Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.19.0-okd-scos.ec.4

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.19.0-okd-scos.ec.3 - Success
• 4.18.0-okd-scos.ec.3 (changes) - Failed Success

Upgrades to:

• 4.19.0-okd-scos.ec.5 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.19.0-okd-scos.ec.3

Created: 2025-03-15 03:57:07 +0000 UTC

Image Digest: sha256:8d6817efe4683936dfcdfbff770ca3653192816f329bdcf245e6b8a84f34b488

Release 4.19.0-okd-scos.ec.4 was created from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-03-13-150733

Components

• Kubectl 1.32.1
• Kubernetes 1.32.2
• Kubernetes Tests 1.32.2
• CentOS Stream CoreOS upgraded from 419.9.202503051432-0 to 419.9.202503111432-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ShortCertRotation (0 tests)			Enabled (New)	Enabled (New)

Rebuilt images without code change

• cluster-config-operator git cbfd00a8 sha256:8ca0df69dff9b2223242ca0b4d1d2aca4ddeb6202d8f54f612e4982f4e04a249
• kubevirt-csi-driver git ba2234bd sha256:60ca7d10aaa37e35a03526506bef0a5102233f4d0c752ce2bdf1cf1d250a8c3a
• openstack-machine-api-provider git d2fce230 sha256:01bbc1cca83b87cce19011c8980ae90ce6fe3b62db278abe4ddac4a860ee2769
• stream-coreos sha256:fdfe8a71bf9f71a17cd8a6b15657027b3ed79a4bd12336c63166fa82b3eacef0
• stream-coreos-extensions sha256:9a8d7e0aa78227e98a6ff6a2e4b785024d2ecbb363b7b1516de749b290b1070b

agent-installer-api-server

• NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#7398) #7398
• NO-ISSUE: [master] Bump OCP versions: 4.18, 4.19 (#7397) #7397
• MGMT-19830: Enable installation of OCP clusters in vSphere environments with user-managed LB (#7272) #7272
• MGMT-19596: Fixing broken KubeAPI tests (#7383) #7383
• NO-ISSUE: Fix bug in MTU validation for CMN - validation should pass if all reports are checked (#7386) #7386
• MGMT-19832: Fix time out during cluster last finalizing stage (#7372) #7372
• MGMT-20099: add nmstate to /v2/supported-operators (#7378) #7378
• MGMT-20022: Handle missing ManagedCluster in non MCE environments (#7348) #7348
• NO-ISSUE: [master] Bump OCP versions: 4.16, 4.18, 4.17 (#7380) #7380
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#1049) #1049
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#926) #926
• Full changelog

agent-installer-utils

• AGENT-1087: OVE ISO Builder script improvements #40
• AGENT-464: Adds form to agent-tui to enter rendezvous IP address #38
• AGENT-1087, AGENT-1118: Add script to generate agent-based installer OVE ISO #39
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• STOR-2252: Bump all deps #361
• NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #363
• CFE-1132: EFS Access Point Tags Update DAY2 #313
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-52509: github.com/go-jose/go-jose/v4 v4.0.5 #200
• Full changelog

azure-cluster-api-controllers

• CNTRLPLANE-105: Add new authentication type UserAssignedIdentityCredentials #333
• Full changelog

azure-disk-csi-driver

• OCPBUGS-51376: Rebase against v1.32.0 #102
• Full changelog

azure-machine-controllers

• CORS-3883: Allow managed identity from other resource groups #133
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-52508: github.com/go-jose/go-jose/v4 v4.0.5 #26
• OCPBUGS-45531: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.19 #25
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• AGENT-1113: enhance the unconfigured-ignition command to support the interactive workflow #9529
• OCPBUGS-33370: Improve baremetal gather error message #9120
• OCPBUGS-36553: VSphere: add vips to machinenetwork #9526
• OCPBUGS-49737: Custom-DNS: Update master and worker user data secrets #9451
• CORS-2508: aws: remove unused autoscaling:DescribeAutoScalingGroups perm #9223
• OCPBUGS-51378: Change vsphere conversion govmomi err to be clear #9524
• CORS-3278: Bump IBM Cloud CAPI to v0.10.0 #9523
• OCPBUGS-44840: Mount the user-ca-bundle into ICC #9227
• OCPBUGS-50637: Remove error logging when determining image arch #9531
• OCPBUGS-51171: aws: add ec2:ReplaceRoute permission #9525
• OCPBUGS-47724: AWS: Copy static MCO resources needed for custom-dns #9489
• OCPBUGS-49623: IBMCloud: Missing ca-mon region due to static region list #9421
• OCPBUGS-47681: Support regions only available in v2 of the aws sdk #9383
• OKD-235: Add stream metadata for scos to be used by OKD #9520
• OCPEDGE-1635: Set default values for arbiter #9530
• OCPBUGS-39583: Remove tmp directory used for agent pxe files #9527
• No-ISSUE: (dep) Bump openshift/api #9522
• CORS-3917: Add install config validation for service endpoints #9517
• NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer #9515
• OCPBUGS-51350: PowerVS: Extra network routes for disconnected install #9510
• NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage #9508
• OCPBUGS-50961: Power VS: Log accurate error when deploying Internal with no vpcName #9497
• Full changelog

