# 4.20.0-okd-scos.11

Created: 2025-12-01 05:30:36 +0000 UTC

Image Digest: `sha256:e01396cf9753a998af2a2cbb4897daab7cdd656f1fdfa779019933a180933910`

Promoted from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-11-30-140930


## Changes from 4.20.0-okd-scos.9

### Components

* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.5 to 1.33.6
* Kubernetes Tests 1.33.4
* CentOS Stream CoreOS 10.0.20251023-0


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/21a28dedb4012a4b8235b7f29d7c5db5f3386a96)

* [OCPBUGS-65715](https://issues.redhat.com/browse/OCPBUGS-65715): Update 4.20 version to 4.20.4 [#196](https://github.com/openshift/agent-installer-utils/pull/196)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/f567fb90bcd80834d18cee39ff1d135f6d6dbc50...21a28dedb4012a4b8235b7f29d7c5db5f3386a96)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/878ef6cbe06fabf3cb82ad0ca1c1226e03dfef91)

* [OCPBUGS-65895](https://issues.redhat.com/browse/OCPBUGS-65895): allow all-egress for efs operator [#473](https://github.com/openshift/csi-operator/pull/473)
* [OCPBUGS-65686](https://issues.redhat.com/browse/OCPBUGS-65686): Bump gophercloud [#470](https://github.com/openshift/csi-operator/pull/470)
* [Full changelog](https://github.com/openshift/csi-operator/compare/dc35256d52e1ff30cd49f3c6649b5eca370ce03c...878ef6cbe06fabf3cb82ad0ca1c1226e03dfef91)


### [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure/tree/68db91507ea47f767ee0dc838c08cc371d2ff69f)

* [OCPBUGS-65708](https://issues.redhat.com/browse/OCPBUGS-65708): Set updateDomainCount to one when faultDomainCount is one [#173](https://github.com/openshift/machine-api-provider-azure/pull/173)
* [Full changelog](https://github.com/openshift/machine-api-provider-azure/compare/b1cb6432a0ae47248e126d32fb6012eb1408e833...68db91507ea47f767ee0dc838c08cc371d2ff69f)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/5b017f5fa073c7979416a3ce02715e34d2213da6)

* Revert "OCPBUGS-65586: Update the RHCOS 4.20 bootimage metadata to 9.6.202511…" [#10093](https://github.com/openshift/installer/pull/10093)
* [Full changelog](https://github.com/openshift/installer/compare/85eb45b031daa960f76f4bb1ee56ceb85857cd1d...5b017f5fa073c7979416a3ce02715e34d2213da6)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/0963a015e8051f256030f1af5895d5640530fa23)

* [OCPBUGS-65481](https://issues.redhat.com/browse/OCPBUGS-65481): pkg/cli/admin/upgrade: Tighten force warnings [#2140](https://github.com/openshift/oc/pull/2140)
* [Full changelog](https://github.com/openshift/oc/compare/0808e14637d72c01a3cb50e41617576836e84524...0963a015e8051f256030f1af5895d5640530fa23)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0e03b7a0fa39e7da3a4b5a180915adc44c408d08)

* [OCPBUGS-65798](https://issues.redhat.com/browse/OCPBUGS-65798): ccoctl azure: retry custom role creation on consistency errors [#948](https://github.com/openshift/cloud-credential-operator/pull/948)
* [OCPBUGS-63690](https://issues.redhat.com/browse/OCPBUGS-63690): ccoctl: use pagination when listing resources in aws [#941](https://github.com/openshift/cloud-credential-operator/pull/941)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/17948f42adc4fce592908d48730f45d665bcbbba...0e03b7a0fa39e7da3a4b5a180915adc44c408d08)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/c706661bce28d9f2beb0c1c0037f1481160db396)

