# 4.20.0-okd-scos.ec.15

Created: 2025-09-08 11:18:01 +0000 UTC

Image Digest: `sha256:425718a0a1c6a513692d2340b5f2cb089880c5faba4f5d7aedaebaf9994b3787`

Promoted from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-09-08-013644


## Changes from 4.20.0-okd-scos.ec.14

### Components

* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.3 to 1.33.4
* Kubernetes Tests 1.33.3
* CentOS Stream CoreOS 10.0.20250827-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| AWSDualStackInstall <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| AzureDualStackInstall <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| GCPDualStackInstall <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/d81ac6569ccedffd1a5a05ffc4767dec27e418cb)

* NO-ISSUE: [master] Bump OCP versions: 4.14, 4.16, 4.19, 4.17, 4.18, 4.15, 4.20 (#7987) [#7987](https://github.com/openshift/assisted-service/pull/7987)
* NO-ISSUE: Update Konflux references (#7984) [#7984](https://github.com/openshift/assisted-service/pull/7984)
* [MGMT-21688](https://issues.redhat.com/browse/MGMT-21688): Order pre-nm-config after NM-wait-online to fix race on full ISO (#7977) [#7977](https://github.com/openshift/assisted-service/pull/7977)
* [MGMT-19854](https://issues.redhat.com/browse/MGMT-19854): Fix Agent deletion across namespaces and prevent duplicate host IDs (#7966) [#7966](https://github.com/openshift/assisted-service/pull/7966)
* [MGMT-21658](https://issues.redhat.com/browse/MGMT-21658): Move virtualization bundle operators to supported (#7969) [#7969](https://github.com/openshift/assisted-service/pull/7969)
* [MGMT-21278](https://issues.redhat.com/browse/MGMT-21278): Add metric to track Cluster/Host Monitoring cycle time (#7961) [#7961](https://github.com/openshift/assisted-service/pull/7961)
* [Full changelog](https://github.com/openshift/assisted-service/compare/148ea355451b2173202d3e3988558166f27f0668...d81ac6569ccedffd1a5a05ffc4767dec27e418cb)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/a68b920cd884948e90ba31811e2577a5d54535cc)

* NO-ISSUE: Update Konflux references (#1235) [#1235](https://github.com/openshift/assisted-installer/pull/1235)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/3accbb7bd0dd865744e0ef0808b65be5914b157e...a68b920cd884948e90ba31811e2577a5d54535cc)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/f6aa4cd4b00d18ba7f5fa3b0a039049c851e2ffd)

* NO-ISSUE: Update Konflux references (#1086) [#1086](https://github.com/openshift/assisted-installer-agent/pull/1086)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/62dc63f18f2c4a6a0cf1043710d055fe57f8fa28...f6aa4cd4b00d18ba7f5fa3b0a039049c851e2ffd)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/3ae48f72fc311267ce09fa3f1088b3719f51a138)

* [AGENT-1286](https://issues.redhat.com/browse/AGENT-1286): Red Hat Konflux kflux-prd-rh02 update agent-installer-utils [#143](https://github.com/openshift/agent-installer-utils/pull/143)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/b5330d86e38009af7b8a9fd32d84b8800fd2f27f...3ae48f72fc311267ce09fa3f1088b3719f51a138)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/c805b240dc45c054ff83d57ae945772feef90ea4)

* [SPLAT-2465](https://issues.redhat.com/browse/SPLAT-2465): Changed LB VM creation to not be hard coded and use from variables.ps1 [#9926](https://github.com/openshift/installer/pull/9926)
* [OCPBUGS-61111](https://issues.redhat.com/browse/OCPBUGS-61111): Allow user to BYO private zone without specifying name [#9922](https://github.com/openshift/installer/pull/9922)
* [Full changelog](https://github.com/openshift/installer/compare/5f4e6cdd114d77f0a7e6e18cdabba253c3149a65...c805b240dc45c054ff83d57ae945772feef90ea4)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/a43428189603f12ae190703cb725f66f742fbe52)

