# 4.20.0-okd-scos.ec.14

Created: 2025-09-02 00:38:38 +0000 UTC

Image Digest: `sha256:b6430869aa840778c75602ab4a5bf7230c090dfabb645a2a768a521bcb658bef`

Promoted from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-09-01-013315


## Changes from 4.20.0-okd-scos.ec.13

### Components

* Kubectl 1.33.3
* Kubernetes upgraded from 1.33.4 to 1.33.3
* Kubernetes Tests 1.33.3
* CentOS Stream CoreOS upgraded from 10.0.20250819-0 to 10.0.20250827-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| NoRegistryClusterOperations <br/> (0 tests)| Disabled| Disabled| Disabled| Enabled| Disabled| Enabled<br/>(Changed) |


### New images

* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [0e61642f](https://github.com/openshift/volume-data-source-validator/commit/0e61642f8d898ee199e42f37319864851dd3627f) `sha256:bbf4dccfa2c521ddc6f4b7cfc7268c23258011e0deb60dc0ef2c4a48bd6f8d6f`


### Rebuilt images without code change

* [stream-coreos](https://github.com/openshift/os) git [63e9aa40](https://github.com/openshift/os/commit/63e9aa4008eb65a02a2d70c9c086cbd8e18e149f) `sha256:27120008a4ee2fcf5dff69d32d201572b1b1e60480c75e3a02bccfa218e5852b`
* [stream-coreos-extensions](https://github.com/openshift/os) git [63e9aa40](https://github.com/openshift/os/commit/63e9aa4008eb65a02a2d70c9c086cbd8e18e149f) `sha256:dccc248e54e691fdc12f2b5312e7311290f49041726abdaf8df36ddeb433db47`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/148ea355451b2173202d3e3988558166f27f0668)

* NO-ISSUE: Update Konflux references (#7964) [#7964](https://github.com/openshift/assisted-service/pull/7964)
* [ACM-21902](https://issues.redhat.com/browse/ACM-21902): Merge system ca-bundle into spoke client (#7935) [#7935](https://github.com/openshift/assisted-service/pull/7935)
* [MGMT-19758](https://issues.redhat.com/browse/MGMT-19758): TNF clusters (#7867) [#7867](https://github.com/openshift/assisted-service/pull/7867)
* [MGMT-21395](https://issues.redhat.com/browse/MGMT-21395): Add monitoring label and Prometheus RBAC for supported OLM operators (#7949) [#7949](https://github.com/openshift/assisted-service/pull/7949)
* NO-ISSUE: Update Konflux references (#7810) [#7810](https://github.com/openshift/assisted-service/pull/7810)
* [Full changelog](https://github.com/openshift/assisted-service/compare/5ad96ae324a17739273e9501d8abc5f4e81a6b81...148ea355451b2173202d3e3988558166f27f0668)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/3accbb7bd0dd865744e0ef0808b65be5914b157e)

* NO-ISSUE: Update Konflux references (#1225) [#1225](https://github.com/openshift/assisted-installer/pull/1225)
* Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.20 (#1144) [#1144](https://github.com/openshift/assisted-installer/pull/1144)
* Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.20 (#1146) [#1146](https://github.com/openshift/assisted-installer/pull/1146)
* [MGMT-21454](https://issues.redhat.com/browse/MGMT-21454): update Go to 1.24 and adapt unit-tests (#1220) [#1220](https://github.com/openshift/assisted-installer/pull/1220)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/f64ebf16ceb6a05df89640437ec6f99a2083aba7...3accbb7bd0dd865744e0ef0808b65be5914b157e)


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/62dc63f18f2c4a6a0cf1043710d055fe57f8fa28)

* Update ghw package to v0.19.0 to resolve LVMs issue (#1093) [#1093](https://github.com/openshift/assisted-installer-agent/pull/1093)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/8857831ffeed8a38c87c7d9c93ce1542216b745a...62dc63f18f2c4a6a0cf1043710d055fe57f8fa28)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/b5330d86e38009af7b8a9fd32d84b8800fd2f27f)

* [OCPBUGS-60920](https://issues.redhat.com/browse/OCPBUGS-60920): Update ISOBuilder OCP 4.19 Dev Preview Release notes [#141](https://github.com/openshift/agent-installer-utils/pull/141)
* [AGENT-1252](https://issues.redhat.com/browse/AGENT-1252): Add Dockerfile for OVE UI ISO [#138](https://github.com/openshift/agent-installer-utils/pull/138)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/0f12c2b8dd2503f05415f0ec4fff5b697b776938...b5330d86e38009af7b8a9fd32d84b8800fd2f27f)


