4.22.0-0.okd-scos-nightly-2026-02-07-232544

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:4.22.0-0.okd-scos-nightly-2026-02-07-232544

Team Approvals:

Tests:

Blocking jobs
- aws Succeeded periodic-ci-openshift-release-master-okd-scos-4.22-e2e-aws-ovn
Informing jobs
- agent-single-node-ipv6 Succeeded periodic-ci-openshift-release-master-okd-scos-4.22-e2e-agent-single-node-ipv6
- aws-ovn-techpreview Failed (2 retries) periodic-ci-openshift-release-master-okd-scos-4.22-e2e-aws-ovn-techpreview
- aws-upgrade Succeeded periodic-ci-openshift-release-master-okd-scos-4.22-e2e-aws-ovn-upgrade
- aws-upgrade-minor Succeeded periodic-ci-openshift-release-master-okd-scos-4.22-upgrade-from-okd-scos-4.21-e2e-aws-ovn-upgrade
- gcp Succeeded periodic-ci-openshift-release-master-okd-scos-4.22-e2e-gcp
- vsphere Succeeded periodic-ci-openshift-release-master-okd-scos-4.22-e2e-vsphere-ovn

Upgrades from:

Upgrades to:

4.22.0-0.okd-scos-nightly-2026-02-08-124137 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.21.0-0.okd-scos-2026-02-07-155122

Created: 2026-02-08 01:16:04 +0000 UTC

Image Digest: sha256:ecfbf8efc9158e6e2f984a113a7248dd5cfda4bf969623c3c10f3c61ac6d9c39

Components

Kubectl 1.34.1
Kubernetes 1.34.2
Kubernetes Tests 1.34.1
CentOS Stream CoreOS 10.0.20260203-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AdditionalRoutingCapabilities (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AdminNetworkPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AlibabaPlatform (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkDiagnosticsConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkLiveMigration (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkSegmentation (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PreconfiguredUDNAddresses (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ProcMountType (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
RouteAdvertisements (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
TranslateStreamCloseWebsocketRequests (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VolumeAttributesClass (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ManagedBootImagesCPMS (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (New)	Enabled (New)	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (New)	Enabled (New)	Enabled	Enabled
NewOLMOwnSingleNamespace (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled		Enabled (New)	Disabled	Enabled
IngressControllerDynamicConfigurationManager (0 tests)	Disabled	Disabled	Enabled	Enabled			Enabled (Changed)	Enabled (Changed)
KMSEncryptionProvider (0 tests)	Disabled	Disabled	Enabled	Enabled			Disabled (Changed)	Disabled (Changed)
NewOLMBoxCutterRuntime (0 tests)	Disabled	Disabled	Disabled	Enabled (Changed)			Disabled	Enabled (Changed)
CRIOCredentialProviderConfig (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIComputeInstall (0 tests)			Enabled (New)	Enabled (New)
ClusterAPIControlPlaneInstall (0 tests)			Enabled (New)	Enabled (New)
ClusterUpdateAcceptRisks (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ConfigurablePKI (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
DRAPartitionableDevices (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
EVPN (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ExternalOIDCWithUpstreamParity (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
KMSEncryption (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
NetworkConnect (0 tests)			Enabled (New)	Enabled (New)

New images

marketplace-operator git bfe98ab4 sha256:57a5cc39702a466ba0e8f410a9ecd841378233902ab4fa5093fad7b1ee771cab
openshift-enterprise-tests git 6f4d0ab3 sha256:3a9ce3da4c16614349db4761ff9c3ca415e5de0d2342fd2f0ccedd5e58c896f8

