Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.21.0-okd-scos.6

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

• 4.21.0-okd-scos.ec.19 - Success
• 4.20.0-okd-scos.17 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.21.0-okd-scos.ec.19

Created: 2026-02-16 04:14:49 +0000 UTC

Image Digest: sha256:881a3bd9d181393bd979c479d4a3f92b1ad4e4b15305d7a11b1a1f24428240dd

Release 4.21.0-okd-scos.6 was created from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-nightly-2026-02-11-225844

Components

• Kubectl 1.34.1
• Kubernetes 1.34.2
• Kubernetes Tests 1.34.1
• CentOS Stream CoreOS 10 upgraded from 10.0.20260109-0 to 10.0.20260211-0

Removed images

• installer-altinfra
• installer-etcd-artifacts
• installer-kube-apiserver-artifacts

Rebuilt images without code change

• agent-installer-csr-approver git 79093911 sha256:14d13ed3a801c9171f253081b832110a49fa0849428edd8ec997c1ac5dc1feda
• agent-installer-node-agent git e5713826 sha256:53543f287acabbbebb682f3cb6897f9fe9aae7a524926fdcbe126dfff3210b07
• agent-installer-orchestrator git 79093911 sha256:962b77eb0cf9048218dbca6cc65dcc34f4fe6d5db73f9b8232e1a9ccfd1abfbd
• agent-installer-ui git 479a68f3 sha256:30f1154d86b0df3ed41085d2bb877e0326ab3a14786887972224a20536667d3f
• apiserver-network-proxy git 35ba137a sha256:4deacfad97f874c4c5809353358bb20025dae24832b7468bfe9937157a421436
• aws-cloud-controller-manager git 3365bc9c sha256:917a34d6d7d1f0fe45bc10272a51d17393a5222c33b79a1704f2e4c026db1e24
• aws-cluster-api-controllers git 10ceef5e sha256:27c94d943ad47d50e4f816c4383d2778d53898b0e506dea0b03faa94dd1242b8
• aws-ebs-csi-driver git 57eebffc sha256:f9b2d4989cb28bb8b24f85e599f983590f8c0ce82971a3d6f8a8108e89028027
• aws-karpenter-provider-aws git ff9c8d4e sha256:d8b75c950fda6b5c5fffa823c0b0ffbd9d66958c77a91b253b65feadd7239473
• aws-kms-encryption-provider git 19e7b623 sha256:120529c1fbfcdebbc1fef624527f5f8cc47ee4489bb340bf6c492a0bec512540
• aws-machine-controllers git 938565c9 sha256:29ba55e796734e4fa3f4b1ba1b3dca375e2d66dd927564c74b2e1aedd558f2a4
• azure-file-csi-driver git c77d75f9 sha256:f4c6c1215af87b3d4be78f24e42f8f80209eaa0e921423d109266742d9fe8698
• azure-machine-controllers git b8b8cb1c sha256:e6988c72c4f1f4329593e2b719f50c66962d7401e333868ed0a7e429696299ce
• azure-service-operator git 17e57462 sha256:824131b8f4505ebbed6830189631169c5a9cf6ee915185b3d375cd04a3af248b
• azure-workload-identity-webhook git 3f2a6e0d sha256:27f3248a29486461634f2188588e49b941b4d7a16d02791faff8821a852ec249
• baremetal-machine-controllers git 4e6a729c sha256:c4edff7fc110e21c11af077ae7d8a915455ca0d21032f180f206bb4599812814
• baremetal-runtimecfg git 8404689e sha256:c9f7c9b5df5c57eba0921d04ec2c5fc09713d00c0a9f3d19a2847f0b572f1f6c
• cloud-network-config-controller git dcdf24f5 sha256:a98d0db6a539bc28d9e579f708f49fe52086a47da949a3a9eab67bd2d3156990
• cluster-autoscaler git 73b87353 sha256:b94a4992aba5db5459288c1b9f62458368b24ce751c0522f9415e2e0541a7d15
• cluster-autoscaler-operator git dec12ba6 sha256:7048e687856fe6061cb5a4d5a35f1a4732068411e6f4492fbca4fcc28483ed82
• cluster-bootstrap git dc0d4a5c sha256:e5261453d56afeef03f62e13c422eb9c4c08deb2d968ccc3c3e61dbee34d080f
• cluster-capi-controllers git a957484a sha256:583174f639e53d64e616a04c082847131d0936a6ac64fcab9ce8558fffdcefd5
• cluster-cloud-controller-manager-operator git 6148c0cc sha256:86158ccaf293128270f8877af01ff47ef73fdb1fef5042e56e124275b2e9cf20
• cluster-config-api git d1c4dc4f sha256:6f6071621cf1544d72275f78065614116589a35d7e6e87f072c979d115282b96
