#! /bin/bash
export HOME=/home/ec2-user
cd $HOME
sudo dnf update -y
sudo dnf install -y podman git make wget cargo openssl openssl-devel net-tools skopeo 

# install oc-mirror
wget https://mirror.openshift.com/pub/openshift-v4/amd64/clients/ocp/4.16.6/oc-mirror.rhel9.tar.gz
tar xvf oc-mirror.rhel9.tar.gz
chmod +x oc-mirror && sudo mv oc-mirror /usr/local/bin/oc-mirror

# install go
wget https://go.dev/dl/go1.22.4.linux-amd64.tar.gz
sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go1.22.4.linux-amd64.tar.gz
export PATH=$PATH:/usr/local/go/bin

# Generate TLS cert for entreprise and enclave registries
openssl genrsa -out server.key 2048
openssl genrsa -out ca.key 2048

openssl ecparam -genkey -name secp384r1 -out server.key
openssl req -new -x509 -days 365 -key ca.key -subj "/C=CN/ST=GD/L=SZ/O=Acme, Inc./CN=Acme Root CA" -out ca.crt

openssl req -newkey rsa:2048 -nodes -keyout server.key -subj "/C=CN/ST=GD/L=SZ/O=Acme, Inc./CN=*.${HOSTNAME}" -out server.csr
openssl x509 -req -extfile <(printf "subjectAltName=DNS:${HOSTNAME},DNS:${HOSTNAME}") -days 365 -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt
openssl x509 -req -extfile <(printf "subjectAltName=DNS:${HOSTNAME},DNS:${HOSTNAME}") -days 365 -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt
sudo cp ca.crt /etc/pki/ca-trust/source/anchors/

# copy TLS Cert for the mock cincinnati service
cat > /tmp/mock.txt << EOF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EOF
sudo cat /tmp/mock.txt | base64 -d > /etc/pki/ca-trust/source/anchors/mock.crt
sudo update-ca-trust

# Prepare registries
git clone https://github.com/distribution/distribution
cd distribution

# run entreprise registry
cat > cmd/registry/config-entreprise.yml << EOF
version: 0.1
log:
  level: info
  fields:
    service: registry
storage:
  delete:
      enabled: true
  cache:
    blobdescriptor: inmemory
  filesystem:
    rootdirectory: var/lib/registry
http:
  addr: :5000
  headers:
    X-Content-Type-Options: [nosniff]
  tls:
    certificate: /home/ec2-user/server.crt
    key: /home/ec2-user/server.key
EOF
go run cmd/registry/main.go serve cmd/registry/config-entreprise.yml & 

# run enclave registry
cat > cmd/registry/config-enclave.yml << EOF
version: 0.1
log:
  level: info
  fields:
    service: registry
storage:
  delete:
      enabled: true
  cache:
    blobdescriptor: inmemory
  filesystem:
    rootdirectory: var/lib/registry
http:
  addr: :7000
  headers:
    X-Content-Type-Options: [nosniff]
  tls:
    certificate: /home/ec2-user/server.crt
    key: /home/ec2-user/server.key
EOF
go run cmd/registry/main.go serve cmd/registry/config-enclave.yml & 

# Run a fake cincinnati
cd /home/ec2-user
git clone https://github.com/openshift/oc-mirror
cd oc-mirror
cat > test/e2e/graph/cincinnati.json << EOF
{"version":1,"nodes":[{"version":"4.15.6","payload":"quay.io/openshift-release-dev/ocp-release@sha256:2cd97b739de42a8fcba965f6e4e5cf868b8d057a1c5717731c20e15d28726572","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.].*|4[.]14[.].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:2cd97b739de42a8fcba965f6e4e5cf868b8d057a1c5717731c20e15d28726572","url":"https://access.redhat.com/errata/RHSA-2024:1559"}},{"version":"4.14.17","payload":"quay.io/openshift-release-dev/ocp-release@sha256:dddb1328c916c2a5b6d69e2e63951865e50ebc10b042024c5a02cc799ba4260d","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.](13[.].*|14[.]([0-9]|1[0-4]))[+].*|4[.](13[.](3[0-5]|[0-2]?[0-9])|14[.](1[0-3]|[0-9]))[+].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:dddb1328c916c2a5b6d69e2e63951865e50ebc10b042024c5a02cc799ba4260d","url":"https://access.redhat.com/errata/RHBA-2024:1260"}},{"version":"4.15.15","payload":"quay.io/openshift-release-dev/ocp-release@sha256:bb1182cd9001d6811dea8c5823235c17b9a316cce3bb13c51325250c14b46787","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:bb1182cd9001d6811dea8c5823235c17b9a316cce3bb13c51325250c14b46787","url":"https://access.redhat.com/errata/RHSA-2024:3327"}},{"version":"4.14.6","payload":"quay.io/openshift-release-dev/ocp-release@sha256:e5128c3b0ab225e0abf9344dae504e08b82dda4885bbd047e2dbc13cc3d9879b","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:e5128c3b0ab225e0abf9344dae504e08b82dda4885bbd047e2dbc13cc3d9879b","url":"https://access.redhat.com/errata/RHSA-2023:7682"}},{"version":"4.14.23","payload":"quay.io/openshift-release-dev/ocp-release@sha256:f8465817382128ec7c0bc676174bad0fb43204c353e49c146ddd83a5b3d58d92","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.](13[.](3[0-5]|[0-2]?[0-9])|14[.](1[0-3]|[0-9]))[+].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:f8465817382128ec7c0bc676174bad0fb43204c353e49c146ddd83a5b3d58d92","url":"https://access.redhat.com/errata/RHBA-2024:2051"}},{"version":"4.14.18","payload":"quay.io/openshift-release-dev/ocp-release@sha256:b572b76fdc9ae73ef9e35d01b98438d9b19ec4ba4c9aabc5eea3972d4724bea3","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.](13[.].*|14[.]([0-9]|1[0-4]))[+].*|4[.](13[.](3[0-5]|[0-2]?[0-9])|14[.](1[0-3]|[0-9]))[+].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:b572b76fdc9ae73ef9e35d01b98438d9b19ec4ba4c9aabc5eea3972d4724bea3","url":"https://access.redhat.com/errata/RHSA-2024:1458"}},{"version":"4.14.32","payload":"quay.io/openshift-release-dev/ocp-release@sha256:912d7c15e1d82ffc4aa1fc34d2b64c4c7b6670ecd11314c14ca2d6ffdcea22a3","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:912d7c15e1d82ffc4aa1fc34d2b64c4c7b6670ecd11314c14ca2d6ffdcea22a3","url":"https://access.redhat.com/errata/RHSA-2024:4329"}},{"version":"4.15.0","payload":"quay.io/openshift-release-dev/ocp-release@sha256:0da6316466d60a3a4535d5fed3589feb0391989982fba59d47d4c729912d6363","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.].*|4[.]14[.].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:0da6316466d60a3a4535d5fed3589feb0391989982fba59d47d4c729912d6363","url":"https://access.redhat.com/errata/RHSA-2023:7198"}},{"version":"4.14.10","payload":"quay.io/openshift-release-dev/ocp-release@sha256:03cc63c0c48b2416889e9ee53f2efc2c940323c15f08384b439c00de8e66e8aa","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:03cc63c0c48b2416889e9ee53f2efc2c940323c15f08384b439c00de8e66e8aa","url":"https://access.redhat.com/errata/RHSA-2024:0290"}},{"version":"4.14.24","payload":"quay.io/openshift-release-dev/ocp-release@sha256:0a34eac4b834e67f1bca94493c237e307be2c0eae7b8956d4d8ef1c0c462c7b0","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.](13[.](3[0-5]|[0-2]?[0-9])|14[.](1[0-3]|[0-9]))[+].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:0a34eac4b834e67f1bca94493c237e307be2c0eae7b8956d4d8ef1c0c462c7b0","url":"https://access.redhat.com/errata/RHSA-2024:2668"}},{"version":"4.14.29","payload":"quay.io/openshift-release-dev/ocp-release@sha256:797ef883017750606771c408de0d3f84ec0f09a1022fb9fb33199c75c54284ed","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.]13[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:797ef883017750606771c408de0d3f84ec0f09a1022fb9fb33199c75c54284ed","url":"https://access.redhat.com/errata/RHBA-2024:3697"}},{"version":"4.15.19","payload":"quay.io/openshift-release-dev/ocp-release@sha256:72dbe160063b42a23ba1b97eca3e22d75d0c757947890afaf4b27720c605e648","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.](14[.].*|15[.]([0-9]|1[0-6]))[+].*$|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:72dbe160063b42a23ba1b97eca3e22d75d0c757947890afaf4b27720c605e648","url":"https://access.redhat.com/errata/RHSA-2024:4041"}},{"version":"4.15.2","payload":"quay.io/openshift-release-dev/ocp-release@sha256:8e5ebf5d648eeab2d440036ce0f94ab73743aed85f9f5a4725a6aefad8f842e9","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.].*|4[.]14[.].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:8e5ebf5d648eeab2d440036ce0f94ab73743aed85f9f5a4725a6aefad8f842e9","url":"https://access.redhat.com/errata/RHSA-2024:1210"}},{"version":"4.15.23","payload":"quay.io/openshift-release-dev/ocp-release@sha256:e39f4b55929f54a720ca84075544920ddc9fcc1e6a627005ebfd4c3b64e5716c","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.](14[.].*|15[.]([0-9]|1[0-6]))[+].*$|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:e39f4b55929f54a720ca84075544920ddc9fcc1e6a627005ebfd4c3b64e5716c","url":"https://access.redhat.com/errata/RHSA-2024:4699"}},{"version":"4.14.11","payload":"quay.io/openshift-release-dev/ocp-release@sha256:36783a8b066c96dd6258e818ce51b5a763438adbf56221ea5c4b62ae4f345886","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:36783a8b066c96dd6258e818ce51b5a763438adbf56221ea5c4b62ae4f345886","url":"https://access.redhat.com/errata/RHSA-2024:0642"}},{"version":"4.14.9","payload":"quay.io/openshift-release-dev/ocp-release@sha256:f5eaf0248779a0478cfd83f055d56dc7d755937800a68ad55f6047c503977c44","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:f5eaf0248779a0478cfd83f055d56dc7d755937800a68ad55f6047c503977c44","url":"https://access.redhat.com/errata/RHSA-2024:0204"}},{"version":"4.14.19","payload":"quay.io/openshift-release-dev/ocp-release@sha256:08b8725ce619ff1855cb0ec5f5c5baa879ef3c6ab9930db300761b97d2761144","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.](13[.].