Removed images

installer-altinfra
installer-etcd-artifacts
installer-kube-apiserver-artifacts

Rebuilt images without code change

aws-kms-encryption-provider git 19e7b623 sha256:ae565d61a057b87af5fc4679b07102e1a28fdbd17f8f48c3c377bd9438d132ed
azure-service-operator git 17e57462 sha256:e39597484b6ab491f20520f77c6565a37055089d314da860095632ad3627218a
cluster-bootstrap git dc0d4a5c sha256:e05d0f02f009ac9f59639a841c8c4c865e4878e1db99fbc595d62de3606f6bc9
cluster-dns-operator git 41a53fed sha256:41f481364eda80f02647e4ad4f933796d52512f086fee885f0016f8955c5e08f
cluster-kube-cluster-api-operator git aec49344 sha256:73f002a2a48301f9d1a07c3762f12dae74eca5f2fa6bcdfbbb29828569cb7ea3
cluster-policy-controller git 8b775487 sha256:9e5edf18277c1a995853a883af89b6186acdcd087c76813dcc9a0cd664014317
container-networking-plugins git 747ad66c sha256:52910458c31abc05489528bdded010de5ce822f69dc3d5f0b6d5c9e684c6decb
containernetworking-plugins-microshift git 747ad66c sha256:26e7c0b464846e9efcd45a135637eed7dfe0d4d3256a3a14e8e70bfeb022841f
egress-router-cni git 5e0f8d1b sha256:85da515c435f4cdfea39ef8d7890fbcb45d66831eead3600964450ff8c9e6fab
gcp-cloud-controller-manager git 8732386c sha256:29319e20f7e85dc9abee66bbb3fbb033bcbd5086889b698b5d224bbb313496d8
ibm-cloud-controller-manager git c566572b sha256:debc70e5ed738bdd048ece9a58bafb5746e9a2154daa9c8a2a8097bc3eac3254
keepalived-ipfailover git 4d151b91 sha256:e879ddf72b89a799b0b370c5e4496596700b72fa6b5c0e3f8f8f4e795eb71df2
kubevirt-cloud-controller-manager git daf5fba2 sha256:a002532ecd271121f0b27e2542cbcb714d2628e9ea0f547dd2567de83ec7e6c3
kubevirt-csi-driver git 9e2dbddf sha256:725b3746d10f484b9dd46a5213af7d6afe1b853286aa72945f91123abf539c3b
libvirt-machine-controllers git 76effeca sha256:0a61191314b5408d8c172b7619fa6b56cb0079d95315d2240006c44516e5cee8
multus-cni git 93556f99 sha256:8cdf887a44b19543e8ee77bdcaf03aaf36166f37a55130a7ba0b77413618be17
multus-cni-microshift git 93556f99 sha256:fe8490398e8c597f221fc828c806dd3095e54592f7736166832c9057b0cfbca0
multus-route-override-cni git 08af4127 sha256:0e22a606429f43dc634c490f394389e13b685c24ca87d43ff3ae0a12c6b09288
multus-whereabouts-ipam-cni git d691040e sha256:4c701e13b50da1c51754c34397482fe0d03be34225c2af8994aea46e5b24b97d
network-interface-bond-cni git 297eeb43 sha256:46c8f94abb59676fad64f321a7f3075830fd7b6c97143a6b25407ef14bee9b81
oauth-server git 3ab74506 sha256:dd11c7f6eab8a4c1c3f2cf593432cd5187b7c0ddb187dc68c20787d1fbb4049e

agent-installer-api-server

MGMT-23077: Revert “MGMT-21038: Prevent from inventory set host RequestedHostname directly” #8840
OCPEDGE-2367: Add support for platform none and external on TNA clusters topology #8830
MGMT-22731: Add To Renovate Tool - Update UBI-minimal Version Automatically #8802
MGMT-22523: Bump AMD DeviceConfig driver version to 6.4.3 #8823
MGMT-23000: Fix when a BMH is paused in non-converged flow #8812
MGMT-22287: Remove OCP 4.12 support from assisted-service #8794
MGMT-21038: Prevent from inventory set host RequestedHostname directly #7962
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.21 #8816
ACM-29153: Upgrade hive to e33d70 #8807
MGMT-21756: enable FIPS 140-3 crypto module in Go builds #8755
NO-ISSUE: [master] Bump OCP versions: 4.20 #8801
MGMT-22583: Implement Swagger Definitions for 3rd Party CNI / No CNI #8717
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.20, 4.19, 4.13 #8795
NO-ISSUE: Clarify release images needed for ironic agent image #8778
NO-ISSUE: upgrade to 1.25 #8769
NO-ISSUE: [master] Bump OCP versions: 4.12, 4.18, 4.21, 4.16, 4.20 #8767
NO-ISSUE: Add parameter for pod disruption budget in openshift template #8765
MGMT-20701: host re-registration improvement #8737
MGMT-22189: Fix primary_ip_stack migration #8760
MGMT-22584: Create Enhancement Document for 3rd Party CNI / No CNI Support in Assisted Installer #8594
MGMT-22131: transitioning red hat operator base image to ubi minimal #8711
MGMT-22553: Partial cluster updates fail with false validation errors on dual-stack clusters #8704
MGMT-22297: fallback path for add-ntp-sources.sh #8742
NO-ISSUE: Update CONTRIBUTING.md #8745
MGMT-22189: Order dual-stack networks when fetching from DB #8488
MGMT-22656: Remove serviceMesh & kserve from DataScienceCluster spec #8741
NO-ISSUE: Add cpe label #8739
NO-ISSUE: bumping go version on branch master to v1.25 to solve CVE-2025-58183 #8708
AGENT-1407: add support for InternalReleaseImage related resources #8600
NO-ISSUE: [master] Bump OCP versions: 4.21 #8733
MGMT-16090: upgrade assisted-service postgresql from 12 to 13 #8602
MGMT-20499: Always generate iSCSI NIC reapply manifest for day2 host support #8705
NO-ISSUE: [master] Bump OCP versions: 4.17 #8725
MGMT-22278: Skip deleting spoke resources for an uninstalled agent #8608
MGMT-22186: Add kata runtime class to Assisted installer #8140
ACM-27859: Allow PreprovisioningImage finalizer to be removed once BMH finishes deprovisioning #8604
MGMT-20323: Prefer bootable disks for installation #8701
NO-ISSUE: add to owners_aliases #8703
MGMT-22545: Fix YAML marshaling for Kubernetes types in disconnected ignition #8619
OCPBUGS-68355: Fix Day-2 CSR approval race condition #8622
MGMT-22423: Fix race condition in ensureOwnerRef causing spec.installed to remain false #8621
ACM-27290: Fix policy.json not generated for InfraEnv mirror registry config #8609
ACM-27906: Fix container-image-availability check to use mirrored registries in disconnected environments #8611
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20 #8612
MGMT-22458: CVE-2025-65637 Bump github.com/go-openapi/loads, github.com/go-openapi/analysis, github.com/go-openapi/validate to fix CVE-2025-65637 through introducers update (models module) #8596
NO-ISSUE: Fix golangci-lint branch #8572
MGMT-22159: Add NFD operator to the list of OSC operator dependencies #8292
MGMT-22320: Expose GPU data in Agent CR inventory #8495
NO-ISSUE: Fix list bundle validation to check for feature incompatibilities #8571
MGMT-22273: reduce log amount #8565
MGMT-22396: CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 through indirect dependency conversion #8555
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