• cluster-dns-operator git 41a53fed sha256:fb3b9f5382a2bffa661b3cea030363d22127f499a6a525e2fb43ffbc9a06946b
• cluster-ingress-operator git b62dd27c sha256:34ee113d2ee3cb97cc9acfafb19b0f92b77c330f61d837034b7ef2bf1b4ea58b
• cluster-kube-cluster-api-operator git aec49344 sha256:eb00e516e7e23fe1471f69d03c9f7fe7bcbd08898dbc75d03a619facc24b8d78
• cluster-kube-controller-manager-operator git 395de967 sha256:eb7cdcd5c1ab0d85d0db20d4747e8ecc179d4b204707603edc0ef5971ed52626
• cluster-kube-storage-version-migrator-operator git 8a42beeb sha256:80424a629ca863808d79dc4757d7378574b1d760c8b0047cc4b3bd5be05c07e6
• cluster-machine-approver git d864813c sha256:e24c5c84c0dde134eb135e515a46c732760f044367d3b57147a79e737090632f
• cluster-node-tuning-operator git 0e275839 sha256:9ef91c05c6a2ff355e07c86f82ad0543c1e774c46dda641974ae77f11f32cde3
• cluster-olm-operator git 81989478 sha256:c27ee8bfd0a9d02ba40b5d0010f177d78fff8f92486b60d98051e3201aefe1d0
• cluster-openshift-apiserver-operator git c2d01272 sha256:36966a17dfa93411f3ece12e3d37e2a08241ebf9e5efee5216220b1219a263b4
• cluster-openshift-controller-manager-operator git 2617a201 sha256:00810a34893ba5225a690a083cfc108e6e003a6f74cdc0a886c1b07fd11b4ed9
• cluster-policy-controller git 8b775487 sha256:addba7a34bf17138614cbbfa641f1dd121d6df36e4b76e97dc0c3f29e4d84c49
• cluster-samples-operator git 11ed1942 sha256:6154be0658d695d3774830da6c5194562a41e24ce43ddf8f92c73f6c9c6fbedf
• cluster-update-keys git b3cae8f2 sha256:1012f4a17396e0f69a905b1e2b535dc26a63cf37a036c86833e7c15232579817
• configmap-reloader git 16114b8d sha256:6b1fb3c0b1215f78f9d46573dc377676334ef650e57e77f5d8cb0c02a7737dde
• container-networking-plugins git 747ad66c sha256:053d0e8b2d530cd806f90efbae08481de612ff5ecee95677a96e3464d3bb67a8
• containernetworking-plugins-microshift git 747ad66c sha256:d85de8d6cd1106e579e85f8383cf7929a4d0d2bea236197f426cae72182ac7c7
• coredns git 7486e9e4 sha256:0fc0e346f2775ba7bbafa5967d1a3c7d7b646191ac8b2b2a76f50385c7f1981e
• csi-driver-manila git bf508c06 sha256:1363b6051008113dd10d1228a4677c69ffbfdc39de9f971fa644db5fbe2fa699
• csi-driver-nfs git 49f2d86f sha256:4d3d220f4079185a6fa371c7e8e7cd438e561f3e210a0da1bb19a5056b8fe10e
• csi-external-attacher git 344669a2 sha256:f5274e334e972de25e2946dc561d083e5f0bf24907f1ee6396276fd601551af6
• csi-external-provisioner git f18190fb sha256:bdea53e964c11e60acd0c5f8d0cec678ff6d159bf27e01e7a3f42148158dc212
• csi-external-resizer git d880a1ec sha256:6b222e9de608e4870f38e6acdb85db6d6d59235a05e0d57c6c1a40c168517937
• csi-external-snapshot-metadata git af250fdb sha256:f367e7dee4adef50e8ff47e232ea20c477de75f85505047a0199cfb12cac28e2
• csi-external-snapshotter git 9098db0e sha256:a28aa527ae963f3685a4cdcf1c3f677b52911285ac099264050e7a4f0c34a335
• csi-livenessprobe git 78dacb7c sha256:7a17cd7d2b7917067b9857e864de9ac9ed95cbf8a3842b0fd024326cfd40bf18
• csi-node-driver-registrar git d29f3f7a sha256:cfd6c7ca09ab9b2a96febb8ea26b150b53a19c23e5cdfc5c6518ee6493cb06d0
• csi-snapshot-controller git 9098db0e sha256:f4a52075ee523f7dd35948d5634ffb90a8e661b57b450039d4f82c79af3320f8
• docker-builder git c0ef8399 sha256:58f0d73cebe4fa07d5b6d7c9eea2c33167fa6d093f443c94e26cd70eb0d82bcd
• docker-registry git 602f51c7 sha256:7fdf11908ab51521d38aeeab720798f31ec4155618ce64716909b7bcf69b164e
• driver-toolkit git 5c53d757 sha256:059c26e192dbbc959c9f010d930110720d6d611758333288d02203deaa98f283
• egress-router-cni git 5e0f8d1b sha256:f804d66c4f4f7df0b721a872b1e30228c9f2668e0d001bc476214706bc2ea910
• etcd git 806f690e sha256:cf9561112f7692e7d43a4a2315b275e068844d94f98b212e5106064320d589d3
