diff --git a/Makefile.version.aarch64.var b/Makefile.version.aarch64.var index bdd3c8523f..790507cc51 100644 --- a/Makefile.version.aarch64.var +++ b/Makefile.version.aarch64.var @@ -1 +1 @@ -OCP_VERSION := 5.0.0-0.nightly-arm64-2026-05-03-233705 +OCP_VERSION := 5.0.0-0.nightly-arm64-2026-05-04-233705 diff --git a/Makefile.version.x86_64.var b/Makefile.version.x86_64.var index b987030719..de8031a4a5 100644 --- a/Makefile.version.x86_64.var +++ b/Makefile.version.x86_64.var @@ -1 +1 @@ -OCP_VERSION := 5.0.0-0.nightly-2026-05-03-194554 +OCP_VERSION := 5.0.0-0.nightly-2026-05-04-160406 diff --git a/assets/components/multus/release-multus-aarch64.json b/assets/components/multus/release-multus-aarch64.json index f037cae4a8..95e80b481e 100644 --- a/assets/components/multus/release-multus-aarch64.json +++ b/assets/components/multus/release-multus-aarch64.json @@ -1,6 +1,6 @@ { "release": { - "base": "5.0.0-0.nightly-arm64-2026-05-03-233705" + "base": "5.0.0-0.nightly-arm64-2026-05-04-233705" }, "images": { "multus-cni-microshift": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:39553f8b8ee836be1f442665fc55be7642261b7766f4b2fff0b30718abc9dae2", diff --git a/assets/components/multus/release-multus-x86_64.json b/assets/components/multus/release-multus-x86_64.json index ad8eeceb69..328210c9be 100644 --- a/assets/components/multus/release-multus-x86_64.json +++ b/assets/components/multus/release-multus-x86_64.json @@ -1,6 +1,6 @@ { "release": { - "base": "5.0.0-0.nightly-2026-05-03-194554" + "base": "5.0.0-0.nightly-2026-05-04-160406" }, "images": { "multus-cni-microshift": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:9e3d2bea43fd760020304e1b77e4d8b22c1effb0c575bb00efda8ce4c73f0ead", diff --git a/assets/optional/cert-manager/crd/bases/certificaterequests.cert-manager.io-crd.yaml b/assets/optional/cert-manager/crd/bases/certificaterequests.cert-manager.io-crd.yaml index f1c41bc81f..f516121c12 100644 --- a/assets/optional/cert-manager/crd/bases/certificaterequests.cert-manager.io-crd.yaml +++ b/assets/optional/cert-manager/crd/bases/certificaterequests.cert-manager.io-crd.yaml @@ -6,9 +6,10 @@ metadata: helm.sh/resource-policy: keep labels: app: cert-manager + app.kubernetes.io/component: crds app.kubernetes.io/instance: cert-manager app.kubernetes.io/name: cert-manager - app.kubernetes.io/version: v1.18.4 + app.kubernetes.io/version: v1.19.4 name: certificaterequests.cert-manager.io spec: group: cert-manager.io @@ -25,13 +26,13 @@ spec: scope: Namespaced versions: - additionalPrinterColumns: - - jsonPath: .status.conditions[?(@.type=="Approved")].status + - jsonPath: .status.conditions[?(@.type == "Approved")].status name: Approved type: string - - jsonPath: .status.conditions[?(@.type=="Denied")].status + - jsonPath: .status.conditions[?(@.type == "Denied")].status name: Denied type: string - - jsonPath: .status.conditions[?(@.type=="Ready")].status + - jsonPath: .status.conditions[?(@.type == "Ready")].status name: Ready type: string - jsonPath: .spec.issuerRef.name @@ -40,7 +41,7 @@ spec: - jsonPath: .spec.username name: Requester type: string - - jsonPath: .status.conditions[?(@.type=="Ready")].message + - jsonPath: .status.conditions[?(@.type == "Ready")].message name: Status priority: 1 type: string @@ -128,13 +129,17 @@ spec: The `name` field of the reference must always be specified. properties: group: - description: Group of the resource being referred to. + description: |- + Group of the issuer being referred to. + Defaults to 'cert-manager.io'. type: string kind: - description: Kind of the resource being referred to. + description: |- + Kind of the issuer being referred to. + Defaults to 'Issuer'. type: string name: - description: Name of the resource being referred to. + description: Name of the issuer being referred to. type: string required: - name @@ -224,6 +229,7 @@ spec: - netscape sgc type: string type: array + x-kubernetes-list-type: atomic username: description: |- Username contains the name of the user that created the CertificateRequest. diff --git a/assets/optional/cert-manager/crd/bases/certificates.cert-manager.io-crd.yaml b/assets/optional/cert-manager/crd/bases/certificates.cert-manager.io-crd.yaml index 3d4d2536d1..4e063e0b86 100644 --- a/assets/optional/cert-manager/crd/bases/certificates.cert-manager.io-crd.yaml +++ b/assets/optional/cert-manager/crd/bases/certificates.cert-manager.io-crd.yaml @@ -6,9 +6,10 @@ metadata: helm.sh/resource-policy: keep labels: app: cert-manager + app.kubernetes.io/component: crds app.kubernetes.io/instance: cert-manager app.kubernetes.io/name: cert-manager - app.kubernetes.io/version: v1.18.4 + app.kubernetes.io/version: v1.19.4 name: certificates.cert-manager.io spec: group: cert-manager.io @@ -25,7 +26,7 @@ spec: scope: Namespaced versions: - additionalPrinterColumns: - - jsonPath: .status.conditions[?(@.type=="Ready")].status + - jsonPath: .status.conditions[?(@.type == "Ready")].status name: Ready type: string - jsonPath: .spec.secretName @@ -35,7 +36,7 @@ spec: name: Issuer priority: 1 type: string - - jsonPath: .status.conditions[?(@.type=="Ready")].message + - jsonPath: .status.conditions[?(@.type == "Ready")].message name: Status priority: 1 type: string @@ -96,6 +97,7 @@ spec: - type type: object type: array + x-kubernetes-list-type: atomic commonName: description: |- Requested common name X509 certificate subject attribute. @@ -111,6 +113,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic duration: description: |- Requested 'duration' (i.e. lifetime) of the Certificate. Note that the @@ -126,6 +129,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic encodeUsagesInRequest: description: |- Whether the KeyUsage and ExtKeyUsage extensions should be set in the encoded CSR. @@ -138,6 +142,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic isCA: description: |- Requested basic constraints isCA value. @@ -158,13 +163,17 @@ spec: The `name` field of the reference must always be specified. properties: group: - description: Group of the resource being referred to. + description: |- + Group of the issuer being referred to. + Defaults to 'cert-manager.io'. type: string kind: - description: Kind of the resource being referred to. + description: |- + Kind of the issuer being referred to. + Defaults to 'Issuer'. type: string name: - description: Name of the resource being referred to. + description: Name of the issuer being referred to. type: string required: - name @@ -324,11 +333,13 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic emailAddresses: description: EmailAddresses is a list of Email Addresses that are permitted or excluded. items: type: string type: array + x-kubernetes-list-type: atomic ipRanges: description: |- IPRanges is a list of IP Ranges that are permitted or excluded. @@ -336,11 +347,13 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic uriDomains: description: URIDomains is a list of URI domains that are permitted or excluded. items: type: string type: array + x-kubernetes-list-type: atomic type: object permitted: description: Permitted contains the constraints in which the names must be located. @@ -350,11 +363,13 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic emailAddresses: description: EmailAddresses is a list of Email Addresses that are permitted or excluded. items: type: string type: array + x-kubernetes-list-type: atomic ipRanges: description: |- IPRanges is a list of IP Ranges that are permitted or excluded. @@ -362,11 +377,13 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic uriDomains: description: URIDomains is a list of URI domains that are permitted or excluded. items: type: string type: array + x-kubernetes-list-type: atomic type: object type: object otherNames: @@ -390,6 +407,7 @@ spec: type: string type: object type: array + x-kubernetes-list-type: atomic privateKey: description: |- Private key options. These include the key algorithm and size, the used @@ -555,31 +573,37 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic localities: description: Cities to be used on the Certificate. items: type: string type: array + x-kubernetes-list-type: atomic organizationalUnits: description: Organizational Units to be used on the Certificate. items: type: string type: array + x-kubernetes-list-type: atomic organizations: description: Organizations to be used on the Certificate. items: type: string type: array + x-kubernetes-list-type: atomic postalCodes: description: Postal codes to be used on the Certificate. items: type: string type: array + x-kubernetes-list-type: atomic provinces: description: State/Provinces to be used on the Certificate. items: type: string type: array + x-kubernetes-list-type: atomic serialNumber: description: Serial number to be used on the Certificate. type: string @@ -588,12 +612,14 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic type: object uris: description: Requested URI subject alternative names. items: type: string type: array + x-kubernetes-list-type: atomic usages: description: |- Requested key usages and extended key usages. @@ -659,6 +685,7 @@ spec: - netscape sgc type: string type: array + x-kubernetes-list-type: atomic required: - issuerRef - secretName diff --git a/assets/optional/cert-manager/crd/bases/challenges.acme.cert-manager.io-crd.yaml b/assets/optional/cert-manager/crd/bases/challenges.acme.cert-manager.io-crd.yaml index 11e7489ded..2e33aab7f7 100644 --- a/assets/optional/cert-manager/crd/bases/challenges.acme.cert-manager.io-crd.yaml +++ b/assets/optional/cert-manager/crd/bases/challenges.acme.cert-manager.io-crd.yaml @@ -6,9 +6,10 @@ metadata: helm.sh/resource-policy: keep labels: app: cert-manager + app.kubernetes.io/component: crds app.kubernetes.io/instance: cert-manager app.kubernetes.io/name: cert-manager - app.kubernetes.io/version: v1.18.4 + app.kubernetes.io/version: v1.19.4 name: challenges.acme.cert-manager.io spec: group: acme.cert-manager.io @@ -81,13 +82,17 @@ spec: Challenge will be marked as failed. properties: group: - description: Group of the resource being referred to. + description: |- + Group of the issuer being referred to. + Defaults to 'cert-manager.io'. type: string kind: - description: Kind of the resource being referred to. + description: |- + Kind of the issuer being referred to. + Defaults to 'Issuer'. type: string name: - description: Name of the resource being referred to. + description: Name of the issuer being referred to. type: string required: - name @@ -406,6 +411,12 @@ spec: enclosed in square brackets (e.g [2001:db8::1]) ; port is optional. This field is required. type: string + protocol: + description: Protocol to use for dynamic DNS update queries. Valid values are (case-sensitive) ``TCP`` and ``UDP``; ``UDP`` (default). + enum: + - TCP + - UDP + type: string tsigAlgorithm: description: |- The TSIG Algorithm configured in the DNS supporting RFC2136. Used only @@ -497,6 +508,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic name: description: Name of the ServiceAccount used to request a token. type: string @@ -773,6 +785,7 @@ spec: - name type: object type: array + x-kubernetes-list-type: atomic podTemplate: description: |- Optional pod template used to configure the ACME challenge solver pods @@ -1068,7 +1081,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1083,7 +1095,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1244,7 +1255,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1259,7 +1269,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1348,8 +1357,8 @@ spec: most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), - compute a sum by iterating through the elements of this field and adding - "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the + compute a sum by iterating through the elements of this field and subtracting + "weight" from the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. items: description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s) @@ -1413,7 +1422,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1428,7 +1436,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1589,7 +1596,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1604,7 +1610,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1702,6 +1707,9 @@ spec: type: object x-kubernetes-map-type: atomic type: array + x-kubernetes-list-map-keys: + - name + x-kubernetes-list-type: map nodeSelector: additionalProperties: type: string @@ -1713,6 +1721,40 @@ spec: priorityClassName: description: If specified, the pod's priorityClassName. type: string + resources: + description: |- + If specified, the pod's resource requirements. + These values override the global resource configuration flags. + Note that when only specifying resource limits, ensure they are greater than or equal + to the corresponding global resource requests configured via controller flags + (--acme-http01-solver-resource-request-cpu, --acme-http01-solver-resource-request-memory). + Kubernetes will reject pod creation if limits are lower than requests, causing challenge failures. + properties: + limits: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + description: |- + Limits describes the maximum amount of compute resources allowed. + More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ + type: object + requests: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + description: |- + Requests describes the minimum amount of compute resources required. + If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, + otherwise to the global values configured via controller flags. Requests cannot exceed Limits. + More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ + type: object + type: object securityContext: description: If specified, the pod's security context properties: @@ -1828,6 +1870,7 @@ spec: format: int64 type: integer type: array + x-kubernetes-list-type: atomic sysctls: description: |- Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported @@ -1847,6 +1890,7 @@ spec: - value type: object type: array + x-kubernetes-list-type: atomic type: object serviceAccountName: description: If specified, the pod's service account @@ -1890,6 +1934,7 @@ spec: type: string type: object type: array + x-kubernetes-list-type: atomic type: object type: object serviceType: @@ -2247,7 +2292,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2262,7 +2306,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2423,7 +2466,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2438,7 +2480,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2527,8 +2568,8 @@ spec: most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), - compute a sum by iterating through the elements of this field and adding - "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the + compute a sum by iterating through the elements of this field and subtracting + "weight" from the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. items: description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s) @@ -2592,7 +2633,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2607,7 +2647,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2768,7 +2807,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2783,7 +2821,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2881,6 +2918,9 @@ spec: type: object x-kubernetes-map-type: atomic type: array + x-kubernetes-list-map-keys: + - name + x-kubernetes-list-type: map nodeSelector: additionalProperties: type: string @@ -2892,6 +2932,40 @@ spec: priorityClassName: description: If specified, the pod's priorityClassName. type: string + resources: + description: |- + If specified, the pod's resource requirements. + These values override the global resource configuration flags. + Note that when only specifying resource limits, ensure they are greater than or equal + to the corresponding global resource requests configured via controller flags + (--acme-http01-solver-resource-request-cpu, --acme-http01-solver-resource-request-memory). + Kubernetes will reject pod creation if limits are lower than requests, causing challenge failures. + properties: + limits: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + description: |- + Limits describes the maximum amount of compute resources allowed. + More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ + type: object + requests: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + description: |- + Requests describes the minimum amount of compute resources required. + If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, + otherwise to the global values configured via controller flags. Requests cannot exceed Limits. + More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ + type: object + type: object securityContext: description: If specified, the pod's security context properties: @@ -3007,6 +3081,7 @@ spec: format: int64 type: integer type: array + x-kubernetes-list-type: atomic sysctls: description: |- Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported @@ -3026,6 +3101,7 @@ spec: - value type: object type: array + x-kubernetes-list-type: atomic type: object serviceAccountName: description: If specified, the pod's service account @@ -3069,6 +3145,7 @@ spec: type: string type: object type: array + x-kubernetes-list-type: atomic type: object type: object serviceType: @@ -3098,6 +3175,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic dnsZones: description: |- List of DNSZones that this solver will be used to solve. @@ -3112,6 +3190,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic matchLabels: additionalProperties: type: string diff --git a/assets/optional/cert-manager/crd/bases/clusterissuers.cert-manager.io-crd.yaml b/assets/optional/cert-manager/crd/bases/clusterissuers.cert-manager.io-crd.yaml index 982e361675..42e8410a9e 100644 --- a/assets/optional/cert-manager/crd/bases/clusterissuers.cert-manager.io-crd.yaml +++ b/assets/optional/cert-manager/crd/bases/clusterissuers.cert-manager.io-crd.yaml @@ -6,9 +6,10 @@ metadata: helm.sh/resource-policy: keep labels: app: cert-manager + app.kubernetes.io/component: crds app.kubernetes.io/instance: cert-manager app.kubernetes.io/name: cert-manager - app.kubernetes.io/version: v1.18.4 + app.kubernetes.io/version: v1.19.4 name: clusterissuers.cert-manager.io spec: group: cert-manager.io @@ -24,10 +25,10 @@ spec: scope: Cluster versions: - additionalPrinterColumns: - - jsonPath: .status.conditions[?(@.type=="Ready")].status + - jsonPath: .status.conditions[?(@.type == "Ready")].status name: Ready type: string - - jsonPath: .status.conditions[?(@.type=="Ready")].message + - jsonPath: .status.conditions[?