4.19.0-ec.3

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.19.0-ec.3-s390x

Team Approvals:

No tests for this release

Upgrades from:

Untested upgrades: 4.18.1, 4.18.2, 4.18.3, 4.19.0-ec.0, 4.19.0-ec.1, 4.19.0-ec.2

Loading changelog, this may take a while ...

Changes from 4.19.0-ec.2

Created: 2025-03-06 21:34:31 +0000 UTC

Image Digest: sha256:7ea31ead80e91326d23a4f85fe35812b315a9859f5f029fad7d798b2b4754c31

Components

Kubectl upgraded from 1.31.1 to 1.32.1
Kubernetes upgraded from 1.32.1 to 1.32.2
Kubernetes Tests upgraded from 1.31.1 to 1.32.2
Red Hat Enterprise Linux CoreOS upgraded from 419.96.202502102012-0 to 419.96.202503032242-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
GatewayAPI (0 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
GCPCustomAPIEndpoints (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLMCatalogdAPIV1Metas (0 tests)				Enabled (New)		Enabled (New)
SigstoreImageVerificationPKI (0 tests)			Enabled (New)	Enabled (New)

New images

openstack-resource-controller git d00bab2b sha256:44b148fca93e6ea0c043c86f64b26bb0f8b163d6689c6cfaf41507865e1fa220

