Back to index

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:4.22.0-0.okd-scos-nightly-2026-03-20-181254

Team Approvals:

Tests:

• Blocking jobs
  • aws Pending (1 retry) periodic-ci-openshift-release-main-okd-scos-4.22-e2e-aws-ovn

    • Attempt 1 Failed
    • Attempt 2 Pending
• Informing jobs
  • agent-single-node-ipv6 Failed periodic-ci-openshift-release-main-okd-scos-4.22-e2e-agent-single-node-ipv6
  • aws-ovn-techpreview Pending (2 retries) periodic-ci-openshift-release-main-okd-scos-4.22-e2e-aws-ovn-techpreview

    • Attempt 1 Failed
    • Attempt 2 Failed
    • Attempt 3 Pending
  • aws-upgrade Pending (1 retry) periodic-ci-openshift-release-main-okd-scos-4.22-e2e-aws-ovn-upgrade

    • Attempt 1 Failed
    • Attempt 2 Pending
  • aws-upgrade-minor Failed periodic-ci-openshift-release-main-okd-scos-4.22-upgrade-from-okd-scos-4.21-e2e-aws-ovn-upgrade
  • gcp Failed periodic-ci-openshift-release-main-okd-scos-4.22-e2e-gcp
  • vsphere Failed periodic-ci-openshift-release-main-okd-scos-4.22-e2e-vsphere-ovn

Upgrades from:

• 4.22.0-0.okd-scos-nightly-2026-03-13-092255 - Failed Pending
• 4.21.0-0.okd-scos-2026-03-20-014003 (changes) - Failed

---

Loading changelog, this may take a while ...

Changes from 4.22.0-0.okd-scos-nightly-2026-03-13-092255

Created: 2026-03-20 18:13:16 +0000 UTC

Image Digest: sha256:74c3221f387d446348e6848631291f527cacc0826656c6c20982540fb2c0ba63

Components

• Kubectl upgraded from 1.34.1 to 1.35.2
• Kubernetes upgraded from 1.35.1 to 1.35.2
• Kubernetes Tests 1.34.1
• CentOS Stream CoreOS 10 10.0.20260310-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
MachineConfigNodes (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PinnedImages (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NewOLMOwnSingleNamespace (0 tests)	Disabled	Disabled (Changed)	Disabled	Enabled	Disabled	Disabled (Changed)	Disabled	Enabled
AWSEuropeanSovereignCloudInstall (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
NewOLMConfigAPI (0 tests)				Enabled (New)				Enabled (New)
NoOverlayMode (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
TLSAdherence (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)