ACM-29166: Upgrade hive to e33d70 #1491
MGMT-22499: CVE-2025-66506 Bump github.com/sigstore/fulcio to v1.8.3 using replace directive #1484
MGMT-22532: CVE-2025-52881 Bump github.com/opencontainers/selinux to v1.13.0 using replace directive #1483
MGMT-22393: CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 using replace directive #1474
NO-ISSUE: upgrade go to 1.25 #1466
MGMT-22653: bump the required minimal go version to 1.24 #1459
NO-ISSUE: Add cpe label #1457
MGMT-22131: transitioning red hat operator base image to ubi minimal #1444
ACM-25812: bumping go version on branch master #1446
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-node-agent

ACM-29167: Upgrade hive to e33d70 #1311
MGMT-22131: transitioning red hat operator base image to ubi minimal #1288
MGMT-22395: CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 through indirect dependency conversion #1302
NO-ISSUE: Bump mockery to a go 1.25 compatible version #1295
NO-ISSUE: upgrade go to 1.25 #1289
NO-ISSUE: Add cpe label #1278
MGMT-21739: Skip log collection for non-existent services #1230
NO-ISSUE: add to owners_aliases #1268
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-ui

Fix Infinite Loader while Getting Empty Versions List (#3378) #3378
Bump preact from 10.26.9 to 10.28.2 (#3356) #3356
Bump lodash-es from 4.17.21 to 4.17.23 (#3364) #3364
Bump lodash from 4.17.21 to 4.17.23 (#3365) #3365
OCPBUGS-74421 | OVE UI: Fix rendezvousIP field name in error message (#3376) #3376
MGMT-22941: ABI: add version dropdown (#3370) #3370
Do not delete disconnected cluster/infraenv. (#3368) #3368
MGMT-21058: Expose BareMetalHost (BMH) Status and Events in the Assisted Installer / CIM Console (#3363) #3363
Clean up git conflict artefacts (#3325) #3325
MGMT-21991: Add Primary IPv6 Support-cim (#3346) #3346
Stop using deprecate Modal component in CIM (#3343) #3343
Add additional new fields to the above the sea UI (#3337) #3337
MGMT-20673: Improve OpenShift AI bundle requirements tooltip (#3352) #3352
Fix React 18 types (#3361) #3361
MGMT-22746: Add chatbot app (#3350) #3350
Refactor LabelsField component (#3354) #3354
Use PF Dropdown component for namespace select (#3345) #3345
Make Cisco Intersight URL editable in CIM config modal (#3357) #3357
Fix mass hostname change content alignment (#3344) #3344
Adapt PrismCode for dark mode (#3348) #3348
Fix FileUpload component (#3355) #3355
Assisted Installer OVE UI shows transient blank page with Technology Preview spinner (#3341) #3341
API/Ingress IP fields lack character limit (#3342) #3342
Use conversationId from props for feedback. (#3336) #3336
use old release process (#3333) #3333
MGMT-20727: Cisco Intersight URL should be configurable (#3332) #3332
MGMT-22465: Merge the contents of releases/v2.17-cim into master (#3319) #3319
change ABI above sea level iso size (#3322) #3322
Openshift AI Bundle on SNO enables ODF and LVM which are uncompatible (#3320) #3320
remove external platforms field from below sea level UI (#3316) #3316
Fix Cluster summary styling (#3216) #3216
Bump js-yaml from 4.1.0 to 4.1.1 (#3310) #3310
provides parameters for the GET /v2/operators/bundles route (#3306) #3306
Bump mdast-util-to-hast from 13.2.0 to 13.2.1 (#3287) #3287
Bump zx from 7.2.3 to 8.8.5 (#3273) #3273
Bump js-yaml from 4.1.0 to 4.1.1 (#3264) #3264
Full changelog