Removed images

ovirt-machine-controllers

Rebuilt images without code change

agent-installer-utils git 3f6d1d8b sha256:a3d46a6532d5c727eda0b916af1c13113389d76c8217082178f5febbcea34254
apiserver-network-proxy git 0e116160 sha256:70231dc6011e7a435c6681478c67ae1ded414e80bd431727193043d1736bfaac
aws-kms-encryption-provider git 088dcaf7 sha256:91b9ff786f0f3f645557b90fa33ff448eb7ae4252116dfdfa1cd85c7dc1e5f0d
azure-kms-encryption-provider git d4fb1b6d sha256:cc2c7e08eca067b6e34d017aa7b07f49bfff9278ba9b2b40b24857dd79426277
azure-service-operator git 11ced00e sha256:f0eaee137d4288f9d54540d29e839565d669a48b0d28b2f5695e7325965a33f1
baremetal-machine-controllers git 9abe67f1 sha256:9dbefcacd142b380f231ab38a3f1238377589c6c444d7e22f7cf93e48d35d2a4
cluster-bootstrap git 5a201a04 sha256:ad90d25a34d7201300cdab344148556804bd73923fb2b002ad41adfd351d423a
cluster-config-operator git 1af8cf3a sha256:f3450d8db71ca30d08bde2f0861796214f09f846e55aa6a79a4c56996bf290ac
cluster-csi-snapshot-controller-operator git a68ffe82 sha256:7e6e0b5cfd8e678bf8226610fe23e7fc87564f7b6bd934dc7c8d18828abd8967
cluster-dns-operator git 0a9deeea sha256:fdea2999b3d7d2e1c5d457dd0a15e90ccc267ad91c05e9ec24b0791bd42b8b61
cluster-etcd-operator git 5bbe4944 sha256:16627ba23a351e639b0c8d62f6075bbe1291b5ee10c85243c9378ae70e4718f1
cluster-kube-cluster-api-operator git 3ec30377 sha256:6124550706c2d2fc51040a44402aa4f8fcf24f3688dbb0e50b8d80b85f8b67e7
cluster-kube-scheduler-operator git 4210c04a sha256:6b0ef42b6183851b956196eea761dd7a4b01592fe5d9b46df42d8bb7029f2e86
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:34d15e6e7d179ed1d5474db463f7f6503499453a3b8242701a445d4a717000f4
cluster-openshift-apiserver-operator git 5f66a3e1 sha256:d5044daa9e1b86fcb8448dc0cb6dfbeaa82e22000a76383fb5610bc29119fad8
cluster-samples-operator git 5c075681 sha256:232775c27292f7b5f260f5e150044ee8e2a33efbb58bc87970f6af985c295259
cluster-update-keys git d44fca58 sha256:19958be0132a2d4174c6b1fc04aa29d98422c988c3f3f9c02c6a7f18dee7cd6d
configmap-reloader git 9bfbde86 sha256:a46cc12f8f7d88c218445d4e8b255c10366f8473680dd416117762271201d8c9
container-networking-plugins git 24a65329 sha256:e285983f7ee9d3792a6942331c75ddf4e26cf1b86c3c62f0b33158305e25d71f
containernetworking-plugins-microshift git 24a65329 sha256:ec866622cad5c89b7eab43b69282ab70679ab07961c68502676ed898e476fa8c
coredns git 7a1451db sha256:d1dd989705fd66bc0149b4838472ea6d6b9415eb35f863a73bab73f37cf50cac
csi-external-attacher git 4d70cd88 sha256:3b109cb16e9e2ee492d50b319842aa954ffba9a698ff55ccaad406a72a372ce4
csi-external-resizer git 82e58855 sha256:25ffb29277227bb934a16c3f96cfec112b4c58cd3394352e01ede69928505a5e
csi-external-snapshotter git 1fc6ee15 sha256:6523e53737774fe21298e5aa3e459bc85086b00525c32e2e08c98bb8a035b477
csi-livenessprobe git e1566463 sha256:a8cdb769f769451a76a101c2e9b54135625a09db7422c057df41ae71a7a00962
csi-node-driver-registrar git 378f5c1b sha256:6e5b93d3165dc06e7b0d65e280b9ac05958a3258a801e2bae410218e584afa43
csi-snapshot-controller git 1fc6ee15 sha256:a41997bd0abd12381ee0e4d4dba5ac1b4639b69d517aca1edf1ae1d279e68516
csi-snapshot-validation-webhook git 1fc6ee15 sha256:98157431fae69708ee73524c5bb119eb0a898724b84e13042c5e2d9a1a0b335b
driver-toolkit git 81c6fa20 sha256:19aba0413ccf9094fa17c0a7b6161362f599baa512a9ab0706ee6c7ee3528e8f
egress-router-cni git 3193a756 sha256:3ca6fb459e0b624b4a3239624ac4498de80011ced5ed616d4b0a3c9d21a16cea
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:dcf193f6d3c919973a29fa71a9663eb013863d3d88dd6381e9a221562d326e33
ibm-cloud-controller-manager git 7422aab2 sha256:b18bc9c8528ae22b9310a978de014122274288729a3ab6f8cbd60da28b648660
insights-runtime-exporter git 9a254cce sha256:2c53b83ad6d9c43935d7dcc673087ad834766e49330aeedc51ce853a3fab382c
insights-runtime-extractor git 9a254cce sha256:3ae4fba042c63790338c0db5acda82e00c918e7aaae7cdcd380275266c465c14
keepalived-ipfailover git cec03e07 sha256:a75a1124de8a110c52f48e6e98cb379ee6af7f5cf6d46800513072d02ecbe855
kube-metrics-server git 037a0e7e sha256:baca93ebf3163da4d053d9165b47b2607be5bce7058a6f3e17ab314bd38a5eb9
kube-storage-version-migrator git 4c521b09 sha256:a7b4329ba80bccb1a7c2f6570777b18c7e670d5dca55f732bc52e54969920d21
kubevirt-cloud-controller-manager git 3f4542ec sha256:f241412564d272e60950007d92e9087439881bb50392b7b75df81a3be6ab5d4e
kubevirt-csi-driver git ba2234bd sha256:a779653d7a1ec4775f0a6cde1aca1461067c630aa1827e80128a29265e840cd5
libvirt-machine-controllers git a336f0b5 sha256:6f1104e7bec4d6cd96fea59114eab48a13bd0efb951bab1d63ef4fa8f7724b43
multus-admission-controller git 0b1b812e sha256:f157060d3a30212cf6942b45d1d04736f97a1bf4454220566b104bfebef5799d
multus-networkpolicy git e0c65b80 sha256:47577cdeb1c355bc0183c7da95f8966eb162eb0cc0ad1f3ae602f6b399f1f775
multus-route-override-cni git 391c1b03 sha256:44aca4839119053c21f863372c012c2b8658fa5b1cc87ff1694e2370903b6a4e
network-interface-bond-cni git f575d888 sha256:7265d31563d51371b3467b17bcc23b016f9a06b73c6275de45ac5d6ed77db098
network-metrics-daemon git 5ec8c6bd sha256:81e266ff3e1805a8694c8401191729bb8d601aee23a61b89029517aa908290b2
network-tools git 982767d9 sha256:63f037744abc7a93b351b9c1e8504e2b87b47f6a76915faf25957e39dc858971
oauth-apiserver git 75914068 sha256:2a59879f69db926efa5947aabf335691e74d5fee546cea152413fb790cb9f5c0
openshift-state-metrics git 3106bcc3 sha256:36a187fc17bcbb997974d7e07d328b5ff0b7020de9e8c100acb8da444cf52662
openstack-cinder-csi-driver git 1be63081 sha256:56a4349b3a0bc3362fe681f5d67a102ee6a7a8994b6a41f8a814ccc9740c2b8e
openstack-cloud-controller-manager git 1be63081 sha256:e009d2f82b25b3e1ceb0379a6a170891df2f9125adfb012099c131f1865c8be3
ovirt-csi-driver git 1db726a9 sha256:e0c54fc8a8d0b7cbbb9e8366a9b0fad1877ea1a19d96a86147eb520daa194520
prom-label-proxy git 7184f58d sha256:619c1b0f5c42735c0de048223a6977ee35d26529dc1102293941d7bf44945b99
prometheus-node-exporter git 57a4e998 sha256:56457614447ad09e3ea343837d54ea403658f8ea0591268609d98754a705c7ff
rhel-coreos sha256:074175a76e3ab07d8b3eec57c73d53217df4425d8cbdf31692d95bb37b1daf20
rhel-coreos-extensions sha256:92c0a84df5e8a036cbff00becfdcda71bf135f35a87e4f0690fdc1db283bb923
route-controller-manager git bc97534a sha256:92557e82589cec2cc1d31d467adf19a0969318b84b9e47d90c1e4d7cd395afd2
service-ca-operator git 1e656784 sha256:b25c5d7d1f2e21593a2eaecce0e99f749aca4ff857a393b594ccc2af41f2530f
telemeter git f63fef91 sha256:257f2e71a94eed8abcc9eef5a8f695fff8ae72f3318938a8c724ea60563722c7
thanos git 73a8770d sha256:f8ca613d69eb7a1adcee9c3d648c212856fde418c807d26bda8287f20e2ca628

