4.21.0-0.okd-scos-2025-10-25-235748

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2025-10-25-235748

Team Approvals:

Tests:

Blocking jobs
- aws Succeeded (1 retries) periodic-ci-openshift-release-master-okd-scos-4.21-e2e-aws-ovn
Informing jobs
- agent-single-node-ipv6 Succeeded periodic-ci-openshift-release-master-okd-scos-4.21-e2e-agent-single-node-ipv6
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-okd-scos-4.21-e2e-aws-ovn-techpreview
- aws-upgrade Succeeded (2 retries) periodic-ci-openshift-release-master-okd-scos-4.21-e2e-aws-ovn-upgrade
- aws-upgrade-minor Failed periodic-ci-openshift-release-master-okd-scos-4.21-upgrade-from-okd-scos-4.20-e2e-aws-ovn-upgrade
- gcp Succeeded periodic-ci-openshift-release-master-okd-scos-4.21-e2e-gcp
- vsphere Succeeded periodic-ci-openshift-release-master-okd-scos-4.21-e2e-vsphere-ovn

Upgrades from:

Upgrades to:

4.21.0-0.okd-scos-2025-10-26-115748 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.20.0-0.okd-scos-2025-10-25-023454

Created: 2025-10-26 00:04:04 +0000 UTC

Image Digest: sha256:f6cd7010d2122d405599135858e04a6429d94914a1d0b9d5102e0e47fbeb8e06

Components

Kubectl upgraded from 1.33.3 to 1.34.1
Kubernetes upgraded from 1.33.5 to 1.34.1
Kubernetes Tests upgraded from 1.33.4 to 1.34.1
CentOS Stream CoreOS 10.0.20251023-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
IngressControllerLBSubnetsAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
InsightsConfigAPI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NodeSwap (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SetEIPForNLBIngressController (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
GCPClusterHostedDNSInstall (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ManagedBootImagesAzure (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ManagedBootImagesvSphere (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
PreconfiguredUDNAddresses (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VolumeAttributesClass (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ExternalOIDC (0 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
NewOLMWebhookProviderOpenshiftServiceCA (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled	Disabled	Enabled
AWSDualStackInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureDualStackInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
CBORServingAndStorage (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClientsAllowCBOR (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClientsPreferCBOR (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIMachineManagementVSphere (0 tests)			Enabled (New)	Enabled (New)
EventTTL (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPDualStackInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesCPMS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MutableCSINodeAllocatableCount (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

azure-kms-encryption-provider git ea0b9944 sha256:e6f687946579d7c267b0d417d5b9b52a9b0f1c67852f4880cad1f73b3ea50538
egress-router-cni git 5e0f8d1b sha256:80dc87e4796746223b10d98d158748f2dcd2b1c7c814e0c480653b397ffcf4d9
kubevirt-cloud-controller-manager git 3f4542ec sha256:87f6e8d89bf4a8d54e8252887fb7dc6d142260c2b972391a1d0504d295c01748
libvirt-machine-controllers git a336f0b5 sha256:5d880cc50c548cf65c63933af4e8f303928b75d6e3a2461f3e4f8a09668d5e4b
multus-cni git cf0f68ec sha256:56649b95f02d1307a6594cb5dc621da438e5456a659c96e8de68f29737ee6ee8
multus-cni-microshift git cf0f68ec sha256:521e205e561c8e571f81f9a459f7237f1f1804792544175693069aac9979329c
multus-route-override-cni git 391c1b03 sha256:f0e47a2ef77b276ce138e4beadd3526676d8d2326faacf2fb29bc5231a95bd75
multus-whereabouts-ipam-cni git 43c89591 sha256:61a2432b5bb9142345ca1875e00945b3dc286377f1161e152c8c6d022a0762e0

agent-installer-api-server

MGMT-21958: Prepare 4.20 stable versions assisted-service upstream #8142
NO-ISSUE: Update konflux pipelines to use a remote pipeline #8143
NO-ISSUE: adds example Agent resource to docs #8120
NO-ISSUE: migrate renovate config #8060
MGMT-21135: Unexpected Additional Subnet Appears in Machine Network Selection #7953
MGMT-21810: Support TNF cluster installation using kube-api #8085
MGMT-21759: Update Assisted Service webhook away from deprecated webhook.Validator API #8135
MGMT-21859: Move osc operators to supported #8056
MGMT-19836: Add ClusterID field on HostRoleUpdatedEvent #8111
MGMT-21624: Add Dual-Stack with primary IPv6 support in Assisted #8026
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.12, 4.18, 4.20, 4.19, 4.17 #8134
AGENT-1303: Allow InfraEnv registration to use late binding #8059
NO-ISSUE: Update Konflux references #8128
NO-ISSUE: bump ocp dockerfile base image to 4.21 #8110
MGMT-20588: Align kube descheduler activation CR with OVE needs #7960
NO-ISSUE: Update Konflux references #8050
ACM-25137: Remove the SERVICE_EL8_IMAGE env vars #8108
MGMT-21725: Update Renovate for legacy EL8 Dockerfiles #8090
OCPBUGS-62580: Fix edge jobs to be consistent with ART for 4.21 #8104
NO-ISSUE: [master] Bump OCP versions: 4.19 #8095
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.18 #8089
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.15, 4.14 #8084
MGMT-20192: add possibility to disable image service #7955
And 26 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update konflux pipelines to use a remote pipeline #1301
NO-ISSUE: Update Konflux references #1299
MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1289
OCPBUGS-62361: Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.21 #1276
OCPBUGS-62398: Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.21 #1277
NO-ISSUE: Update Konflux references #1283
NO-ISSUE: Update Konflux references #1265
And 6 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-node-agent

NO-ISSUE: migrate renovate config #1123
MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1148
OCPBUGS-62390: Bump dockerfile images to 4.21 #1147
NO-ISSUE: Update konflux pipelines to use a remote pipeline #1118
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-utils

: OCPBUGS-63323: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan #181
OCPBUGS-63322: Update Konflux references #180
OCPBUGS-62912: Resolve violations detected by registry-standard #175
OCPBUGS-62986: Update Konflux references #177
OCPBUGS-62958: Update Konflux references #168
OCPBUGS-62905: Dockerfile cleanup #174
OCPBUGS-62347: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.21 #165
OCPBUGS-62704: remove hardcoded versions from iso_builder #171
AGENT-1336: Add release label to build #170
OCPBUGS-62646: Update Konflux references #167
OCPBUGS-62645: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 0697723 #146
AGENT-1258: Build PipelineRun changes for Konflux #155
OCPBUGS-61946: Include only final ISO in OVE UI container image #162
OCPBUGS-61956: Disable Konflux go.mod PR updates #163
OCPBUGS-61875: Add 4.21 config #160
AGENT-1258: Red Hat Konflux kflux-prd-rh02 update ove-ui-iso #154
AGENT-1258: Red Hat Konflux kflux-prd-rh02 purge agent-installer-utils #153
AGENT-1286: Red Hat Konflux kflux-prd-rh02 update agent-installer-utils #143
Full changelog

apiserver-network-proxy

OCPBUGS-62355: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.21 #86
Full changelog

aws-cloud-controller-manager

OCPBUGS-62354: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.21 #118
NO-JIRA: Update OWNERS #116
Full changelog

aws-cluster-api-controllers

OCPBUGS-63046: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.2 (d3a7da1) into main #576
OCPBUGS-62540: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.21 #575
NO-JIRA: Update OWNERS #567
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.1 (9c17049) into main #569
Full changelog

aws-ebs-csi-driver

OCPBUGS-62380: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.21 #292
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-62802: Add RBAC ClusterRole and Binding for driver node #443
NO-JIRA: add ai-helpers claude marketplace #451
NO-JIRA: Normalize generation of driver metrics RBAC proxy sidecar #380
OCPBUGS-61436, OCPBUGS-61450, STOR-2600: Bump OLM metadata to 4.21 #430
OCPBUGS-62404: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.21 #438
STOR-1945: STOR-2056: add Azure File NFS test manifest #445
OCPBUGS-62374: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.21 #437
MULTIARCH-5554: update smb-csi-driver-operator support to add ppc64le #428
OCPBUGS-62427: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.21 #439
OCPBUGS-62348: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.21 #436
OCPBUGS-61955: Add withCABundleDaemonSetHook() to AWS EFS operator #433
OCPBUGS-60637: add runAsUser hook for operator deployment controller #431
NO-JIRA: Centralize injection of hosted-kubeconfig volume #311
NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 #429
OCPBUGS-54385: Avoid informer resync #432
NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 #427
NO-JIRA: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.21 #425
NO-JIRA: azure-disk, azure-file sync code de-duplication #303
Full changelog

aws-karpenter-provider-aws

OCPBUGS-62388: Updating aws-karpenter-provider-aws-container image to be consistent with ART for 4.21 #15
Full changelog

aws-kms-encryption-provider

OCPBUGS-62458: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.21 #31
Full changelog

aws-machine-controllers

OCPBUGS-62395: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.21 #139
OCPBUGS-38759: client: re-use a single file for building the session instead of randomly named files #140
Full changelog

aws-pod-identity-webhook

CCO-664: merge upstream changes #205
OCPBUGS-62587: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.21 #206
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-62487: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART for 4.21 #151
OCPBUGS-62392: Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.21 #150
NO-JIRA: Update OWNERS #149
Full changelog

azure-cluster-api-controllers

OCPBUGS-62387: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.21 #352
NO-JIRA: Update OWNERS #351
Full changelog

azure-disk-csi-driver

NO-JIRA: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.21 #110
Full changelog

azure-file-csi-driver

OCPBUGS-62547: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.21 #106
Full changelog

azure-machine-controllers

OCPBUGS-56664: Support DataDisks on Azure Stack Hub #164
OCPBUGS-62335: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.21 #163
NO-JIRA: Update OWNERS #162
Full changelog

azure-service-operator

OCPBUGS-62368: Updating ose-azure-service-operator-container image to be consistent with ART for 4.21 #13
NO-JIRA: Update OWNERS #12
Full changelog

azure-workload-identity-webhook

OCPBUGS-62364: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.21 #39
CCO-665: Merge upstream changes #40
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-62565: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.21 #53
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-57126: Add node-image-pull to the list of services to check their logs in /etc/motd #9962
OCPBUGS-62136: Eliminate duplicate logs on bootstrap/rendezvous host #9957
OCPBUGS-60873: Prevent duplicate noProxy when adding nodes #10024
OCPBUGS-36360: Support certificate authentication with CAPZ #10019
OCPBUGS-62870: Fix firewall checks #10017
OCPBUGS-62824, OCPBUGS-62826: Fix console info for interactive agent installer #10003
OCPBUGS-62085: Update the RHCOS 4.21 bootimage metadata #9998
OKD-237: Remove fcos references #9970
OSASINFRA-3915: openstack: Start setting CredentialsMode #9734
NO-JIRA: shiftstack: Update OWNERS #9994
OCPBUGS-62125: baremetal: set baremetalhost architecture #9987
OCPBUGS-60752: Add MTU validation for networkConfig #9919
OCPBUGS-62907: AGENT-1269: Use agent-installer-ui image from release #9995
OCPBUGS-62430: None: Allow IPv6 Primary DualStack installs on platforms None and External #9983
OCPBUGS-41567: Clean up baremetal bootstrap systemd dependencies #8986
OCPBUGS-62452: Updating ose-installer-container image to be consistent with ART for 4.21 #9980
OCPBUGS-62471: Updating ose-baremetal-installer-container image to be consistent with ART for 4.21 #9981
OCPBUGS-60538: Update assisted-service dependencies #9956
CORS-4256: Add PSC Endpoint to the installconfig #9991
OCPBUGS-62514: Updating ose-installer-artifacts-container image to be consistent with ART for 4.21 #9984
SPLAT-2511: vSphere - do not block on vSphere >7.0.2, allow 9 #9963
CORS-4078: allow toggling AWS client logging #9976
OCPBUGS-62363: Set agent-extract-tui start timeout #9975
no-jira: Revert “Merge pull request #9939 from barbacbd/CORS-4058-release-4.21” #9974
CORS-4078: bump AWS SDK v2 max backoff duration to 300s #9966
CORS-4107: Update default release image to 4.21 #9954
OCPBUGS-61514: Add check for gcp firewall deletion permission #9935
OCPBUGS-62293: Set default for PrivateDNSZone Project ID #9967
CORS-4078: disable rate limiter for AWS SDK v2 #9958
OCPBUGS-61901: Update explain for Publish #9950
no-jira: OWNERS: switch to joelcapitao #9951
OCPBUGS-61935: Wildcards not reliable for copying container files #9948
CORS-4058: Migrate AWS Destroy to SDK v2 #9939
OCPBUGS-61353: Generated Redacted nutanix config for operator #9931
CORS-3550: add ability to opt out of the sigstore signing requirement #9940
CORS-4162: Remove GCPClusterHostedDNSInstall featuregate #9944
OCPBUGS-61490: Update code to retrieve ICSP instead of ICP #9933
MGMT-21586: Add an option in image-based installation to specify architecture #9934
SPLAT-2430: Update vSphere version validations for 7 EOL and VCF 9 #9914
OCPBUGS-61373: Fix shellcheck issues in bootstrap #9929
OCPBUGS-61373: Fix agent shellcheck issues #9928
no-jira: Fix logging and error messages #9917
SPLAT-2465: Changed LB VM creation to not be hard coded and use from variables.ps1 #9926
OCPBUGS-61111: Allow user to BYO private zone without specifying name #9922
Full changelog

baremetal-machine-controllers

OCPBUGS-62365: Updating baremetal-machine-controller-container image to be consistent with ART for 4.21 #237
Full changelog

baremetal-operator

OCPBUGS-61349, OCPBUGS-62112: Merge upstream #432
OCPBUGS-62460: Updating ose-baremetal-operator-container image to be consistent with ART for 4.21 #433
NO-ISSUE: Merge upstream #430
Full changelog

baremetal-runtimecfg

OCPBUGS-62581: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.21 #370
Full changelog