(@.type == "Ready")].message name: Status priority: 1 type: string @@ -523,6 +524,12 @@ spec: enclosed in square brackets (e.g [2001:db8::1]) ; port is optional. This field is required. type: string + protocol: + description: Protocol to use for dynamic DNS update queries. Valid values are (case-sensitive) ``TCP`` and ``UDP``; ``UDP`` (default). + enum: + - TCP + - UDP + type: string tsigAlgorithm: description: |- The TSIG Algorithm configured in the DNS supporting RFC2136. Used only @@ -614,6 +621,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic name: description: Name of the ServiceAccount used to request a token. type: string @@ -890,6 +898,7 @@ spec: - name type: object type: array + x-kubernetes-list-type: atomic podTemplate: description: |- Optional pod template used to configure the ACME challenge solver pods @@ -1185,7 +1194,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1200,7 +1208,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1361,7 +1368,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1376,7 +1382,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1465,8 +1470,8 @@ spec: most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), - compute a sum by iterating through the elements of this field and adding - "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the + compute a sum by iterating through the elements of this field and subtracting + "weight" from the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. items: description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s) @@ -1530,7 +1535,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1545,7 +1549,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1706,7 +1709,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1721,7 +1723,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1819,6 +1820,9 @@ spec: type: object x-kubernetes-map-type: atomic type: array + x-kubernetes-list-map-keys: + - name + x-kubernetes-list-type: map nodeSelector: additionalProperties: type: string @@ -1830,6 +1834,40 @@ spec: priorityClassName: description: If specified, the pod's priorityClassName. type: string + resources: + description: |- + If specified, the pod's resource requirements. + These values override the global resource configuration flags. + Note that when only specifying resource limits, ensure they are greater than or equal + to the corresponding global resource requests configured via controller flags + (--acme-http01-solver-resource-request-cpu, --acme-http01-solver-resource-request-memory). + Kubernetes will reject pod creation if limits are lower than requests, causing challenge failures. + properties: + limits: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + description: |- + Limits describes the maximum amount of compute resources allowed. + More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ + type: object + requests: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + description: |- + Requests describes the minimum amount of compute resources required. + If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, + otherwise to the global values configured via controller flags. Requests cannot exceed Limits. + More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ + type: object + type: object securityContext: description: If specified, the pod's security context properties: @@ -1945,6 +1983,7 @@ spec: format: int64 type: integer type: array + x-kubernetes-list-type: atomic sysctls: description: |- Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported @@ -1964,6 +2003,7 @@ spec: - value type: object type: array + x-kubernetes-list-type: atomic type: object serviceAccountName: description: If specified, the pod's service account @@ -2007,6 +2047,7 @@ spec: type: string type: object type: array + x-kubernetes-list-type: atomic type: object type: object serviceType: @@ -2364,7 +2405,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2379,7 +2419,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2540,7 +2579,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2555,7 +2593,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2644,8 +2681,8 @@ spec: most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), - compute a sum by iterating through the elements of this field and adding - "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the + compute a sum by iterating through the elements of this field and subtracting + "weight" from the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. items: description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s) @@ -2709,7 +2746,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2724,7 +2760,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2885,7 +2920,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2900,7 +2934,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2998,6 +3031,9 @@ spec: type: object x-kubernetes-map-type: atomic type: array + x-kubernetes-list-map-keys: + - name + x-kubernetes-list-type: map nodeSelector: additionalProperties: type: string @@ -3009,6 +3045,40 @@ spec: priorityClassName: description: If specified, the pod's priorityClassName. type: string + resources: + description: |- + If specified, the pod's resource requirements. + These values override the global resource configuration flags. + Note that when only specifying resource limits, ensure they are greater than or equal + to the corresponding global resource requests configured via controller flags + (--acme-http01-solver-resource-request-cpu, --acme-http01-solver-resource-request-memory). + Kubernetes will reject pod creation if limits are lower than requests, causing challenge failures. + properties: + limits: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + description: |- + Limits describes the maximum amount of compute resources allowed. + More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ + type: object + requests: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + description: |- + Requests describes the minimum amount of compute resources required. + If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, + otherwise to the global values configured via controller flags. Requests cannot exceed Limits. + More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ + type: object + type: object securityContext: description: If specified, the pod's security context properties: @@ -3124,6 +3194,7 @@ spec: format: int64 type: integer type: array + x-kubernetes-list-type: atomic sysctls: description: |- Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported @@ -3143,6 +3214,7 @@ spec: - value type: object type: array + x-kubernetes-list-type: atomic type: object serviceAccountName: description: If specified, the pod's service account @@ -3186,6 +3258,7 @@ spec: type: string type: object type: array + x-kubernetes-list-type: atomic type: object type: object serviceType: @@ -3215,6 +3288,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic dnsZones: description: |- List of DNSZones that this solver will be used to solve. @@ -3229,6 +3303,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic matchLabels: additionalProperties: type: string @@ -3239,6 +3314,7 @@ spec: type: object type: object type: array + x-kubernetes-list-type: atomic required: - privateKeySecretRef - server @@ -3257,6 +3333,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic issuingCertificateURLs: description: |- IssuingCertificateURLs is a list of URLs which this issuer should embed into certificates @@ -3265,6 +3342,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic ocspServers: description: |- The OCSP server list is an X.509 v3 extension that defines a list of @@ -3275,6 +3353,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic secretName: description: |- SecretName is the name of the secret used to sign Certificates issued @@ -3296,6 +3375,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic type: object vault: description: |- @@ -3423,6 +3503,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic name: description: Name of the ServiceAccount used to request a token. type: string diff --git a/assets/optional/cert-manager/crd/bases/issuers.cert-manager.io-crd.yaml b/assets/optional/cert-manager/crd/bases/issuers.cert-manager.io-crd.yaml index 0befddce16..44ddc33b35 100644 --- a/assets/optional/cert-manager/crd/bases/issuers.cert-manager.io-crd.yaml +++ b/assets/optional/cert-manager/crd/bases/issuers.cert-manager.io-crd.yaml @@ -9,7 +9,7 @@ metadata: app.kubernetes.io/component: crds app.kubernetes.io/instance: cert-manager app.kubernetes.io/name: cert-manager - app.kubernetes.io/version: v1.18.4 + app.kubernetes.io/version: v1.19.4 name: issuers.cert-manager.io spec: group: cert-manager.io @@ -25,10 +25,10 @@ spec: scope: Namespaced versions: - additionalPrinterColumns: - - jsonPath: .status.conditions[?(@.type=="Ready")].status + - jsonPath: .status.conditions[?(@.type == "Ready")].status name: Ready type: string - - jsonPath: .status.conditions[?(@.type=="Ready")].message + - jsonPath: .status.conditions[?(@.type == "Ready")].message name: Status priority: 1 type: string @@ -523,6 +523,12 @@ spec: enclosed in square brackets (e.g [2001:db8::1]) ; port is optional. This field is required. type: string + protocol: + description: Protocol to use for dynamic DNS update queries. Valid values are (case-sensitive) ``TCP`` and ``UDP``; ``UDP`` (default). + enum: + - TCP + - UDP + type: string tsigAlgorithm: description: |- The TSIG Algorithm configured in the DNS supporting RFC2136. Used only @@ -614,6 +620,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic name: description: Name of the ServiceAccount used to request a token. type: string @@ -890,6 +897,7 @@ spec: - name type: object type: array + x-kubernetes-list-type: atomic podTemplate: description: |- Optional pod template used to configure the ACME challenge solver pods @@ -1185,7 +1193,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1200,7 +1207,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1361,7 +1367,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1376,7 +1381,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1465,8 +1469,8 @@ spec: most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), - compute a sum by iterating through the elements of this field and adding - "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the + compute a sum by iterating through the elements of this field and subtracting + "weight" from the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. items: description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s) @@ -1530,7 +1534,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1545,7 +1548,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1706,7 +1708,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1721,7 +1722,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -1819,6 +1819,9 @@ spec: type: object x-kubernetes-map-type: atomic type: array + x-kubernetes-list-map-keys: + - name + x-kubernetes-list-type: map nodeSelector: additionalProperties: type: string @@ -1830,6 +1833,40 @@ spec: priorityClassName: description: If specified, the pod's priorityClassName. type: string + resources: + description: |- + If specified, the pod's resource requirements. + These values override the global resource configuration flags. + Note that when only specifying resource limits, ensure they are greater than or equal + to the corresponding global resource requests configured via controller flags + (--acme-http01-solver-resource-request-cpu, --acme-http01-solver-resource-request-memory). + Kubernetes will reject pod creation if limits are lower than requests, causing challenge failures. + properties: + limits: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + description: |- + Limits describes the maximum amount of compute resources allowed. + More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ + type: object + requests: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + description: |- + Requests describes the minimum amount of compute resources required. + If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, + otherwise to the global values configured via controller flags. Requests cannot exceed Limits. + More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ + type: object + type: object securityContext: description: If specified, the pod's security context properties: @@ -1945,6 +1982,7 @@ spec: format: int64 type: integer type: array + x-kubernetes-list-type: atomic sysctls: description: |- Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported @@ -1964,6 +2002,7 @@ spec: - value type: object type: array + x-kubernetes-list-type: atomic type: object serviceAccountName: description: If specified, the pod's service account @@ -2007,6 +2046,7 @@ spec: type: string type: object type: array + x-kubernetes-list-type: atomic type: object type: object serviceType: @@ -2364,7 +2404,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2379,7 +2418,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2540,7 +2578,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2555,7 +2592,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2644,8 +2680,8 @@ spec: most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), - compute a sum by iterating through the elements of this field and adding - "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the + compute a sum by iterating through the elements of this field and subtracting + "weight" from the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. items: description: The weights of all of the matched WeightedPodAffinityTerm fields are added per-node to find the most preferred node(s) @@ -2709,7 +2745,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2724,7 +2759,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2885,7 +2919,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both matchLabelKeys and labelSelector. Also, matchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2900,7 +2933,6 @@ spec: pod labels will be ignored. The default value is empty. The same key is forbidden to exist in both mismatchLabelKeys and labelSelector. Also, mismatchLabelKeys cannot be set when labelSelector isn't set. - This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default). items: type: string type: array @@ -2998,6 +3030,9 @@ spec: type: object x-kubernetes-map-type: atomic type: array + x-kubernetes-list-map-keys: + - name + x-kubernetes-list-type: map nodeSelector: additionalProperties: type: string @@ -3009,6 +3044,40 @@ spec: priorityClassName: description: If specified, the pod's priorityClassName. type: string + resources: + description: |- + If specified, the pod's resource requirements. + These values override the global resource configuration flags. + Note that when only specifying resource limits, ensure they are greater than or equal + to the corresponding global resource requests configured via controller flags + (--acme-http01-solver-resource-request-cpu, --acme-http01-solver-resource-request-memory). + Kubernetes will reject pod creation if limits are lower than requests, causing challenge failures. + properties: + limits: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + description: |- + Limits describes the maximum amount of compute resources allowed. + More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ + type: object + requests: + additionalProperties: + anyOf: + - type: integer + - type: string + pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ + x-kubernetes-int-or-string: true + description: |- + Requests describes the minimum amount of compute resources required. + If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, + otherwise to the global values configured via controller flags. Requests cannot exceed Limits. + More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ + type: object + type: object securityContext: description: If specified, the pod's security context properties: @@ -3124,6 +3193,7 @@ spec: format: int64 type: integer type: array + x-kubernetes-list-type: atomic sysctls: description: |- Sysctls hold a list of namespaced sysctls used for the pod. Pods with unsupported @@ -3143,6 +3213,7 @@ spec: - value type: object type: array + x-kubernetes-list-type: atomic type: object serviceAccountName: description: If specified, the pod's service account @@ -3186,6 +3257,7 @@ spec: type: string type: object type: array + x-kubernetes-list-type: atomic type: object type: object serviceType: @@ -3215,6 +3287,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic dnsZones: description: |- List of DNSZones that this solver will be used to solve. @@ -3229,6 +3302,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic matchLabels: additionalProperties: type: string @@ -3239,6 +3313,7 @@ spec: type: object type: object type: array + x-kubernetes-list-type: atomic required: - privateKeySecretRef - server @@ -3257,6 +3332,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic issuingCertificateURLs: description: |- IssuingCertificateURLs is a list of URLs which this issuer should embed into certificates @@ -3265,6 +3341,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic ocspServers: description: |- The OCSP server list is an X.509 v3 extension that defines a list of @@ -3275,6 +3352,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic secretName: description: |- SecretName is the name of the secret used to sign Certificates issued @@ -3296,6 +3374,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic type: object vault: description: |- @@ -3423,6 +3502,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic name: description: Name of the ServiceAccount used to request a token. type: string diff --git a/assets/optional/cert-manager/crd/bases/operator.openshift.io_certmanagers.yaml b/assets/optional/cert-manager/crd/bases/operator.openshift.io_certmanagers.yaml index 10bd5254e7..1bacdf1805 100644 --- a/assets/optional/cert-manager/crd/bases/operator.openshift.io_certmanagers.yaml +++ b/assets/optional/cert-manager/crd/bases/operator.openshift.io_certmanagers.yaml @@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: annotations: - controller-gen.kubebuilder.io/version: v0.15.0 + controller-gen.kubebuilder.io/version: v0.19.0 name: certmanagers.operator.openshift.io spec: group: operator.openshift.io @@ -37,7 +37,7 @@ spec: metadata: type: object spec: - description: CertManagerSpec defines the desired state of CertManager + description: CertManagerSpec defines the desired state of CertManager. properties: cainjectorConfig: description: |- @@ -60,8 +60,9 @@ spec: in a Container. properties: name: - description: Name of the environment variable. Must be a - C_IDENTIFIER. + description: |- + Name of the environment variable. + May consist of any printable ASCII characters except '='. type: string value: description: |- @@ -119,6 +120,43 @@ spec: - fieldPath type: object x-kubernetes-map-type: atomic + fileKeyRef: + description: |- + FileKeyRef selects a key of the env file. + Requires the EnvFiles feature gate to be enabled. + properties: + key: + description: |- + The key within the env file. An invalid key will prevent the pod from starting. + The keys defined within a source may consist of any printable ASCII characters except '='. + During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. + type: string + optional: + default: false + description: |- + Specify whether the file or its key must be defined. If the file or key + does not exist, then the env var is not published. + If optional is set to true and the specified key does not exist, + the environment variable will not be set in the Pod's containers. + + If optional is set to false and the specified key does not exist, + an error will be returned during Pod creation. + type: boolean + path: + description: |- + The path within the volume from which to select the file. + Must be relative and may not contain the '..' path or start with '..'. + type: string + volumeName: + description: The name of the volume mount containing + the env file. + type: string + required: + - key + - path + - volumeName + type: object + x-kubernetes-map-type: atomic resourceFieldRef: description: |- Selects a resource of the container: only resources limits and requests @@ -303,8 +341,9 @@ spec: in a Container. properties: name: - description: Name of the environment variable. Must be a - C_IDENTIFIER. + description: |- + Name of the environment variable. + May consist of any printable ASCII characters except '='. type: string value: description: |- @@ -362,6 +401,43 @@ spec: - fieldPath type: object x-kubernetes-map-type: atomic + fileKeyRef: + description: |- + FileKeyRef selects a key of the env file. + Requires the EnvFiles feature gate to be enabled. + properties: + key: + description: |- + The key within the env file. An invalid key will prevent the pod from starting. + The keys defined within a source may consist of any printable ASCII characters except '='. + During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. + type: string + optional: + default: false + description: |- + Specify whether the file or its key must be defined. If the file or key + does not exist, then the env var is not published. + If optional is set to true and the specified key does not exist, + the environment variable will not be set in the Pod's containers. + + If optional is set to false and the specified key does not exist, + an error will be returned during Pod creation. + type: boolean + path: + description: |- + The path within the volume from which to select the file. + Must be relative and may not contain the '..' path or start with '..'. + type: string + volumeName: + description: The name of the volume mount containing + the env file. + type: string + required: + - key + - path + - volumeName + type: object + x-kubernetes-map-type: atomic resourceFieldRef: description: |- Selects a resource of the container: only resources limits and requests @@ -630,7 +706,6 @@ spec: If present, only traffic on the specified protocol AND port will be matched. x-kubernetes-int-or-string: true protocol: - default: TCP description: |- protocol represents the protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this field defaults to TCP. @@ -846,7 +921,7 @@ spec: For OverrideArgs, --config string Path to a file containing a WebhookConfiguration object used to configure the webhook - --dynamic-serving-ca-secret-name string name of the secret used to store the CA that signs serving certificates certificates + --dynamic-serving-ca-secret-name string name of the secret used to store the CA that signs serving certificates --dynamic-serving-ca-secret-namespace string namespace of the secret used to store the CA that signs serving certificates --dynamic-serving-dns-names strings DNS names that should be present on certificates generated by the dynamic serving CA --v Level number for the log level verbosity @@ -861,8 +936,9 @@ spec: in a Container. properties: name: - description: Name of the environment variable. Must be a - C_IDENTIFIER. + description: |- + Name of the environment variable. + May consist of any printable ASCII characters except '='. type: string value: description: |- @@ -920,6 +996,43 @@ spec: - fieldPath type: object x-kubernetes-map-type: atomic + fileKeyRef: + description: |- + FileKeyRef selects a key of the env file. + Requires the EnvFiles feature gate to be enabled. + properties: + key: + description: |- + The key within the env file. An invalid key will prevent the pod from starting. + The keys defined within a source may consist of any printable ASCII characters except '='. + During Alpha stage of the EnvFiles feature gate, the key size is limited to 128 characters. + type: string + optional: + default: false + description: |- + Specify whether the file or its key must be defined. If the file or key + does not exist, then the env var is not published. + If optional is set to true and the specified key does not exist, + the environment variable will not be set in the Pod's containers. + + If optional is set to false and the specified key does not exist, + an error will be returned during Pod creation. + type: boolean + path: + description: |- + The path within the volume from which to select the file. + Must be relative and may not contain the '..' path or start with '..'