4.22.0-okd-scos.ec.9

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.22.0-okd-scos.ec.9

Team Approvals:

Tests:

Blocking jobs
- upgrade Failed (2 retries) release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
- upgrade-minor Succeeded (2 retries) release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

Untested upgrades: 4.22.0-0.okd-scos-nightly-2026-03-05-122805, 4.22.0-0.okd-scos-nightly-2026-03-10-045010, 4.22.0-0.okd-scos-nightly-2026-03-10-165010, 4.22.0-0.okd-scos-nightly-2026-03-11-045010, 4.22.0-0.okd-scos-nightly-2026-03-11-165010

4.22.0-okd-scos.ec.8 - F F F
4.21.0-okd-scos.ec.19 (changes) - F F S

Changes from 4.22.0-okd-scos.ec.8

Created: 2026-03-12 10:16:24 +0000 UTC

Image Digest: sha256:cbc71e7dc20661322f0a804724c0b077c99242d0f302d2c31002127bd1f911bc

Release 4.22.0-okd-scos.ec.9 was created from registry.ci.openshift.org/origin/release-scos:4.22.0-0.okd-scos-nightly-2026-03-11-165010

Components

Kubectl 1.34.1
Kubernetes upgraded from 1.34.2 to 1.35.1
Kubernetes Tests 1.34.1
CentOS Stream CoreOS 10 upgraded from 10.0.20260217-0 to 10.0.20260310-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
GatewayAPI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GatewayAPIController (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ManagedBootImages (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ManagedBootImagesAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ManagedBootImagesAzure (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ManagedBootImagesvSphere (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
InsightsConfig (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
InsightsOnDemandDataGather (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
AWSServiceLBNetworkSecurityGroup (0 tests)	Disabled	Enabled (Changed)	Enabled	Enabled	Disabled	Enabled (Changed)	Enabled	Enabled
ClusterAPIMachineManagementVSphere (0 tests)	Disabled	Disabled	Enabled	Enabled	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)
AdditionalStorageConfig (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIMachineManagementAWS (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIMachineManagementAzure (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIMachineManagementBareMetal (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIMachineManagementGCP (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIMachineManagementOpenStack (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIMachineManagementPowerVS (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterUpdatePreflight (0 tests)			Enabled (New)	Enabled (New)
ExternalOIDCExternalClaimsSourcing (0 tests)			Enabled (New)	Enabled (New)
MachineAPIMigrationAWS (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
MachineAPIMigrationOpenStack (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
MachineAPIMigrationVSphere (0 tests)			Enabled (New)	Enabled (New)

New images

aws-node-termination-handler git 341ed3a0 sha256:bb865615a9c5a762130f92f364e5a0adb1ae58d658923007218c6149162dc30c

Removed images

libvirt-machine-controllers

Rebuilt images without code change

aws-karpenter-provider-aws git 2e871ee4 sha256:866a8a42c830c518f54b285cc573bf9d79457a45067ec0122fea90e0f5ba836c
aws-kms-encryption-provider git 19e7b623 sha256:2c949939fc13b2a6e48b9fc5cf8cc2e23b8b02237f4bbe8d320d9825a14765a1
azure-cloud-controller-manager git 8584b9a8 sha256:7f33478fd8fe94abbf7b4c0768766228fe70de0fdeb843fa3b5d45e8820feffb
azure-cloud-node-manager git 8584b9a8 sha256:f9363228f18b113dd1455c550b7b924f8e65ece61c047ea3b438398109a53108
azure-kms-encryption-provider git 99b9a3a3 sha256:0973c7077aa81e0bc91e7defe2504e3d7627cde47ca6c66fc55153d23f1c10e4
azure-service-operator git 17e57462 sha256:6e87318f88b6ecd794cde17e911f7bb7d262976e4a294a3325a04453b580c264
cluster-bootstrap git dc0d4a5c sha256:61c9c727fc44ad522e07fc6b0b14adacecae22e439fd8c9983606b64309af6aa
cluster-policy-controller git 8b775487 sha256:8e0fedaa3a9b7b135d9538190867a4b726b852872c831a67c19ce5ed95cde642
container-networking-plugins git 747ad66c sha256:0e284ac6db31d4bb278bbb8f22eb886d977ac903bfae20a0542c0b7bad7a9ff2
containernetworking-plugins-microshift git 747ad66c sha256:7f0314144f327bce29198c6a93803ee051415fd8d423bb96efc9d1ef714ea7cd
csi-external-attacher git cb0b279d sha256:e7c2b1ff615b15228490f348ee5aba8160e20419b33b4c163bd7cd239dc515c6
csi-node-driver-registrar git 65d7aa73 sha256:4613a0e5517c173351d27821ddacc656ae43d8e464b3bf13569b9b4cfef3fc71
docker-builder git 711f2e68 sha256:8e28ed7c5387fe067b9c9cce619e54993de5b544320e3726996f50a01faa78ab
docker-registry git d4cce000 sha256:54e023160bd1468bf754834c7e0e86a95c6aaf3e168c6e628ceba1600911f781
egress-router-cni git 5e0f8d1b sha256:d67d2c95a8a6f60125ed0f14291e7389b4d2549fde1174b734bbf6812e491f4b
etcd git 6a099226 sha256:a7ea285647e8aaa1094e13e578a874b7763221a593663e0437408d89b5bb0f67
ironic-static-ip-manager git a379d09f sha256:621d63517a18ca0301cd0697c6005387a8f4c96bfcc21ced0de640e55fba451a
kubevirt-cloud-controller-manager git 76dd5a6f sha256:38ef781ac5a5d2c9f3acb3589ab13718d7462ebc10ebd8a04dbab3b04d818397
kubevirt-csi-driver git 9e2dbddf sha256:1a5e3b99d736861573ee98f63716bb995ff03d17539b2b4df5d31b013d25478d
multus-admission-controller git ce94b849 sha256:4b01cdf1b6ec46b707d97dfdc0d11e5739970b0b18f786a7a096d03810b5d28f
multus-route-override-cni git 08af4127 sha256:a0d0b8158725f229e6d4fd0f567aba5e6adc6831436781f7f513f6817a7c7565
multus-whereabouts-ipam-cni git d691040e sha256:d8df8d34260f22e4e8cff99e08a5a9a8ff05da217b5593f736e7ccbeb9b42828
network-interface-bond-cni git 297eeb43 sha256:1846b897edc96d4676172637428d392d95d532e814a625f2ee6ec5ed8422edc6
network-metrics-daemon git 5b233ea1 sha256:dc090d9b48dc572e6b20b0c9889143dc30aeb3d5aaae30f159badf130fea23d2
nutanix-cloud-controller-manager git ecf52c51 sha256:d44ea9bc0396bcba1bca5c56dfdbcb845e2cc86fa7ae22b44394c69c7f946ece
oauth-apiserver git 467c6318 sha256:dd8420713252cb0521f454e620004e2de1aab6f0ab828a64ce78a04f1a81c00d
oauth-proxy git 714292f5 sha256:065c3ef6acbc2d87fd179990ab6fb04da50542eadbf9dd2f8fc83f6a7821db45
openshift-apiserver git 56aa2d96 sha256:d95eb04aa36d7b6642d86ece4403e9d3af70fd52c0627a34acdd2ec35e33f4bb
openstack-machine-api-provider git bd549946 sha256:56e5a6f106975fd37c3038e07933a4676e01315cd448f2a2f489f00b758365ce
openstack-resource-controller git 6a62845e sha256:538c60977f8e35a63b716d05982abea9b95e865958d17821377ed6b2b1d7f046
powervs-cloud-controller-manager git 5ea93179 sha256:c914fbd095bc158081157f048c07cd45fd52a97b6fb6285ab1956b849dff3287
powervs-machine-controllers git bc7c3eec sha256:024228488ef295f8614718ec66733a0869f41b3701fb2e3f3868ad90d7c21156
route-controller-manager git 624742d9 sha256:1f40b9ca696b3b6365fdf8ece0d22a3c16d7a68c11f5e127de67cae20d42715f
service-ca-operator git 503e4f5f sha256:00a6dc8e24671fbc341b79878155f47fac49bd51a3b10a7a0a50b7ca8290c5bf