cli, cli-artifacts, deployer, tools

NO-JIRA: Add pr-review Claude command and effective-go skills #2120
NO-ISSUE: pkg/cli/admin/upgrade/recommend: Drop obsolete precheckEnabled knob #2113
OCPBUGS-62875: Pass dry-run option to all create API calls #2117
CNTRLPLANE-1676: Update k8s dependencies to 1.34 #2118
NO-JIRA: Migrate to aws-sdk-go-v2 from archived aws-sdk-go #2114
NO-JIRA: adm upgrade status: capture testcase for OCPBUGS-60768 #2081
OCPBUGS-62445: prevent crash when rootDeviceHints format is invalid #2109
NO-JIRA: Update shellescape and sspi to newer versions #2116
NO-JIRA: Remove myself from update approvers, add Hongkai #2112
OCPBUGS-62550: Updating ose-cli-artifacts-container image to be consistent with ART for 4.21 #2111
OCPBUGS-61491: Update code to retrieve ICSP instead of ICP #2095
OCPBUGS-62362: Updating ose-tools-container image to be consistent with ART for 4.21 #2108
OCPBUGS-62548: Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.21 #2110
NO-JIRA: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.21 #2107
OCPBUGS-59311: oc adm must-gather: Add support for context #2105
OCPBUGS-59311: pkg/…/inspect: Add support for context.Context #2100
WRKLDS-593: oc adm must-gather: Improve cleanup order #2080
NO-JIRA: Add tchap as reviewer in oc #2099
NO-JIRA: oc adm groups sync: Use client.Unbind #2094
OCPBUGS-61063: pkg/cli/admin/upgrade/recommend: Enable precheck and accept gates #2088
OCPBUGS-52936: oc adm policy: Only initialize UserClient if built-in OAuth is enabled #2090
OCPBUGS-61311: Introduce auto-open-browser flag for external OIDC issuer login #2089
NO-ISSUE: pkg/cli/admin/upgrade/recommend/examples/4.19.0-okd-scos.16: Add OKD example #2093
OCPBUGS-59951: oc adm must-gather: Wrap gather in a session #2087
NO-JIRA: Add some warnings into excluded list #2092
OCPBUGS-56691: Rely on overall available disk space of the mounted volume #2084
Full changelog

cloud-credential-operator

CCO-661: Update go modules #930
OCPBUGS-63238: Ensure ccoctl aws commands use their own region option #931
CCO-709: Upgrade Kubernetes v1.34 #929
CCO-644: Upgrade msgraph-sdk-go v1.86.0 #924
CCO-435: Migrate away from deprecated ioutil package. #920
OCPBUGS-62495: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.21 #923
OCPBUGS-62184: aws: remove endpoint overrides for s3 and cf clients #921
CCO-692: Migrate to aws-ask-go-v2 #905
OCPBUGS-61475: set cloud-credential-operator as default-container #914
OCPBUGS-60078: ccoctl: aws to use proper issuer url on subsequent runs #904
Full changelog

cloud-network-config-controller

OCPBUGS-60806: Change the capacity struct from int to ptrOfInt #183
OCPBUGS-55625: Retrieve subnet from vnet subnets.addressPrefixes field #179
OCPBUGS-62437: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.21 #181
Full changelog

cluster-authentication-operator

OCPBUGS-62941: (bugfix): configure status controller to remove unset versions #798
OCPBUGS-62447: Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.21 #793
API-1835: test/oauth-server-staticresource: adds a test to show which input resources are required to run the operator and the staticResourceController #790
NO-JIRA: Update OIDC e2e test to expect admission-time validation error of invalid CEL expression #797
API-1835: fix integration tests #795
OCPBUGS-57444: set appropriate rolling update settings #789
NO-JIRA: om: fix integration testing #788
Full changelog

cluster-autoscaler

OCPBUGS-60790: refactor cloud provider options #380
AUTOSCALE-335, AUTOSCALE-336, OCPBUGS-62383, OCPBUGS-62477: 1.34.0 upstream rebase #386
OCPBUGS-62383: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.21 #383
OCPBUGS-62477: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.21 #384
NO-JIRA: Remove OWNERS automation preamble #382
Full changelog

cluster-autoscaler-operator

AUTOSCALE-336: Prepare for 4.21 #355
OCPBUGS-62589: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.21 #354
AUTOSCALE-384: Add “cordon node before terminating” option to cluster autoscaler resource #356
Full changelog

cluster-baremetal-operator

OCPBUGS-61477: Enable runtime extraction of aarch64 images #508
OCPBUGS-62577: Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.21 #507
OCPBUGS-60498: Always have a service for ironic-api port #510
METAL-1449: optionally deploy IPE #490
Full changelog

cluster-bootstrap

OCPBUGS-62558: Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.21 #120
Full changelog

cluster-capi-controllers

OCPBUGS-62579: Updating ose-cluster-api-container image to be consistent with ART for 4.21 #249
NO-JIRA: Update OWNERS #246
OCPBUGS-57605: Updating ose-cluster-api-container image to be consistent with ART for 4.20 #242
Full changelog

cluster-capi-operator

OCPCLOUD-2992: machine migration round trip test #366
OCPCLOUD-2996: Prevent changing .spec.authoritativeAPI on MAPI when Phase Provisioning or is being deleted #388
OCPCLOUD-2999: AWSMachine status conversion and syncing #372
OCPCLOUD-3104: manifests-gen: re-enable conversion, validating and mutating webhook configurations #389
OCPCLOUD-3104: Fix v1beta2 condition setting #385
OCPCLOUD-2709: Implement MAPI2CAPI conversion of loadbalancers #348
OCPBUGS-62570: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.21 #357
OCPCLOUD-2995: Machine status conversion and syncing #365
NO-JIRA: hack/test.sh use eval for starting ginkgo so GINKO_EXTRA_ARGS having whitespaces works #380
OCPCLOUD-2641: Validate creation of Machine API Machines #368
OCPBUGS-62620: kubeconfig controller: do not error on token secret not yet populated #373
NO-JIRA: lint: add aliases for machine api’s and controller-runtime log #367
OCPCLOUD-2992: refactor: split machine migration testing into multiple files #364
NO-JIRA: machine_sync: assorted fixes #370
OCPCLOUD-2992: Enable MAPI machine synchronized e2e tests (re-enable after OCPBUGS-54703 fix) #359
NO-JIRA: Update OWNERS #353
OCPCLOUD-3162: conversion: do not set ignition version on AWSMachine #363
NO-JIRA: use go workspaces #358
OCPCLOUD-2714: Add VAPs to prevent setting of CAPI fields that are not supported by MAPI #334
No-JIRA: increased timeout #354
NO-JIRA: Adds AGENTS.md #349
OCPBUGS-54703: Fix conversion of Machines without MachineSet #351
OCPCLOUD-2992: migration e2e for deleting machine #345
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-62585: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.21 #414
OCPBUGS-51305: ccm: disable unused secure-serving port and webhook #415
OCPBUGS-60385: Add Microsoft.Network/publicIPAddresses/delete permission #416
NO-JIRA: Update OWNERS #413
OCPBUGS-54490: Add Azure permissions for Private Link Service operations #417
SPLAT-2341: Add feature gate support in the cloud-config sync controller #400
Full changelog

cluster-config-api

CORS-4157: AWS, Azure: Add IPFamily to the PlatformStatus within Infra CR #2499
codegen: Improve performance of package loading #2543
Fix use of API_GROUP_VERSIONS running codegen #2530
STOR-2627: Add MutableCSINodeAllocatableCount to Dev- and TechPreview #2502
Switch to invoking codegen once in general updates #2540
route: improve .spec.tls.termination doc #2532
OPRUN-4156: Promote OLMv1 Webhook support to GA #2491
OCPBUGS-55192: Add IngressController .spec.domain validation #2308
OCPBUGS-63311: config/v1/types_cluster_version: Tighten force and rollback warnings #2539
CORENET-6005: network, virt: graduate preconfigured UDN addresses feature gate #2496
MCO-1861: Promote ManagedBootImagesvSphere feature gate to default #2529
MCO-1873: promote ManagedBootImagesAzure to default #2526
OCPBUGS-60457: payload-command: remove authentication CR from hypershift payload #2523
OCPSTRAT-2371: Update to Kubernetes v1.34.1 #2427
CNTRLPLANE-1576: add event-ttl configuration to kube-apiserver #2520
CNTRLPLANE-1614: add event-ttl feature gate #2525
: promote InsightConfigAPI and OnDemandDataGather to v1 #2448
Switch to slices stable sort on manifest merging #2524
Use separate serialization linting config for Machine API provider types #2522
Add initial AI api-review configuration #2489
Support AMD SEV-SNP on AWS #2424
MCO-1805: MCO-1806: Add ManagedBootImagesCPMS feature gate & CPMS type to ManagedBootImages API #2396
OCPBUGS-62482: Updating ose-cluster-config-api-container image to be consistent with ART for 4.21 #2513
OCPBUGS-55649: Remove SetEIPForNLBIngressController feature gate #2501
OCPBUGS-61382, STOR-2533: move VolumeAttributesClass to GA #2471
Promote BYO OIDC features #2454
OCPBUGS-55673: Remove IngressControllerLBSubnetsAWS featuregate #2400
OCPBUGS-62068: NodeSwap Feature Gate usage to be removed #2494
OCPBUGS-59939: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2507
OCPBUGS-59940: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2506
(bugfix): crdify generator returns aggregated error when validations fail #2493
MCO-1669: add BootImageSkewEnforcement API #2357
remove unused feature gate InsightsConfigAPI #2474
OCPBUGS-61689: Add ‘AGE’ print column to MachineConfigNode object #2476
NO-JIRA: tooling: add crdify generator to run crdify against CRD changes #2472
Update controller-tools to latest on fork #2478
Monitoring API: Add Metric server config #2322
CNTRLPLANE-5: Add CBOR feature gate #2235
NO-JIRA: New rules about CO’s conditions #2469
apiservers.config.openshift.io: remove spec.tlsSecurityProfile GoDoc caveats #2467
SPLAT-2482: create new featuregate for ClusterAPIMachineManagementVSphere #2466
MCO-1675: Update API for Status Reporting needs (REBASED) #2442
CORS-3993: Promote GCPClusterHostedDNS to Default #2300
Adjust typos #2243
Update schema checker to avoid incorrect new required fields checks #2470
config/v1/cluster_operator improve documentation #2344
Update NodeSwap with owner and doc blurb. #2053
CORS-4136: Add Feature gates for AWS, Azure and GCP Dual Stack support #2430
Full changelog

cluster-config-operator

OCPBUGS-62330: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.21 #450
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-62588: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 4.21 #369
NO-JIRA: Update OWNERS #367
MCO-1866: Ignore boot image differences while reconciling Provider Configs #368
Full changelog

cluster-csi-snapshot-controller-operator

Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.21 #245
OCPBUGS-62247: add all-egress label to deployments on HCP and IBM #243
Full changelog

cluster-dns-operator

NE-2138: Bump cluster-dns-operator to Kubernetes 1.33 for 4.21 #448
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #449
NO-JIRA: Add davidesalerno to OWNERS #447
Full changelog

cluster-etcd-operator

OCPBUGS-63240: [TNF] Fix job controller startup reliability with retry and degraded status #1500
OCPEDGE-1885, OCPEDGE-2088: Updated state transitions & tests for TNF setup job #1481
OCPBUGS-60273: Ensure revision.json persists on ungraceful shutdown #1494
NO-JIRA: use scrapeClass for service monitors #1497
NO-JIRA: add runbook urls for alerting rules #1496
NO-JIRA: feat: update the ip parsing for the nodes #1479
OCPEDGE-2183: Updating Quorum detection logic to absolve TNF of quorum loss reports. #1483
NO-JIRA: remove etcd-backup-server from static pod lists #1492
CNTRLPLANE-1315: Add OpenShift Tests Extension (OTE) for cluster-etcd-operator #1488
OCPBUGS-62518: Updating cluster-etcd-operator-container image to be consistent with ART for 4.21 #1489
NO-JIRA: Use secure cipher suites #1477
ETCD-590: configure probes based on quota size #1460
NO-JIRA: Add priority field to prevent early shutdown #1476
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

OCPBUGS-62573: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.21 #1256
Full changelog

cluster-ingress-operator

NE-1334: Enhancement to add brew and stage secrets for pre-release image testing #1291
OCPBUGS-43919: desiredWildcardDNSRecord: Check for nil LB field #1189
OCPBUGS-62400: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.21 #1286
NE-1334: Script to install ossm pre-release operator and run GWAPI e2e tests #1283
OCPBUGS-55649: Remove SetEIPForNLBIngressController feature gate #1280
OCPBUGS-55673: Remove IngressControllerLBSubnetsAWS featuregate #1242
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #1281
NE-2139: Kubernetes to 1.33.4 and controller-runtime to 0.21 #1279
NO-JIRA: Add davidesalerno to OWNERS #1278
OCPBUGS-60859: Fix logic on gatewayapi test cleanup #1273
Full changelog

cluster-kube-apiserver-operator

CNTRLPLANE-1544: scc: Grant authenticated users use of restricted-v3 #1944
CNTRLPLANE-1544: Enable user namespace for the operator #1934
CNTRLPLANE-1616: add event-ttl config observer #1938
CNTRLPLANE-1544: scc: restricted-v3: Fix runAsUser range #1947
NO-JIRA: Update the deprecated API usage alerts for 1.34 #1946
OCPSTRAT-2371: Update to Kubernetes v1.34.1 #1939
OCPNODE-3758: alpha/beta apis for DRA should not be enabled in 1.34 #1932
OCPBUGS-60045: Bump library-go to latest master #1928
OCPBUGS-62450: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.21 #1931
NO-JIRA: Add priority field to prevent early shutdown #1915
NO-ISSUE: Use scrapeClass for service monitors #1930
OCPSTRAT-2371: MutatingAdmissionPolicy e2es depend on both v1alpha1 and v1beta1 of admissionregistration.k8s.io being served in k8 1.34 #1927
OCPBUGS-15430: move alerting rules from CMO over #1922
Re-apply “OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry” #1910
OCPSTRAT-2371: promote MutatingAdmissionPolicy to v1beta1 for > 1.34.0 #1921
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-57562: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.20 #58
NO-JIRA: Update OWNERS #60
Full changelog

cluster-kube-controller-manager-operator

OCPSTRAT-2371: Update to Kubernetes v1.34.1 #888
no-jira: Add priority field to prevent early shutdown #865
CNTRLPLANE-1544: Enable user namespaces for the operator #886
NO-ISSUE: Use scrapeClass for service monitors #880
OCPBUGS-62408: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.21 #885
OCPBUGS-62255: Throttle resourcesynccontroller on pairs with dual writers. #881
WRKLDS-1556: Remove –cloud-provider=external from KCM #862
CNTRLPLANE-1275: Fixing arch issue #869
CNTRLPLANE-1275: Fixed hardcode arch issue #866
Full changelog

cluster-kube-scheduler-operator

OCPSTRAT-2371: Update to Kubernetes v1.34.1 #583
no-jira: Add priority field to prevent early shutdown #572
CNTRLPLANE-1544: manifests: Align user namespaces for the operator #581
CNTRLPLANE-1544: Enable user namespace for the operator #580
OCPBUGS-62609: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.21 #579
NO-ISSUE: Use scrapeClass for service monitors #578
OCPBUGS-61301: Add readonlyRootFilesystem #575
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-62444: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.21 #132
CNTRLPLANE-1306: Fixing arch issue #130
CNTRLPLANE-1306: Fix arch issue #128
Full changelog

cluster-machine-approver

OCPBUGS-62583: NO-JIRA: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.21 #277
NO-JIRA: Update OWNERS #276
NO-JIRA: set machine-approver-controller as default container #278
Full changelog

