4.20.0-0.okd-scos-2025-05-29-064550

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-05-29-064550

Team Approvals:

Tests:

Blocking jobs
- aws Succeeded (2 retries) periodic-ci-openshift-release-master-okd-scos-4.20-e2e-aws-ovn
Informing jobs
- agent-single-node-ipv6 Failed periodic-ci-openshift-release-master-okd-scos-4.20-e2e-agent-single-node-ipv6
- aws-ovn-techpreview Succeeded (2 retries) periodic-ci-openshift-release-master-okd-scos-4.20-e2e-aws-ovn-techpreview
- aws-upgrade Succeeded periodic-ci-openshift-release-master-okd-scos-4.20-e2e-aws-ovn-upgrade
- aws-upgrade-minor Succeeded periodic-ci-openshift-release-master-okd-scos-4.20-upgrade-from-okd-scos-4.19-e2e-aws-ovn-upgrade
- gcp Succeeded periodic-ci-openshift-release-master-okd-scos-4.20-e2e-gcp
- vsphere Succeeded periodic-ci-openshift-release-master-okd-scos-4.20-e2e-vsphere-ovn

Upgrades from:

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.19.0-0.okd-scos-2025-05-28-194052

Created: 2025-05-29 06:46:10 +0000 UTC

Image Digest: sha256:d855c8ffde3d426f6d8662ef657927576d7527017eed9647868922b5f2ca791c

Components

Kubectl 1.32.1
Kubernetes 1.32.5
Kubernetes Tests 1.32.4
CentOS Stream CoreOS upgraded from 9.0.20250515-0 to 9.0.20250521-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
BareMetalLoadBalancer (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CloudDualStackNodeIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DisableKubeletCloudCredentialProviders (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIProviderOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MultiArchInstallAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MultiArchInstallGCP (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SELinuxChangePolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereDriverConfiguration (5 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiVCenters (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ProcMountType (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesPodSecurityStandards (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesSupport (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereMultiNetworks (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
SigstoreImageVerificationPKI (0 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
AWSDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureMultiDisk (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesvSphere (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLMWebhookProviderOpenshiftServiceCA (0 tests)				Enabled (New)		Enabled (New)
VSphereMixedNodeEnv (0 tests)			Enabled (New)	Enabled (New)

New images

aws-karpenter-provider-aws git 68ae0c26 sha256:9cc774e9297bb2c246bbb54d164fc28ad6842711f8cf17fbaf2f5f8ba5bd71bf
openstack-resource-controller git 35841895 sha256:12b6f809fc4f8011a4c64d15031d7ecfbfe5e999b696e05af4833066df5f354f

Rebuilt images without code change

apiserver-network-proxy git 1e82311c sha256:459fd535ae9406aab27eb7627df0ad446d83a4b8e653cf3216ea33c48ec97878
aws-cloud-controller-manager git 425c1c5b sha256:d194499adf5d6a805370724b367fa6ef51e63ae29c7b175aa8aeaffdb6dc21c9
aws-kms-encryption-provider git 088dcaf7 sha256:f72fe6509e7dd8626628d4d1dcb45e7d44076c30419a7da20df1ac00c0de23dd
aws-pod-identity-webhook git b0a16d53 sha256:bfc746182270141ec4f06150eb70f5a9235c52b5c15439a7bc2bc3b1f0795c74
azure-cloud-controller-manager git 7109d6b4 sha256:811c18fba50caf4ffe8835ef11750300074e92e9a2b8a25ee552326036b12290
azure-cloud-node-manager git 7109d6b4 sha256:8a498e60c31adbc43cdef009bd59fe58661fd3f1b3deb5b38f22998ccfa58105
azure-service-operator git 0ae129b4 sha256:e579cd32e3574d4eb6fbc8d64b21b8585d59212ffb720d9a7e1d5edf39016fab
azure-workload-identity-webhook git 892d3c4d sha256:870c1cd676fe68d2451ec1f76e7d5e5f9b2b4f2568b874472f353c9e6383deb9
baremetal-machine-controllers git f7a78954 sha256:f384527ee5cc9671af5c0cf9757b4275f27961f0788532b0b169fa0c78a4e53f
cloud-network-config-controller git 98ae311b sha256:ac211f428a37bb18a598d6dff1d6bba046e5d9a5bf4ae570a6a7640ee854d1a1
cluster-authentication-operator git ceeb021d sha256:70f0421c3129ebdd9800864f69f1c469d3c01301593374ce69e3ef25f2418eff
cluster-autoscaler git f746d442 sha256:c81941c2cc5307d7cf6014b752407af17dc8b8aacdafd352e13d7447f953f49e
cluster-autoscaler-operator git 227f7537 sha256:1644754c5eb0480f6d8722a2490bea05c003bf7706dfb1bfdea6c7fd8004142d
cluster-bootstrap git 8fde9c52 sha256:8b296b4c0ed4553438ba2ec1dd04a243649363092501364c97f00aa3e0887ad1
cluster-config-operator git 96607b59 sha256:778f0b46e85ebe5b6a9a1a93273e28e4f44aa17f6f8db6ed3ed04e29215f6fc9
cluster-control-plane-machine-set-operator git 1dbf0c7a sha256:1ae1e550d261d9b2530fc1baae6c2a6362e5f50e8c2c7b2d7b69d31d6bc40988
cluster-csi-snapshot-controller-operator git cf99de97 sha256:33bfe98f9a0fd89cad130d8452465793eb60b2c5bb776a46ec4454de13d9817c
cluster-dns-operator git 65981306 sha256:48b5b9fe3e90b352369a637b974e52cde7c8a258af6cbc2a6ac99268d0aef38b
cluster-kube-cluster-api-operator git 3ec30377 sha256:f7dfe20ea3ec9b035b33aefb9f8c1dc34ae56a5221ebb772b6b4bf72c7287450
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:0a70e25fbaf2f3490d6ec4441262b6264219c3192e5a21082e62be1f8fd08b8c
cluster-openshift-apiserver-operator git 5f66a3e1 sha256:db8733af3537d3b76f31326c5eb56a8521080c5ac0f26ffa4853c37778a0a059
cluster-policy-controller git 74852478 sha256:7f2fcd1d757d27e2f6643cc1db34a1d1573047aed7c1f256c3431a52395f90a0
cluster-samples-operator git 4cb29197 sha256:fef8da17e89034a15d6998444aa8947ff05001952f5c81aeda86f69d6522bd6d
cluster-update-keys git c1c56b4c sha256:4327e107eaed82637d4150013757aa232a809a2d52f6f7c2cf937c124965653e
configmap-reloader git 9bfbde86 sha256:5bded5aca479fdb655c390ab51b5e802d1730e7766efd9d8bd53a678273798f1
container-networking-plugins git b09f487c sha256:1d8d31f195705a060e45426de7e661780dd8f46c0be25adb5cabcdd6af524b25
containernetworking-plugins-microshift git b09f487c sha256:fd5556b6112ed583de1906b78e528f9a70c7f0c6a4592860e106c71aa7120ada
coredns git 7a1451db sha256:92d32cbbd90a710252ef500d4a4408ca18967fe488ea317d5bf06a58482c4531
csi-external-attacher git a8175e39 sha256:f212c2c8ddaa6e7ab2cda239556414101975ebc168d7706406e31981163420f0
csi-external-provisioner git 9db1cdb1 sha256:f30a4aacbca14bae6af1ac6cbbd2494ee90c2ac2db25f36f38c3c4f20a0c7fb6
csi-external-resizer git cca04e39 sha256:d09a4eb90b433b40b71cc30e3bdca2bd559960a91a842cabd6c3c38ca3d8fa05
csi-external-snapshotter git ac82cafc sha256:0328950466bdb78d6190b313893d5eb341c39338ae01a35362542934180d5f99
csi-livenessprobe git ca514478 sha256:5992b5b9b06f06ca67613220d216f0411fa61370a535faaf4206ff2f814e3dc6
csi-node-driver-registrar git d18edb3a sha256:c902b561868730db5574ec0eb0689834fe62ba8817ee3728e5125ddb6f972390
csi-snapshot-controller git ac82cafc sha256:9db9d1acbcb4649ed3ca197f51e4b9c5783c7bc1b0bbb22106db096eecd2a4ec
docker-builder git f2e5d601 sha256:5604ff131eefc3772eeb80244e9d1b844cf298bbd7df3dfdc2738581df0af132
docker-registry git 59376a75 sha256:2b06ceff904f4ab481c1104627820b341e792ea8d1026a29a9c0b41e400a6e33
driver-toolkit git 686fdac5 sha256:51adfbb6a68bdbdc60dc09777b90140f7f5bbe62b86311c06b2a26b2796e4481
egress-router-cni git 85353bb9 sha256:19b3586e32453636d875d41047ae82a6c435c005535f602c3704502794526b49
etcd git a5421dfe sha256:15fc1f05ffde70b2074ab733ec7fadef29b40580820ae6e4483b23a621ccfccb
gcp-cloud-controller-manager git d8d3aeba sha256:48f99e5cf63abb30afd59c1b226fab074a2f7e301945abda5d44923ffb969018
gcp-pd-csi-driver git 3aeac35b sha256:bb5235c2d8ffb54a33b8277b5e64319fb64256e41a11180587364f4e3739cffb
gcp-pd-csi-driver-operator git 44c74f24 sha256:8becb493ea2a7b6c1aa2c4f0fc146fe91bd62eb0ca38cb079117883b9c27ee6b
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:6ed3aba95e34d5bea616c7cfcace9f1813c0feec9dbbbe9ecc15fd2649a3af12
haproxy-router git b41f9d05 sha256:52dcbb7ce2f21f22e9fa3d732a064186215af0e278b6aad0840f3f1ff1c07282
ibm-cloud-controller-manager git 7422aab2 sha256:655ce7b63118c1a3188b06dcbec883f302c266e859e6d008cad46758ab2ce8f4
ibm-vpc-block-csi-driver git 176b6ef1 sha256:c08e603543629fe5a3fc526d78449ccaf779ef270778753d715db2304c46c7f4
ibm-vpc-block-csi-driver-operator git 3dfcfa12 sha256:68846ffaf0cfc8274ca2573876893dd9e440372096dd2d615709d71a528043f5
ibmcloud-machine-controllers git 989bd874 sha256:3a1509a0e23d4f3deaddcde5a881df2f9e339a75da70176b408a7f03c0b5923e
installer-etcd-artifacts git a5421dfe sha256:f2d44cc6e0c831ded7e6b42e867f9e7224349986ec4845ba299447fdf7b2b5ca
ironic-machine-os-downloader git dbe19772 sha256:ff005578de4053339355e0a66e597fc2fb15611fa15fcd04b988a29f8d06f66c
ironic-static-ip-manager git fcd9564e sha256:4d61d98e31738cb5ccc9239b799a4d57f100b3086699525af5ff8ea4ed0a2bc1
kube-metrics-server git 037a0e7e sha256:51a36ef908b5da19a47e93d657d89ea8ec0925c6495366b9cc8375ed8013c8d3
kube-state-metrics git c3da3b5f sha256:6a3391d27f75c53616918a2bbb6d152a4bb7f5665bf39c238351b66a0ab0cc0b
kube-storage-version-migrator git 4c521b09 sha256:12a16836db2b077deedfc22db8f599bc7882c83cdd7f2ddb4656663d1ca561fb
kubevirt-cloud-controller-manager git 3f4542ec sha256:45d623bccf7f00e97cb5886e4fe2403c3c3aba2f5d99d22391e25251356ef0d2
kubevirt-csi-driver git e3027025 sha256:3c5de75f8cbe5623b3d596c72c9e00cadf66f849d157075189d16fd6401320f6
libvirt-machine-controllers git a336f0b5 sha256:429eeb96c6ac01b8ef60f48a67b9f94519788a36e2e4c2b930b3935a56ba8d00
machine-image-customization-controller git 7d066746 sha256:44b0222098097ecd9e8b94f7a281065f89eeeb85d9b3f860faff5a4522d0092e
metallb-frr git 5076dbc4 sha256:5a8c05e9256a8a62ee4eb2cecbd4709aff5888866e68680af5a9213333cc032f
multus-admission-controller git 0b1b812e sha256:dc8c921411cb99929c8c66892c9df80190fc72d6fde11193023024dfed819385
multus-cni git cf0f68ec sha256:a3dd2a57f2b6a7a5e80ff740d8331294f9dacad5f561edf5cebc56f17141a71e
multus-cni-microshift git cf0f68ec sha256:d66a18d0100c770a389daaa45ce29048ef6ca6d997f689e0154a9191146d04eb
multus-networkpolicy git 6fffe5d7 sha256:cd368df5b988e522c26523dc1ec1844f668c9c02ddac9423420aeddfdc1b94fe
multus-route-override-cni git 391c1b03 sha256:cadc1e187c5f8a69e90bfd0887e2b1a228553eff36e2c9faecf5672da31300ac
multus-whereabouts-ipam-cni git 45624b63 sha256:0447afd29a9ab55543195af292b40cdb959e4fe865d903a09431cbe929c3f8c1
network-metrics-daemon git 5ec8c6bd sha256:085c840dc8f9a69090fd18da84b32e0a0679685d8a4eb604c2aeb9d802e887fa
nutanix-cloud-controller-manager git db1f264a sha256:51280481090f561be6ea7926a350e77ac7af881794999e6e0da01722dc2e5ab1
nutanix-machine-controllers git a26db5a0 sha256:2e73165accb5788a172776077e6e7db41cc9d56e6ac02205aae22e72ed5ee290
oauth-apiserver git 75914068 sha256:7907eedb7e2cfe73690655186b201c1877a205b1557db16f7d15cd08381a9d05
oauth-proxy git 3d12ccbe sha256:14b7ff793eb43b4fa1124dd4304ac02559b9678781985fbd118a65d4addce1e7
openshift-state-metrics git 3106bcc3 sha256:00a7a7acd8ef3aeade223b2a2706181794477a20b2115c997510a28638587f11
ovirt-csi-driver git 1db726a9 sha256:b9c92bc4244bb4bc41ffa9b5f38fd389c44d93e997cec681894bde9b46710b54
ovirt-csi-driver-operator git 76db379d sha256:61627ebc18066bc27015a3b3226bbbaa7f4b416b4eeab796b26f836e772d0035
powervs-block-csi-driver git f681413d sha256:d4771a03c496e1c9d34b07053b62d198c0a084d49e0592b1178fdea41c70da3a
powervs-block-csi-driver-operator git 059d95c2 sha256:befdc4279c3858de07c8edda1179bf2806a13080dc2e759a87a2864856b8d83e
powervs-cloud-controller-manager git ef83f3f5 sha256:8b1b75df9a6814650c62cb26ff4f44867c5c6a376bebdc5c6bb3fad87bc1c6dd
powervs-machine-controllers git 87f8e306 sha256:11338a88c440ee44a632abfc644fa11133f6f48ecb1cd38e5dbeafa537cfa846
prometheus-alertmanager git a2346ca5 sha256:f6e72634198443bbe2e01d128f14331ee5eb3e6b0492e7a67f9dca8ffa15fe2c
prometheus-config-reloader git b8debb4c sha256:331b0253819203abd6a4be6ec384bb1927e36924deef72cdb0eed5e6a568bc64
prometheus-node-exporter git c90542d8 sha256:ca41bc30311d76398beebfb9a9c98021f54cf65c9f2a527366f93485447d95a6
prometheus-operator git b8debb4c sha256:0a0c74c5c41f716c6919c0ba4f48dc969a3cf0f335bab3a5f684cfee417839b4
prometheus-operator-admission-webhook git b8debb4c sha256:b7bb41bfcfa81460ae5f69fe3bbd1f813b2a2d4e4c9cfe84e6f37077b71ba77f
route-controller-manager git bc97534a sha256:e82cd706071fb4d21153e12c6e8503b528e55af9bc7807fc30609f5280868ac9
service-ca-operator git 4dfa6916 sha256:fcf488b8c7351d174471f6792bcb65729e72bf76e299313f0a433fe6da849fb2
thanos git 95f7bb21 sha256:18f0fa5fa4607ad5932879763c5d3253b56f4b91ea196841a79fc62def230105
vsphere-csi-driver-operator git c2b41c36 sha256:9055ad963a68f432f9ec24122e6719cdbd6871caafad7017f650a483f9ac8552

