Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.20.0-okd-scos.ec.3

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.20.0-okd-scos.ec.2 (changes) - Success
• 4.19.0-okd-scos.ec.10 - Success

---

Changes from 4.19.0-okd-scos.ec.10

Created: 2025-06-10 20:45:56 +0000 UTC

Image Digest: sha256:c180fea0effe7fb680baa93bb8e7b8ae5b4f0c42cd65c57fd3682686fe1d0b77

Release 4.20.0-okd-scos.ec.3 was created from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-06-10-064608

Components

• Kubectl 1.32.1
• Kubernetes upgraded from 1.32.4 to 1.32.5
• Kubernetes Tests upgraded from 1.32.4 to 1.32.5
• CentOS Stream CoreOS upgraded from 9.0.20250507-0 to 9.0.20250521-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
BareMetalLoadBalancer (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CloudDualStackNodeIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DisableKubeletCloudCredentialProviders (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIProviderOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MultiArchInstallAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MultiArchInstallGCP (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PlatformOperators (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SELinuxChangePolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereDriverConfiguration (5 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiVCenters (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ProcMountType (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
RouteAdvertisements (11 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesPodSecurityStandards (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesSupport (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereMultiNetworks (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
SigstoreImageVerificationPKI (0 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
AWSDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AWSServiceLBNetworkSecurityGroup (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureMultiDisk (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
BootImageSkewEnforcement (0 tests)			Enabled (New)	Enabled (New)
ManagedBootImagesAzure (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesvSphere (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLMWebhookProviderOpenshiftServiceCA (0 tests)				Enabled (New)		Enabled (New)
PreconfiguredUDNAddresses (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereMixedNodeEnv (0 tests)			Enabled (New)	Enabled (New)

New images

• aws-karpenter-provider-aws git 68ae0c26 sha256:9cc774e9297bb2c246bbb54d164fc28ad6842711f8cf17fbaf2f5f8ba5bd71bf
• openstack-resource-controller git 35841895 sha256:12b6f809fc4f8011a4c64d15031d7ecfbfe5e999b696e05af4833066df5f354f

Rebuilt images without code change

• aws-cloud-controller-manager git 425c1c5b sha256:d194499adf5d6a805370724b367fa6ef51e63ae29c7b175aa8aeaffdb6dc21c9
• aws-kms-encryption-provider git 088dcaf7 sha256:f72fe6509e7dd8626628d4d1dcb45e7d44076c30419a7da20df1ac00c0de23dd
• aws-pod-identity-webhook git b0a16d53 sha256:bfc746182270141ec4f06150eb70f5a9235c52b5c15439a7bc2bc3b1f0795c74
• azure-cloud-controller-manager git 7109d6b4 sha256:811c18fba50caf4ffe8835ef11750300074e92e9a2b8a25ee552326036b12290
• azure-cloud-node-manager git 7109d6b4 sha256:8a498e60c31adbc43cdef009bd59fe58661fd3f1b3deb5b38f22998ccfa58105
• azure-service-operator git 0ae129b4 sha256:e579cd32e3574d4eb6fbc8d64b21b8585d59212ffb720d9a7e1d5edf39016fab
• azure-workload-identity-webhook git 892d3c4d sha256:870c1cd676fe68d2451ec1f76e7d5e5f9b2b4f2568b874472f353c9e6383deb9
• baremetal-machine-controllers git f7a78954 sha256:f384527ee5cc9671af5c0cf9757b4275f27961f0788532b0b169fa0c78a4e53f
• cloud-network-config-controller git 98ae311b sha256:ac211f428a37bb18a598d6dff1d6bba046e5d9a5bf4ae570a6a7640ee854d1a1
• cluster-autoscaler git f746d442 sha256:c81941c2cc5307d7cf6014b752407af17dc8b8aacdafd352e13d7447f953f49e
• cluster-bootstrap git 8fde9c52 sha256:8b296b4c0ed4553438ba2ec1dd04a243649363092501364c97f00aa3e0887ad1
• cluster-config-operator git 96607b59 sha256:778f0b46e85ebe5b6a9a1a93273e28e4f44aa17f6f8db6ed3ed04e29215f6fc9
• cluster-control-plane-machine-set-operator git 1dbf0c7a sha256:1ae1e550d261d9b2530fc1baae6c2a6362e5f50e8c2c7b2d7b69d31d6bc40988
• cluster-csi-snapshot-controller-operator git cf99de97 sha256:33bfe98f9a0fd89cad130d8452465793eb60b2c5bb776a46ec4454de13d9817c
• cluster-dns-operator git 65981306 sha256:48b5b9fe3e90b352369a637b974e52cde7c8a258af6cbc2a6ac99268d0aef38b
• cluster-kube-cluster-api-operator git 3ec30377 sha256:f7dfe20ea3ec9b035b33aefb9f8c1dc34ae56a5221ebb772b6b4bf72c7287450
• cluster-kube-storage-version-migrator-operator git 4e514049 sha256:0a70e25fbaf2f3490d6ec4441262b6264219c3192e5a21082e62be1f8fd08b8c
• cluster-policy-controller git 74852478 sha256:7f2fcd1d757d27e2f6643cc1db34a1d1573047aed7c1f256c3431a52395f90a0
• cluster-samples-operator git 4cb29197 sha256:fef8da17e89034a15d6998444aa8947ff05001952f5c81aeda86f69d6522bd6d
• cluster-update-keys git c1c56b4c sha256:4327e107eaed82637d4150013757aa232a809a2d52f6f7c2cf937c124965653e
• container-networking-plugins git b09f487c sha256:1d8d31f195705a060e45426de7e661780dd8f46c0be25adb5cabcdd6af524b25
• containernetworking-plugins-microshift git b09f487c sha256:fd5556b6112ed583de1906b78e528f9a70c7f0c6a4592860e106c71aa7120ada
• csi-external-attacher git a8175e39 sha256:f212c2c8ddaa6e7ab2cda239556414101975ebc168d7706406e31981163420f0
• csi-external-provisioner git 9db1cdb1 sha256:f30a4aacbca14bae6af1ac6cbbd2494ee90c2ac2db25f36f38c3c4f20a0c7fb6
• csi-external-resizer git cca04e39 sha256:d09a4eb90b433b40b71cc30e3bdca2bd559960a91a842cabd6c3c38ca3d8fa05
• csi-external-snapshotter git ac82cafc sha256:0328950466bdb78d6190b313893d5eb341c39338ae01a35362542934180d5f99
• csi-livenessprobe git ca514478 sha256:5992b5b9b06f06ca67613220d216f0411fa61370a535faaf4206ff2f814e3dc6
• csi-node-driver-registrar git d18edb3a sha256:c902b561868730db5574ec0eb0689834fe62ba8817ee3728e5125ddb6f972390
• csi-snapshot-controller git ac82cafc sha256:9db9d1acbcb4649ed3ca197f51e4b9c5783c7bc1b0bbb22106db096eecd2a4ec
• driver-toolkit git 686fdac5 sha256:51ea49bcbff8f93d028ba0af6fc24b32b40f76a98b437bab7c02b21b66731e09
• egress-router-cni git 85353bb9 sha256:19b3586e32453636d875d41047ae82a6c435c005535f602c3704502794526b49
• etcd git a5421dfe sha256:15fc1f05ffde70b2074ab733ec7fadef29b40580820ae6e4483b23a621ccfccb
• gcp-cloud-controller-manager git d8d3aeba sha256:48f99e5cf63abb30afd59c1b226fab074a2f7e301945abda5d44923ffb969018
• gcp-pd-csi-driver git 3aeac35b sha256:bb5235c2d8ffb54a33b8277b5e64319fb64256e41a11180587364f4e3739cffb
• gcp-pd-csi-driver-operator git 44c74f24 sha256:8becb493ea2a7b6c1aa2c4f0fc146fe91bd62eb0ca38cb079117883b9c27ee6b
• gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:6ed3aba95e34d5bea616c7cfcace9f1813c0feec9dbbbe9ecc15fd2649a3af12
• haproxy-router git b41f9d05 sha256:52dcbb7ce2f21f22e9fa3d732a064186215af0e278b6aad0840f3f1ff1c07282
• ibm-cloud-controller-manager git 7422aab2 sha256:655ce7b63118c1a3188b06dcbec883f302c266e859e6d008cad46758ab2ce8f4
• ibm-vpc-block-csi-driver git 176b6ef1 sha256:c08e603543629fe5a3fc526d78449ccaf779ef270778753d715db2304c46c7f4
• ibm-vpc-block-csi-driver-operator git 3dfcfa12 sha256:68846ffaf0cfc8274ca2573876893dd9e440372096dd2d615709d71a528043f5
• ibmcloud-machine-controllers git 989bd874 sha256:3a1509a0e23d4f3deaddcde5a881df2f9e339a75da70176b408a7f03c0b5923e
• installer-etcd-artifacts git a5421dfe sha256:f2d44cc6e0c831ded7e6b42e867f9e7224349986ec4845ba299447fdf7b2b5ca
• ironic-static-ip-manager git fcd9564e sha256:4d61d98e31738cb5ccc9239b799a4d57f100b3086699525af5ff8ea4ed0a2bc1
• kube-metrics-server git 037a0e7e sha256:51a36ef908b5da19a47e93d657d89ea8ec0925c6495366b9cc8375ed8013c8d3
• kube-state-metrics git c3da3b5f sha256:6a3391d27f75c53616918a2bbb6d152a4bb7f5665bf39c238351b66a0ab0cc0b
• kubevirt-cloud-controller-manager git 3f4542ec sha256:45d623bccf7f00e97cb5886e4fe2403c3c3aba2f5d99d22391e25251356ef0d2
• kubevirt-csi-driver git e3027025 sha256:3c5de75f8cbe5623b3d596c72c9e00cadf66f849d157075189d16fd6401320f6
• libvirt-machine-controllers git a336f0b5 sha256:429eeb96c6ac01b8ef60f48a67b9f94519788a36e2e4c2b930b3935a56ba8d00
• machine-image-customization-controller git 7d066746 sha256:44b0222098097ecd9e8b94f7a281065f89eeeb85d9b3f860faff5a4522d0092e
• metallb-frr git 5076dbc4 sha256:5a8c05e9256a8a62ee4eb2cecbd4709aff5888866e68680af5a9213333cc032f
• multus-cni git cf0f68ec sha256:a3dd2a57f2b6a7a5e80ff740d8331294f9dacad5f561edf5cebc56f17141a71e
• multus-cni-microshift git cf0f68ec sha256:d66a18d0100c770a389daaa45ce29048ef6ca6d997f689e0154a9191146d04eb
• multus-networkpolicy git 6fffe5d7 sha256:cd368df5b988e522c26523dc1ec1844f668c9c02ddac9423420aeddfdc1b94fe
• multus-route-override-cni git 391c1b03 sha256:cadc1e187c5f8a69e90bfd0887e2b1a228553eff36e2c9faecf5672da31300ac
• multus-whereabouts-ipam-cni git 45624b63 sha256:0447afd29a9ab55543195af292b40cdb959e4fe865d903a09431cbe929c3f8c1
• network-metrics-daemon git 5ec8c6bd sha256:085c840dc8f9a69090fd18da84b32e0a0679685d8a4eb604c2aeb9d802e887fa
• nutanix-cloud-controller-manager git db1f264a sha256:51280481090f561be6ea7926a350e77ac7af881794999e6e0da01722dc2e5ab1
• nutanix-machine-controllers git a26db5a0 sha256:2e73165accb5788a172776077e6e7db41cc9d56e6ac02205aae22e72ed5ee290
• oauth-apiserver git 75914068 sha256:7907eedb7e2cfe73690655186b201c1877a205b1557db16f7d15cd08381a9d05
• oauth-proxy git 3d12ccbe sha256:14b7ff793eb43b4fa1124dd4304ac02559b9678781985fbd118a65d4addce1e7
• ovirt-csi-driver git 1db726a9 sha256:b9c92bc4244bb4bc41ffa9b5f38fd389c44d93e997cec681894bde9b46710b54
• ovirt-csi-driver-operator git 76db379d sha256:61627ebc18066bc27015a3b3226bbbaa7f4b416b4eeab796b26f836e772d0035
• powervs-block-csi-driver git f681413d sha256:d4771a03c496e1c9d34b07053b62d198c0a084d49e0592b1178fdea41c70da3a
• powervs-block-csi-driver-operator git 059d95c2 sha256:befdc4279c3858de07c8edda1179bf2806a13080dc2e759a87a2864856b8d83e
• powervs-cloud-controller-manager git ef83f3f5 sha256:8b1b75df9a6814650c62cb26ff4f44867c5c6a376bebdc5c6bb3fad87bc1c6dd
• powervs-machine-controllers git 87f8e306 sha256:11338a88c440ee44a632abfc644fa11133f6f48ecb1cd38e5dbeafa537cfa846
• prometheus-alertmanager git a2346ca5 sha256:f6e72634198443bbe2e01d128f14331ee5eb3e6b0492e7a67f9dca8ffa15fe2c
• prometheus-config-reloader git b8debb4c sha256:331b0253819203abd6a4be6ec384bb1927e36924deef72cdb0eed5e6a568bc64
• prometheus-node-exporter git c90542d8 sha256:ca41bc30311d76398beebfb9a9c98021f54cf65c9f2a527366f93485447d95a6
• prometheus-operator git b8debb4c sha256:0a0c74c5c41f716c6919c0ba4f48dc969a3cf0f335bab3a5f684cfee417839b4
• prometheus-operator-admission-webhook git b8debb4c sha256:b7bb41bfcfa81460ae5f69fe3bbd1f813b2a2d4e4c9cfe84e6f37077b71ba77f
• route-controller-manager git bc97534a sha256:e82cd706071fb4d21153e12c6e8503b528e55af9bc7807fc30609f5280868ac9
• service-ca-operator git 4dfa6916 sha256:fcf488b8c7351d174471f6792bcb65729e72bf76e299313f0a433fe6da849fb2
• thanos git 95f7bb21 sha256:18f0fa5fa4607ad5932879763c5d3253b56f4b91ea196841a79fc62def230105
• vsphere-csi-driver-operator git c2b41c36 sha256:9055ad963a68f432f9ec24122e6719cdbd6871caafad7017f650a483f9ac8552

