4.21.0-0.okd-scos-2025-10-15-220629

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2025-10-15-220629

Team Approvals:

Tests:

Blocking jobs
- aws Succeeded (1 retries) periodic-ci-openshift-release-master-okd-scos-4.21-e2e-aws-ovn
Informing jobs
- agent-single-node-ipv6 Failed periodic-ci-openshift-release-master-okd-scos-4.21-e2e-agent-single-node-ipv6
- aws-ovn-techpreview Succeeded (1 retries) periodic-ci-openshift-release-master-okd-scos-4.21-e2e-aws-ovn-techpreview
- aws-upgrade Failed (2 retries) periodic-ci-openshift-release-master-okd-scos-4.21-e2e-aws-ovn-upgrade
- aws-upgrade-minor Failed periodic-ci-openshift-release-master-okd-scos-4.21-upgrade-from-okd-scos-4.20-e2e-aws-ovn-upgrade
- gcp Succeeded periodic-ci-openshift-release-master-okd-scos-4.21-e2e-gcp
- vsphere Succeeded (2 retries) periodic-ci-openshift-release-master-okd-scos-4.21-e2e-vsphere-ovn

Upgrades from:

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.20.0-0.okd-scos-2025-10-15-131420

Created: 2025-10-15 22:09:20 +0000 UTC

Image Digest: sha256:fa535ffa6e4742c55d26be28258a833c39772a77216b04d9e0d31cf7a508d9f4

Components

Kubectl 1.33.3
Kubernetes 1.33.5
Kubernetes Tests 1.33.4
CentOS Stream CoreOS 10.0.20251003-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
IngressControllerLBSubnetsAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
InsightsConfigAPI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NodeSwap (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SetEIPForNLBIngressController (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
GCPClusterHostedDNSInstall (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VolumeAttributesClass (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ExternalOIDC (0 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
AWSDualStackInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureDualStackInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
CBORServingAndStorage (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClientsAllowCBOR (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClientsPreferCBOR (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIMachineManagementVSphere (0 tests)			Enabled (New)	Enabled (New)
EventTTL (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPDualStackInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesCPMS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

aws-karpenter-provider-aws git b37141b0 sha256:ed15db4b6b7c43c87ad94abe7c0cdd626e571e2abad6f35cddf233b9cc67e970
azure-kms-encryption-provider git ea0b9944 sha256:e6f687946579d7c267b0d417d5b9b52a9b0f1c67852f4880cad1f73b3ea50538
cluster-autoscaler-operator git 147e5a7f sha256:2297b4aab58d7a87eb251bd25f418d369f9fca058f100f21e6cfef27ca012794
cluster-bootstrap git 74abc555 sha256:624f1dafeb8fd50f322fb4d724e3dd48bd728a62bce25bccf2bf638d8e44122a
docker-builder git ff595e4b sha256:fac12e33a4ed3af69487fdbe45216c3cc1d5b3961418c531ba7f3037fe54af01
egress-router-cni git 5e0f8d1b sha256:80dc87e4796746223b10d98d158748f2dcd2b1c7c814e0c480653b397ffcf4d9
kube-rbac-proxy git b9134351 sha256:e7b835885a3e788025e38fdf29cefa0538daa9d079f1d442e640439c64b6a794
kubevirt-cloud-controller-manager git 3f4542ec sha256:87f6e8d89bf4a8d54e8252887fb7dc6d142260c2b972391a1d0504d295c01748
kubevirt-csi-driver git 8b8dd30e sha256:75f981a73882b779aaf4610fb253082575effcacf5d9ddf70c5ac0088b84ffe9
libvirt-machine-controllers git a336f0b5 sha256:5d880cc50c548cf65c63933af4e8f303928b75d6e3a2461f3e4f8a09668d5e4b
metallb-frr git fc0fe74f sha256:630bc6c4f6c5613da6ad68832c0a25c0627d6a6fb88bceac82b881784703ed7d
multus-admission-controller git fc73c803 sha256:8985284e228e0a1a39a22ef5246d87f4051572ff6e0127e8a052793d594cacf0
multus-cni git cf0f68ec sha256:56649b95f02d1307a6594cb5dc621da438e5456a659c96e8de68f29737ee6ee8
multus-cni-microshift git cf0f68ec sha256:521e205e561c8e571f81f9a459f7237f1f1804792544175693069aac9979329c
multus-route-override-cni git 391c1b03 sha256:f0e47a2ef77b276ce138e4beadd3526676d8d2326faacf2fb29bc5231a95bd75
multus-whereabouts-ipam-cni git 43c89591 sha256:61a2432b5bb9142345ca1875e00945b3dc286377f1161e152c8c6d022a0762e0
network-interface-bond-cni git dd3c4d0b sha256:07176729347dee31191330b57089e4f449b5576965cc92dab4c46e39670b6631
network-metrics-daemon git b81340a9 sha256:cef415e1958bba34292728ff17b7bf7c8c5c61136f2c18e5e88a2308fce0442a
oauth-proxy git 6649cb8a sha256:540c221947ff07fd29d8f08d1c63624e485792aebe6bb554cbc533d37c62165d
oauth-server git 81098796 sha256:98ddb409da2fdb2f05203d03edf65c96112d03afb555b0a67b419b9fe70400ae
openstack-resource-controller git bf0d2c88 sha256:a3aac8631ada525fd9270ead11c19ce9900b2272d72f74f96a9fecf1a0888c52

agent-installer-api-server

NO-ISSUE: Update Konflux references #8050
ACM-25137: Remove the SERVICE_EL8_IMAGE env vars #8108
MGMT-21725: Update Renovate for legacy EL8 Dockerfiles #8090
OCPBUGS-62580: Fix edge jobs to be consistent with ART for 4.21 #8104
NO-ISSUE: [master] Bump OCP versions: 4.19 #8095
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.18 #8089
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.15, 4.14 #8084
MGMT-20192: add possibility to disable image service #7955
And 26 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1289
OCPBUGS-62361: Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.21 #1276
OCPBUGS-62398: Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.21 #1277
NO-ISSUE: Update Konflux references #1283
NO-ISSUE: Update Konflux references #1265
And 6 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-node-agent

MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1148
OCPBUGS-62390: Bump dockerfile images to 4.21 #1147
NO-ISSUE: Update konflux pipelines to use a remote pipeline #1118
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-utils

OCPBUGS-62986: Update Konflux references #177
OCPBUGS-62958: Update Konflux references #168
OCPBUGS-62905: Dockerfile cleanup #174
OCPBUGS-62347: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.21 #165
OCPBUGS-62704: remove hardcoded versions from iso_builder #171
AGENT-1336: Add release label to build #170
OCPBUGS-62646: Update Konflux references #167
OCPBUGS-62645: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 0697723 #146
AGENT-1258: Build PipelineRun changes for Konflux #155
OCPBUGS-61946: Include only final ISO in OVE UI container image #162
OCPBUGS-61956: Disable Konflux go.mod PR updates #163
OCPBUGS-61875: Add 4.21 config #160
AGENT-1258: Red Hat Konflux kflux-prd-rh02 update ove-ui-iso #154
AGENT-1258: Red Hat Konflux kflux-prd-rh02 purge agent-installer-utils #153
AGENT-1286: Red Hat Konflux kflux-prd-rh02 update agent-installer-utils #143
Full changelog

apiserver-network-proxy

OCPBUGS-62355: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.21 #86
Full changelog

aws-cloud-controller-manager

OCPBUGS-62354: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.21 #118
NO-JIRA: Update OWNERS #116
Full changelog

aws-cluster-api-controllers

OCPBUGS-63046: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.2 (d3a7da1) into main #576
OCPBUGS-62540: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.21 #575
NO-JIRA: Update OWNERS #567
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.1 (9c17049) into main #569
Full changelog

aws-ebs-csi-driver

OCPBUGS-62380: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.21 #292
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

STOR-1945: STOR-2056: add Azure File NFS test manifest #445
OCPBUGS-62374: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.21 #437
MULTIARCH-5554: update smb-csi-driver-operator support to add ppc64le #428
OCPBUGS-62427: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.21 #439
OCPBUGS-62348: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.21 #436
OCPBUGS-61955: Add withCABundleDaemonSetHook() to AWS EFS operator #433
OCPBUGS-60637: add runAsUser hook for operator deployment controller #431
NO-JIRA: Centralize injection of hosted-kubeconfig volume #311
NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 #429
OCPBUGS-54385: Avoid informer resync #432
NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 #427
NO-JIRA: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.21 #425
NO-JIRA: azure-disk, azure-file sync code de-duplication #303
Full changelog

aws-kms-encryption-provider

OCPBUGS-62458: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.21 #31
Full changelog

aws-machine-controllers

OCPBUGS-38759: client: re-use a single file for building the session instead of randomly named files #140
Full changelog

aws-pod-identity-webhook

OCPBUGS-62587: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.21 #206
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-62392: Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.21 #150
NO-JIRA: Update OWNERS #149
Full changelog

azure-cluster-api-controllers

OCPBUGS-62387: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.21 #352
NO-JIRA: Update OWNERS #351
Full changelog

azure-disk-csi-driver

NO-JIRA: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.21 #110
Full changelog

azure-file-csi-driver

OCPBUGS-62547: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.21 #106
Full changelog

azure-machine-controllers

OCPBUGS-62335: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.21 #163
NO-JIRA: Update OWNERS #162
Full changelog

azure-service-operator

OCPBUGS-62368: Updating ose-azure-service-operator-container image to be consistent with ART for 4.21 #13
NO-JIRA: Update OWNERS #12
Full changelog

azure-workload-identity-webhook

CCO-665: Merge upstream changes #40
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-62565: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.21 #53
Full changelog

baremetal-installer, installer, installer-artifacts

OKD-237: Remove fcos references #9970
OSASINFRA-3915: openstack: Start setting CredentialsMode #9734
NO-JIRA: shiftstack: Update OWNERS #9994
OCPBUGS-62125: baremetal: set baremetalhost architecture #9987
OCPBUGS-60752: Add MTU validation for networkConfig #9919
OCPBUGS-62907: AGENT-1269: Use agent-installer-ui image from release #9995
OCPBUGS-62430: None: Allow IPv6 Primary DualStack installs on platforms None and External #9983
OCPBUGS-41567: Clean up baremetal bootstrap systemd dependencies #8986
OCPBUGS-62452: Updating ose-installer-container image to be consistent with ART for 4.21 #9980
OCPBUGS-62471: Updating ose-baremetal-installer-container image to be consistent with ART for 4.21 #9981
OCPBUGS-60538: Update assisted-service dependencies #9956
CORS-4256: Add PSC Endpoint to the installconfig #9991
OCPBUGS-62514: Updating ose-installer-artifacts-container image to be consistent with ART for 4.21 #9984
SPLAT-2511: vSphere - do not block on vSphere >7.0.2, allow 9 #9963
CORS-4078: allow toggling AWS client logging #9976
OCPBUGS-62363: Set agent-extract-tui start timeout #9975
no-jira: Revert “Merge pull request #9939 from barbacbd/CORS-4058-release-4.21” #9974
CORS-4078: bump AWS SDK v2 max backoff duration to 300s #9966
CORS-4107: Update default release image to 4.21 #9954
OCPBUGS-61514: Add check for gcp firewall deletion permission #9935
OCPBUGS-62293: Set default for PrivateDNSZone Project ID #9967
CORS-4078: disable rate limiter for AWS SDK v2 #9958
OCPBUGS-61901: Update explain for Publish #9950
no-jira: OWNERS: switch to joelcapitao #9951
OCPBUGS-61935: Wildcards not reliable for copying container files #9948
CORS-4058: Migrate AWS Destroy to SDK v2 #9939
OCPBUGS-61353: Generated Redacted nutanix config for operator #9931
CORS-3550: add ability to opt out of the sigstore signing requirement #9940
CORS-4162: Remove GCPClusterHostedDNSInstall featuregate #9944
OCPBUGS-61490: Update code to retrieve ICSP instead of ICP #9933
MGMT-21586: Add an option in image-based installation to specify architecture #9934
SPLAT-2430: Update vSphere version validations for 7 EOL and VCF 9 #9914
OCPBUGS-61373: Fix shellcheck issues in bootstrap #9929
OCPBUGS-61373: Fix agent shellcheck issues #9928
no-jira: Fix logging and error messages #9917
SPLAT-2465: Changed LB VM creation to not be hard coded and use from variables.ps1 #9926
OCPBUGS-61111: Allow user to BYO private zone without specifying name #9922
Full changelog

baremetal-machine-controllers

OCPBUGS-62365: Updating baremetal-machine-controller-container image to be consistent with ART for 4.21 #237
Full changelog

