Back to index
5.0.0-0.okd-scos-nightly-2026-07-07-221154 Download installer and client with:
oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:5.0.0-0.okd-scos-nightly-2026-07-07-221154 Qualifiers (status api ): None
Tests:
Blocking jobsaws Succeeded (2 retries) periodic-ci-openshift-release-main-okd-scos-5.0-e2e-aws-ovn Informing jobsagent-single-node-ipv6 Failed periodic-ci-openshift-release-main-okd-scos-5.0-e2e-agent-single-node-ipv6aws-ovn-techpreview Succeeded periodic-ci-openshift-release-main-okd-scos-5.0-e2e-aws-ovn-techpreviewaws-upgrade Failed (2 retries) periodic-ci-openshift-release-main-okd-scos-5.0-e2e-aws-ovn-upgradeaws-upgrade-minor Failed periodic-ci-openshift-release-main-okd-scos-5.0-upgrade-from-okd-scos-4.22-e2e-aws-ovn-upgradegcp Failed periodic-ci-openshift-release-main-okd-scos-5.0-e2e-gcpvsphere Failed periodic-ci-openshift-release-main-okd-scos-5.0-e2e-vsphere-ovn Upgrades from:
Upgrades to:
Loading changelog, this may take a while ...
Created: 2026-07-07 22:20:10 +0000 UTC
Image Digest: sha256:ff262217313201d77322a87201ba13b132f82c9bd1d6ad54297d9120467b1e43
Components
Kubectl 1.35.2
Kubernetes 1.35.3
Kubernetes Tests 1.35.1
CentOS Stream CoreOS 10 10.0.20260614-0
New images
Removed images
Rebuilt images without code change
CNTRLPLANE-3698 : fix(install): replace context.TODO() with proper ctx parameter #8932 CNTRLPLANE-3771 : fix /rebase GHA workflow for fork PRs #8934 NO-JIRA: chore: update github actions runner image to go 1.26.4 #8888
AROSLSRE-830 : Add etcd EndpointSlice self-registration to fix DNS resolution delays #8613 OCPBUGS-92086 : GetVnetID is empty when running setup_all.sh in Managed AKS #8830 OCPBUGS-84269 : fix(nodepool): skip CNI-internal IPs in ClusterNetworkCIDRConflict check #8230 CNTRLPLANE-3619 : add azure CPO overrides for 4.22.0-4.22.3 #8908 CNTRLPLANE-3696 : Remove stale TODO about ImagePullPolicy in DNS operator #8923 NO-JIRA: Fall back to AWS SDK default credential chain when no explicit credentials provided #8889
CNTRLPLANE-3697 : Expand unit test coverage for KAS config params #8922 CNTRLPLANE-3306 : add ExternalOIDCWithUpstreamParity e2e tests #8287 CNTRLPLANE-3624 : e2e v2 test for control-plane-pki-operator TLS configuration #8793 OCPBUGS-94238 : Add missing CLI IAM role policy entry #8883 NO-JIRA: Add missing verify targets to GitHub Actions workflow #8870
NO-JIRA: fix(e2e-v2): gate ConfigOperatorReconciliationSucceeded on 4.23+ #8875
CNTRLPLANE-3532 : Add shared status patching helpers with optimistic locking #8782 OCPBUGS-94178 : Remove –skip-crd-migration-phases flags from CAPI deployment #8881 NO-JIRA: add Konflux CI scripts reference and document validate-pr-override-images #8852
CNTRLPLANE-3529 : Add operator IAM role creation command and install role ARN flags #8636 CNTRLPLANE-3737 : Add find-push-pipelinerun script #8851 GCP-841 : remove ClusterResourceSet feature gate from CAPG manager args #8795 GCP-866 : chore(owners): add floresroger to gcp-reviewers #8863 CNTRLPLANE-3733 : add –blog flag to /pr-report skill #8848 CNTRLPLANE-3577 : test(nodepool): add NodeDrainTimeout propagation tests #8737 CNTRLPLANE-3576 : add RestartDateAnnotation propagation tests #8733 CNTRLPLANE-3565 : test and fix destroy grace period lifecycle #8789 OTA-1956 : Skip ConsolePlugin manifests during CVO bootstrap #8839 OCPBUGS-92791 : fix(configrefs): exclude componentRoutes secrets from management cluster sync #8838 CNTRLPLANE-3624 : add tls security profile configuration for the control-plane-pki-operator #8768 CNTRLPLANE-3686 : feat(api,cpo): add observedGeneration to ControlPlaneComponentStatus #8819 OCPBUGS-86025 : Close HTTP response bodies to prevent goroutine and connection leaks #8560 OCPBUGS-92206 : bump catalog image version cap from 4.21 to 4.22 #8836 OCPBUGS-86648 : move IP addresses from dnsNames to ips in etcd peer cert #8847 NO-JIRA: docs: add required pod-security annotation for GCP hosted clusters #8850
CNTRLPLANE-3716 : Update GitHub Actions docs with slash-command workflows #8822 OSDOCS-19432 : docs: add cluster capabilities how-to and contributor guide #8371 OCPBUGS-76530 : Fix intermittent etcd peer communication failures #8479 OCPBUGS-81312 : fix(cpo): use KubeAPIServerDNSName for OAuth LoginURL when set #8433 OCPBUGS-84114 , OSASINFRA-4368 : Update CAPO to latest stable release #8687 CNTRLPLANE-597 : Surface HCCO reconciliation failures in HostedCluster status #8340 OCPBUGS-92013 : fix NodePool stuck in UpdatingVersion/UpdatingConfig due to stale conversion-data annotation #8821 CNTRLPLANE-3526 : Add spec.monitoring API for metrics forwarding #8626 NO-JIRA: add blog section with June 2026 progress report #8816
OCPBUGS-91656 : fix(test): add retry logic to GetLogs in Karpenter kubelet propagatio… #8805 OCPBUGS-86415 : Use canonical image for kube-apiserver-proxy static pod #8742 OCPBUGS-92034 : fix registry override matching for digest and tag separators #8824 OCPBUGS-91997 : Apply MetricsSet relabel configs to KAS ServiceMonitor #8715 OCPBUGS-91650 : bump consolidateAfter to 60s in karpenter e2e base NodePool #8820 CNTRLPLANE-596 : Add –kubeconfig flag to HyperShift and HCP CLI #8402 NO-JIRA: Exclude generated delegating client from codecov #8825
CNTRLPLANE-3276 : Add Azure ExternalPrivateService and endpoint access transition test #8718 OCPBUGS-57453 : fix(cpo): use Status.DNSZoneID before querying AWS Route53 #8615 CNTRLPLANE-2916 : restore conditional deletion of openshift-ingress NetworkPolicy #8754 CNTRLPLANE-3352 : fix GHA reusable workflow for fork PRs #8818 CNTRLPLANE-502 : Add CRD breaking changes validation to HyperShift CI #8535 NO-JIRA: chore(deps): weekly dependabot consolidation #8784
CNTRLPLANE-3352 : force HTTPS for GHA plugin dependency clones #8815 OCPBUGS-90663 : fix(test): use Eventually for auth-config ConfigMap assertions #8799 NO-JIRA: docs: Add private topology DNS architecture documentation #8803
CNTRLPLANE-3145 : refactor(hostedcluster): segregate reconcile loop into error-collecting blocks #7908 OCPBUGS-86949 : Guard HCCO KubeletConfig CM deletion against transient source absence #8672 NO-JIRA: fix(ci): switch to openshift-developer plugin bundle for GHA workflows #8809
CNTRLPLANE-3611 : propagate tls profile to aws-pod-identity-webhook #8713 NO-JIRA: fix(ci): increase reusable workflow timeout to 90 minutes #8797
OCPBUGS-55621 : Replace konnectivity Dial with DialContext in konnectivity-https-proxy/cmd.go #8550 OCPBUGS-85585 : tighten registry override matching to strict longest-prefix across release-image consumers #8509 NO-JIRA: fix(ci): add –verbose flag required by stream-json output format #8796
CNTRLPLANE-3568 : test(e2e): verify AWS additional-tags propagation to guest infrastruc… #8712 ci: stream Claude output in GHA workflow logs #8778
OCPBUGS-88685 : Fix metrics-proxy unbounded memory growth #8740 CNTRLPLANE-3584 : Enable resource metrics for kube-scheduler endpoints #8680 CNTRLPLANE-3645 : docs: add retrospective guidelines #8777 CNTRLPLANE-3093 , CNTRLPLANE-3095 , CNTRLPLANE-3096 , CNTRLPLANE-3098 : lower Azure WI webhook test version gate to 4.20 #8323 CNTRLPLANE-3641 : ci: replace COMMUNITY_FORK_TOKEN PAT with GitHub App token #8776 AROSLSRE-687 : propagate HCP Azure resource ID annotation to control plane namespace #8312 ARO-24037 , OCPBUGS-86616 : feat(azure): add ACR pull identity to worker cloud.conf and VMSS #8472 NO-JIRA: chore(deps): weekly dependabot consolidation #8684
CNTRLPLANE-3641 : fix restructure-commits GHA to force push without confirmation #8771 CNTRLPLANE-3023 : Add CEL rule to prevent osImageStream removal #8719 CNTRLPLANE-3641 : add restructure-commits and rebase GHA workflows #8770 CNTRLPLANE-3636 : Add upgrade-from-.0 periodic jobs to OCP branching checklist #8764 CNTRLPLANE-3640 : Fix address-review-comments GHA credential file deleted during run #8769 CNTRLPLANE-3026 : Decouple AWS AMI resolution for dual-stream support #8699 CNTRLPLANE-3332 , CNTRLPLANE-3333 : Add control plane metrics forwarding recipe and Grafana dashboard #8332 ROSAENG-8224 : feat(operator): add –hcp-egress-block-cidrs flag to stabilize NetworkPolicy egress exceptions #8689 CNTRLPLANE-3633 : docs: add presubmit e2e triage guide #8741 OCPBUGS-89231 : version-gate TestPullSecretUnavailable to 4.23+ #8744 CNTRLPLANE-3552 : Multi-stream CoreOS metadata parsing and stream resolution #8669 ACM-34234 : build(cli): rename hcp archives to include OS and arch in filename #8649 CNTRLPLANE-3515 : test(e2e): add day-2 label/taint no-rollout verification #8595 NO-JIRA: Add Sippy/CR test name annotations to v2 e2e tests #8739
OCPBUGS-54790 : Move packageserver PDB from guest cluster to management cluster #8459 OCPBUGS-84577 : clear stale EtcdRecoveryActive failure condition when etcd is healthy #8406 CNTRLPLANE-3575 : test(controlplane-component): verify setDefaultOptions preserves exis… #8731 NO-JIRA: docs: improve AGENTS.md and DEVELOPMENT.md guidance for AI agents #8703
OCPBUGS-85778 : Fix NodePool reconciliation failure when updating mirrored immutable ConfigMaps #8543 OCPBUGS-86662 : Optimize CPO deployment polling interval in tests of additional trust bundle propagation #8617 NO-JIRA: ci(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 #8727