Rebuilt images without code change

• agent-installer-csr-approver git c3de3904 sha256:40cefc66e55010c6fbde0ec4b2efad8569c296132409c429b550d8aa6cf24745
• agent-installer-node-agent git dd12f4a8 sha256:bc444862b2bf8baff1cf71a217985ba2022738775952143b8552674183726f00
• agent-installer-orchestrator git c3de3904 sha256:b7c97ea68678b8f3e35f8111501878cb246674b983e94817cf22e5473f4a9b0d
• aws-cluster-api-controllers git 2d7aa679 sha256:b89f358b2dc82ac9851a4b313c290ef4e7a0f3a950b300ff409f5b92e2aac5cd
• azure-cluster-api-controllers git 104ebbd2 sha256:7bdfd15e9dfd79797198da1b9554181502d0fbc97289d508dcc51a9fed2ff76d
• azure-disk-csi-driver git 950b1622 sha256:4fc75cf11ca8c6dbe7ea373b1140fa1dec716bde4a9483dd2a1abcf69832a84b
• azure-file-csi-driver git c481e92b sha256:0de86f2d1082b4b1d03fa37fdfb9c01fb3683e7269a6ff9fe8302afe9b517e8c
• azure-service-operator git 17e57462 sha256:c9f1426849d47bc09432150cf3450474f1e184e38db04d75afd62200cb66ca07
• azure-workload-identity-webhook git d71abde3 sha256:2a92b2ced928ebb5b890d27ee0933faa079a57388837a2e723dc588ec7878e0b
• baremetal-cluster-api-controllers git ad4eb8a5 sha256:186cbc9095290c20d60663c2c265ad3548042614c37dea55120b32e34536b00b
• cluster-capi-controllers git 54cf5acd sha256:fea242db59ead82aed54ce5cc40f154c3e0601556b2d87c49f40171e98744c40
• cluster-cloud-controller-manager-operator git b1082464 sha256:8bf1ac2402574d5c3fb7cea16b32bdcc913b614abbcd4fc5332c31efe58357c8
• cluster-openshift-controller-manager-operator git 8e04fd3a sha256:de2272ce7ff3cbef709970faa9a1262aef600c0e6dcff698360e06d38a1c4403
• container-networking-plugins git 747ad66c sha256:9b354f2e9be6bd3caa73ca3cf16db3eba0023e9a29092a65fe110104ba4c5c9a
• coredns git 0dded2d2 sha256:47731d57e262ab91e59a24fa1dba4f995f847ad2bf5107b8dbd415a2ac93ac11
• csi-driver-nfs git e9f24940 sha256:8bb437d8e3e4546cb234840aecca4de003ee614cda4af09cb49a95adef37b609
• docker-builder git 711f2e68 sha256:80eb56456489e6a83e8d999a59fcf63fb5542e68a882b070cc8008b8ef2648d9
• egress-router-cni git 5e0f8d1b sha256:33890aeac2bca57e7a6a4a052caf3205e537bafa417ada84e932e0cba0b2a996
• etcd git d8d67b8c sha256:4942fb2b252ddcb27a91e2c4540de93b9e762ca792d1738958130ecadffd0d8c
• gcp-cluster-api-controllers git 37085d52 sha256:e9366a80a628be3a8b4c59c6a72b884afcde054250b4524c1fdb5aa6b2465143
• ibm-cloud-controller-manager git d9222a1c sha256:692ec0da2badf6c28c3c1b04f2ca9a0eacedbb869d68b7386498accce16d68e9
• ibm-vpc-block-csi-driver-operator git fcb38608 sha256:42684dacce87db197cfaf6b58c8fccbc747ea20127295e3b3bf7304247527874
• ironic-agent git 0336e638 sha256:17385b04799e448e7940a7f504f9ebbdcb1c251457755062a2b0af5519722ad8
• kube-state-metrics git 6fa06eac sha256:dc0cd463c718eb5eb3f040e6282750da04574ce8e9581f04b9b1df4da4985e91
• kubevirt-csi-driver git 9e2dbddf sha256:a54d2fab6a3fb8eb5e782f3f4fc0390b1c4b8fb299d2628142df33b942dcd0b3
• machine-os-images git d819e02d sha256:5486370048cc3874e09d2a209fb185409f15037a86c98ed3a3770bcd5720ab30
• multus-cni git 0d343fe1 sha256:033b7dc8fc82388648d382010ffd2b61f231efff5ebdb216fe15eab3ac032a92
• multus-route-override-cni git 08af4127 sha256:61c392719df58240132494181c878ff95788d8d164007e3ef3a7a811a1c06cf7
• multus-whereabouts-ipam-cni git d691040e sha256:409721a39933aa72400f2491901320a9af1f94aa859c4a86bffef7c978caf942
• network-interface-bond-cni git 297eeb43 sha256:d33ecbffa0b7724d562c03b3985e7790e8d47bbcc047169039b2062e56a0d6a1
• network-tools git a6bcd3cd sha256:1db1bb39434e11e0bbfd9e59c2c36b4b410906255beaa3ffce229747f14863e8
• openshift-apiserver git 56aa2d96 sha256:92404f7697fd731862d6f6caa9eeafc477b4875f6da9d32d8dd985b47befd2bc
• openshift-controller-manager git 26d20fea sha256:33935b0202fff90b9732362b39b25ca1ccf1e85d571ef69524c0906db9347c2f
• ovn-kubernetes git eedfcd07 sha256:202e5925f5031ba909db1cc0200374ce705e0e72160cbbc62659263fc51b4745
• ovn-kubernetes-microshift git eedfcd07 sha256:94823b661bde3bddec90a2f9521c80270dc8ebda7b6397aeecf1d49d6238b8fa
• prometheus git 9b96528f sha256:c01138b81836bf358cee1101dbf16d5af04842e8f4be7d0fe38b850d3d1e1b8a
• vsphere-cluster-api-controllers git f12e5051 sha256:8b889f78e31a104e63e45bfa1e8b6e6d08016126aba2c7d095ddb583dfa10c83
• vsphere-csi-driver git e5c5c1ea sha256:cab32fd2f2b2364dd175b4301a43631a342881c71c7c00cae6969d9a7448b35d
• vsphere-csi-driver-syncer git e5c5c1ea sha256:fe30f7d8a3e5cd4d82e64436dc2dc435f2d3c43cdafdd922be937962b5777098

agent-installer-api-server

• MGMT-23432: add third parties CNI support to KUBE API mode #10015
• NO-ISSUE: [master] Bump OCP versions: 4.21 #10023
• NO-ISSUE: Add Go workspace files to .gitignore #10000
• Full changelog

