Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.20.0-okd-scos.ec.0

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.19.0-okd-scos.ec.10 - Success
• 4.19.0-okd-scos.ec.8 (changes) - Failed Failed

---

Changes from 4.19.0-okd-scos.ec.10

Created: 2025-05-14 01:31:09 +0000 UTC

Image Digest: sha256:6c628a6a34b3c59108e06483824ba5a837cab620853fb07954d940ce2d6635aa

Release 4.20.0-okd-scos.ec.0 was created from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-05-13-101530

Components

• Kubectl 1.32.1
• Kubernetes 1.32.4
• Kubernetes Tests 1.32.4
• CentOS Stream CoreOS upgraded from 9.0.20250507-0 to 9.0.20250509-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
CloudDualStackNodeIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DisableKubeletCloudCredentialProviders (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIProviderOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiVCenters (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AWSDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureMultiDisk (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesvSphere (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

• aws-karpenter-provider-aws git 68ae0c26 sha256:9cc774e9297bb2c246bbb54d164fc28ad6842711f8cf17fbaf2f5f8ba5bd71bf
• openstack-resource-controller git d00bab2b sha256:35ccd68c356a39e2b76c3a14bd1bdcb2d037a530d5cd16fab452cb9e6803d1ce

Rebuilt images without code change

• apiserver-network-proxy git 1e82311c sha256:459fd535ae9406aab27eb7627df0ad446d83a4b8e653cf3216ea33c48ec97878
• aws-cloud-controller-manager git 425c1c5b sha256:d194499adf5d6a805370724b367fa6ef51e63ae29c7b175aa8aeaffdb6dc21c9
• aws-ebs-csi-driver git d686e7d1 sha256:366e48db006da3fe6d91eaf0105df151bd0cdf55ed0f0caabe55ce618e97cb79
• aws-kms-encryption-provider git 088dcaf7 sha256:f72fe6509e7dd8626628d4d1dcb45e7d44076c30419a7da20df1ac00c0de23dd
• aws-pod-identity-webhook git b0a16d53 sha256:bfc746182270141ec4f06150eb70f5a9235c52b5c15439a7bc2bc3b1f0795c74
• azure-cloud-controller-manager git 7109d6b4 sha256:811c18fba50caf4ffe8835ef11750300074e92e9a2b8a25ee552326036b12290
• azure-cloud-node-manager git 7109d6b4 sha256:8a498e60c31adbc43cdef009bd59fe58661fd3f1b3deb5b38f22998ccfa58105
• azure-cluster-api-controllers git 2c931b4a sha256:d1d1c6ccbf5a70c10952ea4f0bec980ec629ced20cc67570cd7ce9abcca71595
• azure-machine-controllers git dd3ca570 sha256:b1f5e83188f077b20fd0363f56828f9bf69aae731e94d60651fe21cd8d8345cf
• azure-service-operator git 0ae129b4 sha256:e579cd32e3574d4eb6fbc8d64b21b8585d59212ffb720d9a7e1d5edf39016fab
• azure-workload-identity-webhook git 892d3c4d sha256:870c1cd676fe68d2451ec1f76e7d5e5f9b2b4f2568b874472f353c9e6383deb9
• baremetal-cluster-api-controllers git 9e7170f2 sha256:615aa5fb2bf41a03536725076ff2a6bede6641ae3dca360bb73a63692d003129
• baremetal-machine-controllers git f7a78954 sha256:f384527ee5cc9671af5c0cf9757b4275f27961f0788532b0b169fa0c78a4e53f
• cloud-network-config-controller git 98ae311b sha256:ac211f428a37bb18a598d6dff1d6bba046e5d9a5bf4ae570a6a7640ee854d1a1
• cluster-authentication-operator git ceeb021d sha256:70f0421c3129ebdd9800864f69f1c469d3c01301593374ce69e3ef25f2418eff
• cluster-autoscaler git f746d442 sha256:c81941c2cc5307d7cf6014b752407af17dc8b8aacdafd352e13d7447f953f49e
• cluster-autoscaler-operator git 227f7537 sha256:1644754c5eb0480f6d8722a2490bea05c003bf7706dfb1bfdea6c7fd8004142d
• cluster-baremetal-operator git f64a5c1d sha256:d999a68e7bd726e46d3cfeecc24c0f5551a35f7bc90b71d2c13d71d7aa8e6569
• cluster-bootstrap git 8fde9c52 sha256:8b296b4c0ed4553438ba2ec1dd04a243649363092501364c97f00aa3e0887ad1
• cluster-capi-controllers git 7e2de8d3 sha256:3c5ff441df2b0c0804d47864194edce867f7fd2af698d5e3ce7f439a2499c9cb