agent-installer-api-server

MGMT-22782: Add state root cleanup script to day-2 worker ignition #9942
NO-ISSUE: Add bluesort to OWNERS_ALIASES #9979
OCPBUGS-77767: OVE Above/Below-the-sea integration - Network configuration not persisted #9978
MGMT-23339: Use release image URL from ClusterImageSet for KubeAPI clusters #9957
NO-ISSUE: [master] Bump OCP versions: 4.19, 4.13 #9988
MGMT-22518: Adding RHOAI application endpoint to the list of known hosts for SNO #9936
OCPBUGS-77552: fix: min supported arbiter disk size should be 50GB #9977
NO-ISSUE: Update InfraEnv CR description #9938
MGMT-22905: Update LSO override for operator deployment #8824
NO-ISSUE: [master] Bump OCP versions: 4.17 #9975
NO-ISSUE: [master] Bump OCP versions: 4.22, 4.14, 4.21 #9968
NO-ISSUE: Refresh RPM lockfiles #9945
NO-ISSUE: Fix loki and logging #9939
NO-ISSUE: [master] Bump OCP versions: 4.18, 4.20 #9941
MGMT-23205: Reject empty MAC address in NMState static network config #9937
NO-ISSUE: [master] Bump OCP versions: 4.21 #9935
MGMT-21783: bundle cluster and host ignition endpoint CA certificates for day-2 hosts #8826
ACM-29247: Infrastructure Operator - Set up Renovate configuration to automatically create Hive API Synchronization PRs #9917
NO-ISSUE: Refresh RPM lockfiles #9915
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2040
OCPBUGS-76382: Fix root partition before copying IRI registry data #2034
ACM-29247: Infrastructure Operator - Set up Renovate configuration to automatically create Hive API Synchronization PRs #2037
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #2035
NO-ISSUE: Refresh RPM lockfiles #2027
Full changelog

agent-installer-node-agent

NO-ISSUE: Refresh RPM lockfiles #1355
NO-ISSUE: Refresh RPM lockfiles [SECURITY] #1351
Full changelog

agent-installer-ui

Above-the-sea UI QE test second phase (#3453) #3453
above sea level QE test fix (#3450) #3450
Update chatbot readme (#3447) #3447
Make use of PF Icon component (#3439) #3439
Red Hat Konflux update assisted-installer-chatbot-main (#3424) #3424
MGMT-22748: Setup insights-frontend-builder-common build tools (#3419) #3419
MGMT-23299: Make secondary VIP fields optional (#3417) #3417
Include additional operators in OVE UI ISO config (#3413) #3413
Update OCM setup docs (#3418) #3418
fix: bump lodash to ^4.17.23 to address CVE-2025-13465 (#3410) #3410
fix: bump react-router-dom-v5-compat to ^6.30.3 to address CVE-2026-22029 (#3409) #3409
OCPBUGS-76280: Next button is disabled on optional configurations page (#3402) #3402
Full changelog

agent-installer-utils

OCPBUGS-78042: Update Konflux references #266
OCPBUGS-77956: Update to use the 4.21 Operator Catalog #268
OCPBUGS-77611: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.22 #267
AGENT-1453: Add a flag to provide a custom appliance image #264
AGENT-1447: Override prefilled rendezvousIP #256
OCPBUGS-77270: Remove multiple redhat-operator-index catalogs #261
OCPBUGS-77235: Use mtv-operator from 4.20 catalog #259
OCPBUGS-77233: Update Konflux references #250
OCPBUGS-77235: Update mtv-operator version #257
NO-ISSUE: Fix linting issues #255
Full changelog

apiserver-network-proxy

OCPBUGS-73992: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.22 #89
Full changelog

aws-cloud-controller-manager

OCPBUGS-76344, OCPCLOUD-3276: Merge https://github.com/kubernetes/cloud-provider-aws:master (dc94f58) into main #120
OCPCLOUD-3341: Updates ecr-credential-provider make target #130
SPLAT-2220: tests/ote: extend tests for gate AWSServiceLBNetworkSecurityGroup #129
Full changelog

aws-cluster-api-controllers

OCPBUGS-77748: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.22 #597
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.10.2 (999ac9a) into main #588
NO-JIRA: Remove dead RELEASE_DIR ref #596
OCPCLOUD-3326: Update to use new manifests-gen #584
Full changelog

aws-ebs-csi-driver

OCPBUGS-77628: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.22 #302
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-77623: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.22 #515
OCPBUGS-77571: Add only to tags to volume object, if volume is not already tagged #518
OCPBUGS-77497: Fix readonly root fs in Azure init containers #512
NO-JIRA: Add coderabbit, including instructions #509
STOR-2752: Early chore: update OCP version in OLM metadata #505
Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.22 #517
OCPBUGS-77378: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.22 #510
OCPBUGS-77405: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.22 #511
Full changelog

aws-machine-controllers

CORS-4315: enable primary IPv6 when infrastructure ipFamily is DualStackIPv6Primary #171
SPLAT-2617: Added dynamic dedicated host support #172
Full changelog

aws-pod-identity-webhook

CCO-784: update to pick up tls-min-version and tls-cipher-suites #207
Full changelog

azure-cluster-api-controllers

OCPCLOUD-3294: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:main (bc68ad9) into main #370
OCPBUGS-77637: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.22 #369
OCPCLOUD-3324: Update to new manifests-gen #357
Full changelog

azure-disk-csi-driver

OCPBUGS-77248: Rebase to v1.34.2 for OCP 4.22 #124
OCPBUGS-77575: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.22 #123
STOR-2768: Rebase v1.34.1 #120
Full changelog

azure-file-csi-driver

STOR-2761: Rebase to upstream v1.35.0 for OCP 4.22 #116
OCPBUGS-77798: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.22 #117
Full changelog

azure-machine-controllers

OCPBUGS-74076: Fix: Enable boot diagnostics for Azure Stack Hub VMs #182
OCPBUGS-74573: Add validation for AzureManaged boot diagnostics on Azure Stack Hub #183
OCPBUGS-77607: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.22 #186
Full changelog

azure-workload-identity-webhook

OCPBUGS-73994: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.22 #43
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-74161: fix: pin metal3remediations CRDs storage version to v1beta1, deploy separate manifests in Default #68
Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.22 #67
OCPBUGS-74161: manifests-gen: include IPAM CRDs #65
Merge upstream #63
OCPBUGS-73951: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.22 #58
Update to new manifests-gen #64
Full changelog

