NO-ISSUE: rebase-release-4.22-4.22.0-0.nightly-2026-04-13-230307_amd64-2026-04-13_arm64-2026-04-14

[microshift-rebase-script]

amd64: 4.22.0-0.nightly-2026-04-13-230307
arm64: 4.22.0-0.nightly-arm64-2026-04-14-203621
prow job: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-microshift-release-4.22-periodics-rebase-on-nightlies/2044264616309035008

• api embedded-component e9d6d439b48bfa2d127ee90c28e6d0f55243b620 to 464776f9520793f0f20645fbcb82d945abb0a05b

  • 22d3aa19 2026-04-07T14:26:51+02:00 MON-4035: Add ThanosQuerierConfig to ClusterMonitoring API
  • e63c0d57 2026-04-07T16:42:28+12:00 OCPBUGS-81627: Load ClusterResourceQuota CRD before CVO manifests
  • 1966dc1a 2026-04-06T16:02:49-04:00 upkeep: add jobtier for tnf jobs to allow verify to check tests
  • e7b9c574 2026-04-06T16:02:49-04:00 Regenerate CRDs and features.md after rebase onto master
  • bc83f5af 2026-04-06T16:02:49-04:00 Enable DualReplica in OKD featureset
  • 682edbd4 2026-04-06T16:02:49-04:00 Promote DualReplica to default
  • b8c3b96d 2026-04-06T14:49:50-04:00 feat: remove pacemaker from payload deployment
  • 7480ccda 2026-04-02T23:53:03+01:00 Add extra padding to avoid table being cut-off
  • a7d84d8f 2026-04-02T23:53:01+01:00 Use static ordering of job variants in HTML output
  • 492ac673 2026-04-02T14:38:52-04:00 upkeep: lowered the validation for agents down to 0
  • e9e6359f 2026-04-02T12:34:05-04:00 feat: add exclusion for pacemaker required conditions
  • 3f0cd07e 2026-04-02T10:37:31-04:00 feat: promote pacemaker to v1 in prep for tnf
  • 71580b7e 2026-04-02T09:35:09-04:00 NE-2520: Promote GatewayAPIWithoutOLM to GA
  • 72cac067 2026-04-01T14:05:14-04:00 Include candidate tier in default sippy queries for feature promotion
  • 78c930f0 2026-03-31T12:59:48-04:00 Remove GCPClusterHostedDNSInstall featuregate
  • a443b3b6 2026-03-26T11:21:00+01:00 CNTRLPLANE-2796: promote the event-ttl feature

• cluster-ingress-operator embedded-component c79099dcdc4e58f5a0d55a47b626a805a02af526 to 2c5b4ef0021db96ba6fecf630c53a15c12134578

  • 210a341 2026-04-09T17:01:02-04:00 OCPBUGS-81550: AWS, Azure, GCP: Add Ingress LB IPs to Infra CR after masters up
  • 5ce7d1c 2026-04-03T13:08:44-04:00 NE-2332: Implement ROUTER_CURVES environment variable
  • d71ebcb 2026-04-02T20:53:38-03:00 Address review comments
  • 07482a1 2026-04-02T20:49:51-03:00 extend subscription unittest to contain expected subscription
  • e71c658 2026-04-02T20:49:51-03:00 Address review comments and make pkg name a constant
  • 9533689 2026-04-02T20:49:51-03:00 Add unit tests for the new subscription conflict management logic
  • 9dee19f 2026-04-02T20:49:51-03:00 fix the logic to verify if package is installed
  • 0d9d740 2026-04-02T20:49:51-03:00 Add status conditions to OSSM subscription takeover
  • 27a962a 2026-04-02T20:49:51-03:00 Address comments
  • e1691ac 2026-04-02T20:49:51-03:00 Add every ossm subscription to state and to related objects
  • a80bbff 2026-04-02T20:49:50-03:00 NE-2224: Do not take over OSSM subscription
  • 0da1246 2026-03-27T19:48:03-04:00 OCPBUGS-3917: Filter non-FIPS TLS 1.3 ciphers and validate effective profiles

• cluster-kube-apiserver-operator embedded-component de2a3ebcb3ceea0ea411a6fbb9b5b52c18c27e06 to 6df1155aa6e1d29f77b7b2aa1973ae2721975dae

