Back to index
5.0.0-0.okd-scos-nightly-2026-07-16-151023 Download installer and client with:
oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:5.0.0-0.okd-scos-nightly-2026-07-16-151023 Qualifiers (status api ): None
Tests:
Blocking jobsaws Succeeded periodic-ci-openshift-release-main-okd-scos-5.0-e2e-aws-ovn Informing jobsagent-single-node-ipv6 Failed periodic-ci-openshift-release-main-okd-scos-5.0-e2e-agent-single-node-ipv6aws-ovn-techpreview Failed (2 retries) periodic-ci-openshift-release-main-okd-scos-5.0-e2e-aws-ovn-techpreviewaws-upgrade Failed (1 retry) periodic-ci-openshift-release-main-okd-scos-5.0-e2e-aws-ovn-upgradeaws-upgrade-minor Failed periodic-ci-openshift-release-main-okd-scos-5.0-upgrade-from-okd-scos-4.22-e2e-aws-ovn-upgradegcp Failed periodic-ci-openshift-release-main-okd-scos-5.0-e2e-gcpvsphere Succeeded periodic-ci-openshift-release-main-okd-scos-5.0-e2e-vsphere-ovn Async jobs Upgrades from:
Loading changelog, this may take a while ...
Created: 2026-07-16 15:10:44 +0000 UTC
Image Digest: sha256:8270cfe685a8aa22156b73e0f32d47c3bc1991f8137877d2ca77d21b4ef433e9
Components
Kubectl 1.35.2
Kubernetes 1.35.3
Kubernetes Tests 1.35.1
CentOS Stream CoreOS 10 10.0.20260702-0
FeatureGate Changes
FeatureGate
Default
Default
DevPreviewNoUpgrade
DevPreviewNoUpgrade
OKD
OKD
TechPreviewNoUpgrade
TechPreviewNoUpgrade
AzureClusterHostedDNSInstall
Unconditionally Enabled
Unconditionally Enabled
Unconditionally Enabled
Unconditionally Enabled
Unconditionally Enabled
Unconditionally Enabled
Unconditionally Enabled
Unconditionally Enabled
IngressComponentRouteLabels
Enabled
Enabled
Enabled
Enabled
New images
Removed images
Rebuilt images without code change
MGMT-24699 : Assisted Service IPv6 CIDR comparison may fail with non-normalized CIDRs #10569 MGMT-24327 : upgrade assisted-service postgresql from 15 to 16 #10519 ACM-35865 : CVE-2026-39828 Bump golang.org/x/crypto to v0.52.0 using replace directive (api module) #10618 ACM-35865 : CVE-2026-39828 Bump golang.org/x/crypto to v0.52.0 using replace directive (models module) #10616 NO-ISSUE: [master] Bump OCP versions: 4.18, 5.0, 4.20, 4.16, 4.22, 4.19, 4.21, 4.14, 4.17 #10622
MGMT-24786 : Add resource-scoped authorization for local auth tokens #10603 NO-ISSUE: Refresh RPM lockfiles RPM lockfile refresh #10581
MGMT-18886 : OS Streams #10428 NO-ISSUE: hive-operator was migrated from community-operators to upstream-community-operators #10600
Full changelog
Upgrade node version in Containerfile (#3872) #3872
Apply patches (#3819) #3819
Upgrade path-to-regexp to ^8.4.2 (#3862) #3862
Upgrade sanitize-html to ^2.17.4 (#3861) #3861
Dedupe yarn.lock (#3863) #3863
Upgrade terser-webpack-plugin to ^5.6.1 (#3818) #3818
chore(deps): update typescript type definitions (non-major) (#3867) #3867
chore(deps): update dependency axios to ^1.18.1 (#3868) #3868
chore(deps): update konflux references (#3866) #3866
Upgrade brace-expansion to ^5.0.8 (#3855) #3855
OCPBUGS-96781 : Bump webpack-dev-server to 5.2.5 (#3822) #3822 chore(deps): update dependency tar to ^7.5.19 (#3826) #3826
no-jira: Bump axios to latest (1.18.1) (#3856) #3856
OCPBUGS-97734 : Increase default imageStorage to 100Gi and raise minimum to 50Gi (#3820) #3820 Show all operators on cluster installation page (#3849) #3849
Full changelog
NO-JIRA: Register the e2e tests for accept in the subfolder #2300
NO-JIRA: Fix staticcheck warnings in pkg/cli/admin/mustgather #2306
NO-JIRA: Fix go vet warning in process.go #2304
Full changelog
Revert #476 “SPLAT-2713: Update AWS CCM e2e test module version” #491
SPLAT-2713 : Update AWS CCM e2e test module version #476 OCPBUGS-64852 : Fixes progressing=True condition reporting #488 TRT-2777 : Revert #479 “Revert ‘TRT-2754: Revert Updates clusteroperator_controller progressing’” #487 Full changelog
OCPSTRAT-3036 : Rebase 1.36.2 #2813 OCPBUGS-91634 : CAPI: Fix ImageDigestFormat validation to allow deep registry paths #2918 Sippy timestamp filter should use Millisecond unix timestamp for proper filtering #2928
Remove AzureClusterHostedDNSInstall Featuregate #2902
OCPNODE-4604 : Upgrade v1 criocp payload resource #2900 CONSOLE-5163 : Add labels field to Ingress componentRoutes #2845 tooling: Update verify-feature-promotion logic for installer-focused features #2903
CNTRLPLANE-3751 : osin: Add ProxyTrustedCA field to OAuthConfig #2917 Integrate models-schema into codegen and fix openapi verify issues #2904
Full changelog
OTA-1967 : install: Drop Lightspeed CustomResourceDefinitions (Proposal, etc.) #1412 OTA-1956 : install: Split multi-document YAML and add missing annotations #1423 OCPCLOUD-3368 : bumping with o/api changes to reflect new capabilities (crdcompatibilitychecker+capi) #1403 TRT-2776 : Revert #1398 “install: Split multi-document YAML and add missing annotations” #1420 Full changelog
CNTRLPLANE-3030 : feat(nodepool,ignition-server): consume os-stream and add ValidOSImageStream condition #8792 OCPBUGS-88738 : clean up orphaned mirrored ConfigMaps on NodePool deletion #8890 OCPBUGS-97830 : Add wait-for-etcd init container to oauth-apiserver #8940 fix(ci): make race detection opt-out for pre-push hook #9003
CNTRLPLANE-3763 : tag CLI and e2e AWS resources with infra-id, cluster-name, and source #8909 OCPBUGS-93462 : Fix stale resourceVersion in HCCO patchHCPStatusCondition #8902 OCPBUGS-98466 : retry Prometheus query exec on transient konnectivity 502 #8995 OCPBUGS-98464 : handle stale DaemonSet in GlobalPullSecret test #8990 SPLAT-2741 : Add SetSecurityGroups perms for AWS CCM for BYO SG on AWS NLB #8401 OCPBUGS-98571 : Skip Azure topology LB scope override for ARO HCP IngressController #8992 CNTRLPLANE-3553 : Wire usesRunc detection into RHEL stream resolution #8832 OCPBUGS-88531 : Remove CPO-side restart logic for CNO operands #8751 CNTRLPLANE-3831 : skip UpstreamParity OIDC tests on releases before 4.23 #8987 OCPBUGS-98086 : fix(cpo,hcco): prevent premature KAS convergence during KMS key rotation #8970 OCPBUGS-78310 : fix(cli): initialize controller-runtime logger in product-cli #8955 OCPBUGS-63720 : orphan machines when managed identity is invalid on clus… #8296 OCPBUGS-98387 : Add retry logic to fix Azure self-managed e2e presubmit failures #8983 OCPBUGS-93785 : fix(cpo): initialize nil resource requests map before applying overrides #8924 OCPBUGS-91650 : disable consolidation in karpenter upgrade test #8874 CNTRLPLANE-3553 : Wire osImageStream into NodePool controller (hash, token, status, validation) #8730 NO-JIRA: chore: Resolve git SHA for PULL_BASE_SHA in makefile #8980
OCPBUGS-95615 : fix(kubevirt): use only first MachineInternalIP per family in EndpointSlice endpoints #8892 CNTRLPLANE-3824 : Fix verify-crd-schema in git worktrees #8975 GCP-859 : scope PSC NAT subnet discovery to the management cluster VPC #8927 CNTRLPLANE-3761 : replace git clean with find for mock cleanup #8973 NO-JIRA: chore: update core-reviewers membership #8967
OTA-1764 : feat(cvo): add TLS cipher suites and minimum version flags #8013 AROSLSRE-1158 : add –install-scope flag to hypershift install #8725 NO-JIRA: chore(deps): weekly dependabot consolidation #8849
CNTRLPLANE-3616 : setting min-tls-version for the konnectivity-server container #8866 CNTRLPLANE-3766 : add chai-bot CI daily health report instructions #8918 NO-JIRA: Remove address-review-comments GHA workflow #8943
CNTRLPLANE-3698 : fix(install): replace context.TODO() with proper ctx parameter #8932 CNTRLPLANE-3771 : fix /rebase GHA workflow for fork PRs #8934 NO-JIRA: chore: update github actions runner image to go 1.26.4 #8888
AROSLSRE-830 : Add etcd EndpointSlice self-registration to fix DNS resolution delays #8613 OCPBUGS-92086 : GetVnetID is empty when running setup_all.sh in Managed AKS #8830 OCPBUGS-84269 : fix(nodepool): skip CNI-internal IPs in ClusterNetworkCIDRConflict check #8230 CNTRLPLANE-3619 : add azure CPO overrides for 4.22.0-4.22.3 #8908 CNTRLPLANE-3696 : Remove stale TODO about ImagePullPolicy in DNS operator #8923 NO-JIRA: Fall back to AWS SDK default credential chain when no explicit credentials provided #8889
CNTRLPLANE-3697 : Expand unit test coverage for KAS config params #8922 CNTRLPLANE-3306 : add ExternalOIDCWithUpstreamParity e2e tests #8287 CNTRLPLANE-3624 : e2e v2 test for control-plane-pki-operator TLS configuration #8793 OCPBUGS-94238 : Add missing CLI IAM role policy entry #8883 NO-JIRA: Add missing verify targets to GitHub Actions workflow #8870
NO-JIRA: fix(e2e-v2): gate ConfigOperatorReconciliationSucceeded on 4.23+ #8875
CNTRLPLANE-3532 : Add shared status patching helpers with optimistic locking #8782 OCPBUGS-94178 : Remove –skip-crd-migration-phases flags from CAPI deployment #8881 NO-JIRA: add Konflux CI scripts reference and document validate-pr-override-images #8852
CNTRLPLANE-3529 : Add operator IAM role creation command and install role ARN flags #8636 CNTRLPLANE-3737 : Add find-push-pipelinerun script #8851 GCP-841 : remove ClusterResourceSet feature gate from CAPG manager args #8795 GCP-866 : chore(owners): add floresroger to gcp-reviewers #8863 CNTRLPLANE-3733 : add –blog flag to /pr-report skill #8848 CNTRLPLANE-3577 : test(nodepool): add NodeDrainTimeout propagation tests #8737 CNTRLPLANE-3576 : add RestartDateAnnotation propagation tests #8733 CNTRLPLANE-3565 : test and fix destroy grace period lifecycle #8789 OTA-1956 : Skip ConsolePlugin manifests during CVO bootstrap #8839 OCPBUGS-92791 : fix(configrefs): exclude componentRoutes secrets from management cluster sync #8838 CNTRLPLANE-3624 : add tls security profile configuration for the control-plane-pki-operator #8768 CNTRLPLANE-3686 : feat(api,cpo): add observedGeneration to ControlPlaneComponentStatus #8819 OCPBUGS-86025 : Close HTTP response bodies to prevent goroutine and connection leaks #8560 OCPBUGS-92206 : bump catalog image version cap from 4.21 to 4.22 #8836 OCPBUGS-86648 : move IP addresses from dnsNames to ips in etcd peer cert #8847 NO-JIRA: docs: add required pod-security annotation for GCP hosted clusters #8850
