# 4.19.0-okd-scos.ec.8

Created: 2025-04-10 10:05:38 +0000 UTC

Image Digest: `sha256:3a5e4e0614ba724ce3b12f4ab72d06d68b7e4ac29558bdb32eb9bd0df6468d1e`

Promoted from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-04-10-062204


## Changes from 4.19.0-okd-scos.ec.7

### Components

* Kubectl 1.32.1
* Kubernetes 1.32.3
* Kubernetes Tests 1.32.3
* CentOS Stream CoreOS upgraded from 9.0.20250402-0 to 9.0.20250407-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| VSphereControlPlaneMachineSet <br/> (0 tests)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed) |
| VSphereStaticIPs <br/> (0 tests)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed) |
| NewOLMPreflightPermissionChecks <br/> (0 tests)|  |  |  | Enabled<br/>(New)|  | Enabled<br/>(New) |


### Rebuilt images without code change

* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [0e116160](https://github.com/openshift/apiserver-network-proxy/commit/0e116160848d1eb189c5b5f77330f36e20c7e450) `sha256:0a71a0fdf106595a07daa7f82b00af4ab1368fc1b294ebbaa7b8fe30ca082730`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [9399f4eb](https://github.com/openshift/azure-file-csi-driver/commit/9399f4eb9e32b681f3f44781fc64d39ce0a3a117) `sha256:1340dbad13357eb2e368a679acdeefd657145336171916a41ae1cb7fc084c0bb`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [372d6f2c](https://github.com/openshift/azure-kubernetes-kms/commit/372d6f2c4127eb7218fe92f1f378bcdde57753e1) `sha256:f3a2e23f96cb81f4a567886a157f9d017cbf6a4a48ce23cc707cb4cf5faeb118`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [4e514049](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/4e51404906f0648304e81414e0d299c52214f7a8) `sha256:a058affc8bf5d3458c641f011b003f7e962dcb8239b8da493800c6571962eeb7`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [74852478](https://github.com/openshift/cluster-policy-controller/commit/748524784686a5f397490563882cbfb88f9acd01) `sha256:ee207eb9c4fe9bf7f3c0fb7fc58bcb6953c3963b0e827ac0dc9811622a54803f`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [c1c56b4c](https://github.com/openshift/cluster-update-keys/commit/c1c56b4cfb93588290de3734031b1a2d556788fc) `sha256:5561ccb55773896b880d6051759fe3502d978306b1402ed06081420f5bdff265`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [7422aab2](https://github.com/openshift/cloud-provider-ibm/commit/7422aab27110768d8604539b9bb01ca329ff70b7) `sha256:8dcd1095d0d82a65fedd71bd927d1dcfa58783b3ee7a4875da0302b624f8e19f`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/7e3ad833ea507a1809fd99e5a21c594580b801e4)

* [MGMT-20207](https://issues.redhat.com/browse/MGMT-20207): avoid adding system CA bundle to AdditionalTrustBundle [#7448](https://github.com/openshift/assisted-service/pull/7448)
* [MGMT-20009](https://issues.redhat.com/browse/MGMT-20009): Change OCP 4.19 to the default version [#7506](https://github.com/openshift/assisted-service/pull/7506)
* [Full changelog](https://github.com/openshift/assisted-service/compare/1dc66326d304c3c2bffe346de6e2ab278f0d0ac9...7e3ad833ea507a1809fd99e5a21c594580b801e4)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/873dfa463285c3604b402dc8adeedca3c7ef7939)

* Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.19 (#957) [#957](https://github.com/openshift/assisted-installer/pull/957)
* NO-ISSUE: Update Konflux references (#1090) [#1090](https://github.com/openshift/assisted-installer/pull/1090)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/0e954b1848f1bc786170fb926bcd210024bf8c0c...873dfa463285c3604b402dc8adeedca3c7ef7939)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/a37c1e05825a536f4496e656a03358ad4f3b5887)

* NO-ISSUE: ISOBuilder: Appliance tweaks [#70](https://github.com/openshift/agent-installer-utils/pull/70)
* [AGENT-1138](https://issues.redhat.com/browse/AGENT-1138): Skip release image checks for interactive disconnected [#52](https://github.com/openshift/agent-installer-utils/pull/52)
* NO-ISSUE: ISOBuilder: idempotency and efficiency [#66](https://github.com/openshift/agent-installer-utils/pull/66)
* NO-ISSUE: ISOBuilder: Support --dir param [#68](https://github.com/openshift/agent-installer-utils/pull/68)
* NO-ISSUE: ISOBuilder: Update operators list [#67](https://github.com/openshift/agent-installer-utils/pull/67)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/3aeb07e449f8617d6a7e2ef4f99129fc3b552e44...a37c1e05825a536f4496e656a03358ad4f3b5887)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/2d79247dca37395f1bbdf6919665a7cc4692a3b8)