agent-installer-ui

• fix(deps): update dependency @patternfly/react-table to v6.4.1 (#3440) #3440
• chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.7.54 (#3406) #3406
• chore(deps): update dependency @sentry/browser to v7.120.4 (#3443) #3443
• chore(deps): update dependency eslint to v8.57.1 (#3432) #3432
• chore(deps): update dependency axios to v1.13.6 (#3431) #3431
• chore(deps): update dependency @types/node to v18.19.130 (#3429) #3429
• chore(deps): update dependency @types/lodash to v4.17.24 (#3428) #3428
• Bump ajv from 6.12.6 to 6.14.0 (#3411) #3411
• chore(deps): update dependency prettier to v2.8.8 (#3436) #3436
• chore(deps): update dependency msw to v1.3.5 (#3434) #3434
• chore(deps): update dependency eslint-config-prettier to v8.10.2 (#3433) #3433
• chore(deps): update dependency @types/react-redux to v7.1.34 (#3430) #3430
• chore(deps): update dependency @types/eslint to v8.56.12 (#3427) #3427
• chore(deps): update dependency @tsconfig/recommended to v1.0.13 (#3426) #3426
• Bump flatted from 3.3.1 to 3.4.2 (#3469) #3469
• fix validations for NTP and Proxy in above sea level ABI flow (#3464) #3464
• Add identifiers and checked state attribute to custom manifests switch (#3466) #3466
• MGMT-23516: Left navigation menu is cut off (#3463) #3463
• UI doesnt save the data filled by the user (#3452) #3452
• fix ISO file name (#3462) #3462
• Tech Preview badge should appear at the end of the line (#3461) #3461
• AGENT-1136: Add USER_AUTH_TOKEN support to disconnected UI proxy (#3454) #3454
• Bump rollup from 4.50.1 to 4.59.0 (#3421) #3421
• Bump immutable from 3.8.2 to 3.8.3 (#3451) #3451
• MGMT-23131: Third-Party CNI Support (#3457) #3457
• Fix CVE-2026-27904: Bumping minimatch to latest versions via yarn resolutions (#3459) #3459
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-69888, OCPBUGS-76344, OCPCLOUD-3276: Merge https://github.com/kubernetes/cloud-provider-aws:master (ea961d6) into main #131
• Full changelog

aws-ebs-csi-driver

• TRT-2576: Revert #301 “STOR-2766: Rebase to upstream v1.55.0 for OCP 4.22” #303
• STOR-2766: Rebase to upstream v1.55.0 for OCP 4.22 #301
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• STOR-2884: Add service to generate a TLS cert for EFS operator #522
• STOR-2884: Add service to generate a TLS cert for SMB operator #520
• NO-JIRA: Inherit any OpenShift global CodeRabbit setting #519
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPCLOUD-3281: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (314ccf1) into main #155
• Full changelog

baremetal-installer, installer, installer-artifacts

• CORS-4336: Support for AWS European Sovereign Cloud #10303
• OCPBUGS-74390: Allow all instance types in the install config for GCP #10271
• no-jira: fix SC2328 shellcheck errors #10413
• AGENT-1458: Don’t auto-calculate RendezvousIP in unconfigured-ignition #10405
• CORS-4358: aws: add ICMPv6 ingress rule for dual-stack clusters #10408
• CORS-4235: Machine Management API Field & Feature Gate #10402
• no-jira: bump golangci-lint to v2.10.1 for Go 1.25 support #10397
• OCPBUGS-57603: Disallow cross subscription encryption sets #10335
• OCPBUGS-64842: Disable LoadBalancer in cloud config when Octavia is unavailable #10326
• CORS-4288: docs(azure): Restructure tested VM families with Series-based organization #10314
• CORS-4072: dualstack support for AWS #10353
• CORS-4355: define required permissions for dualstack install #10371
• CORS-3897: Dual stack support for cluster manifest & VNet #10319
• CORS-4078: aws: standardize AWS client setup in the destroy code #10340
• OCPBUGS-75250: Use correct Project ID with GCP Shared VPC #10297
• METAL-1668: simplify BMC CA assets #10243
• METAL-1750: baremetal: use q35 machine type with EFI firmware for bootstrap VM #10349
• OCPEDGE-2383: feat: update sno minimum to 4vcpu #10283
• CNTRLPLANE-2847: bump Go 1.25, openshift/api, and k8s.io dependencies #10376
• Full changelog

baremetal-machine-controllers

• OCPCLOUD-3346: Bump deps + Add centralized TLS configuration to Metal3Remediation webhook server #248
• Full changelog

baremetal-operator

• METAL-1720: Merge upstream #467
• Full changelog

cli, deployer, tools

• OCPBUGS-78701: adm policy add-role-to-user: Fix –dry-run=server #2231
• OCPBUGS-77845: Update release extract inclusion to support feature gates and major version #2222
• NO-ISSUE: pkg/cli/admin/release/extract: Read manifests into memory #2232
• NO-JIRA: Add .coderabbit.yaml and AGENTS.md configurations #2229
• CNTRLPLANE-2769: Bump k8s dependencies to 1.35 #2219
• NO-JIRA:Fixing manifest ci failure #2228
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

cli-artifacts

• OCPBUGS-78701: adm policy add-role-to-user: Fix –dry-run=server #2231
• OCPBUGS-77845: Update release extract inclusion to support feature gates and major version #2222
• NO-ISSUE: pkg/cli/admin/release/extract: Read manifests into memory #2232
• NO-JIRA: Add .coderabbit.yaml and AGENTS.md configurations #2229
• CNTRLPLANE-2769: Bump k8s dependencies to 1.35 #2219
• NO-JIRA:Fixing manifest ci failure #2228
• OCPBUGS-64840: image extract: Use Explicit strategy for ICSP/IDMS #2202
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

cloud-credential-operator

• OCPBUGS-74627: Fix infrastructure resource name filtering in watch predicate #985
• CCO-688: test-ext: enable test-extension cases for CI #984
• CCO-788: test-ext: Update extend tests to adapt to CCO-788 #981
• Full changelog