baremetal-operator

OCPBUGS-61349, OCPBUGS-62112: Merge upstream #432
OCPBUGS-62460: Updating ose-baremetal-operator-container image to be consistent with ART for 4.21 #433
NO-ISSUE: Merge upstream #430
Full changelog

baremetal-runtimecfg

OCPBUGS-62581: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.21 #370
Full changelog

cli, cli-artifacts, deployer, tools

NO-JIRA: adm upgrade status: capture testcase for OCPBUGS-60768 #2081
OCPBUGS-62445: prevent crash when rootDeviceHints format is invalid #2109
NO-JIRA: Update shellescape and sspi to newer versions #2116
NO-JIRA: Remove myself from update approvers, add Hongkai #2112
OCPBUGS-62550: Updating ose-cli-artifacts-container image to be consistent with ART for 4.21 #2111
OCPBUGS-61491: Update code to retrieve ICSP instead of ICP #2095
OCPBUGS-62362: Updating ose-tools-container image to be consistent with ART for 4.21 #2108
OCPBUGS-62548: Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.21 #2110
NO-JIRA: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.21 #2107
OCPBUGS-59311: oc adm must-gather: Add support for context #2105
OCPBUGS-59311: pkg/…/inspect: Add support for context.Context #2100
WRKLDS-593: oc adm must-gather: Improve cleanup order #2080
NO-JIRA: Add tchap as reviewer in oc #2099
NO-JIRA: oc adm groups sync: Use client.Unbind #2094
OCPBUGS-61063: pkg/cli/admin/upgrade/recommend: Enable precheck and accept gates #2088
OCPBUGS-52936: oc adm policy: Only initialize UserClient if built-in OAuth is enabled #2090
OCPBUGS-61311: Introduce auto-open-browser flag for external OIDC issuer login #2089
NO-ISSUE: pkg/cli/admin/upgrade/recommend/examples/4.19.0-okd-scos.16: Add OKD example #2093
OCPBUGS-59951: oc adm must-gather: Wrap gather in a session #2087
NO-JIRA: Add some warnings into excluded list #2092
OCPBUGS-56691: Rely on overall available disk space of the mounted volume #2084
Full changelog

cloud-credential-operator

CCO-435: Migrate away from deprecated ioutil package. #920
OCPBUGS-62495: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.21 #923
OCPBUGS-62184: aws: remove endpoint overrides for s3 and cf clients #921
CCO-692: Migrate to aws-ask-go-v2 #905
OCPBUGS-61475: set cloud-credential-operator as default-container #914
OCPBUGS-60078: ccoctl: aws to use proper issuer url on subsequent runs #904
Full changelog

cloud-network-config-controller

OCPBUGS-62437: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.21 #181
Full changelog

cluster-authentication-operator

OCPBUGS-62447: Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.21 #793
API-1835: test/oauth-server-staticresource: adds a test to show which input resources are required to run the operator and the staticResourceController #790
NO-JIRA: Update OIDC e2e test to expect admission-time validation error of invalid CEL expression #797
API-1835: fix integration tests #795
OCPBUGS-57444: set appropriate rolling update settings #789
NO-JIRA: om: fix integration testing #788
Full changelog

cluster-autoscaler

NO-JIRA: Remove OWNERS automation preamble #382
Full changelog

cluster-baremetal-operator

OCPBUGS-61477: Enable runtime extraction of aarch64 images #508
OCPBUGS-62577: Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.21 #507
OCPBUGS-60498: Always have a service for ironic-api port #510
METAL-1449: optionally deploy IPE #490
Full changelog

cluster-capi-controllers

OCPBUGS-62579: Updating ose-cluster-api-container image to be consistent with ART for 4.21 #249
NO-JIRA: Update OWNERS #246
OCPBUGS-57605: Updating ose-cluster-api-container image to be consistent with ART for 4.20 #242
Full changelog

cluster-capi-operator

OCPCLOUD-3104: manifests-gen: re-enable conversion, validating and mutating webhook configurations #389
OCPCLOUD-3104: Fix v1beta2 condition setting #385
OCPCLOUD-2709: Implement MAPI2CAPI conversion of loadbalancers #348
OCPBUGS-62570: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.21 #357
OCPCLOUD-2995: Machine status conversion and syncing #365
NO-JIRA: hack/test.sh use eval for starting ginkgo so GINKO_EXTRA_ARGS having whitespaces works #380
OCPCLOUD-2641: Validate creation of Machine API Machines #368
OCPBUGS-62620: kubeconfig controller: do not error on token secret not yet populated #373
NO-JIRA: lint: add aliases for machine api’s and controller-runtime log #367
OCPCLOUD-2992: refactor: split machine migration testing into multiple files #364
NO-JIRA: machine_sync: assorted fixes #370
OCPCLOUD-2992: Enable MAPI machine synchronized e2e tests (re-enable after OCPBUGS-54703 fix) #359
NO-JIRA: Update OWNERS #353
OCPCLOUD-3162: conversion: do not set ignition version on AWSMachine #363
NO-JIRA: use go workspaces #358
OCPCLOUD-2714: Add VAPs to prevent setting of CAPI fields that are not supported by MAPI #334
No-JIRA: increased timeout #354
NO-JIRA: Adds AGENTS.md #349
OCPBUGS-54703: Fix conversion of Machines without MachineSet #351
OCPCLOUD-2992: migration e2e for deleting machine #345
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-51305: ccm: disable unused secure-serving port and webhook #415
OCPBUGS-60385: Add Microsoft.Network/publicIPAddresses/delete permission #416
NO-JIRA: Update OWNERS #413
OCPBUGS-54490: Add Azure permissions for Private Link Service operations #417
SPLAT-2341: Add feature gate support in the cloud-config sync controller #400
Full changelog

cluster-config-api

OCPBUGS-60457: payload-command: remove authentication CR from hypershift payload #2523
OCPSTRAT-2371: Update to Kubernetes v1.34.1 #2427
CNTRLPLANE-1576: add event-ttl configuration to kube-apiserver #2520
CNTRLPLANE-1614: add event-ttl feature gate #2525
: promote InsightConfigAPI and OnDemandDataGather to v1 #2448
Switch to slices stable sort on manifest merging #2524
Use separate serialization linting config for Machine API provider types #2522
Add initial AI api-review configuration #2489
Support AMD SEV-SNP on AWS #2424
MCO-1805: MCO-1806: Add ManagedBootImagesCPMS feature gate & CPMS type to ManagedBootImages API #2396
OCPBUGS-62482: Updating ose-cluster-config-api-container image to be consistent with ART for 4.21 #2513
OCPBUGS-55649: Remove SetEIPForNLBIngressController feature gate #2501
OCPBUGS-61382, STOR-2533: move VolumeAttributesClass to GA #2471
Promote BYO OIDC features #2454
OCPBUGS-55673: Remove IngressControllerLBSubnetsAWS featuregate #2400
OCPBUGS-62068: NodeSwap Feature Gate usage to be removed #2494
OCPBUGS-59939: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2507
OCPBUGS-59940: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2506
(bugfix): crdify generator returns aggregated error when validations fail #2493
MCO-1669: add BootImageSkewEnforcement API #2357
remove unused feature gate InsightsConfigAPI #2474
OCPBUGS-61689: Add ‘AGE’ print column to MachineConfigNode object #2476
NO-JIRA: tooling: add crdify generator to run crdify against CRD changes #2472
Update controller-tools to latest on fork #2478
Monitoring API: Add Metric server config #2322
CNTRLPLANE-5: Add CBOR feature gate #2235
NO-JIRA: New rules about CO’s conditions #2469
apiservers.config.openshift.io: remove spec.tlsSecurityProfile GoDoc caveats #2467
SPLAT-2482: create new featuregate for ClusterAPIMachineManagementVSphere #2466
MCO-1675: Update API for Status Reporting needs (REBASED) #2442
CORS-3993: Promote GCPClusterHostedDNS to Default #2300
Adjust typos #2243
Update schema checker to avoid incorrect new required fields checks #2470
config/v1/cluster_operator improve documentation #2344
Update NodeSwap with owner and doc blurb. #2053
CORS-4136: Add Feature gates for AWS, Azure and GCP Dual Stack support #2430
Full changelog

cluster-config-operator

OCPBUGS-62330: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.21 #450
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-62588: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 4.21 #369
NO-JIRA: Update OWNERS #367
MCO-1866: Ignore boot image differences while reconciling Provider Configs #368
Full changelog

cluster-csi-snapshot-controller-operator

Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.21 #245
OCPBUGS-62247: add all-egress label to deployments on HCP and IBM #243
Full changelog

cluster-dns-operator

NE-2138: Bump cluster-dns-operator to Kubernetes 1.33 for 4.21 #448
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #449
NO-JIRA: Add davidesalerno to OWNERS #447
Full changelog

cluster-etcd-operator

OCPEDGE-1885, OCPEDGE-2088: Updated state transitions & tests for TNF setup job #1481
OCPBUGS-60273: Ensure revision.json persists on ungraceful shutdown #1494
NO-JIRA: use scrapeClass for service monitors #1497
NO-JIRA: add runbook urls for alerting rules #1496
NO-JIRA: feat: update the ip parsing for the nodes #1479
OCPEDGE-2183: Updating Quorum detection logic to absolve TNF of quorum loss reports. #1483
NO-JIRA: remove etcd-backup-server from static pod lists #1492
CNTRLPLANE-1315: Add OpenShift Tests Extension (OTE) for cluster-etcd-operator #1488
OCPBUGS-62518: Updating cluster-etcd-operator-container image to be consistent with ART for 4.21 #1489
NO-JIRA: Use secure cipher suites #1477
ETCD-590: configure probes based on quota size #1460
NO-JIRA: Add priority field to prevent early shutdown #1476
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

OCPBUGS-62573: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.21 #1256
Full changelog

cluster-ingress-operator

NE-1334: Enhancement to add brew and stage secrets for pre-release image testing #1291
OCPBUGS-43919: desiredWildcardDNSRecord: Check for nil LB field #1189
OCPBUGS-62400: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.21 #1286
NE-1334: Script to install ossm pre-release operator and run GWAPI e2e tests #1283
OCPBUGS-55649: Remove SetEIPForNLBIngressController feature gate #1280
OCPBUGS-55673: Remove IngressControllerLBSubnetsAWS featuregate #1242
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #1281
NE-2139: Kubernetes to 1.33.4 and controller-runtime to 0.21 #1279
NO-JIRA: Add davidesalerno to OWNERS #1278
OCPBUGS-60859: Fix logic on gatewayapi test cleanup #1273
Full changelog

cluster-kube-apiserver-operator

OCPNODE-3758: alpha/beta apis for DRA should not be enabled in 1.34 #1932
OCPBUGS-60045: Bump library-go to latest master #1928
OCPBUGS-62450: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.21 #1931
NO-JIRA: Add priority field to prevent early shutdown #1915
NO-ISSUE: Use scrapeClass for service monitors #1930
OCPSTRAT-2371: MutatingAdmissionPolicy e2es depend on both v1alpha1 and v1beta1 of admissionregistration.k8s.io being served in k8 1.34 #1927
OCPBUGS-15430: move alerting rules from CMO over #1922
Re-apply “OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry” #1910
OCPSTRAT-2371: promote MutatingAdmissionPolicy to v1beta1 for > 1.34.0 #1921
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-57562: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.20 #58
NO-JIRA: Update OWNERS #60
Full changelog

cluster-kube-controller-manager-operator

OCPSTRAT-2371: Update to Kubernetes v1.34.1 #888
no-jira: Add priority field to prevent early shutdown #865
CNTRLPLANE-1544: Enable user namespaces for the operator #886
NO-ISSUE: Use scrapeClass for service monitors #880
OCPBUGS-62408: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.21 #885
OCPBUGS-62255: Throttle resourcesynccontroller on pairs with dual writers. #881
WRKLDS-1556: Remove –cloud-provider=external from KCM #862
CNTRLPLANE-1275: Fixing arch issue #869
CNTRLPLANE-1275: Fixed hardcode arch issue #866
Full changelog

cluster-kube-scheduler-operator

no-jira: Add priority field to prevent early shutdown #572
CNTRLPLANE-1544: manifests: Align user namespaces for the operator #581
CNTRLPLANE-1544: Enable user namespace for the operator #580
OCPBUGS-62609: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.21 #579
NO-ISSUE: Use scrapeClass for service monitors #578
OCPBUGS-61301: Add readonlyRootFilesystem #575
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-62444: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.21 #132
CNTRLPLANE-1306: Fixing arch issue #130
CNTRLPLANE-1306: Fix arch issue #128
Full changelog

cluster-machine-approver

OCPBUGS-62583: NO-JIRA: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.21 #277
NO-JIRA: Update OWNERS #276
NO-JIRA: set machine-approver-controller as default container #278
Full changelog