agent-installer-utils

OCPBUGS-76343: Add lso operator to appliance config #249
OCPBUGS-74933: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 2f3015a #221
OCPBUGS-74932: Update Konflux references #219
OCPBUGS-74242: Increase Konflux build pipeline memory #242
AGENT-1313: enable MCO IRI registry #232
OCPBUGS-71231: bump github.com/sirupsen/logrus to v1.9.3 #233
OCPBUGS-72420: Increase capabilities passed via buildah #229
NO-ISSUE: Add 4.22 isobuilder configs #213
AGENT-1334: Examples of golden snapshot and release for OVE ISO image #202
NO-ISSUE:Updating ose-agent-installer-utils-container image to be consistent with ART for 4.22 #216
OCPBUGS-69438: Remove operator manifests; now applied by assisted-installer #211
OCPBUGS-69406: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 20eb21c #210
OCPBUGS-69405: Update Konflux references #209
Full changelog

apiserver-network-proxy

OCPBUGS-69889: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.22 #88
Full changelog

aws-cloud-controller-manager

TRT-2536: UPSTREAM: <carry>: Fix OTE list tests when SingleReplica #125
Full changelog

aws-cluster-api-controllers

NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #586
OCPBUGS-70053: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.22 #585
Full changelog

aws-ebs-csi-driver

OCPBUGS-74521: UPSTREAM: 2806, 2816: Remove VolumeAttributesClass FeatureGate #300
OCPBUGS-69918: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.22 #296
OCPBUGS-69918: UPSTREAM: <carry>: do not require license in OCP files (follow-up) #298
OCPBUGS-69918: UPSTREAM: <carry>: do not require license in OCP files #297
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-74971: Fix azure-disk secret namespace/name args #502
OCPBUGS-74521: Remove VolumeAttributesClass FeatureGate #503
STOR-2523: hypershift: Add desired-version annotation to controller Deployments and use DeploymentVersionController in csi driver operators #457
OCPBUGS-70304: Fix azure-file secret namespace/name #500
OCPBUGS-66113: Some containers do not have readOnlyRootFilesystem #476
OCPBUGS-70085: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.22 #483
OCPBUGS-70339: deploy prometheus role and binding on hypershift guest #488
OCPBUGS-63698: fix(azure): add token-minter for self-managed hosted clusters #461
OCPBUGS-69739: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.22 #480
OCPBUGS-69907: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.22 #482
OCPBUGS-69710: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.22 #479
NO-JIRA: Add /sniff-test claude command #486
OCPBUGS-69883: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.22 #481
OCPBUGS-69982: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.22 #484
OCPBUGS-69695: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.22 #478
STOR-2543: add VAC manifest for tests in AWS EBS #475
STOR-1945: STOR-2056: Add SupportedSizeRange for azurefile-nfs #477
Full changelog

aws-karpenter-provider-aws

AUTOSCALE-293: partially ignore drift on ec2nodeclass userdata field #21
Full changelog

aws-machine-controllers

SPLAT-2558: Add AWS Dedicated Host support #160
OCPBUGS-72390: Fix reconciler consistency checks in Update and Exists #162
OCPBUGS-69950: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.22 #161
Full changelog

aws-pod-identity-webhook

OCPBUGS-74165: Fix GOTOOLCHAIN env var #211
CCO-728: merge upstream changes v0.6.11 #209
OCPBUGS-69825: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.22 #208
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-65654: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (765f435) into main #152
Full changelog

azure-cluster-api-controllers

OCPBUGS-53004: Remove references to master branch #336
OCPCLOUD-3101: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.22.0 (4523016) into master #350
NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #358
OCPBUGS-69934: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.22 #356
Full changelog

azure-disk-csi-driver

OCPBUGS-69754: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.22 #119
Full changelog

azure-file-csi-driver

OCPBUGS-70304: UPSTREAM: 2940: fix: optionally skip reading the config from the API #114
OCPBUGS-70060: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.22 #111
OCPBUGS-70060: fix failing unit tests in azure-file-csi-driver #112
Full changelog

azure-kms-encryption-provider

OCPBUGS-69961: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.22 #26
OCPBUGS-62405: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.21 #23
Full changelog