baremetal-operator

• NO-ISSUE: Upstream Sync Mar 10 #401
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-52504: pkg/cli/admin/upgrade/recommend: Populate RESTConfig #1987
• Full changelog

cloud-credential-operator

• CCO-647: Enable readOnlyRootFilesystem on all containers #819
• OCPBUGS-52507: github.com/go-jose/go-jose/v4 v4.0.5 #823
• NO-JIRA: Add dry-run on aws create-all command #818
• NO-JIRA: add example of how to build from source #820
• Full changelog

cloud-network-config-controller

• SDN-5690: Rebase k8s to 1.32 #163
• Full changelog

cluster-baremetal-operator

• OCPBUGS-52216: Bump x/oauth2 to 0.27.0 #463
• Full changelog

cluster-capi-operator

• OCPCLOUD-2858: Bump dependencies to CAPI v1.9.z #270
• NO-JIRA: Update TODOs with new Jira issues #269
• OCPCLOUD-2718: Add default VolumeSize for MAPI to CAPI conversion #260
• Full changelog

cluster-config-api

• MCO-1590: Add explicit opt-out & status field for boot image update configuration #2223
• API-1689: features: add ShortCertRotation #1977
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-24588: bump library-go #233
• Full changelog

cluster-dns-operator

• OCPBUGS-51193: Add runbook_url for CoreDNSErrorsHigh #426
• Full changelog

cluster-etcd-operator

• OCPEDGE-1500: Added scaling strategies for TNF #1396
• Full changelog

cluster-image-registry-operator

• CNTRLPLANE-112: Bump msi-dataplane dependency #1187
• Full changelog

cluster-ingress-operator

• NE-1981: Move controller test helpers to dedicated package #1199
• NE-1953: Add Validating Admission Policy for Gateway API CRDs #1192
• NE-1954: Implement GatewayAPIController feature gate #1198
• Full changelog

cluster-kube-controller-manager-operator

• STOR-2267: Run SELinux warning controller #834
• Full changelog

cluster-monitoring-operator

• MON-3960: test: enable back TestTLSSecurityProfileConfiguration and m… #2545
• NO-JIRA: chore: versions: kubeRbacProxy’s primary branch isn’t main yet #2574
• Full changelog

cluster-network-operator

• NO-JIRA: ovn-k: sync EgressService with upstream #2664
• OCPBUGS-52361: frr-k8s: rename validatingwebhook name #2659
• Full changelog

cluster-node-tuning-operator

• CNF-16638: Reduce code duplication of RPS enabled checks (#1301) #1301
• Add observedGeneration to Profile status (#1305) #1305
• Full changelog

cluster-policy-controller

• CNTRLPLANE-55: Add MinimallySufficientPodSecurityStandard annotation to namespaces #161
• Full changelog

cluster-samples-operator

• OCPBUGS-52848: Revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #606
• OCPBUGS-52848: Revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #607
• OCPBUGS-52379: relevant references to master renamed in README.md #603
• Full changelog

cluster-storage-operator

• OCPBUGS-24588: bump library-go #566
• Full changelog

cluster-update-keys

• NO-JIRA: Updating openshift-ci-release-key for 2 years #70
• Full changelog

cluster-version-operator

• OTA-209: Add CVOConfiguration controller #1163
• OTA-1427: Reconcile all nodes via a special event #1164
• OCPBUGS-52258: pkg/cvo/updatepayload: Context around ValidateDirectory calls #1166
• NO-JIRA: Use k8s.sets for the fields of ClusterCapabilities #1159
• Full changelog