*|14[.]([0-9]|1[0-4]))[+].*|4[.](13[.](3[0-5]|[0-2]?[0-9])|14[.](1[0-3]|[0-9]))[+].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:08b8725ce619ff1855cb0ec5f5c5baa879ef3c6ab9930db300761b97d2761144","url":"https://access.redhat.com/errata/RHBA-2024:1564"}},{"version":"4.14.33","payload":"quay.io/openshift-release-dev/ocp-release@sha256:40ba8c540d16a97a6b629232a5a16da64fca655c4b83b734aa28415b5c708acf","metadata":{"io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:40ba8c540d16a97a6b629232a5a16da64fca655c4b83b734aa28415b5c708acf","url":"https://access.redhat.com/errata/RHSA-2024:4479"}},{"version":"4.15.3","payload":"quay.io/openshift-release-dev/ocp-release@sha256:8e8c6c2645553e6df8eb7985d8cb322f333a4152453e2aa85fff24ac5e0755b0","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.].*|4[.]14[.].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:8e8c6c2645553e6df8eb7985d8cb322f333a4152453e2aa85fff24ac5e0755b0","url":"https://access.redhat.com/errata/RHSA-2024:1255"}},{"version":"4.14.0","payload":"quay.io/openshift-release-dev/ocp-release@sha256:e2c70fca183e380c6121a1c847806f11e839482123277235a8579db472b9ccf2","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.](13[.].*|14[.]0-(ec[.].*|rc[.][01]))|4[.]13[.].*|4[.]13[.].*|4[.]13[.](17|18)[+].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:e2c70fca183e380c6121a1c847806f11e839482123277235a8579db472b9ccf2","url":"https://access.redhat.com/errata/RHSA-2023:5006"}},{"version":"4.14.12","payload":"quay.io/openshift-release-dev/ocp-release@sha256:671bc35e8fc2027d6f4c2c756d19909d83d55d1c591e8f9ea790ec8da744d171","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.](14[.]([0-9]|1[01])|13[.]([0-9]|[1-2][0-9]|3[0-2]))[+].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:671bc35e8fc2027d6f4c2c756d19909d83d55d1c591e8f9ea790ec8da744d171","url":"https://access.redhat.com/errata/RHSA-2024:0735"}},{"version":"4.14.25","payload":"quay.io/openshift-release-dev/ocp-release@sha256:a0ef946ef8ae75aef726af1d9bbaad278559ad8cab2c1ed1088928a0087990b6","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:a0ef946ef8ae75aef726af1d9bbaad278559ad8cab2c1ed1088928a0087990b6","url":"https://access.redhat.com/errata/RHBA-2024:2789"}},{"version":"4.14.4","payload":"quay.io/openshift-release-dev/ocp-release@sha256:e6e1d90b492d50438034e6edb46bdafa6c86ae3b80ef3328685912d89681fdee","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:e6e1d90b492d50438034e6edb46bdafa6c86ae3b80ef3328685912d89681fdee","url":"https://access.redhat.com/errata/RHSA-2023:7470"}},{"version":"4.15.9","payload":"quay.io/openshift-release-dev/ocp-release@sha256:4c57e9589ac8d96ad74fd8c9fce35c5e507a20a88a6871d8a731c3b295abc79a","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.].*|4[.]14[.].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:4c57e9589ac8d96ad74fd8c9fce35c5e507a20a88a6871d8a731c3b295abc79a","url":"https://access.redhat.com/errata/RHSA-2024:1770"}},{"version":"4.15.20","payload":"quay.io/openshift-release-dev/ocp-release@sha256:478d9f5a1b496ebd69ecd0d7a7fc961f6318290ac9242ff65e1e2bdb88ff3097","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.](14[.].*|15[.]([0-9]|1[0-6]))[+].*$|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:478d9f5a1b496ebd69ecd0d7a7fc961f6318290ac9242ff65e1e2bdb88ff3097","url":"https://access.redhat.com/errata/RHSA-2024:4151"}},{"version":"4.14.1","payload":"quay.io/openshift-release-dev/ocp-release@sha256:05ba8e63f8a76e568afe87f182334504a01d47342b6ad5b4c3ff83a2463018bd","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.](13[.].*|14[.]0-(ec[.].*|rc[.][01]))|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:05ba8e63f8a76e568afe87f182334504a01d47342b6ad5b4c3ff83a2463018bd","url":"https://access.redhat.com/errata/RHBA-2023:6153"}},{"version":"4.14.7","payload":"quay.io/openshift-release-dev/ocp-release@sha256:a346fc0c84644e64c726013a98bef0f75e58f246fce1faa83fb6bbbc6d4050aa","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:a346fc0c84644e64c726013a98bef0f75e58f246fce1faa83fb6bbbc6d4050aa","url":"https://access.redhat.com/errata/RHSA-2023:7831"}},{"version":"4.15.8","payload":"quay.io/openshift-release-dev/ocp-release@sha256:8032c4248d7ae032d5e79debf975d08683cc34d5f08ab2e937ce2d1e940c007b","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.].*|4[.]14[.].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:8032c4248d7ae032d5e79debf975d08683cc34d5f08ab2e937ce2d1e940c007b","url":"https://access.redhat.com/errata/RHSA-2024:1668"}},{"version":"4.14.13","payload":"quay.io/openshift-release-dev/ocp-release@sha256:ff004c122db9d494abedc1630ef5e2e535cc4529b3450ff58aaacf6b6cbba30c","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.](14[.]([0-9]|1[01])|13[.]([0-9]|[1-2][0-9]|3[0-2]))[+].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:ff004c122db9d494abedc1630ef5e2e535cc4529b3450ff58aaacf6b6cbba30c","url":"https://access.redhat.com/errata/RHSA-2024:0837"}},{"version":"4.15.16","payload":"quay.io/openshift-release-dev/ocp-release@sha256:4bdebcbc36c2b4c383b70cf5e23b168f8bf445eba42fc8f331643608a60398e8","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:4bdebcbc36c2b4c383b70cf5e23b168f8bf445eba42fc8f331643608a60398e8","url":"https://access.redhat.com/errata/RHBA-2024:3488"}},{"version":"4.15.10","payload":"quay.io/openshift-release-dev/ocp-release@sha256:7111fb4cec202cb758f58d9bed95a67e7fdc417353ef15be56d7bf96356909d4","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:7111fb4cec202cb758f58d9bed95a67e7fdc417353ef15be56d7bf96356909d4","url":"https://access.redhat.com/errata/RHSA-2024:1887"}},{"version":"4.14.30","payload":"quay.io/openshift-release-dev/ocp-release@sha256:2bda857a6a92b9a6cd353e707029218a78ba1b4a60a762d849a2bc0eb4234e25","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.]13[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:2bda857a6a92b9a6cd353e707029218a78ba1b4a60a762d849a2bc0eb4234e25","url":"https://access.redhat.com/errata/RHSA-2024:3881"}},{"version":"4.14.26","payload":"quay.io/openshift-release-dev/ocp-release@sha256:4fe7d4ccf4d967a309f83118f1a380a656a733d7fcee1dbaf4d51752a6372890","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:4fe7d4ccf4d967a309f83118f1a380a656a733d7fcee1dbaf4d51752a6372890","url":"https://access.redhat.com/errata/RHSA-2024:2869"}},{"version":"4.15.11","payload":"quay.io/openshift-release-dev/ocp-release@sha256:54bf0a80b3bbace603d824ae5dac687e3bd7591ed4f629ce70adb8a01654585c","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:54bf0a80b3bbace603d824ae5dac687e3bd7591ed4f629ce70adb8a01654585c","url":"https://access.redhat.com/errata/RHSA-2024:2068"}},{"version":"4.15.17","payload":"quay.io/openshift-release-dev/ocp-release@sha256:c7e0adf82092568ff2f4b42d2183486efe311066d6f5ae983f23c1b19f890c3d","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.](14[.].*|15[.]([0-9]|1[0-6]))[+].*$|4[.]14[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:c7e0adf82092568ff2f4b42d2183486efe311066d6f5ae983f23c1b19f890c3d","url":"https://access.redhat.com/errata/RHBA-2024:3673"}},{"version":"4.14.20","payload":"quay.io/openshift-release-dev/ocp-release@sha256:e64464879cd1acdfa7112c1ac1d90039e1689189e0af197f34881c79decda933","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.](13[.].*|14[.]([0-9]|1[0-4]))[+].*|4[.](13[.](3[0-5]|[0-2]?[0-9])|14[.](1[0-3]|[0-9]))[+].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:e64464879cd1acdfa7112c1ac1d90039e1689189e0af197f34881c79decda933","url":"https://access.redhat.com/errata/RHSA-2024:1681"}},{"version":"4.14.14","payload":"quay.io/openshift-release-dev/ocp-release@sha256:d8e8ed089a72fe100fb48f56c1a777fcd985fd81ee96cc1ec2f349a625097621","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.](13[.](3[0-5]|[0-2]?[0-9])|14[.](1[0-3]|[0-9]))[+].*|4[.](14[.]([0-9]|1[01])|13[.]([0-9]|[1-2][0-9]|3[0-2]))[+].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:d8e8ed089a72fe100fb48f56c1a777fcd985fd81ee96cc1ec2f349a625097621","url":"https://access.redhat.com/errata/RHSA-2024:0941"}},{"version":"4.15.5","payload":"quay.io/openshift-release-dev/ocp-release@sha256:b17bc935bfb0fb250e738733af5d3d4ea1f27065de8e2622890782780b36320c","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](14|15)|4[.]14[.]([0-9]|1[0-4])[+].*|4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.].*|4[.]14[.].