* [OCPBUGS-59951](https://issues.redhat.com/browse/OCPBUGS-59951): must-gather: Fix usage checker for custom commands [#2068](https://github.com/openshift/oc/pull/2068)
* [Full changelog](https://github.com/openshift/oc/compare/31597edbaedc6d8d206deda350cfc93e89fa24bf...a43428189603f12ae190703cb725f66f742fbe52)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/69a6090e6d2ddedb585d9e0583628028ebe4b26f)

* [OCPBUGS-60078](https://issues.redhat.com/browse/OCPBUGS-60078): ccoctl: aws to use proper issuer url on subsequent runs [#904](https://github.com/openshift/cloud-credential-operator/pull/904)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/a83df44961ba2ca35d8e0cbda4b0cfad8db85988...69a6090e6d2ddedb585d9e0583628028ebe4b26f)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/7c032738a133c6061997d6a8062c841d9f164090)

* [METAL-1449](https://issues.redhat.com/browse/METAL-1449): optionally deploy IPE [#490](https://github.com/openshift/cluster-baremetal-operator/pull/490)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/19d38730cbeb7e99a3f695aaf4bcb7d24d3c2db8...7c032738a133c6061997d6a8062c841d9f164090)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/64fd75d91fed293329d2cd681ea3fa703fad6bff)

* [OCPBUGS-54703](https://issues.redhat.com/browse/OCPBUGS-54703): Fix conversion of Machines without MachineSet [#351](https://github.com/openshift/cluster-capi-operator/pull/351)
* [OCPCLOUD-2992](https://issues.redhat.com/browse/OCPCLOUD-2992): migration e2e for deleting machine [#345](https://github.com/openshift/cluster-capi-operator/pull/345)
* [OCPBUGS-61044](https://issues.redhat.com/browse/OCPBUGS-61044): Finish bumping CAPA to v2.9.0 [#350](https://github.com/openshift/cluster-capi-operator/pull/350)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/fdbaa2d6abd118bcd1711619be2413ba9d448041...64fd75d91fed293329d2cd681ea3fa703fad6bff)


### [cluster-config-api](https://github.com/openshift/api/tree/a30da32c0ca818bc4e431a3b302d0baecddf6f8f)

* [CORS-4136](https://issues.redhat.com/browse/CORS-4136): Add Feature gates for AWS, Azure and GCP Dual Stack support [#2430](https://github.com/openshift/api/pull/2430)
* [OCPBUGS-60901](https://issues.redhat.com/browse/OCPBUGS-60901): Add default value for MachineHealthCheck's maxUnhealthy to the description [#2462](https://github.com/openshift/api/pull/2462)
* [Full changelog](https://github.com/openshift/api/compare/4a165b214722ff53fbdac1d250f62d4b0bb2bd3d...a30da32c0ca818bc4e431a3b302d0baecddf6f8f)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/63a93b05b131a3f7ee8b482a5cb4f0c1eac8660e)

* NO-JIRA: Add davidesalerno to OWNERS [#447](https://github.com/openshift/cluster-dns-operator/pull/447)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/82578923164636746e0d74d594ab32d83a660c0b...63a93b05b131a3f7ee8b482a5cb4f0c1eac8660e)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/215998939f5223da916622c71fd07d17656faf6b)

* [ETCD-590](https://issues.redhat.com/browse/ETCD-590): configure probes based on quota size [#1460](https://github.com/openshift/cluster-etcd-operator/pull/1460)
* NO-JIRA: Add priority field to prevent early shutdown [#1476](https://github.com/openshift/cluster-etcd-operator/pull/1476)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/9091149b9060f8c45a925d8e7add781f49ba827f...215998939f5223da916622c71fd07d17656faf6b)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/e3ae45d527d0d587b991d34ea276fb671fad0165)

* [OCPBUGS-60859](https://issues.redhat.com/browse/OCPBUGS-60859): Fix logic on gatewayapi test cleanup [#1273](https://github.com/openshift/cluster-ingress-operator/pull/1273)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/2371120eedb27049160c70859ef9972a7599c7e3...e3ae45d527d0d587b991d34ea276fb671fad0165)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/3b20c534b1b92d46055147c4f82f69b2ad3044c9)