baremetal-installer, installer, installer-artifacts

NO-JIRA: aws: validate instance type and AMI compatibility for SEV-SNP #10126
CORS-4345: aws: config must be created with install region #10374
OCPBUGS-77722: Updating ose-baremetal-installer-container image to be consistent with ART for 4.22 #10352
no-jira: Golangci config #10372
METAL-156: Use Live ISO for baremetal bootstrap VM #9814
no-jira: Bump openshift api #10347
no-jira: OCPBUGS-77255: wait for node-image-overly to restart sshd #10363
OCPBUGS-77683: Add c8g* to tested_instance_types_aarch64 #10356
OCPBUGS-77440: Image in worker machineset is auto-updated when user specifies the osImage #10341
OCPBUGS-66941: aws: throughput/iops validation for machine pools #10222
no-jira: [OCPBUGS-77255]: kludge: restart sshd server #10345
OCPBUGS-70168: Increase size of /var/ostreecontainer mount #10304
no-jira: ibmcloud: fix region survey default value #10336
OCPBUGS-77355: fix wavelength zone name regex #10338
CORS-4345: remove AWS SDK v1 unused code and go deps #10339
CORS-4244: adjust validations to allow dual-stack CIDRs on AWS #10241
CORS-3954: Enable strict unmarshaling for user invocations #10287
CORS-4076: bump capa version to support dualstack network infrastructure #10337
OTA-1861: data/bootstrap/files/usr/local/bin/bootkube: Pass CVO render –cluster-version-manifest-path #10295
OCPBUGS-77182: PowerVC: Add default LB #10333
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-machine-controllers

OCPBUGS-77619: Updating baremetal-machine-controller-container image to be consistent with ART for 4.22 #250
OCPBUGS-74161: manifests: remove metal3remediation, now deployed from o/cluster-api-provider-metal3 #249
NO-ISSUE: Update fetch_ext_bins.sh to use setup-envtest for kubebuilder binaries #251
OCPBUGS-73995: Updating baremetal-machine-controller-container image to be consistent with ART for 4.22 #242
Full changelog

baremetal-operator

NO-ISSUE: Merge upstream #465
Updating ose-baremetal-operator-container image to be consistent with ART for 4.22 #464
Full changelog

baremetal-runtimecfg

OCPBUGS-77301: Remove VIP leasing feature #385
Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.22 #386
Full changelog

cli, cli-artifacts, deployer, tools

OTA-1856: pkg/cli/admin/release/mirror: Deprecate in favor of oc-mirror #2195
OTA-1864: Extend update recommend precheck alerts #2210
COS-4005: Allow periods in display name labels for version validation #2215
NO-ISSUE: images/tools/Dockerfile: Install iotop, if that fails fall back to iotop-c #2216
OCPBUGS-76318: pkg/helpers: Print the right error object #2197
OKD-322: Update OC-tools Dockerfile to work on CentOS/RHEL 10 #2205
CNTRLPLANE-2656: fixing oc cli failures #2199
OCPBUGS-76319: Makefile: Strip debugging symbols by default #2196
OCPBUGS-76958: inspect: Allow resource group to be specified in the namespace resources list #2204
Full changelog

cloud-credential-operator

MON-4475: chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors #964
TRT-2568: Revert “CCO-788: Remove kube-rbac-proxy container from metrics” #982
CCO-788: Remove kube-rbac-proxy container from metrics #976
OCPBUGS-77550: cloud-credential-tests-ext to support multiple architectures #979
CCO-726: Update go modules #974
Full changelog

cloud-network-config-controller

CORENET-6562: CNCC rebase k8s to 1.35.0 #202
OCPBUGS-77711: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.22 #207
Full changelog

cluster-authentication-operator

CNTRLPLANE-312: Add generation logic for new API fields in the Authentication CR #810
CNTRLPLANE-2589: update cases to execute as serial/parallel #833
CNTRLPLANE-2241: Update library-go to get KMS encryption #837
Full changelog

cluster-autoscaler

OCPBUGS-77631: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.22 #408
AUTOSCALE-482: VPA E2Es: switch from docker.io ubuntu to k8s-hosted image #406
Full changelog

cluster-autoscaler-operator

AUTOSCALE-172: add kube api content type flag to autoscaler #362
Full changelog

cluster-baremetal-operator

Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.22 #568
OCPBUGS-65472: Add ClusterRole to baremetal ClusterOperator relatedObjects #544
OCPBUGS-73970: Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.22 #545
Full changelog

cluster-capi-controllers

OCPBUGS-73976: Updating ose-cluster-api-container image to be consistent with ART for 4.22 #262
Full changelog

cluster-capi-operator

NO-JIRA: Add CodeRabbit inheritance for org-wide rules #489
OCPCLOUD-3005, OCPCLOUD-3186, OCPCLOUD-3367: Implement validation webhook for custom resource admission #461
NO-JIRA: Remove duplicated vnet delete permission #252
NO-JIRA: improve unit test performance and CI flakiness #487
OCPCLOUD-3369: Implement RequiredVersions functionality for CompatibilitySchema #471
OSASINFRA-3980: Re-add openstack credentials request #478
NO-JIRA: e2e: improve failure diagnostics #484
OCPCLOUD-3386: Implement feature-gate support in capi-operator endpoint #475
OCPCLOUD-3364: Implement ExcludedPaths functionality for CRD validation webhook #467
NO-JIRA: Add missing CVO annotations to RBAC #480
NO-JIRA: Set admission failure policy to Ignore #479
OCPCLOUD-3329: Manifests gen all the VAPs #470
NO-JIRA: Update HaveCondition to version from revision controller branch #481
OCPBUGS-77363: manifests-gen: fix nil deref for non-webhook CRDs #482
NO-JIRA: e2es improvements #473
NO-JIRA: coderabbit: Tell it not to warn about old Go #474
NO-JIRA: Add timeout to all eventually entries with contexts #472
OCPCLOUD-3005: Add CRD admission time validation implementation #459
OCPCLOUD-3262: MAPI & CAPI MachineSet VAP #440
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-73979: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.22 #432
CORS-4209: ensure NodeIPFamilies field is kept as-is after transforming #426
OCPBUGS-62176, OCPCLOUD-3348: tls: use centralized TLS profile #433
Full changelog

cluster-config-api

SPLAT-2637: Promoting gate AWSServiceLBNetworkSecurityGroup to GA #2717
MON-4033: Add OpenShiftMetricsConfig #2726
envtest-releases: add v1.35.1 to index #2748
Fix MachineConfiguration BootImage Enum for MachineSets/ControlPlaneMachineSets #2750
OCPBUGS-74514: OCPBUGS-74515: OCPBUGS-74516: OCPBUGS-74517: remove bootimage update feature gates #2733
OTA-253: Add cluster update preflight mode API #2684
OCPBUGS-74508: Remove GatewayAPI featuregates #2742
NO-ISSUE: Update dev go image #2735
Add CodeRabbit inheritance for org-wide rules #2746
CNTRLPLANE-2522: features: add ExternalOIDCExternalClaimsSourcing feature gate #2743
MCO-2142: OSImageStream.spec.defaultStream validation #2736
CNTRLPLANE-2550: Add support for CEL expression claim mappings for username and groups #2719
NO-JIRA: Add MachineAPIMigrationVSphere feature gate for DevPreview #2739
CNTRLPLANE-1752: Add PKI API to config.openshift.io/v1alpha1 #2645
NO-JIRA: LabelSelector should have omitzero #2741
OCPNODE-4060: Add additional storage configuration fields to ContainerRuntimeConfig #2681
AI: Adds a new /generate-tests Claude command that automates the generation of integration tests #2706
OCPSTRAT-2728: Rebase 1.35 #2578
OCPCLOUD-3386: Add platform-specific feature gates for CAPI Operator features #2730
ClusterAPI revision components can be empty #2728
NO-JIRA: feat: add link to sippy for tests #2732
SPLAT-2410: Promote ClusterAPIMachineManagementVSphere to TechPreview #2724
Require APIExcludedFields Versions to be set #2727
OCPBUGS-32275: Add ingress.spec.domain immutability validation #2695
MON-4032: Add PrometheusOperatorAdmissionWebhookConfig to ClusterMonitoringSpec #2716
refactor: use deepcopy-gen style in DeepCopyInto functions #2721
OCPNODE-3880: Add empty CRIOCredentialProviderConfig resource #2711
NO-JIRA: feat: update the html for feature promotion #2714
Ensure unique paths for excluded fields in compatibility requirement #2720
OCPBUGS-76919: add listtype atomic #2713
CNTRLPLANE-2586: postpone the removal of the DeploymentConfig API #2646
CCXDEV-15605: Promote InsightsOnDemandDataGather and InsightConfig feature gate to default #2473
OCPSTRAT-2876: Enable major version segmentation of enabled feature gates #2637
Full changelog