agent-installer-api-server

• MGMT-20464: Fix NFD detection of NVIDIA GPUs #7696
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• NO-ISSUE: Update Konflux references (#1131) #1131
• NO-ISSUE: Update Konflux references (#1130) #1130
• NO-ISSUE: Add konflux service account migration (#1129) #1129
• NO-ISSUE: Modify Konflux YAMLs to ocm-2.15 (#1126) #1126
• MGMT-11622: assisted-installer controller: operator status should be logged (#1079) #1079
• Use rsync over cp to set up networking files for first boot (#1123) #1123
• Konflux build pipeline service account migration for assisted-installer-controller-acm-ds-main (#1108) #1108
• Konflux build pipeline service account migration for assisted-installer-ds-main (#1110) #1110
• Konflux build pipeline service account migration for assisted-installer-controller-ds-main (#1109) #1109
• Konflux build pipeline service account migration for assisted-installer-acm-ds-main (#1107) #1107
• MGMT-20567: Enable HTTP endpoint for MCO ignition (#1117) #1117
• NO-ISSUE: Update Konflux references (#1114) #1114
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Modify Konflux YAMLs to ocm-2.15 (#1009) #1009
• NO-ISSUE: Update Konflux references (#1003) #1003
• NO-ISSUE: Update Konflux references (#1002) #1002
• Konflux build pipeline service account migration for assisted-installer-agent-acm-ds-main (#992) #992
• NO-ISSUE: Update Konflux references (#984) #984
• Full changelog

agent-installer-utils

• ART-13079: append .0 to go.mod version #105
• OCPBUGS-56934: Disable ESC key on checks page #102
• OCPBUGS-56977: OVE isobuilder fails on CentOS Stream 9 due to missing… #103
• OCPBUGS-56880: Log error from nmtui and change modal background #101
• OCPBUGS-56546: ISOBuilder- Remove default password for nodes #96
• AGENT-1195: bump appliance to 936210 #98
• OCPBUGS-56223: Fix nmtui redirection after quit #93
• OCPBUGS-56147: Add operator CRs post-install in OVE build script #94
• OCPBUGS-56210: OVE builder: Remove RHEL9 image from additionalImages #91
• OCPBUGS-56112: configure the channel for each OLM operators #89
• OCPBUGS-55769: Use internal image registry #78
• AGENT-1195: bump appliance image to 4042ba #86
• OCPBUGS-55708: Include RHEL 9 guest image to support VM launches via … #84
• Full changelog

apiserver-network-proxy

• ART-13079: append .0 to go.mod version #78
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-53003: Remove references to master branch #551
• OCPBUGS-55947: Update manifests to remove reliance on v1beta1 admission registration #549
• Full changelog

aws-ebs-csi-driver

• ART-12521: update go mod dependency for konflux #285
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• STOR-2330: Add labels to subscribe AWS-EBS CSI driver controller to NPs #387
• NO-JIRA: create-efs-volume: print files to log as a fallback #388
• NO-JIRA: Update openstack approvers #385
• OCPBUGS-54975: Fix Cinder, Manila driver metrics #379
• OCPBUGS-56128: openstack-cinder: Set –with-topology flag for node driver also #383
• STOR-2408: Bump OLM metadata to 4.20 #382
• Full changelog

aws-machine-controllers

• OCPCLOUD-2717: bump openshift/api #131
• OCPBUGS-56487: fix: make machineset annotation controller respect paused condition #129
• OCPBUGS-55720: Update machine-api-operator pkg with fixes #127
• Full changelog

azure-cluster-api-controllers

• NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.19.4 (99a359a) into master #338
• OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #337
• Full changelog

azure-disk-csi-driver

• NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #103
• Full changelog

azure-file-csi-driver

• OCPBUGS-54897: UPSTREAM: 2515: allow deleting cross-subscription snapshots #92
• Full changelog

azure-kms-encryption-provider

• ART-13079: append .0 to go.mod version #17
• Full changelog

azure-machine-controllers

• OCPBUGS-55372: Fix regression on ASH with armcompute/v5 #155
• OCPBUGS-56380: Fix failure when attempting to modify immutable availabilitySet #148
• OCPBUGS-55372: Update virtualmachines service to armcompute/v5 SDK #141
• Full changelog

baremetal-cluster-api-controllers

• OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #44
• Full changelog

baremetal-installer, installer-artifacts

• CORS-3998: Remove base domain from metadata #9711
• OCPBUGS-56616: pkg/types/validation: Validate all SSH public keys #9770
• OCPBUGS-51299: Set default project and location for KMS key manifest #9767
• AGENT-997: Internal dev docs for authentication-authorization #9224
• OCPBUGS-57000: Revert “CORS-3883: Remove user-assigned identity from ARM template” #9766
• SPLAT-2045: [vsphere] promote multi-nic to default #9493
• no-jira: Bump CAPZ Version #9704
• NO-JIRA: openstack docs: Fix type of clusterOSImageProperties #9754
• OCPBUGS-54885: Validate agent diskEncryption fields #9674
• OCPBUGS-54413: Make swift containers removal not fatal for UPI. #9728
• OCPBUGS-56808: Remove configv1.GCPServiceEndpointNameTagManager references #9749
• no-jira: add unit tests for vsphere VIPS/machinenetworks population #9744
• OCPBUGS-56713: update the punctuation #9746
• OCPBUGS-54487: Power VS: Provide detailed error when entered VPCName cannot be found #9634
• CORS-4066: Remove the function to check if multiarch is enabled/allowed #9750
• OCPBUGS-6508: Update Control Plane replica validation for Single Node OpenShift #9048
• CORS-3682: log falsy conditions when CAPI infra/machine provisioning failed #9722
• MGMT-20702, OCPBUGS-56601: Avoid duplicate machine networks #9743
• OCPBUGS-55671: AWS Mutliarch feature gate is enabled by default #9729
• OCPBUGS-55672: Remove MultiArchInstallGCP featuregate #9725
• OCPBUGS-56645: Update RHCOS 4.20 bootimage metadata to 9.6.20250523-0 #9741
• OCPBUGS-56008: Remove unnecessary validation #9739
• OCPBUGS-56268: pkg/types/azure: remove SystemAssignedID docs #9717
• no-jira: Update team osasinfra #9732
• OCPBUGS-56008: don’t expect identity on ASH #9733
• OCPBUGS-56008: default Azure to create VM user-assigned identities #9718
• NO-JIRA: add the instance types which test PASS #9723
• OCPBUGS-55905: Update RHCOS 4.20 bootimage metadata to 9.6.20250513-0 #9720
• OCPBUGS-56262: Added better logging for vSphere destroy #9716
• OCPBUGS-56079: apply fixes for yaml-lint errors #9708
• OCPBUGS-53107: Set appropriate KillMode for systemd services #9562
• OCPBUGS-55683: Pre-create password files for agent installer OVE #9679
• OCPEDGE-1673: [TNF] Render secret manifests from fencing credentials block. #9635
• OCPBUGS-47719: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9693
• OCPBUGS-55817: add Lsv4 and Lasv4 series as tested #9696
• OCPBUGS-55772: Add support for Azure TDX confidential VM type #9691
• no-jira: add jcpowermac to nutanix review/approve groups #9697
• CORS-3960, OCPBUGS-55952: Remove Terraform Build Artifacts #9667
• no-jira: add PeaceRebel (Bipin) to coreos approvers & reviewers list #9687
• OCPBUGS-54502: ensure ctrplane nodes can access bootstrap MCS #9689
• OCPBUGS-54566: Apply defaults then validate confidentialCompute #9637
• OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
• no-jira: fixes to get shellcheck to pass #9669
• OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
• OCPEDGE-1707: Add Disable Certificate Verification API #9640
• no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
• OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
• Full changelog

baremetal-operator

• OCPBUGS-54629, OCPBUGS-54965: merge upstream #418
• OCPBUGS-55717: Merge upstream #414
• Full changelog

baremetal-runtimecfg

• NO-ISSUE: Add emy as reviewer #346
• Full changelog

cli, cli-artifacts, deployer, tools

• WRKLDS-1716: oc image serve: Remove as deprecated #2033
• OTA-1539: pkg/cli/admin/upgrade/recommend: Add a –quiet option #2023
• OTA-1532: pkg/cli/admin/upgrade/recommend: New, feature-gated –accept #2017
• OCPBUGS-49897: avoid transfering permissions when copying artifacts from node-joiner pod #2031
• OCPBUGS-56598: pkg/cli/admin/mustgather: Include ClusterVersion in fallback inspect #2025
• OCPBUGS-55220: Replace colon to hypen in the filename while extracting tar on Windows #2022
• NO-JIRA: OCPBUGS-46604: Clarify behavior of since-time flag in oc adm must-gather command #2019
• WRKLDS-1103: Adding sos.conf file for default sos config into the tools image #2003
• NO-JIRA: make ‘oc status’ compatible with bare kube #1947
• Full changelog

cloud-credential-operator

• OCPBUGS-55777: Add missing Role, RoleBinding #860
• OCPBUGS-56607: Azure: resolve nil pointer exception when role assignment exists #861
• OCPBUGS-53429: Render: configure proxy on bootstrap static pod #855
• OCPBUGS-55777: Sync OpenStack CA Bundles from legacy location #850
• OCPBUGS-54829: golang.org/x/net v0.38.0 #851
• Full changelog

cluster-authentication-operator

• NO-JIRA: add logging when rendering bootstrap manifests #770
• CNTRLPLANE-939: test/e2e-oidc: poll test preconditions for a short time instead of checking once #769
• CNTRLPLANE-939: Create separate make rule for e2e oidc tests #768
• AUTH-544: Extend e2e test to leverage new functionality #737
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-57041: update cluster provider type early #343
• NO-JIRA: Add autoscale members to OWNERS file #345
• Full changelog

cluster-baremetal-operator

• OCPBUGS-54244: no default for provisioningIP when provisioningInterface is set #476
• OCPBUGS-54965: Inform BMO when provisioning network is disabled #473
• NO-ISSUE: Makefile: don’t run all linters when running unit tests #475
• NO-ISSUE: Silence a bogus error with newer golangci-lint #477
• OCPBUGS-52483: Allow provisioningIP when network disabled #466
• Full changelog

cluster-capi-controllers

• NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api:v1.10.2 (5255664) into master #240
• OCPCLOUD-2917: Merge https://github.com/kubernetes-sigs/cluster-api:v1.10.1 (647a1b7) into master #238
• OCPBUGS-55947: Regenerate manifests to drop v1beta1 admissionregistration usage #236
• Full changelog

cluster-capi-operator

• OCPBUGS-57013: Fix reset sync status in migration controllers #313
• NO-JIRA: Assorted cleanups #312
• OCPBUGS-57040: Fix failure to retry unpause #309
• OCPBUGS-56604: fix: ensure CAPI machineset is created not paused when authoritative #299
• OCPBUGS-56709: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #301
• OCPBUGS-56487: fix: watch CAPI resources in the migration controllers #300
• OCPCLOUD-2943: MachineSet deletion logic #286
• OCPCLOUD-2893: Add related objects to must-gather config #267
• OCPBUGS-55985: fix: machine: propagate non-authoritative deletion #290
• OCPBUGS-55947: Should not use v1beta1 of the AdmissionRegistration API group #289
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-56508: Fix config-sync-controller logging #389
• Full changelog

cluster-config-api

• CNTRLPLANE-337: authentication: oidc: make username claim mapping required #2352
• NO-ISSUE: Remove redundant image stream #2358
• Promote RouteAdvertisements feature gate to default feature set #2225
• MCO-1671: Add feature gates for azure boot image updates & skew management #2353
• SPLAT-2137: FG for Service Type LB NLB with Security Group #2354
• OCPBUGS-56725: Add max length validation for apiserver namedCertificates #2342
• Remove DataGather state print column #2350
• OCPBUGS-44462: Remove PlatformOperators from feature list #2333
• CORENET-6004: Add PreconfiguredUDNAddresses featuregate #2348
• OCPCLOUD-2717: Deprecate DeleteOnTermination for EBS volumes #2341
• SPLAT-2175: introduce AzureDedicatedHosts feature gate #2293
• OCPBUGS-52556: Revert v1alpha1 removal #2343
• SPLAT-2044: [vsphere] promote multi-nic to default #2204
• OCPBUGS-55671: Remove MultiArchInstallAWS featuregate #2336
• CNTRLPLANE-371: Remove SELinuxChangePolicy gate #2334
• OCPNODE-3262: promote featuregate SigstoreImageVerificationPKI to techpreview #2328
• OCPBUGS-55672: Remove MultiArchInstallGCP featuregate #2332
• CORS-4041: Remove the TagManager from the GCP Custom Endpoints #2323
• SPLAT-2213: Added vSphere mixed node env feature gate #2326
• OCPBUGS-56382: Fix validation for Resource field in MOSB API #2327
• OPRUN-3860: Add NewOLMWebhookProviderOpenshiftServiceCA feature gate #2324
• OCPBUGS-55664: remove VSphereDriverConfiguration feature gate #2319
• CNTRLPLANE-367: Update Authentication API GoDoc for OIDC-related fields #2314
• OCPNODE-2557, OCPNODE-3225: features: set user namespace features on by default #2305
• OCPBUGS-55662: Drop BareMetalLoadBalancer feature gate #2312
• CCXDEV-14850: align insights DataGather with config #2248
• Remove upstream on-by-default cloud feature gates (CloudDualStackNodeIPs, DisableKubeletCloudCredentialProviders) #2249
• SPLAT-2168: introduce AWSDedicatedHosts feature gate #2291
• OCPBUGS-55666: Remove MachineAPIProviderOpenStack feature gate #2307
• MCO-1657: FeatureGate for Bootimage updates for the vSphere platform #2301
• SPLAT-2072: Removed VSphereMultiVCenters feature gate #2231
• SPLAT-2158: Azure Multi Disk feature gate #2289
• README: Add criteria for featuregate test result windows and flake handling #2302
• Full changelog

