Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.21.0-okd-scos.ec.12

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.21.0-okd-scos.ec.11 - Success
• 4.20.0-okd-scos.11 (changes) - Success

Upgrades to:

• 4.21.0-okd-scos.ec.13 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.21.0-okd-scos.ec.11

Created: 2025-12-05 11:50:59 +0000 UTC

Image Digest: sha256:83690f1283b0a70b5590a19c5613bbd7e846f4c02ca4a874da5bdb6ba4d8faff

Release 4.21.0-okd-scos.ec.12 was created from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2025-12-04-230542

Components

• Kubectl 1.34.1
• Kubernetes 1.34.2
• Kubernetes Tests 1.34.1
• CentOS Stream CoreOS 10.0.20251113-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
DynamicResourceAllocation (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)

agent-installer-api-server

• NO-ISSUE: [master] Bump OCP versions: 4.20, 4.16, 4.17, 4.19, 4.12 #8477
• MGMT-22078: Add readOnlyRootFilesystem to assisted-service template #8229
• NO-ISSUE: Update module github.com/golangci/golangci-lint to v1.64.8 #8464
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• AGENT-1216: support new HostStage (HostStageCopyingRegistryDataToDisk) #1384
• Full changelog

agent-installer-utils

• AGENT-1378: Add additional operators #201
• Full changelog

aws-karpenter-provider-aws

• AUTOSCALE-446: Rebase to 1.4.2 to match Hypershift dependencies #20
• Full changelog

azure-cluster-api-controllers

• OCPCLOUD-3101: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:main (e695d87) into master #354
• Full changelog

baremetal-installer, installer, installer-artifacts

• CORS-4212: AWS: Add the ability to configure throughput on GP3 volumes #10132
• OCPBUGS-63710: PowerVS: Fix all zones invalid in lon region #10135
• OCPBUGS-65512: Removing resources on destroy by other filters #10100
• NO-JIRA: bump capa to latest upstream version #10122
• MULTIARCH-5817: Upgrade az version in upi-installer image to fix ‘az sig image-version create’ issue #10067
• OPNET-678: Allow disabling internal DNS #9924
• no-jira: Upgrade GolangCI-lint to v2 #10121
• AGENT-1326, MCO-1961: copy image-references for machine-config-controller bootstrap #10134
• OCPBUGS-60765: Bump capv to v1.14.0 #10120
• OCPBUGS-62790: Use separate tmpfs for ostree checkout on live ISO #10133
• OCPBUGS-60071: abort uninstall process if owned subnets contain shared tags #9942
• MULTIARCH-5553: PowerVS: Introduce group division #10095
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-65925: Fall back to simpler behavior, if setsid,ps,pkill are not installed #2153
• Full changelog

cluster-authentication-operator

• OCPBUGS-65675: externaloidc: return errors when node statuses cannot be used to determine oidc state #801
• Full changelog

cluster-baremetal-operator

• OCPBUGS-66144: Enable readOnlyRootFS flag for machine-os-images container #533
• Full changelog

cluster-capi-controllers

• OCPCLOUD-3104: Merge https://github.com/kubernetes-sigs/cluster-api:v1.11.3 (7b1cf36) into master #243
• Full changelog

cluster-capi-operator

• OCPCLOUD-3105: Bump CAPI to v1.11 and Providers #417
• OSASINFRA-3960: Migrate OpenStack InfraCluster controller in-tree #411
• NO-JIRA: Set scheme during AWSCluster conversion #418
• OCPCLOUD-2997: Disallow authoritativeAPI swap when CAPI Machine is deleting or its infra is not ready #408
• OCPCLOUD-3104: machinesync: add compatibility for v1beta2 when syncing CAPI to MAPI #416
• Full changelog

cluster-config-api

• MCO-2005: Include missing OSImageStream TP CRDs #2612
• AGENTS: Using API_GROUP_VERSIONS generates incorrect openapi #2575
• AGENT-1385: Adding missing status field for InternalReleaseImage #2611
• OCPNODE-3779, OCPNODE-3894, OCPNODE-3895: Enable DRA(DynamicResourceAllocation) featuregate by default #2498
• Revert “Merge pull request #2448 from opokornyy/CCXDEV-15259-io-v1” #2608
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-65474: Add ClusterRole and other related objects to ClusterOperator relatedObjects #258
• Full changelog

cluster-etcd-operator

• CNTRLPLANE-1791: bump k8s 1.34 #1517
• Full changelog

cluster-image-registry-operator

• CNTRLPLANE-1683: set up openshift-tests-extension for cluster-image-registry-operator: refactor: simplified single-module OTE infrastructure #1269
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-60572: Use BoundServceAccountTokenVolume dy default #571
• Full changelog