• cluster-cloud-controller-manager-operator git 7ddcbe3d sha256:903d0bb847c04c0181db7f8ae21d07c0864520c8222a849baf627fd82f411a90
• cluster-config-operator git 96607b59 sha256:778f0b46e85ebe5b6a9a1a93273e28e4f44aa17f6f8db6ed3ed04e29215f6fc9
• cluster-control-plane-machine-set-operator git 1dbf0c7a sha256:1ae1e550d261d9b2530fc1baae6c2a6362e5f50e8c2c7b2d7b69d31d6bc40988
• cluster-csi-snapshot-controller-operator git cf99de97 sha256:33bfe98f9a0fd89cad130d8452465793eb60b2c5bb776a46ec4454de13d9817c
• cluster-dns-operator git 65981306 sha256:48b5b9fe3e90b352369a637b974e52cde7c8a258af6cbc2a6ac99268d0aef38b
• cluster-image-registry-operator git 85ac017f sha256:5f2027da908ba06c95f69c5bcf981bd71ce57a7a40f2e307348481fe16b189a6
• cluster-ingress-operator git 2e6bd66d sha256:d6f217c8dfbda4c97125ceb3bbc9b68a7cc8e381808a1870aa4d63ea01290493
• cluster-kube-cluster-api-operator git 3ec30377 sha256:f7dfe20ea3ec9b035b33aefb9f8c1dc34ae56a5221ebb772b6b4bf72c7287450
• cluster-kube-controller-manager-operator git cec410b7 sha256:40ab2f0ad2035f24a33b6a18c0fc7fc9b9cbd28b40874a5ec9918156579399f8
• cluster-kube-storage-version-migrator-operator git 4e514049 sha256:0a70e25fbaf2f3490d6ec4441262b6264219c3192e5a21082e62be1f8fd08b8c
• cluster-openshift-apiserver-operator git 5f66a3e1 sha256:db8733af3537d3b76f31326c5eb56a8521080c5ac0f26ffa4853c37778a0a059
• cluster-openshift-controller-manager-operator git 0ab30996 sha256:94504ba931c782b2be25eb1d841519dc824efcac7fd290ce7ffc93dc2e60a4b3
• cluster-policy-controller git 74852478 sha256:7f2fcd1d757d27e2f6643cc1db34a1d1573047aed7c1f256c3431a52395f90a0
• cluster-samples-operator git 4cb29197 sha256:fef8da17e89034a15d6998444aa8947ff05001952f5c81aeda86f69d6522bd6d
• cluster-storage-operator git 94ed0084 sha256:9e047f062b9481205853ccb5e798fa6b721d0f8a22d4696cfca89d57aebe06b9
• cluster-update-keys git c1c56b4c sha256:61d51bdc9cab9a33d207ebe1406b932ba0b563b4a74735bd80fb272c8ab79241
• configmap-reloader git 9bfbde86 sha256:5bded5aca479fdb655c390ab51b5e802d1730e7766efd9d8bd53a678273798f1
• container-networking-plugins git b09f487c sha256:1d8d31f195705a060e45426de7e661780dd8f46c0be25adb5cabcdd6af524b25
• containernetworking-plugins-microshift git b09f487c sha256:fd5556b6112ed583de1906b78e528f9a70c7f0c6a4592860e106c71aa7120ada
• coredns git 7a1451db sha256:92d32cbbd90a710252ef500d4a4408ca18967fe488ea317d5bf06a58482c4531
• csi-driver-manila git 68986f5b sha256:93dd2ea32cb949aad8d3e5b2291e0fd0efd92131dd2e9164f8e0518625de2d62
• csi-driver-nfs git 2eb5c109 sha256:15d87ea1619957ed8daa6ea0b4b4425b5db57af1bb90e556d44a3adc57026ae4
• csi-external-attacher git a8175e39 sha256:f212c2c8ddaa6e7ab2cda239556414101975ebc168d7706406e31981163420f0
• csi-external-provisioner git 9db1cdb1 sha256:f30a4aacbca14bae6af1ac6cbbd2494ee90c2ac2db25f36f38c3c4f20a0c7fb6
• csi-external-resizer git cca04e39 sha256:d09a4eb90b433b40b71cc30e3bdca2bd559960a91a842cabd6c3c38ca3d8fa05
• csi-external-snapshotter git ac82cafc sha256:0328950466bdb78d6190b313893d5eb341c39338ae01a35362542934180d5f99
• csi-livenessprobe git ca514478 sha256:5992b5b9b06f06ca67613220d216f0411fa61370a535faaf4206ff2f814e3dc6
• csi-node-driver-registrar git d18edb3a sha256:c902b561868730db5574ec0eb0689834fe62ba8817ee3728e5125ddb6f972390
• csi-snapshot-controller git ac82cafc sha256:9db9d1acbcb4649ed3ca197f51e4b9c5783c7bc1b0bbb22106db096eecd2a4ec
• docker-builder git f2e5d601 sha256:5604ff131eefc3772eeb80244e9d1b844cf298bbd7df3dfdc2738581df0af132
• docker-registry git 59376a75 sha256:2b06ceff904f4ab481c1104627820b341e792ea8d1026a29a9c0b41e400a6e33
• driver-toolkit git 686fdac5 sha256:7cb54fcc29533a3d17cdfaaf96d37d8f76282ceacbfc8b3e9348e72f51859694
• egress-router-cni git 85353bb9 sha256:19b3586e32453636d875d41047ae82a6c435c005535f602c3704502794526b49