cluster-authentication-operator

• CNTRLPLANE-2996: dependencies: k8s 1.35 rebase #853
• CNTRLPLANE-2552: Add support for CEL expression claim mappings for username and groups #850
• MON-4473: Migrate Prometheus targets discovering from Endpoints to EndpointsSlices #823
• Full changelog

cluster-autoscaler

• OCPBUGS-78152: allow clusterapi provider to skip paused resources #409
• Full changelog

cluster-baremetal-operator

• METAL-1714: Populate complete SANs in Ironic TLS certificate #569
• OCPBUGS-69399: Allow ProvisioningCIDR for unmanaged network #553
• Full changelog

cluster-capi-operator

• OCPCLOUD-3290: Dependency bumps for release 4.22 #491
• OCPCLOUD-3184: Implement object schema pruning for compatibility requirements #464
• OCPCLOUD-3350: Revision controller #469
• Full changelog

cluster-config-api

• OPRUN-4513: Move OLMv1 Single/Own Namespace support back to TP #2766
• CORENET-6390: API changes and feature gate for OVN-Kubernetes no-overlay mode #2537
• OPRUN-4466: Add NewOLMConfigAPI feature gate #2756
• Add TLS adherence feature gate #2680
• TRT-2518: Add variant OS and JobTier to promotion check #2763
• MCO-2142: Avoid OSImageStream defaultStream unset #2764
• OCPBUGS-74513: OCPBUGS-74519: OCPBUGS-78487: Remove MachineConfigNodes and PinnedImages feature gates and v1alpha1 references #2715
• CORS-4348: feature gate for EU Sovereign Cloud support #2740
• NO-ISSUE: config/v1alpha1: Drop (Cluster)ImagePolicy since the hard cut to v1 #2760
• Full changelog

cluster-config-operator

• OCPSTRAT-2876: Teach config operator to filter feature gate manifests by major version inclusion #459
• Full changelog

cluster-control-plane-machine-set-operator

• OCPCLOUD-3284: Bump to k8s 1.35 and associated deps. #397
• Full changelog

cluster-dns-operator

• NE-2500: Added network policies for DNS #468
• OCPBUGS-62178: Dynamically set kube-rbac-proxy TLS args #466
• OCPBUGS-14346: Fix when DNS operator reports Degraded #373
• Full changelog

cluster-etcd-operator

• OCPBUGS-78930: add tnf jobs to network policy exceptions #1574
• ETCD-557: Add e2e Network policy test cases #1543
• Revert “OCPBUGS-77947: fix(tnf): do not block on stable revision after external etcd transition” #1572
• OCPBUGS-74679: fix: tweaking kubelet resource config to allow automatic fencing recovery #1561
• OCPBUGS-70050: Updating cluster-etcd-operator-container image to be consistent with ART for 4.22 #1569
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-image-registry-operator

• IR-350: make metrics server tls configuration file-based #1297
• Full changelog

cluster-ingress-operator

• NE-2471: Replace OLM-based Istio install with Sail Library #1354
• NE-2501: Add RBAC to allow operator to manage network policies #1389
• OCPBUGS-78555: Increase Gateway E2E timeout to 5 minutes #1390
• NE-2131: tests-extension: Append suite names to OTE test specs to preserve original test names #1387
• NE-2418: Add e2e test for haproxy_max_connections metric #1361
• NE-2183: Implement GatewayAPI status controller #1294
• NE-2131: tests-extension: restore test names and remove metadata tracking #1379
• Full changelog

cluster-kube-apiserver-operator

• CNTRLPLANE-2622: config tls on check-endpoints container #2058
• OCPBUGS-46086: Always set service-account-jwks-uri to LB URL even with custom issuer #1919
• OCPBUGS-78146: move event-ttl test to its own suite #2069
• Full changelog

cluster-monitoring-operator

• NO-JIRA: [bot] Synchronize versions of the downstream components #2851
• NO-JIRA: add unit tests for admission webhook’s TLS configuration #2850
• MON-4479: use TLS profile to configure CMO server #2841
• NO-JIRA: [bot] Synchronize versions of the downstream components #2849
• MON-4535: Add .coderabbit.yaml to reduce review noise #2845
• NO-JIRA: [bot] Synchronize versions of the downstream components #2847
• OCPBUGS-48578: chore(metrics-server): prefer control-plane nodes and tolerate their taints #2801
• OCPBUGS-78221: fix return value format #2846
• Full changelog

cluster-network-operator

• OCPBUGS-77015: wait for patch port to apply drop garp flows #2910
• OCPBUGS-70016: Updating cluster-network-operator-container image to be consistent with ART for 4.22 #2863
• OCPBUGS-65633: add network-check-target + networking-console-plugin service accounts #2868
• CORENET-6871: Handle zero-worker HyperShift clusters in daemonset rollout #2897
• Full changelog

cluster-node-tuning-operator

• CNF-18941: e2e: PP: cover ExecCPUAffinity support in tests #1432
• CNF-20404: DRA: disable Kubelet resources and topology managers #1445
• OCPBUGS-78470: e2e: fixed flaky test_id:32646 CPU load balancing on cgroupv1 #1457
• PSAP-2229: Prevent multiple reboots via MachineConfig creation/update sync #1474
• Full changelog