### [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy/tree/11b24a2c7452ef683a1d989f1016e6e815f5c112)

* [OCPBUGS-57685](https://issues.redhat.com/browse/OCPBUGS-57685): Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.20 [#84](https://github.com/openshift/apiserver-network-proxy/pull/84)
* [Full changelog](https://github.com/openshift/apiserver-network-proxy/compare/26a4e67d80752e9ec961c518f57283adb70616e8...11b24a2c7452ef683a1d989f1016e6e815f5c112)


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/9467200c8073d4609cfca356bc6fc8126c505886)

* [OCPBUGS-60943](https://issues.redhat.com/browse/OCPBUGS-60943), [OCPBUGS-61040](https://issues.redhat.com/browse/OCPBUGS-61040), [OCPBUGS-61044](https://issues.redhat.com/browse/OCPBUGS-61044): Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.0 (dcfaef0) into main [#553](https://github.com/openshift/cluster-api-provider-aws/pull/553)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/e117e47d7b5b550e817d2cf314f8457785e229dd...9467200c8073d4609cfca356bc6fc8126c505886)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/a92ebd03f1d495e27a76b03e9db002e08fcb8ac8)

* [STOR-2477](https://issues.redhat.com/browse/STOR-2477): Correct efs single-zone storageclass [#404](https://github.com/openshift/csi-operator/pull/404)
* [Full changelog](https://github.com/openshift/csi-operator/compare/175e3cf9eb9dd39905121ebe462cdd8c962a02c8...a92ebd03f1d495e27a76b03e9db002e08fcb8ac8)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/5f4e6cdd114d77f0a7e6e18cdabba253c3149a65)

* [CORS-4044](https://issues.redhat.com/browse/CORS-4044), [CORS-4045](https://issues.redhat.com/browse/CORS-4045), [CORS-4046](https://issues.redhat.com/browse/CORS-4046), [CORS-4047](https://issues.redhat.com/browse/CORS-4047), [CORS-4048](https://issues.redhat.com/browse/CORS-4048), [CORS-4049](https://issues.redhat.com/browse/CORS-4049), [CORS-4050](https://issues.redhat.com/browse/CORS-4050), [CORS-4051](https://issues.redhat.com/browse/CORS-4051): Add private dns zone section to GCP install config [#9792](https://github.com/openshift/installer/pull/9792)
* [OCPBUGS-60949](https://issues.redhat.com/browse/OCPBUGS-60949): Update the RHCOS 4.20 bootimage metadata [#9916](https://github.com/openshift/installer/pull/9916)
* [OCPBUGS-60687](https://issues.redhat.com/browse/OCPBUGS-60687): PowerVS: Add lon04 support [#9905](https://github.com/openshift/installer/pull/9905)
* [SPLAT-2463](https://issues.redhat.com/browse/SPLAT-2463): Added ability to configure CoresPerSocket [#9912](https://github.com/openshift/installer/pull/9912)
* [Full changelog](https://github.com/openshift/installer/compare/d0aabcc2a97cc8d383d6dd957169ca6713be94af...5f4e6cdd114d77f0a7e6e18cdabba253c3149a65)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/31597edbaedc6d8d206deda350cfc93e89fa24bf)

* [OCPBUGS-60989](https://issues.redhat.com/browse/OCPBUGS-60989): pkg/cli/admin/release/info: Mention elided first-parent, non-merge commits [#2086](https://github.com/openshift/oc/pull/2086)
* [OCPBUGS-60877](https://issues.redhat.com/browse/OCPBUGS-60877): pkg/cli/admin/inspectalerts: Pass through --certificate-authority, etc. [#2083](https://github.com/openshift/oc/pull/2083)
* NO-JIRA: Remove mentioning about IRC channel in README [#2082](https://github.com/openshift/oc/pull/2082)
* [Full changelog](https://github.com/openshift/oc/compare/f114b178fe5f5674ce5f59249745df00ad5a7594...31597edbaedc6d8d206deda350cfc93e89fa24bf)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/a83df44961ba2ca35d8e0cbda4b0cfad8db85988)

