NO-ISSUE: rebase-release-4.22-4.22.0-0.nightly-2026-03-19-202824_amd64-2026-03-19_arm64-2026-03-23

[microshift-rebase-script]

amd64: 4.22.0-0.nightly-2026-03-19-202824
arm64: 4.22.0-0.nightly-arm64-2026-03-23-032344
prow job: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-microshift-release-4.22-periodics-rebase-on-nightlies/2035929780536217600

• api embedded-component b3c6104577797f804d921ac05ad91aa4186818f2 to 1f2fa3f09f4ea0d6c2b5a09ba8608b70c41f616f

  • 221095e5 2026-03-17T19:17:51+08:00 Add API support and FeatureGate for OVN-Kubernetes no-overlay mode
  • 969e5979 2026-03-16T13:57:50-04:00 OPRUN-4466: Add NewOLMConfigAPI feature gate
  • b1be6747 2026-03-16T10:15:34-04:00 Update jira component to 'HPCASE / TLS Adherence'
  • 69cff918 2026-03-16T10:14:47-04:00 Test: "Should be able to set tlsAdherence from unset on update"
  • e05bcd80 2026-03-16T10:14:47-04:00 Test omitted tlsAdherence field
  • c4e5922d 2026-03-16T10:14:47-04:00 s/which/if in tlsAdherence control language
  • 76fab1a3 2026-03-16T10:14:47-04:00 Fix line break formatting
  • 12ea9a63 2026-03-16T10:14:47-04:00 Update LegacyExternalAPIServerComponentsOnly to LegacyAdheringComponentsOnly and update LegacyAdheringComponentsOnly behavior
  • 165d38f0 2026-03-16T10:14:47-04:00 Add TLSAdherence field to APIServer API
  • 4d95f8cb 2026-03-15T17:12:05-04:00 Check duplicate entries in job tiers
  • f3165b71 2026-03-13T16:56:51-04:00 address review comments
  • ca4b06c0 2026-03-13T13:32:40+01:00 MCO-2142: Avoid OSImageStream defaultStream unset
  • cece552d 2026-03-12T19:50:17-04:00 Add variant OS and JobTier to promotion check

• cluster-dns-operator embedded-component 7709285a381bc9ca24f833bab4789d327a856440 to 90d93ab1a6b5b1b9bf8cd1483930b341464cb56a

  • 1e7d47f 2026-03-13T14:02:38-03:00 NE-2500: Remove unnecessary policy
  • d802cfd 2026-03-12T11:57:41-03:00 NE-2500: limit network policy watching and fix hypershift manifests
  • 60b42af 2026-03-12T09:54:10-03:00 NE-1476 - Added network policies for DNS

• cluster-ingress-operator embedded-component 88b7301f88ba24577de72a84d52675f51ea30886 to b347d80886bf5c368695e4912667d71e2cf2a22d

  • 11b3c01 2026-03-16T20:58:16-04:00 OCPBUGS-78555: Increase Gateway E2E timeout to 5 minutes
  • 2f204df 2026-03-16T13:58:30-04:00 Add RBAC to allow operator to manage network policies
  • 18f7934 2026-03-16T19:01:32+08:00 tests-extension: Append suite names to OTE test specs to preserve original test names
  • fbe7dba 2026-02-15T23:35:02+01:00 NE-2418: Add e2e test for haproxy_max_connections metric

• cluster-kube-apiserver-operator embedded-component deb703d26f017aea26d4619a7422094ab12b3e65 to c670e01a29cfe5558ca50f35b422ea335ac51f06

  • 8f7d837 2026-03-17T09:46:02+01:00 CNTRLPLANE-2622: config tls on check-endpoints container

• cluster-kube-controller-manager-operator embedded-component a7ff6a4647805362618c61a031196cc791cb9963 to 41ab963edfef9473111879069620971365231c49

  • 1e5d6a7 2026-02-09T11:17:14+01:00 chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors

• cluster-kube-scheduler-operator embedded-component a51975da7993b40c35a892e3437f354cb3e133d7 to ad1e1bd8f8d50d9ae560e0c72b434655b3273827

  • ff8beaa 2026-02-09T11:16:04+01:00 chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors

• kubernetes embedded-component 2034d92b4a3a51d42e306ba405fc10a89768ac69 to 92d1d9845cd139dfad96dc17ddd70bdfccc7614c