console

• OCPBUGS-52166: Fix sort function on Access review table #14848
• OCPBUGS-52589: update @types/react to v17, use new JSX transform #14864
• ODC-7775: Update content in Getting started resources on cluster and project overview page #14829
• OCPBUGS-52325: fix Node Logs toolbar layout at mobile #14836
• CONSOLE-4430: Content Security Policy E2E testing with Puppeteer & Chrome #14675
• CONSOLE-3414: Replace Loading with PF Spinner #14842
• ODC-7727: Add hover effect to favourites icon #14839
• CONSOLE-4504: set LogViewer theme using console’s theme #14827
• OCPBUGS-48491: Namespace is not persisting when switching to developer view from the topology page of admin page #14812
• OCPBUGS-49348: Fix Secret form drag and drop issue #14798
• OCPBUGS-37101: Remove logoutOpenShift method call #14658
• OCPBUGS-52316: enable clicking outside NodeLogs Selects to close them #14826
• OCPBUGS-52214: add missing v5 patternfly-addons.scss and patternfly-charts.scss styles #14813
• CONSOLE-4409: Update monaco theming and sidebar logic #14835
• CONSOLE-4503: Replace custom Banner with PatternFly equivalent #14825
• OCPBUGS-52298: Add breadcrumbs to ODC Project details page #14824
• Full changelog

console-operator

• CONSOLE-4508: Enable CSP e2e test #969
• Full changelog

docker-builder

• OCPBUGS-43812: Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 #458
• Full changelog

driver-toolkit

• test/e2e: adapt for layered node image (#167) #167
• Full changelog

etcd, installer-etcd-artifacts

• OCPBUGS-45488: Updating ose-etcd-container image to be consistent with ART for 4.19 #306
• ETCD-717: Rebase etcd 3.5.19 openshift 4.19 #315
• Full changelog

gcp-machine-controllers

• OCPCLOUD-2882, OCPCLOUD-2889: Provision AMD SEV-SNP and Intel TDX confidential instances #110
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-52477: Revert #2229: Initialize testContext before enumerating tests #2236
• Full changelog

hypershift

• NO-JIRA: Bump msi-dataplane dependency #5796
• OCPBUGS-52985: filter watch events for HO AWSEndpointService reconciler #5818
• NO-JIRA: Update Konflux references #5799
• ARO-14354, ARO-14355, ARO-14356: introduce image registry capability behind feature gate #5456
• OCPBUGS-52819: CPO Overrides for OCPBUGS-48519 #5808
• PODAUTO-324: PODAUTO-325: Allow autonode to run upstream karpenter core e2e tests #5680
• OCPBUGS-51364: fix oc patch command on doc #5807
• NO-JIRA: Fix-dependabot-bumps #5797
• OCPBUGS-52655: Add flag to set etcd storage size #5795
• CNTRLPLANE-111: Fix KMS MIv3 Issues #5793
• NO-JIRA: Disable GitHub Actions #5812
• OCPBUGS-52821: stop using dev mode for loggers #5801
• HOSTEDCP-2237: Auto approve Karpenter serving CSRs #5708
• OLS-1370: Add full aws permission list and point to it from “getting started” #5746
• NO-JIRA: CPOv2 token-minter abstraction #5769
• NO-JIRA: test/e2e: skip WaitForImageRollout in executeNodePoolTest on newer releases #5778
• OCPBUGS-52323: Make managed-trust-bundle optional #5763
• CNV-57648: document how to configure descheduler #5779
• NO-JIRA: Remove WI step for cluster-image-registry-operator #5777
• OTA-1405: Add the ClusterVersionOperator API #5569
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-51864: IBMCloud: MAPI replacing unhealthy CP nodes #61
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• plain-java runtime sample #38
• Full changelog

ironic

• METAL-1299: Do not use openstack packages #645
• Full changelog

ironic-agent

• METAL-1299: Do not use openstack packages #177
• METAL-1297: Update commit hash of ironic-python-agent #176
• Full changelog

machine-api-operator

• SPLAT-2060: Create e2e tests for vSphere Data Disk feature #1338
• OCPCLOUD-2882, OCPCLOUD-2889: support AMD SEV_SNP and TDX confidential computing machines on GCP #1326
• Full changelog

machine-config-operator

• MCO-1485: MCO:1486: MCO-1324: Attempt stub Ignition upgrade #4885
• Full changelog