• etcd git a5421dfe sha256:15fc1f05ffde70b2074ab733ec7fadef29b40580820ae6e4483b23a621ccfccb
• gcp-cloud-controller-manager git d8d3aeba sha256:48f99e5cf63abb30afd59c1b226fab074a2f7e301945abda5d44923ffb969018
• gcp-cluster-api-controllers git 8fba88aa sha256:cb2aba13004d2e70c6106497a268e3d2e07dc66a9b911f94d4920cf6dc69e087
• gcp-pd-csi-driver git 3aeac35b sha256:bb5235c2d8ffb54a33b8277b5e64319fb64256e41a11180587364f4e3739cffb
• gcp-pd-csi-driver-operator git 44c74f24 sha256:8becb493ea2a7b6c1aa2c4f0fc146fe91bd62eb0ca38cb079117883b9c27ee6b
• gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:6ed3aba95e34d5bea616c7cfcace9f1813c0feec9dbbbe9ecc15fd2649a3af12
• haproxy-router git b41f9d05 sha256:52dcbb7ce2f21f22e9fa3d732a064186215af0e278b6aad0840f3f1ff1c07282
• ibm-cloud-controller-manager git 7422aab2 sha256:655ce7b63118c1a3188b06dcbec883f302c266e859e6d008cad46758ab2ce8f4
• ibm-vpc-block-csi-driver git 176b6ef1 sha256:c08e603543629fe5a3fc526d78449ccaf779ef270778753d715db2304c46c7f4
• ibm-vpc-block-csi-driver-operator git 3dfcfa12 sha256:68846ffaf0cfc8274ca2573876893dd9e440372096dd2d615709d71a528043f5
• ibmcloud-cluster-api-controllers git 0453d282 sha256:74bccda67938388c0ab5108b26596b7d538a202f1fc78327c5168370522072da
• ibmcloud-machine-controllers git 989bd874 sha256:3a1509a0e23d4f3deaddcde5a881df2f9e339a75da70176b408a7f03c0b5923e
• insights-runtime-exporter git 0bee2d9b sha256:eba1c9262fbc7685a93bada2a8ec65c1476ac473d88379a57d20b6e3eeca1f97
• insights-runtime-extractor git 0bee2d9b sha256:cabb9dc8d1e050090f12ba97be5b4419afdef85bd66b11c1d4fad4dcc4b8c416
• installer-etcd-artifacts git a5421dfe sha256:f2d44cc6e0c831ded7e6b42e867f9e7224349986ec4845ba299447fdf7b2b5ca
• ironic-machine-os-downloader git dbe19772 sha256:ff005578de4053339355e0a66e597fc2fb15611fa15fcd04b988a29f8d06f66c
• ironic-static-ip-manager git fcd9564e sha256:4d61d98e31738cb5ccc9239b799a4d57f100b3086699525af5ff8ea4ed0a2bc1
• kube-metrics-server git 037a0e7e sha256:51a36ef908b5da19a47e93d657d89ea8ec0925c6495366b9cc8375ed8013c8d3
• kube-rbac-proxy git 59127756 sha256:7c6be4768d3c15090299d78568dbd6b5a85d9559147cf26c254e13f300408111
• kube-state-metrics git c3da3b5f sha256:6a3391d27f75c53616918a2bbb6d152a4bb7f5665bf39c238351b66a0ab0cc0b
• kube-storage-version-migrator git 4c521b09 sha256:12a16836db2b077deedfc22db8f599bc7882c83cdd7f2ddb4656663d1ca561fb
• kubevirt-cloud-controller-manager git 3f4542ec sha256:45d623bccf7f00e97cb5886e4fe2403c3c3aba2f5d99d22391e25251356ef0d2
• kubevirt-csi-driver git e3027025 sha256:3c5de75f8cbe5623b3d596c72c9e00cadf66f849d157075189d16fd6401320f6
• libvirt-machine-controllers git a336f0b5 sha256:429eeb96c6ac01b8ef60f48a67b9f94519788a36e2e4c2b930b3935a56ba8d00
• machine-image-customization-controller git 7d066746 sha256:44b0222098097ecd9e8b94f7a281065f89eeeb85d9b3f860faff5a4522d0092e
• metallb-frr git 5076dbc4 sha256:5a8c05e9256a8a62ee4eb2cecbd4709aff5888866e68680af5a9213333cc032f
• multus-admission-controller git 0b1b812e sha256:dc8c921411cb99929c8c66892c9df80190fc72d6fde11193023024dfed819385
• multus-cni git cf0f68ec sha256:a3dd2a57f2b6a7a5e80ff740d8331294f9dacad5f561edf5cebc56f17141a71e
• multus-cni-microshift git cf0f68ec sha256:d66a18d0100c770a389daaa45ce29048ef6ca6d997f689e0154a9191146d04eb
• multus-networkpolicy git 6fffe5d7 sha256:cd368df5b988e522c26523dc1ec1844f668c9c02ddac9423420aeddfdc1b94fe
• multus-route-override-cni git 391c1b03 sha256:cadc1e187c5f8a69e90bfd0887e2b1a228553eff36e2c9faecf5672da31300ac
• multus-whereabouts-ipam-cni git 45624b63 sha256:0447afd29a9ab55543195af292b40cdb959e4fe865d903a09431cbe929c3f8c1
• must-gather git 463c03ca sha256:3f07a4eaf68ad4cfc7311d2cb0653eace9191d0e16dfcadb444066c0865b76e6
