Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.19.0-okd-scos.ec.4

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.19.0-okd-scos.ec.3 - Success
• 4.18.0-okd-scos.ec.3 (changes) - Failed Success

Upgrades to:

• 4.19.0-okd-scos.ec.5 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.19.0-okd-scos.ec.3

Created: 2025-03-15 03:57:07 +0000 UTC

Image Digest: sha256:8d6817efe4683936dfcdfbff770ca3653192816f329bdcf245e6b8a84f34b488

Release 4.19.0-okd-scos.ec.4 was created from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-03-13-150733

Components

• Kubectl 1.32.1
• Kubernetes 1.32.2
• Kubernetes Tests 1.32.2
• CentOS Stream CoreOS upgraded from 419.9.202503051432-0 to 419.9.202503111432-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ShortCertRotation (0 tests)			Enabled (New)	Enabled (New)

Rebuilt images without code change

• cluster-config-operator git cbfd00a8 sha256:8ca0df69dff9b2223242ca0b4d1d2aca4ddeb6202d8f54f612e4982f4e04a249
• kubevirt-csi-driver git ba2234bd sha256:60ca7d10aaa37e35a03526506bef0a5102233f4d0c752ce2bdf1cf1d250a8c3a
• openstack-machine-api-provider git d2fce230 sha256:01bbc1cca83b87cce19011c8980ae90ce6fe3b62db278abe4ddac4a860ee2769
• stream-coreos sha256:fdfe8a71bf9f71a17cd8a6b15657027b3ed79a4bd12336c63166fa82b3eacef0
• stream-coreos-extensions sha256:9a8d7e0aa78227e98a6ff6a2e4b785024d2ecbb363b7b1516de749b290b1070b

agent-installer-api-server

• NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#7398) #7398
• NO-ISSUE: [master] Bump OCP versions: 4.18, 4.19 (#7397) #7397
• MGMT-19830: Enable installation of OCP clusters in vSphere environments with user-managed LB (#7272) #7272
• MGMT-19596: Fixing broken KubeAPI tests (#7383) #7383
• NO-ISSUE: Fix bug in MTU validation for CMN - validation should pass if all reports are checked (#7386) #7386
• MGMT-19832: Fix time out during cluster last finalizing stage (#7372) #7372
• MGMT-20099: add nmstate to /v2/supported-operators (#7378) #7378
• MGMT-20022: Handle missing ManagedCluster in non MCE environments (#7348) #7348
• NO-ISSUE: [master] Bump OCP versions: 4.16, 4.18, 4.17 (#7380) #7380
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#1049) #1049
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#926) #926
• Full changelog

agent-installer-utils

• AGENT-1087: OVE ISO Builder script improvements #40
• AGENT-464: Adds form to agent-tui to enter rendezvous IP address #38
• AGENT-1087, AGENT-1118: Add script to generate agent-based installer OVE ISO #39
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• STOR-2252: Bump all deps #361
• NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #363
• CFE-1132: EFS Access Point Tags Update DAY2 #313
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-52509: github.com/go-jose/go-jose/v4 v4.0.5 #200
• Full changelog

azure-cluster-api-controllers

• CNTRLPLANE-105: Add new authentication type UserAssignedIdentityCredentials #333
• Full changelog

azure-disk-csi-driver

• OCPBUGS-51376: Rebase against v1.32.0 #102
• Full changelog

azure-machine-controllers

• CORS-3883: Allow managed identity from other resource groups #133
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-52508: github.com/go-jose/go-jose/v4 v4.0.5 #26
• OCPBUGS-45531: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.19 #25
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• AGENT-1113: enhance the unconfigured-ignition command to support the interactive workflow #9529
• OCPBUGS-33370: Improve baremetal gather error message #9120
• OCPBUGS-36553: VSphere: add vips to machinenetwork #9526
• OCPBUGS-49737: Custom-DNS: Update master and worker user data secrets #9451
• CORS-2508: aws: remove unused autoscaling:DescribeAutoScalingGroups perm #9223
• OCPBUGS-51378: Change vsphere conversion govmomi err to be clear #9524
• CORS-3278: Bump IBM Cloud CAPI to v0.10.0 #9523
• OCPBUGS-44840: Mount the user-ca-bundle into ICC #9227
• OCPBUGS-50637: Remove error logging when determining image arch #9531
• OCPBUGS-51171: aws: add ec2:ReplaceRoute permission #9525
• OCPBUGS-47724: AWS: Copy static MCO resources needed for custom-dns #9489
• OCPBUGS-49623: IBMCloud: Missing ca-mon region due to static region list #9421
• OCPBUGS-47681: Support regions only available in v2 of the aws sdk #9383
• OKD-235: Add stream metadata for scos to be used by OKD #9520
• OCPEDGE-1635: Set default values for arbiter #9530
• OCPBUGS-39583: Remove tmp directory used for agent pxe files #9527
• No-ISSUE: (dep) Bump openshift/api #9522
• CORS-3917: Add install config validation for service endpoints #9517
• NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer #9515
• OCPBUGS-51350: PowerVS: Extra network routes for disconnected install #9510
• NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage #9508
• OCPBUGS-50961: Power VS: Log accurate error when deploying Internal with no vpcName #9497
• Full changelog

baremetal-operator

• NO-ISSUE: Upstream Sync Mar 10 #401
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-52504: pkg/cli/admin/upgrade/recommend: Populate RESTConfig #1987
• Full changelog

cloud-credential-operator

• CCO-647: Enable readOnlyRootFilesystem on all containers #819
• OCPBUGS-52507: github.com/go-jose/go-jose/v4 v4.0.5 #823
• NO-JIRA: Add dry-run on aws create-all command #818
• NO-JIRA: add example of how to build from source #820
• Full changelog

cloud-network-config-controller

• SDN-5690: Rebase k8s to 1.32 #163
• Full changelog

cluster-baremetal-operator

• OCPBUGS-52216: Bump x/oauth2 to 0.27.0 #463
• Full changelog

cluster-capi-operator

• OCPCLOUD-2858: Bump dependencies to CAPI v1.9.z #270
• NO-JIRA: Update TODOs with new Jira issues #269
• OCPCLOUD-2718: Add default VolumeSize for MAPI to CAPI conversion #260
• Full changelog

cluster-config-api

• MCO-1590: Add explicit opt-out & status field for boot image update configuration #2223
• API-1689: features: add ShortCertRotation #1977
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-24588: bump library-go #233
• Full changelog

cluster-dns-operator

• OCPBUGS-51193: Add runbook_url for CoreDNSErrorsHigh #426
• Full changelog

cluster-etcd-operator

• OCPEDGE-1500: Added scaling strategies for TNF #1396
• Full changelog

cluster-image-registry-operator

• CNTRLPLANE-112: Bump msi-dataplane dependency #1187
• Full changelog

cluster-ingress-operator

• NE-1981: Move controller test helpers to dedicated package #1199
• NE-1953: Add Validating Admission Policy for Gateway API CRDs #1192
• NE-1954: Implement GatewayAPIController feature gate #1198
• Full changelog

cluster-kube-controller-manager-operator

• STOR-2267: Run SELinux warning controller #834
• Full changelog

cluster-monitoring-operator

• MON-3960: test: enable back TestTLSSecurityProfileConfiguration and m… #2545
• NO-JIRA: chore: versions: kubeRbacProxy’s primary branch isn’t main yet #2574
• Full changelog

cluster-network-operator

• NO-JIRA: ovn-k: sync EgressService with upstream #2664
• OCPBUGS-52361: frr-k8s: rename validatingwebhook name #2659
• Full changelog

cluster-node-tuning-operator

• CNF-16638: Reduce code duplication of RPS enabled checks (#1301) #1301
• Add observedGeneration to Profile status (#1305) #1305
• Full changelog

cluster-policy-controller

• CNTRLPLANE-55: Add MinimallySufficientPodSecurityStandard annotation to namespaces #161
• Full changelog

cluster-samples-operator

• OCPBUGS-52848: Revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #606
• OCPBUGS-52848: Revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #607
• OCPBUGS-52379: relevant references to master renamed in README.md #603
• Full changelog

cluster-storage-operator

• OCPBUGS-24588: bump library-go #566
• Full changelog

cluster-update-keys

• NO-JIRA: Updating openshift-ci-release-key for 2 years #70
• Full changelog

cluster-version-operator

• OTA-209: Add CVOConfiguration controller #1163
• OTA-1427: Reconcile all nodes via a special event #1164
• OCPBUGS-52258: pkg/cvo/updatepayload: Context around ValidateDirectory calls #1166
• NO-JIRA: Use k8s.sets for the fields of ClusterCapabilities #1159
• Full changelog

console

• OCPBUGS-52166: Fix sort function on Access review table #14848
• OCPBUGS-52589: update @types/react to v17, use new JSX transform #14864
• ODC-7775: Update content in Getting started resources on cluster and project overview page #14829
• OCPBUGS-52325: fix Node Logs toolbar layout at mobile #14836
• CONSOLE-4430: Content Security Policy E2E testing with Puppeteer & Chrome #14675
• CONSOLE-3414: Replace Loading with PF Spinner #14842
• ODC-7727: Add hover effect to favourites icon #14839
• CONSOLE-4504: set LogViewer theme using console’s theme #14827
• OCPBUGS-48491: Namespace is not persisting when switching to developer view from the topology page of admin page #14812
• OCPBUGS-49348: Fix Secret form drag and drop issue #14798
• OCPBUGS-37101: Remove logoutOpenShift method call #14658
• OCPBUGS-52316: enable clicking outside NodeLogs Selects to close them #14826
• OCPBUGS-52214: add missing v5 patternfly-addons.scss and patternfly-charts.scss styles #14813
• CONSOLE-4409: Update monaco theming and sidebar logic #14835
• CONSOLE-4503: Replace custom Banner with PatternFly equivalent #14825
• OCPBUGS-52298: Add breadcrumbs to ODC Project details page #14824
• Full changelog

console-operator

• CONSOLE-4508: Enable CSP e2e test #969
• Full changelog

docker-builder

• OCPBUGS-43812: Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 #458
• Full changelog

driver-toolkit

• test/e2e: adapt for layered node image (#167) #167
• Full changelog

etcd, installer-etcd-artifacts

• OCPBUGS-45488: Updating ose-etcd-container image to be consistent with ART for 4.19 #306
• ETCD-717: Rebase etcd 3.5.19 openshift 4.19 #315
• Full changelog

gcp-machine-controllers

• OCPCLOUD-2882, OCPCLOUD-2889: Provision AMD SEV-SNP and Intel TDX confidential instances #110
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-52477: Revert #2229: Initialize testContext before enumerating tests #2236
• Full changelog

hypershift

• NO-JIRA: Bump msi-dataplane dependency #5796
• OCPBUGS-52985: filter watch events for HO AWSEndpointService reconciler #5818
• NO-JIRA: Update Konflux references #5799
• ARO-14354, ARO-14355, ARO-14356: introduce image registry capability behind feature gate #5456
• OCPBUGS-52819: CPO Overrides for OCPBUGS-48519 #5808
• PODAUTO-324: PODAUTO-325: Allow autonode to run upstream karpenter core e2e tests #5680
• OCPBUGS-51364: fix oc patch command on doc #5807
• NO-JIRA: Fix-dependabot-bumps #5797
• OCPBUGS-52655: Add flag to set etcd storage size #5795
• CNTRLPLANE-111: Fix KMS MIv3 Issues #5793
• NO-JIRA: Disable GitHub Actions #5812
• OCPBUGS-52821: stop using dev mode for loggers #5801
• HOSTEDCP-2237: Auto approve Karpenter serving CSRs #5708
• OLS-1370: Add full aws permission list and point to it from “getting started” #5746
• NO-JIRA: CPOv2 token-minter abstraction #5769
• NO-JIRA: test/e2e: skip WaitForImageRollout in executeNodePoolTest on newer releases #5778
• OCPBUGS-52323: Make managed-trust-bundle optional #5763
• CNV-57648: document how to configure descheduler #5779
• NO-JIRA: Remove WI step for cluster-image-registry-operator #5777
• OTA-1405: Add the ClusterVersionOperator API #5569
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-51864: IBMCloud: MAPI replacing unhealthy CP nodes #61
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• plain-java runtime sample #38
• Full changelog

ironic

• METAL-1299: Do not use openstack packages #645
• Full changelog

ironic-agent

• METAL-1299: Do not use openstack packages #177
• METAL-1297: Update commit hash of ironic-python-agent #176
• Full changelog

machine-api-operator

• SPLAT-2060: Create e2e tests for vSphere Data Disk feature #1338
• OCPCLOUD-2882, OCPCLOUD-2889: support AMD SEV_SNP and TDX confidential computing machines on GCP #1326
• Full changelog

machine-config-operator

• MCO-1485: MCO:1486: MCO-1324: Attempt stub Ignition upgrade #4885
• Full changelog

metallb-frr

• Align to upstream #79
• Syncoperator03032025 #78
• Full changelog

monitoring-plugin

• COO-684: add mui/material as is required as peer dependency #360
• OU-681: fix typo in the predefined metrics list #358
• OU-499: remove deprecated components #356
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-52415: replace entrypoint #349
• Full changelog

networking-console-plugin

• Upgrade dockerfile for node 18 and 4.19 #222
• Full changelog

oc-mirror

• OCPBUGS-52588: fix: error when no related image was found (#1105) #1105
• OCPBUGS-50680: v2/operator: refactor operator FilteredCollector (#1093) #1093
• no-jira: v2/manifest/oci-manifest: refactor and dedup the code (#1098) #1098
• v2: filter wrapcheck warnings for oc-mirror (#1104) #1104
• Full changelog

powervs-block-csi-driver-operator

• STOR-2252: Bump all deps #81
• Full changelog

prometheus

• OCPBUGS-53025: Scraping: Bump cache iteration after error to avoid false duplicate detection. #245
• Full changelog

service-ca-operator

• OCPBUGS-48171: Update go 1.23 and ocp 4.19 #254
• Full changelog

tests

• SDN-4168: Fix IPsec tests for monitor failures #29437
• TRT-2026: validate that the binary extraction was successful via existence check #29595
• OSD-26270: re-enabled managed-upgrade-operator test by removing exclusion #29585
• NO-ISSUE: Automated - Update synthetic test data #29570
• NO-ISSUE: replace hardcoded ClusterVersionCapability string in olmv1 tests #29577
• TRT-1575: Fail the test when an expected operator goes to degraded #29566
• OCPBUGS-52578: Use payload pullspec for image info test #29586
• Full changelog

thanos

• MON-4139: feat: replace github.com/prometheus/prometheu dep with one having an xtra check in the parser to help identify le/quantile selectors misuses in Prometheus v3 #158
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-51973, OCPBUGS-52808: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #140
• Full changelog

vsphere-problem-detector

• NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #179
• Full changelog

---

View changelog in Markdown or change previous release: 4.19.0-okd-scos.ec.34.19.0-okd-scos.ec.24.19.0-okd-scos.ec.14.19.0-okd-scos.ec.04.18.0-okd-scos.ec.34.18.0-okd-scos.ec.24.18.0-okd-scos.ec.14.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.19.0-0.okd-scos-2025-03-29-0551464.19.0-0.okd-scos-2025-03-28-1751464.19.0-0.okd-scos-2025-03-28-0551464.19.0-0.okd-scos-2025-03-27-1751464.19.0-0.okd-scos-2025-03-27-0551464.19.0-0.okd-scos-2025-03-26-1751464.19.0-0.okd-scos-2025-03-26-055146───4.18.0-0.okd-scos-2025-03-28-2215314.18.0-0.okd-scos-2025-03-28-1015314.18.0-0.okd-scos-2025-03-26-2223134.18.0-0.okd-scos-2025-03-26-1023134.18.0-0.okd-scos-2025-03-25-2223134.18.0-0.okd-scos-2025-03-25-093401───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-03-28-1148024.15.0-0.okd-2025-03-26-0131074.15.0-0.okd-2025-03-25-1331074.15.0-0.okd-2025-03-13-2041304.15.0-0.okd-2025-02-12-1007064.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.18.0-okd-scos.64.18.0-okd-scos.54.18.0-okd-scos.44.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github