• gcp-cloud-controller-manager git 8732386c sha256:55e90795846d708a49965aa1bf68eb3991b87cc73cbf0f91c0d85fa856e517f7
• gcp-machine-controllers git 91f71c9a sha256:8b6be34c0911a6de44529f0c4756af28402172abadcbdc70724862fc1c3dbd66
• gcp-pd-csi-driver git a022e754 sha256:86b6008bd204f9bf963d04878ee06ce874a94bef75ec717070b85b1b725b16be
• gcp-workload-identity-federation-webhook git d481e5cb sha256:16e75cfca53a15afd07bae9743521ac55dbe61ac6239a9c301f5535efffc9341
• haproxy-router git b231c65b sha256:ad334c8d2a04aedf663e741f1a683b5cc04295968d672ad56e45944c0301ea3e
• ibm-cloud-controller-manager git c566572b sha256:b63180dd9a68f7e59bf6ce414133177eeab4c265cd61403b3ec422a997f040a5
• ibm-vpc-block-csi-driver git ab36dcc1 sha256:8b43e6bd9b343d4b37a60b8f550ee210ebebe6fb0145e80deee8e7e2186a62ea
• ibm-vpc-block-csi-driver-operator git 00bc7407 sha256:1c3ba3839ca4d7502de5f076d3a8075ce9864571b0cfd776a6a4c9b3e6f07d6c
• ibmcloud-machine-controllers git e72a8471 sha256:3c4b89d4971a1d9934d35403e5d75de941567042e56e70cee44855af86ee07b3
• insights-runtime-exporter git 015f7b61 sha256:750eae2eb1a6028dd6a06460f632a6d74f13c968e1cd31cb254c54d95a638d15
• insights-runtime-extractor git 015f7b61 sha256:297a618fea4da6b3e5cd9d76caf69e1312ab6a0002a7f3480da175be8ada5a5c
• ironic-static-ip-manager git b95b05fe sha256:4b35c5ec7d3b6e6dccbd88677b201102258b059e93680532a09585a15f2b1e50
• kube-metrics-server git ed76a5e8 sha256:91c74687c0ad0d86edb326cf10d638deee64971861444c06bdb21bea297189c4
• kube-rbac-proxy git cd636680 sha256:5af323195041bce0c336f88ae1e83109a7b2abc15e4c5590593a77f54ecc8e7e
• kube-state-metrics git cb0aa591 sha256:2a0d1c08b9932cb7f5c0e237cb4a7084a54a88d8310066f1d9e5954513abbbb0
• kube-storage-version-migrator git ce5ff17e sha256:28d4b4629b3f28681610fb71c50439dd67c5b59f667af6139eac3b26c6c86321
• kubevirt-cloud-controller-manager git daf5fba2 sha256:2bb8fb6c575e7b0698a0c6ef2ee6498e65560a04d877b9ee3e3dfc1280e60743
• kubevirt-csi-driver git 9e2dbddf sha256:245c61f0abfb9f490cbcb7969ed4bd4e41c8e2b914795bff2fb011cb9f120ef8
• libvirt-machine-controllers git 76effeca sha256:05c53b6f6804186951ef37829b7360eb0270686b668a718ab6487cb6cd46b59d
• machine-api-operator git 83936dde sha256:3e825a1ed902980ecffdca4ec37a755e6eca2d6e1606b77834e534fe31301f6a
• machine-image-customization-controller git d958f0bf sha256:fa04a060494598f0df647c9db3685a1b142f4dc08f4d67bf53a58f90a9de1e78
• machine-os-images git 9a8e96a6 sha256:a2c778f417d1fe25f12b588cbf165c2a4cffb304fbdc18684fdd047408457381
• metallb-frr git c82bfaad sha256:87f5e1767ce6410433b66380b1b7226e1a6f37e0a0ae1049528423d2ec5907c8
• multus-admission-controller git d95feb67 sha256:299f6aeaff36917baf93b52f792b3974bced434292a51b6a9852bb20a02bcd60
• multus-cni git 93556f99 sha256:3c430b8c80fb0150e6ce4df13d27e05aff692faff852da1caf5ca9276bda4540
• multus-cni-microshift git 93556f99 sha256:0ca9d30d67f7c71d74a6b4ebc6eb0b401e99a0d7b4d6a3855311cf4ca5f29c36
• multus-networkpolicy git 5ed5d240 sha256:232311e07df78489e524399bcdf09afe0585639a91294652431959615950a78a
• multus-route-override-cni git 08af4127 sha256:e43b0ec8c08df7d9d0939799c3a21ee3163aef1956deeac7ad02c47cb2be73ed
• multus-whereabouts-ipam-cni git d691040e sha256:bf158d5e720636ad69137a45e179ee39a652c8ed02db238d87c3217a626cd251
• must-gather git b4b434c4 sha256:f0dfa39e93f1d66fc0fe0771b45395638747323ca9788a181ec4e1be79a506bd
• network-interface-bond-cni git 297eeb43 sha256:c46b4bf1f26a8eb5175330cc593416295ad1ecd2b4ebd0e5a49d372e59480651
• network-metrics-daemon git 844fa588 sha256:f1cad6116e00db11cf8c1d7865988586c26e9d37d1c47709dd046f959126a006