cluster-monitoring-operator

NO-JIRA: [bot] Synchronize versions of the downstream components #2705
OCPBUGS-62972: enhance case 66736 #2708
NO-ISSUE: Update jsonnet dependencies #2696
OCPBUGS-62160: Remove AlertManager endpoints when disabled #2684
NO-JIRA: [bot] Synchronize versions of the downstream components #2703
MON-4395: Bump prometheus-operator to v0.86.0 #2698
NO-ISSUE: set openshift-state-metrics as default container #2693
OCPBUGS-61661: Remove cluster from non-multicluster dashboards #2679
MON-4384: adding Blackwell GPU device to accelerators configmap #2689
NO-ISSUE: chore: remove image locations in assets #2683
NO-ISSUE: [bot] Update jsonnet dependencies #2687
NO-ISSUE: chore: remove mentions of prometheus Adapter #2682
OCPBUGS-15430: remove Kubernetes API alerting rules #2671
NO-JIRA: chore: bump jsonnet dependencies #2649
OCPBUGS-62109: test: remove image registry e2e tests #2681
NO-ISSUE: update Go dependencies #2674
MON-4346: Bump Go to 1.24 #2655
NO-JIRA: [bot] Synchronize versions of the downstream components #2673
OCPBUGS-60161: Add mcd_local_unsupported_packages metric from MCO to telemetry #2638
NO-ISSUE: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.21 #2662
MON-4344: chore: port the test suite over from openshift-tests-private #2635
MON-4371: chore(prometheus): enable use-uncached-io feature flag #2637
NO-JIRA: [bot] Synchronize versions of the downstream components #2668
OCPBUGS-61113: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2657
NO-JIRA: [bot] Synchronize versions of the downstream components #2663
OCPBUGS-56568: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2660
OCPBUGS-61135: Revert “MON-4343: Cleanup deprecate pa config” #2658
Full changelog

cluster-network-operator

CORENET-6311: Skip running _stackmanager for libreswan 5.3+ #2787
OCPBUGS-62457: Updating cluster-network-operator-container image to be consistent with ART for 4.21 #2807
OCPBUGS-54806: Add recording rules for UDN telemetry #2697
OCPBUGS-61215: Tweak iptables-alerter to try to avoid crictl bug #2802
OCPBUGS-42303: Add drop flows for GARP #2801
OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes #2797
OCPBUGS-61561: Relax label req. of DPU/DPU Host/Smart NIC #2786
Revert “OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes” #2796
OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes #2605
OCPBUGS-60421: Set maxUnavailable 10% on MultiNetworkPolicy DS #2785
CORENET-6327: Update linter #2783
Full changelog

cluster-node-tuning-operator

NO-ISSUE: pkg/metrics/server: Log bind address #1411
OCPBUGS-62839: E2E: Add test cases related to schedulable control plane nodes #1405
OCPBUGS-62835: E2E: llc: make sure to remove any trailing newspaces #1407
OCPBUGS-62153: E2E: skip SMT disabled test when L3 cache spans entire NUMA node #1397
OCPBUGS-62605: e2e: refactor GetSMTLevel to remove Gomega assertions #1399
OCPBUGS-62578: Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.21 #1391
OCPBUGS-62091: E2E: Add function to check control plane nodes are schedulable. #1396
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-olm-operator

NO-ISSUE: Remove conditionals for cp-manifests use #142
OPRUN-4079: Use helm to generate manifests #140
NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.21 #138
OCPBUGS-61873: Update RBAC to update/patch/delete what we create #139
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-62500: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.21 #626
NO-JIRA: Bump library go rm co dep #625
Full changelog

cluster-openshift-controller-manager-operator

CNTRLPLANE-1307: set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test #395
Full changelog

cluster-policy-controller

OCPBUGS-62440: Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.21 #169
OCPBUGS-57191: fix(psalabelsyncer): return an error instead of panic when converting an unknown volume #167
NO-JIRA: scc allocation controller: Use server-side apply #165
Full changelog

cluster-samples-operator

OCPBUGS-62409: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.21 #651
OCPBUGS-62061: Re-sync OCP Samples Library for OCP 4.21 - 22Sep2025 #650
Full changelog

cluster-storage-operator

OCPBUGS-62669: Move metrics to vsphere driver #625
OCPBUGS-60637: remove static value for runAsUser in securityContext #619
OCPBUGS-62421: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.21 #624
OCPBUGS-62172: Add app label to Manila deployment #628
OCPBUGS-61112: add Azure Disk CSI driver SA name to CredentialsRequest #618
STOR-2297: remove oVirt code from CSO #617
OCPBUGS-60637: HyperShift deployments should reflect user id security context #616
OCPBUGS-62121: add all-egress label to deployments on HCP and IBM #621
OCPBUGS-61175: Add RBAC rule to let manila-csi-driver-operator manage NetworkPolicy #615
SPLAT-2467: Updated VPD alerts to reflect current vSphere support #612
OCPBUGS-61161: Fix logging e2e also faster cleanup #611
Full changelog

cluster-update-keys

OCPBUGS-62464: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.21 #86
Full changelog

cluster-version-operator

OCPBUGS-61872: Add ClusterVersionOperator manifests to TechPreviewNoUpgrade clusters #1232
OCPBUGS-62861: temporarily disable metrics auth for hypershift clusters #1243
OTA-1627: pkg/cincinnati: Centralize release metadata parsing #1231
NO-JIRA: Move myself to emeritus #1239
OCPBUGS-62416: Updating cluster-version-operator-container image to be consistent with ART for 4.21 #1237
OTA-1585: test: Rename an existing test to comply with the OTE integration guide #1235
OTA-1531: Rework error handling in FeatureGate processing #1206
NO-JIRA: Extend the development documentation regarding building and publishing a payload image #1227
NO-ISSUE: Update golang version to 1.24 in go.mod #1230
Full changelog

configmap-reloader

OCPBUGS-62503: Updating configmap-reload-container image to be consistent with ART for 4.21 #74
Full changelog

console

OCPBUGS-33879: use tenancy path for project scoped status card #15585
OCPBUGS-62947: bump dompurify to latest #15586
CONSOLE-4819: Migrate container-security to dynamic #15565
CONSOLE-4602: Migrate enzyme “packages/console-app” unit tests to React Testing Library #15514
OCPBUGS-60603: Add bearer token file configuration to oc-environment script #15521
OCPBUGS-62315: Correct the width of the cluster config toolbar filter input #15546
CONSOLE-4795, CONSOLE-4797, CONSOLE-4801: Migrate some static extensions to dynamic #15552
CONSOLE-4804: Migrate TopologyCreateConnector to dynamic #15549
CONSOLE-4800: Migrate HorizontalNavTab to dynamic #15553
OCPBUGS-59529: Prevent the topology context menu items from truncating #15524
CONSOLE-4798: Migrate StorageClassProvisioner to dynamic #15550
OPRUN-4086: Add ClusterCatalog controller #15466
NO-JIRA: chore(OWNERS): remove Mylanos from OWNERS #15559
CONSOLE-4332: Update the secrets forms to use PF components #15513
OCPBUGS-62313: Returning from any Secret Create page does not return to secret page #15543
CONSOLE-4684: Refactor machine-set modals #15484
OCPBUGS-62281: InsecureSkipVerify to true for results proxy endpoint in off-cluster #14888
CONSOLE-4808: update resource-log.cy.ts #15539
CONSOLE-4799: update tests/app/debug-pod.cy.ts #15530
CONSOLE-4802: Migrate KebabActions to dynamic #15535
CONSOLE-3769: Add @openshift/dynamic-plugin-sdk to core and internal pkg deps #15518
OCPBUGS-61536: Fix incorrect handling of vSphere settings #15481
OCPBUGS-61937: Add Missing Periods to Error Messages and update try again button link #15511
NO-JIRA: Remove yarn-generate from post-install script #15373
CONSOLE-4796: Migrate some Dashboards extensions to dynamic #15526
OCPBUGS-61535: Cancel PVC creation redirect user to last visited page instead of PVC list #15502
CONSOLE-4764: Add tech preview feature flag support #15477
CONSOLE-4715: Migrate the Enzyme test tests root directory and remove tests… #15462
NO-JIRA: Update CHANGELOG based on 4.18 plugin SDK package release #15517
CONSOLE-4760: update CRD list to use ResourceDataView #15469
CONSOLE-3769: Install @openshift/dynamic-plugin-sdk #15509
OCPBUGS-60084: Help dropdown should be closed automatically after tour model opened #15483
OCPBUGS-55401: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15315
OCPBUGS-59634: Fix the events search input width, and incorporate PF Toolbar component #15501
NO-JIRA: Update README.md with instructions for logging out kube:admin in local #15482
NO-JIRA: chore(OWNERS): remove logonoff from reviewers #15505
CONSOLE-4710: use useOverlay to launch ErrorModal #15475
OCPBUGS-61087: Updation of label from edit label doesn’t work #15460
OCPBUGS-61519: Fix improper DescriptionList refactor #15495
OCPBUGS-59972: Add validation and type guards on healthHandler calls to prevent errors #15470
CONSOLE-4756: Convert more files to TypeScript #15472
OCPBUGS-61458: fix MachineSet YAML template #15478
OCPBUGS-58118: fix namespace path generation for non-namespaced resources #15467
OCPBUGS-61183: cluster in workload identity mode is not applied with the token-auth-… #15459
OCPBUGS-61133: Fix catalog search relevance scoring, so that operators with attribute.keywords are displayed and remove unnecessary metadataName from calculation #15444
OCPBUGS-61468: i18n upload/download routine task for OCP version 4.20 #15476
CONSOLE-4727: Update OWNERS files across the repo #15461
CONSOLE-4598: Migrate enzyme tests/components/utils unit tests to React Testing… #15442
OCPBUGS-61393: Change default tab size from 4 to 2 #15474
CONSOLE-4635: Refactor PDBActionFactory to hook form and cleanup. #15285
NO-JIRA: Update plugin SDK CHANGELOG post 4.18 package publish #15463
OCPBUGS-61139: Correct the ordering of Catalog categories to be alphabetized #15454
CONSOLE-4610: Drop use of ceateModalLauncher from Topology package #15446
OCPBUGS-61090: fix typo in update approval strategy label #15452
CONSOLE-4683: Refactor group action factory #15404
And 8 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-59939: Bumped to latest console-operator version #1055
OCPBUGS-62512: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.21 #1050
OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1052
CONSOLE-4765, CONSOLE-4767: Automate console tech preview flag via cluster FeatureSet, Grant console service account watch permissions for ClusterCatalogs #1043
OCPBUGS-61726: Revert “OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition” #1046
OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1041
OCPBUGS-61483: Update DEFAULT_DOC_URL to point to OpenShift Container Platform 4.21 #1044
OCPBUGS-61383: Update QuickStarts typo and doc link #1042
OCPBUGS-60863: Rename Dockerfile to Dockerfile.ocp #1039
OCPBUGS-60782: pluginOrder field should only contain available plugins #1038
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

no-jira: Update OWNERS #204
Full changelog

coredns

NO-JIRA: Updating coredns-container image to be consistent with ART for 4.21 #154
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #153
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-62544: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.21 #352
OCPBUGS-62575: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.21 #350
NO-JIRA: shiftstack: Update OWNERS #353
Full changelog

csi-driver-nfs

NO-JIRA:shiftstack: Update OWNERS #162
OCPBUGS-62509: Updating csi-driver-nfs-container image to be consistent with ART for 4.21 #161
Full changelog

csi-external-attacher

OCPBUGS-61394: UPSTREAM: 682: Skip VolumeAttachments of other drivers #88
NO-JIRA: Updating csi-attacher-container image to be consistent with ART for 4.21 #87
Full changelog

csi-external-provisioner

OCPBUGS-62541: Updating csi-provisioner-container image to be consistent with ART for 4.21 #116
Full changelog

csi-external-resizer

OCPBUGS-62504: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.21 #178
OCPBUGS-61547: Requeue PVC over PV creation #173
Full changelog

csi-external-snapshot-metadata

NO-JIRA: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.21 #5
Full changelog

csi-external-snapshotter, csi-snapshot-controller

OCPBUGS-62423: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.21 #188
NO-JIRA: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.21 #187
Full changelog

csi-livenessprobe

OCPBUGS-62403: Updating csi-livenessprobe-container image to be consistent with ART for 4.21 #77
Full changelog

csi-node-driver-registrar

OCPBUGS-60108: update log level verbosity to not clutter logs #86
OCPBUGS-62506: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.21 #85
Full changelog

docker-registry

OCPBUGS-60845: update OWNERS #447
Full changelog

driver-toolkit

Updating the OWNERS file. (#175) #175
Updating driver-toolkit-container image to be consistent with ART for 4.21 (#172) #172
Full changelog