cluster-etcd-operator

• OCPBUGS-56199: increase tnf job timeouts #1426
• CNTRLPLANE-340: Issue shorter certs when ShortCertRotation feature gate is set #1315
• OCPBUGS-55757: adjust alerts according to platform #1422
• OCPBUGS-55111: Remove ‘meta’ keyword from pcs resource create command #1417
• Full changelog

cluster-image-registry-operator

• OCPBUGS-56606: bump github.com/golang-jwt/jwt #1212
• OCPBUGS-56361: bump golang.org/x/oauth2 to the latest version #1206
• Full changelog

cluster-ingress-operator

• OCPBUGS-55652: Removed PrivateHostedZoneAWS from component #1230
• OCPBUGS-54745: status: Conditionally add CRDs to relatedObjects #1217
• OCPBUGS-55317: Check capabilities before watching OLM resource #1232
• Full changelog

cluster-kube-apiserver-operator

• NO-JIRA: Use new PSS annotation #1833
• OCPBUGS-55013: SCC: add hostmount-anyuid-v2 #1834
• OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects - reapply #1831
• OCPBUGS-52466: bump library-go to bring in updated audit policies #1837
• OCPBUGS-55274: Change validity / refresh for some certs which should not be affected by dev cycle rotation change #1832
• Full changelog

cluster-kube-controller-manager-operator

• WRKLDS-954: pkg/operator: Remove expired conditional resources #839
• Full changelog

cluster-kube-scheduler-operator

• OCPNODE-3192: enable the scheduler plugin if the feature gate DynamicResourceAllocation is enabled #561
• Full changelog

cluster-machine-approver

• OCPBUGS-19856: Improve log message when searching for node by InternalDNS #269
• No-Jira: ignore test file csr_check_test.go #270
• Full changelog

cluster-monitoring-operator

• NO-JIRA: [bot] Synchronize versions of the downstream components #2607
• NO-JIRA: [bot] Synchronize versions of the downstream components #2606
• OCPBUGS-18282: provide more context in externalLabels unmarshalling error #2605
• NO-JIRA: metrics-client-ca: set owner annotation #2602
• OCPBUGS-18282: prevent use of reserved labels keys in Prometheus externalLabels #2604
• MON-4242: chore(metrics-server): allow setting log verbosity #2599
• NO-JIRA: [bot] Synchronize versions of the downstream components #2603
• OCPBUGS-33691: mixin: longer rate interval for Alertmanager[Cluster]FailedToSendAlerts #2598
• NO-JIRA: [bot] Synchronize versions of the downstream components #2600
• MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2549
• Full changelog

cluster-network-operator

• CORENET-5704: Consume latest vendoring from ocp api repo #2720
• OCPBUGS-56878: whereabouts-config is a reserved name for user interaction. #2707
• CNTRLPLANE-341: Issue shorter certificates when ShortRotation featuregate is enabled #2556
• OCPBUGS-56051: Configure the terminationMessagePolicy for all containers deployed in HyperShift #2709
• OCPBUGS-51093, OCPBUGS-55157: Pass ‘–gateway-mode’ flag for ovnkube-cluster-manager #2696
• OCPBUGS-55488: Remove environment variables related to ARO HCP MIv2 for CNO #2686
• Full changelog

cluster-node-tuning-operator

• Change /master to /control-plane node label (#1327) #1327
• NO-JIRA: E2E: Additional Functional tests for align cpus by UncoreCache Feature (#1324) #1324
• Update performance_profile.md (#1329) #1329
• fix: stop referencing non existing git references in go.mod (#1332) #1332
• e2e: arm: fix ginkgo doesn’t recognize kernelPageSize suite (#1330) #1330
• E2E: use 4 cpus for reserved from available cpus (#1326) #1326
• Add NetworkPolicy k8s resources (#1323) #1323
• OCPBUGS-55989: E2E: Functional tests for align cpus by UncoreCache Feature (#1302) #1302
• NO-JIRA:e2e:daemonset: pod phase and events (#1289) #1289
• Full changelog

cluster-olm-operator

• OCPSTRAT-1976: Add readonlyRootFilesystem #120
• OCPBUGS-56903: fix: report correct next version when incompatible operators are installed #123
• OCPBUGS-56813: fix olm.maxOpenShiftVersion float parsing #121
• OPRUN-3904: Add static network policies to govern namespace and controller pod #118
• OPRUN-3861: Webhook support feature flag #119
• OPRUN-3883: Add network-policy support #117
• Full changelog

cluster-openshift-apiserver-operator

• NO-JIRA: operator: annotate image-import-ca configmap with owner #616
• Full changelog

cluster-openshift-controller-manager-operator

• WRKLDS-954: pkg/operator: Remove expired conditional resources #388
• WRKLDS-1676: ocm deployment: Add POD_NAME #386
• WRKLDS-1676: controller manager config: Set leaderElection.name #385
• Full changelog

cluster-storage-operator

• STOR-2330: Add labels to subscribe AWS-EBS CSI driver operator to NPs #584
• STOR-2330: Network Policies for CSI drivers and operators #579
• OSASINFRA-3675: Add credentialRequest for manila namespace #573
• OCPBUGS-56201: improve message template for PodStartupStorageOperationsFailing alert #583
• NO-JIRA: Update openstack approvers #581
• OCPBUGS-54491: sync Azure File permissions with upstream docs #2 #578
• Full changelog

cluster-version-operator

• NO-JIRA: test: remove unnecessary integration tests layers #1202
• NO-JIRA: tests: fix make integration-test target #1203
• NO-JIRA: Add myself as an approver #1201
• OCPBUGS-56114: Fix ImplicitlyEnabledCapabilities #1191
• OTA-1531: [5/x] cvo: read cluster FeatureGate early #1190
• OTA-1403: Update and Verify Test Metadata Using Makefile #1179
• OTA-1531: [4/x] cvo: extract config informer creation #1189
• OTA-1010: Add a new version of GetImplicitlyEnabledCapabilities #1133
• OTA-1531: [3/x] cvo: read version from release metadata on startup #1188
• OTA-1531: [2/x] cvo: refactor LoadUpdate #1185
• OTA-1531: [1/x] cvo: refactor option processing #1184
• OTA-209: Add sync logic to the CVO configuration controller #1170
• OCPBUGS-53062: add the ports Field into the CVO’s container spec #1180
• NO-JIRA: Makefile: verify -> verify-yaml #1183
• Full changelog

configmap-reloader

• ART-13079: append .0 to go.mod version #67
• Full changelog

console

• OCPBUGS-56985: Getting “Oh no something went wrong” error message in web console. #15147
• CONSOLE-4550: Remove usage of Bootstrap grid in Console #15119
• OCPBUGS-56999: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15122
• OCPBUGS-57147: Disable tests A-02-TC02 and A-02-TC05 #15146
• OCPBUGS-56804: clarify verbiage for Lightspeed hide button #15144
• OCPBUGS-56050: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console #15121
• OCPBUGS-56044: fix VirtualizedTable runtime error if sortColumn is no… #15112
• OCPBUGS-56986: Fix runtime error when navigating alert actions #15118
• OCPBUGS-49709: Add useOverlay hook to dynamic plugin SDK and deprecate useModal hook #14707
• OCPBUGS-56179: Add isAllNamespacesKey function to dynamic plugin API #15066
• OCPBUGS-56707: fix bug where Roles list was displaying invalid data f… #15115
• OCPBUGS-56917, OCPBUGS-56922: Remove ExternalLink and Timestamp reexport #15110
• OCPBUGS-56889: Add flags in console static plugin for all the components of this epic #15101
• OCPBUGS-56700: UI for search by label is distorted in topology #15090
• OCPBUGS-55431: Add initialization link annotation support to csv anno… #15020
• OCPBUGS-54185: Helm resource list error in console #15084
• OCPBUGS-56439: Remove duplicate sinkUri code #15085
• OCPBUGS-56137: Added developer getting started card in Admin project overview page #15079
• OCPBUGS-52842: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15092
• OCPBUGS-56628: Fix regression with drawers and modals #15080
• OCPBUGS-56087: Opening Edit Secret modal and saving without changes throws error #15058
• ODC-7722: Remove service binding plugin #15035
• OCPBUGS-55456: Fix and enable web terminal tests #15082
• OCPBUGS-54726: Layout of Welcome to the new OpenShift experience! buttons is wonky on mobile #14951
• OCPBUGS-56353: Initialize log package #15069
• ODC-7797: Expose PodRingSet via Dynamic Plugin SDK #15068
• OCPBUGS-55806: fix bug where AlertItem is missing info icon #15052
• ODC-7782: Test adjustments to perspective merge #14970
• OCPBUGS-54434: Update vSphere configuration form to support CM YAML f… #15065
• OCPBUGS-49291: Set proper type for the CSP field for the serverconfig #15064
• OCPBUGS-56410: Recognize Detached BMH status #15056
• ODC-7786: Add flags in console static plugin for all the components of this epic #14992
• OCPBUGS-54195: Enable pipeline tests by installing operator version 1.17 #14903
• CONSOLE-3644: app.jsx -> app.tsx #14997
• OCPBUGS-55368: [knative] Self-provisioner user can not access or create event sources via ODC #15017
• OCPBUGS-55208: Should show default OpenShift Logo for a theme when there is not custom logo set for the theme. #14999
• OCPBUGS-56245: Remove dead code for deployment and deployment config #15054
• OCPBUGS-37977: Refresh console TLS certs at runtime #14971
• OCPBUGS-55419: improve description of the custom logos CLI args #15003
• CONSOLE-4572: classnames -> react-styles #15050
• OCPBUGS-55808: fix cy.createProject command #15026
• OCPBUGS-55896: Refactor Kebab+ActionsMenu to use PF #15028
• OCPBUGS-56039: Update supported languages in Internationalization docs #15046
• OCPBUGS-55919: remove 60 day alert from cluster update modal #15045
• CONSOLE-4550: col-sm-6 => GridItem sm={6} #15014
• OCPBUGS-54234: Fix impersonate group action #14915
• OCPBUGS-46385: fix alignment of Getting Started item icons #15025
• CONSOLE-4393: Update to Node.js® v22 #14841
• OCPBUGS-55412: Wrap ListPageHeader action with a div #15008
• OCPBUGS-55323: Add patternfly/react-topology to shared modules list of dynamic plugin sdk #14993
• OCPBUGS-55430: resolve http Context and Client handling #15009
• OCPBUGS-55629: get go mod tidy to pass #15024
• OCPBUGS-53428: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15001
• OCPBUGS-55375: add data-quickstart-id to quick create button #14998
• OCPBUGS-54157: Sample segment sessions #14990
• OCPBUGS-49291: Improving the DevExp for passing the CSP directives to console per flag + Make use of connect-src and object-src directives #14701
• OCPBUGS-53320: Add DEVCONSOLE_PROXY flag #15006
• OCPBUGS-55633: fix bug where Critical Alerts section cannot be collapsed #15015
• Full changelog

console-operator

• ODC-7790: Remove ODO download link #987
• OCPBUGS-52556: Revert v1alpha1 removal #990
• OCPBUGS-43792: Add plugins order to console config #980
• OCPBUGS-55698: Lift FeatureGate by bumping openshift/api #984
• Full changelog

coredns

• ART-13079: append .0 to go.mod version #132
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• NO-JIRA: OWNERS: Update team osasinfra #326
• OCPBUGS-56028: [cinder-csi-plugin] Don’t report topology capability when –with-topology=False #325
• Full changelog

csi-driver-nfs

• NO-JIRA: OWNERS: Update team osasinfra #155
• Full changelog

docker-builder

• OCPBUGS-56106: S2I build cpu limits observed by assemble are limited to 1 cpu #470
• Full changelog

docker-registry

• OCPBUGS-56483: bump jwt and oauth dependencies #427
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #242
• Full changelog

