Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.19.0-okd-scos.ec.5

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.19.0-okd-scos.ec.4 - Success
• 4.18.0-okd-scos.ec.3 (changes) - Success

Upgrades to:

• 4.19.0-okd-scos.ec.6 (changes) - Success

---

Changes from 4.19.0-okd-scos.ec.4

Created: 2025-03-21 20:19:25 +0000 UTC

Image Digest: sha256:0c63167ad4b5ec753748f4cb9986b8b5126bb3cfa923ed3c8db2fb56f6bdf50a

Release 4.19.0-okd-scos.ec.5 was created from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-03-21-134345

Components

• Kubectl 1.32.1
• Kubernetes upgraded from 1.32.2 to 1.32.3
• Kubernetes Tests 1.32.2
• CentOS Stream CoreOS upgraded from 419.9.202503111432-0 to 9.0.20250318-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
VSphereConfigurableMaxAllowedBlockVolumesPerNode (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

• csi-snapshot-validation-webhook

Rebuilt images without code change

• apiserver-network-proxy git 0e116160 sha256:0314dce98dc13d1004a71c4eab2bccb075bff7d1e051f67a4d6b7804802ab8c9
• cluster-node-tuning-operator git 33b83c7c sha256:5e2bd24f085b9044359b915d942b2474b2b9a869b3770dff38072d239d549ff9
• haproxy-router git b41f9d05 sha256:550eec2e7bc87886517cdb374a1e320c5ad1d2d7f307a0a8d34ed020cd02b34a
• service-ca-operator git fdd9502f sha256:f541b2c360e689a5ccba2c18636914e419e3f064142ea1214c5a50c428e51b1d
• stream-coreos git f6eee15d sha256:cfedd417112c2d03756013a87b72ccf7ff94dea04dbc1a40fef1909f14d2703a
• stream-coreos-extensions git f6eee15d sha256:881ffe182065f6d466ccb27f0781ae11de91b220d1e12501a1154973a6270a19

agent-installer-api-server

• aantal-MGMT-19423: replacing HighAvailabilityMode with ControlPlaneCount. Some places like updating cluster params HighAvailabilityMode is still needed for backward compatibility. (#7373) #7373
• NO-ISSUE: Update Konflux references (#7406) #7406
• NO-ISSUE: Fix setuptools issue (#7415) #7415
• NO-ISSUE: [master] Bump OCP versions: 4.15, 4.12 (#7408) #7408
• NO-ISSUE: Only get the release image during install if it’s necessary (#7390) #7390
• NO-ISSUE: [master] Bump OCP versions: 4.17 (#7400) #7400
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• NO-ISSUE: Bump github.com/golang/glog from 1.2.0 to 1.2.4 (#1057) #1057
• OCPBUGS-52696, OCPBUGS-52704: Bump crpto to v0.33.openshift.1 (#1053) #1053
• NO-ISSUE: Update Konflux references (#1051) #1051
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Update Konflux references (#929) #929
• Full changelog

agent-installer-utils

• AGENT-1147: Update operators #51
• AGENT-1087: Support url in appliance-config.yaml #47
• AGENT-1119: agent-setup-tui.service typo fix #48
• AGENT-1087: Enable agent installer interactive flow #46
• AGENT-464: Refactor UI for Rendezvous node IP entry #42
• AGENT-1087: load agent tui #44
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• STOR-1877: Run operators without root user control #368
• STOR-1880: Role and ClusterRole with too wide permissions #367
• OCPBUGS-41827: update injector to use a secret rather than an environment variable #357
• NO-JIRA: Fixed typo in README.md #348
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-53183: Avoid adding duplicate entries to NO_PROXY #9573
• SPLAT-2078: Removed VSphereStaticIPs feature gate #9560
• OCPBUGS-53280: PowerVS: Re-enable disconnected installs #9551
• AGENT-537: Add agent command to generate certificates #9557
• OCPBUGS-39146: Validate sgdisk partition start in image based installer config #9541
• AGENT-1113: additional refinement for loading the agent UI #9565
• SPLAT-2072: Removed VSphereMultiVCenters feature gate #9553
• OCPEDGE-1513: feat(topologies): add DualReplica topology mode #9534
• OCPBUGS-45692: Modified ova template name to use failure domain name #9300
• OCPBUGS-50552: Power VS: Disallow clusterOSImage install-configuration parameter #9417
• NO-JIRA: OWNERS: add thuan #9555
• OCPBUGS-51209: Changed kernelFileType name from kernel.img to vmlinuz for s390x #9533
• OCPBUGS-6271: Adding VIPs Validation for agent based vsphere installation #9532
• Full changelog

