# 4.21.0-okd-scos.ec.12

Created: 2025-12-05 11:50:59 +0000 UTC

Image Digest: `sha256:83690f1283b0a70b5590a19c5613bbd7e846f4c02ca4a874da5bdb6ba4d8faff`

Promoted from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2025-12-04-230542


## Changes from 4.21.0-okd-scos.ec.11

### Components

* Kubectl 1.34.1
* Kubernetes 1.34.2
* Kubernetes Tests 1.34.1
* CentOS Stream CoreOS 10.0.20251113-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| DynamicResourceAllocation <br/> (0 tests)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed)| Unconditionally Enabled<br/>(Changed) |


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/8d02b48718f9425b9caabb923a2f21c1de0496b5)

* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.16, 4.17, 4.19, 4.12 [#8477](https://github.com/openshift/assisted-service/pull/8477)
* [MGMT-22078](https://issues.redhat.com/browse/MGMT-22078): Add readOnlyRootFilesystem to assisted-service template [#8229](https://github.com/openshift/assisted-service/pull/8229)
* NO-ISSUE: Update module github.com/golangci/golangci-lint to v1.64.8 [#8464](https://github.com/openshift/assisted-service/pull/8464)
* [Full changelog](https://github.com/openshift/assisted-service/compare/7c0f8bdffaea157c3cf8246a264f4bc476f7ddca...8d02b48718f9425b9caabb923a2f21c1de0496b5)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/79093911c4613f9aa916b552a6376f3e38e3cbc1)

* [AGENT-1216](https://issues.redhat.com/browse/AGENT-1216): support new HostStage (HostStageCopyingRegistryDataToDisk) [#1384](https://github.com/openshift/assisted-installer/pull/1384)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/74e27dc5295e4dd0af3dea9875957b32f17f7aa8...79093911c4613f9aa916b552a6376f3e38e3cbc1)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/43927aaeb741fefda7299d0615abb8b6ac26dbcc)

* [AGENT-1378](https://issues.redhat.com/browse/AGENT-1378): Add additional operators [#201](https://github.com/openshift/agent-installer-utils/pull/201)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/e99b980bc6f1bf66cb16333b9a7269158b7fa948...43927aaeb741fefda7299d0615abb8b6ac26dbcc)


### [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws/tree/ff9c8d4e8fdc55d3e60c6add0942c018826ae870)

* [AUTOSCALE-446](https://issues.redhat.com/browse/AUTOSCALE-446): Rebase to 1.4.2 to match Hypershift dependencies [#20](https://github.com/openshift/aws-karpenter-provider-aws/pull/20)
* [Full changelog](https://github.com/openshift/aws-karpenter-provider-aws/compare/3fcdd6f905e505c998fb1a9a513313a52d5d6eca...ff9c8d4e8fdc55d3e60c6add0942c018826ae870)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/ed9f97286fe04be5c5bd252419803e0017c887c6)

* [OCPCLOUD-3101](https://issues.redhat.com/browse/OCPCLOUD-3101): Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:main (e695d87) into master [#354](https://github.com/openshift/cluster-api-provider-azure/pull/354)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/b7682c874dc67d46a8b430f841cf9cd2faaf184f...ed9f97286fe04be5c5bd252419803e0017c887c6)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/b35dbe664be1c5e57be99a4a950fbee0844fc799)