* [ART-12521](https://issues.redhat.com/browse/ART-12521): update go mod dependency for konflux [#545](https://github.com/openshift/cluster-api-provider-aws/pull/545)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/287f4e22f8aa12adbd433e6283619171a7fd51e6...2d79247dca37395f1bbdf6919665a7cc4692a3b8)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/2c931b4abe5a6618754e79274f7bc9df6c63e296)

* [ART-12521](https://issues.redhat.com/browse/ART-12521): update go mod dependency for konflux [#334](https://github.com/openshift/cluster-api-provider-azure/pull/334)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/4dcdc3a8565b3a8cd484bcc188846c19ba9d1a89...2c931b4abe5a6618754e79274f7bc9df6c63e296)


### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/fbcbf9a7597a0c943624cd4415da69612040cfa3)

* Find Nodes by hostname [#38](https://github.com/openshift/cluster-api-provider-metal3/pull/38)
* [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/3e052bfb7fd2758416e0364c2b3406b1a9445112...fbcbf9a7597a0c943624cd4415da69612040cfa3)


### [baremetal-installer, installer, installer-altinfra, installer-artifacts](https://github.com/openshift/installer/tree/7acba9c1cfe126708871e7df1d3c66e708c4f4f6)

* [OCPBUGS-53439](https://issues.redhat.com/browse/OCPBUGS-53439): fix inconsistent subnet role name for bootstrap node [#9650](https://github.com/openshift/installer/pull/9650)
* NO-JIRA: fix the platform test assertions to check expected err message [#9639](https://github.com/openshift/installer/pull/9639)
* [OCPBUGS-43990](https://issues.redhat.com/browse/OCPBUGS-43990): Filter out excess CA certs when adding node [#9641](https://github.com/openshift/installer/pull/9641)
* NO-JIRA: add Roshan-R to CoreOS approvers and reviewers [#9642](https://github.com/openshift/installer/pull/9642)
* [OCPEDGE-1506](https://issues.redhat.com/browse/OCPEDGE-1506): Add Platform based validation to fencing credentials [#9624](https://github.com/openshift/installer/pull/9624)
* [CORS-3908](https://issues.redhat.com/browse/CORS-3908): Update gcp cloud provider config map to include new endpoints [#9600](https://github.com/openshift/installer/pull/9600)
* [SPLAT-2121](https://issues.redhat.com/browse/SPLAT-2121): vsphere - if no host group found, append not found [#9638](https://github.com/openshift/installer/pull/9638)
* [OCPBUGS-54541](https://issues.redhat.com/browse/OCPBUGS-54541): Update RHCOS 4.19 bootimage metadata to 9.6.20250402-0 [#9632](https://github.com/openshift/installer/pull/9632)
* [OCPBUGS-46601](https://issues.redhat.com/browse/OCPBUGS-46601): IBM Cloud Bump IBM Cloud CAPI [#9623](https://github.com/openshift/installer/pull/9623)
* [Full changelog](https://github.com/openshift/installer/compare/fc674e0531ddfae9a6ae192364ce48addd74832e...7acba9c1cfe126708871e7df1d3c66e708c4f4f6)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/1719de833ae8e8a272ff55ca2a80489e6c791d92)

* [COS-3023](https://issues.redhat.com/browse/COS-3023): pkg/cli/admin/release/info: support generating RPM diffs [#1966](https://github.com/openshift/oc/pull/1966)
* [Full changelog](https://github.com/openshift/oc/compare/314ad39cc654af2016f57f7308bf1ec70fe14ca3...1719de833ae8e8a272ff55ca2a80489e6c791d92)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/b1bbcd4e16fa4e009a17da4d53493e93cad4da12)

* NO-JIRA: improve nodes listing in ClusterAPI provider [#354](https://github.com/openshift/kubernetes-autoscaler/pull/354)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/ef46f62aac584d2c17d0314e5c76cb93ad08233e...b1bbcd4e16fa4e009a17da4d53493e93cad4da12)


### [cluster-config-api](https://github.com/openshift/api/tree/8fcc4e71758aefadc7bf7da355ca8619bcc1d34d)

* [SPLAT-2078](https://issues.redhat.com/browse/SPLAT-2078): Removed VSphereStaticIPs feature gate [#2232](https://github.com/openshift/api/pull/2232)
* [OPRUN-3780](https://issues.redhat.com/browse/OPRUN-3780): Add feature flag for NewOLMPreflightPermissionCheck [#2242](https://github.com/openshift/api/pull/2242)
* [SPLAT-2079](https://issues.redhat.com/browse/SPLAT-2079): Removed VSphereControlPlaneMachineSet feature gate [#2236](https://github.com/openshift/api/pull/2236)
* [MCO-1630](https://issues.redhat.com/browse/MCO-1630): Generate v1 crds for PIS [#2257](https://github.com/openshift/api/pull/2257)
* [Full changelog](https://github.com/openshift/api/compare/84bcaa112ae705ac3cfd4bdaaf1f309a2c396c56...8fcc4e71758aefadc7bf7da355ca8619bcc1d34d)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/cf99de974354133f853928cff9e19ad19c5347d9)

