# 4.19.0-okd-scos.3 Created: 2025-06-10 21:15:38 +0000 UTC Image Digest: `sha256:80c749ba4c8c6cc1eb82be5134f4ba7ddc30e16937e417d842ea407c97787468` Promoted from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-06-10-044742 ## Changes from 4.19.0-okd-scos.1 ### Components * Kubectl 1.32.1 * Kubernetes upgraded from 1.32.4 to 1.32.5 * Kubernetes Tests upgraded from 1.32.4 to 1.32.5 * CentOS Stream CoreOS upgraded from 9.0.20250515-0 to 9.0.20250603-0 ### FeatureGate Changes | FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA | | :------ | :---: | :---: | :---: | :---: | :---: | :---: | | OpenShiftPodSecurityAdmission
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled | ### Rebuilt images without code change * [stream-coreos](https://github.com/openshift/os) git [2acbcb0f](https://github.com/openshift/os/commit/2acbcb0f9ef2e451f0138f1c33066fa6fa02ae20) `sha256:d3c3fa03e4b4fb5f4e0c3953549e20ac4bf8e2f82bde1efd191803e27308e663` * [stream-coreos-extensions](https://github.com/openshift/os) git [2acbcb0f](https://github.com/openshift/os/commit/2acbcb0f9ef2e451f0138f1c33066fa6fa02ae20) `sha256:50d4d45847cb974e1bdc02c6ca292b848729361f7ae553bc297a251a9b2fba95` ### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/b21bb1ed2792285049578e68c269e91023931fca) * [OCPBUGS-56991](https://issues.redhat.com/browse/OCPBUGS-56991): OVE isobuilder fails on CentOS Stream 9 due to missing… [#104](https://github.com/openshift/agent-installer-utils/pull/104) * [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#106](https://github.com/openshift/agent-installer-utils/pull/106) * [OCPBUGS-56690](https://issues.redhat.com/browse/OCPBUGS-56690): Fix nmtui redirection after quit [#97](https://github.com/openshift/agent-installer-utils/pull/97) * [OCPBUGS-56810](https://issues.redhat.com/browse/OCPBUGS-56810): bump appliance to 936210 [#99](https://github.com/openshift/agent-installer-utils/pull/99) * [OCPBUGS-56759](https://issues.redhat.com/browse/OCPBUGS-56759): ISOBuilder- Remove default password for nodes [#100](https://github.com/openshift/agent-installer-utils/pull/100) * [OCPBUGS-56490](https://issues.redhat.com/browse/OCPBUGS-56490): Add operator CRs post-install in OVE build script [#95](https://github.com/openshift/agent-installer-utils/pull/95) * [Full changelog](https://github.com/openshift/agent-installer-utils/compare/766df82081a65c57df4a0a5d19cea6635a31314c...b21bb1ed2792285049578e68c269e91023931fca) ### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/77213cc5eed50f6c0ec0600133e01274020657ef) * [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#79](https://github.com/openshift/apiserver-network-proxy/pull/79) * [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/1e82311cc3ab84cb3481fb018981d304e075ce4e...77213cc5eed50f6c0ec0600133e01274020657ef) ### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/b61e357915000a5f6dc50aad2cabeb1ac55e2e3c) * [OCPBUGS-56527](https://issues.redhat.com/browse/OCPBUGS-56527): openstack-cinder: Set --with-topology flag for node driver also [#384](https://github.com/openshift/csi-operator/pull/384) * [Full changelog](https://github.com/openshift/csi-operator/compare/6bb12490780bbabc88b82bfe51197a961e4e722a...b61e357915000a5f6dc50aad2cabeb1ac55e2e3c) ### [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws/tree/84fbc02a1b018ffc93ba05622282889a28343db0) * [OCPBUGS-56633](https://issues.redhat.com/browse/OCPBUGS-56633): fix: make machineset annotation controller respect paused condition [#130](https://github.com/openshift/machine-api-provider-aws/pull/130) * [Full changelog](https://github.com/openshift/machine-api-provider-aws/compare/c2e0e74ee2f13e33871fb79196c69ed254f755e6...84fbc02a1b018ffc93ba05622282889a28343db0) ### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/594f40a5567d4f914625ce44a64b7f711e03ff09) * [OCPBUGS-56962](https://issues.redhat.com/browse/OCPBUGS-56962): [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 [#339](https://github.com/openshift/cluster-api-provider-azure/pull/339) * [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/2c931b4abe5a6618754e79274f7bc9df6c63e296...594f40a5567d4f914625ce44a64b7f711e03ff09) ### [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms/tree/20a9ba53d5900578d497c84bb09cd46bc5859a29) * [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#18](https://github.com/openshift/azure-kubernetes-kms/pull/18) * [Full changelog](https://github.com/openshift/azure-kubernetes-kms/compare/70c82be884d0b86551e6dc2ccf4f80bec0f26f55...20a9ba53d5900578d497c84bb09cd46bc5859a29) ### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/249e31eba655572a52f44c6065bc251341544883) * [OCPBUGS-56653](https://issues.redhat.com/browse/OCPBUGS-56653): Fix failure when attempting to modify immutable availabilitySet [#154](https://github.com/openshift/machine-api-provider-azure/pull/154) * [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/dd3ca5704052ab83cc829e9be33b127d0d764a2a...249e31eba655572a52f44c6065bc251341544883) ### [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3/tree/06a66db1ac3c28f6d9a1adf16146ebec219c8534) * [OCPBUGS-56962](https://issues.redhat.com/browse/OCPBUGS-56962): [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 [#45](https://github.com/openshift/cluster-api-provider-metal3/pull/45) * [Full changelog](https://github.com/openshift/cluster-api-provider-metal3/compare/9e7170f249a7e61769886d81869ab577949863ab...06a66db1ac3c28f6d9a1adf16146ebec219c8534) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/19278aebc6e9e9d3a18ba19f87d69146e0cd3d4f) * [OCPBUGS-57137](https://issues.redhat.com/browse/OCPBUGS-57137): Revert "CORS-3883: Remove user-assigned identity from ARM template" [#9771](https://github.com/openshift/installer/pull/9771) * [OCPBUGS-57039](https://issues.redhat.com/browse/OCPBUGS-57039): ensure ctrplane nodes can access bootstrap MCS [#9768](https://github.com/openshift/installer/pull/9768) * [OCPBUGS-56826](https://issues.redhat.com/browse/OCPBUGS-56826): update the punctuation [#9755](https://github.com/openshift/installer/pull/9755) * [OCPBUGS-56372](https://issues.redhat.com/browse/OCPBUGS-56372): Added better logging for vSphere destroy [#9719](https://github.com/openshift/installer/pull/9719) * [OCPBUGS-56832](https://issues.redhat.com/browse/OCPBUGS-56832): add unit tests for vsphere VIPS/machinenetworks population [#9757](https://github.com/openshift/installer/pull/9757) * [OCPBUGS-56811](https://issues.redhat.com/browse/OCPBUGS-56811): Update Control Plane replica validation for Single Node OpenShift [#9756](https://github.com/openshift/installer/pull/9756) * [MGMT-20702](https://issues.redhat.com/browse/MGMT-20702), [OCPBUGS-56762](https://issues.redhat.com/browse/OCPBUGS-56762): Avoid duplicate machine networks [#9745](https://github.com/openshift/installer/pull/9745) * [OCPBUGS-55995](https://issues.redhat.com/browse/OCPBUGS-55995): [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field [#9701](https://github.com/openshift/installer/pull/9701) * [OCPBUGS-56712](https://issues.redhat.com/browse/OCPBUGS-56712): add the VM types that the install pass into the tested_instance_types [#9730](https://github.com/openshift/installer/pull/9730) * [OCPBUGS-56646](https://issues.redhat.com/browse/OCPBUGS-56646): Update RHCOS 4.19 bootimage metadata to 9.6.20250523-0 [#9742](https://github.com/openshift/installer/pull/9742) * [OCPBUGS-56595](https://issues.redhat.com/browse/OCPBUGS-56595): [release-4.19] OCPBUGS-56567: default Azure to create VM user-assigned identities [#9735](https://github.com/openshift/installer/pull/9735) * [Full