* [CORS-4212](https://issues.redhat.com/browse/CORS-4212): AWS: Add the ability to configure throughput on GP3 volumes [#10132](https://github.com/openshift/installer/pull/10132)
* [OCPBUGS-63710](https://issues.redhat.com/browse/OCPBUGS-63710): PowerVS: Fix all zones invalid in lon region [#10135](https://github.com/openshift/installer/pull/10135)
* [OCPBUGS-65512](https://issues.redhat.com/browse/OCPBUGS-65512): Removing resources on destroy by other filters [#10100](https://github.com/openshift/installer/pull/10100)
* NO-JIRA: bump capa to latest upstream version [#10122](https://github.com/openshift/installer/pull/10122)
* [MULTIARCH-5817](https://issues.redhat.com/browse/MULTIARCH-5817): Upgrade az version in upi-installer image to fix 'az sig image-version create' issue [#10067](https://github.com/openshift/installer/pull/10067)
* [OPNET-678](https://issues.redhat.com/browse/OPNET-678): Allow disabling internal DNS [#9924](https://github.com/openshift/installer/pull/9924)
* no-jira: Upgrade GolangCI-lint to v2 [#10121](https://github.com/openshift/installer/pull/10121)
* [AGENT-1326](https://issues.redhat.com/browse/AGENT-1326), [MCO-1961](https://issues.redhat.com/browse/MCO-1961): copy image-references for machine-config-controller bootstrap [#10134](https://github.com/openshift/installer/pull/10134)
* [OCPBUGS-60765](https://issues.redhat.com/browse/OCPBUGS-60765): Bump capv to v1.14.0 [#10120](https://github.com/openshift/installer/pull/10120)
* [OCPBUGS-62790](https://issues.redhat.com/browse/OCPBUGS-62790): Use separate tmpfs for ostree checkout on live ISO [#10133](https://github.com/openshift/installer/pull/10133)
* [OCPBUGS-60071](https://issues.redhat.com/browse/OCPBUGS-60071): abort uninstall process if owned subnets contain shared tags [#9942](https://github.com/openshift/installer/pull/9942)
* [MULTIARCH-5553](https://issues.redhat.com/browse/MULTIARCH-5553): PowerVS: Introduce group division [#10095](https://github.com/openshift/installer/pull/10095)
* [Full changelog](https://github.com/openshift/installer/compare/7d0584e62b967720dcab7962761d45407a8e47d1...b35dbe664be1c5e57be99a4a950fbee0844fc799)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/345800dc3c4164fbca313c1cbfb383f262547903)

* [OCPBUGS-65925](https://issues.redhat.com/browse/OCPBUGS-65925): Fall back to simpler behavior, if setsid,ps,pkill are not installed [#2153](https://github.com/openshift/oc/pull/2153)
* [Full changelog](https://github.com/openshift/oc/compare/fceda801d53976068ddc56ac642c7fd4bd47f5de...345800dc3c4164fbca313c1cbfb383f262547903)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/e6c52f89298cb0720ce7fb88aced4c35562907e9)

* [OCPBUGS-65675](https://issues.redhat.com/browse/OCPBUGS-65675): externaloidc: return errors when node statuses cannot be used to determine oidc state [#801](https://github.com/openshift/cluster-authentication-operator/pull/801)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/f1d91ed2f3cc037123ed511b98610566029995e0...e6c52f89298cb0720ce7fb88aced4c35562907e9)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/2c32e2e43d1b1160a279321181a19a60bbd95590)

* [OCPBUGS-66144](https://issues.redhat.com/browse/OCPBUGS-66144): Enable readOnlyRootFS flag for machine-os-images container [#533](https://github.com/openshift/cluster-baremetal-operator/pull/533)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/b3c03b08079866c9a521468963af7e40d3b37a17...2c32e2e43d1b1160a279321181a19a60bbd95590)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/7daa198ff9cf603556c46d974b775ee132cf08d3)

* [OCPCLOUD-3104](https://issues.redhat.com/browse/OCPCLOUD-3104): Merge https://github.com/kubernetes-sigs/cluster-api:v1.11.3 (7b1cf36) into master [#243](https://github.com/openshift/cluster-api/pull/243)
* [Full changelog](https://github.com/openshift/cluster-api/compare/29f3510b6eafd2c817d91437979ec6bd6ec363a4...7daa198ff9cf603556c46d974b775ee132cf08d3)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/f38dd31b912e3351680399c1bb76c5fdb45c8308)

* [OCPCLOUD-3105](https://issues.redhat.com/browse/OCPCLOUD-3105): Bump CAPI to v1.11 and Providers [#417](https://github.com/openshift/cluster-capi-operator/pull/417)
* [OSASINFRA-3960](https://issues.redhat.com/browse/OSASINFRA-3960): Migrate OpenStack InfraCluster controller in-tree [#411](https://github.com/openshift/cluster-capi-operator/pull/411)
* NO-JIRA: Set scheme during AWSCluster conversion [#418](https://github.com/openshift/cluster-capi-operator/pull/418)
* [OCPCLOUD-2997](https://issues.redhat.com/browse/OCPCLOUD-2997): Disallow authoritativeAPI swap when CAPI Machine is deleting or its infra is not ready [#408](https://github.com/openshift/cluster-capi-operator/pull/408)
* [OCPCLOUD-3104](https://issues.redhat.com/browse/OCPCLOUD-3104): machinesync: add compatibility for v1beta2 when syncing CAPI to MAPI [#416](https://github.com/openshift/cluster-capi-operator/pull/416)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/3d0f9cd4dcdfa74a11a172d027dbe6af8bbdfb33...f38dd31b912e3351680399c1bb76c5fdb45c8308)