* [CNTRLPLANE-1275](https://issues.redhat.com/browse/CNTRLPLANE-1275): Fixing arch issue [#869](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/869)
* [CNTRLPLANE-1275](https://issues.redhat.com/browse/CNTRLPLANE-1275): Fixed hardcode arch issue [#866](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/866)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/7030e7353408e83096a285404700c573273c25c8...3b20c534b1b92d46055147c4f82f69b2ad3044c9)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/8f8e94713cf1f0fe373836b147fd8190340deef8)

* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): Fixing arch issue [#130](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/130)
* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): Fix arch issue [#128](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/128)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/656c8043ce6176f6c92ebaad4fb265c4f6d2005b...8f8e94713cf1f0fe373836b147fd8190340deef8)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/4496a0a83b65e566038715a1f2405ba194c10439)

* [OCPBUGS-56568](https://issues.redhat.com/browse/OCPBUGS-56568): chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind [#2660](https://github.com/openshift/cluster-monitoring-operator/pull/2660)
* [OCPBUGS-61135](https://issues.redhat.com/browse/OCPBUGS-61135): Revert "MON-4343: Cleanup deprecate pa config" [#2658](https://github.com/openshift/cluster-monitoring-operator/pull/2658)
* [OCPBUGS-60948](https://issues.redhat.com/browse/OCPBUGS-60948): Add selinux_warning_controller_selinux_volume_conflict to telemetry [#2653](https://github.com/openshift/cluster-monitoring-operator/pull/2653)
* [MON-4343](https://issues.redhat.com/browse/MON-4343): Cleanup deprecate pa config [#2651](https://github.com/openshift/cluster-monitoring-operator/pull/2651)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/a5a091be0db37c5969e0534980f38cc90524dda5...4496a0a83b65e566038715a1f2405ba194c10439)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/5aff8b2228dbc94bb302f8e907a660720268aac5)

* [CORENET-6327](https://issues.redhat.com/browse/CORENET-6327): Update linter [#2783](https://github.com/openshift/cluster-network-operator/pull/2783)
* [CORENET-6306](https://issues.redhat.com/browse/CORENET-6306): Set RunAsUser for network-node-identity [#2780](https://github.com/openshift/cluster-network-operator/pull/2780)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/746b8fb86171dfc75011a7b8db29de5c2355d848...5aff8b2228dbc94bb302f8e907a660720268aac5)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/3c890f038bc1da82298b2633c8c61f466e0b3e68)

* E2E: llc: Create testing namespace before Runtime tests (#1382) [#1382](https://github.com/openshift/cluster-node-tuning-operator/pull/1382)
* [OCPBUGS-60463](https://issues.redhat.com/browse/OCPBUGS-60463): E2E:  ovs dynamic pinning test case fixes  (#1376) [#1376](https://github.com/openshift/cluster-node-tuning-operator/pull/1376)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/3d783ea383b32296c2b75872e587f24c896e9418...3c890f038bc1da82298b2633c8c61f466e0b3e68)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/cfcc1f7f1f2c702118cd4b182d04c12defac6d30)

* [OCPBUGS-61161](https://issues.redhat.com/browse/OCPBUGS-61161): Fix logging e2e also faster cleanup [#611](https://github.com/openshift/cluster-storage-operator/pull/611)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/cdc7ef8a7ec6af399c10606037cfb9f631dddc23...cfcc1f7f1f2c702118cd4b182d04c12defac6d30)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/b21fbd24bd0512b38e9dab463383e662d1c92a01)

* [OTA-1531](https://issues.redhat.com/browse/OTA-1531): Rework error handling in FeatureGate processing [#1206](https://github.com/openshift/cluster-version-operator/pull/1206)
* NO-JIRA: Extend the development documentation regarding building and publishing a payload image [#1227](https://github.com/openshift/cluster-version-operator/pull/1227)
* NO-ISSUE: Update golang version to 1.24 in go.mod [#1230](https://github.com/openshift/cluster-version-operator/pull/1230)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/9de00ba8fb8330b3a1b440396dc2c5dbe974119b...b21fbd24bd0512b38e9dab463383e662d1c92a01)