agent-installer-api-server

NO-ISSUE: Change NHO, SNR, FAR, Kube Descheduler and Node Maintenance operators support level to ‘tech-preview’ (#7668) #7668
NO-ISSUE: [master] Bump OCP versions: 4.18 (#7692) #7692
MGMT-20717: Disable certificate verification for bmh (#7686) #7686
NO-ISSUE: Update kustomize to v5 (#7681) #7681
NO-ISSUE: [master] Bump OCP versions: 4.15, 4.14, 4.17, 4.19 (#7682) #7682
NO-ISSUE: [master] Bump OCP versions: 4.18 (#7680) #7680
MGMT-20331: Don’t use the detached annotation with the converged flow (#7662) #7662
MGMT-20378: Fix SKip MCO reboot feature (#7664) #7664
NO-ISSUE: Update Konflux references (#7671) #7671
NO-ISSUE: Upgrade linter (#7470) #7470
MGMT-20537: Allow any single key in OSImageCACertRef ConfigMap (#7658) #7658
MGMT-20610: Generate manifests for arbiter hosts for chrony and nic reapply (#7665) #7665
NO-ISSUE: [master] Bump OCP versions: 4.13, 4.19 (#7672) #7672
MGMT-20604: Fallback to Static Networking old flow, when auto-dns set to false (#7653) #7653
NO-ISSUE: Update Konflux references (#7645) #7645
NO-ISSUE: Allow setting TNA_CLUSTERS_SUPPORT in the template (#7667) #7667
NO-ISSUE: [master] Bump OCP versions: 4.19, 4.16, 4.17 (#7663) #7663
MGMT-20601: Update pull secret validation (#7656) #7656
MGMT-20465: Limit TNA Clusters to baremetal platform. (#7627) #7627
MGMT-20378: Disable skip MCO reboot for s390x (#7651) #7651
MGMT-20506: Reset preprovisioningimage status after cooldown period (#7628) #7628
NO-ISSUE: [master] Bump OCP versions: 4.18 (#7657) #7657
MGMT-19297: Error when querying /events endpoint with ?host_ids=uuid1,uuid2… (#7445) #7445
MGMT-20366: ironic inspection fails with Networking Connection error using 5050 port when ironic agent image override is used (#7633) #7633
MGMT-20473: Revert “MGMT-20384: Feature flag for AMD GPU supported OCP versions (#7572)” (#7614) #7572
NO-ISSUE: [master] Bump OCP versions: 4.12, 4.17, 4.15, 4.18, 4.14 (#7648) #7648
NO-ISSUE: Renovate config to update linter, go-toolset and tekton files (#7644) #7644
MGMT-14821: Remove multi-arch capability (#7613) #7613
NO-ISSUE: change deprecated keys in kustomization.yaml (#7636) #7636
MGMT-20567: Enable skip MCO reboot for day2 hosts (#7630) #7630
MGMT-20228: Enhancement to allow cancelling day-2 host’s installation (#7492) #7492
MGMT-20468: Add arbiter to cluster’s hyperthreading and disk encryption enums (#7631) #7631
Konflux build pipeline service account migration for assisted-service-rhel9-acm-ds-main (#7609) #7609
MGMT-20272: Cluster attribute finalizing_stage_started_at show wrong value (#7594) #7594
Konflux build pipeline service account migration for assisted-service-saas-main (#7611) #7611
Konflux build pipeline service account migration for assisted-service-rhel8-acm-ds-main (#7608) #7608
OCPBUGS-54319: mirror changes to openshift-installer with oci-eval-user-data (#7619) #7619
NO-ISSUE: Update Konflux references (#7582) #7582
MGMT-20464: Fix NFD detection of NVIDIA GPUs (#7597) #7597
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Use rsync over cp to set up networking files for first boot (#1123) #1123
Konflux build pipeline service account migration for assisted-installer-controller-acm-ds-main (#1108) #1108
Konflux build pipeline service account migration for assisted-installer-ds-main (#1110) #1110
Konflux build pipeline service account migration for assisted-installer-controller-ds-main (#1109) #1109
Konflux build pipeline service account migration for assisted-installer-acm-ds-main (#1107) #1107
MGMT-20567: Enable HTTP endpoint for MCO ignition (#1117) #1117
NO-ISSUE: Update Konflux references (#1114) #1114
Full changelog

agent-installer-node-agent

NO-ISSUE: Update Konflux references (#1002) #1002
Konflux build pipeline service account migration for assisted-installer-agent-acm-ds-main (#992) #992
NO-ISSUE: Update Konflux references (#984) #984
Full changelog

agent-installer-utils

OCPBUGS-56546: ISOBuilder- Remove default password for nodes #96
AGENT-1195: bump appliance to 936210 #98
OCPBUGS-56223: Fix nmtui redirection after quit #93
OCPBUGS-56147: Add operator CRs post-install in OVE build script #94
OCPBUGS-56210: OVE builder: Remove RHEL9 image from additionalImages #91
OCPBUGS-56112: configure the channel for each OLM operators #89
OCPBUGS-55769: Use internal image registry #78
AGENT-1195: bump appliance image to 4042ba #86
OCPBUGS-55708: Include RHEL 9 guest image to support VM launches via … #84
Full changelog

