Release v20250703.00-hss-updates

Deploy code to canary to update dashboard and monitors

Changes

84b3898 Bump github.com/containers/podman/v5 from 5.3.2 to 5.5.2 (#4291)
3dc1418 Merge pull request #4279 from Azure/mrwinston/update-codeowners
f9b4442 Also add benson as the new emea TL
ff90c05 add myself to code owners and remove petr

Full Changelog: v20250630.00...v20250703.00-hss-updates

Release v20250630.00

PWIRS release tag

Changes

26973aa Merge pull request #4228 from Azure/hawkowl/ARO-17460
930512b Merge pull request #4289 from Azure/ecardena/aro-9309_geneva-action-mdsd-certificate-rotation
2c907bd deploy frontend IPs and PIPs as zonally-aware resources on create
8aea878 Merge pull request #4259 from Azure/hawkowl/ARO-17795
b3056b2 ARO-9309: Refactor instantiating value of maintenance task id
9b59460 upgrade to gatekeeper v3.19.2 (#4280)
6bf788b Bump github.com/go-chi/chi/v5 from 5.0.8 to 5.2.2 (#4286)
5b6f578 ARO-9309: Add log check to avoid panic.
fcc88f6 Hive update to 8796c4f534 (#4278)
1df66cb HiveManager nil & HSS failure dashboard fix (#4267)
1c4986f AR-9309: Fix lint issue with new line.
327da20 Merge remote-tracking branch 'upstream/master' into hawkowl/ARO-17795
7753f4c ARO-9309: Modify existing method "_putAdminMaintManifestCreate" to be able to handle geneva action for renew mdsd certificate
b2397d8 Merge pull request #4177 from Azure/kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms
953d7e1 ARO-17124 allow changing cluster identity (#4272)
4180918 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Formatting changes from make imports.
190de63 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Migrate to pointerutils.ToPtr.
f306aa3 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Migrate to pointerutils.ToPtr.
841c3c2 bump some updates
80e413b update to the armfpprivatelink service
3ae16eb update fixssh
9cca46f update to track2 sdk for network
e1b37ba Merge branch 'master' into kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms
0f2caef kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Addresses comment from Kipp to fix log message for SSH backend pool update.
ed9c3d5 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Updated check for private cluster to check both API and ingress visibility.
dc93630 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Fixes from linter and import formatter.
de49bdb kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Removed extra curly brace left from fixing merge conflicts.
f358c50 Merge branch 'master' into kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms
5c7aca9 ARO-9309: Add wrapper to create admin maintenance manifest and trigger mdsd certificate rotation
6c06cc9 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Removing armnetwork v2 from go.mod and go.sum.
ee54ec5 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Bumped armnetwork to v6 for more files after fixing merge conflicts. - Updated imports.
e9e97db Merge branch 'master' into kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms
5c06225 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Adding new InterfacesClient.List wrapper method InterfacesClient.NewListPager and refactored fixssh code to use that. - Adding unit tests for new InterfacesClient.List method. - Refactored fixssh mocks to return lists of interfaces directly instead of via mocked pager. - Updated imports.
8cc5ee9 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Refactored fixssh_test to move client option for mock interface server into function to remove duplicate code and some cleanup. - Minor refactoring for fixssh.go.
2205c5f kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Imports auto-updated and armnetwork mocks regenerated.
f48bbb1 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Refactoring fixssh to work with CPMS. - Upgraded armnetwork package to v6.2.0 to get azfake.PagerResponder[armnetwork.InterfacesClientListResponse] for mocking InterfacesClient.NewListPager. - Refactoring fixssh tests to use mocked pager responses for various cases.