### [cluster-config-api](https://github.com/openshift/api/tree/68ce3d906ec881fda9f898f0a9fd5ee589cf644c)

* [MCO-2005](https://issues.redhat.com/browse/MCO-2005): Include missing OSImageStream TP CRDs [#2612](https://github.com/openshift/api/pull/2612)
* AGENTS: Using API_GROUP_VERSIONS generates incorrect openapi [#2575](https://github.com/openshift/api/pull/2575)
* [AGENT-1385](https://issues.redhat.com/browse/AGENT-1385): Adding missing status field for InternalReleaseImage [#2611](https://github.com/openshift/api/pull/2611)
* [OCPNODE-3779](https://issues.redhat.com/browse/OCPNODE-3779), [OCPNODE-3894](https://issues.redhat.com/browse/OCPNODE-3894), [OCPNODE-3895](https://issues.redhat.com/browse/OCPNODE-3895): Enable DRA(DynamicResourceAllocation) featuregate by default [#2498](https://github.com/openshift/api/pull/2498)
* Revert "Merge pull request #2448 from opokornyy/CCXDEV-15259-io-v1" [#2608](https://github.com/openshift/api/pull/2608)
* [Full changelog](https://github.com/openshift/api/compare/0e3c378fdedc66b10e3c1f76d3a3a40ba8b3e73c...68ce3d906ec881fda9f898f0a9fd5ee589cf644c)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/0dd541084bee8885dbd14dcd6eb2f826ba779883)

* [OCPBUGS-65474](https://issues.redhat.com/browse/OCPBUGS-65474): Add ClusterRole and other related objects to ClusterOperator relatedObjects [#258](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/258)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/40c913a6a7745310e443592ba8d4cddd76176e09...0dd541084bee8885dbd14dcd6eb2f826ba779883)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/2e46bfdf639578074b824bd63eaf3ab8b1cc14ea)

* [CNTRLPLANE-1791](https://issues.redhat.com/browse/CNTRLPLANE-1791): bump k8s 1.34 [#1517](https://github.com/openshift/cluster-etcd-operator/pull/1517)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/57c4cb5e62aae7b8892ce6f9ef73e300cf22bf3d...2e46bfdf639578074b824bd63eaf3ab8b1cc14ea)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/b2dfc3bba3dfd8dba90918a4a3be74deb3c548dd)

* [CNTRLPLANE-1683](https://issues.redhat.com/browse/CNTRLPLANE-1683): set up openshift-tests-extension for cluster-image-registry-operator: refactor: simplified single-module OTE infrastructure [#1269](https://github.com/openshift/cluster-image-registry-operator/pull/1269)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/86f6c0849bc7b6e9946411f6d39a183cfcaaef39...b2dfc3bba3dfd8dba90918a4a3be74deb3c548dd)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/4f59ea50a588e9afa714e30e7502eca8b570751b)

* [OCPBUGS-60572](https://issues.redhat.com/browse/OCPBUGS-60572): Use BoundServceAccountTokenVolume dy default [#571](https://github.com/openshift/cluster-kube-scheduler-operator/pull/571)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/1a7d7081e8fcf1681370afdb4f649bf9cd428c12...4f59ea50a588e9afa714e30e7502eca8b570751b)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/8a42beebd580bd2e241aa6d93860c09e907f2407)

* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): Refactor OTE to single-module architecture [#133](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/133)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/194b0498b61d1774382c8bb006e59c13c93ee7cf...8a42beebd580bd2e241aa6d93860c09e907f2407)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/ab7a74aaad54aa18bf863d86d5b7c9f9e2337ce9)

* NO-ISSUE: ensure CMO and its operands pods have the app.kubernetes.io/part-of: openshift-monitoring label [#2771](https://github.com/openshift/cluster-monitoring-operator/pull/2771)
* NO-ISSUE: Migrate away from deprecated ioutil [#2754](https://github.com/openshift/cluster-monitoring-operator/pull/2754)
* NO-ISSUE: rename manifests_test package to manifests [#2768](https://github.com/openshift/cluster-monitoring-operator/pull/2768)
* [MON-4436](https://issues.redhat.com/browse/MON-4436): Drop CHANGELOG.md [#2755](https://github.com/openshift/cluster-monitoring-operator/pull/2755)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2767](https://github.com/openshift/cluster-monitoring-operator/pull/2767)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/1cf49f5ad4980e16a20a1609104f1a91965322e4...ab7a74aaad54aa18bf863d86d5b7c9f9e2337ce9)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/8bd3f1c3ea6055a49c14ece00a5b8779a100fc5d)