* [STOR-2126](https://issues.redhat.com/browse/STOR-2126): Enable readOnlyFileSystem [#229](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/229)
* [STOR-1880](https://issues.redhat.com/browse/STOR-1880): Role and ClusterRole with too wide permissions [#235](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/235)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/d5e6c5b4b579f53b33ccd80d4cdff4a1ee9a815a...cf99de974354133f853928cff9e19ad19c5347d9)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/6897ce1b5c8f8292ac77218ff2e15043f23b83c5)

* [OCPBUGS-54650](https://issues.redhat.com/browse/OCPBUGS-54650), [OCPBUGS-54651](https://issues.redhat.com/browse/OCPBUGS-54651), [OCPBUGS-54652](https://issues.redhat.com/browse/OCPBUGS-54652): desiredSubscription: Specify annotations and SCC [#1214](https://github.com/openshift/cluster-ingress-operator/pull/1214)
* [NE-2009](https://issues.redhat.com/browse/NE-2009): Move VAP to Default featureset [#1216](https://github.com/openshift/cluster-ingress-operator/pull/1216)
* [OCPBUGS-54568](https://issues.redhat.com/browse/OCPBUGS-54568): desiredIstio: Specify priorityClassName [#1211](https://github.com/openshift/cluster-ingress-operator/pull/1211)
* [OCPBUGS-53424](https://issues.redhat.com/browse/OCPBUGS-53424): Wait for install plans to enter the "Requires Approval" phase before approving them [#1203](https://github.com/openshift/cluster-ingress-operator/pull/1203)
* [NE-2008](https://issues.redhat.com/browse/NE-2008): Add GRPC conformance tests [#1208](https://github.com/openshift/cluster-ingress-operator/pull/1208)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/6fe4db1fb589aabec6ce85c34180971ebf1e7089...6897ce1b5c8f8292ac77218ff2e15043f23b83c5)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/963692e0d0b46d52236ca27f1adf20aebec2c25d)

* [MON-4161](https://issues.redhat.com/browse/MON-4161): add `cluster:controlplane_topology:sum` recording rule [#1829](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1829)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/4dce19de399c07cf34f6e1f4aba520aa74ab3304...963692e0d0b46d52236ca27f1adf20aebec2c25d)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/de9e43445501d156eae1a3991a1aaac01588449f)

* [OCPBUGS-54516](https://issues.redhat.com/browse/OCPBUGS-54516): provide context-rich and case-sensitive config validation [#2584](https://github.com/openshift/cluster-monitoring-operator/pull/2584)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/29b581be202cb1837960bc682d74f50a2e592979...de9e43445501d156eae1a3991a1aaac01588449f)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/66f0e1346e30bcf5df8c87397c3158a39758ece0)

* [OCPBUGS-53180](https://issues.redhat.com/browse/OCPBUGS-53180): Add IPv6 NGINX configuration [#2681](https://github.com/openshift/cluster-network-operator/pull/2681)
* [CNF-16707](https://issues.redhat.com/browse/CNF-16707): frr-k8s: Add BGPSessionState CRD [#2671](https://github.com/openshift/cluster-network-operator/pull/2671)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/720212febdc1fccf5552f3f0b8f9f7ce42437f4c...66f0e1346e30bcf5df8c87397c3158a39758ece0)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/4f58be155c79b2c92e7e1c36f481f7163b7f2497)

* Unblock production image generation (#1319) [#1319](https://github.com/openshift/cluster-node-tuning-operator/pull/1319)
* [OCPBUGS-54628](https://issues.redhat.com/browse/OCPBUGS-54628): Add retry method if we hit jira rate limit (#1313) [#1313](https://github.com/openshift/cluster-node-tuning-operator/pull/1313)
* Ignore *-server-ose* repos in the CI (#1314) [#1314](https://github.com/openshift/cluster-node-tuning-operator/pull/1314)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/8e063413f2ffab28366b5babe0bd46faf203071c...4f58be155c79b2c92e7e1c36f481f7163b7f2497)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/b6a825e1517f1ba09e945901d65e9823dcc36943)