changelog](https://github.com/openshift/installer/compare/180d12f3c63388fb71150e8ce67dfb1e8e881c70...19278aebc6e9e9d3a18ba19f87d69146e0cd3d4f) ### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/8f1c8b5768cdff8885ddef28e10de2c1928daf92) * [OCPBUGS-56511](https://issues.redhat.com/browse/OCPBUGS-56511): Replace colon to hypen in the filename while extracting tar on Windows [#2024](https://github.com/openshift/oc/pull/2024) * [Full changelog](https://github.com/openshift/oc/compare/c88fd60ed9c4a349d52770884b3aad828432d01d...8f1c8b5768cdff8885ddef28e10de2c1928daf92) ### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/675dad516b5d96d4ecaa2df6461e2145204850f4) * [OCPBUGS-55798](https://issues.redhat.com/browse/OCPBUGS-55798): Sync OpenStack CA Bundles from legacy location [#866](https://github.com/openshift/cloud-credential-operator/pull/866) * [OCPBUGS-56978](https://issues.redhat.com/browse/OCPBUGS-56978): Azure: resolve nil pointer exception when role assignment exists [#870](https://github.com/openshift/cloud-credential-operator/pull/870) * [OCPBUGS-55903](https://issues.redhat.com/browse/OCPBUGS-55903): Render: configure proxy on bootstrap static pod [#857](https://github.com/openshift/cloud-credential-operator/pull/857) * [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/409aa6893af94d8de67d07b03293676b5523412a...675dad516b5d96d4ecaa2df6461e2145204850f4) ### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/ee69183571b592073a7163c5aef34d1a970a8c19) * [OCPBUGS-56776](https://issues.redhat.com/browse/OCPBUGS-56776): fix: ensure CAPI machineset is created not paused when authoritative [#304](https://github.com/openshift/cluster-capi-operator/pull/304) * [OCPBUGS-56714](https://issues.redhat.com/browse/OCPBUGS-56714): fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller [#305](https://github.com/openshift/cluster-capi-operator/pull/305) * [OCPBUGS-56633](https://issues.redhat.com/browse/OCPBUGS-56633): fix: watch CAPI resources in the migration controllers [#303](https://github.com/openshift/cluster-capi-operator/pull/303) * [OCPBUGS-56722](https://issues.redhat.com/browse/OCPBUGS-56722): MachineSet deletion logic [#302](https://github.com/openshift/cluster-capi-operator/pull/302) * [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/321712b12b7a71240a49efa83e0bb5a1d6ada3d7...ee69183571b592073a7163c5aef34d1a970a8c19) ### [cluster-config-api](https://github.com/openshift/api/tree/97812373b6b447ff6b55d3e2625b4f62aff1a16f) * [OCPBUGS-56773](https://issues.redhat.com/browse/OCPBUGS-56773): disable psa for 4.19 [#2346](https://github.com/openshift/api/pull/2346) * [OCPBUGS-56761](https://issues.redhat.com/browse/OCPBUGS-56761): Revert v1alpha1 removal [#2345](https://github.com/openshift/api/pull/2345) * [OCPBUGS-56407](https://issues.redhat.com/browse/OCPBUGS-56407): Fix validation for Resource field in MOSB API [#2329](https://github.com/openshift/api/pull/2329) * [Full changelog](https://github.com/openshift/api/compare/d22fca85e3b9f77f0cf2b43759a5ff927e605f57...97812373b6b447ff6b55d3e2625b4f62aff1a16f) ### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/e654299baac2e333b86db9d5f8ec69dabbff0e3c) * [OCPBUGS-56806](https://issues.redhat.com/browse/OCPBUGS-56806): increase tnf job timeouts [#1427](https://github.com/openshift/cluster-etcd-operator/pull/1427) * [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/fdefa0ae9d888d5a76d23508de8e1a58a1872d54...e654299baac2e333b86db9d5f8ec69dabbff0e3c) ### [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator/tree/328419e7a2aba288a3405e76449f84d42b1952b3) * [OCPBUGS-53872](https://issues.redhat.com/browse/OCPBUGS-53872): bump github.com/golang-jwt/jwt [#1214](https://github.com/openshift/cluster-image-registry-operator/pull/1214) * [OCPBUGS-56363](https://issues.redhat.com/browse/OCPBUGS-56363): bump golang.org/x/oauth2 [#1207](https://github.com/openshift/cluster-image-registry-operator/pull/1207) * [Full