cluster-kube-storage-version-migrator-operator

• CNTRLPLANE-1306: Refactor OTE to single-module architecture #133
• Full changelog

cluster-monitoring-operator

• NO-ISSUE: ensure CMO and its operands pods have the app.kubernetes.io/part-of: openshift-monitoring label #2771
• NO-ISSUE: Migrate away from deprecated ioutil #2754
• NO-ISSUE: rename manifests_test package to manifests #2768
• MON-4436: Drop CHANGELOG.md #2755
• NO-JIRA: [bot] Synchronize versions of the downstream components #2767
• Full changelog

cluster-network-operator

• OCPBUGS-63443: Fix whereabouts-token-watcher DaemonSet improvements #2841
• OCPBUGS-56173: Align frrk8s to upstream #2833
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-66214: Add support for lscpu_check TuneD built-in #1439
• OCPBUGS-55399: : Fix metrics for HyperShift #1438
• Full changelog

cluster-olm-operator

• NO-ISSUE: add jiazha as approver #153
• Full changelog

cluster-version-operator

• OCPBUGS-66215: update o/api vendoring #1269
• OCPBUGS-60568: lib/resourcemerge: Add support for automountServiceAccountToken #1264
• Full changelog

console

• OCPBUGS-66345: Fix broken API exports #15802
• NO-JIRA: Add Claude Code /test with arguments (frontend, backend, unit, all) #15613
• OCPBUGS-65804: Update client initialization in checkPackageManifestHandler #15746
• OCPBUGS-63401: Fix Pod selector links not navigating on Search page #15770
• OCPBUGS-60141: Prevent the Software Catalog from reseting its scroll position, when closing the details view modal #15667
• OCPBUGS-63457: Runtime error on switching to form view after invalid ‘metrics’ field on add/edit HPA yaml view page #15788
• OCPBUGS-65890: redirect catalog traffic as needed #15764
• OCPBUGS-62261: Remove unwanted semicolon from Serverless Channel and Broker list #15785
• CONSOLE-4701: add e2e tests for yaml editor theme and font settings #15783
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

console-operator

• OCPBUGS-64685: Dont report Progressing status when operands arew being reconciled #1074
• OCPBUGS-62126: Update perspective name from Administrator to Core platform in quickstarts #1076
• OCPBUGS-65880: Reset StorageVersionMigrationDegraded condition #1071
• Full changelog

gcp-cluster-api-controllers

• OCPCLOUD-3103: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0-beta.0 (3b04ea4) into master #253
• Full changelog

haproxy-router

• OCPBUGS-49908: dynamicallyReplaceEndpoints: Check for idled svc #685
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-61376: Introduce HPA OTE suite #2526
• Full changelog

hypershift

• CNTRLPLANE-2049: chore(lint): remove unused exclusion rules #7333
• NO-JIRA: docs(azure): standardize credential file naming and improve script va… #7213
• OCPBUGS-66067: fix(kas): apply LoadBalancerSourceRanges only for LoadBalancer service type #7298
• CNTRLPLANE-1814: Add support for setting max expiration duration for KAS service account tokens #7310
• NO-JIRA: feat(aws): add shared-role support for IAM operations #7331
• CNTRLPLANE-1693: Implement hypershift create oadp-schedule command and some enhancements #7280
• GCP-181: add infrastructure create and destroy CLI commands for GCP #7290
• GCP-231: feat(api): add GCP Workload Identity Federation types and validation #7285
• NO-JIRA: docs(aws): migrate getting-started to STS-based authentication #7321
• OCPBUGS-61296: Override CPO for 4.17.20-4.17.43 with 4.17.44 image #7319
• CNTRLPLANE-1857: feat(contrib): add cleanzones-azure tool for orphaned DNS cleanup #7312
• CNTRLPLANE-2152: chore: override capi images #7320
• NO-JIRA: Update expected digest for busybox:latest in TestGetDigest #7322
• NO-JIRA: feat(owners): add automated platform labeling #7296
• OCPBUGS-63717: Fix flaky EnsureGlobalPullSecret test race condition #7294
• CNTRLPLANE-1262: build(tools): upgrade golangci-lint to v2.6.2 #7268
• Full changelog

ibmcloud-cluster-api-controllers

• OCPCLOUD-3099: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.12.0 (2c7ff37) into main #127
• Full changelog

insights-operator

• CCXDEV-15393: Refactor network anonymization #1149
• Full changelog

ironic

• METAL-1695: OKD: install Ironic from the OpenShift fork #739
• NO-ISSUE: Update requirements.cachito with latest openshift forks commits #732
• METAL-1659: Run EFI build loop based on actual arch #737
• METAL-1685: Split setup for OKD #735
• Full changelog