gcp-machine-controllers

• OCPBUGS-46387: allow instances with unknown quotas to be created #114
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• Revert “TRT-2068: Reintroduce removal of non-suite annotation rules, and fix topology selector” #2329
• TRT-2068: Reintroduce removal of non-suite annotation rules, and fix topology selector #2322
• OCPNODE-3010: openshift-hack: enable userns e2e tests #2239
• TRT-2141: Revert #2299 “TRT-1854: remove annotation rules that don’t relate to suites” #2318
• TRT-1854: remove annotation rules that don’t relate to suites #2299
• OCPBUGS-56436: Bump 4.20 1.32.5 #2308
• CNTRLPLANE-179: apiserver library go bump #2285
• OCPBUGS-55944: UPSTREAM: <carry>: unrevert: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2295
• OCPBUGS-55631: UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes #2288
• NO-JIRA: Fix generation of test names #2296
• OCPBUGS-54208: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2277
• OCPBUGS-54318: UPSTREAM: 131236: RWX tests should create RWX volumes #2279
• OCPBUGS-55945: Bump main 1.32.4 #2292
• TRT-2103: Revert “NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2291
• NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2287
• OCPBUGS-55632: Fix node expansion on older kubelets #2282
• TRT-2066: Use OTE generated labels for skips in test-kubernetes-e2e.sh #2255
• Full changelog

hypershift

• OCPBUGS-55892: make image registry managed identity optional #6127
• CNV-61396: Sync RBAC for expansion support in kubevirt CSI driver #6226
• OCPBUGS-57125: Support deserializing monitoring manifests when RHOBS enabled #6238
• OCPBUGS-56966: Fix ignition server route getting constantly recreated #6225
• OCPBUGS-57125: Support RHOBS when loading cpov2 monitoring manifests by replacing the API group #6228
• OCPBUGS-53259: Reuse hosted cluster release and metadata providers #6095
• OCPBUGS-54720: HCP payload doesn’t respect multiple mirrors #6222
• ARO-15626: Disallow users from setting .spec.managementState to Removed in the image registry operator config on Azure #6013
• NO-JIRA: cpo/oidc: remove validation functions that use default CEL compiler #6221
• NO-JIRA: Create test fixtures for all resources in TestControlPlaneComponents #6216
• OCPBUGS-42938: Support proxy authentication when user/pass is included in URL #6207
• OCPBUGS-30260: Allow setting target node selector for control plane router #3946
• OCPBUGS-56930: test/e2e: fix version gate checks on minor upgrade #6219
• NO-JIRA: Follow up PR from #6192 #6204
• MGMT-20682: Enable disabling of openshift-samples capability #6197
• OCPBUGS-56430: Add DR operations after HC restoration #6195
• CNTRLPLANE-936: fix(tekton): drop multiarch builds on PR #6223
• CNTRLPLANE-844: Delete legacy unused DeploymentConfig code #6210
• CNTRLPLANE-206: Add NetworkPolicy to shared-ingress #6173
• WRKLDS-1676: ocm: Make config compatible with library-go #6203
• NO-JIRA: Fix documentation field name for KubeAPIServerDNSName #6220
• OCPBUGS-56814: PodSecurityConfiguration Kas config render from gate #6213
• OCPBUGS-56777: Move EnsurePSANotPrivileged to AtLeast(t, Version420) #6211
• AUTOSCALE-266: Refactor karpenter-operator and karpenter into v2 components #6187
• CNTRLPLANE-201: feat(shared-ingress): Bump ubi10 out of beta #6200
• OCPBUGS-56492: Fix CatalogSource image check when unauthorized #6192
• CNTRLPLANE-931: update konflux references #6188
• NO-JIRA: Add unit test for reconciling components with a WithManifestAdapter for SA #6191
• NO-JIRA: Fix serviceaccounts with custom adapter not getting pull-secret #6185
• OCPBUGS-56457: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6171
• CNTRLPLANE-905: feat(shared-ingress): add arm64 builds #6175
• CNTRLPLANE-810: Increase imageContentSources slice length validation #6166
• CNTRLPLANE-914: chore(deps): update konflux references #6165
• CNTRLPLANE-905: Red Hat Konflux update hypershift-shared-ingress-main #6174
• CNTRLPLANE-201: feat(shared-ingress): Add el10 Containerfile #6168
• NO-JIRA: Remove ControlPlaneV2 API featuregate #6169
• NO-JIRA: Move ControlPlaneComponent CRD installation to the CLI #6167
• WRKLDS-1676: ocm config: Update leaderElection.name #6156
• CNTRLPLANE-844: Refactor CAPI provider/manager into v2 #6159
• CNTRLPLANE-844: Refactor ControlPlaneOperator into v2 component #6148
• CNTRLPLANE-844: Remove DeploymentConfig usage #6157
• NO-JIRA: Fix TestHostedClusterWatchesEverythingItCreates not working locally #6149
• NO-JIRA: Keep checking for rollouts during upgrade HO test for five minutes #6097
• OCPBUGS-56205: Switch back to rh catalog #6154
• OCPBUGS-56164: Fix HyperShift Operator Enterprise contract konflux pipeline #6138
• OCPBUGS-56011: Configure ClusterServiceLoadBalancerHealthProbeMode a… #6099
• CNTRLPLANE-565: Remove NodePool CapacityReservation API featuregate #6132
• CNTRLPLANE-645: Rename NodeCount flag to Replicas #6094
• CNTRLPLANE-844: Remove unused DeploymentConfig references #6146
• NO-JIRA: test/setup: use case-sensitive prometheusK8s in monitoring config #6150
• NO-JIRA: Increase the content width in the upstream docs #6147
• NO-JIRA: cpov2: fix structured authentication configuration serialization #6135
• CNTRLPLANE-269: Remove legacy machine approver and ign server reconciliation code #6133
• OCPBUGS-55913: Fix Job status returning empty reason and message #6134
• CNTRLPLANE-269: Remove DeploymentConfig usage from cpov2 #5724
• OCPBUGS-37323: MarkPersistentFlagRequired does not work since CLI refactoring #5649
• NO-JIRA: Fix minor issues with Azure HC creation doc #6128
• OCPBUGS-55504: Add postStart hook to kube-apiserver container #6074
• CNTRLPLANE-709: Add ability to limit platform specific resources managed by HostedCluster #6039
• CNTRLPLANE-261: Enable pprof in hosted control plane etcd #6003
• CNTRLPLANE-334: Update KASv2 structured authentication configuration #6119
• CNTRLPLANE-334: Update KAS structured authentication configuration generation logic to use new uid and extra field #6073
• OCPBUGS-54483: Add support for registry root entry only in the IDMS/ICSP #6100
• OCPBUGS-55357: Only build main branch components #6078
• CNTRLPLANE-265: Enable staticcheck linter in golangci-lint #5836
• CNTRLPLANE-740: Add DR for HCP using OADP and Hypershift plugin #6077
• NO-JIRA: bump HO supported version to 4.20 #6006
• CNTRLPLANE-798: ho: changes to ref’ed resources triggers HC reconciliation #6103
• Full changelog

ibmcloud-cluster-api-controllers

• OCPCLOUD-2922: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.11.0 (9369909) into main #113
• OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #111
• NO-JIRA: Do not gitignore files inside vendor #112
• Full changelog

insights-operator

• NO-JIRA: update github.com/openshift/api and openshift/client-go to latest version (#1092) #1092
• feat: add Progressing condition (#1090) #1090
• OCPBUGS-55805 Enhance insights-runtime-extractor errors (#1085) #1085
• OCPBUGS-55804 Report an error when the insights-runtime-extractor is not running (#1086) #1086
• feat: update DataGather condition reasons (#1084) #1084
• feat: ensure the etc-entitlement-pki secret exists (#1082) #1082
• feat: move HTTP status code from condition.Reason to condition.Message (#1083) #1083
• feat: add gatheringDisabled condition (#1078) #1078
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• test: Fix JBoss EAP 8.0 version #45
• test: Fix JBoss EAP 8.0 version #46
• Full changelog

installer

• CORS-3998: Remove base domain from metadata #9711
• OCPBUGS-56616: pkg/types/validation: Validate all SSH public keys #9770
• OCPBUGS-51299: Set default project and location for KMS key manifest #9767
• AGENT-997: Internal dev docs for authentication-authorization #9224
• OCPBUGS-57000: Revert “CORS-3883: Remove user-assigned identity from ARM template” #9766
• SPLAT-2045: [vsphere] promote multi-nic to default #9493
• no-jira: Bump CAPZ Version #9704
• NO-JIRA: openstack docs: Fix type of clusterOSImageProperties #9754
• OCPBUGS-54885: Validate agent diskEncryption fields #9674
• OCPBUGS-54413: Make swift containers removal not fatal for UPI. #9728
• OCPBUGS-56808: Remove configv1.GCPServiceEndpointNameTagManager references #9749
• no-jira: add unit tests for vsphere VIPS/machinenetworks population #9744
• OCPBUGS-56713: update the punctuation #9746
• OCPBUGS-54487: Power VS: Provide detailed error when entered VPCName cannot be found #9634
• CORS-4066: Remove the function to check if multiarch is enabled/allowed #9750
• OCPBUGS-6508: Update Control Plane replica validation for Single Node OpenShift #9048
• CORS-3682: log falsy conditions when CAPI infra/machine provisioning failed #9722
• MGMT-20702, OCPBUGS-56601: Avoid duplicate machine networks #9743
• OCPBUGS-55671: AWS Mutliarch feature gate is enabled by default #9729
• OCPBUGS-55672: Remove MultiArchInstallGCP featuregate #9725
• OCPBUGS-56645: Update RHCOS 4.20 bootimage metadata to 9.6.20250523-0 #9741
• OCPBUGS-56008: Remove unnecessary validation #9739
• OCPBUGS-56268: pkg/types/azure: remove SystemAssignedID docs #9717
• no-jira: Update team osasinfra #9732
• OCPBUGS-56008: don’t expect identity on ASH #9733
• OCPBUGS-56008: default Azure to create VM user-assigned identities #9718
• NO-JIRA: add the instance types which test PASS #9723
• OCPBUGS-55905: Update RHCOS 4.20 bootimage metadata to 9.6.20250513-0 #9720
• OCPBUGS-56262: Added better logging for vSphere destroy #9716
• OCPBUGS-56079: apply fixes for yaml-lint errors #9708
• OCPBUGS-53107: Set appropriate KillMode for systemd services #9562
• OCPBUGS-55683: Pre-create password files for agent installer OVE #9679
• OCPEDGE-1673: [TNF] Render secret manifests from fencing credentials block. #9635
• OCPBUGS-47719: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9693
• OCPBUGS-55817: add Lsv4 and Lasv4 series as tested #9696
• OCPBUGS-55772: Add support for Azure TDX confidential VM type #9691
• no-jira: add jcpowermac to nutanix review/approve groups #9697
• CORS-3960, OCPBUGS-55952: Remove Terraform Build Artifacts #9667
• no-jira: add PeaceRebel (Bipin) to coreos approvers & reviewers list #9687
• OCPBUGS-54502: ensure ctrplane nodes can access bootstrap MCS #9689
• OCPBUGS-54566: Apply defaults then validate confidentialCompute #9637
• OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
• no-jira: fixes to get shellcheck to pass #9669
• OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
• OCPEDGE-1707: Add Disable Certificate Verification API #9640
• no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
• OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
• Full changelog

installer-altinfra

• OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
• no-jira: fixes to get shellcheck to pass #9669
• OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
• OCPEDGE-1707: Add Disable Certificate Verification API #9640
• no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
• OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
• Full changelog

ironic

• METAL-1376: Make sushy support NetworkAdapters #662
• Bug OCPBUGS-55434: Bump sushy to include SuperMicro boot device string workaround #659
• METAL-1344: Do not install sushy-oem-idrac separately #653
• METAL-1345: Install scciclient from source #652
• METAL-1264: Update to latest upstream content #655
• OCPBUGS-55381: Extract files one-by-one in logwatch #654
• Full changelog

ironic-agent

• METAL-1264: Update to latest upstream content #186
• OCPBUGS-55350: collect the entire journal from the host #184
• Full changelog

ironic-machine-os-downloader

• ART-13079: append .0 to go.mod version #101
• Full changelog

keepalived-ipfailover

• OCPBUGS-48318: Change default value for OPENSHIFT_HA_VRRP_ID_OFFSET #206
• Full changelog

kube-rbac-proxy

• NO-JIRA: v0.19.1 #119
• Full changelog

kube-storage-version-migrator

• Fix verify job failure with build-machinery bump #214
• ART-13079: append .0 to go.mod version #212
• Full changelog

machine-api-operator

• OCPBUGS-57018: Fixed test logic for UPI scenario #1375
• OCPBUGS-56923: Revert “SPLAT-2082 - Create e2e for vSphere vm-host zonal feature” #1373
• SPLAT-2082: Create e2e for vSphere vm-host zonal feature #1369
• OCPCLOUD-2717: bump openshift/api #1372
• OCPBUGS-56159: correct aws kms permissions #1370
• OCPBUGS-55461: Changed machineset tests to be serial #1365
• OCPBUGS-55720: fix: use patch for machine/machineset status #1362
• OCPBUGS-55461: Fixes machineset paused condition nil pointer #1361
• OCPBUGS-55461: Revert “Added skip for when config not multi nic” #1363
• Full changelog

