4.19.0-ec.3

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.19.0-ec.3-ppc64le

Team Approvals:

No tests for this release

Upgrades from:

Untested upgrades: 4.18.1, 4.18.2, 4.18.3, 4.19.0-ec.0, 4.19.0-ec.1, 4.19.0-ec.2

Loading changelog, this may take a while ...

Changes from 4.19.0-ec.2

Created: 2025-03-06 21:30:03 +0000 UTC

Image Digest: sha256:190bf0faf20e0f2477778f9d3dfb9e2800d6e586597b0bab06e85ce16530ba98

Components

Kubectl upgraded from 1.31.1 to 1.32.1
Kubernetes upgraded from 1.32.1 to 1.32.2
Kubernetes Tests upgraded from 1.31.1 to 1.32.2
Red Hat Enterprise Linux CoreOS upgraded from 419.96.202502102012-0 to 419.96.202503032242-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
GatewayAPI (0 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
GCPCustomAPIEndpoints (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLMCatalogdAPIV1Metas (0 tests)				Enabled (New)		Enabled (New)
SigstoreImageVerificationPKI (0 tests)			Enabled (New)	Enabled (New)

New images

openstack-resource-controller git d00bab2b sha256:cdc7107e9d7418a23b6d88ca19b9449946ba412464271e31f56436c3b0f55b29