CNTRLPLANE-3271 : add External OIDC e2e tests for v2 framework #8674 OCPBUGS-84555 : fix(cpo): include serving cert CAs in bootstrap and external admin kubeconfigs #8311 NO-JIRA: chore: add unit test naming and placement conventions #8722
NO-JIRA: build(operator): drop hypershift-no-cgo from operator container images #8601
CNTRLPLANE-3617 : Increase address-review-comments max turns to 200 #8723 CNTRLPLANE-3617 : Increase address-review-comments timeout to 45 minutes #8720 OCPBUGS-82443 : fix(cpo): deduplicate VPC endpoint subnets by AZ #8651 CNTRLPLANE-3020 : Adopt coreos/stream-metadata-go upstream library #8673 NO-JIRA: ci: add gopls and pre-commit plugins to address-review workflow #8702
NO-JIRA: fix address-review-comments workflow for fork PRs #8706
NO-JIRA: Add gitlint to pre-commit hooks #8701
CNTRLPLANE-3584 : Add kube-scheduler ServiceMonitor with CA-signed serving certs #8489 NO-JIRA: Improve AI skill quality and restructure AGENTS.md #8690
CNTRLPLANE-3555 : Add ARCHITECTURE.md to repository root #8668 OCPBUGS-84308 : fix(cpo) delete terminated MCD pods to retry in-place upgrades #8434 OCPBUGS-87217 : fix: add CPU partitioning workload annotation to control-plane-metrics-forwarder #8686 CNTRLPLANE-3599 : Remove controller-runtime v0.19.7 pin for k8s 1.36 bump #8683 CNTRLPLANE-3550 : Add missing v2 test suites to Azure self-managed test matrix #8658 NO-JIRA: chore(deps): weekly dependabot consolidation #8634
NO-JIRA: test(e2e/v2): sweep AGENTS.md conformance violations #8659
OCPBUGS-87018 : Revert conditional deletion of openshift-ingress NetworkPolicy #8662 NO-JIRA: move CONTRIBUTING.md to repo root and update CI guidance #8329
CNTRLPLANE-3548 : Add v2 e2e test framework documentation #8641 OCPBUGS-86008 : Gate Route watch on management cluster capability #8484 Revert “OCPBUGS-86774: Pin azure-cli to 2.72.0 in e2e Dockerfile” #8652
OCPBUGS-77268 : reconcile HCP when pull secret is unavailable #8352 GCP-298 : Add GCP e2e v2 test artifacts directory structure documentation #8446 CNTRLPLANE-2207 : Upgrade to CAPI 1.11 #8594 NO-JIRA: chore(ci): enforce v2 e2e AGENTS.md standards via CodeRabbit #8660
CNTRLPLANE-1357 : add KMSv2 secret encryption e2e v2 test for Self Managed Azure #8653 CNTRLPLANE-3167 : Auto-detect credential type for HCPEtcdBackup #8368 NO-JIRA: Fix Azure private/topology CEL validation rules #8490
GCP-688 : Port remaining v1 TestCreateCluster gaps to v2 e2e #8590 NO-JIRA: feat(skills): add validate-pr-override-images skill #8616
OCPSTRAT-1677 : Add Spot instances documentation #8485 OCPBUGS-43444 : Allow kubevirt-csi storageclass default to be changed by user #8597 CNTRLPLANE-3510 : Enable additional golangci-lint linters #8567 OCPBUGS-86306 : Stop controllers fighting over HCP status #8562 CNTRLPLANE-3535 : Add codecov carryforward flags to stabilize project coverage checks #8642 OCPSTRAT-1677 : fix(cpo): increase NTH default workers from 10 to 20 #8500 NO-JIRA: feat(ci): add skopeo and gh CLI to ARC runner image #8627
OCPBUGS-85584 : Fix stale api.openshift.com labels on HostedControlPlane #8507 NO-JIRA: ci(runner): update base image to actions-runner v2.334.0 #8643
CNTRLPLANE-3533 : Add Dockerfiles to codecov ignore list #8640 OCPBUGS-86774 : Pin azure-cli to 2.72.0 in e2e Dockerfile #8638 NO-JIRA: ci(deps): bump google-github-actions/auth from 2.1.13 to 3.0.0 #8630
NO-JIRA: ci(deps): bump actions/checkout from 4.3.1 to 6.0.2 #8631
NO-JIRA: Fix HCCO deployment location in AGENTS.md #8635
CNTRLPLANE-3534 : ci: add –allowedTools to address-review-comments workflow #8639 OCPBUGS-86238 : add CPO overrides for ARO swift-nic resource limits #8610 OCPBUGS-81544 : requeue when AutoNodeEnabled is progressing #8497 NO-JIRA: add address-review-comments workflow #8621
NO-JIRA: De-duplicate Azure self-managed documentation #8566
CNTRLPLANE-3531 : Remove EFS-backed Go build cache from CI runners #8637 CNTRLPLANE-3329 : Rebuild runner image on gocacheprog and pipeline changes #8633 CNTRLPLANE-3329 : Fix gocacheprog cache corruption with atomic writes #8624 NO-JIRA: fix(karpenter): start node cleanup when CAPI Cluster is deleted #8589
OCPBUGS-85151 : Re-enable serviceaccount-pull-secrets controller when registry managementState changes from Removed #8522 OCPBUGS-85243 : Set aws-load-balancer-scheme on public HCP router service #8458 OCPBUGS-38898 : fix kubeadmin password hash reconciliation to compare password against stored hash #8358 OCPBUGS-84303 : fix(api): add IPv6 OVN join subnet config to prevent dual-stack routing collision #8421 NO-JIRA: clone ai-helpers into workspace for plugin file access #8620
NO-JIRA: bump claude max-turns to 50 in WIF test #8619
NO-JIRA: test ai-sbom plugin and verify plugin loading #8614
CNTRLPLANE-3329 : Use GOCACHEPROG for zero-copy EFS build cache #8576 NO-JIRA: replace container image with workflow-step plugin setup #8611
NO-JIRA: use ai-helpers container image for Claude WIF test #8609
NO-JIRA: fix Claude WIF test workflow HOME for ARC runners #8600
NO-JIRA: fix Claude WIF test workflow for ARC runners #8598
NO-JIRA: test Claude Code WIF auth in GitHub Actions #8588
OCPBUGS-86296 : Propagate management cluster proxy env vars to konnectivity sidecar #8569 OCPBUGS-65730 : add –tls-cipher-suites to oauth-apiserver deployment #8554 OCPBUGS-85351 : Revert “fix(azure): prevent externalDNSDomain from shadowing cluster apps domain” #8585 OCPBUGS-84955 : bootstrap serving certs at hypershift operator startup #8545 ci(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 #8574
CNTRLPLANE-3040 : add regression tests for CAS pause/unpause replica clamping #8262 NO-JIRA: chore(deps): weekly dependabot consolidation #8578
GCP-688 : Port v1 E2E validations to envtest, unit tests, and v2 Ginkgo specs #8511 NO-JIRA: fix(e2e): lower pull secret in-place propagation test gate to 4.22 #8553
OCPBUGS-86075 : docs(nodepool): fixing incomplete stuck node drain documentation in section Scaling To Zero #8544 CNTRLPLANE-3222 : Port v1 lifecycle tests to v2 Ginkgo framework #8527 AUTOSCALE-692 : remove default debug log level from karpenter container #8561 OCPBUGS-86310 : Handle CA bundle aggregation delay by requeuing revocation #8563 CNTRLPLANE-3329 : Use fuse-overlayfs for build cache instead of full copy #8568 NO-JIRA: fix(e2e): use public multi-arch image for ARM64 karpenter test #8532
OCPBUGS-86238 : set limits for aro.openshift.io/swift-nic in request overrides for ARO swift #8552 OCPBUGS-85351 : fix(azure): prevent externalDNSDomain from shadowing cluster apps domain #8480 CNTRLPLANE-3371 : Fix AllowedCIDRs e2e test for Route-based KAS #8469 NO-JIRA: build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 in /hack/tools #8547
NO-JIRA: Update Konflux Tekton task bundles #8557
NO-JIRA: chore(deps): weekly dependabot consolidation #8464
CNTRLPLANE-3070 : Support KMS on self-managed Azure without affecting ARO HCP #8088 OCPBUGS-59142 : fix ValidReleaseImage condition message to show minor version #8519 NO-JIRA: Add onboarding guide for new HCP team members #8132
OCPBUGS-85011 : fix(cpo): use check-first pattern for EBS CSI operator serving cert #8418 CNTRLPLANE-3329 : Extend EFS-backed build cache to lint, verify, and envtest workflows #8495 NO-JIRA: ci(deps): bump cloudflare/wrangler-action from 3.15.0 to 4.0.0 #8524
OCPBUGS-85763 : Fix metrics-proxy deployment failure due to dots in volume names #8530 GCP-636 : feat(gcp): support for managing GCP OIDC discovery documents #8413 OCPBUGS-84307 : Clarify –base-domain flag default behavior #8381 AUTOSCALE-681 : various karpenter and karpenterupgrade test fixes #8510 CNTRLPLANE-3329 : Replace actions/cache with EFS-backed build cache in unit tests #8494 OCPBUGS-85577 : Update external-dns image from 1.1.0-3 to 1.2.1 #8506 OCPBUGS-77827 : fix(api): add missing has() guards to servingCerts CEL validation rule #8331 CNTRLPLANE-3380 : docs: add aws-node-termination-handler to repositories list #8514 OCPBUGS-85580 : Fix webhook TLS failure after service-ca to self-managed cert migration #8504 build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 in /hack/tools #8481
OCPBUGS-85344 : Add version gates for 4.22 backward compatibility in e2e tests #8466 AUTOSCALE-681 : remove TechPreviewNoUpgrade gate from karpenter upgrade test #8498 CNTRLPLANE-3329 : Mount EFS-backed Go build cache PV on ARC runner pods #8493 NO-JIRA: docs: add repositories page listing team-owned repos #8505
CNTRLPLANE-3329 : Add nightly CronJob to warm EFS-backed Go build cache #8496 CNTRLPLANE-3324 : Restore non-obvious comments after gocyclo refactor #8487 AUTOSCALE-558 : Expose KubeletConfig on OpenShiftEC2Nodeclass as structured fields + preserveunknown/overflow #8192 NO-JIRA: Fix docs deploy preview by replacing gh CLI with curl #8488