CNTRLPLANE-3716 : Update GitHub Actions docs with slash-command workflows #8822 OSDOCS-19432 : docs: add cluster capabilities how-to and contributor guide #8371 OCPBUGS-76530 : Fix intermittent etcd peer communication failures #8479 OCPBUGS-81312 : fix(cpo): use KubeAPIServerDNSName for OAuth LoginURL when set #8433 OCPBUGS-84114 , OSASINFRA-4368 : Update CAPO to latest stable release #8687 CNTRLPLANE-597 : Surface HCCO reconciliation failures in HostedCluster status #8340 OCPBUGS-92013 : fix NodePool stuck in UpdatingVersion/UpdatingConfig due to stale conversion-data annotation #8821 CNTRLPLANE-3526 : Add spec.monitoring API for metrics forwarding #8626 NO-JIRA: add blog section with June 2026 progress report #8816
OCPBUGS-91656 : fix(test): add retry logic to GetLogs in Karpenter kubelet propagatio… #8805 OCPBUGS-86415 : Use canonical image for kube-apiserver-proxy static pod #8742 OCPBUGS-92034 : fix registry override matching for digest and tag separators #8824 OCPBUGS-91997 : Apply MetricsSet relabel configs to KAS ServiceMonitor #8715 OCPBUGS-91650 : bump consolidateAfter to 60s in karpenter e2e base NodePool #8820 CNTRLPLANE-596 : Add –kubeconfig flag to HyperShift and HCP CLI #8402 NO-JIRA: Exclude generated delegating client from codecov #8825
CNTRLPLANE-3276 : Add Azure ExternalPrivateService and endpoint access transition test #8718 OCPBUGS-57453 : fix(cpo): use Status.DNSZoneID before querying AWS Route53 #8615 CNTRLPLANE-2916 : restore conditional deletion of openshift-ingress NetworkPolicy #8754 CNTRLPLANE-3352 : fix GHA reusable workflow for fork PRs #8818 CNTRLPLANE-502 : Add CRD breaking changes validation to HyperShift CI #8535 NO-JIRA: chore(deps): weekly dependabot consolidation #8784
CNTRLPLANE-3352 : force HTTPS for GHA plugin dependency clones #8815 OCPBUGS-90663 : fix(test): use Eventually for auth-config ConfigMap assertions #8799 NO-JIRA: docs: Add private topology DNS architecture documentation #8803
CNTRLPLANE-3145 : refactor(hostedcluster): segregate reconcile loop into error-collecting blocks #7908 OCPBUGS-86949 : Guard HCCO KubeletConfig CM deletion against transient source absence #8672 NO-JIRA: fix(ci): switch to openshift-developer plugin bundle for GHA workflows #8809
CNTRLPLANE-3611 : propagate tls profile to aws-pod-identity-webhook #8713 NO-JIRA: fix(ci): increase reusable workflow timeout to 90 minutes #8797
OCPBUGS-55621 : Replace konnectivity Dial with DialContext in konnectivity-https-proxy/cmd.go #8550 OCPBUGS-85585 : tighten registry override matching to strict longest-prefix across release-image consumers #8509 NO-JIRA: fix(ci): add –verbose flag required by stream-json output format #8796
CNTRLPLANE-3568 : test(e2e): verify AWS additional-tags propagation to guest infrastruc… #8712 ci: stream Claude output in GHA workflow logs #8778
OCPBUGS-88685 : Fix metrics-proxy unbounded memory growth #8740 CNTRLPLANE-3584 : Enable resource metrics for kube-scheduler endpoints #8680 CNTRLPLANE-3645 : docs: add retrospective guidelines #8777 CNTRLPLANE-3093 , CNTRLPLANE-3095 , CNTRLPLANE-3096 , CNTRLPLANE-3098 : lower Azure WI webhook test version gate to 4.20 #8323 CNTRLPLANE-3641 : ci: replace COMMUNITY_FORK_TOKEN PAT with GitHub App token #8776 AROSLSRE-687 : propagate HCP Azure resource ID annotation to control plane namespace #8312 ARO-24037 , OCPBUGS-86616 : feat(azure): add ACR pull identity to worker cloud.conf and VMSS #8472 NO-JIRA: chore(deps): weekly dependabot consolidation #8684
CNTRLPLANE-3641 : fix restructure-commits GHA to force push without confirmation #8771 CNTRLPLANE-3023 : Add CEL rule to prevent osImageStream removal #8719 CNTRLPLANE-3641 : add restructure-commits and rebase GHA workflows #8770 CNTRLPLANE-3636 : Add upgrade-from-.0 periodic jobs to OCP branching checklist #8764 CNTRLPLANE-3640 : Fix address-review-comments GHA credential file deleted during run #8769 CNTRLPLANE-3026 : Decouple AWS AMI resolution for dual-stream support #8699 CNTRLPLANE-3332 , CNTRLPLANE-3333 : Add control plane metrics forwarding recipe and Grafana dashboard #8332 ROSAENG-8224 : feat(operator): add –hcp-egress-block-cidrs flag to stabilize NetworkPolicy egress exceptions #8689 CNTRLPLANE-3633 : docs: add presubmit e2e triage guide #8741 OCPBUGS-89231 : version-gate TestPullSecretUnavailable to 4.23+ #8744 CNTRLPLANE-3552 : Multi-stream CoreOS metadata parsing and stream resolution #8669 ACM-34234 : build(cli): rename hcp archives to include OS and arch in filename #8649 CNTRLPLANE-3515 : test(e2e): add day-2 label/taint no-rollout verification #8595 NO-JIRA: Add Sippy/CR test name annotations to v2 e2e tests #8739
OCPBUGS-54790 : Move packageserver PDB from guest cluster to management cluster #8459 OCPBUGS-84577 : clear stale EtcdRecoveryActive failure condition when etcd is healthy #8406 CNTRLPLANE-3575 : test(controlplane-component): verify setDefaultOptions preserves exis… #8731 NO-JIRA: docs: improve AGENTS.md and DEVELOPMENT.md guidance for AI agents #8703
OCPBUGS-85778 : Fix NodePool reconciliation failure when updating mirrored immutable ConfigMaps #8543 OCPBUGS-86662 : Optimize CPO deployment polling interval in tests of additional trust bundle propagation #8617 NO-JIRA: ci(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 #8727
CNTRLPLANE-3271 : add External OIDC e2e tests for v2 framework #8674 OCPBUGS-84555 : fix(cpo): include serving cert CAs in bootstrap and external admin kubeconfigs #8311 NO-JIRA: chore: add unit test naming and placement conventions #8722
NO-JIRA: build(operator): drop hypershift-no-cgo from operator container images #8601
CNTRLPLANE-3617 : Increase address-review-comments max turns to 200 #8723 CNTRLPLANE-3617 : Increase address-review-comments timeout to 45 minutes #8720 OCPBUGS-82443 : fix(cpo): deduplicate VPC endpoint subnets by AZ #8651 CNTRLPLANE-3020 : Adopt coreos/stream-metadata-go upstream library #8673 NO-JIRA: ci: add gopls and pre-commit plugins to address-review workflow #8702
NO-JIRA: fix address-review-comments workflow for fork PRs #8706
NO-JIRA: Add gitlint to pre-commit hooks #8701
CNTRLPLANE-3584 : Add kube-scheduler ServiceMonitor with CA-signed serving certs #8489 NO-JIRA: Improve AI skill quality and restructure AGENTS.md #8690
CNTRLPLANE-3555 : Add ARCHITECTURE.md to repository root #8668 OCPBUGS-84308 : fix(cpo) delete terminated MCD pods to retry in-place upgrades #8434 OCPBUGS-87217 : fix: add CPU partitioning workload annotation to control-plane-metrics-forwarder #8686 CNTRLPLANE-3599 : Remove controller-runtime v0.19.7 pin for k8s 1.36 bump #8683 CNTRLPLANE-3550 : Add missing v2 test suites to Azure self-managed test matrix #8658 NO-JIRA: chore(deps): weekly dependabot consolidation #8634
NO-JIRA: test(e2e/v2): sweep AGENTS.md conformance violations #8659
OCPBUGS-87018 : Revert conditional deletion of openshift-ingress NetworkPolicy #8662 NO-JIRA: move CONTRIBUTING.md to repo root and update CI guidance #8329
CNTRLPLANE-3548 : Add v2 e2e test framework documentation #8641 OCPBUGS-86008 : Gate Route watch on management cluster capability #8484 Revert “OCPBUGS-86774: Pin azure-cli to 2.72.0 in e2e Dockerfile” #8652
OCPBUGS-77268 : reconcile HCP when pull secret is unavailable #8352 GCP-298 : Add GCP e2e v2 test artifacts directory structure documentation #8446 CNTRLPLANE-2207 : Upgrade to CAPI 1.11 #8594 NO-JIRA: chore(ci): enforce v2 e2e AGENTS.md standards via CodeRabbit #8660
CNTRLPLANE-1357 : add KMSv2 secret encryption e2e v2 test for Self Managed Azure #8653 CNTRLPLANE-3167 : Auto-detect credential type for HCPEtcdBackup #8368 NO-JIRA: Fix Azure private/topology CEL validation rules #8490
GCP-688 : Port remaining v1 TestCreateCluster gaps to v2 e2e #8590 NO-JIRA: feat(skills): add validate-pr-override-images skill #8616
OCPSTRAT-1677 : Add Spot instances documentation #8485 OCPBUGS-43444 : Allow kubevirt-csi storageclass default to be changed by user #8597 CNTRLPLANE-3510 : Enable additional golangci-lint linters #8567 OCPBUGS-86306 : Stop controllers fighting over HCP status #8562 CNTRLPLANE-3535 : Add codecov carryforward flags to stabilize project coverage checks #8642 OCPSTRAT-1677 : fix(cpo): increase NTH default workers from 10 to 20 #8500 NO-JIRA: feat(ci): add skopeo and gh CLI to ARC runner image #8627
OCPBUGS-85584 : Fix stale api.openshift.com labels on HostedControlPlane #8507 NO-JIRA: ci(runner): update base image to actions-runner v2.334.0 #8643
CNTRLPLANE-3533 : Add Dockerfiles to codecov ignore list #8640 OCPBUGS-86774 : Pin azure-cli to 2.72.0 in e2e Dockerfile #8638 NO-JIRA: ci(deps): bump google-github-actions/auth from 2.1.13 to 3.0.0 #8630
NO-JIRA: ci(deps): bump actions/checkout from 4.3.1 to 6.0.2 #8631
NO-JIRA: Fix HCCO deployment location in AGENTS.md #8635
CNTRLPLANE-3534 : ci: add –allowedTools to address-review-comments workflow #8639 OCPBUGS-86238 : add CPO overrides for ARO swift-nic resource limits #8610 OCPBUGS-81544 : requeue when AutoNodeEnabled is progressing #8497 NO-JIRA: add address-review-comments workflow #8621
NO-JIRA: De-duplicate Azure self-managed documentation #8566
CNTRLPLANE-3531 : Remove EFS-backed Go build cache from CI runners #8637 CNTRLPLANE-3329 : Rebuild runner image on gocacheprog and pipeline changes #8633 CNTRLPLANE-3329 : Fix gocacheprog cache corruption with atomic writes #8624 NO-JIRA: fix(karpenter): start node cleanup when CAPI Cluster is deleted #8589
OCPBUGS-85151 : Re-enable serviceaccount-pull-secrets controller when registry managementState changes from Removed #8522 OCPBUGS-85243 : Set aws-load-balancer-scheme on public HCP router service #8458 OCPBUGS-38898 : fix kubeadmin password hash reconciliation to compare password against stored hash #8358 OCPBUGS-84303 : fix(api): add IPv6 OVN join subnet config to prevent dual-stack routing collision #8421 NO-JIRA: clone ai-helpers into workspace for plugin file access #8620
NO-JIRA: bump claude max-turns to 50 in WIF test #8619
NO-JIRA: test ai-sbom plugin and verify plugin loading #8614
CNTRLPLANE-3329 : Use GOCACHEPROG for zero-copy EFS build cache #8576 NO-JIRA: replace container image with workflow-step plugin setup #8611
NO-JIRA: use ai-helpers container image for Claude WIF test #8609
NO-JIRA: fix Claude WIF test workflow HOME for ARC runners #8600