agent-installer-api-server

MGMT-20005: Prepare OCP 4.18 / 4.19 images for OCP 4.18 GA (#7364) #7364
MGMT-20080: Add unitests to check mirroring priority (#7365) #7365
NO-ISSUE: [master] Bump OCP versions: 4.15, 4.17, 4.16 (#7361) #7361
NO-ISSUE: Update Konflux references (#7359) #7359
MGMT-19622: Proxy setting with special characters are ignored when minimal ISO is used (#7315) #7315
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.18 (#7354) #7354
MGMT-20060: Add OpenShift AI AMD operator bundle (#7222) #7222
NO-ISSUE: change default 4.19 image according to the new path (#7351) #7351
MGMT-19887: Add Histogram Metric for Host Monitoring Time (#7307) #7307
NO-ISSUE: Update Konflux references (#7337) #7337
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14 (#7336) #7336
NO-ISSUE: [master] Bump OCP versions: 4.17 (#7331) #7331
NO-ISSUE: [master] Bump OCP versions: 4.18, 4.19 (#7326) #7326
MGMT-19583: Remove references to kube-rbac-proxy that was deprecated (#7308) #7308
Add dev doc for disk image install (#7310) #7310
MGMT-19946: Update operator bundle channel to ocm-2.14 (#7316) #7316
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#7318) #7318
NO-ISSUE: [master] Bump OCP versions: 4.13 (#7314) #7314
NO-ISSUE: Update Konflux references (#7313) #7313
MGMT-19844: Validate that no_proxy does not contain duplicate entries (#7305) #7305
NO-ISSUE: [master] Bump OCP versions: 4.12, 4.18, 4.17, 4.15, 4.16 (#7306) #7306
Remove discovery stateroot when installing to existing root (#7283) #7283
Don’t remove spoke resources when cluster is being deleted (#7303) #7303
NO-ISSUE: [master] Bump OCP versions: 4.16 (#7298) #7298
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update Konflux references (#1048) #1048
NO-ISSUE: Update Konflux references (#1042) #1042
MGMT-19421: phase 1 of replacing the refference HighAvailabilityMode with ControlPlaneCount (#1027) #1027
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#1034) #1034
NO-ISSUE: Update Konflux references (#1031) #1031
Full changelog

agent-installer-node-agent

NO-ISSUE: Update Konflux references (#924) #924
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#912) (#911) #912
NO-ISSUE: Update Konflux references (#921) #921
MGMT-19927: Modify MTU Check to Only MTUs != 1500 (#910) #910
MGMT-19588: Also use bond interface for hostname workaround (#920) #920
MGMT-19819: Add the commit reference from which the image is built to the image (#914) #914
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#912) #912
Full changelog

aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, gcp-cloud-controller-manager, gcp-cluster-api-controllers, gcp-machine-controllers, gcp-pd-csi-driver, gcp-pd-csi-driver-operator, hyperkube, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kube-proxy, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

OCPBUGS-45214: Add groupsnapshot tests #2155
OCPNODE-2940: add minimumkubeletversion admission package #2201
TRT-1854: Update openshift-tests-extension version #2214
OCPBUGS-45359: Unskip recover volume expansion failure tests #2218
OCPBUGS-45241: UPSTREAM: <carry>: Re-enable temporarily disabled port-forward test #2213
OAPE-96: UPSTREAM: <drop>: bump openshift/api@107848b719c5 #2217
OCPNODE-2940: add minimumkubeletversion package #2104
CNTRLPLANE-1: Bump 1.32.2 #2209
NO-JIRA: UPSTREAM: fix request Host storing in openshift.io/during-graceful audit log annotation #2119
OCPBUGS-41533: UPSTREAM: <carry>: util: inform the kubelet it has a new enough kernel for idmapped mounts #2168
TRT-1286: List images from external test binary #2177
OCPBUGS-46477: Disable ServiceAccountNodeAudienceRestriction feature gate and reenable Azure file tests #2202
Full changelog

baremetal-cluster-api-controllers

downstream: regenerate manifests #37
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-50534: Fix error messages in available IP code #9503
OCPBUGS-51204: bootstrap/node-image-pull.sh: handle PXE boots as well #9516
OCPEDGE-1310: feat: add arbiter node support to installer #9159
CORS-3919: Add GCP service endpoints to the infrastructure manifest #9518
OCPBUGS-51084: PowerVS: Specify chrony config for Disconnected deploy #9500
no-jira: Bump cluster-api to v1.9.4 #9411
OCPBUGS-49351: Add vSphere logic to check for max network count #9419
CORS-3843: Add Tech Preview Feature gate to Installer for GCP Custom API Endpoints #9501
OCPBUGS-50919: Fixes panic during GCP tags fetch due to unstable network #9495
OCPBUGS-49940: PowerVS: datacenter supported systems #9442
OCPBUGS-49953: PowerVS: support destroy tag 1 #9403
OCPBUGS-50574: Check for vmgroup when create capv machine fd name #9453
CNTRLPLANE-194: add auth-api-bootstrap stage to bootkube.sh template #9424
CORS-3867, CORS-3868: deprecate platform.subnets and introduce platform.vpc.subnets field in install-config #9443
OCPBUGS-50899: PowerVS: COS eu-es hack #9490
OCPBUGS-50920: Rely on path declaration of base image #9491
OCPBUGS-45429: Set the right resource group in bootstrap destroy #9487
CORS-3835: Add gcp endpoints to the installer config #9363
OCPBUGS-46488: Validate Encryption Keys for GCP #9328
OCPBUGS-44507: Check public zone for stray record set #9365
OCPBUGS-50839: correct typo #9480
OCPBUGS-50657: PowerVS: destroy dhcp hack #9458
OCPBUGS-50534: Fix panic when there are no available IPs #9444
OCPBUGS-50649: vsphere - check if host is powered down or on standby before uploading template #9456
no-jira: Switch to go.uber.org/mock/gomock #9422
OCPBUGS-49319: IBMCloud: Drop CAPI metrics-bind-addr #9401
Full changelog

