2023.md

The Year in Enhancements - 2023

Enhancements

Merged Changes

<PR ID>: (activity this week / total activity) summary

There were 126 Merged pull requests:

• 1064: (178/279) network: Add enhancement proposal for SDN live migration (pliurh) (SDN-2612)
• 1163: (98/187) installer: Installer: user-encrypted storage keys enhancement (patrickdillon) (CORS-2049) (OCPPLAN-9307)
• 1191: (118/314) api-review: CFE-543 : Apply user defined tags to all Azure resources created by OpenShift (bharath-b-rh) (OCPPLAN-8155) (CORS-2249)
• 1213: (48/286) workload-partitioning: feat: add wide cluster configuration for workload partitioning (eggfoobar) (CNF-5562)
• 1217: (202/252) api-review: CFE-544 : Apply user defined labels & tags to all GCP resources created by OpenShift (bharath-b-rh) (OCPPLAN-8155) (CORS-2455)
• 1232: (135/302) installer: installer-aws: create edge compute pool for AWS Local Zones (mtulio) (RFE-2782)
• 1242: (41/165) microshift: ETCD-318: Adding MicroShift etcd enhancement (dusk125) (ETCD-318)
• 1244: (6/38) hypershift: CNF-6291: Enable Performance tuning for Hypershift nodes (jlojosnegros) (PSAP-742)
• 1260: (69/106) installer: installer-aws: Cluster deployment on AWS Outpost (pkliczewski) (OCPPLAN-9617) (ECOPROJECT-866)
• 1279: (146/279) insights: on demand Insights data gathering (tremes) (CCXDEV-8854) (CCX-195) (CCXDEV-9980)
• 1291: (150/196) testing: Improved platform tests (soltysh)
• 1295: (44/69) machine-config: Additional trusted certificate authorities for image registries (dmage) (MCO-499) (IR-351)
• 1296: (1155/1284) ingress: Enhancement Proposal for Adding HTTP header to HAProxy Without Customizing haproxy.config Template (miheer) (NE-982) (RFE-464)
• 1301: (149/195) general: Azure Workload Identity (abutcher) (CCO-187)
• 1303: (133/168) ingress: Add gateway-api enhancement (Miciah) (NE-1105) (NE-1107) (NE-1108)
• 1306: (157/180) microshift: USHIFT-319: Integrating MicroShift with Greenboot enhancement proposal (ggiguash) (USHIFT-319)
• 1307: (330/330) ingress: CFE-815: Route secret injection for external certificate management (thejasn) (CM-815)
• 1310: (51/51) agent-installer: AGENT-436: Propose interactive network config for agent-based installer (zaneb) (AGENT-385)
• 1316: (95/95) microshift: NP-604: Add MicroShift Service of Loadbalancer Type Support (pliurh) (NP-604)
• 1318: (301/301) microshift: USHIFT-759: MicroShift Supportability Enhancement (pacevedom) (USHIFT-389)
• 1320: (157/157) microshift: USHIFT-716: Microshift API server certificate handling (pacevedom) (USHIFT-716)
• 1322: (184/184) network: [OCPBU-156] enhancement proposal for external loadbalancer (EmilienM) (OCPBU-156) (OSASINFRA-3069)
• 1327: (37/37) baremetal: Enable CBO on AWS platform (elfosardo) (METAL-300)
• 1333: (4/4) dns: Add OWNERS files for Network Edge areas (Miciah)
• 1335: (582/582) dns: CFE-748: Improve CoreDNS Integration with EgressFirewall (arkadeepsen) (CFE-748)
• 1338: (182/182) network: [SDN-2481] Enhancement proposal to migrate Multiple External Gateways to use a CRD (jordigilh) (SDN-2481)
• 1339: (550/550) cloud-integration: Tokenized Cloud Auth Enablement For Operators (bentito) (OCPBU-4) (PORTENABLE-471) (CCO-286)
• 1342: (262/262) network: networking: Live migration for ovn-k + hypershift + kubevirt (qinqon) (CNV-22946)
• 1350: (58/58) microshift: ETCD-391: Adding Microshift enhancement for defragementation of etcd (dusk125) (ETCD-391)
• 1360: (146/146) windows-containers: WINC-939: Windows Node Global Egress Proxy Support (saifshaikh48) (OCPBU-22) (WINC-802)
• 1361: (32/32) microshift: ETCD-356: Supportability of etcd in MicroShift (dhellmann) (ETCD-356)
