# 4.19.0-okd-scos.17

Created: 2025-09-02 01:08:36 +0000 UTC

Image Digest: `sha256:2e3cb282ddd10ee85fa36ce08b515c48ca1ae6735d7d17d114f228de06be3c87`

Promoted from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-09-01-095703


## Changes from 4.19.0-okd-scos.16

### Components

* Kubectl 1.32.1
* Kubernetes 1.32.7
* Kubernetes Tests 1.32.6
* CentOS Stream CoreOS upgraded from 9.0.20250819-0 to 9.0.20250827-0


### Rebuilt images without code change

* [stream-coreos](https://github.com/openshift/os) git [e97898c8](https://github.com/openshift/os/commit/e97898c8af9cad8e5375e4860a7d79c39a1c79fa) `sha256:210b83fcbbc41bbfadce649dfd4599b62d025a047017bcdcacc7f436cbd856b0`
* [stream-coreos-extensions](https://github.com/openshift/os) git [e97898c8](https://github.com/openshift/os/commit/e97898c8af9cad8e5375e4860a7d79c39a1c79fa) `sha256:1c76a94fe88c91d79160eff7d8b1527978bcb9d267fe5879d867fe47c6c69ba0`


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/edfddbc100302df013eb3303c41da28f074e8dd4)

* [OCPBUGS-60938](https://issues.redhat.com/browse/OCPBUGS-60938): Update ISOBuilder OCP 4.19 Dev Preview Release notes [#142](https://github.com/openshift/agent-installer-utils/pull/142)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/f2d7fdb22c82e9561f607d93ce80c22a43ea39cd...edfddbc100302df013eb3303c41da28f074e8dd4)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/e6ffce5ffcad6385976f241c9ef57a7fe4be6282)

* [OCPBUGS-60595](https://issues.redhat.com/browse/OCPBUGS-60595): Bump library-go [#420](https://github.com/openshift/csi-operator/pull/420)
* [Full changelog](https://github.com/openshift/csi-operator/compare/e5d84763b378fff025540cb9a459dcf1bdfd903d...e6ffce5ffcad6385976f241c9ef57a7fe4be6282)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/87bc6d06e8abd759e92112b434a180c2ddff41f1)

* [OCPBUGS-60925](https://issues.redhat.com/browse/OCPBUGS-60925): Update the RHCOS 4.19 bootimage metadata [#9915](https://github.com/openshift/installer/pull/9915)
* [OCPBUGS-60652](https://issues.redhat.com/browse/OCPBUGS-60652): PowerVS: config variables not honored [#9901](https://github.com/openshift/installer/pull/9901)
* [OCPBUGS-60666](https://issues.redhat.com/browse/OCPBUGS-60666): Azure: change LB and pubic IP skus to Standard [#9903](https://github.com/openshift/installer/pull/9903)
* [OCPBUGS-59607](https://issues.redhat.com/browse/OCPBUGS-59607): Refine check for supported SNO platforms [#9843](https://github.com/openshift/installer/pull/9843)
* [Full changelog](https://github.com/openshift/installer/compare/d40dbe053afda2205b6e94ece20c335afd57f61c...87bc6d06e8abd759e92112b434a180c2ddff41f1)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/c53c7153b62ff36cc725707297a4bbb7ea4f62e5)

* [OCPBUGS-60900](https://issues.redhat.com/browse/OCPBUGS-60900): revert openshift replica fix [#374](https://github.com/openshift/kubernetes-autoscaler/pull/374)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/b8e06f4f46570e6a14b0dcd37f27b46a2a02555b...c53c7153b62ff36cc725707297a4bbb7ea4f62e5)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/68b46d78d8f181c3707aeb0c738780a89c3c19ae)

* [OCPBUGS-60950](https://issues.redhat.com/browse/OCPBUGS-60950): Default cloud.conf if no configmap is found [#412](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/412)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/5a484a0f3d97801bd3f1cc2db69e477fa9d13a9a...68b46d78d8f181c3707aeb0c738780a89c3c19ae)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/30578a8b3699d1caf73b281cdfb8ad691c0f32ca)