cluster-olm-operator

• OPRUN-4502: Add feature-gate for DeploymentConfig #176
• Full changelog

cluster-openshift-apiserver-operator

• NO-JIRA: OWNERS: remove engineers who have left Red Hat #646
• NO-JIRA: Disable WatchList feature gate due to the missing support of Project watch #667
• Full changelog

cluster-storage-operator

• OCPBUGS-78291: Allow azure-disk operator to read VolumeAttributeClasses #683
• MON-4509: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #665
• MON-4496: metrics: migrate Prometheus SD from Endpoints to EndpointSlices #668
• NO-JIRA: Add a comment to sync AWS EBS IAM role into HyperShift #676
• Full changelog

cluster-version-operator

• TRT-2581: Revert “NO-ISSUE: OTA-1605 Automate OCP-42543” #1353
• NO-ISSUE: OTA-1605 Automate OCP-42543 #1309
• CNTRLPLANE-2777: refactor(lib/resourcebuilder): generate interface for client instead of their specific types #1344
• OTA-1546: Evaluate conditional updates if accept risks change #1348
• OTA-1546: Skip an accept-risk case on network-restricted environment #1332
• NO-ISSUE: Update fake clientsets to NewClientset #1340
• TRT-2569: (fix) hypershift-e2e-aks and hypershift-e2e-aws failing with CVO bootstrap deadlock in ci amd64 payload #1342
• Full changelog

console

• NO-JIRA: Update demo plugin README #16166
• CONSOLE-5093: Remove support for deprecated extensions #16043
• CONSOLE-4447: Remove deprecated modal components and CSS #16126
• CONSOLE-5018: Refactor UNSAFE_ class components to FC #16062
• CONSOLE-5129: Theme context cleanup #16155
• OCPBUGS-78390: Reset pagination page when changing namespace #16138
• OCPBUGS-78253: Fix InstallPlan > Components layout issue #16127
• CONSOLE-4447: Migrate @console/shared modals to PatternFly v6 Modal components #16079
• NO-JIRA: Remove cursor context #16106
• CONSOLE-5087: Refactor console-shared-package from Firehose to useK8sWatchResource #16077
• CONSOLE-4447: Migrate modal hooks from useModal to useOverlay #16061
• CONSOLE-5114: Clean up React Router imports and dependencies #16139
• OCPBUGS-78499: Fix curly quote in operator-hub-community-provider-modal #16145
• NO-JIRA: Update PageHeading types #16095
• NO-JIRA: Add a progress bar when building #16099
• CONSOLE-4447: Migrate knative-plugin modals to PatternFly 6 #16065
• OCPBUGS-78404: Fix flaky secret integration tests #16140
• CONSOLE-4447: Migrate core modals to PatternFly 6 Modal components (part 2) #16123
• CONSOLE-4439: Upgrade to React Router 7 #14957
• OCPBUGS-78361: Fix flaky popover-status-button integration test #16135
• CONSOLE-4447: Migrate core modals to PatternFly v6 modal components (part 1) #16100
• And 5 elided commits (e.g. from squash or rebase merges)
• Full changelog

console-operator

• Sync Dockerfile.ocp image #1127
• Full changelog

gcp-pd-csi-driver

• STOR-2751: Rebase to upstream v1.24.1 for OCP 4.22 #98
• Full changelog

haproxy-router

• OCPBUGS-62238: configure TLS profile for metrics endpoint #748
• NO-JIRA: Do not install weak dependencies such as logrotate #687
• NE-2418: Add haproxy_max_connections metric #728
• OCPBUGS-75009: sort list of map entries on DCM #738
• Full changelog

hyperkube, kube-proxy, pod

• UPSTREAM: <carry>: OCPBUGS-39360: Fix ClusterIsIPv6() detection for dual-stack v6-primary clusters #2603
• NO-JIRA: UPSTREAM: <carry>: Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS #2630
• OCPBUGS-77866: Bump 1.35.2 to master #2612
• Full changelog