cluster-config-operator

NO-JIRA: OWNERS: remove engineer who has left Red Hat #466
OCPBUGS-73988: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.22 #460
CORS-4340: add NodeIPFamilies configuration field #472
NO-JIRA: bump: pull in latest ocp/api #471
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-77596: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 4.22 #396
OCPBUGS-77259: e2e: improve formatting of cluster operators stabilization timeouts, bump suite timeout #394
OCPCLOUD-3349: tls: use centralized TLS profile #381
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-77601: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.22 #269
Full changelog

cluster-dns-operator

NE-2469: Migrate away from deprecated ioutil #454
NE-2482: bump k8s libraries to v0.35.0 and cr to v0.23.1 #459
CNTRLPLANE-1544: manifests: Enable user namespaces #451
OCPBUGS-69912: Updating ose-cluster-dns-operator-container image to be consistent with ART for 4.22 #463
OCPBUGS-65498: Add openshift-dns-operator ClusterRole to ClusterOpera… #455
NO-JIRA: Add NI&D team members to OWNERS #465
Full changelog

cluster-etcd-operator

OCPBUGS-76538: Removed unneeded ETCDCTL_API environment variable #1560
OCPBUGS-76331: fix: truncate job names to respect k8s 63-char limit #1554
NO-JIRA: fix unit-test flake in revision tests #1558
NO-JIRA: update cert injection annotations to beta #1551
NO-JIRA: Clean up stale Pacemaker attributes before TNF cluster restore #1553
Full changelog

cluster-image-registry-operator

OCPBUGS-74495: Fix Azure Stack Hub compatibility with dual SDK approach #1287
OCPBUGS-62626: only report Progressing=True when progressing towards new configuration #1293
OCPBUGS-66225: bump deployment ProgressDeadlineSeconds to 120s #1298
CNTRLPLANE-2651: Fix OTE suite qualifiers to use proper CEL expressions #1300
CNTRLPLANE-2651: OTE infrastructure #1283
Full changelog

cluster-ingress-operator

OCPBUGS-77493: e2e: Increase GatewayClass acceptance timeout to 5m #1372
OCPBUGS-77704: Update annotations in gatewayclass to use the istio version #1375
NE-2131: Add OpenShift Tests Extension scaffolding with GatewayAPI CRD tests #1371
OCPBUGS-74508: Remove the GatewayAPI feature gate #1366
NO-JIRA: enable inheritance on coderabbit #1373
OCPBUGS-74511: remove RouteExternalCertificate feature gate #1355
OCPBUGS-65629: ensure canary daemon set uses its own service account. #1310
OCPBUGS-77305: Bump to OSSM 3.2.2 and Istio 1.27.5 #1350
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-78117: Update the deprecated usage alerts for 1.35 #2068
OCPBUGS-77509: Add support for event-ttl cases and go test cases in Kube API Server Operator #2060
OCPSTRAT-2728: Rebase 1.35 #2003
CNTRLPLANE-2223: Test bound token signer controller fix #2050
TRT-2561: Revert #2032 “CNTRLPLANE-2622: config tls on check-endpoints container” #2057
CNTRLPLANE-2622: config tls on check-endpoints container #2032
CNTRLPLANE-2241: Update library-go to get KMS encryption #2033
Full changelog

cluster-kube-controller-manager-operator

OCPSTRAT-2728: Rebase 1.35 #902
OCPBUGS-74023: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.22 #903
Full changelog

cluster-kube-scheduler-operator

OCPSTRAT-2728: Rebase 1.35 #602
CNTRLPLANE-2843: chore: update OWNERS #618
Full changelog

cluster-kube-storage-version-migrator-operator

NO-JIRA: OWNERS: remove engineers who have left Red Hat #147
Full changelog

cluster-machine-approver

Revert “OCPCLOUD-3347: tls: use centralized TLS profile” #291
OCPCLOUD-3347: tls: use centralized TLS profile #286
Full changelog

cluster-monitoring-operator

NO-JIRA: fix wrong string formatter in tests #2839
NO-ISSUE: fix typo #2837
OCPBUGS-77543: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.22 #2836
NO-JIRA: [bot] Synchronize versions of the downstream components #2830
MON-4533: Bump prometheus-operator to v0.89.0 #2822
OCPBUGS-74524: Remove MetricsCollectionProfiles feature-gate #2812
MON-4494: add kubernetes-mcp-server metrics to allowed list #2818
MON-4491: Implement Logic for User Defined #2807
OCPBUGS-61262: AlertingRule: fix duplicate PrometheusRules after MD5->SHA-224 naming change #2820
NO-JIRA: [bot] Synchronize versions of the downstream components #2800
Full changelog

cluster-network-operator

NVIDIA-554: DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating #2907
OCPBUGS-76500: Add config override for openflow-probe #2916
OCPBUGS-60670: Add ValidatingAdmissionPolicy for EgressIP #2837
CORENET-6605: fix more transient error condtions caused Degraded #2896
CORENET-6417: Drop remaining openshift-sdn code #2882
Full changelog

cluster-node-tuning-operator

NO-JIRA: workloadhints: use IsVM to skip BM-only tests #1478
OCPBUGS-77200: Remove hardcoded nf_conntrack_hashsize from performance profile tuned configuration #1477
OCPBUGS-62702: AA: latency-e2e: skip tests on HT-disabled systems #1386
OCPBUGS-77377: E2E: Add test case to check Infrastructure pods affinity #1470
NO-JIRA: Eliminate expensive and unnecessary MachineConfig updates #1473
NO-JIRA: Bump Kubernetes, OpenShift and other dependencies #1475
Full changelog

cluster-olm-operator

NO-ISSUE: Update to go 1.25.7 #175
OCPBUGS-65623: cluster-olm-operator sets Progressing=True during upgrade #173
OPRUN-4230, OPRUN-4440: Enable Boxcutter in TPNU #163
Full changelog

cluster-openshift-apiserver-operator

CNTRLPLANE-2241: Update library-go to get KMS encryption #647
Full changelog

cluster-openshift-controller-manager-operator

CNTRLPLANE-2769: bump kubernetes dependencies to v1.35 #415
no-jira: Migrate away from deprecated ioutil #401
Full changelog