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:b17bc935bfb0fb250e738733af5d3d4ea1f27065de8e2622890782780b36320c","url":"https://access.redhat.com/errata/RHSA-2024:1449"}},{"version":"4.14.2","payload":"quay.io/openshift-release-dev/ocp-release@sha256:45a396b169974dcbd8aae481c647bf55bcf9f0f8f6222483d407d7cec450928d","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:45a396b169974dcbd8aae481c647bf55bcf9f0f8f6222483d407d7cec450928d","url":"https://access.redhat.com/errata/RHSA-2023:6837"}},{"version":"4.14.21","payload":"quay.io/openshift-release-dev/ocp-release@sha256:6e3fba19a1453e61f8846c6b0ad3abf41436a3550092cbfd364ad4ce194582b7","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.](13[.].*|14[.]([0-9]|1[0-4]))[+].*|4[.](13[.](3[0-5]|[0-2]?[0-9])|14[.](1[0-3]|[0-9]))[+].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:6e3fba19a1453e61f8846c6b0ad3abf41436a3550092cbfd364ad4ce194582b7","url":"https://access.redhat.com/errata/RHSA-2024:1765"}},{"version":"4.14.27","payload":"quay.io/openshift-release-dev/ocp-release@sha256:4d30b359aa6600a89ed49ce6a9a5fdab54092bcb821a25480fdfbc47e66af9ec","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:4d30b359aa6600a89ed49ce6a9a5fdab54092bcb821a25480fdfbc47e66af9ec","url":"https://access.redhat.com/errata/RHSA-2024:3331"}},{"version":"4.15.12","payload":"quay.io/openshift-release-dev/ocp-release@sha256:86575d1def95bc8944081b3201f1a7d9f408a5c966faf42f236c1dc83b6cc562","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.](1[0-3]|[0-9])[+].*|4[.]14[.].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:86575d1def95bc8944081b3201f1a7d9f408a5c966faf42f236c1dc83b6cc562","url":"https://access.redhat.com/errata/RHSA-2024:2664"}},{"version":"4.15.21","payload":"quay.io/openshift-release-dev/ocp-release@sha256:743d8d1bc98345a3f6b21f0af9c5ec252bbc6950d273afae5d9279a7714239b0","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.](14[.].*|15[.]([0-9]|1[0-6]))[+].*$|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:743d8d1bc98345a3f6b21f0af9c5ec252bbc6950d273afae5d9279a7714239b0","url":"https://access.redhat.com/errata/RHSA-2024:4321"}},{"version":"4.14.15","payload":"quay.io/openshift-release-dev/ocp-release@sha256:69d1292f64a2b67227c5592c1a7d499c7d00376e498634ff8e1946bc9ccdddfe","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.]13[.].*|4[.](13[.].*|14[.]([0-9]|1[0-4]))[+].*|4[.](13[.](3[0-5]|[0-2]?[0-9])|14[.](1[0-3]|[0-9]))[+].*|4[.](14[.]([0-9]|1[01])|13[.]([0-9]|[1-2][0-9]|3[0-2]))[+].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:69d1292f64a2b67227c5592c1a7d499c7d00376e498634ff8e1946bc9ccdddfe","url":"https://access.redhat.com/errata/RHBA-2024:1046"}},{"version":"4.14.5","payload":"quay.io/openshift-release-dev/ocp-release@sha256:0ec9d715c717b2a592d07dd83860013613529fae69bc9eecb4b2d4ace679f6f3","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:0ec9d715c717b2a592d07dd83860013613529fae69bc9eecb4b2d4ace679f6f3","url":"https://access.redhat.com/errata/RHSA-2023:7599"}},{"version":"4.15.22","payload":"quay.io/openshift-release-dev/ocp-release@sha256:f0787207e687538a2d1248f2956b5bd26e304334eeb2f6474833040063377e9a","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.](14[.].*|15[.]([0-9]|1[0-6]))[+].*$|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:f0787207e687538a2d1248f2956b5bd26e304334eeb2f6474833040063377e9a","url":"https://access.redhat.com/errata/RHSA-2024:4474"}},{"version":"4.14.16","payload":"quay.io/openshift-release-dev/ocp-release@sha256:8fb5c55afbb51ddd11650ee54988468c64608ac1c2f58e0ffcc73fcc3e41cadb","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.](13[.].*|14[.]([0-9]|1[0-4]))[+].*|4[.](13[.](3[0-5]|[0-2]?[0-9])|14[.](1[0-3]|[0-9]))[+].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:8fb5c55afbb51ddd11650ee54988468c64608ac1c2f58e0ffcc73fcc3e41cadb","url":"https://access.redhat.com/errata/RHBA-2024:1205"}},{"version":"4.15.13","payload":"quay.io/openshift-release-dev/ocp-release@sha256:e7e6e89eeaf682eb2f9987a900386e950e433fe909eff779c27216919c8d5f2e","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:e7e6e89eeaf682eb2f9987a900386e950e433fe909eff779c27216919c8d5f2e","url":"https://access.redhat.com/errata/RHSA-2024:2773"}},{"version":"4.14.31","payload":"quay.io/openshift-release-dev/ocp-release@sha256:e4424eeec8a386241a5348d556bdd6dd82ea68f4f19f30f71d18963fb5924e9e","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:e4424eeec8a386241a5348d556bdd6dd82ea68f4f19f30f71d18963fb5924e9e","url":"https://access.redhat.com/errata/RHSA-2024:4010"}},{"version":"4.15.14","payload":"quay.io/openshift-release-dev/ocp-release@sha256:234ccdfa4adabcfa7490785bad7108a3c7d622f19cd5b8f4b241dfba96c09be0","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]14[.].*|4[.]14[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:234ccdfa4adabcfa7490785bad7108a3c7d622f19cd5b8f4b241dfba96c09be0","url":"https://access.redhat.com/errata/RHSA-2024:2865"}},{"version":"4.14.22","payload":"quay.io/openshift-release-dev/ocp-release@sha256:7093fa606debe63820671cc92a1384e14d0b70058d4b4719d666571e1fc62190","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.](13[.].*|14[.]([0-9]|1[0-4]))[+].*|4[.](13[.](3[0-5]|[0-2]?[0-9])|14[.](1[0-3]|[0-9]))[+].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:7093fa606debe63820671cc92a1384e14d0b70058d4b4719d666571e1fc62190","url":"https://access.redhat.com/errata/RHSA-2024:1891"}},{"version":"4.14.28","payload":"quay.io/openshift-release-dev/ocp-release@sha256:c5bcd0298deee99caaf3ec88de246f3af84f80225202df46527b6f2b4d0eb3c3","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:c5bcd0298deee99caaf3ec88de246f3af84f80225202df46527b6f2b4d0eb3c3","url":"https://access.redhat.com/errata/RHSA-2024:3523"}},{"version":"4.15.18","payload":"quay.io/openshift-release-dev/ocp-release@sha256:0f55261077557d1bb909c06b115e0c79b0025677be57ba2f045495c11e2443ee","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":"^4[.](14[.].*|15[.]([0-9]|1[0-6]))[+].*$|4[.]14[.].*|.*","io.openshift.upgrades.graph.release.channels":"candidate-4.15,fast-4.15,stable-4.15,candidate-4.16,eus-4.16,fast-4.16,stable-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:0f55261077557d1bb909c06b115e0c79b0025677be57ba2f045495c11e2443ee","url":"https://access.redhat.com/errata/RHSA-2024:3889"}},{"version":"4.14.3","payload":"quay.io/openshift-release-dev/ocp-release@sha256:e73ab4b33a9c3ff00c9f800a38d69853ca0c4dfa5a88e3df331f66df8f18ec55","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:e73ab4b33a9c3ff00c9f800a38d69853ca0c4dfa5a88e3df331f66df8f18ec55","url":"https://access.redhat.com/errata/RHSA-2023:7315"}},{"version":"4.14.8","payload":"quay.io/openshift-release-dev/ocp-release@sha256:073a4e46289be25e2a05f5264c8f1d697410db66b960c9ceeddebd1c61e58717","metadata":{"io.openshift.upgrades.graph.previous.remove_regex":".*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*|4[.]13[.].*","io.openshift.upgrades.graph.release.channels":"candidate-4.14,eus-4.14,fast-4.14,stable-4.14,candidate-4.15,fast-4.15,stable-4.15,eus-4.16","io.openshift.upgrades.graph.release.manifestref":"sha256:073a4e46289be25e2a05f5264c8f1d697410db66b960c9ceeddebd1c61e58717","url":"https://access.redhat.com/errata/RHSA-2024:0050"}}],"edges":[[15,40],[18,41],[14,6],[9,48],[50,48],[37,33],[0,27],[53,48],[53,40],[32,48],[50,6],[44,40],[19,14],[51,6],[53,6],[33,47],[16,32],[12,33],[12,47],[22,17],[38,17],[3,6],[7,12],[0,47],[38,32],[22,6],[53,14],[7,23],[54,6],[35,51],[18,30],[34,13],[19,51],[9,32],[7,37],[25,48],[43,40],[25,21],[7,18],[1,50],[3,32],[28,48],[15,17],[28,17],[7,49],[22,21],[36,4],[9,40],[37,0],[39,6],[43,39],[16,51],[50,32],[4,51],[46,4],[8,32],[54,32],[16,40],[15,32],[1,5],[39,4],[9,51],[5,4],[43,21],[45,13],[25,17],[19,32],[40,51],[9,21],[11,42],[50,4],[32,17],[22,32],[1,9],[30,47],[26,48],[53,21],[5,48],[46,16],[5,9],[16,21],[43,9],[5,40],[4,6],[16,6],[12,27],[5,21],[8,51],[28,51],[20,40],[37,47],[46,51],[11,13],[54,14],[18,37],[19,40],[8,17],[31,6],[31,17],[8,21],[14,32],[52,45],[18,27],[35,32],[46,9],[19,6],[4,9],[15,48],[39,50],[22,8],[46,48],[28,21],[52,13],[7,30],[20,51],[21,51],[20,32],[37,41],[35,9],[46,21],[1,6],[27,41],[12,18],[16,9],[7,47],[24,13],[3,48],[0,49],[8,14],[43,17],[48,6],[20,48],[5,51],[36,17],[27,49],[15,51],[44,8],[18,33],[7,41],[53,17],[34,42],[23,49],[15,8],[46,1],[51,17],[8,48],[1,51],[0,41],[35,4],[44,21],[40,6],[8,40],[26,6],[25,40],[38,51],[43,46],[27,33],[44,6],[28,6],[39,48],[43,16],[14,17],[50,51],[36,48],[12,23],[43,1],[19,8],[26,17],[37,23],[39,17],[20,6],[50,21],[44,32],[1,4],[10,17],[26,8],[1,39],[53,8],[46,40],[25,6],[3,51],[42,13],[12,49],[16,35],[52,24],[39,51],[35,50],[7,33],[3,8],[43,48],[44,17],[38,40],[25,51],[30,49],[37,49],[9,17],[16,39],[4,40],[16,4],[34,45],[9,6],[14,51],[20,28],[12,41],[34,11],[24,45],[43,4],[26,21],[32,51],[36,32],[1,35],[7,0],[14,40],[30,41],[4,17],[37,30],[35,6],[3,21],[33,41],[28,40],[1,32],[3,14],[18,49],[41,49],[35,39],[4,21],[3,40],[39,21],[44,51],[54,8],[36,51],[54,48],[18,0],[30,33],[19,17],[36,21],[4,48],[7,27],[21,17],[35,21],[5,35],[5,32],[5,6],[46,39],[22,48],[23,47],[5,17],[38,8],[46,35],[19,21],[5,16],[1,17],[11,45],[12,30],[27,23],[50,9],[39,9],[8,6],[22,51],[21,6],[39,32],[26,51],[46,6],[21,40],[46,17],[20,21],[16,48],[54,21],[