ironic-agent

• NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #218
• METAL-1685: Split setup for OKD #219
• Full changelog

machine-api-operator

• OCPBUGS-66244: default Azure to marketplace image #1441
• Full changelog

machine-config-operator

• OCPBUGS-59925: Fix keepalived SIGTERM handling #5403
• OCPBUGS-66314: Add hostIP 127.0.0.1 to machine-config-daemon port 8798 #5456
• NO-ISSUE: fix-up for ami collection script #5464
• MCO-1999: align extended tests code with private repo. Pointers and pe… #5453
• MCO-1961: OSImageStream follow up #5458
• AGENT-1326: Add InternalReleaseImage controller #5452
• OCPBUGS-65959: Revert “OCPBUGS-50492: Add kube_rbac_proxy service” #5445
• MCO-1961: Add the OSImageStream Controller #5457
• Full changelog

monitoring-plugin

• OCPBUGS-57307: Time range and Refresh interval dropdown button lack of unique identifier #663
• OCPBUGS-66064: configure max TLS version only when specified #660
• OU-1086: monitoring tests reflecting namespace level #659
• Full changelog

multus-admission-controller

• CORENET-6497: Upstream sync for kube rebase 1.34 #112
• Full changelog

network-interface-bond-cni

• OCPBUGS-66239: disable DependaBot downstream #105
• Full changelog

networking-console-plugin

• OCPBUGS-60823: fix flickerying in synced editor #303
• Full changelog

nutanix-cloud-controller-manager

• OCPCLOUD-3096: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (810c3de) into main #52
• Full changelog

olm-catalogd, olm-operator-controller

• TRT-2460: Disable upstream PodDisruptionBudget #574
• NO-ISSUE: Synchronize From Upstream Repositories #572
• NO-ISSUE: Synchronize From Upstream Repositories #570
• OCPQE-31063: add agent for olmv1 qe cases #571
• Full changelog

openshift-controller-manager

• CNTRLPLANE-1676: Rebase k8s 1.34 #423
• Full changelog

openstack-machine-api-provider

• OCPBUGS-65712: Re-vendor CAPO #140
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: re-apply enhance oc case to apply for metal step #1167
• Trt-2457: olm subscription revert #1165
• OCPQE-30680: migrate ocp-43975 to OTE #1162
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• CORENET-6352, OCPBUGS-61378: DownStream Merge [12-02-2025] #2887
• OCPBUGS-61742, OCPBUGS-62013: DownStream Merge [11-19-2025] #2864
• Full changelog

tests

• OCPBUGS-66060: update watch request limits for marketplace-operator #30564
• TRT-2458: Revert #30262 “CNTRLPLANE-1437: add monitor test for checking default service account in pods” #30557
• NO-JIRA: Remove the exception for CO/control-plane-machine-set’s Available=False #30555
• NO-JIRA: Track CO/image-registry’s Available=False issue #30549
• “NO-ISSUE: Replace MCO-1447 with OCPBUGS-66209” #30548
• OCPEDGE-2159: [TNF] cert rotation validation in degraded mode #30545
• CNTRLPLANE-1437: add monitor test for checking default service account in pods #30262
• Full changelog

vsphere-cluster-api-controllers

• OCPCLOUD-3100: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.14.0 (57a59ca) into master #60
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: node image info is still loading, check back later