cluster-samples-operator

OCPBUGS-77919: Periodic sync of OKD samples #666
MON-4508: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #673
OCPBUGS-77918: Periodic sync of supported OCP samples #667
OCPBUGS-77879: update kubernetes api to v0.35.2 #676
OCPBUGS-77678: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.22 #675
OCPBUGS-74024: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.22 #672
Full changelog

cluster-storage-operator

OCPBUGS-77686: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.22 #671
Full changelog

cluster-update-keys

OCPNODE-3978: Third run at expanding the default ClusterImagePolicy for openshift component images #97
Full changelog

cluster-version-operator

OCPBUGS-78061: Fix invalid ClusterVersion.Spec.DesiredUpdate #1345
OTA-1860: Stop blocking patch updates when cluster version overrides are set #1314
TRT-2569: Revert “OTA-1546: Add a metric and an alert for conditional risk conditions” #1339
OTA-1546: Add a metric and an alert for conditional risk conditions #1318
OCPBUGS-77762: Add an e2e to check the default network polocy #1334
OTA-1546: Generate riskConditions in a better way #1324
NO-JIRA: Allow for risks only desired update #1335
OCPBUGS-77762: install/0000_00_cluster-version-operator_02_networkpolicy: Add inclusion annotations #1333
NO-JIRA: Use github.com/daixiang0/gci to sort imports #1330
NO-JIRA: Sort and verify imports #1328
Revert “TRT-2549: Revert “Add a serial e2e for accept-risks”” #1323
NO-JIRA: Mention the fauxinnati in the developer documentation #1308
OCPBUGS-66898: Implement mTLS authentication and authorization for CVO metrics endpoint #1271
Full changelog

configmap-reloader

NO-JIRA: disable automatic coderabbit reviews #79
OCPBUGS-77734: Updating configmap-reload-container image to be consistent with ART for 4.22 #78
Full changelog

console

CONSOLE-5068: Remove createModalLauncher from modal factory #16066
CONSOLE-4990: History object migration for #15961 / unit test fixes #16120
OCPBUGS-77867: Fix perspective switcher E2E test flake that causes 6-hour CI timeout #16114
HELM-609: Frontend for Installation of Helm Charts via URL #15961
NO-JIRA: Enforce no yarn.lock changes at build time #16107
OCPBUGS-77658: Azure Provisioning Fields are not mandatory #16092
CONSOLE-5049: Migrate DeleteResourceModal to useOverlay pattern #16022
CONSOLE-4827: make software catalog work with all projects #15804
OCPBUGS-77848: [CI] Fix the VolumeSnapshot CRUD flaky test failures #16110
CONSOLE-4447: Migrate modals to modern PatternFly Modal components #16015
OCPBUGS-77804: prep for 4.21 GA SDK publish #16109
CONSOLE-4990: Replace history object navigation with useNavigate hook #15959
CONSOLE-5030: Refactor remaining firehose impacted components #16039
CONSOLE-4945: Add Disk, Network, CPU and VM counts to node overview #16000
OCPBUGS-77415: Fix infinite recursion in project access form #16069
CONSOLE-5019: Consistently use FC and memo type param #16098
OCPBUGS-77423: Fix extra space in PageHeading when no actions present #16072
OCPBUGS-77044: Fix topology node labels disappearing when moving cursor to kebab menu #16042
NO-JIRA: Context improvements #16068
OCPBUGS-44612: Deprecate useUserSettings and expose useUserPreference #16057
CONSOLE-5100: Remove support for PatternFly 5 #16056
CONSOLE-5094: Delete Dockerfile.product.nodejs #16047
OCPBUGS-77016: fix type as K8sResourceKind assertion in createKnatifyPage #16044
CONSOLE-5063: Remove AppInitSDK #16019
OCPBUGS-76945: Add Azure Resource Group in OCP console for ODF STS installation #16030
OCPBUGS-76378: fix display of Lightspeed button #16012
OCPBUGS-77000, OCPBUGS-77013: OLM prompts for GCP Workload Identity parameters during Kiali Operato… #16051
NO-JIRA: /microcopy-review improvements #16026
CONSOLE-4991: Reenable all unit tests #16025
And 8 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-74506: Remove ConsolePluginSecurityPolicy featuregate #1108
OCPBUGS-77741: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.22 #1121
Full changelog

coredns

OCPBUGS-77600: Updating coredns-container image to be consistent with ART for 4.22 #170
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

NO-JIRA: Update DOWNSTREAM_OWNERS #373
Full changelog

csi-driver-nfs

OCPBUGS-77740: Updating csi-driver-nfs-container image to be consistent with ART for 4.22 #169
Full changelog

csi-external-provisioner

OCPBUGS-77752: Updating csi-provisioner-container image to be consistent with ART for 4.22 #120
Full changelog

csi-external-resizer

OCPBUGS-77735: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.22 #182
Full changelog

csi-external-snapshot-metadata

OCPBUGS-77411: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.22 #10
Full changelog

csi-external-snapshotter, csi-snapshot-controller

OCPBUGS-77687: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.22 #201
OCPBUGS-69935: UPSTREAM: <drop>: restore log level of the group snapshot reconciler #200
OCPBUGS-77413: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.22 #199
Full changelog

csi-livenessprobe

OCPBUGS-77672, STOR-2758: Rebase to upstream v2.18.0 for OCP 4.22 #81
Full changelog

driver-toolkit

OCPBUGS-77868: Clean up cruft in /var/cache/dnf #182
NO-ISSUE: Add autoconf, automake and libtool packages #181
Full changelog

gcp-cloud-controller-manager

OCPBUGS-77570: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.22 #98
Full changelog

gcp-cluster-api-controllers

NO-JIRA: Remove dead RELEASE_DIR ref #263
NO-JIRA: Remove old manifest-gen assets #264
OCPCLOUD-3325: Update to new manifests-gen #258
Full changelog

gcp-machine-controllers

OCPNODE-4168: Empty disk should be ignored for gcp additional disk #141
OCPBUGS-77746: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.22 #144
Full changelog

gcp-pd-csi-driver

OCPBUGS-77632: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.22 #100
OCPBUGS-77602: Support Downward API node name override #99
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-77558: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.22 #174
OCPBUGS-77428: Pass node name to csi-driver container #172
OCPBUGS-77183: Add RBAC permission for node driver to get Node objects #170
Full changelog

gcp-workload-identity-federation-webhook

CCO-786: update to pick up tls-cipher-suites and tls-min-version #16
Full changelog

haproxy-router

OCPBUGS-75010: Change how DCM identifies state changes #725
OCPBUGS-67161: Replace HTTP backend liveness check with admin socket check #737
OCPBUGS-77412: reload router if route is changed on DCM #739
NO-JIRA: hack: steps to run router locally #712
NE-2468: Migrate away from deprecated ioutil #693
OCPBUGS-74511: remove RouteExternalCertificate feature gate #730
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-73813: UPSTREAM: <carry>: un-skip MutableCSINodeAllocatableCount tests #2613
OCPSTRAT-2728: Rebase to 1.35 #2523
Full changelog