NO-JIRA: fix Claude WIF test workflow for ARC runners #8598
NO-JIRA: test Claude Code WIF auth in GitHub Actions #8588
OCPBUGS-86296 : Propagate management cluster proxy env vars to konnectivity sidecar #8569 OCPBUGS-65730 : add –tls-cipher-suites to oauth-apiserver deployment #8554 OCPBUGS-85351 : Revert “fix(azure): prevent externalDNSDomain from shadowing cluster apps domain” #8585 OCPBUGS-84955 : bootstrap serving certs at hypershift operator startup #8545 ci(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 #8574
CNTRLPLANE-3040 : add regression tests for CAS pause/unpause replica clamping #8262 NO-JIRA: chore(deps): weekly dependabot consolidation #8578
GCP-688 : Port v1 E2E validations to envtest, unit tests, and v2 Ginkgo specs #8511 NO-JIRA: fix(e2e): lower pull secret in-place propagation test gate to 4.22 #8553
OCPBUGS-86075 : docs(nodepool): fixing incomplete stuck node drain documentation in section Scaling To Zero #8544 CNTRLPLANE-3222 : Port v1 lifecycle tests to v2 Ginkgo framework #8527 AUTOSCALE-692 : remove default debug log level from karpenter container #8561 OCPBUGS-86310 : Handle CA bundle aggregation delay by requeuing revocation #8563 CNTRLPLANE-3329 : Use fuse-overlayfs for build cache instead of full copy #8568 NO-JIRA: fix(e2e): use public multi-arch image for ARM64 karpenter test #8532
OCPBUGS-86238 : set limits for aro.openshift.io/swift-nic in request overrides for ARO swift #8552 OCPBUGS-85351 : fix(azure): prevent externalDNSDomain from shadowing cluster apps domain #8480 CNTRLPLANE-3371 : Fix AllowedCIDRs e2e test for Route-based KAS #8469 NO-JIRA: build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 in /hack/tools #8547
NO-JIRA: Update Konflux Tekton task bundles #8557
NO-JIRA: chore(deps): weekly dependabot consolidation #8464
CNTRLPLANE-3070 : Support KMS on self-managed Azure without affecting ARO HCP #8088 OCPBUGS-59142 : fix ValidReleaseImage condition message to show minor version #8519 NO-JIRA: Add onboarding guide for new HCP team members #8132
OCPBUGS-85011 : fix(cpo): use check-first pattern for EBS CSI operator serving cert #8418 CNTRLPLANE-3329 : Extend EFS-backed build cache to lint, verify, and envtest workflows #8495 NO-JIRA: ci(deps): bump cloudflare/wrangler-action from 3.15.0 to 4.0.0 #8524
OCPBUGS-85763 : Fix metrics-proxy deployment failure due to dots in volume names #8530 GCP-636 : feat(gcp): support for managing GCP OIDC discovery documents #8413 OCPBUGS-84307 : Clarify –base-domain flag default behavior #8381 AUTOSCALE-681 : various karpenter and karpenterupgrade test fixes #8510 CNTRLPLANE-3329 : Replace actions/cache with EFS-backed build cache in unit tests #8494 OCPBUGS-85577 : Update external-dns image from 1.1.0-3 to 1.2.1 #8506 OCPBUGS-77827 : fix(api): add missing has() guards to servingCerts CEL validation rule #8331 CNTRLPLANE-3380 : docs: add aws-node-termination-handler to repositories list #8514 OCPBUGS-85580 : Fix webhook TLS failure after service-ca to self-managed cert migration #8504 build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 in /hack/tools #8481
OCPBUGS-85344 : Add version gates for 4.22 backward compatibility in e2e tests #8466 AUTOSCALE-681 : remove TechPreviewNoUpgrade gate from karpenter upgrade test #8498 CNTRLPLANE-3329 : Mount EFS-backed Go build cache PV on ARC runner pods #8493 NO-JIRA: docs: add repositories page listing team-owned repos #8505
CNTRLPLANE-3329 : Add nightly CronJob to warm EFS-backed Go build cache #8496 CNTRLPLANE-3324 : Restore non-obvious comments after gocyclo refactor #8487 AUTOSCALE-558 : Expose KubeletConfig on OpenShiftEC2Nodeclass as structured fields + preserveunknown/overflow #8192 NO-JIRA: Fix docs deploy preview by replacing gh CLI with curl #8488
CNTRLPLANE-2946 : Move AWS NLB annotation inside LoadBalancer strategy block #7993 OCPBUGS-78539 : re-add crash toleration for dns-operator during upgrades #8483 CNTRLPLANE-3384 : Remove unconditional low-quality log messages from controllers #8428 OCPBUGS-84971 : Gate AWSDefaultSecurityGroupDeleted condition to AWS platform #8415 CNTRLPLANE-3324 : Enable gocyclo linter and reduce cyclomatic complexity #8309 NO-JIRA: fix(karpenter): resolve HCP karpenter finalizer when AutoNode is disabled #8404
OCPBUGS-62177 : verify cert revocation against all KAS pods #8263 NO-JIRA: Document CEL over webhooks policy for AI agents #8478
NO-JIRA: docs(kubevirt): add how-to for configuring VMs with JSON patches #8473
CNTRLPLANE-1741 : Migrate gomaxprocs-webhook pipelines to use common-operator-build #7122 NO-JIRA: docs: update api-sme agent and api/AGENTS.md conventions #8477
OCPBUGS-81686 : fix(authentication): use v2 auth validation for CEL and expression support. #8246 OCPBUGS-85084 : fix(ci): use explicit lease in dependabot commit fix push #8476 OCPBUGS-75887 : fix(inplaceupgrader): include node name in degraded upgrade error message #8244 NO-JIRA: fix(e2e): prevent agent unbinding and node reboots during backup/restore #8356
NO-JIRA: Update GHA docs for reusable workflow pattern #8453
GCP-413 : add image registry v2 e2e tests for hosted clusters #8412 NO-JIRA: docs: make CLAUDE.md a symlink to AGENTS.md across the repo #8444
CNTRLPLANE-2778 : feat(tooling): overhaul pr-report skill and Python script #7754 ACM-33601 : use the latest ubi9 nginx image #8432 GCP-414 : add image registry operational guide #8455 OCPBUGS-84528 : clarify pull secret in-place update behavior and add CP watches #8327 OCPBUGS-84955 : Add render-sensitive flag to hypershift install render #8436 OCPBUGS-84857 : bump go builder and ubi images #8437 GCP-410 : fix(gcp): add registry SA WIF binding for image registry GCS access #8445 CNTRLPLANE-3381 : CPO: Surface cloud resource deletion timeout as a status condition #8426 OCPBUGS-85084 : fix(ci): rewrite dependabot commit messages to pass gitlint #8435 NO-JIRA: docs: detail release branch e2e config steps in branch-process guide #8441
CNTRLPLANE-3222 : Migrate self-managed Azure e2e tests to v2 Ginkgo framework #8204 GCP-412 : add envtest cases for GCP imageRegistry CEL validation #8411 CNTRLPLANE-2939 : Coordinate CRD lifecycle with Cluster CAPI Operator #7996 OCPBUGS-77040 : Add AWS ISO domains to konnectivity IsCloudAPI #8251 OCPBUGS-83328 : fix skipProxyForKAS to use standard NO_PROXY matching #8254 OCPBUGS-84969 : fix(e2e): wait for Karpenter node cleanup in parallel tests to prevent vCPU flake #8414 CNTRLPLANE-3343 : Extract support/k8sutil package from support/util #8396 TRT-2653 : Revert #8357 “OCPBUGS-84572: fix(cpo): generate EBS CSI driver operator serving cert in CPO” #8417 NO-JIRA: chore(deps): weekly dependabot consolidation #8410
NO-JIRA: Skip TestKarpenter for releases < 4.22 #8409
CNTRLPLANE-3351 : e2e: add opt-in CPU resource request overrides for control plane components #8385 OCPBUGS-84509 : Add AWS LB Controller cross-zone load balancing annotation #8344 OCPBUGS-84572 : fix(cpo): generate EBS CSI driver operator serving cert in CPO #8357 OCPBUGS-81631 : fix(metrics): remove noisy vCPU log for non-AWS platforms #8169 NO-JIRA: Extend timeout for CRD removal during integration tests #8366
NO-JIRA: chore(deps): weekly dependabot consolidation #8395
OCPBUGS-83868 : prevent IAM resource leaks during cluster destroy #8303 GCP-635 : feat(gcp): make JWKS file optional when OIDC issuer URL is provided #8339 OCPBUGS-83757 : Remove network dependencies from unit tests #8277 ci(deps): bump actions/setup-go from 5.6.0 to 6.4.0 #8393
OCPBUGS-84508 : Fix NLB name parsing for EKS Auto Mode hostnames #8343 AUTOSCALE-615 : include Karpenter node vCPUs in billing metric #8265 CNTRLPLANE-3352 : Convert GHA callers to use reusable workflows @main #8387 CNTRLPLANE-3342 : Extract support/netutil package from support/util #8360 CNTRLPLANE-3352 : Add reusable GHA workflow definitions #8386 GCP-410 : feat(gcp): add HCCO credential propagation for GCP image registry #7896 OCPBUGS-84551 : fix(ingress): set FIPS_ENABLED env var on ingress operator #8375 CNTRLPLANE-3307 : add unit tests for Azure Private Link Service controllers #8285 CNTRLPLANE-3160 : Drop AutoNodeKarpenter feature gate and promote EC2NodeClass to v1 #8166 NO-JIRA: Improve commit and PR guidance in AGENTS.md #8373
OCPBUGS-83790 : change Azure workload identity webhook FailurePolicy from Fail to Ignore #8288 NO-JIRA: chore(deps): weekly dependabot consolidation #8334
NO-JIRA: Add API dependency import restriction tool #8364
SPLAT-2587 : aws/ccm: introduce configuration to CCM managed Security Groups for NLB #7460 NO-JIRA: add –max-depth flag to nav order verification #8372
NO-JIRA: Do not import external dependencies into API packages #8355
CNTRLPLANE-3340 : Extract support/podspec package from support/util #8354 OCPBUGS-84251 : fix(azure): detect and replace stale role assignments on cluster re-creation #8322 OCPBUGS-84236 : Guard Infrastructure CR lookup in AWSEndpointServiceReconciler #8315 fix: OCPBUGS-78575: create virt-launcher NetworkPolicy on external infra cluster #8056
CNTRLPLANE-3330 : ci: improve unit test speed with sharding and parallelism #8330 CNTRLPLANE-3313 : add Etcd Snapshot Backup (Tech Preview) DR documentation #8299 CNTRLPLANE-2834 : add e2e test for etcd snapshot backup method on AWS #8231 docs: NO-JIRA: clarify serialization tag behaviour in api/AGENTS.md #8328
OCPBUGS-84248 : Remove hardcoded quay.io credentials from EnsureGlobalPullSecret test #8320 NO-JIRA: ci(deps): bump GitHub Actions dependencies #8333
OCPBUGS-77529 : clean stale mock files before make generate function #8237 OCPBUGS-79471 : fix(test): reduce e2e autorepair flakes from unhealthy node conditions #8278 NO-JIRA: docs: clarify that control plane downgrades are not supported #8314
CNTRLPLANE-2204 : improve AllNodesHealthy and AllMachinesReady conditions #8247 GCP-431 : feat: Add CNCC support for GCP WIF in HyperShift #7824 OCPBUGS-83410 : fix, cno, skip cloud-network-config-controller check on non-cloud platforms #8238 Revert “OCPBUGS-83730: Add *.apps wildcard to base domain Private DNS zone for Azure private clusters” #8301
NO-JIRA: docs: add jira:ready-to-solve to agentic SDLC workflow #8304
