #7942
NO-ISSUE: test fix to support slightly different nmstate error messages #7954
NO-JIRA: Minor fixes #7947
no-jira: azure: add metadata info to resource group tags #7725
OCPBUGS-25453: duplicate failure domains in CMPS #7860
OCPBUGS-27788: PowerVS: COS region configurable #7941
SPLAT-1345: Remove alibaba #7832
OCPBUGS-27366: set the –cluster-profile flag for openshift/api rendering #7924
OCPBUGS-27192: remove retired serial NCv2 from azure tested instance type list on x86 #7911
no-jira: images/altinfra: allow CAPI ARG #7891
OCPBUGS-25835: Validate baremetal capability is set for baremetal platform #7901
no-jira: Add AWS m6a to tested instance types #7851
OCPBUGS-24956: Fix typo in CloudCredential validation #7915
OCPBUGS-24303: Check provided sha for agent ISO download #7893
CORS-3203: Fix depreciated typo #7834
OCPBUGS-14257: normalize ISO files extensions to three chars #7896
OCPBUGS-26434: Redact platform passwords in agent-gather output #7873
OCPBUGS-27092: baremetal: gather all recently refactored services #7854
OCPBUGS-25996: baremetal: correct external_http_url for v6-only BMCs #7898
CORS-2950: Remove openshift-sdn as an install-time option #7720
OPNET-415: Upgrade o/api to include extended network config #7869
METAL-829: Set node cpu_arch from bmh #7814
OCPBUGS-26399: Support singular VIP in ACI for BareMetal #7859
CORS-3190: GCP: Add load balancer info to cluster infra #7888
MULTIARCH-4072: Power VS: Add eu-de-1, eu-de-2, sao04, and wdc07 as supported zones #7870
OCPBUGS-24956: Add cloud credential capability validation #7884
OCPBUGS-25841: preserve category name when trying to find tag category #7876
ARO-4744: Do not run platform validation on ARO #7865
Full changelog

baremetal-operator

OCPBUGS-27825: Merge upstream #329
Full changelog

baremetal-runtimecfg

OCPBUGS-24865: Updating ose-baremetal-runtimecfg-container image to be consistent with ART #291
NO-ISSUE: Upgrade k8s api and client-go deps #297
OCPBUGS-26765: Add .snyk file to ignore vendor and test files #292
Full changelog

cli, cli-artifacts, deployer, tools

WRKLDS-1016: Bump kube dependencies to 1.29.0 #1661
OCPBUGS-27957: pkg/cli/admin/inspect: use since/since-time for previous container logs #1666
NO-JIRA: Fix –parallelism flag formatting in help #1664
NO-JIRA: pkg/cli/admin/inspect: format RFC3339 parse error #1663
OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #1667
OCPBUGS-27489: Use correct hash sum of extracted tarball after re-signing with codesign #1659
NO-JIRA: Simplified kubectl component version check #1662
CNV-37284: Add –all-images flag to must-gather #1633
Revert “WRKLDS-1016: Bump kube dependencies to 1.29.0” #1660
WRKLDS-1016: Bump kube dependencies to 1.29.0 #1655
NO-JIRA: Consider kubectl version checks only from cli and cli-artifact images #1656
WRKLDS-998: oc login: Built-in cred exec plugin implementation and wiring #1640
NO-JIRA: adm update status: add TODOs to remind us to revise early decisions #1654
WRKLDS-1012: oc adm must-gather: pull gather container logs #1641
WRKLDS-950: add since and since-time flags to limit log collection on must-gather #1648
WRKLDS-1010: pkg/cli/admin/inspect: use since/since-time for rotated logs #1653
NO-ISSUE: add information about featuregate diff in a particular release #1650
NO-JIRA: report kubectl version to the release controller #1651
OCPBUGS-25461: Add RHEL9 and RHEL8 based oc as new targets in command extraction #1647
OTA-1087: Add upgade health section to adm update status #1636
Full changelog