* NO-JIRA: docs: update sts migration to cause less service interruption [#903](https://github.com/openshift/cloud-credential-operator/pull/903)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/f019679f5bc21b11c1bdbe2ae4784a5d187f19e4...a83df44961ba2ca35d8e0cbda4b0cfad8db85988)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/11e57aa35590d3481288e09003c9109e0bfc62ce)

* NO-JIRA: Bump library go rm co dep [#782](https://github.com/openshift/cluster-authentication-operator/pull/782)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/b0bfaf3ce7c624a5e848f1334aed8b00c6664d67...11e57aa35590d3481288e09003c9109e0bfc62ce)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/d883d0e6dbb74f0839631ebc7a584669f0e955a3)

* [AUTOSCALE-242](https://issues.redhat.com/browse/AUTOSCALE-242), [AUTOSCALE-244](https://issues.redhat.com/browse/AUTOSCALE-244): 1.33.0 upstream rebase [#365](https://github.com/openshift/kubernetes-autoscaler/pull/365)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/6379216ff1068432ae8501b1dfc2e35cdd9720ff...d883d0e6dbb74f0839631ebc7a584669f0e955a3)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/fdbaa2d6abd118bcd1711619be2413ba9d448041)

* [OCPCLOUD-2871](https://issues.redhat.com/browse/OCPCLOUD-2871): Machine conversion for the delete-machine annotation and unit tests [#347](https://github.com/openshift/cluster-capi-operator/pull/347)
* [OCPCLOUD-2711](https://issues.redhat.com/browse/OCPCLOUD-2711): Implement VAP to prevent usage of unsupported AWSMachineSpec fields [#333](https://github.com/openshift/cluster-capi-operator/pull/333)
* NO-JIRA: lint: Replace tenv with usetesting [#346](https://github.com/openshift/cluster-capi-operator/pull/346)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/e6ed358f79ec122710837cb1c8b5adfa46a9e98f...fdbaa2d6abd118bcd1711619be2413ba9d448041)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/e355ad389d1d09be1a83f024f54b15e844982d0a)

* [OCPBUGS-59251](https://issues.redhat.com/browse/OCPBUGS-59251): Default cloud.conf if no configmap is found [#404](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/404)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/86f8c6dd7fce9d42cfbe5ac1d4b2528ba726f9c4...e355ad389d1d09be1a83f024f54b15e844982d0a)


### [cluster-config-api](https://github.com/openshift/api/tree/4a165b214722ff53fbdac1d250f62d4b0bb2bd3d)

* [AGENT-1262](https://issues.redhat.com/browse/AGENT-1262): set NoRegistryClusterOperations as techPreviewNoUpgrade [#2432](https://github.com/openshift/api/pull/2432)
* [Full changelog](https://github.com/openshift/api/compare/3d5bf11af6e6b3f2916199c3a8947df27124456c...4a165b214722ff53fbdac1d250f62d4b0bb2bd3d)


### [cluster-config-operator](https://github.com/openshift/cluster-config-operator/tree/657754e2beaed6295ff28bb0f7813cb1c9ce35b2)

* [CNTRLPLANE-1311](https://issues.redhat.com/browse/CNTRLPLANE-1311): set up openshift-tests-extension of cluster-config-operator and add a sanity test [#448](https://github.com/openshift/cluster-config-operator/pull/448)
* [Full changelog](https://github.com/openshift/cluster-config-operator/compare/f018aa0ec624fd2a06bf4f4806b5eec03794316b...657754e2beaed6295ff28bb0f7813cb1c9ce35b2)


### [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator/tree/82578923164636746e0d74d594ab32d83a660c0b)

* [OCPBUGS-59781](https://issues.redhat.com/browse/OCPBUGS-59781): Read only root filesystem [#445](https://github.com/openshift/cluster-dns-operator/pull/445)
* [Full changelog](https://github.com/openshift/cluster-dns-operator/compare/1ed968a2fd1a609099a5deae2723fb619bf4c699...82578923164636746e0d74d594ab32d83a660c0b)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/9091149b9060f8c45a925d8e7add781f49ba827f)

* [OCPBUGS-60941](https://issues.redhat.com/browse/OCPBUGS-60941): add individual context to the health check [#1474](https://github.com/openshift/cluster-etcd-operator/pull/1474)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/3fc88b0392f731df592a484d2a3b452712cf7ece...9091149b9060f8c45a925d8e7add781f49ba827f)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/2371120eedb27049160c70859ef9972a7599c7e3)