  • f97dabdcb 2026-03-17T10:08:59-07:00 UPSTREAM: : Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS

• operator-framework-olm embedded-component bf71e98f7511ae273bf6885ac0951d2b3841340b to 1667d8c302c05e6a8cf2b9ea1df093e42a368437

  • a3a93897 2026-03-18T11:35:31+08:00 Fix admin context race condition in parallel tests
  • becc865e 2026-03-18T09:00:47+08:00 automate OCP-87188: Central TLS Profile Consistency
  • 75b5a4e0 2026-03-17T14:32:24-04:00 Revert "Merge pull request USHIFT-758: Include arm release in rebase branch name #1256 from kuiwang02/enhancerace"
  • 8e0301fb 2026-03-16T14:37:48+08:00 Fix admin context race condition in parallel tests

• service-ca-operator embedded-component de11f78073eb847fca80ca6265882c69cb7a747b to ee70e5a3e2d248c360e08f8f484e4cf0bdd36cb4

  • 8e0761d 2026-03-18T23:39:20+08:00 test/e2e: restore operator config after forced rotation to prevent test contamination
  • e863ac3 2026-03-18T15:05:49+08:00 test/e2e: migrate forced-ca-rotation to OTE serial-disruptive suite
  • e7f8a9d 2026-03-18T03:05:59+08:00 test/e2e: migrate time-based-ca-rotation to OTE serial-disruptive suite

• oc image-amd64 cb542c5177b98b84b1ae921bee0d1e264b9ca00c to ee23f0583edad80c6fa3a3eefdcd6b063a97a371

  • 84e31f76 2026-03-18T13:05:19+03:00 Add .coderabbit.yaml and AGENTS.md configurations
  • dedf6262 2026-03-12T09:54:20+03:00 Update golang.org/x libraries to latest
  • 562dc43d 2026-03-12T09:24:13+03:00 Fix lifecycle_test failure
  • 1cf5f00c 2026-03-12T09:24:13+03:00 Skip new resources that do not have Describer
  • 17310cf9 2026-03-12T09:24:13+03:00 Update manifest Include signature
  • 6bbea279 2026-03-12T09:24:13+03:00 Bump openshift libraries
  • 95fad07b 2026-03-12T09:24:13+03:00 Bump some of other packages to keep up to date
  • b0c5ec0d 2026-03-12T09:24:13+03:00 Update metadata for Go 1.25 k8s 1.35
  • 232cf7dd 2026-03-12T09:24:13+03:00 React to the

The change list was truncated. See scripts/auto-rebase/changelog.txt in the PR for the full details.

/label tide/merge-method-squash
/label backport-risk-assessed
/label jira/valid-bug

[openshift-ci-robot]

@microshift-rebase-script[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

amd64: 4.22.0-0.nightly-2026-03-19-202824
arm64: 4.22.0-0.nightly-arm64-2026-03-23-032344
prow job: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-microshift-release-4.22-periodics-rebase-on-nightlies/2035929780536217600

• api embedded-component b3c6104577797f804d921ac05ad91aa4186818f2 to 1f2fa3f09f4ea0d6c2b5a09ba8608b70c41f616f

• 221095e5 2026-03-17T19:17:51+08:00 Add API support and FeatureGate for OVN-Kubernetes no-overlay mode

• 969e5979 2026-03-16T13:57:50-04:00 OPRUN-4466: Add NewOLMConfigAPI feature gate

• b1be6747 2026-03-16T10:15:34-04:00 Update jira component to 'HPCASE / TLS Adherence'

• 69cff918 2026-03-16T10:14:47-04:00 Test: "Should be able to set tlsAdherence from unset on update"

• e05bcd80 2026-03-16T10:14:47-04:00 Test omitted tlsAdherence field

• c4e5922d 2026-03-16T10:14:47-04:00 s/which/if in tlsAdherence control language

• 76fab1a3 2026-03-16T10:14:47-04:00 Fix line break formatting

• 12ea9a63 2026-03-16T10:14:47-04:00 Update LegacyExternalAPIServerComponentsOnly to LegacyAdheringComponentsOnly and update LegacyAdheringComponentsOnly behavior

• 165d38f0 2026-03-16T10:14:47-04:00 Add TLSAdherence field to APIServer API

• 4d95f8cb 2026-03-15T17:12:05-04:00 Check duplicate entries in job tiers

• f3165b71 2026-03-13T16:56:51-04:00 address review comments

• ca4b06c0 2026-03-13T13:32:40+01:00 MCO-2142: Avoid OSImageStream defaultStream unset