aws-cluster-api-controllers

OCPBUGS-53003: Remove references to master branch #551
OCPBUGS-55947: Update manifests to remove reliance on v1beta1 admission registration #549
Full changelog

aws-ebs-csi-driver

ART-12521: update go mod dependency for konflux #285
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-54975: Fix Cinder, Manila driver metrics #379
OCPBUGS-56128: openstack-cinder: Set –with-topology flag for node driver also #383
STOR-2408: Bump OLM metadata to 4.20 #382
Full changelog

aws-machine-controllers

OCPBUGS-56487: fix: make machineset annotation controller respect paused condition #129
OCPBUGS-55720: Update machine-api-operator pkg with fixes #127
Full changelog

azure-cluster-api-controllers

OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #337
Full changelog

azure-disk-csi-driver

NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #103
Full changelog

azure-file-csi-driver

OCPBUGS-54897: UPSTREAM: 2515: allow deleting cross-subscription snapshots #92
Full changelog

azure-machine-controllers

OCPBUGS-56380: Fix failure when attempting to modify immutable availabilitySet #148
OCPBUGS-55372: Update virtualmachines service to armcompute/v5 SDK #141
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #44
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-56808: Remove configv1.GCPServiceEndpointNameTagManager references #9749
no-jira: add unit tests for vsphere VIPS/machinenetworks population #9744
OCPBUGS-56713: update the punctuation #9746
OCPBUGS-54487: Power VS: Provide detailed error when entered VPCName cannot be found #9634
CORS-4066: Remove the function to check if multiarch is enabled/allowed #9750
OCPBUGS-6508: Update Control Plane replica validation for Single Node OpenShift #9048
CORS-3682: log falsy conditions when CAPI infra/machine provisioning failed #9722
MGMT-20702, OCPBUGS-56601: Avoid duplicate machine networks #9743
OCPBUGS-55671: AWS Mutliarch feature gate is enabled by default #9729
OCPBUGS-55672: Remove MultiArchInstallGCP featuregate #9725
OCPBUGS-56645: Update RHCOS 4.20 bootimage metadata to 9.6.20250523-0 #9741
OCPBUGS-56008: Remove unnecessary validation #9739
OCPBUGS-56268: pkg/types/azure: remove SystemAssignedID docs #9717
no-jira: Update team osasinfra #9732
OCPBUGS-56008: don’t expect identity on ASH #9733
OCPBUGS-56008: default Azure to create VM user-assigned identities #9718
NO-JIRA: add the instance types which test PASS #9723
OCPBUGS-55905: Update RHCOS 4.20 bootimage metadata to 9.6.20250513-0 #9720
OCPBUGS-56262: Added better logging for vSphere destroy #9716
OCPBUGS-56079: apply fixes for yaml-lint errors #9708
OCPBUGS-53107: Set appropriate KillMode for systemd services #9562
OCPBUGS-55683: Pre-create password files for agent installer OVE #9679
OCPEDGE-1673: [TNF] Render secret manifests from fencing credentials block. #9635
OCPBUGS-47719: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9693
OCPBUGS-55817: add Lsv4 and Lasv4 series as tested #9696
OCPBUGS-55772: Add support for Azure TDX confidential VM type #9691
no-jira: add jcpowermac to nutanix review/approve groups #9697
CORS-3960, OCPBUGS-55952: Remove Terraform Build Artifacts #9667
no-jira: add PeaceRebel (Bipin) to coreos approvers & reviewers list #9687
OCPBUGS-54502: ensure ctrplane nodes can access bootstrap MCS #9689
OCPBUGS-54566: Apply defaults then validate confidentialCompute #9637
OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
no-jira: fixes to get shellcheck to pass #9669
OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
OCPEDGE-1707: Add Disable Certificate Verification API #9640
no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
Full changelog

baremetal-operator

OCPBUGS-54629, OCPBUGS-54965: merge upstream #418
OCPBUGS-55717: Merge upstream #414
Full changelog

baremetal-runtimecfg

NO-ISSUE: Add emy as reviewer #346
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-56598: pkg/cli/admin/mustgather: Include ClusterVersion in fallback inspect #2025
OCPBUGS-55220: Replace colon to hypen in the filename while extracting tar on Windows #2022
NO-JIRA: OCPBUGS-46604: Clarify behavior of since-time flag in oc adm must-gather command #2019
WRKLDS-1103: Adding sos.conf file for default sos config into the tools image #2003
NO-JIRA: make ‘oc status’ compatible with bare kube #1947
Full changelog

cloud-credential-operator

OCPBUGS-53429: Render: configure proxy on bootstrap static pod #855
OCPBUGS-55777: Sync OpenStack CA Bundles from legacy location #850
OCPBUGS-54829: golang.org/x/net v0.38.0 #851
Full changelog

cluster-baremetal-operator

NO-ISSUE: Makefile: don’t run all linters when running unit tests #475
NO-ISSUE: Silence a bogus error with newer golangci-lint #477
OCPBUGS-52483: Allow provisioningIP when network disabled #466
Full changelog

cluster-capi-controllers

OCPCLOUD-2917: Merge https://github.com/kubernetes-sigs/cluster-api:v1.10.1 (647a1b7) into master #238
OCPBUGS-55947: Regenerate manifests to drop v1beta1 admissionregistration usage #236
Full changelog

cluster-capi-operator

OCPBUGS-56604: fix: ensure CAPI machineset is created not paused when authoritative #299
OCPBUGS-56709: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #301
OCPBUGS-56487: fix: watch CAPI resources in the migration controllers #300
OCPCLOUD-2943: MachineSet deletion logic #286
OCPCLOUD-2893: Add related objects to must-gather config #267
OCPBUGS-55985: fix: machine: propagate non-authoritative deletion #290
OCPBUGS-55947: Should not use v1beta1 of the AdmissionRegistration API group #289
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-56508: Fix config-sync-controller logging #389
Full changelog

cluster-config-api

OCPCLOUD-2717: Deprecate DeleteOnTermination for EBS volumes #2341
SPLAT-2175: introduce AzureDedicatedHosts feature gate #2293
OCPBUGS-52556: Revert v1alpha1 removal #2343
SPLAT-2044: [vsphere] promote multi-nic to default #2204
OCPBUGS-55671: Remove MultiArchInstallAWS featuregate #2336
CNTRLPLANE-371: Remove SELinuxChangePolicy gate #2334
OCPNODE-3262: promote featuregate SigstoreImageVerificationPKI to techpreview #2328
OCPBUGS-55672: Remove MultiArchInstallGCP featuregate #2332
CORS-4041: Remove the TagManager from the GCP Custom Endpoints #2323
SPLAT-2213: Added vSphere mixed node env feature gate #2326
OCPBUGS-56382: Fix validation for Resource field in MOSB API #2327
OPRUN-3860: Add NewOLMWebhookProviderOpenshiftServiceCA feature gate #2324
OCPBUGS-55664: remove VSphereDriverConfiguration feature gate #2319
CNTRLPLANE-367: Update Authentication API GoDoc for OIDC-related fields #2314
OCPNODE-2557, OCPNODE-3225: features: set user namespace features on by default #2305
OCPBUGS-55662: Drop BareMetalLoadBalancer feature gate #2312
CCXDEV-14850: align insights DataGather with config #2248
Remove upstream on-by-default cloud feature gates (CloudDualStackNodeIPs, DisableKubeletCloudCredentialProviders) #2249
SPLAT-2168: introduce AWSDedicatedHosts feature gate #2291
OCPBUGS-55666: Remove MachineAPIProviderOpenStack feature gate #2307
MCO-1657: FeatureGate for Bootimage updates for the vSphere platform #2301
SPLAT-2072: Removed VSphereMultiVCenters feature gate #2231
SPLAT-2158: Azure Multi Disk feature gate #2289
README: Add criteria for featuregate test result windows and flake handling #2302
Full changelog

cluster-etcd-operator

OCPBUGS-56199: increase tnf job timeouts #1426
CNTRLPLANE-340: Issue shorter certs when ShortCertRotation feature gate is set #1315
OCPBUGS-55757: adjust alerts according to platform #1422
OCPBUGS-55111: Remove ‘meta’ keyword from pcs resource create command #1417
Full changelog

cluster-image-registry-operator

OCPBUGS-56606: bump github.com/golang-jwt/jwt #1212
OCPBUGS-56361: bump golang.org/x/oauth2 to the latest version #1206
Full changelog

cluster-ingress-operator

OCPBUGS-54745: status: Conditionally add CRDs to relatedObjects #1217
OCPBUGS-55317: Check capabilities before watching OLM resource #1232
Full changelog

cluster-kube-apiserver-operator

NO-JIRA: Use new PSS annotation #1833
OCPBUGS-55013: SCC: add hostmount-anyuid-v2 #1834
OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects - reapply #1831
OCPBUGS-52466: bump library-go to bring in updated audit policies #1837
OCPBUGS-55274: Change validity / refresh for some certs which should not be affected by dev cycle rotation change #1832
Full changelog

cluster-kube-controller-manager-operator

WRKLDS-954: pkg/operator: Remove expired conditional resources #839
Full changelog

cluster-kube-scheduler-operator

OCPNODE-3192: enable the scheduler plugin if the feature gate DynamicResourceAllocation is enabled #561
Full changelog

cluster-machine-approver

OCPBUGS-19856: Improve log message when searching for node by InternalDNS #269
No-Jira: ignore test file csr_check_test.go #270
Full changelog

cluster-monitoring-operator

NO-JIRA: [bot] Synchronize versions of the downstream components #2606
OCPBUGS-18282: provide more context in externalLabels unmarshalling error #2605
NO-JIRA: metrics-client-ca: set owner annotation #2602
OCPBUGS-18282: prevent use of reserved labels keys in Prometheus externalLabels #2604
MON-4242: chore(metrics-server): allow setting log verbosity #2599
NO-JIRA: [bot] Synchronize versions of the downstream components #2603
OCPBUGS-33691: mixin: longer rate interval for Alertmanager[Cluster]FailedToSendAlerts #2598
NO-JIRA: [bot] Synchronize versions of the downstream components #2600
MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2549
Full changelog

cluster-network-operator

OCPBUGS-56051: Configure the terminationMessagePolicy for all containers deployed in HyperShift #2709
OCPBUGS-51093, OCPBUGS-55157: Pass ‘–gateway-mode’ flag for ovnkube-cluster-manager #2696
OCPBUGS-55488: Remove environment variables related to ARO HCP MIv2 for CNO #2686
Full changelog