### [console](https://github.com/openshift/console/tree/0748392def188dbb070308c32c1fbb3457624f95)

* NO-JIRA: Update plugin SDK CHANGELOG post 4.18 package publish [#15463](https://github.com/openshift/console/pull/15463)
* [OCPBUGS-61139](https://issues.redhat.com/browse/OCPBUGS-61139): Correct the ordering of Catalog categories to be alphabetized [#15454](https://github.com/openshift/console/pull/15454)
* [CONSOLE-4610](https://issues.redhat.com/browse/CONSOLE-4610): Drop use of ceateModalLauncher from Topology package [#15446](https://github.com/openshift/console/pull/15446)
* [OCPBUGS-61090](https://issues.redhat.com/browse/OCPBUGS-61090): fix typo in update approval strategy label [#15452](https://github.com/openshift/console/pull/15452)
* [CONSOLE-4683](https://issues.redhat.com/browse/CONSOLE-4683): Refactor group action factory [#15404](https://github.com/openshift/console/pull/15404)
* [OCPBUGS-60756](https://issues.redhat.com/browse/OCPBUGS-60756): delete pvc  action item is placed in the middle of action list [#15447](https://github.com/openshift/console/pull/15447)
* [CONSOLE-4597](https://issues.redhat.com/browse/CONSOLE-4597): Migrate enzyme "__tests__/components/graphs" unit tests to React Testing Library [#15397](https://github.com/openshift/console/pull/15397)
* [Full changelog](https://github.com/openshift/console/compare/17d2383eac889752a233de290293ee93de2a6da4...0748392def188dbb070308c32c1fbb3457624f95)


### [console-operator](https://github.com/openshift/console-operator/tree/76ae5dafe7640111fa8e9c7f745122e4844d4a5d)

* [OCPBUGS-60782](https://issues.redhat.com/browse/OCPBUGS-60782): pluginOrder field should only contain available plugins [#1038](https://github.com/openshift/console-operator/pull/1038)
* [Full changelog](https://github.com/openshift/console-operator/compare/9aa65fe9e7f92cb1f8d1918f13dc3630aa3a7f74...76ae5dafe7640111fa8e9c7f745122e4844d4a5d)


### [haproxy-router](https://github.com/openshift/router/tree/47274e213d8a511066a9492b73c9b8eccc353571)

* NO-JIRA: Add davidesalerno to OWNERS [#670](https://github.com/openshift/router/pull/670)
* [Full changelog](https://github.com/openshift/router/compare/7c50294cfbc9a7c0d3c715de56fb92dadeefb8e6...47274e213d8a511066a9492b73c9b8eccc353571)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/6efb6a95323fe35285877dcdade237444b35cae0)

* [OCPBUGS-60507](https://issues.redhat.com/browse/OCPBUGS-60507): Unrevert bump to v1.33.4 [#2441](https://github.com/openshift/kubernetes/pull/2441)
* [OCPBUGS-56594](https://issues.redhat.com/browse/OCPBUGS-56594): UPSTREAM: &lt;carry&gt;: backporting fix for concurrent map iteration and write [#2443](https://github.com/openshift/kubernetes/pull/2443)
* [OCPBUGS-61196](https://issues.redhat.com/browse/OCPBUGS-61196): UPSTREAM: 133625: Remove patch/update from ServiceCIDR API conformanc… [#2444](https://github.com/openshift/kubernetes/pull/2444)
* [OCPBUGS-60946](https://issues.redhat.com/browse/OCPBUGS-60946): UPSTREAM: 133425: Fix SELinux label comparison [#2417](https://github.com/openshift/kubernetes/pull/2417)
* [Full changelog](https://github.com/openshift/kubernetes/compare/a237dcbeee8bbe1440c94349399cc6eac8870910...6efb6a95323fe35285877dcdade237444b35cae0)