cloud-credential-operator

OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #663
NO-JIRA: Keep metrics.md up-to-date #664
OCPBUGS-27446: Report manualpodidentity mode in metrics when using Azure Workload Identity #657
OCPBUGS-27445: Use cached clients to avoid client side throttling #656
NO-JIRA: azwi doc: apply webhook manifest to cluster #652
CCO-454: Bump go.mod k8s deps to 0.29.1 #655
OCPBUGS-16181: Write manifests when AWS IAM roles already exist. #514
CCO-519: Resolve all outstanding snyk vulnerabilities #648
OCPBUGS-26488: Use live client for metrics #645
Full changelog

cluster-authentication-operator

OCPBUGS-18939: manifest: drop slo latency metrics in favor of sli #632
WRKLDS-1004: use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #646
Full changelog

cluster-autoscaler

PODAUTO-104: Add downstream pod autoscaling team member jkyros to VPA OWNERS #283
OCPBUGS-27509: Fix unstructured taint parsing in Cluster API provider #281
OCPBUGS-26504: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.16 #279
Full changelog

cluster-autoscaler-operator

OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #312
MIXEDARCH-429: Add the environment variable value for CAPI_SCALE_ZERO_DEFAULT_ARCH #297
OCPCLOUD-2432: Bump k8s packages to v1.29 #310
Full changelog

cluster-baremetal-operator

OCPBUGS-28230: add terminationmessagepolicy to show last of error log in API #399
METAL-856: set USE_IRONIC_INSPECTOR explicitly #398
Full changelog

cluster-capi-controllers

OCPCLOUD-2449: Merge https://github.com/kubernetes-sigs/cluster-api:v1.6.0 (14efefe) into master #192
Full changelog

cluster-capi-operator

OCPBUGS-26121: Add Snyk file to exclude vendor directory on scan #156
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-24486: Enforce the use of shared health checks #326
OCPCLOUD-2424: Bump k8s packages to v1.29 #325
OCPBUGS-25887: IBMCloud: Patch CCM for 4.16 #323
OCPBUGS-26494: PowerVS: handle 4.16 changes #322
Full changelog

cluster-config-api

OCPBUGS-27366: add separate authentication config manifest for hypershift #1732
SPLAT-1396: promote feature gate and vSphere failure domains to default #1733
OCPBUGS-27468: features: enabled TranslateStreamCloseWebsocketRequests through TechPreviewNoUpgrade #1737
CFE-857: Add new param ResourceManagerTags to GCPMachineProviderSpec #1506
OCPBUGS-27366: respect the cluster profile in rendering #1734
OTA-1169: Add feature gate for upgrade status #1725
SPLAT-1385: introduce TagIDs field to vSphere providerSpec #1697
Add ImagePolicyList and ClusterImagePolicyList to scheme known types #1726
Add generated featuregate files inertly to payloads #1720
add-IPsecExternal #1667
Full changelog

cluster-config-operator

SPLAT-1400: promote vSphere control plane machinesets from tech preview #400
OCPBUGS-26541: remove duplicate manifests in image #399
Revert “OCPBUGS-26541: remove duplicate manifests in image” #397
OCPBUGS-26541: remove duplicate manifests in image #392
Full changelog

cluster-control-plane-machine-set-operator

OCPCLOUD-2415: Update K8s deps to 1.29 #271
Full changelog

cluster-csi-snapshot-controller-operator

STOR-1574: Bump library-go #190
STOR-1714: Release leadership on SIGTERM #187
Full changelog

cluster-etcd-operator

OCPBUGS-22969: Use v1 for flowcontrol API #1149
OCPBUGS-21846: update library-go to latest commit #1180
OCPBUGS-24889: Updating cluster-etcd-operator-container image to be consistent with ART #1175
NO-JIRA: bump library-go and use default UnhealthyPodEvictionPolicy #1171
Full changelog

cluster-image-registry-operator

OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #992
NO-JIRA: build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.16.0 #989
OCPBUGS-26767: MULTIARCH-4074: PowerVS: update supported regions #987
Full changelog