baremetal-operator

OCPBUGS-51294: Merge upstream #398
Full changelog

baremetal-runtimecfg

Revert “OPNET-629: Use HAProxy monitor endpoint instead of API” #342
OPNET-629: Use HAProxy monitor endpoint instead of API #336
OCPBUGS-48194: Bump logrus version #338
Full changelog

cli, cli-artifacts, deployer, tools

NO-JIRA: Bump x/oauth2 and x/crypto #1984
OCPBUGS-51254: Bump indirect dependency go-jose to 4.0.5 version #1983
NO-ISSUE: pkg/cli/admin/upgrade/recommend: Configureable version for test fixtures #1981
NO-ISSUE: Test case for lowercase Jira ticket names #1964
NO-ISSUE: pkg/cli/admin/upgrade/recommend: “Upstream” -> “Upstream update service” #1980
trt-1995: Update Unconditional Feature Gate Notation #1979
OCPBUGS-50682: OCPBUGS-50683: Correct oc adm top pvc messages #1974
WRKLDS-1653: Update k8s dependencies to 1.32 #1971
OTA-1426: pkg/cli/admin/upgrade: Check and display interesting alerts #1970
NO-JIRA: Sanitize tar header name as it is used in path #1969
Full changelog

cloud-credential-operator

CCO-629: Update modules to latest #817
Full changelog

cloud-network-config-controller

OCPBUGS-45631: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.19 #160
Full changelog

cluster-authentication-operator

NO-JIRA: Keycloak e2e test improvements #714
OCPBUGS-51981: fix: update starter path to account for mom integration #760
CNTRLPLANE-71: update cao to manage rolebindingrestriction crd #748
AUTH-541: OIDC structured auth config #713
CONSOLE-4434, OCPBUGS-43610: update login templates to use PF6 and add validation #751
NO-JIRA: OWNERS: update approvers #756
Full changelog

cluster-autoscaler

OCPCLOUD-2500: Update to recognize both upstream and openshift ScaleFromZero annotations #335
Full changelog

cluster-autoscaler-operator

OCPCLOUD-2829: Bump k8s 1.32 #339
Full changelog

cluster-baremetal-operator

OCPBUGS-51275: add missing relatedObjects #461
METAL-1286: Remove legacy unused annotation exclude.release.openshift.io/internal-openshift-hosted #462
OCPEDGE-1607: feat: add arbiter node selector #460
Full changelog

cluster-capi-controllers

NO-JIRA: Update manifests generator tooling #232
OCPCLOUD-2680: Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.5 (068c0f3) into master #231
OCPCLOUD-2857: Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.4 (79e6731) into master #230
Full changelog

cluster-capi-operator

OCPCLOUD-2645: MAPI to CAPI Machine synchronization #258
NO-JIRA: Add lifecyclehook script that updates manifests-gen #264
NO-JIRA: Remove unused Dockerfile #255
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-41827: update injector to support secret as well #385
OCPBUGS-48481: annotation validation policy #379
OCPCLOUD-2843: AWS CCM should be configured with the AWS cloud provider config #384
Full changelog

cluster-config-api

security: add annotation for validated SCC type #2211
NO-JIRA: Add example of excluding subnets pattern #2213
OCPNODE-2339: Add PKI field to (cluster)imagepolicy #2088
OCPBUGS-50587, OCPBUGS-51272: Reject new NodeStatus with revision set #2208
Fix FeatureGateNewOLMCatalogdAPIV1Metas spelling error #2214
OCPBUGS-32158: Add CEL validation for RegistrySources in Image API #1859
no-jira: correct default CIDR for ipv6 join subnet in API descriptors #2184
featuregate for catalogd metas web api #2202
CORS-3842: Add API Updates for GCP Custom API Endpoints #2150
NO-JIRA: bump controller-tools dependency to latest downstream commit #2207
SPLAT-2000: Add configuration for vSphere multi disk thinProvisioned #2154
NE-1871: Promote GatewayAPI to Tech Preview #2081
OCPBUGS-44199: Allow spaces in AWS tags #2124
OCPBUGS-48542: Remove Never option from IPsec Encapsulation #2199
OCPBUGS-42701: api: Updated the disableMultiNetwork parameter description #2143
Full changelog

cluster-control-plane-machine-set-operator

OAPE-126: Include CPMSMachineNamePrefix feature-gate name in e2e tests #351
OCPBUGS-50580: Fix MachineNamePrefix periodic on OpenStack #349
OCPCLOUD-2834: Update dependencies to K8s 1.32 #345
Full changelog

cluster-image-registry-operator

CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-image-registry #1174
NO-JIRA: update owners #1178
OCPBUGS-50950: ensure that storage names don’t end in dashes #1177
Full changelog

cluster-ingress-operator

OCPBUGS-31550: Gateway API - recreating SMCP which breaks Gateway API #1115
Full changelog

cluster-kube-apiserver-operator

NO-JIRA: readme: describe mapping between operatorLogLevel and log level #1820
AUTH-541: OIDC structured auth config #1760
OCPNODE-2940: add support for minimumKubeletVersion #1754
MON-4129: slos: accomodate for Prometheus v3 “le” normalization #1815
MON-4129: revert https://github.com/openshift/cluster-kube-apiserver-operator/pull/1784 #1817
NO-ISSUE: Bump TraceAll log level to v=10 #1814
OCPBUGS-48673: targetconfigcontroller: check live etcd endpoints #1792
API-1689: TLS registry: add description #1763
OCPBUGS-49980: change one sum:apiserver_request:burnrate5m to sum:apiserver_request:burnrate6h #1804
OCPBUGS-49763: Disregard health endpoints in the burn rate alerts #1742
Full changelog