Full Changelog: v20250624.00...v20250630.00

Release v20250626.00

PWIRS release tag

Changes

7560b09 Ensure we always spin up a fresh cluster, but only run leftover-cleanup on PR builds
42aacb3 test/e2e: detect PR builds via BUILD_REASON/BUILD_SOURCEBRANCH
07b9816 Skip leftover-cluster cleanup in release E2E and handle ARM 404 gracefully
fcc88f6 Hive update to 8796c4f534 (#4278)
1df66cb HiveManager nil & HSS failure dashboard fix (#4267)
b2397d8 Merge pull request #4177 from Azure/kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms
953d7e1 ARO-17124 allow changing cluster identity (#4272)
4180918 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Formatting changes from make imports.
190de63 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Migrate to pointerutils.ToPtr.
f306aa3 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Migrate to pointerutils.ToPtr.
e1b37ba Merge branch 'master' into kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms
0f2caef kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Addresses comment from Kipp to fix log message for SSH backend pool update.
ed9c3d5 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Updated check for private cluster to check both API and ingress visibility.
dc93630 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Fixes from linter and import formatter.
de49bdb kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Removed extra curly brace left from fixing merge conflicts.
f358c50 Merge branch 'master' into kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms
6c06cc9 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Removing armnetwork v2 from go.mod and go.sum.
ee54ec5 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Bumped armnetwork to v6 for more files after fixing merge conflicts. - Updated imports.
e9e97db Merge branch 'master' into kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms
5c06225 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Adding new InterfacesClient.List wrapper method InterfacesClient.NewListPager and refactored fixssh code to use that. - Adding unit tests for new InterfacesClient.List method. - Refactored fixssh mocks to return lists of interfaces directly instead of via mocked pager. - Updated imports.
8cc5ee9 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Refactored fixssh_test to move client option for mock interface server into function to remove duplicate code and some cleanup. - Minor refactoring for fixssh.go.
2205c5f kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Imports auto-updated and armnetwork mocks regenerated.
f48bbb1 kevinobriendotca/ARO-9395-fixssh-refactoring-for-cpms - Refactoring fixssh to work with CPMS. - Upgraded armnetwork package to v6.2.0 to get azfake.PagerResponder[armnetwork.InterfacesClientListResponse] for mocking InterfacesClient.NewListPager. - Refactoring fixssh tests to use mocked pager responses for various cases.

Full Changelog: v20250624.00...v20250626.00

Release v20250624.00-fluentbit

fluentbit 4.0.2 latest changes

Changes

fe076de Fluentbit latest image
45ff164 Add dimensions to node metrics (#4233)
2060921 [ARO-18256] Attempt to fix e2e (#4283)
bb3999a Merge pull request #4281 from Azure/hawkowl/ARO-17795-depointerutils
33e73ae removed embedded PublicIPAddress field when getting IP addresses (#4282)
f42784b add the k8s.io lib to deny as well
3242e63 Merge pull request #4275 from Azure/dependabot/github_actions/step-security/harden-runner-2.12.1
665655f use pointerutils
8995aa1 go mod tidy
5269881 add depguard to linter
45b66ec regex replacements
0b9bddd find -> replace changes
8c770b7 ARO-12535: Migrate mgmt/network in Deploy (RP) (#4252)
2f4154e Enable AutomaticRepairPolicy for RP, Gateway, and Dev VMSS Instances (#4260)
17cf769 Merge pull request #4239 from Azure/yjst2012/ARO-17114
899a776 Merge pull request #4274 from Azure/hawkowl/update-codeowners-jun-25
5ea7014 Bump step-security/harden-runner from 2.10.1 to 2.12.1
201bf7b Update CODEOWNERS
5b71ac3 Merge pull request #4273 from Azure/aro-operator-worker-amd64
591441b Merge pull request #4261 from Azure/yjst2012/ARO-17797
e82d1e0 Ensure aro-operator-worker deployment pods are scheduled on x86/amd64 nodes
c8ed71d aro mirror - Request and handle lifecycle of destination ACR token within the process (#4258)
7d34b69 [ARO-17938] Check Gateway VMSS Instance Health Before Stopping Gateway Service (#4269)
4e409ae bump go to 1.24 (#4270)
a2c6894 Merge pull request #4249 from Azure/skuznets/gci
4f1ee7e update validate_enable_managed_identity function to no longer check the --version argument (#4265)
5265277 middleware: suppress panic logging when it's an http.ErrAbortHandler sentinel value (#4238)
81217f8 *: fixup formats
da8b00b .golangci.yml: stop excluding directories from linting
61cf032 Makefile: use gci formatter for imports
d02216c bump to Go 1.23, golangci-lint to v2 (#4248)
0a46b9c Mirror Go 1.24 builder images (#4263)
ffead9b upgrade to gatekeeper v3.19.1
b70b349 Makefile: add a target to run the auto-fixer (#4247)
3c9df36 kevinobriendotca/ARO-17463-Update-TEST_PULLSPEC-image-in-containerinstall-test (#4227)
6a4a8ca mirror: Improve logging (#4257)
75bf2c8 add required-scc restricted-v2
19b3975 update the protected namespace check
69322e2 Set the identity and description to "Unkonw" when empty (#4256)
22d68fb Add top pods and nodes admin endpoints to local RP doc (#4253)
fc6b170 cmd/aro/deploy: allow prefering RA config (#4244)
04c6fbc Do not include 'missing' subnets in workerprofilestatuses in network resource handling (#4254)
dbccbe0 Wait for cluster deletion before retrying Create in e2e setup (#4235)
066f942 fix nil pointer dereference with hive ClusterDeployment.Spec.ClusterMetadata (#4234)
646fc1f Bumping up fluentbit image (#4224)
44cfffa update aro-deny-machine-config to only protect our MCs