View changelog in Markdown or change previous release: 4.21.0-okd-scos.ec.114.21.0-okd-scos.ec.104.21.0-okd-scos.ec.94.21.0-okd-scos.ec.84.21.0-okd-scos.ec.74.21.0-okd-scos.ec.64.21.0-okd-scos.ec.54.21.0-okd-scos.ec.44.21.0-okd-scos.ec.34.21.0-okd-scos.ec.24.21.0-okd-scos.ec.14.21.0-okd-scos.ec.0───5.0.0-0.okd-scos-nightly-2026-03-09-1943105.0.0-0.okd-scos-nightly-2026-03-09-0743105.0.0-0.okd-scos-nightly-2026-03-08-1943105.0.0-0.okd-scos-nightly-2026-03-08-0728295.0.0-0.okd-scos-nightly-2026-03-07-192829───5.0.0-0.okd-scos-2026-02-24-143251───4.23.0-0.okd-scos-nightly-2026-03-09-153314───4.23.0-0.okd-scos-2026-03-09-153314───4.22.0-0.okd-scos-nightly-2026-03-10-0450104.22.0-0.okd-scos-nightly-2026-03-09-1511434.22.0-0.okd-scos-nightly-2026-03-09-0155184.22.0-0.okd-scos-nightly-2026-03-08-0727304.22.0-0.okd-scos-nightly-2026-03-07-1927304.22.0-0.okd-scos-nightly-2026-03-07-0624004.22.0-0.okd-scos-nightly-2026-03-05-1228054.22.0-0.okd-scos-nightly-2026-03-05-0028054.22.0-0.okd-scos-nightly-2026-03-04-1228054.22.0-0.okd-scos-nightly-2026-03-04-0028054.22.0-0.okd-scos-nightly-2026-03-03-110247───4.22.0-0.okd-scos-2026-03-10-0541064.22.0-0.okd-scos-2026-03-09-1604334.22.0-0.okd-scos-2026-03-09-0404334.22.0-0.okd-scos-2026-03-08-1604334.22.0-0.okd-scos-2026-03-08-0223144.22.0-0.okd-scos-2026-03-07-1346254.22.0-0.okd-scos-2026-03-05-1051104.22.0-0.okd-scos-2026-03-04-2251104.22.0-0.okd-scos-2026-03-04-1051104.22.0-0.okd-scos-2026-03-03-1051104.22.0-0.okd-scos-2026-03-02-225110───4.21.0-0.okd-scos-nightly-2026-03-09-2258064.21.0-0.okd-scos-nightly-2026-03-09-1058064.21.0-0.okd-scos-nightly-2026-03-07-1108564.21.0-0.okd-scos-nightly-2026-03-06-2308564.21.0-0.okd-scos-nightly-2026-03-06-110856───4.21.0-0.okd-scos-2026-03-10-0012404.21.0-0.okd-scos-2026-03-09-1212404.21.0-0.okd-scos-2026-03-09-0012404.21.0-0.okd-scos-2026-03-07-1433404.21.0-0.okd-scos-2026-03-07-0233394.21.0-0.okd-scos-2026-03-06-143338───4.20.0-0.okd-scos-2026-02-10-1309514.20.0-0.okd-scos-2026-02-07-0016394.20.0-0.okd-scos-2026-02-06-1216394.20.0-0.okd-scos-2026-02-06-0016394.20.0-0.okd-scos-2026-02-05-1216384.20.0-0.okd-scos-2026-02-05-0016374.20.0-0.okd-scos-2026-02-04-121636───4.19.0-0.okd-scos-2025-10-25-0018304.19.0-0.okd-scos-2025-10-24-1218294.19.0-0.okd-scos-2025-10-24-0018284.19.0-0.okd-scos-2025-10-23-1218284.19.0-0.okd-scos-2025-10-23-001828───4.18.0-0.okd-scos-2025-05-27-0825374.18.0-0.okd-scos-2025-05-26-2025374.18.0-0.okd-scos-2025-05-26-0825374.18.0-0.okd-scos-2025-05-23-0333574.18.0-0.okd-scos-2025-05-22-153357───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-06-27-1341344.15.0-0.okd-2025-06-17-1652194.15.0-0.okd-2025-05-02-1402244.15.0-0.okd-2025-04-03-2126204.15.0-0.okd-2025-04-02-1800124.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424───4.21.0-okd-scos.74.21.0-okd-scos.64.21.0-okd-scos.54.21.0-okd-scos.44.21.0-okd-scos.34.21.0-okd-scos.24.21.0-okd-scos.14.21.0-okd-scos.04.20.0-okd-scos.174.20.0-okd-scos.164.20.0-okd-scos.154.20.0-okd-scos.144.20.0-okd-scos.134.20.0-okd-scos.124.20.0-okd-scos.114.20.0-okd-scos.104.20.0-okd-scos.94.20.0-okd-scos.84.20.0-okd-scos.74.20.0-okd-scos.64.20.0-okd-scos.54.20.0-okd-scos.44.20.0-okd-scos.34.20.0-okd-scos.24.20.0-okd-scos.14.20.0-okd-scos.04.19.0-okd-scos.194.19.0-okd-scos.184.19.0-okd-scos.174.19.0-okd-scos.164.19.0-okd-scos.154.19.0-okd-scos.144.19.0-okd-scos.134.19.0-okd-scos.124.19.0-okd-scos.114.19.0-okd-scos.104.19.0-okd-scos.94.19.0-okd-scos.84.19.0-okd-scos.74.19.0-okd-scos.64.19.0-okd-scos.54.19.0-okd-scos.44.19.0-okd-scos.34.19.0-okd-scos.24.19.0-okd-scos.14.19.0-okd-scos.04.18.0-okd-scos.104.18.0-okd-scos.94.18.0-okd-scos.84.18.0-okd-scos.74.18.0-okd-scos.64.18.0-okd-scos.54.18.0-okd-scos.44.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523

Source code for this page located on github