* [OCPBUGS-63677](https://issues.redhat.com/browse/OCPBUGS-63677): Backport 1504 1514 release.420 [#1516](https://github.com/openshift/cluster-etcd-operator/pull/1516)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/0d7067cb286ad4efad5cad9bcff17656ef9827a3...c706661bce28d9f2beb0c1c0037f1481160db396)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/974542ae2ef86a631546b3a48fd0da3c2e3b74dd)

* [OCPBUGS-65679](https://issues.redhat.com/browse/OCPBUGS-65679): enable resource v1beta2 api if DynamicResourceAllocation is enabled [#1929](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1929)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/a3414ab9e446c5511cc8bc1011a859ecfcf5c610...974542ae2ef86a631546b3a48fd0da3c2e3b74dd)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/45843d223ceaea458879da3ee58d89ce1863230b)

* [OCPBUGS-46422](https://issues.redhat.com/browse/OCPBUGS-46422): Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes [4.20] [#2827](https://github.com/openshift/cluster-network-operator/pull/2827)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/1666a71c205071b6d44bfa57c0ebd3f0054fa1cd...45843d223ceaea458879da3ee58d89ce1863230b)


### [console](https://github.com/openshift/console/tree/71efa9bd187b942a0e4a83a77c84a70916652f8d)

* [OCPBUGS-61785](https://issues.redhat.com/browse/OCPBUGS-61785): Add validation and type guards on healthHandler calls to prevent errors [#15500](https://github.com/openshift/console/pull/15500)
* [OCPBUGS-65793](https://issues.redhat.com/browse/OCPBUGS-65793): OpenShift Console can only show user name instead of full name as the display name [#15743](https://github.com/openshift/console/pull/15743)
* [OCPBUGS-65949](https://issues.redhat.com/browse/OCPBUGS-65949): Add SDK-webpack 4.20 changelogs [#15768](https://github.com/openshift/console/pull/15768)
* NO-JIRA: Add SDK 4.20 changelogs [#15765](https://github.com/openshift/console/pull/15765)
* [OCPBUGS-65761](https://issues.redhat.com/browse/OCPBUGS-65761): Preserve query string in perspective switch + remove dev console folks from `reviewers` [#15740](https://github.com/openshift/console/pull/15740)
* [OCPBUGS-64861](https://issues.redhat.com/browse/OCPBUGS-64861), [OCPBUGS-64863](https://issues.redhat.com/browse/OCPBUGS-64863): Upgrade Helm to 3.18.5 [#15705](https://github.com/openshift/console/pull/15705)
* [OCPBUGS-64702](https://issues.redhat.com/browse/OCPBUGS-64702): Lack Chinese/Japanese/Korean translations for 'On/Off' switch button on editor setting modal of yaml page. [#15683](https://github.com/openshift/console/pull/15683)
* [OCPBUGS-63125](https://issues.redhat.com/browse/OCPBUGS-63125): use tenancy path for project scoped status card [#15608](https://github.com/openshift/console/pull/15608)
* [Full changelog](https://github.com/openshift/console/compare/c1795633ef8978f9fa8f8f677bdac6dff16727b5...71efa9bd187b942a0e4a83a77c84a70916652f8d)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/2a7ef4adf7d3074804e6666221bc7c73c2c89ca1)

* [OCPBUGS-65551](https://issues.redhat.com/browse/OCPBUGS-65551): Bump 1.33.6 [#2518](https://github.com/openshift/kubernetes/pull/2518)
* [OCPBUGS-46422](https://issues.redhat.com/browse/OCPBUGS-46422): Remove patch/update from ServiceCIDR API conformance test [#2466](https://github.com/openshift/kubernetes/pull/2466)
* [Full changelog](https://github.com/openshift/kubernetes/compare/cf396bff09dcb68a96f718b5e0e80b50e874afb5...2a7ef4adf7d3074804e6666221bc7c73c2c89ca1)