CNTRLPLANE-2946 : Move AWS NLB annotation inside LoadBalancer strategy block #7993 OCPBUGS-78539 : re-add crash toleration for dns-operator during upgrades #8483 CNTRLPLANE-3384 : Remove unconditional low-quality log messages from controllers #8428 OCPBUGS-84971 : Gate AWSDefaultSecurityGroupDeleted condition to AWS platform #8415 CNTRLPLANE-3324 : Enable gocyclo linter and reduce cyclomatic complexity #8309 NO-JIRA: fix(karpenter): resolve HCP karpenter finalizer when AutoNode is disabled #8404
OCPBUGS-62177 : verify cert revocation against all KAS pods #8263 NO-JIRA: Document CEL over webhooks policy for AI agents #8478
NO-JIRA: docs(kubevirt): add how-to for configuring VMs with JSON patches #8473
CNTRLPLANE-1741 : Migrate gomaxprocs-webhook pipelines to use common-operator-build #7122 NO-JIRA: docs: update api-sme agent and api/AGENTS.md conventions #8477
OCPBUGS-81686 : fix(authentication): use v2 auth validation for CEL and expression support. #8246 OCPBUGS-85084 : fix(ci): use explicit lease in dependabot commit fix push #8476 OCPBUGS-75887 : fix(inplaceupgrader): include node name in degraded upgrade error message #8244 NO-JIRA: fix(e2e): prevent agent unbinding and node reboots during backup/restore #8356
NO-JIRA: Update GHA docs for reusable workflow pattern #8453
GCP-413 : add image registry v2 e2e tests for hosted clusters #8412 NO-JIRA: docs: make CLAUDE.md a symlink to AGENTS.md across the repo #8444
CNTRLPLANE-2778 : feat(tooling): overhaul pr-report skill and Python script #7754 ACM-33601 : use the latest ubi9 nginx image #8432 GCP-414 : add image registry operational guide #8455 OCPBUGS-84528 : clarify pull secret in-place update behavior and add CP watches #8327 OCPBUGS-84955 : Add render-sensitive flag to hypershift install render #8436 OCPBUGS-84857 : bump go builder and ubi images #8437 GCP-410 : fix(gcp): add registry SA WIF binding for image registry GCS access #8445 CNTRLPLANE-3381 : CPO: Surface cloud resource deletion timeout as a status condition #8426 OCPBUGS-85084 : fix(ci): rewrite dependabot commit messages to pass gitlint #8435 NO-JIRA: docs: detail release branch e2e config steps in branch-process guide #8441
CNTRLPLANE-3222 : Migrate self-managed Azure e2e tests to v2 Ginkgo framework #8204 GCP-412 : add envtest cases for GCP imageRegistry CEL validation #8411 CNTRLPLANE-2939 : Coordinate CRD lifecycle with Cluster CAPI Operator #7996 OCPBUGS-77040 : Add AWS ISO domains to konnectivity IsCloudAPI #8251 OCPBUGS-83328 : fix skipProxyForKAS to use standard NO_PROXY matching #8254 OCPBUGS-84969 : fix(e2e): wait for Karpenter node cleanup in parallel tests to prevent vCPU flake #8414 CNTRLPLANE-3343 : Extract support/k8sutil package from support/util #8396 TRT-2653 : Revert #8357 “OCPBUGS-84572: fix(cpo): generate EBS CSI driver operator serving cert in CPO” #8417 NO-JIRA: chore(deps): weekly dependabot consolidation #8410
NO-JIRA: Skip TestKarpenter for releases < 4.22 #8409
CNTRLPLANE-3351 : e2e: add opt-in CPU resource request overrides for control plane components #8385 OCPBUGS-84509 : Add AWS LB Controller cross-zone load balancing annotation #8344 OCPBUGS-84572 : fix(cpo): generate EBS CSI driver operator serving cert in CPO #8357 OCPBUGS-81631 : fix(metrics): remove noisy vCPU log for non-AWS platforms #8169 NO-JIRA: Extend timeout for CRD removal during integration tests #8366
NO-JIRA: chore(deps): weekly dependabot consolidation #8395
OCPBUGS-83868 : prevent IAM resource leaks during cluster destroy #8303 GCP-635 : feat(gcp): make JWKS file optional when OIDC issuer URL is provided #8339 OCPBUGS-83757 : Remove network dependencies from unit tests #8277 ci(deps): bump actions/setup-go from 5.6.0 to 6.4.0 #8393
OCPBUGS-84508 : Fix NLB name parsing for EKS Auto Mode hostnames #8343 AUTOSCALE-615 : include Karpenter node vCPUs in billing metric #8265 CNTRLPLANE-3352 : Convert GHA callers to use reusable workflows @main #8387 CNTRLPLANE-3342 : Extract support/netutil package from support/util #8360 CNTRLPLANE-3352 : Add reusable GHA workflow definitions #8386 GCP-410 : feat(gcp): add HCCO credential propagation for GCP image registry #7896 OCPBUGS-84551 : fix(ingress): set FIPS_ENABLED env var on ingress operator #8375 CNTRLPLANE-3307 : add unit tests for Azure Private Link Service controllers #8285 CNTRLPLANE-3160 : Drop AutoNodeKarpenter feature gate and promote EC2NodeClass to v1 #8166 NO-JIRA: Improve commit and PR guidance in AGENTS.md #8373
OCPBUGS-83790 : change Azure workload identity webhook FailurePolicy from Fail to Ignore #8288 NO-JIRA: chore(deps): weekly dependabot consolidation #8334
NO-JIRA: Add API dependency import restriction tool #8364
SPLAT-2587 : aws/ccm: introduce configuration to CCM managed Security Groups for NLB #7460 NO-JIRA: add –max-depth flag to nav order verification #8372
NO-JIRA: Do not import external dependencies into API packages #8355
CNTRLPLANE-3340 : Extract support/podspec package from support/util #8354 OCPBUGS-84251 : fix(azure): detect and replace stale role assignments on cluster re-creation #8322 OCPBUGS-84236 : Guard Infrastructure CR lookup in AWSEndpointServiceReconciler #8315 fix: OCPBUGS-78575: create virt-launcher NetworkPolicy on external infra cluster #8056
CNTRLPLANE-3330 : ci: improve unit test speed with sharding and parallelism #8330 CNTRLPLANE-3313 : add Etcd Snapshot Backup (Tech Preview) DR documentation #8299 CNTRLPLANE-2834 : add e2e test for etcd snapshot backup method on AWS #8231 docs: NO-JIRA: clarify serialization tag behaviour in api/AGENTS.md #8328
OCPBUGS-84248 : Remove hardcoded quay.io credentials from EnsureGlobalPullSecret test #8320 NO-JIRA: ci(deps): bump GitHub Actions dependencies #8333
OCPBUGS-77529 : clean stale mock files before make generate function #8237 OCPBUGS-79471 : fix(test): reduce e2e autorepair flakes from unhealthy node conditions #8278 NO-JIRA: docs: clarify that control plane downgrades are not supported #8314
CNTRLPLANE-2204 : improve AllNodesHealthy and AllMachinesReady conditions #8247 GCP-431 : feat: Add CNCC support for GCP WIF in HyperShift #7824 OCPBUGS-83410 : fix, cno, skip cloud-network-config-controller check on non-cloud platforms #8238 Revert “OCPBUGS-83730: Add *.apps wildcard to base domain Private DNS zone for Azure private clusters” #8301
NO-JIRA: docs: add jira:ready-to-solve to agentic SDLC workflow #8304
OCPBUGS-83397 : Fix concurrent CRD reconciliation race #8266 NO-JIRA: MCE 5.0 branch cut #8290
OCPBUGS-83751 : add missing RBAC for webhook configurations #8276 OCPBUGS-83730 : Add *.apps wildcard to base domain Private DNS zone for Azure private clusters #8273 NO-JIRA: chore: pass COMMIT_HASH build arg to support git worktrees #8279
OCPBUGS-78539 : revert temporary crash toleration for dns-operator #7994 CNTRLPLANE-3296 : fix: auto-create python venv in Makefile for verify targets #8269 OCPSTRAT-2499 : docs(e2e): add AI agent guidance for v2 test framework #8207 AUTOSCALE-490 : increase autonode test coverage #7979 OCPBUGS-83604 : fix(kubevirt): filter link-local addresses from EndpointSlice endpoints #8264 NO-JIRA: fix(test): set 1h time limit on e2e capacity reservations #8208
NO-JIRA: docs(agents): add CRD API machinery fundamentals and envtest docs #8236
OCPBUGS-83585 : Wait for CRD removal in GenerateCRDInstallTest to fix flaky envtest #8261 NO-JIRA: drop redundant api_ux_validation e2e test #8210
CNTRLPLANE-3255 : enable CodeRabbit reviews on draft PRs #8250 CNTRLPLANE-635 : Enable nilness and unparam checks in golangci-lint #8258 AUTOSCALE-590 : karpenter version logging verification #8058 CNTRLPLANE-3259 : Add sdminonne, clebs, and Nirshal to core-reviewers #8252 ci(claude): add konflux-build command for manual non-expiring builds #7964
NO-JIRA: fix(e2e): handle uint64 underflow in karpenter version computation for 5.x #8227
CNTRLPLANE-3174 : Add unit tests for v2 CPO controller packages #8215 OCPBUGS-83538 : fix(metrics-proxy): resolve ports from pods instead of deployments #8221 CNTRLPLANE-3260 : fix(ci): split docs-preview into build+deploy to eliminate pwn request #8256 CNTRLPLANE-3203 : Add autoscaling documentation for self-managed Azure #8239 NO-JIRA: add ENVTEST_JOBS knob for parallel envtest execution #8243
CNTRLPLANE-3260 : ci: harden GitHub Actions workflows #8253 CNTRLPLANE-3214 : add envtest suites for HCPEtcdBackup CRD validation #8199 CNTRLPLANE-3254 : Sort how-to guides alphabetically and add CI enforcement #8248 OCPBUGS-67228 : fix(shared-ingress): bump haproxy to 3.0.5-4.el10_1.1 #7370 CNTRLPLANE-3065 : docs: add Agentic Software Development Life Cycle page #8235 OCPCLOUD-3347 : feat(machine-approver): add TLS configuration options to deployment manifests #8019 OCPBUGS-83389 : fix(supportedversion): normalize OCP 5.x versions for skew and release validation #8225 SREP-4438 : refactor(karpenter): tidy Cincinnati version resolution #8206 NO-JIRA: revert: remove .git/ from .dockerignore #8201
CNTRLPLANE-3197 : add release-4.22 branch to renovate configuration #8196 CNTRLPLANE-3197 : update builder images from 4.22 to 4.23 #8194 CNTRLPLANE-3216 : Add codecov.yml validation to make verify #8202 GCP-368 : add GCP CCM v2 e2e tests #7840 CNTRLPLANE-3233 : ci(gha): add release-4.22 branch to GitHub Actions workflows #8217 CNTRLPLANE-3197 : update latest supported version from 4.22 to 4.23 #8193 CNTRLPLANE-3174 : Add unit tests for CPO controller packages #8184 CNTRLPLANE-3215 : fix envtest GHA workflow path filters for CRD test suites #8200 CNTRLPLANE-2078 : add unit tests for AWS Route53 and IAM #8079 OCPBUGS-82301 : fix(catalogs): use semver comparison for catalog version cap to handle OCP 5.0 #8195 NO-JIRA: control-plane-pki-operator: fix Event emission logic, format #8190
