# 4.19.0-okd-scos.14

Created: 2025-08-10 04:01:40 +0000 UTC

Image Digest: `sha256:897c26c2c5762b29b9b34f396e771003085c4c2077eb68965157c9562f469fcb`

Promoted from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-08-09-215749


## Changes from 4.19.0-okd-scos.10

### Components

* Kubectl 1.32.1
* Kubernetes upgraded from 1.32.6 to 1.32.7
* Kubernetes Tests 1.32.6
* CentOS Stream CoreOS upgraded from 9.0.20250713-0 to 9.0.20250731-1


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/f2d7fdb22c82e9561f607d93ce80c22a43ea39cd)

* [OCPBUGS-60107](https://issues.redhat.com/browse/OCPBUGS-60107): Add ISOBuilder Release notes [#137](https://github.com/openshift/agent-installer-utils/pull/137)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/aa7e2a3f2d848944348db327af66da4d1c9c4ee5...f2d7fdb22c82e9561f607d93ce80c22a43ea39cd)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/e5d84763b378fff025540cb9a459dcf1bdfd903d)

* [OCPBUGS-59893](https://issues.redhat.com/browse/OCPBUGS-59893): Remove stale conditions [#411](https://github.com/openshift/csi-operator/pull/411)
* [Full changelog](https://github.com/openshift/csi-operator/compare/b61e357915000a5f6dc50aad2cabeb1ac55e2e3c...e5d84763b378fff025540cb9a459dcf1bdfd903d)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/b8e06f4f46570e6a14b0dcd37f27b46a2a02555b)

* [OCPBUGS-59638](https://issues.redhat.com/browse/OCPBUGS-59638): fix checkpoint gc of unknown recommenders [#366](https://github.com/openshift/kubernetes-autoscaler/pull/366)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/f746d442e69be1cf82cef1c473ddc0ab8a15d22f...b8e06f4f46570e6a14b0dcd37f27b46a2a02555b)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/5a484a0f3d97801bd3f1cc2db69e477fa9d13a9a)

* [OCPBUGS-59847](https://issues.redhat.com/browse/OCPBUGS-59847): Adds service for cloud-controller-manager [#402](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/402)
* [OCPBUGS-59847](https://issues.redhat.com/browse/OCPBUGS-59847): Update service selector to match deployment label [#401](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/401)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/7ddcbe3dd3a7b836ec0c882032944dcded78f866...5a484a0f3d97801bd3f1cc2db69e477fa9d13a9a)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/1d890f9a4e6f0090040b5c31527397f1d34d1b96)

* [OCPBUGS-59285](https://issues.redhat.com/browse/OCPBUGS-59285): fix ordering on bootstrap IP selection [#1446](https://github.com/openshift/cluster-etcd-operator/pull/1446)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/e900463926dbace76b2f80fbcaf162911e3eb7c0...1d890f9a4e6f0090040b5c31527397f1d34d1b96)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/beb84efd63f1600ac6c475decc979c63dbdaeb12)

* NO-JIRA: [release-4.19] docs - correct Istio version format in ossm-overrides.md [#1255](https://github.com/openshift/cluster-ingress-operator/pull/1255)
* [OCPBUGS-60204](https://issues.redhat.com/browse/OCPBUGS-60204): Update GatewayAPI test to check if deployment has 1 or more pod [#1260](https://github.com/openshift/cluster-ingress-operator/pull/1260)
* [NE-2109](https://issues.redhat.com/browse/NE-2109): Add OSSM channel and version override annotations [#1252](https://github.com/openshift/cluster-ingress-operator/pull/1252)
* [NE-2105](https://issues.redhat.com/browse/NE-2105): desiredIstio: Enable GIE if InferencePool found [#1251](https://github.com/openshift/cluster-ingress-operator/pull/1251)
* [NE-2103](https://issues.redhat.com/browse/NE-2103): Bump to OSSM 3.0.1 and Istio 1.24.4 [#1244](https://github.com/openshift/cluster-ingress-operator/pull/1244)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/137807b212e6c24b59073a43fb10ccf6fed2a250...beb84efd63f1600ac6c475decc979c63dbdaeb12)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/e2ad6c193a3a0ee71a2bd128d5a4692ad8a6776a)

