# 4.20.0-okd-scos.14

Created: 2025-12-22 05:30:34 +0000 UTC

Image Digest: `sha256:e6b172af4f56176d1fcb89104dbb506cf09c7c02161dc2d7edd05aa45854fae2`

Promoted from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-12-19-194053


## Changes from 4.20.0-okd-scos.13

### Components

* Kubectl 1.33.3
* Kubernetes 1.33.6
* Kubernetes Tests 1.33.4
* CentOS Stream CoreOS 10.0.20251023-0


### Rebuilt images without code change

* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:ea4d5d880904d4c4de3731ef7e9fb46397e08dad0f7a394c5096b938e8673812`


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/523e7d76637bd70cec447e7ce4655bf2bfee9272)

* [OCPBUGS-69834](https://issues.redhat.com/browse/OCPBUGS-69834): Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 20eb21c [#208](https://github.com/openshift/agent-installer-utils/pull/208)
* [OCPBUGS-69830](https://issues.redhat.com/browse/OCPBUGS-69830): Update Konflux references [#207](https://github.com/openshift/agent-installer-utils/pull/207)
* [OCPBUGS-67306](https://issues.redhat.com/browse/OCPBUGS-67306): Update Konflux release version to 4.20.8 [#212](https://github.com/openshift/agent-installer-utils/pull/212)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/6ce70bd6d29f2f0b72884d3cc896c6bbae258b95...523e7d76637bd70cec447e7ce4655bf2bfee9272)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/fbf392a69df3f2c806d7faa67e569b07af529b58)

* [OCPBUGS-65767](https://issues.redhat.com/browse/OCPBUGS-65767): Add StandardFXmdsv2Family to azure tested instance type list [#10104](https://github.com/openshift/installer/pull/10104)
* [Full changelog](https://github.com/openshift/installer/compare/cc82f30cd640577297f66b5df80f0e08c55fd3fa...fbf392a69df3f2c806d7faa67e569b07af529b58)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/8000d7e910a6c08481beca722074d12419e25edf)

* [OCPBUGS-69667](https://issues.redhat.com/browse/OCPBUGS-69667): Change architecture default to match controller [#440](https://github.com/openshift/baremetal-operator/pull/440)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/a7d0035a144d5b51c1401426bbe7ce518f24f154...8000d7e910a6c08481beca722074d12419e25edf)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/24ef5ae121b8f658b649bb555be827f114ead438)

* NO-JIRA: Add new NID team members to OWNERS [#1317](https://github.com/openshift/cluster-ingress-operator/pull/1317)
* [OCPBUGS-66135](https://issues.redhat.com/browse/OCPBUGS-66135): Implement HTTPKeepAliveTimeout tuning option [#1312](https://github.com/openshift/cluster-ingress-operator/pull/1312)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/fb7482e49c790206e370494221b7b02dc50bfd84...24ef5ae121b8f658b649bb555be827f114ead438)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/47ab4cb2b5bb27718150b82bb3e0a03755200ca3)

* [OCPBUGS-67166](https://issues.redhat.com/browse/OCPBUGS-67166): Add the collection of MTV migration metrics [#2772](https://github.com/openshift/cluster-monitoring-operator/pull/2772)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/870b44fc269ae4e790a3487d1795880d93ff72a9...47ab4cb2b5bb27718150b82bb3e0a03755200ca3)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/ae91d95f908377c7852d44249364d59b6f3bd14d)

* [OCPBUGS-64832](https://issues.redhat.com/browse/OCPBUGS-64832): e2e:hugepages: changing tests to use hugepages-allocator tool [#1427](https://github.com/openshift/cluster-node-tuning-operator/pull/1427)
* [OCPBUGS-64588](https://issues.redhat.com/browse/OCPBUGS-64588): e2e:llc: skip test when no BM worker is found [#1422](https://github.com/openshift/cluster-node-tuning-operator/pull/1422)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/2ed182ba57106a7c8cc727aa003e46be079b7dd9...ae91d95f908377c7852d44249364d59b6f3bd14d)