azure-machine-controllers

OCPCLOUD-3252: Add AGENTS configuration #181
OCPBUGS-69864: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.22 #179
Full changelog

azure-workload-identity-webhook

CCO-729: merge upstream changes #42
OCPBUGS-69895: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.22 #41
Full changelog

baremetal-cluster-api-controllers

Revert “NO-JIRA: Add manifests verify target” #60
NO-JIRA: UPSTREAM: <carry>: Do not ignore files in vendor #59
NO-JIRA: Add manifests verify target #57
OCPBUGS-69724: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.22 #56
Full changelog

baremetal-installer, installer, installer-artifacts

MCO-2031: OS Image Stream to install-config schema #10192
CORS-4055: migrate EC2 API calls to AWS SDK v2 #10244
OCPBUGS-60162: reject byo vpc/subnets with CAPI owned cluster tag #9913
OCPBUGS-41570: Ensure correct mask for bootstrap external IP #8987
OCPEDGE-2276: Add support for platform None and External in TNA clusters #10286
OCPEDGE-2276: Add support for platform None in TNA (Two-Node Arbiter) clusters #10236
CORS-4055: migrate credential provider check to AWS SDK v2 #10261
CORS-4328: configure AWS CCM NodeIPFamilies for dual-stack support #10257
CORS-4055, CORS-4078: migrate ELB/ELBv2 API calls to AWS SDK v2 #10258
OCPBUGS-74631: Add validation to reject userProvisionedDNS on Azure Stack Hub #10279
CORS-4055: migrate default region check to AWS SDK v2 #10267
OCPBUGS-74625: gcp: skip AI zones #10269
CORS-4055: migrate IAM API calls to AWS SDK v2 #10245
CORS-4055: migrate S3 API calls to AWS SDK v2 #10242
OCPBUGS-63305: Make SimulatePrincipalPolicy optional #10081
OCPBUGS-67816: Revert storage account API version for client #10224
OCPBUGS-74078: add support for NVIDIA H100 and H200 enabled machine series #10234
CORS-4299, CORS-4300: Allow N4A Instance Types in the installer #10211
no-jira: add trace-config Claude command for installconfig field usage analysis #10190
AGENT-1309: Increase disk size requirements for master and SNO #10254
OSDOCS-17769: Add AWS m7 instance types #10246
CORS-4073: validate instance type support IPv6 in dual-stack #10238
OCPBUGS-74363: Remove region option for the GCP Private Service Connect Endpoint #10249
NO-JIRA: use v2 config for go-lint #10240
AGENT-1425: Fix stale dependency in agent-register-infraenv #10237
AGENT-1309: Modify NoRegistryClusterInstall storage requirements #10176
OCPBUGS-56770: Honor user-specified bootDiagnostics on Azure Stack Hub #10223
OCPBUGS-63028: filtering only PEs from cluster list #10193
CORS-4075, CORS-4113: Install-config and Infra manifest updates for DualStack for AWS and Azure #10207
OCPBUGS-72525: add newly detected instance types for Azure during 4.21 regression test #10202
OCPBUGS-69735: handle SSH rule deletion for Azure private #10213
OCPBUGS-69734: Fix destroy bootstrap command for Azure #10212
NO-JIRA: add user Rolv-Apneseth to coreos-maintainers and coreos-reviewers #10206
OCPBUGS-69923: ensure deterministic zone ordering for control plane machines #10188
NO-JIRA: Add angelcerveraroldan to coreos approvers and reviewers #10209
OCPBUGS-72577: bump default channel to stable-4.22 for main(4.22) branch #10205
OCPBUGS-71232: Fix nil pointer exception in azure mapiImage #10200
OCPBUGS-70013: Updating ose-installer-container image to be consistent with ART for 4.22 #10182
no-jira: Platform Experts Claude Command #10186
no-jira: Add barbacbd for gcp owners #10189
OCPBUGS-70021: Updating ose-baremetal-installer-container image to be consistent with ART for 4.22 #10183
OCPBUGS-70047: Updating ose-installer-artifacts-container image to be consistent with ART for 4.22 #10184
no-jira: Fix linting issues for golangci-lint v2 #10138
NO-JIRA: remove pod-infra-container-image flag from kubelet #10145
OCPBUGS-69870: rename “var-ostree\x2dcontainer.mount” to something more computer-friendly #10171
OCPBUGS-69840: PowerVC: fix PostProvision #10175
OCPBUGS-69434, SPLAT-2584: Added ability to install different IPAM version when in TP. #10169
OCPBUGS-65859: Fix set-hostname dependency for interactive console services #10118
OCPBUGS-17667: Validate vCenter datacenters in failure domain topology #10086
OCPBUGS-61344: skip deleting snapshots managed by AWS Backup service #9964
OCPBUGS-62870: installing into GCP Shared VPC with minimal permissions #10157
OCPBUGS-64775: use CAPZ to provision ssh rule #10162
OCPBUGS-66295: Fix ignition warning about agent-extract-tui.service #10146
AGENT-1357: remove AgentWorkflowTypeInstallInteractiveDisconnected workflow #10020
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-machine-controllers

