# 4.21.0-okd-scos.3 Created: 2026-02-02 05:30:35 +0000 UTC Image Digest: `sha256:99029906f5f0486f3eeb44301ae1215ad6f1a6211c379f5eebfdf94b1f9bb8b1` Promoted from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2026-01-31-153807 ## Changes from 4.21.0-okd-scos.2 ### Components * Kubectl 1.34.1 * Kubernetes 1.34.2 * Kubernetes Tests 1.34.1 * CentOS Stream CoreOS upgraded from 10.0.20260113-0 to 10.0.20260125-0 ### Rebuilt images without code change * [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [35ba137a](https://github.com/openshift/apiserver-network-proxy/commit/35ba137ab96d01f0b8df729ff5ad93ac2fdad800) `sha256:9feb6c778e0a3aa19f1b2b5e2d8785465d7e1f616d133cbc36678e673a11306e` * [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator) git [2e46bfdf](https://github.com/openshift/cluster-etcd-operator/commit/2e46bfdf639578074b824bd63eaf3ab8b1cc14ea) `sha256:e4a92ce6e3c6522ad28648383b6453ff993e15d77b063bf7bd687645ce773062` * [stream-coreos](https://github.com/openshift/os) git [e8f5a55a](https://github.com/openshift/os/commit/e8f5a55a31574c1d1e415b23e939e20ddcfcc399) `sha256:becab2771a8360d2f36cfb6ed4a78dc1b58b544e47d93a807c1750a57f3f8a6f` * [stream-coreos-extensions](https://github.com/openshift/os) git [e8f5a55a](https://github.com/openshift/os/commit/e8f5a55a31574c1d1e415b23e939e20ddcfcc399) `sha256:5ab03c26f2c7f4c894b2ba195476baf3451dd2d22a8203706ac6f81c1ce788e0` ### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/5d6af81d7ab9b289c3def6c0350313118d63923a) * [OCPBUGS-74398](https://issues.redhat.com/browse/OCPBUGS-74398), [OCPCLOUD-3101](https://issues.redhat.com/browse/OCPCLOUD-3101): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.22.0 (4523016) into release-4.21 [#361](https://github.com/openshift/cluster-api-provider-azure/pull/361) * [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/b80578abd9d7e6b0d0e9fa070f7ee88adc3bbb85...5d6af81d7ab9b289c3def6c0350313118d63923a) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/d2a69fd313d8f2e8f6b51c74da958526467f2f4c) * [OSDOCS-17769](https://issues.redhat.com/browse/OSDOCS-17769): [release-4.21] Add AWS m7 instance types [#10266](https://github.com/openshift/installer/pull/10266) * [OCPBUGS-74493](https://issues.redhat.com/browse/OCPBUGS-74493): add support for NVIDIA H100 and H200 enabled machine series [#10259](https://github.com/openshift/installer/pull/10259) * [OCPBUGS-74414](https://issues.redhat.com/browse/OCPBUGS-74414): Remove region option for the GCP Private Service Connect Endpoint [#10253](https://github.com/openshift/installer/pull/10253) * [Full changelog](https://github.com/openshift/installer/compare/839fc21d6dbdb571c1f8bf695c7f6fd75d97fb0d...d2a69fd313d8f2e8f6b51c74da958526467f2f4c) ### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/a5a9a72ad5738bfd44d639454c92b5e3b9200fb4) * [OCPBUGS-68369](https://issues.redhat.com/browse/OCPBUGS-68369): Abort inspection/cleaning before powering off during deletion [#449](https://github.com/openshift/baremetal-operator/pull/449) * [OCPBUGS-74365](https://issues.redhat.com/browse/OCPBUGS-74365): Fix invalidDNSNameinvalidipv6 test for Go 1.24+ [#450](https://github.com/openshift/baremetal-operator/pull/450) * [Full changelog](https://github.com/openshift/baremetal-operator/compare/2cf0e539c53ed36d1d3bb41a1148fae5cf6a3589...a5a9a72ad5738bfd44d639454c92b5e3b9200fb4) ### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/80728a61725bb6ec7f4515c2ac2b3a249f3c5742) * [OCPBUGS-74650](https://issues.redhat.com/browse/OCPBUGS-74650): fix: e2e: workaround for flakes caused by OCPBUGS-74571, until it is fixed [#450](https://github.com/openshift/cluster-capi-operator/pull/450) * [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/95afabb641321eb27a18cbcda12b22bc0711a460...80728a61725bb6ec7f4515c2ac2b3a249f3c5742) ### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/2dde33fb94aae47b460a5f6a672d06c9ee4225d8) * [OCPBUGS-74588](https://issues.redhat.com/browse/OCPBUGS-74588): Bump openshift/api to get latest AWSMachineProviderConfig type [#386](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/386) * [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/737457067d0b1a85cd2d9a9eba930fd7d7bd4e40...2dde33fb94aae47b460a5f6a672d06c9ee4225d8) ### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/7809937c07c5dbfa272bfbe87d99e09104bf3fc9) * [OCPBUGS-74592](https://issues.redhat.com/browse/OCPBUGS-74592): [release-4.21] NO-JIRA: pkg/operator: Fix wrong ClusterOperator name [#605](https://github.com/openshift/cluster-kube-scheduler-operator/pull/605) * [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/6e63ff6ae36faa442205800574556dd02583fab6...7809937c07c5dbfa272bfbe87d99e09104bf3fc9) ### [console](https://github.com/openshift/console/tree/9556828d184802d4cb437962c5e57eb975014d9e) * [OCPBUGS-74887](https://issues.redhat.com/browse/OCPBUGS-74887): Add null checks to CRB subject [#15974](https://github.com/openshift/console/pull/15974) * [OCPBUGS-74587](https://issues.redhat.com/browse/OCPBUGS-74587): '0 of pods' are shown in Status column on DaemonSets list page. [#15953](https://github.com/openshift/console/pull/15953) * [OCPBUGS-74695](https://issues.redhat.com/browse/OCPBUGS-74695): Bump lodash to latest [#15962](https://github.com/openshift/console/pull/15962) * [OCPBUGS-74157](https://issues.redhat.com/browse/OCPBUGS-74157): Do not resolve disabled catalog type extensions [#15930](https://github.com/openshift/console/pull/15930) * [Full changelog](https://github.com/openshift/console/compare/85adb1dc92f12377168b041e72b79ac688706b00...9556828d184802d4cb437962c5e57eb975014d9e) ### [console-operator](https://github.com/openshift/console-operator/tree/bdf006d0b1f6653b36f2b44a4d3bb16d1a5cb0b5) * [OCPBUGS-74152](https://issues.redhat.com/browse/OCPBUGS-74152): Fix PDB blocking node drains during cluster upgrades + update donwloads deployment [#1103](https://github.com/openshift/console-operator/pull/1103) * [Full changelog](https://github.com/openshift/console-operator/compare/b27f969aef3c7b8b126d3387cefc00dbffbabf03...bdf006d0b1f6653b36f2b44a4d3bb16d1a5cb0b5) ### [hypershift](https://github.com/openshift/hypershift/tree/7b81622daa2f53547529f5394acedaf10cd0284b) * [OCPBUGS-74648](https://issues.redhat.com/browse/OCPBUGS-74648): feat(cpo): check components have rolled out before setting available [#7604](https://github.com/openshift/hypershift/pull/7604) * [Full changelog](https://github.com/openshift/hypershift/compare/6fb603c54baa899b853e5761ecad55b5579a7c92...7b81622daa2f53547529f5394acedaf10cd0284b) ### [insights-operator](https://github.com/openshift/insights-operator/tree/599209e2705e68bedfc21f842f5c3f379b8f27c3) * [OCPBUGS-74479](https://issues.redhat.com/browse/OCPBUGS-74479): set Progressing condition on cluster update [#1217](https://github.com/openshift/insights-operator/pull/1217) * [OCPBUGS-74233](https://issues.redhat.com/browse/OCPBUGS-74233): [bugfix] The ConfigMap value for StoragePath is ignored on basic routine [#1214](https://github.com/openshift/insights-operator/pull/1214) * [Full changelog](https://github.com/openshift/insights-operator/compare/489fae2342784478008f86f2159cbc9d38d119db...599209e2705e68bedfc21f842f5c3f379b8f27c3) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/a3c57fb568ba9201394624595e88c3ba6a5bd165) * [OCPBUGS-74542](https://issues.redhat.com/browse/OCPBUGS-74542): Stale operator metrics Service and ServiceMonitor resources need to be deleted [#5600](https://github.com/openshift/machine-config-operator/pull/5600) * [OCPBUGS-74431](https://issues.redhat.com/browse/OCPBUGS-74431): CVE-2025-58183 ose-machine-config-operator-container: Unbounded allocation when parsing GNU sparse map [openshift-4.21] [#5596](https://github.com/openshift/machine-config-operator/pull/5596) * [OCPBUGS-73819](https://issues.redhat.com/browse/OCPBUGS-73819): Set `NodeDegraded` MCN condition when node state annotation is set to `Degraded` [#5554](https://github.com/openshift/machine-config-operator/pull/5554) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/efa97c9175b49eb653864268ed495b2bfa71ef34...a3c57fb568ba9201394624595e88c3ba6a5bd165) ### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/34ad66d669722725cd51d0b8e62327bb7d47597e) * [CNV-76879](https://issues.redhat.com/browse/CNV-76879): Allow passing the physical network name via URL parameter in the VM network wizard [#332](https://github.com/openshift/networking-console-plugin/pull/332) * [Full changelog](https://github.com/openshift/networking-console-plugin/compare/482f1e7dbf737c7864e6d2a1bd9e9e3066d6c048...34ad66d669722725cd51d0b8e62327bb7d47597e) ### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/8fddfa48c36c2b099da75be2ba8c42ab6b117aa6) * [OCPBUGS-74633](https://issues.redhat.com/browse/OCPBUGS-74633): config watchnamespace api cases [#620](https://github.com/openshift/operator-framework-operator-controller/pull/620) * [OCPBUGS-74562](https://issues.redhat.com/browse/OCPBUGS-74562): enhance ocp-79770 [#617](https://github.com/openshift/operator-framework-operator-controller/pull/617) * [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/bc5f350745f86a8fa60caccff6c3ea1ecf2ac977...8fddfa48c36c2b099da75be2ba8c42ab6b117aa6) ### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/190e114128b9f358d1d6a700c464797d4c3e36af) * [OCPBUGS-74267](https://issues.redhat.com/browse/OCPBUGS-74267): release-4.21 fix(localnet, ipamless): Prevent LSP deletion on sync [#2940](https://github.com/openshift/ovn-kubernetes/pull/2940) * [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/25a714b82c643bcfdf5543cb467afa32dac06787...190e114128b9f358d1d6a700c464797d4c3e36af) ### [tests](https://github.com/openshift/origin/tree/543318f8cf72a7f66bb4a154996c99d389b92df2) * [OCPBUGS-74499](https://issues.redhat.com/browse/OCPBUGS-74499): Update MCN tests to better handle condition transitions through the "Unknown" state [#30729](https://github.com/openshift/origin/pull/30729) * [OCPBUGS-74503](https://issues.redhat.com/browse/OCPBUGS-74503): VsphereConfigurationTestsRollOutTooOften event matcher should use broader regex [#30730](https://github.com/openshift/origin/pull/30730) * [OCPBUGS-74372](https://issues.redhat.com/browse/OCPBUGS-74372): Add/RemoveSigtermProtection event matcher for SigstoreImageVerification test [#30723](https://github.com/openshift/origin/pull/30723) * [Full changelog](https://github.com/openshift/origin/compare/4325b39e975f0b3efa9f683182dbb17e53bbd649...543318f8cf72a7f66bb4a154996c99d389b92df2)