cluster-kube-controller-manager-operator

NO-JIRA: readme: describe mapping between operatorLogLevel and log level #835
NO-JIRA: readme: describe mapping between logLevel and log level #833
NO-ISSUE: Bump TraceAll log level to v=10 #828
Full changelog

cluster-machine-approver

OCPCLOUD-2832: Bump k8s 1.32 #268
Full changelog

cluster-monitoring-operator

NO-JIRA: Bump prometheus-operator to 0.80.1 #2572
MON-4147: test: remove unnecessary UWM configuration in TestUserWorkloadMonitoringXXX #2567
OCPBUGS-50837: Fix opentelemetry metrics to use regexp on label match #2568
OCPBUGS-50703: Add incidents metric to telemetry #2569
Full changelog

cluster-network-operator

SDN-4829: Add machine config watchers to report IPsec status #2383
NP-1100: Enable fast ranges #2648
NO-JIRA: Add “centos” to supported OS ids #2652
Full changelog

cluster-node-tuning-operator

CNF-16742: kernelPageSize + hugepages combinations validation (#1296) #1296
machineconfig: add support for various hugepage sizes. (#1295) #1295
E2E: Add test to verify runc uses valid cpus (#1088) #1088
OCPBUGS-49823: Support hugepage size selection for ARM-based clusters (#1294) #1294
OCPBUGS-49403: E2E: Add configuration tests related to align cpus by uncorecache feature (#1291) #1291
Full changelog

cluster-olm-operator

OPRUN-3690: Watch for new upstream feature gate APIV1MetasHandler #104
NO-ISSUE: Update to k8s v0.32.2/v1.32.2 #108
OCPBUGS-51357: Revert “(vendor) Bump openshift/api” #106
NO-ISSUE: Bump kubernetes and openshift/api dependencies #105
OPRUN-3663: Watch and reconcile feature gates changes #102
Full changelog

cluster-openshift-controller-manager-operator

WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #381
Full changelog

cluster-policy-controller

WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #160
Full changelog

cluster-storage-operator

OCPBUGS-50668: fix Vsphere cluster Storage operator in Unavailable state #556
Full changelog

cluster-version-operator

OTA-1427: Recompute node insights when MC/MCP changes #1144
OTA-209: Add ClusterVersionOperator manifests #1161
OTA-1418: Decribe informer->usc communication #1162
NO-JIRA: Rename fields in ClusterCapabilities for readability #1157
OTA-1427: Polish reason and message in Node’s status insight #1145
NO-JIRA: Refactor for readability #1131
OCPBUGS-50498: cvo: improve error handling on port collision #1160
NO-JIRA: Update ClusterOperator Status Conditions to listType=map #1149
OTA-861: Generate an accepted risk for Y-then-Z upgrade #1093
NO-JIRA: Fix a few AMD64-oriented tests on Non-AMD64 machines #1156
OTA-1418: USC: Drop unknown insights after grace period #1150
NO-JIRA: status: extract API types to a package #1155
Full changelog

console

CONSOLE-4484: follow on fix to ensure Bottom ConsoleNotification are … #14806
NO-JIRA: Apply plugin-api-changed label on changes to the api package #14804
OCPBUGS-52180: Fix notification drawer close button error #14809
ODC-7724: Add guided tour in Admin perspective #14776
ODC-7769: Add Getting started section in project Overview page #14792
OCPBUGS-30973: Update @types/react-redux #14680
ODC-7725: Show perspective preferences option if more than one perspective are available #14644
OCPBUGS-51202: Fix Timestamp component #14793
OCPBUGS-46050: Determine if disabled a11y rules can be re-enabled #14643
CONSOLE-4484: Replace custom tabs with PF6 Tabs component #14760
OCPBUGS-48642: Check for unused modules in static plugins #14695
CONSOLE-4486: decrease TertiaryHeading margins in Edit resource limit… #14782
OCPBUGS-50546: Do not load CSRs if user does not have permissions #14771
OCPBUGS-36786: Force async package upgrade. #14775
OCPBUGS-50670: fix bold text issues and missing underline on inline link buttons on safari and firefox. #14766
NO-JIRA: Small demo plugin and plugin doc improvements #14779
CONSOLE-4489: fix bug where dropdown menu can overflow #14780
OCPBUGS-49996: add missing contextId to be able to inject tabs from plugins #14732
OCPBUGS-49778: Linkify OLM operator uninstall message #14713
OCPBUGS-50693: Show Observe section without PROMETHEUS and MONITORING flags #14697
CONSOLE-4467: replace html heading elements with PatternFly components #14767
OCPBUGS-50847: fix but where textarea can be expanded horizontally #14773
CONSOLE-4476: Remove various upstream workarounds #14756
OCPBUGS-45141: Store Topology sidebar alert in the localStorage #14700
NO-JIRA: Update Console dynamic plugin SDK doc and changelogs #14768
ODC-7735: Edit ci tests to have step to enable developer perspective #14684
OCPBUGS-50665: fix bug where Demo Plugin tab url is always appended #14764
CONSOLE-4079, CONSOLE-4080: Address tech debt in GenericSecretForm and KeyValueEntryForm components #14520
OCPBUGS-49381: Workloads-DeploymentConfigs-Add storage: i18n misses #14747
CONSOLE-4480: fix background color of Command Line Terminal tab #14759
OCPBUGS-48548: The secret created with Basic authentication has an incorrect type #14691
CONSOLE-4464: bump PatternFly 6 to latest available versions #14750
CONSOLE-4443: Upgrade dynamic-demo-plugin to PatternFly 6 #14682
OCPBUGS-48637: add support for “OpenShift Virtualization Engine” valid subscription filter on OperatorHub #14709
OCPBUGS-46088: [Hypershift] Filter by Node type list is empty #14704
CONSOLE-4477: more token updates #14752
OCPBUGS-49839: fix run time error when no completed version exists #14742
CONSOLE-4475: fix QueryBrowser tooltip styles #14751
CONSOLE-4469: improve layout and functionality of Edit upstream confi… #14734
OCPBUGS-43061: update the Deployment pod on change in imageStream #14523
CONSOLE-4474: Unbold pf-v6 labels by default #14748
CONSOLE-4465: add workaround for menu scroll #14745
CONSOLE-4473: fix alignment issues with Bootstrap radio and checkbox … #14739
CONSOLE-4472: fix QuickStart layout issues #14738
CONSOLE-4471: fix bug where close button can overlap guided tour popo… #14737
CONSOLE-4470: fix bug where Edit button is bold inside DetailsItem dt #14736
CONSOLE-4467: replace html heading elements with PatternFly components #14726
Full changelog