* [OCPBUGS-54781](https://issues.redhat.com/browse/OCPBUGS-54781): Revert #111 "OPRUN-3782: Watch for permissions preflight feature gate" [#112](https://github.com/openshift/cluster-olm-operator/pull/112)
* [OPRUN-3782](https://issues.redhat.com/browse/OPRUN-3782): Watch for permissions preflight feature gate [#111](https://github.com/openshift/cluster-olm-operator/pull/111)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/6ff715190310015f81bd5841953105aa64d606ce...b6a825e1517f1ba09e945901d65e9823dcc36943)


### [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator/tree/4cb291973ad887b3506af1d0f86ba5c3e326d372)

* [OCPBUGS-54590](https://issues.redhat.com/browse/OCPBUGS-54590): Samples Operator should sort failing image imports [#627](https://github.com/openshift/cluster-samples-operator/pull/627)
* [OCPBUGS-54589](https://issues.redhat.com/browse/OCPBUGS-54589): Adding filter to clusterOperatorInformerEventHandler [#626](https://github.com/openshift/cluster-samples-operator/pull/626)
* [OCPBUGS-54591](https://issues.redhat.com/browse/OCPBUGS-54591): only update LastTransitionTime if operator status change [#625](https://github.com/openshift/cluster-samples-operator/pull/625)
* [Full changelog](https://github.com/openshift/cluster-samples-operator/compare/43413a7ef4bc2c390a02379d8013a3e2cc9dd659...4cb291973ad887b3506af1d0f86ba5c3e326d372)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/678bf4a32c5f2d6fc1ad20d08d4eca24f7f0fb6b)

* [OSASINFRA-3731](https://issues.redhat.com/browse/OSASINFRA-3731): openstack: Consume CA cert from CCO secret [#557](https://github.com/openshift/cluster-storage-operator/pull/557)
* [STOR-2126](https://issues.redhat.com/browse/STOR-2126): Enable readOnlyFileSystem [#564](https://github.com/openshift/cluster-storage-operator/pull/564)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/9bb520031f42ff222a8b363f71a69fde078f8fc0...678bf4a32c5f2d6fc1ad20d08d4eca24f7f0fb6b)


### [console](https://github.com/openshift/console/tree/a4dfe6d905dba57e9653bf404150c398a5e8e663)

* [OCPBUGS-54733](https://issues.redhat.com/browse/OCPBUGS-54733): fix bug where co-resource-icon--fixed-width can clip [#14950](https://github.com/openshift/console/pull/14950)
* [OCPBUGS-52486](https://issues.redhat.com/browse/OCPBUGS-52486): Notification drawer should have keyboard navigation focus when expanded. [#14889](https://github.com/openshift/console/pull/14889)
* [OCPBUGS-54540](https://issues.redhat.com/browse/OCPBUGS-54540): fix flaking update-modal test [#14937](https://github.com/openshift/console/pull/14937)
* [OCPBUGS-54684](https://issues.redhat.com/browse/OCPBUGS-54684): Remove orphaned notification drawer CSS class [#14948](https://github.com/openshift/console/pull/14948)
* [OCPBUGS-54492](https://issues.redhat.com/browse/OCPBUGS-54492): metadata.name field is missing in PDB example YAML [#14946](https://github.com/openshift/console/pull/14946)
* [CONSOLE-4538](https://issues.redhat.com/browse/CONSOLE-4538): Use PF component groups for Error states [#14912](https://github.com/openshift/console/pull/14912)
* [ODC-7720](https://issues.redhat.com/browse/ODC-7720): Further Developer Catalog -&gt; Software Catalog renaming [#14911](https://github.com/openshift/console/pull/14911)
* [CONSOLE-4540](https://issues.redhat.com/browse/CONSOLE-4540): add set as default sc action [#14920](https://github.com/openshift/console/pull/14920)
* [ODC-7778](https://issues.redhat.com/browse/ODC-7778): Include Quick create in Admin perspective guided tour [#14850](https://github.com/openshift/console/pull/14850)
* [CONSOLE-4393](https://issues.redhat.com/browse/CONSOLE-4393), [ODC-6775](https://issues.redhat.com/browse/ODC-6775): @types/node pre-merge prep [#14932](https://github.com/openshift/console/pull/14932)
* [OCPBUGS-46526](https://issues.redhat.com/browse/OCPBUGS-46526): Add BaseNode in topology folder into Dynamic Plugin SDK [#14907](https://github.com/openshift/console/pull/14907)
* [OCPBUGS-54472](https://issues.redhat.com/browse/OCPBUGS-54472): fix position of OpenShift Lightspeed button [#14923](https://github.com/openshift/console/pull/14923)
* [OCPBUGS-54461](https://issues.redhat.com/browse/OCPBUGS-54461): Add missing `href` props to masthead items [#14922](https://github.com/openshift/console/pull/14922)
* [OCPBUGS-53065](https://issues.redhat.com/browse/OCPBUGS-53065): Fix regression where normal Pod terminals are unresponsive. [#14927](https://github.com/openshift/console/pull/14927)
* [OCPBUGS-54540](https://issues.redhat.com/browse/OCPBUGS-54540): fix flaking update-modal test [#14930](https://github.com/openshift/console/pull/14930)
* [Full changelog](https://github.com/openshift/console/compare/998158a27f40dc336e0c3df2ad0b7e46cac65e66...a4dfe6d905dba57e9653bf404150c398a5e8e663)