Removed images

ovirt-machine-controllers

Rebuilt images without code change

agent-installer-utils git 3f6d1d8b sha256:bf8c638d7747fe35c9f9c2914f603fbc8fab67400fa8a02454b5dfa4ba96cd4a
apiserver-network-proxy git 0e116160 sha256:425fe7e4d7e49794890dd4e78f1fe39cc242083b502d2dc72a33dcf7661570e9
aws-kms-encryption-provider git 088dcaf7 sha256:6e854af7c6db6e7e2cc8b05dcb98effe395c9ba3c4691a256fd9e3c49c839549
azure-kms-encryption-provider git d4fb1b6d sha256:1e716a92042306594d46c77bcf60fbcfbae7e1f507c45d62005fb66cd2828c4b
azure-service-operator git 11ced00e sha256:efebc0f8ffc464e5929ef0f71c81a3a83d9588f4fa50ebc0cc66a223b73dc84e
baremetal-machine-controllers git 9abe67f1 sha256:69b8284bded755ec30a499c2012babfc2ff72941c8ddfc6a8eee12b133527db7
cluster-bootstrap git 5a201a04 sha256:09ced6ef06b1a57d54c92c943cf50c278bec2df626bd8a5022886a9e864a34e8
cluster-config-operator git 1af8cf3a sha256:a983e39926e1b90cd874474099f9328487bccc71735cd96e86d7c59e80dfcea6
cluster-csi-snapshot-controller-operator git a68ffe82 sha256:b4175b1a37423d7ca617b6608af8c2cd7b9a7f16927a6643eb22336f2afd6c6a
cluster-dns-operator git 0a9deeea sha256:2d4d9d89f20be464949caa398801b8619d2c329534aee0b6e5bee415d625a86a
cluster-etcd-operator git 5bbe4944 sha256:e29eda3107d48aa46e400c862e600f15309e7af6c9e2f169453d4090053b5737
cluster-kube-cluster-api-operator git 3ec30377 sha256:059b4278f253a69cf7205663f2d3b9a86f5a230d458045e7ee663ee926462093
cluster-kube-scheduler-operator git 4210c04a sha256:ac986160deafcb952f07e3aba0819173c36cef82c5e6a428c361fa6dda75918e
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:2fef70e720acb6f64971f2156bcbf0161ca0893e51f09ad24d57b6d15ad83f4a
cluster-openshift-apiserver-operator git 5f66a3e1 sha256:b9664d3813f58577f23720250d4b71f2ca043442482291728580901ff44f004c
cluster-samples-operator git 5c075681 sha256:34a161a289a416a70fde1ca69ddefddf77b6b525fc92e9bbbb5f394d221bcec7
cluster-update-keys git d44fca58 sha256:a6c47b2c6075aba7f373d0b67566c1a05e5cda1da21d0576637e0113a747fb9f
configmap-reloader git 9bfbde86 sha256:1acedb65cbad1b94bb5893596e94b965eced6b77487b0b7eddb114068dfbdfc0
container-networking-plugins git 24a65329 sha256:b0dccc761f680b6b234e4953c5839ed6deef1b31feb99d16bab980873f204892
containernetworking-plugins-microshift git 24a65329 sha256:77196c91e3e1a3ed5fe731f066af3e7d1dd8553b575cc00feb59a38ade0e70e8
coredns git 7a1451db sha256:34b557585100960e6cef9ccb7c362628e1f7b9e5c18ba41e3f3c1de60abbcc4b
csi-driver-manila git 1be63081 sha256:5b4f43383ed554820679ce0c0da9dc440d8680c287608cb889bfb186640af6e0
csi-driver-nfs git c0632514 sha256:fd88ab382869c55fa02f569df1ad20f5a799a6f819a50cdf6f0f2152e031c61d
csi-external-attacher git 4d70cd88 sha256:1515b139b869d800a2e91d9104e8223da44902d2e2c3716891242622d80e0a2d
csi-external-resizer git 82e58855 sha256:83aefc161f2a0a443daee3090a78980b1110f86deeda71a2d47aea3d0b6b3cc5
csi-external-snapshotter git 1fc6ee15 sha256:78627f583190f9f3da14655dc16937ab2a3ce3d0e15a3b8a119b430724f3e261
csi-livenessprobe git e1566463 sha256:392a2dab2833bfea794f5fbd9bd20090b0eb7aeb073cbb1d21512dafb850b07b
csi-node-driver-registrar git 378f5c1b sha256:043643029c883eb24c57318171efaec8694cde1b1f5750bb8bb8a5f32b5e211d
csi-snapshot-controller git 1fc6ee15 sha256:60973bd243c3d5b4b257eadec60642facda56ef09fcd271d918bbe9b83b770b9
csi-snapshot-validation-webhook git 1fc6ee15 sha256:ce0b2c43be988e065086d2f4803fc8356b7ccbf0197f892d949a6ec21ee55e68
driver-toolkit git 81c6fa20 sha256:25423496a5b902695d92b13544da487fb89551dec8b5c96fd5b1dcbbdc0dcc0e
egress-router-cni git 3193a756 sha256:9997f308c22e8e21b0297dc13f7d2928b4e508ff9a4a84d1e611d5f524117b4f
gcp-pd-csi-driver git 8e67ea7a sha256:bf80b4766581d17fc3b1b75d4e060611d6dae767669870756d627167fd8c63b8
gcp-pd-csi-driver-operator git c08894ab sha256:31e645513ba4d9113147cff4adb4864d795f6c0df11a0614db9d4a36d1c5ab71
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:f57467cfd65d891bf9d2d5b838fd897710b06f4e896b4952526e683b277c711b
insights-runtime-exporter git 9a254cce sha256:79f6a26aa6afc52f0a4b74bacd5d2508fc47fdd3d92592a01edabc52da54696b
insights-runtime-extractor git 9a254cce sha256:e0844dfb0580290051d226e2973c3022a4e4ce3daa07ca645667d47f21423de3
keepalived-ipfailover git cec03e07 sha256:dd27f872b11b44606fc5eb1abf5bec607c6c7c453882d3500bcf5e0f2ccfc26f
kube-metrics-server git 037a0e7e sha256:bd4d25b156d09936fdc573306cce511d46d90a94f1692b9c5681bada2f634b65
kube-storage-version-migrator git 4c521b09 sha256:b78375dc76cb5bd212bbfefb9843d45fe3665a5b47b77f480e4321129c9200c5
kubevirt-cloud-controller-manager git 3f4542ec sha256:19f1a0918407fd4e8bd19816b507dc161c9cb5fced29a00fa277064ecdf767db
kubevirt-csi-driver git ba2234bd sha256:7531a571c4785205a0666aa63ab624513fb26af637b94cd222ffb4d4bbfda315
libvirt-machine-controllers git a336f0b5 sha256:ab2b708bb108b5394d181d07147f310ed08875f39fb552b095233dede83c89dd
multus-admission-controller git 0b1b812e sha256:b0517727673188120f253ec1e06ec785e7309b2391e2b26f83f4fc0d60073099
multus-networkpolicy git e0c65b80 sha256:6a728661f91025fe054349f2adf7df928772382987f1db6620f7b5a66aedf7db
multus-route-override-cni git 391c1b03 sha256:c91e2c051da86e3e21039fc7dff1211d884c183743c3c0347acdfcde8ee73421
network-interface-bond-cni git f575d888 sha256:aa9c4ea276a7d9a1908928bde6c8aec1a51d635f76786059b3d5a648669dd531
network-metrics-daemon git 5ec8c6bd sha256:c92af54d0cd0bc010d18a272307903beedb36f0ba0c3509eb44894d580331272
network-tools git 982767d9 sha256:0ee8d1d5f75e031b80d117b3b84b2a7533f37f23ccd059017d46138a3a77c3e1
oauth-apiserver git 75914068 sha256:96724c3b5b9a122d66f84686b0a3bab737e071ee97e5f3a052855a857e3106a5
openshift-state-metrics git 3106bcc3 sha256:de0887a7e21f483f33dd8eef2908293f43bc67c220a4182d4b5d9cc33b19c352
openstack-cinder-csi-driver git 1be63081 sha256:c9cff79456a0fdeab7d8cd69af9fc3aa86f907803345a554f7d6a0c9ed7e57fb
openstack-cloud-controller-manager git 1be63081 sha256:9e1a7014cadcca02d2d71d0a7defacb8f40d629d10a00a455a8800fa849999fc
ovirt-csi-driver git 1db726a9 sha256:0e155fba307f2bde1cdf97aa758fdf5c2b1a5edbad0593869cba67e92a6050d4
powervs-block-csi-driver git e2f15cba sha256:3c5a304ed3b2a90546937bb507f28fc8ef44ca591ec82db07237247dd3d05c0f
powervs-block-csi-driver-operator git 1dab186d sha256:b59a15ecc308ca7fdaba1c2f43e744b72f4e741ed78cc50ea8fed80c1bc1761d
powervs-cloud-controller-manager git 7c51cd2b sha256:ebe9db62a389a425c2793bd70e9faca0d5363f51c04dc1d8048ee36e0a7f2c23
prom-label-proxy git 7184f58d sha256:0af9eaef8c824fb9bf09fe9c2df1fa8e70bd7c625265ce102c383711f75b9bcb
prometheus-node-exporter git 57a4e998 sha256:d54af9a0857fecf118a1e7525c92c6a90331d1887c7ea0472f3ce2f7670ccc19
rhel-coreos sha256:577a2bb6ee71c8acff1e8913c61adf355143904e015bece5e2a4267e0cd5dcd4
rhel-coreos-extensions sha256:b349fc6bb90a11d7618eef5447ea7b168d0fae16839d97f45150d0d5f5b8559e
route-controller-manager git bc97534a sha256:2cccb2baf31f6a8d5c77ecb88e873f66bbef08232300dca3c1713bbe52941a80
service-ca-operator git 1e656784 sha256:6fc0084a61256db63d20e24fe0ff5d9cdb4d13d445dbde1833e398b38d3bfc10
telemeter git f63fef91 sha256:6867728e153afc8a2cf1a49e896e2140a6fa869e28e51801213bb9b291f95859
thanos git 73a8770d sha256:e9a601162df6f14853b502c45db4f3188745cbb31892df07e5a6c4949dc424e6