console-operator

OCPBUGS-51379: Re-revert Report email_domain to telemetry + fix panic for uninitialized mail value. #964
OCPBUGS-45514: Report email_domain to telemetry + fix panic for uninitialized mail value. #962
OCPBUGS-51156: Revert #950 “OCPBUGS-45514: Report email_domain to telemetry” #961
OCPBUGS-45514: Report email_domain to telemetry #950
OCPBUGS-48536: Bump documentationBaseURL to 4.19 #956
OCPBUGS-48740: Vendor the missing CSP directives #960
Full changelog

csi-external-provisioner

OCPBUGS-46727: CVE-2024-45338: bump golang.org/x/net to v0.34.0 #109
Full changelog

docker-builder

OCPBUGS-48741: Buildah dependency bump to v1.39.0 #455
Full changelog

docker-registry

NO-JIRA: chore: update owners file #424
Full changelog

etcd

DOWNSTREAM: <carry>: OCPBUGS-51838: fix a compaction induce latency issue #309
ETCD-709: Rebase etcd 3.5.18 openshift 4.19 #308
Full changelog

haproxy-router

OCPBUGS-45759: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.19 #644
OCPBUGS-45702: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.19 #643
OCPBUGS-39403: Fix parseIPList to Continue Processing After Invalid IPs and Return Valid IPs #621
Full changelog

hypershift

NO-JIRA: chore(deps): update konflux references #5527 #5747
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5424
OCPBUGS-51364: Remove scaledown APIs from Backup/Restore procedure #5745
CNTRLPLANE-244: Enable initial GitHub Action jobs #5706
OCPBUGS-49825: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5551
OSASINFRA-3733: deploy ORC on release payload >= 4.19 #5710
CNTRLPLANE-112: Enable MIv3 for azure disk csi driver #5703
HOSTEDCP-2262: Karpenter openshift ec2class #5600
NO-JIRA: chore(owners): Update IBM reviewers #5717
CNTRLPLANE-111: Enable MIv3 for Azure KMS #5704
NO-JIRA: doc: openstack: update go version #5716
CNTRLPLANE-112: Enable image registry to use managed identity v3 #5655
HOSTEDCP-2246: [CPOv2 Refactor] Refactor OLM #5663
HOSTEDCP-2247: [CPOv2 Refactor] Refactor control-plane-pki-operator #5694
OCPBUGS-51007: test/e2e: fix WaitForImageRollout to actually wait on upgrade case #5679
NO-JIRA: Bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.5 #5700
OCPBUGS-50907: Propagate Reason for Available condition from HCP to HC #5650
NO-JIRA: Reenable ibm network cel #5698
NO-JIRA: ho: watch AWSEndpointServices #5674
NO-JIRA: test/e2e: use test name for HC name #5665
OSASINFRA-3719: openstack: ORC deployed out of tree #5584
CNTRLPLANE-35: skip EnsureValidatingAdmissionPoliciesExists/EnsureVal… #5672
NO-JIRA: Update-precommit-docs #5678
HOSTEDCP-2248: [CPOv2 Refactor] Refactor snapshotcontroller #5632
OCPBUGS-50860: Skip hashing configuration.image.imageStreamImportMode #5651
NO-JIRA: Add omitempty to CredentialsSecretName #5656
OCPBUGS-51039: return marshalled dataplane even if assignprincipals is false #5610
HOSTEDCP-2241: [CPOv2 Refactor] Refactor ingress operator #5602
CNTRLPLANE-220: Update “Create an Azure Hosted Cluster on AKS” docs #5652
CNTRLPLANE-238: Bump k8s to v1.32.2 and CAPZ to v1.18.0 #5623
NO-JIRA: Fix hc hcp cel inconsistency #5661
NO-JIRA: add secretproviderclass to dump #5654
OCPBUGS-50606: Fix kubeadmin login failure #5631
NO-JIRA: bump Cluster API Provider OpenStack to v0.12 (for 4.19 only) #5622
NO-JIRA: update hypershift azure roles to use ids #5657
CNTRLPLANE-112: Add UserAssignedIdentityCredentials environment variable for OpenShift operators #5621
NO-JIRA: CPOv2 refactor self service sa kubeconfig #5607
CNTRLPLANE-111: Move CPO to use UserAssignedIdentityCredentials #5596
HOSTEDCP-2244: Refactor machine approver into cpov2 #5594
OCPBUGS-50578: add region to AWS creds passed to operators managed by CPO #5595
OCPBUGS-50014: Restart HCP on stale serving certs #5601
NO-JIRA: Remove ARO HCP Managed Identity Tech Preview #5604
HOSTEDCP-2171: add e2e test for aro scheduler #5568
NO-JIRA: Bump Golang to 1.23 #5466
NO-JIRA: Ensure ‘pull-secret’ is set properly on v2 serviceAccounts #5609
NO-JIRA: Bump to CAPI v1.9, CAPA v2.7 #5611
HOSTEDCP-2255: e2e: ensure custom tolerations on all HCP pods #5543
HOSTEDCP-2243: Refactor dns operator into cpov2 #5593
PODAUTO-318: Implement HCP karpenter deletion #5540
NO-ISSUE: docs/content/how-to/disaster-recovery/etcd-recovery: Explicitly delegate to admin #5515
NO-JIRA: Bump the golang-dependencies group with 2 updates #5582
Full changelog