### [console-operator](https://github.com/openshift/console-operator/tree/66fbbb102119be6c6866caa65cb7dafa3dabf34a)

* [OCPBUGS-45514](https://issues.redhat.com/browse/OCPBUGS-45514): Report email_domain to telemetry [#971](https://github.com/openshift/console-operator/pull/971)
* [CONSOLE-4481](https://issues.redhat.com/browse/CONSOLE-4481): Add junit generation for unit and e2e testing [#974](https://github.com/openshift/console-operator/pull/974)
* [ART-12521](https://issues.redhat.com/browse/ART-12521): update go mod dependency for konflux [#973](https://github.com/openshift/console-operator/pull/973)
* [Full changelog](https://github.com/openshift/console-operator/compare/644c7134e44dad29e47747c67aa2d50138d8f316...66fbbb102119be6c6866caa65cb7dafa3dabf34a)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/68986f5ba00648402ec4ca9da7303ff509689ab1)

* [ART-12521](https://issues.redhat.com/browse/ART-12521): update go mod dependency for konflux [#320](https://github.com/openshift/cloud-provider-openstack/pull/320)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/352562dda630fbf3ed6b56e7d83970e82e05664e...68986f5ba00648402ec4ca9da7303ff509689ab1)


### [csi-external-snapshotter, csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter/tree/ac82cafc95b301f67f46ee0db93720d55177a19b)

* [STOR-2251](https://issues.redhat.com/browse/STOR-2251): Rebase external-snapshotter to v8.2.1 for OCP 4.19 [#177](https://github.com/openshift/csi-external-snapshotter/pull/177)
* [Full changelog](https://github.com/openshift/csi-external-snapshotter/compare/ff900d0dee7c1765d053ccf523ca87c5e1b61b5c...ac82cafc95b301f67f46ee0db93720d55177a19b)


### [docker-registry](https://github.com/openshift/image-registry/tree/59376a751cdc4c936b22aa228bf2ceb889b471f3)

* [IR-522](https://issues.redhat.com/browse/IR-522): disable aws region check [#425](https://github.com/openshift/image-registry/pull/425)
* [Full changelog](https://github.com/openshift/image-registry/compare/1b1c80a924afac2ed34b22712464a78a407f8bcf...59376a751cdc4c936b22aa228bf2ceb889b471f3)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/cf7114fc396b1e82672de1b830d3877c71712730)

* [OCPBUGS-54336](https://issues.redhat.com/browse/OCPBUGS-54336): Bump library-go [#144](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/144)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/7318fedf669f84e41679495dd5f590f101c53c60...cf7114fc396b1e82672de1b830d3877c71712730)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/e15f4f8936ca26f9de398b849c4632a57bba1914)

* [OCPBUGS-54426](https://issues.redhat.com/browse/OCPBUGS-54426): Fix implementation of ContainsCIDR to allow non-equal addresses [#2263](https://github.com/openshift/kubernetes/pull/2263)
* [OCPBUGS-52410](https://issues.redhat.com/browse/OCPBUGS-52410): Propagate error when creating CustomResourceStorage instead of panicking [#2216](https://github.com/openshift/kubernetes/pull/2216)
* [Full changelog](https://github.com/openshift/kubernetes/compare/ab01febeea8ddbdf96c353a2ef35324ea69e4eb7...e15f4f8936ca26f9de398b849c4632a57bba1914)