changelog](https://github.com/openshift/cluster-image-registry-operator/compare/85ac017f7c393b18696bf77a6e6415d05418dd0b...328419e7a2aba288a3405e76449f84d42b1952b3) ### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/f41693ca6feea8cf1fc35ed95ab79447207fb914) * e2e: arm: fix ginkgo doesn't recognize kernelPageSize suite (#1334) [#1334](https://github.com/openshift/cluster-node-tuning-operator/pull/1334) * [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/7172669c93307a2474c48911fd95f04a40aa4ea7...f41693ca6feea8cf1fc35ed95ab79447207fb914) ### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/06f6aa6e22eadcc38d57f5786c50ceef38bb4d5e) * [OCPBUGS-56771](https://issues.redhat.com/browse/OCPBUGS-56771): Fix ImplicitlyEnabledCapabilities [#1199](https://github.com/openshift/cluster-version-operator/pull/1199) * [Full changelog](https://github.com/openshift/cluster-version-operator/compare/09edded491b9b591445a3502cb719403eb5f52e4...06f6aa6e22eadcc38d57f5786c50ceef38bb4d5e) ### [configmap-reloader](https://github.com/openshift/configmap-reload/tree/a2a48a3a767fdb70644c65ab863bd4fc125987d2) * [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#68](https://github.com/openshift/configmap-reload/pull/68) * [Full changelog](https://github.com/openshift/configmap-reload/compare/9bfbde8676cca7b45efc4f76f683bd26fe65893d...a2a48a3a767fdb70644c65ab863bd4fc125987d2) ### [console](https://github.com/openshift/console/tree/4afb0b7519bb22359e5dc9dbc9dbc05d3b704485) * [OCPBUGS-56885](https://issues.redhat.com/browse/OCPBUGS-56885): Helm resource list error in console [#15105](https://github.com/openshift/console/pull/15105) * [OCPBUGS-56888](https://issues.redhat.com/browse/OCPBUGS-56888): Add flags in console static plugin for all the components of this epic [#15106](https://github.com/openshift/console/pull/15106) * [OCPBUGS-56837](https://issues.redhat.com/browse/OCPBUGS-56837): Added developer getting started card in Admin project overview page [#15098](https://github.com/openshift/console/pull/15098) * [OCPBUGS-56987](https://issues.redhat.com/browse/OCPBUGS-56987): fix bug where Roles list was displaying invalid data f… [#15120](https://github.com/openshift/console/pull/15120) * [OCPBUGS-56775](https://issues.redhat.com/browse/OCPBUGS-56775): Layout of Welcome to the new OpenShift experience! buttons is wonky on mobile [#15096](https://github.com/openshift/console/pull/15096) * [OCPBUGS-56149](https://issues.redhat.com/browse/OCPBUGS-56149): Refactor Kebab+ActionsMenu to use PF [#15051](https://github.com/openshift/console/pull/15051) * [OCPBUGS-56413](https://issues.redhat.com/browse/OCPBUGS-56413): [knative] Self-provisioner user can not access or create event sources via ODC [#15067](https://github.com/openshift/console/pull/15067) * [OCPBUGS-55941](https://issues.redhat.com/browse/OCPBUGS-55941), [OCPBUGS-56107](https://issues.redhat.com/browse/OCPBUGS-56107): get `go mod tidy` to pass, bump Console Helm dependencies to 3.17.3 [#15032](https://github.com/openshift/console/pull/15032) * [OCPBUGS-56362](https://issues.redhat.com/browse/OCPBUGS-56362): improve description of the custom logos CLI args [#15061](https://github.com/openshift/console/pull/15061) * [OCPBUGS-55979](https://issues.redhat.com/browse/OCPBUGS-55979): fix alignment of Getting Started item icons [#15040](https://github.com/openshift/console/pull/15040) * [OCPBUGS-55929](https://issues.redhat.com/browse/OCPBUGS-55929): Sample segment sessions [#15031](https://github.com/openshift/console/pull/15031) * NO-JIRA: Update plugin SDK docs [#15074](https://github.com/openshift/console/pull/15074) * [OCPBUGS-55987](https://issues.redhat.com/browse/OCPBUGS-55987): Fix impersonate group action [#15041](https://github.com/openshift/console/pull/15041) * [Full changelog](https://github.com/openshift/console/compare/bd198ef0915477dadbe16d71d1277d5691773cf6...4afb0b7519bb22359e5dc9dbc9dbc05d3b704485) ### [console-operator](https://github.com/openshift/console-operator/tree/0cb29273c8b1efec6ca591d5259a69d34e5ce51f) * [OCPBUGS-56761](https://issues.redhat.com/browse/OCPBUGS-56761): Revert