• network-tools git d6717e45 sha256:4f09e484c1a910802166fe99f652a1f54e8ab79f8ce87c60d040780adec10ea2
• nutanix-cloud-controller-manager git 33b7bec6 sha256:59bc3c706e21f79b51d45d17d54fdea5fb3f7a415e518c1b21d2751d98bea93d
• nutanix-machine-controllers git b15a665c sha256:74c5cedc1fcad75bec78913a9b7bad173bea599eb4ff92aad1a9c2b7af4e1afe
• oauth-server git 3ab74506 sha256:057387bdf6efb61c244f5bba2b714c91c3f2ee48746478c12901713e608f1518
• openshift-apiserver git 64dea074 sha256:eda06e6fa29ee8ae07a828acee8451c5a904df67ea8082096bdcaf86db142727
• openshift-controller-manager git 438d52e7 sha256:0e410ea71e8b7c53bd9db581b611d5fac5f3529789527d7b8ad57463d21f0657
• openshift-state-metrics git ab605a4b sha256:1f7c96b3725ba66426db6089d7becb86a79f9ab1311a5550aa0ae3527716fb2f
• openstack-cinder-csi-driver git bf508c06 sha256:10c3751d225a5103f350cbbf704536d203bf93f826ca908fa2cbffbebb306e53
• openstack-cloud-controller-manager git bf508c06 sha256:b8368638156327701525d8c5e9a1dbbd5307b95475ce8f21dbc4a26683a1b0c4
• openstack-cluster-api-controllers git e1c0f2f9 sha256:d980746527e33167aae7b6b93a2baab5f0850c86c15fab73e4b072c2671ea43a
• openstack-resource-controller git 70f5ad34 sha256:3368ea4b2b98020c33b92b25c7c5725c167ba1e2a7797aa4f020a6c1cebe5eb6
• powervs-block-csi-driver git 791e12ab sha256:6ab59bcac353411b8887331d2928a122cb15ed16c0f36c791128c8e68700bd79
• powervs-block-csi-driver-operator git e22228ae sha256:061226d98df548dfae0f63be634e2d894851dc76d653be34e56743d95ab85ea7
• powervs-cloud-controller-manager git 969a04e9 sha256:0c7bafe13785809d959d499011354c260325a9ee4bdebbaf387bd969e423180e
• powervs-machine-controllers git 551974ef sha256:3d10e1d5dce05ddcae01c192d0dd87b1fc6f93f0f4da7fbfecab336b14699772
• prom-label-proxy git 610c11b5 sha256:635d30c3b12a35e693159c3f7548f1def82da1a7e0deebc353658f343fc0205e
• prometheus git ac9443d2 sha256:3339c81c94cead6a2aca2038b80aa5bf02f64e2fe6d13743fba27b80809be06a
• prometheus-alertmanager git 3dbe0b64 sha256:74b494a99ed0311cc6aa8fc16fb2b8fe37076fac8a46e1df25868c87e9359ce5
• prometheus-config-reloader git 4889ec9a sha256:25da57c7d8e2385c93825098499f9ad4c90d7bb9044a15c86030fc1cea383304
• prometheus-node-exporter git 39d72873 sha256:856196cc504c11c9662a039f0486ef69133db46c82cb7f61730f12733512886a
• prometheus-operator git 4889ec9a sha256:a02de9c7d6e3e4e6b46f97d225296fa5c2bd5f9ff1bc351a9c2c721764a4129e
• prometheus-operator-admission-webhook git 4889ec9a sha256:e30fb480be5b76bf6699f57a1944c2f317efffbc0c6148a4a2535995efd0279f
• route-controller-manager git 8a69194a sha256:efd1ca9f29ce8fa408d0fcb00afe80a54faea8d8db4952a76d46ac98d2b1d3f8
• telemeter git a54acdfe sha256:aa69a301ef2e02989bbb03987ba21613d083782b517f24be36472622fba61dcc
• thanos git 6ea20ffa sha256:b43e6a1210289aee4d840af05eac7a97b5b1054d16b9d0129cfbe72a408917c8
• volume-data-source-validator git 8b929332 sha256:58b5e24b81425ac834b4c3a1b2a5c5c13054807f91fb43685735f2a4e4be4bf9
• vsphere-cloud-controller-manager git f69584d6 sha256:e818e5dfd8935ca277f9f66b380230ad975a73858fa47b33243931efd7d65438
• vsphere-cluster-api-controllers git 6626b299 sha256:6609d8f64336f6509886bad87a3a9a4660456efc4d1c4a3270202a97f9037e79
• vsphere-csi-driver git 5e680186 sha256:14555b9790919e669e37b89ceddafd717a1a1be9f0ad280890a8a1db3c6d4ffe
• vsphere-csi-driver-operator git 57c19630 sha256:2c711e283f93d9e64dde92b8026de0edd951c6dc43e17542c434f2c508e4a3c8
• vsphere-csi-driver-syncer git 5e680186 sha256:5dad871f9a730c371e20956b1239c7b104d756eedd19e0d96c6f94f2811ea7e9