cluster-ingress-operator

OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #1019
NE-1490: update to go v1.20 #1012
OCPBUGS-15253: Include namespace in prometheus alerts IngressWithoutClassName and UnmanagedRoutes #980
CCO-249: Replace GCP role with explicit permissions #844
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-24005: when skipping a webhook check because of missing CA log the name of the webhook #1632
NO-JIRA: Add ownership for the admin kubeconfig #1584
OCPBUGS-18939: manifest: drop slo latency metrics in favor of sli #1546
NO-ISSUE: prevent update status conflicts #1621
OCPBUGS-21846: sync(library-go): revision_controller: update last revision only when a revision is completely rendered #1619
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-21846: sync(library-go): revision_controller: update last revision only when a revision is completely rendered #786
Full changelog

cluster-kube-scheduler-operator

NO-JIRA: readme: describe mapping between logLevel and log level #531
NO-JIRA: README: add notes about dumping KS’s node cache #530
OCPBUGS-21846: sync(library-go): revision_controller: update last revision only when a revision is completely rendered #526
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-27930: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.16 #103
OCPBUGS-24989: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART #101
Full changelog

cluster-machine-approver

OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #227
OCPBUGS-26116: Add Snyk file to exclude vendor directory on scan #225
OCPCLOUD-2417: Update to kube 1.29 and controller-runtime 0.17.0 #224
OCPBUGS-23544: Increase concurrent reconciles to 10 #222
Full changelog

cluster-monitoring-operator

MON-3689: Synchronize versions of the downstream components #2245
OCPBUGS-27289: followup of https://github.com/openshift/cluster-monitoring-operator/pull/2242 #2244
STOR-1289: Move vSphere prometheus rules to cluster-storage-operator #2235
OCPBUGS-27289: rollout metrics-server on cert rotations #2242
OCPBUGS-27213: Adjust lastError injection to wait.PollUntilContextTimeout’s final error #2234
MON-3676: move raptorsun out of reviewer list #2240
MON-3673: [bot] Synchronize versions of the downstream components #2238
MON-2853: add runbook link to TargetDown alert #2237
MON-3661: [bot] Synchronize versions of the downstream components #2236
OCPBUGS-26983: rollout monitoring plugin on TLS rotation #2233
MON-3661: chore: update Prometheus operator to v0.71.0 #2230
MON-3667: remove outdated documentation #2232
OCPBUGS-25849: make PrometheusAdapter and MetricsServer tasks less conflict prone #2218
OCPBUGS-25378: drop InfoInhibitor from default Alertmanager config #2225
MON-3664: chore: avoid issues with std.set* functions #2231
MON-3654: use Go standard errors package instead of github.com/pkg/errors #2224
MON-1047: fix: add terminationMessagePolicy: FallbackToLogsOnError to all conta… #2228
MON-3552: remove temporary cleanup code and no longer needed tests #2210
Full changelog

cluster-network-operator

OCPBUGS-24976: Updating cluster-network-operator-container image to be consistent with ART #2156
OCPBUGS-25079: Prevent NoRunningOvnControlPlane alert getting fired continuously #2208
NO-JIRA: add kyrtapz as reviewer and approver #2226
OCPBUGS-27823: Not update migration conditions when any MCP is updating #2213
OCPBUGS-26986: Add ConfigMap mount to the whereabouts-reconciler #2209
SDN-3708: Support configurable masquerade subnet in ovn-k #1807
OCPBUGS-26952: Deploy CNO IPsec MC even if user already have one #2201
OCPBUGS-27264: Only reconcile on Node updates with Label changes #2206
NO-JIRA: Fix jira component info #2199
SDN-4166: Enable N-S IPsec #2191
OCPBUGS-24379: Remove egressip write permissions from ovn-kubernetes-node #2170
OCPBUGS-24635: network node identity: tolarate all taints #2153
OCPBUGS-25207: Render IPsec MachineConfig after cluster settles with MachineConfigs #2187
OCPBUGS-25688: remove microshift folder, since CNO doesn’t manage it #2173
OCPBUGS-25669: Update ovn-k managed control-plane RBAC #2169
OCPBUGS-25760: Keep the live migration annotation consistant with the enhancement doc #2179
OCPBUGS-19635: OVN-K in SNO deployment mode: fix Lease override for CM #2070
Full changelog