metallb-frr

• Align to upstream #79
• Syncoperator03032025 #78
• Full changelog

monitoring-plugin

• COO-684: add mui/material as is required as peer dependency #360
• OU-681: fix typo in the predefined metrics list #358
• OU-499: remove deprecated components #356
• Full changelog

multus-whereabouts-ipam-cni

• OCPBUGS-52415: replace entrypoint #349
• Full changelog

networking-console-plugin

• Upgrade dockerfile for node 18 and 4.19 #222
• Full changelog

oc-mirror

• OCPBUGS-52588: fix: error when no related image was found (#1105) #1105
• OCPBUGS-50680: v2/operator: refactor operator FilteredCollector (#1093) #1093
• no-jira: v2/manifest/oci-manifest: refactor and dedup the code (#1098) #1098
• v2: filter wrapcheck warnings for oc-mirror (#1104) #1104
• Full changelog

powervs-block-csi-driver-operator

• STOR-2252: Bump all deps #81
• Full changelog

prometheus

• OCPBUGS-53025: Scraping: Bump cache iteration after error to avoid false duplicate detection. #245
• Full changelog

service-ca-operator

• OCPBUGS-48171: Update go 1.23 and ocp 4.19 #254
• Full changelog

tests

• SDN-4168: Fix IPsec tests for monitor failures #29437
• TRT-2026: validate that the binary extraction was successful via existence check #29595
• OSD-26270: re-enabled managed-upgrade-operator test by removing exclusion #29585
• NO-ISSUE: Automated - Update synthetic test data #29570
• NO-ISSUE: replace hardcoded ClusterVersionCapability string in olmv1 tests #29577
• TRT-1575: Fail the test when an expected operator goes to degraded #29566
• OCPBUGS-52578: Use payload pullspec for image info test #29586
• Full changelog

thanos

• MON-4139: feat: replace github.com/prometheus/prometheu dep with one having an xtra check in the parser to help identify le/quantile selectors misuses in Prometheus v3 #158
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-51973, OCPBUGS-52808: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #140
• Full changelog

vsphere-problem-detector

• NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #179
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: node image info is still loading, check back later...

View changelog in Markdown or change previous release: 4.19.0-okd-scos.ec.34.19.0-okd-scos.ec.24.19.0-okd-scos.ec.14.19.0-okd-scos.ec.04.18.0-okd-scos.ec.34.18.0-okd-scos.ec.24.18.0-okd-scos.ec.14.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.20.0-0.okd-scos-2025-06-13-1846154.20.0-0.okd-scos-2025-06-13-0646144.20.0-0.okd-scos-2025-06-12-1846134.20.0-0.okd-scos-2025-06-12-0646124.20.0-0.okd-scos-2025-06-11-1846114.20.0-0.okd-scos-2025-06-11-064610───4.19.0-0.okd-scos-2025-06-14-0447474.19.0-0.okd-scos-2025-06-13-1647464.19.0-0.okd-scos-2025-06-13-0447454.19.0-0.okd-scos-2025-06-12-1647444.19.0-0.okd-scos-2025-06-12-0447434.19.0-0.okd-scos-2025-06-11-164742───4.18.0-0.okd-scos-2025-05-27-0825374.18.0-0.okd-scos-2025-05-26-2025374.18.0-0.okd-scos-2025-05-26-0825374.18.0-0.okd-scos-2025-05-23-0333574.18.0-0.okd-scos-2025-05-22-153357───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-05-02-1402244.15.0-0.okd-2025-04-03-2126204.15.0-0.okd-2025-04-02-1800124.15.0-0.okd-2025-03-28-1148024.15.0-0.okd-2025-03-26-0131074.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.3.0-0.okd-2025-04-09-1531174.3.0-0.okd-2021-08-03-2048314.3.0-0.okd-2021-03-22-1309504.3.0-0.okd-2021-02-02-2356544.3.0-0.okd-2021-02-02-1747534.3.0-0.okd-2021-01-28-0046514.3.0-0.okd-2021-01-18-145029───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424───4.19.0-okd-scos.34.19.0-okd-scos.24.19.0-okd-scos.14.19.0-okd-scos.04.18.0-okd-scos.104.18.0-okd-scos.94.18.0-okd-scos.84.18.0-okd-scos.74.18.0-okd-scos.64.18.0-okd-scos.54.18.0-okd-scos.44.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523

Source code for this page located on github