# 5.0.0-okd-scos.ec.10

Created: 2026-09-11 15:15:36 +0000 UTC

Image Digest: `sha256:7287353573ce19c406f5f8a99e085f202ac7cffa4ac5ee84856c727914708695`

Promoted from registry.ci.openshift.org/origin/release-scos:5.0.0-0.okd-scos-nightly-2026-09-11-100511


## Changes from 5.0.0-okd-scos.ec.9

### Components

* Kubectl 1.36.2
* Kubernetes 1.36.3
* Kubernetes Tests 1.36.2
* CentOS Stream CoreOS 10 10.0.20260819-0


### Rebuilt images without code change

* [haproxy-router](https://github.com/openshift/router) git [33812291](https://github.com/openshift/router/commit/3381229146657d2e6bd94115dda0885f25cb3bed) `sha256:b1fa780d71256e94351cffd83184fe650d2c3af20e66a0c93c035ff10412abd2`
* [haproxy-router-haproxy28](https://github.com/openshift/router) git [33812291](https://github.com/openshift/router/commit/3381229146657d2e6bd94115dda0885f25cb3bed) `sha256:0a9a496f687463e90032e33b356b8aa6a346766987d6713210a412d40f5d5f2a`
* [haproxy-router-haproxy32](https://github.com/openshift/router) git [33812291](https://github.com/openshift/router/commit/3381229146657d2e6bd94115dda0885f25cb3bed) `sha256:e98dc4027f2abc3d2b20ea34a5230929bd00f4b5a309078eef339ab964b2b3ed`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [bf618aac](https://github.com/openshift/machine-os-images/commit/bf618aac93c71a56e8249669c579f0a782742e2e) `sha256:3288fd808ad96223fd22627ca0d7252343e565c893ca17148614e4d588a3d7c7`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/8177722b388c34c334961352e9ab471ed4f8e95c)

* [OCPBUGS-87328](https://issues.redhat.com/browse/OCPBUGS-87328): Updating ose-agent-installer-api-server-container image to be consistent with ART for 5.0 [#10434](https://github.com/openshift/assisted-service/pull/10434)
* [Full changelog](https://github.com/openshift/assisted-service/compare/c0a44305209ef822ab67ff834cda7b4843195da6...8177722b388c34c334961352e9ab471ed4f8e95c)


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/fa7eb52b083a161b122e1c543d487edb3de0955c)

* [OCPBUGS-87444](https://issues.redhat.com/browse/OCPBUGS-87444): Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 5.0 [#2173](https://github.com/openshift/assisted-installer/pull/2173)
* [OCPBUGS-87377](https://issues.redhat.com/browse/OCPBUGS-87377): Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 5.0 [#2172](https://github.com/openshift/assisted-installer/pull/2172)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/880389d450131a12a888202877b28dbae61ac0da...fa7eb52b083a161b122e1c543d487edb3de0955c)


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/e46bd4d04173f9ce7c76dc1afe73e8c3ebcb608a)

* [OCPBUGS-115122](https://issues.redhat.com/browse/OCPBUGS-115122): Show IPv6 Technology Preview badge in Subnets dropdown for single-cluster only (#4039) [#4039](https://github.com/openshift-assisted/assisted-installer-ui/pull/4039)
* [OCPBUGS-120719](https://issues.redhat.com/browse/OCPBUGS-120719): Change reuse SSH key label in OVE (#4037) [#4037](https://github.com/openshift-assisted/assisted-installer-ui/pull/4037)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/16dc1c8e98cf8f9c17038c00371a89a1b9b6d5d0...e46bd4d04173f9ce7c76dc1afe73e8c3ebcb608a)


### [aws-node-termination-handler](https://github.com/openshift/aws-node-termination-handler/tree/9b33cce5107d71df5c65dbca6c08f1f71d9e6e8a)

* [OCPBUGS-87280](https://issues.redhat.com/browse/OCPBUGS-87280): Updating aws-node-termination-handler-container image to be consistent with ART for 5.0 [#11](https://github.com/openshift/aws-node-termination-handler/pull/11)
* [Full changelog](https://github.com/openshift/aws-node-termination-handler/compare/e4ff2aaec292db42de9f3eef4908ba1c421a2a6c...9b33cce5107d71df5c65dbca6c08f1f71d9e6e8a)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/64091ea10ac93fd62b83c63b4b7379063aca9058)

* [OCPBUGS-121351](https://issues.redhat.com/browse/OCPBUGS-121351): UPSTREAM: 3754: chore: upgrade Azure cloud provider lib- [#181](https://github.com/openshift/azure-disk-csi-driver/pull/181)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/c5e303bb0c6a55332637d7a583cfceec1a3a900b...64091ea10ac93fd62b83c63b4b7379063aca9058)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/b6f119779c7ce529a94c7b8956a057343675f212)