### [hypershift](https://github.com/openshift/hypershift/tree/e1791b0438c53ce51d0d954c79362825ab209978)

* [AUTOSCALE-44](https://issues.redhat.com/browse/AUTOSCALE-44): add autonode karpenter drift hcp upgrade e2e test [#5870](https://github.com/openshift/hypershift/pull/5870)
* [OCPBUGS-54602](https://issues.redhat.com/browse/OCPBUGS-54602): Set KAS GOMEMLIMIT node label to what OSDFM expects [#5975](https://github.com/openshift/hypershift/pull/5975)
* NO-JIRA: Add polling for kas-bootstrap kas network requests [#5990](https://github.com/openshift/hypershift/pull/5990)
* [OCPBUGS-53261](https://issues.redhat.com/browse/OCPBUGS-53261): Add validation to avoid conflicts between KubeAPI server and NamedCertificates SANs [#5875](https://github.com/openshift/hypershift/pull/5875)
* [OCPBUGS-41853](https://issues.redhat.com/browse/OCPBUGS-41853): Add documentation for API Server custom certificate in HCP [#6001](https://github.com/openshift/hypershift/pull/6001)
* [OCPBUGS-54178](https://issues.redhat.com/browse/OCPBUGS-54178): Add missing servicemonitors and prometheusrules permissions for non-OVN [#5893](https://github.com/openshift/hypershift/pull/5893)
* [ARO-15695](https://issues.redhat.com/browse/ARO-15695): test/e2e: run EnsureImageRegistryCapabilityDisabled on 4.18 [#5984](https://github.com/openshift/hypershift/pull/5984)
* NO-JIRA: Add OWNERS to kas-bootstrap [#5991](https://github.com/openshift/hypershift/pull/5991)
* [CNTRLPLANE-233](https://issues.redhat.com/browse/CNTRLPLANE-233): Add --kas-dns-name CLI flag to consume KubeAPIServerDNSName API [#5969](https://github.com/openshift/hypershift/pull/5969)
* [CNTRLPLANE-334](https://issues.redhat.com/browse/CNTRLPLANE-334): openshift/api dependency bumps [#5971](https://github.com/openshift/hypershift/pull/5971)
* NO-JIRA: Enable ppc64le builds [#5985](https://github.com/openshift/hypershift/pull/5985)
* [OSASINFRA-3732](https://issues.redhat.com/browse/OSASINFRA-3732): openstack: Sync CA cert to new key [#5702](https://github.com/openshift/hypershift/pull/5702)
* chore(deps): update golang docker tag to v1.24 [#5616](https://github.com/openshift/hypershift/pull/5616)
* [OCPBUGS-54431](https://issues.redhat.com/browse/OCPBUGS-54431): Don't set IgnitionServerTokenExpirationTimestampAnnotation if already set [#5942](https://github.com/openshift/hypershift/pull/5942)
* NO-JIRA: Sync labels between CPO and RHTAP CPO dockerfile [#5966](https://github.com/openshift/hypershift/pull/5966)
* [OCPBUGS-52983](https://issues.redhat.com/browse/OCPBUGS-52983): Add check for expected conditions before running NodePool tests [#5970](https://github.com/openshift/hypershift/pull/5970)
* [Full changelog](https://github.com/openshift/hypershift/compare/627d5bc233260e418706c139ef8b5c7cd781bdde...e1791b0438c53ce51d0d954c79362825ab209978)


### [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/tree/ae192c8cf2061984b749ffa6618c2d25a22d372b)

* [OCPBUGS-54482](https://issues.redhat.com/browse/OCPBUGS-54482): Bump library-go [#142](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/pull/142)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/compare/c646a95fbf637cb9bf1cf913b2e1e45a0e6d503a...ae192c8cf2061984b749ffa6618c2d25a22d372b)


### [insights-operator](https://github.com/openshift/insights-operator/tree/2de75171fd5b9a86067ba1b7782b2943cd82b43e)

* [CCXDEV-9905](https://issues.redhat.com/browse/CCXDEV-9905): Introduce a new config option for storing archives to persistent volume (#1070) [#1070](https://github.com/openshift/insights-operator/pull/1070)
* [Full changelog](https://github.com/openshift/insights-operator/compare/898447b660978f7723ddc45cd8095b87ad0003ce...2de75171fd5b9a86067ba1b7782b2943cd82b43e)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/2bc76d6370f2bd4e1a2e06dfbe732c02ba9a8a21)

* [OCPBUGS-50562](https://issues.redhat.com/browse/OCPBUGS-50562): Ensure unpublish works for volumes carried over upgrades [#58](https://github.com/openshift/kubevirt-csi-driver/pull/58)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/d4bc0f2f54f08ba1e2888461bb0af6a2db2a961d...2bc76d6370f2bd4e1a2e06dfbe732c02ba9a8a21)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/904c53692e6a98dd03c394b5a66c53dea81fef80)

* [SPLAT-2051](https://issues.redhat.com/browse/SPLAT-2051): implement e2e tests for vSphere multi network [#1347](https://github.com/openshift/machine-api-operator/pull/1347)
* [SPLAT-2118](https://issues.redhat.com/browse/SPLAT-2118): Update tests-extensions to pick up new vendor filtering [#1351](https://github.com/openshift/machine-api-operator/pull/1351)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/c6b86e48e8fd2e22cd31ff0a7a7c803f28c769cb...904c53692e6a98dd03c394b5a66c53dea81fef80)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/43fe1cb52bb0fedacce7deb8f2af740d59fff2fe)