cluster-node-tuning-operator

E2E: use 4 cpus for reserved from available cpus (#1326) #1326
Add NetworkPolicy k8s resources (#1323) #1323
OCPBUGS-55989: E2E: Functional tests for align cpus by UncoreCache Feature (#1302) #1302
NO-JIRA:e2e:daemonset: pod phase and events (#1289) #1289
Full changelog

cluster-olm-operator

OCPBUGS-56813: fix olm.maxOpenShiftVersion float parsing #121
OPRUN-3904: Add static network policies to govern namespace and controller pod #118
OPRUN-3861: Webhook support feature flag #119
OPRUN-3883: Add network-policy support #117
Full changelog

cluster-openshift-controller-manager-operator

WRKLDS-954: pkg/operator: Remove expired conditional resources #388
WRKLDS-1676: ocm deployment: Add POD_NAME #386
WRKLDS-1676: controller manager config: Set leaderElection.name #385
Full changelog

cluster-storage-operator

NO-JIRA: Update openstack approvers #581
OCPBUGS-54491: sync Azure File permissions with upstream docs #2 #578
Full changelog

cluster-version-operator

NO-JIRA: Add myself as an approver #1201
OCPBUGS-56114: Fix ImplicitlyEnabledCapabilities #1191
OTA-1531: [5/x] cvo: read cluster FeatureGate early #1190
OTA-1403: Update and Verify Test Metadata Using Makefile #1179
OTA-1531: [4/x] cvo: extract config informer creation #1189
OTA-1010: Add a new version of GetImplicitlyEnabledCapabilities #1133
OTA-1531: [3/x] cvo: read version from release metadata on startup #1188
OTA-1531: [2/x] cvo: refactor LoadUpdate #1185
OTA-1531: [1/x] cvo: refactor option processing #1184
OTA-209: Add sync logic to the CVO configuration controller #1170
OCPBUGS-53062: add the ports Field into the CVO’s container spec #1180
NO-JIRA: Makefile: verify -> verify-yaml #1183
Full changelog

console

OCPBUGS-56439: Remove duplicate sinkUri code #15085
OCPBUGS-56137: Added developer getting started card in Admin project overview page #15079
OCPBUGS-52842: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15092
OCPBUGS-56628: Fix regression with drawers and modals #15080
OCPBUGS-56087: Opening Edit Secret modal and saving without changes throws error #15058
ODC-7722: Remove service binding plugin #15035
OCPBUGS-55456: Fix and enable web terminal tests #15082
OCPBUGS-54726: Layout of Welcome to the new OpenShift experience! buttons is wonky on mobile #14951
OCPBUGS-56353: Initialize log package #15069
ODC-7797: Expose PodRingSet via Dynamic Plugin SDK #15068
OCPBUGS-55806: fix bug where AlertItem is missing info icon #15052
ODC-7782: Test adjustments to perspective merge #14970
OCPBUGS-54434: Update vSphere configuration form to support CM YAML f… #15065
OCPBUGS-49291: Set proper type for the CSP field for the serverconfig #15064
OCPBUGS-56410: Recognize Detached BMH status #15056
ODC-7786: Add flags in console static plugin for all the components of this epic #14992
OCPBUGS-54195: Enable pipeline tests by installing operator version 1.17 #14903
CONSOLE-3644: app.jsx -> app.tsx #14997
OCPBUGS-55368: [knative] Self-provisioner user can not access or create event sources via ODC #15017
OCPBUGS-55208: Should show default OpenShift Logo for a theme when there is not custom logo set for the theme. #14999
OCPBUGS-56245: Remove dead code for deployment and deployment config #15054
OCPBUGS-37977: Refresh console TLS certs at runtime #14971
OCPBUGS-55419: improve description of the custom logos CLI args #15003
CONSOLE-4572: classnames -> react-styles #15050
OCPBUGS-55808: fix cy.createProject command #15026
OCPBUGS-55896: Refactor Kebab+ActionsMenu to use PF #15028
OCPBUGS-56039: Update supported languages in Internationalization docs #15046
OCPBUGS-55919: remove 60 day alert from cluster update modal #15045
CONSOLE-4550: col-sm-6 => GridItem sm={6} #15014
OCPBUGS-54234: Fix impersonate group action #14915
OCPBUGS-46385: fix alignment of Getting Started item icons #15025
CONSOLE-4393: Update to Node.js® v22 #14841
OCPBUGS-55412: Wrap ListPageHeader action with a div #15008
OCPBUGS-55323: Add patternfly/react-topology to shared modules list of dynamic plugin sdk #14993
OCPBUGS-55430: resolve http Context and Client handling #15009
OCPBUGS-55629: get go mod tidy to pass #15024
OCPBUGS-53428: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15001
OCPBUGS-55375: add data-quickstart-id to quick create button #14998
OCPBUGS-54157: Sample segment sessions #14990
OCPBUGS-49291: Improving the DevExp for passing the CSP directives to console per flag + Make use of connect-src and object-src directives #14701
OCPBUGS-53320: Add DEVCONSOLE_PROXY flag #15006
OCPBUGS-55633: fix bug where Critical Alerts section cannot be collapsed #15015
Full changelog

console-operator

ODC-7790: Remove ODO download link #987
OCPBUGS-52556: Revert v1alpha1 removal #990
OCPBUGS-43792: Add plugins order to console config #980
OCPBUGS-55698: Lift FeatureGate by bumping openshift/api #984
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

NO-JIRA: OWNERS: Update team osasinfra #326
OCPBUGS-56028: [cinder-csi-plugin] Don’t report topology capability when –with-topology=False #325
Full changelog

csi-driver-nfs

NO-JIRA: OWNERS: Update team osasinfra #155
Full changelog

gcp-cluster-api-controllers

OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #242
Full changelog

gcp-machine-controllers

OCPBUGS-46387: allow instances with unknown quotas to be created #114
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

TRT-1854: remove annotation rules that don’t relate to suites #2299
OCPBUGS-56436: Bump 4.20 1.32.5 #2308
CNTRLPLANE-179: apiserver library go bump #2285
OCPBUGS-55944: UPSTREAM: <carry>: unrevert: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2295
OCPBUGS-55631: UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes #2288
NO-JIRA: Fix generation of test names #2296
OCPBUGS-54208: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2277
OCPBUGS-54318: UPSTREAM: 131236: RWX tests should create RWX volumes #2279
OCPBUGS-55945: Bump main 1.32.4 #2292
TRT-2103: Revert “NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2291
NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2287
OCPBUGS-55632: Fix node expansion on older kubelets #2282
TRT-2066: Use OTE generated labels for skips in test-kubernetes-e2e.sh #2255
Full changelog

hypershift

OCPBUGS-56492: Fix CatalogSource image check when unauthorized #6192
CNTRLPLANE-931: update konflux references #6188
NO-JIRA: Add unit test for reconciling components with a WithManifestAdapter for SA #6191
NO-JIRA: Fix serviceaccounts with custom adapter not getting pull-secret #6185
OCPBUGS-56457: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6171
CNTRLPLANE-905: feat(shared-ingress): add arm64 builds #6175
CNTRLPLANE-810: Increase imageContentSources slice length validation #6166
CNTRLPLANE-914: chore(deps): update konflux references #6165
CNTRLPLANE-905: Red Hat Konflux update hypershift-shared-ingress-main #6174
CNTRLPLANE-201: feat(shared-ingress): Add el10 Containerfile #6168
NO-JIRA: Remove ControlPlaneV2 API featuregate #6169
NO-JIRA: Move ControlPlaneComponent CRD installation to the CLI #6167
WRKLDS-1676: ocm config: Update leaderElection.name #6156
CNTRLPLANE-844: Refactor CAPI provider/manager into v2 #6159
CNTRLPLANE-844: Refactor ControlPlaneOperator into v2 component #6148
CNTRLPLANE-844: Remove DeploymentConfig usage #6157
NO-JIRA: Fix TestHostedClusterWatchesEverythingItCreates not working locally #6149
NO-JIRA: Keep checking for rollouts during upgrade HO test for five minutes #6097
OCPBUGS-56205: Switch back to rh catalog #6154
OCPBUGS-56164: Fix HyperShift Operator Enterprise contract konflux pipeline #6138
OCPBUGS-56011: Configure ClusterServiceLoadBalancerHealthProbeMode a… #6099
CNTRLPLANE-565: Remove NodePool CapacityReservation API featuregate #6132
CNTRLPLANE-645: Rename NodeCount flag to Replicas #6094
CNTRLPLANE-844: Remove unused DeploymentConfig references #6146
NO-JIRA: test/setup: use case-sensitive prometheusK8s in monitoring config #6150
NO-JIRA: Increase the content width in the upstream docs #6147
NO-JIRA: cpov2: fix structured authentication configuration serialization #6135
CNTRLPLANE-269: Remove legacy machine approver and ign server reconciliation code #6133
OCPBUGS-55913: Fix Job status returning empty reason and message #6134
CNTRLPLANE-269: Remove DeploymentConfig usage from cpov2 #5724
OCPBUGS-37323: MarkPersistentFlagRequired does not work since CLI refactoring #5649
NO-JIRA: Fix minor issues with Azure HC creation doc #6128
OCPBUGS-55504: Add postStart hook to kube-apiserver container #6074
CNTRLPLANE-709: Add ability to limit platform specific resources managed by HostedCluster #6039
CNTRLPLANE-261: Enable pprof in hosted control plane etcd #6003
CNTRLPLANE-334: Update KASv2 structured authentication configuration #6119
CNTRLPLANE-334: Update KAS structured authentication configuration generation logic to use new uid and extra field #6073
OCPBUGS-54483: Add support for registry root entry only in the IDMS/ICSP #6100
OCPBUGS-55357: Only build main branch components #6078
CNTRLPLANE-265: Enable staticcheck linter in golangci-lint #5836
CNTRLPLANE-740: Add DR for HCP using OADP and Hypershift plugin #6077
NO-JIRA: bump HO supported version to 4.20 #6006
CNTRLPLANE-798: ho: changes to ref’ed resources triggers HC reconciliation #6103
Full changelog

ibmcloud-cluster-api-controllers

OCPCLOUD-2922: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.11.0 (9369909) into main #113
OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #111
NO-JIRA: Do not gitignore files inside vendor #112
Full changelog

insights-operator

OCPBUGS-55804 Report an error when the insights-runtime-extractor is not running (#1086) #1086
feat: update DataGather condition reasons (#1084) #1084
feat: ensure the etc-entitlement-pki secret exists (#1082) #1082
feat: move HTTP status code from condition.Reason to condition.Message (#1083) #1083
feat: add gatheringDisabled condition (#1078) #1078
Full changelog