hypershift

NO-JIRA: chore(e2e): increase nodepool condition check timeout #7906
CNTRLPLANE-2789: add StatefulSet test case to controlplane-component reconcile tests #7764
NO-JIRA: Add CodeRabbit config to exclude autogenerated files #7905
CNTRLPLANE-2933: add docs recipe for SPO configuration in HCP environments #7886
CNTRLPLANE-2031: test(e2e): add comprehensive backup and restore test suite #7745
CNTRLPLANE-2588: docs: add dependabot triage agent to AI CI jobs documentation #7889
CNTRLPLANE-2793: Cache MCS TLS certificate generation in ignition provider #7841
ROSAENG-132: fix(karpenter): Set Ready condition to False when version resolution fails #7866
NO-JIRA: api: fix AutoNode types to comply with OpenShift API conventions #7859
NO-JIRA: chore(deps): weekly dependabot consolidation #7876
OCPBUGS-39604: Include shared ingress resources in render output for proper uninstall cleanup #7836
OCPBUGS-76645: Make generated container names k8s compliant #7711
OCPBUGS-77254: fix(globalps): watch Machine updates to fix node labeling race condition #7803
GCP-441: tolerate 1 restart for GCP CCM token-minter race condition #7865
NO-JIRA: chore(deps): weekly dependabot consolidation #7863
OCPBUGS-77477: fix(awsutil): handle smithy errors in AWSErrorCode #7827
SREP-3855: unpause leaked child objects on deleting clusters (OCPBUGS-77530) #7861
CNTRLPLANE-2218: feat(aws): migrate ELB/ELBV2 to AWS SDK v2 #7825
OCPBUGS-77621: fix(nodepool): preserve ignition-reached annotation on token secret after restore #7851
OCPBUGS-76337: feat(scale-from-zero): add DescribeInstanceTypes IAM permission #7648
GCP-391: Add ImageRegistry GSA field and IAM binding for Image Registry Operator #7828
CNTRLPLANE-2801: fix(router): deploy router services for private ARO and remove KAS/OAPI dependencies #7845
CNTRLPLANE-2842: Fix context cancel accumulation in getMirrorFromICSPOrIDMS #7846
CNTRLPLANE-2801: api: remove redundant kubebuilder enum marker from KeyVaultAccess field #7835
NO-JIRA: bug(metrics): fix typo in hypershift_cluster_waiting_initial_availability_duration_seconds metric #7730
CNTRLPLANE-2840: fix(endpoint-resolver): sort pods by name for deterministic ordering #7854
CNTRLPLANE-2808: bump golang.org/x dependencies in / and /api modules #7818
CNTRLPLANE-2840: feat(CPO): add endpoint-resolver control plane component #7786
CNTRLPLANE-2794: Re-add TestGetDigest and TestGetManifest with mockgen mocks #7777
OCPBUGS-77034: fix(ho): add nil guard for Platform.AWS in metrics collector #7747
GCP-295: Add GCP platform support to E2E test framework #7697
OCPBUGS-76997: remove resource limits from Agent CAPI provider #7812
OCPBUGS-60936: fix(hccp): remove immutable field from kubeletconfigmap #6726
OCPBUGS-77311: handle HostedCluster deletion in secretJanitor to prevent stuck cluster deletions #7779
OCPBUGS-60185: Remove non-deterministic registry override computation from ignition-server #7811
CNTRLPLANE-2784: Document IAM policies for PowerVS credential fields #7778
CNTRLPLANE-2801: add Key Vault private endpoint TCP relay via private router #7701
CNTRLPLANE-2217: feat(aws): migrate kms and Resource Tagging to AWS SDK v2 #7795
CNTRLPLANE-2807: Fix version showing <unknown> in git worktree builds #7814
OCPBUGS-65636: add service account to konnectivity-agent #7309
NO-JIRA: docs(pki): add CA hierarchy diagram and trust distribution details #7799
CNTRLPLANE-2799: Unit test HCP availability and Ready flag reconciliation #7796
OCPBUGS-67262: fix(sync-global-pullsecret): compare content ignoring trailing newlines #7638
GCP-386: scope externaldns RBAC to GCP platform only #7781
OCPBUGS-76350: Honor AWS AMI override in NodePool token generation #7675
OCPBUGS-60185: Fix ignition-server pod restarts due to MIRRORED_RELEASE_IMAGE flapping #7588
NO-JIRA: docs(agents): add multi-module structure guidance to AGENTS.md #7797
OCPBUGS-76452: update OAuth certificate configuration doc #7785
GCP-402: Add gcp-project and gcp-region flags to hypershift install #7710
GCP-376: Add service account for storage #7676
GCP-367: enable multizone support in CCM cloud config #7731
OCPBUGS-77224: fix(routing): add Azure platform to LabelHCPRoutes() switch #7789
CNTRLPLANE-2220: feat(aws): migrate iam to AWS SDK v2 #7765
NO-JIRA: Skip ./dev directory in codespell checks #7775
NO-JIRA: MCE 2.17 konflux pipielines #7736
NO-JIRA: chore: add powervs-reviewers to OWNERS_ALIASES and OWNERS #7782
OCPBUGS-59876: feat: implement CLI-based OIDC disaster recovery command #7210
OCPBUGS-62177: revert CRR controller changes #7784
OCPBUGS-65824: Add dynamic NodePort range validation to prevent cluster creation failures #7652
CNTRLPLANE-2740: Set unhealthyPodEvictionPolicy to AlwaysAllow on all PDBs #7721
OCPBUGS-32770: fix(kubevirt): require CAPK image to be explicitly specified #7615
OCPBUGS-62177: fix(pki): use pod container port instead of kubeconfig service port #7744
CNTRLPLANE-1987: Ensure Azure HCP CLI infra commands work correctly #7436
NO-JIRA: fix(e2e): retry guest cluster API calls in EnsureFeatureGateStatus #7723
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-cloud-controller-manager

OCPCLOUD-3273: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.35 (7d70282) into main #87
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-77598: Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.22 #129
OCPBUGS-77167: standardize build paths #117
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-77624: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.22 #167
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-77728: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.22 #151
OCPCLOUD-3322: Update to new manifests-gen #150
Full changelog

ibmcloud-machine-controllers

OCPBUGS-71220: Bump vpc go sdk #76
Full changelog

insights-operator

MON-4511: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #1225
NO-JIRA: Add CodeRabbit inheritance for org-wide rules #1245
CCXDEV-15829: subscription gathering #1235
CCXDEV-15776: install config update #1229
CCXDEV-15641: gather machineconfig size #1240
NO-JIRA: exclude vendors file from coderabbit review #1243
NO-JIRA: Upgrade Golangci-lint to version 2 #1237
NO-JIRA: enable InsightsDataGather in all clusters #1242
NO-JIRA: add custom coderabbit config #1232
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Optimize the CPU usage of insights-runtime-extractor #60
OCPBUGS-77060: Update Go to 1.25 #63
Full changelog

ironic

NO-ISSUE: Update requirements.cachito with latest openshift forks commits #806
METAL-1749: Uplift setuptools to remove python-wheel deps #804
METAL-1748: Drop genisoimage in favor of xorriso #803
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #805
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #801
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #799
OCPBUGS-76935: Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix #790
Full changelog

ironic-agent

METAL-1749: Uplift setuptools to remove python-wheel deps #245
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #243
Full changelog

ironic-machine-os-downloader

OCPBUGS-77617: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.22 #115
Full changelog

keepalived-ipfailover

NO-JIRA: Install gpgme for RHEL/Centos 10 #228
ART-14594: Update Dockerfile for centos 10 base #223
Full changelog

kube-metrics-server

OCPBUGS-77817: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.22 #52
OCPBUGS-74012: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.22 #49
: NO-JIRA: Bump openshift/kubernetes-metrics-server to v0.8.1 #50
NO-JIRA: Bump golang image versions #51
Full changelog