* [OCPBUGS-53432](https://issues.redhat.com/browse/OCPBUGS-53432): deflake TestIngressControllerCustomEndpoints by proper waiting for CCM to be ready [#1267](https://github.com/openshift/cluster-ingress-operator/pull/1267)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/b609eb2b29dd9f74889b453f382ff79f61853c7e...2371120eedb27049160c70859ef9972a7599c7e3)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/0bec046c8c10682390e2a20ae4f416a2d8589f40)

* Revert "OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry" [#1907](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1907)
* [OCPBUGS-57049](https://issues.redhat.com/browse/OCPBUGS-57049): certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry [#1870](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1870)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/94cb40f4ccc5997ec7ca1cf13a3eeff6f01ffcfb...0bec046c8c10682390e2a20ae4f416a2d8589f40)


### [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator/tree/7030e7353408e83096a285404700c573273c25c8)

* [CNTRLPLANE-1275](https://issues.redhat.com/browse/CNTRLPLANE-1275): Add JUnit reporter configuration and README for OTE [#863](https://github.com/openshift/cluster-kube-controller-manager-operator/pull/863)
* [Full changelog](https://github.com/openshift/cluster-kube-controller-manager-operator/compare/90b2397215a38ffe1c417d522dcf612f64b086c0...7030e7353408e83096a285404700c573273c25c8)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/656c8043ce6176f6c92ebaad4fb265c4f6d2005b)

* [CNTRLPLANE-1306](https://issues.redhat.com/browse/CNTRLPLANE-1306): set up openshift-tests-extension and add a sanity test [#126](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/126)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/436cf8575fc51e15d4aee5191ddff0a34c58b8d4...656c8043ce6176f6c92ebaad4fb265c4f6d2005b)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/a5a091be0db37c5969e0534980f38cc90524dda5)

* NO-JIRA: [bot] Synchronize versions of the downstream components [#2654](https://github.com/openshift/cluster-monitoring-operator/pull/2654)
* NO-JIRA: chore: drop check for AlertmanagerV1 [#2650](https://github.com/openshift/cluster-monitoring-operator/pull/2650)
* [OCPBUGS-56158](https://issues.redhat.com/browse/OCPBUGS-56158): Bump prometheus-operator to v0.85.0 [#2652](https://github.com/openshift/cluster-monitoring-operator/pull/2652)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/3ebd14abcc91148afb6919d53ed223774ff93169...a5a091be0db37c5969e0534980f38cc90524dda5)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/746b8fb86171dfc75011a7b8db29de5c2355d848)

* [OCPBUGS-57815](https://issues.redhat.com/browse/OCPBUGS-57815): Updating cluster-network-operator-container image to be consistent with ART for 4.20 [#2728](https://github.com/openshift/cluster-network-operator/pull/2728)
* [CORENET-6092](https://issues.redhat.com/browse/CORENET-6092), [CORENET-6130](https://issues.redhat.com/browse/CORENET-6130), [CORENET-6261](https://issues.redhat.com/browse/CORENET-6261): Implement PreconfiguredUDNAddresses API changes [#2743](https://github.com/openshift/cluster-network-operator/pull/2743)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/13a152786f81ea5f6bb298179727e072f5500636...746b8fb86171dfc75011a7b8db29de5c2355d848)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/3d783ea383b32296c2b75872e587f24c896e9418)

* [OCPBUGS-41219](https://issues.redhat.com/browse/OCPBUGS-41219): Only enable timer.migration on RT kernel (#1384) [#1384](https://github.com/openshift/cluster-node-tuning-operator/pull/1384)
* [OCPBUGS-60838](https://issues.redhat.com/browse/OCPBUGS-60838): e2e: arm: add validation tests for hugepages with 4k and 64k kernelPageSize (#1363) [#1363](https://github.com/openshift/cluster-node-tuning-operator/pull/1363)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/5596c15d3ba77453121dcb292f028871160a5438...3d783ea383b32296c2b75872e587f24c896e9418)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/cdc7ef8a7ec6af399c10606037cfb9f631dddc23)