OCPBUGS-83397 : Fix concurrent CRD reconciliation race #8266 NO-JIRA: MCE 5.0 branch cut #8290
OCPBUGS-83751 : add missing RBAC for webhook configurations #8276 OCPBUGS-83730 : Add *.apps wildcard to base domain Private DNS zone for Azure private clusters #8273 NO-JIRA: chore: pass COMMIT_HASH build arg to support git worktrees #8279
OCPBUGS-78539 : revert temporary crash toleration for dns-operator #7994 CNTRLPLANE-3296 : fix: auto-create python venv in Makefile for verify targets #8269 OCPSTRAT-2499 : docs(e2e): add AI agent guidance for v2 test framework #8207 AUTOSCALE-490 : increase autonode test coverage #7979 OCPBUGS-83604 : fix(kubevirt): filter link-local addresses from EndpointSlice endpoints #8264 NO-JIRA: fix(test): set 1h time limit on e2e capacity reservations #8208
NO-JIRA: docs(agents): add CRD API machinery fundamentals and envtest docs #8236
OCPBUGS-83585 : Wait for CRD removal in GenerateCRDInstallTest to fix flaky envtest #8261 NO-JIRA: drop redundant api_ux_validation e2e test #8210
CNTRLPLANE-3255 : enable CodeRabbit reviews on draft PRs #8250 CNTRLPLANE-635 : Enable nilness and unparam checks in golangci-lint #8258 AUTOSCALE-590 : karpenter version logging verification #8058 CNTRLPLANE-3259 : Add sdminonne, clebs, and Nirshal to core-reviewers #8252 ci(claude): add konflux-build command for manual non-expiring builds #7964
NO-JIRA: fix(e2e): handle uint64 underflow in karpenter version computation for 5.x #8227
CNTRLPLANE-3174 : Add unit tests for v2 CPO controller packages #8215 OCPBUGS-83538 : fix(metrics-proxy): resolve ports from pods instead of deployments #8221 CNTRLPLANE-3260 : fix(ci): split docs-preview into build+deploy to eliminate pwn request #8256 CNTRLPLANE-3203 : Add autoscaling documentation for self-managed Azure #8239 NO-JIRA: add ENVTEST_JOBS knob for parallel envtest execution #8243
CNTRLPLANE-3260 : ci: harden GitHub Actions workflows #8253 CNTRLPLANE-3214 : add envtest suites for HCPEtcdBackup CRD validation #8199 CNTRLPLANE-3254 : Sort how-to guides alphabetically and add CI enforcement #8248 OCPBUGS-67228 : fix(shared-ingress): bump haproxy to 3.0.5-4.el10_1.1 #7370 CNTRLPLANE-3065 : docs: add Agentic Software Development Life Cycle page #8235 OCPCLOUD-3347 : feat(machine-approver): add TLS configuration options to deployment manifests #8019 OCPBUGS-83389 : fix(supportedversion): normalize OCP 5.x versions for skew and release validation #8225 SREP-4438 : refactor(karpenter): tidy Cincinnati version resolution #8206 NO-JIRA: revert: remove .git/ from .dockerignore #8201
CNTRLPLANE-3197 : add release-4.22 branch to renovate configuration #8196 CNTRLPLANE-3197 : update builder images from 4.22 to 4.23 #8194 CNTRLPLANE-3216 : Add codecov.yml validation to make verify #8202 GCP-368 : add GCP CCM v2 e2e tests #7840 CNTRLPLANE-3233 : ci(gha): add release-4.22 branch to GitHub Actions workflows #8217 CNTRLPLANE-3197 : update latest supported version from 4.22 to 4.23 #8193 CNTRLPLANE-3174 : Add unit tests for CPO controller packages #8184 CNTRLPLANE-3215 : fix envtest GHA workflow path filters for CRD test suites #8200 CNTRLPLANE-2078 : add unit tests for AWS Route53 and IAM #8079 OCPBUGS-82301 : fix(catalogs): use semver comparison for catalog version cap to handle OCP 5.0 #8195 NO-JIRA: control-plane-pki-operator: fix Event emission logic, format #8190
OCPBUGS-82192 : fix(webhookcerts): handle upgrade from service-ca managed certs #8189 OCPBUGS-82159 : fix(ignition-server): use major+minor version comparison for OCP 5.0 payloads #8182 CNTRLPLANE-2511 : refactor(cpo): move OAuth internal LB annotation into ReconcileService #8185 CNTRLPLANE-2511 : Support OAuth LoadBalancer with Azure Private Link Service #8149 OCPBUGS-81644 : fix(cli): fix Azure destroy cluster leaving vnet/nsg resource groups for private topology #8151 OCPBUGS-33097 : Remove deprecated OVNSbDb service type from default strategy mappings #8164 CNTRLPLANE-3174 : test: Add unit tests for product-cli, token-minter, and sync-fg-configmap #8178 CNTRLPLANE-3050 : feat(ci): use Konflux-built image for GitHub Actions runners #8092 CNTRLPLANE-2841 : test(e2e): add metrics-forwarder e2e test verifying data-plane scraping #8147 CNTRLPLANE-3037 : Create separate assets package specifically for CRD management #8150 GCP-462 : Add GCP hosted cluster documentation #8027 NO-JIRA: docs(ci): add sync-community-fork token rotation guide #8173
CNTRLPLANE-2841 : feat(HCCO): reintroduce guest cluster metrics forwarder for control plane metrics #8146 NO-JIRA: fix(e2e): handle rate limiter context deadline error during cleanup #8137
NO-JIRA: fix(ci): remove catch-all pattern from codecov ignore list #8171
CNTRLPLANE-2511 : Allow LoadBalancer publishing strategy for OAuthServer on self-managed Azure #8148 NO-JIRA: chore(ci): add client/ to codecov ignore list #8167
NO-JIRA: feat(e2e): add Azure platform support for backup/restore tests #8144
OCPBUGS-74960 : prevent resource leak on deletion and handle DependencyViolation #7868 NO-JIRA: docs: expand custom images guide with Dockerfile.dev and CPO override #8155
CNTRLPLANE-3042 : Parallelize make verify targets for faster local development #8051 NO-JIRA: ci: fix codecov ignore patterns for docs and nested files #8156
OCPBUGS-81270 : fix(external-dns): mitigate Azure DNS API throttling #8098 NO-JIRA: ci: ignore non-Go files in codecov coverage analysis #8154
OCPBUGS-67240 : Ignition generalize image download errors #7673 NO-JIRA: fix(Makefile): auto-detect upstream remote for lint #8152
OCPBUGS-79539 : fix(cpo-v2): preserve HCCO modifications to OCM Controllers field #8072 AUTOSCALE-582 : wire CRD sync and CEL adjustments into karpenter-api target #8119 CNTRLPLANE-3111 : docs: add service publishing strategies reference documentation #8107 NO-JIRA: ci: make docs deploy preview non-blocking #8145
Revert “CNTRLPLANE-2841: feat(HCCO): add guest cluster metrics forwarder for control plane metrics” #8141
NO-JIRA: fix(e2e): handle dual RHCOS payloads in Karpenter drift OS image check #8128
OCPBUGS-50003 : add ConfigMap fallback and EC2 error caching for vCPU metrics resolution #6723 CNTRLPLANE-2172 : feat(azure): add private endpoint access topology for self-managed HostedClusters #7821 CNTRLPLANE-2841 : feat(HCCO): add guest cluster metrics forwarder for control plane metrics #7790 CNTRLPLANE-2797 : hypershift-operator webhooks port 9443 respect cluster TLS security profile #8078 OCPBUGS-50603 : Create dedicated identity for KAS bootstrap container #6827 Revert “NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout” #8138
NO-JIRA: ci: improve CI efficiency and codecov configuration #8113
NO-JIRA: test(e2e): add KubeVirt platform to backup/restore e2e test #8131
OCPBUGS-81162 : fix(cpo): skip router LB services for ARO HCP #8087 NO-JIRA: ci: enable paths filter on envtest workflows #8125
NO-JIRA: test(e2e): extend AWS guest resource cleanup timeout #8124
NO-JIRA: fix(test): deep copy CRDs inside envtest retry loop #8127
NO-JIRA: chore(docs-agg): remove document count from aggregated file #8126
NO-JIRA: ci: separate envtest from unit tests in CI workflow #8120
OCPBUGS-80926 : consolidate disaster-recovery prerequisites into dedicated page #8080 CNTRLPLANE-3116 : fix(ci): drop pip cache from docs-preview workflow #8116 NO-JIRA: fix(api): regenerate feature gate manifests for ExternalOIDCWithUpstreamParity #8117
OCPBUGS-78763 : fix: global-pull-secret daemonset node labeling race condition causes pods not to be scheduled on Replace upgrade strategy nodes in time #7981 CNTRLPLANE-3037 : Introduce envtest for integration tests alternative #8089 CNTRLPLANE-3116 : ci(docs): migrate docs-preview job to GitHub Actions #8109 CNTRLPLANE-244 : fix(ci): configure Codecov PR comments and add unit tests #8085 NO-JIRA: chore(deps): weekly dependabot consolidation #8077
OCPBUGS-78931 : add KubeVirt-specific backup settings #8022 OCPBUGS-81284 : fix(release): allow multiple machine-os component versions #8101 NO-JIRA: fix(aws): load credentials from –aws-creds file using SDK v2 #8095
NO-JIRA: chore(ci): update hypershift-ci-2 manifests #8062
CNTRLPLANE-2678 : Adapt etcd-backup command and add HO namespace manifests #8040 CNTRLPLANE-2551 : Hypershift integration for API Auth Config changes #7774 GCP-447 : inject token-minter as native sidecar init container #7965 AUTOSCALE-538 , AUTOSCALE-539 : Add Autonode status node counts + enabled condition to HostedCluster API #7794 CNTRLPLANE-244 : ci: add Codecov integration to unit test workflow #8060 CNTRLPLANE-3050 : Pre-build lint tools and fix Konflux pipeline triggers #8052 CNTRLPLANE-2838 : feat(CPO): add metrics-proxy control plane component #7752 CNTRLPLANE-2787 : Introduce BASE_DOMAIN env var for E2E test configuration #7930 CNTRLPLANE-2786 : Extend controller architecture diagram with consumes relationship #8029 IR-350 : add tls security profile configuration for the image registry operator #8011 AUTOSCALE-571 : fix(karpenter): don’t associate public IP addresses for the default OpenshiftEC2NodeClass #7853 NO-JIRA: feat(e2e): skip SupportedVersionSkew condition on OCP < 4.21 in backup/restore tests #8067
CNTRLPLANE-2076 : remove v2 import aliases left from SDK migration #8063 AUTOSCALE-559 : PrivateLink plumbing for karpenter ec2nodeclass subnets #7791 STOR-2770 : Generate Azure Disk and File CSI Driver Operator metrics serving certs by HCP controller #7970 CNTRLPLANE-2678 : Add fetch-etcd-certs CPO subcommand for HCPEtcdBackup #8010 NO-JIRA: revert(api): remove APIServer Route CEL validation for Azure #8074
