Release v4.15.0

What's Changed

• OCPBUGS-15576: fix: ensure panic safety in PVC controller for non set storageClassName by @jakobmoellerdev in #369
• OCPVE-587: chore: update to k8s 1.27.x APIs and bump to go1.20 by @jakobmoellerdev in #371
• OCPVE-606: fix: reenable falsly disabled integration tests by @jakobmoellerdev in #373
• chore: adding everyone back to reviewers so we get assigned by @jeff-roche in #374
• OCPBUGS-11486: fix: introduce correct SNO leader election for openshift by @jakobmoellerdev in #370
• OCPBUGS-11486: fix: correctly determine master nodes by label for SNO by @jakobmoellerdev in #376
• OCPVE-624: fix: improve logging around device path validation by @jeff-roche in #379
• OCPBUGS-11486: fix: passthrough unified LE settings to all controllers by @jakobmoellerdev in #377
• OCPVE-622: chore: remove deviceMinAge due to imperfect validation by @jakobmoellerdev in #380
• OCPBUGS-13558: fix: ensure LVMVolumeGroupNodeStatus is removed by dedicated cleanup controller in case of multi-node by @jakobmoellerdev in #372
• OCPVE-619: Refactor E2E Tests to be context aware by @jakobmoellerdev in #378
• OCPVE-635: fix: allow multi-node readiness with master nodes with NoSchedule Taints by @jakobmoellerdev in #383
• OCPVE-616: fix: add check of correct lv state of thin-pool when vg is already created by @jakobmoellerdev in #381
• OCPBUGS-17805: Do not error during capacity check if annotation does not exist on the node by @suleymanakbas91 in #385
• OCPBUGS-17848: fix: don't fail if devices already in vg by @jeff-roche in #387
• OCPVE-616: fix: add conditions to error on missing lv in case VG is present but thin-pool is not by @jakobmoellerdev in #386
• OCPVE-361: chore: allow multi-arch with ARCH / OS Flag by @jakobmoellerdev in #392
• OCPVE-588: chore: adjust e2e makefile / remove e2e-test by @jakobmoellerdev in #393
• OCPVE-627: fix: concurrent apply / status checks -> LVMCluster by @jakobmoellerdev in #391
• OCPVE-588: chore: refactor AWS Disk Setup to use correct logs/ctx by @jakobmoellerdev in #394
• OCPVE-620: docs: add guidance on Multi-Node Topology Snapshotting by @jakobmoellerdev in #384
• OCPVE-625: docs: Add RAID limitation and workaround (for LVM Software Raid) by @jakobmoellerdev in #382
• OCPVE-644: chore: remove redundant err logging and use ctx for passing loggers by @jakobmoellerdev in #398
• OCPVE-667: fix: allow no default deviceClass to be set by @jakobmoellerdev in #396
• OCPVE-664: chore: refactor SCC creation and deletion in LVM Operator by @jakobmoellerdev in #399
• OCPVE-339: test: validate snapshot content by @jakobmoellerdev in #401
• OCPVE-670: fix ownerref alignment and deletion logic on removal by @jakobmoellerdev in #402
• OCPVE-663: feat: introduce k8s events to lvmcluster and vgmanager by @jakobmoellerdev in #403
• OCPBUGS-18354: owns watches config updates by @jakobmoellerdev in #405
• OCPBUGS-18397: fix: allow vg to be gone during deletion and pick up empty pvs by @jakobmoellerdev in #404
• OCPVE-677: test: reduce footprint of requested pvc to 1G from 5G by @jakobmoellerdev in #407
• OCPBUGS-18354: chore: remove unnecessary labels from vg manager DaemonSet by @jakobmoellerdev in #412
• OCPVE-677: fix: allow deletion of lvmvolumegroup if lvmd conf was already deleted by @jakobmoellerdev in #409
• OCPVE-677: chore: separate filter and lvm package from vgmanager by @jakobmoellerdev in #410