• cece552d 2026-03-12T19:50:17-04:00 Add variant OS and JobTier to promotion check

• cluster-dns-operator embedded-component 7709285a381bc9ca24f833bab4789d327a856440 to 90d93ab1a6b5b1b9bf8cd1483930b341464cb56a

• 1e7d47f 2026-03-13T14:02:38-03:00 NE-2500: Remove unnecessary policy

• d802cfd 2026-03-12T11:57:41-03:00 NE-2500: limit network policy watching and fix hypershift manifests

• 60b42af 2026-03-12T09:54:10-03:00 NE-1476 - Added network policies for DNS

• cluster-ingress-operator embedded-component 88b7301f88ba24577de72a84d52675f51ea30886 to b347d80886bf5c368695e4912667d71e2cf2a22d

• 11b3c01 2026-03-16T20:58:16-04:00 OCPBUGS-78555: Increase Gateway E2E timeout to 5 minutes

• 2f204df 2026-03-16T13:58:30-04:00 Add RBAC to allow operator to manage network policies

• 18f7934 2026-03-16T19:01:32+08:00 tests-extension: Append suite names to OTE test specs to preserve original test names

• fbe7dba 2026-02-15T23:35:02+01:00 NE-2418: Add e2e test for haproxy_max_connections metric

• cluster-kube-apiserver-operator embedded-component deb703d26f017aea26d4619a7422094ab12b3e65 to c670e01a29cfe5558ca50f35b422ea335ac51f06

• 8f7d837 2026-03-17T09:46:02+01:00 CNTRLPLANE-2622: config tls on check-endpoints container

• cluster-kube-controller-manager-operator embedded-component a7ff6a4647805362618c61a031196cc791cb9963 to 41ab963edfef9473111879069620971365231c49

• 1e5d6a7 2026-02-09T11:17:14+01:00 chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors

• cluster-kube-scheduler-operator embedded-component a51975da7993b40c35a892e3437f354cb3e133d7 to ad1e1bd8f8d50d9ae560e0c72b434655b3273827

• ff8beaa 2026-02-09T11:16:04+01:00 chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors

• kubernetes embedded-component 2034d92b4a3a51d42e306ba405fc10a89768ac69 to 92d1d9845cd139dfad96dc17ddd70bdfccc7614c

• f97dabdcb 2026-03-17T10:08:59-07:00 UPSTREAM: : Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS

• operator-framework-olm embedded-component bf71e98f7511ae273bf6885ac0951d2b3841340b to 1667d8c302c05e6a8cf2b9ea1df093e42a368437

• a3a93897 2026-03-18T11:35:31+08:00 Fix admin context race condition in parallel tests

• becc865e 2026-03-18T09:00:47+08:00 automate OCP-87188: Central TLS Profile Consistency

• 75b5a4e0 2026-03-17T14:32:24-04:00 Revert "Merge pull request USHIFT-758: Include arm release in rebase branch name #1256 from kuiwang02/enhancerace"

• 8e0301fb 2026-03-16T14:37:48+08:00 Fix admin context race condition in parallel tests

• service-ca-operator embedded-component de11f78073eb847fca80ca6265882c69cb7a747b to ee70e5a3e2d248c360e08f8f484e4cf0bdd36cb4

• 8e0761d 2026-03-18T23:39:20+08:00 test/e2e: restore operator config after forced rotation to prevent test contamination

• e863ac3 2026-03-18T15:05:49+08:00 test/e2e: migrate forced-ca-rotation to OTE serial-disruptive suite

• e7f8a9d 2026-03-18T03:05:59+08:00 test/e2e: migrate time-based-ca-rotation to OTE serial-disruptive suite

• oc image-amd64 cb542c5177b98b84b1ae921bee0d1e264b9ca00c to ee23f0583edad80c6fa3a3eefdcd6b063a97a371

• 84e31f76 2026-03-18T13:05:19+03:00 Add .coderabbit.yaml and AGENTS.md configurations

• dedf6262 2026-03-12T09:54:20+03:00 Update golang.org/x libraries to latest

• 562dc43d 2026-03-12T09:24:13+03:00 Fix lifecycle_test failure

• 1cf5f00c 2026-03-12T09:24:13+03:00 Skip new resources that do not have Describer