Full Changelog: v20250602.00...v20250624.00-fluentbit

Release v20250624.00

PWIRS release tag

Changes

7b572d5 fix: skip leftover cluster check in release E2E (#4287)
baf71c4 Merge pull request #4285 from Azure/ARO-13325
c65b3e0 Default monitoring enabled flag to false
45ff164 Add dimensions to node metrics (#4233)
2060921 [ARO-18256] Attempt to fix e2e (#4283)
bb3999a Merge pull request #4281 from Azure/hawkowl/ARO-17795-depointerutils
33e73ae removed embedded PublicIPAddress field when getting IP addresses (#4282)
f42784b add the k8s.io lib to deny as well
3242e63 Merge pull request #4275 from Azure/dependabot/github_actions/step-security/harden-runner-2.12.1
665655f use pointerutils
8995aa1 go mod tidy
5269881 add depguard to linter
45b66ec regex replacements
0b9bddd find -> replace changes
8c770b7 ARO-12535: Migrate mgmt/network in Deploy (RP) (#4252)
2f4154e Enable AutomaticRepairPolicy for RP, Gateway, and Dev VMSS Instances (#4260)
17cf769 Merge pull request #4239 from Azure/yjst2012/ARO-17114
899a776 Merge pull request #4274 from Azure/hawkowl/update-codeowners-jun-25
5ea7014 Bump step-security/harden-runner from 2.10.1 to 2.12.1
201bf7b Update CODEOWNERS
5b71ac3 Merge pull request #4273 from Azure/aro-operator-worker-amd64
591441b Merge pull request #4261 from Azure/yjst2012/ARO-17797
e82d1e0 Ensure aro-operator-worker deployment pods are scheduled on x86/amd64 nodes
c8ed71d aro mirror - Request and handle lifecycle of destination ACR token within the process (#4258)
7d34b69 [ARO-17938] Check Gateway VMSS Instance Health Before Stopping Gateway Service (#4269)
4e409ae bump go to 1.24 (#4270)
a2c6894 Merge pull request #4249 from Azure/skuznets/gci
4f1ee7e update validate_enable_managed_identity function to no longer check the --version argument (#4265)
5265277 middleware: suppress panic logging when it's an http.ErrAbortHandler sentinel value (#4238)
81217f8 *: fixup formats
da8b00b .golangci.yml: stop excluding directories from linting
61cf032 Makefile: use gci formatter for imports
d02216c bump to Go 1.23, golangci-lint to v2 (#4248)
0a46b9c Mirror Go 1.24 builder images (#4263)
ffead9b upgrade to gatekeeper v3.19.1
b70b349 Makefile: add a target to run the auto-fixer (#4247)
3c9df36 kevinobriendotca/ARO-17463-Update-TEST_PULLSPEC-image-in-containerinstall-test (#4227)
6a4a8ca mirror: Improve logging (#4257)
75bf2c8 add required-scc restricted-v2
19b3975 update the protected namespace check
69322e2 Set the identity and description to "Unkonw" when empty (#4256)
22d68fb Add top pods and nodes admin endpoints to local RP doc (#4253)
fc6b170 cmd/aro/deploy: allow prefering RA config (#4244)
04c6fbc Do not include 'missing' subnets in workerprofilestatuses in network resource handling (#4254)
dbccbe0 Wait for cluster deletion before retrying Create in e2e setup (#4235)
066f942 fix nil pointer dereference with hive ClusterDeployment.Spec.ClusterMetadata (#4234)
646fc1f Bumping up fluentbit image (#4224)
44cfffa update aro-deny-machine-config to only protect our MCs