cluster-node-tuning-operator

e2e: UpdateWithRetry only update spec (#914) #914
Skip PerformanceProfile update test (#929) #929
Export ValidateBasicFields for Hypershift (#916) #916
e2e: log: set ctrl-runtime logger (#911) #911
OCPBUGS-22095: Add default MCP objects for rendering (#833) #833
README Doc Typo Fix (#920) #920
HyperShift code linter PR837 followup (#910) #910
CNF-10786: e2e: general improvements and cleanup (#898) #898
dnm: skip crun configuration test (#917) #917
Add .snyk file for static code analysis (#902) #902
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-18115: Remove “include.release.openshift.io/ibm-cloud-managed:” annotation #566
OCPBUGS-18939: manifest: drop slo latency metrics in favor of sli #547
WRKLDS-1004: use AlwaysAllow UnhealthyPodEvictionPolicy in PDBs #562
OCPBUGS-24972: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART #561
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-23624: Add .snyk file to exclude vendor and ignore unit tests #325
WRKLDS-1016: Bump k8s dependencies to 1.29.0 #324
Full changelog

cluster-policy-controller

OCPBUGS-24877: Updating ose-cluster-policy-controller-container image to be consistent with ART #144
Full changelog

cluster-storage-operator

STOR-1289: Move vSphere prometheus rules to CSO #442
STOR-1354: Remove Alibaba Disk CSI Driver #440
STOR-1574: Bump library-go #443
STOR-1722: Azure disk hypershift #420
STOR-1714: Release leadership on SIGTERM #437
Full changelog

cluster-version-operator

OCPBUGS-18454: Avoid using risk names as condition reasons when invalid #962
OCPBUGS-7714: yield lock while retrieving payload #1005
NO-JIRA: manifests: fix service manifest filename #1027
OCPBUGS-27468: bump(openshift/api)=master to pick up new TechPreviewNoUpgrade features #1026
OCPBUGS-7714: Refactor & improve SyncWorker lock code #1020
OTA-1169: deps: bump openshift/api and k8s.io/client.go #1022
OCPBUGS-25862: CO health: only track current in-progress upgrade start #1011
Full changelog

configmap-reloader

MON-3671: add machine424 and rexagod to OWNERS #55
Full changelog

console

OCPBUGS-25843: Fixed bug with user feedback where inform the direction of RedHat was not showing up #13483
OCPBUGS-25881: remove “openshift-storage” namespace usage from the console #13418
OCPBUGS-27455: do not deduplicate ImageManifestVulns in Overview popover #13529
OCPBUGS-27016: fix resizeObserver limit exceed for dev-console #13502
OCPBUGS-27152: Fix popover jump in Tables #13524
OCPBUGS-25788: Add Node Maintenance menu actions to Node list/details #13506
OCPBUGS-27779: fix bug where Expand PVC modal assumes pvc.spec.resou… #13532
CONSOLE-3430: add Cluster Settings > Details integration tests #13515
ODC-7482: Add flags checks to hide Pipeline static plugin List and details pages #13512
OCPBUGS-27498: Update get method so it can display zero value when set #13533
OCPBUGS-16736: Addition of optional chaining to prevent yaml crash #13510
OCPBUGS-27399: Filter out Client CSRs for nodes which already exist #13522
CONSOLE-3829, OCPBUGS-16814: backend: use the k8s SelfSubjectReview API to get info about a user #13321
AUTH-440: expand options for the OIDC authenticator #13276
OCPBUGS-26772: fix bug where Clone PVC modal assumes pvc.spec.resourc… #13503
OCPBUGS-26039: Make editor sidebar width consistent #13495
OCPBUGS-10851: Add source maps to production builds #13497
OCPBUGS-25890: Prevent complete page reload when changing perspective #13500
OCPBUGS-14481: update check for the ‘provider’ label on the PackageMa… #13491
OCPBUGS-26554: Fixed some problems in topology Chinese translation text #13458
OCPBUGS-18699: add additional check to determine if file is binary #13496
ODC-7465: Update Getting started section in Openshift UI to use expandable section #13466
chore(i18n): update translations: Completed OCP-4.15/Master Branch/Sprint 245 #13441
Full changelog