agent-installer-api-server

• AGENT-1431: Backport feature NoRegistryClusterInstall to 4.21 #8806
• OCPBUGS-72519: Fix YAML marshaling for Kubernetes types in disconnected ignition #8736
• Full changelog

agent-installer-utils

• OCPBUGS-76411: Include additional operators in OVE config #253
• AGENT-1431: Backport feature NoRegistryClusterInstall to 4.21 #248
• OCPBUGS-74935: Update Konflux references #220
• OCPBUGS-74304: Increase Konflux build pipeline memory #243
• OCPBUGS-71230: bump github.com/sirupsen/logrus to v1.9.3 #234
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-74215: [release-4.21] Add VAC manifest for tests in AWS EBS #485
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-74170: Fix GOTOOLCHAIN env var #213
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-69804: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:765f4352a0be4a8f1160e83293fa8668a5f349b1 (765f435) into release-4.21 #154
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-74398, OCPCLOUD-3101: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.22.0 (4523016) into release-4.21 #361
• Full changelog

azure-disk-csi-driver

• OCPBUGS-69655: fix ASH static provision segmentation fault #118
• OCPBUGS-67305: fix: disk creation failure in AzureStack env #116
• Full changelog

azure-kms-encryption-provider

• OCPBUGS-62405: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.21 #23
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-73878: handle SSH rule deletion for Azure private #10225
• OCPBUGS-76358: [release-4.21] Fix destroy bootstrap command for Azure #10293
• AGENT-1431: Backport feature NoRegistryClusterInstall to 4.21 #10250
• OCPBUGS-74672: [release-4.21] GCP: skip AI zones #10272
• OSDOCS-17769: [release-4.21] Add AWS m7 instance types #10266
• OCPBUGS-74493: add support for NVIDIA H100 and H200 enabled machine series #10259
• OCPBUGS-74414: Remove region option for the GCP Private Service Connect Endpoint #10253
• OCPBUGS-73891: add newly detected instance types for Azure during 4.21 regression test #10227
• Full changelog

baremetal-operator

• Bug OCPBUGS-76492: BMO fails to start servicing despite updates to HFC spec #459
• OCPBUGS-68369: Abort inspection/cleaning before powering off during deletion #449
• OCPBUGS-74365: Fix invalidDNSNameinvalidipv6 test for Go 1.24+ #450
• OCPBUGS-67294: Require PreprovisioningImage for deprovisioning when cleaning is enabled #443
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-73911: Fix unit test failure by updating ruby version to 3.3 #2186
• Full changelog

cluster-baremetal-operator

• OCPBUGS-74204: Fix libguestfs /tmp access in machine-os-downloader init container #551
• OCPBUGS-70163: Remove the writable ironic CA cert volume mount at /certs/ca/ironic path, ironic will use the writable /conf mount if needed #541
• Full changelog