etcd, installer-etcd-artifacts

OCPBUGS-62338: Updating ose-etcd-container image to be consistent with ART for 4.21 #342
Full changelog

gcp-cloud-controller-manager

OCPBUGS-62572: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.21 #92
NO-JIRA: Update OWNERS #90
OCPBUGS-61006: Adjust vendoring to use go.work to get rid of the symlink #91
Full changelog

gcp-cluster-api-controllers

OCPBUGS-62417: Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.21 #249
NO-JIRA: Update OWNERS #248
Full changelog

gcp-machine-controllers

OCPBUGS-62520: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.21 #130
NO-JIRA: Update OWNERS #129
no-jira: Machine Api Operator GCP must search for the GCP Custom Endpoints Installer feature gate #128
Full changelog

gcp-pd-csi-driver

Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.21 #84
Full changelog

gcp-pd-csi-driver-operator

NO-JIRA: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.21 #151
CORS-4201: Search for the feature gate for GCP Custom Endpoints #150
Full changelog

gcp-workload-identity-federation-webhook

OCPBUGS-62591: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.21 #10
Full changelog

haproxy-router

OCPBUGS-62501: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.21 #679
OCPBUGS-62555: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.21 #680
OCPBUGS-49769: Validate the key and cert content before accepting #669
NE-2137: Bump router k8s libraries to 0.33.4 #671
OCPBUGS-60257: fix extra space in haproxy template #676
OCPBUGS-57896: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.20 #660
OCPBUGS-57845: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.20 #659
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #675
OCPBUGS-61224: Revert Prevent startup failures due to name resolution” #672
NO-JIRA: Add davidesalerno to OWNERS #670
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPBUGS-62608: Updating openshift-enterprise-pod-container image to be consistent with ART for 4.21 #2481
OCPBUGS-60610: UPSTREAM: 134199: Promote regression-issue-74839 to 1.4 #2472
OCPBUGS-43994: UPSTREAM: <carry>: kube-apiserver: wire through isTerminating into handler chain #2477
OCPBUGS-61554: Bump 1.33.5 #2459
OCPBUGS-61754: UPSTREAM: <carry>: Add retries for GetCurrentResourceVersion. #2467
OCPBUGS-61222: Do not remove PVC ClaimRef to fix flaky VAC test #2452
OCPBUGS-58313: apiserver library go bump #2457
NO-JIRA: UPSTREAM: 133682: Increase port-forward broken connection detection client timeout #2428
OCPBUGS-60507: Unrevert bump to v1.33.4 #2441
OCPBUGS-56594: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2443
OCPBUGS-61196: UPSTREAM: 133625: Remove patch/update from ServiceCIDR API conformanc… #2444
OCPBUGS-60946: UPSTREAM: 133425: Fix SELinux label comparison #2417
Full changelog

hypershift

CNTRLPLANE-1620: feat(gomaxprocs-webhook): introduce admission webhook to auto-set GOMAXPROCS #6994
OCPBUGS-63148: bump Konflux build images #7055
CNTRLPLANE-1615: Add repo metrics tool for tracking AI-assisted commits #6983
CNTRLPLANE-980: feat(api): Validation for hc.status.configuration.authentication status #6883
OCPBUGS-61829: resolve initContainer permission issue after node reboot #6990
NO-JIRA: test: update external-oidc e2e tests to dynamically determine tests to run #6924
NO-JIRA: migrate renovate config #7029
CNTRLPLANE-1643: implement multi-branch strategy with security-focused release management #7023
CNTRLPLANE-1641: update Tekton tasks to latest trusted versions #6998
OCPBUGS-62172: Add OpenStack node drivers to allowed non-read-only root filesystem containers #6946
OCPBUGS-62863: feat(cmd): collect ServiceMonitor and PodMonitor resources in dump #6970
NO-JIRA: chore(ai): add ability for jira-solve to save a plan spec first #6995
CNTRLPLANE-1493: Add Claude command for automated Konflux task updates #6921
CNTRLPLANE-1484: Expose cluster autoscaler metrics in HCP #6902
CNTRLPLANE-1582: Prevent azure cluster destroy command from deleting managed/main resource group #6956
CNTRLPLANE-1543: fix(aws): use clean image for placeholder nodes #6935
CNTRLPLANE-1468: feat(install): add command line argument for ImagePullPolicy configuration #6875
NO-JIRA: feat(claude): add e2e-analyze command for CI failure analysis #6737
CNTRLPLANE-1374: feat(azure): add setup scripts for self-managed Azure hosted clusters #6752
NO-JIRA: chore(ai): configure all agents to inherit model configuration #6906
CNTRLPLANE-1332: docs(azure): add self-managed Azure HyperShift overview guide #6948
CNTRLPLANE-1432: Make PSA test conditional on OpenShiftPodSecurityAdmission feature gate #6923
CNTRLPLANE-1581: feat(azure): relax API to make externalDNS optional for self-managed clusters #6951
OCPBUGS-62446: fix(hcco): add retry mechanism for HCP retrieval to handle transient connectivity issues #6918
NO-JIRA: docs(jira-solve): require godoc comments and unit tests for new functions #6957
OCPBUGS-60637: feat(cpo): add UID security context to CSO deployment #6786
OCPBUGS-62407: chore(build): update container images to 4.21 #6936
NO-JIRA: Add openstack-reviewers, openstack-approvers #6911
GCP-96: add GCPPlatform feature gate #6929
CNTRLPLANE-1332: docs(readme): correct spelling mistake #6943
CNTRLPLANE-1332: docs(azure): add self-managed cluster setup documentation #6808
OCPBUGS-61245: Fix driver-config ConfigMap content flapping due to random ordering #6907
CNTRLPLANE-1545: docs(commands): improve jira-solve command with logical commit organization #6937
NO-JIRA: chore(ci): update Konflux Tekton tasks to latest trusted versions #6928
OCPBUGS-62328: Add missing svc-kubeconfig mount to CAPO Deployment #6909
OCPBUGS-62324: Fix test-e2e annotations flag parsing #6908
AUTOSCALE-322: fix karpenter token secret leak #6790
CNTRLPLANE-980: feat(api): add hc.status.configuration.authentication status field #6261
NO-JIRA: fix(e2e): extend ValidateHostedClusterConditions timeout #6913
KFLUXSPRT-5246: update base images from RHEL9 ELS to UBI9 minimal 9.4 #6916
OCPBUGS-62172: Add Manila, Cinder to list of pods allowed readOnlyRootFileSystem=false #6885
NO-JIRA: fix(test): support external oidc settings on non-aws platform #6754
NO-JIRA: chore(ai): ensure jira-solve run make pre-commit #6901
NO-JIRA: chore(ai): let jira-solve show the executed command in the PR desc #6898
OCPBUGS-61936: fix(capi-provider): wait for infrastructure resource before startup #6860
OCPBUGS-62224: fix(e2e): add stabilization wait in GlobalPullSecret test to reduce flakiness #6892
CNTRLPLANE-1478: chore: add AI directory paths to OWNERS file #6884
NO-JIRA: chore(ai): add claude slash command jira solve #6882
OCPBUGS-62099: make TestAutoscalingBalancing more robust #6877
OCPBUGS-61850: fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races #6843
NO-JIRA: ci(dev-cluster): Fix dev token secret annotation #6876
OCPBUGS-62056: test(e2e): fix flaky EnsureOAPIMountsTrustBundle with retry logic #6872
OCPBUGS-62128: hcco: sync watched resource types to availability-prober #6879
CNTRLPLANE-1331: Get self-managed Azure working again #6703
OCPBUGS-59885: [e2e][KubeVirt] Ignore KubeVirtNodesLiveMigratable Condition on HC #6826
CNTRLPLANE-1455: docs(contribute): consolidate contributing guide; refresh PR template; add landing page #6866
OCPBUGS-61776: fix(ignition-server): Don’t delete user-managed cert secrets #6836
OCPBUGS-61894: Enable VolumeAttributesClass runtime config #6855
CNTRLPLANE-1452: docs(ci): add documentation for checking CI status #6849
OCPBUGS-61438: fix(security): harden konnectivity-agent DaemonSet security context #6835
OCPBUGS-61828: refactor FeatureGate status check #6862
OCPBUGS-61329: skip EnsureReadOnlyRootFilesystemTmpDirMount check for kubevirt HCP pods #6842
OCPBUGS-61825: test(e2e,kubevirt): skip break-glass-credentials on kubevirt #6856
OCPBUGS-61862: ci: Remove the MCE 2.10 konflux pipeline #6848
OCPBUGS-61719: fix: propagate AWSLoadBalancerTargetNodesAnnotation to… #6823
OCPBUGS-61334: fix(kas): Set correct container port in postStart handler, 2 #6824
OCPBUGS-61177: ci: use common MCE konflux pipeline #6743
NO-JIRA: Update Branch Tasks Docs #6840
OCPBUGS-56249: fix lint-fix Makefile rule #6151
OCPBUGS-61048: test(e2e): add autoscaler deployment verification to autoscaling test #6779
OCPBUGS-61687: fix(capi-provider): use single replica deployment for aws and azure #6807
fix(disable-psa): disable PSA check for 4.20 #6831
OCPBUGS-61482: fix(proxy): ensure URLs have scheme before proxy resolution #6789
OCPBUGS-61587: fix(oauth): oauth-openshift deployment should be HA #6802
CNTRLPLANE-1277: Enable TestCreateClusterCustomConfig for Azure #6706
Revert “OCPBUGS-61334: fix(kas): Set correct container port in postStart handler” #6805
OCPBUGS-60185: resolve MIRRORED_RELEASE_IMAGE flapping #6751
OCPBUGS-61499: fix(control-plane): remove resource limits from kube-controller-manager #6785
CNTRLPLANE-1364: feat: enable global pull secret for AWS #6736
OCPBUGS-61334: fix(kas): Set correct container port in postStart handler #6773
NO-JIRA: fix karpenter metric validation in e2e #6714
NO-JIRA: chore(AI): add claude agents for different SMEs #6787
OCPBUGS-61329: test(e2e): skip kubevirt pods in EnsureReadOnlyRootFilesystem #6770
OCPBUGS-61462: temporarily use v4.20 catalogs #6782
NO-JIRA: add permissions to role policy #6783
CNTRLPLANE-1385: docs: add MCP setup guide for Cursor with sample config #6775
CNTRLPLANE-1383: docs(aro-e2e): add ARO HCP e2e artifacts navigation guide and Cursor rule #6774
OCPBUGS-61218: test(e2e): add control plane component rollout validation to upgrade test #6767
CNTRLPLANE-203: feat(sharedingress): add Azure Public IP tagging support for router service #6730
OCPBUGS-61219: fix: cleanup old PKI operator deployment during upgrades #6758
OCPBUGS-61282: rename CCM deployments to align with 4.19 #6757
NO-JIRA: fix(api): enhance API NodePool’s API docs #6753
NO-JIRA: chore(tests): validate conditions after executing tests #6738
OCPBUGS-60376: fix token rotation causing Karpenter to stop working #6561
NO-JIRA: contrib: add utility for cleaning roles #5945
CNTRLPLANE-267: Restructure the OWNERS usage in the whole repo #5784
AUTOSCALE-332: allow karpenter-operator to support rhobs monitoring #6704
CNTRLPLANE-1370: feat(supportedversion): add OCP 4.21 support; update e2e constants and tests #6739
NO-JIRA: docs(create-jira-items): document OCPBUGS issue creation and default versions #6741
Full changelog

ibm-cloud-controller-manager

OCPBUGS-62342: Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 4.21 #86
NO-JIRA: Update OWNERS #85
Full changelog

ibm-vpc-block-csi-driver

Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.21 #112
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-62375: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.21 #156
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-62486: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.21 #130
NO-JIRA: Update OWNERS #126
Full changelog

ibmcloud-machine-controllers

OCPBUGS-62491: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.21 #71
NO-JIRA: Update OWNERS #70
Full changelog

insights-operator

NO-JIRA: remove CRD manifests #1156
CCXDEV-15551: Decouple CRD storage specs #1157
OCPBUGS-60870: The Gather Job did not check the current configuration before running #1154
OCPBUGS-61893: set extractor as default container #1141
OCPBUGS-62215: operator is not set as degraded when failed #1151
And 9 elided commits (e.g. from squash or rebase merges)
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-62433: Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 #54
Full changelog

ironic

OCPBUGS-62443: Updating ironic-container image to be consistent with ART for 4.21 #699
OCPBUGS-62201: Bump ironic to include idrac10 fix #697
METAL-1446, METAL-1566, METAL-1577: Sync Ironic and Sushy #695
METAL-1574: Remove temporary dependencies from source #692
OKD-283: fixing OKD ironic-image errors and metal3 pod crashes (centos9) #688
OCPBUGS-61459: sync with Ironic changes, including the local RPC revert #687
METAL-1528: Use custom directories in the runironic-proxy script #679
OCPBUGS-60455: set [json_rpc]port unconditionally #684
Full changelog