* [OCPBUGS-60948](https://issues.redhat.com/browse/OCPBUGS-60948): Rename the SELinuxMount metric to :count [#609](https://github.com/openshift/cluster-storage-operator/pull/609)
* [STOR-1064](https://issues.redhat.com/browse/STOR-1064): add volume-data-source-validator controller [#592](https://github.com/openshift/cluster-storage-operator/pull/592)
* [STOR-2576](https://issues.redhat.com/browse/STOR-2576): Collect overall SELinux warning controller metrics [#608](https://github.com/openshift/cluster-storage-operator/pull/608)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/18791945db05acab9b86aefaf1a3d3aeb23293cc...cdc7ef8a7ec6af399c10606037cfb9f631dddc23)


### [cluster-update-keys](https://github.com/openshift/cluster-update-keys/tree/c40e7b9b60c62690a25333fc54ae0d3705474afb)

* Revert "OCPNODE-3611: manifests.rhel/0000_90_openshift-cluster-image-policy: Drop TechPreviewNoUpgrade limitation" [#83](https://github.com/openshift/cluster-update-keys/pull/83)
* [OCPNODE-3611](https://issues.redhat.com/browse/OCPNODE-3611): manifests.rhel/0000_90_openshift-cluster-image-policy: Drop TechPreviewNoUpgrade limitation [#82](https://github.com/openshift/cluster-update-keys/pull/82)
* [Full changelog](https://github.com/openshift/cluster-update-keys/compare/569dfed552ceeeeea1dd3dd5f97b33e3a5703137...c40e7b9b60c62690a25333fc54ae0d3705474afb)


### [console](https://github.com/openshift/console/tree/17d2383eac889752a233de290293ee93de2a6da4)

* [OCPBUGS-52165](https://issues.redhat.com/browse/OCPBUGS-52165), [OCPBUGS-60753](https://issues.redhat.com/browse/OCPBUGS-60753): Fix issues with Raw/Download in resource logs page [#15436](https://github.com/openshift/console/pull/15436)
* NO-JIRA: Remove Lucifergene from Code Reviewers List [#15449](https://github.com/openshift/console/pull/15449)
* [CONSOLE-4607](https://issues.redhat.com/browse/CONSOLE-4607): Drop createModalLauncher from knative-plugin and use useOverlay hook instead [#15349](https://github.com/openshift/console/pull/15349)
* [ODC-7803](https://issues.redhat.com/browse/ODC-7803): Adjust `MAX_UPLOAD_SIZE` formula [#15428](https://github.com/openshift/console/pull/15428)
* [OCPBUGS-56091](https://issues.redhat.com/browse/OCPBUGS-56091): fix log line overlap when Wrap lines is enabled [#15426](https://github.com/openshift/console/pull/15426)
* [CONSOLE-4661](https://issues.redhat.com/browse/CONSOLE-4661): Fix double scrollbar [#15427](https://github.com/openshift/console/pull/15427)
* [CONSOLE-4235](https://issues.redhat.com/browse/CONSOLE-4235): Update Xterm.js CSS [#15425](https://github.com/openshift/console/pull/15425)
* [CONSOLE-4647](https://issues.redhat.com/browse/CONSOLE-4647): Refactor removeVolume action to use RemoveVolumeModal hook launcher [#15230](https://github.com/openshift/console/pull/15230)
* And 3 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/console/compare/5baee8784edc3f51c9206285fd988adcca8f7d7f...17d2383eac889752a233de290293ee93de2a6da4)


### [etcd, installer-etcd-artifacts](https://github.com/openshift/etcd/tree/9c065d4d842c8de57806426c13201413b4d595e2)

* [OCPBUGS-60874](https://issues.redhat.com/browse/OCPBUGS-60874): Revert "OCPBUGS-52181: Ensure cluster id changes during force-new-cluster" [#339](https://github.com/openshift/etcd/pull/339)
* [Full changelog](https://github.com/openshift/etcd/compare/b5ad268120ccd50185b9ec00ff1c4e5aca379f84...9c065d4d842c8de57806426c13201413b4d595e2)


### [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp/tree/f940e72e7611ce4a96da3e47966ba1befd25c474)

* [OCPBUGS-60772](https://issues.redhat.com/browse/OCPBUGS-60772): Reuse instance groups [#86](https://github.com/openshift/cloud-provider-gcp/pull/86)
* [Full changelog](https://github.com/openshift/cloud-provider-gcp/compare/d6b577a38fb30d1fe95cfd14ebd7bb4b8bc8c467...f940e72e7611ce4a96da3e47966ba1befd25c474)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/a237dcbeee8bbe1440c94349399cc6eac8870910)