• 1365: (153/153) network: OCPBU-199: enhancement proposal for dual-stack support with openstack (MaysaMacedo) (OCPBU-199) (OSASINFRA-1938)
• 1372: (71/71) windows-containers: WINC-1007: Windows CSI Proxy enhancement proposal (sebsoto) (OCPBU-465)
• 1374: (128/128) cluster-logging: API-server audit log filtering policy in ClusterLogForwarder (alanconway)
• 1376: (147/147) network: OVS Dynamic CPU Pinning (zeeke) (CNF-5977)
• 1385: (6/6) general: feat(hypershift): Priority class override (a-dsouza) (1041)
• 1387: (559/559) microshift: USHIFT-734 MicroShift upgrades on ostree-based systems (pmtk) (USHIFT-518)
• 1388: (228/228) microshift: Use OVN-Kubernetes external gateway bridge without a host interface for Microshift (pliurh) (NP-654)
• 1389: (14/14) baremetal: Enable CBO on Azure and GCP platforms (elfosardo) (METAL-421) (METAL-435)
• 1391: (110/110) authentication: AUTH-372: enhancements/authentication: Custom SCC preemption prevention (s-urbaniak) (AUTH-132)
• 1395: (85/85) security: Support BMC CA Certificate (zhouhao3) (RFE-3505)
• 1396: (314/314) node-tuning: CNF-7603: mixed-cpu-node-plugin (Tal-or) (CNF-7603) (1421) (mixed-cpu-node-plugin)
• 1397: (65/65) installer: Installer: AWS Shared VPC (patrickdillon) (CORS-2613) (OCPBU-558)
• 1402: (483/483) api-review: [OCPNODE-1639] Add ClusterImagePolicy, ImagePolicy to support signature verification (QiWang19) (OCPNODE-1628)
• 1406: (142/142) microshift: USHIFT 1104 - MicroShift CSI Snapshotting Integration (copejon) (USHIFT-1140)
• 1407: (131/131) network: Networking: egress IP multi-NIC proposal (martinkennelly) (SDN-1123)
• 1409: (42/42) network: Upgrading to 4.14 with OVN IC (ricky-rav) (SDN-3905)
• 1410: (55/55) cluster-logging: LOG-1344: Multi clusterlogforwarder proposal (jcantrill) (LOG-1344)
• 1412: (46/46) general: AUTH-387: auth: add enhancement for unsupported direct kube-apiserver oidc config (stlaz)
• 1414: (66/66) network: SDN-4004: Admin Network Policy in OVN-K (tssurya) (SDN-2931) (SDN-2932)
• 1417: (288/288) multi-arch: Support for Multiarch Manager Operator (Prashanth684) (MIXEDARCH-215)
• 1419: (36/36) cluster-logging: Fine grained logs access (aminesnow) (LOG-4020)
• 1421: (162/162) general: Shared and Guaranteed CPU Pools (bartwensley) (CNF-8759)
• 1423: (20/20) storage: STOR-1310: Enhancement for Secrets Store CSI Driver Operator (dobsonj) (STOR-676)
• 1426: (264/264) monitoring: MON-3193: Proposal to switch from prometheus-adapter to metrics-server for implementing resource metric API (slashpai) (MON-3153)
• 1429: (76/76) console: ODC-7331: New ConsoleSample CRD proposal (jerolimov) (ODC-7241)
• 1434: (12/12) housekeeping: update owners list (dhellmann)
• 1445: (63/63) microshift: USHIFT-1473: feat: retro ep for storage migration (eggfoobar) (USHIFT-1473)
• 1447: (15/15) etcd: ETCD-425: adding etcd tuning profiles enhancement (dusk125) (ETCD-425)
• 1461: (110/110) general: OCPCLOUD-1910: Installing Cluster API components in OpenShift (damdo) (OCPCLOUD-1910)
• 1471: (64/64) storage: STOR-1454: merge CSI driver operators (jsafrane) (STOR-1437)
• 1481: (250/250) machine-config: Pin and pre-load images (jhernand) (RFE-4482)
• 1483: (101/101) update: Don't require registry during reboot and upgrade (jhernand) (RFE-4482)
• 1485: (138/138) update: OTA-916: ClusterVersion has option to reach local OSUS instance for signature verification (PratikMahajan) (OTA-916)
• 1486: (9/9) etcd: Automated Backups of Etcd (hasbro17) (ETCD-81)
• 1508: (10/10) cluster-logging: LOG-4603: Add log forwarder input selectors for content filtering (jcantrill) (LOG-2155)
• 1518: (7/7) dev-guide: CPSYN-313: document policy for making breaking changes (dhellmann)