. + type: string + volumeName: + description: The name of the volume mount containing + the env file. + type: string + required: + - key + - path + - volumeName + type: object + x-kubernetes-map-type: atomic resourceFieldRef: description: |- Selects a resource of the container: only resources limits and requests @@ -1076,7 +1189,7 @@ spec: type: object type: object status: - description: CertManagerStatus defines the observed state of CertManager + description: CertManagerStatus defines the observed state of CertManager. properties: conditions: description: conditions is a list of conditions and their status diff --git a/assets/optional/cert-manager/crd/bases/operator.openshift.io_istiocsrs.yaml b/assets/optional/cert-manager/crd/bases/operator.openshift.io_istiocsrs.yaml index 99a594ab88..65fb665887 100644 --- a/assets/optional/cert-manager/crd/bases/operator.openshift.io_istiocsrs.yaml +++ b/assets/optional/cert-manager/crd/bases/operator.openshift.io_istiocsrs.yaml @@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: annotations: - controller-gen.kubebuilder.io/version: v0.15.0 + controller-gen.kubebuilder.io/version: v0.19.0 labels: app.kubernetes.io/name: istiocsr app.kubernetes.io/part-of: cert-manager-operator @@ -657,8 +657,8 @@ spec: most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling anti-affinity expressions, etc.), - compute a sum by iterating through the elements of this field and adding - "weight" to the sum if the node has pods which matches the corresponding podAffinityTerm; the + compute a sum by iterating through the elements of this field and subtracting + "weight" from the sum if the node has pods which matches the corresponding podAffinityTerm; the node(s) with the highest sum are the most preferred. items: description: The weights of all of the matched WeightedPodAffinityTerm @@ -1013,13 +1013,17 @@ spec: This field is immutable once set. properties: group: - description: Group of the resource being referred to. + description: |- + Group of the issuer being referred to. + Defaults to 'cert-manager.io'. type: string kind: - description: Kind of the resource being referred to. + description: |- + Kind of the issuer being referred to. + Defaults to 'Issuer'. type: string name: - description: Name of the resource being referred to. + description: Name of the issuer being referred to. type: string required: - name @@ -1234,7 +1238,7 @@ spec: Claims lists the names of resources, defined in spec.resourceClaims, that are used by this container. - This is an alpha field and requires enabling the + This field depends on the DynamicResourceAllocation feature gate. This field is immutable. It can only be set for containers. @@ -1374,7 +1378,7 @@ spec: type: string conditions: description: conditions holds information about the current state - of the istio-csr agent deployment. + of the operand deployment. items: description: Condition contains details for one aspect of the current state of this API Resource. diff --git a/assets/optional/cert-manager/crd/bases/orders.acme.cert-manager.io-crd.yaml b/assets/optional/cert-manager/crd/bases/orders.acme.cert-manager.io-crd.yaml index d3f94fa34a..94eddfa124 100644 --- a/assets/optional/cert-manager/crd/bases/orders.acme.cert-manager.io-crd.yaml +++ b/assets/optional/cert-manager/crd/bases/orders.acme.cert-manager.io-crd.yaml @@ -9,7 +9,7 @@ metadata: app.kubernetes.io/component: crds app.kubernetes.io/instance: cert-manager app.kubernetes.io/name: cert-manager - app.kubernetes.io/version: v1.18.4 + app.kubernetes.io/version: v1.19.4 name: orders.acme.cert-manager.io spec: group: acme.cert-manager.io @@ -77,6 +77,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic duration: description: |- Duration is the duration for the not after date for the requested certificate. @@ -90,6 +91,7 @@ spec: items: type: string type: array + x-kubernetes-list-type: atomic issuerRef: description: |- IssuerRef references a properly configured ACME-type Issuer which should @@ -99,13 +101,17 @@ spec: Order will be marked as failed. properties: group: - description: Group of the resource being referred to. + description: |- + Group of the issuer being referred to. + Defaults to 'cert-manager.io'. type: string kind: - description: Kind of the resource being referred to. + description: |- + Kind of the issuer being referred to. + Defaults to 'Issuer'. type: string name: - description: Name of the resource being referred to. + description: Name of the issuer being referred to. type: string required: - name @@ -175,6 +181,7 @@ spec: - url type: object type: array + x-kubernetes-list-type: atomic identifier: description: Identifier is the DNS name to be validated as part of this authorization type: string @@ -212,6 +219,7 @@ spec: - url type: object type: array + x-kubernetes-list-type: atomic certificate: description: |- Certificate is a copy of the PEM encoded certificate for this Order. diff --git a/assets/optional/cert-manager/crd/kustomization.yaml b/assets/optional/cert-manager/crd/kustomization.yaml index 1d22d45723..b88e884756 100644 --- a/assets/optional/cert-manager/crd/kustomization.yaml +++ b/assets/optional/cert-manager/crd/kustomization.yaml @@ -10,6 +10,8 @@ resources: - bases/issuers.cert-manager.io-crd.yaml - bases/orders.acme.cert-manager.io-crd.yaml - bases/operator.openshift.io_istiocsrs.yaml +- bases/operator.openshift.io_trustmanagers.yaml +- bases/customresourcedefinition_bundles.trust.cert-manager.io.yml #+kubebuilder:scaffold:crdkustomizeresource patchesStrategicMerge: diff --git a/assets/optional/cert-manager/manager/images-x86_64.yaml b/assets/optional/cert-manager/manager/images-x86_64.yaml index 71aea542a9..2dbc4ed851 100644 --- a/assets/optional/cert-manager/manager/images-x86_64.yaml +++ b/assets/optional/cert-manager/manager/images-x86_64.yaml @@ -9,4 +9,4 @@ data: cert-manager-controller: registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:09c857f0c20721d6b447f5f567182befc1ca6157128225849117a5c830feab23 cert-manager-acmesolver: registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:155383c4664ea3ed18d0f079be720ad68a5de044448a744d7579af7ff0fc7e0a cert-manager-istiocsr: registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:41df7aabbce42599bad7fdc721cd12aa6e12d17e1c0658fb3294a1f68483d656 - controller: registry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:57a1aea49d7cc275b37b8f52d602a3a9d1601ec6a21a3268dd4903566cb2e335 + controller: registry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:708361988343fb0fc9c10ebdc6a05de75ed038918ece0b7a91888e2cc74f644e diff --git a/assets/optional/cert-manager/manager/manager.yaml b/assets/optional/cert-manager/manager/manager.yaml index 68d65b34b5..a19ad2cf8b 100644 --- a/assets/optional/cert-manager/manager/manager.yaml +++ b/assets/optional/cert-manager/manager/manager.yaml @@ -75,21 +75,25 @@ spec: - name: OPERATOR_NAME value: cert-manager-operator - name: RELATED_IMAGE_CERT_MANAGER_WEBHOOK - value: quay.io/jetstack/cert-manager-webhook:latest + value: quay.io/jetstack/cert-manager-webhook:v1.19.4 - name: RELATED_IMAGE_CERT_MANAGER_CA_INJECTOR - value: quay.io/jetstack/cert-manager-cainjector:latest + value: quay.io/jetstack/cert-manager-cainjector:v1.19.4 - name: RELATED_IMAGE_CERT_MANAGER_CONTROLLER - value: quay.io/jetstack/cert-manager-controller:latest + value: quay.io/jetstack/cert-manager-controller:v1.19.4 - name: RELATED_IMAGE_CERT_MANAGER_ACMESOLVER - value: quay.io/jetstack/cert-manager-acmesolver:v1.18.4 + value: quay.io/jetstack/cert-manager-acmesolver:v1.19.4 - name: RELATED_IMAGE_CERT_MANAGER_ISTIOCSR - value: quay.io/jetstack/cert-manager-istio-csr:v0.14.2 + value: quay.io/jetstack/cert-manager-istio-csr:v0.16.0 + - name: RELATED_IMAGE_CERT_MANAGER_TRUST_MANAGER + value: quay.io/jetstack/trust-manager:v0.20.3 - name: OPERAND_IMAGE_VERSION - value: 1.18.4 + value: 1.19.4 - name: ISTIOCSR_OPERAND_IMAGE_VERSION - value: 0.14.2 + value: 0.16.0 + - name: TRUSTMANAGER_OPERAND_IMAGE_VERSION + value: 0.20.3 - name: OPERATOR_IMAGE_VERSION - value: 1.18.1 + value: 1.19.0 - name: OPERATOR_LOG_LEVEL value: '2' - name: TRUSTED_CA_CONFIGMAP_NAME diff --git a/assets/optional/cert-manager/rbac/kustomization.yaml b/assets/optional/cert-manager/rbac/kustomization.yaml index e36e56881d..ca76ce6751 100644 --- a/assets/optional/cert-manager/rbac/kustomization.yaml +++ b/assets/optional/cert-manager/rbac/kustomization.yaml @@ -15,3 +15,7 @@ resources: - auth_proxy_role.yaml - auth_proxy_role_binding.yaml - auth_proxy_client_clusterrole.yaml +# RBAC for reading featuregates.config.openshift.io resource to determine +# feature enabling. +- featuregate_clusterrole.yaml +- featuregate_clusterrole_binding.yaml diff --git a/assets/optional/cert-manager/rbac/role.yaml b/assets/optional/cert-manager/rbac/role.yaml index c387f3a403..ed4472e77d 100644 --- a/assets/optional/cert-manager/rbac/role.yaml +++ b/assets/optional/cert-manager/rbac/role.yaml @@ -226,6 +226,7 @@ rules: resources: - certmanagers/finalizers - istiocsrs/finalizers + - trustmanagers/finalizers verbs: - update - apiGroups: @@ -233,6 +234,7 @@ rules: resources: - certmanagers/status - istiocsrs/status + - trustmanagers/status verbs: - get - patch @@ -241,6 +243,7 @@ rules: - operator.openshift.io resources: - istiocsrs + - trustmanagers verbs: - get - list @@ -275,3 +278,23 @@ rules: - patch - update - watch +- apiGroups: + - trust.cert-manager.io + resources: + - bundles + verbs: + - get + - list + - watch +- apiGroups: + - trust.cert-manager.io + resources: + - bundles/finalizers + verbs: + - update +- apiGroups: + - trust.cert-manager.io + resources: + - bundles/status + verbs: + - patch diff --git a/assets/optional/cert-manager/release-cert-manager-x86_64.json b/assets/optional/cert-manager/release-cert-manager-x86_64.json index 40fb38817f..82dad85d08 100644 --- a/assets/optional/cert-manager/release-cert-manager-x86_64.json +++ b/assets/optional/cert-manager/release-cert-manager-x86_64.json @@ -1,13 +1,8 @@ { "release": { - "base": "1.18.1" + "base": "1.19.0" }, "images": { - "cert-manager-operator": "registry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:57a1aea49d7cc275b37b8f52d602a3a9d1601ec6a21a3268dd4903566cb2e335", - "cert-manager-istiocsr": "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:41df7aabbce42599bad7fdc721cd12aa6e12d17e1c0658fb3294a1f68483d656", - "cert-manager-acmesolver": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:155383c4664ea3ed18d0f079be720ad68a5de044448a744d7579af7ff0fc7e0a", - "cert-manager-webhook": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:09c857f0c20721d6b447f5f567182befc1ca6157128225849117a5c830feab23", - "cert-manager-ca-injector": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:09c857f0c20721d6b447f5f567182befc1ca6157128225849117a5c830feab23", - "cert-manager-controller": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:09c857f0c20721d6b447f5f567182befc1ca6157128225849117a5c830feab23" + "cert-manager-operator": "registry.redhat.io/cert-manager/cert-manager-operator-rhel9@sha256:708361988343fb0fc9c10ebdc6a05de75ed038918ece0b7a91888e2cc74f644e" } } diff --git a/assets/optional/operator-lifecycle-manager/kustomization.aarch64.yaml b/assets/optional/operator-lifecycle-manager/kustomization.aarch64.yaml index fee89c0fdc..9ddaa3946c 100644 --- a/assets/optional/operator-lifecycle-manager/kustomization.aarch64.yaml +++ b/assets/optional/operator-lifecycle-manager/kustomization.aarch64.yaml @@ -2,10 +2,10 @@ images: - name: quay.io/operator-framework/olm newName: quay.io/openshift-release-dev/ocp-v5.0-art-dev - digest: sha256:24124f7656b35ac5415479c6c099a9bdba8cb741e0cc32ab6f3fd31a3f588d90 + digest: sha256:b85c447c77badaa62559fb347a60867bfd5cece41d3d58a7896f7860c7e3d993 - name: quay.io/operator-framework/configmap-operator-registry newName: quay.io/openshift-release-dev/ocp-v5.0-art-dev - digest: sha256:933c892898c5a8c2f77ed5151e3029fe1a3aaa3a5ca3578d8670ea40bbbb913d + digest: sha256:7d3975a114db97d3416363d5b0b907c7b89eac9ae47e7eb4eaf8a58119683a55 - name: quay.io/openshift/origin-kube-rbac-proxy newName: quay.io/openshift-release-dev/ocp-v5.0-art-dev digest: sha256:0446463c285378b96336a9bcfdc1560181ceb3c2c2c9d0e1274c4978d043a10e @@ -16,12 +16,12 @@ patches: path: /spec/template/spec/containers/0/env/- value: name: OPERATOR_REGISTRY_IMAGE - value: quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:933c892898c5a8c2f77ed5151e3029fe1a3aaa3a5ca3578d8670ea40bbbb913d + value: quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:7d3975a114db97d3416363d5b0b907c7b89eac9ae47e7eb4eaf8a58119683a55 - op: add path: /spec/template/spec/containers/0/env/- value: name: OLM_IMAGE - value: quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:24124f7656b35ac5415479c6c099a9bdba8cb741e0cc32ab6f3fd31a3f588d90 + value: quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:b85c447c77badaa62559fb347a60867bfd5cece41d3d58a7896f7860c7e3d993 target: kind: Deployment labelSelector: app=catalog-operator diff --git a/assets/optional/operator-lifecycle-manager/kustomization.x86_64.yaml b/assets/optional/operator-lifecycle-manager/kustomization.x86_64.yaml index 2beced9e7a..870a3c52e1 100644 --- a/assets/optional/operator-lifecycle-manager/kustomization.x86_64.yaml +++ b/assets/optional/operator-lifecycle-manager/kustomization.x86_64.yaml @@ -2,10 +2,10 @@ images: - name: quay.io/operator-framework/olm newName: quay.io/openshift-release-dev/ocp-v5.0-art-dev - digest: sha256:109b860fe3a1dfc40238e844e3a242deb3553e6d167524ee0ff0ee44c0d8a9b5 + digest: sha256:df1f37f31fdb206d11f138fbf805bfb48afc060d5cec14fcd5c57b0ac4adfdf8 - name: quay.io/operator-framework/configmap-operator-registry newName: quay.io/openshift-release-dev/ocp-v5.0-art-dev - digest: sha256:d89c9f99a8d4d8501451feb1aa041ca19e15ca6c96ee1f4e5d15f2b3d1e81eb5 + digest: sha256:789715b5169d308415c8a78bc7bd42ef92cfd445e704f90ca30f8db07cac40df - name: quay.io/openshift/origin-kube-rbac-proxy newName: quay.io/openshift-release-dev/ocp-v5.0-art-dev digest: sha256:3482ea3d2b8dce334f07b89086fdb06543d1a1680b4e71f937fbd13a171c42cf @@ -16,12 +16,12 @@ patches: path: /spec/template/spec/containers/0/env/- value: name: OPERATOR_REGISTRY_IMAGE - value: quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:d89c9f99a8d4d8501451feb1aa041ca19e15ca6c96ee1f4e5d15f2b3d1e81eb5 + value: quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:789715b5169d308415c8a78bc7bd42ef92cfd445e704f90ca30f8db07cac40df - op: add path: /spec/template/spec/containers/0/env/- value: name: OLM_IMAGE - value: quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:109b860fe3a1dfc40238e844e3a242deb3553e6d167524ee0ff0ee44c0d8a9b5 + value: quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:df1f37f31fdb206d11f138fbf805bfb48afc060d5cec14fcd5c57b0ac4adfdf8 target: kind: Deployment labelSelector: app=catalog-operator diff --git a/assets/optional/operator-lifecycle-manager/release-olm-aarch64.json b/assets/optional/operator-lifecycle-manager/release-olm-aarch64.json index 2ac6156456..b01f3fc56f 100644 --- a/assets/optional/operator-lifecycle-manager/release-olm-aarch64.json +++ b/assets/optional/operator-lifecycle-manager/release-olm-aarch64.json @@ -1,10 +1,10 @@ { "release": { - "base": "5.0.0-0.nightly-arm64-2026-05-03-233705" + "base": "5.0.0-0.nightly-arm64-2026-05-04-233705" }, "images": { - "operator-lifecycle-manager": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:24124f7656b35ac5415479c6c099a9bdba8cb741e0cc32ab6f3fd31a3f588d90", - "operator-registry": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:933c892898c5a8c2f77ed5151e3029fe1a3aaa3a5ca3578d8670ea40bbbb913d", + "operator-lifecycle-manager": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:b85c447c77badaa62559fb347a60867bfd5cece41d3d58a7896f7860c7e3d993", + "operator-registry": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:7d3975a114db97d3416363d5b0b907c7b89eac9ae47e7eb4eaf8a58119683a55", "kube-rbac-proxy": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:0446463c285378b96336a9bcfdc1560181ceb3c2c2c9d0e1274c4978d043a10e" } } diff --git a/assets/optional/operator-lifecycle-manager/release-olm-x86_64.json b/assets/optional/operator-lifecycle-manager/release-olm-x86_64.json index 94aa5897e8..14d7d60962 100644 --- a/assets/optional/operator-lifecycle-manager/release-olm-x86_64.json +++ b/assets/optional/operator-lifecycle-manager/release-olm-x86_64.json @@ -1,10 +1,10 @@ { "release": { - "base": "5.0.0-0.nightly-2026-05-03-194554" + "base": "5.0.0-0.nightly-2026-05-04-160406" }, "images": { - "operator-lifecycle-manager": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:109b860fe3a1dfc40238e844e3a242deb3553e6d167524ee0ff0ee44c0d8a9b5", - "operator-registry": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:d89c9f99a8d4d8501451feb1aa041ca19e15ca6c96ee1f4e5d15f2b3d1e81eb5", + "operator-lifecycle-manager": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:df1f37f31fdb206d11f138fbf805bfb48afc060d5cec14fcd5c57b0ac4adfdf8", + "operator-registry": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:789715b5169d308415c8a78bc7bd42ef92cfd445e704f90ca30f8db07cac40df", "kube-rbac-proxy": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:3482ea3d2b8dce334f07b89086fdb06543d1a1680b4e71f937fbd13a171c42cf" } } diff --git a/assets/optional/sriov/kustomization.aarch64.yaml b/assets/optional/sriov/kustomization.aarch64.yaml index c2b712e1bc..2abab9601f 100644 --- a/assets/optional/sriov/kustomization.aarch64.yaml +++ b/assets/optional/sriov/kustomization.aarch64.yaml @@ -14,7 +14,7 @@ patches: path: /spec/template/spec/containers/0/env/- value: name: SRIOV_DEVICE_PLUGIN_IMAGE - value: registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:4f58b37aebf7848490658c8d72d05d58d06e81f3eb9294bf2f316822d6a9aadb + value: registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:2daa9effeb92b7cbb1539ade29ba50244985b2be8238fdb17d0cb3ba66e265dc - op: add path: /spec/template/spec/containers/0/env/- value: @@ -24,7 +24,7 @@ patches: path: /spec/template/spec/containers/0/env/- value: name: SRIOV_NETWORK_CONFIG_DAEMON_IMAGE - value: registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:07dc6cb29c0fee69abf75b81a5de3e4a1a8ec65a68c7c2e6b540ff35cde70b80 + value: registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:f01c3e1b76bf1115dbef515be43b86f877a726160384ac8329ce1fb5d1f9da5c - op: add path: /spec/template/spec/containers/0/env/- value: diff --git a/assets/optional/sriov/kustomization.x86_64.yaml b/assets/optional/sriov/kustomization.x86_64.yaml index 253a5a4c95..803c35eadf 100644 --- a/assets/optional/sriov/kustomization.x86_64.yaml +++ b/assets/optional/sriov/kustomization.x86_64.yaml @@ -14,7 +14,7 @@ patches: path: /spec/template/spec/containers/0/env/- value: name: SRIOV_DEVICE_PLUGIN_IMAGE - value: registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:ab1b3e26134284dcddfc6b6661856c88b6e90349760fd20b5d6cc00788cb673b + value: registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:2daa9effeb92b7cbb1539ade29ba50244985b2be8238fdb17d0cb3ba66e265dc - op: add path: /spec/template/spec/containers/0/env/- value: @@ -24,7 +24,7 @@ patches: path: /spec/template/spec/containers/0/env/- value: name: SRIOV_NETWORK_CONFIG_DAEMON_IMAGE - value: registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:52a0e9a3b3a301b61b191ba8b2b7181baa54ceb01e52228ad5fbc48cab477728 + value: registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:f01c3e1b76bf1115dbef515be43b86f877a726160384ac8329ce1fb5d1f9da5c - op: add path: /spec/template/spec/containers/0/env/- value: diff --git a/assets/optional/sriov/release-sriov-aarch64.json b/assets/optional/sriov/release-sriov-aarch64.json index 234594aca3..d6a8c81f77 100644 --- a/assets/optional/sriov/release-sriov-aarch64.json +++ b/assets/optional/sriov/release-sriov-aarch64.json @@ -8,9 +8,9 @@ "network-resources-injector-image": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:5e4b6c894007b41b4c16bccda566fec7a374bfa00a6b501196c5a5f3fb1040bd", "rdma-cni-image": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:48ef884aa59ebb56a30d94ba412b5d7e0766d0735c5c9789896c0ae5512fb764", "sriov-cni-image": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:976c5d4287fe5c46c999bdbad3505d6a655e2f0ef36a1257e7573d540ba1c89b", - "sriov-device-plugin-image": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:4f58b37aebf7848490658c8d72d05d58d06e81f3eb9294bf2f316822d6a9aadb", + "sriov-device-plugin-image": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:2daa9effeb92b7cbb1539ade29ba50244985b2be8238fdb17d0cb3ba66e265dc", "sriov-infiniband-cni-image": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:7dbfa84c1952f10e6750ffb7d1353cc72d84f654c6da8ed3fec8561653721a8e", - "sriov-network-config-daemon-image": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:07dc6cb29c0fee69abf75b81a5de3e4a1a8ec65a68c7c2e6b540ff35cde70b80", + "sriov-network-config-daemon-image": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:f01c3e1b76bf1115dbef515be43b86f877a726160384ac8329ce1fb5d1f9da5c", "sriov-network-operator": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:56c1a4eafecd9d84639062fcd22a114c84c70fcc0abff6a471b2ebad64d1c510", "sriov-network-webhook-image": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:435eb24e9d12c802966d438fd26ca13b45a05aade4e5f407299727958c36071f" } diff --git a/assets/optional/sriov/release-sriov-x86_64.json b/assets/optional/sriov/release-sriov-x86_64.json index 265758fb10..07dd6c5178 100644 --- a/assets/optional/sriov/release-sriov-x86_64.json +++ b/assets/optional/sriov/release-sriov-x86_64.json @@ -8,9 +8,9 @@ "network-resources-injector-image": "registry.redhat.io/openshift4/ose-sriov-dp-admission-controller-rhel9@sha256:c04210bf4444c4234016a6cafbe11a7feb23444a68b9e313784cf2b0b1bacd0b", "rdma-cni-image": "registry.redhat.io/openshift4/ose-sriov-rdma-cni-rhel9@sha256:9d56f0ca4ff9c75d27fbf30b93b03b993191c5749baa2edef32219c9b6b4aa67", "sriov-cni-image": "registry.redhat.io/openshift4/sriov-cni-rhel9@sha256:f640774752ab197447d9b399f8928e01088cba741f9f56bef887954e974552f3", - "sriov-device-plugin-image": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:ab1b3e26134284dcddfc6b6661856c88b6e90349760fd20b5d6cc00788cb673b", + "sriov-device-plugin-image": "registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:2daa9effeb92b7cbb1539ade29ba50244985b2be8238fdb17d0cb3ba66e265dc", "sriov-infiniband-cni-image": "registry.redhat.io/openshift4/ose-sriov-infiniband-cni-rhel9@sha256:eced3ac58cab27cc99f8d90344ff6cd80264a0c4f5b66e701ccb5a77c8e64b7a", - "sriov-network-config-daemon-image": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:52a0e9a3b3a301b61b191ba8b2b7181baa54ceb01e52228ad5fbc48cab477728", + "sriov-network-config-daemon-image": "registry.redhat.io/openshift4/ose-sriov-network-config-daemon-rhel9@sha256:f01c3e1b76bf1115dbef515be43b86f877a726160384ac8329ce1fb5d1f9da5c", "sriov-network-operator": "registry.redhat.io/openshift4/ose-sriov-network-rhel9-operator@sha256:f086958acd271a3c9c094e670f5dd8179a4e044acebb719497248e51f8eb8325", "sriov-network-webhook-image": "registry.redhat.io/openshift4/ose-sriov-network-webhook-rhel9@sha256:347dd64f2d55e7da0ae5190cfdcc076e607de363f47b672212b9d220cef9f4dc" } diff --git a/assets/release/release-aarch64.json b/assets/release/release-aarch64.json index a6348f5c46..1fa6345e37 100644 --- a/assets/release/release-aarch64.json +++ b/assets/release/release-aarch64.json @@ -1,6 +1,6 @@ { "release": { - "base": "5.0.0-0.nightly-arm64-2026-05-03-233705" + "base": "5.0.0-0.nightly-arm64-2026-05-04-233705" }, "images": { "cli": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:a5a00f57e0ccbc0be89f779a48d77110ef46cac9263da0961af2557f1903089b", @@ -8,8 +8,8 @@ "haproxy-router": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:fe7e26fb3b484504fd6c116c2b3df63e3fccc3f2c37aafa76fa78de547077b1d", "kube-rbac-proxy": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:0446463c285378b96336a9bcfdc1560181ceb3c2c2c9d0e1274c4978d043a10e", "ovn-kubernetes-microshift": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:f571b5d5727dd2f1ab6093338bf12d9fad21d6672a2fa3f3a5db0997ebc76d25", - "pod": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:9782b8c28667d76e2eb6d105590425e7e8cdbdcc835f7195846f5356cb12879b", - "service-ca-operator": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:2a7b8edd2d425e191e63d8254255f6f8458c178bd5f7a90a8c8f3fd3db7c5b91", + "pod": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:cc92fce3d1515a67507dde231828df292e47d8c1e10bf399d12cf395ff9d5178", + "service-ca-operator": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:b6761de6a76f9dad5eaef988546747c4836b3ead5e619d20026824a9dc2b0893", "lvms_operator": "registry.redhat.io/lvms4/lvms-rhel9-operator@sha256:3766640b19c336b443619ecdb35f36b479c79ea71b21de97febf024a5eaf6c84", "csi-snapshot-controller": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:be54a457dae13f577c883e08fcfe37219b75d41c1a44f72763c41486a9208af3" } diff --git a/assets/release/release-x86_64.json b/assets/release/release-x86_64.json index d209d74533..6caf6d9810 100644 --- a/assets/release/release-x86_64.json +++ b/assets/release/release-x86_64.json @@ -1,6 +1,6 @@ { "release": { - "base": "5.0.0-0.nightly-2026-05-03-194554" + "base": "5.0.0-0.nightly-2026-05-04-160406" }, "images": { "cli": "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:e8b207ab1f79cd199ed14b049e94c0b20575a432f345c6b26958e93f8bd0950f", diff --git a/packaging/crio.conf.d/10-microshift_arm64.conf b/packaging/crio.conf.d/10-microshift_arm64.conf index f3eca834b3..7c10be8155 100644 --- a/packaging/crio.conf.d/10-microshift_arm64.conf +++ b/packaging/crio.conf.d/10-microshift_arm64.conf @@ -2,6 +2,6 @@ # for community builds on top of OKD, this setting has no effect [crio.image] global_auth_file="/etc/crio/openshift-pull-secret" -pause_image = "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:9782b8c28667d76e2eb6d105590425e7e8cdbdcc835f7195846f5356cb12879b" +pause_image = "quay.io/openshift-release-dev/ocp-v5.0-art-dev@sha256:cc92fce3d1515a67507dde231828df292e47d8c1e10bf399d12cf395ff9d5178" pause_image_auth_file = "/etc/crio/openshift-pull-secret" pause_command = "/usr/bin/pod" diff --git a/rebase.log b/rebase.log new file mode 100644 index 0000000000..c60569f408 --- /dev/null +++ b/rebase.log @@ -0,0 +1,900 @@ +rebase.sh: +# Rebasing to registry.ci.openshift.org/ocp/release-5:5.0.0-0.nightly-2026-05-04-160406 and registry.ci.openshift.org/ocp-arm64/release-5-arm64:5.0.0-0.nightly-arm64-2026-05-04-233705 +# Fetching release info for registry.ci.openshift.org/ocp/release-5:5.0.0-0.nightly-2026-05-04-160406 (amd64) +# Fetching release info for registry.ci.openshift.org/ocp-arm64/release-5-arm64:5.0.0-0.nightly-arm64-2026-05-04-233705 (arm64) +# Extracting registry.ci.openshift.org/ocp/release-5:5.0.0-0.nightly-2026-05-04-160406 manifest content +# Cloning registry.ci.openshift.org/ocp/release-5:5.0.0-0.nightly-2026-05-04-160406 component repos +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/api/.git/ +HEAD is now at a49973ea Merge pull request #2828 from haircommander/drop-partitionable + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/cluster-csi-snapshot-controller-operator/.git/ +HEAD is now at 108f37f Merge pull request #271 from mmazur/fix-pdb-unhealthy-pod-eviction-policy + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/cluster-dns-operator/.git/ +HEAD is now at 3d21411 Merge pull request #467 from bentito/fix-dns-service-dual-stack + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/cluster-ingress-operator/.git/ +HEAD is now at 98ff1a6 Merge pull request #1427 from Miciah/OCPBUGS-84551-isFIPSEnabled-check-FIPS_ENABLED-env-var-first + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/cluster-kube-apiserver-operator/.git/ +HEAD is now at 9b45cba Merge pull request #2132 from gangwgr/rm-suite + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/cluster-kube-controller-manager-operator/.git/ +HEAD is now at ca150c4 Merge pull request #924 from gangwgr/nw-policy-cases + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/cluster-kube-scheduler-operator/.git/ +HEAD is now at a049585 Merge pull request #639 from kevinrizza/add-control-plane-approvers + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/cluster-network-operator/.git/ +HEAD is now at 23f0020 Merge pull request #2984 from mattedallo/OCPBUGS-53187-master-to-main-rename + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/cluster-openshift-controller-manager-operator/.git/ +HEAD is now at c941a99 Merge pull request #427 from kevinrizza/add-control-plane-approvers + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/cluster-policy-controller/.git/ +HEAD is now at bb429f5 Merge pull request #179 from kevinrizza/add-control-plane-approvers + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/csi-external-snapshotter/.git/ +HEAD is now at d1bc3ff Merge pull request #202 from dfajmon/rebase-v8.5.0 + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/etcd/.git/ +HEAD is now at d8d67b8c Merge pull request #356 from locriandev/openshift-4.22 + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/kubernetes/.git/ +HEAD is now at 2447118a5 Merge pull request #2645 from haircommander/device-manager-numa-fix-openshift + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/kubernetes-kube-storage-version-migrator/.git/ +HEAD is now at 72835e4 Merge pull request #237 from sanchezl/leader-election-2026 + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/machine-config-operator/.git/ +HEAD is now at 7eef4fdc Merge pull request #5913 from dkhater-redhat/fix-ocl-test-handle-empty-annotation + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/openshift-controller-manager/.git/ +HEAD is now at 731d742 Merge pull request #438 from kevinrizza/add-control-plane-approvers + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/operator-framework-olm/.git/ +HEAD is now at 4201d40d Merge pull request #1286 from openshift-bot/synchronize-upstream + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/route-controller-manager/.git/ +HEAD is now at 624742d Merge pull request #70 from jcmoraisjr/bump-library-go + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/service-ca-operator/.git/ +HEAD is now at 2aa88ac Merge pull request #345 from kevinrizza/update-OWNERS + +# Cloning registry.ci.openshift.org/ocp/release-5:5.0.0-0.nightly-2026-05-04-160406 image repos +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/amd64/oc/.git/ +HEAD is now at 16d140ae Merge pull request #2262 from hongkailiu/pr2213 + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/amd64/coredns/.git/ +HEAD is now at 0dded2d Merge pull request #170 from openshift-bot/art-consistency-openshift-4.22-coredns + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/amd64/csi-external-snapshotter/.git/ +HEAD is now at d1bc3ff Merge pull request #202 from dfajmon/rebase-v8.5.0 + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/amd64/router/.git/ +HEAD is now at 8963907 Merge pull request #755 from richardsonnick/router-curves + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/amd64/kube-rbac-proxy/.git/ +HEAD is now at d12e274 Merge pull request #133 from ibihim/merge-v0.21.1-downstream + +lvms_operator not from release payload, skipping + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/amd64/ovn-kubernetes/.git/ +HEAD is now at 952886fd Merge pull request #3159 from arkadeepsen/d/s-2026-04-27 + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/amd64/kubernetes/.git/ +HEAD is now at 2447118a5 Merge pull request #2645 from haircommander/device-manager-numa-fix-openshift + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/amd64/service-ca-operator/.git/ +HEAD is now at 2aa88ac Merge pull request #345 from kevinrizza/update-OWNERS + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/arm64/oc/.git/ +HEAD is now at 16d140ae Merge pull request #2262 from hongkailiu/pr2213 + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/arm64/coredns/.git/ +HEAD is now at 0dded2d Merge pull request #170 from openshift-bot/art-consistency-openshift-4.22-coredns + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/arm64/csi-external-snapshotter/.git/ +HEAD is now at d1bc3ff Merge pull request #202 from dfajmon/rebase-v8.5.0 + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/arm64/router/.git/ +HEAD is now at 8963907 Merge pull request #755 from richardsonnick/router-curves + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/arm64/kube-rbac-proxy/.git/ +HEAD is now at d12e274 Merge pull request #133 from ibihim/merge-v0.21.1-downstream + +lvms_operator not from release payload, skipping + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/arm64/ovn-kubernetes/.git/ +HEAD is now at 952886fd Merge pull request #3159 from arkadeepsen/d/s-2026-04-27 + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/arm64/kubernetes/.git/ +HEAD is now at 5f099ccd1 Merge pull request #2627 from ShazaAldawamneh/CNTRLPLANE-2553-2 + +Initialized empty Git repository in /go/src/github.com/openshift/microshift/_output/staging/arm64/service-ca-operator/.git/ +HEAD is now at e7ccfa3 Merge pull request #338 from kaleemsiddiqu/network-policies + +Warning: env var PULL_BASE_REF not found or empty, falling back to local active branch. +error: branch 'rebase-release-5.0-5.0.0-0.nightly-2026-05-04-160406_amd64-2026-05-04_arm64-2026-05-04' not found +Switched to a new branch 'rebase-release-5.0-5.0.0-0.nightly-2026-05-04-160406_amd64-2026-05-04_arm64-2026-05-04' +## Updating last_rebase.sh +## Committing changes to last_rebase.sh +[rebase-release-5.0-5.0.0-0.nightly-2026-05-04-160406_amd64-2026-05-04_arm64-2026-05-04 d36fe46c2] update last_rebase.sh + 1 file changed, 1 insertion(+), 1 deletion(-) +api embedded-component no change + +cluster-csi-snapshot-controller-operator embedded-component no change + +cluster-dns-operator embedded-component no change + +cluster-ingress-operator embedded-component no change + +cluster-kube-apiserver-operator embedded-component no change + +cluster-kube-controller-manager-operator embedded-component no change + +cluster-kube-scheduler-operator embedded-component no change + +cluster-network-operator embedded-component no change + +cluster-openshift-controller-manager-operator embedded-component no change + +cluster-policy-controller embedded-component no change + +csi-external-snapshotter embedded-component no change + +etcd embedded-component no change + +kubernetes embedded-component no change + +kubernetes-kube-storage-version-migrator embedded-component no change + +openshift-controller-manager embedded-component no change + +route-controller-manager embedded-component no change + +service-ca-operator embedded-component no change + +oc image-amd64 no change + +coredns image-amd64 no change + +csi-external-snapshotter image-amd64 no change + +router image-amd64 no change + +kube-rbac-proxy image-amd64 no change + +ovn-kubernetes image-amd64 no change + +kubernetes image-amd64 no change + +service-ca-operator image-amd64 no change + +oc image-arm64 no change + +coredns image-arm64 no change + +csi-external-snapshotter image-arm64 no change + +router image-arm64 no change + +kube-rbac-proxy image-arm64 no change + +ovn-kubernetes image-arm64 no change + +## Committing changes to changelog +[rebase-release-5.0-5.0.0-0.nightly-2026-05-04-160406_amd64-2026-05-04_arm64-2026-05-04 ecf9dd7b2] update changelog + 2 files changed, 35 insertions(+), 53 deletions(-) +# Updating microshift/go.mod +go mod edit -require github.com/openshift/cluster-policy-controller@bb429f5b2a7d77791110b06d8ec5c017183e3ab9 +go: downloading github.com/spf13/cobra v1.10.2 +go: downloading sigs.k8s.io/yaml v1.6.0 +go: downloading github.com/openshift/api v0.0.0-20260309155933-45fd88d185dd +go: downloading github.com/openshift/client-go v0.0.0-20260306160707-3935d929fc7d +go: downloading github.com/openshift/library-go v0.0.0-20260303171201-5d9eb6295ff6 +go: downloading github.com/stretchr/testify v1.11.1 +go: downloading github.com/spf13/pflag v1.0.10 +go: downloading gopkg.in/yaml.v3 v3.0.1 +go: downloading github.com/coreos/go-systemd v0.0.0-20190321100706-95778dfbb74e +go: downloading github.com/fsnotify/fsnotify v1.9.0 +go: downloading github.com/apparentlymart/go-cidr v1.1.0 +go: downloading go.etcd.io/etcd/client/pkg/v3 v3.6.8 +go: downloading github.com/evanphx/json-patch v4.12.0+incompatible +go: downloading go.etcd.io/etcd/client/v3 v3.6.8 +go: downloading github.com/vishvananda/netlink v1.3.1 +go: downloading github.com/squat/generic-device-plugin v0.0.0-20251019101956-043a51e18f31 +go: downloading github.com/openshift/build-machinery-go v0.0.0-20251023084048-5d77c1a5e5af +go: downloading sigs.k8s.io/kustomize/kyaml v0.20.1 +go: downloading github.com/go-kit/kit v0.9.0 +go: downloading github.com/coreos/go-systemd/v22 v22.7.0 +go: downloading k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2 +go: downloading github.com/openshift/cluster-policy-controller v0.0.0-20260420102459-bb429f5b2a7d +go: downloading sigs.k8s.io/kustomize/api v0.20.1 +go: downloading github.com/openshift/route-controller-manager v0.0.0-20260211095309-624742d93f3a +go: downloading github.com/miekg/dns v1.1.63 +go: downloading gopkg.in/yaml.v2 v2.4.0 +go: downloading golang.org/x/sys v0.42.0 +go: downloading github.com/gogo/protobuf v1.3.2 +go: downloading github.com/golang/snappy v0.0.4 +go: downloading github.com/openshift/kubernetes-kube-storage-version-migrator v0.0.3-0.20260304192652-72835e43c775 +go: downloading github.com/prometheus/client_model v0.6.2 +go: downloading github.com/google/go-cmp v0.7.0 +go: downloading github.com/prometheus/common v0.67.5 +go: downloading k8s.io/kube-openapi v0.0.0-20260304202019-5b3e3fdb0acf +go: downloading github.com/prometheus/prometheus v0.302.1 +go: downloading github.com/go-logr/logr v1.4.3 +go: downloading github.com/google/uuid v1.6.0 +go: downloading gopkg.in/evanphx/json-patch.v4 v4.13.0 +go: downloading go.yaml.in/yaml/v2 v2.4.4 +go: downloading go.yaml.in/yaml/v3 v3.0.4 +go: downloading github.com/inconshreveable/mousetrap v1.1.0 +go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc +go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 +go: downloading sigs.k8s.io/randfill v1.0.0 +go: downloading github.com/fxamacker/cbor/v2 v2.9.0 +go: downloading go.uber.org/zap v1.27.1 +go: downloading github.com/pkg/errors v0.9.1 +go: downloading github.com/coreos/go-semver v0.3.1 +go: downloading go.etcd.io/etcd/api/v3 v3.6.8 +go: downloading google.golang.org/grpc v1.79.3 +go: downloading gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c +go: downloading github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.74.0 +go: downloading github.com/vishvananda/netns v0.0.5 +go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.2 +go: downloading github.com/godbus/dbus/v5 v5.1.0 +go: downloading google.golang.org/protobuf v1.36.11 +go: downloading golang.org/x/term v0.40.0 +go: downloading github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de +go: downloading github.com/moby/term v0.5.0 +go: downloading github.com/go-kit/log v0.2.1 +go: downloading github.com/oklog/run v1.2.0 +go: downloading github.com/prometheus/client_golang v1.23.2 +go: downloading sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 +go: downloading github.com/go-logfmt/logfmt v0.5.1 +go: downloading github.com/go-stack/stack v1.8.1 +go: downloading github.com/google/gnostic-models v0.7.1 +go: downloading github.com/jonboulle/clockwork v0.5.0 +go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 +go: downloading golang.org/x/net v0.51.0 +go: downloading go.opentelemetry.io/otel/trace v1.42.0 +go: downloading github.com/MakeNowJust/heredoc v1.0.0 +go: downloading github.com/mitchellh/go-wordwrap v1.0.1 +go: downloading github.com/russross/blackfriday/v2 v2.1.0 +go: downloading go.opentelemetry.io/otel v1.42.0 +go: downloading golang.org/x/time v0.15.0 +go: downloading go.uber.org/goleak v1.3.0 +go: downloading github.com/blang/semver/v4 v4.0.0 +go: downloading github.com/google/cadvisor v0.53.0 +go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.42.0 +go: downloading go.opentelemetry.io/otel/metric v1.42.0 +go: downloading go.opentelemetry.io/otel/sdk v1.42.0 +go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.42.0 +go: downloading golang.org/x/tools v0.42.0 +go: downloading golang.org/x/sync v0.20.0 +go: downloading github.com/Microsoft/go-winio v0.6.2 +go: downloading github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 +go: downloading github.com/peterbourgon/diskv v2.0.1+incompatible +go: downloading golang.org/x/text v0.34.0 +go: downloading k8s.io/gengo/v2 v2.0.0-20250922181213-ec3ebc5fd46b +go: downloading gopkg.in/inf.v0 v0.9.1 +go: downloading github.com/prometheus/procfs v0.20.1 +go: downloading github.com/x448/float16 v0.8.4 +go: downloading go.uber.org/multierr v1.11.0 +go: downloading github.com/golang/protobuf v1.5.4 +go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0 +go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20260226221140-a57be14db171 +go: downloading github.com/kr/pretty v0.3.1 +go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171 +go: downloading github.com/go-openapi/jsonreference v0.21.5 +go: downloading