agent-installer-api-server

MGMT-20005: Prepare OCP 4.18 / 4.19 images for OCP 4.18 GA (#7364) #7364
MGMT-20080: Add unitests to check mirroring priority (#7365) #7365
NO-ISSUE: [master] Bump OCP versions: 4.15, 4.17, 4.16 (#7361) #7361
NO-ISSUE: Update Konflux references (#7359) #7359
MGMT-19622: Proxy setting with special characters are ignored when minimal ISO is used (#7315) #7315
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.18 (#7354) #7354
MGMT-20060: Add OpenShift AI AMD operator bundle (#7222) #7222
NO-ISSUE: change default 4.19 image according to the new path (#7351) #7351
MGMT-19887: Add Histogram Metric for Host Monitoring Time (#7307) #7307
NO-ISSUE: Update Konflux references (#7337) #7337
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14 (#7336) #7336
NO-ISSUE: [master] Bump OCP versions: 4.17 (#7331) #7331
NO-ISSUE: [master] Bump OCP versions: 4.18, 4.19 (#7326) #7326
MGMT-19583: Remove references to kube-rbac-proxy that was deprecated (#7308) #7308
Add dev doc for disk image install (#7310) #7310
MGMT-19946: Update operator bundle channel to ocm-2.14 (#7316) #7316
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#7318) #7318
NO-ISSUE: [master] Bump OCP versions: 4.13 (#7314) #7314
NO-ISSUE: Update Konflux references (#7313) #7313
MGMT-19844: Validate that no_proxy does not contain duplicate entries (#7305) #7305
NO-ISSUE: [master] Bump OCP versions: 4.12, 4.18, 4.17, 4.15, 4.16 (#7306) #7306
Remove discovery stateroot when installing to existing root (#7283) #7283
Don’t remove spoke resources when cluster is being deleted (#7303) #7303
NO-ISSUE: [master] Bump OCP versions: 4.16 (#7298) #7298
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update Konflux references (#1048) #1048
NO-ISSUE: Update Konflux references (#1042) #1042
MGMT-19421: phase 1 of replacing the refference HighAvailabilityMode with ControlPlaneCount (#1027) #1027
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#1034) #1034
NO-ISSUE: Update Konflux references (#1031) #1031
Full changelog

agent-installer-node-agent

NO-ISSUE: Update Konflux references (#924) #924
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#912) (#911) #912
NO-ISSUE: Update Konflux references (#921) #921
MGMT-19927: Modify MTU Check to Only MTUs != 1500 (#910) #910
MGMT-19588: Also use bond interface for hostname workaround (#920) #920
MGMT-19819: Add the commit reference from which the image is built to the image (#914) #914
MGMT-19950: Modify Konflux YAMLs to ocm-2.14 (#912) #912
Full changelog

aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-machine-controllers, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kube-proxy, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

OCPBUGS-45214: Add groupsnapshot tests #2155
OCPNODE-2940: add minimumkubeletversion admission package #2201
TRT-1854: Update openshift-tests-extension version #2214
OCPBUGS-45359: Unskip recover volume expansion failure tests #2218
OCPBUGS-45241: UPSTREAM: <carry>: Re-enable temporarily disabled port-forward test #2213
OAPE-96: UPSTREAM: <drop>: bump openshift/api@107848b719c5 #2217
OCPNODE-2940: add minimumkubeletversion package #2104
CNTRLPLANE-1: Bump 1.32.2 #2209
NO-JIRA: UPSTREAM: fix request Host storing in openshift.io/during-graceful audit log annotation #2119
OCPBUGS-41533: UPSTREAM: <carry>: util: inform the kubelet it has a new enough kernel for idmapped mounts #2168
TRT-1286: List images from external test binary #2177
OCPBUGS-46477: Disable ServiceAccountNodeAudienceRestriction feature gate and reenable Azure file tests #2202
Full changelog

baremetal-cluster-api-controllers

downstream: regenerate manifests #37
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

OCPBUGS-50534: Fix error messages in available IP code #9503
OCPBUGS-51204: bootstrap/node-image-pull.sh: handle PXE boots as well #9516
OCPEDGE-1310: feat: add arbiter node support to installer #9159
CORS-3919: Add GCP service endpoints to the infrastructure manifest #9518
OCPBUGS-51084: PowerVS: Specify chrony config for Disconnected deploy #9500
no-jira: Bump cluster-api to v1.9.4 #9411
OCPBUGS-49351: Add vSphere logic to check for max network count #9419
CORS-3843: Add Tech Preview Feature gate to Installer for GCP Custom API Endpoints #9501
OCPBUGS-50919: Fixes panic during GCP tags fetch due to unstable network #9495
OCPBUGS-49940: PowerVS: datacenter supported systems #9442
OCPBUGS-49953: PowerVS: support destroy tag 1 #9403
OCPBUGS-50574: Check for vmgroup when create capv machine fd name #9453
CNTRLPLANE-194: add auth-api-bootstrap stage to bootkube.sh template #9424
CORS-3867, CORS-3868: deprecate platform.subnets and introduce platform.vpc.subnets field in install-config #9443
OCPBUGS-50899: PowerVS: COS eu-es hack #9490
OCPBUGS-50920: Rely on path declaration of base image #9491
OCPBUGS-45429: Set the right resource group in bootstrap destroy #9487
CORS-3835: Add gcp endpoints to the installer config #9363
OCPBUGS-46488: Validate Encryption Keys for GCP #9328
OCPBUGS-44507: Check public zone for stray record set #9365
OCPBUGS-50839: correct typo #9480
OCPBUGS-50657: PowerVS: destroy dhcp hack #9458
OCPBUGS-50534: Fix panic when there are no available IPs #9444
OCPBUGS-50649: vsphere - check if host is powered down or on standby before uploading template #9456
no-jira: Switch to go.uber.org/mock/gomock #9422
OCPBUGS-49319: IBMCloud: Drop CAPI metrics-bind-addr #9401
Full changelog