* [OCPBUGS-53425](https://issues.redhat.com/browse/OCPBUGS-53425): Make mtu-migration run after wait-for-primary-ip [#4932](https://github.com/openshift/machine-config-operator/pull/4932)
* [OCPBUGS-54611](https://issues.redhat.com/browse/OCPBUGS-54611): pkg/operator/status: Drop kubelet skew guard [#4970](https://github.com/openshift/machine-config-operator/pull/4970)
* [OCPBUGS-54384](https://issues.redhat.com/browse/OCPBUGS-54384): kubelet-service: narrow down restorecon path [#4857](https://github.com/openshift/machine-config-operator/pull/4857)
* [OCPBUGS-54175](https://issues.redhat.com/browse/OCPBUGS-54175): Add /etc/docker/certs.d to template [#4933](https://github.com/openshift/machine-config-operator/pull/4933)
* [MCO-1587](https://issues.redhat.com/browse/MCO-1587): Add runbook for ExtremelyHighIndividualControlPlaneMemory [#4976](https://github.com/openshift/machine-config-operator/pull/4976)
* [OCPBUGS-49737](https://issues.redhat.com/browse/OCPBUGS-49737): GCP: Include the gcp-routes.service for all GCP installs [#4969](https://github.com/openshift/machine-config-operator/pull/4969)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/7331a534e7e9c653b307afdeffa39a5eeb54429b...43fe1cb52bb0fedacce7deb8f2af740d59fff2fe)


### [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix/tree/a26db5a04ecffd98c6a9ee8204af621bf2416ec9)

* [OCPCLOUD-2842](https://issues.redhat.com/browse/OCPCLOUD-2842): Update dependencies to k8s 1.32 [#90](https://github.com/openshift/machine-api-provider-nutanix/pull/90)
* [OCPBUGS-54317](https://issues.redhat.com/browse/OCPBUGS-54317): fixing CVE-2025-22868 [#97](https://github.com/openshift/machine-api-provider-nutanix/pull/97)
* [OCPBUGS-53245](https://issues.redhat.com/browse/OCPBUGS-53245): Fix link-local addresses being added to machine [#100](https://github.com/openshift/machine-api-provider-nutanix/pull/100)
* [Full changelog](https://github.com/openshift/machine-api-provider-nutanix/compare/db327bdb5d304cd5893300ce6d80d092e07e93d0...a26db5a04ecffd98c6a9ee8204af621bf2416ec9)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/e5cfdba32f76616e21836414e4630d687c096fa2)

* [CLID-352](https://issues.redhat.com/browse/CLID-352): images: add integration tests image (#1124) [#1124](https://github.com/openshift/oc-mirror/pull/1124)
* [OCPBUGS-49880](https://issues.redhat.com/browse/OCPBUGS-49880): cli: return distinct error codes depending on failure (#1062) [#1062](https://github.com/openshift/oc-mirror/pull/1062)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/84734ce6ef1dab074fef27bc77402be454f9819f...e5cfdba32f76616e21836414e4630d687c096fa2)


### [olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/23b0aff4e0c55f600370719a4777004dc5cbcb2f)

* NO-ISSUE: Synchronize From Upstream Repositories [#306](https://github.com/openshift/operator-framework-operator-controller/pull/306)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/7914e4b6d031d2daaeba8d852994138db05a8edd...23b0aff4e0c55f600370719a4777004dc5cbcb2f)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/e356c93468c4b686eca25a1ec92e7cf9ec0d8bf3)

* [CORENET-5382](https://issues.redhat.com/browse/CORENET-5382): unpin libreswan version [#2498](https://github.com/openshift/ovn-kubernetes/pull/2498)
* [OCPBUGS-49994](https://issues.redhat.com/browse/OCPBUGS-49994): [DownstreamMerge] 7th april [#2509](https://github.com/openshift/ovn-kubernetes/pull/2509)
* [CORENET-5666](https://issues.redhat.com/browse/CORENET-5666), [OCPBUGS-43004](https://issues.redhat.com/browse/OCPBUGS-43004), [OCPBUGS-54199](https://issues.redhat.com/browse/OCPBUGS-54199): Downstream Merge 2025-04-02 [#2505](https://github.com/openshift/ovn-kubernetes/pull/2505)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/c86639d138c8e215402303eec3625db0922a6201...e356c93468c4b686eca25a1ec92e7cf9ec0d8bf3)