cluster-capi-operator

• OCPBUGS-74650: fix: e2e: workaround for flakes caused by OCPBUGS-74571, until it is fixed #450
• OCPBUGS-73908: Remove references to cluster-api-operator image #445
• OCPBUGS-69772, OCPCLOUD-3105: make use of sigs.k8s.io/cluster-api’s v1beta2 #435
• OCPBUGS-69417: fix: e2e: CAPI creation issue/scale-down wait issue/machine nodeRef comparison issue #433
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-74588: Bump openshift/api to get latest AWSMachineProviderConfig type #386
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-74301: Re-add serving cert volume mount to hypershift guest cluster manifest #267
• Full changelog

cluster-etcd-operator

• OCPBUGS-74489: configure inertia for all controllers, bump to 10m #1535
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-74181: SCC: allow image volume type for all SCCs #2007
• OCPBUGS-73561: Update openshift/library-go to get new default TLS configuration #1999
• OCPBUGS-61297: revert dev cert rotation #1984
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-74592: [release-4.21] NO-JIRA: pkg/operator: Fix wrong ClusterOperator name #605
• [release 4.21] OCPBUGS-74265: Add OPERATOR_IMAGE_VERSION to recovery container #603
• Full changelog

cluster-monitoring-operator

• OCPBUGS-74622: update expr for AlertmanagerClusterFailedToSendAlerts to exclude value 0 #2804
• OCPBUGS-74202: move endpointslice RBAC to Role #2795
• Full changelog

cluster-network-operator

• OCPBUGS-76285: Remove duplicated openssl parameter #2899
• Full changelog

cluster-storage-operator

• OCPBUGS-74569: add vsphere permissions for checking if users is authorized to see metrics #660
• Full changelog

cluster-version-operator

• OCPBUGS-74009: lib/resourcemerge/core: Reconcile ConfigMap binaryData too #1295
• Full changelog

console

• OCPBUGS-76389: Use Actions button instead of kebab menu on Subscription details page #16008
• OCPBUGS-74998: Fix referenceFor parameter in SubscriptionDetailsPage #15984
• OCPBUGS-74887: Add null checks to CRB subject #15974
• OCPBUGS-74587: ‘0 of pods’ are shown in Status column on DaemonSets list page. #15953
• OCPBUGS-74695: Bump lodash to latest #15962
• OCPBUGS-74157: Do not resolve disabled catalog type extensions #15930
• OCPBUGS-73870: Update the perspective name in dev-console guided tour #15922
• OCPBUGS-73770: update operator details when changing channels #15917
• OCPBUGS-73871: i18n upload/download routine task - 4.21 / 281 #15923
• OCPBUGS-69931, OCPBUGS-69932: apiVersion is empty on YAML creation page - Runtime error occurs when create MachineConfig with default yaml from… #15871
• Full changelog

console-operator

• OCPBUGS-74152: Fix PDB blocking node drains during cluster upgrades + update donwloads deployment #1103
• OCPBUGS-72550: Add missing console annotation to the quickstart #1089
• CM-821, ESO-277, OCPBUGS-69766, SSCSI-235: Add quickstart guides for secrets management operators #1084
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-74915: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0 (1cb204d) into release-4.21 #262
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-74222: [release-4.21] Add VAC manifest to support tests on GCP PD #167
• Full changelog

hyperkube, kube-proxy, pod

• OCPBUGS-74975: UPSTREAM: 136594: raise kubelet CSI init backoff to cover ~140s DNS delays #2580
• OCPBUGS-73910: UPSTREAM: 135340: cbor: bump limits #2565
• Full changelog

hypershift

• OCPBUGS-71133: fix(ingress): clear LoadBalancerSourceRanges when AllowedCIDRBlocks is removed #7433
• OCPBUGS-74893: fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment #7618
• OCPBUGS-74648: feat(cpo): check components have rolled out before setting available #7604
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-66393: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.21 #133
• Full changelog

insights-operator

• OCPBUGS-74479: set Progressing condition on cluster update #1217
• OCPBUGS-74233: [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1214
• Full changelog

ironic

• OCPBUGS-76282: Update ironic hash #780
• OCPBUGS-74603: fix for minimal builds #774
• OCPBUGS-74428: Bump eventlet version to latest bugfix #771
• OCPBUGS-70156: Set the tls cacert path to writable mount when the IRONIC_CACERT_FILE is unset #753
• Full changelog

ironic-agent

• OCPBUGS-74603: fixes for minimal builds #241
• Full changelog

ironic-machine-os-downloader

• OCPBUGS-74204: Export TMPDIR to be available to child processes #112
• Full changelog