### [hypershift](https://github.com/openshift/hypershift/tree/a5aab25bedac7d53d90415cf08490acb6d0d7052)

* [CNTRLPLANE-1710](https://issues.redhat.com/browse/CNTRLPLANE-1710): feat(globalps): security enhancements on GlobalPullSecret feature [#7234](https://github.com/openshift/hypershift/pull/7234)
* [OCPBUGS-65576](https://issues.redhat.com/browse/OCPBUGS-65576): add hypershift-no-cgo to the latest operator conta… [#7229](https://github.com/openshift/hypershift/pull/7229)
* [Full changelog](https://github.com/openshift/hypershift/compare/89f52bf07c21e522c1f9e8f59d00599bf53c52a5...a5aab25bedac7d53d90415cf08490acb6d0d7052)


### [insights-operator](https://github.com/openshift/insights-operator/tree/d677651537715900907eec88e6f0537c8c94c6e9)

* [OCPBUGS-66062](https://issues.redhat.com/browse/OCPBUGS-66062): Add filtering to add other possible pod status to QEMU gatherer [#1185](https://github.com/openshift/insights-operator/pull/1185)
* [OCPBUGS-64800](https://issues.redhat.com/browse/OCPBUGS-64800): QEMU logs are not gathered if there are pending status virt-launcher pods [#1174](https://github.com/openshift/insights-operator/pull/1174)
* [OCPBUGS-65660](https://issues.redhat.com/browse/OCPBUGS-65660): [bugfix] The archive's records may include files whose names are out of bounds [#1177](https://github.com/openshift/insights-operator/pull/1177)
* [Full changelog](https://github.com/openshift/insights-operator/compare/10a1c1746d728197c42163217764eda00a3cbb4f...d677651537715900907eec88e6f0537c8c94c6e9)


### [ironic](https://github.com/openshift/ironic-image/tree/fb4eeefe7f6419446a8d5ae717b9e3baf129b07b)

* [OCPBUGS-64850](https://issues.redhat.com/browse/OCPBUGS-64850): Handle HTTP 400 and 409 race condition in Redfish power operations [#720](https://github.com/openshift/ironic-image/pull/720)
* [Full changelog](https://github.com/openshift/ironic-image/compare/422f3189a49680ca0574f9e88b1da27a2e227fea...fb4eeefe7f6419446a8d5ae717b9e3baf129b07b)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/f29e5b702153ecd51ee75cf7b55426075888d7e4)

* [OCPBUGS-66084](https://issues.redhat.com/browse/OCPBUGS-66084), [OKD-295](https://issues.redhat.com/browse/OKD-295): Fix broken OKD ironic-agent-image [#216](https://github.com/openshift/ironic-agent-image/pull/216)
* [OCPBUGS-65519](https://issues.redhat.com/browse/OCPBUGS-65519): Include Test advertised ip reachability before assigning it [#212](https://github.com/openshift/ironic-agent-image/pull/212)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/ce01f3c1ed6022f9eecc164b2ae34aec25b3dee4...f29e5b702153ecd51ee75cf7b55426075888d7e4)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/0a8e1230d454fb7d72f54bf9065db3a4769b9a86)

* [OCPBUGS-65777](https://issues.redhat.com/browse/OCPBUGS-65777): Enforce OCP 4.20 and earlier cluster to have AutoSizingReserved disabled by default [#5387](https://github.com/openshift/machine-config-operator/pull/5387)
* [OCPBUGS-65781](https://issues.redhat.com/browse/OCPBUGS-65781): Remove --mount directives [#5425](https://github.com/openshift/machine-config-operator/pull/5425)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/1f11aef23bd1a7d89fba38480451e2404e00f3a3...0a8e1230d454fb7d72f54bf9065db3a4769b9a86)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/3cfb5cf0ff61aca2337e874819b2de1911a7a447)

* [OCPBUGS-65947](https://issues.redhat.com/browse/OCPBUGS-65947): add missing conversion units [#654](https://github.com/openshift/monitoring-plugin/pull/654)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/c6a042a64369147cf997e5e794b89e577a3c3532...3cfb5cf0ff61aca2337e874819b2de1911a7a447)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/565fb2242d62dae518820cda104685a843c78f95)