machine-config-operator

• OCPBUGS-45459: Remove trailing period from hostnames #4966
• OCPBUGS-56744: Fix typo in MCN’s MachineConfigNodePinnedImageSetsDegraded message #5099
• OCPBUGS-55830: Only update boot disks during GCP boot image updates #5084
• OCPBUGS-55365: Regardless of Pool configuration wait on other sub-controllers to Render #5022
• OCPBUGS-45621: Fix dynamic-system-reserved-calc.sh when only true parameter is used #4733
• NO-JIRA: OWNERS: Update team osasinfra #5066
• OCPBUGS-36859: Support NODEIP_HINT in IPI deployments too #4973
• OCPBUGS-56446: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5067
• OCPBUGS-55681: Give keepalived container chroot cap #5032
• NO-JIRA: operator: use component annotation for ownership #5056
• OCPBUGS-56211: Boot Image Controller should not degrade when golden configmap is slow to update #5051
• OCPBUGS-53390: Fix interrupt state to account for failure correctly #5054
• OCPBUGS-55967: Add hot loop detection in the boot image controller #5037
• OCPBUGS-55439: scope MCD node listers to current node #5015
• OCPBUGS-55770: Compare the osImageURLs for OS validation check #5041
• MCO-1654: Add new runbook for KubeletHealthState to alert #5042
• OCPBUGS-49728: Adapt MCC to use LayeredNodeState and remove LayeredPoolState #4841
• OCPBUGS-54697: error from generateAndValidateRenderedMachineConfig function can be misleading #5033
• OCPNODE-3173: Disable OCI artifact mount by default. #5016
• OCPBUGS-55597: OWNERS: update owners file with current MCO team members #5024
• OCPBUGS-55450: Only populate Status.PinnedImageSets.CurrentGeneration on valid generation value #5023
• OCPBUGS-55327: Bugfix Ignition compression merge #5006
• OCPBUGS-55262: Use auto=start only for IPsec out connections #5017
• OCPBUGS-55713: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5030
• OCPBUGS-52940: AWS Custom-DNS: Update services that run on control plane nodes #4939
• OCPBUGS-41485: Update MCD Log Output to Clarify No Configuration Change #5019
• Full changelog

machine-os-images

• OCPBUGS-55810: Dummy change to force a rebuild for 4.20 #62
• Full changelog

monitoring-plugin

• OU-842: fix: override notistack dependency to avoid conflict #422
• NO-JIRA: chore: Update OWNERS #420
• OU-830: fix: add error boundary to variable dropdown #417
• OCPBUGS-56095: “Negative matcher” is checked by default on Create silence page #414
• OU-712: fix: add missing alertname field to silence alert #413
• OU-794: fix: update monitoring and virtualization routes to avoid overriding console routes #410
• OU-774: bound table scroll and column alignment #402
• RHINENG-17675: feat: add group id to url params #403
• RHINENG-10537: fixed broken delete chip group for incidents filters #401
• OU-197: feature: upgrade react router to v5 compat #400
• OU-745: Check for CSRF change on each fetch cycle #404
• Full changelog

multus-admission-controller

• ART-13079: append .0 to go.mod version #94
• Full changelog

must-gather

• OCPBUGS-52367: Fix collecting IPsec data for upgrade #482
• CORENET-5882: network: gather routeadvertisements.k8s.ovn.org #485
• Full changelog

network-interface-bond-cni

• CNF-17883: Upstream Sync 26052025 #71
• OCPBUGS-54229: Upstream sync 07-05-2025 #67
• NO-JIRA: Add ci-operator file #68
• Full changelog

network-tools

• ART-13079: append .0 to go.mod version #145
• NO-JIRA: Add aurko, comment jakob, remove nadia #143
• NO-JIRA: Fix github epic ID and username matching #142
• Full changelog

networking-console-plugin

• OCPBUGS-56929: Add fileupload translation #245
• OCPBUGS-49386: Fix pod contenxt #246
• CNV-61902: fetch description of terms for popovers #244
• CNV-61827: fix styling issues #243
• CNV-61536: align Modals with PatternFly default #242
• CNV-60062: fix links to upstream documentation #241
• Full changelog

oauth-server

• Use newer build-machinery-go #177
• ART-13079: append .0 to go.mod version #175
• OSASINFRA-3534: Bump Gophercloud to v2 #170
• Full changelog

oc-mirror

• OCPBUGS-55078: skips signature mirroring for rebuilt operator catalogs (#1154) #1154
• OCPBUGS-56009: Bug fix for no release signature found (#1147) #1147
• OCPBUGS-56486: v2/config: allow delete and mirror words (#1164) #1164
• OCPBUGS-56642: update the Dockerfile to work with the 1.23 go.mod (#1159) #1159
• disables the signature verification on operator catalog collection (#1151) #1151
• OCPBUGS-55966: v2/archive: print unarchive progress (#1141) #1141
• OCPBUGS-54443: v2/cli: always remove past archives before m2d (#1144) #1144
• OCPBUGS-56117: Make v2 blockedImages use regular expressions (#1145) #1145
• changes the signature mirroring default to disabled (#1143) #1143
• OCPBUGS-54587: v2: bump containers/common dep to 0.63.0 (#1138) #1138
• CLID-182: Add spinner to release collector mirror to disk or mirror to mirror (#1085) #1085
• no-jira: Disable go workspace and build v2 as a binary (#1078) #1078
• OCPBUGS-55100: implements registries.d file as specified in containers/image docs (#1131) #1131
• OCPBUGS-54220: v2/imgbuilder: use –authfile when set (#1129) #1129
• Full changelog

olm-catalogd, olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #377
• NO-ISSUE: Synchronize From Upstream Repositories #375
• NO-ISSUE: Synchronize From Upstream Repositories #367
• NO-ISSUE: Synchronize From Upstream Repositories #365
• NO-ISSUE: Synchronize From Upstream Repositories #363
• NO-ISSUE: Synchronize From Upstream Repositories #359
• NO-ISSUE: Synchronize From Upstream Repositories #356
• NO-ISSUE: Synchronize From Upstream Repositories #352
• NO-ISSUE: Synchronize From Upstream Repositories #346
• NO-ISSUE: Synchronize From Upstream Repositories #344
• NO-ISSUE: Synchronize From Upstream Repositories #339
• NO-ISSUE: Synchronize From Upstream Repositories #337
• NO-ISSUE: Synchronize From Upstream Repositories #336
• NO-ISSUE: Synchronize From Upstream Repositories #333
• NO-ISSUE: Synchronize from upstream #331
• Full changelog

openshift-apiserver

• NO-JIRA: Add Apache 2.0 License file #523
• OCPBUGS-45729: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.19 #486
• OCPBUGS-56736: Revert “OCPBUGS-38120: project: run validation function when deleting an object” #519
• OCPBUGS-35944: Allow updates to ImageStreams that violate existing LimitRanges #513
• OCPBUGS-35855: Wire dry run option to Image API server operations #511
• OCPBUGS-38120: project: run validation function when deleting an object #508
• OCPBUGS-54458: Fix image reference in TestImageStreamImportQuayIO #509
• Full changelog

openshift-controller-manager

• OCPBUGS-57198: Make the pull secrets volume mounts in build containers read-only. #387
• WRKLDS-1676: pkg/cmd: Add –kubeconfig and –namespace flag #385
• WRKLDS-1676: Delete unused pkg/serviceaccounts #381
• OCPBUGS-52193: legacy image pull secret rollback controller #380
• OCPBUGS-54695: Empty proxy variables are causing issues during the build #373
• Full changelog

openshift-state-metrics

• ART-13079: append .0 to go.mod version #121
• Full changelog

openstack-cluster-api-controllers

• OWNERS: Update team osasinfra #363
• Full changelog

openstack-machine-api-provider

• NO-JIRA: OWNERS: Update team osasinfra #133
• NO-JIRA: Unignore generated files in the vendor directory #134
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Synchronize From Upstream Repositories #1013
• OCPBUGS-56467: Synchronize From Upstream Repositories #1005
• OPRUN-3903, OPRUN-3906, OPRUN-3923, OPRUN-3926: Add NetworkPolicy support to OLMv0 components #1008
• NO-ISSUE: Synchronize From Upstream Repositories #1003
• NO-ISSUE: Synchronize From Upstream Repositories #1002
• NO-ISSUE: Synchronize From Upstream Repositories #1000
• NO-ISSUE: Synchronize From Upstream Repositories #997
• OCPBUGS-53161, OPRUN-3880: Synchronize From Upstream Repositories #996
• Full changelog

operator-marketplace

• NO-ISSUE: (cleanup): Update Owner Alias - remove inactive maintainers #631
• NO-JIRA: OWNERS: Add camilamacedo86 and tmshort as approvers #632
• NO-ISSUE: Bump github.com/operator-framework/api from 0.30.0 to 0.31.0 #627
• NO-ISSUE: (CI) - Add check to avoid we upgrade by mistake the go vers… #625
• NO-ISSUE: Add dependabot k8s and go library groupings #626
• NO-ISSUE: Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 #620
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-56768, OCPBUGS-56769: DownStream Merge [05-28-2025] #2588
• OCPBUGS-52462: Bump OVN to 24.09.2-69.el9fdp #2576
• OCPBUGS-52462: DownStream Merge [05-19-2025] #2577
• Revert “OCPBUGS-55824: Revert “OCPBUGS-44285, OCPBUGS-37733, OCPBUGS-55824, OCPBUGS-54375: Downstream Merge 7th May 2025”” #2568
• OCPBUGS-55824: Revert “OCPBUGS-44285, OCPBUGS-37733, OCPBUGS-55824, OCPBUGS-54375: Downstream Merge 7th May 2025” #2557
• OCPBUGS-37733, OCPBUGS-44285, OCPBUGS-54375, OCPBUGS-55824: Downstream Merge 7th May 2025 #2550
• CORENET-5975: Dockerfile: Unpin OVS and consume the latest from FDP. #2525
• Full changelog

prom-label-proxy

• NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.11.1 #379
• Full changelog

prometheus

• MON-4251: update prometheus to v3.3.1 #252
• Full changelog

stream-coreos, stream-coreos-extensions

• NO-JIRA: faq: add info about querying rpmdb and extensions #1820
• NO-JIRA: bump verison to 4.20 #1804
• NO-JIRA: c9s/c10s repos: use basearch var for extras repo #1819
• NO-JIRA: README.md: add Mermaid diagram #1816
• NO-JIRA: tree: delete base compose files, rework README #1811
• NO-JIRA: Remove kernel-rt-kvm for cs9 and cs10 #1814
• NO-JIRA: tests: fix RHEL 10.1 handling in kernel replace test #1813
• Full changelog

telemeter

• ART-13079: append .0 to go.mod version #559
• OCPBUGS-56425: Accept and discard metadata requests over remote write #558
• NO-JIRA: README.md: fix command to create an auth token #557
• Full changelog

tests

• MCO-1652: Add MCO disruptive suite #29776
• OCPBUGS-56786: RouteExternalCertificate : Add fix for None platform type #29868
• OCPBUGS-56512: updates ruby to version 3.3 #29832
• OCPBUGS-57049: TLS registry: refactor testcase annotations #29327
• OCPBUGS-49441: Use different certificates for gRPC interoperability test routes #29757
• OCPBUGS-56436: Bump 4.20 1.32.5 #29889
• TRT-1854: set network for MicroShift to OVNKubernetes #29887
• add smg247 as root approver #29860
• OCPBUGS-56037: Stabilize custom MCP cleanup on MCN tests #29874
• Revert “OCPNODE-2849: Add testcase to verify removal of cgroupv1 in OCP 4.19” #29886
• OCPBUGS-56698: Skip tests modifying cluster/network.config when it is not permitted #29859
• OCPBUGS-54412: Do not retry extension-sourced tests #29867
• OCPBUGS-35855: Add dry-run server test for imagestreamtag #29834
• OCPBUGS-56933: fix deployment rollout wait to wait for desired replicas #29876
• SPLAT-2231: Updated tests to work with hybrid environments #29827
• MCO-1722: Handle check for Disconnnected Clusters for PIS Testing using curl #29870
• OCPBUGS-55830: Only update boot disks during GCP boot image updates tests #29869
• Add oceanc80 to olm owners #29864
• NO-JIRA: OVNK BGP: workaround OCPBUGS-56488 #29853
• OCPBUGS-56743: Poll project deletion to fix flaky behavior #29850
• OCPEDGE-1922: feat: rename and move arbiter tests #29846
• CNTRLPLANE-353: Add test which verifes that only short duration tests are present #29629
• NO-JIRA: ovn, virt, skip ipv6 for secondaries #29858
• OCPBUGS-55721, OCPBUGS-55832: Fix RouteExternalCertificate tests for few other on-prem jobs #29764
• ODC-7790: Remove ODODownloadsSyncDegraded #29835
• NO-JIRA: router: Rename MarshalPrivateKeyToDERFormat to MarshalPrivateKeyToPEMString #29855
• NO-JIRA: OVNK: ignore stderr when running commands #29845
• NO-JIRA: OVNK BGP: set VRF-Lite timeout #29844
• MULTIARCH-5390: tagimportmode: Do not skip tests if the import mode is the same as the import mode of the cluster #29801
• OCPBUGS-56381: feat: update test to account for two node fencing #29807
• MCO-1652: Add new MCO disruptive suite #29800
• NE-2031: Enhancing the gateway controller test cases with two more function #29806
• OCPBUGS-55394: Handle Metal CI test cases for PIS #29745
• NO-JIRA: ovn, virt: Support proxy when downloading virtctl #29824
• OCPBUGS-56196: Check to see if SamplesOperator managementState is Removed #29817
• NO-JIRA: TLS registry update #29787
• OCPNODE-3138: Add zstd:chunked image test #29713
• OCPNODE-2849: Add testcase to verify removal of cgroupv1 in OCP 4.19 #29640
• OCPBUGS-56047: OLMv1: Update test bundles [main/release-4.20] #29820
• NO-JIRA: tls/violations: add sjenning to OWNERS #29819
• NO-JIRA: ovnk, virt: Filter out ipv6 LLA #29816
• NO-JIRA: Fix egressIP advertisements tests flake #29803
• MCO-1615: Mco node degraded mcn condition #29684
• NO-JIRA: Report back source for openshift-tests-extension #29733
• TRT-2061: throttle monitor startup refactor #29637
• OCPBUGS-55317: Skip GatewayAPIController tests on clusters without OLM capabilities #29784
• CORS-3989: set proxy for http transport in router and imageregistry cases #29759
• NO-JIRA: Revert: NO-JIRA: support skipping [OCP]FeatureGate… #29796
• OCPBUGS-55211: use regular user to create httproute #29697
• Revert “Revert “TRT-2049: check for any watch requests”” #29723
• CORENET-5854: networking: add VRF-Lite test cases #29669
• OCPEDGE-1678: Fix failed etcd test on arbiter ci run #29694
• NO-JIRA: update networking owners #29786
• NO-JIRA: increase api client timeout to match those allowed by kube-apiserver #29761
• NO-JIRA: support skipping [OCP]FeatureGate tests #29760
• OCPBUGS-55384: OCPBUGS-55968: Fix PIS tests on SNO & Enable applicable MCN & PIS tests on SNO #29785
• OCPNODE-2315: Add nested container test #29781
• OCPBUGS-55994: Do not set the MTU when using NetworkAttachementDefinition #29768
• NO-JIRA: Test load balancer metrics #29675
• NO-JIRA: Fix bearer token exposure in exit condition as well #29575
• NO-ISSUE: Automated - Update synthetic test data #29716
• TRT-2106: Fix race in MCN test cleanup #29775
• OCPBUGS-55785: bump limits #29778
• Revert “OCPNODE-2315: Add nested container test” #29779
• CNTRLPLANE-371: Update etcd test data for k8s 1.33 release (missing data) #29773
• OCPBUGS-55712: (olmv1 tests) Use exponential backoffs for verifyAPIEndpoints #29756
• OCPBUGS-55945: Bump main 1.32.4 #29772
• CORENET-5875, CORENET-5876, OCPBUGS-55910: Add EgressIP and L2 UDN route advertisements tests #29727
• OCPNODE-2315: Add nested container test #29594
• NO-JIRA: faultyloadbalancer test: pass instead of skip #29753
• OCPBUGS-55902: pkg/monitortestlibrary/allowedalerts: Ignore KubeJobFailingSRE for now #29747
• NO-ISSUE: OLMv1: Preflight: Relax checking of error message #29766
• CNTRLPLANE-371: Update etcd test data for k8s 1.33 release #29699
• OCPBUGS-55785: bump limits #29763
• OCPNODE-2999: Add SigstoreImageVerification e2e tests #29652
• OKD-243: Skip GatewayAPIController tests for OKD #29742
• Full changelog