github.com/go-openapi/swag v0.25.5 +go: downloading github.com/go-errors/errors v1.4.2 +go: downloading github.com/creack/pty v1.1.18 +go: downloading github.com/json-iterator/go v1.1.12 +go: downloading github.com/chai2010/gettext-go v1.0.2 +go: downloading github.com/openshift/onsi-ginkgo/v2 v2.6.1-0.20251120221002-696928a6a0d7 +go: downloading github.com/onsi/gomega v1.38.2 +go: downloading github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f +go: downloading github.com/beorn7/perks v1.0.1 +go: downloading github.com/cespare/xxhash/v2 v2.3.0 +go: downloading github.com/stretchr/objx v0.5.2 +go: downloading golang.org/x/oauth2 v0.36.0 +go: downloading github.com/pkg/profile v1.7.0 +go: downloading github.com/sirupsen/logrus v1.9.3 +go: downloading github.com/emicklei/go-restful/v3 v3.13.0 +go: downloading go.uber.org/atomic v1.11.0 +go: downloading golang.org/x/crypto v0.48.0 +go: downloading gopkg.in/natefinch/lumberjack.v2 v2.2.1 +go: downloading gopkg.in/go-jose/go-jose.v2 v2.6.3 +go: downloading go.etcd.io/etcd/server/v3 v3.6.5 +go: downloading sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.34.0 +go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 +go: downloading github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 +go: downloading github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f +go: downloading github.com/onsi/ginkgo v1.16.5 +go: downloading github.com/openshift/apiserver-library-go v0.0.0-20260303173613-cd3676268d31 +go: downloading github.com/google/cel-go v0.27.0 +go: downloading github.com/robfig/cron/v3 v3.0.1 +go: downloading github.com/robfig/cron v1.2.0 +go: downloading github.com/container-storage-interface/spec v1.9.0 +go: downloading github.com/opencontainers/selinux v1.13.0 +go: downloading github.com/libopenstorage/openstorage v1.0.0 +go: downloading github.com/go-logr/stdr v1.2.2 +go: downloading go.opentelemetry.io/proto/otlp v1.9.0 +go: downloading go.opentelemetry.io/otel/sdk/metric v1.42.0 +go: downloading github.com/opencontainers/cgroups v0.0.3 +go: downloading github.com/docker/go-units v0.5.0 +go: downloading github.com/moby/sys/userns v0.1.0 +go: downloading github.com/cyphar/filepath-securejoin v0.6.0 +go: downloading go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful v0.44.0 +go: downloading github.com/moby/sys/mountinfo v0.7.2 +go: downloading github.com/karrick/godirwalk v1.17.0 +go: downloading github.com/containerd/containerd/api v1.9.0 +go: downloading github.com/containerd/errdefs v1.0.0 +go: downloading github.com/containerd/errdefs/pkg v0.3.0 +go: downloading github.com/opencontainers/runtime-spec v1.2.1 +go: downloading github.com/containerd/typeurl/v2 v2.2.3 +go: downloading github.com/google/btree v1.1.3 +go: downloading golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated +go: downloading github.com/klauspost/compress v1.18.0 +go: downloading github.com/kylelemons/godebug v1.1.0 +go: downloading github.com/grafana/regexp v0.0.0-20240518133315-a468a5bfb3bc +go: downloading github.com/kr/text v0.2.0 +go: downloading github.com/rogpeppe/go-internal v1.14.1 +go: downloading github.com/go-logr/zapr v1.3.0 +go: downloading github.com/go-openapi/jsonpointer v0.22.5 +go: downloading github.com/go-openapi/testify/v2 v2.4.0 +go: downloading github.com/go-openapi/swag/cmdutils v0.25.5 +go: downloading github.com/go-openapi/swag/conv v0.25.5 +go: downloading github.com/go-openapi/swag/fileutils v0.25.5 +go: downloading github.com/go-openapi/swag/jsonname v0.25.5 +go: downloading github.com/go-openapi/swag/jsonutils v0.25.5 +go: downloading github.com/go-openapi/swag/loading v0.25.5 +go: downloading github.com/go-openapi/swag/mangling v0.25.5 +go: downloading github.com/go-openapi/swag/netutils v0.25.5 +go: downloading github.com/go-openapi/swag/stringutils v0.25.5 +go: downloading github.com/go-openapi/swag/typeutils v0.25.5 +go: downloading github.com/go-openapi/swag/yamlutils v0.25.5 +go: downloading github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 +go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd +go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee +go: downloading github.com/felixge/fgprof v0.9.4 +go: downloading github.com/NYTimes/gziphandler v1.1.1 +go: downloading github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 +go: downloading go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.67.0 +go: downloading github.com/coreos/go-oidc v2.3.0+incompatible +go: downloading github.com/felixge/httpsnoop v1.0.4 +go: downloading github.com/moby/spdystream v0.5.0 +go: downloading github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5 +go: downloading github.com/soheilhy/cmux v0.1.5 +go: downloading github.com/tmc/grpc-websocket-proxy v0.0.0-20220101234140-673ab2c3ae75 +go: downloading go.etcd.io/bbolt v1.4.3 +go: downloading go.etcd.io/etcd/pkg/v3 v3.6.5 +go: downloading github.com/distribution/reference v0.6.0 +go: downloading cel.dev/expr v0.25.1 +go: downloading github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826 +go: downloading go.opentelemetry.io/auto/sdk v1.2.1 +go: downloading github.com/cenkalti/backoff/v5 v5.0.3 +go: downloading github.com/mistifyio/go-zfs v2.1.2-0.20190413222219-f784269be439+incompatible +go: downloading github.com/JeffAshton/win_pdh v0.0.0-20161109143554-76bb4ee9f0ab +go: downloading github.com/armon/circbuf v0.0.0-20190214190532-5111143e8da2 +go: downloading github.com/Microsoft/hnslib v0.1.2 +go: downloading github.com/lithammer/dedent v1.1.0 +go: downloading go.opentelemetry.io/contrib/propagators/b3 v1.19.0 +go: downloading github.com/containerd/ttrpc v1.2.7 +go: downloading github.com/euank/go-kmsg-parser v2.0.0+incompatible +go: downloading github.com/sergi/go-diff v1.2.0 +go: downloading golang.org/x/tools/go/expect v0.1.1-deprecated +go: downloading github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.5 +go: downloading github.com/go-openapi/testify/enable/yaml/v2 v2.4.0 +go: downloading golang.org/x/mod v0.33.0 +go: downloading github.com/fatih/camelcase v1.0.0 +go: downloading github.com/google/pprof v0.0.0-20250403155104-27863c87afa6 +go: downloading github.com/pquerna/cachecontrol v0.1.0 +go: downloading github.com/dustin/go-humanize v1.0.1 +go: downloading go.etcd.io/raft/v3 v3.6.0 +go: downloading github.com/xiang90/probing v0.0.0-20221125231312-a49e3df8f510 +go: downloading github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 +go: downloading github.com/opencontainers/go-digest v1.0.0 +go: downloading github.com/Masterminds/semver/v3 v3.4.0 +go: downloading cyphar.com/go-pathrs v0.2.1 +go: downloading github.com/antlr4-go/antlr/v4 v4.13.1 +go: downloading github.com/docker/docker v28.2.2+incompatible +go: downloading github.com/docker/go-connections v0.5.0 +go: downloading github.com/xlab/treeprint v1.2.0 +go: downloading github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 +go: downloading github.com/opencontainers/image-spec v1.1.1 +go: downloading gonum.org/v1/gonum v0.16.0 +go: downloading github.com/containerd/log v0.1.0 +go: downloading github.com/go-ldap/ldap/v3 v3.4.11 +go: downloading github.com/golang-jwt/jwt/v5 v5.3.0 +go: downloading github.com/go-task/slim-sprig/v3 v3.0.0 +go: downloading github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.0 +go: downloading golang.org/x/exp v0.0.0-20260218203240-3dfff04db8fa +go: downloading github.com/Azure/go-ntlmssp v0.0.0-20221128193559-754e69321358 +go: downloading github.com/go-asn1-ber/asn1-ber v1.5.8-0.20250403174932-29230038a667 +go: downloading github.com/alexbrainman/sspi v0.0.0-20231016080023-1a75b4708caa +go: downloading github.com/jcmturner/gokrb5/v8 v8.4.4 +go: downloading github.com/jcmturner/gofork v1.7.6 +go: downloading github.com/hashicorp/go-uuid v1.0.3 +go: downloading github.com/jcmturner/dnsutils/v2 v2.0.0 +go: downloading github.com/jcmturner/goidentity/v6 v6.0.1 +go: downloading github.com/jcmturner/aescts/v2 v2.0.0 +go: downloading github.com/jcmturner/rpc/v2 v2.0.3 +go: downloading github.com/moby/docker-image-spec v1.3.1 +go mod edit -replace github.com/onsi/ginkgo/v2=github.com/openshift/onsi-ginkgo/v2@v2.6.1-0.20251120221002-696928a6a0d7 +Handling 'k8s.io/klog/v2' dep: cloning 'https://github.com/kubernetes/klog' @ 'v2.130.1' to /go/src/github.com/openshift/microshift/./deps/k8s.io/klog +Cloning into '/go/src/github.com/openshift/microshift/./deps/k8s.io/klog'... +Handling 'k8s.io/kubernetes' dep: copying /go/src/github.com/openshift/microshift/_output/staging/kubernetes -> /go/src/github.com/openshift/microshift/./deps/github.com/openshift/kubernetes +go mod edit -replace sigs.k8s.io/kube-storage-version-migrator=github.com/openshift/kubernetes-kube-storage-version-migrator@72835e43c7754356645e41031f3a99926b4d42e6 +Handling 'k8s.io/api' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/apiextensions-apiserver' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/apimachinery' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/apiserver' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/cli-runtime' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/client-go' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/cloud-provider' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/cluster-bootstrap' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/code-generator' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/component-base' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/component-helpers' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/controller-manager' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/cri-api' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/cri-client' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/csi-translation-lib' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/dynamic-resource-allocation' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/endpointslice' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/externaljwt' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/kms' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/kube-aggregator' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/kube-controller-manager' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/kube-proxy' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/kube-scheduler' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/kubectl' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/kubelet' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/metrics' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/mount-utils' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/pod-security-admission' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/sample-apiserver' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/sample-cli-plugin' dep: updating required version to '1.35.3' (for information purposes) +Handling 'k8s.io/sample-controller' dep: updating required version to '1.35.3' (for information purposes) +go mod edit -require github.com/openshift/route-controller-manager@624742d93f3a7885cf7f70985f1e23ff60da580d +go mod edit -require github.com/openshift/cluster-policy-controller@bb429f5b2a7d77791110b06d8ec5c017183e3ab9 +Running `gofmt -s -l -w` on 858 file(s). +./deps/github.com/openshift/kubernetes/staging/src/k8s.io/code-generator/third_party/forked/golang/reflect/type.go +./deps/github.com/openshift/kubernetes/staging/src/k8s.io/apimachinery/third_party/forked/golang/json/fields.go +./deps/github.com/openshift/kubernetes/staging/src/k8s.io/client-go/third_party/forked/golang/template/exec.go +./deps/github.com/openshift/kubernetes/staging/src/k8s.io/client-go/third_party/forked/golang/template/funcs.go +for p in scripts/auto-rebase/rebase_patches/0001-Fix-CSI-initialization-conflict.patch scripts/auto-rebase/rebase_patches/0002-disable-APIrequestcount-controller.patch scripts/auto-rebase/rebase_patches/0003-disable-clusterQuotaMapping-controller.patch scripts/auto-rebase/rebase_patches/0004-remove-config-informer-and-cpu-partitioning-admission-plugin.patch scripts/auto-rebase/rebase_patches/0005-remove-user-informer.patch scripts/auto-rebase/rebase_patches/0006-kcm-no-panic.patch scripts/auto-rebase/rebase_patches/0020-klog-component-names.patch scripts/auto-rebase/rebase_patches/0030-kube-controller-manager-command-context.patch; do \ + echo "Applying patch $p"; \ + git mailinfo /dev/null /dev/stderr 2<&1- < $p | git apply --reject || exit 1; \ +done +Applying patch scripts/auto-rebase/rebase_patches/0001-Fix-CSI-initialization-conflict.patch +Checking patch deps/github.com/openshift/kubernetes/pkg/volume/csi/csi_plugin.go... +Hunk #1 succeeded at 347 (offset 2 lines). +Applied patch deps/github.com/openshift/kubernetes/pkg/volume/csi/csi_plugin.go cleanly. +Applying patch scripts/auto-rebase/rebase_patches/0002-disable-APIrequestcount-controller.patch +Checking patch deps/github.com/openshift/kubernetes/openshift-kube-apiserver/openshiftkubeapiserver/patch.go... +Hunk #2 succeeded at 33 (offset 1 line). +Hunk #3 succeeded at 86 (offset 2 lines). +Applied patch deps/github.com/openshift/kubernetes/openshift-kube-apiserver/openshiftkubeapiserver/patch.go cleanly. +Applying patch scripts/auto-rebase/rebase_patches/0003-disable-clusterQuotaMapping-controller.patch +Checking patch deps/github.com/openshift/kubernetes/openshift-kube-apiserver/openshiftkubeapiserver/patch.go... +Hunk #2 succeeded at 26 (offset 1 line). +Hunk #3 succeeded at 50 (offset 1 line). +Hunk #4 succeeded at 109 (offset 2 lines). +Hunk #5 succeeded at 127 (offset 2 lines). +Hunk #6 succeeded at 141 (offset 2 lines). +Hunk #7 succeeded at 157 (offset 2 lines). +Applied patch deps/github.com/openshift/kubernetes/openshift-kube-apiserver/openshiftkubeapiserver/patch.go cleanly. +Applying patch scripts/auto-rebase/rebase_patches/0004-remove-config-informer-and-cpu-partitioning-admission-plugin.patch +Checking patch deps/github.com/openshift/kubernetes/openshift-kube-apiserver/openshiftkubeapiserver/patch.go... +Checking patch deps/github.com/openshift/kubernetes/openshift-kube-apiserver/admission/admissionenablement/register.go... +Applied patch deps/github.com/openshift/kubernetes/openshift-kube-apiserver/openshiftkubeapiserver/patch.go cleanly. +Applied patch deps/github.com/openshift/kubernetes/openshift-kube-apiserver/admission/admissionenablement/register.go cleanly. +Applying patch scripts/auto-rebase/rebase_patches/0005-remove-user-informer.patch +Checking patch deps/github.com/openshift/kubernetes/openshift-kube-apiserver/openshiftkubeapiserver/patch.go... +Applied patch deps/github.com/openshift/kubernetes/openshift-kube-apiserver/openshiftkubeapiserver/patch.go cleanly. +Applying patch scripts/auto-rebase/rebase_patches/0006-kcm-no-panic.patch +Checking patch deps/github.com/openshift/kubernetes/cmd/kube-controller-manager/app/options/options.go... +Hunk #1 succeeded at 48 (offset 2 lines). +Hunk #2 succeeded at 319 (offset 13 lines). +Applied patch deps/github.com/openshift/kubernetes/cmd/kube-controller-manager/app/options/options.go cleanly. +Applying patch scripts/auto-rebase/rebase_patches/0020-klog-component-names.patch +Checking patch deps/k8s.io/klog/goroutine_labels.go... +Checking patch deps/k8s.io/klog/internal/buffer/buffer.go... +Hunk #1 succeeded at 144 (offset -5 lines). +Checking patch deps/k8s.io/klog/internal/buffer/goroutine_labels.go... +Applied patch deps/k8s.io/klog/goroutine_labels.go cleanly. +Applied patch deps/k8s.io/klog/internal/buffer/buffer.go cleanly. +Applied patch deps/k8s.io/klog/internal/buffer/goroutine_labels.go cleanly. +Applying patch scripts/auto-rebase/rebase_patches/0030-kube-controller-manager-command-context.patch +Checking patch deps/github.com/openshift/kubernetes/cmd/kube-controller-manager/app/controllermanager.go... +Hunk #2 succeeded at 156 (offset -2 lines). +Applied patch deps/github.com/openshift/kubernetes/cmd/kube-controller-manager/app/controllermanager.go cleanly. +# Updating etcd/go.mod +go mod edit -require github.com/openshift/cluster-policy-controller@bb429f5b2a7d77791110b06d8ec5c017183e3ab9 +go: downloading github.com/openshift/api v0.0.0-20260424174501-4f63a40a2970 +go: downloading github.com/openshift/etcd/api/v3 v3.5.0-alpha.0.0.20260312150232-d8d67b8ce849 +go: downloading github.com/openshift/etcd/server/v3 v3.5.0-alpha.0.0.20260312150232-d8d67b8ce849 +go: downloading k8s.io/klog/v2 v2.140.0 +go: downloading github.com/openshift/etcd/client/pkg/v3 v3.0.0-20260312150232-d8d67b8ce849 +go: downloading github.com/openshift/etcd/client/v3 v3.5.0-alpha.0.0.20260312150232-d8d67b8ce849 +go: downloading github.com/openshift/etcd/pkg/v3 v3.5.0-alpha.0.0.20260312150232-d8d67b8ce849 +go: downloading github.com/cockroachdb/datadriven v1.0.2 +skipping modulepath github.com/openshift/microshift: no or unknown command [] +go mod edit -replace github.com/onsi/ginkgo/v2=github.com/openshift/onsi-ginkgo/v2@v2.6.1-0.20251120221002-696928a6a0d7 +go mod edit -replace go.etcd.io/etcd/api/v3=github.com/openshift/etcd/api/v3@d8d67b8ce849f816d6d23c904098336632e2348f +go mod edit -replace go.etcd.io/etcd/client/pkg/v3=github.com/openshift/etcd/client/pkg/v3@d8d67b8ce849f816d6d23c904098336632e2348f +go mod edit -replace go.etcd.io/etcd/client/v3=github.com/openshift/etcd/client/v3@d8d67b8ce849f816d6d23c904098336632e2348f +go mod edit -replace go.etcd.io/etcd/pkg/v3=github.com/openshift/etcd/pkg/v3@d8d67b8ce849f816d6d23c904098336632e2348f +go mod edit -replace go.etcd.io/etcd/server/v3=github.com/openshift/etcd/server/v3@d8d67b8ce849f816d6d23c904098336632e2348f +skipping modulepath k8s.io/api: no or unknown command [] +skipping modulepath k8s.io/apiextensions-apiserver: no or unknown command [] +skipping modulepath k8s.io/apimachinery: no or unknown command [] +skipping modulepath k8s.io/apiserver: no or unknown command [] +skipping modulepath k8s.io/cli-runtime: no or unknown command [] +skipping modulepath k8s.io/client-go: no or unknown command [] +skipping modulepath k8s.io/cloud-provider: no or unknown command [] +skipping modulepath k8s.io/cluster-bootstrap: no or unknown command [] +skipping modulepath k8s.io/code-generator: no or unknown command [] +skipping modulepath k8s.io/component-base: no or unknown command [] +skipping modulepath k8s.io/component-helpers: no or unknown command [] +skipping modulepath k8s.io/controller-manager: no or unknown command [] +skipping modulepath k8s.io/cri-api: no or unknown command [] +skipping modulepath k8s.io/cri-client: no or unknown command [] +skipping modulepath k8s.io/csi-translation-lib: no or unknown command [] +skipping modulepath k8s.io/dynamic-resource-allocation: no or unknown command [] +skipping modulepath k8s.io/endpointslice: no or unknown command [] +skipping modulepath k8s.io/externaljwt: no or unknown command [] +skipping modulepath k8s.io/kms: no or unknown command [] +skipping modulepath k8s.io/kube-aggregator: no or unknown command [] +skipping modulepath k8s.io/kube-controller-manager: no or unknown command [] +skipping modulepath k8s.io/kube-proxy: no or unknown command [] +skipping modulepath k8s.io/kube-scheduler: no or unknown command [] +skipping modulepath k8s.io/kubectl: no or unknown command [] +skipping modulepath k8s.io/kubelet: no or unknown command [] +skipping modulepath k8s.io/legacy-cloud-providers: no or unknown command [] +skipping modulepath k8s.io/metrics: no or unknown command [] +skipping modulepath k8s.io/mount-utils: no or unknown command [] +skipping modulepath k8s.io/pod-security-admission: no or unknown command [] +skipping modulepath k8s.io/sample-apiserver: no or unknown command [] +skipping modulepath k8s.io/sample-cli-plugin: no or unknown command [] +skipping modulepath k8s.io/sample-controller: no or unknown command [] +go mod edit -require github.com/openshift/route-controller-manager@624742d93f3a7885cf7f70985f1e23ff60da580d +go mod edit -require github.com/openshift/cluster-policy-controller@bb429f5b2a7d77791110b06d8ec5c017183e3ab9 +Running `gofmt -s -l -w` on 4 file(s). +## Updating microshift/vendor directory +/go/src/github.com/openshift/microshift /go/src/github.com/openshift/microshift +go mod vendor +/go/src/github.com/openshift/microshift +## Updating etcd/vendor directory +/go/src/github.com/openshift/microshift/etcd /go/src/github.com/openshift/microshift +go mod vendor +/go/src/github.com/openshift/microshift +Rebasing release_*.json +## Committing changes to pkg/release +[rebase-release-5.0-5.0.0-0.nightly-2026-05-04-160406_amd64-2026-05-04_arm64-2026-05-04 f2acea0d0] update component images + 1 file changed, 1 insertion(+), 1 deletion(-) +Copying manifests +2026-05-05 04:15:57,326 INFO Clearing directory assets/components/openshift-dns/dns/ +2026-05-05 04:15:57,327 DEBUG Copying assets/components/openshift-dns/dns/cluster-role-binding.yaml <- _output/staging/cluster-dns-operator/pkg/manifests/assets/dns/cluster-role-binding.yaml +2026-05-05 04:15:57,328 DEBUG Copying assets/components/openshift-dns/dns/cluster-role.yaml <- _output/staging/cluster-dns-operator/pkg/manifests/assets/dns/cluster-role.yaml +2026-05-05 