ironic-agent

OKD-295: Fix broken OKD ironic-agent-image #199
OCPBUGS-62329: Updating ironic-agent-container image to be consistent with ART for 4.21 #197
METAL-1574: Update deps pkgs versions #196
Full changelog

ironic-machine-os-downloader

OCPBUGS-62357: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.21 #107
Full changelog

ironic-static-ip-manager

OCPBUGS-62511: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.21 #54
Full changelog

keepalived-ipfailover

Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.21 #213
Full changelog

kube-metrics-server

OCPBUGS-62397: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.21 #47
Full changelog

kube-state-metrics

OCPBUGS-62356: Updating kube-state-metrics-container image to be consistent with ART for 4.21 #125
NO-ISSUE: [bot] Bump openshift/kube-state-metrics to v2.17.0 #124
Full changelog

kube-storage-version-migrator

OCPBUGS-62566: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.21 #234
Full changelog

machine-api-operator

OCPBUGS-62333: Updating ose-machine-api-operator-container image to be consistent with ART for 4.21 #1421
OCPBUGS-61728: Fixed multi nic e2e to wait for node removal after machineset tests #1417
OCPBUGS-61728: Adjusted machine e2e tests to wait for nodes to clean up #1415
NO-JIRA: Update OWNERS_ALIASES #1414
OCPBUGS-60901: bump openshift/api #1407
Full changelog

machine-config-operator

OCPBUGS-54682: Fix - NetworkManager restart or crash renders br-ex unusable #5304
OCPNODE-3747: Disable Swap mode in Kubelet and enable drop-in directory #5294
OCPEDGE-2188: embed fencing validator into TNF MCO #5285
NO-JIRA: shiftstack: Update OWNERS #5334
OCPBUGS-62510: Skip rpm-ostree local rebase if no PIS #5333
OCPBUGS-62493: Only fire OSImageURLOverridden and set metrics on changes #5319
MCO-1844: Remove MissingMachineConfig Alert #5261
MCO-1685: Add mco-sanitize utility main logic #5303
OCPBUGS-59968: Cert Controller should live fetch SAN IPs during cert rotation #5245
OCPBUGS-62341: Ensure the node passed to RunCordonOrUncordon comes from the latest updated state #5305
OCPBUGS-60805: configure-ovs: work around a Cisco switch issue #5274
MCO-408: Add OpenShift-native access to change logLevel for MachineConfigOperator components #5291
OCPBUGS-42303: Networking: reset ovn-remote config and allow ovnkube controller to s… #5123
MCO-1685: Add mco-sanitize file processing logic #5298
MCO-1685: Add mco-sanitize redactor #5295
OCPBUGS-58198: Fix MCP updated machine count for image mode disabling case #5271
MCO-1673: Add Component Readiness tests for Azure boot image updates #5257
MCO-1840: Remove MCN CRD cleanup cronjob #5234
OCPBUGS-60120: Add nil/null checks to image registry secret decode #5253
NO-ISSUE: Add delays to reduce TestOSBuildController failures #5239
MCO-1808: MCO-1790: Implement Azure boot image updates #5202
OCPBUGS-61695: Override NMState service definition #5284
OCPBUGS-60161: Add mcd_local_unsupported_packages recording rule #5242
CORS-4170: Extending in-cluster DNS support to Azure #5216
OCPBUGS-60537: Machine-config controller should actively manage cordon while draining #5276
OCPBUGS-56558: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5259
Full changelog

machine-image-customization-controller

METAL-1564: Use available images #147
OCPBUGS-62505: Updating ose-image-customization-controller-container image to be consistent with ART for 4.21 #148
Full changelog

machine-os-images

OCPBUGS-61477: Acquire aarch64 ISO at runtime #67
OCPBUGS-56049: Force rebuild for OCP 4.21 #66
OCPBUGS-62596: Updating ose-machine-os-images-container image to be consistent with ART for 4.21 #69
Full changelog

monitoring-plugin

OCPBUGS-63056, OCPBUGS-63061: Improve alignment with console SDK #600
OU-1030: revert most of my previous changes & avoid flickering when chang… #596
OU-995: automation monitoring testing namespace level #594
OU-1024: Add translations for all strings in Incidents page #570
OU-1022: recalculate incident x values when filtering #589
OU-1011: Display determistic start and end dates #585
OU-999: automation monitoring plugin image injection and kubevirt installation cleanup working #590
OCPBUGS-62276: allow additional TLS config #580
OCPBUGS-62454: Updating monitoring-plugin-container image to be consistent with ART for 4.21 #566
OU-1011: Render short-lived incidents and alerts #581
OU-1016: avoid displaying stale alerts data when selecting another incident detail #573
OBSINTA-789: Sort alerts by start time #577
NO-JIRA: fix handle empty queries when removing incident filters #574
NO-JIRA: Fix tooltip vertical position #576
OU-986: automation removing uncaught exception #575
OBSINTA-789: Fix alert loading and processing #569
OU-1025: keep alerts populated for the incident, when the graph is hidden… #572
NO-JIRA: chore: add unit test command and dependencies #571
OBSINTA-857: Cypress add SKIP_ALL_INSTALL #568
NO-JIRA: fix hermetic builds #564
OBSINTA-858: Cypress incidents incident traversing robustness #556
OBSINTA-858: Cypress incidents mocking metric name change workaround #553
COO-1134: fix: update vulnerable dependencies #561
NO-JIRA: Update .gitignore (Cypress specific) #558
OU-1011: REVERT add a 5 minute to the first alert timestamp #559
OU-1011: add a 5 minute to the first alert timestamp #550
NO-JIRA: automation log and debug mode in headless mode #557
OU-1015: fix: incidents dropdown stays open fix #554
NO-JIRA: Update translations for incidents #555
OBSINTA-795: Data Test Selectors for Incidents Page #545
NO-JIRA: fix: immer dependency anr patternfly icons import #542
OU-989: Kubevirt with fixes after namespace level and session handler #543
NO-JIRA: Improve incidents timeline chart domain and loading UX #551
OU-1005: upgrade perses plugins #540
OBSINTA-789: Fix alerts chart empty state #549
RHINENG-20863: improved fetching logic for incidents #546
NO-JIRA: Login validation for all session flows #544
OU-833: fix 2 bugs for incidents page #539
NO-JIRA: Cypress Testsuite – Enhance Session Management #536
OBSINTA-463: Rename the cluster health metrics #514
OBSINTA-789: Update layout and labels #534
OU-863: fix step calculation to fix non existent data gaps #535
RHINENG-20701: fix utc timestamps in chart tooltips #531
OBSINTA-798: Cypress Incident Tests – Query Mocking #521
NO-JIRA: set rules as silenced if all alerts are silenced #533
RHINENG-20667: silenced alerts for chart and table #530
OU-658: Major Refactor + Adding Namespace dropdown to admin pages #483
NO-JIRA: automation - fix monitoring-plugin injection #532
NO-JIRA: Update build-image.sh #528
OU-671: Add Patternfly Theming to Perses #522
RHINENG-20424: fix clear filter bug with incident selected #527
OU-783: Fit the alerts timeline to the actual data timespan #529
OU-727: Filter incidents by max severity over time #526
OU-988: automation - cleanup for all scripts and fix on MP injection #523
RHINENG-20424: Incident ID filter for the Incidents Page #520
OU-897: automation OU-721 and hygiene of existing scripts #519
NO-JIRA: automation - regression testing for metrics - changes #516
RHINENG-20424: improved filters for severity and state #515
OU-501: automation - dashboards legacy and export csv #517
Full changelog

multus-networkpolicy

Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.21 (#75) #75
Full changelog

must-gather

OSSM-10530: add Istio/Gateway API gather scripts #503
OCPBUGS-62551: Updating ose-must-gather-container image to be consistent with ART for 4.21 #507
Full changelog

network-tools

OCPBUGS-62553: Updating ose-network-tools-container image to be consistent with ART for 4.21 #162
NO-JIRA:Add two new team members #163
NO-JIRA: Add Marty P to bug tooling #161
OCPBUGS-53196: Update references of master to main #160
Full changelog

networking-console-plugin

CNV-60063: fixing the Create ClusterUserDefinedNetwork form appearance #280
CNV-62168: Typos in Networking Pages #277
CNV-56937: Hiding the option to create cluster user defined networks or non-priv users, allowing the option to create CUDN for users with access not just admin #284
CNV-56937: Hiding the option to create cluster user defined networks or non-priv users #283
CNV-61569: Mark OVN K8s secondary localnet as deprecated #282
OCPBUGS-62442: Updating networking-console-plugin-container image to be consistent with ART for 4.21 #279
CNV-70018: fix null error #278
Merge #273
CNV-59876: use correct name space when switching tabs #276
OCPBUGS-61531: show VM network menu only on admin #275
OCPBUGS-61548: use console extension to render same nad actions #274
CNV-59629: set default MTU visible in form and yaml #272
CNV-68685: add primary UDN label info to VirtualMachine network creation form #271
CNV-68643: fix documentation links #270
CNV-68676: fix wizard cancel button #269
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-62418: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.21 #51
NO-JIRA: Update OWNERS #50
Full changelog

nutanix-machine-controllers

OCPBUGS-62378: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.21 #123
NO-JIRA: Update OWNERS #122
Full changelog

oauth-apiserver

OCPBUGS-62612: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #148
OCPBUGS-61754: Bump openshift/kubernetes-apiserver for consistent list etcd retries. #146
CNTRLPLANE-5: Bump openshift/kubernetes-apiserver #142
Full changelog

oc-mirror

OCPBUGS-60571: reject configurations with duplicated keys and/or entries #1275
CLID-430: migration to containers/container-libs #1255
OCPBUGS-55489: removes unintended exec permissions #1285
OCPBUGS-56398: Removes the clean up of logs directory #1289
OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 (missing files of pr 1280) #1283
OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 #1280
OCPBUGS-60929: generate the archive only after mirroring #1272
OCPBUGS-62106: v2/cli: show binary version in output #1273
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-catalogd, olm-operator-controller

OPRUN-4194: Update OCP catalogs to v4.21 #518
NO-ISSUE: Synchronize From Upstream Repositories #523
OPRUN-4197: Upgrade OCP image from 4.20 to 4.21 #517
OPRUN-4134: Add 2 new tests for Single/Own Namespace install mode support #502
OPRUN-4199: [Default Catalog Tests] - Change logic to get ocp images from openshift/catalogd/manifests.yaml #521
OCPBUGS-62517: Synchronize from upstream #519
OPRUN-4176: Consolidate build API #514
OPRUN-4156: UPSTREAM: <carry>: support webhook case in disconnected #508
NO-ISSUE: Synchronize From Upstream Repositories #512
OPRUN-4176: Update does-not-exist and simple install to work i… #510
NO-ISSUE: Clean up cp-manifests #511
NO-ISSUE: Synchronize From Upstream Repositories #506
NO-ISSUE: UPSTREAM: <carry>: check kubeconfig only run-test and run-suite #507
NO-ISSUE: Fix VERSION replacement in catalog bindata #505
NO-ISSUE: Synchronize From Upstream Repositories #498
OCPBUGS-62753: for incompatible test add func to wait SA creation #501
NO-ISSUE: Synchronize From Upstream Repositories #497
OPRUN-4169: OTE building controller image #483
OPRUN-4080: Remove kustomize manifests from images and repo #494
NO-ISSUE: Synchronize From Upstream Repositories #493
OCPBUGS-62372: Updating ose-olm-catalogd-container image to be consistent with ART for 4.21 #491
NO-ISSUE: Synchronize From Upstream Repositories #492
OCPBUGS-62370: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.21 #490
OCPQE-30671: UPSTREAM: <carry>: migrate more cases from tests-private #488
NO-ISSUE: Synchronize From Upstream Repositories #489
OPRUN-4160: Fix cp-manifests copying of helm charts #482
OPRUN-4164: Synchronize From Upstream Repositories #487
OPRUN-4164: Synchronize From Upstream Repositories #484
NO-ISSUE: Add pedjak and trgeiger as reviewers #463
NO-ISSUE: Synchronize From Upstream Repositories #480
NO-ISSUE: Synchronize From Upstream Repositories #479
OCPQE-29416: Init OLMv1 OTE Framework for tests-private to migrate first case #467
OPRUN-4076, OPRUN-4078: Replace kustomize config with helm config #475
NO-ISSUE: add jiazha to approvers #477
NO-ISSUE: Synchronize From Upstream Repositories #476
NO-ISSUE: Synchronize From Upstream Repositories #473
NO-ISSUE: Synchronize From Upstream Repositories #471
NO-ISSUE: Synchronize From Upstream Repositories #465
NO-ISSUE: Grant QE approver permissions for OTE contributions #457
NO-ISSUE: Synchronize From Upstream Repositories #464
NO-ISSUE: Synchronize From Upstream Repositories #456
OCPBUGS-60868: Revert “Handle service-ca cert availability/rotation” #460
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