* [OCPBUGS-59802](https://issues.redhat.com/browse/OCPBUGS-59802): add missing informer syncs [#1454](https://github.com/openshift/cluster-etcd-operator/pull/1454)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/1d890f9a4e6f0090040b5c31527397f1d34d1b96...30578a8b3699d1caf73b281cdfb8ad691c0f32ca)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/80c1fc3d81e3392ef7b056c8833185c8bdf6f599)

* [OCPBUGS-60121](https://issues.redhat.com/browse/OCPBUGS-60121): [release-4.19] Set goaway chance to 0.001 [#1887](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1887)
* [OCPBUGS-60677](https://issues.redhat.com/browse/OCPBUGS-60677): certrotation: ensure that all rotated secrets/configmaps have RefreshOnlyWhenExpired set [#1901](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1901)
* [OCPBUGS-60495](https://issues.redhat.com/browse/OCPBUGS-60495): certrotationcontroller: extend node-system-admin-signer lifetime [#1897](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1897)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/e2ad6c193a3a0ee71a2bd128d5a4692ad8a6776a...80c1fc3d81e3392ef7b056c8833185c8bdf6f599)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/ec11c34d05139605830621b18763f57ef717f05f)

* [OCPBUGS-60855](https://issues.redhat.com/browse/OCPBUGS-60855): e2e: arm: add validation tests for hugepages with 4k and 64k kernelPageSize (#1383) [#1383](https://github.com/openshift/cluster-node-tuning-operator/pull/1383)
* E2E: skip stalld test case checking sched_fifo (#1385) [#1385](https://github.com/openshift/cluster-node-tuning-operator/pull/1385)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/61b6637d88503c5ddaace05a3e7a3f0b04d49183...ec11c34d05139605830621b18763f57ef717f05f)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/975ad328d5965a4e297b5b5eb0a7098976d50b09)

* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): hypershift: add app label to csdriveroperators running in HCP [#604](https://github.com/openshift/cluster-storage-operator/pull/604)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/c09f715fa8592f79d2436218779614b13cd9c592...975ad328d5965a4e297b5b5eb0a7098976d50b09)


### [console](https://github.com/openshift/console/tree/f413a075c54ee859d3b2e89cba0848b5d2d89c53)

* [OCPBUGS-60420](https://issues.redhat.com/browse/OCPBUGS-60420): QuickStarts Link buttons to other quickstarts are duplicate [#15391](https://github.com/openshift/console/pull/15391)
* [OCPBUGS-50571](https://issues.redhat.com/browse/OCPBUGS-50571): Make sure CSP violations are only reported to telemetry once per day per browser [#15366](https://github.com/openshift/console/pull/15366)
* [Full changelog](https://github.com/openshift/console/compare/e3e13ec5d7f2ca0fa6167c2057ea1162ebc30ef1...f413a075c54ee859d3b2e89cba0848b5d2d89c53)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/eb0acd5c92a830da18d7d0d789f7a8ecac860620)

* [OCPBUGS-61041](https://issues.redhat.com/browse/OCPBUGS-61041): Revert "OCPBUGS-52181: Ensure cluster id changes during force-new-cluster" [#340](https://github.com/openshift/etcd/pull/340)
* [Full changelog](https://github.com/openshift/etcd/compare/a5421dfe551a2e9c911a75062a4cdeb7473f5c26...eb0acd5c92a830da18d7d0d789f7a8ecac860620)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/169f654a6b0bc3dcca620eda17240b86c578cb10)

* [OCPBUGS-61021](https://issues.redhat.com/browse/OCPBUGS-61021): UPSTREAM: <carry>: Revert "Rebase v1.32.8 to 4.19" [#2433](https://github.com/openshift/kubernetes/pull/2433)
* [OCPBUGS-60510](https://issues.redhat.com/browse/OCPBUGS-60510): Rebase v1.32.8 to 4.19 [#2412](https://github.com/openshift/kubernetes/pull/2412)
* [Full changelog](https://github.com/openshift/kubernetes/compare/97b7f2e2ecbbf844812a7158086030bfff2bd324...169f654a6b0bc3dcca620eda17240b86c578cb10)