kube-rbac-proxy

OCPBUGS-69716: Updating kube-rbac-proxy-container image to be consistent with ART for 4.22 #129
Full changelog

kube-state-metrics

NO-JIRA: disable automatic coderabbit reviews #135
OCPBUGS-77616: Updating kube-state-metrics-container image to be consistent with ART for 4.22 #134
Full changelog

kube-storage-version-migrator

OCPBUGS-65984: add leader election #237
OCPBUGS-73955: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.22 #236
Full changelog

machine-api-operator

OCPBUGS-77941: Remove cluster-api-provider-libvirt references #1472
OCPNODE-4168: Add image only if its a boot disk #1471
OCPBUGS-44332: Suppress degraded reporting while MAO is actively upgrading. #1464
OCPBUGS-77606: Updating ose-machine-api-operator-container image to be consistent with ART for 4.22 #1468
SPLAT-2615: Added AWS dynamic dedicated host support #1455
Full changelog

machine-config-operator

OCPBUGS-75869: kubelet: Less aggressive low memory reservation #5716
MCO-2136: Implement osImageStream inheritance for custom MCPs #5697
OCPBUGS-77839: Fix node degrades due to file and OS update failures #5744
MCO-2147: Remove all remaining hardcoded references for TLS configuration #5747
MCO-2145: Disable skew enforcement on SNO clusters #5739
MCO-2138: migrate multi-stream test cases from the private tests repo… #5701
OCPBUGS-77625: Update ose-machine-config-operator-container image to be consistent with ART for 4.22 #5730
OCPBUGS-77803: Update AMI Whitelist #5740
MCO-2025: Add functionality to populate OSImageStream value in MCP status #5689
AGENT-1424: Fix e2e iri tests #5717
OCPBUGS-77498: Fix failure domain matching during vsphere boot image updates #5723
MCO-2141: dont execute tls tests until OCPBUGS-76990 is fixed #5713
OCPBUGS-74514: OCPBUGS-74515: OCPBUGS-74516: OCPBUGS-74517: remove bootimage update feature gates #5718
OCPBUGS-77483: Update AMI Whitelist #5719
CORENET-6738: Remove lingering references to openshift-sdn #5591
NO-ISSUE: Increate timeout for sharded ocl test #5696
OCPBUGS-77318: Clean up vsphere login error logging #5702
NO-ISSUE: Revert “MCO-2120: Rework OS Image Stream label classification” #5703
MCO-2124, MCO-2125: migrate units and storage test cases #5660
NO-ISSUE: Create timeout per resource to clean up #5676
MCO-1870: Split MachineConfigNodeUpdateFilesAndOS condition into MachineConfigNodeUpdateOS and MachineConfigNodeUpdateFiles #5411
MCO-1803: Add test case: CPMS interaction with automatic skew #5661
Full changelog

machine-image-customization-controller

OCPBUGS-77840: Return error when network data Secret lacks nmstate key #169
OCPBUGS-77737: Updating ose-image-customization-controller-container image to be consistent with ART for 4.22 #167
Full changelog

machine-os-images

OKD-322: Swap uname -p to uname -m #80
Full changelog

metallb-frr

OCPBUGS-69901: Updating ose-frr-container image to be consistent with ART for 4.22 #116
Full changelog

monitoring-plugin

NO-JIRA: Add CodeRabbit inheritance for org-wide rules #822
OU-1247: Followup Persist TimeRange in Main #827
OU-1242: dont autofill rename #820
COO-1562: fix coo namespace issue #804
OCPBUGS-77718: Updating monitoring-plugin-container image to be consistent with ART for 4.22 #803
NO-JIRA: simplify dockerfile by removing cachito dependencies #799
OU-1162: perses automation testing - import dashboard and rbac #794
OU-1236: Kebab icon should be disable while “Checking permissions” is happening #783
NO-JIRA: fix radius of button groups #784
OU-1234: perses automation testing - rbac users scenarios added with project selector #781
OU-1139: feat: allow to import and migrate a dashboard #779
OU-1214: [Edit Dashboard] - Time range is not persisted when saving #778
Full changelog

multus-cni, multus-cni-microshift

CORENET-6864: Ds merge 3/3/2026 #280
Full changelog

multus-networkpolicy

downstream sync 2026-02-23 #97
ds: disable DependaBot downstream #96
OCPBUGS-77537: Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.22 #101
OCPBUGS-76465: Clean up dnf cache #99
OCPBUGS-77019: Disable metrics server #98
Full changelog

must-gather

OCPBUGS-77832: Updating ose-must-gather-container image to be consistent with ART for 4.22 #528
NO-JIRA:gather_ppc: detect NTO image from TuneD pods on HCP #518
Full changelog

network-tools

OCPBUGS-77809: Updating ose-network-tools-container image to be consistent with ART for 4.22 #173
Full changelog

networking-console-plugin

OCPBUGS-77868: Clean up cruft in /var/cache/dnf #360
OCPBUGS-77174: Fix display of NAD type for NADs created from YAML #358
OCPBUGS-77414: simplify dockerfile by removing cachito dependencies #356
CNV-59877: Fix permissions request for NADs #352
OCPBUGS-41199: Fix NAD creation using default namespace instead of selected one #348
Remove yarn references from ART Dockerfile #347
Full changelog

nutanix-machine-controllers

OCPBUGS-74002: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.22 #129
Full changelog

oauth-server

OCPBUGS-63228: groupmapper: avoid mutating original group users slice when removing user #211
Full changelog

oc-mirror

CLID-197: Add TargetRepo, TargetTag to additionalImages #1327
OCPBUGS-77726: Updating oc-mirror-plugin-container image to be consistent with ART for 4.22 #1364
OCPBUGS-77726: Updating oc-mirror-plugin-container image to be consistent with ART for 4.22 (missing files from ART PR 1364 ) #1366
CLID-539: Remove unused constants and centralize widely used ones #1354
NO-JIRA: Bump github.com/containerd/containerd from 1.7.27 to 1.7.29 in the oc-mirror-v2-security-updates group across 1 directory #1308
OCPBUGS-77141: Fix registriesd “unknown userid” failure for arbitrary UIDs #1357
Full changelog

olm-catalogd, olm-operator-controller

OCPBUGS-76453: Synchronize From Upstream Repositories #659
OCPBUGS-77942: Fix OLMv1 test operator to listen on IPv6 #657
NO-ISSUE: Synchronize From Upstream Repositories #658
OCPQE-31707: serviceAccount validation unified across all runtimes to enhance cases #656
NO-ISSUE: Synchronize From Upstream Repositories #655
NO-ISSUE: Synchronize From Upstream Repositories #651
OCPQE-31637: fix 83026 for TP cluster #652
OPRUN-4461: Upgrade OTE and Default Catalog Tests dependencies and go #649
OPRUN-4459: Update OCP catalogs to v4.22 ( Release Blocker ; Must go in before OCP release 4.22 ) #627
OCPQE-31553: adjust qe sa and permission test cases per new change #631
NO-ISSUE: Synchronize From Upstream Repositories #648
OPRUN-4459, OPRUN-4460: Preflight tests use in-cluster catalog and bundles instead of openshift-pipelines-operator-rh #644
NO-ISSUE: Synchronize From Upstream Repositories #646
OCPBUGS-65634: add service account to verify pod #638
NO-ISSUE: Synchronize From Upstream Repositories #645
NO-ISSUE: Synchronize From Upstream Repositories #643
MON-4516: Synchronize From Upstream Repositories #641
Full changelog