CNTRLPLANE-2172 : feat(api): add Azure private endpoint access and PrivateLinkService CRD #8055 OCPSTRAT-2831 : chore(owners): add cblecker to core-reviewers and core-approvers #8018 OCPBUGS-79428 : Add recipe for ACM/MCE HyperShift Operator overrides #8057 CNTRLPLANE-2076 : complete SDK v1 removal and post-migration cleanup #8038 CNTRLPLANE-2049 : update GCP validation error expectations in TestOnCreateAPIUX #8037 CNTRLPLANE-3046 : feat(ci): add monitoring and alerting for ARC runners #8044 CNTRLPLANE-3049 : split verify checks into individual GitHub Actions workflows #8049 OCPBUGS-79352 : fix(oapi): force WatchList feature gate to disabled for openshift-apiserver #8035 OCPBUGS-79071 : Fix AWSEndpointService private-router teardown stuck on active VPC Endpoint connections #8030 CNTRLPLANE-3041 : Override ARO/HCP 4.20 CPO with Azure Pod Identity backport #8025 CNTRLPLANE-3054 : Apply init task 0.3 migration to fix broken Konflux pipelines #8053 OCPBUGS-70301 : force-remove karpenter finalizer when guest KAS is down #7939 CNTRLPLANE-3047 : fix(ci): use community fork token for checkout credential helper #8050 CNTRLPLANE-2788 : validate memory quantity in KubeVirt nodepool create #7884 NO-JIRA: chore(ci): update Konflux Tekton tasks to latest versions #8048
CNTRLPLANE-3048 : refactor gh-actions-runner pipelines and improve CEL triggers #8045 OCPBUGS-79369 : Add Konflux archived PipelineRun skill and update task discovery #8043 CNTRLPLANE-3047 : add workflow to sync hypershift-community fork #8042 NO-JIRA: chore(claude): add restructure-commits plugin command #7927
CNTRLPLANE-2986 : feat(ci): Add self-hosted GitHub Actions runners for HyperShift #7980 NO-JIRA: fix(ci): pass –upgrade-versions to konflux task update skill #8036
CNTRLPLANE-2998 : Migrate SQS to AWS SDK v2 #8015 NO-JIRA: refactor(oadp): unify backup/restore e2e test with platform auto-detection #7971
OCPBUGS-78996 : fix(test): create SQS queue dynamically in spot termination handler e2e test #8007 CNTRLPLANE-2049 : fix(api): audit and improve GCP API validation rules #8003 CNTRLPLANE-2081 : Migrate RAM and ARN to AWS SDK v2 #7986 OCPBUGS-78778 : fix(cpo): Don’t remove HCP Ingress from routes when CapabilityRoute is disabled #8001 NO-JIRA: Disable parent ownership for api subdir #8009
NO-JIRA: fix(api): replace CEL url() validators with regex to fix CRD cost budget #8004
OCPBUGS-78544 : Update base images to address multiple CVEs flagged by MSFT security scans #7983 OCPBUGS-78705 : Bootstrap CVO manifests should be filtered based on feature-set annotation #7984 NO-JIRA: fix(api): extend kubeapilinter scope to all non-vendor API types #8002
NO-JIRA: build(e2e): include hypershift binary in Dockerfile.e2e #7919
CNTRLPLANE-2925 : add NodePool.Status.NodesInfo for node version distribution #7917 OCPSTRAT-2336 : Adjust karpenter API to OpenShift conventions #7952 OCPBUGS-78539 : chore(e2e): add temporary crash toleration for dns-operator #7978 CNTRLPLANE-2172 : fix(e2e): register Azure private platform e2e flags #7977 NO-JIRA: chore(owners): require api-approvers approval for api/ changes #7972
Update Kube API Linter config for new APIs #7982
NO-JIRA: add .gitattributes to collapse generated files in PR diffs #7918
CNTRLPLANE-2910 : feat(cpo): add Azure workload identity webhook as KAS sidecar #7867 CNTRLPLANE-2077 : refactor(cleanzones): migrate AWS SDK from v1 to v2 #7960 CNTRLPLANE-2219 : feat(aws): migrate ec2 to AWS SDK v2 #7871 GCP-440 : Fix GCP boot image discovery from CoreOS stream metadata #7881 NO-JIRA: fix(oadp): correct Agent platform API group in backup/restore resources #7974
OCPBUGS-78356 : fix(sharedingress): coalesce HAProxy reloads to prevent reload storms #7945 CNTRLPLANE-2172 : fix(operator): accept Azure as valid private-platform value #7968 NO-JIRA: Rename cilium directory to v1.15.1 #7888
OCPBUGS-70354 : add serviceAccount to global-pull-secret-syncer #7439 NO-JIRA: feat(e2e): add OIDC IAM fix and NodePool validation to backup/restore #7837
CNTRLPLANE-2172 : feat(install): register Azure private platform flags #7912 CNTRLPLANE-2978 : Add Azure CPO override for OCP 4.20 #7955 OCPBUGS-65687 : fix(cpo): prevent informer creation for inaccessible resource types #7819 GCP-441 : correct CCM crash toleration key to match pod label #7926 CNTRLPLANE-2916 : conditionally create openshift-ingress network policy based on route labeling #7872 NO-JIRA: chore: add .git/ to .dockerignore #7944
NO-JIRA: fix(test): add aws-node-termination-handler to safe-evict audited list #7816
NO-JIRA: test(scheduler): add pair loss recovery unit coverage #7848
OCPBUGS-67262 : fix(e2e): Use NodePool replicas as authoritative source for expected node count instead of CountAvailableNodes #7378 OCPBUGS-77160 : include NMStateConfig in Agent platform OADP backup resources #7847 AUTOSCALE-571 : fix(karpenter): select existing private subnets for default OpenshiftEC2NodeClass #7933 OCPBUGS-78198 : fix(catalogs): update catalog image version cap to 4.21 #7915 OCPBUGS-78184 : fix(hostedcluster): Remove referenced resource annotations regardless of hcp status #7913 CNTRLPLANE-2203 : reintroduce ControlPlaneConnectionAvailable condition with conformance fix #7746 OCPBUGS-78185 : Fix deadlock when changing release image during initial provisioning #7910 CNTRLPLANE-634 : Make external-dns interval and AWS zones cache duration configurable #7931 OCPBUGS-78045 : allow autonode provisioned arm instances #7893 OCPBUGS-78329 : fix(releaseinfo): allow periods in version display name regex #7940 OCPBUGS-78223 : add NodePool Rollouts reference documentation #7923 NO-JIRA: chore(gitignore): add .claude/worktrees/ to .gitignore #7938
OCPBUGS-78189 : fix(e2e): fix nil deref in validateAWSGuestResourcesDeletedFunc #7911 OCPBUGS-77514 : E2E filter rolling upgrade verification to current MachineSet #7864 OCPBUGS-77703 : fix(api): add omitempty to NodePoolAutoScaling.Min for N-1 compatibility #7849 GCP-411 : Add comprehensive unit tests for ReconcileInfrastructure #7895 NO-JIRA: fix KubeVirtAdvancedMultinetTest IPv6 and apk errors #7860
NO-JIRA: chore(e2e): increase nodepool condition check timeout #7906
CNTRLPLANE-2789 : add StatefulSet test case to controlplane-component reconcile tests #7764 NO-JIRA: Add CodeRabbit config to exclude autogenerated files #7905
CNTRLPLANE-2933 : add docs recipe for SPO configuration in HCP environments #7886 CNTRLPLANE-2031 : test(e2e): add comprehensive backup and restore test suite #7745 CNTRLPLANE-2588 : docs: add dependabot triage agent to AI CI jobs documentation #7889 CNTRLPLANE-2793 : Cache MCS TLS certificate generation in ignition provider #7841 ROSAENG-132 : fix(karpenter): Set Ready condition to False when version resolution fails #7866 NO-JIRA: api: fix AutoNode types to comply with OpenShift API conventions #7859
NO-JIRA: chore(deps): weekly dependabot consolidation #7876
OCPBUGS-39604 : Include shared ingress resources in render output for proper uninstall cleanup #7836 OCPBUGS-76645 : Make generated container names k8s compliant #7711 OCPBUGS-77254 : fix(globalps): watch Machine updates to fix node labeling race condition #7803 GCP-441 : tolerate 1 restart for GCP CCM token-minter race condition #7865 NO-JIRA: chore(deps): weekly dependabot consolidation #7863
OCPBUGS-77477 : fix(awsutil): handle smithy errors in AWSErrorCode #7827 SREP-3855 : unpause leaked child objects on deleting clusters (OCPBUGS-77530) #7861 CNTRLPLANE-2218 : feat(aws): migrate ELB/ELBV2 to AWS SDK v2 #7825 OCPBUGS-77621 : fix(nodepool): preserve ignition-reached annotation on token secret after restore #7851 OCPBUGS-76337 : feat(scale-from-zero): add DescribeInstanceTypes IAM permission #7648 GCP-391 : Add ImageRegistry GSA field and IAM binding for Image Registry Operator #7828 CNTRLPLANE-2801 : fix(router): deploy router services for private ARO and remove KAS/OAPI dependencies #7845 CNTRLPLANE-2842 : Fix context cancel accumulation in getMirrorFromICSPOrIDMS #7846 CNTRLPLANE-2801 : api: remove redundant kubebuilder enum marker from KeyVaultAccess field #7835 NO-JIRA: bug(metrics): fix typo in hypershift_cluster_waiting_initial_availability_duration_seconds metric #7730
CNTRLPLANE-2840 : fix(endpoint-resolver): sort pods by name for deterministic ordering #7854 CNTRLPLANE-2808 : bump golang.org/x dependencies in / and /api modules #7818 CNTRLPLANE-2840 : feat(CPO): add endpoint-resolver control plane component #7786 CNTRLPLANE-2794 : Re-add TestGetDigest and TestGetManifest with mockgen mocks #7777 OCPBUGS-77034 : fix(ho): add nil guard for Platform.AWS in metrics collector #7747 GCP-295 : Add GCP platform support to E2E test framework #7697 OCPBUGS-76997 : remove resource limits from Agent CAPI provider #7812 OCPBUGS-60936 : fix(hccp): remove immutable field from kubeletconfigmap #6726 OCPBUGS-77311 : handle HostedCluster deletion in secretJanitor to prevent stuck cluster deletions #7779 OCPBUGS-60185 : Remove non-deterministic registry override computation from ignition-server #7811 CNTRLPLANE-2784 : Document IAM policies for PowerVS credential fields #7778 CNTRLPLANE-2801 : add Key Vault private endpoint TCP relay via private router #7701 CNTRLPLANE-2217 : feat(aws): migrate kms and Resource Tagging to AWS SDK v2 #7795 CNTRLPLANE-2807 : Fix version showing <unknown> in git worktree builds #7814 OCPBUGS-65636 : add service account to konnectivity-agent #7309 NO-JIRA: docs(pki): add CA hierarchy diagram and trust distribution details #7799
CNTRLPLANE-2799 : Unit test HCP availability and Ready flag reconciliation #7796 OCPBUGS-67262 : fix(sync-global-pullsecret): compare content ignoring trailing newlines #7638 GCP-386 : scope externaldns RBAC to GCP platform only #7781 OCPBUGS-76350 : Honor AWS AMI override in NodePool token generation #7675 OCPBUGS-60185 : Fix ignition-server pod restarts due to MIRRORED_RELEASE_IMAGE flapping #7588 NO-JIRA: docs(agents): add multi-module structure guidance to AGENTS.md #7797
OCPBUGS-76452 : update OAuth certificate configuration doc #7785 GCP-402 : Add gcp-project and gcp-region flags to hypershift install #7710 GCP-376 : Add service account for storage #7676 GCP-367 : enable multizone support in CCM cloud config #7731 OCPBUGS-77224 : fix(routing): add Azure platform to LabelHCPRoutes() switch #7789 CNTRLPLANE-2220 : feat(aws): migrate iam to AWS SDK v2 #7765 NO-JIRA: Skip ./dev directory in codespell checks #7775
NO-JIRA: MCE 2.17 konflux pipielines #7736
NO-JIRA: chore: add powervs-reviewers to OWNERS_ALIASES and OWNERS #7782