baremetal-operator

OCPBUGS-51294: Merge upstream #398
Full changelog

baremetal-runtimecfg

Revert “OPNET-629: Use HAProxy monitor endpoint instead of API” #342
OPNET-629: Use HAProxy monitor endpoint instead of API #336
OCPBUGS-48194: Bump logrus version #338
Full changelog

cli, cli-artifacts, deployer, tools

NO-JIRA: Bump x/oauth2 and x/crypto #1984
OCPBUGS-51254: Bump indirect dependency go-jose to 4.0.5 version #1983
NO-ISSUE: pkg/cli/admin/upgrade/recommend: Configureable version for test fixtures #1981
NO-ISSUE: Test case for lowercase Jira ticket names #1964
NO-ISSUE: pkg/cli/admin/upgrade/recommend: “Upstream” -> “Upstream update service” #1980
trt-1995: Update Unconditional Feature Gate Notation #1979
OCPBUGS-50682: OCPBUGS-50683: Correct oc adm top pvc messages #1974
WRKLDS-1653: Update k8s dependencies to 1.32 #1971
OTA-1426: pkg/cli/admin/upgrade: Check and display interesting alerts #1970
NO-JIRA: Sanitize tar header name as it is used in path #1969
Full changelog

cloud-credential-operator

CCO-629: Update modules to latest #817
Full changelog

cloud-network-config-controller

OCPBUGS-45631: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.19 #160
Full changelog

cluster-authentication-operator

NO-JIRA: Keycloak e2e test improvements #714
OCPBUGS-51981: fix: update starter path to account for mom integration #760
CNTRLPLANE-71: update cao to manage rolebindingrestriction crd #748
AUTH-541: OIDC structured auth config #713
CONSOLE-4434, OCPBUGS-43610: update login templates to use PF6 and add validation #751
NO-JIRA: OWNERS: update approvers #756
Full changelog

cluster-autoscaler

OCPCLOUD-2500: Update to recognize both upstream and openshift ScaleFromZero annotations #335
Full changelog

cluster-autoscaler-operator

OCPCLOUD-2829: Bump k8s 1.32 #339
Full changelog

cluster-baremetal-operator

OCPBUGS-51275: add missing relatedObjects #461
METAL-1286: Remove legacy unused annotation exclude.release.openshift.io/internal-openshift-hosted #462
OCPEDGE-1607: feat: add arbiter node selector #460
Full changelog

cluster-capi-controllers

NO-JIRA: Update manifests generator tooling #232
OCPCLOUD-2680: Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.5 (068c0f3) into master #231
OCPCLOUD-2857: Merge https://github.com/kubernetes-sigs/cluster-api:v1.9.4 (79e6731) into master #230
Full changelog

cluster-capi-operator

OCPCLOUD-2645: MAPI to CAPI Machine synchronization #258
NO-JIRA: Add lifecyclehook script that updates manifests-gen #264
NO-JIRA: Remove unused Dockerfile #255
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-41827: update injector to support secret as well #385
OCPBUGS-48481: annotation validation policy #379
OCPCLOUD-2843: AWS CCM should be configured with the AWS cloud provider config #384
Full changelog

cluster-config-api

security: add annotation for validated SCC type #2211
NO-JIRA: Add example of excluding subnets pattern #2213
OCPNODE-2339: Add PKI field to (cluster)imagepolicy #2088
OCPBUGS-50587, OCPBUGS-51272: Reject new NodeStatus with revision set #2208
Fix FeatureGateNewOLMCatalogdAPIV1Metas spelling error #2214
OCPBUGS-32158: Add CEL validation for RegistrySources in Image API #1859
no-jira: correct default CIDR for ipv6 join subnet in API descriptors #2184
featuregate for catalogd metas web api #2202
CORS-3842: Add API Updates for GCP Custom API Endpoints #2150
NO-JIRA: bump controller-tools dependency to latest downstream commit #2207
SPLAT-2000: Add configuration for vSphere multi disk thinProvisioned #2154
NE-1871: Promote GatewayAPI to Tech Preview #2081
OCPBUGS-44199: Allow spaces in AWS tags #2124
OCPBUGS-48542: Remove Never option from IPsec Encapsulation #2199
OCPBUGS-42701: api: Updated the disableMultiNetwork parameter description #2143
Full changelog

cluster-control-plane-machine-set-operator

OAPE-126: Include CPMSMachineNamePrefix feature-gate name in e2e tests #351
OCPBUGS-50580: Fix MachineNamePrefix periodic on OpenStack #349
OCPCLOUD-2834: Update dependencies to K8s 1.32 #345
Full changelog

cluster-image-registry-operator

CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-image-registry #1174
NO-JIRA: update owners #1178
OCPBUGS-50950: ensure that storage names don’t end in dashes #1177
Full changelog

cluster-ingress-operator

OCPBUGS-31550: Gateway API - recreating SMCP which breaks Gateway API #1115
Full changelog

cluster-kube-apiserver-operator

NO-JIRA: readme: describe mapping between operatorLogLevel and log level #1820
AUTH-541: OIDC structured auth config #1760
OCPNODE-2940: add support for minimumKubeletVersion #1754
MON-4129: slos: accomodate for Prometheus v3 “le” normalization #1815
MON-4129: revert https://github.com/openshift/cluster-kube-apiserver-operator/pull/1784 #1817
NO-ISSUE: Bump TraceAll log level to v=10 #1814
OCPBUGS-48673: targetconfigcontroller: check live etcd endpoints #1792
API-1689: TLS registry: add description #1763
OCPBUGS-49980: change one sum:apiserver_request:burnrate5m to sum:apiserver_request:burnrate6h #1804
OCPBUGS-49763: Disregard health endpoints in the burn rate alerts #1742
Full changelog