  • f0b1025 2026-03-23T17:29:05-04:00 Update pkg/operator/starter.go
  • bf51996 2026-03-23T10:41:37-04:00 add network policies for apiserver operator and operand
  • 3c124fc 2026-03-18T09:05:18+01:00 bindata/bootkube: Remove configmap-csr-controller-ca.yaml
  • d22154c 2026-02-23T12:19:42-05:00 scc: fix uid{Min,Max}Range for nested-container

• cluster-kube-controller-manager-operator embedded-component 7df2876085ac1d76ac11bf476c0538876110c9f0 to e2d54f2da0346309b329c34552d9896476683fc8

  • 295165e 2026-04-09T21:08:09Z CNTRLPLANE-3011: Create network policies for kube-controller-manager components (USHIFT-19: fix location of example configuration file in RPM #919)
  • f6a1d00 2026-04-09T16:37:45-04:00 enable configurable PKI for managed certificate rotation
  • e691655 2026-04-09T15:40:07-04:00 vendor: bump
  • feaa384 2026-03-17T16:01:18+01:00 bindata: Import configmap-csr-controller-ca.yaml from KAS-O

• cluster-kube-scheduler-operator embedded-component ddbfddb8a0c77b03c1d7c994991caa031d99c330 to b80850a15da8485c52c486de30cec79600782206

  • 7a7f230 2026-04-10T11:59:15-04:00 vendor: bump library-go, api, client-go
  • 4fafb58 2026-03-18T14:17:11+01:00 Add operator and operand network policies

• cluster-network-operator embedded-component 594de43f4f1567e5ce55be2eff7c0cf28d1e09e7 to bc5af87f8957262a504b225591593c92db1c8bc2

  • a5238cc 2026-04-08T16:37:58+02:00 Align VTEP CRD additionalPrinterColumns with upstream
  • 740568c 2026-04-02T00:59:59+02:00 Add VTEP update/patch RBAC for CM
  • f247bbe 2026-04-02T00:35:17+02:00 Update the CRDs for CUDN/VTEP APIs
  • 7dc6fba 2026-03-25T06:02:03-04:00 Add NetworkPolicies for CNO and its operands
  • 9fb14f4 2026-01-30T12:16:11+01:00 multus: MultiNetworkPolicy nftables

• cluster-openshift-controller-manager-operator embedded-component e0d28ec9e1c91b0b72ff66c98f7a3b126f4480ad to e1c3674198c6c1274fd3fd3c3108eb4cade4eb0a

  • e026db0 2026-04-08T22:41:21-07:00 Add checks to ensure that cache syncs were actually successful before proceeding.
  • a3e56c2 2026-04-09T00:27:03Z add network policies (nightly image builds #414)
  • 9b9fceb 2026-04-03T16:07:02-07:00 Ensure that we don't have opera

The change list was truncated. See scripts/auto-rebase/changelog.txt in the PR for the full details.

/label tide/merge-method-squash
/label backport-risk-assessed
/label jira/valid-bug

[openshift-ci-robot]

@microshift-rebase-script[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

amd64: 4.22.0-0.nightly-2026-04-13-230307
arm64: 4.22.0-0.nightly-arm64-2026-04-14-203621
prow job: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-microshift-release-4.22-periodics-rebase-on-nightlies/2044264616309035008

• api embedded-component e9d6d439b48bfa2d127ee90c28e6d0f55243b620 to 464776f9520793f0f20645fbcb82d945abb0a05b

• 22d3aa19 2026-04-07T14:26:51+02:00 MON-4035: Add ThanosQuerierConfig to ClusterMonitoring API

• e63c0d57 2026-04-07T16:42:28+12:00 OCPBUGS-81627: Load ClusterResourceQuota CRD before CVO manifests

• 1966dc1a 2026-04-06T16:02:49-04:00 upkeep: add jobtier for tnf jobs to allow verify to check tests

• e7b9c574 2026-04-06T16:02:49-04:00 Regenerate CRDs and features.md after rebase onto master

• bc83f5af 2026-04-06T16:02:49-04:00 Enable DualReplica in OKD featureset

• 682edbd4 2026-04-06T16:02:49-04:00 Promote DualReplica to default

• b8c3b96d 2026-04-06T14:49:50-04:00 feat: remove pacemaker from payload deployment

• 7480ccda 2026-04-02T23:53:03+01:00 Add extra padding to avoid table being cut-off