• network-metrics-daemon git 5ec8c6bd sha256:085c840dc8f9a69090fd18da84b32e0a0679685d8a4eb604c2aeb9d802e887fa
• networking-console-plugin git 581812ac sha256:46b68ed182ae93359723e77f81aa494fe99aeaff069b5896880abced2461b33d
• nutanix-cloud-controller-manager git db1f264a sha256:51280481090f561be6ea7926a350e77ac7af881794999e6e0da01722dc2e5ab1
• nutanix-machine-controllers git a26db5a0 sha256:2e73165accb5788a172776077e6e7db41cc9d56e6ac02205aae22e72ed5ee290
• oauth-apiserver git 75914068 sha256:7907eedb7e2cfe73690655186b201c1877a205b1557db16f7d15cd08381a9d05
• oauth-proxy git 3d12ccbe sha256:14b7ff793eb43b4fa1124dd4304ac02559b9678781985fbd118a65d4addce1e7
• openshift-apiserver git 85f6eb27 sha256:b330daf689152eec552def1cff4b5bae8c94ee4311ba9d23e023acea99d82f0d
• openshift-state-metrics git 3106bcc3 sha256:00a7a7acd8ef3aeade223b2a2706181794477a20b2115c997510a28638587f11
• openstack-cinder-csi-driver git 68986f5b sha256:37f1b59889f5f3dd504450355e73ef5a9a90f37975da14c9edd4a1c36225b44c
• openstack-cloud-controller-manager git 68986f5b sha256:81a8b73168806ba8311951262d92bc3f82c8412de9acb3f0a86dcd4a0db75b39
• openstack-cluster-api-controllers git cc76099b sha256:ccff013ec5974d76b592b10ec7fe83ae8807f1ef4357509f9461fcc39d13e8b2
• openstack-machine-api-provider git 848bf658 sha256:1880ea14361c0264c012cf1f012d37f51bed110ee42843c66283076e235e7d6a
• ovirt-csi-driver git 1db726a9 sha256:b9c92bc4244bb4bc41ffa9b5f38fd389c44d93e997cec681894bde9b46710b54
• ovirt-csi-driver-operator git 76db379d sha256:61627ebc18066bc27015a3b3226bbbaa7f4b416b4eeab796b26f836e772d0035
• powervs-block-csi-driver git f681413d sha256:d4771a03c496e1c9d34b07053b62d198c0a084d49e0592b1178fdea41c70da3a
• powervs-block-csi-driver-operator git 059d95c2 sha256:befdc4279c3858de07c8edda1179bf2806a13080dc2e759a87a2864856b8d83e
• powervs-cloud-controller-manager git ef83f3f5 sha256:8b1b75df9a6814650c62cb26ff4f44867c5c6a376bebdc5c6bb3fad87bc1c6dd
• powervs-machine-controllers git 87f8e306 sha256:11338a88c440ee44a632abfc644fa11133f6f48ecb1cd38e5dbeafa537cfa846
• prom-label-proxy git 7184f58d sha256:0ffd8ac9baba9e5ba3803ad034f5ce1a3014c6c2c6552926cbe00889ccb933d9
• prometheus git 7935baed sha256:a5e9ea9ffcb1b1474cec30a4af3e4c7b64c44bb90c7492ec6ee48bca2f443093
• prometheus-alertmanager git a2346ca5 sha256:f6e72634198443bbe2e01d128f14331ee5eb3e6b0492e7a67f9dca8ffa15fe2c
• prometheus-config-reloader git b8debb4c sha256:331b0253819203abd6a4be6ec384bb1927e36924deef72cdb0eed5e6a568bc64
• prometheus-node-exporter git c90542d8 sha256:ca41bc30311d76398beebfb9a9c98021f54cf65c9f2a527366f93485447d95a6
• prometheus-operator git b8debb4c sha256:0a0c74c5c41f716c6919c0ba4f48dc969a3cf0f335bab3a5f684cfee417839b4
• prometheus-operator-admission-webhook git b8debb4c sha256:b7bb41bfcfa81460ae5f69fe3bbd1f813b2a2d4e4c9cfe84e6f37077b71ba77f
• route-controller-manager git bc97534a sha256:e82cd706071fb4d21153e12c6e8503b528e55af9bc7807fc30609f5280868ac9
• service-ca-operator git 4dfa6916 sha256:fcf488b8c7351d174471f6792bcb65729e72bf76e299313f0a433fe6da849fb2
• telemeter git cffdabd4 sha256:532227707b2f77aff95f4161b4e06585a09e3673ca09777b55cc51019e210c09
• thanos git 95f7bb21 sha256:18f0fa5fa4607ad5932879763c5d3253b56f4b91ea196841a79fc62def230105
• vsphere-cloud-controller-manager git 2c21c8ce sha256:5d2321883f2be330a325d4f39309e46c61ed8d2bdc272d342590030c3227bc0b
• vsphere-cluster-api-controllers git 8c61ba3d sha256:9684ae4c3b6dbde37237b0cd4fc1c5661335ba285296f5ea73755fa18137b684
• vsphere-csi-driver-operator git c2b41c36 sha256:9055ad963a68f432f9ec24122e6719cdbd6871caafad7017f650a483f9ac8552
• vsphere-problem-detector git a32d3224 sha256:04ca958e5e2478a8bd8083325ed2a5e3918ce8486d9978f0cc4b722d432c531d