console-operator

CONSOLE-3912: Merge auth cert configmap deployment annotations into one #842
OCPBUGS-25484: make it impossible double set conditions in a single loop #848
CONSOLE-3912: Add secrets for session encryption/authentication in OIDC #839
OCPBUGS-27335: The console-deployment should set the number of replicas based on the ControlPlaneTopology #838
NO-JIRA:(chore) remove unused loglevel #830
OCPBUGS-25484: Bump library-go to deal with GET conflict #836
OCPBUGS-24041: Prevent healthcheck controller from Available=False blipping #834
Full changelog

coredns

OCPBUGS-27928: Updating coredns-container image to be consistent with ART for 4.16 #111
OCPBUGS-27397: UPSTREAM: 6277: openshift: Fix OCPBUGS-27397 #109
Full changelog

csi-driver-shared-resource, csi-driver-shared-resource-webhook

OCPBUGS-27860, OCPBUGS-28261: address SAST/SNYK findings #164
OCPBUGS-26081, OCPBUGS-26114, OCPBUGS-26145: add snyk config file for SAST scan #161
Full changelog

csi-driver-shared-resource-operator

STOR-1574: Bump library-go #98
OCPBUGS-26087: add snyk config file for SAST scan #95
Full changelog

csi-external-attacher

OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #70
Full changelog

csi-external-provisioner

OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #88
Full changelog

csi-node-driver-registrar

OCPBUGS-27242: fix or ignore snyk errors for ocp storage repos #64
Full changelog

docker-registry

OCPBUGS-26173: Updating openshift-enterprise-registry-container image to be consistent with ART #390
Full changelog

haproxy-router

OCPBUGS-25546: Updating ose-haproxy-router-base-container image to be consistent with ART #550
Full changelog

hypershift

HOSTEDCP-1401: Enable BYO NSG #3455
NO-JIRA: Update go-jose to the latest version to fix CVE #3475
HOSTEDCP-1344: re-revert api stuff #3463
OCPBUGS-26940: Include OperatorHubSpec sync with HC when Config is empty #3454
NO-JIRA: Simplified kubectl component version check #3458
NO-JIRA: Remove ‘–attach-default-network’ from productized cli #3462
NO-JIRA: Tolerate restarts for kubevirt external infra #3451
NO-ISSUE: .ci-operator.yaml: base off of RHEL 9 #3466
OCPBUGS-27366: indicate cluster profile to render the correct manifests #3443
OCPBUGS-26977: Required RBAC for network-node-identity is not created when hosted cluster networkType is set to Other. #3403
TRT-1456: Revert #3448 “api: move CSRA to a new group” #3460
HOSTEDCP-1344: api: move CSRA to a new group #3448
HOSTEDCP-1397: Add documentation on how to debug Azure nodes #3452
NO-JIRA: Update Dockerfiles to use publicly available RHEL9 images #3426
HOSTEDCP-1308: Add e2e to ensure SA token not mounted on mgmt workloa… #3301
NO-JIRA: Fix promql testdata missing issue #3438
NO-JIRA: Update RHTAP references (main) #3446
HOSTEDCP-1188: Add docs for control plane scheduling topologies #3434
HOSTEDCP-1283: Set outbound LoadBalancer name on AzureCluster #3445
NO-JIRA: Bump misc dependencies 21f825371d #3433
HOSTEDCP-1207: Automated etcd backup #3034
NO-JIRA: Document machine configuration in HyperShift #3331
HOSTEDCP-1382: [Subtask] Restore Ability to Create HCPs on Azure #3404
HOSTEDCP-1314: Ensure all e2e HCs use NLB for ingress controller #3293
OCPBUGS-26757: Change KAS bootstrap image to cluster-config-api #3400
NO-JIRA: Improve nodepool’s machine condition message #3354
OCPBUGS-23228: Add storage, csisnapshotcontroller and clustercsidrive… #3396
OCPBUGS-27027: availability-prober: wait for infrastructure name to be set #3409
NO-JIRA: remove non-existent v1beta2 from webhook #3407
HOSTEDCP-1376: Bump the sigs.k8s-dependencies group and update dependabot groupings #3392
OCPBUGS-25696: Apply Scheduling Configuration for kCCM #3382
OCPBUGS-26547: remove LoadBalancer filter from external-dns #3410
OCPBUGS-26547: fix up external-dns flags #3408
OCPBUGS-26547: reduce external-dns route53 call volume #3394
Update RHTAP references (main) #3401
OCPBUGS-25897: hcco: use manual mode for CCO #3375
HOSTEDCP-1309: Add GC knobs for KAS #3384
NO-JIRA: [KubeVirt] Fix external infra permissions documentation #3391
HOSTEDCP-1374: external OIDC: copy Authentication OIDC client secrets through to guest #3373
OCPBUGS-25974: Do not use CPO image from status if it’s not a valid image reference #3361
OCPBUGS-23518: consider HCP upgradeable if CVO has no upgradable condition #3239
OCPBUGS-26232: set KAS runtime-config in alignment with feature gates #3377
HOSTEDCP-1372: Bumps k8s to v0.29 #3360
Full changelog