machine-config-operator

• MCO-2017: Backport OSImageStreams to 4.21 #5515
• OCPBUGS-76356: crio: disable short_name_mode until we introduce ctrcfg api for it #5636
• OCPBUGS-76359: Update AMI script and list #5639
• OCPBUGS-76271: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5624
• AGENT-1431: Backport InternalReleaseImage support #5610
• OCPBUGS-74145: enable nodeip-configuration for platform external #5581
• OCPBUGS-74542: Stale operator metrics Service and ServiceMonitor resources need to be deleted #5600
• OCPBUGS-74431: CVE-2025-58183 ose-machine-config-operator-container: Unbounded allocation when parsing GNU sparse map [openshift-4.21] #5596
• OCPBUGS-73819: Set NodeDegraded MCN condition when node state annotation is set to Degraded #5554
• OCPBUGS-74103: Fix up bootstrap-e2e #5568
• OCPBUGS-73872: CPMS boot image config should not override standard MachineSet configuration #5559
• OCPBUGS-74102: Fixes the issue in the test TestKubeletConfigMaxPods when AutoNodeSizing is enabled by default #5567
• OCPBUGS-71196: Enable existing units without content #5561
• Full changelog

monitoring-plugin

• NO-JIRA: [release-4.21] fix: remove unnecessary package.lock #729
• OCPBUGS-71223: fix: update qs vulnerable dependency #718
• OU-1145: remove random multiplication #703
• NO-JIRA: [release-4.21] automation - dev user scenarios fixes with namespace level changes #698
• OCPBUGS-67297: [release-4.21] fix: upgrade node-forge vulnerable dependency #685
• NO-JIRA: [release-4.21] - automation - monitoring stabilization presubmit #687
• OU-1130: Add missing commits to 4.21 #682
• Full changelog

networking-console-plugin

• CNV-77540: fix Enable MultiNetworkPolicies lead to invalid URL #341
• CNV-74687: Fixing the title and redirect when deleting a vm network #340
• CNV-76879: Allow passing the physical network name via URL parameter in the VM network wizard #332
• Full changelog

oauth-apiserver

• NO-JIRA: (chore): update OWNERS file #167
• Full changelog

oauth-proxy

• OCPBUGS-74131: test/e2e - do not use ambiguous container image short names #344
• Full changelog

oc-mirror

• OCPBUGS-74981: fix conversion issue for catalog #1346
• OCPBUGS-74577: fix duplicated channel bug in filtered catalogs #1345
• Full changelog

olm-catalogd, olm-operator-controller

• OCPBUGS-74967: [release-4.21] enhance qe cases to make it more stable #626
• OCPBUGS-74633: config watchnamespace api cases #620
• OCPBUGS-74562: enhance ocp-79770 #617
• Full changelog

openstack-machine-api-provider

• OCPBUGS-69644: Don’t record event for every reconcile #146
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-76325: [release-4.21]remove qe case of testing collect-profiles #1222
• OCPBUGS-76266: Remove the collect-profiles job #1220
• Full changelog

operator-marketplace

• OCPBUGS-73881: Increase default catalog polling interval to 4h (240m) #705
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-74267: release-4.21 fix(localnet, ipamless): Prevent LSP deletion on sync #2940
• Full changelog

stream-coreos, stream-coreos-extensions

• NO-JIRA: Remove (commented) WASM mentions #1888
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

tests

• OCPBUGS-75513: adjust olm test to pass on a degraded run #30749
• OCPBUGS-75513: update test logic for degraded cluster run #30748
• OCPBUGS-74499: Update MCN tests to better handle condition transitions through the “Unknown” state #30729
• OCPBUGS-74503: VsphereConfigurationTestsRollOutTooOften event matcher should use broader regex #30730
• OCPBUGS-74372: Add/RemoveSigtermProtection event matcher for SigstoreImageVerification test #30723
• OCPBUGS-74303: Add filter for openshift-copy-to-node ns #30715
• OCPBUGS-74094: Ignore repeated TopologyAwareHintsDisabled events #30699
• OCPBUGS-73808: update watch request limits for cluster-autoscaler-operator #30691
• Full changelog