agent-installer-api-server

• MGMT-19297: Error when querying /events endpoint with ?host_ids=uuid1,uuid2… (#7445) #7445
• MGMT-20366: ironic inspection fails with Networking Connection error using 5050 port when ironic agent image override is used (#7633) #7633
• MGMT-20473: Revert “MGMT-20384: Feature flag for AMD GPU supported OCP versions (#7572)” (#7614) #7572
• NO-ISSUE: [master] Bump OCP versions: 4.12, 4.17, 4.15, 4.18, 4.14 (#7648) #7648
• NO-ISSUE: Renovate config to update linter, go-toolset and tekton files (#7644) #7644
• MGMT-14821: Remove multi-arch capability (#7613) #7613
• NO-ISSUE: change deprecated keys in kustomization.yaml (#7636) #7636
• MGMT-20567: Enable skip MCO reboot for day2 hosts (#7630) #7630
• MGMT-20228: Enhancement to allow cancelling day-2 host’s installation (#7492) #7492
• MGMT-20468: Add arbiter to cluster’s hyperthreading and disk encryption enums (#7631) #7631
• Konflux build pipeline service account migration for assisted-service-rhel9-acm-ds-main (#7609) #7609
• MGMT-20272: Cluster attribute finalizing_stage_started_at show wrong value (#7594) #7594
• Konflux build pipeline service account migration for assisted-service-saas-main (#7611) #7611
• Konflux build pipeline service account migration for assisted-service-rhel8-acm-ds-main (#7608) #7608
• OCPBUGS-54319: mirror changes to openshift-installer with oci-eval-user-data (#7619) #7619
• NO-ISSUE: Update Konflux references (#7582) #7582
• MGMT-20464: Fix NFD detection of NVIDIA GPUs (#7597) #7597
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• Konflux build pipeline service account migration for assisted-installer-controller-acm-ds-main (#1108) #1108
• Konflux build pipeline service account migration for assisted-installer-ds-main (#1110) #1110
• Konflux build pipeline service account migration for assisted-installer-controller-ds-main (#1109) #1109
• Konflux build pipeline service account migration for assisted-installer-acm-ds-main (#1107) #1107
• MGMT-20567: Enable HTTP endpoint for MCO ignition (#1117) #1117
• NO-ISSUE: Update Konflux references (#1114) #1114
• Full changelog

agent-installer-node-agent

• Konflux build pipeline service account migration for assisted-installer-agent-acm-ds-main (#992) #992
• NO-ISSUE: Update Konflux references (#984) #984
• Full changelog

agent-installer-utils

• OCPBUGS-55769: Use internal image registry #78
• AGENT-1195: bump appliance image to 4042ba #86
• OCPBUGS-55708: Include RHEL 9 guest image to support VM launches via … #84
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-55947: Update manifests to remove reliance on v1beta1 admission registration #549
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• STOR-2408: Bump OLM metadata to 4.20 #382
• Full changelog

aws-machine-controllers

• OCPBUGS-55720: Update machine-api-operator pkg with fixes #127
• Full changelog

azure-disk-csi-driver

• NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #103
• Full changelog

azure-file-csi-driver

• OCPBUGS-54897: UPSTREAM: 2515: allow deleting cross-subscription snapshots #92
• Full changelog

baremetal-installer, installer-artifacts

• OCPBUGS-53107: Set appropriate KillMode for systemd services #9562
• OCPBUGS-55683: Pre-create password files for agent installer OVE #9679
• OCPEDGE-1673: [TNF] Render secret manifests from fencing credentials block. #9635
• OCPBUGS-47719: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9693
• OCPBUGS-55817: add Lsv4 and Lasv4 series as tested #9696
• OCPBUGS-55772: Add support for Azure TDX confidential VM type #9691
• no-jira: add jcpowermac to nutanix review/approve groups #9697
• CORS-3960, OCPBUGS-55952: Remove Terraform Build Artifacts #9667
• no-jira: add PeaceRebel (Bipin) to coreos approvers & reviewers list #9687
• OCPBUGS-54502: ensure ctrplane nodes can access bootstrap MCS #9689
• OCPBUGS-54566: Apply defaults then validate confidentialCompute #9637
• OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
• no-jira: fixes to get shellcheck to pass #9669
• OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
• OCPEDGE-1707: Add Disable Certificate Verification API #9640
• no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
• OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
• Full changelog

baremetal-operator

• OCPBUGS-55717: Merge upstream #414
• Full changelog

baremetal-runtimecfg

• NO-ISSUE: Add emy as reviewer #346
• Full changelog

cli, cli-artifacts, deployer, tools

• NO-JIRA: make ‘oc status’ compatible with bare kube #1947
• Full changelog

cloud-credential-operator

• OCPBUGS-53429: Render: configure proxy on bootstrap static pod #855
• OCPBUGS-55777: Sync OpenStack CA Bundles from legacy location #850
• OCPBUGS-54829: golang.org/x/net v0.38.0 #851
• Full changelog

cluster-capi-operator

• OCPBUGS-55985: fix: machine: propagate non-authoritative deletion #290
• OCPBUGS-55947: Should not use v1beta1 of the AdmissionRegistration API group #289
• Full changelog