### [hypershift](https://github.com/openshift/hypershift/tree/f35b2f720e0b3d15bc12b7d0338432ea907e7104)

* [OCPBUGS-60483](https://issues.redhat.com/browse/OCPBUGS-60483): feat(validations): add wildcard support to DNS SAN conflict detection [#6648](https://github.com/openshift/hypershift/pull/6648)
* [OCPBUGS-60147](https://issues.redhat.com/browse/OCPBUGS-60147): Always compress and encode payload in token secret for inplace upgrades [#6606](https://github.com/openshift/hypershift/pull/6606)
* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): add missing app label to some components [#6636](https://github.com/openshift/hypershift/pull/6636)
* [OCPBUGS-60125](https://issues.redhat.com/browse/OCPBUGS-60125): fix(OCPBUGS-60125): Allow HCCO to set registry managementState to Removed; delete VAP during HC deletion [#6689](https://github.com/openshift/hypershift/pull/6689)
* [Full changelog](https://github.com/openshift/hypershift/compare/62e32ad788770817206f19490a2478f3e1acd7c2...f35b2f720e0b3d15bc12b7d0338432ea907e7104)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/1cc3b020cb2d5cdcb9135de39ddbd0ddd494495f)

* [OCPBUGS-59871](https://issues.redhat.com/browse/OCPBUGS-59871): Understand and eliminate noisy logs for MCN [#5199](https://github.com/openshift/machine-config-operator/pull/5199)
* [OCPBUGS-60767](https://issues.redhat.com/browse/OCPBUGS-60767): Update the OnClusterBuild payload tests to reflect the validation rule requiring MCP & MOSC names to match [#5258](https://github.com/openshift/machine-config-operator/pull/5258)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/366ecc0d61006b46a8e05cddb8dfffd5e347a09b...1cc3b020cb2d5cdcb9135de39ddbd0ddd494495f)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e176bf605757d52e7ea8a33bb9e243bf67ccba97)

* [OCPBUGS-59760](https://issues.redhat.com/browse/OCPBUGS-59760): warn if tmp is `noexec` (#1234) [#1234](https://github.com/openshift/oc-mirror/pull/1234)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/44400131ce00a1710bb91eba860cc6b6da5b1ee7...e176bf605757d52e7ea8a33bb9e243bf67ccba97)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/5b3063ff149f290bebca0783fc508dfbf07689a5)

* [OCPBUGS-56614](https://issues.redhat.com/browse/OCPBUGS-56614): legacy image pull secret rollback controller [#384](https://github.com/openshift/openshift-controller-manager/pull/384)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/a672407574befa9faf6a56078d6852229701f8c6...5b3063ff149f290bebca0783fc508dfbf07689a5)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/6ff66743c4fbd0c413cf4bb9933a1eb510aa42e4)

* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709), [OCPBUGS-60797](https://issues.redhat.com/browse/OCPBUGS-60797), [OCPBUGS-60979](https://issues.redhat.com/browse/OCPBUGS-60979): DownStream Merge Sync from 4.20 [08-22-2025] [#2733](https://github.com/openshift/ovn-kubernetes/pull/2733)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/1e27e7a22ddb5a30fe5ae7ccb8e1d3967bc645ec...6ff66743c4fbd0c413cf4bb9933a1eb510aa42e4)


### [tests](https://github.com/openshift/origin/tree/e4547472c759ab77d577fb062922da08d998794b)

* [OCPBUGS-60244](https://issues.redhat.com/browse/OCPBUGS-60244): Wait 30s after the upgrade is complete to validate workloads [#30144](https://github.com/openshift/origin/pull/30144)
* [OCPBUGS-60797](https://issues.redhat.com/browse/OCPBUGS-60797): Don't check for remote node subnet BGP routes [#30156](https://github.com/openshift/origin/pull/30156)
* NO-JIRA: Update extended/networking OWNERS [#30088](https://github.com/openshift/origin/pull/30088)
* [Full changelog](https://github.com/openshift/origin/compare/388322d76352c70a802a2b4cd358e7726746ef90...e4547472c759ab77d577fb062922da08d998794b)