• a7d84d8f 2026-04-02T23:53:01+01:00 Use static ordering of job variants in HTML output

• 492ac673 2026-04-02T14:38:52-04:00 upkeep: lowered the validation for agents down to 0

• e9e6359f 2026-04-02T12:34:05-04:00 feat: add exclusion for pacemaker required conditions

• 3f0cd07e 2026-04-02T10:37:31-04:00 feat: promote pacemaker to v1 in prep for tnf

• 71580b7e 2026-04-02T09:35:09-04:00 NE-2520: Promote GatewayAPIWithoutOLM to GA

• 72cac067 2026-04-01T14:05:14-04:00 Include candidate tier in default sippy queries for feature promotion

• 78c930f0 2026-03-31T12:59:48-04:00 Remove GCPClusterHostedDNSInstall featuregate

• a443b3b6 2026-03-26T11:21:00+01:00 CNTRLPLANE-2796: promote the event-ttl feature

• cluster-ingress-operator embedded-component c79099dcdc4e58f5a0d55a47b626a805a02af526 to 2c5b4ef0021db96ba6fecf630c53a15c12134578

• 210a341 2026-04-09T17:01:02-04:00 OCPBUGS-81550: AWS, Azure, GCP: Add Ingress LB IPs to Infra CR after masters up

• 5ce7d1c 2026-04-03T13:08:44-04:00 NE-2332: Implement ROUTER_CURVES environment variable

• d71ebcb 2026-04-02T20:53:38-03:00 Address review comments

• 07482a1 2026-04-02T20:49:51-03:00 extend subscription unittest to contain expected subscription

• e71c658 2026-04-02T20:49:51-03:00 Address review comments and make pkg name a constant

• 9533689 2026-04-02T20:49:51-03:00 Add unit tests for the new subscription conflict management logic

• 9dee19f 2026-04-02T20:49:51-03:00 fix the logic to verify if package is installed

• 0d9d740 2026-04-02T20:49:51-03:00 Add status conditions to OSSM subscription takeover

• 27a962a 2026-04-02T20:49:51-03:00 Address comments

• e1691ac 2026-04-02T20:49:51-03:00 Add every ossm subscription to state and to related objects

• a80bbff 2026-04-02T20:49:50-03:00 NE-2224: Do not take over OSSM subscription

• 0da1246 2026-03-27T19:48:03-04:00 OCPBUGS-3917: Filter non-FIPS TLS 1.3 ciphers and validate effective profiles

• cluster-kube-apiserver-operator embedded-component de2a3ebcb3ceea0ea411a6fbb9b5b52c18c27e06 to 6df1155aa6e1d29f77b7b2aa1973ae2721975dae

• f0b1025 2026-03-23T17:29:05-04:00 Update pkg/operator/starter.go

• bf51996 2026-03-23T10:41:37-04:00 add network policies for apiserver operator and operand

• 3c124fc 2026-03-18T09:05:18+01:00 bindata/bootkube: Remove configmap-csr-controller-ca.yaml

• d22154c 2026-02-23T12:19:42-05:00 scc: fix uid{Min,Max}Range for nested-container

• cluster-kube-controller-manager-operator embedded-component 7df2876085ac1d76ac11bf476c0538876110c9f0 to e2d54f2da0346309b329c34552d9896476683fc8

• 295165e 2026-04-09T21:08:09Z CNTRLPLANE-3011: Create network policies for kube-controller-manager components (USHIFT-19: fix location of example configuration file in RPM #919)

• f6a1d00 2026-04-09T16:37:45-04:00 enable configurable PKI for managed certificate rotation

• e691655 2026-04-09T15:40:07-04:00 vendor: bump

• feaa384 2026-03-17T16:01:18+01:00 bindata: Import configmap-csr-controller-ca.yaml from KAS-O

• cluster-kube-scheduler-operator embedded-component ddbfddb8a0c77b03c1d7c994991caa031d99c330 to b80850a15da8485c52c486de30cec79600782206

• 7a7f230 2026-04-10T11:59:15-04:00 vendor: bump library-go, api, client-go

• 4fafb58 2026-03-18T14:17:11+01:00 Add operator and operand network policies

• cluster-network-operator embedded-component 594de43f4f1567e5ce55be2eff7c0cf28d1e09e7 to bc5af87f8957262a504b225591593c92db1c8bc2