OCPBUGS-82192 : fix(webhookcerts): handle upgrade from service-ca managed certs #8189 OCPBUGS-82159 : fix(ignition-server): use major+minor version comparison for OCP 5.0 payloads #8182 CNTRLPLANE-2511 : refactor(cpo): move OAuth internal LB annotation into ReconcileService #8185 CNTRLPLANE-2511 : Support OAuth LoadBalancer with Azure Private Link Service #8149 OCPBUGS-81644 : fix(cli): fix Azure destroy cluster leaving vnet/nsg resource groups for private topology #8151 OCPBUGS-33097 : Remove deprecated OVNSbDb service type from default strategy mappings #8164 CNTRLPLANE-3174 : test: Add unit tests for product-cli, token-minter, and sync-fg-configmap #8178 CNTRLPLANE-3050 : feat(ci): use Konflux-built image for GitHub Actions runners #8092 CNTRLPLANE-2841 : test(e2e): add metrics-forwarder e2e test verifying data-plane scraping #8147 CNTRLPLANE-3037 : Create separate assets package specifically for CRD management #8150 GCP-462 : Add GCP hosted cluster documentation #8027 NO-JIRA: docs(ci): add sync-community-fork token rotation guide #8173
CNTRLPLANE-2841 : feat(HCCO): reintroduce guest cluster metrics forwarder for control plane metrics #8146 NO-JIRA: fix(e2e): handle rate limiter context deadline error during cleanup #8137
NO-JIRA: fix(ci): remove catch-all pattern from codecov ignore list #8171
CNTRLPLANE-2511 : Allow LoadBalancer publishing strategy for OAuthServer on self-managed Azure #8148 NO-JIRA: chore(ci): add client/ to codecov ignore list #8167
NO-JIRA: feat(e2e): add Azure platform support for backup/restore tests #8144
OCPBUGS-74960 : prevent resource leak on deletion and handle DependencyViolation #7868 NO-JIRA: docs: expand custom images guide with Dockerfile.dev and CPO override #8155
CNTRLPLANE-3042 : Parallelize make verify targets for faster local development #8051 NO-JIRA: ci: fix codecov ignore patterns for docs and nested files #8156
OCPBUGS-81270 : fix(external-dns): mitigate Azure DNS API throttling #8098 NO-JIRA: ci: ignore non-Go files in codecov coverage analysis #8154
OCPBUGS-67240 : Ignition generalize image download errors #7673 NO-JIRA: fix(Makefile): auto-detect upstream remote for lint #8152
OCPBUGS-79539 : fix(cpo-v2): preserve HCCO modifications to OCM Controllers field #8072 AUTOSCALE-582 : wire CRD sync and CEL adjustments into karpenter-api target #8119 CNTRLPLANE-3111 : docs: add service publishing strategies reference documentation #8107 NO-JIRA: ci: make docs deploy preview non-blocking #8145
Revert “CNTRLPLANE-2841: feat(HCCO): add guest cluster metrics forwarder for control plane metrics” #8141
NO-JIRA: fix(e2e): handle dual RHCOS payloads in Karpenter drift OS image check #8128
OCPBUGS-50003 : add ConfigMap fallback and EC2 error caching for vCPU metrics resolution #6723 CNTRLPLANE-2172 : feat(azure): add private endpoint access topology for self-managed HostedClusters #7821 CNTRLPLANE-2841 : feat(HCCO): add guest cluster metrics forwarder for control plane metrics #7790 CNTRLPLANE-2797 : hypershift-operator webhooks port 9443 respect cluster TLS security profile #8078 OCPBUGS-50603 : Create dedicated identity for KAS bootstrap container #6827 Revert “NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout” #8138
NO-JIRA: ci: improve CI efficiency and codecov configuration #8113
NO-JIRA: test(e2e): add KubeVirt platform to backup/restore e2e test #8131
OCPBUGS-81162 : fix(cpo): skip router LB services for ARO HCP #8087 NO-JIRA: ci: enable paths filter on envtest workflows #8125
NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout #8124
NO-JIRA: fix(test): deep copy CRDs inside envtest retry loop #8127
NO-JIRA: chore(docs-agg): remove document count from aggregated file #8126
NO-JIRA: ci: separate envtest from unit tests in CI workflow #8120
OCPBUGS-80926 : consolidate disaster-recovery prerequisites into dedicated page #8080 CNTRLPLANE-3116 : fix(ci): drop pip cache from docs-preview workflow #8116 NO-JIRA: fix(api): regenerate feature gate manifests for ExternalOIDCWithUpstreamParity #8117
OCPBUGS-78763 : fix: global-pull-secret daemonset node labeling race condition causes pods not to be scheduled on Replace upgrade strategy nodes in time #7981 CNTRLPLANE-3037 : Introduce envtest for integration tests alternative #8089 CNTRLPLANE-3116 : ci(docs): migrate docs-preview job to GitHub Actions #8109 CNTRLPLANE-244 : fix(ci): configure Codecov PR comments and add unit tests #8085 NO-JIRA: chore(deps): weekly dependabot consolidation #8077
OCPBUGS-78931 : add KubeVirt-specific backup settings #8022 OCPBUGS-81284 : fix(release): allow multiple machine-os component versions #8101 NO-JIRA: fix(aws): load credentials from –aws-creds file using SDK v2 #8095
NO-JIRA: chore(ci): update hypershift-ci-2 manifests #8062
CNTRLPLANE-2678 : Adapt etcd-backup command and add HO namespace manifests #8040 CNTRLPLANE-2551 : Hypershift integration for API Auth Config changes #7774 GCP-447 : inject token-minter as native sidecar init container #7965 AUTOSCALE-538 , AUTOSCALE-539 : Add Autonode status node counts + enabled condition to HostedCluster API #7794 CNTRLPLANE-244 : ci: add Codecov integration to unit test workflow #8060 CNTRLPLANE-3050 : Pre-build lint tools and fix Konflux pipeline triggers #8052 CNTRLPLANE-2838 : feat(CPO): add metrics-proxy control plane component #7752 CNTRLPLANE-2787 : Introduce BASE_DOMAIN env var for E2E test configuration #7930 CNTRLPLANE-2786 : Extend controller architecture diagram with consumes relationship #8029 IR-350 : add tls security profile configuration for the image registry operator #8011 AUTOSCALE-571 : fix(karpenter): don’t associate public IP addresses for the default OpenshiftEC2NodeClass #7853 NO-JIRA: feat(e2e): skip SupportedVersionSkew condition on OCP < 4.21 in backup/restore tests #8067
CNTRLPLANE-2076 : remove v2 import aliases left from SDK migration #8063 AUTOSCALE-559 : PrivateLink plumbing for karpenter ec2nodeclass subnets #7791 STOR-2770 : Generate Azure Disk and File CSI Driver Operator metrics serving certs by HCP controller #7970 CNTRLPLANE-2678 : Add fetch-etcd-certs CPO subcommand for HCPEtcdBackup #8010 NO-JIRA: revert(api): remove APIServer Route CEL validation for Azure #8074
CNTRLPLANE-2172 : feat(api): add Azure private endpoint access and PrivateLinkService CRD #8055 OCPSTRAT-2831 : chore(owners): add cblecker to core-reviewers and core-approvers #8018 OCPBUGS-79428 : Add recipe for ACM/MCE HyperShift Operator overrides #8057 CNTRLPLANE-2076 : complete SDK v1 removal and post-migration cleanup #8038 CNTRLPLANE-2049 : update GCP validation error expectations in TestOnCreateAPIUX #8037 CNTRLPLANE-3046 : feat(ci): add monitoring and alerting for ARC runners #8044 CNTRLPLANE-3049 : split verify checks into individual GitHub Actions workflows #8049 OCPBUGS-79352 : fix(oapi): force WatchList feature gate to disabled for openshift-apiserver #8035 OCPBUGS-79071 : Fix AWSEndpointService private-router teardown stuck on active VPC Endpoint connections #8030 CNTRLPLANE-3041 : Override ARO/HCP 4.20 CPO with Azure Pod Identity backport #8025 CNTRLPLANE-3054 : Apply init task 0.3 migration to fix broken Konflux pipelines #8053 OCPBUGS-70301 : force-remove karpenter finalizer when guest KAS is down #7939 CNTRLPLANE-3047 : fix(ci): use community fork token for checkout credential helper #8050 CNTRLPLANE-2788 : validate memory quantity in KubeVirt nodepool create #7884 NO-JIRA: chore(ci): update Konflux Tekton tasks to latest versions #8048
CNTRLPLANE-3048 : refactor gh-actions-runner pipelines and improve CEL triggers #8045 OCPBUGS-79369 : Add Konflux archived PipelineRun skill and update task discovery #8043 CNTRLPLANE-3047 : add workflow to sync hypershift-community fork #8042 NO-JIRA: chore(claude): add restructure-commits plugin command #7927
CNTRLPLANE-2986 : feat(ci): Add self-hosted GitHub Actions runners for HyperShift #7980 NO-JIRA: fix(ci): pass –upgrade-versions to konflux task update skill #8036
CNTRLPLANE-2998 : Migrate SQS to AWS SDK v2 #8015 NO-JIRA: refactor(oadp): unify backup/restore e2e test with platform auto-detection #7971
OCPBUGS-78996 : fix(test): create SQS queue dynamically in spot termination handler e2e test #8007 CNTRLPLANE-2049 : fix(api): audit and improve GCP API validation rules #8003 CNTRLPLANE-2081 : Migrate RAM and ARN to AWS SDK v2 #7986 OCPBUGS-78778 : fix(cpo): Don’t remove HCP Ingress from routes when CapabilityRoute is disabled #8001 NO-JIRA: Disable parent ownership for api subdir #8009
NO-JIRA: fix(api): replace CEL url() validators with regex to fix CRD cost budget #8004
OCPBUGS-78544 : Update base images to address multiple CVEs flagged by MSFT security scans #7983 OCPBUGS-78705 : Bootstrap CVO manifests should be filtered based on feature-set annotation #7984 NO-JIRA: fix(api): extend kubeapilinter scope to all non-vendor API types #8002