hypershift

• OCPBUGS-78778: fix(cpo): Don’t remove HCP Ingress from routes when CapabilityRoute is disabled #8001
• NO-JIRA: Disable parent ownership for api subdir #8009
• NO-JIRA: fix(api): replace CEL url() validators with regex to fix CRD cost budget #8004
• OCPBUGS-78544: Update base images to address multiple CVEs flagged by MSFT security scans #7983
• OCPBUGS-78705: Bootstrap CVO manifests should be filtered based on feature-set annotation #7984
• NO-JIRA: fix(api): extend kubeapilinter scope to all non-vendor API types #8002
• NO-JIRA: build(e2e): include hypershift binary in Dockerfile.e2e #7919
• CNTRLPLANE-2925: add NodePool.Status.NodesInfo for node version distribution #7917
• OCPSTRAT-2336: Adjust karpenter API to OpenShift conventions #7952
• OCPBUGS-78539: chore(e2e): add temporary crash toleration for dns-operator #7978
• CNTRLPLANE-2172: fix(e2e): register Azure private platform e2e flags #7977
• NO-JIRA: chore(owners): require api-approvers approval for api/ changes #7972
• Update Kube API Linter config for new APIs #7982
• NO-JIRA: add .gitattributes to collapse generated files in PR diffs #7918
• CNTRLPLANE-2910: feat(cpo): add Azure workload identity webhook as KAS sidecar #7867
• CNTRLPLANE-2077: refactor(cleanzones): migrate AWS SDK from v1 to v2 #7960
• CNTRLPLANE-2219: feat(aws): migrate ec2 to AWS SDK v2 #7871
• GCP-440: Fix GCP boot image discovery from CoreOS stream metadata #7881
• NO-JIRA: fix(oadp): correct Agent platform API group in backup/restore resources #7974
• OCPBUGS-78356: fix(sharedingress): coalesce HAProxy reloads to prevent reload storms #7945
• CNTRLPLANE-2172: fix(operator): accept Azure as valid private-platform value #7968
• NO-JIRA: Rename cilium directory to v1.15.1 #7888
• OCPBUGS-70354: add serviceAccount to global-pull-secret-syncer #7439
• NO-JIRA: feat(e2e): add OIDC IAM fix and NodePool validation to backup/restore #7837
• CNTRLPLANE-2172: feat(install): register Azure private platform flags #7912
• CNTRLPLANE-2978: Add Azure CPO override for OCP 4.20 #7955
• OCPBUGS-65687: fix(cpo): prevent informer creation for inaccessible resource types #7819
• GCP-441: correct CCM crash toleration key to match pod label #7926
• CNTRLPLANE-2916: conditionally create openshift-ingress network policy based on route labeling #7872
• NO-JIRA: chore: add .git/ to .dockerignore #7944
• NO-JIRA: fix(test): add aws-node-termination-handler to safe-evict audited list #7816
• NO-JIRA: test(scheduler): add pair loss recovery unit coverage #7848
• OCPBUGS-67262: fix(e2e): Use NodePool replicas as authoritative source for expected node count instead of CountAvailableNodes #7378
• OCPBUGS-77160: include NMStateConfig in Agent platform OADP backup resources #7847
• AUTOSCALE-571: fix(karpenter): select existing private subnets for default OpenshiftEC2NodeClass #7933
• OCPBUGS-78198: fix(catalogs): update catalog image version cap to 4.21 #7915
• OCPBUGS-78184: fix(hostedcluster): Remove referenced resource annotations regardless of hcp status #7913
• CNTRLPLANE-2203: reintroduce ControlPlaneConnectionAvailable condition with conformance fix #7746
• OCPBUGS-78185: Fix deadlock when changing release image during initial provisioning #7910
• CNTRLPLANE-634: Make external-dns interval and AWS zones cache duration configurable #7931
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

ibmcloud-cluster-api-controllers

• OCPCLOUD-3296: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.13.1 (93d5b50) into main #142
• Full changelog

insights-operator

• CCXDEV-16006: add permission for opentelemetrycollectors #1252
• OCPBUGS-78115: Fix string accessor error #1253
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• Update OWNERS to remove ‘tremes’ #67
• Full changelog

machine-api-operator

• OCPCLOUD-3282, OCPCLOUD-3288: Bump to k8s 1.35 dependencies #1474
• NO-JIRA: fix flaky TestReconcile/machine_with_node_likely_to_go_unhealthy#1483 #1483
• SPLAT-2680: Fixed MAO to not allow dedicated host configurations for control plane nodes #1477
• Full changelog

monitoring-plugin

• OCPBUGS-77113: feat: re enable dev console views #831
• NO-JIRA: Incident Detection Tests Stabilization #854
• NO-JIRA: switch to core platform page before test case run #837
• NO-JIRA: Refactor cypress setup and operator commands #788
• NO-JIRA: Add test configuration scenarios overview #745
• Full changelog

must-gather

• RFE-8344: Add Node Feature Discovery Operator collection script #508
• RFE-8932: Included object size with the object count #527
• Full changelog

networking-console-plugin

• OCPBUGS-78542: Remove useHistory and replace with useNavigate #364
• Full changelog

nutanix-cloud-controller-manager

• OCPCLOUD-3272: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (9c374cb) into main #54
• Full changelog

oc-mirror

• NO-JIRA: Fix build on non-Linux platforms by extracting SysProcAttr into platform-specific files (#1365) #1365
• Full changelog

olm-catalogd, olm-operator-controller

• OPRUN-4509: Synchronize From Upstream Repositories #669
• NO-ISSUE: Synchronize From Upstream Repositories #667
• NO-ISSUE: Synchronize From Upstream Repositories #665
• NO-ISSUE: Synchronize From Upstream Repositories #663
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPQE-31468: verify images command log pollution #1262
• OCPBUGS-78557: Re-Apply Fix admin context race condition in parallel tests #1259
• OPRUN-4415: automate OCP-87188: Central TLS Profile Consistency #1207
• TRT-2580: Revert “OCPBUGS-78557: Fix admin context race condition in parallel tests” #1258
• OCPQE-31804: Fix admin context race condition in parallel tests #1256
• NO-ISSUE: Synchronize From Upstream Repositories #1255
• Full changelog