ibm-vpc-block-csi-driver

STOR-2249: Rebase to upstream 5.2.14 for OCP 4.19 #79
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-47121: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #136
Full changelog

ibmcloud-cluster-api-controllers

OCPCLOUD-2852: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.10.0 (0c35eac) into main #107
NO-JIRA: Update manifests generator tooling #106
OCPBUGS-50674: Fix for CVE-2024-45338 in golang.org/x/net/html in main #99
Full changelog

ibmcloud-machine-controllers

OCPCLOUD-2841: Update K8s to 1.32 #60
Full changelog

insights-operator

Fix bad IPv6 address (#1073) #1073
OCPBUGS-35196: update the duration validation pattern according to the OpenShift API (#1072) #1072
CCXDEV-12875: Enable Insight Operator entitlements for multi arch clusters (#1066) #1066
Full changelog

kube-rbac-proxy

CNTRLPLANE-248: Merge upstream v0.19.0 release #116
OCPBUGS-45765: Updating kube-rbac-proxy-container image to be consistent with ART for 4.19 #115
Full changelog

kube-state-metrics

OCPBUGS-52192: [bot] Bump openshift/kube-state-metrics to v2.15.0 #119
Full changelog

machine-api-operator

OCPCLOUD-2780: Validate aws marketType webhook #1329
OCPBUGS-44671, OCPBUGS-51373: Updates GCP credentials request #1335
SPLAT-2000: Added vSphere provisioning mode to data disks #1328
OCPBUGS-49413: add image/read permissions #1330
OCPBUGS-51042: Drop oVirt support #1331
OCPBUGS-49351: Added vSphere check for max networks #1327
Full changelog

machine-config-operator

OPNET-629: Mark haproxy unhealthy if no healthy backends #4767
OCPBUGS-44602: Set ownerReference for OCL build objects #4861
OCPBUGS-41489: configure-ovs workaround for ovs-if-br-ex bug #4877
OCPBUGS-48810: Ensure that build jobs are always reconciled #4811
No-Issue: Remove OCL Extensions test #4868
OCPEDGE-1493: Add 2no-ha extension support required by Two Node OpenShift #4843
OCPBUGS-50849: add RHEL variant to IsEL() check #4856
NO-ISSUE: increase WaitForPoolComplete() timeout #4873
OCPBUGS-51009: OSUpdateStarted event should only be emitted on actual OS updates #4864
OCPBUGS-47743: Update cluster-reader ClusterRole permissions #4823
OCPBUGS-45459: Remove trailing period from Openstack provided hostnames #4778
OCPBUGS-47629: /etc/crio/crio.conf.d/00-default should contain runtime_root for runc #4850
OCPBUGS-49394: Fix SELinux failures running afterburn-hostname #4863
OCPBUGS-50599: Enforce VIPs to be collocated at the same host #4844
OCPBUGS-49347: Degraded machine-config CO due to ManagedBootImages update when upgrading an OCL cluster #4810
OCPBUGS-33894: Avoid dumping Go struct in potentially user-facing reason annotation #4814
OCPBUGS-44618: In OCL, MCPs are reporting Updating=false while the image is being built #4710
OCPBUGS-49959: Panic in the MCC when using OCL v1 GA #4834
NO-ISSUE: Add isabella-janssen to OWNERS as approver & reviewer #4846
OCPBUGS-31778: Update format verbs for alert logs #4839
Full changelog

machine-os-images

OCPBUGS-50910: Decompress pxe file only if it’s a valid compressed file #51
Full changelog

metallb-frr

OCPBUGS-45545: Updating ose-frr-container image to be consistent with ART for 4.19 #70
Sync OWNERS with MetalLB #75
Align upstream 13/1/25 #72
Full changelog

monitoring-plugin

NO-JIRA: fix virtualization persepective perses extension point #355
OU-618: Various Perses Updates #353
NO-JIRA: use ocp base images for ci #354
NO-JIRA: add incidents header #351
OU-618: Embed Perses Dashboards into Monitoring Plugin #350
OU-643: fix filter dropdpdowns to match patterfly correct use, remove deprecated dropdown components #347
rhineng-16008: add cutoff for alerts timestamps #349
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-45037: Bring in getpodcontext (fix cache miss carry) #258
Full changelog

multus-whereabouts-ipam-cni

NP-1128: Ds merge 2/25/25 #346
NP-1100: Add nodeslicecontroller to dockerfile #341
Full changelog

must-gather

CNF-16640: Changes for FRR-K8s Deployed via CNO #479
no-jira: Remove davemulford from collection-scripts/OWNERS file. #481
Full changelog