04:15:57,328 INFO Restoring assets/components/openshift-dns/dns/configmap.yaml +2026-05-05 04:15:57,328 DEBUG Executing 'git restore assets/components/openshift-dns/dns/configmap.yaml' +2026-05-05 04:15:57,368 DEBUG Copying assets/components/openshift-dns/dns/daemonset.yaml <- _output/staging/cluster-dns-operator/pkg/manifests/assets/dns/daemonset.yaml +2026-05-05 04:15:57,369 DEBUG Copying assets/components/openshift-dns/dns/namespace.yaml <- _output/staging/cluster-dns-operator/pkg/manifests/assets/dns/namespace.yaml +2026-05-05 04:15:57,370 DEBUG Copying assets/components/openshift-dns/dns/service-account.yaml <- _output/staging/cluster-dns-operator/pkg/manifests/assets/dns/service-account.yaml +2026-05-05 04:15:57,371 DEBUG Copying assets/components/openshift-dns/dns/service.yaml <- _output/staging/cluster-dns-operator/pkg/manifests/assets/dns/service.yaml +2026-05-05 04:15:57,372 WARNING Ignoring components/openshift-dns/dns/hosts-configmap-rolebinding.yaml because RBAC rules for hosts customization +2026-05-05 04:15:57,372 WARNING Ignoring components/openshift-dns/dns/hosts-configmap-role.yaml because RBAC rules for hosts customization +2026-05-05 04:15:57,372 INFO Clearing directory assets/components/openshift-dns/node-resolver +2026-05-05 04:15:57,373 WARNING Ignoring components/openshift-dns/node-resolver/daemonset.yaml because it's created by processing daemonset.yaml.tmpl +2026-05-05 04:15:57,373 INFO Restoring assets/components/openshift-dns/node-resolver/daemonset.yaml.tmpl +2026-05-05 04:15:57,373 DEBUG Executing 'git restore assets/components/openshift-dns/node-resolver/daemonset.yaml.tmpl' +2026-05-05 04:15:57,413 DEBUG Copying assets/components/openshift-dns/node-resolver/service-account.yaml <- _output/staging/cluster-dns-operator/pkg/manifests/assets/node-resolver/service-account.yaml +2026-05-05 04:15:57,414 DEBUG Copying assets/components/openshift-dns/node-resolver/update-node-resolver.sh <- _output/staging/cluster-dns-operator/pkg/manifests/assets/node-resolver/update-node-resolver.sh +2026-05-05 04:15:57,415 INFO Clearing directory assets/components/openshift-router/ +2026-05-05 04:15:57,416 DEBUG Copying assets/components/openshift-router/cluster-role-binding.yaml <- _output/staging/cluster-ingress-operator/pkg/manifests/assets/router/cluster-role-binding.yaml +2026-05-05 04:15:57,417 DEBUG Copying assets/components/openshift-router/cluster-role.yaml <- _output/staging/cluster-ingress-operator/pkg/manifests/assets/router/cluster-role.yaml +2026-05-05 04:15:57,418 INFO Restoring assets/components/openshift-router/cluster-role-system-router.yaml +2026-05-05 04:15:57,418 DEBUG Executing 'git restore assets/components/openshift-router/cluster-role-system-router.yaml' +2026-05-05 04:15:57,458 INFO Restoring assets/components/openshift-router/configmap.yaml +2026-05-05 04:15:57,458 DEBUG Executing 'git restore assets/components/openshift-router/configmap.yaml' +2026-05-05 04:15:57,497 INFO Restoring assets/components/openshift-router/configmap-accesslog.yaml +2026-05-05 04:15:57,498 DEBUG Executing 'git restore assets/components/openshift-router/configmap-accesslog.yaml' +2026-05-05 04:15:57,536 DEBUG Copying assets/components/openshift-router/deployment.yaml <- _output/staging/cluster-ingress-operator/pkg/manifests/assets/router/deployment.yaml +2026-05-05 04:15:57,537 DEBUG Copying assets/components/openshift-router/namespace.yaml <- _output/staging/cluster-ingress-operator/pkg/manifests/assets/router/namespace.yaml +2026-05-05 04:15:57,538 DEBUG Copying assets/components/openshift-router/service-account.yaml <- _output/staging/cluster-ingress-operator/pkg/manifests/assets/router/service-account.yaml +2026-05-05 04:15:57,539 DEBUG Copying assets/components/openshift-router/service-internal.yaml <- _output/staging/cluster-ingress-operator/pkg/manifests/assets/router/service-internal.yaml +2026-05-05 04:15:57,540 DEBUG Copying assets/components/openshift-router/service-cloud.yaml <- _output/staging/cluster-ingress-operator/pkg/manifests/assets/router/service-cloud.yaml +2026-05-05 04:15:57,541 INFO Restoring assets/components/openshift-router/serving-certificate.yaml +2026-05-05 04:15:57,541 DEBUG Executing 'git restore assets/components/openshift-router/serving-certificate.yaml' +2026-05-05 04:15:57,580 INFO Restoring assets/components/openshift-router/cluster-role-aggregate-edit-route.yaml +2026-05-05 04:15:57,581 DEBUG Executing 'git restore assets/components/openshift-router/cluster-role-aggregate-edit-route.yaml' +2026-05-05 04:15:57,621 INFO Restoring assets/components/openshift-router/cluster-role-aggregate-admin-route.yaml +2026-05-05 04:15:57,621 DEBUG Executing 'git restore assets/components/openshift-router/cluster-role-aggregate-admin-route.yaml' +2026-05-05 04:15:57,662 WARNING Ignoring components/openshift-router/ingress-class.yaml because gets generated during image rebase +2026-05-05 04:15:57,663 WARNING Ignoring components/ovn/ because it's not covered by rebase script yet +2026-05-05 04:15:57,663 INFO Clearing directory assets/components/service-ca/ +2026-05-05 04:15:57,664 DEBUG Copying assets/components/service-ca/clusterrole.yaml <- _output/staging/service-ca-operator/bindata/assets/clusterrole.yaml +2026-05-05 04:15:57,664 DEBUG Copying assets/components/service-ca/clusterrolebinding.yaml <- _output/staging/service-ca-operator/bindata/assets/clusterrolebinding.yaml +2026-05-05 04:15:57,664 DEBUG Copying assets/components/service-ca/deployment.yaml <- _output/staging/service-ca-operator/bindata/assets/deployment.yaml +2026-05-05 04:15:57,665 DEBUG Copying assets/components/service-ca/ns.yaml <- _output/staging/service-ca-operator/bindata/assets/ns.yaml +2026-05-05 04:15:57,666 DEBUG Copying assets/components/service-ca/role.yaml <- _output/staging/service-ca-operator/bindata/assets/role.yaml +2026-05-05 04:15:57,666 DEBUG Copying assets/components/service-ca/rolebinding.yaml <- _output/staging/service-ca-operator/bindata/assets/rolebinding.yaml +2026-05-05 04:15:57,667 DEBUG Copying assets/components/service-ca/sa.yaml <- _output/staging/service-ca-operator/bindata/assets/sa.yaml +2026-05-05 04:15:57,668 DEBUG Copying assets/components/service-ca/signing-cabundle.yaml <- _output/staging/service-ca-operator/bindata/assets/signing-cabundle.yaml +2026-05-05 04:15:57,668 DEBUG Copying assets/components/service-ca/signing-secret.yaml <- _output/staging/service-ca-operator/bindata/assets/signing-secret.yaml +2026-05-05 04:15:57,669 INFO Not clearing dir components/csi-snapshot-controller/ +2026-05-05 04:15:57,669 DEBUG Copying assets/components/csi-snapshot-controller/csi_controller_deployment.yaml <- _output/staging/cluster-csi-snapshot-controller-operator/assets/csi_controller_deployment.yaml +2026-05-05 04:15:57,670 DEBUG Copying assets/components/csi-snapshot-controller/serviceaccount.yaml <- _output/staging/cluster-csi-snapshot-controller-operator/assets/serviceaccount.yaml +2026-05-05 04:15:57,670 DEBUG Copying assets/components/csi-snapshot-controller/volumesnapshotclasses.yaml <- _output/staging/cluster-csi-snapshot-controller-operator/assets/volumesnapshotclasses.yaml +2026-05-05 04:15:57,671 DEBUG Copying assets/components/csi-snapshot-controller/volumesnapshotcontents.yaml <- _output/staging/cluster-csi-snapshot-controller-operator/assets/volumesnapshotcontents.yaml +2026-05-05 04:15:57,671 DEBUG Copying assets/components/csi-snapshot-controller/volumesnapshots.yaml <- _output/staging/cluster-csi-snapshot-controller-operator/assets/volumesnapshots.yaml +2026-05-05 04:15:57,672 DEBUG Copying assets/components/csi-snapshot-controller/05_operand_rbac.yaml <- _output/staging/cluster-csi-snapshot-controller-operator/assets/../manifests/05_operand_rbac.yaml +2026-05-05 04:15:57,673 WARNING Ignoring components/csi-snapshot-controller/clusterrole.yaml because extracted automatically from 05_operand_rbac.yaml +2026-05-05 04:15:57,673 WARNING Ignoring components/csi-snapshot-controller/clusterrolebinding.yaml because extracted automatically from 05_operand_rbac.yaml +2026-05-05 04:15:57,673 WARNING Ignoring components/csi-snapshot-controller/role.yaml because extracted automatically from 05_operand_rbac.yaml +2026-05-05 04:15:57,673 WARNING Ignoring components/csi-snapshot-controller/rolebinding.yaml because extracted automatically from 05_operand_rbac.yaml +2026-05-05 04:15:57,673 INFO Clearing directory assets/controllers/cluster-policy-controller/ +2026-05-05 04:15:57,674 DEBUG Copying assets/controllers/cluster-policy-controller/namespace-security-allocation-controller-clusterrole.yaml <- _output/staging/cluster-kube-controller-manager-operator/bindata/assets/kube-controller-manager/namespace-security-allocation-controller-clusterrole.yaml +2026-05-05 04:15:57,675 DEBUG Copying assets/controllers/cluster-policy-controller/namespace-security-allocation-controller-clusterrolebinding.yaml <- _output/staging/cluster-kube-controller-manager-operator/bindata/assets/kube-controller-manager/namespace-security-allocation-controller-clusterrolebinding.yaml +2026-05-05 04:15:57,675 DEBUG Copying assets/controllers/cluster-policy-controller/podsecurity-admission-label-syncer-controller-clusterrole.yaml <- _output/staging/cluster-kube-controller-manager-operator/bindata/assets/kube-controller-manager/podsecurity-admission-label-syncer-controller-clusterrole.yaml +2026-05-05 04:15:57,676 DEBUG Copying assets/controllers/cluster-policy-controller/podsecurity-admission-label-syncer-controller-clusterrolebinding.yaml <- _output/staging/cluster-kube-controller-manager-operator/bindata/assets/kube-controller-manager/podsecurity-admission-label-syncer-controller-clusterrolebinding.yaml +2026-05-05 04:15:57,677 DEBUG Copying assets/controllers/cluster-policy-controller/podsecurity-admission-label-privileged-namespaces-syncer-controller-clusterrole.yaml <- _output/staging/cluster-kube-controller-manager-operator/bindata/assets/kube-controller-manager/podsecurity-admission-label-privileged-namespaces-syncer-controller-clusterrole.yaml +2026-05-05 04:15:57,678 DEBUG Copying assets/controllers/cluster-policy-controller/podsecurity-admission-label-privileged-namespaces-syncer-controller-clusterrolebinding.yaml <- _output/staging/cluster-kube-controller-manager-operator/bindata/assets/kube-controller-manager/podsecurity-admission-label-privileged-namespaces-syncer-controller-clusterrolebinding.yaml +2026-05-05 04:15:57,678 INFO Clearing directory assets/controllers/kube-apiserver/ +2026-05-05 04:15:57,679 DEBUG Copying assets/controllers/kube-apiserver/config-overrides.yaml <- _output/staging/cluster-kube-apiserver-operator/bindata/assets/config/config-overrides.yaml +2026-05-05 04:15:57,679 DEBUG Copying assets/controllers/kube-apiserver/defaultconfig.yaml <- _output/staging/cluster-kube-apiserver-operator/bindata/assets/config/defaultconfig.yaml +2026-05-05 04:15:57,679 INFO Clearing directory assets/controllers/kube-controller-manager/ +2026-05-05 04:15:57,680 DEBUG Copying assets/controllers/kube-controller-manager/defaultconfig.yaml <- _output/staging/cluster-kube-controller-manager-operator/bindata/assets/kube-controller-manager/../config/defaultconfig.yaml +2026-05-05 04:15:57,680 DEBUG Copying assets/controllers/kube-controller-manager/csr_approver_clusterrole.yaml <- _output/staging/cluster-kube-controller-manager-operator/bindata/assets/kube-controller-manager/csr_approver_clusterrole.yaml +2026-05-05 04:15:57,681 DEBUG Copying assets/controllers/kube-controller-manager/csr_approver_clusterrolebinding.yaml <- _output/staging/cluster-kube-controller-manager-operator/bindata/assets/kube-controller-manager/csr_approver_clusterrolebinding.yaml +2026-05-05 04:15:57,682 DEBUG Copying assets/controllers/kube-controller-manager/namespace-openshift-kube-controller-manager.yaml <- _output/staging/cluster-kube-controller-manager-operator/bindata/assets/kube-controller-manager/ns.yaml +2026-05-05 04:15:57,683 INFO Clearing directory assets/controllers/openshift-default-scc-manager/ +2026-05-05 04:15:57,684 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_cr-scc-anyuid.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_cr-scc-anyuid.yaml +2026-05-05 04:15:57,684 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_cr-scc-hostaccess.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_cr-scc-hostaccess.yaml +2026-05-05 04:15:57,685 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_cr-scc-hostmount-anyuid.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_cr-scc-hostmount-anyuid.yaml +2026-05-05 04:15:57,686 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_cr-scc-hostnetwork-v2.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_cr-scc-hostnetwork-v2.yaml +2026-05-05 04:15:57,687 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_cr-scc-hostnetwork.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_cr-scc-hostnetwork.yaml +2026-05-05 04:15:57,688 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_cr-scc-nonroot-v2.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_cr-scc-nonroot-v2.yaml +2026-05-05 04:15:57,688 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_cr-scc-nonroot.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_cr-scc-nonroot.yaml +2026-05-05 04:15:57,689 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_cr-scc-privileged.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_cr-scc-privileged.yaml +2026-05-05 04:15:57,690 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_cr-scc-restricted-v2.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_cr-scc-restricted-v2.yaml +2026-05-05 04:15:57,691 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_cr-scc-restricted-v3.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_cr-scc-restricted-v3.yaml +2026-05-05 04:15:57,692 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_cr-scc-restricted.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_cr-scc-restricted.yaml +2026-05-05 04:15:57,693 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_crb-systemauthenticated-scc-restricted-v2.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_crb-systemauthenticated-scc-restricted-v2.yaml +2026-05-05 04:15:57,693 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_crb-systemauthenticated-scc-restricted-v3.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_crb-systemauthenticated-scc-restricted-v3.yaml +2026-05-05 04:15:57,694 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_scc-anyuid.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_scc-anyuid.yaml +2026-05-05 04:15:57,695 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_scc-hostaccess.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_scc-hostaccess.yaml +2026-05-05 04:15:57,696 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_scc-hostmount-anyuid.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_scc-hostmount-anyuid.yaml +2026-05-05 04:15:57,696 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_scc-hostnetwork-v2.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_scc-hostnetwork-v2.yaml +2026-05-05 04:15:57,697 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_scc-hostnetwork.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_scc-hostnetwork.yaml +2026-05-05 04:15:57,698 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_scc-nonroot-v2.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_scc-nonroot-v2.yaml +2026-05-05 04:15:57,698 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_scc-nonroot.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_scc-nonroot.yaml +2026-05-05 04:15:57,699 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_scc-privileged.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_scc-privileged.yaml +2026-05-05 04:15:57,700 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_scc-restricted-v2.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_scc-restricted-v2.yaml +2026-05-05 04:15:57,701 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_scc-restricted-v3.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_scc-restricted-v3.yaml +2026-05-05 04:15:57,701 DEBUG Copying assets/controllers/openshift-default-scc-manager/0000_20_kube-apiserver-operator_00_scc-restricted.yaml <- _output/staging/release-manifests/0000_20_kube-apiserver-operator_00_scc-restricted.yaml +2026-05-05 04:15:57,702 INFO Clearing directory assets/controllers/route-controller-manager/ +2026-05-05 04:15:57,703 DEBUG Copying assets/controllers/route-controller-manager/ns.yaml <- _output/staging/cluster-openshift-controller-manager-operator/bindata/assets/openshift-controller-manager/ns.yaml +2026-05-05 04:15:57,704 DEBUG Copying assets/controllers/route-controller-manager/sa.yaml <- _output/staging/cluster-openshift-controller-manager-operator/bindata/assets/openshift-controller-manager/sa.yaml +2026-05-05 04:15:57,704 DEBUG Copying assets/controllers/route-controller-manager/route-controller-manager-clusterrole.yaml <- _output/staging/cluster-openshift-controller-manager-operator/bindata/assets/openshift-controller-manager/route-controller-manager-clusterrole.yaml +2026-05-05 04:15:57,705 DEBUG Copying assets/controllers/route-controller-manager/route-controller-manager-clusterrolebinding.yaml <- _output/staging/cluster-openshift-controller-manager-operator/bindata/assets/openshift-controller-manager/route-controller-manager-clusterrolebinding.yaml +2026-05-05 04:15:57,705 DEBUG Copying assets/controllers/route-controller-manager/informer-clusterrolebinding.yaml <- _output/staging/cluster-openshift-controller-manager-operator/bindata/assets/openshift-controller-manager/informer-clusterrolebinding.yaml +2026-05-05 04:15:57,706 DEBUG Copying assets/controllers/route-controller-manager/informer-clusterrole.yaml <- _output/staging/cluster-openshift-controller-manager-operator/bindata/assets/openshift-controller-manager/informer-clusterrole.yaml +2026-05-05 04:15:57,706 DEBUG Copying assets/controllers/route-controller-manager/route-controller-manager-ingress-to-route-controller-clusterrolebinding.yaml <- _output/staging/cluster-openshift-controller-manager-operator/bindata/assets/openshift-controller-manager/route-controller-manager-ingress-to-route-controller-clusterrolebinding.yaml +2026-05-05 04:15:57,707 DEBUG Copying assets/controllers/route-controller-manager/route-controller-manager-ingress-to-route-controller-clusterrole.yaml <- _output/staging/cluster-openshift-controller-manager-operator/bindata/assets/openshift-controller-manager/route-controller-manager-ingress-to-route-controller-clusterrole.yaml +2026-05-05 04:15:57,708 DEBUG Copying assets/controllers/route-controller-manager/route-controller-manager-ns.yaml <- _output/staging/cluster-openshift-controller-manager-operator/bindata/assets/openshift-controller-manager/route-controller-manager-ns.yaml +2026-05-05 04:15:57,708 DEBUG Copying assets/controllers/route-controller-manager/route-controller-manager-sa.yaml <- _output/staging/cluster-openshift-controller-manager-operator/bindata/assets/openshift-controller-manager/route-controller-manager-sa.yaml +2026-05-05 04:15:57,709 DEBUG Copying assets/controllers/route-controller-manager/route-controller-manager-separate-sa-rolebinding.yaml <- _output/staging/cluster-openshift-controller-manager-operator/bindata/assets/openshift-controller-manager/route-controller-manager-separate-sa-rolebinding.yaml +2026-05-05 04:15:57,710 DEBUG Copying assets/controllers/route-controller-manager/route-controller-manager-separate-sa-role.yaml <- _output/staging/cluster-openshift-controller-manager-operator/bindata/assets/openshift-controller-manager/route-controller-manager-separate-sa-role.yaml +2026-05-05 04:15:57,711 DEBUG Copying assets/controllers/route-controller-manager/route-controller-manager-tokenreview-clusterrolebinding.yaml <- _output/staging/cluster-openshift-controller-manager-operator/bindata/assets/openshift-controller-manager/route-controller-manager-tokenreview-clusterrolebinding.yaml +2026-05-05 04:15:57,712 DEBUG Copying assets/controllers/route-controller-manager/route-controller-manager-tokenreview-clusterrole.yaml <- _output/staging/cluster-openshift-controller-manager-operator/bindata/assets/openshift-controller-manager/route-controller-manager-tokenreview-clusterrole.yaml +2026-05-05 04:15:57,713 INFO Restoring assets/controllers/route-controller-manager/route-controller-manager-authentication-reader-rolebinding.yaml +2026-05-05 04:15:57,713 DEBUG Executing 'git restore assets/controllers/route-controller-manager/route-controller-manager-authentication-reader-rolebinding.yaml' +2026-05-05 04:15:57,753 INFO Not clearing dir core/ +2026-05-05 04:15:57,753 DEBUG Copying assets/core/0000_50_cluster-openshift-controller-manager_00_namespace.yaml <- _output/staging/cluster-openshift-controller-manager-operator/bindata/assets/openshift-controller-manager/ns.yaml +2026-05-05 04:15:57,753 DEBUG Copying assets/core/namespace-openshift-infra.yaml <- _output/staging/cluster-kube-controller-manager-operator/bindata/assets/kube-controller-manager/namespace-openshift-infra.yaml +2026-05-05 04:15:57,754 WARNING Ignoring core/priority-class-openshift-user-critical.yaml because it's a priority class needed for oc debug node command - not available in any repo that rebase is using +2026-05-05 04:15:57,754 WARNING Ignoring core/securityv1-local-apiservice.yaml because it's a local API service for security API group, needed if OpenShift API server is not present +2026-05-05 04:15:57,754 DEBUG Copying assets/core/kubelet.yaml <- _output/staging/machine-config-operator/templates/master/01-master-kubelet/_base/files/kubelet.yaml +2026-05-05 04:15:57,755 WARNING Ignoring core/kubelet-client-ca.yaml because it's a template for ConfigMap processed during runtime +2026-05-05 04:15:57,755 INFO Clearing directory assets/crd/ +2026-05-05 04:15:57,756 DEBUG Copying assets/crd/0000_03_config-operator_01_securitycontextconstraints.crd.yaml <- _output/staging/release-manifests/0000_03_config-operator_01_securitycontextconstraints.crd.yaml +2026-05-05 04:15:57,757 DEBUG Copying assets/crd/0000_03_config-operator_02_rangeallocations.crd.yaml <- _output/staging/release-manifests/0000_03_config-operator_02_rangeallocations.crd.yaml +2026-05-05 04:15:57,758 DEBUG Copying assets/crd/storage_version_migration.crd.yaml <- _output/staging/release-manifests/0000_50_cluster-kube-storage-version-migrator-operator_01_storage_migration_crd.yaml +2026-05-05 04:15:57,758 DEBUG Copying assets/crd/route.crd.yaml <- _output/staging/api/route/v1/zz_generated.crd-manifests/routes.crd.yaml +2026-05-05 04:15:57,759 WARNING Ignoring release/ because it contains files generated during rebase procedure +2026-05-05 04:15:57,759 INFO Not clearing dir version/ +2026-05-05 04:15:57,759 WARNING Ignoring version/microshift-version.yaml because it's a template for ConfigMap processed during runtime +2026-05-05 04:15:57,759 WARNING Ignoring embed.go because it's a MicroShift specific Go file that embeds into a binary +2026-05-05 04:15:57,759 INFO Clearing directory assets/optional/operator-lifecycle-manager/ +2026-05-05 04:15:57,760 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_00-catalogsources.crd.