* [OCPBUGS-120677](https://issues.redhat.com/browse/OCPBUGS-120677): vsphere: retry and throttle vCenter lookups during UPI VM creation [#10849](https://github.com/openshift/installer/pull/10849)
* [OCPBUGS-115147](https://issues.redhat.com/browse/OCPBUGS-115147): Missing ability to not install Network Observability during installation [#10822](https://github.com/openshift/installer/pull/10822)
* [Full changelog](https://github.com/openshift/installer/compare/7af1992cfbd0c204ad70eb3b1106334fb78700a6...b6f119779c7ce529a94c7b8956a057343675f212)


### [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap/tree/451fff460e643abd2e6e9dfd88e29b27d3b1fedb)

* [OCPBUGS-87218](https://issues.redhat.com/browse/OCPBUGS-87218): Updating ose-cluster-bootstrap-container image to be consistent with ART for 5.0 [#132](https://github.com/openshift/cluster-bootstrap/pull/132)
* [Full changelog](https://github.com/openshift/cluster-bootstrap/compare/7b1593a47898b6a97dc457efaca464624e9f2afa...451fff460e643abd2e6e9dfd88e29b27d3b1fedb)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/c00cf58dd81954ca100757f6a2d2af8d84770fd5)

* [OCPBUGS-115467](https://issues.redhat.com/browse/OCPBUGS-115467): Guard against empty workspace field on vsphere [#419](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/419)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/14e9821d573de4c9771d87c0772b81b82565efb8...c00cf58dd81954ca100757f6a2d2af8d84770fd5)


### [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/tree/ec1db56482efc9dced72b44a1c2b6817dbfffe91)

* [OCPBUGS-87479](https://issues.redhat.com/browse/OCPBUGS-87479): Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 5.0 [#178](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/pull/178)
* [Full changelog](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/compare/f5d3bfe64bda67ffb8299af01ebf2722287edf04...ec1db56482efc9dced72b44a1c2b6817dbfffe91)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/1b9a053663d46a789d8c500314cdfae3f879c060)

* [OCPBUGS-115064](https://issues.redhat.com/browse/OCPBUGS-115064): Install NOO using OLMv0 instead of OLMv1 [#3143](https://github.com/openshift/cluster-network-operator/pull/3143)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/769a2ade112bd4b775ef007024559fe83a592ede...1b9a053663d46a789d8c500314cdfae3f879c060)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/accb8e2235f97d682b9d3aea95295bdfaf9b15e0)

* [OCPBUGS-119931](https://issues.redhat.com/browse/OCPBUGS-119931): add optional --ovs-dpdk-cpu-count flag (default 0) [#1630](https://github.com/openshift/cluster-node-tuning-operator/pull/1630)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/b32bdee120cead648af4176ac03d06de8feebd4f...accb8e2235f97d682b9d3aea95295bdfaf9b15e0)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/219aba7debd16c83bb6ccdccf156af921ce54dfe)

* [OCPBUGS-122172](https://issues.redhat.com/browse/OCPBUGS-122172): pkg/readiness/cluster_conditions: Conditionally include Upgradeable [#1468](https://github.com/openshift/cluster-version-operator/pull/1468)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/253a1516d6e39b3cd1499b0f92fb16f297a48807...219aba7debd16c83bb6ccdccf156af921ce54dfe)


### [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata/tree/b929f29695d4a1ab21a70868f681d463a673380f)

* [OCPBUGS-104319](https://issues.redhat.com/browse/OCPBUGS-104319): Bump golang.org/x/net to v0.53.0 and Go to 1.25.10 [#23](https://github.com/openshift/csi-external-snapshot-metadata/pull/23)
* [Full changelog](https://github.com/openshift/csi-external-snapshot-metadata/compare/239703c637e005cf785892d214d219add70e3533...b929f29695d4a1ab21a70868f681d463a673380f)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/306002d4cb7d5621b4b9d1871d1d029682f8f824)

* NO-JIRA: Make graceful-termination-duration flag required for the watch-termination command [#2763](https://github.com/openshift/kubernetes/pull/2763)
* [Full changelog](https://github.com/openshift/kubernetes/compare/7b29fb077260554429dcef8234272e9fd25fcfbd...306002d4cb7d5621b4b9d1871d1d029682f8f824)


### [insights-operator](https://github.com/openshift/insights-operator/tree/2f616dc436db2e35d70c9a049be98c185f684243)

* [OCPBUGS-111992](https://issues.redhat.com/browse/OCPBUGS-111992): add custom proxy field to insights config [#1346](https://github.com/openshift/insights-operator/pull/1346)
* [Full changelog](https://github.com/openshift/insights-operator/compare/cbe9a99613303f507edd9294eb67dad95e329c44...2f616dc436db2e35d70c9a049be98c185f684243)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/00dd0030fdfcdb6937ebefd8fb92363a8f78ef73)

