# 4.22.0-okd-scos.ec.16

Created: 2026-05-07 20:51:31 +0000 UTC

Image Digest: `sha256:aa44891fd5c0a549c1beeec7d0eb89e1bc5c354d3f59f75adae89a807ea33414`

Promoted from registry.ci.openshift.org/origin/release-scos:4.22.0-0.okd-scos-nightly-2026-05-07-010630


## Changes from 4.22.0-okd-scos.ec.15

### Components

* Kubectl 1.35.2
* Kubernetes upgraded from 1.35.3 to 1.35.4
* Kubernetes Tests 1.35.1
* CentOS Stream CoreOS 10 10.0.20260428-0


### Rebuilt images without code change

* [baremetal-installer](https://github.com/openshift/installer) git [b8a967b9](https://github.com/openshift/installer/commit/b8a967b9336275a333e96a658dcccebbc0fb8fea) `sha256:b658827efbf5dbf970a2f48df0c38201b038c30fb07d71febdd63b8c749d7bb4`


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/113794d5b89d0caa153fe763d42627cfe0c2f845)

* [OCPBUGS-84141](https://issues.redhat.com/browse/OCPBUGS-84141): Update 4.22 Konflux files [#295](https://github.com/openshift/agent-installer-utils/pull/295)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/1f7abf3147e6ba2f9d29ae469fdde2c4240d6de5...113794d5b89d0caa153fe763d42627cfe0c2f845)


### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/1a0ccbcfc0a7dc06f3a494f0e2b78aa0a0256b9c)

* [OCPBUGS-85125](https://issues.redhat.com/browse/OCPBUGS-85125): Fixed broken test and simplified some logic [#184](https://github.com/openshift/machine-api-provider-aws/pull/184)
* [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/37a067230cbad4997dcf1d2c16685e36b6991c9e...1a0ccbcfc0a7dc06f3a494f0e2b78aa0a0256b9c)


### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/b44d444422f5a7eb21b9ca65f3975a2d13ec9b36)

* [OCPBUGS-83879](https://issues.redhat.com/browse/OCPBUGS-83879): Bump grpc package for CVE fix in 4.22 [#27](https://github.com/openshift/azure-service-operator/pull/27)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/657efd8cb5f54a1a706e28869e492c3157e419b8...b44d444422f5a7eb21b9ca65f3975a2d13ec9b36)


### [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity/tree/a8fb3bf1a6296d6cbf69142db458aa9b59cb3a45)

* [OCPBUGS-84394](https://issues.redhat.com/browse/OCPBUGS-84394): github.com/go-jose/go-jose/v4 v4.1.4 [#47](https://github.com/openshift/azure-workload-identity/pull/47)
* [Full changelog](https://github.com/openshift/azure-workload-identity/compare/81a256e668a054385d4a27a393afd77148f268b0...a8fb3bf1a6296d6cbf69142db458aa9b59cb3a45)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/c23bddf58e561b725ab5eb012252091e7a472084)

* [OCPBUGS-84398](https://issues.redhat.com/browse/OCPBUGS-84398): github.com/go-jose/go-jose/v4 v4.1.4 [#1020](https://github.com/openshift/cloud-credential-operator/pull/1020)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/ed3e18ed8899d7f74f69ede73f3b587558c9cdde...c23bddf58e561b725ab5eb012252091e7a472084)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/20e02b519a694fee38169221eeb8e6bfa421539b)

* [OCPBUGS-84954](https://issues.redhat.com/browse/OCPBUGS-84954): Fix terminationMessagePolicy on network policy e2e test pods [#884](https://github.com/openshift/cluster-authentication-operator/pull/884)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/51ea6cdc877f997cc9b376aa26820e8e83d8c1c7...20e02b519a694fee38169221eeb8e6bfa421539b)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/69a9d699a9dd3ffc151c1a73e135d4823b75ef6c)

* [OCPBUGS-84924](https://issues.redhat.com/browse/OCPBUGS-84924): Bind the plain HTTP 8080 metrics port to localhost [#596](https://github.com/openshift/cluster-baremetal-operator/pull/596)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/e4f3cd50b6a33337b723beb682c4fdcf5cdd820c...69a9d699a9dd3ffc151c1a73e135d4823b75ef6c)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/6c7ba9cea681f90fbab82d9e2e222e5afbacd885)