cluster-monitoring-operator

NO-JIRA: clarify ExternalLabels doc #2691
MON-4398: Enable UTF-8 by default in admission-webhook #2704
OCPBUGS-45671: chore(prometheus/remotewrite): clarify that the in-cluster proxy env vars set in prometheus container can be used in all configs that support proxyConfig.proxyFromEnvironment #2717
MON-4383: feat(auto_docs_examples): adjust and add more examples #2573
MON-4408: chore: make test/monitoring a seperate module to keep managing deps in root go.mod simple #2714
OCPBUGS-62276: add tls configuration for the monitoring plugin deployment #2706
NO-JIRA: [bot] Synchronize versions of the downstream components #2705
OCPBUGS-62972: enhance case 66736 #2708
NO-ISSUE: Update jsonnet dependencies #2696
OCPBUGS-62160: Remove AlertManager endpoints when disabled #2684
NO-JIRA: [bot] Synchronize versions of the downstream components #2703
MON-4395: Bump prometheus-operator to v0.86.0 #2698
NO-ISSUE: set openshift-state-metrics as default container #2693
OCPBUGS-61661: Remove cluster from non-multicluster dashboards #2679
MON-4384: adding Blackwell GPU device to accelerators configmap #2689
NO-ISSUE: chore: remove image locations in assets #2683
NO-ISSUE: [bot] Update jsonnet dependencies #2687
NO-ISSUE: chore: remove mentions of prometheus Adapter #2682
OCPBUGS-15430: remove Kubernetes API alerting rules #2671
NO-JIRA: chore: bump jsonnet dependencies #2649
OCPBUGS-62109: test: remove image registry e2e tests #2681
NO-ISSUE: update Go dependencies #2674
MON-4346: Bump Go to 1.24 #2655
NO-JIRA: [bot] Synchronize versions of the downstream components #2673
OCPBUGS-60161: Add mcd_local_unsupported_packages metric from MCO to telemetry #2638
NO-ISSUE: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.21 #2662
MON-4344: chore: port the test suite over from openshift-tests-private #2635
MON-4371: chore(prometheus): enable use-uncached-io feature flag #2637
NO-JIRA: [bot] Synchronize versions of the downstream components #2668
OCPBUGS-61113: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2657
NO-JIRA: [bot] Synchronize versions of the downstream components #2663
OCPBUGS-56568: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2660
OCPBUGS-61135: Revert “MON-4343: Cleanup deprecate pa config” #2658
Full changelog

cluster-network-operator

SPLAT-2503: Fixed “null” value for vSphere api and ingress VIP in UPI scenario #2795
CORENET-6423: api, l2udn: subnets must be masked #2808
CORENET-6311: Skip running _stackmanager for libreswan 5.3+ #2787
OCPBUGS-62457: Updating cluster-network-operator-container image to be consistent with ART for 4.21 #2807
OCPBUGS-54806: Add recording rules for UDN telemetry #2697
OCPBUGS-61215: Tweak iptables-alerter to try to avoid crictl bug #2802
OCPBUGS-42303: Add drop flows for GARP #2801
OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes #2797
OCPBUGS-61561: Relax label req. of DPU/DPU Host/Smart NIC #2786
Revert “OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes” #2796
OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes #2605
OCPBUGS-60421: Set maxUnavailable 10% on MultiNetworkPolicy DS #2785
CORENET-6327: Update linter #2783
Full changelog

cluster-node-tuning-operator

NO-JIRA: Fix support for nvidia-smi #1410
OCPBUGS-62940: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1414
NO-ISSUE: pkg/metrics/server: Log bind address #1411
OCPBUGS-62839: E2E: Add test cases related to schedulable control plane nodes #1405
OCPBUGS-62835: E2E: llc: make sure to remove any trailing newspaces #1407
OCPBUGS-62153: E2E: skip SMT disabled test when L3 cache spans entire NUMA node #1397
OCPBUGS-62605: e2e: refactor GetSMTLevel to remove Gomega assertions #1399
OCPBUGS-62578: Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.21 #1391
OCPBUGS-62091: E2E: Add function to check control plane nodes are schedulable. #1396
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-olm-operator

OPRUN-4157: Update openshift/api to latest master for WebHook GA #146
OPRUN-4207: Update feature-gate processing to support disabled features #144
NO-ISSUE: Remove conditionals for cp-manifests use #142
OPRUN-4079: Use helm to generate manifests #140
NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.21 #138
OCPBUGS-61873: Update RBAC to update/patch/delete what we create #139
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-62500: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.21 #626
NO-JIRA: Bump library go rm co dep #625
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-62494: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.21 #399
CNTRLPLANE-1307: set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test #395
Full changelog

cluster-policy-controller

OCPBUGS-62440: Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.21 #169
OCPBUGS-57191: fix(psalabelsyncer): return an error instead of panic when converting an unknown volume #167
NO-JIRA: scc allocation controller: Use server-side apply #165
Full changelog

cluster-samples-operator

OCPBUGS-63481: references to github.com/sclorg/django-ex.git now also refer to the branch #654
OCPBUGS-62409: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.21 #651
OCPBUGS-62061: Re-sync OCP Samples Library for OCP 4.21 - 22Sep2025 #650
Full changelog

cluster-storage-operator

STOR-2523: Add hypershift managed-by labels for csi driver operators #627
OCPBUGS-62669: Move metrics to vsphere driver #625
OCPBUGS-60637: remove static value for runAsUser in securityContext #619
OCPBUGS-62421: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.21 #624
OCPBUGS-62172: Add app label to Manila deployment #628
OCPBUGS-61112: add Azure Disk CSI driver SA name to CredentialsRequest #618
STOR-2297: remove oVirt code from CSO #617
OCPBUGS-60637: HyperShift deployments should reflect user id security context #616
OCPBUGS-62121: add all-egress label to deployments on HCP and IBM #621
OCPBUGS-61175: Add RBAC rule to let manila-csi-driver-operator manage NetworkPolicy #615
SPLAT-2467: Updated VPD alerts to reflect current vSphere support #612
OCPBUGS-61161: Fix logging e2e also faster cleanup #611
Full changelog

cluster-update-keys

OCPBUGS-62464: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.21 #86
Full changelog

cluster-version-operator

OTA-1585: Add conformance test suites to the CVO tests extension #1238
OCPBUGS-61872: Add ClusterVersionOperator manifests to TechPreviewNoUpgrade clusters #1232
OCPBUGS-62861: temporarily disable metrics auth for hypershift clusters #1243
OTA-1627: pkg/cincinnati: Centralize release metadata parsing #1231
NO-JIRA: Move myself to emeritus #1239
OCPBUGS-62416: Updating cluster-version-operator-container image to be consistent with ART for 4.21 #1237
OTA-1585: test: Rename an existing test to comply with the OTE integration guide #1235
OTA-1531: Rework error handling in FeatureGate processing #1206
NO-JIRA: Extend the development documentation regarding building and publishing a payload image #1227
NO-ISSUE: Update golang version to 1.24 in go.mod #1230
Full changelog

configmap-reloader

OCPBUGS-62503: Updating configmap-reload-container image to be consistent with ART for 4.21 #74
Full changelog

console

CONSOLE-4718: Update Administrator nav section to use ConsoleDataView #15567
CONSOLE-4838: Make DataView component work with arbitrary data objects #15622
CONSOLE-4604: Migrate enzyme packages/console-shared unit tests to React Testing Li… #15581
OCPBUGS-61509: Fix “operator installing” hint in operator details panel #15480
CONSOLE-4836: Migrate console-demo-plugin to dynamic-demo-plugin #15618
OCPBUGS-61870: Automatically redirect all-namespaces catalog to default namespace #15584
OCPBUGS-63433: Turn on fContentSecurityPolicyEnabled by default #15630
OCPBUGS-63384: Fix eslint warnings and prevent future ones #15629
OCPBUGS-62937: Add telemetry events #15602
OCPBUGS-62483: limit node log length to 1000 lines #15597
OCPBUGS-63429: Expose prometheus tenancy label path as a proxy #15621
CONSOLE-4724: Update Compute nav section to use ResourceDataView #15604
OCPBUGS-60636: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15583
CONSOLE-4761: Add sort select field with Relevance, A-Z, Z-A options #15580
CONSOLE-3637: Bump rjsf to 4.x #15551
CONSOLE-4725: Update User Management list pages to use ResourceDataView #15579
OCPBUGS-63059: DRY up RTL configure #15615
CONSOLE-4776: Migrate enzyme packages/container-security unit tests to React Testin… #15611
OCPBUGS-62156: Unique “key” prop warning in the UserPreferencePage #15534
CONSOLE-4821: Remove gitops-plugin #15576
OCPBUGS-62593: Updating openshift-enterprise-console-container image to be consistent with ART for 4.21 #15542
CONSOLE-4615: Update DefaultList to use ResourceDataView #15560
OCPBUGS-61660: Fix Bare Metal Hosts nav item #15609
CONSOLE-4603: Migrate enzyme “packages/console-dynamic-plugin-sdk” unit tests to Re… #15540
OCPBUGS-61767: Duplicate CRs are shown as Operand instances in operator uninstallation modal #15557
CONSOLE-4820: Migrate olmv0 to dynamic #15566
OCPBUGS-33879: use tenancy path for project scoped status card #15585
OCPBUGS-62947: bump dompurify to latest #15586
CONSOLE-4819: Migrate container-security to dynamic #15565
CONSOLE-4602: Migrate enzyme “packages/console-app” unit tests to React Testing Library #15514
OCPBUGS-60603: Add bearer token file configuration to oc-environment script #15521
OCPBUGS-62315: Correct the width of the cluster config toolbar filter input #15546
CONSOLE-4795, CONSOLE-4797, CONSOLE-4801: Migrate some static extensions to dynamic #15552
CONSOLE-4804: Migrate TopologyCreateConnector to dynamic #15549
CONSOLE-4800: Migrate HorizontalNavTab to dynamic #15553
OCPBUGS-59529: Prevent the topology context menu items from truncating #15524
CONSOLE-4798: Migrate StorageClassProvisioner to dynamic #15550
OPRUN-4086: Add ClusterCatalog controller #15466
NO-JIRA: chore(OWNERS): remove Mylanos from OWNERS #15559
CONSOLE-4332: Update the secrets forms to use PF components #15513
OCPBUGS-62313: Returning from any Secret Create page does not return to secret page #15543
CONSOLE-4684: Refactor machine-set modals #15484
OCPBUGS-62281: InsecureSkipVerify to true for results proxy endpoint in off-cluster #14888
CONSOLE-4808: update resource-log.cy.ts #15539
CONSOLE-4799: update tests/app/debug-pod.cy.ts #15530
CONSOLE-4802: Migrate KebabActions to dynamic #15535
CONSOLE-3769: Add @openshift/dynamic-plugin-sdk to core and internal pkg deps #15518
OCPBUGS-61536: Fix incorrect handling of vSphere settings #15481
OCPBUGS-61937: Add Missing Periods to Error Messages and update try again button link #15511
NO-JIRA: Remove yarn-generate from post-install script #15373
CONSOLE-4796: Migrate some Dashboards extensions to dynamic #15526
OCPBUGS-61535: Cancel PVC creation redirect user to last visited page instead of PVC list #15502
CONSOLE-4764: Add tech preview feature flag support #15477
CONSOLE-4715: Migrate the Enzyme test tests root directory and remove tests… #15462
NO-JIRA: Update CHANGELOG based on 4.18 plugin SDK package release #15517
CONSOLE-4760: update CRD list to use ResourceDataView #15469
CONSOLE-3769: Install @openshift/dynamic-plugin-sdk #15509
OCPBUGS-60084: Help dropdown should be closed automatically after tour model opened #15483
OCPBUGS-55401: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15315
OCPBUGS-59634: Fix the events search input width, and incorporate PF Toolbar component #15501
NO-JIRA: Update README.md with instructions for logging out kube:admin in local #15482
NO-JIRA: chore(OWNERS): remove logonoff from reviewers #15505
CONSOLE-4710: use useOverlay to launch ErrorModal #15475
OCPBUGS-61087: Updation of label from edit label doesn’t work #15460
OCPBUGS-61519: Fix improper DescriptionList refactor #15495
OCPBUGS-59972: Add validation and type guards on healthHandler calls to prevent errors #15470
CONSOLE-4756: Convert more files to TypeScript #15472
OCPBUGS-61458: fix MachineSet YAML template #15478
OCPBUGS-58118: fix namespace path generation for non-namespaced resources #15467
OCPBUGS-61183: cluster in workload identity mode is not applied with the token-auth-… #15459
OCPBUGS-61133: Fix catalog search relevance scoring, so that operators with attribute.keywords are displayed and remove unnecessary metadataName from calculation #15444
OCPBUGS-61468: i18n upload/download routine task for OCP version 4.20 #15476
CONSOLE-4727: Update OWNERS files across the repo #15461
CONSOLE-4598: Migrate enzyme tests/components/utils unit tests to React Testing… #15442
OCPBUGS-61393: Change default tab size from 4 to 2 #15474
CONSOLE-4635: Refactor PDBActionFactory to hook form and cleanup. #15285
NO-JIRA: Update plugin SDK CHANGELOG post 4.18 package publish #15463
OCPBUGS-61139: Correct the ordering of Catalog categories to be alphabetized #15454
CONSOLE-4610: Drop use of ceateModalLauncher from Topology package #15446
OCPBUGS-61090: fix typo in update approval strategy label #15452
CONSOLE-4683: Refactor group action factory #15404
And 8 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-61432: Revert “#1052 fix(oidc): fix OIDCClientSecretGet condition” #1058
OCPBUGS-59939: Bumped to latest console-operator version #1055
OCPBUGS-62512: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.21 #1050
OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1052
CONSOLE-4765, CONSOLE-4767: Automate console tech preview flag via cluster FeatureSet, Grant console service account watch permissions for ClusterCatalogs #1043
OCPBUGS-61726: Revert “OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition” #1046
OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1041
OCPBUGS-61483: Update DEFAULT_DOC_URL to point to OpenShift Container Platform 4.21 #1044
OCPBUGS-61383: Update QuickStarts typo and doc link #1042
OCPBUGS-60863: Rename Dockerfile to Dockerfile.ocp #1039
OCPBUGS-60782: pluginOrder field should only contain available plugins #1038
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

no-jira: Update OWNERS #204
Full changelog

coredns

NO-JIRA: Updating coredns-container image to be consistent with ART for 4.21 #154
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #153
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-62582: Updating csi-driver-manila-container image to be consistent with ART for 4.21 #351
OCPBUGS-62544: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.21 #352
OCPBUGS-62575: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.21 #350
NO-JIRA: shiftstack: Update OWNERS #353
Full changelog

csi-driver-nfs

NO-JIRA:shiftstack: Update OWNERS #162
OCPBUGS-62509: Updating csi-driver-nfs-container image to be consistent with ART for 4.21 #161
Full changelog