insights-runtime-exporter, insights-runtime-extractor

test: Fix JBoss EAP 8.0 version #45
test: Fix JBoss EAP 8.0 version #46
Full changelog

installer-altinfra

OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
no-jira: fixes to get shellcheck to pass #9669
OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
OCPEDGE-1707: Add Disable Certificate Verification API #9640
no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
Full changelog

ironic

Bug OCPBUGS-55434: Bump sushy to include SuperMicro boot device string workaround #659
METAL-1344: Do not install sushy-oem-idrac separately #653
METAL-1345: Install scciclient from source #652
METAL-1264: Update to latest upstream content #655
OCPBUGS-55381: Extract files one-by-one in logwatch #654
Full changelog

ironic-agent

METAL-1264: Update to latest upstream content #186
OCPBUGS-55350: collect the entire journal from the host #184
Full changelog

keepalived-ipfailover

OCPBUGS-48318: Change default value for OPENSHIFT_HA_VRRP_ID_OFFSET #206
Full changelog

kube-rbac-proxy

NO-JIRA: v0.19.1 #119
Full changelog

machine-api-operator

OCPCLOUD-2717: bump openshift/api #1372
OCPBUGS-56159: correct aws kms permissions #1370
OCPBUGS-55461: Changed machineset tests to be serial #1365
OCPBUGS-55720: fix: use patch for machine/machineset status #1362
OCPBUGS-55461: Fixes machineset paused condition nil pointer #1361
OCPBUGS-55461: Revert “Added skip for when config not multi nic” #1363
Full changelog

machine-config-operator

OCPBUGS-55830: Only update boot disks during GCP boot image updates #5084
OCPBUGS-55365: Regardless of Pool configuration wait on other sub-controllers to Render #5022
OCPBUGS-45621: Fix dynamic-system-reserved-calc.sh when only true parameter is used #4733
NO-JIRA: OWNERS: Update team osasinfra #5066
OCPBUGS-36859: Support NODEIP_HINT in IPI deployments too #4973
OCPBUGS-56446: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5067
OCPBUGS-55681: Give keepalived container chroot cap #5032
NO-JIRA: operator: use component annotation for ownership #5056
OCPBUGS-56211: Boot Image Controller should not degrade when golden configmap is slow to update #5051
OCPBUGS-53390: Fix interrupt state to account for failure correctly #5054
OCPBUGS-55967: Add hot loop detection in the boot image controller #5037
OCPBUGS-55439: scope MCD node listers to current node #5015
OCPBUGS-55770: Compare the osImageURLs for OS validation check #5041
MCO-1654: Add new runbook for KubeletHealthState to alert #5042
OCPBUGS-49728: Adapt MCC to use LayeredNodeState and remove LayeredPoolState #4841
OCPBUGS-54697: error from generateAndValidateRenderedMachineConfig function can be misleading #5033
OCPNODE-3173: Disable OCI artifact mount by default. #5016
OCPBUGS-55597: OWNERS: update owners file with current MCO team members #5024
OCPBUGS-55450: Only populate Status.PinnedImageSets.CurrentGeneration on valid generation value #5023
OCPBUGS-55327: Bugfix Ignition compression merge #5006
OCPBUGS-55262: Use auto=start only for IPsec out connections #5017
OCPBUGS-55713: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5030
OCPBUGS-52940: AWS Custom-DNS: Update services that run on control plane nodes #4939
OCPBUGS-41485: Update MCD Log Output to Clarify No Configuration Change #5019
Full changelog

machine-os-images

OCPBUGS-55810: Dummy change to force a rebuild for 4.20 #62
Full changelog

monitoring-plugin

OU-830: fix: add error boundary to variable dropdown #417
OCPBUGS-56095: “Negative matcher” is checked by default on Create silence page #414
OU-712: fix: add missing alertname field to silence alert #413
OU-794: fix: update monitoring and virtualization routes to avoid overriding console routes #410
OU-774: bound table scroll and column alignment #402
RHINENG-17675: feat: add group id to url params #403
RHINENG-10537: fixed broken delete chip group for incidents filters #401
OU-197: feature: upgrade react router to v5 compat #400
OU-745: Check for CSRF change on each fetch cycle #404
Full changelog

must-gather

OCPBUGS-52367: Fix collecting IPsec data for upgrade #482
CORENET-5882: network: gather routeadvertisements.k8s.ovn.org #485
Full changelog

network-interface-bond-cni

CNF-17883: Upstream Sync 26052025 #71
OCPBUGS-54229: Upstream sync 07-05-2025 #67
NO-JIRA: Add ci-operator file #68
Full changelog

network-tools

NO-JIRA: Add aurko, comment jakob, remove nadia #143
NO-JIRA: Fix github epic ID and username matching #142
Full changelog

networking-console-plugin

CNV-61536: align Modals with PatternFly default #242
CNV-60062: fix links to upstream documentation #241
Full changelog

oauth-server

OSASINFRA-3534: Bump Gophercloud to v2 #170
Full changelog

oc-mirror

OCPBUGS-56486: v2/config: allow delete and mirror words (#1164) #1164
OCPBUGS-56642: update the Dockerfile to work with the 1.23 go.mod (#1159) #1159
disables the signature verification on operator catalog collection (#1151) #1151
OCPBUGS-55966: v2/archive: print unarchive progress (#1141) #1141
OCPBUGS-54443: v2/cli: always remove past archives before m2d (#1144) #1144
OCPBUGS-56117: Make v2 blockedImages use regular expressions (#1145) #1145
changes the signature mirroring default to disabled (#1143) #1143
OCPBUGS-54587: v2: bump containers/common dep to 0.63.0 (#1138) #1138
CLID-182: Add spinner to release collector mirror to disk or mirror to mirror (#1085) #1085
no-jira: Disable go workspace and build v2 as a binary (#1078) #1078
OCPBUGS-55100: implements registries.d file as specified in containers/image docs (#1131) #1131
OCPBUGS-54220: v2/imgbuilder: use –authfile when set (#1129) #1129
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #359
NO-ISSUE: Synchronize From Upstream Repositories #356
NO-ISSUE: Synchronize From Upstream Repositories #352
NO-ISSUE: Synchronize From Upstream Repositories #346
NO-ISSUE: Synchronize From Upstream Repositories #344
NO-ISSUE: Synchronize From Upstream Repositories #339
NO-ISSUE: Synchronize From Upstream Repositories #337
NO-ISSUE: Synchronize From Upstream Repositories #336
NO-ISSUE: Synchronize From Upstream Repositories #333
NO-ISSUE: Synchronize from upstream #331
Full changelog

openshift-apiserver

OCPBUGS-35944: Allow updates to ImageStreams that violate existing LimitRanges #513
OCPBUGS-35855: Wire dry run option to Image API server operations #511
OCPBUGS-38120: project: run validation function when deleting an object #508
OCPBUGS-54458: Fix image reference in TestImageStreamImportQuayIO #509
Full changelog

openshift-controller-manager

WRKLDS-1676: pkg/cmd: Add –kubeconfig and –namespace flag #385
WRKLDS-1676: Delete unused pkg/serviceaccounts #381
OCPBUGS-52193: legacy image pull secret rollback controller #380
OCPBUGS-54695: Empty proxy variables are causing issues during the build #373
Full changelog

openstack-cluster-api-controllers

OWNERS: Update team osasinfra #363
Full changelog

openstack-machine-api-provider

NO-JIRA: OWNERS: Update team osasinfra #133
NO-JIRA: Unignore generated files in the vendor directory #134
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OPRUN-3903, OPRUN-3906, OPRUN-3923, OPRUN-3926: Add NetworkPolicy support to OLMv0 components #1008
NO-ISSUE: Synchronize From Upstream Repositories #1003
NO-ISSUE: Synchronize From Upstream Repositories #1002
NO-ISSUE: Synchronize From Upstream Repositories #1000
NO-ISSUE: Synchronize From Upstream Repositories #997
OCPBUGS-53161, OPRUN-3880: Synchronize From Upstream Repositories #996
Full changelog

operator-marketplace

NO-ISSUE: (cleanup): Update Owner Alias - remove inactive maintainers #631
NO-JIRA: OWNERS: Add camilamacedo86 and tmshort as approvers #632
NO-ISSUE: Bump github.com/operator-framework/api from 0.30.0 to 0.31.0 #627
NO-ISSUE: (CI) - Add check to avoid we upgrade by mistake the go vers… #625
NO-ISSUE: Add dependabot k8s and go library groupings #626
NO-ISSUE: Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 #620
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-56768, OCPBUGS-56769: DownStream Merge [05-28-2025] #2588
OCPBUGS-52462: Bump OVN to 24.09.2-69.el9fdp #2576
OCPBUGS-52462: DownStream Merge [05-19-2025] #2577
Revert “OCPBUGS-55824: Revert “OCPBUGS-44285, OCPBUGS-37733, OCPBUGS-55824, OCPBUGS-54375: Downstream Merge 7th May 2025”” #2568
OCPBUGS-55824: Revert “OCPBUGS-44285, OCPBUGS-37733, OCPBUGS-55824, OCPBUGS-54375: Downstream Merge 7th May 2025” #2557
OCPBUGS-37733, OCPBUGS-44285, OCPBUGS-54375, OCPBUGS-55824: Downstream Merge 7th May 2025 #2550
CORENET-5975: Dockerfile: Unpin OVS and consume the latest from FDP. #2525
Full changelog

prom-label-proxy

NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.11.1 #379
Full changelog

prometheus

MON-4251: update prometheus to v3.3.1 #252
Full changelog

stream-coreos, stream-coreos-extensions

NO-JIRA: faq: add info about querying rpmdb and extensions #1820
NO-JIRA: bump verison to 4.20 #1804
NO-JIRA: c9s/c10s repos: use basearch var for extras repo #1819
NO-JIRA: README.md: add Mermaid diagram #1816
NO-JIRA: tree: delete base compose files, rework README #1811
NO-JIRA: Remove kernel-rt-kvm for cs9 and cs10 #1814
NO-JIRA: tests: fix RHEL 10.1 handling in kernel replace test #1813
Full changelog

telemeter

OCPBUGS-56425: Accept and discard metadata requests over remote write #558
NO-JIRA: README.md: fix command to create an auth token #557
Full changelog