### [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs/tree/87f8e306940e6b0231e6b8fb655ca1e6f21ba95a)

* [OCPBUGS-54620](https://issues.redhat.com/browse/OCPBUGS-54620): CVE-2025-30204: github.com/golang-jwt/jwt allows excessive memory allocation during header parsing [#112](https://github.com/openshift/machine-api-provider-powervs/pull/112)
* [Full changelog](https://github.com/openshift/machine-api-provider-powervs/compare/aafad5ee8f0794d8271bae24f32876379197f76c...87f8e306940e6b0231e6b8fb655ca1e6f21ba95a)


### [prometheus](https://github.com/openshift/prometheus/tree/7935baede79e0e2fbf117781fa3843bea10dfbf8)

* [MON-4199](https://issues.redhat.com/browse/MON-4199): chore: update to v3.2.1 [#246](https://github.com/openshift/prometheus/pull/246)
* [Full changelog](https://github.com/openshift/prometheus/compare/fe57e14c675c76b45368ffdf0a8b98970c19d9de...7935baede79e0e2fbf117781fa3843bea10dfbf8)


### [stream-coreos, stream-coreos-extensions](https://github.com/openshift/os/tree/0f860eb185a7b777f58f61003bed756224ef0ee2)

* NO-JIRA: Initial rhel 10 variant [#1786](https://github.com/openshift/os/pull/1786)
* NO-JIRA: Add Roshan-R to the OWNERS file [#1792](https://github.com/openshift/os/pull/1792)
* NO-JIRA: extensions-ocp-rhel-9.6.yaml: add back in rhel-9.6-server-ose-4.19 repo [#1791](https://github.com/openshift/os/pull/1791)
* [COS-2902](https://issues.redhat.com/browse/COS-2902): Add C10s variant [#1498](https://github.com/openshift/os/pull/1498)
* [OCPBUGS-52293](https://issues.redhat.com/browse/OCPBUGS-52293): extensions: make rhel-9.4-appstream global [#1784](https://github.com/openshift/os/pull/1784)
* NO-JIRA: Switch layered build to `treefile-apply`, drain `get-ocp-repo.sh` [#1780](https://github.com/openshift/os/pull/1780)
* [Full changelog](https://github.com/openshift/os/compare/48a18918794f5418352c03a3415fac3fde28e1b6...0f860eb185a7b777f58f61003bed756224ef0ee2)


### [telemeter](https://github.com/openshift/telemeter/tree/70e6d4b750bf232d121b2e932278f5aed7f9c3fb)

* [SWATCH-3413](https://issues.redhat.com/browse/SWATCH-3413): Add acm_capacity_effective_cpu_cores:sum recording rule [#554](https://github.com/openshift/telemeter/pull/554)
* [Full changelog](https://github.com/openshift/telemeter/compare/f63fef91d659c4127838da6e3dc696e07c0e5536...70e6d4b750bf232d121b2e932278f5aed7f9c3fb)


### [tests](https://github.com/openshift/origin/tree/6c336d1d160b849bfc4dbc9e1756d0243b358c77)

* [MCO-1523](https://issues.redhat.com/browse/MCO-1523): PinnedImageSet v1alpha1 Testing [#29599](https://github.com/openshift/origin/pull/29599)
* [SDN-5217](https://issues.redhat.com/browse/SDN-5217): Add tests for OVN-K default pod network route advertisement [#29419](https://github.com/openshift/origin/pull/29419)
* NO-JIRA: add api error rate observed by kubelet, kcm, and scheduler [#29070](https://github.com/openshift/origin/pull/29070)
* [TRT-2049](https://issues.redhat.com/browse/TRT-2049): Track Watch Counts via Audit Events [#29628](https://github.com/openshift/origin/pull/29628)
* [OAPE-91](https://issues.redhat.com/browse/OAPE-91): Route ExternalCertificate: Skip e2e jobs for bare metal platform [#29651](https://github.com/openshift/origin/pull/29651)
* [OCPBUGS-18865](https://issues.redhat.com/browse/OCPBUGS-18865): Reapply "kube-apiserver disruption incluster monitors" [#29282](https://github.com/openshift/origin/pull/29282)
* NO-ISSUE: Automated - Update synthetic test data [#29600](https://github.com/openshift/origin/pull/29600)
* [OCPBUGS-53279](https://issues.redhat.com/browse/OCPBUGS-53279): add failure case to skip in testPodSandboxCreation() [#29631](https://github.com/openshift/origin/pull/29631)
* [CNTRLPLANE-371](https://issues.redhat.com/browse/CNTRLPLANE-371): Use endpointslices in idling tests instead of deprecated endpoints [#29647](https://github.com/openshift/origin/pull/29647)
* [Full changelog](https://github.com/openshift/origin/compare/e0b9b4bf6f06e8fae8d1036940fd9528e27be793...6c336d1d160b849bfc4dbc9e1756d0243b358c77)