Merged Pull Requests Modifying Existing Documents

• 1287: (3/22) dev-guide: dev-guide/api-conventions: Explain preference for single canonical phrasing (wking)
• 1300: (3/28) guidelines: Update user story guidance in enhancement template (JoelSpeed)
• 1313: (48/48) network: Update Egress Services enhancement (oribon) (SDN-2682)
• 1315: (10/10) installer: enhancements/installer/component-selection: Clarify cluster-bot testing (wking) (OCPPLAN-7589)
• 1323: (11/11) general: OTA-787: enhancements/update/update-blocker-lifecycle: Port from Bugzilla to Jira (wking)
• 1324: (23/23) machine-api: Bug 1943194: update cluster-autoscaler-operator enhancement (elmiko)
• 1326: (3/3) update: upgrades OWNERS: add current OTA team members and remove former ones (petr-muller)
• 1329: (7/7) api-review: CFE-757: Update changes made during Azure user tags implementation (bharath-b-rh) (OCPPLAN-8155) (CORS-2249)
• 1330: (31/31) ingress: Update Automated Deployment usage in Gateway API enhancement. (gcs278) (NE-1105) (NE-1107) (NE-1108)
• 1331: (22/22) general: CONVENTIONS.md: document requirements for metrics (simonpasquier)
• 1332: (124/124) ingress: Update gateway-api with LB management (Miciah) (NE-1105) (NE-1107) (NE-1108)
• 1336: (6/6) dev-guide: Host port registry: run-once-duration-override webhook (ardaguclu)
• 1337: (3/3) machine-api: lint issues (miyadav)
• 1341: (4/4) ingress: Update gateway-api with dev preview namespace decision (gcs278) (NE-1105) (NE-1107) (NE-1108)
• 1343: (10/10) installer: Encrypted Storage: Update Required Fields (patrickdillon) (CORS-2049) (OCPPLAN-9307)
• 1347: (28/28) ingress: Updated gateway-api with details on ReferenceGrants (gcs278) (NE-1105) (NE-1107) (NE-1108)
• 1348: (30/30) ingress: Update gateway-api with updates for OSSM 2.3.1 features (gcs278) (NE-1105) (NE-1107) (NE-1108)
• 1349: (26/26) ingress: NE-1176 Should we have a feature gate? (candita) (NE-1105) (NE-1107) (NE-1108)
• 1351: (3/3) installer: Update install exit codes enhancement to reflect actual values (stbenjam)
• 1353: (6/6) cloud-integration: Update External platform type EP with implementation histotry block (lobziik) (OCPPLAN-9429) (OCPPLAN-8156)
• 1355: (19/19) dev-guide: Update host-port-registry for etcd port 9980 (sfowl)
• 1358: (3/3) housekeeping: add pacevedom as team lead of the microshift team (dhellmann)
• 1359: (23/23) console: additional updates for dynamic plugin GA (spadgett)
• 1366: (18/18) microshift: MicroShift: update apiserver certificates configuration + networking (pacevedom) (USHIFT-716)
• 1367: (4/4) dev-guide: add explanation for 'no functions' (deads2k)
• 1377: (14/14) network: Network: make namespaceSelector a mandatory field for dynamicHops (jordigilh) (SDN-2481)
• 1378: (24/24) cloud-integration: OCPCLOUD-2011: Update implementation history of External platform type EP (adriengentil) (OCPPLAN-9429) (OCPPLAN-8156)
• 1379: (10/10) guidelines: Clean up EP guidance docs (bparees)
• 1382: (83/83) network: EgressService: Separate Network and SNAT (oribon) (SDN-2682)