tests

NO-JIRA: OVNK BGP: workaround OCPBUGS-56488 #29853
OCPBUGS-56743: Poll project deletion to fix flaky behavior #29850
OCPEDGE-1922: feat: rename and move arbiter tests #29846
CNTRLPLANE-353: Add test which verifes that only short duration tests are present #29629
NO-JIRA: ovn, virt, skip ipv6 for secondaries #29858
OCPBUGS-55721, OCPBUGS-55832: Fix RouteExternalCertificate tests for few other on-prem jobs #29764
ODC-7790: Remove ODODownloadsSyncDegraded #29835
NO-JIRA: router: Rename MarshalPrivateKeyToDERFormat to MarshalPrivateKeyToPEMString #29855
NO-JIRA: OVNK: ignore stderr when running commands #29845
NO-JIRA: OVNK BGP: set VRF-Lite timeout #29844
MULTIARCH-5390: tagimportmode: Do not skip tests if the import mode is the same as the import mode of the cluster #29801
OCPBUGS-56381: feat: update test to account for two node fencing #29807
MCO-1652: Add new MCO disruptive suite #29800
NE-2031: Enhancing the gateway controller test cases with two more function #29806
OCPBUGS-55394: Handle Metal CI test cases for PIS #29745
NO-JIRA: ovn, virt: Support proxy when downloading virtctl #29824
OCPBUGS-56196: Check to see if SamplesOperator managementState is Removed #29817
NO-JIRA: TLS registry update #29787
OCPNODE-3138: Add zstd:chunked image test #29713
OCPNODE-2849: Add testcase to verify removal of cgroupv1 in OCP 4.19 #29640
OCPBUGS-56047: OLMv1: Update test bundles [main/release-4.20] #29820
NO-JIRA: tls/violations: add sjenning to OWNERS #29819
NO-JIRA: ovnk, virt: Filter out ipv6 LLA #29816
NO-JIRA: Fix egressIP advertisements tests flake #29803
MCO-1615: Mco node degraded mcn condition #29684
NO-JIRA: Report back source for openshift-tests-extension #29733
TRT-2061: throttle monitor startup refactor #29637
OCPBUGS-55317: Skip GatewayAPIController tests on clusters without OLM capabilities #29784
CORS-3989: set proxy for http transport in router and imageregistry cases #29759
NO-JIRA: Revert: NO-JIRA: support skipping [OCP]FeatureGate… #29796
OCPBUGS-55211: use regular user to create httproute #29697
Revert “Revert “TRT-2049: check for any watch requests”” #29723
CORENET-5854: networking: add VRF-Lite test cases #29669
OCPEDGE-1678: Fix failed etcd test on arbiter ci run #29694
NO-JIRA: update networking owners #29786
NO-JIRA: increase api client timeout to match those allowed by kube-apiserver #29761
NO-JIRA: support skipping [OCP]FeatureGate tests #29760
OCPBUGS-55384: OCPBUGS-55968: Fix PIS tests on SNO & Enable applicable MCN & PIS tests on SNO #29785
OCPNODE-2315: Add nested container test #29781
OCPBUGS-55994: Do not set the MTU when using NetworkAttachementDefinition #29768
NO-JIRA: Test load balancer metrics #29675
NO-JIRA: Fix bearer token exposure in exit condition as well #29575
NO-ISSUE: Automated - Update synthetic test data #29716
TRT-2106: Fix race in MCN test cleanup #29775
OCPBUGS-55785: bump limits #29778
Revert “OCPNODE-2315: Add nested container test” #29779
CNTRLPLANE-371: Update etcd test data for k8s 1.33 release (missing data) #29773
OCPBUGS-55712: (olmv1 tests) Use exponential backoffs for verifyAPIEndpoints #29756
OCPBUGS-55945: Bump main 1.32.4 #29772
CORENET-5875, CORENET-5876, OCPBUGS-55910: Add EgressIP and L2 UDN route advertisements tests #29727
OCPNODE-2315: Add nested container test #29594
NO-JIRA: faultyloadbalancer test: pass instead of skip #29753
OCPBUGS-55902: pkg/monitortestlibrary/allowedalerts: Ignore KubeJobFailingSRE for now #29747
NO-ISSUE: OLMv1: Preflight: Relax checking of error message #29766
CNTRLPLANE-371: Update etcd test data for k8s 1.33 release #29699
OCPBUGS-55785: bump limits #29763
OCPNODE-2999: Add SigstoreImageVerification e2e tests #29652
OKD-243: Skip GatewayAPIController tests for OKD #29742
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-56720: gitignore doesn’t ignore certain files in vendor/ #91
Full changelog

vsphere-cluster-api-controllers

OCPCLOUD-2921: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.13.0 (7cc3899) into master #58
NO-JIRA: Do not gitignore files inside vendor #57
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-55020: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #142
Full changelog

vsphere-problem-detector

OCPBUGS-53217: replace operator client #182
Full changelog

Node Image Info

Package List

cri-o-1.32.4-1.el9s
kernel-5.14.0-585.el9
openshift-kubelet-4.20.0-202505200845.p0.g10466b2.assembly.stream.el9
systemd-252-53.el9

Full list (569 packages)