NO-ISSUE: Synchronize OWNERS with CAPM3 #241
OCPBUGS-69896: Updating baremetal-machine-controller-container image to be consistent with ART for 4.22 #240
Full changelog

baremetal-operator

OCPBUGS-65571: Fix deletion hang when aborting inspection during power-off #447
NO-ISSUE: Fix invalidDNSNameinvalidipv6 test for Go 1.24+ #448
OCPBUGS-70265: Fix errors.As usage for NoDataInSecretError #444
NO-ISSUE: Merge upstream #442
OCPBUGS-70018: Updating ose-baremetal-operator-container image to be consistent with ART for 4.22 #441
METAL-1693: Add “merge-upstream” slash command #437
OCPBUGS-65571: Abort inspection/cleaning before powering off during deletion #438
Full changelog

baremetal-runtimecfg

OCPBUGS-42805: Add node caching with Kubernetes watch API to reduce API load #374
NO-ISSUE: Add agents.md and slash command for reviewing #375
MGMT-22546: Fix TNA and TNF dummy ip for ipv6 #369
NO-ISSUE: Migrate away from deprecated ioutil #373
OCPBUGS-69812: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.22 #376
Full changelog

cli, cli-artifacts, deployer, tools

Revert “CNTRLPLANE-2656: Fixing oc client cases for microshift and metal ipv6 profiles” #2198
CNTRLPLANE-2656: Fixing oc client cases for microshift and metal ipv6 profiles #2192
OCPBUGS-74543: expose: Fix labels not being added to route #2189
Revert “CNTRLPLANE-2656:Migrating oc cli tests to ote” #2191
CNTRLPLANE-2656: Migrating oc cli tests to ote #2181
OSDOCS-18071: Updating CLI docs templates to include a required abstract/short description #2190
OCPBUGS-73893: Fix unit test failure by updating ruby version to 3.3 #2184
NO-ISSUE: add SecurityContext to node image creation and monitor containers #2139
CNTRLPLANE-2167: Adding oc ote sanity test #2180
CNTRLPLANE-2167: Integrate OpenShift Test Extension (OTE) into oc #2177
CNTRLPLANE-2167: Integrate OpenShift Test Extension (OTE) into oc #2176
OCPBUGS-64619: oc login: Respect insecure flag from kubeconfig #2134
NO-JIRA: Bump library-go to update selinux and x/crypto #2169
OCPBUGS-70063: Updating ose-cli-artifacts-container image to be consistent with ART for 4.22 #2168
OCPBUGS-70061: Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.22 #2167
OCPBUGS-69894: Updating ose-tools-container image to be consistent with ART for 4.22 #2166
OCPBUGS-69835: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.22 #2164
NO-JIRA: Bump docker/docker to 28.5.2 to drop containerd/containerd dependency #2162
Full changelog

cloud-credential-operator

OCPBUGS-74384: Resolve nil pointer exception in hasResourceTags #966
CCO-805: Ability to use featureGates #962
OCPBUGS-71221: test-ext: remove kubernetes module dependency #957
OCPBUGS-70033: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.22 #956
Full changelog

cloud-network-config-controller

CORENET-6500: fix lint job and linting failures #201
OCPBUGS-69998: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.22 #196
OCPBUGS-45056, OCPBUGS-57447: Refrain from adding Egress IP to public LB backend pool #180
Full changelog

cluster-authentication-operator

CNTRLPLANE-2241: Conditionally add the KMS plugin volume mount to the oauth-apiserver container #827
CNTRLPLANE-2589: Migrate serial e2e tests to Ginkgo framework #828
CNTRLPLANE-2247: Add KMS encryption test target #829
CNTRLPLANE-2589: Migrate RouterCerts e2e test to Ginkgo framework #826
CNTRLPLANE-2589: OTE infrastructure #822
API-1835: test/oauth-server-payloadConfigController: adds a test to show which input resources are required to run the operator and the payloadConfigController #786
OCPBUGS-70005: Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.22 #819
API-1835: adds an integration test for the oauth-server deployment controller #784
CNTRLPLANE-2196: set up openshift-tests-extension for cluster-authentication-operator #816
Full changelog

cluster-autoscaler

OCPBUGS-74005: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.22 #399
OCPBUGS-70023: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.22 #397
OCPBUGS-69928: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.22 #396
Full changelog

cluster-autoscaler-operator

OCPBUGS-69828: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.22 #358
Full changelog