NO-JIRA: build(e2e): include hypershift binary in Dockerfile.e2e #7919
CNTRLPLANE-2925 : add NodePool.Status.NodesInfo for node version distribution #7917 OCPSTRAT-2336 : Adjust karpenter API to OpenShift conventions #7952 OCPBUGS-78539 : chore(e2e): add temporary crash toleration for dns-operator #7978 CNTRLPLANE-2172 : fix(e2e): register Azure private platform e2e flags #7977 NO-JIRA: chore(owners): require api-approvers approval for api/ changes #7972
Update Kube API Linter config for new APIs #7982
NO-JIRA: add .gitattributes to collapse generated files in PR diffs #7918
CNTRLPLANE-2910 : feat(cpo): add Azure workload identity webhook as KAS sidecar #7867 CNTRLPLANE-2077 : refactor(cleanzones): migrate AWS SDK from v1 to v2 #7960 CNTRLPLANE-2219 : feat(aws): migrate ec2 to AWS SDK v2 #7871 GCP-440 : Fix GCP boot image discovery from CoreOS stream metadata #7881 NO-JIRA: fix(oadp): correct Agent platform API group in backup/restore resources #7974
OCPBUGS-78356 : fix(sharedingress): coalesce HAProxy reloads to prevent reload storms #7945 CNTRLPLANE-2172 : fix(operator): accept Azure as valid private-platform value #7968 NO-JIRA: Rename cilium directory to v1.15.1 #7888
OCPBUGS-70354 : add serviceAccount to global-pull-secret-syncer #7439 NO-JIRA: feat(e2e): add OIDC IAM fix and NodePool validation to backup/restore #7837
CNTRLPLANE-2172 : feat(install): register Azure private platform flags #7912 CNTRLPLANE-2978 : Add Azure CPO override for OCP 4.20 #7955 OCPBUGS-65687 : fix(cpo): prevent informer creation for inaccessible resource types #7819 GCP-441 : correct CCM crash toleration key to match pod label #7926 CNTRLPLANE-2916 : conditionally create openshift-ingress network policy based on route labeling #7872 NO-JIRA: chore: add .git/ to .dockerignore #7944
NO-JIRA: fix(test): add aws-node-termination-handler to safe-evict audited list #7816
NO-JIRA: test(scheduler): add pair loss recovery unit coverage #7848
OCPBUGS-67262 : fix(e2e): Use NodePool replicas as authoritative source for expected node count instead of CountAvailableNodes #7378 OCPBUGS-77160 : include NMStateConfig in Agent platform OADP backup resources #7847 AUTOSCALE-571 : fix(karpenter): select existing private subnets for default OpenshiftEC2NodeClass #7933 OCPBUGS-78198 : fix(catalogs): update catalog image version cap to 4.21 #7915 OCPBUGS-78184 : fix(hostedcluster): Remove referenced resource annotations regardless of hcp status #7913 CNTRLPLANE-2203 : reintroduce ControlPlaneConnectionAvailable condition with conformance fix #7746 OCPBUGS-78185 : Fix deadlock when changing release image during initial provisioning #7910 CNTRLPLANE-634 : Make external-dns interval and AWS zones cache duration configurable #7931 OCPBUGS-78045 : allow autonode provisioned arm instances #7893 OCPBUGS-78329 : fix(releaseinfo): allow periods in version display name regex #7940 OCPBUGS-78223 : add NodePool Rollouts reference documentation #7923 NO-JIRA: chore(gitignore): add .claude/worktrees/ to .gitignore #7938
OCPBUGS-78189 : fix(e2e): fix nil deref in validateAWSGuestResourcesDeletedFunc #7911 OCPBUGS-77514 : E2E filter rolling upgrade verification to current MachineSet #7864 OCPBUGS-77703 : fix(api): add omitempty to NodePoolAutoScaling.Min for N-1 compatibility #7849 GCP-411 : Add comprehensive unit tests for ReconcileInfrastructure #7895 NO-JIRA: fix KubeVirtAdvancedMultinetTest IPv6 and apk errors #7860
NO-JIRA: chore(e2e): increase nodepool condition check timeout #7906
CNTRLPLANE-2789 : add StatefulSet test case to controlplane-component reconcile tests #7764 NO-JIRA: Add CodeRabbit config to exclude autogenerated files #7905
CNTRLPLANE-2933 : add docs recipe for SPO configuration in HCP environments #7886 CNTRLPLANE-2031 : test(e2e): add comprehensive backup and restore test suite #7745 CNTRLPLANE-2588 : docs: add dependabot triage agent to AI CI jobs documentation #7889 CNTRLPLANE-2793 : Cache MCS TLS certificate generation in ignition provider #7841 ROSAENG-132 : fix(karpenter): Set Ready condition to False when version resolution fails #7866 NO-JIRA: api: fix AutoNode types to comply with OpenShift API conventions #7859
NO-JIRA: chore(deps): weekly dependabot consolidation #7876
OCPBUGS-39604 : Include shared ingress resources in render output for proper uninstall cleanup #7836 OCPBUGS-76645 : Make generated container names k8s compliant #7711 OCPBUGS-77254 : fix(globalps): watch Machine updates to fix node labeling race condition #7803 GCP-441 : tolerate 1 restart for GCP CCM token-minter race condition #7865 NO-JIRA: chore(deps): weekly dependabot consolidation #7863
OCPBUGS-77477 : fix(awsutil): handle smithy errors in AWSErrorCode #7827 SREP-3855 : unpause leaked child objects on deleting clusters (OCPBUGS-77530) #7861 CNTRLPLANE-2218 : feat(aws): migrate ELB/ELBV2 to AWS SDK v2 #7825 OCPBUGS-77621 : fix(nodepool): preserve ignition-reached annotation on token secret after restore #7851 OCPBUGS-76337 : feat(scale-from-zero): add DescribeInstanceTypes IAM permission #7648 GCP-391 : Add ImageRegistry GSA field and IAM binding for Image Registry Operator #7828 CNTRLPLANE-2801 : fix(router): deploy router services for private ARO and remove KAS/OAPI dependencies #7845 CNTRLPLANE-2842 : Fix context cancel accumulation in getMirrorFromICSPOrIDMS #7846 CNTRLPLANE-2801 : api: remove redundant kubebuilder enum marker from KeyVaultAccess field #7835 NO-JIRA: bug(metrics): fix typo in hypershift_cluster_waiting_initial_availability_duration_seconds metric #7730
CNTRLPLANE-2840 : fix(endpoint-resolver): sort pods by name for deterministic ordering #7854 CNTRLPLANE-2808 : bump golang.org/x dependencies in / and /api modules #7818 CNTRLPLANE-2840 : feat(CPO): add endpoint-resolver control plane component #7786 CNTRLPLANE-2794 : Re-add TestGetDigest and TestGetManifest with mockgen mocks #7777 OCPBUGS-77034 : fix(ho): add nil guard for Platform.AWS in metrics collector #7747 GCP-295 : Add GCP platform support to E2E test framework #7697 OCPBUGS-76997 : remove resource limits from Agent CAPI provider #7812 OCPBUGS-60936 : fix(hccp): remove immutable field from kubeletconfigmap #6726 OCPBUGS-77311 : handle HostedCluster deletion in secretJanitor to prevent stuck cluster deletions #7779 OCPBUGS-60185 : Remove non-deterministic registry override computation from ignition-server #7811 CNTRLPLANE-2784 : Document IAM policies for PowerVS credential fields #7778 CNTRLPLANE-2801 : add Key Vault private endpoint TCP relay via private router #7701 CNTRLPLANE-2217 : feat(aws): migrate kms and Resource Tagging to AWS SDK v2 #7795 CNTRLPLANE-2807 : Fix version showing <unknown> in git worktree builds #7814 OCPBUGS-65636 : add service account to konnectivity-agent #7309 NO-JIRA: docs(pki): add CA hierarchy diagram and trust distribution details #7799
CNTRLPLANE-2799 : Unit test HCP availability and Ready flag reconciliation #7796 OCPBUGS-67262 : fix(sync-global-pullsecret): compare content ignoring trailing newlines #7638 GCP-386 : scope externaldns RBAC to GCP platform only #7781 OCPBUGS-76350 : Honor AWS AMI override in NodePool token generation #7675 OCPBUGS-60185 : Fix ignition-server pod restarts due to MIRRORED_RELEASE_IMAGE flapping #7588 NO-JIRA: docs(agents): add multi-module structure guidance to AGENTS.md #7797
OCPBUGS-76452 : update OAuth certificate configuration doc #7785 GCP-402 : Add gcp-project and gcp-region flags to hypershift install #7710 GCP-376 : Add service account for storage #7676 GCP-367 : enable multizone support in CCM cloud config #7731 OCPBUGS-77224 : fix(routing): add Azure platform to LabelHCPRoutes() switch #7789 CNTRLPLANE-2220 : feat(aws): migrate iam to AWS SDK v2 #7765 NO-JIRA: Skip ./dev directory in codespell checks #7775
NO-JIRA: MCE 2.17 konflux pipielines #7736
NO-JIRA: chore: add powervs-reviewers to OWNERS_ALIASES and OWNERS #7782
OCPBUGS-59876 : feat: implement CLI-based OIDC disaster recovery command #7210 OCPBUGS-62177 : revert CRR controller changes #7784 OCPBUGS-65824 : Add dynamic NodePort range validation to prevent cluster creation failures #7652 CNTRLPLANE-2740 : Set unhealthyPodEvictionPolicy to AlwaysAllow on all PDBs #7721 OCPBUGS-32770 : fix(kubevirt): require CAPK image to be explicitly specified #7615 OCPBUGS-62177 : fix(pki): use pod container port instead of kubeconfig service port #7744 CNTRLPLANE-1987 : Ensure Azure HCP CLI infra commands work correctly #7436 NO-JIRA: fix(e2e): retry guest cluster API calls in EnsureFeatureGateStatus #7723
OCPBUGS-70152 : Correct route labeling logic for HCP router infratructure #7605 CNTRLPLANE-2216 : feat(aws): migrate route53 to AWS SDK v2 #7726 OCPBUGS-43449 : Remove UltraSSD_LRS from DiskStorageAccountType for OS Disks #7727 CNTRLPLANE-644 : Unify Validate/Complete Function Signatures Across Providers #7577 OCPBUGS-65879 : Fix image-overrides annotation removal propagation to HCP #7533 CNTRLPLANE-2740 : Add KAS liveness readiness sidecar to OAS and OAuth API Server #7722 OCPBUGS-34662 : Manage AWS EBS CSI driver metrics serving certificates via CPO #7538 OCPBUGS-73915 : Use openshift golang builder for MCE builds #7735 NO-JIRA: Remove .claude/settings.json #7751