v1alpha1 removal [#991](https://github.com/openshift/console-operator/pull/991) * [OCPBUGS-55716](https://issues.redhat.com/browse/OCPBUGS-55716): Fix issue where console operator orphans custom logo configmaps in openshift-console namespace [#985](https://github.com/openshift/console-operator/pull/985) * [Full changelog](https://github.com/openshift/console-operator/compare/9af3e5fd7bbcb72975c7316bba38ea13c4937320...0cb29273c8b1efec6ca591d5259a69d34e5ce51f) ### [coredns](https://github.com/openshift/coredns/tree/74776b850522c912db5fbadf7353f1eab669bd2a) * [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#133](https://github.com/openshift/coredns/pull/133) * [Full changelog](https://github.com/openshift/coredns/compare/7a1451db77a68161d58af9b6ca2c9388d578310a...74776b850522c912db5fbadf7353f1eab669bd2a) ### [docker-registry](https://github.com/openshift/image-registry/tree/b1d09765386d98825e92d8759767a53849d82e9a) * [OCPBUGS-53656](https://issues.redhat.com/browse/OCPBUGS-53656): bump jwt and oauth dependencies [#429](https://github.com/openshift/image-registry/pull/429) * [Full changelog](https://github.com/openshift/image-registry/compare/59376a751cdc4c936b22aa228bf2ceb889b471f3...b1d09765386d98825e92d8759767a53849d82e9a) ### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/c8b865a1c4045a3b62dbf5ffea514f2c62d893f8) * [OCPBUGS-56962](https://issues.redhat.com/browse/OCPBUGS-56962): [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 [#243](https://github.com/openshift/cluster-api-provider-gcp/pull/243) * [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/8fba88aad6122e8468897b35da4288c90d607609...c8b865a1c4045a3b62dbf5ffea514f2c62d893f8) ### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/9c99902f29b77e842400ad37925fcb67820d3675) * [OCPBUGS-56924](https://issues.redhat.com/browse/OCPBUGS-56924): allow instances with unknown quotas to be created [#119](https://github.com/openshift/machine-api-provider-gcp/pull/119) * [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/bbe620874dee86ea85b93562e9f39e69594f7bf1...9c99902f29b77e842400ad37925fcb67820d3675) ### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/fadb78e720779ed1b29f32170f3e9dd32584a7e6) * [OCPBUGS-56082](https://issues.redhat.com/browse/OCPBUGS-56082): UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver [#2297](https://github.com/openshift/kubernetes/pull/2297) * [OCPBUGS-56437](https://issues.redhat.com/browse/OCPBUGS-56437): Bump 4.19 1.32.5 [#2304](https://github.com/openshift/kubernetes/pull/2304) * [OCPBUGS-56256](https://issues.redhat.com/browse/OCPBUGS-56256): UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes [#2302](https://github.com/openshift/kubernetes/pull/2302) * [Full changelog](https://github.com/openshift/kubernetes/compare/9fe7dfdeb6714effef45be12ec451a0f06893660...fadb78e720779ed1b29f32170f3e9dd32584a7e6) ### [hypershift](https://github.com/openshift/hypershift/tree/dec319950a1f662305191f981ff087097312fe33) * [OCPBUGS-56792](https://issues.redhat.com/browse/OCPBUGS-56792): Fix CatalogSource image check when unauthorized [#6198](https://github.com/openshift/hypershift/pull/6198) * [OCPBUGS-56910](https://issues.redhat.com/browse/OCPBUGS-56910): util/version: Add Version420 [#6215](https://github.com/openshift/hypershift/pull/6215) * [OCPBUGS-56910](https://issues.redhat.com/browse/OCPBUGS-56910): Move EnsurePSANotPrivileged to AtLeast(t, Version420) [#6212](https://github.com/openshift/hypershift/pull/6212) * [CNTRLPLANE-831](https://issues.redhat.com/browse/CNTRLPLANE-831): feat(konflux): add arm64 builds to cpo pipeline [#6182](https://github.com/openshift/hypershift/pull/6182) * [OCPBUGS-56777](https://issues.redhat.com/browse/OCPBUGS-56777): Disable PSA