csi-external-attacher

OCPBUGS-61394: UPSTREAM: 682: Skip VolumeAttachments of other drivers #88
NO-JIRA: Updating csi-attacher-container image to be consistent with ART for 4.21 #87
Full changelog

csi-external-provisioner

OCPBUGS-62541: Updating csi-provisioner-container image to be consistent with ART for 4.21 #116
Full changelog

csi-external-resizer

OCPBUGS-62504: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.21 #178
OCPBUGS-61547: Requeue PVC over PV creation #173
Full changelog

csi-external-snapshot-metadata

NO-JIRA: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.21 #5
Full changelog

csi-external-snapshotter, csi-snapshot-controller

OCPBUGS-62423: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.21 #188
NO-JIRA: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.21 #187
Full changelog

csi-livenessprobe

OCPBUGS-62403: Updating csi-livenessprobe-container image to be consistent with ART for 4.21 #77
Full changelog

csi-node-driver-registrar

OCPBUGS-60108: update log level verbosity to not clutter logs #86
OCPBUGS-62506: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.21 #85
Full changelog

docker-builder

OCPBUGS-62340: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.21 #481
Full changelog

docker-registry

OCPBUGS-62576: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.21 #448
OCPBUGS-60845: update OWNERS #447
Full changelog

driver-toolkit

Updating the OWNERS file. (#175) #175
Updating driver-toolkit-container image to be consistent with ART for 4.21 (#172) #172
Full changelog

etcd, installer-etcd-artifacts

OCPBUGS-62338: Updating ose-etcd-container image to be consistent with ART for 4.21 #342
Full changelog

gcp-cloud-controller-manager

OCPBUGS-62572: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.21 #92
NO-JIRA: Update OWNERS #90
OCPBUGS-61006: Adjust vendoring to use go.work to get rid of the symlink #91
Full changelog

gcp-cluster-api-controllers

OCPBUGS-62417: Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.21 #249
NO-JIRA: Update OWNERS #248
Full changelog

gcp-machine-controllers

OCPBUGS-62520: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.21 #130
NO-JIRA: Update OWNERS #129
no-jira: Machine Api Operator GCP must search for the GCP Custom Endpoints Installer feature gate #128
Full changelog

gcp-pd-csi-driver

Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.21 #84
Full changelog

gcp-pd-csi-driver-operator

NO-JIRA: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.21 #151
CORS-4201: Search for the feature gate for GCP Custom Endpoints #150
Full changelog

gcp-workload-identity-federation-webhook

OCPBUGS-62591: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.21 #10
Full changelog

haproxy-router

OCPBUGS-62501: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.21 #679
OCPBUGS-62555: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.21 #680
OCPBUGS-49769: Validate the key and cert content before accepting #669
NE-2137: Bump router k8s libraries to 0.33.4 #671
OCPBUGS-60257: fix extra space in haproxy template #676
OCPBUGS-57896: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.20 #660
OCPBUGS-57845: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.20 #659
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #675
OCPBUGS-61224: Revert Prevent startup failures due to name resolution” #672
NO-JIRA: Add davidesalerno to OWNERS #670
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPSTRAT-2371: Update to Kubernetes v1.34.1 #2484
OCPBUGS-62608: Updating openshift-enterprise-pod-container image to be consistent with ART for 4.21 #2481
OCPBUGS-60610: UPSTREAM: 134199: Promote regression-issue-74839 to 1.4 #2472
OCPBUGS-43994: UPSTREAM: <carry>: kube-apiserver: wire through isTerminating into handler chain #2477
OCPBUGS-61554: Bump 1.33.5 #2459
OCPBUGS-61754: UPSTREAM: <carry>: Add retries for GetCurrentResourceVersion. #2467
OCPBUGS-61222: Do not remove PVC ClaimRef to fix flaky VAC test #2452
OCPBUGS-58313: apiserver library go bump #2457
NO-JIRA: UPSTREAM: 133682: Increase port-forward broken connection detection client timeout #2428
OCPBUGS-60507: Unrevert bump to v1.33.4 #2441
OCPBUGS-56594: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2443
OCPBUGS-61196: UPSTREAM: 133625: Remove patch/update from ServiceCIDR API conformanc… #2444
OCPBUGS-60946: UPSTREAM: 133425: Fix SELinux label comparison #2417
Full changelog

hypershift

OCPBUGS-61296: fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7087
OCPBUGS-51136: specify SCC annotation for pods in data plane #7091
CNTRLPLANE-1681: chore(deps): update sigs.k8s.io/cluster-api-provider-openstack/orc digest to e4f56a2 #7096
OCPBUGS-63205: fix(e2e): correct readOnlyRootFilesystem test logic #7076
NO-JIRA: docs(ai): add reference to AGENTS.md for AI agent guidance #7085
OCPBUGS-61941: fix(ingress): add LoadBalancerSourceRanges support for external router service #6859
OCPBUGS-63175: remove NTO Service and ServiceMonitor #7086
NO-JIRA: fix(ibm): Update version information for Red Hat OpenShift on IBM Cloud #6776
OCPBUGS-62871: fix(e2e): refactor createHostedCluster to remove deps between option settings #6997
CNTRLPLANE-475: Enable Azure NodePool API happy path to pick image #6904
NO-JIRA: Add Claude Code skills and Azure unit tests #7074
NO-JIRA: refactor(ignitionserver): move lookupMappedImage to shared util package #6778
GCP-97: Add initial GCP platform support to Hosted Cluster API #6960
OCPBUGS-63130: fix: routes are not used in case of IBM Cloud #7054
OCPBUGS-63153: Revert “fix(capi-provider): wait for infrastructure resource before startup” #7057
CNTRLPLANE-1550, CNTRLPLANE-1552: Implement environment variable override for shared ingress HAProxy image #6989
OCPBUGS-63049: Make the hypershift CLI binary FIPS-compliant #7032
OCPBUGS-61164: Add per-pod crash toleration #6958
OCPBUGS-60472: fix kubevirt, use 100.66.0.0/16 for join subnet #6978
OCPBUGS-36389: Omit metadata for telemetry remote write and ensure _id label #6208
OCPBUGS-63172: control-plane-operator/…/ingress-operator/deployment: Declare a metrics port #7052
OCPBUGS-63215: fix: hosted cluster CRD compatibility with ocp 4.15 #7069
CNTRLPLANE-1673: feat(claude): add /test-tag-pipeline command #7062
NO-JIRA: Configure team marketplace for openshift-eng/ai-helpers plugins #7068
OCPBUGS-63194: fix(konflux): correct ADDITIONAL_BASE_IMAGES parameter typo in tag pipeline #7064
OCPBUGS-61881: Red Hat Konflux update hypershift-gomaxprocs-webhook #7063
OCPBUGS-63194: fix(konflux): fix tag pipeline EC failures #7060
OCPBUGS-55751: Fix Konflux tag pipeline template variable substitution #6910
CNTRLPLANE-1620: feat(gomaxprocs-webhook): introduce admission webhook to auto-set GOMAXPROCS #6994
OCPBUGS-63148: bump Konflux build images #7055
CNTRLPLANE-1615: Add repo metrics tool for tracking AI-assisted commits #6983
CNTRLPLANE-980: feat(api): Validation for hc.status.configuration.authentication status #6883
OCPBUGS-61829: resolve initContainer permission issue after node reboot #6990
NO-JIRA: test: update external-oidc e2e tests to dynamically determine tests to run #6924
NO-JIRA: migrate renovate config #7029
CNTRLPLANE-1643: implement multi-branch strategy with security-focused release management #7023
CNTRLPLANE-1641: update Tekton tasks to latest trusted versions #6998
OCPBUGS-62172: Add OpenStack node drivers to allowed non-read-only root filesystem containers #6946
OCPBUGS-62863: feat(cmd): collect ServiceMonitor and PodMonitor resources in dump #6970
NO-JIRA: chore(ai): add ability for jira-solve to save a plan spec first #6995
CNTRLPLANE-1493: Add Claude command for automated Konflux task updates #6921
CNTRLPLANE-1484: Expose cluster autoscaler metrics in HCP #6902
CNTRLPLANE-1582: Prevent azure cluster destroy command from deleting managed/main resource group #6956
CNTRLPLANE-1543: fix(aws): use clean image for placeholder nodes #6935
CNTRLPLANE-1468: feat(install): add command line argument for ImagePullPolicy configuration #6875
NO-JIRA: feat(claude): add e2e-analyze command for CI failure analysis #6737
CNTRLPLANE-1374: feat(azure): add setup scripts for self-managed Azure hosted clusters #6752
NO-JIRA: chore(ai): configure all agents to inherit model configuration #6906
CNTRLPLANE-1332: docs(azure): add self-managed Azure HyperShift overview guide #6948
CNTRLPLANE-1432: Make PSA test conditional on OpenShiftPodSecurityAdmission feature gate #6923
CNTRLPLANE-1581: feat(azure): relax API to make externalDNS optional for self-managed clusters #6951
OCPBUGS-62446: fix(hcco): add retry mechanism for HCP retrieval to handle transient connectivity issues #6918
NO-JIRA: docs(jira-solve): require godoc comments and unit tests for new functions #6957
OCPBUGS-60637: feat(cpo): add UID security context to CSO deployment #6786
OCPBUGS-62407: chore(build): update container images to 4.21 #6936
NO-JIRA: Add openstack-reviewers, openstack-approvers #6911
GCP-96: add GCPPlatform feature gate #6929
CNTRLPLANE-1332: docs(readme): correct spelling mistake #6943
CNTRLPLANE-1332: docs(azure): add self-managed cluster setup documentation #6808
OCPBUGS-61245: Fix driver-config ConfigMap content flapping due to random ordering #6907
CNTRLPLANE-1545: docs(commands): improve jira-solve command with logical commit organization #6937
NO-JIRA: chore(ci): update Konflux Tekton tasks to latest trusted versions #6928
OCPBUGS-62328: Add missing svc-kubeconfig mount to CAPO Deployment #6909
OCPBUGS-62324: Fix test-e2e annotations flag parsing #6908
AUTOSCALE-322: fix karpenter token secret leak #6790
CNTRLPLANE-980: feat(api): add hc.status.configuration.authentication status field #6261
NO-JIRA: fix(e2e): extend ValidateHostedClusterConditions timeout #6913
KFLUXSPRT-5246: update base images from RHEL9 ELS to UBI9 minimal 9.4 #6916
OCPBUGS-62172: Add Manila, Cinder to list of pods allowed readOnlyRootFileSystem=false #6885
NO-JIRA: fix(test): support external oidc settings on non-aws platform #6754
NO-JIRA: chore(ai): ensure jira-solve run make pre-commit #6901
NO-JIRA: chore(ai): let jira-solve show the executed command in the PR desc #6898
OCPBUGS-61936: fix(capi-provider): wait for infrastructure resource before startup #6860
OCPBUGS-62224: fix(e2e): add stabilization wait in GlobalPullSecret test to reduce flakiness #6892
CNTRLPLANE-1478: chore: add AI directory paths to OWNERS file #6884
NO-JIRA: chore(ai): add claude slash command jira solve #6882
OCPBUGS-62099: make TestAutoscalingBalancing more robust #6877
OCPBUGS-61850: fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races #6843
NO-JIRA: ci(dev-cluster): Fix dev token secret annotation #6876
OCPBUGS-62056: test(e2e): fix flaky EnsureOAPIMountsTrustBundle with retry logic #6872
OCPBUGS-62128: hcco: sync watched resource types to availability-prober #6879
CNTRLPLANE-1331: Get self-managed Azure working again #6703
OCPBUGS-59885: [e2e][KubeVirt] Ignore KubeVirtNodesLiveMigratable Condition on HC #6826
CNTRLPLANE-1455: docs(contribute): consolidate contributing guide; refresh PR template; add landing page #6866
OCPBUGS-61776: fix(ignition-server): Don’t delete user-managed cert secrets #6836
OCPBUGS-61894: Enable VolumeAttributesClass runtime config #6855
CNTRLPLANE-1452: docs(ci): add documentation for checking CI status #6849
OCPBUGS-61438: fix(security): harden konnectivity-agent DaemonSet security context #6835
OCPBUGS-61828: refactor FeatureGate status check #6862
OCPBUGS-61329: skip EnsureReadOnlyRootFilesystemTmpDirMount check for kubevirt HCP pods #6842
OCPBUGS-61825: test(e2e,kubevirt): skip break-glass-credentials on kubevirt #6856
OCPBUGS-61862: ci: Remove the MCE 2.10 konflux pipeline #6848
OCPBUGS-61719: fix: propagate AWSLoadBalancerTargetNodesAnnotation to… #6823
OCPBUGS-61334: fix(kas): Set correct container port in postStart handler, 2 #6824
OCPBUGS-61177: ci: use common MCE konflux pipeline #6743
NO-JIRA: Update Branch Tasks Docs #6840
OCPBUGS-56249: fix lint-fix Makefile rule #6151
OCPBUGS-61048: test(e2e): add autoscaler deployment verification to autoscaling test #6779
OCPBUGS-61687: fix(capi-provider): use single replica deployment for aws and azure #6807
fix(disable-psa): disable PSA check for 4.20 #6831
OCPBUGS-61482: fix(proxy): ensure URLs have scheme before proxy resolution #6789
OCPBUGS-61587: fix(oauth): oauth-openshift deployment should be HA #6802
CNTRLPLANE-1277: Enable TestCreateClusterCustomConfig for Azure #6706
Revert “OCPBUGS-61334: fix(kas): Set correct container port in postStart handler” #6805
OCPBUGS-60185: resolve MIRRORED_RELEASE_IMAGE flapping #6751
OCPBUGS-61499: fix(control-plane): remove resource limits from kube-controller-manager #6785
CNTRLPLANE-1364: feat: enable global pull secret for AWS #6736
OCPBUGS-61334: fix(kas): Set correct container port in postStart handler #6773
NO-JIRA: fix karpenter metric validation in e2e #6714
NO-JIRA: chore(AI): add claude agents for different SMEs #6787
OCPBUGS-61329: test(e2e): skip kubevirt pods in EnsureReadOnlyRootFilesystem #6770
OCPBUGS-61462: temporarily use v4.20 catalogs #6782
NO-JIRA: add permissions to role policy #6783
CNTRLPLANE-1385: docs: add MCP setup guide for Cursor with sample config #6775
CNTRLPLANE-1383: docs(aro-e2e): add ARO HCP e2e artifacts navigation guide and Cursor rule #6774
OCPBUGS-61218: test(e2e): add control plane component rollout validation to upgrade test #6767
CNTRLPLANE-203: feat(sharedingress): add Azure Public IP tagging support for router service #6730
OCPBUGS-61219: fix: cleanup old PKI operator deployment during upgrades #6758
OCPBUGS-61282: rename CCM deployments to align with 4.19 #6757
NO-JIRA: fix(api): enhance API NodePool’s API docs #6753
NO-JIRA: chore(tests): validate conditions after executing tests #6738
OCPBUGS-60376: fix token rotation causing Karpenter to stop working #6561
NO-JIRA: contrib: add utility for cleaning roles #5945
CNTRLPLANE-267: Restructure the OWNERS usage in the whole repo #5784
AUTOSCALE-332: allow karpenter-operator to support rhobs monitoring #6704
CNTRLPLANE-1370: feat(supportedversion): add OCP 4.21 support; update e2e constants and tests #6739
NO-JIRA: docs(create-jira-items): document OCPBUGS issue creation and default versions #6741
Full changelog