* [OCPBUGS-60851](https://issues.redhat.com/browse/OCPBUGS-60851): UPSTREAM: &lt;carry&gt;: Revert "Bump 1.33.4" [#2425](https://github.com/openshift/kubernetes/pull/2425)
* [Full changelog](https://github.com/openshift/kubernetes/compare/42c7d00914adca7b516027fe5a886e9d2bc1e3d6...a237dcbeee8bbe1440c94349399cc6eac8870910)


### [hypershift](https://github.com/openshift/hypershift/tree/57a05b0fb2de6e843cc05e7ffdaef904a433ccf1)

* [OCPBUGS-60152](https://issues.redhat.com/browse/OCPBUGS-60152): test/e2e: enable EnsureAppLabel check for 4.19 [#6697](https://github.com/openshift/hypershift/pull/6697)
* [CNTRLPLANE-202](https://issues.redhat.com/browse/CNTRLPLANE-202): feat(sharedingress): add infrastructure node scheduling preferences [#6709](https://github.com/openshift/hypershift/pull/6709)
* [CNTRLPLANE-1361](https://issues.redhat.com/browse/CNTRLPLANE-1361): fix(infra/azure): make role assignment creation idempotent and robust [#6722](https://github.com/openshift/hypershift/pull/6722)
* NO-JIRA: docs(rules): expand Jira item creation guidelines and epic details [#6705](https://github.com/openshift/hypershift/pull/6705)
* chore(deps): update konflux references [#6669](https://github.com/openshift/hypershift/pull/6669)
* NO-JIRA: fix(contrib): Make setup_aks_mi.sh executable [#6708](https://github.com/openshift/hypershift/pull/6708)
* [OCPBUGS-60891](https://issues.redhat.com/browse/OCPBUGS-60891): set default goaway-chance to 0.001 [#6696](https://github.com/openshift/hypershift/pull/6696)
* [OCPBUGS-60649](https://issues.redhat.com/browse/OCPBUGS-60649): add availibility-prober to all capi-providers [#6695](https://github.com/openshift/hypershift/pull/6695)
* [STOR-1064](https://issues.redhat.com/browse/STOR-1064): fix(cpo): add missing image to env replacement [#6691](https://github.com/openshift/hypershift/pull/6691)
* [OCPBUGS-60907](https://issues.redhat.com/browse/OCPBUGS-60907): Update Azure overrides to include HC deletion time bug fix [#6698](https://github.com/openshift/hypershift/pull/6698)
* And 2 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/hypershift/compare/408c12cae00359fc90020cf66c8bd2f6106697d9...57a05b0fb2de6e843cc05e7ffdaef904a433ccf1)


### [insights-operator](https://github.com/openshift/insights-operator/tree/da45333120b0a116dea77d718dbd010d2f655f53)

* [OCPBUGS-60611](https://issues.redhat.com/browse/OCPBUGS-60611): virt launcher logs gatherer (#1110) [#1110](https://github.com/openshift/insights-operator/pull/1110)
* [Full changelog](https://github.com/openshift/insights-operator/compare/737b59bd13f6b7f8dcd4446b1d0d2cb3e554baa5...da45333120b0a116dea77d718dbd010d2f655f53)


### [ironic](https://github.com/openshift/ironic-image/tree/68d581ecde0738d585aff5fac831cfae3243d521)

* [OCPBUGS-60455](https://issues.redhat.com/browse/OCPBUGS-60455): Change default json-rpc port to avoid conflict with knmstate [#682](https://github.com/openshift/ironic-image/pull/682)
* [METAL-1368](https://issues.redhat.com/browse/METAL-1368): Bring in fixes implementing servicing abort. [#683](https://github.com/openshift/ironic-image/pull/683)
* [Full changelog](https://github.com/openshift/ironic-image/compare/66c00654604bbdf79b1875de54ec3ed76c9c508d...68d581ecde0738d585aff5fac831cfae3243d521)


### [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy/tree/b9134351be37c43408334047d8eb85d0ac01fe4e)

* [OCPBUGS-57550](https://issues.redhat.com/browse/OCPBUGS-57550): Updating kube-rbac-proxy-container image to be consistent with ART for 4.20 [#122](https://github.com/openshift/kube-rbac-proxy/pull/122)
* [Full changelog](https://github.com/openshift/kube-rbac-proxy/compare/bc1ca29e2b6b50f15ece8db3990277276cacff0c...b9134351be37c43408334047d8eb85d0ac01fe4e)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/7a56cf0048a05d576e746c3e992ce586e07c97e8)