* [OCPBUGS-84942](https://issues.redhat.com/browse/OCPBUGS-84942): fix: remove retired Microsoft.ClassicStorage permission [#548](https://github.com/openshift/cluster-capi-operator/pull/548)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/5365f61ab5553d3f80a604364663a875becfb00f...6c7ba9cea681f90fbab82d9e2e222e5afbacd885)


### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/ad611da1488fdf6604a66d0ac9da5ccf39d79d65)

* [OCPBUGS-83692](https://issues.redhat.com/browse/OCPBUGS-83692): Allow longer window before going Degraded [#1323](https://github.com/openshift/cluster-image-registry-operator/pull/1323)
* [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/cb10e59b8e7d881838a07eca4965bdad59a4bfc1...ad611da1488fdf6604a66d0ac9da5ccf39d79d65)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/e2858baee56d58f7b98aea897b18ed1114c280fd)

* [OCPBUGS-85064](https://issues.redhat.com/browse/OCPBUGS-85064): Allow host network connections to the ingress canary [#1433](https://github.com/openshift/cluster-ingress-operator/pull/1433)
* [OCPBUGS-84841](https://issues.redhat.com/browse/OCPBUGS-84841): isFIPSEnabled: Check FIPS_ENABLED env. var. first [#1429](https://github.com/openshift/cluster-ingress-operator/pull/1429)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/2c5b4ef0021db96ba6fecf630c53a15c12134578...e2858baee56d58f7b98aea897b18ed1114c280fd)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/d03062f8d205f1923362c008c86f9bcdd35f931c)

* [OCPBUGS-84536](https://issues.redhat.com/browse/OCPBUGS-84536): Bump library-go [#2131](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2131)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/e373e93ad5690ba5233512318005921ca5f47bd7...d03062f8d205f1923362c008c86f9bcdd35f931c)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/1924cf6f12c632d56f1d41341f08ff9ff6eae7d6)

* [OCPBUGS-85097](https://issues.redhat.com/browse/OCPBUGS-85097): e2e network policy tests [#687](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/687)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/e6a55cd55c867bf9e26e7ec0ba5accc959b0c27c...1924cf6f12c632d56f1d41341f08ff9ff6eae7d6)


### [console](https://github.com/openshift/console/tree/f6de0e73b88eeed1f0cbc73d751f5e629d817813)

* [OCPBUGS-84963](https://issues.redhat.com/browse/OCPBUGS-84963): Add bottom pagination to ConsoleDataView for mobile responsiveness [#16394](https://github.com/openshift/console/pull/16394)
* [OCPBUGS-84556](https://issues.redhat.com/browse/OCPBUGS-84556): re-enable helm-release.feature [#16358](https://github.com/openshift/console/pull/16358)
* [OCPBUGS-84916](https://issues.redhat.com/browse/OCPBUGS-84916): Remove PII from events [#16393](https://github.com/openshift/console/pull/16393)
* [OCPBUGS-84811](https://issues.redhat.com/browse/OCPBUGS-84811): fix Helm list page redirect after upgrade/rollback [#16380](https://github.com/openshift/console/pull/16380)
* [OCPBUGS-84848](https://issues.redhat.com/browse/OCPBUGS-84848): Fix ConsoleDataView filter order: Name and Label should appear first [#16383](https://github.com/openshift/console/pull/16383)
* [OCPBUGS-84807](https://issues.redhat.com/browse/OCPBUGS-84807): Fix race conditions in create-namespace Cypress tests [#16379](https://github.com/openshift/console/pull/16379)
* [Full changelog](https://github.com/openshift/console/compare/9cd5a6599d7d694cd328bc92f49478f619d2fe1e...f6de0e73b88eeed1f0cbc73d751f5e629d817813)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/5a8887df841e38a71c82d78922380c6027a2b486)

* [OCPBUGS-83946](https://issues.redhat.com/browse/OCPBUGS-83946): CVE-2026-33186: bump google.golang.org/grpc to v1.79.3 [#174](https://github.com/openshift/csi-driver-nfs/pull/174)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/e9f249405ad2bced3d1805dd5beda368d7f3d564...5a8887df841e38a71c82d78922380c6027a2b486)