ibmcloud-machine-controllers

OCPBUGS-26134: Add Snyk file to exclude vendor directory on scan #33
Full changelog

insights-operator

NO-JIRA: fix helmchart gather unit test (#880) #880
feature: support loglevel controller (#894) #894
NO-JIRA: Adding insights-config configuration description to arch.md (#892) #892
another attempt to fix security warning for changelog script (#893) #893
Full changelog

kube-metrics-server

OCPBUGS-24858: Updating ose-kube-metrics-server-container image to be consistent with ART #21
Full changelog

kube-proxy, sdn

NO-JIRA: Update README to note that openshift-sdn is deprecated #611
NO-JIRA: Move sdn to RHEL9 base image #598
OCPBUGS-25740: Updating ose-node-container image to be consistent with ART for 4.16 #599
OCPBUGS-23666: Add Snyk file to exclude directories on scan #604
OCPBUGS-25779: Updating kube-proxy-container image to be consistent with ART for 4.16 #600
Full changelog

kube-rbac-proxy

OCPBUGS-24818: Updating kube-rbac-proxy-container image to be consistent with ART #88
Full changelog

kube-storage-version-migrator

OCPBUGS-27929: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.16 #203
Full changelog

kubevirt-csi-driver

NO-JIRA: Auto sync upstream 2024 01 05 18 36 #27
Full changelog

machine-api-operator

OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #1211
CFE-684, OCPCLOUD-2430: Rebase k8s 1.29 and update dependencies #1208
CFE-684: Update GCPCloudCredentials with TagUser role #1158
OCPBUGS-27385: Add useExternalIp gcp permission #1206
OCPBUGS-23544: Set –max-concurrent-reconciles=10 for Azure machine controller #1203
OCPBUGS-23544: Add AddWithActuatorOpts to allow overriding Machine controller options #1202
Full changelog

machine-config-operator

OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #4147
OCPBUGS-24366: Delete state files on reboot only #4124
OCPBUGS-17788: Improved error handling for missing MC #4096
OCPBUGS-27508: daemon: allow the user to override drains on IR changes #4139
MCO-831: added feature gate to mco for on cluster builds #4060
OCPNODE-2005: crio: add support for LinkLogs annotation by default #4116
OCPNODE-1632: Bump k8s api to v0.29.0 #4119
OCPBUGS-27190: Fix mirrorSourcePolicy error prompt imagecontentsourcepolicies #4125
OCPBUGS-25662: Add Image Credential Provider flags for Kubelet on AWS #4103
OCPNODE-2021: add crio-kube-rbac-proxy #4108
OCPBUGS-24831: Updating ose-machine-config-operator-container image to be consistent with ART #4070
OCPBUGS-22664: Mount /run/nodeip-configuration into coredns containers #4058
OCPBUGS-27261: Fix typo in AWS node env unit #4126
NO-ISSUE: Update the design doc dual support icsp and idms #4085
NO-ISSUE: pkg/operator/sync: Set ownerReferences on *-user-data-managed Secrets #4089
OCPBUGS-25725: ManagedBootImages: failed to fetch architecture type of machineset no linked machine found #4088
OCPBUGS-26605: use machine client instead of oc for teardown #4110
OCPBUGS-5452: If node is not in pool, error #4097
OCPBUGS-24416: Sync MCN with node creation and deletion #4062
NO-ISSUE: pkg: Deduplicate api/machineconfiguration/v1 imports #4091
Full changelog