* [OCPBUGS-63443](https://issues.redhat.com/browse/OCPBUGS-63443): Fix whereabouts-token-watcher DaemonSet improvements [#2841](https://github.com/openshift/cluster-network-operator/pull/2841)
* [OCPBUGS-56173](https://issues.redhat.com/browse/OCPBUGS-56173): Align frrk8s to upstream [#2833](https://github.com/openshift/cluster-network-operator/pull/2833)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/a3935d67a4da2f90e3e09040245f2d856cf42325...8bd3f1c3ea6055a49c14ece00a5b8779a100fc5d)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/629b12f1e8d32e6163f386ef12c5c7f40adb8434)

* [OCPBUGS-66214](https://issues.redhat.com/browse/OCPBUGS-66214): Add support for lscpu_check TuneD built-in [#1439](https://github.com/openshift/cluster-node-tuning-operator/pull/1439)
* [OCPBUGS-55399](https://issues.redhat.com/browse/OCPBUGS-55399): : Fix metrics for HyperShift [#1438](https://github.com/openshift/cluster-node-tuning-operator/pull/1438)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/dae717e6e565fe7d314dcffe762044a133ca5de6...629b12f1e8d32e6163f386ef12c5c7f40adb8434)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/f721e1a71c6389a61696fbed76e3c6c52e26b7c6)

* NO-ISSUE: add jiazha as approver [#153](https://github.com/openshift/cluster-olm-operator/pull/153)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/b4a84bdac3861b7edb79c4ced13ef6510ac17966...f721e1a71c6389a61696fbed76e3c6c52e26b7c6)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/d4cb3b0234b6dbc3cbf72aa9cbbd42345ac09ff2)

* [OCPBUGS-66215](https://issues.redhat.com/browse/OCPBUGS-66215): update o/api vendoring [#1269](https://github.com/openshift/cluster-version-operator/pull/1269)
* [OCPBUGS-60568](https://issues.redhat.com/browse/OCPBUGS-60568): lib/resourcemerge: Add support for automountServiceAccountToken [#1264](https://github.com/openshift/cluster-version-operator/pull/1264)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/85a076c29e2ed525cd6bbfc76869689e9e6247a8...d4cb3b0234b6dbc3cbf72aa9cbbd42345ac09ff2)


### [console](https://github.com/openshift/console/tree/a1ba7dd2e76dfb35ddc0445a0cb4938d2024ebfe)

* [OCPBUGS-66345](https://issues.redhat.com/browse/OCPBUGS-66345): Fix broken API exports [#15802](https://github.com/openshift/console/pull/15802)
* NO-JIRA: Add Claude Code /test with arguments (frontend, backend, unit, all) [#15613](https://github.com/openshift/console/pull/15613)
* [OCPBUGS-65804](https://issues.redhat.com/browse/OCPBUGS-65804): Update client initialization in checkPackageManifestHandler [#15746](https://github.com/openshift/console/pull/15746)
* [OCPBUGS-63401](https://issues.redhat.com/browse/OCPBUGS-63401): Fix Pod selector links not navigating on Search page [#15770](https://github.com/openshift/console/pull/15770)
* [OCPBUGS-60141](https://issues.redhat.com/browse/OCPBUGS-60141): Prevent the Software Catalog from reseting its scroll position, when closing the details view modal [#15667](https://github.com/openshift/console/pull/15667)
* [OCPBUGS-63457](https://issues.redhat.com/browse/OCPBUGS-63457): Runtime error on switching to form view after invalid 'metrics' field on add/edit HPA yaml view page [#15788](https://github.com/openshift/console/pull/15788)
* [OCPBUGS-65890](https://issues.redhat.com/browse/OCPBUGS-65890): redirect catalog traffic as needed [#15764](https://github.com/openshift/console/pull/15764)
* [OCPBUGS-62261](https://issues.redhat.com/browse/OCPBUGS-62261): Remove unwanted semicolon from Serverless Channel and Broker list [#15785](https://github.com/openshift/console/pull/15785)
* [CONSOLE-4701](https://issues.redhat.com/browse/CONSOLE-4701): add e2e tests for yaml editor theme and font settings [#15783](https://github.com/openshift/console/pull/15783)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/d7813a456c3666898fc1970b9656683d0a648f01...a1ba7dd2e76dfb35ddc0445a0cb4938d2024ebfe)