### [docker-registry](https://github.com/openshift/image-registry/tree/9eae44fcf44142a705031fa16a613c450dbe685a)

* [OCPBUGS-84738](https://issues.redhat.com/browse/OCPBUGS-84738): pin cloud.google.com/go/storage to v1.30.1 to fix blob deletion [#470](https://github.com/openshift/image-registry/pull/470)
* [Full changelog](https://github.com/openshift/image-registry/compare/c3fa7db05e878e35ff95fcff896f716e82fdd170...9eae44fcf44142a705031fa16a613c450dbe685a)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/788dd01e734fbafb788d50a4848460c7ceca90aa)

* [OCPBUGS-84862](https://issues.redhat.com/browse/OCPBUGS-84862): Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.22 [#286](https://github.com/openshift/cluster-api-provider-gcp/pull/286)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/37085d5287031ee68f58b165256d4104bba99886...788dd01e734fbafb788d50a4848460c7ceca90aa)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/48a7a1aa3f2200d01cf1b6e63a5a6cfd5004a8b0)

* [OCPBUGS-81649](https://issues.redhat.com/browse/OCPBUGS-81649): Bump google.golang.org/grpc to v1.79.3 in release 4.22 [#108](https://github.com/openshift/gcp-pd-csi-driver/pull/108)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/2ba117405ff1cee765d42491f5863b06a1c9a2da...48a7a1aa3f2200d01cf1b6e63a5a6cfd5004a8b0)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/a8e71880c1c81c42bcb59b1c5b0fb615290f5dd9)

* [OCPBUGS-85023](https://issues.redhat.com/browse/OCPBUGS-85023): Add test e2e manifest for images volumeSnapshotClass CSI tests [#180](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/180)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/6b00096f4a84203a69467802b846f215b4e04888...a8e71880c1c81c42bcb59b1c5b0fb615290f5dd9)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/80f28ac33ac111532fb8ba59b2e569085ee871b0)

* [OCPBUGS-84640](https://issues.redhat.com/browse/OCPBUGS-84640): devicemanager: constrain topology hints to device NUMA nodes [#2656](https://github.com/openshift/kubernetes/pull/2656)
* [OCPBUGS-83607](https://issues.redhat.com/browse/OCPBUGS-83607): Bump to k8s v1.35.4 [#2646](https://github.com/openshift/kubernetes/pull/2646)
* [OCPBUGS-84055](https://issues.redhat.com/browse/OCPBUGS-84055): Update the csi-driver-host-path version to 1.17.1 [#2650](https://github.com/openshift/kubernetes/pull/2650)
* [Full changelog](https://github.com/openshift/kubernetes/compare/9193b12ab88e006723c8605bea1659bfcbe7d638...80f28ac33ac111532fb8ba59b2e569085ee871b0)


### [hypershift](https://github.com/openshift/hypershift/tree/807ebc5d7bed2608aa5ea59ff85991cc242246c6)

* NO-JIRA: fix(ci): use PR base SHA for api-lint diff in GHA [#8430](https://github.com/openshift/hypershift/pull/8430)
* [OCPBUGS-84841](https://issues.redhat.com/browse/OCPBUGS-84841): fix(ingress): set FIPS_ENABLED env var on ingress operator [#8388](https://github.com/openshift/hypershift/pull/8388)
* [OCPBUGS-83709](https://issues.redhat.com/browse/OCPBUGS-83709): fix(kubevirt): filter link-local addresses from EndpointSlice endpoints [#8272](https://github.com/openshift/hypershift/pull/8272)
* [OCPBUGS-78988](https://issues.redhat.com/browse/OCPBUGS-78988): chore(deps): weekly dependabot consolidation [#8383](https://github.com/openshift/hypershift/pull/8383)
* [Full changelog](https://github.com/openshift/hypershift/compare/5fb05fe47d08bfe122c6d43213611e26821e3c1c...807ebc5d7bed2608aa5ea59ff85991cc242246c6)