* [OCPBUGS-61016](https://issues.redhat.com/browse/OCPBUGS-61016): Fix wait failure on MCO pods [#5270](https://github.com/openshift/machine-config-operator/pull/5270)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/cc2f713fa75afd493d1abc24cfa965a242ab07bc...7a56cf0048a05d576e746c3e992ce586e07c97e8)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/3f9afde1bf5e04ffb1aa370e936bec336d523e79)

* [OBSINTA-776](https://issues.redhat.com/browse/OBSINTA-776): Incident detection tests [#509](https://github.com/openshift/monitoring-plugin/pull/509)
* [OU-781](https://issues.redhat.com/browse/OU-781): fix links in incidents table [#511](https://github.com/openshift/monitoring-plugin/pull/511)
* [OU-769](https://issues.redhat.com/browse/OU-769): implement a custom tooltip for incidents [#513](https://github.com/openshift/monitoring-plugin/pull/513)
* [OU-675](https://issues.redhat.com/browse/OU-675): Update UIPlugins to golang 1.24 [#512](https://github.com/openshift/monitoring-plugin/pull/512)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/9a7a19075a522102f145873ef80165644e005abe...3f9afde1bf5e04ffb1aa370e936bec336d523e79)


### [network-tools](https://github.com/openshift/network-tools/tree/26d09174cbd92386469e777e3bf49bfa95d035d5)

* NO-JIRA: Bug backlog tooling: add arg for listing stale bugs (&gt;4 months) [#158](https://github.com/openshift/network-tools/pull/158)
* NO-JIRA: add tooling to reduce bug backlog toil for viewing bz comment updates [#157](https://github.com/openshift/network-tools/pull/157)
* [Full changelog](https://github.com/openshift/network-tools/compare/e074780e461cf522fb2902bc3ed6b9fba3bdbd5a...26d09174cbd92386469e777e3bf49bfa95d035d5)


### [oauth-apiserver](https://github.com/openshift/oauth-apiserver/tree/022c761441a589cd71bf9428700315061c363f0a)

* [CNTRLPLANE-1305](https://issues.redhat.com/browse/CNTRLPLANE-1305): Update openshift/oauth-apiserver to latest Kubernetes 1.33 version [#139](https://github.com/openshift/oauth-apiserver/pull/139)
* [Full changelog](https://github.com/openshift/oauth-apiserver/compare/76dfece88a2c8f07feb01432bfef2ef4bdc003d7...022c761441a589cd71bf9428700315061c363f0a)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/6649cb8a7c4dd7d1c4e03c9b0bc7594089fba991)

* [CNTRLPLANE-1313](https://issues.redhat.com/browse/CNTRLPLANE-1313): Update openshift/oauth-proxy to latest Kubernetes 1.33 version [#330](https://github.com/openshift/oauth-proxy/pull/330)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/d9c18ed44dc83a18bd26f7a30ee91a1fe556d6a1...6649cb8a7c4dd7d1c4e03c9b0bc7594089fba991)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/d42ff12456f3f227bfd42a769c4d5780dd1c6087)

* fixes parser issue in the dependabot yaml (#1251) [#1251](https://github.com/openshift/oc-mirror/pull/1251)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/c8f5a8b984f48ba95caed8f3ec9954bedfb22ccc...d42ff12456f3f227bfd42a769c4d5780dd1c6087)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/7f4da5d7815092618b1fec86aeafe137d50d0c00)

* [CNTRLPLANE-1304](https://issues.redhat.com/browse/CNTRLPLANE-1304): Update openshift/openshift-apiserver to latest Kubernetes 1.33 version [#539](https://github.com/openshift/openshift-apiserver/pull/539)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/e88667b71e070ada711e1c9739f020219da135db...7f4da5d7815092618b1fec86aeafe137d50d0c00)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/e53cf3090214284bf913bd2d7165a0a9422635a0)

* NO-JIRA: Remove deleted yamls [#1032](https://github.com/openshift/operator-framework-olm/pull/1032)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/a4d6a86344cfc27a48ec72451ea9f0faa1688179...e53cf3090214284bf913bd2d7165a0a9422635a0)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/9741174157381d7b87e2d21559cbe06b8f2b5ebf)