### [console](https://github.com/openshift/console/tree/7504ae434036becf15f1e69a363500c266570008)

* [OCPBUGS-67136](https://issues.redhat.com/browse/OCPBUGS-67136): Spread operand details across 2 col [#15858](https://github.com/openshift/console/pull/15858)
* [OCPBUGS-66427](https://issues.redhat.com/browse/OCPBUGS-66427): Update client initialization in checkPackageManifestHandler [#15822](https://github.com/openshift/console/pull/15822)
* [Full changelog](https://github.com/openshift/console/compare/5f07ad2930130fd041b2114e0eb3f78ad75ad2be...7504ae434036becf15f1e69a363500c266570008)


### [hypershift](https://github.com/openshift/hypershift/tree/0877ad678ffc7687c02ce8e890d35f2e2206f9eb)

* [OCPBUGS-66409](https://issues.redhat.com/browse/OCPBUGS-66409): test: Fix control plane components rollout failure when NetworkType is not OVNKubernetes [#7337](https://github.com/openshift/hypershift/pull/7337)
* [CNTRLPLANE-2205](https://issues.redhat.com/browse/CNTRLPLANE-2205): fix(hcco): allow for ARN reuse across components [#7383](https://github.com/openshift/hypershift/pull/7383)
* [OCPBUGS-69378](https://issues.redhat.com/browse/OCPBUGS-69378): test: remove network-dependent unit tests for image metadata [#7391](https://github.com/openshift/hypershift/pull/7391)
* [Full changelog](https://github.com/openshift/hypershift/compare/2a951d0352327e2f4f030595bc3011f3c0c5a809...0877ad678ffc7687c02ce8e890d35f2e2206f9eb)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/5c5e056e2484d1e3265eef638f2a326958b166f5)

* [OCPBUGS-69666](https://issues.redhat.com/browse/OCPBUGS-69666): Remove log exposing kubeconfig [#5505](https://github.com/openshift/machine-config-operator/pull/5505)
* [OCPBUGS-69444](https://issues.redhat.com/browse/OCPBUGS-69444): MCP is not correctly degraded when a pivotError happens [#5503](https://github.com/openshift/machine-config-operator/pull/5503)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/3eb8e48748919195aaa65b415c21b05f6287fc8f...5c5e056e2484d1e3265eef638f2a326958b166f5)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/b0bf464e64bc17bcd2f9d06e8d47d45915115624)

* [OU-1146](https://issues.redhat.com/browse/OU-1146): remove random multiplication [#704](https://github.com/openshift/monitoring-plugin/pull/704)
* [OU-1135](https://issues.redhat.com/browse/OU-1135): [release-4.20] monitoring testing backport [#700](https://github.com/openshift/monitoring-plugin/pull/700)
* [OCPBUGS-69725](https://issues.redhat.com/browse/OCPBUGS-69725): [release-4.20] fix: upgrade node-forge vulnerable dependency [#701](https://github.com/openshift/monitoring-plugin/pull/701)
* [OU-1130](https://issues.redhat.com/browse/OU-1130): Merge main to release 4.20 [#683](https://github.com/openshift/monitoring-plugin/pull/683)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/68bc2198076b3200a71469eb0b9544e1d363d03a...b0bf464e64bc17bcd2f9d06e8d47d45915115624)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/7df8cc9ca8362fecc840653bba092d02f15a19ed)

* [CNV-72230](https://issues.redhat.com/browse/CNV-72230): fix networking links [#308](https://github.com/openshift/networking-console-plugin/pull/308)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/619d169136e369b1d8d1f48f598ab713bac6b4bb...7df8cc9ca8362fecc840653bba092d02f15a19ed)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/0d95a7ef5d73153f5593e67bc41c0c7a53567ee6)

* [OCPBUGS-62014](https://issues.redhat.com/browse/OCPBUGS-62014): rorfs for cacheless lacks write access to /tmp/ to generate cache [#1170](https://github.com/openshift/operator-framework-olm/pull/1170)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/dd6d22bd02554c039e7bbec4bf39c6e97ebf0b9b...0d95a7ef5d73153f5593e67bc41c0c7a53567ee6)