vsphere-cloud-controller-manager

• OCPBUGS-56720: gitignore doesn’t ignore certain files in vendor/ #91
• Full changelog

vsphere-cluster-api-controllers

• OCPCLOUD-2921: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.13.0 (7cc3899) into master #58
• NO-JIRA: Do not gitignore files inside vendor #57
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-55020: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #142
• Full changelog

vsphere-problem-detector

• OCPBUGS-53217: replace operator client #182
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.32.4-1.el9s
• kernel-5.14.0-585.el9
• openshift-kubelet-4.20.0-202505200845.p0.g10466b2.assembly.stream.el9
• systemd-252-53.el9

Full list (569 packages)

• NetworkManager-1:1.53.4-1.el9
• NetworkManager-cloud-setup-1:1.53.4-1.el9
• NetworkManager-libnm-1:1.53.4-1.el9
• NetworkManager-ovs-1:1.53.4-1.el9
• NetworkManager-team-1:1.53.4-1.el9
• NetworkManager-tui-1:1.53.4-1.el9
• WALinuxAgent-udev-2.7.0.6-13.el9
• aardvark-dns-2:1.14.0-3.el9
• acl-2.3.1-4.el9
• adcli-0.9.2-1.el9
• afterburn-5.8.2-1.el9
• afterburn-dracut-5.8.2-1.el9
• alternatives-1.24-2.el9
• attr-2.5.1-3.el9
• audit-3.1.5-7.el9
• audit-libs-3.1.5-7.el9
• authselect-1.2.6-3.el9
• authselect-libs-1.2.6-3.el9
• avahi-libs-0.8-22.el9
• basesystem-11-13.el9
• bash-5.1.8-9.el9
• bash-completion-1:2.11-5.el9
• bind-libs-32:9.16.23-28.el9
• bind-license-32:9.16.23-28.el9
• bind-utils-32:9.16.23-28.el9
• binutils-2.35.2-63.el9
• binutils-gold-2.35.2-63.el9
• bootc-1.1.7-1.el9
• bootupd-0.2.27-3.el9
• bsdtar-3.5.3-4.el9
• bubblewrap-0.4.1-8.el9
• bzip2-1.0.8-10.el9
• bzip2-libs-1.0.8-10.el9
• c-ares-1.19.1-2.el9
• ca-certificates-2024.2.69_v8.0.303-91.4.el9
• centos-gpg-keys-9.0-28.el9
• centos-release-cloud-1-1.el9s
• centos-release-nfv-common-1-5.el9s
• centos-release-virt-common-1-4.el9s
• centos-stream-release-9.0-28.el9
• centos-stream-repos-9.0-28.el9
• checkpolicy-3.6-1.el9
• chrony-4.6.1-1.el9
• cifs-utils-7.2-1.el9
• clevis-21-208.el9
• clevis-dracut-21-208.el9
• clevis-luks-21-208.el9
• clevis-systemd-21-208.el9
• cloud-utils-growpart-0.33-1.el9
• composefs-1.0.8-1.el9
• composefs-libs-1.0.8-1.el9
• conmon-3:2.1.13-1.el9
• conmon-rs-0.6.6-2.el9s
• conntrack-tools-1.4.7-4.el9
• console-login-helper-messages-0.21.3-1.el9
• console-login-helper-messages-issuegen-0.21.3-1.el9
• console-login-helper-messages-profile-0.21.3-1.el9
• container-selinux-4:2.237.0-1.el9
• containernetworking-plugins-1:1.7.1-1.el9
• containers-common-2:1-130.el9
• coreos-installer-0.24.0-1.el9
• coreos-installer-bootinfra-0.24.0-1.el9
• coreutils-8.32-39.el9
• coreutils-common-8.32-39.el9
• cpio-2.13-16.el9
• cracklib-2.9.6-27.el9
• cracklib-dicts-2.9.6-27.el9
• cri-o-1.32.4-1.el9s
• cri-tools-1.33.0-2.el9s
• criu-3.19-3.el9
• criu-libs-3.19-3.el9
• crun-1.21-1.el9
• crypto-policies-20250128-1.git5269e22.el9
• crypto-policies-scripts-20250128-1.git5269e22.el9
• cryptsetup-2.7.2-3.el9
• cryptsetup-libs-2.7.2-3.el9
• curl-7.76.1-31.el9
• cyrus-sasl-gssapi-2.1.27-21.el9
• cyrus-sasl-lib-2.1.27-21.el9
• dbus-1:1.12.20-8.el9
• dbus-broker-28-7.el9
• dbus-common-1:1.12.20-8.el9
• dbus-libs-1:1.12.20-8.el9
• dbus-tools-1:1.12.20-8.el9
• device-mapper-9:1.02.202-6.el9
• device-mapper-event-9:1.02.202-6.el9
• device-mapper-event-libs-9:1.02.202-6.el9
• device-mapper-libs-9:1.02.202-6.el9
• device-mapper-multipath-0.8.7-37.el9
• device-mapper-multipath-libs-0.8.7-37.el9
• device-mapper-persistent-data-1.1.0-1.el9
• diffutils-3.7-12.el9
• dmidecode-1:3.6-1.el9
• dnf-4.14.0-29.el9
• dnf-data-4.14.0-29.el9
• dnsmasq-2.85-16.el9
• dosfstools-4.2-3.el9
• dracut-057-87.git20250311.el9
• dracut-network-057-87.git20250311.el9
• dracut-squash-057-87.git20250311.el9
• e2fsprogs-1.46.5-7.el9
• e2fsprogs-libs-1.46.5-7.el9
• efi-filesystem-6-2.el9
• efibootmgr-16-12.el9
• efivar-libs-38-3.el9
• elfutils-debuginfod-client-0.193-1.el9
• elfutils-default-yama-scope-0.193-1.el9
• elfutils-libelf-0.193-1.el9
• elfutils-libs-0.193-1.el9
• ethtool-2:6.11-1.el9
• expat-2.5.0-5.el9
• file-5.39-16.el9
• file-libs-5.39-16.el9
• filesystem-3.16-5.el9
• findutils-1:4.8.0-7.el9
• firewalld-filesystem-1.3.4-9.el9
• flashrom-1.2-10.el9
• fstrm-0.6.1-3.el9
• fuse-2.9.9-17.el9
• fuse-common-3.10.2-9.el9
• fuse-libs-2.9.9-17.el9
• fuse-overlayfs-1.15-1.el9
• fuse3-3.10.2-9.el9
• fuse3-libs-3.10.2-9.el9
• fwupd-1.9.26-1.el9
• fwupd-plugin-flashrom-1.9.26-1.el9
• gawk-5.1.0-6.el9
• gawk-all-langpacks-5.1.0-6.el9
• gdbm-libs-1:1.23-1.el9
• gdisk-1.0.7-5.el9
• geolite2-city-20191217-6.el9
• geolite2-country-20191217-6.el9
• gettext-0.21-8.el9
• gettext-libs-0.21-8.el9
• git-core-2.47.1-2.el9
• glib2-2.68.4-16.el9
• glibc-2.34-192.el9
• glibc-common-2.34-192.el9
• glibc-gconv-extra-2.34-192.el9
• glibc-minimal-langpack-2.34-192.el9
• glusterfs-6.0-57.4.el9
• glusterfs-client-xlators-6.0-57.4.el9
• glusterfs-fuse-6.0-57.4.el9
• glusterfs-libs-6.0-57.4.el9
• gmp-1:6.2.0-13.el9
• gnupg2-2.3.3-4.el9
• gnutls-3.8.3-6.el9
• gobject-introspection-1.68.0-11.el9
• gpgme-1.15.1-6.el9
• grep-3.6-5.el9
• groff-base-1.22.4-10.el9
• grub2-common-1:2.06-107.el9
• grub2-efi-x64-1:2.06-107.el9
• grub2-pc-1:2.06-107.el9
• grub2-pc-modules-1:2.06-107.el9
• grub2-tools-1:2.06-107.el9
• grub2-tools-minimal-1:2.06-107.el9
• gssproxy-0.8.4-7.el9
• gzip-1.12-1.el9
• hostname-3.23-6.el9
• hwdata-0.348-9.18.el9
• ignition-2.21.0-1.el9
• ignition-grub-2.21.0-1.el9
• ima-evm-utils-1.6.2-1.el9
• info-6.7-15.el9
• inih-49-6.el9
• initscripts-service-10.11.8-4.el9
• ipcalc-1.0.0-5.el9
• iproute-6.11.0-1.el9
• iproute-tc-6.11.0-1.el9
• iptables-libs-1.8.10-11.el9
• iptables-nft-1.8.10-11.el9
• iputils-20210202-11.el9
• irqbalance-2:1.9.4-2.el9
• iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
• iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
• isns-utils-libs-0.101-4.el9
• jansson-2.14-1.el9
• jose-14-1.el9
• jq-1.6-17.el9
• json-c-0.14-11.el9
• json-glib-1.6.6-1.el9
• kbd-2.4.0-11.el9
• kbd-legacy-2.4.0-11.el9
• kbd-misc-2.4.0-11.el9
• kernel-5.14.0-585.el9
• kernel-core-5.14.0-585.el9
• kernel-modules-5.14.0-585.el9
• kernel-modules-core-5.14.0-585.el9
• kernel-modules-extra-5.14.0-585.el9
• kexec-tools-2.0.29-7.el9
• keyutils-1.6.3-1.el9
• keyutils-libs-1.6.3-1.el9
• kmod-28-10.el9
• kmod-libs-28-10.el9
• kpartx-0.8.7-37.el9
• krb5-libs-1.21.1-6.el9
• less-590-5.el9
• libacl-2.3.1-4.el9
• libaio-0.3.111-13.el9
• libarchive-3.5.3-4.el9
• libassuan-2.5.5-3.el9
• libattr-2.5.1-3.el9
• libbasicobjects-0.1.1-53.el9
• libblkid-2.37.4-21.el9
• libbpf-2:1.5.0-1.el9
• libbrotli-1.0.9-7.el9
• libcap-2.48-9.el9
• libcap-ng-0.8.2-7.el9
• libcbor-0.7.0-5.el9
• libcollection-0.7.0-53.el9
• libcom_err-1.46.5-7.el9
• libcomps-0.1.18-1.el9
• libcurl-7.76.1-31.el9
• libdaemon-0.14-23.el9
• libdb-5.3.28-57.el9
• libdhash-0.5.0-53.el9
• libdnf-0.69.0-14.el9
• libdnf-plugin-subscription-manager-1.29.46-1.el9
• libdrm-2.4.123-2.el9
• libeconf-0.4.1-4.el9
• libedit-3.1-38.20210216cvs.el9
• libev-4.33-6.el9
• libevent-2.1.12-8.el9
• libfdisk-2.37.4-21.el9
• libffi-3.4.2-8.el9
• libfido2-1.13.0-2.el9
• libgcc-11.5.0-5.el9
• libgcrypt-1.10.0-11.el9
• libgomp-11.5.0-5.el9
• libgpg-error-1.42-5.el9
• libgudev-237-1.el9
• libgusb-0.3.8-2.el9
• libibverbs-54.0-1.el9
• libicu-67.1-9.el9
• libidn2-2.3.0-7.el9
• libini_config-1.3.1-53.el9
• libipa_hbac-2.9.6-4.el9.2
• libjcat-0.1.6-3.el9
• libjose-14-1.el9
• libkcapi-1.4.0-2.el9
• libkcapi-hmaccalc-1.4.0-2.el9
• libksba-1.5.1-7.el9
• libldb-4.21.3-3.el9
• libluksmeta-9-12.el9
• libmaxminddb-1.5.2-4.el9
• libmicrohttpd-1:0.9.72-5.el9
• libmnl-1.0.4-16.el9
• libmodulemd-2.13.0-2.el9
• libmount-2.37.4-21.el9
• libmspack-0.10.1-0.7.alpha.el9
• libndp-1.9-1.el9
• libnet-1.2-7.el9
• libnetfilter_conntrack-1.0.9-1.el9
• libnetfilter_cthelper-1.0.0-22.el9
• libnetfilter_cttimeout-1.0.0-19.el9
• libnetfilter_queue-1.0.5-1.el9
• libnfnetlink-1.0.1-23.el9
• libnfsidmap-1:2.5.4-37.el9
• libnftnl-1.2.6-4.el9
• libnghttp2-1.43.0-6.el9
• libnl3-3.11.0-1.el9
• libnl3-cli-3.11.0-1.el9
• libnvme-1.13-1.el9
• libpath_utils-0.2.1-53.el9
• libpcap-14:1.10.0-4.el9
• libpciaccess-0.16-7.el9
• libpkgconf-1.7.3-10.el9
• libpsl-0.21.1-5.el9
• libpwquality-1.4.4-8.el9
• libref_array-0.1.5-53.el9
• librepo-1.14.5-2.el9
• libreport-filesystem-2.15.2-6.el9
• libseccomp-2.5.2-2.el9
• libselinux-3.6-3.el9
• libselinux-utils-3.6-3.el9
• libsemanage-3.6-5.el9
• libsepol-3.6-3.el9