Full Changelog: v20250602.00...v20250624.00

Release v20250624-e2e-debug

Debug e2e on PWIRS pipeline

Changes

8cd13f0 debug: if conf.IsLocalDevelopmentMode() && conf.IsCI, log env vars
953d7e1 ARO-17124 allow changing cluster identity (#4272)

Full Changelog: v20250624.00...v20250624-e2e-debug

Release v20250623.00-clustersync

clustersync and monitor changes

Changes

c6d7d57 HiveManager NIL fix
bb3999a Merge pull request #4281 from Azure/hawkowl/ARO-17795-depointerutils
33e73ae removed embedded PublicIPAddress field when getting IP addresses (#4282)
f42784b add the k8s.io lib to deny as well
3242e63 Merge pull request #4275 from Azure/dependabot/github_actions/step-security/harden-runner-2.12.1
665655f use pointerutils
8995aa1 go mod tidy
5269881 add depguard to linter
45b66ec regex replacements
0b9bddd find -> replace changes
8c770b7 ARO-12535: Migrate mgmt/network in Deploy (RP) (#4252)
2f4154e Enable AutomaticRepairPolicy for RP, Gateway, and Dev VMSS Instances (#4260)
17cf769 Merge pull request #4239 from Azure/yjst2012/ARO-17114
899a776 Merge pull request #4274 from Azure/hawkowl/update-codeowners-jun-25
5ea7014 Bump step-security/harden-runner from 2.10.1 to 2.12.1
201bf7b Update CODEOWNERS
5b71ac3 Merge pull request #4273 from Azure/aro-operator-worker-amd64
591441b Merge pull request #4261 from Azure/yjst2012/ARO-17797
e82d1e0 Ensure aro-operator-worker deployment pods are scheduled on x86/amd64 nodes
c8ed71d aro mirror - Request and handle lifecycle of destination ACR token within the process (#4258)
7d34b69 [ARO-17938] Check Gateway VMSS Instance Health Before Stopping Gateway Service (#4269)
4e409ae bump go to 1.24 (#4270)
a2c6894 Merge pull request #4249 from Azure/skuznets/gci
4f1ee7e update validate_enable_managed_identity function to no longer check the --version argument (#4265)
5265277 middleware: suppress panic logging when it's an http.ErrAbortHandler sentinel value (#4238)
81217f8 *: fixup formats
da8b00b .golangci.yml: stop excluding directories from linting
61cf032 Makefile: use gci formatter for imports
d02216c bump to Go 1.23, golangci-lint to v2 (#4248)
0a46b9c Mirror Go 1.24 builder images (#4263)
ffead9b upgrade to gatekeeper v3.19.1
b70b349 Makefile: add a target to run the auto-fixer (#4247)
3c9df36 kevinobriendotca/ARO-17463-Update-TEST_PULLSPEC-image-in-containerinstall-test (#4227)
6a4a8ca mirror: Improve logging (#4257)
75bf2c8 add required-scc restricted-v2
19b3975 update the protected namespace check
69322e2 Set the identity and description to "Unkonw" when empty (#4256)
22d68fb Add top pods and nodes admin endpoints to local RP doc (#4253)
fc6b170 cmd/aro/deploy: allow prefering RA config (#4244)
04c6fbc Do not include 'missing' subnets in workerprofilestatuses in network resource handling (#4254)
dbccbe0 Wait for cluster deletion before retrying Create in e2e setup (#4235)
066f942 fix nil pointer dereference with hive ClusterDeployment.Spec.ClusterMetadata (#4234)
646fc1f Bumping up fluentbit image (#4224)
44cfffa update aro-deny-machine-config to only protect our MCs