### [ironic](https://github.com/openshift/ironic-image/tree/f934d2cdf0bebbde4992980a770dd799056ab867)

* [OKD-362](https://issues.redhat.com/browse/OKD-362): Add watchdog to python-requirements.okd [#844](https://github.com/openshift/ironic-image/pull/844)
* [Full changelog](https://github.com/openshift/ironic-image/compare/124d27688014074ae77893cdd976ffb9499da8d9...f934d2cdf0bebbde4992980a770dd799056ab867)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/6a6d654f0c1f00f130fd58c1494196eee4ee6a84)

* [OCPBUGS-84693](https://issues.redhat.com/browse/OCPBUGS-84693): prom rules: add alert for nodes using runc [#5998](https://github.com/openshift/machine-config-operator/pull/5998)
* [OCPBUGS-84667](https://issues.redhat.com/browse/OCPBUGS-84667): Fix encapsulated IGN version [#5895](https://github.com/openshift/machine-config-operator/pull/5895)
* [OCPBUGS-84480](https://issues.redhat.com/browse/OCPBUGS-84480): Fix units rollback if update failure [#5882](https://github.com/openshift/machine-config-operator/pull/5882)
* [OCPBUGS-84949](https://issues.redhat.com/browse/OCPBUGS-84949): Fix OCL test to handle temporarily empty current-machine-os-build annotation [#5989](https://github.com/openshift/machine-config-operator/pull/5989)
* [OCPBUGS-84840](https://issues.redhat.com/browse/OCPBUGS-84840): Fix ssh and password rollbacks [#5906](https://github.com/openshift/machine-config-operator/pull/5906)
* [OCPBUGS-84865](https://issues.redhat.com/browse/OCPBUGS-84865): MachineOSConfig "build was not found" error [#5912](https://github.com/openshift/machine-config-operator/pull/5912)
* [OCPBUGS-83779](https://issues.redhat.com/browse/OCPBUGS-83779): Auto-append :ref suffix to additionalLayerStores in storage.conf [#5903](https://github.com/openshift/machine-config-operator/pull/5903)
* [OCPBUGS-84861](https://issues.redhat.com/browse/OCPBUGS-84861): Update AMI Whitelist [#5911](https://github.com/openshift/machine-config-operator/pull/5911)
* [OCPBUGS-84850](https://issues.redhat.com/browse/OCPBUGS-84850): Custom pool booting must handle matchExpressions in nodeSelector [#5909](https://github.com/openshift/machine-config-operator/pull/5909)
* [OCPBUGS-84849](https://issues.redhat.com/browse/OCPBUGS-84849): Support bootloader update [#5908](https://github.com/openshift/machine-config-operator/pull/5908)
* [OCPBUGS-84719](https://issues.redhat.com/browse/OCPBUGS-84719): deploy-from-self when skopeo  < 1.22.2 [#5901](https://github.com/openshift/machine-config-operator/pull/5901)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/f72cd29b7306dcb05effc3bceee1398942d97902...6a6d654f0c1f00f130fd58c1494196eee4ee6a84)


### [metallb-frr](https://github.com/openshift/frr/tree/843347fdc9460e0fd064d68a003eae5459cac1fa)

* [OCPBUGS-84960](https://issues.redhat.com/browse/OCPBUGS-84960): [release-4.22]: Bump to frr10 [#130](https://github.com/openshift/frr/pull/130)
* [Full changelog](https://github.com/openshift/frr/compare/5ccdd521dd93522575c172dac86d0b6f301fb3ef...843347fdc9460e0fd064d68a003eae5459cac1fa)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/f3f3c199a35f28b5a3cb7e5e123d3f34c25dcdfd)

* [OCPBUGS-85088](https://issues.redhat.com/browse/OCPBUGS-85088): Sync Main to 4.22 [#916](https://github.com/openshift/monitoring-plugin/pull/916)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/c43889fdf60b85fe43dc45417be3f644586e7cc4...f3f3c199a35f28b5a3cb7e5e123d3f34c25dcdfd)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/d73167a4d7fca871d64d3591aac388cfd2d37bbe)