powervs-block-csi-driver

• OCPBUGS-77586: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.22 #115
• MULTIARCH-6015: Rebase ibm-powervs-block-csi-driver with upstream #116
• OCPBUGS-77586: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.22 #118
• MULTIARCH-6016: Upgrade golangci-lint version to support go1.25 #117
• Full changelog

powervs-machine-controllers

• NO-JIRA: Add damdo to approvers list in OWNERS file #141
• OCPBUGS-77745: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.22 #139
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• MON-4542: bump v0.90.0 #377
• NO-JIRA: Update v0.89.0 #374
• Full changelog

service-ca-operator

• CNTRLPLANE-3035: test/e2e: migrate mutatingwebhook-ca-bundle-injection to OTE serial suite #335
• CNTRLPLANE-3034: test/e2e: migrate crd-ca-bundle-injection to OTE serial suite #334
• CNTRLPLANE-3033: test/e2e: migrate apiservice-ca-bundle-injection to OTE serial suite #332
• CNTRLPLANE-3015: test/e2e: restore operator config after forced rotation #331
• CNTRLPLANE-3009: test/e2e: migrate forced-ca-rotation to OTE serial-disruptive suite #330
• CNTRLPLANE-3000: test/e2e: migrate time-based-ca-rotation test for OTE compatibility #308
• NO-JIRA: bump Go to 1.25 and update dependencies #328
• CNTRLPLANE-2549: test/e2e: add control plane stabilization wait after CA rotation #325
• CNTRLPLANE-2549: test/e2e: migrate refresh-CA test for OTE compatibility #306
• Full changelog

tests

• OCPEDGE-2381: Verify etc pod should start with oom_score_adj as system-node-critical #30867
• NO-JIRA: remove test exception for Insights operator #30849
• NE-2292: Skip OLM tests when GatewayAPIWithoutOLM enabled #30896
• NO-JIRA: Remove TNF node replacement test #30901
• OCPBUGS-78384: changed http to https for three places to reduce test false positives and false negatives #30872
• CNTRLPLANE-2999: Revert PR #30746: TLS 1.3 test causing instability in 4.22 #30895
• NO-JIRA: Add a singleton instance for list of nodes #30830
• OCPNODE-3932: Add automated tests for non-CNV swap configuration #30807
• OCPBUGS-78016: Fix double counting of pod restart events #30862
• CNTRLPLANE-2449: test(sig-builds][Feature:Builds]): ignore watchapi.Bookmark as they are synthetic and used only for signaling sync completion #30885
• OCPBUGS-77281: Add exception for GCE CSI driver images #30870
• OCPBUGS-77002: Remove temporarily skip of MCO tests creating custom MCPs in RHEL10 suites #30845
• CNTRLPLANE-2549: monitortests: treat Thanos collection failure as flake in disruptive suites #30877
• OCPBUGS-76334: Add TLS 1.3 (Modern profile) support to TestTLSDefaults #30746
• OCPNODE-4093: Update readme to include long running test information #30791
• OCPBUGS-48186: Add kubelet and CRI-O panic detection invariant test #30243
• OCPBUGS-38666, OCPBUGS-38750, OCPBUGS-62623: Remove DNS test exceptions #30865
• OCPBUGS-77991: suppress podman build - URLs #30851
• SPLAT-2672: ote/ccm-aws removing binary while migrating to CCCMO #30869
• OCPBUGS-8933: run resource request/limit check early #30874
• Full changelog

thanos

• NO-JIRA: Bump to v0.41.0 #173
• Full changelog

vsphere-csi-driver-operator

• STOR-2882: add feature gate for checking platform type is vsphere #331
• Full changelog