baremetal-operator

• OCPBUGS-53233: Sync mar 18 #403
• Full changelog

baremetal-runtimecfg

• OCPEDGE-1689: Include Arbiter nodes in the API backends if there is only one master #344
• OCPBUGS-48469: Include cloud platform specific parameters to argument list for corednsmonitor #341
• Full changelog

cli, cli-artifacts, deployer, tools

• NO-JIRA: debug: suggest nsenter instead of chroot #1991
• OCPBUGS-53389: Use fedora image in unit tests instead of centos #1992
• OCPBUGS-23514: status: Adjust impact summary for Failing=Unknown #1989
• Full changelog

cloud-credential-operator

• NO-JIRA: Report the error when syncing STS secrets #827
• OSASINFRA-3657: Add support for storing OpenStack CA bundles #780
• OCPBUGS-52505: golang.org/x/oauth2 v0.28.0 #821
• Full changelog

cloud-network-config-controller

• OCPBUGS-53201: Revert “CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller” #164
• CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #161
• Full changelog

cluster-autoscaler

• OCPBUGS-11115: improve failed machine detection in clusterapi #347
• OCPBUGS-11115: make DecreaseTargetSize more accurate #343
• OCPBUGS-11115: improve replica counting on openshift #278
• Full changelog

cluster-bootstrap

• OCPEDGE-1683: feat: add support for arbiter and dual replica: #116
• Full changelog

cluster-capi-controllers

• OCPCLOUD-2860: Enable propagation of Machine annotations to Nodes #233
• OCPCLOUD-2680: Enable machine to node propagation #229
• Full changelog

cluster-capi-operator

• TRT-2048: Revert “OCPCLOUD-2792: corecluster: set controller level conditions + tests” #273
• OCPBUGS-53057: Fix misspelled CAPI IBMPowerVSCluster kind name in corecluster generation logic #266
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-41827: update injector to use a secret rather than an environment variable #380
• Full changelog

cluster-config-api

• CONSOLE-4448, OCPBUGS-53412: Add the ability to specify a second custom logo for PatternFly 6 #2177
• MCO-1521: Promote PinnedImageSet to GA #2198
• Remove inactive reviewers and ex-Red Hatters from OWNERS, add everettraven #2238
• Update KAL and remove patch strategy tags #2241
• STOR-2141: add MaxAllowedBlockVolumesPerNode field to VSphereCSIDriverConfigSpec #2190
• Full changelog

cluster-control-plane-machine-set-operator

• OAPE-147: Add E2E tests for MachineNamePrefix with OnDelete update strategy #353
• Full changelog

cluster-csi-snapshot-controller-operator

• STOR-2281: Remove csi-snapshot-validation-webhook references #231
• Full changelog

cluster-ingress-operator

• NE-1953: Add experimental Gateway API group to Validating Admission Policy #1200
• NE-1907: Manage OSSM operator subscription manually to ensure a compatible version is installed #1112
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-35102: Bump library-go #1824
• Full changelog

cluster-monitoring-operator

• NO-JIRA: [bot] Synchronize versions of the downstream components #2577
• MON-4189: Updating node-exporter accelerators configmap #2558
• MON-4043: Configuring external Alertmangers with proxy_url #2580
• MON-4136: set up the PrometheusPossibleNarrowSelectors alert #2554
• Full changelog

cluster-network-operator

• OCPBUGS-52280: Move to use newer IPsec DaemonSets irrespective of MCP state #2454
• CNTRLPLANE-112: Update managed Azure HCP cloud network config #2647
• OCPBUGS-52972: Correct namespace ref and cert dir #2665
• Full changelog

cluster-samples-operator

• OCPBUGS-52848: Unrevert the revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #609
• OCPBUGS-52848: Unrevert the revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #608
• Full changelog

cluster-storage-operator

• STOR-1881: Role and ClusterRole with too wide permissions #569
• NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #568
• Full changelog

cluster-version-operator

• OTA-1403: Move the CVO CLI Application to a Separate Folder #1169
• Full changelog

console

• OCPBUGS-53103: Apply plugin-api-changed label to plugin SDK shared modules #14872
• ODC-7776: Add getting started alert #14830
• ODC-7766: Test updates pertaining to perspective merge #14717
• CONSOLE-4515, CONSOLE-4516, CONSOLE-4517: Update react-modal, react-tagsinput #14874
• OCPBUGS-53118: Include init containers in readiness count if ready and started is true #14877
• CONSOLE-4461: Notification drawer move to Page props, fixing the small overlap on the notification drawer #14723
• OCPBUGS-45847: Remove barrel file references in static plugin exposedModules #14683
• OCPBUGS-52589: Fix hooks in CaptureTelemetry #14870
• CONSOLE-3414: Fix flaky Loading tests #14873
• OCPBUGS-53047: Disable guided tour in admin perspective #14866
• Full changelog