enforcement in 4.19 hosted cluster [#6201](https://github.com/openshift/hypershift/pull/6201) * [OCPBUGS-56458](https://issues.redhat.com/browse/OCPBUGS-56458): switch termination message policy to TerminationMessageFallbackToLogsOnError for debugability [#6170](https://github.com/openshift/hypershift/pull/6170) * [OCPBUGS-56562](https://issues.redhat.com/browse/OCPBUGS-56562): Do not validate OCP API Server SANS if PKI reconciliation is disabled [#6178](https://github.com/openshift/hypershift/pull/6178) * [CNTRLPLANE-831](https://issues.redhat.com/browse/CNTRLPLANE-831): Red Had Konflux control-plane-operator-4-19 intial pipeline [#6181](https://github.com/openshift/hypershift/pull/6181) * [CNTRLPLANE-916](https://issues.redhat.com/browse/CNTRLPLANE-916): Konflux build pipeline service account migration [#6089](https://github.com/openshift/hypershift/pull/6089) * [CNTRLPLANE-915](https://issues.redhat.com/browse/CNTRLPLANE-915): chore(deps): update konflux references [#6139](https://github.com/openshift/hypershift/pull/6139) * [OCPBUGS-55789](https://issues.redhat.com/browse/OCPBUGS-55789): [release-4.19] Update KAS structured authentication configuration logic to use new uid and extras fields [#6121](https://github.com/openshift/hypershift/pull/6121) * [Full changelog](https://github.com/openshift/hypershift/compare/d42b1a3da546e231ee6f8dd7162cca433fa2e444...dec319950a1f662305191f981ff087097312fe33) ### [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud/tree/877ef8cd546facbc2416c194128557a25b95d141) * [OCPBUGS-56962](https://issues.redhat.com/browse/OCPBUGS-56962): [release-4.19] Update manifests to remove dependency on admissionregistration v1beta1 [#115](https://github.com/openshift/cluster-api-provider-ibmcloud/pull/115) * [Full changelog](https://github.com/openshift/cluster-api-provider-ibmcloud/compare/0453d282cbd6e51902d1e8298d15181765e7fe98...877ef8cd546facbc2416c194128557a25b95d141) ### [insights-operator](https://github.com/openshift/insights-operator/tree/fa84a57ac4c8c47cb70dc07c4e9c812aaee98e49) * feat: ensure the etc-entitlement-pki secret exists (#1087) [#1087](https://github.com/openshift/insights-operator/pull/1087) * [Full changelog](https://github.com/openshift/insights-operator/compare/b1e0f8fce485de56a28f27793fa2bcec87a72771...fa84a57ac4c8c47cb70dc07c4e9c812aaee98e49) ### [ironic](https://github.com/openshift/ironic-image/tree/fe31e71dbbbd24c77adaecdc3d4d895375a611a5) * Bug OCPBUGS-56639: Bump sushy to include SuperMicro Cd boot device string workaround [#660](https://github.com/openshift/ironic-image/pull/660) * [Full changelog](https://github.com/openshift/ironic-image/compare/8a2091a6cfd25a6bc91b0714de25af904cc733ee...fe31e71dbbbd24c77adaecdc3d4d895375a611a5) ### [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader/tree/dacba7d7809a048392d18050096dcc20f2878b6f) * [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#102](https://github.com/openshift/ironic-rhcos-downloader/pull/102) * [Full changelog](https://github.com/openshift/ironic-rhcos-downloader/compare/dbe197724c9e2e5f7279665e5bcb16ff3bc8d97b...dacba7d7809a048392d18050096dcc20f2878b6f) ### [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator/tree/4ab93e07bb7c525990ef21a11caae2122ace63f6) * Fix verify job with build-machinery bump [#215](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/215) * [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#213](https://github.com/openshift/kubernetes-kube-storage-version-migrator/pull/213) * [Full changelog](https://github.com/openshift/kubernetes-kube-storage-version-migrator/compare/4c521b09f4dc55ac69234419e083f3815646f4a9...4ab93e07bb7c525990ef21a11caae2122ace63f6) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/70025364a114fc3067b2e82ce47fdb0149630e4b) * [OCPBUGS-56899](https://issues.redhat.com/browse/OCPBUGS-56899): Fix `dynamic-system-reserved-calc.sh` when only `true` parameter is used [#5094](https://github.com/openshift/machine-config-operator/pull/5094) * [OCPBUGS-56829](https://issues.redhat.com/browse/OCPBUGS-56829): Only update boot disks during GCP boot image updates [#5088](https://github.com/openshift/machine-config-operator/pull/5088) * [OCPBUGS-56445](https://issues.redhat.com/browse/OCPBUGS-56445): Boot Image Controller should not degrade when golden configmap is slow to update [#5063](https://github.com/openshift/machine-config-operator/pull/5063) * [OCPBUGS-56632](https://issues.redhat.com/browse/OCPBUGS-56632): daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers [#5076](https://github.com/openshift/machine-config-operator/pull/5076) * [OCPBUGS-56035](https://issues.redhat.com/browse/OCPBUGS-56035): Only populate `Status.PinnedImageSets.CurrentGeneration` on valid generation value [#5039](https://github.com/openshift/machine-config-operator/pull/5039) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/7ef676ce0b13a25c6572d4595d92fd487dbc98b5...70025364a114fc3067b2e82ce47fdb0149630e4b) ### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/9369858a409280dc6891cb817931978b77168de7) * [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#95](https://github.com/openshift/multus-admission-controller/pull/95) * [Full changelog](https://github.com/openshift/multus-admission-controller/compare/0b1b812e082285fd19da6bde67c905f3893bf0d7...9369858a409280dc6891cb817931978b77168de7) ### [network-tools](https://github.com/openshift/network-tools/tree/81f7aebeb1553998800c32644a8d982121277b4e) * [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#146](https://github.com/openshift/network-tools/pull/146) * [Full changelog](https://github.com/openshift/network-tools/compare/ebd18d146a6f06df7e403e771d16bd960b3d891f...81f7aebeb1553998800c32644a8d982121277b4e) ### [oauth-server](https://github.com/openshift/oauth-server/tree/6acb955fc87e1d487093217ca949f08eb8dc88c3) * Use newer build-machinery-go [#178](https://github.com/openshift/oauth-server/pull/178) * [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#176](https://github.com/openshift/oauth-server/pull/176) * [Full changelog](https://github.com/openshift/oauth-server/compare/d034c480e538052c996cce5fb55c435972c02326...6acb955fc87e1d487093217ca949f08eb8dc88c3) ### [oc-mirror](https://github.com/openshift/oc-mirror/tree/272d84ddf4ddeace3421a9b50bdf38d70eaae0b6) * [OCPBUGS-56486](https://issues.redhat.com/browse/OCPBUGS-56486): v2/config: allow `delete` and `mirror` words (#1166) [#1166](https://github.com/openshift/oc-mirror/pull/1166) * [OCPBUGS-56890](https://issues.redhat.com/browse/OCPBUGS-56890): Bug fix for no release signature found (#1168) [#1168](https://github.com/openshift/oc-mirror/pull/1168) * [OCPBUGS-57007](https://issues.redhat.com/browse/OCPBUGS-57007): skips signature mirroring for rebuilt operator catalogs (#1171) [#1171](https://github.com/openshift/oc-mirror/pull/1171) * [OCPBUGS-55701](https://issues.redhat.com/browse/OCPBUGS-55701): v2/imgbuilder: use --authfile when set (#1170) [#1170](https://github.com/openshift/oc-mirror/pull/1170) * [OCPBUGS-56185](https://issues.redhat.com/browse/OCPBUGS-56185): [release-4.19] v2: bump containers/common dep to 0.63.0 (#1148) [#1148](https://github.com/openshift/oc-mirror/pull/1148) * disables the signature verification on operator catalog collection (#1157) [#1157](https://github.com/openshift/oc-mirror/pull/1157) * [OCPBUGS-56433](https://issues.redhat.com/browse/OCPBUGS-56433): v2/cli: always remove past archives before m2d (#1152) [#1152](https://github.com/openshift/oc-mirror/pull/1152) * [OCPBUGS-56563](https://issues.redhat.com/browse/OCPBUGS-56563): v2/archive: print unarchive progress (#1158) [#1158](https://github.com/openshift/oc-mirror/pull/1158) * [Full