openshift-controller-manager

CNTRLPLANE-2769: bump kubernetes dependencies to v1.35 #429
Full changelog

openshift-state-metrics

OCPBUGS-77709: Updating openshift-state-metrics-container image to be consistent with ART for 4.22 #130
Full changelog

openstack-cluster-api-controllers

OCPCLOUD-3321, OSASINFRA-3980: Migrate asset generation to ocp-manifests #386
NO-JIRA: Update DOWNSTREAM_OWNERS #398
NO-JIRA: Cleanup post-infracluster migration #397
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPQE-31756: enhance case to make it pass per test bundle change #1252
OCPQE-31607: update 43101 for FIPS enabled cluster #1249
OCPQE-31615: fix OCP-33450 for FIPS enabled cluster #1247
OCPBUGS-74928, OCPBUGS-76460: Synchronize From Upstream Repositories #1244
MON-4513, OCPBUGS-75921, OCPBUGS-76460: Synchronize From Upstream Repositories #1237
Full changelog

operator-marketplace

MON-4514: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #725
NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 in the k8s-dependencies group #731
OCPBUGS-74928: Bump github.com/operator-framework/api from 0.39.0 to 0.41.0 #728
NO-ISSUE: Bump the k8s-dependencies group with 3 updates #726
OCPBUGS-66980: Update NetworkPolicy egress to support HyperShift custom API ports #723
OPRUN-4458: Upgrade Catalog Source Index from 4.21 to 4.22 #727
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-76500: Minimize ACLs by combining ipBlocks into single ACL #2978
CORENET-6168: OTE: u/s tests are Informing by default #3006
OCPBUGS-49368, OCPBUGS-62895, OCPBUGS-65114, OCPBUGS-66267, OCPBUGS-70130, OCPBUGS-74164: DownStream Merge [02-12-2026] #2980
CORENET-6840: OTE: Exclude new BGP and EVPN tests #2982
Full changelog

powervs-block-csi-driver

MULTIARCH-6001: Rebase ibm-powervs-block-csi-driver with upstream #114
Full changelog

powervs-block-csi-driver-operator

STOR-2809: Central TLS Profile consistency #97
Full changelog

prom-label-proxy

NO-JIRA: disable automatic coderabbit reviews #390
OCPBUGS-77739: Updating prom-label-proxy-container image to be consistent with ART for 4.22 #389
Full changelog

prometheus

NO-JIRA: disable automatic coderabbit reviews #295
OCPBUGS-77667: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.22 #294
NO-JIRA: update rh-manifest.txt #293
NO-JIRA: [bot] Bump openshift/prometheus to v3.9.1 #292
Full changelog

prometheus-alertmanager

NO-JIRA: disable automatic coderabbit reviews #126
OCPBUGS-77708: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.22 #119
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-JIRA: disable automatic coderabbit reviews #375
OCPBUGS-77597: Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.22 #371
OCPBUGS-77753: Updating prometheus-operator-container image to be consistent with ART for 4.22 #373
Updating prometheus-config-reloader-container image to be consistent with ART for 4.22 #372
OCPBUGS-74491: backport upstream fix to reconcile resources with inconsistent status #364
Full changelog

prometheus-node-exporter

NO-JIRA: disable automatic coderabbit reviews #176
OCPBUGS-77587: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.22 #175
Full changelog

stream-coreos, stream-coreos-extensions

NO-JIRA: extensions: Add rhel-9.8-server-ose-4.22 #1910
NO-JIRA: tests: add openshift tag #1906
COS-3912: denylist: drop rhcos.network.init-interfaces-test #1900
NO-JIRA: OWNERS: Add angelcerveraroldan #1883
NO-JIRA: Rename extensions/Dockerfile to Containerfile #1896
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

telemeter

Updating telemeter-container image to be consistent with ART for 4.22 #580
Full changelog

tests

TRT-2506: Add OS version validation to prow job name test #30826
OCPBUGS-66419: fix: handing static pods not appearing on SNO+RT metal lanes #30608
NO-JIRA: Add condition for rejecting connection #30835
OCPBUGS-77839: Remove ‘AppliedFilesAndOS’ reference in MachineConfigNode’s node degrade test #30841
NO-ISSUE: Automated - Update synthetic test data #30844
OCPBUGS-77807: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.22 #30834
OCPBUGS-77014: Add Azure OS disk metrics to cloud monitor tests #30840
CNTRLPLANE-2202: Check for debug pod (regardless of ns) in default service account monitor test #30815
CORENET-6169, CORENET-6864: remove some duplicate ovnk test cases #30820
OCPBUGS-77736: add the missing namespace from managed openshift #30828
NO-JIRA: upkeep: remove dualreplica recert #30831
OCPBUGS-76943: Fix dualstack BMC secret and BMH lookup using short name extraction #30788
TRT-2372: document the manifest-list verification in the images command #30818
NO-JIRA: add NI&D team members #30816
NO-ISSUE: Automated - Update synthetic test data #30803
TRT-2563: Revert #30647 “STOR-2560: Add testcase for readonlyrootfilesystem” #30819
OCPBUGS-77085: Use multi-architecture zstd-chunked image #30805
TRT-2545: Extend known image checker to cover openshift-must-gather-* namespaces #30777
STOR-2560: Add testcase for readonlyrootfilesystem #30647
OCPBUGS-65623: Remove exception for monitoring OLM Progression condition #30754
STOR-2857: Enable MutableCSINodeAllocatableCount tests for all clusters #30767
CCO-690: Register cloud-credential-operator tests extension #29984
NE-906: fix DCM tests #30734
NO-JIRA: Exclude KubeJobFailed for periodic-gathering jobs in openshift-insights #30810
NO-JIRA: refactor(tnf): separate precondition timeouts from recovery cluster health #30812
NO-JIRA: Fix PodSecurityViolation in set-liveness-probe cmd test #30809
OCPNODE-4092: add the whole team as reviewers for node tests #30756
CNTRLPLANE-2202: add new exceptions + fail if uncaught default sa usage is detected #30685
NO-JIRA: Fix lack of human readable timestamps in two tests output #30796
NO-JIRA: update cluster-autoscaler component #30527
OCPBUGS-77010: [TNF] fix network disruption on ipv6 #30798
TRT-2372: filter-by-os is ignored when the image isn’t a manifest-list; leading to false positives in the check #30806
NE-1476: Allow test pods to access DNS metrics ports #30753
NO-JIRA: Batch etcdlog intervals to prevent hundreds of thousands slamming browser charts #30763
TRT-2471: Create massive test failure junit #30797
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

NO-JIRA: Disable default coderabbit reviews #171
OCPBUGS-77547: Updating ose-thanos-container image to be consistent with ART for 4.22 #170
Full changelog

volume-data-source-validator

STOR-2750: Rebase to upstream v1.6.0 for OCP 4.22 #9
Full changelog

vsphere-cloud-controller-manager

OCPCLOUD-3275: Merge https://github.com/kubernetes/cloud-provider-vsphere:master (499b4a3) into main #101
Full changelog

vsphere-cluster-api-controllers

OCPCLOUD-3295: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.15.2 (91522fc) into master #79
OCPCLOUD-3323: Update to new manifests-gen #82
OCPBUGS-69861: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.22 #81
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-77563: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.22 #164
Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.22 #165
Full changelog

vsphere-csi-driver-operator

OCPBUGS-77629: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.22 #333
Full changelog

vsphere-problem-detector

OCPBUGS-77603: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.22 #213
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github