* [CNV-72771](https://issues.redhat.com/browse/CNV-72771): fix null error [#300](https://github.com/openshift/networking-console-plugin/pull/300)
* [CNV-71965](https://issues.redhat.com/browse/CNV-71965): replacing the broken link to VirtualMachine network docs [#298](https://github.com/openshift/networking-console-plugin/pull/298)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/9de315953ad1b357c35003937a1a2f27aa9068e0...565fb2242d62dae518820cda104685a843c78f95)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/f4775a263f2ddbc9f94c9349231883614dce0193)

* [OCPBUGS-64647](https://issues.redhat.com/browse/OCPBUGS-64647): fix: return only requested version [#1306](https://github.com/openshift/oc-mirror/pull/1306)
* [OCPBUGS-65787](https://issues.redhat.com/browse/OCPBUGS-65787): Remove empty status field from generated IDMS/ITMS files [#1313](https://github.com/openshift/oc-mirror/pull/1313)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/b598121bb70555120dde8d60fa9fbcde4f7b3d65...f4775a263f2ddbc9f94c9349231883614dce0193)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/1cb668dcd8ad6fd4a240709b45fe967ec595efaa)

* [OCPBUGS-61982](https://issues.redhat.com/browse/OCPBUGS-61982): pkg/image: conditionally parse raw image manifest [#559](https://github.com/openshift/openshift-apiserver/pull/559)
* [OCPBUGS-65814](https://issues.redhat.com/browse/OCPBUGS-65814): update pkg/image/OWNERS [#575](https://github.com/openshift/openshift-apiserver/pull/575)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/a1535bf4ed12bd3210135bbe459f9324875f24ce...1cb668dcd8ad6fd4a240709b45fe967ec595efaa)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/6c78b6defbd606f8fdf002d7cc37e3d49c7bcd98)

* [OCPBUGS-64836](https://issues.redhat.com/browse/OCPBUGS-64836): back-port IP & MAC conflict detection [#2827](https://github.com/openshift/ovn-kubernetes/pull/2827)
* [OCPBUGS-65514](https://issues.redhat.com/browse/OCPBUGS-65514): [4.20] status manager: remove managedFields for deleted zone upon zone deletion [#2855](https://github.com/openshift/ovn-kubernetes/pull/2855)
* [OCPBUGS-65951](https://issues.redhat.com/browse/OCPBUGS-65951): [release-4.20]: Fix linter issues, add missing cheryy-pick bits of #2844 [#2866](https://github.com/openshift/ovn-kubernetes/pull/2866)
* [OCPBUGS-65618](https://issues.redhat.com/browse/OCPBUGS-65618): [release-4.20] OCP4: 4.18.22 EgressIP Failover does not succeed - extended downtime and no reassignment between egress-capable peers [#2865](https://github.com/openshift/ovn-kubernetes/pull/2865)
* [OCPBUGS-65605](https://issues.redhat.com/browse/OCPBUGS-65605): add lint target to run golanci natively [#2856](https://github.com/openshift/ovn-kubernetes/pull/2856)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/798404b42c0fd11b62973803dbc53810fd4f7fee...6c78b6defbd606f8fdf002d7cc37e3d49c7bcd98)


### [tests](https://github.com/openshift/origin/tree/dc5b8e7def4c2f8d6be029192b039ede0291f9f5)

* [OCPBUGS-64777](https://issues.redhat.com/browse/OCPBUGS-64777): [release-4.20] Add e2e tests for storage network policy [#30468](https://github.com/openshift/origin/pull/30468)
* [OCPBUGS-46422](https://issues.redhat.com/browse/OCPBUGS-46422): Add test that the ServiceCIDR API is blocked [4.20] [#30434](https://github.com/openshift/origin/pull/30434)
* [Full changelog](https://github.com/openshift/origin/compare/1d3ad0d8f1696239bd98909e6f2864400607695b...dc5b8e7def4c2f8d6be029192b039ede0291f9f5)