NetworkManager-1:1.53.4-1.el9
NetworkManager-cloud-setup-1:1.53.4-1.el9
NetworkManager-libnm-1:1.53.4-1.el9
NetworkManager-ovs-1:1.53.4-1.el9
NetworkManager-team-1:1.53.4-1.el9
NetworkManager-tui-1:1.53.4-1.el9
WALinuxAgent-udev-2.7.0.6-13.el9
aardvark-dns-2:1.14.0-3.el9
acl-2.3.1-4.el9
adcli-0.9.2-1.el9
afterburn-5.8.2-1.el9
afterburn-dracut-5.8.2-1.el9
alternatives-1.24-2.el9
attr-2.5.1-3.el9
audit-3.1.5-7.el9
audit-libs-3.1.5-7.el9
authselect-1.2.6-3.el9
authselect-libs-1.2.6-3.el9
avahi-libs-0.8-22.el9
basesystem-11-13.el9
bash-5.1.8-9.el9
bash-completion-1:2.11-5.el9
bind-libs-32:9.16.23-28.el9
bind-license-32:9.16.23-28.el9
bind-utils-32:9.16.23-28.el9
binutils-2.35.2-63.el9
binutils-gold-2.35.2-63.el9
bootc-1.1.7-1.el9
bootupd-0.2.27-3.el9
bsdtar-3.5.3-4.el9
bubblewrap-0.4.1-8.el9
bzip2-1.0.8-10.el9
bzip2-libs-1.0.8-10.el9
c-ares-1.19.1-2.el9
ca-certificates-2024.2.69_v8.0.303-91.4.el9
centos-gpg-keys-9.0-28.el9
centos-release-cloud-1-1.el9s
centos-release-nfv-common-1-5.el9s
centos-release-virt-common-1-4.el9s
centos-stream-release-9.0-28.el9
centos-stream-repos-9.0-28.el9
checkpolicy-3.6-1.el9
chrony-4.6.1-1.el9
cifs-utils-7.2-1.el9
clevis-21-208.el9
clevis-dracut-21-208.el9
clevis-luks-21-208.el9
clevis-systemd-21-208.el9
cloud-utils-growpart-0.33-1.el9
composefs-1.0.8-1.el9
composefs-libs-1.0.8-1.el9
conmon-3:2.1.13-1.el9
conmon-rs-0.6.6-2.el9s
conntrack-tools-1.4.7-4.el9
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-4:2.237.0-1.el9
containernetworking-plugins-1:1.7.1-1.el9
containers-common-2:1-130.el9
coreos-installer-0.24.0-1.el9
coreos-installer-bootinfra-0.24.0-1.el9
coreutils-8.32-39.el9
coreutils-common-8.32-39.el9
cpio-2.13-16.el9
cracklib-2.9.6-27.el9
cracklib-dicts-2.9.6-27.el9
cri-o-1.32.4-1.el9s
cri-tools-1.33.0-2.el9s
criu-3.19-3.el9
criu-libs-3.19-3.el9
crun-1.21-1.el9
crypto-policies-20250128-1.git5269e22.el9
crypto-policies-scripts-20250128-1.git5269e22.el9
cryptsetup-2.7.2-3.el9
cryptsetup-libs-2.7.2-3.el9
curl-7.76.1-31.el9
cyrus-sasl-gssapi-2.1.27-21.el9
cyrus-sasl-lib-2.1.27-21.el9
dbus-1:1.12.20-8.el9
dbus-broker-28-7.el9
dbus-common-1:1.12.20-8.el9
dbus-libs-1:1.12.20-8.el9
dbus-tools-1:1.12.20-8.el9
device-mapper-9:1.02.202-6.el9
device-mapper-event-9:1.02.202-6.el9
device-mapper-event-libs-9:1.02.202-6.el9
device-mapper-libs-9:1.02.202-6.el9
device-mapper-multipath-0.8.7-37.el9
device-mapper-multipath-libs-0.8.7-37.el9
device-mapper-persistent-data-1.1.0-1.el9
diffutils-3.7-12.el9
dmidecode-1:3.6-1.el9
dnf-4.14.0-29.el9
dnf-data-4.14.0-29.el9
dnsmasq-2.85-16.el9
dosfstools-4.2-3.el9
dracut-057-87.git20250311.el9
dracut-network-057-87.git20250311.el9
dracut-squash-057-87.git20250311.el9
e2fsprogs-1.46.5-7.el9
e2fsprogs-libs-1.46.5-7.el9
efi-filesystem-6-2.el9
efibootmgr-16-12.el9
efivar-libs-38-3.el9
elfutils-debuginfod-client-0.193-1.el9
elfutils-default-yama-scope-0.193-1.el9
elfutils-libelf-0.193-1.el9
elfutils-libs-0.193-1.el9
ethtool-2:6.11-1.el9
expat-2.5.0-5.el9
file-5.39-16.el9
file-libs-5.39-16.el9
filesystem-3.16-5.el9
findutils-1:4.8.0-7.el9
firewalld-filesystem-1.3.4-9.el9
flashrom-1.2-10.el9
fstrm-0.6.1-3.el9
fuse-2.9.9-17.el9
fuse-common-3.10.2-9.el9
fuse-libs-2.9.9-17.el9
fuse-overlayfs-1.15-1.el9
fuse3-3.10.2-9.el9
fuse3-libs-3.10.2-9.el9
fwupd-1.9.26-1.el9
fwupd-plugin-flashrom-1.9.26-1.el9
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.23-1.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
gettext-0.21-8.el9
gettext-libs-0.21-8.el9
git-core-2.47.1-2.el9
glib2-2.68.4-16.el9
glibc-2.34-192.el9
glibc-common-2.34-192.el9
glibc-gconv-extra-2.34-192.el9
glibc-minimal-langpack-2.34-192.el9
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-13.el9
gnupg2-2.3.3-4.el9
gnutls-3.8.3-6.el9
gobject-introspection-1.68.0-11.el9
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-107.el9
grub2-efi-x64-1:2.06-107.el9
grub2-pc-1:2.06-107.el9
grub2-pc-modules-1:2.06-107.el9
grub2-tools-1:2.06-107.el9
grub2-tools-minimal-1:2.06-107.el9
gssproxy-0.8.4-7.el9
gzip-1.12-1.el9
hostname-3.23-6.el9
hwdata-0.348-9.18.el9
ignition-2.21.0-1.el9
ignition-grub-2.21.0-1.el9
ima-evm-utils-1.6.2-1.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.8-4.el9
ipcalc-1.0.0-5.el9
iproute-6.11.0-1.el9
iproute-tc-6.11.0-1.el9
iptables-libs-1.8.10-11.el9
iptables-nft-1.8.10-11.el9
iputils-20210202-11.el9
irqbalance-2:1.9.4-2.el9
iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
isns-utils-libs-0.101-4.el9
jansson-2.14-1.el9
jose-14-1.el9
jq-1.6-17.el9
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-11.el9
kbd-legacy-2.4.0-11.el9
kbd-misc-2.4.0-11.el9
kernel-5.14.0-585.el9
kernel-core-5.14.0-585.el9
kernel-modules-5.14.0-585.el9
kernel-modules-core-5.14.0-585.el9
kernel-modules-extra-5.14.0-585.el9
kexec-tools-2.0.29-7.el9
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-10.el9
kmod-libs-28-10.el9
kpartx-0.8.7-37.el9
krb5-libs-1.21.1-6.el9
less-590-5.el9
libacl-2.3.1-4.el9
libaio-0.3.111-13.el9
libarchive-3.5.3-4.el9
libassuan-2.5.5-3.el9
libattr-2.5.1-3.el9
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-21.el9
libbpf-2:1.5.0-1.el9
libbrotli-1.0.9-7.el9
libcap-2.48-9.el9
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-7.el9
libcomps-0.1.18-1.el9
libcurl-7.76.1-31.el9
libdaemon-0.14-23.el9
libdb-5.3.28-57.el9
libdhash-0.5.0-53.el9
libdnf-0.69.0-14.el9
libdnf-plugin-subscription-manager-1.29.46-1.el9
libdrm-2.4.123-2.el9
libeconf-0.4.1-4.el9
libedit-3.1-38.20210216cvs.el9
libev-4.33-6.el9
libevent-2.1.12-8.el9
libfdisk-2.37.4-21.el9
libffi-3.4.2-8.el9
libfido2-1.13.0-2.el9
libgcc-11.5.0-5.el9
libgcrypt-1.10.0-11.el9
libgomp-11.5.0-5.el9
libgpg-error-1.42-5.el9
libgudev-237-1.el9
libgusb-0.3.8-2.el9
libibverbs-54.0-1.el9
libicu-67.1-9.el9
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.9.6-4.el9.2
libjcat-0.1.6-3.el9
libjose-14-1.el9
libkcapi-1.4.0-2.el9
libkcapi-hmaccalc-1.4.0-2.el9
libksba-1.5.1-7.el9
libldb-4.21.3-3.el9
libluksmeta-9-12.el9
libmaxminddb-1.5.2-4.el9
libmicrohttpd-1:0.9.72-5.el9
libmnl-1.0.4-16.el9
libmodulemd-2.13.0-2.el9
libmount-2.37.4-21.el9
libmspack-0.10.1-0.7.alpha.el9
libndp-1.9-1.el9
libnet-1.2-7.el9
libnetfilter_conntrack-1.0.9-1.el9
libnetfilter_cthelper-1.0.0-22.el9
libnetfilter_cttimeout-1.0.0-19.el9
libnetfilter_queue-1.0.5-1.el9
libnfnetlink-1.0.1-23.el9
libnfsidmap-1:2.5.4-37.el9
libnftnl-1.2.6-4.el9
libnghttp2-1.43.0-6.el9
libnl3-3.11.0-1.el9
libnl3-cli-3.11.0-1.el9
libnvme-1.13-1.el9
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpciaccess-0.16-7.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.14.5-2.el9
libreport-filesystem-2.15.2-6.el9
libseccomp-2.5.2-2.el9
libselinux-3.6-3.el9
libselinux-utils-3.6-3.el9
libsemanage-3.6-5.el9
libsepol-3.6-3.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-8.el9
libsmartcols-2.37.4-21.el9
libsmbclient-4.21.3-3.el9
libsolv-0.7.24-3.el9
libss-1.46.5-7.el9
libssh-0.10.4-13.el9
libssh-config-0.10.4-13.el9
libsss_certmap-2.9.6-4.el9.2
libsss_idmap-2.9.6-4.el9.2
libsss_nss_idmap-2.9.6-4.el9.2
libsss_sudo-2.9.6-4.el9.2
libstdc++-11.5.0-5.el9
libtalloc-2.4.2-1.el9
libtasn1-4.16.0-9.el9
libtdb-1.4.12-1.el9
libteam-1.31-16.el9
libtevent-0.16.1-1.el9
libtirpc-1.3.3-9.el9
libtool-ltdl-2.4.6-46.el9
libunistring-0.9.10-15.el9
liburing-2.5-1.el9
libusbx-1.0.26-1.el9
libuser-0.63-16.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-21.el9
libuv-1:1.42.0-2.el9
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.21.3-3.el9
libxcrypt-4.4.18-3.el9
libxcrypt-compat-4.4.18-3.el9
libxml2-2.9.13-9.el9
libxmlb-0.3.10-1.el9
libxslt-1.1.34-12.el9
libyaml-0.2.5-7.el9
libzstd-1.5.5-1.el9
linux-firmware-20250513-152.el9
linux-firmware-whence-20250513-152.el9
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-9.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-4.el9
luksmeta-9-12.el9
lvm2-9:2.03.28-6.el9
lvm2-libs-9:2.03.28-6.el9
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.3-4.el9
microcode_ctl-4:20250211-1.el9
mokutil-2:0.7.2-1.el9
mpfr-4.1.0-7.el9
nano-5.6.1-7.el9
ncurses-6.2-10.20210508.el9
ncurses-base-6.2-10.20210508.el9
ncurses-libs-6.2-10.20210508.el9
net-tools-2.0-0.64.20160912git.el9
netavark-2:1.14.0-1.el9
nettle-3.10.1-1.el9
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-37.el9
nftables-1:1.0.9-3.el9
nmap-ncat-3:7.92-3.el9
nmstate-2.2.44-1.el9
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-libs-2.0.19-1.el9
nvme-cli-2.13-1.el9
oniguruma-6.9.6-1.el9.6
open-vm-tools-12.5.0-1.el9
openldap-2.6.8-4.el9
openshift-clients-4.20.0-202505231112.p0.g46e27e8.assembly.stream.el9
openshift-kubelet-4.20.0-202505200845.p0.g10466b2.assembly.stream.el9
openssh-8.7p1-45.el9
openssh-clients-8.7p1-45.el9
openssh-server-8.7p1-45.el9
openssl-1:3.5.0-2.el9
openssl-libs-1:3.5.0-2.el9
openvswitch-selinux-extra-policy-1.0-36.el9s
openvswitch3.5-3.5.0-22.el9s
os-prober-1.77-12.el9
ose-aws-ecr-image-credential-provider-4.20.0-202503251340.p0.g425c1c5.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.20.0-202504231110.p0.g7109d6b.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.20.0-202503251340.p0.gd8d3aeb.assembly.stream.el9
ostree-2025.2-1.el9
ostree-grub2-2025.2-1.el9
ostree-libs-2025.2-1.el9
p11-kit-0.25.3-3.el9
p11-kit-trust-0.25.3-3.el9
pam-1.5.1-23.el9
passt-0^20250415.g8ec1341-1.el9
passt-selinux-0^20250415.g8ec1341-1.el9
passwd-0.80-12.el9
pciutils-3.7.0-7.el9
pciutils-libs-3.7.0-7.el9
pcre-8.44-4.el9
pcre2-10.40-6.el9
pcre2-syntax-10.40-6.el9
perl-AutoLoader-5.74-481.el9
perl-B-1.80-481.el9
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-481.el9
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-481.el9
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-481.el9
perl-File-Basename-2.85-481.el9
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-481.el9
perl-FileHandle-2.03-481.el9
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-481.el9
perl-HTTP-Tiny-0.076-462.el9
perl-IO-1.43-481.el9
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-2.el9
perl-IPC-Open3-1.21-481.el9
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-481.el9
perl-Net-SSLeay-1.94-1.el9
perl-POSIX-1.94-481.el9
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-462.el9
perl-SelectSaver-1.02-481.el9
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-481.el9
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-481.el9
perl-constant-1.33-461.el9
perl-if-0.60.800-481.el9
perl-interpreter-4:5.32.1-481.el9
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-481.el9
perl-mro-1.23-481.el9
perl-overload-1.31-481.el9
perl-overloading-0.02-481.el9
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-481.el9
perl-vars-1.05-481.el9
pigz-2.5-4.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-5:5.4.0-7.el9
policycoreutils-3.6-3.el9
policycoreutils-python-utils-3.6-3.el9
polkit-0.117-13.el9
polkit-libs-0.117-13.el9
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-14.el9
protobuf-c-1.3.3-13.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.21-2.el9
python3-3.9.21-2.el9
python3-audit-3.1.5-7.el9
python3-chardet-4.0.0-5.el9
python3-cloud-what-1.29.46-1.el9
python3-dateutil-1:2.8.1-7.el9
python3-dbus-1.2.18-2.el9
python3-decorator-4.4.2-6.el9
python3-distro-1.5.0-7.el9
python3-dnf-4.14.0-29.el9
python3-dnf-plugin-versionlock-4.3.0-21.el9
python3-dnf-plugins-core-4.3.0-21.el9
python3-gobject-base-3.40.1-6.el9
python3-gobject-base-noarch-3.40.1-6.el9
python3-gpg-1.15.1-6.el9
python3-hawkey-0.69.0-14.el9
python3-idna-2.10-7.el9.1
python3-iniparse-0.4-45.el9
python3-inotify-0.9.6-25.el9
python3-libcomps-0.1.18-1.el9
python3-libdnf-0.69.0-14.el9
python3-librepo-1.14.5-2.el9
python3-libs-3.9.21-2.el9
python3-libselinux-3.6-3.el9
python3-libsemanage-3.6-5.el9
python3-pip-wheel-21.3.1-1.el9
python3-policycoreutils-3.6-3.el9
python3-pysocks-1.7.1-12.el9
python3-pyyaml-5.4.1-6.el9
python3-requests-2.25.1-9.el9
python3-rpm-4.16.1.3-37.el9
python3-setools-4.4.4-1.el9
python3-setuptools-53.0.0-14.el9
python3-setuptools-wheel-53.0.0-14.el9
python3-six-1.15.0-9.el9
python3-subscription-manager-rhsm-1.29.46-1.el9
python3-systemd-234-19.el9
python3-urllib3-1.26.5-6.el9
qemu-guest-agent-17:9.1.0-20.el9
quota-1:4.09-4.el9
quota-nls-1:4.09-4.el9
rdma-core-54.0-1.el9
readline-8.1-4.el9
rpcbind-1.2.6-7.el9
rpm-4.16.1.3-37.el9
rpm-build-libs-4.16.1.3-37.el9
rpm-libs-4.16.1.3-37.el9
rpm-ostree-2025.8-1.el9
rpm-ostree-libs-2025.8-1.el9
rpm-plugin-selinux-4.16.1.3-37.el9
rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
rpm-sign-libs-4.16.1.3-37.el9
rsync-3.2.5-3.el9
runc-4:1.3.0-1.el9
samba-client-libs-4.21.3-3.el9
samba-common-4.21.3-3.el9
samba-common-libs-4.21.3-3.el9
sed-4.8-9.el9
selinux-policy-38.1.56-1.el9
selinux-policy-targeted-38.1.56-1.el9
setup-2.13.7-10.el9
sg3_utils-1.47-10.el9
sg3_utils-libs-1.47-10.el9
shadow-utils-2:4.9-12.el9
shadow-utils-subid-2:4.9-12.el9
shared-mime-info-2.1-5.el9
shim-x64-15-15.el8_2
skopeo-2:1.18.1-3.el9
slang-2.3.2-11.el9
slirp4netns-1.3.2-1.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-6.el9
sqlite-libs-3.34.1-7.el9
squashfs-tools-4.4-10.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.9.6-4.el9.2
sssd-ad-2.9.6-4.el9.2
sssd-client-2.9.6-4.el9.2
sssd-common-2.9.6-4.el9.2
sssd-common-pac-2.9.6-4.el9.2
sssd-ipa-2.9.6-4.el9.2
sssd-krb5-2.9.6-4.el9.2
sssd-krb5-common-2.9.6-4.el9.2
sssd-ldap-2.9.6-4.el9.2
sssd-nfs-idmap-2.9.6-4.el9.2
sssd-proxy-2.9.6-4.el9.2
stalld-1.19.6-1.el9
strace-6.12-1.el9
subscription-manager-1.29.46-1.el9
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.5p2-12.el9
systemd-252-53.el9
systemd-journal-remote-252-53.el9
systemd-libs-252-53.el9
systemd-pam-252-53.el9
systemd-rpm-macros-252-53.el9
systemd-udev-252-53.el9
tar-2:1.34-7.el9
teamd-1.31-16.el9
tmux-3.2a-5.el9
toolbox-0.1.1-1.el9
tpm2-tools-5.2-6.el9
tpm2-tss-3.2.3-1.el9
tzdata-2025b-1.el9
unbound-libs-1.16.2-18.el9
usermode-1.114-6.el9
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-21.el9
util-linux-core-2.37.4-21.el9
vim-minimal-2:8.2.2637-22.el9
virt-what-1.27-2.el9
which-2.21-29.el9
xfsprogs-6.4.0-7.el9
xmlsec1-1.2.29-13.el9
xmlsec1-openssl-1.2.29-13.el9
xz-5.2.5-8.el9
xz-libs-5.2.5-8.el9
yajl-2.1.0-25.el9
zlib-1.2.11-41.el9
zram-generator-0.3.2-7.el9
zstd-1.5.5-1.el9