* [OCPBUGS-60844](https://issues.redhat.com/browse/OCPBUGS-60844): DownStream Merge [08-25-2025] [#2734](https://github.com/openshift/ovn-kubernetes/pull/2734)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/cbb5de730ee5762a5f777ddce1792112a47b088c...9741174157381d7b87e2d21559cbe06b8f2b5ebf)


### [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver/tree/0693fe5dcfab224466fba7a19e614de71f727999)

* [MULTIARCH-5572](https://issues.redhat.com/browse/MULTIARCH-5572): Rebase ibm-powervs-block-csi-driver with upstream [#106](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/106)
* [MULTIARCH-5572](https://issues.redhat.com/browse/MULTIARCH-5572): Rebase ibm-powervs-block-csi-driver with upstream [#105](https://github.com/openshift/ibm-powervs-block-csi-driver/pull/105)
* [Full changelog](https://github.com/openshift/ibm-powervs-block-csi-driver/compare/d52eb55484848b2eb8f346eeca797cc085eff37f...0693fe5dcfab224466fba7a19e614de71f727999)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666)

* [OCPBUGS-56158](https://issues.redhat.com/browse/OCPBUGS-56158): Bump openshift/prometheus-operator to v0.85.0 [#338](https://github.com/openshift/prometheus-operator/pull/338)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/cb32af68e19d19ccb58b224f8bf8cd0d826d0a67...e2bd260c9d686192a5ed9b85dfd4a9f7a2a03666)


### [tests](https://github.com/openshift/origin/tree/87d58ca8c53ff3ce23c8b052623a72a5d82070bb)

* [CNTRLPLANE-1257](https://issues.redhat.com/browse/CNTRLPLANE-1257): Enable OTE for apiserver Operators and servers [#30120](https://github.com/openshift/origin/pull/30120)
* [OCPBUGS-57496](https://issues.redhat.com/browse/OCPBUGS-57496): Account for system:hosted-cluster-config service account in HyperShift [#30075](https://github.com/openshift/origin/pull/30075)
* [TRT-2260](https://issues.redhat.com/browse/TRT-2260): Create High CPU intervals for nodes [#30152](https://github.com/openshift/origin/pull/30152)
* trt-2257: annotate zstd as sig-builds [#30190](https://github.com/openshift/origin/pull/30190)
* [CORENET-6232](https://issues.redhat.com/browse/CORENET-6232): add PreconfiguredUDNAddresses FG tests [#30010](https://github.com/openshift/origin/pull/30010)
* [TRT-2268](https://issues.redhat.com/browse/TRT-2268): Add support for OTE test lifecycles [#30166](https://github.com/openshift/origin/pull/30166)
* [OCPBUGS-60842](https://issues.redhat.com/browse/OCPBUGS-60842): fix: add exception for csi snapshot controller on two node [#30153](https://github.com/openshift/origin/pull/30153)
* [OCPBUGS-56691](https://issues.redhat.com/browse/OCPBUGS-56691): Pass volume-percentage to 100 in must-gather executions [#30182](https://github.com/openshift/origin/pull/30182)
* [OPRUN-4089](https://issues.redhat.com/browse/OPRUN-4089): Remove OLMv1 Tests remaning since all is migrated to OTE/operator-controller repo [#30173](https://github.com/openshift/origin/pull/30173)
* trt-2257: separate builds tests [#30171](https://github.com/openshift/origin/pull/30171)
* NO-JIRA: test/extended: update auth-related test OWNERS [#30149](https://github.com/openshift/origin/pull/30149)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): oidc/keycloak: make keycloak client use environment proxy for HTTP requests [#30148](https://github.com/openshift/origin/pull/30148)
* NO-JIRA: Stop setting feature gate conditional [#30146](https://github.com/openshift/origin/pull/30146)
* [CNTRLPLANE-945](https://issues.redhat.com/browse/CNTRLPLANE-945): monitor: auditloganalyzer: skip watch channels processing when cluster stability is explicitly marked as `Disruptive` [#30174](https://github.com/openshift/origin/pull/30174)
* [OPRUN-4056](https://issues.redhat.com/browse/OPRUN-4056): [OLMv1] Remove Preflight checks since those were migrated to OTE [#30074](https://github.com/openshift/origin/pull/30074)
* [Full changelog](https://github.com/openshift/origin/compare/cc8ae10f65d6223e4884b6b26f9f17ecd057ec9a...87d58ca8c53ff3ce23c8b052623a72a5d82070bb)