### [console-operator](https://github.com/openshift/console-operator/tree/ddd58f54960efd2176a3064cbaeb9744f124508e)

* [OCPBUGS-64685](https://issues.redhat.com/browse/OCPBUGS-64685): Dont report Progressing status when operands arew being reconciled [#1074](https://github.com/openshift/console-operator/pull/1074)
* [OCPBUGS-62126](https://issues.redhat.com/browse/OCPBUGS-62126): Update perspective name from Administrator to Core platform in quickstarts [#1076](https://github.com/openshift/console-operator/pull/1076)
* [OCPBUGS-65880](https://issues.redhat.com/browse/OCPBUGS-65880): Reset StorageVersionMigrationDegraded condition [#1071](https://github.com/openshift/console-operator/pull/1071)
* [Full changelog](https://github.com/openshift/console-operator/compare/24ba957b7c3bb9dd6a526eb123f8518b7bd91a73...ddd58f54960efd2176a3064cbaeb9744f124508e)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/41bfe595bd316af726e1de18f3c32767cd7ac30f)

* [OCPCLOUD-3103](https://issues.redhat.com/browse/OCPCLOUD-3103): Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0-beta.0 (3b04ea4) into master [#253](https://github.com/openshift/cluster-api-provider-gcp/pull/253)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/22eb42731e57f7f3d9794f9da5aded48c7e82d87...41bfe595bd316af726e1de18f3c32767cd7ac30f)


### [haproxy-router](https://github.com/openshift/router/tree/b231c65b5c06c1f74590ca8e77caecc6213beb6a)

* [OCPBUGS-49908](https://issues.redhat.com/browse/OCPBUGS-49908): dynamicallyReplaceEndpoints: Check for idled svc [#685](https://github.com/openshift/router/pull/685)
* [Full changelog](https://github.com/openshift/router/compare/0e388de223c63d7ea8e735c9bfaa05be2cc01717...b231c65b5c06c1f74590ca8e77caecc6213beb6a)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/0987ea121e432412b7582943a195708e67e0a38f)

* [OCPBUGS-61376](https://issues.redhat.com/browse/OCPBUGS-61376): Introduce HPA OTE suite [#2526](https://github.com/openshift/kubernetes/pull/2526)
* [Full changelog](https://github.com/openshift/kubernetes/compare/e98e941a29558dd88e3a0df1c132d2968b5de793...0987ea121e432412b7582943a195708e67e0a38f)


### [hypershift](https://github.com/openshift/hypershift/tree/611d98eccd254af41deaf97babeb2d7f113e7d2a)

* [CNTRLPLANE-2049](https://issues.redhat.com/browse/CNTRLPLANE-2049): chore(lint): remove unused exclusion rules [#7333](https://github.com/openshift/hypershift/pull/7333)
* NO-JIRA: docs(azure): standardize credential file naming and improve script va… [#7213](https://github.com/openshift/hypershift/pull/7213)
* [OCPBUGS-66067](https://issues.redhat.com/browse/OCPBUGS-66067): fix(kas): apply LoadBalancerSourceRanges only for LoadBalancer service type [#7298](https://github.com/openshift/hypershift/pull/7298)
* [CNTRLPLANE-1814](https://issues.redhat.com/browse/CNTRLPLANE-1814): Add support for setting max expiration duration for KAS service account tokens [#7310](https://github.com/openshift/hypershift/pull/7310)
* NO-JIRA: feat(aws): add shared-role support for IAM operations [#7331](https://github.com/openshift/hypershift/pull/7331)
* [CNTRLPLANE-1693](https://issues.redhat.com/browse/CNTRLPLANE-1693): Implement hypershift create oadp-schedule command and some enhancements [#7280](https://github.com/openshift/hypershift/pull/7280)
* [GCP-181](https://issues.redhat.com/browse/GCP-181): add infrastructure create and destroy CLI commands for GCP [#7290](https://github.com/openshift/hypershift/pull/7290)
* [GCP-231](https://issues.redhat.com/browse/GCP-231): feat(api): add GCP Workload Identity Federation types and validation [#7285](https://github.com/openshift/hypershift/pull/7285)
* NO-JIRA: docs(aws): migrate getting-started to STS-based authentication [#7321](https://github.com/openshift/hypershift/pull/7321)
* [OCPBUGS-61296](https://issues.redhat.com/browse/OCPBUGS-61296): Override CPO for 4.17.20-4.17.43 with 4.17.44 image [#7319](https://github.com/openshift/hypershift/pull/7319)
* [CNTRLPLANE-1857](https://issues.redhat.com/browse/CNTRLPLANE-1857): feat(contrib): add cleanzones-azure tool for orphaned DNS cleanup [#7312](https://github.com/openshift/hypershift/pull/7312)
* [CNTRLPLANE-2152](https://issues.redhat.com/browse/CNTRLPLANE-2152): chore: override capi images [#7320](https://github.com/openshift/hypershift/pull/7320)
* NO-JIRA: Update expected digest for busybox:latest in TestGetDigest [#7322](https://github.com/openshift/hypershift/pull/7322)
* NO-JIRA: feat(owners): add automated platform labeling [#7296](https://github.com/openshift/hypershift/pull/7296)
* [OCPBUGS-63717](https://issues.redhat.com/browse/OCPBUGS-63717): Fix flaky EnsureGlobalPullSecret test race condition [#7294](https://github.com/openshift/hypershift/pull/7294)
* [CNTRLPLANE-1262](https://issues.redhat.com/browse/CNTRLPLANE-1262): build(tools): upgrade golangci-lint to v2.6.2 [#7268](https://github.com/openshift/hypershift/pull/7268)
* [Full changelog](https://github.com/openshift/hypershift/compare/94da89796abfc82cfa5af944d4da3ad57fb488a8...611d98eccd254af41deaf97babeb2d7f113e7d2a)


### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/64c2e90e3992c3c1aa761e1b5a20bd6d307d651f)

* [OCPCLOUD-3099](https://issues.redhat.com/browse/OCPCLOUD-3099): Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.12.0 (2c7ff37) into main [#127](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/127)
* [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/7f6b8d6a00a60d3c46a6d26c66da9f2edfc4d639...64c2e90e3992c3c1aa761e1b5a20bd6d307d651f)


### [insights-operator](https://github.com/openshift/insights-operator/tree/80c1cfc7e694e82609701618e22c76559a6a9ced)

* [CCXDEV-15393](https://issues.redhat.com/browse/CCXDEV-15393): Refactor network anonymization [#1149](https://github.com/openshift/insights-operator/pull/1149)
* [Full changelog](https://github.com/openshift/insights-operator/compare/5b0bffd5526017ad2e2eb609a62c1b4ad7ccd53a...80c1cfc7e694e82609701618e22c76559a6a9ced)


### [ironic](https://github.com/openshift/ironic-image/tree/53cde21074b19cd3690ae82818bbba8736c48858)

* [METAL-1695](https://issues.redhat.com/browse/METAL-1695): OKD: install Ironic from the OpenShift fork [#739](https://github.com/openshift/ironic-image/pull/739)
* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#732](https://github.com/openshift/ironic-image/pull/732)
* [METAL-1659](https://issues.redhat.com/browse/METAL-1659): Run EFI build loop based on actual arch [#737](https://github.com/openshift/ironic-image/pull/737)
* [METAL-1685](https://issues.redhat.com/browse/METAL-1685): Split setup for OKD [#735](https://github.com/openshift/ironic-image/pull/735)
* [Full changelog](https://github.com/openshift/ironic-image/compare/9ea38ab17af89e0a5a4c9cb54dfca2c820cc32d1...53cde21074b19cd3690ae82818bbba8736c48858)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/c4ca6cc402335d9470456d5e2b56e4ff696119d7)

* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#218](https://github.com/openshift/ironic-agent-image/pull/218)
* [METAL-1685](https://issues.redhat.com/browse/METAL-1685): Split setup for OKD [#219](https://github.com/openshift/ironic-agent-image/pull/219)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/8e5190ee9af930315a70d4ea98df4f901d2c1bb1...c4ca6cc402335d9470456d5e2b56e4ff696119d7)


### [machine-api-operator](https://github.com/openshift/machine-api-operator/tree/1e243fb6a56cd54ad2b7ce66cad9bacef7c271f6)

* [OCPBUGS-66244](https://issues.redhat.com/browse/OCPBUGS-66244): default Azure to marketplace image [#1441](https://github.com/openshift/machine-api-operator/pull/1441)
* [Full changelog](https://github.com/openshift/machine-api-operator/compare/85c00c0d525fe75683afced6cfed878b3414bc7a...1e243fb6a56cd54ad2b7ce66cad9bacef7c271f6)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/e20606396d8eb0ead725f804fcb42f4a7d1c6ad6)

