OCPBUGS-114639: OCPBUGS-112550, OCPBUGS-112549: Release 4.22 GCD and KMS support - #10783

Merged

openshift-merge-bot[bot] merged 28 commits into

openshift:release-4.22from

barbacbd:release-4.22-gcd-kms-support

Sep 2, 2026

Commits on Aug 31, 2026

GCP Clients: support alternate universe domains

patrickdillon
authored and
barbacbd
committed
b7dc82f
clusterapi: set GCP universe domain

patrickdillon
authored and
barbacbd
committed
8faa820
gcp: Support domain-scoped project ID service account email format

barbacbd
and
claude
committed
9f7c543
CORS-4514: Set sovereign cloud defaults for machine types
barbacbd
committed
b45eb2a
CORS-4428: gcp: reject PSC endpoint overrides for sovereign clouds
barbacbd
committed
59f5087
CORS-4425: gcp: add OS image validation for sovereign clouds
barbacbd
committed
9893b65
GCP: Configure cloud provider to use mounted creds

patrickdillon
authored and
barbacbd
committed
237f226
no-jira: Update GCD ability to identify project
barbacbd
committed
149e42e
CORS-4537: Add API-backed disk type availability validation

barbacbd
and
claude
committed
4e33b0a
GCP: update deprecated WithCredentialsJSON func

patrickdillon
authored and
barbacbd
committed
c78f29d
GCP: validate WIF credentials based on google docs

patrickdillon
authored and
barbacbd
committed
8c71ffe
OCPBUGS-105456: fix KMS service agent domain for sovereign clouds
barbacbd
committed
15cf120
fix: Fix validate test for invalid format
barbacbd
committed
9b44055
CORS-4406: Add helper to retrieve default KMS encryption key
barbacbd
committed
72b2743
CORS-4407: Implement KMS key reference validation for storage encryption
barbacbd
committed
40c8faa
CORS-4407: Reject global GCP KMS key locations in validation
barbacbd
committed
31df429
CORS-4408, CORS-4410: Configure customer-managed KMS encryption for GCS storage
barbacbd
committed
2ea2ea7
CORS-4413: gcp: Add unit tests for bootstrap storage
barbacbd
committed
ebd4dd7
gcp: Validate KMS key service agent access during install-config validation
barbacbd
committed
714505d
data/data/cluster-api/gcp-infrastructure-components.yaml:
barbacbd
committed
e45322b
Vendor updates to bring in CAPG 472d34c0640fed2564397f999498c5825f8251ce from release 1.13.
barbacbd
committed
c14b324
Update the CAPG provider to 472d34c0640fed2564397f999498c5825f8251ce from release-1.13
barbacbd
committed
c6ca4f9
Update go.mod and go.sum for CAPG 472d34c0640fed2564397f999498c5825f8251ce. This is from
barbacbd
committed
fbdf59f
pkg/asset/manifests/azure/cluster.go:
barbacbd
committed
62468d4
Vendor Updates
barbacbd
committed
73ebc46
go.mod and go.sum updates for capz updates
barbacbd
committed
2e8020b
Fixed two build breaks in pkg/destroy/azure/azure.go caused by the msgraph SDK v1 migration:
barbacbd
committed
4f09555
pkg/types/gcp: apply defaultMachinePlatform values

patrickdillon
authored and
barbacbd
committed
c9a6fac

Navigation Menu

Uh oh!

OCPBUGS-114639: OCPBUGS-112550, OCPBUGS-112549: Release 4.22 GCD and KMS support - #10783

OCPBUGS-114639: OCPBUGS-112550, OCPBUGS-112549: Release 4.22 GCD and KMS support#10783
openshift-merge-bot[bot] merged 28 commits into
openshift:release-4.22from
barbacbd:release-4.22-gcd-kms-support

Commits on Aug 31, 2026

GCP Clients: support alternate universe domains

clusterapi: set GCP universe domain

gcp: Support domain-scoped project ID service account email format

CORS-4514: Set sovereign cloud defaults for machine types

CORS-4428: gcp: reject PSC endpoint overrides for sovereign clouds

CORS-4425: gcp: add OS image validation for sovereign clouds

GCP: Configure cloud provider to use mounted creds

no-jira: Update GCD ability to identify project

CORS-4537: Add API-backed disk type availability validation

GCP: update deprecated WithCredentialsJSON func

GCP: validate WIF credentials based on google docs

OCPBUGS-105456: fix KMS service agent domain for sovereign clouds

fix: Fix validate test for invalid format

CORS-4406: Add helper to retrieve default KMS encryption key

CORS-4407: Implement KMS key reference validation for storage encryption

CORS-4407: Reject global GCP KMS key locations in validation

CORS-4408, CORS-4410: Configure customer-managed KMS encryption for GCS storage

CORS-4413: gcp: Add unit tests for bootstrap storage

gcp: Validate KMS key service agent access during install-config validation

data/data/cluster-api/gcp-infrastructure-components.yaml:

Vendor updates to bring in CAPG 472d34c0640fed2564397f999498c5825f8251ce from release 1.13.

Update the CAPG provider to 472d34c0640fed2564397f999498c5825f8251ce from release-1.13

Update go.mod and go.sum for CAPG 472d34c0640fed2564397f999498c5825f8251ce. This is from

pkg/asset/manifests/azure/cluster.go:

Vendor Updates

go.mod and go.sum updates for capz updates

Fixed two build breaks in pkg/destroy/azure/azure.go caused by the msgraph SDK v1 migration:

pkg/types/gcp: apply defaultMachinePlatform values