OCPBUGS-59876 : feat: implement CLI-based OIDC disaster recovery command #7210 OCPBUGS-62177 : revert CRR controller changes #7784 OCPBUGS-65824 : Add dynamic NodePort range validation to prevent cluster creation failures #7652 CNTRLPLANE-2740 : Set unhealthyPodEvictionPolicy to AlwaysAllow on all PDBs #7721 OCPBUGS-32770 : fix(kubevirt): require CAPK image to be explicitly specified #7615 OCPBUGS-62177 : fix(pki): use pod container port instead of kubeconfig service port #7744 CNTRLPLANE-1987 : Ensure Azure HCP CLI infra commands work correctly #7436 NO-JIRA: fix(e2e): retry guest cluster API calls in EnsureFeatureGateStatus #7723
OCPBUGS-70152 : Correct route labeling logic for HCP router infratructure #7605 CNTRLPLANE-2216 : feat(aws): migrate route53 to AWS SDK v2 #7726 OCPBUGS-43449 : Remove UltraSSD_LRS from DiskStorageAccountType for OS Disks #7727 CNTRLPLANE-644 : Unify Validate/Complete Function Signatures Across Providers #7577 OCPBUGS-65879 : Fix image-overrides annotation removal propagation to HCP #7533 CNTRLPLANE-2740 : Add KAS liveness readiness sidecar to OAS and OAuth API Server #7722 OCPBUGS-34662 : Manage AWS EBS CSI driver metrics serving certificates via CPO #7538 OCPBUGS-73915 : Use openshift golang builder for MCE builds #7735 NO-JIRA: Remove .claude/settings.json #7751
OCPBUGS-62177 : Fix certificate revocation validation across all KAS pods #7405 CNTRLPLANE-2696 : docs(azure): add managed Azure control plane authentication documentation #7653 NO-JIRA: test(e2e): add CloudController field to GCP ServiceAccountsEmails structs #7739
AUTOSCALE-485 : bump karpenter-aws dependencies to 1.8.6 #7611 TRT-2554 : Revert #7489 “CNTRLPLANE-2203: add ControlPlaneConnectionAvailable condition” #7734 GCP-367 : Implement GCP Cloud Controller Manager component #7677 OCPBUGS-72596 : Fix node-tuning-operator metrics port configuration #7468 CNTRLPLANE-2203 : add ControlPlaneConnectionAvailable condition #7489 GCP-386 : feat(gcp): enable DNS delegation for hosted cluster ingress via DNSEndpoint #7702 NO-JIRA: ci: fix bug in leader election detection #7696
GCP-308 : test: verify control plane workloads have resource requests #7623 OCPBUGS-60707 : Fix user-ca-bundle cleanup when additionalTrustBundle is removed #6900 CNTRLPLANE-2736 : Rename review-agent-single-pr to address-review-comments #7709 CNTRLPLANE-2215 : feat(aws): migrate S3 to AWS SDK v2 #7678 NO-JIRA: test(nodepool): add unit tests for scale-from-zero annotations #7688
OCPBUGS-55151 : Move proxy certificate validation from metrics collector to reconcile loop #7536 CNTRLPLANE-418 : Aro swift private #7613 CNTRLPLANE-2700 : docs: add HCP networking requirements documentation #7654 CNTRLPLANE-2675 : chore(cpo): move infrastructure reconciliation to infra package #7658 GCP-216 : feat(nodepool): add GCP platform support #7631 GCP-199 : add DNS management to Control Plane Operator #7639 AUTOSCALE-492 : karpenter-ignition controller #7582 OCPBUGS-66966 : loop over node-pool conditions updating in order #7325 SREP-715 : New option to dump data plane content through the kube API server service exposed in HCP namespaces #6533 OCPBUGS-74620 : test(e2e): increase default node ready timeout to 45 minutes #7629 OCPBUGS-74498 : Add UserAgent telemetry to CPO Azure SDK clients #7620 OCPBUGS-74931 : fix(hcco): gate image registry workaround to pre-4.20 releases #7634 NO-JIRA: docs(aws): add AWS PrivateLink architecture documentation #7645
NO-JIRA: chore(ai): Add skills for dev workflow #7636
CNTRLPLANE-2709 : Update Dependabot to use conventional commits #7672 CNTRLPLANE-2703 : Disable Renovate dependency updates #7657 OCPBUGS-74988 : fix(test): resolve E2E flakes in global-pull-secret-syncer DaemonSet readiness checks #7627 CNTRLPLANE-2214 : Migrate STS to AWS SDK v2 #7386 NO-JIRA:Docs: update documentation URL from netlify to pages.dev #7622
GCP-366 : add CloudController service account for CCM #7617 NO-JIRA: ci: Improves the isLeaderElectionFailure function: #7589
NO-JIRA: Fix teardown flag timing in e2e tests #7586
CNTRLPLANE-2548 : add direct Jira REST API integration to pr-report #7532 OCPSTRAT-2437 : add unit test for custom HAProxy image annotation #7458 CNTRLPLANE-1708 : Enable EnsureGlobalPullSecret AtLeast Version418 #7624 CNTRLPLANE-418 : fix shared ingress AllowedCIDRs to use fc_src for PROXY protocol #7587 AUTOSCALE-535 : default block device mappings #7583 OCPBUGS-69447 : feat(updates): enable CVO metrics access with RHOBS monitoring flag #7399 GCP-198 : add PSC endpoint controller for customer-side management #7603 CNTRLPLANE-2650 : docs(ci): add security requirement for Jira agent issues #7626 CNTRLPLANE-2650 : docs: add AI-assisted CI jobs documentation #7598 OCPBUGS-62760 : Pre-pull images to avoid startup delays and flaky e2e #7382 OCPBUGS-74247 : CAPI image overrides aware of registry config #7575 CNTRLPLANE-1137 : Add support for external CNI provider Cilium #7423 GCP-176 : feat(gcp): add WIF credentials support for control plane op… #7600 NO-JIRA: test(assets): add unit test for CAPI resources file paths #7601
CNTRLPLANE-2580 : feat(claude): update /update-konflux-tasks to work without log file #7591 GCP-213 : feat(platform): add Google Cloud Platform support with CAPG Deployment #7305 OCPBUGS-62944 : forceful termination of instances during HCP AutoNode deletion #7281 NO-JIRA: build: bump Go version to 1.25.3 #7592
CNTRLPLANE-1388 : Spot with termination handler #7567 CNTRLPLANE-1892 : chore(e2ev2): fixup GCP API checks #7555 NO-JIRA: ci: update build root image to Go 1.25 #7584
CNTRLPLANE-1988 : Add Azure support to product CLI for self-managed customers #7407 AUTOSCALE-373 : Proper ROSA instance tagging for AutoNode #6939 OCPBUGS-63345 : AWS credential metric to distinguish unknown from invalid status #7075 OCPBUGS-74336 : feat(cpo): check components have rolled out before setting available #7434 NO-JIRA: chore(deps): weekly dependabot consolidation #7563
OCPBUGS-64576 : fix(dump): Fix dump command failure when EC2NodeClass resource is not registered #7147 CNTRLPLANE-2559 : feat(contrib): add request serving setup utility #7534 CNV-76520 : ci: allow restart of kubevirt-cloud-controller-manager #7469 NO-JIRA: fix(test): shorten scale-from-zero test name to avoid IAM role length limit #7558
OTA-1833 : Adopt a new FeatureSet OKD #7557 OCPBUGS-62761 : chore(e2e): remove KAS check from capi pod #7485 OCPBUGS-73817 : fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment #7480 OCPBUGS-65885 : added 1.34 required ELBv2 perms to CCM role #7339 API-1835 : Scaffold dynamic informers #7477 CNTRLPLANE-2579 : feat(konflux): add script to update pipeline task bundles to latest trusted versions #7553 OCPBUGS-58397 : feat(KubeVirt): configure External evictionStrategy on VMs #6380 GCP-197 : add GCPPrivateServiceConnect controller for managing Service Attachments for Private Service Connect #7302 NO-JIRA: fix(e2e): TestNodePoolAutoscalingScaleFromZero for 4.20 and later only #7556
CNTRLPLANE-2291 : feat(claude): add fix-hypershift-repo-robot-pr command #7438 CNTRLPLANE-2568 : Update Konflux Tekton tasks to latest versions #7551 NO-JIRA: test(ingress): add test for clearing LoadBalancerSourceRanges #7544
NO-JIRA: fix(claude): fix Claude Code subagents frontmatter #7550
NO-JIRA: chore(deps): bump github.com/opencontainers/selinux from 1.11.0 to 1.13.0 #7462
OCPBUGS-55399 : Add NTO Service and ServiceMonitor #7355 NO-JIRA: test(autoscaling): make GPU annotation optional in scale-from-zero test #7484
OCPBUGS-73914 : Update Tekton tasks to pass enterprise contract validation #7535 NO-JIRA: chore(deps): bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 in /hack/tools #7463
NO-JIRA: Add karpenter approvers and reviewers #7488
NO-JIRA: chore(ho): update lower bound version checks for OCP 5 #7472
NO-JIRA: fix(docs): strip markdown links from aggregated documentation #7487
NO-JIRA: chore(deps): bump github-dependencies group with 17 updates #7455
OCPBUGS-73847 : fix(cli): use /tags endpoint for all release streams to enable RC filtering #7483 OCPBUGS-67234 : fix(hostedcluster): unpause CAPI cluster when deleting paused HostedCluster #7389 OCPBUGS-72258 : use InfraStatus.APIPort for custom DNS kubeconfig #7470 API-1835 : Scaffold OpenShiftManager controller #7445 CNTRLPLANE-1768 : feat(api): add support for graceful service account signing key rotation #7324 OCPBUGS-66205 : [kubevirt] Make L3 migration labeling conditional #7308 NO-JIRA: chore(deps): bump Azure SDK and misc-dependencies groups #7464
NO-JIRA: chore(tekton): update Konflux task digests to latest versions #7465
OCPBUGS-70320 : enable scale-up from zero with InPlace upgrade #7427 NO-JIRA: Add review process docs to CONTRIBUTING.md #7426
CNTRLPLANE-208 : Document needed Azure infrastructure #7361 NO-JIRA: fix(deps): update k8s.io/utils digest to 914a6e7 #7450
NO-JIRA: chore(deps): bump misc-dependencies group with 11 updates #7437
OCPBUGS-72411 : fix(cno): use brackets only for IPv6 in server URL #7447 NO-JIRA: chore(konflux): update Tekton tasks to latest versions #7451
OCPBUGS-72397 : Fix Konflux EC voilation, update deprecated base … #7442 NO-JIRA: docs(konflux): add IMAGE_RELEASE_PROCESS.md #7432
NO-JIRA: test(e2e): fix AKS e2e test flakiness #7410
CNTRLPLANE-1978 : add e2e tests for DataPlaneConnectionAvailable condition #7291 AUTOSCALE-473 : Add HostedCluster annotation for karpenter ec2nodeclass instanceProfile #7392 NO-JIRA: fix(awseps): cache local zone ID in non-shared VPC case #7409
OCPBUGS-66211 : fix(azure): preserve defaulted values in Infrastructure status #7393 OCPBUGS-69761 : fix(ingress): clear LoadBalancerSourceRanges when AllowedCIDRBlocks is removed #7425 GCP-258 : Use PullAlways for :latest image tags in control plane components #7313 OCPBUGS-63698 : fix(azure): remove CSI secret ownership from hypershift-operator #7157 OCPBUGS-66154 : add OAuth certificate configuration doc #7351 OCPBUGS-67224 : fix(Portieris): Fix Portieris by mounting emptyDir to ‘./.trust’ work dir #7368 CNTRLPLANE-1622 : Enable nodepool autoscaling min zero #6975 And 29 elided commits (e.g. from squash or rebase merges)
Full changelog
NO-ISSUE: Synchronize From Upstream Repositories #1337
NO-ISSUE: Synchronize From Upstream Repositories #1336
Full changelog
Node Image Info Loading node image info, this may take a while ...