cluster-kube-controller-manager-operator

NO-JIRA: readme: describe mapping between operatorLogLevel and log level #835
NO-JIRA: readme: describe mapping between logLevel and log level #833
NO-ISSUE: Bump TraceAll log level to v=10 #828
Full changelog

cluster-machine-approver

OCPCLOUD-2832: Bump k8s 1.32 #268
Full changelog

cluster-monitoring-operator

NO-JIRA: Bump prometheus-operator to 0.80.1 #2572
MON-4147: test: remove unnecessary UWM configuration in TestUserWorkloadMonitoringXXX #2567
OCPBUGS-50837: Fix opentelemetry metrics to use regexp on label match #2568
OCPBUGS-50703: Add incidents metric to telemetry #2569
Full changelog

cluster-network-operator

SDN-4829: Add machine config watchers to report IPsec status #2383
NP-1100: Enable fast ranges #2648
NO-JIRA: Add “centos” to supported OS ids #2652
Full changelog

cluster-node-tuning-operator

CNF-16742: kernelPageSize + hugepages combinations validation (#1296) #1296
machineconfig: add support for various hugepage sizes. (#1295) #1295
E2E: Add test to verify runc uses valid cpus (#1088) #1088
OCPBUGS-49823: Support hugepage size selection for ARM-based clusters (#1294) #1294
OCPBUGS-49403: E2E: Add configuration tests related to align cpus by uncorecache feature (#1291) #1291
Full changelog

cluster-olm-operator

OPRUN-3690: Watch for new upstream feature gate APIV1MetasHandler #104
NO-ISSUE: Update to k8s v0.32.2/v1.32.2 #108
OCPBUGS-51357: Revert “(vendor) Bump openshift/api” #106
NO-ISSUE: Bump kubernetes and openshift/api dependencies #105
OPRUN-3663: Watch and reconcile feature gates changes #102
Full changelog

cluster-openshift-controller-manager-operator

WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #381
Full changelog

cluster-policy-controller

WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #160
Full changelog

cluster-storage-operator

OCPBUGS-50668: fix Vsphere cluster Storage operator in Unavailable state #556
Full changelog

cluster-version-operator

OTA-1427: Recompute node insights when MC/MCP changes #1144
OTA-209: Add ClusterVersionOperator manifests #1161
OTA-1418: Decribe informer->usc communication #1162
NO-JIRA: Rename fields in ClusterCapabilities for readability #1157
OTA-1427: Polish reason and message in Node’s status insight #1145
NO-JIRA: Refactor for readability #1131
OCPBUGS-50498: cvo: improve error handling on port collision #1160
NO-JIRA: Update ClusterOperator Status Conditions to listType=map #1149
OTA-861: Generate an accepted risk for Y-then-Z upgrade #1093
NO-JIRA: Fix a few AMD64-oriented tests on Non-AMD64 machines #1156
OTA-1418: USC: Drop unknown insights after grace period #1150
NO-JIRA: status: extract API types to a package #1155
Full changelog

console

CONSOLE-4484: follow on fix to ensure Bottom ConsoleNotification are … #14806
NO-JIRA: Apply plugin-api-changed label on changes to the api package #14804
OCPBUGS-52180: Fix notification drawer close button error #14809
ODC-7724: Add guided tour in Admin perspective #14776
ODC-7769: Add Getting started section in project Overview page #14792
OCPBUGS-30973: Update @types/react-redux #14680
ODC-7725: Show perspective preferences option if more than one perspective are available #14644
OCPBUGS-51202: Fix Timestamp component #14793
OCPBUGS-46050: Determine if disabled a11y rules can be re-enabled #14643
CONSOLE-4484: Replace custom tabs with PF6 Tabs component #14760
OCPBUGS-48642: Check for unused modules in static plugins #14695
CONSOLE-4486: decrease TertiaryHeading margins in Edit resource limit… #14782
OCPBUGS-50546: Do not load CSRs if user does not have permissions #14771
OCPBUGS-36786: Force async package upgrade. #14775
OCPBUGS-50670: fix bold text issues and missing underline on inline link buttons on safari and firefox. #14766
NO-JIRA: Small demo plugin and plugin doc improvements #14779
CONSOLE-4489: fix bug where dropdown menu can overflow #14780
OCPBUGS-49996: add missing contextId to be able to inject tabs from plugins #14732
OCPBUGS-49778: Linkify OLM operator uninstall message #14713
OCPBUGS-50693: Show Observe section without PROMETHEUS and MONITORING flags #14697
CONSOLE-4467: replace html heading elements with PatternFly components #14767
OCPBUGS-50847: fix but where textarea can be expanded horizontally #14773
CONSOLE-4476: Remove various upstream workarounds #14756
OCPBUGS-45141: Store Topology sidebar alert in the localStorage #14700
NO-JIRA: Update Console dynamic plugin SDK doc and changelogs #14768
ODC-7735: Edit ci tests to have step to enable developer perspective #14684
OCPBUGS-50665: fix bug where Demo Plugin tab url is always appended #14764
CONSOLE-4079, CONSOLE-4080: Address tech debt in GenericSecretForm and KeyValueEntryForm components #14520
OCPBUGS-49381: Workloads-DeploymentConfigs-Add storage: i18n misses #14747
CONSOLE-4480: fix background color of Command Line Terminal tab #14759
OCPBUGS-48548: The secret created with Basic authentication has an incorrect type #14691
CONSOLE-4464: bump PatternFly 6 to latest available versions #14750
CONSOLE-4443: Upgrade dynamic-demo-plugin to PatternFly 6 #14682
OCPBUGS-48637: add support for “OpenShift Virtualization Engine” valid subscription filter on OperatorHub #14709
OCPBUGS-46088: [Hypershift] Filter by Node type list is empty #14704
CONSOLE-4477: more token updates #14752
OCPBUGS-49839: fix run time error when no completed version exists #14742
CONSOLE-4475: fix QueryBrowser tooltip styles #14751
CONSOLE-4469: improve layout and functionality of Edit upstream confi… #14734
OCPBUGS-43061: update the Deployment pod on change in imageStream #14523
CONSOLE-4474: Unbold pf-v6 labels by default #14748
CONSOLE-4465: add workaround for menu scroll #14745
CONSOLE-4473: fix alignment issues with Bootstrap radio and checkbox … #14739
CONSOLE-4472: fix QuickStart layout issues #14738
CONSOLE-4471: fix bug where close button can overlap guided tour popo… #14737
CONSOLE-4470: fix bug where Edit button is bold inside DetailsItem dt #14736
CONSOLE-4467: replace html heading elements with PatternFly components #14726
Full changelog