OCPBUGS-62177 : Fix certificate revocation validation across all KAS pods #7405 CNTRLPLANE-2696 : docs(azure): add managed Azure control plane authentication documentation #7653 NO-JIRA: test(e2e): add CloudController field to GCP ServiceAccountsEmails structs #7739
AUTOSCALE-485 : bump karpenter-aws dependencies to 1.8.6 #7611 TRT-2554 : Revert #7489 “CNTRLPLANE-2203: add ControlPlaneConnectionAvailable condition” #7734 GCP-367 : Implement GCP Cloud Controller Manager component #7677 OCPBUGS-72596 : Fix node-tuning-operator metrics port configuration #7468 CNTRLPLANE-2203 : add ControlPlaneConnectionAvailable condition #7489 GCP-386 : feat(gcp): enable DNS delegation for hosted cluster ingress via DNSEndpoint #7702 NO-JIRA: ci: fix bug in leader election detection #7696
GCP-308 : test: verify control plane workloads have resource requests #7623 OCPBUGS-60707 : Fix user-ca-bundle cleanup when additionalTrustBundle is removed #6900 CNTRLPLANE-2736 : Rename review-agent-single-pr to address-review-comments #7709 CNTRLPLANE-2215 : feat(aws): migrate S3 to AWS SDK v2 #7678 NO-JIRA: test(nodepool): add unit tests for scale-from-zero annotations #7688
OCPBUGS-55151 : Move proxy certificate validation from metrics collector to reconcile loop #7536 CNTRLPLANE-418 : Aro swift private #7613 CNTRLPLANE-2700 : docs: add HCP networking requirements documentation #7654 CNTRLPLANE-2675 : chore(cpo): move infrastructure reconciliation to infra package #7658 GCP-216 : feat(nodepool): add GCP platform support #7631 GCP-199 : add DNS management to Control Plane Operator #7639 AUTOSCALE-492 : karpenter-ignition controller #7582 OCPBUGS-66966 : loop over node-pool conditions updating in order #7325 SREP-715 : New option to dump data plane content through the kube API server service exposed in HCP namespaces #6533 OCPBUGS-74620 : test(e2e): increase default node ready timeout to 45 minutes #7629 OCPBUGS-74498 : Add UserAgent telemetry to CPO Azure SDK clients #7620 OCPBUGS-74931 : fix(hcco): gate image registry workaround to pre-4.20 releases #7634 NO-JIRA: docs(aws): add AWS PrivateLink architecture documentation #7645
NO-JIRA: chore(ai): Add skills for dev workflow #7636
CNTRLPLANE-2709 : Update Dependabot to use conventional commits #7672 CNTRLPLANE-2703 : Disable Renovate dependency updates #7657 OCPBUGS-74988 : fix(test): resolve E2E flakes in global-pull-secret-syncer DaemonSet readiness checks #7627 CNTRLPLANE-2214 : Migrate STS to AWS SDK v2 #7386 NO-JIRA:Docs: update documentation URL from netlify to pages.dev #7622
GCP-366 : add CloudController service account for CCM #7617 NO-JIRA: ci: Improves the isLeaderElectionFailure function: #7589
NO-JIRA: Fix teardown flag timing in e2e tests #7586
CNTRLPLANE-2548 : add direct Jira REST API integration to pr-report #7532 OCPSTRAT-2437 : add unit test for custom HAProxy image annotation #7458 CNTRLPLANE-1708 : Enable EnsureGlobalPullSecret AtLeast Version418 #7624 CNTRLPLANE-418 : fix shared ingress AllowedCIDRs to use fc_src for PROXY protocol #7587 AUTOSCALE-535 : default block device mappings #7583 OCPBUGS-69447 : feat(updates): enable CVO metrics access with RHOBS monitoring flag #7399 GCP-198 : add PSC endpoint controller for customer-side management #7603 CNTRLPLANE-2650 : docs(ci): add security requirement for Jira agent issues #7626 CNTRLPLANE-2650 : docs: add AI-assisted CI jobs documentation #7598 OCPBUGS-62760 : Pre-pull images to avoid startup delays and flaky e2e #7382 OCPBUGS-74247 : CAPI image overrides aware of registry config #7575 CNTRLPLANE-1137 : Add support for external CNI provider Cilium #7423 GCP-176 : feat(gcp): add WIF credentials support for control plane op… #7600 NO-JIRA: test(assets): add unit test for CAPI resources file paths #7601
CNTRLPLANE-2580 : feat(claude): update /update-konflux-tasks to work without log file #7591 GCP-213 : feat(platform): add Google Cloud Platform support with CAPG Deployment #7305 OCPBUGS-62944 : forceful termination of instances during HCP AutoNode deletion #7281 NO-JIRA: build: bump Go version to 1.25.3 #7592
CNTRLPLANE-1388 : Spot with termination handler #7567 CNTRLPLANE-1892 : chore(e2ev2): fixup GCP API checks #7555 NO-JIRA: ci: update build root image to Go 1.25 #7584
CNTRLPLANE-1988 : Add Azure support to product CLI for self-managed customers #7407 AUTOSCALE-373 : Proper ROSA instance tagging for AutoNode #6939 OCPBUGS-63345 : AWS credential metric to distinguish unknown from invalid status #7075 OCPBUGS-74336 : feat(cpo): check components have rolled out before setting available #7434 NO-JIRA: chore(deps): weekly dependabot consolidation #7563
OCPBUGS-64576 : fix(dump): Fix dump command failure when EC2NodeClass resource is not registered #7147 CNTRLPLANE-2559 : feat(contrib): add request serving setup utility #7534 CNV-76520 : ci: allow restart of kubevirt-cloud-controller-manager #7469 NO-JIRA: fix(test): shorten scale-from-zero test name to avoid IAM role length limit #7558
OTA-1833 : Adopt a new FeatureSet OKD #7557 OCPBUGS-62761 : chore(e2e): remove KAS check from capi pod #7485 OCPBUGS-73817 : fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment #7480 OCPBUGS-65885 : added 1.34 required ELBv2 perms to CCM role #7339 API-1835 : Scaffold dynamic informers #7477 CNTRLPLANE-2579 : feat(konflux): add script to update pipeline task bundles to latest trusted versions #7553 OCPBUGS-58397 : feat(KubeVirt): configure External evictionStrategy on VMs #6380 GCP-197 : add GCPPrivateServiceConnect controller for managing Service Attachments for Private Service Connect #7302 NO-JIRA: fix(e2e): TestNodePoolAutoscalingScaleFromZero for 4.20 and later only #7556
CNTRLPLANE-2291 : feat(claude): add fix-hypershift-repo-robot-pr command #7438 CNTRLPLANE-2568 : Update Konflux Tekton tasks to latest versions #7551 NO-JIRA: test(ingress): add test for clearing LoadBalancerSourceRanges #7544
NO-JIRA: fix(claude): fix Claude Code subagents frontmatter #7550
NO-JIRA: chore(deps): bump github.com/opencontainers/selinux from 1.11.0 to 1.13.0 #7462
OCPBUGS-55399 : Add NTO Service and ServiceMonitor #7355 NO-JIRA: test(autoscaling): make GPU annotation optional in scale-from-zero test #7484
OCPBUGS-73914 : Update Tekton tasks to pass enterprise contract validation #7535 NO-JIRA: chore(deps): bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 in /hack/tools #7463
NO-JIRA: Add karpenter approvers and reviewers #7488
NO-JIRA: chore(ho): update lower bound version checks for OCP 5 #7472
NO-JIRA: fix(docs): strip markdown links from aggregated documentation #7487
NO-JIRA: chore(deps): bump github-dependencies group with 17 updates #7455
OCPBUGS-73847 : fix(cli): use /tags endpoint for all release streams to enable RC filtering #7483 OCPBUGS-67234 : fix(hostedcluster): unpause CAPI cluster when deleting paused HostedCluster #7389 OCPBUGS-72258 : use InfraStatus.APIPort for custom DNS kubeconfig #7470 API-1835 : Scaffold OpenShiftManager controller #7445 CNTRLPLANE-1768 : feat(api): add support for graceful service account signing key rotation #7324 OCPBUGS-66205 : [kubevirt] Make L3 migration labeling conditional #7308 NO-JIRA: chore(deps): bump Azure SDK and misc-dependencies groups #7464
NO-JIRA: chore(tekton): update Konflux task digests to latest versions #7465
OCPBUGS-70320 : enable scale-up from zero with InPlace upgrade #7427 NO-JIRA: Add review process docs to CONTRIBUTING.md #7426
CNTRLPLANE-208 : Document needed Azure infrastructure #7361 NO-JIRA: fix(deps): update k8s.io/utils digest to 914a6e7 #7450
NO-JIRA: chore(deps): bump misc-dependencies group with 11 updates #7437
OCPBUGS-72411 : fix(cno): use brackets only for IPv6 in server URL #7447 NO-JIRA: chore(konflux): update Tekton tasks to latest versions #7451
OCPBUGS-72397 : Fix Konflux EC voilation, update deprecated base … #7442 NO-JIRA: docs(konflux): add IMAGE_RELEASE_PROCESS.md #7432
NO-JIRA: test(e2e): fix AKS e2e test flakiness #7410
CNTRLPLANE-1978 : add e2e tests for DataPlaneConnectionAvailable condition #7291 AUTOSCALE-473 : Add HostedCluster annotation for karpenter ec2nodeclass instanceProfile #7392 NO-JIRA: fix(awseps): cache local zone ID in non-shared VPC case #7409
OCPBUGS-66211 : fix(azure): preserve defaulted values in Infrastructure status #7393 OCPBUGS-69761 : fix(ingress): clear LoadBalancerSourceRanges when AllowedCIDRBlocks is removed #7425 GCP-258 : Use PullAlways for :latest image tags in control plane components #7313 OCPBUGS-63698 : fix(azure): remove CSI secret ownership from hypershift-operator #7157 OCPBUGS-66154 : add OAuth certificate configuration doc #7351 OCPBUGS-67224 : fix(Portieris): Fix Portieris by mounting emptyDir to ‘./.trust’ work dir #7368 CNTRLPLANE-1622 : Enable nodepool autoscaling min zero #6975 And 26 elided commits (e.g. from squash or rebase merges)
Full changelog
Node Image Info Loading node image info, this may take a while ...