---

View changelog in Markdown or change previous release: 4.22.0-0.okd-scos-nightly-2026-03-20-0422044.22.0-0.okd-scos-nightly-2026-03-19-1622044.22.0-0.okd-scos-nightly-2026-03-19-0422044.22.0-0.okd-scos-nightly-2026-03-18-1524164.22.0-0.okd-scos-nightly-2026-03-18-0324164.22.0-0.okd-scos-nightly-2026-03-13-0922554.22.0-0.okd-scos-nightly-2026-03-12-2122554.22.0-0.okd-scos-nightly-2026-03-12-0922554.22.0-0.okd-scos-nightly-2026-03-11-1650104.22.0-0.okd-scos-nightly-2026-03-11-045010───5.0.0-0.okd-scos-nightly-2026-03-20-1715015.0.0-0.okd-scos-nightly-2026-03-20-0515015.0.0-0.okd-scos-nightly-2026-03-19-1616475.0.0-0.okd-scos-nightly-2026-03-18-1616215.0.0-0.okd-scos-nightly-2026-03-18-041621───5.0.0-0.okd-scos-2026-02-24-143251───4.23.0-0.okd-scos-nightly-2026-03-09-153314───4.23.0-0.okd-scos-2026-03-09-153314───4.22.0-0.okd-scos-2026-03-20-1919504.22.0-0.okd-scos-2026-03-20-0719494.22.0-0.okd-scos-2026-03-19-1919494.22.0-0.okd-scos-2026-03-19-0719494.22.0-0.okd-scos-2026-03-18-1919494.22.0-0.okd-scos-2026-03-18-071949───4.21.0-0.okd-scos-nightly-2026-03-20-2149304.21.0-0.okd-scos-nightly-2026-03-20-0949294.21.0-0.okd-scos-nightly-2026-03-19-2149284.21.0-0.okd-scos-nightly-2026-03-19-0949274.21.0-0.okd-scos-nightly-2026-03-18-2149274.21.0-0.okd-scos-nightly-2026-03-18-094927───4.21.0-0.okd-scos-2026-03-20-1340044.21.0-0.okd-scos-2026-03-20-0140034.21.0-0.okd-scos-2026-03-19-1340024.21.0-0.okd-scos-2026-03-19-0140014.21.0-0.okd-scos-2026-03-18-1340014.21.0-0.okd-scos-2026-03-18-014001───4.20.0-0.okd-scos-2026-02-10-1309514.20.0-0.okd-scos-2026-02-07-0016394.20.0-0.okd-scos-2026-02-06-1216394.20.0-0.okd-scos-2026-02-06-0016394.20.0-0.okd-scos-2026-02-05-1216384.20.0-0.okd-scos-2026-02-05-0016374.20.0-0.okd-scos-2026-02-04-121636───4.19.0-0.okd-scos-2025-10-25-0018304.19.0-0.okd-scos-2025-10-24-1218294.19.0-0.okd-scos-2025-10-24-0018284.19.0-0.okd-scos-2025-10-23-1218284.19.0-0.okd-scos-2025-10-23-001828───4.18.0-0.okd-scos-2025-05-27-0825374.18.0-0.okd-scos-2025-05-26-2025374.18.0-0.okd-scos-2025-05-26-0825374.18.0-0.okd-scos-2025-05-23-0333574.18.0-0.okd-scos-2025-05-22-153357───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-06-27-1341344.15.0-0.okd-2025-06-17-1652194.15.0-0.okd-2025-05-02-1402244.15.0-0.okd-2025-04-03-2126204.15.0-0.okd-2025-04-02-1800124.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.22.0-okd-scos.ec.104.22.0-okd-scos.ec.94.22.0-okd-scos.ec.84.22.0-okd-scos.ec.74.22.0-okd-scos.ec.64.22.0-okd-scos.ec.54.22.0-okd-scos.ec.44.22.0-okd-scos.ec.34.22.0-okd-scos.ec.24.22.0-okd-scos.ec.14.22.0-okd-scos.ec.04.21.0-okd-scos.ec.194.21.0-okd-scos.ec.184.21.0-okd-scos.ec.174.21.0-okd-scos.ec.164.21.0-okd-scos.ec.154.21.0-okd-scos.ec.144.21.0-okd-scos.ec.134.21.0-okd-scos.ec.124.21.0-okd-scos.ec.114.21.0-okd-scos.ec.104.21.0-okd-scos.ec.94.21.0-okd-scos.ec.84.21.0-okd-scos.ec.74.21.0-okd-scos.ec.64.21.0-okd-scos.ec.54.21.0-okd-scos.ec.44.21.0-okd-scos.ec.34.21.0-okd-scos.ec.24.21.0-okd-scos.ec.14.21.0-okd-scos.ec.0───4.21.0-okd-scos.94.21.0-okd-scos.84.21.0-okd-scos.74.21.0-okd-scos.64.21.0-okd-scos.54.21.0-okd-scos.44.21.0-okd-scos.34.21.0-okd-scos.24.21.0-okd-scos.14.21.0-okd-scos.04.20.0-okd-scos.174.20.0-okd-scos.164.20.0-okd-scos.154.20.0-okd-scos.144.20.0-okd-scos.134.20.0-okd-scos.124.20.0-okd-scos.114.20.0-okd-scos.104.20.0-okd-scos.94.20.0-okd-scos.84.20.0-okd-scos.74.20.0-okd-scos.64.20.0-okd-scos.54.20.0-okd-scos.44.20.0-okd-scos.34.20.0-okd-scos.24.20.0-okd-scos.14.20.0-okd-scos.04.19.0-okd-scos.194.19.0-okd-scos.184.19.0-okd-scos.174.19.0-okd-scos.164.19.0-okd-scos.154.19.0-okd-scos.144.19.0-okd-scos.134.19.0-okd-scos.124.19.0-okd-scos.114.19.0-okd-scos.104.19.0-okd-scos.94.19.0-okd-scos.84.19.0-okd-scos.74.19.0-okd-scos.64.19.0-okd-scos.54.19.0-okd-scos.44.19.0-okd-scos.34.19.0-okd-scos.24.19.0-okd-scos.14.19.0-okd-scos.04.18.0-okd-scos.104.18.0-okd-scos.94.18.0-okd-scos.84.18.0-okd-scos.74.18.0-okd-scos.64.18.0-okd-scos.54.18.0-okd-scos.44.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github