• libsigsegv-2.13-4.el9
• libslirp-4.4.0-8.el9
• libsmartcols-2.37.4-21.el9
• libsmbclient-4.21.3-3.el9
• libsolv-0.7.24-3.el9
• libss-1.46.5-7.el9
• libssh-0.10.4-13.el9
• libssh-config-0.10.4-13.el9
• libsss_certmap-2.9.6-4.el9.2
• libsss_idmap-2.9.6-4.el9.2
• libsss_nss_idmap-2.9.6-4.el9.2
• libsss_sudo-2.9.6-4.el9.2
• libstdc++-11.5.0-5.el9
• libtalloc-2.4.2-1.el9
• libtasn1-4.16.0-9.el9
• libtdb-1.4.12-1.el9
• libteam-1.31-16.el9
• libtevent-0.16.1-1.el9
• libtirpc-1.3.3-9.el9
• libtool-ltdl-2.4.6-46.el9
• libunistring-0.9.10-15.el9
• liburing-2.5-1.el9
• libusbx-1.0.26-1.el9
• libuser-0.63-16.el9
• libutempter-1.2.1-6.el9
• libuuid-2.37.4-21.el9
• libuv-1:1.42.0-2.el9
• libverto-0.3.2-3.el9
• libverto-libev-0.3.2-3.el9
• libwbclient-4.21.3-3.el9
• libxcrypt-4.4.18-3.el9
• libxcrypt-compat-4.4.18-3.el9
• libxml2-2.9.13-9.el9
• libxmlb-0.3.10-1.el9
• libxslt-1.1.34-12.el9
• libyaml-0.2.5-7.el9
• libzstd-1.5.5-1.el9
• linux-firmware-20250513-152.el9
• linux-firmware-whence-20250513-152.el9
• lmdb-libs-0.9.29-3.el9
• logrotate-3.18.0-9.el9
• lsof-4.94.0-3.el9
• lua-libs-5.4.4-4.el9
• luksmeta-9-12.el9
• lvm2-9:2.03.28-6.el9
• lvm2-libs-9:2.03.28-6.el9
• lz4-libs-1.9.3-5.el9
• lzo-2.10-7.el9
• mdadm-4.3-4.el9
• microcode_ctl-4:20250211-1.el9
• mokutil-2:0.7.2-1.el9
• mpfr-4.1.0-7.el9
• nano-5.6.1-7.el9
• ncurses-6.2-10.20210508.el9
• ncurses-base-6.2-10.20210508.el9
• ncurses-libs-6.2-10.20210508.el9
• net-tools-2.0-0.64.20160912git.el9
• netavark-2:1.14.0-1.el9
• nettle-3.10.1-1.el9
• newt-0.52.21-11.el9
• nfs-utils-1:2.5.4-37.el9
• nftables-1:1.0.9-3.el9
• nmap-ncat-3:7.92-3.el9
• nmstate-2.2.44-1.el9
• npth-1.6-8.el9
• nss-altfiles-2.18.1-20.el9
• numactl-libs-2.0.19-1.el9
• nvme-cli-2.13-1.el9
• oniguruma-6.9.6-1.el9.6
• open-vm-tools-12.5.0-1.el9
• openldap-2.6.8-4.el9
• openshift-clients-4.20.0-202505231112.p0.g46e27e8.assembly.stream.el9
• openshift-kubelet-4.20.0-202505200845.p0.g10466b2.assembly.stream.el9
• openssh-8.7p1-45.el9
• openssh-clients-8.7p1-45.el9
• openssh-server-8.7p1-45.el9
• openssl-1:3.5.0-2.el9
• openssl-libs-1:3.5.0-2.el9
• openvswitch-selinux-extra-policy-1.0-36.el9s
• openvswitch3.5-3.5.0-22.el9s
• os-prober-1.77-12.el9
• ose-aws-ecr-image-credential-provider-4.20.0-202503251340.p0.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.20.0-202504231110.p0.g7109d6b.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.20.0-202503251340.p0.gd8d3aeb.assembly.stream.el9
• ostree-2025.2-1.el9
• ostree-grub2-2025.2-1.el9
• ostree-libs-2025.2-1.el9
• p11-kit-0.25.3-3.el9
• p11-kit-trust-0.25.3-3.el9
• pam-1.5.1-23.el9
• passt-0^20250415.g8ec1341-1.el9
• passt-selinux-0^20250415.g8ec1341-1.el9
• passwd-0.80-12.el9
• pciutils-3.7.0-7.el9
• pciutils-libs-3.7.0-7.el9
• pcre-8.44-4.el9
• pcre2-10.40-6.el9
• pcre2-syntax-10.40-6.el9
• perl-AutoLoader-5.74-481.el9
• perl-B-1.80-481.el9
• perl-Carp-1.50-460.el9
• perl-Class-Struct-0.66-481.el9
• perl-Data-Dumper-2.174-462.el9
• perl-Digest-1.19-4.el9
• perl-Digest-MD5-2.58-4.el9
• perl-Encode-4:3.08-462.el9
• perl-Errno-1.30-481.el9
• perl-Exporter-5.74-461.el9
• perl-Fcntl-1.13-481.el9
• perl-File-Basename-2.85-481.el9
• perl-File-Path-2.18-4.el9
• perl-File-Temp-1:0.231.100-4.el9
• perl-File-stat-1.09-481.el9
• perl-FileHandle-2.03-481.el9
• perl-Getopt-Long-1:2.52-4.el9
• perl-Getopt-Std-1.12-481.el9
• perl-HTTP-Tiny-0.076-462.el9
• perl-IO-1.43-481.el9
• perl-IO-Socket-IP-0.41-5.el9
• perl-IO-Socket-SSL-2.073-2.el9
• perl-IPC-Open3-1.21-481.el9
• perl-MIME-Base64-3.16-4.el9
• perl-Mozilla-CA-20200520-6.el9
• perl-NDBM_File-1.15-481.el9
• perl-Net-SSLeay-1.94-1.el9
• perl-POSIX-1.94-481.el9
• perl-PathTools-3.78-461.el9
• perl-Pod-Escapes-1:1.07-460.el9
• perl-Pod-Perldoc-3.28.01-461.el9
• perl-Pod-Simple-1:3.42-4.el9
• perl-Pod-Usage-4:2.01-4.el9
• perl-Scalar-List-Utils-4:1.56-462.el9
• perl-SelectSaver-1.02-481.el9
• perl-Socket-4:2.031-4.el9
• perl-Storable-1:3.21-460.el9
• perl-Symbol-1.08-481.el9
• perl-Term-ANSIColor-5.01-461.el9
• perl-Term-Cap-1.17-460.el9
• perl-Text-ParseWords-3.30-460.el9
• perl-Text-Tabs+Wrap-2013.0523-460.el9
• perl-Time-Local-2:1.300-7.el9
• perl-URI-5.09-3.el9
• perl-base-2.27-481.el9
• perl-constant-1.33-461.el9
• perl-if-0.60.800-481.el9
• perl-interpreter-4:5.32.1-481.el9
• perl-libnet-3.13-4.el9
• perl-libs-4:5.32.1-481.el9
• perl-mro-1.23-481.el9
• perl-overload-1.31-481.el9
• perl-overloading-0.02-481.el9
• perl-parent-1:0.238-460.el9
• perl-podlators-1:4.14-460.el9
• perl-subs-1.03-481.el9
• perl-vars-1.05-481.el9
• pigz-2.5-4.el9
• pkgconf-1.7.3-10.el9
• pkgconf-m4-1.7.3-10.el9
• pkgconf-pkg-config-1.7.3-10.el9
• podman-5:5.4.0-7.el9
• policycoreutils-3.6-3.el9
• policycoreutils-python-utils-3.6-3.el9
• polkit-0.117-13.el9
• polkit-libs-0.117-13.el9
• polkit-pkla-compat-0.1-21.el9
• popt-1.18-8.el9
• procps-ng-3.3.17-14.el9
• protobuf-c-1.3.3-13.el9
• psmisc-23.4-3.el9
• publicsuffix-list-dafsa-20210518-3.el9
• python-unversioned-command-3.9.21-2.el9
• python3-3.9.21-2.el9
• python3-audit-3.1.5-7.el9
• python3-chardet-4.0.0-5.el9
• python3-cloud-what-1.29.46-1.el9
• python3-dateutil-1:2.8.1-7.el9
• python3-dbus-1.2.18-2.el9
• python3-decorator-4.4.2-6.el9
• python3-distro-1.5.0-7.el9
• python3-dnf-4.14.0-29.el9
• python3-dnf-plugin-versionlock-4.3.0-21.el9
• python3-dnf-plugins-core-4.3.0-21.el9
• python3-gobject-base-3.40.1-6.el9
• python3-gobject-base-noarch-3.40.1-6.el9
• python3-gpg-1.15.1-6.el9
• python3-hawkey-0.69.0-14.el9
• python3-idna-2.10-7.el9.1
• python3-iniparse-0.4-45.el9
• python3-inotify-0.9.6-25.el9
• python3-libcomps-0.1.18-1.el9
• python3-libdnf-0.69.0-14.el9
• python3-librepo-1.14.5-2.el9
• python3-libs-3.9.21-2.el9
• python3-libselinux-3.6-3.el9
• python3-libsemanage-3.6-5.el9
• python3-pip-wheel-21.3.1-1.el9
• python3-policycoreutils-3.6-3.el9
• python3-pysocks-1.7.1-12.el9
• python3-pyyaml-5.4.1-6.el9
• python3-requests-2.25.1-9.el9
• python3-rpm-4.16.1.3-37.el9
• python3-setools-4.4.4-1.el9
• python3-setuptools-53.0.0-14.el9
• python3-setuptools-wheel-53.0.0-14.el9
• python3-six-1.15.0-9.el9
• python3-subscription-manager-rhsm-1.29.46-1.el9
• python3-systemd-234-19.el9
• python3-urllib3-1.26.5-6.el9
• qemu-guest-agent-17:9.1.0-20.el9
• quota-1:4.09-4.el9
• quota-nls-1:4.09-4.el9
• rdma-core-54.0-1.el9
• readline-8.1-4.el9
• rpcbind-1.2.6-7.el9
• rpm-4.16.1.3-37.el9
• rpm-build-libs-4.16.1.3-37.el9
• rpm-libs-4.16.1.3-37.el9
• rpm-ostree-2025.8-1.el9
• rpm-ostree-libs-2025.8-1.el9
• rpm-plugin-selinux-4.16.1.3-37.el9
• rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
• rpm-sign-libs-4.16.1.3-37.el9
• rsync-3.2.5-3.el9
• runc-4:1.3.0-1.el9
• samba-client-libs-4.21.3-3.el9
• samba-common-4.21.3-3.el9
• samba-common-libs-4.21.3-3.el9
• sed-4.8-9.el9
• selinux-policy-38.1.56-1.el9
• selinux-policy-targeted-38.1.56-1.el9
• setup-2.13.7-10.el9
• sg3_utils-1.47-10.el9
• sg3_utils-libs-1.47-10.el9
• shadow-utils-2:4.9-12.el9
• shadow-utils-subid-2:4.9-12.el9
• shared-mime-info-2.1-5.el9
• shim-x64-15-15.el8_2
• skopeo-2:1.18.1-3.el9
• slang-2.3.2-11.el9
• slirp4netns-1.3.2-1.el9
• snappy-1.1.8-8.el9
• socat-1.7.4.1-6.el9
• sqlite-libs-3.34.1-7.el9
• squashfs-tools-4.4-10.git1.el9
• ssh-key-dir-0.1.4-1.el9
• sssd-2.9.6-4.el9.2
• sssd-ad-2.9.6-4.el9.2
• sssd-client-2.9.6-4.el9.2
• sssd-common-2.9.6-4.el9.2
• sssd-common-pac-2.9.6-4.el9.2
• sssd-ipa-2.9.6-4.el9.2
• sssd-krb5-2.9.6-4.el9.2
• sssd-krb5-common-2.9.6-4.el9.2
• sssd-ldap-2.9.6-4.el9.2
• sssd-nfs-idmap-2.9.6-4.el9.2
• sssd-proxy-2.9.6-4.el9.2
• stalld-1.19.6-1.el9
• strace-6.12-1.el9
• subscription-manager-1.29.46-1.el9
• subscription-manager-rhsm-certificates-20220623-1.el9
• sudo-1.9.5p2-12.el9
• systemd-252-53.el9
• systemd-journal-remote-252-53.el9
• systemd-libs-252-53.el9
• systemd-pam-252-53.el9
• systemd-rpm-macros-252-53.el9
• systemd-udev-252-53.el9
• tar-2:1.34-7.el9
• teamd-1.31-16.el9
• tmux-3.2a-5.el9
• toolbox-0.1.1-1.el9
• tpm2-tools-5.2-6.el9
• tpm2-tss-3.2.3-1.el9
• tzdata-2025b-1.el9
• unbound-libs-1.16.2-18.el9
• usermode-1.114-6.el9
• userspace-rcu-0.12.1-6.el9
• util-linux-2.37.4-21.el9
• util-linux-core-2.37.4-21.el9
• vim-minimal-2:8.2.2637-22.el9
• virt-what-1.27-2.el9
• which-2.21-29.el9
• xfsprogs-6.4.0-7.el9
• xmlsec1-1.2.29-13.el9
• xmlsec1-openssl-1.2.29-13.el9
• xz-5.2.5-8.el9
• xz-libs-5.2.5-8.el9
• yajl-2.1.0-25.el9
• zlib-1.2.11-41.el9
• zram-generator-0.3.2-7.el9
• zstd-1.5.5-1.el9