1,40],[46,50],[48,17],[18,47],[26,40],[3,17],[43,35],[38,14],[27,30],[53,32],[39,40],[15,14],[10,48],[25,8],[41,47],[19,25],[38,21],[23,30],[1,48],[54,51],[43,5],[36,9],[12,0],[26,32],[11,24],[44,14],[54,40],[28,32],[16,50],[38,6],[43,50],[6,17],[43,32],[18,23],[23,41],[1,21],[0,30],[0,33],[46,32],[24,42],[14,21],[52,11],[5,39],[12,37],[4,32],[10,6],[50,17],[35,40],[46,5],[40,17],[21,32],[25,32],[42,45],[37,27],[51,48],[23,33],[21,48],[35,48],[19,48],[36,6],[14,48],[53,51],[43,51],[36,40],[25,14],[26,14],[47,49],[35,17],[20,17],[34,24],[22,40],[38,48],[15,6],[52,42],[54,17],[15,21],[44,48],[32,6],[40,48],[1,16],[43,6],[33,49],[32,40],[31,48],[27,47],[16,17],[50,40],[0,23],[5,50],[22,14]],"conditionalEdges":[{"edges":[{"from":"4.14.4","to":"4.14.12"},{"from":"4.14.6","to":"4.14.13"},{"from":"4.14.7","to":"4.14.13"},{"from":"4.14.1","to":"4.14.13"},{"from":"4.14.1","to":"4.14.12"},{"from":"4.14.8","to":"4.14.13"},{"from":"4.14.9","to":"4.14.13"},{"from":"4.14.11","to":"4.14.12"},{"from":"4.14.0","to":"4.14.13"},{"from":"4.14.4","to":"4.14.13"},{"from":"4.14.10","to":"4.14.13"},{"from":"4.14.10","to":"4.14.12"},{"from":"4.14.5","to":"4.14.13"},{"from":"4.14.3","to":"4.14.13"},{"from":"4.14.6","to":"4.14.12"},{"from":"4.14.2","to":"4.14.13"},{"from":"4.14.11","to":"4.14.13"},{"from":"4.14.2","to":"4.14.12"},{"from":"4.14.3","to":"4.14.12"},{"from":"4.14.9","to":"4.14.12"},{"from":"4.14.8","to":"4.14.12"},{"from":"4.14.0","to":"4.14.12"},{"from":"4.14.5","to":"4.14.12"},{"from":"4.14.7","to":"4.14.12"}],"risks":[{"url":"https://issues.redhat.com/browse/MCO-1094","name":"HighNodeStatusReportFrequency","message":"An unintended reversion to the default kubelet nodeStatusReportFrequency can cause significant load on the control plane.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.14.12","to":"4.14.24"},{"from":"4.14.6","to":"4.14.24"},{"from":"4.14.13","to":"4.14.14"},{"from":"4.14.9","to":"4.14.24"},{"from":"4.14.12","to":"4.14.23"},{"from":"4.14.13","to":"4.14.24"},{"from":"4.14.7","to":"4.14.23"},{"from":"4.14.9","to":"4.14.23"},{"from":"4.14.2","to":"4.14.24"},{"from":"4.14.6","to":"4.14.23"},{"from":"4.14.5","to":"4.14.24"},{"from":"4.14.12","to":"4.14.14"},{"from":"4.14.10","to":"4.14.23"},{"from":"4.14.3","to":"4.14.23"},{"from":"4.14.0","to":"4.14.23"},{"from":"4.14.4","to":"4.14.24"},{"from":"4.14.11","to":"4.14.23"},{"from":"4.14.10","to":"4.14.24"},{"from":"4.14.4","to":"4.14.23"},{"from":"4.14.8","to":"4.14.23"},{"from":"4.14.0","to":"4.14.24"},{"from":"4.14.13","to":"4.14.23"},{"from":"4.14.1","to":"4.14.23"},{"from":"4.14.8","to":"4.14.24"},{"from":"4.14.1","to":"4.14.24"},{"from":"4.14.3","to":"4.14.24"},{"from":"4.14.2","to":"4.14.23"},{"from":"4.14.7","to":"4.14.24"},{"from":"4.14.5","to":"4.14.23"},{"from":"4.14.11","to":"4.14.24"}],"risks":[{"url":"https://issues.redhat.com/browse/COS-2781","name":"CephCapDropPanic","message":"Nodes in clusters running workloads that mount Ceph volumes may experience kernel panics due to a CephFS client bug.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  label_replace(group(ceph_health_status{_id=\"\"}), \"ceph\", \"yes\", \"\", \"\")\n  or\n  label_replace(0 * group(cluster_version{_id=\"\"}), \"ceph\", \"no\", \"\", \"\")\n)\n"}}]}]},{"edges":[{"from":"4.14.8","to":"4.14.14"},{"from":"4.14.3","to":"4.14.14"},{"from":"4.14.5","to":"4.14.14"},{"from":"4.14.9","to":"4.14.14"},{"from":"4.14.7","to":"4.14.14"},{"from":"4.14.4","to":"4.14.14"},{"from":"4.14.10","to":"4.14.14"},{"from":"4.14.2","to":"4.14.14"},{"from":"4.14.0","to":"4.14.14"},{"from":"4.14.6","to":"4.14.14"},{"from":"4.14.1","to":"4.14.14"},{"from":"4.14.11","to":"4.14.14"}],"risks":[{"url":"https://issues.redhat.com/browse/COS-2781","name":"CephCapDropPanic","message":"Nodes in clusters running workloads that mount Ceph volumes may experience kernel panics due to a CephFS client bug.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  label_replace(group(ceph_health_status{_id=\"\"}), \"ceph\", \"yes\", \"\", \"\")\n  or\n  label_replace(0 * group(cluster_version{_id=\"\"}), \"ceph\", \"no\", \"\", \"\")\n)\n"}}]},{"url":"https://issues.redhat.com/browse/MCO-1094","name":"HighNodeStatusReportFrequency","message":"An unintended reversion to the default kubelet nodeStatusReportFrequency can cause significant load on the control plane.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.14.6","to":"4.14.8"},{"from":"4.14.4","to":"4.14.9"},{"from":"4.14.0","to":"4.14.9"},{"from":"4.14.1","to":"4.14.5"},{"from":"4.14.3","to":"4.14.9"},{"from":"4.14.1","to":"4.14.8"},{"from":"4.14.4","to":"4.14.6"},{"from":"4.14.1","to":"4.14.7"},{"from":"4.14.1","to":"4.14.6"},{"from":"4.14.4","to":"4.14.8"},{"from":"4.14.3","to":"4.14.5"},{"from":"4.14.6","to":"4.14.7"},{"from":"4.14.0","to":"4.14.5"},{"from":"4.14.5","to":"4.14.6"},{"from":"4.14.1","to":"4.14.9"},{"from":"4.14.5","to":"4.14.7"},{"from":"4.14.7","to":"4.14.8"},{"from":"4.14.0","to":"4.14.8"},{"from":"4.14.2","to":"4.14.8"},{"from":"4.14.4","to":"4.14.5"},{"from":"4.14.3","to":"4.14.8"},{"from":"4.14.3","to":"4.14.6"},{"from":"4.14.2","to":"4.14.7"},{"from":"4.14.2","to":"4.14.9"},{"from":"4.14.2","to":"4.14.4"},{"from":"4.14.2","to":"4.14.5"},{"from":"4.14.5","to":"4.14.8"},{"from":"4.14.3","to":"4.14.4"},{"from":"4.14.6","to":"4.14.9"},{"from":"4.14.5","to":"4.14.9"},{"from":"4.14.2","to":"4.14.6"},{"from":"4.14.8","to":"4.14.9"},{"from":"4.14.0","to":"4.14.6"},{"from":"4.14.0","to":"4.14.4"},{"from":"4.14.1","to":"4.14.4"},{"from":"4.14.0","to":"4.14.7"},{"from":"4.14.3","to":"4.14.7"},{"from":"4.14.7","to":"4.14.9"},{"from":"4.14.4","to":"4.14.7"}],"risks":[{"url":"https://issues.redhat.com/browse/MCO-958","name":"AROBrokenDNSMasq","message":"Adding a new worker node will fail for clusters running on ARO.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group(cluster_operator_conditions{name=\"aro\"})\n  or\n  0 * group(cluster_operator_conditions)\n)\n"}}]}]},{"edges":[{"from":"4.14.29","to":"4.15.22"},{"from":"4.14.28","to":"4.15.23"},{"from":"4.14.20","to":"4.15.23"},{"from":"4.14.31","to":"4.15.20"},{"from":"4.14.31","to":"4.15.19"},{"from":"4.14.19","to":"4.15.20"},{"from":"4.14.24","to":"4.15.21"},{"from":"4.14.30","to":"4.15.19"},{"from":"4.14.24","to":"4.15.19"},{"from":"4.14.32","to":"4.15.22"},{"from":"4.14.21","to":"4.15.19"},{"from":"4.14.19","to":"4.15.19"},{"from":"4.14.21","to":"4.15.20"},{"from":"4.14.26","to":"4.15.20"},{"from":"4.14.24","to":"4.15.20"},{"from":"4.14.17","to":"4.15.20"},{"from":"4.14.32","to":"4.15.23"},{"from":"4.14.31","to":"4.15.21"},{"from":"4.14.22","to":"4.15.21"},{"from":"4.14.21","to":"4.15.23"},{"from":"4.14.29","to":"4.15.21"},{"from":"4.14.22","to":"4.15.23"},{"from":"4.14.26","to":"4.15.23"},{"from":"4.14.24","to":"4.15.22"},{"from":"4.14.29","to":"4.15.23"},{"from":"4.14.21","to":"4.15.22"},{"from":"4.14.20","to":"4.15.21"},{"from":"4.14.33","to":"4.15.22"},{"from":"4.14.28","to":"4.15.20"},{"from":"4.14.16","to":"4.15.22"},{"from":"4.14.27","to":"4.15.19"},{"from":"4.14.23","to":"4.15.19"},{"from":"4.14.25","to":"4.15.22"},{"from":"4.14.27","to":"4.15.20"},{"from":"4.14.18","to":"4.15.21"},{"from":"4.14.33","to":"4.15.23"},{"from":"4.14.28","to":"4.15.22"},{"from":"4.14.25","to":"4.15.23"},{"from":"4.14.32","to":"4.15.21"},{"from":"4.14.29","to":"4.15.20"},{"from":"4.14.30","to":"4.15.23"},{"from":"4.14.22","to":"4.15.19"},{"from":"4.14.31","to":"4.15.23"},{"from":"4.14.23","to":"4.15.23"},{"from":"4.14.17","to":"4.15.19"},{"from":"4.14.28","to":"4.15.21"},{"from":"4.14.20","to":"4.15.19"},{"from":"4.14.16","to":"4.15.21"},{"from":"4.14.30","to":"4.15.21"},{"from":"4.14.25","to":"4.15.20"},{"from":"4.14.17","to":"4.15.21"},{"from":"4.14.17","to":"4.15.22"},{"from":"4.14.26","to":"4.15.22"},{"from":"4.14.18","to":"4.15.23"},{"from":"4.14.30","to":"4.15.22"},{"from":"4.14.26","to":"4.15.21"},{"from":"4.14.30","to":"4.15.20"},{"from":"4.14.18","to":"4.15.20"},{"from":"4.14.25","to":"4.15.21"},{"from":"4.14.23","to":"4.15.20"},{"from":"4.14.27","to":"4.15.23"},{"from":"4.14.19","to":"4.15.22"},{"from":"4.14.27","to":"4.15.21"},{"from":"4.14.22","to":"4.15.22"},{"from":"4.14.18","to":"4.15.22"},{"from":"4.14.16","to":"4.15.20"},{"from":"4.14.19","to":"4.15.21"},{"from":"4.14.22","to":"4.15.20"},{"from":"4.14.21","to":"4.15.21"},{"from":"4.14.23","to":"4.15.22"},{"from":"4.14.26","to":"4.15.19"},{"from":"4.14.17","to":"4.15.23"},{"from":"4.14.16","to":"4.15.19"},{"from":"4.14.31","to":"4.15.22"},{"from":"4.14.23","to":"4.15.21"},{"from":"4.14.19","to":"4.15.23"},{"from":"4.14.24","to":"4.15.23"},{"from":"4.14.25","to":"4.15.19"},{"from":"4.14.18","to":"4.15.19"},{"from":"4.14.20","to":"4.15.22"},{"from":"4.14.27","to":"4.15.22"},{"from":"4.14.20","to":"4.15.20"},{"from":"4.14.29","to":"4.15.19"},{"from":"4.14.16","to":"4.15.23"},{"from":"4.14.28","to":"4.15.19"}],"risks":[{"url":"https://issues.redhat.com/browse/HOSTEDCP-1849","name":"HyperShiftKubeAPIPort443","message":"Hosted/HyperShift clusters where HostedCluster spec.networking.apiServer.port is 443 can have trouble with Pods on compute Nodes connecting to the internal Kubernetes API service via the service IP.