• 17310cf9 2026-03-12T09:24:13+03:00 Update manifest Include signature

• 6bbea279 2026-03-12T09:24:13+03:00 Bump openshift libraries

• 95fad07b 2026-03-12T09:24:13+03:00 Bump some of other packages to keep up to date

• b0c5ec0d 2026-03-12T09:24:13+03:00 Update metadata for Go 1.25 k8s 1.35

• 232cf7dd 2026-03-12T09:24:13+03:00 React to the

The change list was truncated. See scripts/auto-rebase/changelog.txt in the PR for the full details.

/label tide/merge-method-squash
/label backport-risk-assessed
/label jira/valid-bug

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[microshift-rebase-script]

Extra messages:

• Deleted following branches: rebase-release-4.18-4.18.0-0.nightly-2026-03-18-040826_amd64-2026-03-18_arm64-2026-03-19, rebase-release-4.19-4.19.0-0.nightly-2026-03-17-202923_amd64-2026-03-17_arm64-2026-03-18, rebase-release-4.20-4.20.0-0.nightly-2026-03-17-142612_amd64-2026-03-17_arm64-2026-03-18, rebase-release-4.22-4.22.0-0.nightly-2026-03-17-033403_amd64-2026-03-17_arm64-2026-03-17

[openshift-ci-robot]

@microshift-rebase-script[bot]: This pull request explicitly references no jira issue.

Retaining the jira/valid-bug label as it was manually added.

Details

In response to this:

amd64: 4.22.0-0.nightly-2026-03-19-202824
arm64: 4.22.0-0.nightly-arm64-2026-03-23-032344
prow job: https://prow.ci.openshift.org/view/gs/origin-ci-test/logs/periodic-ci-openshift-microshift-release-4.22-periodics-rebase-on-nightlies/2035929780536217600

• api embedded-component b3c6104577797f804d921ac05ad91aa4186818f2 to 1f2fa3f09f4ea0d6c2b5a09ba8608b70c41f616f

• 221095e5 2026-03-17T19:17:51+08:00 Add API support and FeatureGate for OVN-Kubernetes no-overlay mode

• 969e5979 2026-03-16T13:57:50-04:00 OPRUN-4466: Add NewOLMConfigAPI feature gate

• b1be6747 2026-03-16T10:15:34-04:00 Update jira component to 'HPCASE / TLS Adherence'

• 69cff918 2026-03-16T10:14:47-04:00 Test: "Should be able to set tlsAdherence from unset on update"

• e05bcd80 2026-03-16T10:14:47-04:00 Test omitted tlsAdherence field

• c4e5922d 2026-03-16T10:14:47-04:00 s/which/if in tlsAdherence control language

• 76fab1a3 2026-03-16T10:14:47-04:00 Fix line break formatting

• 12ea9a63 2026-03-16T10:14:47-04:00 Update LegacyExternalAPIServerComponentsOnly to LegacyAdheringComponentsOnly and update LegacyAdheringComponentsOnly behavior

• 165d38f0 2026-03-16T10:14:47-04:00 Add TLSAdherence field to APIServer API

• 4d95f8cb 2026-03-15T17:12:05-04:00 Check duplicate entries in job tiers

• f3165b71 2026-03-13T16:56:51-04:00 address review comments

• ca4b06c0 2026-03-13T13:32:40+01:00 MCO-2142: Avoid OSImageStream defaultStream unset

• cece552d 2026-03-12T19:50:17-04:00 Add variant OS and JobTier to promotion check

• cluster-dns-operator embedded-component 7709285a381bc9ca24f833bab4789d327a856440 to 90d93ab1a6b5b1b9bf8cd1483930b341464cb56a

• 1e7d47f 2026-03-13T14:02:38-03:00 NE-2500: Remove unnecessary policy

• d802cfd 2026-03-12T11:57:41-03:00 NE-2500: limit network policy watching and fix hypershift manifests

• 60b42af 2026-03-12T09:54:10-03:00 NE-1476 - Added network policies for DNS

• cluster-ingress-operator embedded-component 88b7301f88ba24577de72a84d52675f51ea30886 to b347d80886bf5c368695e4912667d71e2cf2a22d

• 11b3c01 2026-03-16T20:58:16-04:00 OCPBUGS-78555: Increase Gateway E2E timeout to 5 minutes