### [hypershift](https://github.com/openshift/hypershift/tree/d29713d06741fb622fd0deed29c9c073b5c61495)

* [CNTRLPLANE-203](https://issues.redhat.com/browse/CNTRLPLANE-203): feat(sharedingress): add Azure Public IP tagging support for router service [#6730](https://github.com/openshift/hypershift/pull/6730)
* [OCPBUGS-61219](https://issues.redhat.com/browse/OCPBUGS-61219): fix: cleanup old PKI operator deployment during upgrades [#6758](https://github.com/openshift/hypershift/pull/6758)
* [OCPBUGS-61282](https://issues.redhat.com/browse/OCPBUGS-61282): rename CCM deployments to align with 4.19 [#6757](https://github.com/openshift/hypershift/pull/6757)
* NO-JIRA: fix(api): enhance API NodePool's API docs [#6753](https://github.com/openshift/hypershift/pull/6753)
* NO-JIRA: chore(tests): validate conditions after executing tests [#6738](https://github.com/openshift/hypershift/pull/6738)
* [OCPBUGS-60376](https://issues.redhat.com/browse/OCPBUGS-60376): fix token rotation causing Karpenter to stop working [#6561](https://github.com/openshift/hypershift/pull/6561)
* NO-JIRA: contrib: add utility for cleaning roles [#5945](https://github.com/openshift/hypershift/pull/5945)
* [CNTRLPLANE-267](https://issues.redhat.com/browse/CNTRLPLANE-267): Restructure the OWNERS usage in the whole repo [#5784](https://github.com/openshift/hypershift/pull/5784)
* [AUTOSCALE-332](https://issues.redhat.com/browse/AUTOSCALE-332): allow karpenter-operator to support rhobs monitoring [#6704](https://github.com/openshift/hypershift/pull/6704)
* [CNTRLPLANE-1370](https://issues.redhat.com/browse/CNTRLPLANE-1370): feat(supportedversion): add OCP 4.21 support; update e2e constants and tests [#6739](https://github.com/openshift/hypershift/pull/6739)
* NO-JIRA: docs(create-jira-items): document OCPBUGS issue creation and default versions [#6741](https://github.com/openshift/hypershift/pull/6741)
* [OCPBUGS-61066](https://issues.redhat.com/browse/OCPBUGS-61066): fix(cpo/ingress): do not set aws-load-balancer-subnets on private router Service [#6732](https://github.com/openshift/hypershift/pull/6732)
* chore(deps): update konflux references [#6725](https://github.com/openshift/hypershift/pull/6725)
* [CNTRLPLANE-1236](https://issues.redhat.com/browse/CNTRLPLANE-1236): feat(aws): support EC2 CapacityReservationPreference in NodePool [#6694](https://github.com/openshift/hypershift/pull/6694)
* [Full changelog](https://github.com/openshift/hypershift/compare/57a05b0fb2de6e843cc05e7ffdaef904a433ccf1...d29713d06741fb622fd0deed29c9c073b5c61495)


### [insights-operator](https://github.com/openshift/insights-operator/tree/b82259ab1186594ff62bd063ee5145ded9a09e95)

* remove me from the OWNERS list (#1127) [#1127](https://github.com/openshift/insights-operator/pull/1127)
* Revert "Rerun make update after read-only filesystem securitycontext added. (#1122)" (#1128) [#1122](https://github.com/openshift/insights-operator/pull/1122)
* Rerun make update after read-only filesystem securitycontext added. (#1122) [#1122](https://github.com/openshift/insights-operator/pull/1122)
* [Full changelog](https://github.com/openshift/insights-operator/compare/da45333120b0a116dea77d718dbd010d2f655f53...b82259ab1186594ff62bd063ee5145ded9a09e95)


### [ironic](https://github.com/openshift/ironic-image/tree/e9d325e27753eb41c9646dcdffc30833426e2502)

* [OCPBUGS-60455](https://issues.redhat.com/browse/OCPBUGS-60455): set [json_rpc]port unconditionally [#684](https://github.com/openshift/ironic-image/pull/684)
* [Full changelog](https://github.com/openshift/ironic-image/compare/68d581ecde0738d585aff5fac831cfae3243d521...e9d325e27753eb41c9646dcdffc30833426e2502)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/9fd8d2569557a1860b065af24d8e89ba54654de8)

* Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.21 [#213](https://github.com/openshift/images/pull/213)
* [Full changelog](https://github.com/openshift/images/compare/bb4535b7069cab2de0174be29bccccde6d623b4f...9fd8d2569557a1860b065af24d8e89ba54654de8)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/e3846e13997f0d6e93b4b2e740212379e4500dc2)

* [OCPBUGS-60901](https://issues.redhat.com/browse/OCPBUGS-60901): bump openshift/api [#1407](https://github.com/openshift/machine-api-operator/pull/1407)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/76351b466ce0fe5859b0dbc04b9c8599fbe7eed0...e3846e13997f0d6e93b4b2e740212379e4500dc2)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/063455217c390b9196f1577378cbb8a6454de527)

* [OCPBUGS-56558](https://issues.redhat.com/browse/OCPBUGS-56558): Recheck `generatedByControllerVersion` annotation prior to deleting a degraded MC [#5259](https://github.com/openshift/machine-config-operator/pull/5259)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/7a56cf0048a05d576e746c3e992ce586e07c97e8...063455217c390b9196f1577378cbb8a6454de527)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/fba8b082f1bd01e67d9df1af5f2d06e9e3811f3c)

* [OU-988](https://issues.redhat.com/browse/OU-988): automation - cleanup for all scripts and fix on MP injection [#523](https://github.com/openshift/monitoring-plugin/pull/523)
* [RHINENG-20424](https://issues.redhat.com/browse/RHINENG-20424): Incident ID filter for the Incidents Page [#520](https://github.com/openshift/monitoring-plugin/pull/520)
* [OU-897](https://issues.redhat.com/browse/OU-897): automation OU-721 and hygiene of existing scripts [#519](https://github.com/openshift/monitoring-plugin/pull/519)
* NO-JIRA: automation - regression testing for metrics - changes [#516](https://github.com/openshift/monitoring-plugin/pull/516)
* [RHINENG-20424](https://issues.redhat.com/browse/RHINENG-20424): improved filters for severity and state [#515](https://github.com/openshift/monitoring-plugin/pull/515)
* [OU-501](https://issues.redhat.com/browse/OU-501): automation - dashboards legacy and export csv [#517](https://github.com/openshift/monitoring-plugin/pull/517)
* [OBSINTA-796](https://issues.redhat.com/browse/OBSINTA-796): Refactor Cypress Commands Structure [#518](https://github.com/openshift/monitoring-plugin/pull/518)
* NO-JIRA: Test config interactive setup [#510](https://github.com/openshift/monitoring-plugin/pull/510)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/3f9afde1bf5e04ffb1aa370e936bec336d523e79...fba8b082f1bd01e67d9df1af5f2d06e9e3811f3c)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/ef99d3d4cf1a15abfa55ef71b75c0eaa18a791ce)

* Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.21 (#75) [#75](https://github.com/openshift/multus-networkpolicy/pull/75)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/278ec20e795c3a590500e789716be7fcc4d7107b...ef99d3d4cf1a15abfa55ef71b75c0eaa18a791ce)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/dd3c4d0b886138d974022b963e72f2e90293abfe)

* [OCPBUGS-60846](https://issues.redhat.com/browse/OCPBUGS-60846): upstream sync 01092025 [#90](https://github.com/openshift/bond-cni/pull/90)
* [Full changelog](https://github.com/openshift/bond-cni/compare/54ad71eeeb2c9e13d3ee5d03685dff5e1b1a02dc...dd3c4d0b886138d974022b963e72f2e90293abfe)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/7033e0fa18593c8814cf14d0f10a9226d7d93c45)

* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Bump openshift/kubernetes-apiserver [#142](https://github.com/openshift/oauth-apiserver/pull/142)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/022c761441a589cd71bf9428700315061c363f0a...7033e0fa18593c8814cf14d0f10a9226d7d93c45)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/e18d0b29945c357b49bfb36a5f2dc9bf7ac39616)