* [OCPBUGS-59957](https://issues.redhat.com/browse/OCPBUGS-59957): Add missing service ports to apiserver service [#1880](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1880)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/cd86a6772107b5213da2e649530b1a64eb6c2781...e2ad6c193a3a0ee71a2bd128d5a4692ad8a6776a)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/3dfbb67635ce056fd55c360937be9868a3cf8ad5)

* [OCPBUGS-60132](https://issues.redhat.com/browse/OCPBUGS-60132): Missing endpoint slices for open ports the operator uses [#853](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/853)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/cec410b7f877a6eef57968889a644b848bdb540a...3dfbb67635ce056fd55c360937be9868a3cf8ad5)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/b9fd02fe0dfee74ae25f93ed67deda8bf4529419)

* [OCPBUGS-59932](https://issues.redhat.com/browse/OCPBUGS-59932): operator: increase wait time till degraded to max 4 times 5m [#2629](https://github.com/openshift/cluster-monitoring-operator/pull/2629)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e4ecf3131005f74d21d9b2dd2003ceab8678a17f...b9fd02fe0dfee74ae25f93ed67deda8bf4529419)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/f17bb7a589e7a9516c35aa0a3bd1bbc55f071ebd)

* [OCPBUGS-60095](https://issues.redhat.com/browse/OCPBUGS-60095): Add release version annotation to whereabouts-controller/whereabouts-token-watcher [#2762](https://github.com/openshift/cluster-network-operator/pull/2762)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/fd80a4aa660c66c93ba01749e23af2c9ea45d5b2...f17bb7a589e7a9516c35aa0a3bd1bbc55f071ebd)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/f165654c6db20683b2f609561450917efe3066ff)

* [OCPBUGS-60168](https://issues.redhat.com/browse/OCPBUGS-60168): CVO protects /metrics with authorization [#1222](https://github.com/openshift/cluster-version-operator/pull/1222)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/06f6aa6e22eadcc38d57f5786c50ceef38bb4d5e...f165654c6db20683b2f609561450917efe3066ff)


### [console](https://github.com/openshift/console/tree/8e996e840bcb9ec7bc2820c73e0703d88e443121)

* [OCPBUGS-60039](https://issues.redhat.com/browse/OCPBUGS-60039): Fix i18n string for event stream [#15355](https://github.com/openshift/console/pull/15355)
* [OCPBUGS-56651](https://issues.redhat.com/browse/OCPBUGS-56651): Recognize Detached BMH status [#15083](https://github.com/openshift/console/pull/15083)
* [OCPBUGS-58214](https://issues.redhat.com/browse/OCPBUGS-58214): Incorrect i18n translations in 4.19 batch [#15218](https://github.com/openshift/console/pull/15218)
* [OCPBUGS-59790](https://issues.redhat.com/browse/OCPBUGS-59790): Move alertmanager settings route [#15331](https://github.com/openshift/console/pull/15331)
* [OCPBUGS-59639](https://issues.redhat.com/browse/OCPBUGS-59639): Fixing no resources found message can not be shown completely [#15320](https://github.com/openshift/console/pull/15320)
* [Full changelog](https://github.com/openshift/console/compare/074215f70f97e2d16efd957897efe87e88067ada...8e996e840bcb9ec7bc2820c73e0703d88e443121)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/4fd69cf5c0b71fb477271c69d6ddd4b276b18092)

* [OCPBUGS-59386](https://issues.redhat.com/browse/OCPBUGS-59386): Add max-concurrent-reconciles flag to machine actuator [#125](https://github.com/openshift/machine-api-provider-gcp/pull/125)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/9c99902f29b77e842400ad37925fcb67820d3675...4fd69cf5c0b71fb477271c69d6ddd4b276b18092)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/063b256caae5fbe3b6f2a5b1c35339220c7b4188)

* [OCPBUGS-59749](https://issues.redhat.com/browse/OCPBUGS-59749): 4.19: UPSTREAM: 2116: Remove check on snapshot create support for multi-writer HyperDisk-HA and let such validations occur at the PD control plane layer [#80](https://github.com/openshift/gcp-pd-csi-driver/pull/80)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/3aeac35b36ea59188761c2980451217b2099e5da...063b256caae5fbe3b6f2a5b1c35339220c7b4188)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/138db5223eea57e4408598a32320896c216724e1)