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, invoker) (cluster_installer{_id=\"\",invoker=\"hypershift\"})\nor\n0 * group by (_id, invoker) (cluster_installer{_id=\"\"})\n"}}]},{"url":"https://issues.redhat.com/browse/SDN-5146","name":"OVNIPsecPausedMCPConnectivity","message":"OVN clusters with enabled IPsec with multiple worker MachineConfigPools may lose SDN connectivity during updates when at least one worker MCP is paused.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"enabled\", \"\", \"\") == 1)\n  or on (_id)\n  0 * group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"disabled\", \"\", \"\") == 0)\n) and on (_id) (\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\n  and on (_id)\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"machineconfigpools.machineconfiguration.openshift.io\"}[1h] ) > 2)\n)\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]}]},{"edges":[{"from":"4.14.3","to":"4.14.15"},{"from":"4.14.11","to":"4.14.15"},{"from":"4.14.0","to":"4.14.15"},{"from":"4.14.5","to":"4.14.15"},{"from":"4.14.7","to":"4.14.15"},{"from":"4.14.2","to":"4.14.15"},{"from":"4.14.4","to":"4.14.15"},{"from":"4.14.10","to":"4.14.15"},{"from":"4.14.1","to":"4.14.15"},{"from":"4.14.9","to":"4.14.15"},{"from":"4.14.6","to":"4.14.15"},{"from":"4.14.8","to":"4.14.15"}],"risks":[{"url":"https://issues.redhat.com/browse/IR-468","name":"AzureRegistryImageMigrationUserProvisioned","message":"In Azure clusters with the user-provisioned registry storage, the in-cluster image registry component may struggle to complete the cluster update.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  group by (type) (cluster_infrastructure_provider{_id=\"\",type=\"Azure\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider{_id=\"\"})\n)\n* on () group_left (secret)\ntopk(1,\n  group by (secret) (kube_secret_info{_id=\"\",namespace=\"openshift-image-registry\",secret=\"image-registry-private-configuration-user\"})\n  or\n  0 * group by (secret) (kube_secret_info{_id=\"\",namespace=\"openshift-image-registry\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/COS-2781","name":"CephCapDropPanic","message":"Nodes in clusters running workloads that mount Ceph volumes may experience kernel panics due to a CephFS client bug.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  label_replace(group(ceph_health_status{_id=\"\"}), \"ceph\", \"yes\", \"\", \"\")\n  or\n  label_replace(0 * group(cluster_version{_id=\"\"}), \"ceph\", \"no\", \"\", \"\")\n)\n"}}]},{"url":"https://issues.redhat.com/browse/MCO-1094","name":"HighNodeStatusReportFrequency","message":"An unintended reversion to the default kubelet nodeStatusReportFrequency can cause significant load on the control plane.","matchingRules":[{"type":"Always"}]}]},{"edges":[{"from":"4.14.1","to":"4.14.3"},{"from":"4.14.0","to":"4.14.3"},{"from":"4.14.1","to":"4.14.2"},{"from":"4.14.0","to":"4.14.2"},{"from":"4.14.2","to":"4.14.3"}],"risks":[{"url":"https://issues.redhat.com/browse/MCO-958","name":"AROBrokenDNSMasq","message":"Adding a new worker node will fail for clusters running on ARO","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group(cluster_operator_conditions{name=\"aro\"})\n  or\n  0 * group(cluster_operator_conditions)\n)\n"}}]}]},{"edges":[{"from":"4.14.22","to":"4.15.16"},{"from":"4.14.23","to":"4.15.15"},{"from":"4.14.18","to":"4.15.15"},{"from":"4.14.25","to":"4.15.15"},{"from":"4.14.16","to":"4.15.16"},{"from":"4.14.26","to":"4.15.15"},{"from":"4.14.21","to":"4.15.15"},{"from":"4.14.28","to":"4.15.16"},{"from":"4.14.18","to":"4.15.16"},{"from":"4.14.17","to":"4.15.15"},{"from":"4.14.25","to":"4.15.16"},{"from":"4.14.24","to":"4.15.15"},{"from":"4.14.17","to":"4.15.16"},{"from":"4.14.19","to":"4.15.15"},{"from":"4.14.27","to":"4.15.15"},{"from":"4.14.22","to":"4.15.15"},{"from":"4.14.26","to":"4.15.16"},{"from":"4.14.24","to":"4.15.16"},{"from":"4.14.19","to":"4.15.16"},{"from":"4.14.16","to":"4.15.15"},{"from":"4.14.20","to":"4.15.15"},{"from":"4.14.20","to":"4.15.16"},{"from":"4.14.27","to":"4.15.16"},{"from":"4.14.23","to":"4.15.16"},{"from":"4.14.21","to":"4.15.16"}],"risks":[{"url":"https://issues.redhat.com/browse/SDN-5146","name":"OVNIPsecPausedMCPConnectivity","message":"OVN clusters with enabled IPsec with multiple worker MachineConfigPools may lose SDN connectivity during updates when at least one worker MCP is paused.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"enabled\", \"\", \"\") == 1)\n  or on (_id)\n  0 * group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"disabled\", \"\", \"\") == 0)\n) and on (_id) (\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\n  and on (_id)\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"machineconfigpools.machineconfiguration.openshift.io\"}[1h] ) > 2)\n)\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]}]},{"edges":[{"from":"4.14.19","to":"4.15.9"},{"from":"4.14.20","to":"4.15.9"},{"from":"4.14.17","to":"4.15.3"},{"from":"4.14.18","to":"4.15.9"},{"from":"4.14.16","to":"4.15.5"},{"from":"4.14.17","to":"4.15.9"},{"from":"4.14.16","to":"4.15.2"},{"from":"4.14.16","to":"4.15.8"},{"from":"4.14.16","to":"4.15.9"},{"from":"4.14.19","to":"4.15.8"},{"from":"4.14.21","to":"4.15.9"},{"from":"4.14.20","to":"4.15.8"},{"from":"4.14.16","to":"4.15.3"},{"from":"4.14.17","to":"4.15.5"},{"from":"4.14.18","to":"4.15.8"},{"from":"4.14.16","to":"4.15.6"},{"from":"4.14.19","to":"4.15.6"},{"from":"4.14.18","to":"4.15.5"},{"from":"4.14.17","to":"4.15.6"},{"from":"4.14.18","to":"4.15.6"},{"from":"4.14.17","to":"4.15.8"}],"risks":[{"url":"https://issues.redhat.com/browse/API-1687","name":"EarlyAPICertRotation","message":"Clusters born in 4.7 and earlier will trigger an api-int certificate authority rollout, and bugs in that rollout may break kubelet access to the Kubernetes API service.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  label_replace(group by (version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.7 or earlier\", \"\", \"\")\n  or\n  label_replace(0 * group by (version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n)\n"}}]},{"url":"https://issues.redhat.com/browse/OPRUN-3267","name":"OLMOperatorsInFailedState","message":"The Operator Lifecycle Manager (OLM) operators can't be upgraded and may incorrectly report failed status.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group(csv_succeeded{_id=\"\"})\n  or\n  0 * group(csv_count{_id=\"\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/SDN-5146","name":"OVNIPsecPausedMCPConnectivity","message":"OVN clusters with enabled IPsec with multiple worker MachineConfigPools may lose SDN connectivity during updates when at least one worker MCP is paused.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"enabled\", \"\", \"\") == 1)\n  or on (_id)\n  0 * group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"disabled\", \"\", \"\") == 0)\n) and on (_id) (\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\n  and on (_id)\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"machineconfigpools.machineconfiguration.openshift.io\"}[1h] ) > 2)\n)\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://issues.redhat.com/browse/AUTH-517","name":"ServiceAccountsOAuth","message":"ServiceAccounts cannot be used as OAuth2 clients in clusters where internal image registry is disabled.","matchingRules":[{"type":"PromQL","promql":{"promql":"bottomk(1,\n  0 * group by (deployment) (kube_deployment_spec_replicas{_id=\"\",namespace=\"openshift-image-registry\",deployment=\"image-registry\"} > 0)\n  or\n  group(kube_deployment_spec_replicas{_id=\"\"})\n)\n"}}]}]},{"edges":[{"from":"4.15.13","to":"4.15.18"},{"from":"4.15.15","to":"4.15.17"},{"from":"4.15.6","to":"4.15.18"},{"from":"4.15.15","to":"4.15.18"},{"from":"4.15.13","to":"4.15.17"},{"from":"4.15.14","to":"4.15.18"},{"from":"4.15.0","to":"4.15.18"},{"from":"4.15.12","to":"4.15.18"},{"from":"4.15.0","to":"4.15.17"},{"from":"4.15.9","to":"4.15.18"},{"from":"4.15.12","to":"4.15.17"},{"from":"4.15.8","to":"4.15.17"},{"from":"4.15.16","to":"4.15.18"},{"from":"4.15.11","to":"4.15.17"},{"from":"4.15.6","to":"4.15.17"},{"from":"4.15.14","to":"4.15.17"},{"from":"4.15.16","to":"4.15.17"},{"from":"4.15.5","to":"4.15.17"},{"from":"4.15.5","to":"4.15.18"},{"from":"4.15.10","to":"4.15.17"},{"from":"4.15.3","to":"4.15.17"},{"from":"4.15.11","to":"4.15.18"},{"from":"4.15.3","to":"4.15.18"},{"from":"4.15.2","to":"4.15.17"},{"from":"4.15.8","to":"4.15.18"},{"from":"4.15.9","to":"4.15.17"},{"from":"4.15.2","to":"4.15.18"},{"from":"4.15.10","to":"4.15.18"}],"risks":[{"url":"https://issues.redhat.com/browse/HOSTEDCP-1849","name":"HyperShiftKubeAPIPort443","message":"Hosted/HyperShift clusters where HostedCluster spec.networking.apiServer.port is 443 can have trouble with Pods on compute Nodes connecting to the internal Kubernetes API service via the service IP.