• OCPVE-677: chore: change finalizer logic in vgmanager to per-node finalizer by @jakobmoellerdev in #408
• OCPVE-677: fix: allow deleting all storageclasses / vgs in case one is already gone by @jakobmoellerdev in #414
• OCPVE-677: chore: separate lvmd package from vgmanager by @jakobmoellerdev in #411
• OCPVE-677: chore: separate device filtering from vgmanager in lsblk package by @jakobmoellerdev in #415
• OCPVE-677: chore: refactor vgmanager into different interfaces and introduce tests by @jakobmoellerdev in #406
• OCPVE-265: chore: add pre-commit config by @jakobmoellerdev in #419
• OCPVE-698: bump k8s dependencies to 1.28.1 by @jakobmoellerdev in #416
• OCPVE-677: fix: vgmanager unit tests failure on Darwin due to symlinked Temp Dir by @jakobmoellerdev in #420
• OCPVE-265: chore: codespell exclusion for go.sum by @jakobmoellerdev in #421
• OCPBUGS-18354: fix: remove volumesnapshotclass from default resource deletion list by @jakobmoellerdev in #422
• OCPVE-352: Remove unused metrics-exporter by @suleymanakbas91 in #425
• OCPVE-698: bump k8s dependencies to 1.28.2 by @jakobmoellerdev in #427
• OCPVE-669: chore: refactor e2e tests by @jakobmoellerdev in #424
• OCPBUGS-18708: fix: disallow creation of LVMCluster outside of operator namespace and restrict cache by @jakobmoellerdev in #428
• OCPVE-707: chore: unify build binaries and optimize dockerfile by @jakobmoellerdev in #429
• OCPVE-220: remove unused certificates by @suleymanakbas91 in #413
• OCPVE-665: feat: report filter status into vgstatus by @jakobmoellerdev in #426
• OCPVE-697: test: various webhook test cases by @jakobmoellerdev in #430
• OCPVE-706: Secure metrics endpoints by @suleymanakbas91 in #431
• OCPVE-390: use specific cipher suites for kube-rbac-proxy by @suleymanakbas91 in #433
• OCPVE-600: Implement the ability to wipe the devices by @suleymanakbas91 in #423
• OCPVE-600: fix: wiping should not error on optional paths by @suleymanakbas91 in #435
• OCPVE-346: chore: move all controllers under internal/controllers by @jakobmoellerdev in #434
• OCPBUGS-19990: Do not allow removing device classes after initial deployment by @suleymanakbas91 in #436
• OCPVE-220: fix: bring back mistakenly removed webhook patch by @suleymanakbas91 in #437
• OCPVE-709: feat: allow dlv debugging for lvm operator and vgmanager by @jakobmoellerdev in #438
• OCPVE-346: fix: remove build cache mount by @jakobmoellerdev in #439
• OCPVE-343: feat: allow passthrough for log flags by @jakobmoellerdev in #440
• OCPVE-347: chore: unify controller naming by @jakobmoellerdev in #441
• OCPVE-312: chore: move olm-deploy to config by @jakobmoellerdev in #443
• OCPVE-710: chore: bump OPERATOR_SDK_VERSION to 1.32.0 by @jakobmoellerdev in #442
• OCPVE-728: Add Jakob to the approvers list by @suleymanakbas91 in #444
• OCPVE-603: Add lvms tag to volume groups by @suleymanakbas91 in #447
• OCPVE-726: Activate inactive logical volumes by @suleymanakbas91 in #446
• Update OWNERS by @qJkee in #449
• OCPVE-605: Allow recovering from existing volume groups by @suleymanakbas91 in #448
• OCPVE-722: feat: adding in snyk scanning commands for use in CI by @jeff-roche in #450
• OCPVE-353: chore: operf refactoring by @jakobmoellerdev in #451
• OCPVE-662: docs: v2 api proposal by @jakobmoellerdev in #432
• OCPBUGS-20388: fix: CVE-2023-44487 by @jakobmoellerdev in #452