cluster-config-api

• Remove upstream on-by-default cloud feature gates (CloudDualStackNodeIPs, DisableKubeletCloudCredentialProviders) #2249
• SPLAT-2168: introduce AWSDedicatedHosts feature gate #2291
• OCPBUGS-55666: Remove MachineAPIProviderOpenStack feature gate #2307
• MCO-1657: FeatureGate for Bootimage updates for the vSphere platform #2301
• SPLAT-2072: Removed VSphereMultiVCenters feature gate #2231
• SPLAT-2158: Azure Multi Disk feature gate #2289
• README: Add criteria for featuregate test result windows and flake handling #2302
• Full changelog

cluster-etcd-operator

• OCPBUGS-55111: Remove ‘meta’ keyword from pcs resource create command #1417
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects - reapply #1831
• OCPBUGS-52466: bump library-go to bring in updated audit policies #1837
• OCPBUGS-55274: Change validity / refresh for some certs which should not be affected by dev cycle rotation change #1832
• Full changelog

cluster-kube-scheduler-operator

• OCPNODE-3192: enable the scheduler plugin if the feature gate DynamicResourceAllocation is enabled #561
• Full changelog

cluster-machine-approver

• OCPBUGS-19856: Improve log message when searching for node by InternalDNS #269
• No-Jira: ignore test file csr_check_test.go #270
• Full changelog

cluster-monitoring-operator

• NO-JIRA: [bot] Synchronize versions of the downstream components #2600
• MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2549
• Full changelog

cluster-network-operator

• OCPBUGS-55488: Remove environment variables related to ARO HCP MIv2 for CNO #2686
• Full changelog

cluster-node-tuning-operator

• NO-JIRA:e2e:daemonset: pod phase and events (#1289) #1289
• Full changelog

cluster-olm-operator

• OPRUN-3883: Add network-policy support #117
• Full changelog

cluster-version-operator

• OTA-1531: [3/x] cvo: read version from release metadata on startup #1188
• OTA-1531: [2/x] cvo: refactor LoadUpdate #1185
• OTA-1531: [1/x] cvo: refactor option processing #1184
• OTA-209: Add sync logic to the CVO configuration controller #1170
• OCPBUGS-53062: add the ports Field into the CVO’s container spec #1180
• NO-JIRA: Makefile: verify -> verify-yaml #1183
• Full changelog

console

• OCPBUGS-55919: remove 60 day alert from cluster update modal #15045
• CONSOLE-4550: col-sm-6 => GridItem sm={6} #15014
• OCPBUGS-54234: Fix impersonate group action #14915
• OCPBUGS-46385: fix alignment of Getting Started item icons #15025
• CONSOLE-4393: Update to Node.js® v22 #14841
• OCPBUGS-55412: Wrap ListPageHeader action with a div #15008
• OCPBUGS-55323: Add patternfly/react-topology to shared modules list of dynamic plugin sdk #14993
• OCPBUGS-55430: resolve http Context and Client handling #15009
• OCPBUGS-55629: get go mod tidy to pass #15024
• OCPBUGS-53428: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15001
• OCPBUGS-55375: add data-quickstart-id to quick create button #14998
• OCPBUGS-54157: Sample segment sessions #14990
• OCPBUGS-49291: Improving the DevExp for passing the CSP directives to console per flag + Make use of connect-src and object-src directives #14701
• OCPBUGS-53320: Add DEVCONSOLE_PROXY flag #15006
• OCPBUGS-55633: fix bug where Critical Alerts section cannot be collapsed #15015
• Full changelog

console-operator

• OCPBUGS-55698: Lift FeatureGate by bumping openshift/api #984
• Full changelog

gcp-machine-controllers

• OCPBUGS-46387: allow instances with unknown quotas to be created #114
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-54208: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2277
• OCPBUGS-54318: UPSTREAM: 131236: RWX tests should create RWX volumes #2279
• OCPBUGS-55945: Bump main 1.32.4 #2292
• TRT-2103: Revert “NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2291
• NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2287
• OCPBUGS-55632: Fix node expansion on older kubelets #2282
• TRT-2066: Use OTE generated labels for skips in test-kubernetes-e2e.sh #2255
• Full changelog

hypershift

• NO-JIRA: Increase the content width in the upstream docs #6147
• NO-JIRA: cpov2: fix structured authentication configuration serialization #6135
• CNTRLPLANE-269: Remove legacy machine approver and ign server reconciliation code #6133
• OCPBUGS-55913: Fix Job status returning empty reason and message #6134
• CNTRLPLANE-269: Remove DeploymentConfig usage from cpov2 #5724
• OCPBUGS-37323: MarkPersistentFlagRequired does not work since CLI refactoring #5649
• NO-JIRA: Fix minor issues with Azure HC creation doc #6128
• OCPBUGS-55504: Add postStart hook to kube-apiserver container #6074
• CNTRLPLANE-709: Add ability to limit platform specific resources managed by HostedCluster #6039
• CNTRLPLANE-261: Enable pprof in hosted control plane etcd #6003
• CNTRLPLANE-334: Update KASv2 structured authentication configuration #6119
• CNTRLPLANE-334: Update KAS structured authentication configuration generation logic to use new uid and extra field #6073
• OCPBUGS-54483: Add support for registry root entry only in the IDMS/ICSP #6100
• OCPBUGS-55357: Only build main branch components #6078
• CNTRLPLANE-265: Enable staticcheck linter in golangci-lint #5836
• CNTRLPLANE-740: Add DR for HCP using OADP and Hypershift plugin #6077
• NO-JIRA: bump HO supported version to 4.20 #6006
• CNTRLPLANE-798: ho: changes to ref’ed resources triggers HC reconciliation #6103
• Full changelog