* NO-ISSUE: Synchronize From Upstream Repositories [#456](https://github.com/openshift/operator-framework-operator-controller/pull/456)
* [OCPBUGS-60868](https://issues.redhat.com/browse/OCPBUGS-60868): Revert "Handle service-ca cert availability/rotation" [#460](https://github.com/openshift/operator-framework-operator-controller/pull/460)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/9319f22a0e4aeaceb0dca569fe5b412b34ba436a...e18d0b29945c357b49bfb36a5f2dc9bf7ac39616)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/e817f8439e1379485594f56d74c2160c44db0864)

* [CNTRLPLANE-5](https://issues.redhat.com/browse/CNTRLPLANE-5): Bump openshift/kubernetes-apiserver [#549](https://github.com/openshift/openshift-apiserver/pull/549)
* [OCPBUGS-57474](https://issues.redhat.com/browse/OCPBUGS-57474): ensure cache invalidation after a time [#547](https://github.com/openshift/openshift-apiserver/pull/547)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/7f4da5d7815092618b1fec86aeafe137d50d0c00...e817f8439e1379485594f56d74c2160c44db0864)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/3af8ef7f60c6b76cfe4219f5c1e277e433de5396)

* NO-ISSUE: Synchronize From Upstream Repositories [#1088](https://github.com/openshift/operator-framework-olm/pull/1088)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/e53cf3090214284bf913bd2d7165a0a9422635a0...3af8ef7f60c6b76cfe4219f5c1e277e433de5396)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/50a2c3155adf642c43d5a0366c5226ed8d751466)

* [OCPBUGS-60669](https://issues.redhat.com/browse/OCPBUGS-60669): Add NetworkPolicy for hypershift [#656](https://github.com/operator-framework/operator-marketplace/pull/656)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/07c4ea769698d54db5aad7b9bebe6c23dfc4165a...50a2c3155adf642c43d5a0366c5226ed8d751466)


### [prometheus](https://github.com/openshift/prometheus/tree/d703f9b685380fdcfa4114f4cfd463e9b68ab00d)

* NO-JIRA: [bot] sync rh-manifest.txt [#261](https://github.com/openshift/prometheus/pull/261)
* [OCPBUGS-56568](https://issues.redhat.com/browse/OCPBUGS-56568): chore: compute highestTimestamp at queryManager level [#262](https://github.com/openshift/prometheus/pull/262)
* [Full changelog](https://github.com/openshift/prometheus/compare/e3c32a9a3a4828106c3de1fcb0028625c50b3e1b...d703f9b685380fdcfa4114f4cfd463e9b68ab00d)


### [tests](https://github.com/openshift/origin/tree/2af38a7807699b3046a73f931884152a11271d21)

* NO-JIRA: Fix Node NotReady intervals being left open when a node is deleted [#30188](https://github.com/openshift/origin/pull/30188)
* [OCPBUGS-61194](https://issues.redhat.com/browse/OCPBUGS-61194): Mark etcd net overload logging test as a flake [#30210](https://github.com/openshift/origin/pull/30210)
* [CORENET-5329](https://issues.redhat.com/browse/CORENET-5329): revert primary udn test workaround from virt tests [#29386](https://github.com/openshift/origin/pull/29386)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): improve logging, add startup probe to Keycloak Deployment [#30184](https://github.com/openshift/origin/pull/30184)
* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): Enable OTE for cluster-kube-storage-version-migrator-operator [#30199](https://github.com/openshift/origin/pull/30199)
* [OCPBUGS-60656](https://issues.redhat.com/browse/OCPBUGS-60656): OCPBUGS-60883: Fix PinnedImageSet test instability & update flow for tests using custom MCPs [#30136](https://github.com/openshift/origin/pull/30136)
* [Full changelog](https://github.com/openshift/origin/compare/87d58ca8c53ff3ce23c8b052623a72a5d82070bb...2af38a7807699b3046a73f931884152a11271d21)