Full Changelog: v20250602.00...v20250623.00-clustersync

Release v20250623.00

clustersync and monitor changes

Changes

c6d7d57 HiveManager NIL fix
bb3999a Merge pull request #4281 from Azure/hawkowl/ARO-17795-depointerutils
33e73ae removed embedded PublicIPAddress field when getting IP addresses (#4282)
f42784b add the k8s.io lib to deny as well
3242e63 Merge pull request #4275 from Azure/dependabot/github_actions/step-security/harden-runner-2.12.1
665655f use pointerutils
8995aa1 go mod tidy
5269881 add depguard to linter
45b66ec regex replacements
0b9bddd find -> replace changes
8c770b7 ARO-12535: Migrate mgmt/network in Deploy (RP) (#4252)
2f4154e Enable AutomaticRepairPolicy for RP, Gateway, and Dev VMSS Instances (#4260)
17cf769 Merge pull request #4239 from Azure/yjst2012/ARO-17114
899a776 Merge pull request #4274 from Azure/hawkowl/update-codeowners-jun-25
5ea7014 Bump step-security/harden-runner from 2.10.1 to 2.12.1
201bf7b Update CODEOWNERS
5b71ac3 Merge pull request #4273 from Azure/aro-operator-worker-amd64
591441b Merge pull request #4261 from Azure/yjst2012/ARO-17797
e82d1e0 Ensure aro-operator-worker deployment pods are scheduled on x86/amd64 nodes
c8ed71d aro mirror - Request and handle lifecycle of destination ACR token within the process (#4258)
7d34b69 [ARO-17938] Check Gateway VMSS Instance Health Before Stopping Gateway Service (#4269)
4e409ae bump go to 1.24 (#4270)
a2c6894 Merge pull request #4249 from Azure/skuznets/gci
4f1ee7e update validate_enable_managed_identity function to no longer check the --version argument (#4265)
5265277 middleware: suppress panic logging when it's an http.ErrAbortHandler sentinel value (#4238)
81217f8 *: fixup formats
da8b00b .golangci.yml: stop excluding directories from linting
61cf032 Makefile: use gci formatter for imports
d02216c bump to Go 1.23, golangci-lint to v2 (#4248)
0a46b9c Mirror Go 1.24 builder images (#4263)
ffead9b upgrade to gatekeeper v3.19.1
b70b349 Makefile: add a target to run the auto-fixer (#4247)
3c9df36 kevinobriendotca/ARO-17463-Update-TEST_PULLSPEC-image-in-containerinstall-test (#4227)
6a4a8ca mirror: Improve logging (#4257)
75bf2c8 add required-scc restricted-v2
19b3975 update the protected namespace check
69322e2 Set the identity and description to "Unkonw" when empty (#4256)
22d68fb Add top pods and nodes admin endpoints to local RP doc (#4253)
fc6b170 cmd/aro/deploy: allow prefering RA config (#4244)
04c6fbc Do not include 'missing' subnets in workerprofilestatuses in network resource handling (#4254)
dbccbe0 Wait for cluster deletion before retrying Create in e2e setup (#4235)
066f942 fix nil pointer dereference with hive ClusterDeployment.Spec.ClusterMetadata (#4234)
646fc1f Bumping up fluentbit image (#4224)
44cfffa update aro-deny-machine-config to only protect our MCs

Full Changelog: v20250602.00...v20250623.00

Release v20250620.01

Platform Workload Identity Role Set release tag

Changes

f418819 chore: use conf.IsLocalDevelopmentMode() for consistency in leftover cluster check
2757350 fix: skip leftover cluster check in release E2E
5b71ac3 Merge pull request #4273 from Azure/aro-operator-worker-amd64
591441b Merge pull request #4261 from Azure/yjst2012/ARO-17797
e82d1e0 Ensure aro-operator-worker deployment pods are scheduled on x86/amd64 nodes
c8ed71d aro mirror - Request and handle lifecycle of destination ACR token within the process (#4258)
7d34b69 [ARO-17938] Check Gateway VMSS Instance Health Before Stopping Gateway Service (#4269)
4e409ae bump go to 1.24 (#4270)
a2c6894 Merge pull request #4249 from Azure/skuznets/gci
4f1ee7e update validate_enable_managed_identity function to no longer check the --version argument (#4265)
5265277 middleware: suppress panic logging when it's an http.ErrAbortHandler sentinel value (#4238)
81217f8 *: fixup formats
da8b00b .golangci.yml: stop excluding directories from linting
61cf032 Makefile: use gci formatter for imports
d02216c bump to Go 1.23, golangci-lint to v2 (#4248)
0a46b9c Mirror Go 1.24 builder images (#4263)
ffead9b upgrade to gatekeeper v3.19.1
b70b349 Makefile: add a target to run the auto-fixer (#4247)
3c9df36 kevinobriendotca/ARO-17463-Update-TEST_PULLSPEC-image-in-containerinstall-test (#4227)
6a4a8ca mirror: Improve logging (#4257)
69322e2 Set the identity and description to "Unkonw" when empty (#4256)
22d68fb Add top pods and nodes admin endpoints to local RP doc (#4253)
fc6b170 cmd/aro/deploy: allow prefering RA config (#4244)
04c6fbc Do not include 'missing' subnets in workerprofilestatuses in network resource handling (#4254)
dbccbe0 Wait for cluster deletion before retrying Create in e2e setup (#4235)
066f942 fix nil pointer dereference with hive ClusterDeployment.Spec.ClusterMetadata (#4234)
646fc1f Bumping up fluentbit image (#4224)