openshift-apiserver

OCPBUGS-62516: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.21 #560
OCPBUGS-61768: update pkg/image/OWNERS #555
OCPBUGS-61754: Bump openshift/kubernetes-apiserver for consistent list etcd retries. #556
OCPBUGS-61228: Bump Route generation when spec is updated #550
OCPBUGS-37215: pkg/image: conditionally parse raw image manifest #551
CNTRLPLANE-5: Bump openshift/kubernetes-apiserver #549
OCPBUGS-57474: ensure cache invalidation after a time #547
Full changelog

openshift-controller-manager

OCPBUGS-61899: CNTRLPLANE-1308: Fix Dockerfile.rhel: Add OTE binary build and packaging #419
CNTRLPLANE-1308: set up openshift-tests-extension for openshift-controller-manager and add a sanity test #417
Full changelog

openshift-state-metrics

OCPBUGS-62431: Updating openshift-state-metrics-container image to be consistent with ART for 4.21 #126
Full changelog

openstack-cluster-api-controllers

OCPBUGS-62567: Updating openstack-cluster-api-controllers-container image to be cons… #379
NO-JIRA: Fix internal vendoring #378
NO-JIRA: shiftstack: Update OWNERS #377
Full changelog

openstack-machine-api-provider

OCPBUGS-62473: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.21 #138
NO-JIRA: shiftstack: Update OWNERS #139
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPQE-30741: support opm cases #1121
OCPQE-30781: support hypershift binary #1119
OCPQE-30679: migrate more cases from tests-private to make layout #1118
OCPQE-29415: correct suite name #1117
OCPQE-29415: enhance filters to add more suites #1116
NO-ISSUE: Synchronize From Upstream Repositories #1115
OCPQE-29415: add testing framework based on OTE and the first tests-private case #1113
OCPQE-29415: move golangci-lint and go-bindata to new location to fix sync #1114
OCPQE-29415: add OTE into olmv0 with new location #1108
NO-ISSUE: Synchronize From Upstream Repositories #1112
NO-ISSUE: UPSTREAM: <carry>: add jiazha to approvers #1110
Revert “OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0” #1109
NO-ISSUE: Updating operator-registry-container image to be consistent with ART for 4.21 #1106
OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0 #1105
NO-ISSUE: set package-server-manager as default container #1104
NO-ISSUE: Synchronize From Upstream Repositories #1103
NO-ISSUE: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.21 #1100
NO-ISSUE: Synchronize From Upstream Repositories #1101
NO-ISSUE: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.21 #1094
NO-ISSUE: make downstream csv namespace labeler plugin e2e more resilient to race conditions #1092
NO-ISSUE: Synchronize From Upstream Repositories #1088
Full changelog

operator-marketplace

OPRUN-4198: upgraded github.com/openshift/api, github.com/openshift/library-go and ginkgo #677
NO-ISSUE: Update Dockerfile.okd to use OCP image 4.21 #678
OCPBUGS-62384: Updating marketplace-operator-container image to be consistent with ART for 4.21 #674
NO-ISSUE: Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.2 #661
OCPBUGS-62132: Remove Expect func so that the test case can use the retry logic #665
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.25.1 #658
NO-ISSUE: Update CRD version installed via makefile target #648
NO-ISSUE: Fix hyperlink #651
OCPBUGS-60669: Add NetworkPolicy for hypershift #656
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6055: Dockerfile: Unpin OVN and consume the latest from FDP. #2721
OCPBUGS-42303, OCPBUGS-56783: DownStream Merge [10-08-2025] #2790
OCPBUGS-62574: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.21 #2756
OCPBUGS-60468: DownStream Merge [09-23-2025] #2762
OCPBUGS-42303, OCPBUGS-58501, OCPBUGS-59657, OCPBUGS-61566: DownStream Merge [09-09-2025] #2750
OCPBUGS-61065: Adding ovndb-raft-functions.sh to ovnk image #2740
NO-JIRA: DownStream Merge [08-27-2025] #2736
Full changelog

powervs-block-csi-driver

Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.21 #107
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-62373: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.21 #88
Full changelog

powervs-cloud-controller-manager

OCPBUGS-62515: Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.21 #88
Full changelog

powervs-machine-controllers

OCPBUGS-62519: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.21 #129
Full changelog

prom-label-proxy

OCPBUGS-62508: Updating prom-label-proxy-container image to be consistent with ART for 4.21 #386
NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.1 #385
Full changelog

prometheus

NO-JIRA: update Prometheus to v3.6.0 #277
OCPBUGS-62401: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.21 #274
OCPBUGS-62166: chore(scrape): default to legacy validation/escaping scheme until utf-8 is fully supported by prometheus-operator #272
NO-JIRA: [bot] sync rh-manifest.txt #261
OCPBUGS-56568: chore: compute highestTimestamp at queryManager level #262
Full changelog

prometheus-alertmanager

OCPBUGS-62428: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.21 #107
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-JIRA: Bump openshift/prometheus-operator to v0.86.1 #345
MON-4395: Bump openshift/prometheus-operator to v0.86.0 #344
OCPBUGS-62448: Updating prometheus-config-reloader-container image to be consistent with ART for 4.21 #341
OCPBUGS-62542: Updating prometheus-operator-container image to be consistent with ART for 4.21 #342
Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.21 #340
Full changelog

prometheus-node-exporter

NO-ISSUE: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.21 #170
Full changelog

route-controller-manager

OCPBUGS-62586: Updating ose-route-controller-manager-container image to be consistent with ART for 4.21 #65
NE-2169: Move annotations and metrics to a constants file #66
NO-JIRA: Add new team members to OWNERS #64
Full changelog

service-ca-operator

OCPBUGS-63124: Fix e2e-aws-operator e2e test failures #281
OCPBUGS-56599: don’t hotloop on secret creation errors #274
Full changelog

stream-coreos, stream-coreos-extensions

NO-JIRA: update the okd repo for 4.21 #1862
NO-JIRA: OWNERS: switch to joelcapitao #1861
NO-JIRA: bump version to 4.21 #1860
Full changelog

telemeter

Updating telemeter-container image to be consistent with ART for 4.21 #565
Full changelog

tests

OCPBUGS-63040: Add imagestream update dryrun test #30357
OCPEDGE-1565: [TNF] Add double node failure recovery test #30370
NO-JIRA: implement WithoutKubeconf method to clear config path #30371
NO-JIRA: oc adm upgrade status: Record err and outputs #30151
NO-JIRA:I Fixing race condtion #30360
OCPBUGS-62552: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.21 #30327
NO-JIRA: init lease-checker namespaces #30373
NO-JIRA: generate unique namespace names for UDN tests #30348
NO-JIRA: update namespace privilege check to use PSA label #30355
OCPBUGS-56281: gatewayapicontroller: Clean up resources when done #29900
NO-JIRA: another attempt at disabling blank issues #30369
NO-JIRA: Make it clear that we do not monitor GH issues #30368
NO-JIRA: Update OWNERS for compat_otp #30361
NO-ISSUE: Add webhook image for the olmv1 tests #30356
OTA-1637: ClusterOperators should not go Progressing only for cluster scaling #30297
OCPBUGS-60593: Skip oauth test for external control plane topology #30200
TRT-2351: Revert “NO-JIRA: Improve case execution time” #30363
TRT-2349: Revert “make TLS registry tests required” #30358
OCPNODE-3238: Add SigstoreImageVerificationPKI image policy validation tests #30315
TRT-2346: Fix not initializing adminRESTConfig #30345
OCPBUGS-60853: make TLS registry tests required #29074
TRT-1854: remove upstream annotation framework #30340
NO-JIRA: Filter preconfiguredIPs based on cluster IP family support #30338
NO-JIRA: Improve case execution time #30329
CORENET-6363: Add PreconfiguredUDNAddresses duplicate IP detection tests #30197
OCPBUGS-62701: Revert TRT-1854: remove upstream annotation framework #30337
Revert “Revert “NO-JIRA: Add olm into the known operator set”” #30325
NO-JIRA: BugFix- don’t modify finalArgs in Template func #30328
OCPNODE-3659: Not fail upgrade checks if all nodes are ready #30318
OCPBUGS-62249: Tweak Endpoints admission test for upcoming change #30304
MCO-1828: Remove pathological test in disruptive #30272
OCPBUGS-61196: Add test that the ServiceCIDR API is blocked #30234
NO-JIRA: oc adm upgrade status: Skip test in multihop update jobs #30150
MCO-1865: Update MCO tests to be in only one test suite each #30309
OCPBUGS-62474: CNTRLPLANE-1308: Enable OTE for OCM and OCM Operator #30270
TRT-1854: remove upstream annotation framework #30305
Revert “NO-JIRA: Add olm into the known operator set” #30313
NO-JIRA: Add olm into the known operator set #30308
MCO-1875: Bump timeout for vSphereBootimageUpdate tests #30288
NO-ISSUE: Automated - Update synthetic test data #30277
OCPBUGS-62227: bump telemetry series limit to 1000 #30302
OCPERT-151: Migrate new func for Compare structured data instead of string from openshift-test-private repo #30291
OCPBUGS-61398: fix(ginkgo): avoid nil deref and harden env var setup #30289
OCPQE-30698: enable OTE for olmv0 #30285
OTA-1626: Fail CI if alert/ClusterOperatorDegraded is fired #30282
TRT-2071: Remove annotations and replace with environment selector based test skipping and disablement #30064
trt-2246: lower parallelism based on worker nodes #30226
OCPSTRAT-2045: Automating OCPSTRAT-2045 feature in upstream #30067
OCPBUGS-61980: Temporarily remove commatrix documentation test for rework #30280
OCPBUGS-61905: oidc: improve rollout wait times #30274
OCPSTRAT-2371: image: add busybox to list of allowed images #30281
CORENET-6418: drop openshift-sdn tests #29085
OCPEDGE-1483: Add TNF E2E tests for network failure #30110
OCPBUGS-61196: Skip ServiceCIDR in etcd_storage_path test #30254
OCPBUGS-61855: Temporarily disable InstallPlanStepAppliedWithWarnings for k8s 1.34 rebase #30275
OCPBUGS-61398: fix(test): prevent nil pointer dereference in ginkgo test runner #30224
OCPBUGS-61855: CRD Apply Alert Allowance #30265
NE-2090: adding one GIE automation test #30189
OTA-1601: upgrade status: recover checking the updating COs #30154
NO-JIRA: Allow systemd-coredump test to fail #30261
OCPSTRAT-2371: Update etcd test data for k8s 1.34 release #30242
OCPBUGS-61733: Restore retries for port-forward test #30255
OCPEDGE-2090: Add validation tests for tnf topology effects #30252
TRT-2275: introduce cluster e2e-analysis sub command for openshift-tests #30211
MON-4290: add test for must-gather gather_metrics #30054
OCPBUGS-61193: chore(extended/prometheus): ²⁄₂: make ‘targets auth’ test more lenient and more resilient #30256
OCPBUGS-57325: update machines scale test #30028
Trt-2246: network test isolation #30192
NO-ISSUE: Automated - Update synthetic test data #30244
NO-JIRA: Remove runbook exceptions for fixed bugs #30246
trt-2230: Add monitor test annotation #30196
NO-JIRA: Increase request-timeout to deflake test #30248
NO-JIRA: Deflake oc observe test by using explicit port number #30247
OTA-1559: test/extended/cli/adm_upgrade/recommend: TestRiskA PromQL use max_over_time #30160
NO-JIRA: Add intervals and a test for systemd-coredumps #30222
CNTRLPLANE-945: oidc: add retry logic for Keycloak route creation #30233
CNF-18661: Update vendor to include communication matrix bug fix #30232
CNTRLPLANE-945: images: add keycloak images and use them in ExternalOIDC tests #30221
NO-JIRA: Migrate new func for non-Job pods readiness helper for OCL from openshift-test-private repo #30193
NO-ISSUE: test/extended/util/framework: Poll in IsMicroShiftCluster #30161
OCPBUGS-61538: Skip config-operator checking when featureSet is DevPreviewNoUpgrade #30236
OCPBUGS-61193: chore(extended/prometheus): make ‘targets auth’ test more lenient and more resilient. #30219
NO-ISSUE: Automated - Update synthetic test data #30020
OCPBUGS-61287: Add flaky kubectl logs test to the retry list to clean signal for release #30215
OCPBUGS-60507: Bump to latest openshift/kubernetes (v1.33.4) #30227
CNF-18661: update the commatrix vendor version to contain new changes #30220
Trt-2257: track run options #30195
OCPBUGS-61063: test/extended/cli/adm_upgrade/recommend: Enable precheck and accept #30113
NO-JIRA: Fix Node NotReady intervals being left open when a node is deleted #30188
OCPBUGS-61194: Mark etcd net overload logging test as a flake #30210
CORENET-5329: revert primary udn test workaround from virt tests #29386
CNTRLPLANE-945: improve logging, add startup probe to Keycloak Deployment #30184
CNTRLPLANE-1306: Enable OTE for cluster-kube-storage-version-migrator-operator #30199
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