vsphere-problem-detector

• OCPBUGS-74706: fix concurrent map writes #207
• Full changelog

---

View changelog in Markdown or change previous release: 4.21.0-okd-scos.54.21.0-okd-scos.44.21.0-okd-scos.34.21.0-okd-scos.24.21.0-okd-scos.14.21.0-okd-scos.04.20.0-okd-scos.174.20.0-okd-scos.164.20.0-okd-scos.154.20.0-okd-scos.144.20.0-okd-scos.134.20.0-okd-scos.124.20.0-okd-scos.114.20.0-okd-scos.104.20.0-okd-scos.94.20.0-okd-scos.84.20.0-okd-scos.74.20.0-okd-scos.64.20.0-okd-scos.54.20.0-okd-scos.44.20.0-okd-scos.34.20.0-okd-scos.24.20.0-okd-scos.14.20.0-okd-scos.04.19.0-okd-scos.194.19.0-okd-scos.184.19.0-okd-scos.174.19.0-okd-scos.164.19.0-okd-scos.154.19.0-okd-scos.144.19.0-okd-scos.134.19.0-okd-scos.124.19.0-okd-scos.114.19.0-okd-scos.104.19.0-okd-scos.94.19.0-okd-scos.84.19.0-okd-scos.74.19.0-okd-scos.64.19.0-okd-scos.54.19.0-okd-scos.44.19.0-okd-scos.34.19.0-okd-scos.24.19.0-okd-scos.14.19.0-okd-scos.04.18.0-okd-scos.104.18.0-okd-scos.94.18.0-okd-scos.84.18.0-okd-scos.74.18.0-okd-scos.64.18.0-okd-scos.54.18.0-okd-scos.44.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.22.0-0.okd-scos-nightly-2026-02-12-1306474.22.0-0.okd-scos-nightly-2026-02-12-0106474.22.0-0.okd-scos-nightly-2026-02-11-1306474.22.0-0.okd-scos-nightly-2026-02-10-1241374.22.0-0.okd-scos-nightly-2026-02-10-0041374.22.0-0.okd-scos-nightly-2026-02-09-1241374.22.0-0.okd-scos-nightly-2026-02-09-0041374.22.0-0.okd-scos-nightly-2026-02-08-124137───4.22.0-0.okd-scos-2026-02-16-1345214.22.0-0.okd-scos-2026-02-15-1131114.22.0-0.okd-scos-2026-02-14-2126514.22.0-0.okd-scos-2026-02-14-0926504.22.0-0.okd-scos-2026-02-13-212649───4.21.0-0.okd-scos-nightly-2026-02-12-1058444.21.0-0.okd-scos-nightly-2026-02-11-2258444.21.0-0.okd-scos-nightly-2026-02-11-1058444.21.0-0.okd-scos-nightly-2026-02-10-2258444.21.0-0.okd-scos-nightly-2026-02-10-1058444.21.0-0.okd-scos-nightly-2026-02-09-225844───4.21.0-0.okd-scos-2026-02-16-1932504.21.0-0.okd-scos-2026-02-16-0732504.21.0-0.okd-scos-2026-02-13-2237274.21.0-0.okd-scos-2026-02-13-1037274.21.0-0.okd-scos-2026-02-12-2221174.21.0-0.okd-scos-2026-02-12-102117───4.20.0-0.okd-scos-2026-02-10-1309514.20.0-0.okd-scos-2026-02-07-0016394.20.0-0.okd-scos-2026-02-06-1216394.20.0-0.okd-scos-2026-02-06-0016394.20.0-0.okd-scos-2026-02-05-1216384.20.0-0.okd-scos-2026-02-05-0016374.20.0-0.okd-scos-2026-02-04-121636───4.19.0-0.okd-scos-2025-10-25-0018304.19.0-0.okd-scos-2025-10-24-1218294.19.0-0.okd-scos-2025-10-24-0018284.19.0-0.okd-scos-2025-10-23-1218284.19.0-0.okd-scos-2025-10-23-001828───4.18.0-0.okd-scos-2025-05-27-0825374.18.0-0.okd-scos-2025-05-26-2025374.18.0-0.okd-scos-2025-05-26-0825374.18.0-0.okd-scos-2025-05-23-0333574.18.0-0.okd-scos-2025-05-22-153357───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-06-27-1341344.15.0-0.okd-2025-06-17-1652194.15.0-0.okd-2025-05-02-1402244.15.0-0.okd-2025-04-03-2126204.15.0-0.okd-2025-04-02-1800124.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.22.0-okd-scos.ec.64.22.0-okd-scos.ec.54.22.0-okd-scos.ec.44.22.0-okd-scos.ec.34.22.0-okd-scos.ec.24.22.0-okd-scos.ec.14.22.0-okd-scos.ec.04.21.0-okd-scos.ec.194.21.0-okd-scos.ec.184.21.0-okd-scos.ec.174.21.0-okd-scos.ec.164.21.0-okd-scos.ec.154.21.0-okd-scos.ec.144.21.0-okd-scos.ec.134.21.0-okd-scos.ec.124.21.0-okd-scos.ec.114.21.0-okd-scos.ec.104.21.0-okd-scos.ec.94.21.0-okd-scos.ec.84.21.0-okd-scos.ec.74.21.0-okd-scos.ec.64.21.0-okd-scos.ec.54.21.0-okd-scos.ec.44.21.0-okd-scos.ec.34.21.0-okd-scos.ec.24.21.0-okd-scos.ec.14.21.0-okd-scos.ec.0───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github