monitoring-plugin

OU-310: Add an extension point for alerts, to be able to add an inspect link #95
OU-309: consider all metric keys to display all results on dashboards tables #96
OCPBUGS-27201: upgrade follow-redirects parent dependency #92
OU-311: Add Dockerfile for local testing #91
Full changelog

multus-cni

OCPBUGS-28583: Updating multus-cni-container image to be consistent with ART for 4.16 #212
OCPBUGS-26222: Adds a wait to account for the possiblity of a not ready unix socket #208
OCPBUGS-24863: Updating multus-cni-container image to be consistent with ART #204
Full changelog

multus-networkpolicy

Updating ose-multus-networkpolicy-container image to be consistent with ART (#47) #47
Full changelog

multus-route-override-cni

OCPBUGS-28557: Updating ose-multus-route-override-cni-container image to be consistent with ART for 4.16 #54
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-26986: Downstream sync - includes configurable schedule for reconciler #227
OCPBUGS-26017: Updating ose-multus-whereabouts-ipam-cni-container image to be consistent with ART #223
Full changelog

must-gather

WRKLDS-950: use must-gather since and since time env vars on inspect cmds #400
Full changelog

network-tools

NO-JIRA: ovn-db-run-locally: Make DB Type Param Optional #101
OCPBUGS-26490: Updating ose-network-tools-container image to be consistent with ART #108
NO-JIRA: jira-scripts: disable flavio #111
Full changelog

oauth-apiserver

OCPBUGS-27094: UPSTREAM: <carry>: retry etcd Unavailable errors #95
Full changelog

oc-mirror

CLID-14: docs: adds 2 new scenarios (#785) #785
CLID-14: docs: add 3 new scenarios for catalog filtering (#782) #782
OCPBUGS-26513: Add Type for CopyImageSchema; Skip graph for IDMS; Fix UpdateService (#772) #772
CLID-14: Add study results in docs (#778) #778
OCPBUGS-23550: Generate both binaries for rhel8 and rhel9 (#767) #767
Add documentation for enclave support (#771) #771
OCPBUGS-16801: fix: fixes the bug on catalog when using field archiveSize: 1 (#773) #773
Fix to ensure operator not found error exits with correct status (#770) #770
Full changelog

olm-catalogd

NO-ISSUE: Synchronize From Upstream Repositories #38
Full changelog

olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #66
NO-ISSUE: Synchronize From Upstream Repositories #65
NO-ISSUE: Synchronize From Upstream Repositories #64
NO-ISSUE: Synchronize From Upstream Repositories #63
NO-ISSUE: Synchronize From Upstream Repositories #62
NO-ISSUE: Synchronize From Upstream Repositories #61
Full changelog

openshift-apiserver

OCPBUGS-27927: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.16 #415
OCPBUGS-27094: UPSTREAM: <carry>: retry etcd Unavailable errors #410
Full changelog

openstack-cinder-csi-driver-operator

STOR-1574: Bump library-go #158
Full changelog

openstack-machine-api-provider

NO-JIRA: Stop setting logtostderr flag and rely on defaults #102
Full changelog

operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #676
NO-ISSUE: Synchronize From Upstream Repositories #667
OCPBUGS-27140: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.16 #658
OCPBUGS-25989: Synchronize From Upstream Repositories #663
NO-ISSUE: Synchronize From Upstream Repositories #659
OCPBUGS-25262: Updating operator-registry-container image to be consistent with ART for 4.16 #657
OCPBUGS-24526, OPRUN-3182: Sync with upstream #654
OCPBUGS-24994: Updating operator-lifecycle-manager-container image to be consistent with ART #631
Full changelog

operator-marketplace

Delete deploy dir #529
Full changelog

ovirt-csi-driver

OCPBUGS-24868: Updating ose-ovirt-csi-driver-container image to be consistent with ART #132
Full changelog

ovirt-machine-controllers

OCPBUGS-24925: Updating ose-ovirt-machine-controllers-container image to be consistent with ART #176
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-27933: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.16 #2027
OCPBUGS-23430, OCPBUGS-24363, OCPBUGS-26023, OCPBUGS-27211: [DownstreamMerge] Merge 1-16-24 #2018
OCPBUGS-27285: Dockerfile: Bump OVS to openvswitch3.1-3.1.0-73.el9fdp #1995
OCPBUGS-25030: Updating ovn-kubernetes-microshift-container image to be consistent with ART #1979
Full changelog

prometheus

MON-3676: move raptorsun out of reviewer list #194
MON-3673: Bump Prometheus to v2.49.1 #192
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