changelog](https://github.com/openshift/oc-mirror/compare/85c1426f7cf9f3a943468ff88bc6e8264cca5dd2...272d84ddf4ddeace3421a9b50bdf38d70eaae0b6) ### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/18061bfe9586919421ed2bb342d9b326b1002bd7) * [OCPBUGS-56494](https://issues.redhat.com/browse/OCPBUGS-56494): Fix image reference in TestImageStreamImportQuayIO [#510](https://github.com/openshift/openshift-apiserver/pull/510) * [Full changelog](https://github.com/openshift/openshift-apiserver/compare/85f6eb2719a0440565c8b7bf00de954eeb12fdd9...18061bfe9586919421ed2bb342d9b326b1002bd7) ### [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics/tree/c604f81c4953f0feacfcf927cb5de883af027060) * [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#122](https://github.com/openshift/openshift-state-metrics/pull/122) * [Full changelog](https://github.com/openshift/openshift-state-metrics/compare/3106bcc3747c3c63e24775f096779b06a2436357...c604f81c4953f0feacfcf927cb5de883af027060) ### [telemeter](https://github.com/openshift/telemeter/tree/d72f157000039dddd96962d08d51c17ef716a7d4) * [ART-13081](https://issues.redhat.com/browse/ART-13081): append .0 to go.mod version [#560](https://github.com/openshift/telemeter/pull/560) * [Full changelog](https://github.com/openshift/telemeter/compare/cffdabd448b53b5903b871450bac8e6cbb8dd88d...d72f157000039dddd96962d08d51c17ef716a7d4) ### [tests](https://github.com/openshift/origin/tree/6a951a27b0258bd112db6c8934c10a0db759fa72) * [OCPBUGS-57020](https://issues.redhat.com/browse/OCPBUGS-57020): Skip tests modifying cluster/network.config when it is not permitted [#29884](https://github.com/openshift/origin/pull/29884) * [OCPBUGS-57189](https://issues.redhat.com/browse/OCPBUGS-57189): `RouteExternalCertificate` : Add fix for `None` platform type [#29899](https://github.com/openshift/origin/pull/29899) * [OCPBUGS-56187](https://issues.redhat.com/browse/OCPBUGS-56187): OCPBUGS-55968: Fix PIS tests on SNO & Enable applicable MCN & PIS tests on SNO [#29789](https://github.com/openshift/origin/pull/29789) * [OCPBUGS-56969](https://issues.redhat.com/browse/OCPBUGS-56969), [OCPBUGS-56970](https://issues.redhat.com/browse/OCPBUGS-56970): Fix `RouteExternalCertificate` tests for few other on-prem jobs [#29880](https://github.com/openshift/origin/pull/29880) * [OCPBUGS-56829](https://issues.redhat.com/browse/OCPBUGS-56829): Only update boot disks during GCP boot image updates tests [#29878](https://github.com/openshift/origin/pull/29878) * [OCPBUGS-56967](https://issues.redhat.com/browse/OCPBUGS-56967): Do not set the MTU when using NetworkAttachementDefinition [#29879](https://github.com/openshift/origin/pull/29879) * [OCPBUGS-56947](https://issues.redhat.com/browse/OCPBUGS-56947): fix deployment rollout wait to wait for desired replicas [#29877](https://github.com/openshift/origin/pull/29877) * [OCPBUGS-56886](https://issues.redhat.com/browse/OCPBUGS-56886): Fix bearer token exposure in exit condition as well [#29841](https://github.com/openshift/origin/pull/29841) * [OCPBUGS-56437](https://issues.redhat.com/browse/OCPBUGS-56437): Update to kubernetes 1.32.5 [#29875](https://github.com/openshift/origin/pull/29875) * [OCPBUGS-56796](https://issues.redhat.com/browse/OCPBUGS-56796): Skip failing test [release-4.19] [#29865](https://github.com/openshift/origin/pull/29865) * [OCPBUGS-56045](https://issues.redhat.com/browse/OCPBUGS-56045): OLMv1: Update test bundles [release-4.19] [#29836](https://github.com/openshift/origin/pull/29836) * [OCPBUGS-56662](https://issues.redhat.com/browse/OCPBUGS-56662): Fix failed etcd test on arbiter ci run [#29826](https://github.com/openshift/origin/pull/29826) * [OCPBUGS-56399](https://issues.redhat.com/browse/OCPBUGS-56399): fix watch request counts [#29799](https://github.com/openshift/origin/pull/29799) * [Full changelog](https://github.com/openshift/origin/compare/65422c86f13fbdccca00adf5cfc570b37a2aebb3...6a951a27b0258bd112db6c8934c10a0db759fa72)