console-operator

OCPBUGS-51379: Re-revert Report email_domain to telemetry + fix panic for uninitialized mail value. #964
OCPBUGS-45514: Report email_domain to telemetry + fix panic for uninitialized mail value. #962
OCPBUGS-51156: Revert #950 “OCPBUGS-45514: Report email_domain to telemetry” #961
OCPBUGS-45514: Report email_domain to telemetry #950
OCPBUGS-48536: Bump documentationBaseURL to 4.19 #956
OCPBUGS-48740: Vendor the missing CSP directives #960
Full changelog

csi-driver-manila-operator, openstack-cinder-csi-driver-operator

STOR-2263: correct smb csi driver test manifest #360
NO-JIRA: Remove inject-proxy annotations for aws-ebs, aws-efs node daemonsets #308
Full changelog

csi-external-provisioner

OCPBUGS-46727: CVE-2024-45338: bump golang.org/x/net to v0.34.0 #109
Full changelog

docker-builder

OCPBUGS-48741: Buildah dependency bump to v1.39.0 #455
Full changelog

docker-registry

NO-JIRA: chore: update owners file #424
Full changelog

etcd

DOWNSTREAM: <carry>: OCPBUGS-51838: fix a compaction induce latency issue #309
ETCD-709: Rebase etcd 3.5.18 openshift 4.19 #308
Full changelog

gcp-cloud-controller-manager

OCPCLOUD-2845: Merge https://github.com/kubernetes/cloud-provider-gcp:master (1316392) into master #74
OCPCLOUD-2845: Merge https://github.com/kubernetes/cloud-provider-gcp:master (54cd0bb) into master #69
Full changelog

gcp-cluster-api-controllers

NO-JIRA: Update manifests generator tooling #238
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.8.1 (737b737) into master #237
Full changelog

gcp-machine-controllers

OCPBUGS-46387: add a3 instance types to gpu quota validation logic #102
OCPBUGS-17079, OCPBUGS-44671: Disable shielded VMs for non-UEFI disks #108
Full changelog

haproxy-router

OCPBUGS-45759: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.19 #644
OCPBUGS-45702: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.19 #643
OCPBUGS-39403: Fix parseIPList to Continue Processing After Invalid IPs and Return Valid IPs #621
Full changelog

hypershift

NO-JIRA: chore(deps): update konflux references #5527 #5747
NO-JIRA: chore(deps): update dependency mkdocs-material to v9.6.6 #5424
OCPBUGS-51364: Remove scaledown APIs from Backup/Restore procedure #5745
CNTRLPLANE-244: Enable initial GitHub Action jobs #5706
OCPBUGS-49825: use registryOverrides when automaitcally retrieving catalog images for hosted control plane #5551
OSASINFRA-3733: deploy ORC on release payload >= 4.19 #5710
CNTRLPLANE-112: Enable MIv3 for azure disk csi driver #5703
HOSTEDCP-2262: Karpenter openshift ec2class #5600
NO-JIRA: chore(owners): Update IBM reviewers #5717
CNTRLPLANE-111: Enable MIv3 for Azure KMS #5704
NO-JIRA: doc: openstack: update go version #5716
CNTRLPLANE-112: Enable image registry to use managed identity v3 #5655
HOSTEDCP-2246: [CPOv2 Refactor] Refactor OLM #5663
HOSTEDCP-2247: [CPOv2 Refactor] Refactor control-plane-pki-operator #5694
OCPBUGS-51007: test/e2e: fix WaitForImageRollout to actually wait on upgrade case #5679
NO-JIRA: Bump github.com/go-jose/go-jose/v4 from 4.0.1 to 4.0.5 #5700
OCPBUGS-50907: Propagate Reason for Available condition from HCP to HC #5650
NO-JIRA: Reenable ibm network cel #5698
NO-JIRA: ho: watch AWSEndpointServices #5674
NO-JIRA: test/e2e: use test name for HC name #5665
OSASINFRA-3719: openstack: ORC deployed out of tree #5584
CNTRLPLANE-35: skip EnsureValidatingAdmissionPoliciesExists/EnsureVal… #5672
NO-JIRA: Update-precommit-docs #5678
HOSTEDCP-2248: [CPOv2 Refactor] Refactor snapshotcontroller #5632
OCPBUGS-50860: Skip hashing configuration.image.imageStreamImportMode #5651
NO-JIRA: Add omitempty to CredentialsSecretName #5656
OCPBUGS-51039: return marshalled dataplane even if assignprincipals is false #5610
HOSTEDCP-2241: [CPOv2 Refactor] Refactor ingress operator #5602
CNTRLPLANE-220: Update “Create an Azure Hosted Cluster on AKS” docs #5652
CNTRLPLANE-238: Bump k8s to v1.32.2 and CAPZ to v1.18.0 #5623
NO-JIRA: Fix hc hcp cel inconsistency #5661
NO-JIRA: add secretproviderclass to dump #5654
OCPBUGS-50606: Fix kubeadmin login failure #5631
NO-JIRA: bump Cluster API Provider OpenStack to v0.12 (for 4.19 only) #5622
NO-JIRA: update hypershift azure roles to use ids #5657
CNTRLPLANE-112: Add UserAssignedIdentityCredentials environment variable for OpenShift operators #5621
NO-JIRA: CPOv2 refactor self service sa kubeconfig #5607
CNTRLPLANE-111: Move CPO to use UserAssignedIdentityCredentials #5596
HOSTEDCP-2244: Refactor machine approver into cpov2 #5594
OCPBUGS-50578: add region to AWS creds passed to operators managed by CPO #5595
OCPBUGS-50014: Restart HCP on stale serving certs #5601
NO-JIRA: Remove ARO HCP Managed Identity Tech Preview #5604
HOSTEDCP-2171: add e2e test for aro scheduler #5568
NO-JIRA: Bump Golang to 1.23 #5466
NO-JIRA: Ensure ‘pull-secret’ is set properly on v2 serviceAccounts #5609
NO-JIRA: Bump to CAPI v1.9, CAPA v2.7 #5611
HOSTEDCP-2255: e2e: ensure custom tolerations on all HCP pods #5543
HOSTEDCP-2243: Refactor dns operator into cpov2 #5593
PODAUTO-318: Implement HCP karpenter deletion #5540
NO-ISSUE: docs/content/how-to/disaster-recovery/etcd-recovery: Explicitly delegate to admin #5515
NO-JIRA: Bump the golang-dependencies group with 2 updates #5582
Full changelog