ibm-cloud-controller-manager

OCPBUGS-62342: Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 4.21 #86
NO-JIRA: Update OWNERS #85
Full changelog

ibm-vpc-block-csi-driver

Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.21 #112
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-62375: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.21 #156
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-62486: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.21 #130
NO-JIRA: Update OWNERS #126
Full changelog

ibmcloud-machine-controllers

OCPBUGS-62491: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.21 #71
NO-JIRA: Update OWNERS #70
Full changelog

insights-operator

NO-JIRA: add CLAUDE.md #1162
CCXDEV-15577: retry mechanism for network error #1161
NO-JIRA: remove CRD manifests #1156
CCXDEV-15551: Decouple CRD storage specs #1157
OCPBUGS-60870: The Gather Job did not check the current configuration before running #1154
OCPBUGS-61893: set extractor as default container #1141
OCPBUGS-62215: operator is not set as degraded when failed #1151
And 9 elided commits (e.g. from squash or rebase merges)
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-62351: Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 #53
OCPBUGS-62433: Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 #54
Full changelog

ironic

METAL-1599: Allow additional PXE file mount point #702
OCPBUGS-62443: Updating ironic-container image to be consistent with ART for 4.21 #699
OCPBUGS-62201: Bump ironic to include idrac10 fix #697
METAL-1446, METAL-1566, METAL-1577: Sync Ironic and Sushy #695
METAL-1574: Remove temporary dependencies from source #692
OKD-283: fixing OKD ironic-image errors and metal3 pod crashes (centos9) #688
OCPBUGS-61459: sync with Ironic changes, including the local RPC revert #687
METAL-1528: Use custom directories in the runironic-proxy script #679
OCPBUGS-60455: set [json_rpc]port unconditionally #684
Full changelog

ironic-agent

OKD-297: Fix broken OKD4.20 ironic-agent-image #200
OKD-295: Fix broken OKD ironic-agent-image #199
OCPBUGS-62329: Updating ironic-agent-container image to be consistent with ART for 4.21 #197
METAL-1574: Update deps pkgs versions #196
Full changelog

ironic-machine-os-downloader

OCPBUGS-62357: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.21 #107
Full changelog

ironic-static-ip-manager

OCPBUGS-62511: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.21 #54
Full changelog

keepalived-ipfailover

Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.21 #214
Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.21 #213
Full changelog

kube-metrics-server

OCPBUGS-62397: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.21 #47
Full changelog

kube-rbac-proxy

OCPBUGS-62563: Updating kube-rbac-proxy-container image to be consistent with ART for 4.21 #126
Full changelog

kube-state-metrics

OCPBUGS-62356: Updating kube-state-metrics-container image to be consistent with ART for 4.21 #125
NO-ISSUE: [bot] Bump openshift/kube-state-metrics to v2.17.0 #124
Full changelog

kube-storage-version-migrator

OCPBUGS-62566: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.21 #234
Full changelog

kubevirt-csi-driver

OCPBUGS-62564: Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.21 #70
Full changelog

machine-api-operator

OCPCLOUD-3072: Support AMD SEV-SNP on AWS #1420
OCPBUGS-62333: Updating ose-machine-api-operator-container image to be consistent with ART for 4.21 #1421
OCPBUGS-61728: Fixed multi nic e2e to wait for node removal after machineset tests #1417
OCPBUGS-61728: Adjusted machine e2e tests to wait for nodes to clean up #1415
NO-JIRA: Update OWNERS_ALIASES #1414
OCPBUGS-60901: bump openshift/api #1407
Full changelog

machine-config-operator

OCPBUGS-62714: Temporary policy.json for PIS rpm-ostree rebasing #5345
MCO-1807: Add CPMS support in the MCO’s boot image controller #5332
OCPNODE-3806: Do not change default PSI setting in MCO #5343
OCPBUGS-62925: RHEL10 RT kernel packages filtering #5362
NO-ISSUE: Add AMI update automation script #5351
OCPBUGS-62376: Updating ose-machine-config-operator-container image to be consistent with ART for 4.21 #5316
OCPBUGS-52302: MCO-1713: Update MachineConfigNode resource to include on cluster image mode fields #5282
OCPBUGS-54682: Fix - NetworkManager restart or crash renders br-ex unusable #5304
OCPNODE-3747: Disable Swap mode in Kubelet and enable drop-in directory #5294
OCPEDGE-2188: embed fencing validator into TNF MCO #5285
NO-JIRA: shiftstack: Update OWNERS #5334
OCPBUGS-62510: Skip rpm-ostree local rebase if no PIS #5333
OCPBUGS-62493: Only fire OSImageURLOverridden and set metrics on changes #5319
MCO-1844: Remove MissingMachineConfig Alert #5261
MCO-1685: Add mco-sanitize utility main logic #5303
OCPBUGS-59968: Cert Controller should live fetch SAN IPs during cert rotation #5245
OCPBUGS-62341: Ensure the node passed to RunCordonOrUncordon comes from the latest updated state #5305
OCPBUGS-60805: configure-ovs: work around a Cisco switch issue #5274
MCO-408: Add OpenShift-native access to change logLevel for MachineConfigOperator components #5291
OCPBUGS-42303: Networking: reset ovn-remote config and allow ovnkube controller to s… #5123
MCO-1685: Add mco-sanitize file processing logic #5298
MCO-1685: Add mco-sanitize redactor #5295
OCPBUGS-58198: Fix MCP updated machine count for image mode disabling case #5271
MCO-1673: Add Component Readiness tests for Azure boot image updates #5257
MCO-1840: Remove MCN CRD cleanup cronjob #5234
OCPBUGS-60120: Add nil/null checks to image registry secret decode #5253
NO-ISSUE: Add delays to reduce TestOSBuildController failures #5239
MCO-1808: MCO-1790: Implement Azure boot image updates #5202
OCPBUGS-61695: Override NMState service definition #5284
OCPBUGS-60161: Add mcd_local_unsupported_packages recording rule #5242
CORS-4170: Extending in-cluster DNS support to Azure #5216
OCPBUGS-60537: Machine-config controller should actively manage cordon while draining #5276
OCPBUGS-56558: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5259
Full changelog

machine-image-customization-controller

METAL-1564: Use available images #147
OCPBUGS-62505: Updating ose-image-customization-controller-container image to be consistent with ART for 4.21 #148
Full changelog

machine-os-images

OCPBUGS-61477: Acquire aarch64 ISO at runtime #67
OCPBUGS-56049: Force rebuild for OCP 4.21 #66
OCPBUGS-62596: Updating ose-machine-os-images-container image to be consistent with ART for 4.21 #69
Full changelog

metallb-frr

OCPBUGS-62371: Bump the root image version #109
Full changelog

monitoring-plugin

OBSINTA-777: [Incidents] Regression for Silences #615
OBSINTA-777: [Incidents] Add filtering regression tests #613
OU-1036: fetch metric labels from tenancy path when appropriate #608
OBSINTA-777: [Incidents] Regression for Charts Display #609
NO-JIRA: Display incidents’ last update time #610
OBSINTA-777: Tests for Incidents Redux Related Regressions #606
OBSINTA-858: Improve Cypress Incidents Testing Infrastructure #595
OU-1033: close the first dropdown when deselecting incident #599
OU-1032: resolve stale Redux state bug in incidents time range calculation #598
OCPBUGS-63056, OCPBUGS-63061: Improve alignment with console SDK #600
OU-1030: revert most of my previous changes & avoid flickering when chang… #596
OU-995: automation monitoring testing namespace level #594
OU-1024: Add translations for all strings in Incidents page #570
OU-1022: recalculate incident x values when filtering #589
OU-1011: Display determistic start and end dates #585
OU-999: automation monitoring plugin image injection and kubevirt installation cleanup working #590
OCPBUGS-62276: allow additional TLS config #580
OCPBUGS-62454: Updating monitoring-plugin-container image to be consistent with ART for 4.21 #566
OU-1011: Render short-lived incidents and alerts #581
OU-1016: avoid displaying stale alerts data when selecting another incident detail #573
OBSINTA-789: Sort alerts by start time #577
NO-JIRA: fix handle empty queries when removing incident filters #574
NO-JIRA: Fix tooltip vertical position #576
OU-986: automation removing uncaught exception #575
OBSINTA-789: Fix alert loading and processing #569
OU-1025: keep alerts populated for the incident, when the graph is hidden… #572
NO-JIRA: chore: add unit test command and dependencies #571
OBSINTA-857: Cypress add SKIP_ALL_INSTALL #568
NO-JIRA: fix hermetic builds #564
OBSINTA-858: Cypress incidents incident traversing robustness #556
OBSINTA-858: Cypress incidents mocking metric name change workaround #553
COO-1134: fix: update vulnerable dependencies #561
NO-JIRA: Update .gitignore (Cypress specific) #558
OU-1011: REVERT add a 5 minute to the first alert timestamp #559
OU-1011: add a 5 minute to the first alert timestamp #550
NO-JIRA: automation log and debug mode in headless mode #557
OU-1015: fix: incidents dropdown stays open fix #554
NO-JIRA: Update translations for incidents #555
OBSINTA-795: Data Test Selectors for Incidents Page #545
NO-JIRA: fix: immer dependency anr patternfly icons import #542
OU-989: Kubevirt with fixes after namespace level and session handler #543
NO-JIRA: Improve incidents timeline chart domain and loading UX #551
OU-1005: upgrade perses plugins #540
OBSINTA-789: Fix alerts chart empty state #549
RHINENG-20863: improved fetching logic for incidents #546
NO-JIRA: Login validation for all session flows #544
OU-833: fix 2 bugs for incidents page #539
NO-JIRA: Cypress Testsuite – Enhance Session Management #536
OBSINTA-463: Rename the cluster health metrics #514
OBSINTA-789: Update layout and labels #534
OU-863: fix step calculation to fix non existent data gaps #535
RHINENG-20701: fix utc timestamps in chart tooltips #531
OBSINTA-798: Cypress Incident Tests – Query Mocking #521
NO-JIRA: set rules as silenced if all alerts are silenced #533
RHINENG-20667: silenced alerts for chart and table #530
OU-658: Major Refactor + Adding Namespace dropdown to admin pages #483
NO-JIRA: automation - fix monitoring-plugin injection #532
NO-JIRA: Update build-image.sh #528
OU-671: Add Patternfly Theming to Perses #522
RHINENG-20424: fix clear filter bug with incident selected #527
OU-783: Fit the alerts timeline to the actual data timespan #529
OU-727: Filter incidents by max severity over time #526
OU-988: automation - cleanup for all scripts and fix on MP injection #523
RHINENG-20424: Incident ID filter for the Incidents Page #520
OU-897: automation OU-721 and hygiene of existing scripts #519
NO-JIRA: automation - regression testing for metrics - changes #516
RHINENG-20424: improved filters for severity and state #515
OU-501: automation - dashboards legacy and export csv #517
Full changelog

multus-admission-controller

OCPBUGS-62412: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.21 #110
Full changelog

multus-networkpolicy

Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.21 (#75) #75
Full changelog

must-gather

OSSM-10530: add Istio/Gateway API gather scripts #503
OCPBUGS-62551: Updating ose-must-gather-container image to be consistent with ART for 4.21 #507
Full changelog

network-interface-bond-cni

OCPBUGS-62415: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.21 #97
Full changelog

network-metrics-daemon

OCPBUGS-62414: Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.21 #137
Full changelog

network-tools

NO-JIRA: Fix jira ID for new members #164
OCPBUGS-62553: Updating ose-network-tools-container image to be consistent with ART for 4.21 #162
NO-JIRA:Add two new team members #163
NO-JIRA: Add Marty P to bug tooling #161
OCPBUGS-53196: Update references of master to main #160
Full changelog

networking-console-plugin

CNV-70637: replace useProjectsWithPrimaryUserDefinedLabel hook for VM networks #287
CNV-70637: fix selecting multiple projects for VM network #286
CNV-70637: rename VirtualMachine networks to Virtual Machine Networks #289
CNV-70637: show VirtualMachine network pages only if nmstate plugin is installed #288
CNV-70637: SelectTypeahead selection fixes #285
CNV-60063: fixing the Create ClusterUserDefinedNetwork form appearance #280
CNV-62168: Typos in Networking Pages #277
CNV-56937: Hiding the option to create cluster user defined networks or non-priv users, allowing the option to create CUDN for users with access not just admin #284
CNV-56937: Hiding the option to create cluster user defined networks or non-priv users #283
CNV-61569: Mark OVN K8s secondary localnet as deprecated #282
OCPBUGS-62442: Updating networking-console-plugin-container image to be consistent with ART for 4.21 #279
CNV-70018: fix null error #278
Merge #273
CNV-59876: use correct name space when switching tabs #276
OCPBUGS-61531: show VM network menu only on admin #275
OCPBUGS-61548: use console extension to render same nad actions #274
CNV-59629: set default MTU visible in form and yaml #272
CNV-68685: add primary UDN label info to VirtualMachine network creation form #271
CNV-68643: fix documentation links #270
CNV-68676: fix wizard cancel button #269
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-62418: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.21 #51
NO-JIRA: Update OWNERS #50
Full changelog

nutanix-machine-controllers

OCPBUGS-62378: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.21 #123
NO-JIRA: Update OWNERS #122
Full changelog

oauth-apiserver

OCPBUGS-62612: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #148
OCPBUGS-61754: Bump openshift/kubernetes-apiserver for consistent list etcd retries. #146
CNTRLPLANE-5: Bump openshift/kubernetes-apiserver #142
Full changelog

oauth-proxy

OCPBUGS-62590: Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART for 4.21 #337
Full changelog

oauth-server

OCPBUGS-62391: Updating oauth-server-container image to be consistent with ART for 4.21 #199
Full changelog

oc-mirror

no-jira: v2: add golangci-lint v2 config #1295
CLID-460: Adds a column with the actual implemented logic #1288
CLID-443: add mandatory –v1/–v2 flag #1284
OCPBUGS-60571: reject configurations with duplicated keys and/or entries #1275
CLID-430: migration to containers/container-libs #1255
OCPBUGS-55489: removes unintended exec permissions #1285
OCPBUGS-56398: Removes the clean up of logs directory #1289
OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 (missing files of pr 1280) #1283
OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 #1280
OCPBUGS-60929: generate the archive only after mirroring #1272
OCPBUGS-62106: v2/cli: show binary version in output #1273
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-catalogd, olm-operator-controller