Changed:

afterburn 5.7.0-1.el9 → 5.8.2-1.el9
afterburn-dracut 5.7.0-1.el9 → 5.8.2-1.el9
cri-o 1.32.2-1.el9s → 1.32.4-1.el9s
cri-tools 1.32.0-2.el9s → 1.33.0-2.el9s
glibc 2.34-189.el9 → 2.34-192.el9
glibc-common 2.34-189.el9 → 2.34-192.el9
glibc-gconv-extra 2.34-189.el9 → 2.34-192.el9
glibc-minimal-langpack 2.34-189.el9 → 2.34-192.el9
grub2-common 1:2.06-105.el9 → 1:2.06-107.el9
grub2-efi-x64 1:2.06-105.el9 → 1:2.06-107.el9
grub2-pc 1:2.06-105.el9 → 1:2.06-107.el9
grub2-pc-modules 1:2.06-105.el9 → 1:2.06-107.el9
grub2-tools 1:2.06-105.el9 → 1:2.06-107.el9
grub2-tools-minimal 1:2.06-105.el9 → 1:2.06-107.el9
kernel 5.14.0-584.el9 → 5.14.0-585.el9
kernel-core 5.14.0-584.el9 → 5.14.0-585.el9
kernel-modules 5.14.0-584.el9 → 5.14.0-585.el9
kernel-modules-core 5.14.0-584.el9 → 5.14.0-585.el9
kernel-modules-extra 5.14.0-584.el9 → 5.14.0-585.el9
libdnf-plugin-subscription-manager 1.29.45-1.el9 → 1.29.46-1.el9
linux-firmware 20250314-151.el9 → 20250513-152.el9
linux-firmware-whence 20250314-151.el9 → 20250513-152.el9
openshift-clients 4.19.0-202505150818.p0.gc88fd60.assembly.stream.el9 → 4.20.0-202505231112.p0.g46e27e8.assembly.stream.el9
openshift-kubelet 4.19.0-202505151347.p0.g9fe7dfd.assembly.stream.el9 → 4.20.0-202505200845.p0.g10466b2.assembly.stream.el9
openssl 1:3.5.0-1.el9 → 1:3.5.0-2.el9
openssl-libs 1:3.5.0-1.el9 → 1:3.5.0-2.el9
ose-aws-ecr-image-credential-provider 4.19.0-202505121540.p0.g425c1c5.assembly.stream.el9 → 4.20.0-202503251340.p0.g425c1c5.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.19.0-202505121540.p0.g7109d6b.assembly.stream.el9 → 4.20.0-202504231110.p0.g7109d6b.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.19.0-202505121540.p0.gd8d3aeb.assembly.stream.el9 → 4.20.0-202503251340.p0.gd8d3aeb.assembly.stream.el9
passt 0^20250320.g32f6212-1.el9 → 0^20250415.g8ec1341-1.el9
passt-selinux 0^20250320.g32f6212-1.el9 → 0^20250415.g8ec1341-1.el9
python3-cloud-what 1.29.45-1.el9 → 1.29.46-1.el9
python3-subscription-manager-rhsm 1.29.45-1.el9 → 1.29.46-1.el9
qemu-guest-agent 17:9.1.0-19.el9 → 17:9.1.0-20.el9
subscription-manager 1.29.45-1.el9 → 1.29.46-1.el9
unbound-libs 1.16.2-17.el9 → 1.16.2-18.el9
xfsprogs 6.4.0-5.el9 → 6.4.0-7.el9

Extensions

Full list (64 packages)

NetworkManager-libreswan-1.2.24-1.el9.x86_64
bison-3.7.4-5.el9.x86_64
capstone-4.0.2-10.el9.x86_64
cpp-11.5.0-5.el9.x86_64
daxctl-libs-78-2.el9.x86_64
edk2-ovmf-20241117-3.el9.noarch
elfutils-libelf-devel-0.193-1.el9.x86_64
flex-2.6.4-9.el9.x86_64
gcc-11.5.0-5.el9.x86_64
glibc-devel-2.34-192.el9.x86_64
glibc-headers-2.34-192.el9.x86_64
ipxe-roms-qemu-20200823-9.git4bd064de.el9.noarch
kata-containers-2.5.2-1.el9s.x86_64
kernel-5.14.0-585.el9.x86_64
kernel-core-5.14.0-585.el9.x86_64
kernel-devel-5.14.0-585.el9.x86_64
kernel-headers-5.14.0-585.el9.x86_64
kernel-modules-5.14.0-585.el9.x86_64
kernel-modules-extra-5.14.0-585.el9.x86_64
kernel-rt-core-5.14.0-585.el9.x86_64
kernel-rt-devel-5.14.0-585.el9.x86_64
kernel-rt-modules-5.14.0-585.el9.x86_64
kernel-rt-modules-core-5.14.0-585.el9.x86_64
kernel-rt-modules-extra-5.14.0-585.el9.x86_64
krb5-pkinit-1.21.1-6.el9.x86_64
krb5-workstation-1.21.1-6.el9.x86_64
ldns-1.7.1-12.el9.x86_64
libfdt-1.6.0-7.el9.x86_64
libkadm5-1.21.1-6.el9.x86_64
libmpc-1.2.1-4.el9.x86_64
libpmem-1.12.1-1.el9.x86_64
libpng-2:1.6.37-12.el9.x86_64
libqb-2.0.8-1.el9.x86_64
librdmacm-54.0-1.el9.x86_64
libreswan-4.15-8.el9.x86_64
libxcrypt-devel-4.4.18-3.el9.x86_64
libzstd-devel-1.5.5-1.el9.x86_64
lm_sensors-libs-3.6.0-10.el9.x86_64
m4-1.4.19-1.el9.x86_64
make-1:4.3-8.el9.x86_64
ndctl-libs-78-2.el9.x86_64
nspr-4.35.0-17.el9.x86_64
nss-3.101.0-10.el9.x86_64
nss-softokn-3.101.0-10.el9.x86_64
nss-softokn-freebl-3.101.0-10.el9.x86_64
nss-sysinit-3.101.0-10.el9.x86_64
nss-tools-3.101.0-10.el9.x86_64
nss-util-3.101.0-10.el9.x86_64
openssl-devel-1:3.5.0-2.el9.x86_64
openvswitch3.5-ipsec-3.5.0-22.el9s.x86_64
pcp-conf-6.3.7-4.el9.x86_64
pcp-libs-6.3.7-4.el9.x86_64
pixman-0.40.0-6.el9.x86_64
protobuf-3.14.0-16.el9.x86_64
python3-openvswitch3.5-3.5.0-22.el9s.x86_64
qemu-img-17:9.1.0-20.el9.x86_64
qemu-kvm-common-17:9.1.0-20.el9.x86_64
qemu-kvm-core-17:9.1.0-20.el9.x86_64
seabios-bin-1.16.3-4.el9.noarch
seavgabios-bin-1.16.3-4.el9.noarch
sysstat-12.5.4-9.el9.x86_64
usbguard-1.0.0-16.el9.x86_64
usbguard-selinux-1.0.0-16.el9.noarch
zlib-devel-1.2.11-41.el9.x86_64

CentOS Stream CoreOS base layer: 9.0.20250521-0

View changelog in Markdown or change previous release:

Source code for this page located on github