* [OCPBUGS-59534](https://issues.redhat.com/browse/OCPBUGS-59534): Rebase v1.32.7 to 4.19 [#2367](https://github.com/openshift/kubernetes/pull/2367)
* [Full changelog](https://github.com/openshift/kubernetes/compare/38c60a516ecb061270b0f0f05239b8fe2ce4bf0e...138db5223eea57e4408598a32320896c216724e1)


### [hypershift](https://github.com/openshift/hypershift/tree/7ed7c357e69292e169686f009a516c4bad55a0ff)

* [CNTRLPLANE-1034](https://issues.redhat.com/browse/CNTRLPLANE-1034): chore: Relax the kas healthcheck for aro when AllowedCIDRBlocks [#6617](https://github.com/openshift/hypershift/pull/6617)
* [OCPBUGS-60100](https://issues.redhat.com/browse/OCPBUGS-60100): feat: let ARO honour cp namespace annotation for default SC uids in 4.19 [#6592](https://github.com/openshift/hypershift/pull/6592)
* [CNTRLPLANE-1226](https://issues.redhat.com/browse/CNTRLPLANE-1226): feat(konflux): Make CPO builds hermetic [#6596](https://github.com/openshift/hypershift/pull/6596)
* [CNTRLPLANE-1213](https://issues.redhat.com/browse/CNTRLPLANE-1213): New API to support specifying cluster-autoscaler flags [#6558](https://github.com/openshift/hypershift/pull/6558)
* [OCPBUGS-57331](https://issues.redhat.com/browse/OCPBUGS-57331): Set default security context on everything [#6257](https://github.com/openshift/hypershift/pull/6257)
* [Full changelog](https://github.com/openshift/hypershift/compare/d07876716b39884079968c6576aa4d5c32bf2ed3...7ed7c357e69292e169686f009a516c4bad55a0ff)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/940ac1c27e5548f738219b8c2ea4d1b6924e60e5)

* [OCPBUGS-52542](https://issues.redhat.com/browse/OCPBUGS-52542): CVE-2025-22869 Update golang.org/x/crypto to patched OpenShift fork [#118](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/118)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/877ef8cd546facbc2416c194128557a25b95d141...940ac1c27e5548f738219b8c2ea4d1b6924e60e5)


### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/fdef30c84b3d45ede364500984221c3f492b1415)

* NO-JIRA: Add DOWNSTREAM_OWNERS (release 4-19). [#223](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/223)
* [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/4ab93e07bb7c525990ef21a11caae2122ace63f6...fdef30c84b3d45ede364500984221c3f492b1415)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/7cf7a446c086a97cb15766cb100b468573192b8e)

* [OCPBUGS-59386](https://issues.redhat.com/browse/OCPBUGS-59386): Enabled 10 concurrent reconciles on GCP [#1391](https://github.com/openshift/machine-api-operator/pull/1391)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/5eb6a3610eed1f873926eaf4db17669cdb308a1c...7cf7a446c086a97cb15766cb100b468573192b8e)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1b3ce4ea5b1943283ed703f55800a8f08d26e4a8)

* [OCPBUGS-60080](https://issues.redhat.com/browse/OCPBUGS-60080): use channel to signal controller shutdown [#5217](https://github.com/openshift/machine-config-operator/pull/5217)
* [OCPBUGS-59928](https://issues.redhat.com/browse/OCPBUGS-59928), [OPNET-681](https://issues.redhat.com/browse/OPNET-681): Support migration to NMState [#5208](https://github.com/openshift/machine-config-operator/pull/5208)
* [OCPBUGS-59899](https://issues.redhat.com/browse/OCPBUGS-59899): Add workaround fix for static pod race [#5204](https://github.com/openshift/machine-config-operator/pull/5204)
* [OCPBUGS-59978](https://issues.redhat.com/browse/OCPBUGS-59978): ARO cert rotate fix [#5210](https://github.com/openshift/machine-config-operator/pull/5210)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/dbaf702e511f029805e9aa3ec3245008dda45a02...1b3ce4ea5b1943283ed703f55800a8f08d26e4a8)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/91b1cbb53007ae7ccd8f81d58f4485e34c28cb2d)