• a5238cc 2026-04-08T16:37:58+02:00 Align VTEP CRD additionalPrinterColumns with upstream

• 740568c 2026-04-02T00:59:59+02:00 Add VTEP update/patch RBAC for CM

• f247bbe 2026-04-02T00:35:17+02:00 Update the CRDs for CUDN/VTEP APIs

• 7dc6fba 2026-03-25T06:02:03-04:00 Add NetworkPolicies for CNO and its operands

• 9fb14f4 2026-01-30T12:16:11+01:00 multus: MultiNetworkPolicy nftables

• cluster-openshift-controller-manager-operator embedded-component e0d28ec9e1c91b0b72ff66c98f7a3b126f4480ad to e1c3674198c6c1274fd3fd3c3108eb4cade4eb0a

• e026db0 2026-04-08T22:41:21-07:00 Add checks to ensure that cache syncs were actually successful before proceeding.

• a3e56c2 2026-04-09T00:27:03Z add network policies (nightly image builds #414)

• 9b9fceb 2026-04-03T16:07:02-07:00 Ensure that we don't have opera

The change list was truncated. See scripts/auto-rebase/changelog.txt in the PR for the full details.

/label tide/merge-method-squash
/label backport-risk-assessed
/label jira/valid-bug

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci-robot]

@microshift-rebase-script[bot]: This pull request explicitly references no jira issue.

Retaining the jira/valid-bug label as it was manually added.

Details

In response to this:

amd64: 4.22.0-0.nightly-2026-04-13-230307
arm64: 4.22.0-0.nightly-arm64-2026-04-14-203621
prow job: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-microshift-release-4.22-periodics-rebase-on-nightlies/2044264616309035008

• api embedded-component e9d6d439b48bfa2d127ee90c28e6d0f55243b620 to 464776f9520793f0f20645fbcb82d945abb0a05b

• 22d3aa19 2026-04-07T14:26:51+02:00 MON-4035: Add ThanosQuerierConfig to ClusterMonitoring API

• e63c0d57 2026-04-07T16:42:28+12:00 OCPBUGS-81627: Load ClusterResourceQuota CRD before CVO manifests

• 1966dc1a 2026-04-06T16:02:49-04:00 upkeep: add jobtier for tnf jobs to allow verify to check tests

• e7b9c574 2026-04-06T16:02:49-04:00 Regenerate CRDs and features.md after rebase onto master

• bc83f5af 2026-04-06T16:02:49-04:00 Enable DualReplica in OKD featureset

• 682edbd4 2026-04-06T16:02:49-04:00 Promote DualReplica to default

• b8c3b96d 2026-04-06T14:49:50-04:00 feat: remove pacemaker from payload deployment

• 7480ccda 2026-04-02T23:53:03+01:00 Add extra padding to avoid table being cut-off

• a7d84d8f 2026-04-02T23:53:01+01:00 Use static ordering of job variants in HTML output

• 492ac673 2026-04-02T14:38:52-04:00 upkeep: lowered the validation for agents down to 0

• e9e6359f 2026-04-02T12:34:05-04:00 feat: add exclusion for pacemaker required conditions

• 3f0cd07e 2026-04-02T10:37:31-04:00 feat: promote pacemaker to v1 in prep for tnf

• 71580b7e 2026-04-02T09:35:09-04:00 NE-2520: Promote GatewayAPIWithoutOLM to GA

• 72cac067 2026-04-01T14:05:14-04:00 Include candidate tier in default sippy queries for feature promotion

• 78c930f0 2026-03-31T12:59:48-04:00 Remove GCPClusterHostedDNSInstall featuregate

• a443b3b6 2026-03-26T11:21:00+01:00 CNTRLPLANE-2796: promote the event-ttl feature

• cluster-ingress-operator embedded-component c79099dcdc4e58f5a0d55a47b626a805a02af526 to 2c5b4ef0021db96ba6fecf630c53a15c12134578

• 210a341 2026-04-09T17:01:02-04:00 OCPBUGS-81550: AWS, Azure, GCP: Add Ingress LB IPs to Infra CR after masters up

• 5ce7d1c 2026-04-03T13:08:44-04:00 NE-2332: Implement ROUTER_CURVES environment variable

• d71ebcb 2026-04-02T20:53:38-03:00 Address review comments

• 07482a1 2026-04-02T20:49:51-03:00 extend subscription unittest to contain expected subscription