console-operator

• NETOBSERV-2029: add netobserv ConsoleCLIDownload #958
• OCPBUGS-53164: Add annotations to Enable developer perspective quick start to include in the console quick starts #970
• ODC-7723: Add quick start to enable developer perspective #968
• Full changelog

csi-external-attacher

• OCPBUGS-41719: UPSTREAM: 624: Reorder API calls after successful detach #82
• Full changelog

csi-external-provisioner

• NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #113
• Full changelog

egress-router-cni

• OCPBUGS-53096: Build openshift container based on 4.19 image #89
• Full changelog

etcd, installer-etcd-artifacts

• OCPBUGS-50510: Add configurable option for hardware-related timeout delay #311
• Full changelog

gcp-machine-controllers

• CORS-3906: Update MAPI GCP Provider to use custom GCP endpoints #111
• Full changelog

gcp-pd-csi-driver

• STOR-2257: Rebase to upstream v1.17.4 for OCP 4.19 #75
• Full changelog

gcp-pd-csi-driver-operator

• NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #140
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-53014: Bump 1.32.3 #2241
• TRT-1854: translate test annotations to use: include/exclude CEL, labels, filtering #2215
• STOR-2285: UPSTREAM: <carry>: Add volume group snapshot test driver #2232
• OCPBUGS-44693: Revert “disable ResilientWatchCacheInitialization feature” #2192
• Full changelog

hypershift

• CNTRLPLANE-111: Fix KMS Azure credentials mount path #5857
• CNTRLPLANE-348: Konflux tagged releases #5869
• OCPBUGS-53407: chore(deps): update konflux references #5846
• NO-JIRA: feat(builds): Add area labels and OWNERS #5872
• OCPBUGS-52424: Set shutdown watch termination grace period on kube-apiserver #5760
• NO-JIRA: Add Azure scheduler doc to mkdocs #5865
• CNTRLPLANE-342: Add missing area for support #5864
• OCPBUGS-53050: Handle multiple mirror entries for source #5827
• OCPBUGS-52331: CPO v2: rollout workloads on any changes to mounted configmaps/secrets #5767
• NO-JIRA: openstack: revert OpenStackImageRetentionPolicy + use a unique image name per Hosted Cluster #5853
• Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure” #5860
• OCPBUGS-53083: e2e: detect leader election failure in restarted pods #5830
• CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure #5837
• METAL-1240: Fix kube-controller-manager and openshift-route-controller-manager services’ ipFamilies wrt PreferDualStack policy #5829
• OSASINFRA-3492: feat(openstack): leverage ORC to manage the release image #5139
• CNTRLPLANE-325: rootless containerized builds #5835
• CNTRLPLANE-265: Enable gosimple, govet, and errcheck in golangci-lint #5759
• CNTRLPLANE-111: Fix Azure KMS SecretProviderClass volume name #5820
• Full changelog

ibm-vpc-block-csi-driver-operator

• NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #140
• Full changelog

insights-operator

• NO-JIRA: refactor gather commands (#1076) #1076
• NO-JIRA: feat: add gatherer name validation to gendocs (#1075) #1075
• fix: allow running enabled functions from disabled gatherer (#1077) #1077
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• SB 3.4.3 test app and 3.1.4 app simplified #39
• Full changelog

ironic

• METAL-1297: Update ironic-image to the latest commit hash #644
• Full changelog

machine-api-operator

• SPLAT-2078: Removed VSphereStaticIPs feature gate #1346
• Full changelog

machine-config-operator

• OCPNODE-2340: update (Cluster)Imagepolicy PKI config to policy.json #4886
• OCPBUGS-52827: Fixing typos for MachineConfigNode #4914
• OCPBUGS-51130: In OCL. Cannot install extensions #4870
• OCPBUGS-52280, SDN-5330: Add ipsec connect wait service #4854
• OCPNODE-2842: Set Upgradeable=False when cluster is on cgroup v1 #4822
• “NO-ISSUE: ensure that client configs are not mutable” #4915
• MCO-1501: Add support for custom MCPs in MCN #4876
• OCPBUGS-53085: Add scc label to arbitor crio-metrics-proxy #4912
• OCPBUGS-51150: daemon: ensure ostree-finalize-staged is started before rebooting #4907
• OCPBUGS-44185: Race in configure-ovs.sh affects bonding interface configuration. #4609
• OCPBUGS-52213: Update ObservedGeneration in KubeletConfig #4900
• RHEL-79554: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4866
• Full changelog