Updating ose-thanos-container image to be consistent with ART for 4.21 #164
Full changelog

volume-data-source-validator

OCPBUGS-62367: Updating volume-data-source-validator-container image to be consistent with ART for 4.21 #5
Full changelog

vsphere-cloud-controller-manager

NO-JIRA: Update OWNERS #99
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-62332: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.21 #75
OCPBUGS-57668: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.20 #59
NO-JIRA: Update OWNERS #65
OCPBUGS-61498: UPSTREAM: 3636: VSphereClusterIdentity: ensure namespace in tests exists when not using the default #67
OCPBUGS-61498: Fix openshift/unit-tests.sh #66
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.21 #150
NO-JIRA: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.21 #148
Full changelog

vsphere-csi-driver-operator

Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.21 #311
Full changelog

vsphere-problem-detector

OCPBUGS-62595: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.21 #191
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Package List

cri-o-1.34.0-1.el10s
kernel-6.12.0-136.el10
openshift-kubelet-4.21.0-202510080354.p2.g00e7ec7.assembly.stream.el9
systemd-257-13.el10

Full list (575 packages)

NetworkManager-1:1.55.4-1.el10
NetworkManager-cloud-setup-1:1.55.4-1.el10
NetworkManager-libnm-1:1.55.4-1.el10
NetworkManager-ovs-1:1.55.4-1.el10
NetworkManager-tui-1:1.55.4-1.el10
WALinuxAgent-udev-2.13.1.1-2.el10
aardvark-dns-2:1.16.0-2.el10
acl-2.3.2-4.el10
adcli-0.9.2-9.el10
afterburn-5.9.0-1.el10
afterburn-dracut-5.9.0-1.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20250812-19.el10
amd-ucode-firmware-20250812-19.el10
atheros-firmware-20250812-19.el10
attr-2.5.2-5.el10
audit-4.0.3-4.el10
audit-libs-4.0.3-4.el10
audit-rules-4.0.3-4.el10
authselect-1.5.0-8.el10
authselect-libs-1.5.0-8.el10
avahi-libs-0.9~rc2-2.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-5.el10
bind-license-32:9.18.33-5.el10
bind-utils-32:9.18.33-5.el10
binutils-2.41-58.el10
binutils-gold-2.41-58.el10
bootc-1.8.0-1.el10
bootupd-0.2.28-2.el10
brcmfmac-firmware-20250812-19.el10
bsdtar-3.7.7-4.el10
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.25.0-6.el10
ca-certificates-2024.2.69_v8.0.303-102.3.el10
catatonit-5:0.2.1-1.el10
centos-gpg-keys-10.0-11.el10
centos-release-cloud-1-1.el10s
centos-release-nfv-common-1-5.el10s
centos-release-virt-common-1-1.el10s
centos-stream-release-10.0-11.el10
centos-stream-repos-10.0-11.el10
checkpolicy-3.9-1.el10
chrony-4.6.1-2.el10
cifs-utils-7.2-1.el10
cirrus-audio-firmware-20250812-19.el10
clevis-21-8.el10
clevis-dracut-21-8.el10
clevis-luks-21-8.el10
clevis-pin-tpm2-0.5.3-8.el10
clevis-systemd-21-8.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.1.13-1.el10
conmon-rs-0.6.6-2.el10s
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.241.0-1.el10
containers-common-5:0.64.0-4.el10
containers-common-extra-5:0.64.0-4.el10
coreos-installer-0.24.0-1.el10
coreos-installer-bootinfra-0.24.0-1.el10
coreutils-9.5-6.el10
coreutils-common-9.5-6.el10
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-1.34.0-1.el10s
cri-tools-1.34.0-2.el10s
criu-3.19-9.el10
criu-libs-3.19-9.el10
crun-1.24-1.el10
crypto-policies-20250905-2.gitc7eb7b2.el10
crypto-policies-scripts-20250905-2.gitc7eb7b2.el10
cryptsetup-2.8.1-1.el10
cryptsetup-libs-2.8.1-1.el10
curl-8.12.1-2.el10
cyrus-sasl-gssapi-2.1.28-27.el10
cyrus-sasl-lib-2.1.28-27.el10
dbus-1:1.14.10-5.el10
dbus-broker-36-4.el10
dbus-common-1:1.14.10-5.el10
dbus-libs-1:1.14.10-5.el10
dbus-tools-1:1.14.10-5.el10
device-mapper-10:1.02.206-3.el10
device-mapper-event-10:1.02.206-3.el10
device-mapper-event-libs-10:1.02.206-3.el10
device-mapper-libs-10:1.02.206-3.el10
device-mapper-multipath-0.9.9-12.el10
device-mapper-multipath-libs-0.9.9-12.el10
device-mapper-persistent-data-1.1.0-2.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-3.el10
dnf-4.20.0-18.el10
dnf-data-4.20.0-18.el10
dnsmasq-2.90-4.el10
dosfstools-4.2-12.el10
dracut-107-3.el10
dracut-network-107-3.el10
dracut-squash-107-3.el10
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-4.el10
e2fsprogs-libs-1.47.1-4.el10
efi-filesystem-6-6.el10
efibootmgr-18-8.el10
efivar-libs-39-3.el10
elfutils-debuginfod-client-0.193-1.el10
elfutils-default-yama-scope-0.193-1.el10
elfutils-libelf-0.193-1.el10
elfutils-libs-0.193-1.el10
erofs-utils-1.8.10-1.el10
ethtool-2:6.15-2.el10
expat-2.7.1-1.el10
file-5.45-8.el10
file-libs-5.45-8.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.3.1-1.el10
flashrom-1.3.0-8.el10
flatpak-session-helper-1.16.0-6.el10
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-1.9.31-1.el10
fwupd-efi-1.6-3.el10
fwupd-plugin-flashrom-1.9.31-1.el10
gawk-5.3.0-6.el10
gawk-all-langpacks-5.3.0-6.el10
gdbm-1:1.23-14.el10
gdbm-libs-1:1.23-14.el10
geolite2-city-20191217-14.el10
geolite2-country-20191217-14.el10
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.47.3-1.el10
glib2-2.80.4-8.el10
glibc-2.39-69.el10
glibc-common-2.39-69.el10
glibc-gconv-extra-2.39-69.el10
glibc-minimal-langpack-2.39-69.el10
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-2.el10
gnupg2-smime-2.4.5-2.el10
gnutls-3.8.10-2.el10
gobject-introspection-1.79.1-6.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
groff-base-1.23.0-10.el10
grub2-common-1:2.12-29.el10
grub2-efi-x64-1:2.12-29.el10
grub2-pc-1:2.12-29.el10
grub2-pc-modules-1:2.12-29.el10
grub2-tools-1:2.12-29.el10
grub2-tools-minimal-1:2.12-29.el10
gssproxy-0.9.2-10.el10
gzip-1.13-3.el10
hostname-3.23-14.el10
hwdata-0.379-10.6.el10
ignition-2.23.0-1.el10
ignition-grub-2.23.0-1.el10
ima-evm-utils-1.6.2-3.el10
info-7.1-6.el10
inih-58-3.el10
initscripts-service-10.26-2.el10
intel-audio-firmware-20250812-19.el10
intel-gpu-firmware-20250812-19.el10
ipcalc-1.0.3-12.el10
iproute-6.14.0-2.el10
iproute-tc-6.14.0-2.el10
iptables-libs-1.8.11-11.el10
iptables-nft-1.8.11-11.el10
iputils-20240905-4.el10
irqbalance-2:1.9.4-5.el10
iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
isns-utils-libs-0.103-1.el10
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-11.el10
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-7.el10
kbd-legacy-2.6.4-7.el10
kbd-misc-2.6.4-7.el10
kdump-utils-1.0.54-7.el10
kernel-6.12.0-136.el10
kernel-core-6.12.0-136.el10
kernel-modules-6.12.0-136.el10
kernel-modules-core-6.12.0-136.el10
kernel-modules-extra-6.12.0-136.el10
kernel-modules-extra-matched-6.12.0-136.el10
kexec-tools-2.0.31-1.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-12.el10
kmod-libs-31-12.el10
kpartx-0.9.9-12.el10
krb5-libs-1.21.3-8.el10
less-661-3.el10
libacl-2.3.2-4.el10
libaio-0.3.111-22.el10
libarchive-3.7.7-4.el10
libassuan-2.5.6-6.el10
libattr-2.5.2-5.el10
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-13.el10
libbpf-2:1.6.0-3.el10
libcap-2.69-7.el10
libcap-ng-0.8.4-6.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-4.el10
libcomps-0.1.21-3.el10
libcurl-minimal-8.12.1-2.el10
libdhash-0.5.0-58.el10
libdnf-0.73.1-12.el10
libdnf-plugin-subscription-manager-1.30.10-1.el10
libdrm-2.4.123-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-14.el10
libevent-2.1.12-16.el10
libfdisk-2.40.2-13.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.3.1-2.1.el10
libgcrypt-1.11.0-6.el10
libgomp-14.3.1-2.1.el10
libgpg-error-1.50-2.el10
libgudev-238-7.el10
libgusb-0.4.9-4.el10
libibverbs-57.0-2.el10
libicu-74.2-5.el10
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.11.1-3.el10
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.0-3.el10
libkcapi-hasher-1.5.0-3.el10
libkcapi-hmaccalc-1.5.0-3.el10
libksba-1.6.7-2.el10
libldb-4.23.0-101.el10
libluksmeta-9-26.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-13.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-2.el10
libnftnl-1.2.8-3.el10
libnghttp2-1.64.0-2.el10
libnl3-3.11.0-1.el10
libnvme-1.13-1.el10
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-12.el10
libref_array-0.1.5-58.el10
librepo-1.18.0-5.el10
libseccomp-2.5.6-1.el10
libsecret-0.21.2-8.el10
libselinux-3.9-1.el10
libselinux-utils-3.9-1.el10
libsemanage-3.9-1.el10
libsepol-3.9-1.el10
libsmartcols-2.40.2-13.el10
libsmbclient-4.23.0-101.el10
libsolv-0.7.29-8.el10
libss-1.47.1-4.el10
libsss_certmap-2.11.1-3.el10
libsss_idmap-2.11.1-3.el10
libsss_nss_idmap-2.11.1-3.el10
libsss_sudo-2.11.1-3.el10
libstdc++-14.3.1-2.1.el10
libtalloc-2.4.3-100.el10
libtasn1-4.20.0-1.el10
libtdb-1.4.14-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-13.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.28-1.el10
libutempter-1.2.1-15.el10
libuuid-2.40.2-13.el10
libuv-1:1.51.0-1.el10
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.23.0-101.el10
libxcrypt-4.4.36-10.el10
libxkbcommon-1.7.0-4.el10
libxml2-2.12.5-9.el10
libxmlb-0.3.23-1.el10
libxslt-1.1.39-8.el10
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20250812-19.el10
linux-firmware-whence-20250812-19.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-4.el10
lsof-4.98.0-7.el10
lua-libs-5.4.6-7.el10
luksmeta-9-26.el10
lvm2-10:2.03.32-3.el10
lvm2-libs-10:2.03.32-3.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.7-2.el10
mdadm-4.4-2.el10
memstrack-0.2.5-6.el10
microcode_ctl-4:20250812-1.el10
mokutil-2:0.7.2-1.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-5.el10
mt7xxx-firmware-20250812-19.el10
nano-8.1-3.el10
ncurses-6.4-14.20240127.el10
ncurses-base-6.4-14.20240127.el10
ncurses-libs-6.4-14.20240127.el10
net-tools-2.0-0.73.20160912git.el10
netavark-2:1.16.0-1.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-2.el10
nftables-1:1.1.1-5.el10
nmap-ncat-4:7.92-3.el10
nmstate-2.2.52-1.el10
npth-1.6-21.el10
nss-altfiles-2.23.0-5.el10
numactl-libs-2.0.19-2.el10
nvidia-gpu-firmware-20250812-19.el10
nvme-cli-2.13-2.el10
nxpwireless-firmware-20250812-19.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.0-1.el10
openldap-2.6.9-1.el10
openshift-clients-4.21.0-202510070153.p2.g229ead6.assembly.stream.el9
openshift-kubelet-4.21.0-202510080354.p2.g00e7ec7.assembly.stream.el9
openssh-9.9p1-14.el10
openssh-clients-9.9p1-14.el10
openssh-server-9.9p1-14.el10
openssl-1:3.5.1-5.el10
openssl-fips-provider-1:3.5.1-5.el10
openssl-libs-1:3.5.1-5.el10
openvswitch-selinux-extra-policy-1.0-36.el10s
openvswitch3.5-3.5.0-6.el10s
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-4.21.0-202509221503.p2.gfa4e6bb.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.21.0-202510011456.p2.g7659e06.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.21.0-202509221503.p2.gb27a2f9.assembly.stream.el9
ostree-2025.6-1.el10
ostree-grub2-2025.6-1.el10
ostree-libs-2025.6-1.el10
p11-kit-0.25.10-1.el10
p11-kit-server-0.25.10-1.el10
p11-kit-trust-0.25.10-1.el10
pam-1.6.1-8.el10
pam-libs-1.6.1-8.el10
passt-0^20250512.g8ec1341-2.el10
passt-selinux-0^20250512.g8ec1341-2.el10
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.el10.3
pcre2-syntax-10.44-1.el10.3
pcsc-lite-2.2.3-2.el10
pcsc-lite-ccid-1.6.0-2.el10
pcsc-lite-libs-2.2.3-2.el10
perl-AutoLoader-5.74-514.el10
perl-B-1.89-514.el10
perl-Carp-1.54-511.el10
perl-Class-Struct-0.68-514.el10
perl-Data-Dumper-2.189-512.el10
perl-Digest-1.20-511.el10
perl-Digest-MD5-2.59-6.el10
perl-DynaLoader-1.56-514.el10
perl-Encode-4:3.21-511.el10
perl-Errno-1.38-514.el10
perl-Exporter-5.78-511.el10
perl-Fcntl-1.18-514.el10
perl-File-Basename-2.86-514.el10
perl-File-Path-2.18-511.el10
perl-File-Temp-1:0.231.100-512.el10
perl-File-stat-1.14-514.el10
perl-FileHandle-2.05-514.el10
perl-Getopt-Long-1:2.58-3.el10
perl-Getopt-Std-1.14-514.el10
perl-HTTP-Tiny-0.088-512.el10
perl-IO-1.55-514.el10
perl-IO-Socket-IP-0.42-512.el10
perl-IO-Socket-SSL-2.085-3.el10
perl-IPC-Open3-1.22-514.el10
perl-MIME-Base64-3.16-511.el10
perl-Mozilla-CA-20231213-5.el10
perl-NDBM_File-1.17-514.el10
perl-Net-SSLeay-1.94-8.el10
perl-POSIX-2.20-514.el10
perl-PathTools-3.91-512.el10
perl-Pod-Escapes-1:1.07-511.el10
perl-Pod-Perldoc-3.28.01-512.el10
perl-Pod-Simple-1:3.45-511.el10
perl-Pod-Usage-4:2.03-511.el10
perl-Scalar-List-Utils-5:1.63-511.el10
perl-SelectSaver-1.02-514.el10
perl-Socket-4:2.038-511.el10
perl-Storable-1:3.32-511.el10
perl-Symbol-1.09-514.el10
perl-Term-ANSIColor-5.01-512.el10
perl-Term-Cap-1.18-511.el10
perl-Text-ParseWords-3.31-511.el10
perl-Text-Tabs+Wrap-2024.001-511.el10
perl-Time-Local-2:1.350-511.el10
perl-URI-5.27-3.el10
perl-base-2.27-514.el10
perl-constant-1.33-512.el10
perl-if-0.61.000-514.el10
perl-interpreter-4:5.40.2-514.el10
perl-libnet-3.15-512.el10
perl-libs-4:5.40.2-514.el10
perl-locale-1.12-514.el10
perl-mro-1.29-514.el10
perl-overload-1.37-514.el10
perl-overloading-0.02-514.el10
perl-parent-1:0.241-512.el10
perl-podlators-1:5.01-511.el10
perl-vars-1.05-514.el10
pigz-2.8-7.el10
pinentry-1.3.1-1.el10
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:5.6.0-2.el10
policycoreutils-3.9-1.el10
policycoreutils-python-utils-3.9-1.el10
polkit-125-4.el10
polkit-libs-125-4.el10
polkit-pkla-compat-0.1-30.el10
popt-1.19-8.el10
procps-ng-4.0.4-8.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python-unversioned-command-3.12.11-3.el10
python3-3.12.11-3.el10
python3-audit-4.0.3-4.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.10-1.el10
python3-dateutil-1:2.9.0.post0-1.el10
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-18.el10
python3-dnf-plugin-versionlock-4.7.0-9.el10
python3-dnf-plugins-core-4.7.0-9.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-12.el10
python3-idna-3.7-4.el10
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-12.el10
python3-librepo-1.18.0-5.el10
python3-libs-3.12.11-3.el10
python3-libselinux-3.9-1.el10
python3-libsemanage-3.9-1.el10
python3-pip-wheel-23.3.2-7.el10
python3-policycoreutils-3.9-1.el10
python3-requests-2.32.4-1.el10
python3-rpm-4.19.1.1-20.el10
python3-setools-4.5.1-5.el10
python3-setuptools-69.0.3-12.el10
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.10-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-2.el10
qemu-guest-agent-18:10.0.0-12.el10
quota-1:4.09-9.el10
quota-nls-1:4.09-9.el10
rdma-core-57.0-2.el10
readline-8.2-11.el10
realtek-firmware-20250812-19.el10
rpcbind-1.2.7-3.el10
rpm-4.19.1.1-20.el10
rpm-build-libs-4.19.1.1-20.el10
rpm-libs-4.19.1.1-20.el10
rpm-ostree-2025.11-1.el10
rpm-ostree-libs-2025.11-1.el10
rpm-plugin-audit-4.19.1.1-20.el10
rpm-plugin-selinux-4.19.1.1-20.el10
rpm-plugin-systemd-inhibit-4.19.1.1-20.el10
rpm-sequoia-1.9.0.3-1.el10
rpm-sign-libs-4.19.1.1-20.el10
rsync-3.4.1-2.el10
samba-client-libs-4.23.0-101.el10
samba-common-4.23.0-101.el10
samba-common-libs-4.23.0-101.el10
sed-4.9-3.el10
selinux-policy-42.1.7-1.el10
selinux-policy-targeted-42.1.7-1.el10
setup-2.14.5-7.el10
sg3_utils-1.48-7.el10
sg3_utils-libs-1.48-7.el10
shadow-utils-2:4.15.0-8.el10
shadow-utils-subid-2:4.15.0-8.el10
shared-mime-info-2.3-8.el10
shim-x64-15.8-5.el10
skopeo-2:1.20.0-1.el10
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-8.el10
sqlite-libs-3.46.1-5.el10
ssh-key-dir-0.1.4-9.el10
sssd-2.11.1-3.el10
sssd-ad-2.11.1-3.el10
sssd-client-2.11.1-3.el10
sssd-common-2.11.1-3.el10
sssd-common-pac-2.11.1-3.el10
sssd-ipa-2.11.1-3.el10
sssd-krb5-2.11.1-3.el10
sssd-krb5-common-2.11.1-3.el10
sssd-ldap-2.11.1-3.el10
sssd-nfs-idmap-2.11.1-3.el10
sssd-proxy-2.11.1-3.el10
stalld-1.20.4-1.el10
strace-6.12-1.el10
subscription-manager-1.30.10-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.15-9.p5.el10
sudo-python-plugin-1.9.15-9.p5.el10
systemd-257-13.el10
systemd-journal-remote-257-13.el10
systemd-libs-257-13.el10
systemd-pam-257-13.el10
systemd-udev-257-13.el10
tar-2:1.35-7.el10
tiwilink-firmware-20250812-19.el10
tmux-3.3a-13.20230918gitb202a2f.el10
toolbox-0.2-2.el10
tpm2-tools-5.7-4.el10
tpm2-tss-4.1.3-5.el10
tpm2-tss-fapi-4.1.3-5.el10
tzdata-2025b-2.el10
unbound-anchor-1.20.0-13.el10
unbound-libs-1.20.0-13.el10
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-13.el10
util-linux-core-2.40.2-13.el10
vim-data-2:9.1.083-5.el10
vim-minimal-2:9.1.083-5.el10
virt-what-1.27-3.el10
which-2.21-44.el10
xfsprogs-6.11.0-2.el10
xkeyboard-config-2.41-3.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10
xz-libs-1:5.6.2-4.el10
zlib-ng-compat-2.2.3-2.el10
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