• e71c658 2026-04-02T20:49:51-03:00 Address review comments and make pkg name a constant

• 9533689 2026-04-02T20:49:51-03:00 Add unit tests for the new subscription conflict management logic

• 9dee19f 2026-04-02T20:49:51-03:00 fix the logic to verify if package is installed

• 0d9d740 2026-04-02T20:49:51-03:00 Add status conditions to OSSM subscription takeover

• 27a962a 2026-04-02T20:49:51-03:00 Address comments

• e1691ac 2026-04-02T20:49:51-03:00 Add every ossm subscription to state and to related objects

• a80bbff 2026-04-02T20:49:50-03:00 NE-2224: Do not take over OSSM subscription

• 0da1246 2026-03-27T19:48:03-04:00 OCPBUGS-3917: Filter non-FIPS TLS 1.3 ciphers and validate effective profiles

• cluster-kube-apiserver-operator embedded-component de2a3ebcb3ceea0ea411a6fbb9b5b52c18c27e06 to 6df1155aa6e1d29f77b7b2aa1973ae2721975dae

• f0b1025 2026-03-23T17:29:05-04:00 Update pkg/operator/starter.go

• bf51996 2026-03-23T10:41:37-04:00 add network policies for apiserver operator and operand

• 3c124fc 2026-03-18T09:05:18+01:00 bindata/bootkube: Remove configmap-csr-controller-ca.yaml

• d22154c 2026-02-23T12:19:42-05:00 scc: fix uid{Min,Max}Range for nested-container

• cluster-kube-controller-manager-operator embedded-component 7df2876085ac1d76ac11bf476c0538876110c9f0 to e2d54f2da0346309b329c34552d9896476683fc8

• 295165e 2026-04-09T21:08:09Z CNTRLPLANE-3011: Create network policies for kube-controller-manager components (USHIFT-19: fix location of example configuration file in RPM #919)

• f6a1d00 2026-04-09T16:37:45-04:00 enable configurable PKI for managed certificate rotation

• e691655 2026-04-09T15:40:07-04:00 vendor: bump

• feaa384 2026-03-17T16:01:18+01:00 bindata: Import configmap-csr-controller-ca.yaml from KAS-O

• cluster-kube-scheduler-operator embedded-component ddbfddb8a0c77b03c1d7c994991caa031d99c330 to b80850a15da8485c52c486de30cec79600782206

• 7a7f230 2026-04-10T11:59:15-04:00 vendor: bump library-go, api, client-go

• 4fafb58 2026-03-18T14:17:11+01:00 Add operator and operand network policies

• cluster-network-operator embedded-component 594de43f4f1567e5ce55be2eff7c0cf28d1e09e7 to bc5af87f8957262a504b225591593c92db1c8bc2

• a5238cc 2026-04-08T16:37:58+02:00 Align VTEP CRD additionalPrinterColumns with upstream

• 740568c 2026-04-02T00:59:59+02:00 Add VTEP update/patch RBAC for CM

• f247bbe 2026-04-02T00:35:17+02:00 Update the CRDs for CUDN/VTEP APIs

• 7dc6fba 2026-03-25T06:02:03-04:00 Add NetworkPolicies for CNO and its operands

• 9fb14f4 2026-01-30T12:16:11+01:00 multus: MultiNetworkPolicy nftables

• cluster-openshift-controller-manager-operator embedded-component e0d28ec9e1c91b0b72ff66c98f7a3b126f4480ad to e1c3674198c6c1274fd3fd3c3108eb4cade4eb0a

• e026db0 2026-04-08T22:41:21-07:00 Add checks to ensure that cache syncs were actually successful before proceeding.

• a3e56c2 2026-04-09T00:27:03Z add network policies (nightly image builds #414)

• 9b9fceb 2026-04-03T16:07:02-07:00 Ensure that we don't have opera

The change list was truncated. See scripts/auto-rebase/changelog.txt in the PR for the full details.

/label tide/merge-method-squash
/label backport-risk-assessed
/label jira/valid-bug

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[pacevedom]

/retest

[openshift-ci]

@microshift-rebase-script[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[pacevedom]

/lgtm

[pacevedom]

/verified by CI

[openshift-ci-robot]

@pacevedom: This PR has been marked as verified by CI.

Details

In response to this:

/verified by CI

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: microshift-rebase-script[bot], pacevedom

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [pacevedom]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment