v4.18.0

What's Changed

• Make roksEnabled default to true in Helm by @Jeremy-Cheng-stack in #2749
• certificate rotation enhancement by @qpdpQ in #2754
• single stage operandconfig creation by @qpdpQ in #2755
• Edb license job removed from odlm.go by @Jeremy-Cheng-stack in #2760
• Fix resource loss during CS merge and improve OperandConfig creation by @Daniel-Fan in #2762
• Remove redundant RBAC verbs for common service operator by @YCShen1010 in #2764
• add ephemeral-storage to resource compare by @qpdpQ in #2765
• Add ibm-events-operator-v6.1 to operandRegistry by @qpdpQ in #2768
• Update PostgreSQL operand images to 1.25.6 by @YCShen1010 in #2766
• fix CS CR propagation issue by @qpdpQ in #2769
• Remove resource filter by @qpdpQ in #2771
• Fix RBAC for DaemonSet cache/watch access by @YCShen1010 in #2772
• Migrate from cnpg-ibm to ibm-pg-operator by @Daniel-Fan in #2773
• Custom entitlement key by @qpdpQ in #2770
• Add CPFS image environment variables by @Daniel-Fan in #2775
• Security issues for 4.18 by @bluzarraga in #2779
• update grpc to latest by @bluzarraga in #2780
• Update ibm-pg-operator to ibm-pg-operator-v1.28 in OperandRegistry with channel correction by @Daniel-Fan in #2781
• Harden bedrock migration Job for Kyverno by @YCShen1010 in #2782
• Update migration job version to 0.0.2 by @YCShen1010 in #2783
• Fix OADP plugin image name from cpfs-oadp-plugin to cpfs-oadp-plugins by @Daniel-Fan in #2784

Full Changelog: v4.17.0...v4.18

v4.6.21

What's Changed

• Version bump cs-operator to 4.6.21 by @Jeremy-Cheng-stack in #2742
• resource size comparsion enhancement by @qpdpQ in #2748
• Refresh the Postgres operand image digest for new 5.31.0+20260129.161021.2713 (EDB1.25.5) by @YCShen1010 in #2753
• uplift go to latest by @bluzarraga in #2758

Full Changelog: v4.6.20...v4.6.21

v4.17.0

What's Changed

• bump cs version to 4.17 by @qpdpQ in #2707
• reduce api call by @qpdpQ in #2706
• bump up default im operator version for cs 4.17 by @qpdpQ in #2708
• Update channel versions for ibm-idp-config-ui to 4.13 and ibm-platformui to 6.4 by @YCShen1010 in #2715
• Minimize webhook RBAC by gating legacy cleanup with SSAR by @YCShen1010 in #2711
• Remove clusterrole RBAC by gating legacy cleanup with SSAR by @YCShen1010 in #2717
• Remove cluster perm for secret by @YCShen1010 in #2714
• Refresh the Postgres operand image digest for CASE 5.31.0+20260115.145414.2694 by @YCShen1010 in #2720
• Remove clusterrole RBAC by gating ConfigMap operation with SSAR by @YCShen1010 in #2723
• Remove CheckSaas function and default SaasEnable to false by @YCShen1010 in #2724
• Remove ipv4 dependency by @Jamstah in #2718
• Enabld private key refresh for cs-ca-cert by @qpdpQ in #2726
• Remove Infrastructure cluster permission and improve OCP detection by @YCShen1010 in #2713
• Configure OCP Authentication Support by @Jeremy-Cheng-stack in #2722
• Remove StorageClass cluster permissions and add SSAR guards by @YCShen1010 in #2712
• add ephemeral volume size limit for keycloak and im by @bluzarraga in #2731
• add aggregate-to-admin label by @qpdpQ in #2732
• Change to type boolean by @Jeremy-Cheng-stack in #2734
• Dynamic value for roksEnabled by @Jeremy-Cheng-stack in #2736
• add default imagePullSecret value by @qpdpQ in #2733
• Remove docker hard-coding by @Jeremy-Cheng-stack in #2738
• update ephemeral-storage size by @qpdpQ in #2740
• Adjust ephemeral size for IM by @ujjwalchk-it in #2743
• Update go version to 1.25.6 by @Jeremy-Cheng-stack in #2747
• resource size comparsion enhancement by @qpdpQ in #2750
• bump cs version to 4.18 and update im opcon version by @Jeremy-Cheng-stack in #2751

Full Changelog: v4.16.0...v4.17.0

v4.6.20

What's Changed

• bump cs-operator to 4.6.20 by @qpdpQ in #2678
• Migrate CS Image Builds to SPS for release-sc2 branch by @YCShen1010 in #2677
• Enable detect secrets for release-sc2 by @YCShen1010 in #2679
• [SC2] Add the audit logging for the login and logout of users in keycloak by @YCShen1010 in #2704
• Enabld private key refresh for cs-ca-certificate by @qpdpQ in #2727
• Remove ipv4 dependency (#2718) by @YCShen1010 in #2729
• Update Go builder image to version 1.25.5 by @YCShen1010 in #2730

Full Changelog: v4.6.19...v4.6.20

v4.16.0

What's Changed

• add pre-upgrade annotation to migration chart by @qpdpQ in #2653
• Bump CS version to 4.16.0 by @YCShen1010 in #2655
• Reduce cluster-level RBAC scope by @YCShen1010 in #2641
• ODLM channel check enhancement by @qpdpQ in #2633
• Add RBAC permissions for cs operator by @YCShen1010 in #2657
• Consolidate all OperandRegistry related updates into one create/update action by @YCShen1010 in #2659
• bump up default zen channel to v6.3 by @qpdpQ in #2660
• Update common UI channel to 4.12 for 4.16 release by @YCShen1010 in #2661
• Refresh the Postgres operand image digest for new 5.30.0+20250919.074222.2643 (EDB1.25.3) by @YCShen1010 in #2664
• add cnpg operator to default operandconfig by @bluzarraga in #2622
• Add and configure files to enable pipeline for master branch by @YCShen1010 in #2656
• Refresh the Postgres operand image digest for new 5.30.0+20251030.101847.2667 (EDB1.25.4) by @YCShen1010 in #2670
• Enable detect secrets in SPS build pipelines by @YCShen1010 in #2669
• Fix image pull rate limitation by @YCShen1010 in #2673
• add cnpg to opreg init by @bluzarraga in #2681
• Bump migration chart version up to 0.0.1 for 4.16 release by @YCShen1010 in #2685
• Add IBM Events Operator 6.0.0 to OperandRegistry by @YCShen1010 in #2692
• add labels to cs-operator clusterrolebinding by @qpdpQ in #2691
• Add Postgres Cluster image update function for Non OLM by @YCShen1010 in #2695
• update golang builder image to version 1.25.2 by @YCShen1010 in #2696
• Update Go base image version to 1.25.3 by @qpdpQ in #2697
• add rotationPolicy: never to maintain the existing behavior by @qpdpQ in #2698
• add the audit logging for the login and logout of users in keycloak by @laurensks in #2699
• Update cpfs-utils image tag to latest in migration job by @YCShen1010 in #2700

New Contributors

• @laurensks made their first contribution in #2699

Full Changelog: v4.15.0...v4.16.0

v4.6.19

What's Changed

• Bump CS version to 4.6.19 by @YCShen1010 in #2620
• [SC2] updated EDB licensing job to use readOnlyRootFilesystem (#2607) by @YCShen1010 in #2644
• Refresh the Postgres operand image digest for CASE 5.22.0+20251001.142254.2660 by @YCShen1010 in #2651
• [SC2] ODLM channel check enhancement by @qpdpQ in #2643

Full Changelog: v4.6.18...v4.6.19

v4.15.0

What's Changed

• Bump CS version up to 4.15.0 by @YCShen1010 in #2606
• updated EDB licensing job to use readOnlyRootFilesystem by @bitscuit in #2607
• CPD-Quality 57014, add default labels to cluster scoped resources by @bluzarraga in #2623
• Refresh the Postgres operand image digest for new 5.22.0+20250912.112649.2639 (EDB1.25.3) by @YCShen1010 in #2627
• Refresh the Postgres operand image digest for new 5.22.0+20250925.061927.2647.tgz (EDB1.25.3) by @YCShen1010 in #2634
• update values labels to be conditional by @bluzarraga in #2636
• Update rbac yaml template due to error when using variables inside of loop by @bluzarraga in #2637

Full Changelog: v4.14.0...v4.15.0

v4.11.1

Hotfix to update security vulnerabilities on previously released 4.11.0

v4.6.18

What's Changed

• Bump up cs-operator to 4.6.18 by @qpdpQ in #2596
• [sc2] remove vcs url by @qpdpQ in #2605
• [SC2] Migrate away from controller-filtered-cache by @qpdpQ in #2610
• update import path and InjectDecoder method by @Daniel-Fan in #2612

Full Changelog: v4.6.17...v4.6.18

v4.14.0

What's Changed

• Bump CS version up to 4.14.0 by @YCShen1010 in #2551
• Bump up IM and CommonUI version for 4.14 by @YCShen1010 in #2552
• remove unused database by @qpdpQ in #2518
• Update User Management bindable resources by @YCShen1010 in #2555
• [CD] Enable user-defined catalog source and namespace in CS CR (#2543) by @YCShen1010 in #2556
• enhance Postgres Cluster image update function by @Daniel-Fan in #2549
• Update EDB operand image and License image reference in ConfigMap for Postgres operator version 1.25.2 by @YCShen1010 in #2580
• migrate away from cache filter for CS operator by @qpdpQ in #2578
• fix nil pointer issue in webhook and cache issue in all ns mode by @qpdpQ in #2583
• update oauth2 pkg for sec vuln by @bluzarraga in #2586
• Refresh the Postgres operand image digest for new CASE 5.16.0+20250722.134758.2626 by @Daniel-Fan in #2590
• use Reader to get EDB configmap by @qpdpQ in #2593
• [CD] remove vcs_url by @qpdpQ in #2603

Full Changelog: v4.13.0...v4.14.0