• OCPBUGS-22109: fix: restrict namespaced cache to relevant CRDs only by @jakobmoellerdev in #453
• OCPBUGS-22109: Sort node names to get consistent event messages by @suleymanakbas91 in #456
• OCPVE-738: feat: migrate to FBC for catalog in makefile by @jakobmoellerdev in #458
• OCPVE-747: test: lvm package test coverage 100% by @jakobmoellerdev in #459
• OCPVE-747: fix: vgmanager thin pool and controller tests and smaller fixes by @jakobmoellerdev in #460
• OCPVE-747: test: various reconcile failure branch tests by @jakobmoellerdev in #461
• OCPVE-747: test: increase cluster functions coverage to 100% by @jakobmoellerdev in #462
• OCPBUGS-22362: fix: added the subscription annotation to the bundle csv by @jeff-roche in #463
• OCPVE-747: test: node removal controller test coverage 100% by @jakobmoellerdev in #468
• OCPVE-747: chore: move tagging to avoid coverage on cmd by @jakobmoellerdev in #469
• OCPVE-747: test: pv / pvc controller tests (PV Controller 100% / PVC Controller >90% coverage) by @jakobmoellerdev in #467
• OCPVE-758: chore: bump deps to k8s 0.28.3 and ecosystem to latest by @jakobmoellerdev in #470
• OCPVE-722: fix: adding dccache to gitignore and adding project name to snyk comm… by @jeff-roche in #471
• OCPVE-766: feat: use embed-lvmd instead of container by @jakobmoellerdev in #474
• OCPVE-768: chore: bind openshift/topolvm in go.mod and update other deps by @jakobmoellerdev in #475
• OCPBUGS-11486: fix: immediately drop leader election in case of shutdown to quicken restart by @jakobmoellerdev in #476
• OCPBUGS-11486: fix: use native leader lock implementation by @jakobmoellerdev in #478
• OCPBUGS-18708: docs: add validation limitation by @jakobmoellerdev in #477
• OCPBUGS-13558: fix: refactor node removal controller by @jakobmoellerdev in #479
• OCPBUGS-19324: fix: CVE-2023-37788 by @jeff-roche in #481
• OCPVE-760: Save lvmd config to a configmap instead of a file by @suleymanakbas91 in #480
• OCPBUGS-23191: Take tolerations into consideration for readiness check by @suleymanakbas91 in #509
• OCPBUGS-23409: fix: reconcile annotations by @suleymanakbas91 in #512
• OCPBUGS-23995: fix: set failed status on device check failure by @jakobmoellerdev in #516
• OCPBUGS-23375: Add priority class name to lvms resources by @suleymanakbas91 in #517
• OCPBUGS-24396: Allow setting overprovision ratio to 1 by @suleymanakbas91 in #518
• OCPEDGE-652: Document unsupported device types by @suleymanakbas91 in #523
• OCPBUGS-23797: Fix CVE-2023-47108 by @suleymanakbas91 in #524
• OCPBUGS-24600: Apply workload annotations to pod specs by @suleymanakbas91 in #525
• [release-4.15] OCPBUGS-27003: Allow using symlinks for wiping a device by @openshift-cherrypick-robot in #536
• [release-4.15] OCPBUGS-27219: Suggest workload partitioning annotation in the namespace by @openshift-cherrypick-robot in #538
• OCPBUGS-27330: fix: avoid topolvm-controller annotation generation increment by @jakobmoellerdev in #542
• [release-4.15] OCPBUGS-27358: fix: add missing permissions to cluster scoped resources by @jakobmoellerdev in #549
• [release-4.15] OCPBUGS-26768: Revert back to file-based lvmd config to support different configs for each node by @suleymanakbas91 in #556
• [release-4.15] OCPBUGS-28966: fix: more sophisticated tagging migration by @jakobmoellerdev in #568
• OCPBUGS-29065: Reconcile topolvm node volumes by @suleymanakbas91 in #570

Full Changelog: v4.14.0...v4.15.0