OCPBUGS-63347: [OTE]: Enhance single/own ns based on review comments ( Follow-Up of: 714977c69 ) #539
OCPBUGS-63347: Fix flake for single/own ns tests by ensuring uniquess and waiting for k8s cleanups #536
NO-ISSUE: Update to new feature-gate options in helm #537
NO-ISSUE: Synchronize From Upstream Repositories #532
OCPBUGS-63347: Define Default timeouts and apply their usage accross to avoid flakes #535
NO-ISSUE: UPSTREAM: <carry>: fix cases 81696 and 74618 for product code changes #528
OPRUN-4181: UPSTREAM: <carry>: support singleown cases in disconnected #524
NO-ISSUE: Synchronize From Upstream Repositories #526
OPRUN-4194: Update OCP catalogs to v4.21 #518
NO-ISSUE: Synchronize From Upstream Repositories #523
OPRUN-4197: Upgrade OCP image from 4.20 to 4.21 #517
OPRUN-4134: Add 2 new tests for Single/Own Namespace install mode support #502
OPRUN-4199: [Default Catalog Tests] - Change logic to get ocp images from openshift/catalogd/manifests.yaml #521
OCPBUGS-62517: Synchronize from upstream #519
OPRUN-4176: Consolidate build API #514
OPRUN-4156: UPSTREAM: <carry>: support webhook case in disconnected #508
NO-ISSUE: Synchronize From Upstream Repositories #512
OPRUN-4176: Update does-not-exist and simple install to work i… #510
NO-ISSUE: Clean up cp-manifests #511
NO-ISSUE: Synchronize From Upstream Repositories #506
NO-ISSUE: UPSTREAM: <carry>: check kubeconfig only run-test and run-suite #507
NO-ISSUE: Fix VERSION replacement in catalog bindata #505
NO-ISSUE: Synchronize From Upstream Repositories #498
OCPBUGS-62753: for incompatible test add func to wait SA creation #501
NO-ISSUE: Synchronize From Upstream Repositories #497
OPRUN-4169: OTE building controller image #483
OPRUN-4080: Remove kustomize manifests from images and repo #494
NO-ISSUE: Synchronize From Upstream Repositories #493
OCPBUGS-62372: Updating ose-olm-catalogd-container image to be consistent with ART for 4.21 #491
NO-ISSUE: Synchronize From Upstream Repositories #492
OCPBUGS-62370: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.21 #490
OCPQE-30671: UPSTREAM: <carry>: migrate more cases from tests-private #488
NO-ISSUE: Synchronize From Upstream Repositories #489
OPRUN-4160: Fix cp-manifests copying of helm charts #482
OPRUN-4164: Synchronize From Upstream Repositories #487
OPRUN-4164: Synchronize From Upstream Repositories #484
NO-ISSUE: Add pedjak and trgeiger as reviewers #463
NO-ISSUE: Synchronize From Upstream Repositories #480
NO-ISSUE: Synchronize From Upstream Repositories #479
OCPQE-29416: Init OLMv1 OTE Framework for tests-private to migrate first case #467
OPRUN-4076, OPRUN-4078: Replace kustomize config with helm config #475
NO-ISSUE: add jiazha to approvers #477
NO-ISSUE: Synchronize From Upstream Repositories #476
NO-ISSUE: Synchronize From Upstream Repositories #473
NO-ISSUE: Synchronize From Upstream Repositories #471
NO-ISSUE: Synchronize From Upstream Repositories #465
NO-ISSUE: Grant QE approver permissions for OTE contributions #457
NO-ISSUE: Synchronize From Upstream Repositories #464
NO-ISSUE: Synchronize From Upstream Repositories #456
OCPBUGS-60868: Revert “Handle service-ca cert availability/rotation” #460
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

openshift-apiserver

NO-JIRA: Created an OWNERS file for the tests-extension directory for separate ote scaffold #567
OCPBUGS-62516: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.21 #560
OCPBUGS-61768: update pkg/image/OWNERS #555
OCPBUGS-61754: Bump openshift/kubernetes-apiserver for consistent list etcd retries. #556
OCPBUGS-61228: Bump Route generation when spec is updated #550
OCPBUGS-37215: pkg/image: conditionally parse raw image manifest #551
CNTRLPLANE-5: Bump openshift/kubernetes-apiserver #549
OCPBUGS-57474: ensure cache invalidation after a time #547
Full changelog

openshift-controller-manager

OCPBUGS-62559: Updating ose-openshift-controller-manager-container image to be consistent with ART for 4.21 #414
OCPBUGS-61899: CNTRLPLANE-1308: Fix Dockerfile.rhel: Add OTE binary build and packaging #419
CNTRLPLANE-1308: set up openshift-tests-extension for openshift-controller-manager and add a sanity test #417
Full changelog

openshift-state-metrics

OCPBUGS-62431: Updating openshift-state-metrics-container image to be consistent with ART for 4.21 #126
Full changelog

openstack-cluster-api-controllers

OCPBUGS-62567: Updating openstack-cluster-api-controllers-container image to be cons… #379
NO-JIRA: Fix internal vendoring #378
NO-JIRA: shiftstack: Update OWNERS #377
Full changelog

openstack-machine-api-provider

OCPBUGS-62473: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.21 #138
NO-JIRA: shiftstack: Update OWNERS #139
Full changelog

openstack-resource-controller

OCPBUGS-62455: Updating openstack-resource-controller-container image to be consistent with ART for 4.21 #22
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Update verify_commits.sh to use main branch #1127
OCPQE-30995: Define AI Guide for OLMv0 QE Migration cases #1128
OCPBUGS-59768: Synchronize From Upstream Repositories #1129
OCPQE-30680: migrate opm cases to OTE #1126
OCPQE-30741: support opm cases #1121
OCPQE-30781: support hypershift binary #1119
OCPQE-30679: migrate more cases from tests-private to make layout #1118
OCPQE-29415: correct suite name #1117
OCPQE-29415: enhance filters to add more suites #1116
NO-ISSUE: Synchronize From Upstream Repositories #1115
OCPQE-29415: add testing framework based on OTE and the first tests-private case #1113
OCPQE-29415: move golangci-lint and go-bindata to new location to fix sync #1114
OCPQE-29415: add OTE into olmv0 with new location #1108
NO-ISSUE: Synchronize From Upstream Repositories #1112
NO-ISSUE: UPSTREAM: <carry>: add jiazha to approvers #1110
Revert “OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0” #1109
NO-ISSUE: Updating operator-registry-container image to be consistent with ART for 4.21 #1106
OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0 #1105
NO-ISSUE: set package-server-manager as default container #1104
NO-ISSUE: Synchronize From Upstream Repositories #1103
NO-ISSUE: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.21 #1100
NO-ISSUE: Synchronize From Upstream Repositories #1101
NO-ISSUE: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.21 #1094
NO-ISSUE: make downstream csv namespace labeler plugin e2e more resilient to race conditions #1092
NO-ISSUE: Synchronize From Upstream Repositories #1088
Full changelog

operator-marketplace

NO-ISSUE: Upgrade OCP dependencies #680
OPRUN-4198: Upgrade deps to have compatible k8s version #676
OPRUN-4198: upgraded github.com/openshift/api, github.com/openshift/library-go and ginkgo #677
NO-ISSUE: Update Dockerfile.okd to use OCP image 4.21 #678
OCPBUGS-62384: Updating marketplace-operator-container image to be consistent with ART for 4.21 #674
NO-ISSUE: Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.2 #661
OCPBUGS-62132: Remove Expect func so that the test case can use the retry logic #665
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.25.1 #658
NO-ISSUE: Update CRD version installed via makefile target #648
NO-ISSUE: Fix hyperlink #651
OCPBUGS-60669: Add NetworkPolicy for hypershift #656
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-59552, OCPBUGS-61865, OCPBUGS-62636: DownStream Merge [10-19-2025] #2817
OCPBUGS-62546: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.21 #2772
CORENET-6160: DownStream Merge [10-10-2025] #2798
OCPBUGS-62545: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.21 #2771
CORENET-6055: Dockerfile: Unpin OVN and consume the latest from FDP. #2721
OCPBUGS-42303, OCPBUGS-56783: DownStream Merge [10-08-2025] #2790
OCPBUGS-62574: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.21 #2756
OCPBUGS-60468: DownStream Merge [09-23-2025] #2762
OCPBUGS-42303, OCPBUGS-58501, OCPBUGS-59657, OCPBUGS-61566: DownStream Merge [09-09-2025] #2750
OCPBUGS-61065: Adding ovndb-raft-functions.sh to ovnk image #2740
NO-JIRA: DownStream Merge [08-27-2025] #2736
Full changelog

powervs-block-csi-driver

Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.21 #107
Full changelog

powervs-block-csi-driver-operator

STOR-2523: Add hypershift managed-by labels for csi driver operators #89
OCPBUGS-62373: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.21 #88
Full changelog

powervs-cloud-controller-manager

OCPBUGS-62515: Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.21 #88
Full changelog

powervs-machine-controllers

OCPBUGS-62519: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.21 #129
Full changelog

prom-label-proxy

OCPBUGS-62508: Updating prom-label-proxy-container image to be consistent with ART for 4.21 #386
NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.1 #385
Full changelog

prometheus

NO-ISSUE: [bot] Bump openshift/prometheus to v3.6.0 #278
NO-JIRA: update Prometheus to v3.6.0 #277
OCPBUGS-62401: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.21 #274
OCPBUGS-62166: chore(scrape): default to legacy validation/escaping scheme until utf-8 is fully supported by prometheus-operator #272
NO-JIRA: [bot] sync rh-manifest.txt #261
OCPBUGS-56568: chore: compute highestTimestamp at queryManager level #262
Full changelog

prometheus-alertmanager

OCPBUGS-62428: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.21 #107
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-JIRA: Bump openshift/prometheus-operator to v0.86.1 #345
MON-4395: Bump openshift/prometheus-operator to v0.86.0 #344
OCPBUGS-62448: Updating prometheus-config-reloader-container image to be consistent with ART for 4.21 #341
OCPBUGS-62542: Updating prometheus-operator-container image to be consistent with ART for 4.21 #342
Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.21 #340
Full changelog

prometheus-node-exporter

NO-ISSUE: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.21 #170
Full changelog

route-controller-manager

OCPBUGS-62586: Updating ose-route-controller-manager-container image to be consistent with ART for 4.21 #65
NE-2169: Move annotations and metrics to a constants file #66
NO-JIRA: Add new team members to OWNERS #64
Full changelog

service-ca-operator

NO-JIRA:Created an OWNERS file for the tests-extension directory #284
OCPBUGS-62377: Updating ose-service-ca-operator-container image to be consistent with ART for 4.21 #276
OCPBUGS-63124: Fix e2e-aws-operator e2e test failures #281
OCPBUGS-56599: don’t hotloop on secret creation errors #274
Full changelog

stream-coreos, stream-coreos-extensions

NO-JIRA: update the okd repo for 4.21 #1862
NO-JIRA: OWNERS: switch to joelcapitao #1861
NO-JIRA: bump version to 4.21 #1860
Full changelog

telemeter

Updating telemeter-container image to be consistent with ART for 4.21 #565
Full changelog