cri-o 1.33.4-1.el10s → 1.34.0-1.el10s
cri-tools 1.33.0-2.el10s → 1.34.0-2.el10s
openshift-clients 4.20.0-202509051528.p2.ga434281.assembly.stream.el9 → 4.21.0-202510070153.p2.g229ead6.assembly.stream.el9
openshift-kubelet 4.20.0-202509232257.p2.ge0d4216.assembly.stream.el9 → 4.21.0-202510080354.p2.g00e7ec7.assembly.stream.el9
ose-aws-ecr-image-credential-provider 4.20.0-202509051528.p2.gbb88da1.assembly.stream.el9 → 4.21.0-202509221503.p2.gfa4e6bb.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.20.0-202509051528.p2.gd469d04.assembly.stream.el9 → 4.21.0-202510011456.p2.g7659e06.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.20.0-202509051528.p2.gf940e72.assembly.stream.el9 → 4.21.0-202509221503.p2.gb27a2f9.assembly.stream.el9

Extensions

Full list (48 packages)

NetworkManager-libreswan-1.2.27-1.el10.x86_64
bison-3.8.2-9.el10.x86_64
cmake-filesystem-3.31.8-1.el10.x86_64
cpp-14.3.1-2.1.el10.x86_64
elfutils-libelf-devel-0.193-1.el10.x86_64
flex-2.6.4-19.el10.x86_64
gcc-14.3.1-2.1.el10.x86_64
glibc-devel-2.39-69.el10.x86_64
kernel-6.12.0-136.el10.x86_64
kernel-core-6.12.0-136.el10.x86_64
kernel-devel-6.12.0-136.el10.x86_64
kernel-headers-6.12.0-136.el10.x86_64
kernel-modules-6.12.0-136.el10.x86_64
kernel-modules-extra-6.12.0-136.el10.x86_64
kernel-rt-core-6.12.0-136.el10.x86_64
kernel-rt-devel-6.12.0-136.el10.x86_64
kernel-rt-modules-6.12.0-136.el10.x86_64
kernel-rt-modules-core-6.12.0-136.el10.x86_64
kernel-rt-modules-extra-6.12.0-136.el10.x86_64
krb5-pkinit-1.21.3-8.el10.x86_64
krb5-workstation-1.21.3-8.el10.x86_64
ldns-1.8.3-18.el10.x86_64
libkadm5-1.21.3-8.el10.x86_64
libmpc-1.3.1-7.el10.x86_64
libqb-2.0.8-6.el10.x86_64
libreswan-5.3-1.el10.x86_64
libxcrypt-devel-4.4.36-10.el10.x86_64
libzstd-devel-1.5.5-9.el10.x86_64
lm_sensors-libs-3.6.0-20.el10.x86_64
m4-1.4.19-11.el10.x86_64
make-1:4.4.1-9.el10.x86_64
nspr-4.36.0-4.el10.x86_64
nss-3.112.0-4.el10.x86_64
nss-softokn-3.112.0-4.el10.x86_64
nss-softokn-freebl-3.112.0-4.el10.x86_64
nss-sysinit-3.112.0-4.el10.x86_64
nss-tools-3.112.0-4.el10.x86_64
nss-util-3.112.0-4.el10.x86_64
openssl-devel-1:3.5.1-5.el10.x86_64
openvswitch3.5-ipsec-3.5.0-6.el10s.x86_64
pcp-conf-6.3.7-5.el10.x86_64
pcp-libs-6.3.7-5.el10.x86_64
protobuf-3.19.6-11.el10.x86_64
python3-openvswitch3.5-3.5.0-6.el10s.x86_64
sysstat-12.7.6-2.el10.x86_64
usbguard-1.1.3-6.el10.x86_64
usbguard-selinux-1.1.3-6.el10.noarch
zlib-ng-compat-devel-2.2.3-2.el10.x86_64

CentOS Stream CoreOS base layer: 10.0.20251003-0

View changelog in Markdown or change previous release:

Source code for this page located on github