insights-operator

• feat: add gatheringDisabled condition (#1078) #1078
• Full changelog

installer

• OCPBUGS-53107: Set appropriate KillMode for systemd services #9562
• OCPBUGS-55683: Pre-create password files for agent installer OVE #9679
• OCPEDGE-1673: [TNF] Render secret manifests from fencing credentials block. #9635
• OCPBUGS-47719: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9693
• OCPBUGS-55817: add Lsv4 and Lasv4 series as tested #9696
• OCPBUGS-55772: Add support for Azure TDX confidential VM type #9691
• no-jira: add jcpowermac to nutanix review/approve groups #9697
• CORS-3960, OCPBUGS-55952: Remove Terraform Build Artifacts #9667
• no-jira: add PeaceRebel (Bipin) to coreos approvers & reviewers list #9687
• OCPBUGS-54502: ensure ctrplane nodes can access bootstrap MCS #9689
• OCPBUGS-54566: Apply defaults then validate confidentialCompute #9637
• OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
• no-jira: fixes to get shellcheck to pass #9669
• OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
• OCPEDGE-1707: Add Disable Certificate Verification API #9640
• no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
• OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
• Full changelog

installer-altinfra

• OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
• no-jira: fixes to get shellcheck to pass #9669
• OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
• OCPEDGE-1707: Add Disable Certificate Verification API #9640
• no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
• OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
• Full changelog

ironic

• METAL-1264: Update to latest upstream content #655
• OCPBUGS-55381: Extract files one-by-one in logwatch #654
• Full changelog

ironic-agent

• OCPBUGS-55350: collect the entire journal from the host #184
• Full changelog

keepalived-ipfailover

• OCPBUGS-48318: Change default value for OPENSHIFT_HA_VRRP_ID_OFFSET #206
• Full changelog

machine-api-operator

• OCPBUGS-55461: Changed machineset tests to be serial #1365
• OCPBUGS-55720: fix: use patch for machine/machineset status #1362
• OCPBUGS-55461: Fixes machineset paused condition nil pointer #1361
• OCPBUGS-55461: Revert “Added skip for when config not multi nic” #1363
• Full changelog

machine-config-operator

• MCO-1654: Add new runbook for KubeletHealthState to alert #5042
• OCPBUGS-49728: Adapt MCC to use LayeredNodeState and remove LayeredPoolState #4841
• OCPBUGS-54697: error from generateAndValidateRenderedMachineConfig function can be misleading #5033
• OCPNODE-3173: Disable OCI artifact mount by default. #5016
• OCPBUGS-55597: OWNERS: update owners file with current MCO team members #5024
• OCPBUGS-55450: Only populate Status.PinnedImageSets.CurrentGeneration on valid generation value #5023
• OCPBUGS-55327: Bugfix Ignition compression merge #5006
• OCPBUGS-55262: Use auto=start only for IPsec out connections #5017
• OCPBUGS-55713: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5030
• OCPBUGS-52940: AWS Custom-DNS: Update services that run on control plane nodes #4939
• OCPBUGS-41485: Update MCD Log Output to Clarify No Configuration Change #5019
• Full changelog

machine-os-images

• OCPBUGS-55810: Dummy change to force a rebuild for 4.20 #62
• Full changelog

monitoring-plugin

• OU-794: fix: update monitoring and virtualization routes to avoid overriding console routes #410
• OU-774: bound table scroll and column alignment #402
• RHINENG-17675: feat: add group id to url params #403
• RHINENG-10537: fixed broken delete chip group for incidents filters #401
• OU-197: feature: upgrade react router to v5 compat #400
• OU-745: Check for CSRF change on each fetch cycle #404
• Full changelog

network-interface-bond-cni

• OCPBUGS-54229: Upstream sync 07-05-2025 #67
• NO-JIRA: Add ci-operator file #68
• Full changelog

network-tools

• NO-JIRA: Fix github epic ID and username matching #142
• Full changelog

oauth-server

• OSASINFRA-3534: Bump Gophercloud to v2 #170
• Full changelog

oc-mirror

• OCPBUGS-54587: v2: bump containers/common dep to 0.63.0 (#1138) #1138
• CLID-182: Add spinner to release collector mirror to disk or mirror to mirror (#1085) #1085
• no-jira: Disable go workspace and build v2 as a binary (#1078) #1078
• OCPBUGS-55100: implements registries.d file as specified in containers/image docs (#1131) #1131
• OCPBUGS-54220: v2/imgbuilder: use –authfile when set (#1129) #1129
• Full changelog

olm-catalogd, olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #336
• NO-ISSUE: Synchronize From Upstream Repositories #333
• NO-ISSUE: Synchronize from upstream #331
• Full changelog