cluster-baremetal-operator

OCPBUGS-72548: Fix ironic-proxy service routing for port 6385 #546
OCPBUGS-71233: Fix libguestfs /tmp access in machine-os-downloader init container #549
OCPBUGS-70157: Add sharedVolumeMount to machine-os-downloader init container #540
OCPBUGS-67216: Remove the writable ironic CA cert volume mount at /certs/ca/ironic path, ironic will use the writable /conf mount if needed #535
NO-ISSUE: Add AGENTS.md #538
OCPBUGS-69769: Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.22 #537
Full changelog

cluster-capi-controllers

OCPBUGS-74426: CAPI IPAM CRDs override storage version to v1beta1 #263
NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #261
OCPBUGS-69810: Updating ose-cluster-api-container image to be consistent with ART for 4.22 #258
OCPBUGS-69434: openshift: CAPI IPAM TechPreviewNoUpgrade: set webhooks failurepolicy: Ignore #256
Full changelog

cluster-capi-operator

OCPCLOUD-3327: Fix up related objects #452
OCPBUGS-74295: Move installer controller to independent manager #447
NO-JIRA: fix: e2e: workaround for flakes caused by OCPBUGS-74571, until it is fixed #449
OCPBUGS-61949: Remove references to cluster-api-operator image #384
OCPCLOUD-3315: Add AWS CPUOptions to conversion #438
OCPCLOUD-3017: add SHARD_ARGS #442
OCPCLOUD-2566: tests with VAP msgs #386
NO-JIRA: Fix AWS fuzz tests by constraining Volume throughput to int32 range #441
OCPCLOUD-3263: CAPI MachineSet creation validation #437
OCPBUGS-69737: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.22 #436
NO-JIRA: Update openshift/api #439
OCPCLOUD-3172: machinesetsync: refactor to a generalized differ which can work independent of types #382
OCPCLOUD-2640: CAPI Machine creation validation #412
NO-JIRA: Write provider version to openshift/provider-version.mk #424
OCPCLOUD-3105: make use of sigs.k8s.io/cluster-api’s v1beta2 #428
OCPBUGS-63524: fix: e2e: CAPI creation issue/scale-down wait issue/machine nodeRef comparison issue #429
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-16728: Add admission policy to deny changing an AWS LB type on an existing service #362
OCPBUGS-69820: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.22 #430
Full changelog

cluster-config-api

OCPBUGS-67232: Move DynamicConfigurationManager back to TPNU #2621
OCPNODE-4078: Add DRAPartitionableDevices to TechPreviewNoUpgrade #2694
OCPBUGS-74521: Remove VolumeAttributesClass FeatureGate #2675
MON-4031: Add prometheusOperatorConfig API #2481
Remove graduated SDN feature gates #2672
OCPNODE-3863: Add CRIOCredentialProviderConfig API #2557
add Insights capability to Insights CRDs #2682
CodeRabbit should not be looking at openapi generated content #2688
MCO-1931: Promote ManagedBootImagesCPMS feature gate to the Default featureset #2679
OCPBUGS-74527: Remove ProcMountType #2676
OCPBUGS-55654: Remove AlibabaPlatform FeatureGate #2671
Re-enable NewOLMBoxcutterRuntime featuregate in TPNU #2659
OCPBUGS-68343: Introduce KMSEncryption feature gate #2669
Fix payload CRD/FetaureGate ordering #2667
OCPEDGE-2084: Add PacemakerStatus CRD for two-node fencing #2544
OCPBUGS-56851: make multiline comments for oidc one line for better crd gen and better oc explain description format #2655
no-jira: Validate AWS resource tag keys with aws: prefix #2183
NO-JIRA: Fix Infrastructure PlatformType comment #2660
OCPEDGE-2084: chore(tools): bump controller-tools with XValidation ordering fix #2658
Update KAL to latest and configure new linters #2662
OCPCLOUD-2998: Add synchronizedAPI to Machine and MachineSet status #2642
CORENET-6609: Add EVPN featuregate #2649
OCPBUGS-73855: Permit other machine managers when skew enforcement is in Automatic mode #2648
CONSOLE-4986: Add Guided Tour capability flag to Console API and vendor it into console-operator #2644
OCPCLOUD-3166: machine-api: disallow unsetting authoritativeAPI #2091
Add insights v1 to payload #2632
CNTRLPLANE-1750: Add FeatureGate: ConfigurablePKI #2545
NO-JIRA: update TLS security profile documentation for clarity and consistency #2595
OPRUN-4226: [OLMv1]: Promote NewOLMOwnSingleNamespace to GA #2527 #2527
SPLAT-2603: Added support for legacy AWS dedicated hosts #2643
Extend ClusterVersion for accepted risks #2360
CNTRLPLANE-311: adding auth config missing fields to API #2487
NO-JIRA: Rename ImagePolicy nested types to prevent PKI collision #2626
Reapply “Merge pull request #2448 from opokornyy/CCXDEV-15259-io-v1” #2631
OCPBUGS-70025: Updating ose-cluster-config-api-container image to be consistent with ART for 4.22 #2634
Add configuration for coderabbit #2635
DevPreview: NetworkConnect feature gate #2629
OCPCLOUD-3164: Add CompatibilityRequirement #2479
Disable the statusoptional linter #2633
Migrate away from deprecated ioutil #2603
OKD-259: Support an “OKD” featureset to be enabled by default on OKD clusters #2451
NO-JIRA: remove beta enabled TranslateStreamCloseWebsocketRequests feature from gates #2613
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-config-operator