Changed:

• NetworkManager 1:1.53.3-1.el9 → 1:1.53.4-1.el9
• NetworkManager-cloud-setup 1:1.53.3-1.el9 → 1:1.53.4-1.el9
• NetworkManager-libnm 1:1.53.3-1.el9 → 1:1.53.4-1.el9
• NetworkManager-ovs 1:1.53.3-1.el9 → 1:1.53.4-1.el9
• NetworkManager-team 1:1.53.3-1.el9 → 1:1.53.4-1.el9
• NetworkManager-tui 1:1.53.3-1.el9 → 1:1.53.4-1.el9
• afterburn 5.7.0-1.el9 → 5.8.2-1.el9
• afterburn-dracut 5.7.0-1.el9 → 5.8.2-1.el9
• avahi-libs 0.8-21.el9 → 0.8-22.el9
• centos-gpg-keys 9.0-26.el9 → 9.0-28.el9
• centos-stream-release 9.0-26.el9 → 9.0-28.el9
• centos-stream-repos 9.0-26.el9 → 9.0-28.el9
• cri-o 1.32.2-1.el9s → 1.32.4-1.el9s
• cri-tools 1.32.0-2.el9s → 1.33.0-2.el9s
• criu 3.19-1.el9 → 3.19-3.el9
• criu-libs 3.19-1.el9 → 3.19-3.el9
• expat 2.5.0-4.el9 → 2.5.0-5.el9
• fuse-overlayfs 1.14-1.el9 → 1.15-1.el9
• git-core 2.47.1-1.el9 → 2.47.1-2.el9
• glibc 2.34-188.el9 → 2.34-192.el9
• glibc-common 2.34-188.el9 → 2.34-192.el9
• glibc-gconv-extra 2.34-188.el9 → 2.34-192.el9
• glibc-minimal-langpack 2.34-188.el9 → 2.34-192.el9
• grub2-common 1:2.06-105.el9 → 1:2.06-107.el9
• grub2-efi-x64 1:2.06-105.el9 → 1:2.06-107.el9
• grub2-pc 1:2.06-105.el9 → 1:2.06-107.el9
• grub2-pc-modules 1:2.06-105.el9 → 1:2.06-107.el9
• grub2-tools 1:2.06-105.el9 → 1:2.06-107.el9
• grub2-tools-minimal 1:2.06-105.el9 → 1:2.06-107.el9
• kernel 5.14.0-582.el9 → 5.14.0-585.el9
• kernel-core 5.14.0-582.el9 → 5.14.0-585.el9
• kernel-modules 5.14.0-582.el9 → 5.14.0-585.el9
• kernel-modules-core 5.14.0-582.el9 → 5.14.0-585.el9
• kernel-modules-extra 5.14.0-582.el9 → 5.14.0-585.el9
• libdb 5.3.28-55.el9 → 5.3.28-57.el9
• libdnf-plugin-subscription-manager 1.29.45-1.el9 → 1.29.46-1.el9
• libipa_hbac 2.9.6-4.el9 → 2.9.6-4.el9.2
• libnvme 1.11.1-1.el9 → 1.13-1.el9
• libsss_certmap 2.9.6-4.el9 → 2.9.6-4.el9.2
• libsss_idmap 2.9.6-4.el9 → 2.9.6-4.el9.2
• libsss_nss_idmap 2.9.6-4.el9 → 2.9.6-4.el9.2
• libsss_sudo 2.9.6-4.el9 → 2.9.6-4.el9.2
• linux-firmware 20250314-151.el9 → 20250513-152.el9
• linux-firmware-whence 20250314-151.el9 → 20250513-152.el9
• mokutil 2:0.6.0-4.el9 → 2:0.7.2-1.el9
• nvme-cli 2.11-5.el9 → 2.13-1.el9
• openshift-clients 4.19.0-202505011457.p0.ge468aa6.assembly.stream.el9 → 4.20.0-202505231112.p0.g46e27e8.assembly.stream.el9
• openshift-kubelet 4.19.0-202505051914.p0.gf6cfe0c.assembly.stream.el9 → 4.20.0-202505200845.p0.g10466b2.assembly.stream.el9
• openssl 1:3.5.0-1.el9 → 1:3.5.0-2.el9
• openssl-libs 1:3.5.0-1.el9 → 1:3.5.0-2.el9
• openvswitch3.5 3.5.0-18.el9s → 3.5.0-22.el9s
• ose-aws-ecr-image-credential-provider 4.19.0-202505011457.p0.g425c1c5.assembly.stream.el9 → 4.20.0-202503251340.p0.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.19.0-202505011457.p0.g7109d6b.assembly.stream.el9 → 4.20.0-202504231110.p0.g7109d6b.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.19.0-202505011457.p0.gd8d3aeb.assembly.stream.el9 → 4.20.0-202503251340.p0.gd8d3aeb.assembly.stream.el9
• passt 0^20250320.g32f6212-1.el9 → 0^20250415.g8ec1341-1.el9
• passt-selinux 0^20250320.g32f6212-1.el9 → 0^20250415.g8ec1341-1.el9
• python3-cloud-what 1.29.45-1.el9 → 1.29.46-1.el9
• python3-subscription-manager-rhsm 1.29.45-1.el9 → 1.29.46-1.el9
• qemu-guest-agent 17:9.1.0-19.el9 → 17:9.1.0-20.el9
• rpm-ostree 2025.7-2.el9 → 2025.8-1.el9
• rpm-ostree-libs 2025.7-2.el9 → 2025.8-1.el9
• selinux-policy 38.1.55-2.el9 → 38.1.56-1.el9
• selinux-policy-targeted 38.1.55-2.el9 → 38.1.56-1.el9
• sssd 2.9.6-4.el9 → 2.9.6-4.el9.2
• sssd-ad 2.9.6-4.el9 → 2.9.6-4.el9.2
• sssd-client 2.9.6-4.el9 → 2.9.6-4.el9.2
• sssd-common 2.9.6-4.el9 → 2.9.6-4.el9.2
• sssd-common-pac 2.9.6-4.el9 → 2.9.6-4.el9.2
• sssd-ipa 2.9.6-4.el9 → 2.9.6-4.el9.2
• sssd-krb5 2.9.6-4.el9 → 2.9.6-4.el9.2
• sssd-krb5-common 2.9.6-4.el9 → 2.9.6-4.el9.2
• sssd-ldap 2.9.6-4.el9 → 2.9.6-4.el9.2
• sssd-nfs-idmap 2.9.6-4.el9 → 2.9.6-4.el9.2
• sssd-proxy 2.9.6-4.el9 → 2.9.6-4.el9.2
• subscription-manager 1.29.45-1.el9 → 1.29.46-1.el9
• unbound-libs 1.16.2-17.el9 → 1.16.2-18.el9
• vim-minimal 2:8.2.2637-21.el9 → 2:8.2.2637-22.el9
• virt-what 1.27-1.el9 → 1.27-2.el9
• xfsprogs 6.4.0-5.el9 → 6.4.0-7.el9

Extensions

Full list (64 packages)

• NetworkManager-libreswan-1.2.24-1.el9.x86_64
• bison-3.7.4-5.el9.x86_64
• capstone-4.0.2-10.el9.x86_64
• cpp-11.5.0-5.el9.x86_64
• daxctl-libs-78-2.el9.x86_64
• edk2-ovmf-20241117-3.el9.noarch
• elfutils-libelf-devel-0.193-1.el9.x86_64
• flex-2.6.4-9.el9.x86_64
• gcc-11.5.0-5.el9.x86_64
• glibc-devel-2.34-192.el9.x86_64
• glibc-headers-2.34-192.el9.x86_64
• ipxe-roms-qemu-20200823-9.git4bd064de.el9.noarch
• kata-containers-2.5.2-1.el9s.x86_64
• kernel-5.14.0-585.el9.x86_64
• kernel-core-5.14.0-585.el9.x86_64
• kernel-devel-5.14.0-585.el9.x86_64
• kernel-headers-5.14.0-585.el9.x86_64
• kernel-modules-5.14.0-585.el9.x86_64
• kernel-modules-extra-5.14.0-585.el9.x86_64
• kernel-rt-core-5.14.0-585.el9.x86_64
• kernel-rt-devel-5.14.0-585.el9.x86_64
• kernel-rt-modules-5.14.0-585.el9.x86_64
• kernel-rt-modules-core-5.14.0-585.el9.x86_64
• kernel-rt-modules-extra-5.14.0-585.el9.x86_64
• krb5-pkinit-1.21.1-6.el9.x86_64
• krb5-workstation-1.21.1-6.el9.x86_64
• ldns-1.7.1-12.el9.x86_64
• libfdt-1.6.0-7.el9.x86_64
• libkadm5-1.21.1-6.el9.x86_64
• libmpc-1.2.1-4.el9.x86_64
• libpmem-1.12.1-1.el9.x86_64
• libpng-2:1.6.37-12.el9.x86_64
• libqb-2.0.8-1.el9.x86_64
• librdmacm-54.0-1.el9.x86_64
• libreswan-4.15-8.el9.x86_64
• libxcrypt-devel-4.4.18-3.el9.x86_64
• libzstd-devel-1.5.5-1.el9.x86_64
• lm_sensors-libs-3.6.0-10.el9.x86_64
• m4-1.4.19-1.el9.x86_64
• make-1:4.3-8.el9.x86_64
• ndctl-libs-78-2.el9.x86_64
• nspr-4.35.0-17.el9.x86_64
• nss-3.101.0-10.el9.x86_64
• nss-softokn-3.101.0-10.el9.x86_64
• nss-softokn-freebl-3.101.0-10.el9.x86_64
• nss-sysinit-3.101.0-10.el9.x86_64
• nss-tools-3.101.0-10.el9.x86_64
• nss-util-3.101.0-10.el9.x86_64
• openssl-devel-1:3.5.0-2.el9.x86_64
• openvswitch3.5-ipsec-3.5.0-22.el9s.x86_64
• pcp-conf-6.3.7-4.el9.x86_64
• pcp-libs-6.3.7-4.el9.x86_64
• pixman-0.40.0-6.el9.x86_64
• protobuf-3.14.0-16.el9.x86_64
• python3-openvswitch3.5-3.5.0-22.el9s.x86_64
• qemu-img-17:9.1.0-20.el9.x86_64
• qemu-kvm-common-17:9.1.0-20.el9.x86_64
• qemu-kvm-core-17:9.1.0-20.el9.x86_64
• seabios-bin-1.16.3-4.el9.noarch
• seavgabios-bin-1.16.3-4.el9.noarch
• sysstat-12.5.4-9.el9.x86_64
• usbguard-1.0.0-16.el9.x86_64
• usbguard-selinux-1.0.0-16.el9.noarch
• zlib-devel-1.2.11-41.el9.x86_64

CentOS Stream CoreOS base layer: 9.0.20250521-0