# 4.20.0-okd-scos.5

Created: 2025-10-13 05:30:35 +0000 UTC

Image Digest: `sha256:f9d52dc8ba441f84ac3b3f9110454a6e8888b2b084cf7243b397cdb293b1d42c`

Promoted from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-10-09-035058


## Changes from 4.20.0-okd-scos.3

### Components

* Kubectl 1.33.3
* Kubernetes 1.33.4
* Kubernetes Tests 1.33.3
* CentOS Stream CoreOS upgraded from 10.0.20251001-0 to 10.0.20251003-0


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/4e18bd010ec2f07bcea9e39ad0850e596e2b5a0d)

* [OCPBUGS-62749](https://issues.redhat.com/browse/OCPBUGS-62749): Red Hat Konflux kflux-prd-rh02 update ove-ui-iso-4-20 [#172](https://github.com/openshift/agent-installer-utils/pull/172)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/b5330d86e38009af7b8a9fd32d84b8800fd2f27f...4e18bd010ec2f07bcea9e39ad0850e596e2b5a0d)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/5d3e60edaf9e7c1cb15577c82b99ead17476db9e)

* [OCPBUGS-62750](https://issues.redhat.com/browse/OCPBUGS-62750): Add mcd_local_unsupported_packages metric from MCO to telemetry 4.20 [#2692](https://github.com/openshift/cluster-monitoring-operator/pull/2692)
* [OCPBUGS-62308](https://issues.redhat.com/browse/OCPBUGS-62308): test: remove image registry e2e tests [#2686](https://github.com/openshift/cluster-monitoring-operator/pull/2686)
* [OCPBUGS-61680](https://issues.redhat.com/browse/OCPBUGS-61680): add flag `--watch-referenced-objects-in-all-namespaces` to prometheus-operator [#2667](https://github.com/openshift/cluster-monitoring-operator/pull/2667)
* [OCPBUGS-61207](https://issues.redhat.com/browse/OCPBUGS-61207): chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind [#2661](https://github.com/openshift/cluster-monitoring-operator/pull/2661)
* [OCPBUGS-61166](https://issues.redhat.com/browse/OCPBUGS-61166): Revert "MON-4343: Cleanup deprecate pa config" [#2659](https://github.com/openshift/cluster-monitoring-operator/pull/2659)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/4496a0a83b65e566038715a1f2405ba194c10439...5d3e60edaf9e7c1cb15577c82b99ead17476db9e)


### [ironic](https://github.com/openshift/ironic-image/tree/9c57a81902530b0268eddd7ad623a972b5ba4042)

* [OCPBUGS-52427](https://issues.redhat.com/browse/OCPBUGS-52427): Bump ironic and sushy to fix idrac10 [#698](https://github.com/openshift/ironic-image/pull/698)
* [OKD-290](https://issues.redhat.com/browse/OKD-290): (OKD4.20) Fix ironic-image errors and metal3 pod crashes on CentOS9 [#696](https://github.com/openshift/ironic-image/pull/696)
* [OCPBUGS-61461](https://issues.redhat.com/browse/OCPBUGS-61461): revert the switch to local RPC [#690](https://github.com/openshift/ironic-image/pull/690)
* [OCPBUGS-61257](https://issues.redhat.com/browse/OCPBUGS-61257): set [json_rpc]port unconditionally [#686](https://github.com/openshift/ironic-image/pull/686)
* [Full changelog](https://github.com/openshift/ironic-image/compare/e9d325e27753eb41c9646dcdffc30833426e2502...9c57a81902530b0268eddd7ad623a972b5ba4042)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/9f4ddbde3733d8fd48e2f10259bb0e998b491113)

* [OCPBUGS-62803](https://issues.redhat.com/browse/OCPBUGS-62803): Skip rpm-ostree local rebase if no PIS [#5340](https://github.com/openshift/machine-config-operator/pull/5340)
* [OCPBUGS-62095](https://issues.redhat.com/browse/OCPBUGS-62095): CRI-O: set hard/soft file descriptor ulimits to `1048576` [#5308](https://github.com/openshift/machine-config-operator/pull/5308)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/58f14fc5d33718cc2c6c38e51e05147a8303aba1...9f4ddbde3733d8fd48e2f10259bb0e998b491113)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/01ff0202a20511964933851a9cdf0fe954240c80)

* [OCPBUGS-62811](https://issues.redhat.com/browse/OCPBUGS-62811): for incompatible test add func to wait builder and deployer SA creation by OCP controller [#503](https://github.com/openshift/operator-framework-operator-controller/pull/503)
* [OCPBUGS-62722](https://issues.redhat.com/browse/OCPBUGS-62722): (cherry-pick) Fix truncate large error messages and unhandle changes for crd upgrade safety in status conditions [#496](https://github.com/openshift/operator-framework-operator-controller/pull/496)
* [OCPBUGS-61705](https://issues.redhat.com/browse/OCPBUGS-61705): Revert "Handle service-ca cert availability/rotation" [#474](https://github.com/openshift/operator-framework-operator-controller/pull/474)
* [OCPBUGS-61563](https://issues.redhat.com/browse/OCPBUGS-61563): [OTE] Update webhook ote tests to use latest webhook-operator [#469](https://github.com/openshift/operator-framework-operator-controller/pull/469)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/1544a1b71476f28889220d37ecafb74f5653e8bd...01ff0202a20511964933851a9cdf0fe954240c80)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/92bb5ee88ec3fa492d2dde06357baae9a6ccc822)

* [OCPBUGS-61453](https://issues.redhat.com/browse/OCPBUGS-61453): [4.20] allow default network -> localnet on the same node for any localnet subnet [#2751](https://github.com/openshift/ovn-kubernetes/pull/2751)
* [OCPBUGS-62336](https://issues.redhat.com/browse/OCPBUGS-62336): Fix EgressIP controller deadlock by sorting node locks lexicographically [#2770](https://github.com/openshift/ovn-kubernetes/pull/2770)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/74b1c90eb97bea68bf708d47f28fce7de9adc7b9...92bb5ee88ec3fa492d2dde06357baae9a6ccc822)