* [OCPBUGS-59925](https://issues.redhat.com/browse/OCPBUGS-59925): Fix keepalived SIGTERM handling [#5403](https://github.com/openshift/machine-config-operator/pull/5403)
* [OCPBUGS-66314](https://issues.redhat.com/browse/OCPBUGS-66314): Add hostIP 127.0.0.1 to machine-config-daemon port 8798 [#5456](https://github.com/openshift/machine-config-operator/pull/5456)
* NO-ISSUE: fix-up for ami collection script [#5464](https://github.com/openshift/machine-config-operator/pull/5464)
* [MCO-1999](https://issues.redhat.com/browse/MCO-1999): align extended tests code with private repo. Pointers and pe… [#5453](https://github.com/openshift/machine-config-operator/pull/5453)
* [MCO-1961](https://issues.redhat.com/browse/MCO-1961): OSImageStream follow up [#5458](https://github.com/openshift/machine-config-operator/pull/5458)
* [AGENT-1326](https://issues.redhat.com/browse/AGENT-1326): Add InternalReleaseImage controller [#5452](https://github.com/openshift/machine-config-operator/pull/5452)
* [OCPBUGS-65959](https://issues.redhat.com/browse/OCPBUGS-65959): Revert "OCPBUGS-50492: Add kube_rbac_proxy service" [#5445](https://github.com/openshift/machine-config-operator/pull/5445)
* [MCO-1961](https://issues.redhat.com/browse/MCO-1961): Add the OSImageStream Controller [#5457](https://github.com/openshift/machine-config-operator/pull/5457)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/efc86f6985872ee87fe3b84140afd4caa0528e94...e20606396d8eb0ead725f804fcb42f4a7d1c6ad6)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/49f7b2e1d0aa19e1623c9ae437d819baee85d7a9)

* [OCPBUGS-57307](https://issues.redhat.com/browse/OCPBUGS-57307): Time range and Refresh interval dropdown button lack of unique identifier [#663](https://github.com/openshift/monitoring-plugin/pull/663)
* [OCPBUGS-66064](https://issues.redhat.com/browse/OCPBUGS-66064): configure max TLS version only when specified [#660](https://github.com/openshift/monitoring-plugin/pull/660)
* [OU-1086](https://issues.redhat.com/browse/OU-1086): monitoring tests reflecting namespace level [#659](https://github.com/openshift/monitoring-plugin/pull/659)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/2fd214b82f71a4f19d1368c46e99f78df12f1f64...49f7b2e1d0aa19e1623c9ae437d819baee85d7a9)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/d95feb67adfb97346849c79e36b6a9d404296ae9)

* [CORENET-6497](https://issues.redhat.com/browse/CORENET-6497): Upstream sync for kube rebase 1.34 [#112](https://github.com/openshift/multus-admission-controller/pull/112)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/6284bf7d0e3163a827aff46afe1df285fbeab135...d95feb67adfb97346849c79e36b6a9d404296ae9)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/297eeb4320e07b18d559bc373b665479c760e8c7)

* [OCPBUGS-66239](https://issues.redhat.com/browse/OCPBUGS-66239): disable DependaBot downstream [#105](https://github.com/openshift/bond-cni/pull/105)
* [Full changelog](https://github.com/openshift/bond-cni/compare/8bdeb1b47598f74f713ca8898734e4354e36637c...297eeb4320e07b18d559bc373b665479c760e8c7)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/73ba9fd48179b5b28aa445dd2f63f364679ef29e)

* [OCPBUGS-60823](https://issues.redhat.com/browse/OCPBUGS-60823): fix flickerying in synced editor [#303](https://github.com/openshift/networking-console-plugin/pull/303)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/156e8248c5aa1071a4294fadf76114a814e73baf...73ba9fd48179b5b28aa445dd2f63f364679ef29e)


### [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix/tree/33b7bec6fe27b8d126982a70b4579112cd67052b)

* [OCPCLOUD-3096](https://issues.redhat.com/browse/OCPCLOUD-3096): Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (810c3de) into main [#52](https://github.com/openshift/cloud-provider-nutanix/pull/52)
* [Full changelog](https://github.com/openshift/cloud-provider-nutanix/compare/30e83e611c277c0fe5a633a5c3e6f8d5af212aa6...33b7bec6fe27b8d126982a70b4579112cd67052b)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/cbbc65cbccd8d4955ed2c0b6937e7cb31d32c1b1)

* [TRT-2460](https://issues.redhat.com/browse/TRT-2460): Disable upstream PodDisruptionBudget [#574](https://github.com/openshift/operator-framework-operator-controller/pull/574)
* NO-ISSUE: Synchronize From Upstream Repositories [#572](https://github.com/openshift/operator-framework-operator-controller/pull/572)
* NO-ISSUE: Synchronize From Upstream Repositories [#570](https://github.com/openshift/operator-framework-operator-controller/pull/570)
* [OCPQE-31063](https://issues.redhat.com/browse/OCPQE-31063): add agent for olmv1 qe cases [#571](https://github.com/openshift/operator-framework-operator-controller/pull/571)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/c51b19bf149bb1291921d9eb0f96a80cd208f8d3...cbbc65cbccd8d4955ed2c0b6937e7cb31d32c1b1)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/c346ef2f544a6bbfce31c3feb407a65ba296b40b)

* [CNTRLPLANE-1676](https://issues.redhat.com/browse/CNTRLPLANE-1676): Rebase k8s 1.34 [#423](https://github.com/openshift/openshift-controller-manager/pull/423)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/433bd500afb879dd82e27336359cd4e3051245b0...c346ef2f544a6bbfce31c3feb407a65ba296b40b)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/f338c9c5144437628fe201510b193e8465c34828)

* [OCPBUGS-65712](https://issues.redhat.com/browse/OCPBUGS-65712): Re-vendor CAPO [#140](https://github.com/openshift/machine-api-provider-openstack/pull/140)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/2011501b227250ea1ee403b6a93aa4d17dd19ad1...f338c9c5144437628fe201510b193e8465c34828)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/7d2dd62c2a73b66aa99e82c90f64ab53dd523ddf)

* NO-ISSUE: re-apply enhance oc case to apply for metal step [#1167](https://github.com/openshift/operator-framework-olm/pull/1167)
* Trt-2457: olm subscription revert [#1165](https://github.com/openshift/operator-framework-olm/pull/1165)
* [OCPQE-30680](https://issues.redhat.com/browse/OCPQE-30680): migrate ocp-43975 to OTE [#1162](https://github.com/openshift/operator-framework-olm/pull/1162)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/b14da27dd07134140ea57c4cdb506013599a1416...7d2dd62c2a73b66aa99e82c90f64ab53dd523ddf)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/25a714b82c643bcfdf5543cb467afa32dac06787)

* [CORENET-6352](https://issues.redhat.com/browse/CORENET-6352), [OCPBUGS-61378](https://issues.redhat.com/browse/OCPBUGS-61378): DownStream Merge [12-02-2025] [#2887](https://github.com/openshift/ovn-kubernetes/pull/2887)
* [OCPBUGS-61742](https://issues.redhat.com/browse/OCPBUGS-61742), [OCPBUGS-62013](https://issues.redhat.com/browse/OCPBUGS-62013): DownStream Merge [11-19-2025] [#2864](https://github.com/openshift/ovn-kubernetes/pull/2864)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/6fab57dcf4bdabe77a1da826f32252767049bfb0...25a714b82c643bcfdf5543cb467afa32dac06787)


### [tests](https://github.com/openshift/origin/tree/fde4688ddacf85f45b5f618d8a0e00e2ae8be670)

* [OCPBUGS-66060](https://issues.redhat.com/browse/OCPBUGS-66060): update watch request limits for marketplace-operator [#30564](https://github.com/openshift/origin/pull/30564)
* [TRT-2458](https://issues.redhat.com/browse/TRT-2458): Revert #30262 "CNTRLPLANE-1437: add monitor test for checking default service account in pods" [#30557](https://github.com/openshift/origin/pull/30557)
* NO-JIRA: Remove the exception for CO/control-plane-machine-set's Available=False [#30555](https://github.com/openshift/origin/pull/30555)
* NO-JIRA: Track CO/image-registry's Available=False issue [#30549](https://github.com/openshift/origin/pull/30549)
* "NO-ISSUE: Replace MCO-1447 with OCPBUGS-66209" [#30548](https://github.com/openshift/origin/pull/30548)
* [OCPEDGE-2159](https://issues.redhat.com/browse/OCPEDGE-2159): [TNF] cert rotation validation in degraded mode [#30545](https://github.com/openshift/origin/pull/30545)
* [CNTRLPLANE-1437](https://issues.redhat.com/browse/CNTRLPLANE-1437): add monitor test for checking default service account in pods [#30262](https://github.com/openshift/origin/pull/30262)
* [Full changelog](https://github.com/openshift/origin/compare/2f9a7a1982f57c0f4a0d766f8fe6fb86ca555eb6...fde4688ddacf85f45b5f618d8a0e00e2ae8be670)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/6626b2998e29189d1ff031c0a589f9c3413feac4)

* [OCPCLOUD-3100](https://issues.redhat.com/browse/OCPCLOUD-3100): Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.14.0 (57a59ca) into master [#60](https://github.com/openshift/cluster-api-provider-vsphere/pull/60)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/bb598980bdac48449b7fe817a99b546586fd1c19...6626b2998e29189d1ff031c0a589f9c3413feac4)