CentOS Stream CoreOS 10 (stream-coreos)
Package List
cri-o-1.36.1-1.el10s
kernel-6.12.0-233.el10
openshift-kubelet-5.0.0-202606091635.p2.gd8d517e.assembly.stream.el10
systemd-257-26.el10
Full list (491 packages)
NetworkManager-1:1.56.1-1.el10
NetworkManager-cloud-setup-1:1.56.1-1.el10
NetworkManager-libnm-1:1.56.1-1.el10
NetworkManager-ovs-1:1.56.1-1.el10
NetworkManager-tui-1:1.56.1-1.el10
WALinuxAgent-udev-2.14.0.1-3.el10
aardvark-dns-2:1.17.0-1.el10
acl-2.3.2-4.el10
afterburn-5.10.0-2.el10
afterburn-dracut-5.10.0-2.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260508-23.el10
amd-ucode-firmware-20260508-23.el10
attr-2.5.2-5.el10
audit-4.0.3-5.el10
audit-libs-4.0.3-5.el10
audit-rules-4.0.3-5.el10
authselect-1.5.2-1.el10
authselect-libs-1.5.2-1.el10
avahi-libs-0.9~rc2-3.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-18.el10
bind-license-32:9.18.33-18.el10
bind-utils-32:9.18.33-18.el10
bootc-1.15.2-1.el10
bootupd-0.2.34-1.el10
bsdtar-3.7.7-8.el10
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.6-1.el10
ca-certificates-2025.2.80_v9.0.305-102.el10
catatonit-5:0.2.1-4.el10
centos-gpg-keys-10.0-23.el10
centos-release-cloud-1-1.el10s
centos-release-nfv-common-1-5.el10s
centos-release-virt-common-1-1.el10s
centos-stream-release-10.0-23.el10
centos-stream-repos-10.0-23.el10
checkpolicy-3.10-1.el10
chrony-4.8-2.el10
cifs-utils-7.5-2.el10
clevis-23-1.el10
clevis-dracut-23-1.el10
clevis-luks-23-1.el10
clevis-pin-tpm2-0.5.5-1.el10
clevis-systemd-23-1.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.2.1-4.el10
conmon-rs-0.6.6-2.el10s
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.248.0-1.el10
containers-common-6:5.8-2.el10
containers-common-extra-6:5.8-2.el10
coreos-installer-0.26.0-1.el10
coreos-installer-bootinfra-0.26.0-1.el10
coreutils-9.5-11.el10
coreutils-common-9.5-11.el10
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-1.36.1-1.el10s
cri-tools-1.36.0-1.el10s
criu-4.2-4.el10
criu-libs-4.2-4.el10
crun-1.27-1.el10
crypto-policies-20260525-1.gitf5f5370.el10
crypto-policies-scripts-20260525-1.gitf5f5370.el10
cryptsetup-2.8.6-1.el10
cryptsetup-libs-2.8.6-1.el10
curl-8.12.1-6.el10
cyrus-sasl-gssapi-2.1.28-27.el10
cyrus-sasl-lib-2.1.28-27.el10
dbus-1:1.14.10-5.el10
dbus-broker-36-4.el10
dbus-common-1:1.14.10-5.el10
dbus-libs-1:1.14.10-5.el10
dbus-tools-1:1.14.10-5.el10
device-mapper-10:1.02.215-2.el10
device-mapper-event-10:1.02.215-2.el10
device-mapper-event-libs-10:1.02.215-2.el10
device-mapper-libs-10:1.02.215-2.el10
device-mapper-multipath-0.9.9-19.el10
device-mapper-multipath-libs-0.9.9-19.el10
device-mapper-persistent-data-1.3.2-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-24.el10
dnf-data-4.20.0-24.el10
dnsmasq-2.90-7.el10
dosfstools-4.2-12.el10
dracut-107-4.el10
dracut-network-107-4.el10
dracut-squash-107-4.el10
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-8.el10
efibootmgr-18-9.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.195-1.el10
elfutils-libelf-0.195-1.el10
elfutils-libs-0.195-1.el10
erofs-utils-1.8.10-1.el10
ethtool-2:6.19-1.el10
expat-2.7.3-1.el10
fcoe-utils-1.0.34-11.gitb233050.el10
file-5.45-12.el10
file-libs-5.45-12.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.2-1.el10
flatpak-session-helper-1.18.0-1.el10
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-2.0.19-2.el10
gawk-5.3.0-6.el10
gdbm-1:1.23-14.el10
gdbm-libs-1:1.23-14.el10
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-13.el10
glibc-2.39-124.el10
glibc-common-2.39-124.el10
glibc-gconv-extra-2.39-124.el10
glibc-minimal-langpack-2.39-124.el10
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-4.el10
gnutls-3.8.10-4.el10
gobject-introspection-1.79.1-6.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-48.el10
grub2-efi-x64-1:2.12-48.el10
grub2-pc-1:2.12-48.el10
grub2-pc-modules-1:2.12-48.el10
grub2-tools-1:2.12-48.el10
grub2-tools-minimal-1:2.12-48.el10
gssproxy-0.9.2-10.el10
gzip-1.13-3.el10
hostname-3.23-14.el10
hwdata-0.379-10.8.el10
ignition-2.26.0-3.el10
ignition-grub-2.26.0-3.el10
ima-evm-utils-1.6.2-5.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260508-23.el10
ipcalc-1.0.3-12.el10
iproute-6.17.0-2.el10
iproute-tc-6.17.0-2.el10
iptables-libs-1.8.11-14.el10
iptables-nft-1.8.11-14.el10
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
isns-utils-libs-0.103-1.el10
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-13.el10
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-7.el10
kbd-legacy-2.6.4-7.el10
kbd-misc-2.6.4-7.el10
kdump-utils-1.0.58-15.el10
kernel-6.12.0-233.el10
kernel-core-6.12.0-233.el10
kernel-modules-6.12.0-233.el10
kernel-modules-core-6.12.0-233.el10
kernel-modules-extra-6.12.0-233.el10
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-13.el10
kmod-libs-31-13.el10
kpartx-0.9.9-19.el10
krb5-libs-1.21.3-11.el10
less-661-3.el10
libacl-2.3.2-4.el10
libaio-0.3.111-22.el10
libarchive-3.7.7-8.el10
libassuan-2.5.6-6.el10
libattr-2.5.2-5.el10
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-20.el10
libbpf-2:1.7.0-1.el10
libcap-2.69-7.el10
libcap-ng-0.9.3-1.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libconfig-1.7.3-10.el10
libcurl-minimal-8.12.1-6.el10
libdhash-0.5.0-58.el10
libdnf-0.73.1-16.el10
libdnf-plugin-subscription-manager-1.30.14-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.12-16.el10
libfdisk-2.40.2-20.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.3.1-4.4.el10
libgcrypt-1.11.0-6.el10
libgomp-14.3.1-4.4.el10
libgpg-error-1.50-2.el10
libibverbs-62.0-2.el10
libicu-74.2-5.el10
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.13.0-1.el10
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.0-3.el10
libkcapi-hasher-1.5.0-3.el10
libkcapi-hmaccalc-1.5.0-3.el10
libksba-1.6.7-2.el10
libldb-4.23.5-107.el10
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-20.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-7.el10
libnftnl-1.3.0-3.el10
libnghttp2-1.68.0-4.el10
libnl3-3.11.0-1.el10
libnvme-1.16.1-3.el10
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-12.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
libseccomp-2.5.6-1.el10
libselinux-3.10-2.el10
libselinux-utils-3.10-2.el10
libsemanage-3.10-1.el10
libsepol-3.10-2.el10
libsmartcols-2.40.2-20.el10
libsmbclient-4.23.5-107.el10
libsolv-0.7.33-5.el10
libss-1.47.1-5.el10
libsss_certmap-2.13.0-1.el10
libsss_idmap-2.13.0-1.el10
libsss_nss_idmap-2.13.0-1.el10
libsss_sudo-2.13.0-1.el10
libstdc++-14.3.1-4.4.el10
libtalloc-2.4.3-100.el10
libtasn1-4.20.0-5.el10
libtdb-1.4.14-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-14.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.30-1.el10
libutempter-1.2.1-15.el10
libuuid-2.40.2-20.el10
libuv-1:1.52.1-1.el10
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.23.5-107.el10
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-12.el10
libxmlb-0.3.24-1.el10
libxslt-1.1.39-9.el10
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260508-23.el10
linux-firmware-whence-20260508-23.el10
lldpad-1.1.1-4.gitf1dd9eb.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.8-1.el10
luksmeta-10-1.el10
lvm2-10:2.03.41-2.el10
lvm2-libs-10:2.03.41-2.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-1.el10
mdadm-4.4-3.el10
microcode_ctl-4:20260210-1.el10
mokutil-2:0.7.2-4.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-8.el10
nano-8.1-3.el10
ncurses-base-6.4-15.20240127.el10
ncurses-libs-6.4-15.20240127.el10
net-tools-2.0-0.73.20160912git.el10
netavark-2:1.17.2-2.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-7.el10
nftables-1:1.1.5-5.el10
nmap-ncat-4:7.92-5.el10
nmstate-2.2.60-2.el10
npth-1.6-21.el10
nss-altfiles-2.23.0-6.el10
numactl-2.0.19-3.el10
numactl-libs-2.0.19-3.el10
numad-0.5-50.20251104git.el10
nvidia-gpu-firmware-20260508-23.el10
nvme-cli-2.16-2.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.10-1.el10
openldap-2.6.13-1.el10
openshift-clients-5.0.0-202606161604.p2.gc639a31.assembly.stream.el10
openshift-kubelet-5.0.0-202606091635.p2.gd8d517e.assembly.stream.el10
openssh-9.9p1-26.el10
openssh-clients-9.9p1-26.el10
openssh-server-9.9p1-26.el10
openssl-1:3.5.5-3.el10
openssl-fips-provider-1:3.5.5-3.el10
openssl-libs-1:3.5.5-3.el10
openvswitch-selinux-extra-policy-1.0-36.el10s
openvswitch3.5-3.5.3-5.el10s