* [CNV-74110](https://issues.redhat.com/browse/CNV-74110): new translations [#407](https://github.com/openshift/networking-console-plugin/pull/407)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/165ab9dd356d4e351fa26fa846463fb9269d79ff...d73167a4d7fca871d64d3591aac388cfd2d37bbe)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/26b848969eabd4e1899439f40a4346552f08ff38)

* [OCPBUGS-85059](https://issues.redhat.com/browse/OCPBUGS-85059): fix(test): drop blocking namespace-deletion wait between both-watch-modes scenarios [#714](https://github.com/openshift/operator-framework-operator-controller/pull/714)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/a3e5b4ff3745e6e6f0371fc14c124089a7289e7c...26b848969eabd4e1899439f40a4346552f08ff38)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/06d95461581f9374ae05959b66fc50e2a17d077c)

* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.14 into release-4.22 [#409](https://github.com/openshift/cluster-api-provider-openstack/pull/409)
* [OCPBUGS-84994](https://issues.redhat.com/browse/OCPBUGS-84994): Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.22 [#410](https://github.com/openshift/cluster-api-provider-openstack/pull/410)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/74cb5b085a21fdec9f0f8c5c1dfa3933075fb1dc...06d95461581f9374ae05959b66fc50e2a17d077c)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/9fff46a576033685f66fbb1121eb0a2f134a29be)

* [OCPBUGS-84953](https://issues.redhat.com/browse/OCPBUGS-84953): e2e network policy tests [#353](https://github.com/openshift/service-ca-operator/pull/353)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/7b3033bba87d7b40684b66f8f44a3525433d1ac7...9fff46a576033685f66fbb1121eb0a2f134a29be)


### [telemeter](https://github.com/openshift/telemeter/tree/131e6761cbd50054e2588bee58ebf1997f3cc039)

* [OCPBUGS-84937](https://issues.redhat.com/browse/OCPBUGS-84937): fix(deps): bump go-jose/v3 to v3.0.5 for JWE unwrap DoS [#598](https://github.com/openshift/telemeter/pull/598)
* [Full changelog](https://github.com/openshift/telemeter/compare/d6c7dd499f7106df78aa8bfd9dee332121ab2f09...131e6761cbd50054e2588bee58ebf1997f3cc039)


### [tests](https://github.com/openshift/origin/tree/4dba979a14fc3a7523926d129683a1ad6c853575)

* [OCPBUGS-85122](https://issues.redhat.com/browse/OCPBUGS-85122): Add ArtifactVolume tests and register artifact image [#31108](https://github.com/openshift/origin/pull/31108)
* [OCPBUGS-84944](https://issues.redhat.com/browse/OCPBUGS-84944): Fix timeout in PinnedImages GC test [#31115](https://github.com/openshift/origin/pull/31115)
* [OCPBUGS-84946](https://issues.redhat.com/browse/OCPBUGS-84946): skip on BM which has insufficient host [#31116](https://github.com/openshift/origin/pull/31116)
* [OCPBUGS-84958](https://issues.redhat.com/browse/OCPBUGS-84958): Optimize NetworkPolicy reconciliation test to reduce timeout [#31119](https://github.com/openshift/origin/pull/31119)
* [OCPBUGS-84382](https://issues.redhat.com/browse/OCPBUGS-84382): Add [Late] test to collect CRI-O goroutine dumps via SIGUSR1 [#31074](https://github.com/openshift/origin/pull/31074)
* [OCPBUGS-84382](https://issues.redhat.com/browse/OCPBUGS-84382): test: add monitortest to detect pods stuck in Pending state [#31073](https://github.com/openshift/origin/pull/31073)
* [OCPBUGS-84888](https://issues.redhat.com/browse/OCPBUGS-84888): Disable particular CSI tests if CSI driver is removed [#31111](https://github.com/openshift/origin/pull/31111)
* [OCPBUGS-84654](https://issues.redhat.com/browse/OCPBUGS-84654): fix openshift/network/third-party suite selecting zero tests [#31090](https://github.com/openshift/origin/pull/31090)
* [Full changelog](https://github.com/openshift/origin/compare/b19a93a85f0dfed3aff20ed80ba1528dfa753ab0...4dba979a14fc3a7523926d129683a1ad6c853575)