• 1383: (6/6) console: Fix broken documentation url (seulsale)
• 1394: (27/27) ingress: NE-1261: Add test plan to enhancement proposal (candita) (NE-1105) (NE-1107) (NE-1108)
• 1398: (20/20) cluster-logging: Update flow control API enhancement to match final implementation (alanconway)
• 1399: (16/16) dev-guide: OpenShift API Conventions: no annotations convention (ingvagabund)
• 1418: (14/14) api-review: CFE-862 : Update Azure user-defined tags EP with GA details (bharath-b-rh) (OCPPLAN-8155) (CORS-2249)
• 1420: (3/3) update: enhancements/update/targeted-update-edge-blocking: Drop Evaluating (wking)
• 1428: (14/14) 059 guidelines: Clarify that enabling upstream alpha features need staff-eng approval (bparees)
• 1435: (3/3) housekeeping: add joepvd for the art team (dhellmann)
• 1437: (3/3) cluster-logging: Fix broken link (alanconway) (LOG-3734)
• 1439: (38/38) microshift: USHIFT-1414: Update MicroShift OSTree updateability post-implementation (pmtk) (USHIFT-518)
• 1443: (17/17) cloud-integration: Add implementation details to tokenized auth (jsafrane) (OCPBU-4) (PORTENABLE-471) (CCO-286)
• 1444: (29/29) installer: SPLAT-653: Updates in installer/aws-localzones (mtulio) (RFE-2782)
• 1451: (4/4) cluster-logging: Update multi ClusterLogForwarder proposal for LogFileMetricsExporter (jcantrill) (LOG-1344)
• 1454: (4/4) storage: Add ClusterRoles to Secrets Store CSI Driver Operator enhancement (dobsonj) (STOR-676)
• 1458: (4/4) console: Fix of a broken link (Mylanos)
• 1459: (10/10) api-review: CFE-916: Update TechPreview limitations for GCP tags support (bharath-b-rh) (OCPPLAN-8155) (CORS-2455)
• 1460: (5/5) guidelines: Include hypershift use case in template (enxebre)
• 1464: (19/19) windows-containers: WINC-1102: Update WICD, node-proxy enhancements (mansikulkarni96)
• 1467: (3/3) dev-guide: dev-guide/host-port-registry: Declare cluster-version operator metrics on TCP 9099 (wking)
• 1470: (5/5) storage: mark ebs-operator.md as replaced (jsafrane)
• 1473: (8/8) dev-guide: dev-guide/host-port-registry: Add process and control-plane only columns (wking)
• 1475: (42/42) windows-containers: csi-proxy upgrade procedure updates (sebsoto) (OCPBU-465)
• 1477: (15/15) api-review: ICSP to IDMS update the implementation migration path (QiWang19)
• 1487: (66/66) oc: Implementation details for --all-images (dharmit)
• 1488: (3/3) cluster-logging: Update multi-cluster-log-forwarder.md to correct api spec (jcantrill) (LOG-1344)
• 1491: (4/4) dev-guide: Add protocol and control-plane for ovn and sdn ports in host port registry (ricky-rav)
• 1501: (5/5) installer: OTA-1041: Add some warnings about gotchas that have caused issues for teams doing capability implementations (bparees) (OCPPLAN-7589)
• 1507: (3/3) update: enhancements/update/targeted-update-edge-blocking: 1s between different PromQL (wking)
• 1520: (4/4) dev-guide: Add 9257 port to host port registry (racheljpg)
• 1529: (6/6) housekeeping: add missing staff engineers (dhellmann)

Open Changes

<PR ID>: (activity this week / total activity) summary

There were 33 Open pull requests:

• 1368: (57/57) machine-config: OCPNODE-1525: Support Evented PLEG in Openshift (sairameshv) (OCPNODE-1525)
• 1415: (351/351) ingress: NE-1129: Make ingress operator optional on HyperShift (alebedev87) (NE-1129)
• 1431: (207/207) ingress: OCPSTRAT-139: Ingress operator dashboard (jotak) (OCPSTRAT-139) (NETOBSERV-1052)
• 1436: (248/248) dns: NE-1325: External DNS Operator support for Shared VPCs (gcs278)
• 1456: (250/250) network: SDN-4035: IPAM for VMs for OVN Kubernetes secondary networks (maiqueb) (SDN-4035)
• 1463: (74/74) network: Mutable dual-stack VIPs (mkowalski) (OCPSTRAT-178) (OPNET-340) (OPNET-80)
• 1465: (207/207) machine-api: OCPCLOUD-1578: Add enhancement for converting Machine API resource to Cluster API (JoelSpeed) (OCPCLOUD-1578)
• 1468: (76/76) installer: CORS-2062: Customer configured DNS for cloud platforms AWS, Azure and GCP (sadasu) (CORS-1874)
• 1479: (37/37) cluster-api: Enhancement for installing OpenShift natively via Cluster API (JoelSpeed)
• 1480: (37/37) kube-apiserver: AUTH-387: kube-apiserver: allow unsupported files sync (stlaz) (AUTH-387)
• 1490: (156/156) machine-config: MCO-811: MachineConfigNode introduction for MCO State Reporting (cdoern) (MCO-452)
• 1492: (40/40) update: OTA-1029: Add CVO Log level API (Davoska) (OTA-1029)
• 1494: (67/67) observability-ui: add observability ui operator proposal (jgbernalp) (OU-204)
• 1496: (227/227) machine-config: Managing boot images via the MCO (djoshy) (MCO-589)
• 1497: (26/26) cluster-logging: LOG-4606: Initial proposal for Azure Monitor Log integration (vparfonov)
• 1502: (56/56) security: Create tls-artifacts-registry enhancement (vrutkovs) (API-1603)
• 1503: (39/39) cluster-logging: Add LokiStack tokenized auth proposal (periklis) (OCPSTRAT-6) (OCPSTRAT-171 (AWS STS)) (OCPSTRAT-114 (Azure WIF)) (OCPSTRAT-922 (GCP WIF)) (LOG-4540 (AWS & Azure)) (LOG-4754 (GCP))
• 1506: (145/145) machine-api: [OSD-15261] CPMS: allow automatic vertical scaling. (bergmannf) (OSD-15261)
• 1513: (37/37) cluster-logging: Added enhancements/cluster-logging/content-filter.md (alanconway)
• 1514: (195/195) ingress: NE-761: Support for admin configured CA trust bundle in Ingress Operator (bharath-b-rh) (RFE-2182) (OCPSTRAT-431) (NE-761)
• 1515: (31/31) machine-config: on-cluster builds enhancement (cheesesashimi) (MCO-834)
• 1517: (66/66) oc: OCPSTRAT-784: Simplify and unify adding nodes on day 2 using agent-based installer approach (andfasano) (OCPSTRAT-784) (AGENT-682)
• 1521: (9/9) network: North-South IPsec support (yuvalk)
• 1524: (36/36) cluster-logging: Add multi-cluster-observability-addon proposal (periklis) (OBSDA-356) (OBSDA-393) (LOG-4539) (OBSDA-489)
• 1525: (48/48) machine-config: MCO-507: admin defined reboot policy enhancement (yuqi-zhang)
• 1528: (197/197) installer: Enabling CAPI-based Installations in openshift-install (patrickdillon) (CORS-2840)
• 1530: (5/5) release-controller: handle QE jobs in release-controller (jianzhangbjz) (edit)
• 1531: (65/65) windows-containers: WINC-1174: WinC Disconnected Support (saifshaikh48) (OCPSTRAT-619) (WINC-936)
• 1532: (4/4) node-tuning: CNF-10784: Mixed cpu node plugin - Enhancement update (Tal-or) (CNF-7603) (1421) (mixed-cpu-node-plugin)

Open Pull Requests Modifying Existing Documents

• 1411: (33/33) dev-guide: Add exception to pointer guidance for structs that must be omitted (JoelSpeed)
• 1446: (290/290) ingress: NE-1366: Revisions for set-delete-http-headers EP (miheer) (NE-982) (RFE-464)
• 1522: (5/5) update: OTA-916: enhancements/update/configurable-clusterversion-signature-stores: Tech-preview first (wking) (OTA-916)
• 1526: (2/2) cluster-logging: Update forwarder-input-selectors.md (jcantrill) (LOG-2155)