CentOS Stream CoreOS 10 (stream-coreos)
Package List
cri-o-1.36.2-1.el10s
kernel-6.12.0-243.el10
openshift-kubelet-5.0.0-202606250141.p2.ga466682.assembly.stream.el10
systemd-257-27.el10
Full list (493 packages)
NetworkManager-1:1.56.1-1.el10
NetworkManager-cloud-setup-1:1.56.1-1.el10
NetworkManager-libnm-1:1.56.1-1.el10
NetworkManager-ovs-1:1.56.1-1.el10
NetworkManager-tui-1:1.56.1-1.el10
WALinuxAgent-udev-2.14.0.1-3.el10
aardvark-dns-2:2.0.0-1.el10
acl-2.3.2-4.el10
afterburn-5.10.0-2.el10
afterburn-dracut-5.10.0-2.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260624-24.el10
amd-ucode-firmware-20260624-24.el10
attr-2.5.2-5.el10
audit-4.0.3-5.el10
audit-libs-4.0.3-5.el10
audit-rules-4.0.3-5.el10
authselect-1.5.3-1.el10
authselect-libs-1.5.3-1.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-18.el10
bind-license-32:9.18.33-18.el10
bind-utils-32:9.18.33-18.el10
bootc-1.16.2-1.el10
bootupd-0.2.35-1.el10
bsdtar-3.7.7-8.el10
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.6-1.el10
ca-certificates-2025.2.80_v9.0.305-102.el10
catatonit-5:0.2.1-4.el10
centos-gpg-keys-10.0-23.el10
centos-release-cloud-1-1.el10s
centos-release-nfv-common-1-5.el10s
centos-release-virt-common-1-1.el10s
centos-stream-release-10.0-23.el10
centos-stream-repos-10.0-23.el10
checkpolicy-3.10-1.el10
chrony-4.8-2.el10
cifs-utils-7.6-1.el10
clevis-23-1.el10
clevis-dracut-23-1.el10
clevis-luks-23-1.el10
clevis-pin-tpm2-0.5.5-1.el10
clevis-systemd-23-1.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.2.1-4.el10
conmon-rs-0.6.6-2.el10s
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.249.0-1.el10
containers-common-6:5.8-2.el10
containers-common-extra-6:5.8-2.el10
coreos-installer-0.26.0-1.el10
coreos-installer-bootinfra-0.26.0-1.el10
coreutils-9.5-12.el10
coreutils-common-9.5-12.el10
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-1.36.2-1.el10s
cri-tools-1.36.0-1.el10s
criu-4.2-4.el10
criu-libs-4.2-4.el10
crun-1.28-1.el10
crypto-policies-20260525-1.gitf5f5370.el10
crypto-policies-scripts-20260525-1.gitf5f5370.el10
cryptsetup-2.8.6-1.el10
cryptsetup-libs-2.8.6-1.el10
curl-8.12.1-6.el10
cyrus-sasl-gssapi-2.1.28-27.el10
cyrus-sasl-lib-2.1.28-27.el10
dbus-1:1.14.10-5.el10
dbus-broker-36-4.el10
dbus-common-1:1.14.10-5.el10
dbus-libs-1:1.14.10-5.el10
dbus-tools-1:1.14.10-5.el10
device-mapper-10:1.02.215-2.el10
device-mapper-event-10:1.02.215-2.el10
device-mapper-event-libs-10:1.02.215-2.el10
device-mapper-libs-10:1.02.215-2.el10
device-mapper-multipath-0.9.9-19.el10
device-mapper-multipath-libs-0.9.9-19.el10
device-mapper-persistent-data-1.3.2-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-24.el10
dnf-data-4.20.0-24.el10
dnsmasq-2.90-7.el10
dosfstools-4.2-12.el10
dracut-107-4.el10
dracut-network-107-4.el10
dracut-squash-107-4.el10
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-8.el10
efibootmgr-18-9.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.195-1.el10
elfutils-libelf-0.195-1.el10
elfutils-libs-0.195-1.el10
erofs-utils-1.8.10-1.el10
ethtool-2:6.19-1.el10
expat-2.7.3-1.el10
fcoe-utils-1.0.34-11.gitb233050.el10
file-5.45-12.el10
file-libs-5.45-12.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.3-2.el10
flatpak-session-helper-1.18.0-1.el10
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-2.0.19-2.el10
gawk-5.3.0-6.el10
gdbm-1:1.23-14.el10
gdbm-libs-1:1.23-14.el10
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-13.el10
glibc-2.39-126.el10
glibc-common-2.39-126.el10
glibc-gconv-extra-2.39-126.el10
glibc-minimal-langpack-2.39-126.el10
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-5.el10
gnutls-3.8.10-4.el10
gobject-introspection-1.79.1-6.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-49.el10
grub2-efi-x64-1:2.12-49.el10
grub2-pc-1:2.12-49.el10
grub2-pc-modules-1:2.12-49.el10
grub2-tools-1:2.12-49.el10
grub2-tools-minimal-1:2.12-49.el10
gssproxy-0.9.2-10.el10
gzip-1.13-3.el10
hostname-3.23-14.el10
hwdata-0.379-10.9.el10
ignition-2.26.0-3.el10
ignition-grub-2.26.0-3.el10
ima-evm-utils-1.6.2-5.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260624-24.el10
ipcalc-1.0.3-12.el10
iproute-6.17.0-2.el10
iproute-tc-6.17.0-2.el10
iptables-libs-1.8.11-15.el10
iptables-nft-1.8.11-15.el10
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
isns-utils-libs-0.103-1.el10
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-13.el10
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-7.el10
kbd-legacy-2.6.4-7.el10
kbd-misc-2.6.4-7.el10
kdump-utils-1.0.58-15.el10
kernel-6.12.0-243.el10
kernel-core-6.12.0-243.el10
kernel-modules-6.12.0-243.el10
kernel-modules-core-6.12.0-243.el10
kernel-modules-extra-6.12.0-243.el10
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-13.el10
kmod-libs-31-13.el10
kpartx-0.9.9-19.el10
krb5-libs-1.21.3-11.el10
less-661-3.el10
libacl-2.3.2-4.el10
libaio-0.3.111-22.el10
libarchive-3.7.7-8.el10
libassuan-2.5.6-6.el10
libattr-2.5.2-5.el10
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-20.el10
libbpf-2:1.7.0-2.el10
libcap-2.69-7.el10
libcap-ng-0.9.3-1.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libconfig-1.7.3-10.el10
libcurl-minimal-8.12.1-6.el10
libdhash-0.5.0-58.el10
libdnf-0.73.1-17.el10
libdnf-plugin-subscription-manager-1.30.15-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.12-16.el10
libfdisk-2.40.2-20.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.3.1-4.4.el10
libgcrypt-1.11.0-7.el10
libgomp-14.3.1-4.4.el10
libgpg-error-1.50-2.el10
libibverbs-62.0-2.el10
libicu-74.2-5.el10
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.13.1-1.el10
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.0-3.el10
libkcapi-hasher-1.5.0-3.el10
libkcapi-hmaccalc-1.5.0-3.el10
libksba-1.6.7-2.el10
libldb-4.24.3-100.el10
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-20.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-7.el10
libnftnl-1.3.0-3.el10
libnghttp2-1.68.0-4.el10
libnl3-3.11.0-1.el10
libnvme-1.16.1-3.el10
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-13.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
libseccomp-2.5.6-1.el10
libselinux-3.10-2.el10
libselinux-utils-3.10-2.el10
libsemanage-3.10-1.el10
libsepol-3.10-2.el10
libsmartcols-2.40.2-20.el10
libsmbclient-4.24.3-100.el10
libsolv-0.7.33-5.el10
libss-1.47.1-5.el10
libsss_certmap-2.13.1-1.el10
libsss_idmap-2.13.1-1.el10
libsss_nss_idmap-2.13.1-1.el10
libsss_sudo-2.13.1-1.el10
libstdc++-14.3.1-4.4.el10
libtalloc-2.4.4-100.el10
libtasn1-4.20.0-5.el10
libtdb-1.4.15-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-14.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.30-1.el10
libutempter-1.2.1-15.el10
libuuid-2.40.2-20.el10
libuv-1:1.52.1-1.el10
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.24.3-100.el10
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-14.el10
libxmlb-0.3.24-1.el10
libxslt-1.1.39-9.el10
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260624-24.el10
linux-firmware-whence-20260624-24.el10
lldpad-1.1.1-4.gitf1dd9eb.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.8-1.el10
luksmeta-10-1.el10
lvm2-10:2.03.41-2.el10
lvm2-libs-10:2.03.41-2.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-1.el10
mdadm-4.4-3.el10
microcode_ctl-4:20260210-1.el10
mokutil-2:0.7.2-4.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-8.el10
nano-8.1-3.el10
ncurses-base-6.4-15.20240127.el10
ncurses-libs-6.4-15.20240127.el10
net-tools-2.0-0.73.20160912git.el10
netavark-2:1.17.2-2.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-7.el10
nftables-1:1.1.5-5.el10
nmap-ncat-4:7.92-5.el10
nmstate-2.2.60-2.el10
npth-1.6-21.el10
nss-altfiles-2.23.0-6.el10
numactl-2.0.19-3.el10
numactl-libs-2.0.19-3.el10
numad-0.5-50.20251104git.el10
nvidia-gpu-firmware-20260624-24.el10
nvme-cli-2.16-2.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.10-1.el10
openldap-2.6.13-1.el10
openshift-clients-5.0.0-202606220255.p2.g74e525a.assembly.stream.el10
openshift-kubelet-5.0.0-202606250141.p2.ga466682.assembly.stream.el10
openssh-9.9p1-26.el10
openssh-clients-9.9p1-26.el10
openssh-server-9.9p1-26.el10
openssl-1:3.5.5-3.el10
openssl-fips-provider-1:3.5.5-3.el10
openssl-libs-1:3.5.5-3.el10
openvswitch-selinux-extra-policy-1.0-36.el10s
openvswitch3.5-3.5.3-5.el10s
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-5.0.0-202606171004.p2.g5060934.assembly.stream.el10