ibmcloud-cluster-api-controllers

OCPCLOUD-2852: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.10.0 (0c35eac) into main #107
NO-JIRA: Update manifests generator tooling #106
OCPBUGS-50674: Fix for CVE-2024-45338 in golang.org/x/net/html in main #99
Full changelog

insights-operator

Fix bad IPv6 address (#1073) #1073
OCPBUGS-35196: update the duration validation pattern according to the OpenShift API (#1072) #1072
CCXDEV-12875: Enable Insight Operator entitlements for multi arch clusters (#1066) #1066
Full changelog

kube-rbac-proxy

CNTRLPLANE-248: Merge upstream v0.19.0 release #116
OCPBUGS-45765: Updating kube-rbac-proxy-container image to be consistent with ART for 4.19 #115
Full changelog

kube-state-metrics

OCPBUGS-52192: [bot] Bump openshift/kube-state-metrics to v2.15.0 #119
Full changelog

machine-api-operator

OCPCLOUD-2780: Validate aws marketType webhook #1329
OCPBUGS-44671, OCPBUGS-51373: Updates GCP credentials request #1335
SPLAT-2000: Added vSphere provisioning mode to data disks #1328
OCPBUGS-49413: add image/read permissions #1330
OCPBUGS-51042: Drop oVirt support #1331
OCPBUGS-49351: Added vSphere check for max networks #1327
Full changelog

machine-config-operator

OPNET-629: Mark haproxy unhealthy if no healthy backends #4767
OCPBUGS-44602: Set ownerReference for OCL build objects #4861
OCPBUGS-41489: configure-ovs workaround for ovs-if-br-ex bug #4877
OCPBUGS-48810: Ensure that build jobs are always reconciled #4811
No-Issue: Remove OCL Extensions test #4868
OCPEDGE-1493: Add 2no-ha extension support required by Two Node OpenShift #4843
OCPBUGS-50849: add RHEL variant to IsEL() check #4856
NO-ISSUE: increase WaitForPoolComplete() timeout #4873
OCPBUGS-51009: OSUpdateStarted event should only be emitted on actual OS updates #4864
OCPBUGS-47743: Update cluster-reader ClusterRole permissions #4823
OCPBUGS-45459: Remove trailing period from Openstack provided hostnames #4778
OCPBUGS-47629: /etc/crio/crio.conf.d/00-default should contain runtime_root for runc #4850
OCPBUGS-49394: Fix SELinux failures running afterburn-hostname #4863
OCPBUGS-50599: Enforce VIPs to be collocated at the same host #4844
OCPBUGS-49347: Degraded machine-config CO due to ManagedBootImages update when upgrading an OCL cluster #4810
OCPBUGS-33894: Avoid dumping Go struct in potentially user-facing reason annotation #4814
OCPBUGS-44618: In OCL, MCPs are reporting Updating=false while the image is being built #4710
OCPBUGS-49959: Panic in the MCC when using OCL v1 GA #4834
NO-ISSUE: Add isabella-janssen to OWNERS as approver & reviewer #4846
OCPBUGS-31778: Update format verbs for alert logs #4839
Full changelog

machine-os-images

OCPBUGS-50910: Decompress pxe file only if it’s a valid compressed file #51
Full changelog

metallb-frr

OCPBUGS-45545: Updating ose-frr-container image to be consistent with ART for 4.19 #70
Sync OWNERS with MetalLB #75
Align upstream 13/1/25 #72
Full changelog

monitoring-plugin

NO-JIRA: fix virtualization persepective perses extension point #355
OU-618: Various Perses Updates #353
NO-JIRA: use ocp base images for ci #354
NO-JIRA: add incidents header #351
OU-618: Embed Perses Dashboards into Monitoring Plugin #350
OU-643: fix filter dropdpdowns to match patterfly correct use, remove deprecated dropdown components #347
rhineng-16008: add cutoff for alerts timestamps #349
Full changelog

multus-cni, multus-cni-microshift

OCPBUGS-45037: Bring in getpodcontext (fix cache miss carry) #258
Full changelog

multus-whereabouts-ipam-cni

NP-1128: Ds merge 2/25/25 #346
NP-1100: Add nodeslicecontroller to dockerfile #341
Full changelog