networking-console-plugin

CNV-56436: show ipam lifecycle correctly with new spec #218
OCPBUGS-41964: No default path in the route creation form #216
CNV-56236: fix cudn modal form titles #217
OCPBUGS-42135: Update documentation links #214
Full changelog

oauth-proxy

OCPBUGS-48333: Update dependencies to address CVE-2024-24786 #313
Full changelog

oauth-server

OCPBUGS-35294: Add French and Spanish localization for login screen #154
Full changelog

oc-mirror

CLID-203, OCPBUGS-26771: fixes CVE-2024-0406 mholt/archiver: path traversal vulnerability (#1092) #1092
Bump the pip group across 2 directories with 3 updates (#1054) #1054
v2: update golangci-lint config (#1083) #1083
OCPBUGS-50963: v2: don’t clean cluster resources on dry-run mode (#1087) #1087
v2/cli: always stop local registry and close registry.log (#1068) #1068
OCPBUGS-44103: bump oc fork version (#1080) #1080
OCPBUGS-49990: v2/release: error out for kubevirt/graph image errors (#1070) #1070
OCPBUGS-50685: fixes the code to make the spinner trigger after semaphore is released (#1077) #1077
v2: disable spinners when not running in a tty (#1049) #1049
OCPBUGS-50503: oc-mirror fails with error unknown image: reference name is empty (#1072) #1072
OCPBUGS-49991: fixes bundle related images being skipped (#1071) #1071
NO-JIRA: only save graph data if it’s valid json (#1069) #1069
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #282
NO-ISSUE: Synchronize From Upstream Repositories #279
NO-ISSUE: Synchronize From Upstream Repositories #278
NO-ISSUE: Synchronize From Upstream Repositories #277
NO-ISSUE: Synchronize From Upstream Repositories #276
OPRUN-3722: Synchronize From Upstream Repositories #273
NO-ISSUE: Synchronize From Upstream Repositories #271
NO-ISSUE: Synchronize From Upstream Repositories #270
NO-ISSUE: Synchronize From Upstream Repositories #266
Full changelog

openshift-apiserver

OCPBUGS-44432: Skip blocked registry check for registries with mirrors #475
Full changelog

openshift-controller-manager

WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #366
Full changelog

openstack-cinder-csi-driver-operator

STOR-2263: correct smb csi driver test manifest #360
NO-JIRA: Remove inject-proxy annotations for aws-ebs, aws-efs node daemonsets #308
Full changelog

openstack-cluster-api-controllers

Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #359
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #358
OCPCLOUD-2857: Set infrastructureRef.Namespace in Cluster object #357
OSASINFRA-3707: ⚠️ Manual sync from release-0.12 on main ⚠️ #352
OSASINFRA-3722: Deploy manifests for CustomNoUpgrade feature set also #356
Full changelog

openstack-machine-api-provider

NO-JIRA: Update golang.org/x/net to v0.33.0 #128
NO-JIRA: Upgrade Gophercloud to v1.14.1 #129
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #964
NO-ISSUE: Synchronize From Upstream Repositories #963
NO-ISSUE: Synchronize From Upstream Repositories #962
NO-ISSUE: Synchronize From Upstream Repositories #961
NO-ISSUE: Synchronize From Upstream Repositories #952
Full changelog

operator-marketplace

NO-ISSUE: Upgrade controller-runtime from v0.17.2 to 0.20.2 and consequently k8s version from 1.29 to 1.32 #594
Full changelog

ovirt-csi-driver-operator

OCPBUGS-45766: Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART for 4.19 #138
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-48781: [DownstreamMerge] 2-27-25 #2474
OCPBUGS-49393, OCPBUGS-49598: [DownstreamMerge] 13 feb 2025 #2459
Full changelog

prometheus

MON-4104: Update to 3.0 #227
Full changelog

prometheus-alertmanager

MON-4155: Bump openshift/prometheus-alertmanager to v0.28.0 #98
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-JIRA: Bump openshift/prometheus-operator to v0.80.1 #325
Full changelog

tests

NO-JIRA: Support known namespaces for terminationMessagePolicy tests #29534
Revert “OCPNODE-2596: Add SigstoreImageVerification e2e tests” #29572
OCPNODE-2596: Add SigstoreImageVerification e2e tests #29530
NO-ISSUE: Automated - Update synthetic test data #29559
WRKLDS-1653: update pathological ScalingReplicaSet event exception #29569
TRT-1874: rename master->main #29565
OCPBUGS-50587: Rely on unstructured for update status instead of type conversion #29560
OCPQE-28543: Check load balancer healthcheck port and path on aws #29544
NO-JIRA: Allow overriding extension binary to local path #29557
CNTRLPLANE-1: Update to Kubernetes v1.32.2 #29549
OCPBUGS-26601: Re-enable AWS for router HTTP/2 test #29326
TRT-1286: List images from external binaries #29450
OCPBUGS-49600: Display etcd bootstrap event on timeline #29490
NO-ISSUE: Automated - Update synthetic test data #29531
Revert “NO-JIRA: use quay.io/openshift/origin-cli:latest directly” #29543
CNTRLPLANE-1: Bump to latest downstream version of ginkgo #29538
TRT-2006: Revert “NO-JIRA: Add test case for checking EgressFirewall DNS names in caps” #29540
NO-JIRA: Add test case for checking EgressFirewall DNS names in caps #29414
CNTRLPLANE-1: Update to Kubernetes v1.32.1 #29493
MULTIARCH-5318: Add tests for ImageStreamImportMode feature gate #29524
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github