ose-azure-acr-image-credential-provider-5.0.0-202606241438.p2.g2aea5df.assembly.stream.el10
ose-crio-credential-provider-5.0.0-202603041733.p2.g83d4961.assembly.stream.el10
ose-gcp-gcr-image-credential-provider-5.0.0-202605141918.p2.g808c2a2.assembly.stream.el10
ostree-2026.1-1.el10
ostree-grub2-2026.1-1.el10
ostree-libs-2026.1-1.el10
p11-kit-0.26.2-1.el10
p11-kit-trust-0.26.2-1.el10
pam-1.6.1-10.el10
pam-libs-1.6.1-10.el10
passt-0^20260611.ga9c61ff-1.el10
passt-selinux-0^20260611.ga9c61ff-1.el10
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.el10.3
pcre2-syntax-10.44-1.el10.3
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:5.8.3-1.el10
podman-sequoia-0.4.0~pqc.3-1.el10
policycoreutils-3.10-3.el10
policycoreutils-python-utils-3.10-3.el10
polkit-125-6.el10
polkit-libs-125-6.el10
popt-1.19-8.el10
procps-ng-4.0.4-13.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.13-2.el10
python3-audit-4.0.3-5.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.15-1.el10
python3-dateutil-1:2.9.0.post0-1.el10
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-24.el10
python3-dnf-plugin-versionlock-4.7.0-10.el10
python3-dnf-plugins-core-4.7.0-10.el10
python3-file-magic-5.45-12.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-17.el10
python3-idna-3.7-4.el10
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-17.el10
python3-librepo-1.19.0-1.el10
python3-libs-3.12.13-2.el10
python3-libselinux-3.10-2.el10
python3-libsemanage-3.10-1.el10
python3-packaging-24.2-2.el10
python3-pexpect-4.9.0-6.el10
python3-pip-wheel-23.3.2-11.el10
python3-policycoreutils-3.10-3.el10
python3-ptyprocess-0.7.0-9.el10
python3-pyyaml-6.0.1-19.el10
python3-requests-2.32.4-1.el10
python3-rpm-4.19.1.1-25.el10
python3-setools-4.6.0-3.el10
python3-setuptools-69.0.3-12.el10
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.15-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-4.el10
qemu-guest-agent-18:10.1.0-23.el10
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-62.0-2.el10
readline-8.2-11.el10
rpcbind-1.2.7-3.el10
rpm-4.19.1.1-25.el10
rpm-build-libs-4.19.1.1-25.el10
rpm-libs-4.19.1.1-25.el10
rpm-ostree-2026.1-4.el10
rpm-ostree-libs-2026.1-4.el10
rpm-plugin-audit-4.19.1.1-25.el10
rpm-plugin-selinux-4.19.1.1-25.el10
rpm-plugin-syslog-4.19.1.1-25.el10
rpm-sequoia-1.10.2.1-1.el10
rpm-sign-libs-4.19.1.1-25.el10
rsync-3.4.4-1.el10
samba-client-libs-4.24.3-100.el10
samba-common-4.24.3-100.el10
samba-core-libs-4.24.3-100.el10
samba-ndr-libs-4.24.3-100.el10
sed-4.9-5.el10
selinux-policy-42.1.24-1.el10
selinux-policy-targeted-42.1.24-1.el10
setup-2.14.5-7.el10
sg3_utils-1.48-10.el10
sg3_utils-libs-1.48-10.el10
shadow-utils-2:4.15.0-13.el10
shadow-utils-subid-2:4.15.0-13.el10
shared-mime-info-2.3-8.el10
shim-x64-16.1-1.el10
skopeo-2:1.23.0-1.el10
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-8.el10
sos-4.11.0-1.el10
sqlite-libs-3.46.1-5.el10
ssh-key-dir-0.1.4-9.el10
sssd-2.13.1-1.el10
sssd-ad-2.13.1-1.el10
sssd-client-2.13.1-1.el10
sssd-common-2.13.1-1.el10
sssd-common-pac-2.13.1-1.el10
sssd-ipa-2.13.1-1.el10
sssd-krb5-2.13.1-1.el10
sssd-krb5-common-2.13.1-1.el10
sssd-ldap-2.13.1-1.el10
sssd-nfs-idmap-2.13.1-1.el10
sssd-proxy-2.13.1-1.el10
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.15-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-9.p2.el10
systemd-257-27.el10
systemd-journal-remote-257-27.el10
systemd-libs-257-27.el10
systemd-pam-257-27.el10
systemd-udev-257-27.el10
tar-2:1.35-11.el10
tmux-3.3a-13.20230918gitb202a2f.el10
toolbox-0.3-3.el10
tpm2-tools-5.7-5.el10
tpm2-tss-4.1.3-6.el10
tpm2-tss-fapi-4.1.3-6.el10
tzdata-2026b-1.el10
unbound-anchor-1.25.1-1.el10
unbound-libs-1.25.1-1.el10
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-20.el10
util-linux-core-2.40.2-20.el10
vim-data-2:9.1.083-13.el10
vim-minimal-2:9.1.083-13.el10
virt-what-1.27-3.el10
which-2.21-44.el10
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10
xz-libs-1:5.6.2-4.el10
zlib-ng-compat-2.2.3-3.el10
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10
Extensions
Full list (113 packages)
NetworkManager-libreswan-1.2.30-2.el10.x86_64
binutils-2.41-65.el10.x86_64
binutils-gold-2.41-65.el10.x86_64
bison-3.8.2-9.el10.x86_64
cmake-filesystem-3.31.8-1.el10.x86_64
cpp-14.3.1-4.4.el10.x86_64
elfutils-debuginfod-client-0.195-1.el10.x86_64
elfutils-libelf-devel-0.195-1.el10.x86_64
flex-2.6.4-19.el10.x86_64
gcc-14.3.1-4.4.el10.x86_64
glibc-devel-2.39-126.el10.x86_64
groff-base-1.23.0-10.el10.x86_64
kernel-6.12.0-243.el10.x86_64
kernel-core-6.12.0-243.el10.x86_64
kernel-devel-6.12.0-243.el10.x86_64
kernel-headers-6.12.0-243.el10.x86_64
kernel-modules-6.12.0-243.el10.x86_64
kernel-modules-core-6.12.0-243.el10.x86_64
kernel-modules-extra-6.12.0-243.el10.x86_64
kernel-rt-core-6.12.0-243.el10.x86_64
kernel-rt-devel-6.12.0-243.el10.x86_64
kernel-rt-modules-6.12.0-243.el10.x86_64
kernel-rt-modules-core-6.12.0-243.el10.x86_64
kernel-rt-modules-extra-6.12.0-243.el10.x86_64
krb5-pkinit-1.21.3-11.el10.x86_64
krb5-workstation-1.21.3-11.el10.x86_64
ldns-1.8.3-18.el10.x86_64
libkadm5-1.21.3-11.el10.x86_64
libmpc-1.3.1-7.el10.x86_64
libqb-2.0.8-6.el10.x86_64
libreswan-5.3.1-1.el10.x86_64
libreswan-minimal-5.3.1-1.el10.x86_64
libxcrypt-devel-4.4.36-10.el10.x86_64
libzstd-devel-1.5.5-9.el10.x86_64
lm_sensors-libs-3.6.0-20.el10.x86_64
m4-1.4.19-11.el10.x86_64
make-1:4.4.1-9.el10.x86_64
ncurses-6.4-15.20240127.el10.x86_64
nspr-4.39.0-5.el10.x86_64
nss-3.124.0-5.el10.x86_64
nss-softokn-3.124.0-5.el10.x86_64
nss-softokn-freebl-3.124.0-5.el10.x86_64
nss-sysinit-3.124.0-5.el10.x86_64
nss-tools-3.124.0-5.el10.x86_64
nss-util-3.124.0-5.el10.x86_64
openssl-devel-1:3.5.5-3.el10.x86_64
openvswitch3.5-ipsec-3.5.3-5.el10s.x86_64
pcp-conf-7.1.5-2.el10.x86_64
pcp-libs-7.1.5-2.el10.x86_64
perl-AutoLoader-5.74-514.el10.noarch
perl-B-1.89-514.el10.x86_64
perl-Carp-1.54-511.el10.noarch
perl-Class-Struct-0.68-514.el10.noarch
perl-Data-Dumper-2.189-512.el10.x86_64
perl-Digest-1.20-511.el10.noarch
perl-Digest-MD5-2.59-6.el10.x86_64
perl-DynaLoader-1.56-514.el10.x86_64
perl-Encode-4:3.21-511.el10.x86_64
perl-Errno-1.38-514.el10.x86_64
perl-Exporter-5.78-511.el10.noarch
perl-Fcntl-1.18-514.el10.x86_64
perl-File-Basename-2.86-514.el10.noarch
perl-File-Path-2.18-512.el10.noarch
perl-File-Temp-1:0.231.100-512.el10.noarch
perl-File-stat-1.14-514.el10.noarch
perl-FileHandle-2.05-514.el10.noarch
perl-Getopt-Long-1:2.58-3.el10.noarch
perl-Getopt-Std-1.14-514.el10.noarch
perl-HTTP-Tiny-0.088-512.el10.noarch
perl-IO-1.55-514.el10.x86_64
perl-IO-Socket-IP-0.42-512.el10.noarch
perl-IO-Socket-SSL-2.085-3.el10.noarch
perl-IPC-Open3-1.22-514.el10.noarch
perl-MIME-Base64-3.16-511.el10.x86_64
perl-Mozilla-CA-20231213-5.el10.noarch
perl-NDBM_File-1.17-514.el10.x86_64
perl-Net-SSLeay-1.94-9.el10.x86_64
perl-POSIX-2.20-514.el10.x86_64
perl-PathTools-3.91-512.el10.x86_64
perl-Pod-Escapes-1:1.07-511.el10.noarch
perl-Pod-Perldoc-3.28.01-512.el10.noarch
perl-Pod-Simple-1:3.45-511.el10.noarch
perl-Pod-Usage-4:2.03-511.el10.noarch
perl-Scalar-List-Utils-5:1.63-511.el10.x86_64
perl-SelectSaver-1.02-514.el10.noarch
perl-Socket-4:2.038-511.el10.x86_64
perl-Storable-1:3.32-511.el10.x86_64
perl-Symbol-1.09-514.el10.noarch
perl-Term-ANSIColor-5.01-512.el10.noarch
perl-Term-Cap-1.18-511.el10.noarch
perl-Text-ParseWords-3.31-511.el10.noarch
perl-Text-Tabs+Wrap-2024.001-511.el10.noarch
perl-Time-Local-2:1.350-511.el10.noarch
perl-URI-5.27-3.el10.noarch
perl-base-2.27-514.el10.noarch
perl-constant-1.33-512.el10.noarch
perl-if-0.61.000-514.el10.noarch
perl-interpreter-4:5.40.2-514.el10.x86_64
perl-libnet-3.15-512.el10.noarch
perl-libs-4:5.40.2-514.el10.x86_64
perl-locale-1.12-514.el10.noarch
perl-mro-1.29-514.el10.x86_64
perl-overload-1.37-514.el10.noarch
perl-overloading-0.02-514.el10.noarch
perl-parent-1:0.241-512.el10.noarch
perl-podlators-1:5.01-511.el10.noarch
perl-vars-1.05-514.el10.noarch
protobuf-3.19.6-15.el10.x86_64
python3-openvswitch3.5-3.5.3-5.el10s.x86_64
sysstat-12.7.6-4.el10.x86_64
usbguard-1.1.4-2.el10.x86_64
usbguard-selinux-1.1.4-2.el10.noarch
zlib-ng-compat-devel-2.2.3-3.el10.x86_64
base layer : 10 10.0.20260702-0
CNTRLPLANE-3552 : Multi-stream CoreOS base layer : metadata parsing and stream resolution #8669
GCP-440 : Fix GCP boot image discovery from CoreOS base layer : stream metadata #7881
Source code for this page located on github