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-5.0.0-202606082203.p2.gd5b48e8.assembly.stream.el10
ose-azure-acr-image-credential-provider-5.0.0-202605262025.p2.gf10dd9c.assembly.stream.el10
ose-crio-credential-provider-5.0.0-202603041733.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider-5.0.0-202605141918.p2.g808c2a2.assembly.stream.el10
ostree-2026.1-1.el10
ostree-grub2-2026.1-1.el10
ostree-libs-2026.1-1.el10
p11-kit-0.26.2-1.el10
p11-kit-trust-0.26.2-1.el10
pam-1.6.1-10.el10
pam-libs-1.6.1-10.el10
passt-0^20251210.gd04c480-3.el10
passt-selinux-0^20251210.gd04c480-3.el10
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.el10.3
pcre2-syntax-10.44-1.el10.3
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:5.8.2-1.el10
podman-sequoia-0.4.0~pqc.3-1.el10
policycoreutils-3.10-3.el10
policycoreutils-python-utils-3.10-3.el10
polkit-125-6.el10
polkit-libs-125-6.el10
popt-1.19-8.el10
procps-ng-4.0.4-13.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.13-2.el10
python3-audit-4.0.3-5.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.14-1.el10
python3-dateutil-1:2.9.0.post0-1.el10
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-24.el10
python3-dnf-plugin-versionlock-4.7.0-10.el10
python3-dnf-plugins-core-4.7.0-10.el10
python3-file-magic-5.45-12.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-16.el10
python3-idna-3.7-4.el10
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-16.el10
python3-librepo-1.19.0-1.el10
python3-libs-3.12.13-2.el10
python3-libselinux-3.10-2.el10
python3-libsemanage-3.10-1.el10
python3-packaging-24.2-2.el10
python3-pexpect-4.9.0-6.el10
python3-pip-wheel-23.3.2-11.el10
python3-policycoreutils-3.10-3.el10
python3-ptyprocess-0.7.0-9.el10
python3-pyyaml-6.0.1-19.el10
python3-requests-2.32.4-1.el10
python3-rpm-4.19.1.1-23.el10
python3-setools-4.6.0-3.el10
python3-setuptools-69.0.3-12.el10
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.14-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-3.el10
qemu-guest-agent-18:10.1.0-20.el10
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-62.0-2.el10
readline-8.2-11.el10
rpcbind-1.2.7-3.el10
rpm-4.19.1.1-23.el10
rpm-build-libs-4.19.1.1-23.el10
rpm-libs-4.19.1.1-23.el10
rpm-ostree-2026.1-4.el10
rpm-ostree-libs-2026.1-4.el10
rpm-plugin-selinux-4.19.1.1-23.el10
rpm-sequoia-1.10.2.1-1.el10
rpm-sign-libs-4.19.1.1-23.el10
rsync-3.4.1-6.el10
samba-client-libs-4.23.5-107.el10
samba-common-4.23.5-107.el10
samba-common-libs-4.23.5-107.el10
sed-4.9-5.el10
selinux-policy-42.1.23-1.el10
selinux-policy-targeted-42.1.23-1.el10
setup-2.14.5-7.el10
sg3_utils-1.48-9.el10
sg3_utils-libs-1.48-9.el10
shadow-utils-2:4.15.0-12.el10
shadow-utils-subid-2:4.15.0-12.el10
shared-mime-info-2.3-8.el10
shim-x64-16.1-1.el10
skopeo-2:1.22.2-2.el10
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-8.el10
sos-4.11.0-1.el10
sqlite-libs-3.46.1-5.el10
ssh-key-dir-0.1.4-9.el10
sssd-2.13.0-1.el10
sssd-ad-2.13.0-1.el10
sssd-client-2.13.0-1.el10
sssd-common-2.13.0-1.el10
sssd-common-pac-2.13.0-1.el10
sssd-ipa-2.13.0-1.el10
sssd-krb5-2.13.0-1.el10
sssd-krb5-common-2.13.0-1.el10
sssd-ldap-2.13.0-1.el10
sssd-nfs-idmap-2.13.0-1.el10
sssd-proxy-2.13.0-1.el10
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.14-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-9.p2.el10
systemd-257-26.el10
systemd-journal-remote-257-26.el10
systemd-libs-257-26.el10
systemd-pam-257-26.el10
systemd-udev-257-26.el10
tar-2:1.35-11.el10
tmux-3.3a-13.20230918gitb202a2f.el10
toolbox-0.3-3.el10
tpm2-tools-5.7-5.el10
tpm2-tss-4.1.3-6.el10
tpm2-tss-fapi-4.1.3-6.el10
tzdata-2026b-1.el10
unbound-anchor-1.24.2-7.el10
unbound-libs-1.24.2-7.el10
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-20.el10
util-linux-core-2.40.2-20.el10
vim-data-2:9.1.083-13.el10
vim-minimal-2:9.1.083-13.el10
virt-what-1.27-3.el10
which-2.21-44.el10
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10
xz-libs-1:5.6.2-4.el10
zlib-ng-compat-2.2.3-3.el10
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10
Extensions
Full list (112 packages)
NetworkManager-libreswan-1.2.30-2.el10.x86_64
binutils-2.41-65.el10.x86_64
binutils-gold-2.41-65.el10.x86_64
bison-3.8.2-9.el10.x86_64
cmake-filesystem-3.31.8-1.el10.x86_64
cpp-14.3.1-4.4.el10.x86_64
elfutils-debuginfod-client-0.195-1.el10.x86_64
elfutils-libelf-devel-0.195-1.el10.x86_64
flex-2.6.4-19.el10.x86_64
gcc-14.3.1-4.4.el10.x86_64
glibc-devel-2.39-124.el10.x86_64
groff-base-1.23.0-10.el10.x86_64
kernel-6.12.0-233.el10.x86_64
kernel-core-6.12.0-233.el10.x86_64
kernel-devel-6.12.0-233.el10.x86_64
kernel-headers-6.12.0-233.el10.x86_64
kernel-modules-6.12.0-233.el10.x86_64
kernel-modules-extra-6.12.0-233.el10.x86_64
kernel-rt-core-6.12.0-233.el10.x86_64
kernel-rt-devel-6.12.0-233.el10.x86_64
kernel-rt-modules-6.12.0-233.el10.x86_64
kernel-rt-modules-core-6.12.0-233.el10.x86_64
kernel-rt-modules-extra-6.12.0-233.el10.x86_64
krb5-pkinit-1.21.3-11.el10.x86_64
krb5-workstation-1.21.3-11.el10.x86_64
ldns-1.8.3-18.el10.x86_64
libkadm5-1.21.3-11.el10.x86_64
libmpc-1.3.1-7.el10.x86_64
libqb-2.0.8-6.el10.x86_64
libreswan-5.3-8.el10.x86_64
libreswan-minimal-5.3-8.el10.x86_64
libxcrypt-devel-4.4.36-10.el10.x86_64
libzstd-devel-1.5.5-9.el10.x86_64
lm_sensors-libs-3.6.0-20.el10.x86_64
m4-1.4.19-11.el10.x86_64
make-1:4.4.1-9.el10.x86_64
ncurses-6.4-15.20240127.el10.x86_64
nspr-4.39.0-2.el10.x86_64
nss-3.124.0-2.el10.x86_64
nss-softokn-3.124.0-2.el10.x86_64
nss-softokn-freebl-3.124.0-2.el10.x86_64
nss-sysinit-3.124.0-2.el10.x86_64
nss-tools-3.124.0-2.el10.x86_64
nss-util-3.124.0-2.el10.x86_64
openssl-devel-1:3.5.5-3.el10.x86_64
openvswitch3.5-ipsec-3.5.3-5.el10s.x86_64
pcp-conf-7.1.5-1.el10.x86_64
pcp-libs-7.1.5-1.el10.x86_64
perl-AutoLoader-5.74-514.el10.noarch
perl-B-1.89-514.el10.x86_64
perl-Carp-1.54-511.el10.noarch
perl-Class-Struct-0.68-514.el10.noarch
perl-Data-Dumper-2.189-512.el10.x86_64
perl-Digest-1.20-511.el10.noarch
perl-Digest-MD5-2.59-6.el10.x86_64
perl-DynaLoader-1.56-514.el10.x86_64
perl-Encode-4:3.21-511.el10.x86_64
perl-Errno-1.38-514.el10.x86_64
perl-Exporter-5.78-511.el10.noarch
perl-Fcntl-1.18-514.el10.x86_64
perl-File-Basename-2.86-514.el10.noarch
perl-File-Path-2.18-512.el10.noarch
perl-File-Temp-1:0.231.100-512.el10.noarch
perl-File-stat-1.14-514.el10.noarch
perl-FileHandle-2.05-514.el10.noarch
perl-Getopt-Long-1:2.58-3.el10.noarch
perl-Getopt-Std-1.14-514.el10.noarch
perl-HTTP-Tiny-0.088-512.el10.noarch
perl-IO-1.55-514.el10.x86_64
perl-IO-Socket-IP-0.42-512.el10.noarch
perl-IO-Socket-SSL-2.085-3.el10.noarch
perl-IPC-Open3-1.22-514.el10.noarch
perl-MIME-Base64-3.16-511.el10.x86_64
perl-Mozilla-CA-20231213-5.el10.noarch
perl-NDBM_File-1.17-514.el10.x86_64
perl-Net-SSLeay-1.94-9.el10.x86_64
perl-POSIX-2.20-514.el10.x86_64
perl-PathTools-3.91-512.el10.x86_64
perl-Pod-Escapes-1:1.07-511.el10.noarch
perl-Pod-Perldoc-3.28.01-512.el10.noarch
perl-Pod-Simple-1:3.45-511.el10.noarch
perl-Pod-Usage-4:2.03-511.el10.noarch
perl-Scalar-List-Utils-5:1.63-511.el10.x86_64
perl-SelectSaver-1.02-514.el10.noarch
perl-Socket-4:2.038-511.el10.x86_64
perl-Storable-1:3.32-511.el10.x86_64
perl-Symbol-1.09-514.el10.noarch
perl-Term-ANSIColor-5.01-512.el10.noarch
perl-Term-Cap-1.18-511.el10.noarch
perl-Text-ParseWords-3.31-511.el10.noarch
perl-Text-Tabs+Wrap-2024.001-511.el10.noarch
perl-Time-Local-2:1.350-511.el10.noarch
perl-URI-5.27-3.el10.noarch
perl-base-2.27-514.el10.noarch
perl-constant-1.33-512.el10.noarch
perl-if-0.61.000-514.el10.noarch
perl-interpreter-4:5.40.2-514.el10.x86_64
perl-libnet-3.15-512.el10.noarch
perl-libs-4:5.40.2-514.el10.x86_64
perl-locale-1.12-514.el10.noarch
perl-mro-1.29-514.el10.x86_64
perl-overload-1.37-514.el10.noarch
perl-overloading-0.02-514.el10.noarch
perl-parent-1:0.241-512.el10.noarch
perl-podlators-1:5.01-511.el10.noarch
perl-vars-1.05-514.el10.noarch
protobuf-3.19.6-15.el10.x86_64
python3-openvswitch3.5-3.5.3-5.el10s.x86_64
sysstat-12.7.6-4.el10.x86_64
usbguard-1.1.4-2.el10.x86_64
usbguard-selinux-1.1.4-2.el10.noarch
zlib-ng-compat-devel-2.2.3-3.el10.x86_64
base layer : 10 10.0.20260614-0
CNTRLPLANE-3552 : Multi-stream CoreOS base layer : metadata parsing and stream resolution #8669
GCP-440 : Fix GCP boot image discovery from CoreOS base layer : stream metadata #7881
Source code for this page located on github