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, invoker) (cluster_installer{_id=\"\",invoker=\"hypershift\"})\nor\n0 * group by (_id, invoker) (cluster_installer{_id=\"\"})\n"}}]},{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]}]},{"edges":[{"from":"4.15.5","to":"4.15.15"},{"from":"4.15.10","to":"4.15.16"},{"from":"4.14.5","to":"4.14.30"},{"from":"4.15.17","to":"4.15.18"},{"from":"4.14.22","to":"4.14.29"},{"from":"4.14.24","to":"4.14.30"},{"from":"4.14.2","to":"4.14.29"},{"from":"4.15.0","to":"4.15.15"},{"from":"4.14.16","to":"4.14.29"},{"from":"4.15.11","to":"4.15.15"},{"from":"4.14.15","to":"4.14.30"},{"from":"4.14.13","to":"4.14.30"},{"from":"4.15.3","to":"4.15.16"},{"from":"4.14.14","to":"4.14.30"},{"from":"4.14.23","to":"4.14.30"},{"from":"4.14.26","to":"4.14.29"},{"from":"4.14.25","to":"4.14.30"},{"from":"4.14.4","to":"4.14.30"},{"from":"4.14.19","to":"4.14.29"},{"from":"4.14.2","to":"4.14.30"},{"from":"4.14.15","to":"4.14.29"},{"from":"4.14.13","to":"4.14.29"},{"from":"4.15.14","to":"4.15.16"},{"from":"4.14.26","to":"4.14.30"},{"from":"4.14.28","to":"4.14.29"},{"from":"4.14.20","to":"4.14.29"},{"from":"4.14.9","to":"4.14.29"},{"from":"4.14.1","to":"4.14.30"},{"from":"4.15.6","to":"4.15.16"},{"from":"4.15.0","to":"4.15.16"},{"from":"4.14.0","to":"4.14.30"},{"from":"4.14.29","to":"4.14.30"},{"from":"4.14.25","to":"4.14.29"},{"from":"4.15.9","to":"4.15.16"},{"from":"4.15.6","to":"4.15.15"},{"from":"4.15.8","to":"4.15.16"},{"from":"4.15.13","to":"4.15.15"},{"from":"4.14.3","to":"4.14.29"},{"from":"4.15.2","to":"4.15.16"},{"from":"4.14.18","to":"4.14.29"},{"from":"4.14.20","to":"4.14.30"},{"from":"4.14.11","to":"4.14.30"},{"from":"4.15.10","to":"4.15.15"},{"from":"4.15.11","to":"4.15.16"},{"from":"4.14.21","to":"4.14.30"},{"from":"4.14.22","to":"4.14.30"},{"from":"4.14.23","to":"4.14.29"},{"from":"4.14.19","to":"4.14.30"},{"from":"4.14.1","to":"4.14.29"},{"from":"4.14.10","to":"4.14.29"},{"from":"4.14.7","to":"4.14.29"},{"from":"4.14.0","to":"4.14.29"},{"from":"4.14.12","to":"4.14.30"},{"from":"4.14.3","to":"4.14.30"},{"from":"4.14.17","to":"4.14.29"},{"from":"4.14.9","to":"4.14.30"},{"from":"4.14.14","to":"4.14.29"},{"from":"4.14.8","to":"4.14.30"},{"from":"4.14.27","to":"4.14.29"},{"from":"4.15.14","to":"4.15.15"},{"from":"4.14.18","to":"4.14.30"},{"from":"4.15.5","to":"4.15.16"},{"from":"4.14.7","to":"4.14.30"},{"from":"4.15.8","to":"4.15.15"},{"from":"4.15.9","to":"4.15.15"},{"from":"4.14.28","to":"4.14.30"},{"from":"4.14.21","to":"4.14.29"},{"from":"4.15.12","to":"4.15.15"},{"from":"4.14.24","to":"4.14.29"},{"from":"4.14.11","to":"4.14.29"},{"from":"4.15.2","to":"4.15.15"},{"from":"4.14.12","to":"4.14.29"},{"from":"4.14.4","to":"4.14.29"},{"from":"4.14.6","to":"4.14.29"},{"from":"4.14.17","to":"4.14.30"},{"from":"4.14.10","to":"4.14.30"},{"from":"4.14.6","to":"4.14.30"},{"from":"4.15.13","to":"4.15.16"},{"from":"4.15.15","to":"4.15.16"},{"from":"4.14.5","to":"4.14.29"},{"from":"4.15.12","to":"4.15.16"},{"from":"4.14.16","to":"4.14.30"},{"from":"4.14.27","to":"4.14.30"},{"from":"4.14.8","to":"4.14.29"},{"from":"4.15.3","to":"4.15.15"}],"risks":[{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]}]},{"edges":[{"from":"4.14.15","to":"4.15.6"},{"from":"4.14.15","to":"4.15.2"},{"from":"4.14.15","to":"4.15.8"},{"from":"4.14.15","to":"4.15.3"},{"from":"4.14.15","to":"4.15.5"}],"risks":[{"url":"https://issues.redhat.com/browse/MCO-1031","name":"AWSCustomDomainNodesNotReady","message":"Nodes on AWS with custom domain names will go to NotReady state.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group by (type) (cluster_infrastructure_provider{_id=\"\",type=\"AWS\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider{_id=\"\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/API-1687","name":"EarlyAPICertRotation","message":"Clusters born in 4.7 and earlier will trigger an api-int certificate authority rollout, and bugs in that rollout may break kubelet access to the Kubernetes API service.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  label_replace(group by (version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.7 or earlier\", \"\", \"\")\n  or\n  label_replace(0 * group by (version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n)\n"}}]},{"url":"https://issues.redhat.com/browse/OPRUN-3267","name":"OLMOperatorsInFailedState","message":"The Operator Lifecycle Manager (OLM) operators can't be upgraded and may incorrectly report failed status.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group(csv_succeeded{_id=\"\"})\n  or\n  0 * group(csv_count{_id=\"\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/SDN-5146","name":"OVNIPsecPausedMCPConnectivity","message":"OVN clusters with enabled IPsec with multiple worker MachineConfigPools may lose SDN connectivity during updates when at least one worker MCP is paused.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"enabled\", \"\", \"\") == 1)\n  or on (_id)\n  0 * group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"disabled\", \"\", \"\") == 0)\n) and on (_id) (\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\n  and on (_id)\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"machineconfigpools.machineconfiguration.openshift.io\"}[1h] ) > 2)\n)\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://issues.redhat.com/browse/AUTH-517","name":"ServiceAccountsOAuth","message":"ServiceAccounts cannot be used as OAuth2 clients in clusters where internal image registry is disabled.","matchingRules":[{"type":"PromQL","promql":{"promql":"bottomk(1,\n  0 * group by (deployment) (kube_deployment_spec_replicas{_id=\"\",namespace=\"openshift-image-registry\",deployment=\"image-registry\"} > 0)\n  or\n  group(kube_deployment_spec_replicas{_id=\"\"})\n)\n"}}]}]},{"edges":[{"from":"4.14.18","to":"4.15.10"},{"from":"4.14.19","to":"4.15.10"},{"from":"4.14.17","to":"4.15.10"},{"from":"4.14.22","to":"4.15.10"},{"from":"4.14.21","to":"4.15.10"},{"from":"4.14.20","to":"4.15.10"},{"from":"4.14.16","to":"4.15.10"}],"risks":[{"url":"https://issues.redhat.com/browse/OPRUN-3267","name":"OLMOperatorsInFailedState","message":"The Operator Lifecycle Manager (OLM) operators can't be upgraded and may incorrectly report failed status.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group(csv_succeeded{_id=\"\"})\n  or\n  0 * group(csv_count{_id=\"\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/SDN-5146","name":"OVNIPsecPausedMCPConnectivity","message":"OVN clusters with enabled IPsec with multiple worker MachineConfigPools may lose SDN connectivity during updates when at least one worker MCP is paused.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"enabled\", \"\", \"\") == 1)\n  or on (_id)\n  0 * group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"disabled\", \"\", \"\") == 0)\n) and on (_id) (\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\n  and on (_id)\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"machineconfigpools.machineconfiguration.openshift.io\"}[1h] ) > 2)\n)\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://issues.redhat.com/browse/AUTH-517","name":"ServiceAccountsOAuth","message":"ServiceAccounts cannot be used as OAuth2 clients in clusters where internal image registry is disabled.","matchingRules":[{"type":"PromQL","promql":{"promql":"bottomk(1,\n  0 * group by (deployment) (kube_deployment_spec_replicas{_id=\"\",namespace=\"openshift-image-registry\",deployment=\"image-registry\"} > 0)\n  or\n  group(kube_deployment_spec_replicas{_id=\"\"})\n)\n"}}]}]},{"edges":[{"from":"4.14.18","to":"4.15.12"},{"from":"4.14.19","to":"4.15.12"},{"from":"4.14.22","to":"4.15.12"},{"from":"4.14.22","to":"4.15.14"},{"from":"4.14.20","to":"4.15.13"},{"from":"4.14.19","to":"4.15.11"},{"from":"4.14.21","to":"4.15.11"},{"from":"4.14.22","to":"4.15.13"},{"from":"4.14.24","to":"4.15.13"},{"from":"4.14.24","to":"4.15.12"},{"from":"4.14.23","to":"4.15.14"},{"from":"4.14.21","to":"4.15.13"},{"from":"4.14.24","to":"4.15.14"},{"from":"4.14.25","to":"4.15.14"},{"from":"4.14.23","to":"4.15.11"},{"from":"4.14.17","to":"4.15.14"},{"from":"4.14.19","to":"4.15.13"},{"from":"4.14.18","to":"4.15.14"},{"from":"4.14.23","to":"4.15.13"},{"from":"4.14.20","to":"4.15.12"},{"from":"4.14.16","to":"4.15.14"},{"from":"4.14.21","to":"4.15.12"},{"from":"4.14.19","to":"4.15.14"},{"from":"4.14.22","to":"4.15.11"},{"from":"4.14.23","to":"4.15.12"},{"from":"4.14.16","to":"4.15.11"},{"from":"4.14.17","to":"4.15.11"},{"from":"4.14.25","to":"4.15.13"},{"from":"4.14.16","to":"4.15.13"},{"from":"4.14.18","to":"4.15.13"},{"from":"4.14.26","to":"4.15.14"},{"from":"4.14.18","to":"4.15.11"},{"from":"4.14.16","to":"4.15.12"},{"from":"4.14.17","to":"4.15.12"},{"from":"4.14.17","to":"4.15.13"},{"from":"4.14.21","to":"4.15.14"},{"from":"4.14.20","to":"4.15.14"},{"from":"4.14.20","to":"4.15.11"}],"risks":[{"url":"https://issues.redhat.com/browse/SDN-5146","name":"OVNIPsecPausedMCPConnectivity","message":"OVN clusters with enabled IPsec with multiple worker MachineConfigPools may lose SDN connectivity during updates when at least one worker MCP is paused.