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_00-catalogsources.crd.yaml +2026-05-05 04:15:57,760 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_00-clusterserviceversions.crd.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_00-clusterserviceversions.crd.yaml +2026-05-05 04:15:57,764 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_00-installplans.crd.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_00-installplans.crd.yaml +2026-05-05 04:15:57,765 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_00-namespace.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_00-namespace.yaml +2026-05-05 04:15:57,766 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_00-olmconfigs.crd.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_00-olmconfigs.crd.yaml +2026-05-05 04:15:57,767 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_00-operatorconditions.crd.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_00-operatorconditions.crd.yaml +2026-05-05 04:15:57,768 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_00-operatorgroups.crd.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_00-operatorgroups.crd.yaml +2026-05-05 04:15:57,769 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_00-operators.crd.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_00-operators.crd.yaml +2026-05-05 04:15:57,770 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_00-packageserver.pdb.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_00-packageserver.pdb.yaml +2026-05-05 04:15:57,770 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_00-subscriptions.crd.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_00-subscriptions.crd.yaml +2026-05-05 04:15:57,772 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_01-networkpolicies.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_01-networkpolicies.yaml +2026-05-05 04:15:57,773 INFO Restoring assets/optional/operator-lifecycle-manager/0000_50_olm_01-marketplace-networkpolicy.yaml +2026-05-05 04:15:57,773 DEBUG Executing 'git restore assets/optional/operator-lifecycle-manager/0000_50_olm_01-marketplace-networkpolicy.yaml' +2026-05-05 04:15:57,813 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_02-olm-operator.serviceaccount.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_02-olm-operator.serviceaccount.yaml +2026-05-05 04:15:57,814 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_03-olmconfig.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_03-olmconfig.yaml +2026-05-05 04:15:57,815 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_03-services.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_03-services.yaml +2026-05-05 04:15:57,816 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_07-olm-operator.deployment.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_07-olm-operator.deployment.yaml +2026-05-05 04:15:57,817 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_08-catalog-operator.deployment.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_08-catalog-operator.deployment.yaml +2026-05-05 04:15:57,818 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_09-aggregated.clusterrole.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_09-aggregated.clusterrole.yaml +2026-05-05 04:15:57,819 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_13-operatorgroup-default.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_13-operatorgroup-default.yaml +2026-05-05 04:15:57,819 DEBUG Copying assets/optional/operator-lifecycle-manager/0000_50_olm_15-csv-viewer.rbac.yaml <- _output/staging/operator-framework-olm/microshift-manifests/0000_50_olm_15-csv-viewer.rbac.yaml +2026-05-05 04:15:57,820 DEBUG Copying assets/optional/operator-lifecycle-manager/image-references <- _output/staging/operator-framework-olm/microshift-manifests/image-references +2026-05-05 04:15:57,821 DEBUG Copying assets/optional/operator-lifecycle-manager/kustomization.yaml <- _output/staging/operator-framework-olm/microshift-manifests/kustomization.yaml +2026-05-05 04:15:57,822 WARNING Ignoring optional/operator-lifecycle-manager/kustomization.x86_64.yaml because gets generated during image rebase +2026-05-05 04:15:57,822 WARNING Ignoring optional/operator-lifecycle-manager/kustomization.aarch64.yaml because gets generated during image rebase +2026-05-05 04:15:57,822 WARNING Ignoring optional/operator-lifecycle-manager/release-olm-aarch64.json because gets generated during image rebase +2026-05-05 04:15:57,822 WARNING Ignoring optional/operator-lifecycle-manager/release-olm-x86_64.json because gets generated during image rebase +2026-05-05 04:15:57,822 WARNING Ignoring components/multus/ because they don't exist in upstream repository - only in microshift +2026-05-05 04:15:57,822 WARNING Ignoring optional/observability/ because they don't exist in upstream repository - only in microshift +Modifying OpenShift manifests +/go/src/github.com/openshift/microshift /go/src/github.com/openshift/microshift/_output/staging /go/src/github.com/openshift/microshift +Checking patch /go/src/github.com/openshift/microshift/scripts/auto-rebase/manifests_patches/010-ingress-deployment-clientCA.patch +/go/src/github.com/openshift/microshift/scripts/auto-rebase/manifests_patches/010-ingress-deployment-clientCA.patch - Patch applied +Checking patch /go/src/github.com/openshift/microshift/scripts/auto-rebase/manifests_patches/011-ingress-deployment-access-logging.patch +/go/src/github.com/openshift/microshift/scripts/auto-rebase/manifests_patches/011-ingress-deployment-access-logging.patch - Patch applied +Checking patch /go/src/github.com/openshift/microshift/scripts/auto-rebase/manifests_patches/012-ingress-class.patch +/go/src/github.com/openshift/microshift/scripts/auto-rebase/manifests_patches/012-ingress-class.patch - Patch applied +Checking patch /go/src/github.com/openshift/microshift/scripts/auto-rebase/manifests_patches/020-dns-configmap.patch +Patch was already applied +Checking patch /go/src/github.com/openshift/microshift/scripts/auto-rebase/manifests_patches/020-dns-daemonset.patch +/go/src/github.com/openshift/microshift/scripts/auto-rebase/manifests_patches/020-dns-daemonset.patch - Patch applied +Checking patch /go/src/github.com/openshift/microshift/scripts/auto-rebase/manifests_patches/020-dns-hosts-configmap-role.patch +/go/src/github.com/openshift/microshift/scripts/auto-rebase/manifests_patches/020-dns-hosts-configmap-role.patch - Patch applied +Checking patch /go/src/github.com/openshift/microshift/scripts/auto-rebase/manifests_patches/020-dns-hosts-configmap-rolebinding.patch +/go/src/github.com/openshift/microshift/scripts/auto-rebase/manifests_patches/020-dns-hosts-configmap-rolebinding.patch - Patch applied +/go/src/github.com/openshift/microshift/_output/staging /go/src/github.com/openshift/microshift +Rebasing operator-lifecycle-manager manifests +Rebasing Multus images +## Committing changes to assets and pkg/assets +[rebase-release-5.0-5.0.0-0.nightly-2026-05-04-160406_amd64-2026-05-04_arm64-2026-05-04 b87018ff9] update manifests + 8 files changed, 20 insertions(+), 20 deletions(-) +Rebasing Makefile +## Committing changes to buildfiles +[rebase-release-5.0-5.0.0-0.nightly-2026-05-04-160406_amd64-2026-05-04_arm64-2026-05-04 9e0d6a7bc] update buildfiles + 2 files changed, 2 insertions(+), 2 deletions(-) +# Removing staging directory +================================================== +rebase_ai_model_serving.sh: +Rebasing AI Model Serving for MicroShift to registry.redhat.io/rhoai/odh-operator-bundle:v2.25 +Fetching RHOAI CSV +Fetching RHOAI manifests +Updating last_rebase_ai_model_serving.sh +Updating rebase_job_entrypoint.sh +Copying manifests from staging dir to assets/ +2026-05-05 04:16:21,401 INFO Not clearing dir optional/ai-model-serving/ +2026-05-05 04:16:21,401 WARNING Ignoring optional/ai-model-serving/release-ai-model-serving-x86_64.json because Release info file +2026-05-05 04:16:21,401 INFO Not clearing dir optional/ai-model-serving/kserve/ +2026-05-05 04:16:21,401 WARNING Ignoring optional/ai-model-serving/kserve/kustomization.yaml because MicroShift specific overrides +2026-05-05 04:16:21,401 WARNING Ignoring optional/ai-model-serving/kserve/inferenceservice-config-microshift-patch.yaml because MicroShift specific overrides +2026-05-05 04:16:21,401 WARNING Ignoring optional/ai-model-serving/kserve/namespace.yaml because MicroShift specific overrides +2026-05-05 04:16:21,401 INFO Clearing directory assets/optional/ai-model-serving/kserve/overlays/odh/ +2026-05-05 04:16:21,402 DEBUG Copying assets/optional/ai-model-serving/kserve/overlays/odh/kustomization.yaml <- _output/staging/rhoai/operator/kserve/overlays/odh/kustomization.yaml +2026-05-05 04:16:21,403 DEBUG Copying assets/optional/ai-model-serving/kserve/overlays/odh/llm-svc-scc.yaml <- _output/staging/rhoai/operator/kserve/overlays/odh/llm-svc-scc.yaml +2026-05-05 04:16:21,403 DEBUG Copying assets/optional/ai-model-serving/kserve/overlays/odh/network-policies.yaml <- _output/staging/rhoai/operator/kserve/overlays/odh/network-policies.yaml +2026-05-05 04:16:21,403 DEBUG Copying assets/optional/ai-model-serving/kserve/overlays/odh/params.env <- _output/staging/rhoai/operator/kserve/overlays/odh/params.env +2026-05-05 04:16:21,403 DEBUG Copying assets/optional/ai-model-serving/kserve/overlays/odh/params.yaml <- _output/staging/rhoai/operator/kserve/overlays/odh/params.yaml +2026-05-05 04:16:21,403 DEBUG Copying assets/optional/ai-model-serving/kserve/overlays/odh/user-cluster-roles.yaml <- _output/staging/rhoai/operator/kserve/overlays/odh/user-cluster-roles.yaml +2026-05-05 04:16:21,404 DEBUG Copying assets/optional/ai-model-serving/kserve/overlays/odh/patches/patch-inferenceservice-config.yaml <- _output/staging/rhoai/operator/kserve/overlays/odh/patches/patch-inferenceservice-config.yaml +2026-05-05 04:16:21,404 DEBUG Copying assets/optional/ai-model-serving/kserve/overlays/odh/patches/patch-set-resources-manager.yaml <- _output/staging/rhoai/operator/kserve/overlays/odh/patches/patch-set-resources-manager.yaml +2026-05-05 04:16:21,404 DEBUG Copying assets/optional/ai-model-serving/kserve/overlays/odh/patches/patch-webhook-svc-openshift-cert-injection.yaml <- _output/staging/rhoai/operator/kserve/overlays/odh/patches/patch-webhook-svc-openshift-cert-injection.yaml +2026-05-05 04:16:21,404 DEBUG Copying assets/optional/ai-model-serving/kserve/overlays/odh/patches/remove-cert-manager.yaml <- _output/staging/rhoai/operator/kserve/overlays/odh/patches/remove-cert-manager.yaml +2026-05-05 04:16:21,404 DEBUG Copying assets/optional/ai-model-serving/kserve/overlays/odh/patches/remove-clusterservingruntime.yaml <- _output/staging/rhoai/operator/kserve/overlays/odh/patches/remove-clusterservingruntime.yaml +2026-05-05 04:16:21,404 DEBUG Copying assets/optional/ai-model-serving/kserve/overlays/odh/patches/remove-local-model.yaml <- _output/staging/rhoai/operator/kserve/overlays/odh/patches/remove-local-model.yaml +2026-05-05 04:16:21,405 INFO Clearing directory assets/optional/ai-model-serving/kserve/default/ +2026-05-05 04:16:21,406 DEBUG Copying assets/optional/ai-model-serving/kserve/default/cainjection_conversion_webhook.yaml <- _output/staging/rhoai/operator/kserve/default/cainjection_conversion_webhook.yaml +2026-05-05 04:16:21,406 DEBUG Copying assets/optional/ai-model-serving/kserve/default/clusterservingruntime_validatingwebhook_cainjection_patch.yaml <- _output/staging/rhoai/operator/kserve/default/clusterservingruntime_validatingwebhook_cainjection_patch.yaml +2026-05-05 04:16:21,406 DEBUG Copying assets/optional/ai-model-serving/kserve/default/inferencegraph_validatingwebhook_cainjection_patch.yaml <- _output/staging/rhoai/operator/kserve/default/inferencegraph_validatingwebhook_cainjection_patch.yaml +2026-05-05 04:16:21,406 DEBUG Copying assets/optional/ai-model-serving/kserve/default/isvc_mutatingwebhook_cainjection_patch.yaml <- _output/staging/rhoai/operator/kserve/default/isvc_mutatingwebhook_cainjection_patch.yaml +2026-05-05 04:16:21,406 DEBUG Copying assets/optional/ai-model-serving/kserve/default/isvc_validatingwebhook_cainjection_patch.yaml <- _output/staging/rhoai/operator/kserve/default/isvc_validatingwebhook_cainjection_patch.yaml +2026-05-05 04:16:21,406 DEBUG Copying assets/optional/ai-model-serving/kserve/default/kustomization.yaml <- _output/staging/rhoai/operator/kserve/default/kustomization.yaml +2026-05-05 04:16:21,407 DEBUG Copying assets/optional/ai-model-serving/kserve/default/llmisvcconfig_validatingwebhook_cainjection_patch.yaml <- _output/staging/rhoai/operator/kserve/default/llmisvcconfig_validatingwebhook_cainjection_patch.yaml +2026-05-05 04:16:21,407 DEBUG Copying assets/optional/ai-model-serving/kserve/default/llmisvc_validatingwebhook_cainjection_patch.yaml <- _output/staging/rhoai/operator/kserve/default/llmisvc_validatingwebhook_cainjection_patch.yaml +2026-05-05 04:16:21,407 DEBUG Copying assets/optional/ai-model-serving/kserve/default/localmodelcache_validatingwebhook_cainjection_patch.yaml <- _output/staging/rhoai/operator/kserve/default/localmodelcache_validatingwebhook_cainjection_patch.yaml +2026-05-05 04:16:21,407 DEBUG Copying assets/optional/ai-model-serving/kserve/default/localmodel_manager_image_patch.yaml <- _output/staging/rhoai/operator/kserve/default/localmodel_manager_image_patch.yaml +2026-05-05 04:16:21,407 DEBUG Copying assets/optional/ai-model-serving/kserve/default/localmodelnode_agent_image_patch.yaml <- _output/staging/rhoai/operator/kserve/default/localmodelnode_agent_image_patch.yaml +2026-05-05 04:16:21,408 DEBUG Copying assets/optional/ai-model-serving/kserve/default/manager_auth_proxy_patch.yaml <- _output/staging/rhoai/operator/kserve/default/manager_auth_proxy_patch.yaml +2026-05-05 04:16:21,408 DEBUG Copying assets/optional/ai-model-serving/kserve/default/manager_image_patch.yaml <- _output/staging/rhoai/operator/kserve/default/manager_image_patch.yaml +2026-05-05 04:16:21,408 DEBUG Copying assets/optional/ai-model-serving/kserve/default/manager_prometheus_metrics_patch.yaml <- _output/staging/rhoai/operator/kserve/default/manager_prometheus_metrics_patch.yaml +2026-05-05 04:16:21,408 DEBUG Copying assets/optional/ai-model-serving/kserve/default/manager_resources_patch.yaml <- _output/staging/rhoai/operator/kserve/default/manager_resources_patch.yaml +2026-05-05 04:16:21,408 DEBUG Copying assets/optional/ai-model-serving/kserve/default/servingruntime_validationwebhook_cainjection_patch.yaml <- _output/staging/rhoai/operator/kserve/default/servingruntime_validationwebhook_cainjection_patch.yaml +2026-05-05 04:16:21,408 DEBUG Copying assets/optional/ai-model-serving/kserve/default/trainedmodel_validatingwebhook_cainjection_patch.yaml <- _output/staging/rhoai/operator/kserve/default/trainedmodel_validatingwebhook_cainjection_patch.yaml +2026-05-05 04:16:21,409 INFO Clearing directory assets/optional/ai-model-serving/kserve/crd/ +2026-05-05 04:16:21,410 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/kustomization.yaml <- _output/staging/rhoai/operator/kserve/crd/kustomization.yaml +2026-05-05 04:16:21,411 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/external/gateway-inference-extension/kustomization.yaml <- _output/staging/rhoai/operator/kserve/crd/external/gateway-inference-extension/kustomization.yaml +2026-05-05 04:16:21,411 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/external/gateway-inference-extension/gateway-inference-extension.yaml <- _output/staging/rhoai/operator/kserve/crd/external/gateway-inference-extension/gateway-inference-extension.yaml +2026-05-05 04:16:21,411 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/external/opendatahub-operator/kustomization.yaml <- _output/staging/rhoai/operator/kserve/crd/external/opendatahub-operator/kustomization.yaml +2026-05-05 04:16:21,411 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/external/opendatahub-operator/datasciencecluster.opendatahub.io_datascienceclusters.yaml <- _output/staging/rhoai/operator/kserve/crd/external/opendatahub-operator/datasciencecluster.opendatahub.io_datascienceclusters.yaml +2026-05-05 04:16:21,412 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/external/opendatahub-operator/dscinitialization.opendatahub.io_dscinitializations.yaml <- _output/staging/rhoai/operator/kserve/crd/external/opendatahub-operator/dscinitialization.opendatahub.io_dscinitializations.yaml +2026-05-05 04:16:21,412 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/full/kustomization.yaml <- _output/staging/rhoai/operator/kserve/crd/full/kustomization.yaml +2026-05-05 04:16:21,412 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/full/serving.kserve.io_clusterservingruntimes.yaml <- _output/staging/rhoai/operator/kserve/crd/full/serving.kserve.io_clusterservingruntimes.yaml +2026-05-05 04:16:21,412 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/full/serving.kserve.io_clusterstoragecontainers.yaml <- _output/staging/rhoai/operator/kserve/crd/full/serving.kserve.io_clusterstoragecontainers.yaml +2026-05-05 04:16:21,413 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/full/serving.kserve.io_inferencegraphs.yaml <- _output/staging/rhoai/operator/kserve/crd/full/serving.kserve.io_inferencegraphs.yaml +2026-05-05 04:16:21,413 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/full/serving.kserve.io_inferenceservices.yaml <- _output/staging/rhoai/operator/kserve/crd/full/serving.kserve.io_inferenceservices.yaml +2026-05-05 04:16:21,414 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/full/serving.kserve.io_llminferenceserviceconfigs.yaml <- _output/staging/rhoai/operator/kserve/crd/full/serving.kserve.io_llminferenceserviceconfigs.yaml +2026-05-05 04:16:21,414 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/full/serving.kserve.io_llminferenceservices.yaml <- _output/staging/rhoai/operator/kserve/crd/full/serving.kserve.io_llminferenceservices.yaml +2026-05-05 04:16:21,415 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/full/serving.kserve.io_localmodelcaches.yaml <- _output/staging/rhoai/operator/kserve/crd/full/serving.kserve.io_localmodelcaches.yaml +2026-05-05 04:16:21,415 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/full/serving.kserve.io_localmodelnodegroups.yaml <- _output/staging/rhoai/operator/kserve/crd/full/serving.kserve.io_localmodelnodegroups.yaml +2026-05-05 04:16:21,416 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/full/serving.kserve.io_localmodelnodes.yaml <- _output/staging/rhoai/operator/kserve/crd/full/serving.kserve.io_localmodelnodes.yaml +2026-05-05 04:16:21,416 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/full/serving.kserve.io_servingruntimes.yaml <- _output/staging/rhoai/operator/kserve/crd/full/serving.kserve.io_servingruntimes.yaml +2026-05-05 04:16:21,416 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/full/serving.kserve.io_trainedmodels.yaml <- _output/staging/rhoai/operator/kserve/crd/full/serving.kserve.io_trainedmodels.yaml +2026-05-05 04:16:21,416 DEBUG Copying assets/optional/ai-model-serving/kserve/crd/patches/protocol.yaml <- _output/staging/rhoai/operator/kserve/crd/patches/protocol.yaml +2026-05-05 04:16:21,416 INFO Clearing directory assets/optional/ai-model-serving/kserve/configmap/ +2026-05-05 04:16:21,417 DEBUG Copying assets/optional/ai-model-serving/kserve/configmap/kustomization.yaml <- _output/staging/rhoai/operator/kserve/configmap/kustomization.yaml +2026-05-05 04:16:21,417 DEBUG Copying assets/optional/ai-model-serving/kserve/configmap/inferenceservice.yaml <- _output/staging/rhoai/operator/kserve/configmap/inferenceservice.yaml +2026-05-05 04:16:21,417 INFO Clearing directory assets/optional/ai-model-serving/kserve/rbac/ +2026-05-05 04:16:21,418 DEBUG Copying assets/optional/ai-model-serving/kserve/rbac/auth_proxy_role_binding.yaml <- _output/staging/rhoai/operator/kserve/rbac/auth_proxy_role_binding.yaml +2026-05-05 04:16:21,419 DEBUG Copying assets/optional/ai-model-serving/kserve/rbac/auth_proxy_role.yaml <- _output/staging/rhoai/operator/kserve/rbac/auth_proxy_role.yaml +2026-05-05 04:16:21,419 DEBUG Copying assets/optional/ai-model-serving/kserve/rbac/auth_proxy_service.yaml <- _output/staging/rhoai/operator/kserve/rbac/auth_proxy_service.yaml +2026-05-05 04:16:21,419 DEBUG Copying assets/optional/ai-model-serving/kserve/rbac/kustomization.yaml <- _output/staging/rhoai/operator/kserve/rbac/kustomization.yaml +2026-05-05 04:16:21,419 DEBUG Copying assets/optional/ai-model-serving/kserve/rbac/leader_election_role_binding.yaml <- _output/staging/rhoai/operator/kserve/rbac/leader_election_role_binding.yaml +2026-05-05 04:16:21,419 DEBUG Copying assets/optional/ai-model-serving/kserve/rbac/leader_election_role.yaml <- _output/staging/rhoai/operator/kserve/rbac/leader_election_role.yaml +2026-05-05 04:16:21,420 DEBUG Copying assets/optional/ai-model-serving/kserve/rbac/role_binding.yaml <- _output/staging/rhoai/operator/kserve/rbac/role_binding.yaml +2026-05-05 04:16:21,420 DEBUG Copying assets/optional/ai-model-serving/kserve/rbac/role.yaml <- _output/staging/rhoai/operator/kserve/rbac/role.yaml +2026-05-05 04:16:21,420 DEBUG Copying assets/optional/ai-model-serving/kserve/rbac/service_account.yaml <- _output/staging/rhoai/operator/kserve/rbac/service_account.yaml +2026-05-05 04:16:21,420 DEBUG Copying assets/optional/ai-model-serving/kserve/rbac/localmodel/role_binding.yaml <- _output/staging/rhoai/operator/kserve/rbac/localmodel/role_binding.yaml +2026-05-05 04:16:21,420 DEBUG Copying assets/optional/ai-model-serving/kserve/rbac/localmodel/role.yaml <- _output/staging/rhoai/operator/kserve/rbac/localmodel/role.yaml +2026-05-05 04:16:21,421 DEBUG Copying assets/optional/ai-model-serving/kserve/rbac/localmodel/service_account.yaml <- _output/staging/rhoai/operator/kserve/rbac/localmodel/service_account.yaml +2026-05-05 04:16:21,421 DEBUG Copying assets/optional/ai-model-serving/kserve/rbac/localmodelnode/role_binding.yaml <- _output/staging/rhoai/operator/kserve/rbac/localmodelnode/role_binding.yaml +2026-05-05 04:16:21,421 DEBUG Copying assets/optional/ai-model-serving/kserve/rbac/localmodelnode/role.yaml <- _output/staging/rhoai/operator/kserve/rbac/localmodelnode/role.yaml +2026-05-05 04:16:21,421 DEBUG Copying assets/optional/ai-model-serving/kserve/rbac/localmodelnode/service_account.yaml <- _output/staging/rhoai/operator/kserve/rbac/localmodelnode/service_account.yaml +2026-05-05 04:16:21,421 INFO Clearing directory assets/optional/ai-model-serving/kserve/manager/ +2026-05-05 04:16:21,422 DEBUG Copying assets/optional/ai-model-serving/kserve/manager/kustomization.yaml <- _output/staging/rhoai/operator/kserve/manager/kustomization.yaml +2026-05-05 04:16:21,422 DEBUG Copying assets/optional/ai-model-serving/kserve/manager/manager.yaml <- _output/staging/rhoai/operator/kserve/manager/manager.yaml +2026-05-05 04:16:21,422 DEBUG Copying assets/optional/ai-model-serving/kserve/manager/service.yaml <- _output/staging/rhoai/operator/kserve/manager/service.yaml +2026-05-05 04:16:21,422 INFO Clearing directory assets/optional/ai-model-serving/kserve/webhook/ +2026-05-05 04:16:21,423 DEBUG Copying assets/optional/ai-model-serving/kserve/webhook/kustomization.yaml <- _output/staging/rhoai/operator/kserve/webhook/kustomization.yaml +2026-05-05 04:16:21,423 DEBUG Copying assets/optional/ai-model-serving/kserve/webhook/manifests.yaml <- _output/staging/rhoai/operator/kserve/webhook/manifests.yaml +2026-05-05 04:16:21,423 DEBUG Copying assets/optional/ai-model-serving/kserve/webhook/service.yaml <- _output/staging/rhoai/operator/kserve/webhook/service.yaml +2026-05-05 04:16:21,423 INFO Clearing directory assets/optional/ai-model-serving/kserve/localmodels/ +2026-05-05 04:16:21,424 DEBUG Copying assets/optional/ai-model-serving/kserve/localmodels/kustomization.yaml <- _output/staging/rhoai/operator/kserve/localmodels/kustomization.yaml +2026-05-05 04:16:21,424 DEBUG Copying assets/optional/ai-model-serving/kserve/localmodels/manager.yaml <- _output/staging/rhoai/operator/kserve/localmodels/manager.yaml +2026-05-05 04:16:21,424 INFO Clearing directory assets/optional/ai-model-serving/kserve/localmodelnodes/ +2026-05-05 04:16:21,424 DEBUG Copying assets/optional/ai-model-serving/kserve/localmodelnodes/kustomization.yaml <- _output/staging/rhoai/operator/kserve/localmodelnodes/kustomization.yaml +2026-05-05 04:16:21,424 DEBUG Copying assets/optional/ai-model-serving/kserve/localmodelnodes/manager.yaml <- _output/staging/rhoai/operator/kserve/localmodelnodes/manager.yaml +2026-05-05 04:16:21,425 INFO Clearing directory assets/optional/ai-model-serving/kserve/llmisvc/ +2026-05-05 04:16:21,425 DEBUG Copying assets/optional/ai-model-serving/kserve/llmisvc/config-llm-decode-template.yaml <- _output/staging/rhoai/operator/kserve/llmisvc/config-llm-decode-template.yaml +2026-05-05 04:16:21,425 DEBUG Copying assets/optional/ai-model-serving/kserve/llmisvc/config-llm-decode-worker-data-parallel.yaml <- _output/staging/rhoai/operator/kserve/llmisvc/config-llm-decode-worker-data-parallel.yaml +2026-05-05 04:16:21,426 DEBUG Copying assets/optional/ai-model-serving/kserve/llmisvc/config-llm-prefill-template.yaml <- _output/staging/rhoai/operator/kserve/llmisvc/config-llm-prefill-template.yaml +2026-05-05 04:16:21,426 DEBUG Copying assets/optional/ai-model-serving/kserve/llmisvc/config-llm-prefill-worker-data-parallel.yaml <- _output/staging/rhoai/operator/kserve/llmisvc/config-llm-prefill-worker-data-parallel.yaml +2026-05-05 04:16:21,426 DEBUG Copying assets/optional/ai-model-serving/kserve/llmisvc/config-llm-router-route.yaml <- _output/staging/rhoai/operator/kserve/llmisvc/config-llm-router-route.yaml +2026-05-05 04:16:21,426 DEBUG Copying assets/optional/ai-model-serving/kserve/llmisvc/config-llm-scheduler.yaml <- _output/staging/rhoai/operator/kserve/llmisvc/config-llm-scheduler.yaml +2026-05-05 04:16:21,426 DEBUG Copying assets/optional/ai-model-serving/kserve/llmisvc/config-llm-template.yaml <- _output/staging/rhoai/operator/kserve/llmisvc/config-llm-template.yaml +2026-05-05 04:16:21,427 DEBUG Copying assets/optional/ai-model-serving/kserve/llmisvc/config-llm-worker-data-parallel.yaml <- _output/staging/rhoai/operator/kserve/llmisvc/config-llm-worker-data-parallel.yaml +2026-05-05 04:16:21,427 DEBUG Copying assets/optional/ai-model-serving/kserve/llmisvc/kustomization.yaml <- _output/staging/rhoai/operator/kserve/llmisvc/kustomization.yaml +2026-05-05 04:16:21,427 INFO Clearing directory assets/optional/ai-model-serving/kserve/certmanager/ +2026-05-05 04:16:21,427 DEBUG Copying assets/optional/ai-model-serving/kserve/certmanager/certificate.yaml <- _output/staging/rhoai/operator/kserve/certmanager/certificate.yaml +2026-05-05 04:16:21,428 DEBUG Copying assets/optional/ai-model-serving/kserve/certmanager/kustomization.yaml <- _output/staging/rhoai/operator/kserve/certmanager/kustomization.yaml +2026-05-05 04:16:21,428 INFO Clearing directory assets/optional/ai-model-serving/kserve/monitoring/llmisvc/ +2026-05-05 04:16:21,428 DEBUG Copying assets/optional/ai-model-serving/kserve/monitoring/llmisvc/kustomization.yaml <- _output/staging/rhoai/operator/kserve/monitoring/llmisvc/kustomization.yaml +2026-05-05 04:16:21,428 DEBUG Copying assets/optional/ai-model-serving/kserve/monitoring/llmisvc/rbac.yaml <- _output/staging/rhoai/operator/kserve/monitoring/llmisvc/rbac.yaml +2026-05-05 04:16:21,429 DEBUG Copying assets/optional/ai-model-serving/kserve/monitoring/llmisvc/istio_gateway_monitor.yaml <- _output/staging/rhoai/operator/kserve/monitoring/llmisvc/istio_gateway_monitor.yaml +2026-05-05 04:16:21,429 INFO Clearing directory assets/optional/ai-model-serving/runtimes/ +2026-05-05 04:16:21,429 INFO Restoring assets/optional/ai-model-serving/runtimes/kustomization.yaml +2026-05-05 04:16:21,429 DEBUG Executing 'git restore assets/optional/ai-model-serving/runtimes/kustomization.yaml' +2026-05-05 04:16:21,470 WARNING Ignoring optional/ai-model-serving/runtimes/kustomization.x86_64.yaml because Generated during rebase +2026-05-05 04:16:21,470 DEBUG Copying assets/optional/ai-model-serving/runtimes/caikit-standalone.yaml <- _output/staging/rhoai/operator/modelcontroller/runtimes/caikit-standalone-template.yaml +2026-05-05 04:16:21,470 DEBUG Copying assets/optional/ai-model-serving/runtimes/caikit-tgis.yaml <- _output/staging/rhoai/operator/modelcontroller/runtimes/caikit-tgis-template.yaml +2026-05-05 04:16:21,470 DEBUG Copying assets/optional/ai-model-serving/runtimes/hf-detector.yaml <- _output/staging/rhoai/operator/modelcontroller/runtimes/hf-detector-template.yaml +2026-05-05 04:16:21,471 DEBUG Copying assets/optional/ai-model-serving/runtimes/ovms-kserve.yaml <- _output/staging/rhoai/operator/modelcontroller/runtimes/ovms-kserve-template.yaml +2026-05-05 04:16:21,471 DEBUG Copying assets/optional/ai-model-serving/runtimes/vllm-cuda.yaml <- _output/staging/rhoai/operator/modelcontroller/runtimes/vllm-cuda-template.yaml +2026-05-05 04:16:21,471 DEBUG Copying assets/optional/ai-model-serving/runtimes/vllm-gaudi.yaml <- _output/staging/rhoai/operator/modelcontroller/runtimes/vllm-gaudi-template.yaml +2026-05-05 04:16:21,471 DEBUG Copying assets/optional/ai-model-serving/runtimes/vllm-rocm.yaml <- _output/staging/rhoai/operator/modelcontroller/runtimes/vllm-rocm-template.yaml +Initializing release.json file +Dropping template containers from ServingRuntimes and changing them to ClusterServingRuntimes +Creating ClusterServingRuntimes images kustomization +No changes to assets/ or last_rebase_ai_model_serving.sh +Removing staging directory diff --git a/scripts/auto-rebase/changelog.txt b/scripts/auto-rebase/changelog.txt index 2e44b3d476..3da36bdb3f 100644 --- a/scripts/auto-rebase/changelog.txt +++ b/scripts/auto-rebase/changelog.txt @@ -1,50 +1,32 @@ -- api embedded-component 21ed4c20b1224808727253ff0a26ddedfec379dc to a49973eaef537f281362e1ffa3abeacf7ed85c62 - - a7411eef 2026-04-30T12:15:32-04:00 features: drop DRAPartitionableDevices awareness - - 291a26c1 2026-04-23T08:49:56-04:00 Updated vcenter logic to make sure no server switching occurs - - 9dd6a399 2026-04-22T09:11:32-04:00 Add CRD validation for registry entries in image config - - af78729b 2026-04-21T09:47:25-04:00 Added some ratcheting tests to cover change in min size of vCenters - - 7b21e9db 2026-04-21T09:47:25-04:00 Modified parent logic to not check size, but only changes in existence, and other review suggestions. - - 43def11d 2026-04-21T09:47:24-04:00 Added vSphere Day 2 tests - - 727806d1 2026-04-21T09:47:24-04:00 Added vSphere Day 2 logic to CRDs - -- cluster-ingress-operator embedded-component 9e5261e130d04cdb8e45836a84f3235857595c1f to 98ff1a6fedd18fbf2ed6fec9796104d7b4bc952c - - 0421456 2026-04-30T15:31:03-04:00 isFIPSEnabled: Check FIPS_ENABLED env. var. first - -- cluster-kube-apiserver-operator embedded-component 7c44d03516fc5a2d013fed07b1cc5a03d474bd4c to 9b45cbafcea23be9c63e01947506495d030666d0 - - 603c62f 2026-04-30T15:45:03+05:30 Removal of unuse suites - - af0eb66 2026-04-28T17:47:22+05:30 Migrate TestEncryptionTypeAESCBC to OTE - - 23e21f2 2026-03-17T11:00:39+01:00 rename ObserveServiceAccountIssuer variables - - 7cea799 2026-03-17T11:00:39+01:00 rename ServiceAccountIssuerController variables - - 4b93b80 2026-03-17T11:00:39+01:00 ObserveServiceAccountIssuer event should report an empty issuer during the - - 79b1098 2026-03-17T11:00:39+01:00 operator should not override authentication config serviceAccountIssuer with the default one during - -- cluster-network-operator embedded-component 142432afacfb9cd11a9bd4e5e333bd6a4cdcd555 to 23f002049008db9e852694ff2baaa68cd5b84525 - - 15f93b1 2026-04-29T15:02:44+02:00 OCPBUGS-53187: Update self-referencing URLs from master to main - - d7eed00 2026-04-23T11:35:29+01:00 Add dedicated service account for cni-sysctl-allowlist-ds - - 4cd79a7 2026-03-11T11:32:48Z GCP-430: Wire GCP WIF credentials for CNCC in HyperShift HCP mode - -- machine-config-operator embedded-component b9964db4db07d84bebe0e0969e330df06868be76 to 374271f2dad6675f2986069b04ed5b65ead27e81 - - 878399b9 2026-05-01T00:29:13Z chore: update AMIs - - 40f682ae 2026-04-30T13:58:10-04:00 OCPBUGS-84832: daemon: don't pull/extract extensions for all OS updates - - 5290ae73 2026-04-30T11:09:04-05:00 Fix stale MachineOSBuild annotation preventing pool updates - - 23424915 2026-04-29T12:14:48-04:00 node: custom pool boot must handle matchExpressions - - 5b83dbd2 2026-04-29T15:56:29+02:00 OCBPUGS-84652: Include RootCA in the temporal CC - - b26ef602 2026-04-29T18:33:46+05:30 Auto-append :ref suffix to additionalLayerStores in storage.conf - - 053ba38f 2026-04-29T17:21:21+05:30 Add SNO/Compact skip, step verification, and helper ordering conventions - - 2d1609e5 2026-04-28T13:47:01-04:00 daemon: support bootloader updates - - b6fe2a63 2026-04-28T10:39:05+02:00 OCPBUGS-84406: Fix CVE-2026-34986 - - 3d98512a 2026-04-27T11:25:39+02:00 OCPBUGS-84332: Fix ssh and password rollbacks - - aac7274c 2026-04-21T12:58:15+05:30 Add /automate-test skill for generating e2e tests from specifications - -- operator-framework-olm embedded-component 122728c856e9436ea5ab763bf57977047691bb90 to 9941db6a69e1f5bab885e8ffaca54f59fcfafea4 - - 4e8ff813 2026-04-28T00:03:14Z :seedling: Bump the k8s-dependencies group with 8 updates (#3816) - -- oc image-amd64 6b8e30c5b39aa742147846341a203905e04834f3 to 16d140aeefdc2b07f549945801c9cefab703ca68 - - 59975c6f 2026-04-28T19:51:47-04:00 Add the new cases to the versions map - - a2161876 2026-04-20T14:50:33+02:00 groupsync/ldap: skip filter validation for RFC2307 group query when groupUIDAttribute is "dn" - - 030a4e76 2026-03-11T17:38:31+08:00 pkg/cli/admin/upgrade/recommend/examples/4.22.0-extend-recommended-alert pkg/cli/admin/upgrade/recommend/examples/4.22.0-extend-recommended-critical-alert: Add Additional Alerts to the OCP Update Precheck - -- oc image-arm64 066926c545b7762f8592beea658c4e70e5ee954a to 16d140aeefdc2b07f549945801c9cefab703ca68 - - 59975c6f 2026-04-28T19:51:47-04:00 Add the new cases to the versions map - - 030a4e76 2026-03-11T17:38:31+08:00 pkg/cli/admin/upgrade/recommend/examples/4.22.0-extend-recommended-alert pkg/cli/admin/upgrade/recommend/examples/4.22.0-extend-recommended-critical-alert: Add Additional Alerts to the OCP Update Precheck +- machine-config-operator embedded-component 374271f2dad6675f2986069b04ed5b65ead27e81 to 7eef4fdc72274bbf6845b1ea15d8af4723e42962 + - 64f681e5 2026-04-30T14:33:39-05:00 Fix OCL test to handle temporarily empty current-machine-os-build annotation + +- operator-framework-olm embedded-component 9941db6a69e1f5bab885e8ffaca54f59fcfafea4 to 4201d40dfc99de60e8791d02b89bc7aebeaae930 + - 124fd130 2026-05-01T00:08:11Z prune unused dockerfiles & build targets (#1961) + - 109ac858 2026-05-01T00:07:33Z Bump github.com/docker/cli (#1962) + - c94a418e 2026-05-01T00:07:19Z Bump the k8s-dependencies group with 4 updates (#1960) + - 5214cb5f 2026-05-01T00:07:04Z fix: hex-encode OCI layout image name to avoid validation errors (#1954) + - c55403b1 2026-05-01T00:06:49Z Bump github.com/containerd/containerd from 1.7.30 to 1.7.31 (#1959) + - a888bd40 2026-05-01T00:06:35Z update owners (#1958) + - 7c9d0007 2026-05-01T00:06:20Z Bump the golang-x-deps group across 1 directory with 3 updates (#1957) + - b88daf3a 2026-05-01T00:06:05Z Bump github.com/distribution/distribution/v3 from 3.0.0 to 3.1.0 (#1951) + - e9180154 2026-05-01T00:05:44Z Bump github.com/mattn/go-sqlite3 from 1.14.38 to 1.14.42 (#1956) + - 32dc6fb7 2026-05-01T00:05:30Z Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.47 to 0.4.48 (#1952) + - aeb08326 2026-05-01T00:05:13Z Bump github.com/docker/cli (#1953) + - f240f35c 2026-05-01T00:04:56Z Bump go.podman.io/common from 0.67.0 to 0.67.1 (#1949) + - 6848fe3c 2026-05-01T00:04:39Z Bump github.com/maxbrunsfeld/counterfeiter/v6 from 6.12.1 to 6.12.2 (#1946) + - 216ef9b9 2026-05-01T00:04:24Z substitutes template protects against reuse of base/candidate in same template (#1942) + - ea93bbc5 2026-05-01T00:04:09Z Bump google.golang.org/grpc from 1.79.3 to 1.80.0 (#1945) + - 44b63006 2026-05-01T00:03:53Z Bump github.com/mattn/go-sqlite3 from 1.14.37 to 1.14.38 (#1944) + - d65b7874 2026-05-01T00:03:39Z Add fgiudici as reviewer (#1943) + - 873a5b5d 2026-05-01T00:03:18Z :seedling: Bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.2 (#3818) + - ed1ab418 2026-05-01T00:02:58Z :seedling: Bump github.com/operator-framework/operator-registry (#3819) + +- kubernetes image-arm64 2447118a5cf501f71c2da4b2f4ff14f3492aec10 to 5f099ccd1e8345f615d10381290909a8ca581b66 + - 739e2eb2c 2026-04-30T16:11:47+01:00 UPSTREAM: : bump openshift/api dependency + - 568c860e4 2026-04-30T16:11:36+01:00 UPSTREAM: : authentication: enforce claims.email_verified usage when claims.email is used in username expression + - 4bfac2def 2026-04-30T16:11:21+01:00 UPSTREAM: : Export email validation functions + +- service-ca-operator image-arm64 2aa88ace39a1abe7647bc5b03e6a599985b31605 to e7ccfa308e69ce4ad1f2afcd1d7c8ff25144374b + - 73dd9f6 2026-04-27T14:48:36+05:30 test: network policy tests diff --git a/scripts/auto-rebase/commits.txt b/scripts/auto-rebase/commits.txt index 71b31cb8cc..5702c54f47 100644 --- a/scripts/auto-rebase/commits.txt +++ b/scripts/auto-rebase/commits.txt @@ -12,9 +12,9 @@ https://github.com/openshift/csi-external-snapshotter embedded-component d1bc3ff https://github.com/openshift/etcd embedded-component d8d67b8ce849f816d6d23c904098336632e2348f https://github.com/openshift/kubernetes embedded-component 2447118a5cf501f71c2da4b2f4ff14f3492aec10 https://github.com/openshift/kubernetes-kube-storage-version-migrator embedded-component 72835e43c7754356645e41031f3a99926b4d42e6 -https://github.com/openshift/machine-config-operator embedded-component 374271f2dad6675f2986069b04ed5b65ead27e81 +https://github.com/openshift/machine-config-operator embedded-component 7eef4fdc72274bbf6845b1ea15d8af4723e42962 https://github.com/openshift/openshift-controller-manager embedded-component 731d7429a788e0d70e3556e40f82c1ba9d55abe7 -https://github.com/openshift/operator-framework-olm embedded-component 9941db6a69e1f5bab885e8ffaca54f59fcfafea4 +https://github.com/openshift/operator-framework-olm embedded-component 4201d40dfc99de60e8791d02b89bc7aebeaae930 https://github.com/openshift/route-controller-manager embedded-component 624742d93f3a7885cf7f70985f1e23ff60da580d https://github.com/openshift/service-ca-operator embedded-component 2aa88ace39a1abe7647bc5b03e6a599985b31605 https://github.com/openshift/oc image-amd64 16d140aeefdc2b07f549945801c9cefab703ca68 @@ -31,5 +31,5 @@ https://github.com/openshift/csi-external-snapshotter image-arm64 d1bc3ffaa9759c https://github.com/openshift/router image-arm64 896390778ebe15f57f87e6ca78f11c96e64c2652 https://github.com/openshift/kube-rbac-proxy image-arm64 d12e274605248f6c59373240a7eae7a7a357dcb3 https://github.com/openshift/ovn-kubernetes image-arm64 952886fd8af2ca3ecf1717a2cb69311a32f25c06 -https://github.com/openshift/kubernetes image-arm64 2447118a5cf501f71c2da4b2f4ff14f3492aec10 -https://github.com/openshift/service-ca-operator image-arm64 2aa88ace39a1abe7647bc5b03e6a599985b31605 +https://github.com/openshift/kubernetes image-arm64 5f099ccd1e8345f615d10381290909a8ca581b66 +https://github.com/openshift/service-ca-operator image-arm64 e7ccfa308e69ce4ad1f2afcd1d7c8ff25144374b diff --git a/scripts/auto-rebase/last_rebase.sh b/scripts/auto-rebase/last_rebase.sh index fa41ee8133..e28aa407db 100755 --- a/scripts/auto-rebase/last_rebase.sh +++ b/scripts/auto-rebase/last_rebase.sh @@ -1,2 +1,2 @@ #!/bin/bash -x -./scripts/auto-rebase/rebase.sh to "registry.ci.openshift.org/ocp/release-5:5.0.0-0.nightly-2026-05-03-194554" "registry.ci.openshift.org/ocp-arm64/release-5-arm64:5.0.0-0.nightly-arm64-2026-05-03-233705" +./scripts/auto-rebase/rebase.sh to "registry.ci.openshift.org/ocp/release-5:5.0.0-0.nightly-2026-05-04-160406" "registry.ci.openshift.org/ocp-arm64/release-5-arm64:5.0.0-0.nightly-arm64-2026-05-04-233705"