Full Changelog: v20250602.00...v20250620.01

Release v20250620.00

clustersync and monitor changes

Changes

d96a0ed HiveManager NIL fix
bb3999a Merge pull request #4281 from Azure/hawkowl/ARO-17795-depointerutils
33e73ae removed embedded PublicIPAddress field when getting IP addresses (#4282)
f42784b add the k8s.io lib to deny as well
3242e63 Merge pull request #4275 from Azure/dependabot/github_actions/step-security/harden-runner-2.12.1
665655f use pointerutils
8995aa1 go mod tidy
5269881 add depguard to linter
45b66ec regex replacements
0b9bddd find -> replace changes
8c770b7 ARO-12535: Migrate mgmt/network in Deploy (RP) (#4252)
2f4154e Enable AutomaticRepairPolicy for RP, Gateway, and Dev VMSS Instances (#4260)
17cf769 Merge pull request #4239 from Azure/yjst2012/ARO-17114
899a776 Merge pull request #4274 from Azure/hawkowl/update-codeowners-jun-25
5ea7014 Bump step-security/harden-runner from 2.10.1 to 2.12.1
201bf7b Update CODEOWNERS
5b71ac3 Merge pull request #4273 from Azure/aro-operator-worker-amd64
591441b Merge pull request #4261 from Azure/yjst2012/ARO-17797
e82d1e0 Ensure aro-operator-worker deployment pods are scheduled on x86/amd64 nodes
c8ed71d aro mirror - Request and handle lifecycle of destination ACR token within the process (#4258)
7d34b69 [ARO-17938] Check Gateway VMSS Instance Health Before Stopping Gateway Service (#4269)
4e409ae bump go to 1.24 (#4270)
a2c6894 Merge pull request #4249 from Azure/skuznets/gci
4f1ee7e update validate_enable_managed_identity function to no longer check the --version argument (#4265)
5265277 middleware: suppress panic logging when it's an http.ErrAbortHandler sentinel value (#4238)
81217f8 *: fixup formats
da8b00b .golangci.yml: stop excluding directories from linting
61cf032 Makefile: use gci formatter for imports
d02216c bump to Go 1.23, golangci-lint to v2 (#4248)
0a46b9c Mirror Go 1.24 builder images (#4263)
ffead9b upgrade to gatekeeper v3.19.1
b70b349 Makefile: add a target to run the auto-fixer (#4247)
3c9df36 kevinobriendotca/ARO-17463-Update-TEST_PULLSPEC-image-in-containerinstall-test (#4227)
6a4a8ca mirror: Improve logging (#4257)
75bf2c8 add required-scc restricted-v2
19b3975 update the protected namespace check
69322e2 Set the identity and description to "Unkonw" when empty (#4256)
22d68fb Add top pods and nodes admin endpoints to local RP doc (#4253)
fc6b170 cmd/aro/deploy: allow prefering RA config (#4244)
04c6fbc Do not include 'missing' subnets in workerprofilestatuses in network resource handling (#4254)
dbccbe0 Wait for cluster deletion before retrying Create in e2e setup (#4235)
066f942 fix nil pointer dereference with hive ClusterDeployment.Spec.ClusterMetadata (#4234)
646fc1f Bumping up fluentbit image (#4224)
44cfffa update aro-deny-machine-config to only protect our MCs

Full Changelog: v20250602.00...v20250620.00