• 2f204df 2026-03-16T13:58:30-04:00 Add RBAC to allow operator to manage network policies

• 18f7934 2026-03-16T19:01:32+08:00 tests-extension: Append suite names to OTE test specs to preserve original test names

• fbe7dba 2026-02-15T23:35:02+01:00 NE-2418: Add e2e test for haproxy_max_connections metric

• cluster-kube-apiserver-operator embedded-component deb703d26f017aea26d4619a7422094ab12b3e65 to c670e01a29cfe5558ca50f35b422ea335ac51f06

• 8f7d837 2026-03-17T09:46:02+01:00 CNTRLPLANE-2622: config tls on check-endpoints container

• cluster-kube-controller-manager-operator embedded-component a7ff6a4647805362618c61a031196cc791cb9963 to 41ab963edfef9473111879069620971365231c49

• 1e5d6a7 2026-02-09T11:17:14+01:00 chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors

• cluster-kube-scheduler-operator embedded-component a51975da7993b40c35a892e3437f354cb3e133d7 to ad1e1bd8f8d50d9ae560e0c72b434655b3273827

• ff8beaa 2026-02-09T11:16:04+01:00 chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors

• kubernetes embedded-component 2034d92b4a3a51d42e306ba405fc10a89768ac69 to 92d1d9845cd139dfad96dc17ddd70bdfccc7614c

• f97dabdcb 2026-03-17T10:08:59-07:00 UPSTREAM: : Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS

• operator-framework-olm embedded-component bf71e98f7511ae273bf6885ac0951d2b3841340b to 1667d8c302c05e6a8cf2b9ea1df093e42a368437

• a3a93897 2026-03-18T11:35:31+08:00 Fix admin context race condition in parallel tests

• becc865e 2026-03-18T09:00:47+08:00 automate OCP-87188: Central TLS Profile Consistency

• 75b5a4e0 2026-03-17T14:32:24-04:00 Revert "Merge pull request USHIFT-758: Include arm release in rebase branch name #1256 from kuiwang02/enhancerace"

• 8e0301fb 2026-03-16T14:37:48+08:00 Fix admin context race condition in parallel tests

• service-ca-operator embedded-component de11f78073eb847fca80ca6265882c69cb7a747b to ee70e5a3e2d248c360e08f8f484e4cf0bdd36cb4

• 8e0761d 2026-03-18T23:39:20+08:00 test/e2e: restore operator config after forced rotation to prevent test contamination

• e863ac3 2026-03-18T15:05:49+08:00 test/e2e: migrate forced-ca-rotation to OTE serial-disruptive suite

• e7f8a9d 2026-03-18T03:05:59+08:00 test/e2e: migrate time-based-ca-rotation to OTE serial-disruptive suite

• oc image-amd64 cb542c5177b98b84b1ae921bee0d1e264b9ca00c to ee23f0583edad80c6fa3a3eefdcd6b063a97a371

• 84e31f76 2026-03-18T13:05:19+03:00 Add .coderabbit.yaml and AGENTS.md configurations

• dedf6262 2026-03-12T09:54:20+03:00 Update golang.org/x libraries to latest

• 562dc43d 2026-03-12T09:24:13+03:00 Fix lifecycle_test failure

• 1cf5f00c 2026-03-12T09:24:13+03:00 Skip new resources that do not have Describer

• 17310cf9 2026-03-12T09:24:13+03:00 Update manifest Include signature

• 6bbea279 2026-03-12T09:24:13+03:00 Bump openshift libraries

• 95fad07b 2026-03-12T09:24:13+03:00 Bump some of other packages to keep up to date

• b0c5ec0d 2026-03-12T09:24:13+03:00 Update metadata for Go 1.25 k8s 1.35

• 232cf7dd 2026-03-12T09:24:13+03:00 React to the

The change list was truncated. See scripts/auto-rebase/changelog.txt in the PR for the full details.

/label tide/merge-method-squash
/label backport-risk-assessed
/label jira/valid-bug

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: microshift-rebase-script[bot]
Once this PR has been reviewed and has the lgtm label, please assign ggiguash for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[eslutsky]

/retest

[openshift-ci]

@microshift-rebase-script[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-aws-tests-bootc-arm-el10	3ba8238	link	true	/test e2e-aws-tests-bootc-arm-el10

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.