openshift-controller-manager

• OCPBUGS-52193: legacy image pull secret rollback controller #380
• OCPBUGS-54695: Empty proxy variables are causing issues during the build #373
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Synchronize From Upstream Repositories #1000
• NO-ISSUE: Synchronize From Upstream Repositories #997
• OCPBUGS-53161, OPRUN-3880: Synchronize From Upstream Repositories #996
• Full changelog

operator-marketplace

• NO-ISSUE: Bump github.com/operator-framework/api from 0.30.0 to 0.31.0 #627
• NO-ISSUE: (CI) - Add check to avoid we upgrade by mistake the go vers… #625
• NO-ISSUE: Add dependabot k8s and go library groupings #626
• NO-ISSUE: Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 #620
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-55824: Revert “OCPBUGS-44285, OCPBUGS-37733, OCPBUGS-55824, OCPBUGS-54375: Downstream Merge 7th May 2025” #2557
• OCPBUGS-37733, OCPBUGS-44285, OCPBUGS-54375, OCPBUGS-55824: Downstream Merge 7th May 2025 #2550
• CORENET-5975: Dockerfile: Unpin OVS and consume the latest from FDP. #2525
• Full changelog

stream-coreos, stream-coreos-extensions

• NO-JIRA: README.md: add Mermaid diagram #1816
• NO-JIRA: tree: delete base compose files, rework README #1811
• NO-JIRA: Remove kernel-rt-kvm for cs9 and cs10 #1814
• NO-JIRA: tests: fix RHEL 10.1 handling in kernel replace test #1813
• Full changelog

tests

• TRT-2106: Fix race in MCN test cleanup #29775
• OCPBUGS-55785: bump limits #29778
• Revert “OCPNODE-2315: Add nested container test” #29779
• CNTRLPLANE-371: Update etcd test data for k8s 1.33 release (missing data) #29773
• OCPBUGS-55712: (olmv1 tests) Use exponential backoffs for verifyAPIEndpoints #29756
• OCPBUGS-55945: Bump main 1.32.4 #29772
• CORENET-5875, CORENET-5876, OCPBUGS-55910: Add EgressIP and L2 UDN route advertisements tests #29727
• OCPNODE-2315: Add nested container test #29594
• NO-JIRA: faultyloadbalancer test: pass instead of skip #29753
• OCPBUGS-55902: pkg/monitortestlibrary/allowedalerts: Ignore KubeJobFailingSRE for now #29747
• NO-ISSUE: OLMv1: Preflight: Relax checking of error message #29766
• CNTRLPLANE-371: Update etcd test data for k8s 1.33 release #29699
• OCPBUGS-55785: bump limits #29763
• OCPNODE-2999: Add SigstoreImageVerification e2e tests #29652
• OKD-243: Skip GatewayAPIController tests for OKD #29742
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-55020: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #142
• Full changelog

---

View changelog in Markdown or change previous release: 4.19.0-okd-scos.ec.104.19.0-okd-scos.ec.84.19.0-okd-scos.ec.74.19.0-okd-scos.ec.64.19.0-okd-scos.ec.54.19.0-okd-scos.ec.44.19.0-okd-scos.ec.34.19.0-okd-scos.ec.24.19.0-okd-scos.ec.14.19.0-okd-scos.ec.04.18.0-okd-scos.ec.34.18.0-okd-scos.ec.24.18.0-okd-scos.ec.14.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.20.0-0.okd-scos-2025-05-17-1015384.20.0-0.okd-scos-2025-05-16-2215374.20.0-0.okd-scos-2025-05-16-1015364.20.0-0.okd-scos-2025-05-15-2215354.20.0-0.okd-scos-2025-05-15-1015344.20.0-0.okd-scos-2025-05-14-221533───4.19.0-0.okd-scos-2025-05-17-0621124.19.0-0.okd-scos-2025-05-16-1821124.19.0-0.okd-scos-2025-05-16-0621114.19.0-0.okd-scos-2025-05-15-1821104.19.0-0.okd-scos-2025-05-15-0621094.19.0-0.okd-scos-2025-05-14-1821084.19.0-0.okd-scos-2025-05-14-062108───4.18.0-0.okd-scos-2025-05-17-0108384.18.0-0.okd-scos-2025-05-16-1308384.18.0-0.okd-scos-2025-05-16-0108384.18.0-0.okd-scos-2025-05-15-1308384.18.0-0.okd-scos-2025-05-15-0108384.18.0-0.okd-scos-2025-05-14-130838───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-05-02-1402244.15.0-0.okd-2025-04-03-2126204.15.0-0.okd-2025-04-02-1800124.15.0-0.okd-2025-03-28-1148024.15.0-0.okd-2025-03-26-0131074.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.3.0-0.okd-2025-04-09-1531174.3.0-0.okd-2021-08-03-2048314.3.0-0.okd-2021-03-22-1309504.3.0-0.okd-2021-02-02-2356544.3.0-0.okd-2021-02-02-1747534.3.0-0.okd-2021-01-28-0046514.3.0-0.okd-2021-01-18-145029───4.19.0-okd-scos.04.18.0-okd-scos.104.18.0-okd-scos.94.18.0-okd-scos.84.18.0-okd-scos.74.18.0-okd-scos.64.18.0-okd-scos.54.18.0-okd-scos.44.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github