tests

OCPBUGS-63383: Fix empty operator name #30407
OCPBUGS-61376: Isolate HPA tests #30411
TRT-2373: Revert #30269 “OTA-1626: fail CI if any ClusterOperator takes too long to update” #30425
OCPBUGS-63519: flake the missing port 9194 and 9193 once the team will fix will remove it #30424
TRT-2144: Add tcpdump to in cluster disruption monitor test when disruption is … #30177
NO-JIRA: fix hcpclustername #30422
NO-ISSUE: Fixing and investigating flakes during overlapping test execution #30410
CNTRLPLANE-1544: tests: authorization/rbac: Add restricted-v3 scc #30384
OCPSTRAT-2371: Update to Kubernetes v1.34.1 #30346
CNF-18661: add a test that should validate the communication matrix ports match the node’s listening ports #30003
NO-JIRA: known-image-checker: do nothing in WriteContentToStorage #30344
OTA-1626: fail CI if any ClusterOperator takes too long to update #30269
NO-JIRA: Extend project deletion timeout #30393
NO-JIRA: enhance TNF e2e test to handle quick member promotion #30385
CNTRLPLANE-1662: Migrate OCP-32383 to upstream #30378
CORENET-6373: ovn-k, virt, preconfigured udn addresses: Test MAC conflict detection #30314
NO-ISSUE: Automated - Update synthetic test data #30334
OCPBUGS-56281: gatewayapicontroller: Use dynamic client for OLM #30397
MULTIARCH-5391: Add Disruptive ImageStreamImportMode Tests into a Disruptive Suite #30239
OCPBUGS-62359: Check more operatorsProgressing #30367
TRT-2275: some enhancement for e2e-analysis #30276
OCPBUGS-63149: revert https://github.com/openshift/origin/pull/30054 #30386
NO-JIRA: Combine global and command args in BackgroundRC #30382
NO-JIRA: MCO add GetAlerts to the Monitor thanos struct #30379
NO-JIRA: enhance-waitnodeready-util #30377
OCPBUGS-63040: Add imagestream update dryrun test #30357
OCPEDGE-1565: [TNF] Add double node failure recovery test #30370
NO-JIRA: implement WithoutKubeconf method to clear config path #30371
NO-JIRA: oc adm upgrade status: Record err and outputs #30151
NO-JIRA:I Fixing race condtion #30360
OCPBUGS-62552: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.21 #30327
NO-JIRA: init lease-checker namespaces #30373
NO-JIRA: generate unique namespace names for UDN tests #30348
NO-JIRA: update namespace privilege check to use PSA label #30355
OCPBUGS-56281: gatewayapicontroller: Clean up resources when done #29900
NO-JIRA: another attempt at disabling blank issues #30369
NO-JIRA: Make it clear that we do not monitor GH issues #30368
NO-JIRA: Update OWNERS for compat_otp #30361
NO-ISSUE: Add webhook image for the olmv1 tests #30356
OTA-1637: ClusterOperators should not go Progressing only for cluster scaling #30297
OCPBUGS-60593: Skip oauth test for external control plane topology #30200
TRT-2351: Revert “NO-JIRA: Improve case execution time” #30363
TRT-2349: Revert “make TLS registry tests required” #30358
OCPNODE-3238: Add SigstoreImageVerificationPKI image policy validation tests #30315
TRT-2346: Fix not initializing adminRESTConfig #30345
OCPBUGS-60853: make TLS registry tests required #29074
TRT-1854: remove upstream annotation framework #30340
NO-JIRA: Filter preconfiguredIPs based on cluster IP family support #30338
NO-JIRA: Improve case execution time #30329
CORENET-6363: Add PreconfiguredUDNAddresses duplicate IP detection tests #30197
OCPBUGS-62701: Revert TRT-1854: remove upstream annotation framework #30337
Revert “Revert “NO-JIRA: Add olm into the known operator set”” #30325
NO-JIRA: BugFix- don’t modify finalArgs in Template func #30328
OCPNODE-3659: Not fail upgrade checks if all nodes are ready #30318
OCPBUGS-62249: Tweak Endpoints admission test for upcoming change #30304
MCO-1828: Remove pathological test in disruptive #30272
OCPBUGS-61196: Add test that the ServiceCIDR API is blocked #30234
NO-JIRA: oc adm upgrade status: Skip test in multihop update jobs #30150
MCO-1865: Update MCO tests to be in only one test suite each #30309
OCPBUGS-62474: CNTRLPLANE-1308: Enable OTE for OCM and OCM Operator #30270
TRT-1854: remove upstream annotation framework #30305
Revert “NO-JIRA: Add olm into the known operator set” #30313
NO-JIRA: Add olm into the known operator set #30308
MCO-1875: Bump timeout for vSphereBootimageUpdate tests #30288
NO-ISSUE: Automated - Update synthetic test data #30277
OCPBUGS-62227: bump telemetry series limit to 1000 #30302
OCPERT-151: Migrate new func for Compare structured data instead of string from openshift-test-private repo #30291
OCPBUGS-61398: fix(ginkgo): avoid nil deref and harden env var setup #30289
OCPQE-30698: enable OTE for olmv0 #30285
OTA-1626: Fail CI if alert/ClusterOperatorDegraded is fired #30282
TRT-2071: Remove annotations and replace with environment selector based test skipping and disablement #30064
trt-2246: lower parallelism based on worker nodes #30226
OCPSTRAT-2045: Automating OCPSTRAT-2045 feature in upstream #30067
OCPBUGS-61980: Temporarily remove commatrix documentation test for rework #30280
OCPBUGS-61905: oidc: improve rollout wait times #30274
OCPSTRAT-2371: image: add busybox to list of allowed images #30281
CORENET-6418: drop openshift-sdn tests #29085
OCPEDGE-1483: Add TNF E2E tests for network failure #30110
OCPBUGS-61196: Skip ServiceCIDR in etcd_storage_path test #30254
OCPBUGS-61855: Temporarily disable InstallPlanStepAppliedWithWarnings for k8s 1.34 rebase #30275
OCPBUGS-61398: fix(test): prevent nil pointer dereference in ginkgo test runner #30224
OCPBUGS-61855: CRD Apply Alert Allowance #30265
NE-2090: adding one GIE automation test #30189
OTA-1601: upgrade status: recover checking the updating COs #30154
NO-JIRA: Allow systemd-coredump test to fail #30261
OCPSTRAT-2371: Update etcd test data for k8s 1.34 release #30242
OCPBUGS-61733: Restore retries for port-forward test #30255
OCPEDGE-2090: Add validation tests for tnf topology effects #30252
TRT-2275: introduce cluster e2e-analysis sub command for openshift-tests #30211
MON-4290: add test for must-gather gather_metrics #30054
OCPBUGS-61193: chore(extended/prometheus): ²⁄₂: make ‘targets auth’ test more lenient and more resilient #30256
OCPBUGS-57325: update machines scale test #30028
Trt-2246: network test isolation #30192
NO-ISSUE: Automated - Update synthetic test data #30244
NO-JIRA: Remove runbook exceptions for fixed bugs #30246
trt-2230: Add monitor test annotation #30196
NO-JIRA: Increase request-timeout to deflake test #30248
NO-JIRA: Deflake oc observe test by using explicit port number #30247
OTA-1559: test/extended/cli/adm_upgrade/recommend: TestRiskA PromQL use max_over_time #30160
NO-JIRA: Add intervals and a test for systemd-coredumps #30222
CNTRLPLANE-945: oidc: add retry logic for Keycloak route creation #30233
CNF-18661: Update vendor to include communication matrix bug fix #30232
CNTRLPLANE-945: images: add keycloak images and use them in ExternalOIDC tests #30221
NO-JIRA: Migrate new func for non-Job pods readiness helper for OCL from openshift-test-private repo #30193
NO-ISSUE: test/extended/util/framework: Poll in IsMicroShiftCluster #30161
OCPBUGS-61538: Skip config-operator checking when featureSet is DevPreviewNoUpgrade #30236
OCPBUGS-61193: chore(extended/prometheus): make ‘targets auth’ test more lenient and more resilient. #30219
NO-ISSUE: Automated - Update synthetic test data #30020
OCPBUGS-61287: Add flaky kubectl logs test to the retry list to clean signal for release #30215
OCPBUGS-60507: Bump to latest openshift/kubernetes (v1.33.4) #30227
CNF-18661: update the commatrix vendor version to contain new changes #30220
Trt-2257: track run options #30195
OCPBUGS-61063: test/extended/cli/adm_upgrade/recommend: Enable precheck and accept #30113
NO-JIRA: Fix Node NotReady intervals being left open when a node is deleted #30188
OCPBUGS-61194: Mark etcd net overload logging test as a flake #30210
CORENET-5329: revert primary udn test workaround from virt tests #29386
CNTRLPLANE-945: improve logging, add startup probe to Keycloak Deployment #30184
CNTRLPLANE-1306: Enable OTE for cluster-kube-storage-version-migrator-operator #30199
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

Updating ose-thanos-container image to be consistent with ART for 4.21 #164
Full changelog

volume-data-source-validator

OCPBUGS-62367: Updating volume-data-source-validator-container image to be consistent with ART for 4.21 #5
Full changelog

vsphere-cloud-controller-manager

OCPCLOUD-3087: Merge https://github.com/kubernetes/cloud-provider-vsphere:master (5691b82) into main #97
OCPBUGS-62571: Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.21 #100
NO-JIRA: Update OWNERS #99
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-62332: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.21 #75
OCPBUGS-57668: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.20 #59
NO-JIRA: Update OWNERS #65
OCPBUGS-61498: UPSTREAM: 3636: VSphereClusterIdentity: ensure namespace in tests exists when not using the default #67
OCPBUGS-61498: Fix openshift/unit-tests.sh #66
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.21 #150
NO-JIRA: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.21 #148
Full changelog

vsphere-csi-driver-operator

OCPBUGS-62344: Fix escaping of password #312
OCPBUGS-57797: Degrade OCP cluster on storagepolicy sync errors #310
Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.21 #311
Full changelog

vsphere-problem-detector

NO-JIRA: Add cursor command to debug the operator #192
OCPBUGS-62595: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.21 #191
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Package List

cri-o-1.34.0-1.el10s
kernel-6.12.0-142.el10
openshift-kubelet-4.21.0-202510171627.p2.g96593f3.assembly.stream.el9
systemd-257-16.el10

Full list (575 packages)