MON-3689: Bump openshift/prometheus-operator to v0.71.2 #274
MON-3689: Bump openshift/prometheus-operator to v0.71.1 #273
MON-3676: move raptorsun out of reviewer list #272
MON-3661: Bump openshift/prometheus-operator to v0.71.0 #271
OCPBUGS-26147: configure Snyk scanner #269
Full changelog

prometheus-node-exporter

OCPBUGS-24722: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART #140
Full changelog

service-ca-operator

OCPBUGS-28230: add FallbackToLogsOnError for easier debugging #230
Full changelog

telemeter

MON-3669: Removing newlines from the jsonnet configuration for the recording rules.libsonnet #503
MON-3669: Add rule for effective CPU cores for subscription usage purposes #501
Full changelog

tests

NO-JIRA: Skip external cloud provider test for HyperShift clusters #28562
MON-3449: Ensure monitoring statefulsets are not recreated after upgr… #28361
NO-JIRA: techpreview can install unstable CRDs #28532
OCPBUGS-18776: replace curl calls by net/http #28546
MON-3693: Adding slashpai and machine424 to Prometheus owners #28552
OCPBUGS-27892: fix panic in service-poller #28544
OCPBUGS-26594: pathologicalevents: fix regex in LeakyStatefulsetEvents matcher and add test #28538
NO-JIRA: remove unnecessary setup code from monitor #28534
trt-1141: bump timeout values #28527
NO-JIRA: collect certs on disk: rename prefix to rootfsmount, use new skip/rew… #28542
OCPBUGS-27465: Do not assume there is just a single kubelet systemd service #28529
OCPBUGS-27502: collect certs on disk: set pause image #28541
NO-ISSUE: Automated - Update synthetic test data #28537
OCPBUGS-27210: Restore HTTP/2 tests in test/extended/router #28540
OCPBUGS-20487: update egressFWTestE2E image which contains ping binary #28408
NO-JIRA: Update Omer to be the SNO lead #28451
TRT-1440: Automated - Update synthetic test data #28484
NO-JIRA: Update WinC team lead #28472
OCPBUGS-26594: pathologicalevents: Ignore leaky RecreatingTerminatedP… #28530
OCPBUGS-27341: pkg/monitortests/clusterversionoperator: Add an exception for ingress going Available=False on IngressUnavailable #28480
NE-1444: test/extended/router/http2: delete skipped tests #28522
NO-JIRA: Collect certs from disk #28444
TRT-1370: Track etcd leadership changes in etcd-leaders section of spyglass chart #28441
TRT-1440: Allow BestMatchDuration to pass even on fallback #28526
NO-JIRA: add kubernetes level to openshift tests image for payload #28521
TRT-1441: Stop uploading intervals to loki #28525
NP-877: Live migration suite e2e #28462
OCPNODE-1895: Bump k8s api to v1.29.0 #28473
trt-1430: Pass watchdog InvariantCheck when cluster stability is disruptive #28518
add test to ensure all accessible-by-default apis are stable #28467
TRT-1408: Disable TopologyAwareHintsDisabled check whenever NoExecuteTaintManag… #28517
OCPBUGS-18577: updated timeout to 3 seconds to account for network timing issues #28300
“NO-JIRA: Reduce top level origin approvers to TRT members only” #28439
watch the operator resources during resource watch #28513
add featureset into the raw-tls artifact names #28509
OCPBUGS-25730: Kuryr: Ignore Upgradeable=False on operators tests #28478
OCPBUGS-26025: Do not apply master label to make sure SNO jobs pass #28499
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github