must-gather

CNF-16640: Changes for FRR-K8s Deployed via CNO #479
no-jira: Remove davemulford from collection-scripts/OWNERS file. #481
Full changelog

networking-console-plugin

CNV-56436: show ipam lifecycle correctly with new spec #218
OCPBUGS-41964: No default path in the route creation form #216
CNV-56236: fix cudn modal form titles #217
OCPBUGS-42135: Update documentation links #214
Full changelog

oauth-proxy

OCPBUGS-48333: Update dependencies to address CVE-2024-24786 #313
Full changelog

oauth-server

OCPBUGS-35294: Add French and Spanish localization for login screen #154
Full changelog

oc-mirror

CLID-203, OCPBUGS-26771: fixes CVE-2024-0406 mholt/archiver: path traversal vulnerability (#1092) #1092
Bump the pip group across 2 directories with 3 updates (#1054) #1054
v2: update golangci-lint config (#1083) #1083
OCPBUGS-50963: v2: don’t clean cluster resources on dry-run mode (#1087) #1087
v2/cli: always stop local registry and close registry.log (#1068) #1068
OCPBUGS-44103: bump oc fork version (#1080) #1080
OCPBUGS-49990: v2/release: error out for kubevirt/graph image errors (#1070) #1070
OCPBUGS-50685: fixes the code to make the spinner trigger after semaphore is released (#1077) #1077
v2: disable spinners when not running in a tty (#1049) #1049
OCPBUGS-50503: oc-mirror fails with error unknown image: reference name is empty (#1072) #1072
OCPBUGS-49991: fixes bundle related images being skipped (#1071) #1071
NO-JIRA: only save graph data if it’s valid json (#1069) #1069
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #282
NO-ISSUE: Synchronize From Upstream Repositories #279
NO-ISSUE: Synchronize From Upstream Repositories #278
NO-ISSUE: Synchronize From Upstream Repositories #277
NO-ISSUE: Synchronize From Upstream Repositories #276
OPRUN-3722: Synchronize From Upstream Repositories #273
NO-ISSUE: Synchronize From Upstream Repositories #271
NO-ISSUE: Synchronize From Upstream Repositories #270
NO-ISSUE: Synchronize From Upstream Repositories #266
Full changelog

openshift-apiserver

OCPBUGS-44432: Skip blocked registry check for registries with mirrors #475
Full changelog

openshift-controller-manager

WRKLDS-1653: bump(k8s): update k8s.io/* dependencies to v1.32.2 #366
Full changelog

openstack-cluster-api-controllers

Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #359
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #358
OCPCLOUD-2857: Set infrastructureRef.Namespace in Cluster object #357
OSASINFRA-3707: ⚠️ Manual sync from release-0.12 on main ⚠️ #352
OSASINFRA-3722: Deploy manifests for CustomNoUpgrade feature set also #356
Full changelog

openstack-machine-api-provider

NO-JIRA: Update golang.org/x/net to v0.33.0 #128
NO-JIRA: Upgrade Gophercloud to v1.14.1 #129
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #964
NO-ISSUE: Synchronize From Upstream Repositories #963
NO-ISSUE: Synchronize From Upstream Repositories #962
NO-ISSUE: Synchronize From Upstream Repositories #961
NO-ISSUE: Synchronize From Upstream Repositories #952
Full changelog

operator-marketplace

NO-ISSUE: Upgrade controller-runtime from v0.17.2 to 0.20.2 and consequently k8s version from 1.29 to 1.32 #594
Full changelog

ovirt-csi-driver-operator

OCPBUGS-45766: Updating ose-cluster-ovirt-csi-operator-container image to be consistent with ART for 4.19 #138
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-48781: [DownstreamMerge] 2-27-25 #2474
OCPBUGS-49393, OCPBUGS-49598: [DownstreamMerge] 13 feb 2025 #2459
Full changelog

powervs-machine-controllers

OCPBUGS-51276: Fix for CVE-2024-45338 in golang.org/x/net/html in main #100
Full changelog

prometheus

MON-4104: Update to 3.0 #227
Full changelog

prometheus-alertmanager

MON-4155: Bump openshift/prometheus-alertmanager to v0.28.0 #98
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-JIRA: Bump openshift/prometheus-operator to v0.80.1 #325
Full changelog

tests

NO-JIRA: Support known namespaces for terminationMessagePolicy tests #29534
Revert “OCPNODE-2596: Add SigstoreImageVerification e2e tests” #29572
OCPNODE-2596: Add SigstoreImageVerification e2e tests #29530
NO-ISSUE: Automated - Update synthetic test data #29559
WRKLDS-1653: update pathological ScalingReplicaSet event exception #29569
TRT-1874: rename master->main #29565
OCPBUGS-50587: Rely on unstructured for update status instead of type conversion #29560
OCPQE-28543: Check load balancer healthcheck port and path on aws #29544
NO-JIRA: Allow overriding extension binary to local path #29557
CNTRLPLANE-1: Update to Kubernetes v1.32.2 #29549
OCPBUGS-26601: Re-enable AWS for router HTTP/2 test #29326
TRT-1286: List images from external binaries #29450
OCPBUGS-49600: Display etcd bootstrap event on timeline #29490
NO-ISSUE: Automated - Update synthetic test data #29531
Revert “NO-JIRA: use quay.io/openshift/origin-cli:latest directly” #29543
CNTRLPLANE-1: Bump to latest downstream version of ginkgo #29538
TRT-2006: Revert “NO-JIRA: Add test case for checking EgressFirewall DNS names in caps” #29540
NO-JIRA: Add test case for checking EgressFirewall DNS names in caps #29414
CNTRLPLANE-1: Update to Kubernetes v1.32.1 #29493
MULTIARCH-5318: Add tests for ImageStreamImportMode feature gate #29524
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github