NetworkManager-1:1.55.4-1.el10
NetworkManager-cloud-setup-1:1.55.4-1.el10
NetworkManager-libnm-1:1.55.4-1.el10
NetworkManager-ovs-1:1.55.4-1.el10
NetworkManager-tui-1:1.55.4-1.el10
WALinuxAgent-udev-2.13.1.1-2.el10
aardvark-dns-2:1.16.0-2.el10
acl-2.3.2-4.el10
adcli-0.9.2-9.el10
afterburn-5.10.0-1.el10
afterburn-dracut-5.10.0-1.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20250812-19.el10
amd-ucode-firmware-20250812-19.el10
atheros-firmware-20250812-19.el10
attr-2.5.2-5.el10
audit-4.0.3-4.el10
audit-libs-4.0.3-4.el10
audit-rules-4.0.3-4.el10
authselect-1.5.0-8.el10
authselect-libs-1.5.0-8.el10
avahi-libs-0.9~rc2-2.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-5.el10
bind-license-32:9.18.33-5.el10
bind-utils-32:9.18.33-5.el10
binutils-2.41-58.el10
binutils-gold-2.41-58.el10
bootc-1.8.0-1.el10
bootupd-0.2.28-2.el10
brcmfmac-firmware-20250812-19.el10
bsdtar-3.7.7-4.el10
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.25.0-6.el10
ca-certificates-2025.2.80_v9.0.305-101.el10
catatonit-5:0.2.1-1.el10
centos-gpg-keys-10.0-12.el10
centos-release-cloud-1-1.el10s
centos-release-nfv-common-1-5.el10s
centos-release-virt-common-1-1.el10s
centos-stream-release-10.0-12.el10
centos-stream-repos-10.0-12.el10
checkpolicy-3.9-1.el10
chrony-4.6.1-2.el10
cifs-utils-7.2-1.el10
cirrus-audio-firmware-20250812-19.el10
clevis-21-8.el10
clevis-dracut-21-8.el10
clevis-luks-21-8.el10
clevis-pin-tpm2-0.5.3-8.el10
clevis-systemd-21-8.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.1.13-1.el10
conmon-rs-0.6.6-2.el10s
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.241.0-1.el10
containers-common-5:0.64.0-4.el10
containers-common-extra-5:0.64.0-4.el10
coreos-installer-0.24.0-1.el10
coreos-installer-bootinfra-0.24.0-1.el10
coreutils-9.5-6.el10
coreutils-common-9.5-6.el10
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-1.34.0-1.el10s
cri-tools-1.34.0-2.el10s
criu-4.1-1.el10
criu-libs-4.1-1.el10
crun-1.24-1.el10
crypto-policies-20250905-2.gitc7eb7b2.el10
crypto-policies-scripts-20250905-2.gitc7eb7b2.el10
cryptsetup-2.8.1-1.el10
cryptsetup-libs-2.8.1-1.el10
curl-8.12.1-2.el10
cyrus-sasl-gssapi-2.1.28-27.el10
cyrus-sasl-lib-2.1.28-27.el10
dbus-1:1.14.10-5.el10
dbus-broker-36-4.el10
dbus-common-1:1.14.10-5.el10
dbus-libs-1:1.14.10-5.el10
dbus-tools-1:1.14.10-5.el10
device-mapper-10:1.02.206-3.el10
device-mapper-event-10:1.02.206-3.el10
device-mapper-event-libs-10:1.02.206-3.el10
device-mapper-libs-10:1.02.206-3.el10
device-mapper-multipath-0.9.9-12.el10
device-mapper-multipath-libs-0.9.9-12.el10
device-mapper-persistent-data-1.1.0-2.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-3.el10
dnf-4.20.0-18.el10
dnf-data-4.20.0-18.el10
dnsmasq-2.90-4.el10
dosfstools-4.2-12.el10
dracut-107-3.el10
dracut-network-107-3.el10
dracut-squash-107-3.el10
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-4.el10
e2fsprogs-libs-1.47.1-4.el10
efi-filesystem-6-6.el10
efibootmgr-18-8.el10
efivar-libs-39-3.el10
elfutils-debuginfod-client-0.193-1.el10
elfutils-default-yama-scope-0.193-1.el10
elfutils-libelf-0.193-1.el10
elfutils-libs-0.193-1.el10
erofs-utils-1.8.10-1.el10
ethtool-2:6.15-2.el10
expat-2.7.1-1.el10
file-5.45-8.el10
file-libs-5.45-8.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.3.1-1.el10
flashrom-1.3.0-8.el10
flatpak-session-helper-1.16.0-6.el10
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-1.9.31-1.el10
fwupd-efi-1.6-3.el10
fwupd-plugin-flashrom-1.9.31-1.el10
gawk-5.3.0-6.el10
gawk-all-langpacks-5.3.0-6.el10
gdbm-1:1.23-14.el10
gdbm-libs-1:1.23-14.el10
geolite2-city-20191217-14.el10
geolite2-country-20191217-14.el10
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.47.3-1.el10
glib2-2.80.4-8.el10
glibc-2.39-69.el10
glibc-common-2.39-69.el10
glibc-gconv-extra-2.39-69.el10
glibc-minimal-langpack-2.39-69.el10
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-2.el10
gnupg2-smime-2.4.5-2.el10
gnutls-3.8.10-2.el10
gobject-introspection-1.79.1-6.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
groff-base-1.23.0-10.el10
grub2-common-1:2.12-29.el10
grub2-efi-x64-1:2.12-29.el10
grub2-pc-1:2.12-29.el10
grub2-pc-modules-1:2.12-29.el10
grub2-tools-1:2.12-29.el10
grub2-tools-minimal-1:2.12-29.el10
gssproxy-0.9.2-10.el10
gzip-1.13-3.el10
hostname-3.23-14.el10
hwdata-0.379-10.6.el10
ignition-2.24.0-1.el10
ignition-grub-2.24.0-1.el10
ima-evm-utils-1.6.2-3.el10
info-7.1-6.el10
inih-58-3.el10
initscripts-service-10.26-2.el10
intel-audio-firmware-20250812-19.el10
intel-gpu-firmware-20250812-19.el10
ipcalc-1.0.3-12.el10
iproute-6.14.0-2.el10
iproute-tc-6.14.0-2.el10
iptables-libs-1.8.11-11.el10
iptables-nft-1.8.11-11.el10
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
isns-utils-libs-0.103-1.el10
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-11.el10
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-7.el10
kbd-legacy-2.6.4-7.el10
kbd-misc-2.6.4-7.el10
kdump-utils-1.0.58-1.el10
kernel-6.12.0-142.el10
kernel-core-6.12.0-142.el10
kernel-modules-6.12.0-142.el10
kernel-modules-core-6.12.0-142.el10
kernel-modules-extra-6.12.0-142.el10
kernel-modules-extra-matched-6.12.0-142.el10
kexec-tools-2.0.31-1.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-12.el10
kmod-libs-31-12.el10
kpartx-0.9.9-12.el10
krb5-libs-1.21.3-8.el10
less-661-3.el10
libacl-2.3.2-4.el10
libaio-0.3.111-22.el10
libarchive-3.7.7-4.el10
libassuan-2.5.6-6.el10
libattr-2.5.2-5.el10
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-13.el10
libbpf-2:1.6.0-3.el10
libcap-2.69-7.el10
libcap-ng-0.8.4-6.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-4.el10
libcomps-0.1.21-3.el10
libcurl-minimal-8.12.1-2.el10
libdhash-0.5.0-58.el10
libdnf-0.73.1-12.el10
libdnf-plugin-subscription-manager-1.30.10-1.el10
libdrm-2.4.123-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-14.el10
libevent-2.1.12-16.el10
libfdisk-2.40.2-13.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.3.1-2.2.el10
libgcrypt-1.11.0-6.el10
libgomp-14.3.1-2.2.el10
libgpg-error-1.50-2.el10
libgudev-238-7.el10
libgusb-0.4.9-4.el10
libibverbs-57.0-2.el10
libicu-74.2-5.el10
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.11.1-3.el10
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.0-3.el10
libkcapi-hasher-1.5.0-3.el10
libkcapi-hmaccalc-1.5.0-3.el10
libksba-1.6.7-2.el10
libldb-4.23.0-101.el10
libluksmeta-9-26.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-13.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-2.el10
libnftnl-1.2.8-3.el10
libnghttp2-1.64.0-2.el10
libnl3-3.11.0-1.el10
libnvme-1.15-3.el10
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-12.el10
libref_array-0.1.5-58.el10
librepo-1.18.0-5.el10
libseccomp-2.5.6-1.el10
libsecret-0.21.2-8.el10
libselinux-3.9-1.el10
libselinux-utils-3.9-1.el10
libsemanage-3.9-1.el10
libsepol-3.9-1.el10
libsmartcols-2.40.2-13.el10
libsmbclient-4.23.0-101.el10
libsolv-0.7.29-8.el10
libss-1.47.1-4.el10
libsss_certmap-2.11.1-3.el10
libsss_idmap-2.11.1-3.el10
libsss_nss_idmap-2.11.1-3.el10
libsss_sudo-2.11.1-3.el10
libstdc++-14.3.1-2.2.el10
libtalloc-2.4.3-100.el10
libtasn1-4.20.0-1.el10
libtdb-1.4.14-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-13.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.28-1.el10
libutempter-1.2.1-15.el10
libuuid-2.40.2-13.el10
libuv-1:1.51.0-1.el10
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.23.0-101.el10
libxcrypt-4.4.36-10.el10
libxkbcommon-1.7.0-4.el10
libxml2-2.12.5-9.el10
libxmlb-0.3.23-1.el10
libxslt-1.1.39-8.el10
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20250812-19.el10
linux-firmware-whence-20250812-19.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-4.el10
lsof-4.98.0-7.el10
lua-libs-5.4.6-7.el10
luksmeta-9-26.el10
lvm2-10:2.03.32-3.el10
lvm2-libs-10:2.03.32-3.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.7-2.el10
mdadm-4.4-2.el10
memstrack-0.2.5-6.el10
microcode_ctl-4:20250812-1.el10
mokutil-2:0.7.2-1.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-5.el10
mt7xxx-firmware-20250812-19.el10
nano-8.1-3.el10
ncurses-6.4-14.20240127.el10
ncurses-base-6.4-14.20240127.el10
ncurses-libs-6.4-14.20240127.el10
net-tools-2.0-0.73.20160912git.el10
netavark-2:1.16.0-1.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-2.el10
nftables-1:1.1.1-5.el10
nmap-ncat-4:7.92-3.el10
nmstate-2.2.54-1.el10
npth-1.6-21.el10
nss-altfiles-2.23.0-5.el10
numactl-libs-2.0.19-2.el10
nvidia-gpu-firmware-20250812-19.el10
nvme-cli-2.15-2.el10
nxpwireless-firmware-20250812-19.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.0-2.el10
openldap-2.6.9-1.el10
openshift-clients-4.21.0-202510241153.p2.g18719cc.assembly.stream.el9
openshift-kubelet-4.21.0-202510171627.p2.g96593f3.assembly.stream.el9
openssh-9.9p1-14.el10
openssh-clients-9.9p1-14.el10
openssh-server-9.9p1-14.el10
openssl-1:3.5.1-5.el10
openssl-fips-provider-1:3.5.1-5.el10
openssl-libs-1:3.5.1-5.el10
openvswitch-selinux-extra-policy-1.0-36.el10s
openvswitch3.5-3.5.0-6.el10s
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-4.21.0-202510131126.p2.g68e446a.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.21.0-202510180155.p2.g1457693.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.21.0-202510151957.p2.g0a0890a.assembly.stream.el9
ostree-2025.6-1.el10
ostree-grub2-2025.6-1.el10
ostree-libs-2025.6-1.el10
p11-kit-0.25.10-1.el10
p11-kit-server-0.25.10-1.el10
p11-kit-trust-0.25.10-1.el10
pam-1.6.1-8.el10
pam-libs-1.6.1-8.el10
passt-0^20250512.g8ec1341-2.el10
passt-selinux-0^20250512.g8ec1341-2.el10
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.el10.3
pcre2-syntax-10.44-1.el10.3
pcsc-lite-2.2.3-2.el10
pcsc-lite-ccid-1.6.0-2.el10
pcsc-lite-libs-2.2.3-2.el10
perl-AutoLoader-5.74-514.el10
perl-B-1.89-514.el10
perl-Carp-1.54-511.el10
perl-Class-Struct-0.68-514.el10
perl-Data-Dumper-2.189-512.el10
perl-Digest-1.20-511.el10
perl-Digest-MD5-2.59-6.el10
perl-DynaLoader-1.56-514.el10
perl-Encode-4:3.21-511.el10
perl-Errno-1.38-514.el10
perl-Exporter-5.78-511.el10
perl-Fcntl-1.18-514.el10
perl-File-Basename-2.86-514.el10
perl-File-Path-2.18-511.el10
perl-File-Temp-1:0.231.100-512.el10
perl-File-stat-1.14-514.el10
perl-FileHandle-2.05-514.el10
perl-Getopt-Long-1:2.58-3.el10
perl-Getopt-Std-1.14-514.el10
perl-HTTP-Tiny-0.088-512.el10
perl-IO-1.55-514.el10
perl-IO-Socket-IP-0.42-512.el10
perl-IO-Socket-SSL-2.085-3.el10
perl-IPC-Open3-1.22-514.el10
perl-MIME-Base64-3.16-511.el10
perl-Mozilla-CA-20231213-5.el10
perl-NDBM_File-1.17-514.el10
perl-Net-SSLeay-1.94-8.el10
perl-POSIX-2.20-514.el10
perl-PathTools-3.91-512.el10
perl-Pod-Escapes-1:1.07-511.el10
perl-Pod-Perldoc-3.28.01-512.el10
perl-Pod-Simple-1:3.45-511.el10
perl-Pod-Usage-4:2.03-511.el10
perl-Scalar-List-Utils-5:1.63-511.el10
perl-SelectSaver-1.02-514.el10
perl-Socket-4:2.038-511.el10
perl-Storable-1:3.32-511.el10
perl-Symbol-1.09-514.el10
perl-Term-ANSIColor-5.01-512.el10
perl-Term-Cap-1.18-511.el10
perl-Text-ParseWords-3.31-511.el10
perl-Text-Tabs+Wrap-2024.001-511.el10
perl-Time-Local-2:1.350-511.el10
perl-URI-5.27-3.el10
perl-base-2.27-514.el10
perl-constant-1.33-512.el10
perl-if-0.61.000-514.el10
perl-interpreter-4:5.40.2-514.el10
perl-libnet-3.15-512.el10
perl-libs-4:5.40.2-514.el10
perl-locale-1.12-514.el10
perl-mro-1.29-514.el10
perl-overload-1.37-514.el10
perl-overloading-0.02-514.el10
perl-parent-1:0.241-512.el10
perl-podlators-1:5.01-511.el10
perl-vars-1.05-514.el10
pigz-2.8-7.el10
pinentry-1.3.1-1.el10
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:5.6.0-2.el10
policycoreutils-3.9-2.el10
policycoreutils-python-utils-3.9-2.el10
polkit-125-4.el10
polkit-libs-125-4.el10
polkit-pkla-compat-0.1-30.el10
popt-1.19-8.el10
procps-ng-4.0.4-8.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python-unversioned-command-3.12.11-3.el10
python3-3.12.11-3.el10
python3-audit-4.0.3-4.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.10-1.el10
python3-dateutil-1:2.9.0.post0-1.el10
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-18.el10
python3-dnf-plugin-versionlock-4.7.0-9.el10
python3-dnf-plugins-core-4.7.0-9.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-12.el10
python3-idna-3.7-4.el10
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-12.el10
python3-librepo-1.18.0-5.el10
python3-libs-3.12.11-3.el10
python3-libselinux-3.9-1.el10
python3-libsemanage-3.9-1.el10
python3-pip-wheel-23.3.2-7.el10
python3-policycoreutils-3.9-2.el10
python3-requests-2.32.4-1.el10
python3-rpm-4.19.1.1-20.el10
python3-setools-4.5.1-5.el10
python3-setuptools-69.0.3-12.el10
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.10-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-2.el10
qemu-guest-agent-18:10.0.0-12.el10
quota-1:4.09-9.el10
quota-nls-1:4.09-9.el10
rdma-core-57.0-2.el10
readline-8.2-11.el10
realtek-firmware-20250812-19.el10
rpcbind-1.2.7-3.el10
rpm-4.19.1.1-20.el10
rpm-build-libs-4.19.1.1-20.el10
rpm-libs-4.19.1.1-20.el10
rpm-ostree-2025.11-1.el10
rpm-ostree-libs-2025.11-1.el10
rpm-plugin-audit-4.19.1.1-20.el10
rpm-plugin-selinux-4.19.1.1-20.el10
rpm-plugin-systemd-inhibit-4.19.1.1-20.el10
rpm-sequoia-1.9.0.3-1.el10
rpm-sign-libs-4.19.1.1-20.el10
rsync-3.4.1-3.el10
samba-client-libs-4.23.0-101.el10
samba-common-4.23.0-101.el10
samba-common-libs-4.23.0-101.el10
sed-4.9-3.el10
selinux-policy-42.1.7-1.el10
selinux-policy-targeted-42.1.7-1.el10
setup-2.14.5-7.el10
sg3_utils-1.48-7.el10
sg3_utils-libs-1.48-7.el10
shadow-utils-2:4.15.0-8.el10
shadow-utils-subid-2:4.15.0-8.el10
shared-mime-info-2.3-8.el10
shim-x64-15.8-5.el10
skopeo-2:1.20.0-1.el10
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-8.el10
sqlite-libs-3.46.1-5.el10
ssh-key-dir-0.1.4-9.el10
sssd-2.11.1-3.el10
sssd-ad-2.11.1-3.el10
sssd-client-2.11.1-3.el10
sssd-common-2.11.1-3.el10
sssd-common-pac-2.11.1-3.el10
sssd-ipa-2.11.1-3.el10
sssd-krb5-2.11.1-3.el10
sssd-krb5-common-2.11.1-3.el10
sssd-ldap-2.11.1-3.el10
sssd-nfs-idmap-2.11.1-3.el10
sssd-proxy-2.11.1-3.el10
stalld-1.20.4-1.el10
strace-6.12-1.el10
subscription-manager-1.30.10-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.15-9.p5.el10
sudo-python-plugin-1.9.15-9.p5.el10
systemd-257-16.el10
systemd-journal-remote-257-16.el10
systemd-libs-257-16.el10
systemd-pam-257-16.el10
systemd-udev-257-16.el10
tar-2:1.35-7.el10
tiwilink-firmware-20250812-19.el10
tmux-3.3a-13.20230918gitb202a2f.el10
toolbox-0.2-2.el10
tpm2-tools-5.7-4.el10
tpm2-tss-4.1.3-5.el10
tpm2-tss-fapi-4.1.3-5.el10
tzdata-2025b-2.el10
unbound-anchor-1.20.0-13.el10
unbound-libs-1.20.0-13.el10
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-13.el10
util-linux-core-2.40.2-13.el10
vim-data-2:9.1.083-5.el10
vim-minimal-2:9.1.083-5.el10
virt-what-1.27-3.el10
which-2.21-44.el10
xfsprogs-6.11.0-2.el10
xkeyboard-config-2.41-3.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10
xz-libs-1:5.6.2-4.el10
zlib-ng-compat-2.2.3-2.el10
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

cri-o 1.33.4-1.el10s → 1.34.0-1.el10s
cri-tools 1.33.0-2.el10s → 1.34.0-2.el10s
openshift-clients 4.20.0-202510212154.p2.g7f1d6f8.assembly.stream.el9 → 4.21.0-202510241153.p2.g18719cc.assembly.stream.el9
openshift-kubelet 4.20.0-202509232257.p2.ge0d4216.assembly.stream.el9 → 4.21.0-202510171627.p2.g96593f3.assembly.stream.el9
ose-aws-ecr-image-credential-provider 4.20.0-202509051528.p2.gbb88da1.assembly.stream.el9 → 4.21.0-202510131126.p2.g68e446a.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.20.0-202509051528.p2.gd469d04.assembly.stream.el9 → 4.21.0-202510180155.p2.g1457693.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.20.0-202509051528.p2.gf940e72.assembly.stream.el9 → 4.21.0-202510151957.p2.g0a0890a.assembly.stream.el9

Extensions

Full list (48 packages)

NetworkManager-libreswan-1.2.27-3.el10.x86_64
bison-3.8.2-9.el10.x86_64
cmake-filesystem-3.31.8-1.el10.x86_64
cpp-14.3.1-2.2.el10.x86_64
elfutils-libelf-devel-0.193-1.el10.x86_64
flex-2.6.4-19.el10.x86_64
gcc-14.3.1-2.2.el10.x86_64
glibc-devel-2.39-69.el10.x86_64
kernel-6.12.0-142.el10.x86_64
kernel-core-6.12.0-142.el10.x86_64
kernel-devel-6.12.0-142.el10.x86_64
kernel-headers-6.12.0-142.el10.x86_64
kernel-modules-6.12.0-142.el10.x86_64
kernel-modules-extra-6.12.0-142.el10.x86_64
kernel-rt-core-6.12.0-142.el10.x86_64
kernel-rt-devel-6.12.0-142.el10.x86_64
kernel-rt-modules-6.12.0-142.el10.x86_64
kernel-rt-modules-core-6.12.0-142.el10.x86_64
kernel-rt-modules-extra-6.12.0-142.el10.x86_64
krb5-pkinit-1.21.3-8.el10.x86_64
krb5-workstation-1.21.3-8.el10.x86_64
ldns-1.8.3-18.el10.x86_64
libkadm5-1.21.3-8.el10.x86_64
libmpc-1.3.1-7.el10.x86_64
libqb-2.0.8-6.el10.x86_64
libreswan-5.3-1.el10.x86_64
libxcrypt-devel-4.4.36-10.el10.x86_64
libzstd-devel-1.5.5-9.el10.x86_64
lm_sensors-libs-3.6.0-20.el10.x86_64
m4-1.4.19-11.el10.x86_64
make-1:4.4.1-9.el10.x86_64
nspr-4.36.0-4.el10.x86_64
nss-3.112.0-4.el10.x86_64
nss-softokn-3.112.0-4.el10.x86_64
nss-softokn-freebl-3.112.0-4.el10.x86_64
nss-sysinit-3.112.0-4.el10.x86_64
nss-tools-3.112.0-4.el10.x86_64
nss-util-3.112.0-4.el10.x86_64
openssl-devel-1:3.5.1-5.el10.x86_64
openvswitch3.5-ipsec-3.5.0-6.el10s.x86_64
pcp-conf-6.3.7-5.el10.x86_64
pcp-libs-6.3.7-5.el10.x86_64
protobuf-3.19.6-11.el10.x86_64
python3-openvswitch3.5-3.5.0-6.el10s.x86_64
sysstat-12.7.6-2.el10.x86_64
usbguard-1.1.3-6.el10.x86_64
usbguard-selinux-1.1.3-6.el10.noarch
zlib-ng-compat-devel-2.2.3-2.el10.x86_64

CentOS Stream CoreOS base layer: 10.0.20251023-0

View changelog in Markdown or change previous release:

Source code for this page located on github