* [OCPBUGS-87572](https://issues.redhat.com/browse/OCPBUGS-87572): Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 5.0 [#106](https://github.com/openshift/kubevirt-csi-driver/pull/106)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/7ff99994ecc3a675fac6f9aa7fa418cdb0dca32b...00dd0030fdfcdb6937ebefd8fb92363a8f78ef73)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/f81aa9cf1d4bb4999a300f0df364f8685fd65d10)

* [OCPBUGS-114722](https://issues.redhat.com/browse/OCPBUGS-114722): crio: drop restore support [#6465](https://github.com/openshift/machine-config-operator/pull/6465)
* [OCPBUGS-121651](https://issues.redhat.com/browse/OCPBUGS-121651): remove nft chains before checking the ignition config [#6511](https://github.com/openshift/machine-config-operator/pull/6511)
* [OCPBUGS-121379](https://issues.redhat.com/browse/OCPBUGS-121379): Retry on conflict in syncMachineConfigNodes [#6510](https://github.com/openshift/machine-config-operator/pull/6510)
* [OCPBUGS-121850](https://issues.redhat.com/browse/OCPBUGS-121850): Fix vsphere network absolute paths [#6513](https://github.com/openshift/machine-config-operator/pull/6513)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/56e40012677752f23a6736afae2ed082934fba37...f81aa9cf1d4bb4999a300f0df364f8685fd65d10)


### [multus-admission-controller](https://github.com/openshift/multus-admission-controller/tree/c0bdec9ce6a1a69985fdba5481c47fb34461eb6c)

* [OCPBUGS-104355](https://issues.redhat.com/browse/OCPBUGS-104355): [release-5.0] Bump golang.org/x/net to 0.58.0 to fix CVE-2026-33814 [#126](https://github.com/openshift/multus-admission-controller/pull/126)
* [Full changelog](https://github.com/openshift/multus-admission-controller/compare/6d9df61378321846c00a32f0c42b6688daacd649...c0bdec9ce6a1a69985fdba5481c47fb34461eb6c)


### [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni/tree/4b0c2166726247e36a0125432609844045e48dc3)

* [OCPBUGS-104367](https://issues.redhat.com/browse/OCPBUGS-104367): [release-5.0] Bump go to 1.25.11 and golang.org/x/net to 0.58.0 to fix CVE-2026-33814 [#421](https://github.com/openshift/whereabouts-cni/pull/421)
* [Full changelog](https://github.com/openshift/whereabouts-cni/compare/d918bda28ad3d0200b6e4f2ef2801556764762e5...4b0c2166726247e36a0125432609844045e48dc3)


### [oauth-server](https://github.com/openshift/oauth-server/tree/ba7cdda479958ce73517b546f81ed8d4998d318d)

* [OCPBUGS-115306](https://issues.redhat.com/browse/OCPBUGS-115306): [release-5.0] bugfix: default to english when Accept-Language header contains more than 1000 underscores [#259](https://github.com/openshift/oauth-server/pull/259)
* [Full changelog](https://github.com/openshift/oauth-server/compare/1600eafd18f46d54ad0a9ff70fa03a085f6f6218...ba7cdda479958ce73517b546f81ed8d4998d318d)


### [tests](https://github.com/openshift/origin/tree/d829b900b99e4d9afc163b14be91a385ed7ea705)

* [CORENET-7243](https://issues.redhat.com/browse/CORENET-7243): Add TLS Profile Compliance tests for networking components [release-5.0] [#31613](https://github.com/openshift/origin/pull/31613)
* [OCPBUGS-120743](https://issues.redhat.com/browse/OCPBUGS-120743): Fix the number of requests in repeated exec [#31610](https://github.com/openshift/origin/pull/31610)
* [OCPBUGS-120715](https://issues.redhat.com/browse/OCPBUGS-120715): Add Degraded=True exception for authentication operator during upgrade [#31608](https://github.com/openshift/origin/pull/31608)
* [Full changelog](https://github.com/openshift/origin/compare/0681937646b39181000a6328ef43e8e5dfd05f62...d829b900b99e4d9afc163b14be91a385ed7ea705)


### [thanos](https://github.com/openshift/thanos/tree/2a09eb84b92ccd71d5f1f11e0dda6d5aa9624e19)

* [OCPBUGS-121890](https://issues.redhat.com/browse/OCPBUGS-121890): bump go.opentelemetry.io/otel to fix  CVE-2026-41178 [#205](https://github.com/openshift/thanos/pull/205)
* [Full changelog](https://github.com/openshift/thanos/compare/75fa632b483716e53aec19f6adf7d4c4652a4453...2a09eb84b92ccd71d5f1f11e0dda6d5aa9624e19)