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"enabled\", \"\", \"\") == 1)\n  or on (_id)\n  0 * group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"disabled\", \"\", \"\") == 0)\n) and on (_id) (\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\n  and on (_id)\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"machineconfigpools.machineconfiguration.openshift.io\"}[1h] ) > 2)\n)\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://issues.redhat.com/browse/AUTH-517","name":"ServiceAccountsOAuth","message":"ServiceAccounts cannot be used as OAuth2 clients in clusters where internal image registry is disabled.","matchingRules":[{"type":"PromQL","promql":{"promql":"bottomk(1,\n  0 * group by (deployment) (kube_deployment_spec_replicas{_id=\"\",namespace=\"openshift-image-registry\",deployment=\"image-registry\"} > 0)\n  or\n  group(kube_deployment_spec_replicas{_id=\"\"})\n)\n"}}]}]},{"edges":[{"from":"4.14.28","to":"4.15.17"},{"from":"4.14.25","to":"4.15.17"},{"from":"4.14.20","to":"4.15.18"},{"from":"4.14.17","to":"4.15.18"},{"from":"4.14.22","to":"4.15.18"},{"from":"4.14.28","to":"4.15.18"},{"from":"4.14.17","to":"4.15.17"},{"from":"4.14.23","to":"4.15.17"},{"from":"4.14.24","to":"4.15.17"},{"from":"4.14.20","to":"4.15.17"},{"from":"4.14.27","to":"4.15.18"},{"from":"4.14.19","to":"4.15.17"},{"from":"4.14.26","to":"4.15.17"},{"from":"4.14.24","to":"4.15.18"},{"from":"4.14.16","to":"4.15.17"},{"from":"4.14.29","to":"4.15.17"},{"from":"4.14.21","to":"4.15.17"},{"from":"4.14.18","to":"4.15.18"},{"from":"4.14.29","to":"4.15.18"},{"from":"4.14.30","to":"4.15.18"},{"from":"4.14.27","to":"4.15.17"},{"from":"4.14.26","to":"4.15.18"},{"from":"4.14.21","to":"4.15.18"},{"from":"4.14.25","to":"4.15.18"},{"from":"4.14.16","to":"4.15.18"},{"from":"4.14.18","to":"4.15.17"},{"from":"4.14.23","to":"4.15.18"},{"from":"4.14.19","to":"4.15.18"},{"from":"4.14.22","to":"4.15.17"}],"risks":[{"url":"https://issues.redhat.com/browse/HOSTEDCP-1849","name":"HyperShiftKubeAPIPort443","message":"Hosted/HyperShift clusters where HostedCluster spec.networking.apiServer.port is 443 can have trouble with Pods on compute Nodes connecting to the internal Kubernetes API service via the service IP.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, invoker) (cluster_installer{_id=\"\",invoker=\"hypershift\"})\nor\n0 * group by (_id, invoker) (cluster_installer{_id=\"\"})\n"}}]},{"url":"https://issues.redhat.com/browse/SDN-5146","name":"OVNIPsecPausedMCPConnectivity","message":"OVN clusters with enabled IPsec with multiple worker MachineConfigPools may lose SDN connectivity during updates when at least one worker MCP is paused.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"enabled\", \"\", \"\") == 1)\n  or on (_id)\n  0 * group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"disabled\", \"\", \"\") == 0)\n) and on (_id) (\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\n  and on (_id)\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"machineconfigpools.machineconfiguration.openshift.io\"}[1h] ) > 2)\n)\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://issues.redhat.com/browse/OSASINFRA-3500","name":"OpenStackAvailabilityZoneOutOfRange","message":"OpenStack clusters with more compute availability zones than storage availability zones can lose the ability to provision or deprovision Cinder CSI volumes.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, type) (cluster_infrastructure_provider{_id=\"\",type=\"OpenStack\"})\nor on (_id)\n0 * group by (_id, type) (cluster_infrastructure_provider{_id=\"\"})\n"}}]}]},{"edges":[{"from":"4.14.14","to":"4.15.5"},{"from":"4.14.14","to":"4.15.8"},{"from":"4.14.14","to":"4.15.0"},{"from":"4.14.14","to":"4.15.3"},{"from":"4.14.14","to":"4.15.6"},{"from":"4.14.14","to":"4.15.2"}],"risks":[{"url":"https://issues.redhat.com/browse/MCO-1031","name":"AWSCustomDomainNodesNotReady","message":"Nodes on AWS with custom domain names will go to NotReady state.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group by (type) (cluster_infrastructure_provider{_id=\"\",type=\"AWS\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider{_id=\"\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/IR-468","name":"AzureRegistryImageMigrationUserProvisioned","message":"In Azure clusters with the user-provisioned registry storage, the in-cluster image registry component may struggle to complete the cluster update.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  group by (type) (cluster_infrastructure_provider{_id=\"\",type=\"Azure\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider{_id=\"\"})\n)\n* on () group_left (secret)\ntopk(1,\n  group by (secret) (kube_secret_info{_id=\"\",namespace=\"openshift-image-registry\",secret=\"image-registry-private-configuration-user\"})\n  or\n  0 * group by (secret) (kube_secret_info{_id=\"\",namespace=\"openshift-image-registry\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/API-1687","name":"EarlyAPICertRotation","message":"Clusters born in 4.7 and earlier will trigger an api-int certificate authority rollout, and bugs in that rollout may break kubelet access to the Kubernetes API service.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  label_replace(group by (version) (cluster_version{_id=\"\",type=\"initial\",version=~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"yes, so possibly actually born in 4.7 or earlier\", \"\", \"\")\n  or\n  label_replace(0 * group by (version) (cluster_version{_id=\"\",type=\"initial\",version!~\"4[.][0-9][.].*\"}),\"born_by_4_9\", \"no, born in 4.10 or later\", \"\", \"\")\n)\n"}}]},{"url":"https://issues.redhat.com/browse/OPRUN-3267","name":"OLMOperatorsInFailedState","message":"The Operator Lifecycle Manager (OLM) operators can't be upgraded and may incorrectly report failed status.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group(csv_succeeded{_id=\"\"})\n  or\n  0 * group(csv_count{_id=\"\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/SDN-5146","name":"OVNIPsecPausedMCPConnectivity","message":"OVN clusters with enabled IPsec with multiple worker MachineConfigPools may lose SDN connectivity during updates when at least one worker MCP is paused.","matchingRules":[{"type":"PromQL","promql":{"promql":"(\n  group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"enabled\", \"\", \"\") == 1)\n  or on (_id)\n  0 * group by (ipsec) (label_replace(max_over_time(ovnkube_controller_ipsec_enabled{_id=\"\"}[1h]), \"ipsec\", \"disabled\", \"\", \"\") == 0)\n) and on (_id) (\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"egressips.k8s.ovn.org\"}[1h]))\n  and on (_id)\n  group by (resource) (max_over_time(apiserver_storage_objects{_id=\"\",resource=\"machineconfigpools.machineconfiguration.openshift.io\"}[1h] ) > 2)\n)\nor on (_id)\n0 * group(max_over_time(apiserver_storage_objects{_id=\"\"}[1h]))\n"}}]},{"url":"https://issues.redhat.com/browse/AUTH-517","name":"ServiceAccountsOAuth","message":"ServiceAccounts cannot be used as OAuth2 clients in clusters where internal image registry is disabled.","matchingRules":[{"type":"PromQL","promql":{"promql":"bottomk(1,\n  0 * group by (deployment) (kube_deployment_spec_replicas{_id=\"\",namespace=\"openshift-image-registry\",deployment=\"image-registry\"} > 0)\n  or\n  