* NO-JIRA: improve consistency in tab string [#496](https://github.com/openshift/monitoring-plugin/pull/496)
* : NO-JIRA: update the i18n [#495](https://github.com/openshift/monitoring-plugin/pull/495)
* [OCPBUGS-60129](https://issues.redhat.com/browse/OCPBUGS-60129): feat: add alerting rules tab to dev console [#488](https://github.com/openshift/monitoring-plugin/pull/488)
* [OU-943](https://issues.redhat.com/browse/OU-943): remove broken useEffect [#484](https://github.com/openshift/monitoring-plugin/pull/484)
* [OU-943](https://issues.redhat.com/browse/OU-943): Manual Cherry Pick [#474](https://github.com/openshift/monitoring-plugin/pull/474)
* [OU-594](https://issues.redhat.com/browse/OU-594): Manual cherry pick incidents tab 4 19 [#479](https://github.com/openshift/monitoring-plugin/pull/479)
* [OU-863](https://issues.redhat.com/browse/OU-863): [release-4.19] Manual cherry pick add disconnect option [#482](https://github.com/openshift/monitoring-plugin/pull/482)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/ffa76b4a474f6590a7e86fb6b863b34e1d0613e8...91b1cbb53007ae7ccd8f81d58f4485e34c28cb2d)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/0e1112cea12c707a93bd01d408c598dd070c8676)

* [OCPBUGS-59640](https://issues.redhat.com/browse/OCPBUGS-59640): Prevent accidental IP deallocation in statefulsets [#375](https://github.com/openshift/whereabouts-cni/pull/375)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/45624b6383012d7b69409635daa8e4d455da6e16...0e1112cea12c707a93bd01d408c598dd070c8676)


### [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon/tree/89e4882698653fdd80fcee2e9d92e668cb02d2d1)

* [OCPBUGS-58851](https://issues.redhat.com/browse/OCPBUGS-58851): Bump github.com/golang/glog to v1.2.4 (#110) [#110](https://github.com/openshift/network-metrics-daemon/pull/110)
* [OCPBUGS-60172](https://issues.redhat.com/browse/OCPBUGS-60172): Replace e2e test image (#119) [#119](https://github.com/openshift/network-metrics-daemon/pull/119)
* [Full changelog](https://github.com/openshift/network-metrics-daemon/compare/5ec8c6bde236feab19525c2d84f7d55f430f9e2b...89e4882698653fdd80fcee2e9d92e668cb02d2d1)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e91ec32c8c0195393280c734ba46de5a31637479)

* [OCPBUGS-57362](https://issues.redhat.com/browse/OCPBUGS-57362): v2/mirror: retry in case of ContextDeadlineExceeded (#1199) [#1199](https://github.com/openshift/oc-mirror/pull/1199)
* [OCPBUGS-54622](https://issues.redhat.com/browse/OCPBUGS-54622): cli/delete: fix workflow mode name output (#1222) [#1222](https://github.com/openshift/oc-mirror/pull/1222)
* [OCPBUGS-59799](https://issues.redhat.com/browse/OCPBUGS-59799): Detect images from a Helm Chart with an aliased chart dependency (#1225) [#1225](https://github.com/openshift/oc-mirror/pull/1225)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/50a460f595060b53dd44474098e883b336147335...e91ec32c8c0195393280c734ba46de5a31637479)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e24389403dd961a14b6512e40cda7e3e5d0a4b20)

* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709): DownStream Merge Sync from 4.20 [07-28-2025] [#2688](https://github.com/openshift/ovn-kubernetes/pull/2688)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/a71aaf8dcf01858874c05c677d8a52b6b715ac57...e24389403dd961a14b6512e40cda7e3e5d0a4b20)


### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/e97898c8af9cad8e5375e4860a7d79c39a1c79fa)

* Merge [#1853](https://github.com/openshift/os/pull/1853)
* Merge [#1851](https://github.com/openshift/os/pull/1851)
* [Full changelog](https://github.com/openshift/os/compare/334ed7c68677a737579fe0f4f9eaa74ca67ea817...e97898c8af9cad8e5375e4860a7d79c39a1c79fa)


### [tests](https://github.com/openshift/origin/tree/1a15c85aaa9f0b6c1e7ed2f9776a6c1d98b5cb1f)

* [OCPBUGS-60092](https://issues.redhat.com/browse/OCPBUGS-60092): feat(azure): skip metrics collection for ARO HCP hypershift [#30051](https://github.com/openshift/origin/pull/30051)
* [Full changelog](https://github.com/openshift/origin/compare/bb0d44936a0b231205adfae9a6de4885f6a86209...1a15c85aaa9f0b6c1e7ed2f9776a6c1d98b5cb1f)