machine-os-images

• NO-JIRA: Change to new host #54
• Full changelog

monitoring-plugin

• OU-700: don’t show metrics links in acm perspective #367
• COO-768: add plugin proxy to perses proxy path #365
• COO-759: update datasource whenerver the csrf token changes #363
• RHINENG-12634: incident utils typescript conversion #359
• CNV-55987: Aggregated alerts #348
• Full changelog

multus-cni, multus-cni-microshift

• OCPBUGS-53087: Tolerate issues writing network status annotation on CNI ADD #263
• OCPBUGS-45037: Bring in getpodcontext (fix cache miss carry) #258
• Full changelog

network-tools

• NO-JIRA: Add Peng #138
• Full changelog

networking-console-plugin

• add adam to the approves #223
• CNV-56305: upgrade Network UI to PatternFly 6 #221
• CNV-58015: fix delete label row #224
• Full changelog

nutanix-cloud-controller-manager

• OCPCLOUD-2847: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (1771fdb) into main #42
• Full changelog

oc-mirror

• OCPBUGS-52960: v2: fix setting version during build (#1109) #1109
• OCPBUGS-52978: delete: fix typo in –help output (#1115) #1115
• OCPBUGS-52969: remove TechPreview mentions of v2 in –help (#1110) #1110
• Full changelog

olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #299
• NO-ISSUE: Synchronize From Upstream Repositories #298
• NO-ISSUE: Synchronize From Upstream Repositories through PR1871 #294
• OCPBUGS-23055: Synchronize From Upstream Repositories through PR1811 #290
• Full changelog

openstack-cluster-api-controllers

• Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #361
• Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #360
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Synchronize From Upstream Repositories #986
• NO-ISSUE: Synchronize From Upstream Repositories #984
• NO-ISSUE: Synchronize From Upstream Repositories #966
• NO-ISSUE: Update DOWNSTREAM owners files #973
• OCPBUGS-42526: Ensure that PSA label is latest instead of pinning versions #972
• Full changelog

operator-marketplace

• NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.23.0 #605
• NO-ISSUE: Bump github.com/onsi/gomega from 1.36.1 to 1.36.2 #608
• NO-ISSUE: Upgrade github.com/operator-framework/api from v0.23.0 to v0.30.0 and github.com/prometheus/client_golang v1.21.0 => v1.21.1 #598
• NO-ISSUE: Add dependabot to help keep the project maintained #599
• OCPBUGS-52340: Ensure that PSA label is latest instead of pinning versions #600
• Full changelog

powervs-block-csi-driver

• MULTIARCH-5364: Rebase ibm-powervs-block-csi-driver with upstream #97
• Full changelog

powervs-machine-controllers

• OCPBUGS-53309: Update dependencies to k8s 1.32 #110
• Full changelog

tests

• SDN-5768: virt, udn: use l2bridge binding #29439
• OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.openshift.com to docs.redhat.com after docs migration #29604
• CNTRLPLANE-5: Decode CBOR data in etcd test #29601
• MCO-1594: updates for ManagedBootImageStatus #29598
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #141
• Full changelog

vsphere-csi-driver-operator

• NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #298
• STOR-2252: Bump all deps #296
• Full changelog

vsphere-problem-detector

• SPLAT-1801: Add support for host groups #175
• No-JIRA: Update owners #178
• STOR-2252: Bump all deps #177
• Full changelog

---

View changelog in Markdown or change previous release: 4.19.0-okd-scos.ec.44.19.0-okd-scos.ec.34.19.0-okd-scos.ec.24.19.0-okd-scos.ec.14.19.0-okd-scos.ec.04.18.0-okd-scos.ec.34.18.0-okd-scos.ec.24.18.0-okd-scos.ec.14.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.19.0-0.okd-scos-2025-03-31-1751504.19.0-0.okd-scos-2025-03-31-0551494.19.0-0.okd-scos-2025-03-30-1751484.19.0-0.okd-scos-2025-03-30-0551474.19.0-0.okd-scos-2025-03-29-1751464.19.0-0.okd-scos-2025-03-29-055146───4.18.0-0.okd-scos-2025-03-31-1345544.18.0-0.okd-scos-2025-03-31-0145544.18.0-0.okd-scos-2025-03-29-1015314.18.0-0.okd-scos-2025-03-28-2215314.18.0-0.okd-scos-2025-03-28-1015314.18.0-0.okd-scos-2025-03-26-222313───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-03-28-1148024.15.0-0.okd-2025-03-26-0131074.15.0-0.okd-2025-03-25-1331074.15.0-0.okd-2025-03-13-2041304.15.0-0.okd-2025-02-12-1007064.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.18.0-okd-scos.64.18.0-okd-scos.54.18.0-okd-scos.44.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github