group(kube_deployment_spec_replicas{_id=\"\"})\n)\n"}}]}]},{"edges":[{"from":"4.15.16","to":"4.15.22"},{"from":"4.15.10","to":"4.15.20"},{"from":"4.15.8","to":"4.15.21"},{"from":"4.15.0","to":"4.15.20"},{"from":"4.15.15","to":"4.15.20"},{"from":"4.15.6","to":"4.15.21"},{"from":"4.15.5","to":"4.15.19"},{"from":"4.15.10","to":"4.15.23"},{"from":"4.15.3","to":"4.15.21"},{"from":"4.15.13","to":"4.15.20"},{"from":"4.15.15","to":"4.15.19"},{"from":"4.15.16","to":"4.15.19"},{"from":"4.15.8","to":"4.15.22"},{"from":"4.15.8","to":"4.15.19"},{"from":"4.15.3","to":"4.15.22"},{"from":"4.15.13","to":"4.15.23"},{"from":"4.15.16","to":"4.15.20"},{"from":"4.15.14","to":"4.15.22"},{"from":"4.15.13","to":"4.15.22"},{"from":"4.15.3","to":"4.15.20"},{"from":"4.15.14","to":"4.15.20"},{"from":"4.15.12","to":"4.15.23"},{"from":"4.15.2","to":"4.15.21"},{"from":"4.15.12","to":"4.15.20"},{"from":"4.15.11","to":"4.15.22"},{"from":"4.15.15","to":"4.15.23"},{"from":"4.15.9","to":"4.15.19"},{"from":"4.15.11","to":"4.15.20"},{"from":"4.15.15","to":"4.15.22"},{"from":"4.15.14","to":"4.15.21"},{"from":"4.15.12","to":"4.15.22"},{"from":"4.15.6","to":"4.15.22"},{"from":"4.15.13","to":"4.15.19"},{"from":"4.15.5","to":"4.15.20"},{"from":"4.15.6","to":"4.15.20"},{"from":"4.15.9","to":"4.15.23"},{"from":"4.15.8","to":"4.15.23"},{"from":"4.15.15","to":"4.15.21"},{"from":"4.15.2","to":"4.15.22"},{"from":"4.15.5","to":"4.15.23"},{"from":"4.15.9","to":"4.15.20"},{"from":"4.15.2","to":"4.15.20"},{"from":"4.15.10","to":"4.15.21"},{"from":"4.15.10","to":"4.15.22"},{"from":"4.15.13","to":"4.15.21"},{"from":"4.15.16","to":"4.15.23"},{"from":"4.15.16","to":"4.15.21"},{"from":"4.15.14","to":"4.15.19"},{"from":"4.15.3","to":"4.15.23"},{"from":"4.15.5","to":"4.15.22"},{"from":"4.15.0","to":"4.15.21"},{"from":"4.15.8","to":"4.15.20"},{"from":"4.15.3","to":"4.15.19"},{"from":"4.15.11","to":"4.15.23"},{"from":"4.15.10","to":"4.15.19"},{"from":"4.15.11","to":"4.15.21"},{"from":"4.15.0","to":"4.15.22"},{"from":"4.15.2","to":"4.15.19"},{"from":"4.15.12","to":"4.15.21"},{"from":"4.15.9","to":"4.15.21"},{"from":"4.15.11","to":"4.15.19"},{"from":"4.15.6","to":"4.15.19"},{"from":"4.15.0","to":"4.15.23"},{"from":"4.15.12","to":"4.15.19"},{"from":"4.15.0","to":"4.15.19"},{"from":"4.15.5","to":"4.15.21"},{"from":"4.15.14","to":"4.15.23"},{"from":"4.15.6","to":"4.15.23"},{"from":"4.15.9","to":"4.15.22"},{"from":"4.15.2","to":"4.15.23"}],"risks":[{"url":"https://issues.redhat.com/browse/HOSTEDCP-1849","name":"HyperShiftKubeAPIPort443","message":"Hosted/HyperShift clusters where HostedCluster spec.networking.apiServer.port is 443 can have trouble with Pods on compute Nodes connecting to the internal Kubernetes API service via the service IP.","matchingRules":[{"type":"PromQL","promql":{"promql":"group by (_id, invoker) (cluster_installer{_id=\"\",invoker=\"hypershift\"})\nor\n0 * group by (_id, invoker) (cluster_installer{_id=\"\"})\n"}}]}]},{"edges":[{"from":"4.14.5","to":"4.14.17"},{"from":"4.14.11","to":"4.14.19"},{"from":"4.14.0","to":"4.14.19"},{"from":"4.14.2","to":"4.14.19"},{"from":"4.14.6","to":"4.14.17"},{"from":"4.14.12","to":"4.14.17"},{"from":"4.14.12","to":"4.14.19"},{"from":"4.14.10","to":"4.14.21"},{"from":"4.14.6","to":"4.14.20"},{"from":"4.14.9","to":"4.14.19"},{"from":"4.14.4","to":"4.14.16"},{"from":"4.14.13","to":"4.14.21"},{"from":"4.14.7","to":"4.14.21"},{"from":"4.14.2","to":"4.14.17"},{"from":"4.14.7","to":"4.14.16"},{"from":"4.14.2","to":"4.14.20"},{"from":"4.14.9","to":"4.14.17"},{"from":"4.14.3","to":"4.14.16"},{"from":"4.14.9","to":"4.14.22"},{"from":"4.14.8","to":"4.14.22"},{"from":"4.14.4","to":"4.14.18"},{"from":"4.14.8","to":"4.14.21"},{"from":"4.14.7","to":"4.14.19"},{"from":"4.14.12","to":"4.14.15"},{"from":"4.14.8","to":"4.14.17"},{"from":"4.14.5","to":"4.14.18"},{"from":"4.14.10","to":"4.14.22"},{"from":"4.14.0","to":"4.14.16"},{"from":"4.14.1","to":"4.14.18"},{"from":"4.14.13","to":"4.14.19"},{"from":"4.14.0","to":"4.14.17"},{"from":"4.14.9","to":"4.14.18"},{"from":"4.14.3","to":"4.14.19"},{"from":"4.14.11","to":"4.14.18"},{"from":"4.14.6","to":"4.14.19"},{"from":"4.14.4","to":"4.14.21"},{"from":"4.14.3","to":"4.14.22"},{"from":"4.14.1","to":"4.14.16"},{"from":"4.14.4","to":"4.14.17"},{"from":"4.14.10","to":"4.14.18"},{"from":"4.14.9","to":"4.14.21"},{"from":"4.14.4","to":"4.14.22"},{"from":"4.14.2","to":"4.14.16"},{"from":"4.14.12","to":"4.14.21"},{"from":"4.14.12","to":"4.14.20"},{"from":"4.14.10","to":"4.14.17"},{"from":"4.14.1","to":"4.14.17"},{"from":"4.14.7","to":"4.14.20"},{"from":"4.14.5","to":"4.14.16"},{"from":"4.14.2","to":"4.14.21"},{"from":"4.14.10","to":"4.14.20"},{"from":"4.14.1","to":"4.14.22"},{"from":"4.14.8","to":"4.14.19"},{"from":"4.14.4","to":"4.14.19"},{"from":"4.14.6","to":"4.14.16"},{"from":"4.14.3","to":"4.14.17"},{"from":"4.14.13","to":"4.14.22"},{"from":"4.14.11","to":"4.14.20"},{"from":"4.14.1","to":"4.14.20"},{"from":"4.14.6","to":"4.14.18"},{"from":"4.14.3","to":"4.14.18"},{"from":"4.14.6","to":"4.14.21"},{"from":"4.14.9","to":"4.14.16"},{"from":"4.14.2","to":"4.14.18"},{"from":"4.14.11","to":"4.14.17"},{"from":"4.14.0","to":"4.14.20"},{"from":"4.14.12","to":"4.14.16"},{"from":"4.14.10","to":"4.14.19"},{"from":"4.14.5","to":"4.14.19"},{"from":"4.14.5","to":"4.14.21"},{"from":"4.14.0","to":"4.14.22"},{"from":"4.14.5","to":"4.14.20"},{"from":"4.14.11","to":"4.14.21"},{"from":"4.14.8","to":"4.14.20"},{"from":"4.14.2","to":"4.14.22"},{"from":"4.14.5","to":"4.14.22"},{"from":"4.14.6","to":"4.14.22"},{"from":"4.14.13","to":"4.14.16"},{"from":"4.14.12","to":"4.14.18"},{"from":"4.14.7","to":"4.14.17"},{"from":"4.14.0","to":"4.14.18"},{"from":"4.14.8","to":"4.14.16"},{"from":"4.14.12","to":"4.14.22"},{"from":"4.14.1","to":"4.14.21"},{"from":"4.14.9","to":"4.14.20"},{"from":"4.14.13","to":"4.14.18"},{"from":"4.14.7","to":"4.14.18"},{"from":"4.14.4","to":"4.14.20"},{"from":"4.14.10","to":"4.14.16"},{"from":"4.14.0","to":"4.14.21"},{"from":"4.14.7","to":"4.14.22"},{"from":"4.14.13","to":"4.14.20"},{"from":"4.14.13","to":"4.14.15"},{"from":"4.14.3","to":"4.14.21"},{"from":"4.14.8","to":"4.14.18"},{"from":"4.14.13","to":"4.14.17"},{"from":"4.14.11","to":"4.14.16"},{"from":"4.14.1","to":"4.14.19"},{"from":"4.14.3","to":"4.14.20"},{"from":"4.14.11","to":"4.14.22"}],"risks":[{"url":"https://issues.redhat.com/browse/IR-468","name":"AzureRegistryImageMigrationUserProvisioned","message":"In Azure clusters with the user-provisioned registry storage, the in-cluster image registry component may struggle to complete the cluster update.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  group by (type) (cluster_infrastructure_provider{_id=\"\",type=\"Azure\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider{_id=\"\"})\n)\n* on () group_left (secret)\ntopk(1,\n  group by (secret) (kube_secret_info{_id=\"\",namespace=\"openshift-image-registry\",secret=\"image-registry-private-configuration-user\"})\n  or\n  0 * group by (secret) (kube_secret_info{_id=\"\",namespace=\"openshift-image-registry\"})\n)\n"}}]},{"url":"https://issues.redhat.com/browse/COS-2781","name":"CephCapDropPanic","message":"Nodes in clusters running workloads that mount Ceph volumes may experience kernel panics due to a CephFS client bug.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  label_replace(group(ceph_health_status{_id=\"\"}), \"ceph\", \"yes\", \"\", \"\")\n  or\n  label_replace(0 * group(cluster_version{_id=\"\"}), \"ceph\", \"no\", \"\", \"\")\n)\n"}}]}]},{"edges":[{"from":"4.14.14","to":"4.14.18"},{"from":"4.14.14","to":"4.14.17"},{"from":"4.14.14","to":"4.14.16"},{"from":"4.14.14","to":"4.14.19"},{"from":"4.14.14","to":"4.14.15"},{"from":"4.14.14","to":"4.14.20"},{"from":"4.14.14","to":"4.14.21"},{"from":"4.14.14","to":"4.14.22"}],"risks":[{"url":"https://issues.redhat.com/browse/IR-468","name":"AzureRegistryImageMigrationUserProvisioned","message":"In Azure clusters with the user-provisioned registry storage, the in-cluster image registry component may struggle to complete the cluster update.","matchingRules":[{"type":"PromQL","promql":{"promql":"topk(1,\n  group by (type) (cluster_infrastructure_provider{_id=\"\",type=\"Azure\"})\n  or\n  0 * group by (type) (cluster_infrastructure_provider{_id=\"\"})\n)\n* on () group_left (secret)\ntopk(1,\n  group by (secret) (kube_secret_info{_id=\"\",namespace=\"openshift-image-registry\",secret=\"image-registry-private-configuration-user\"})\n  or\n  0 * group by (secret) (kube_secret_info{_id=\"\",namespace=\"openshift-image-registry\"})\n)\n"}}]}]}]}
EOF
go run test/e2e/graph/main.go &

cd /home/ec2-user
mkdir entreprise-content
mkdir disk-enc1

mkdir .config
mkdir .config/containers
cat > .config/containers/registries.conf << EOF
[[registry]]
  location="quay.io/openshift-release-dev"
[[registry.mirror]]  
  location="ip-10-0-1-183.eu-west-3.compute.internal:5000/openshift-release-dev"
[[registry]]
  location="quay.io/openshift-release-dev"
[[registry.mirror]]  
  location="ip-10-0-1-183.eu-west-3.compute.internal:5000/openshift-release-dev"
[[registry]]
  location="registry.redhat.io/3scale-amp2"
[[registry.mirror]]  
  location="ip-10-0-1-183.eu-west-3.compute.internal:5000/3scale-amp2"
[[registry]]
  location="registry.redhat.io/openshift4"
[[registry.mirror]]  
  location="ip-10-0-1-183.eu-west-3.compute.internal:5000/openshift4"
[[registry]]
  location="registry.redhat.io/rhel8"
[[registry.mirror]]  
  location="ip-10-0-1-183.eu-west-3.compute.internal:5000/rhel8"
[[registry]]
  location="registry.redhat.io/rhscl"
[[registry.mirror]]  
  location="ip-10-0-1-183.eu-west-3.compute.internal:5000/rhscl"
[[registry]]
  location="registry.redhat.io/openshift-service-mesh"
[[registry.mirror]]  
  location="ip-10-0-1-183.eu-west-3.compute.internal:5000/openshift-service-mesh"
[[registry]]  
  location="registry.redhat.io/ubi8"
[[registry.mirror]]  
  location="ip-10-0-1-183.eu-west-3.compute.internal:5000/ubi8"
[[registry]]  
  location="registry.redhat.io/redhat"
[[registry.mirror]]  
  location="ip-10-0-1-183.eu-west-3.compute.internal:5000/redhat"
EOF
chown ec2-user:ec2-user .config/containers/registries.conf