OKD-320: Migrate to OKD featureset for OKD clusters #462
OKD-259: Allow the OKD feature set to upgrade #461
CNTRLPLANE-2272: Refactor tests-ext initialization to improve error handling #457
OCPBUGS-69859: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.22 #456
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-74343: Fix framework initialization #384
OCPBUGS-74512: Remove CPMSMachineNamePrefix feature gate #387
NO-JIRA: mockgen deprecated: use uber-go/mock instead #374
OCPBUGS-74478: Bump openshift/api to get latest AWSMachineProviderConfig type #385
OCPBUGS-67230: Fix Makefile to use vendor mode #377
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2523: Add desired-version annotation to controller Deployment and use DeploymentVersionController in csi-snapshot-controller-operator #251
OCPBUGS-73791: Re-add serving cert volume mount to hypershift guest cluster manifest #264
OCPBUGS-66390: Set client throttling parameters #261
OCPBUGS-69854: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.22 #262
Full changelog

cluster-etcd-operator

OCPEDGE-2097: Add pacemaker health check for ExternalEtcd clusters #1487
OCPEDGE-2231: [TNF] feat: Allow podman-etcd and kubelet resource-agent to restart on start failure #1513
NO-JIRA: [TNF] disable etcd member management after etcd handover #1534
OCPBUGS-66152: split grpc requests slow into read/write alerts #1532
OCPBUGS-73857: Prefer to remove members where they have another healthy machine in the same failure domain index #1528
OCPBUGS-68371: fix bootstrap race condition #1524
OCPBUGS-38659: bump inertia from 5-10 minutes #1531
OCPBUGS-38659: configure inertia for all controllers #1527
OCPBUGS-60588: [TNF] support restore for pacemaker-managed etcd #1521
OCPBUGS-62422: deps: Update library-go to update pruner #1526
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

NO-JIRA: fix TestImageRegistryRemovedWithImages flake #1288
OCPBUGS-74495: Migrate Azure storage management to new ARM SDK #1281
IR-350: bump library-go to the latest version #1276
OCPBUGS-69751: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.22 #1275
Full changelog

cluster-ingress-operator

NE-2434: E2E test for internal LoadBalancer Annotations #1353
OCPBUGS-64565, OCPBUGS-9037: Ensure canary cert matches the default ingress controller’s cert #1334
NE-2395: Fix e2e tests to work on platforms with unmanaged DNS #1342
NE-2374: Add e2e test for Gateway API infrastructure annotations #1331
NE-2435: Bump Gateway API CRDs to v1.4.1 #1343
OCPBUGS-16728: Require Service Deletion for LB Type Updates #1142
NO-JIRA: add jcmoraisjr to owners #1346
OKD-259: Bump openshift/api and add support for OKD featureset specific CRDs #1324
OCPBUGS-65482: Add e2e test for secure redirect port stripping #1316
NE-1743: Add documentation for pre-release script for OSSM testing #1315
OCPBUGS-70212: testGatewayAPIDNS: Fix nil gateway in cleanup #1330
OCPBUGS-70211: Fix logging for unmanaged controllers #1329
OCPBUGS-69954: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.22 #1328
OCPBUGS-65939: Update command to get Konflux index image #1325
OSSM-10865: set trustBundleName in Istio global values #1288
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-70298: remove kube-apiserver user from crb #2012
CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test #2027
CNTRLPLANE-2241: Conditionally add the KMS plugin volume mount to the kube-apiserver container #2015
CNTRLPLANE-2563: update wording for major upgrades #2010
CNTRLPLANE-2648: Migrating user_cors_test to OTE #2011
CNTRLPLANE-2247: Add empty KMS encryption test case for CI job validation #2014
CNTRLPLANE-2585: Migrating user_client_ca_test to ginkgo #2008
OCPBUGS-65807: SCC: allow image volume type for all SCCs #1968
CNTRLPLANE-2492: Migrating user_certs_test to ote #2005
NO-JIRA:Refactor serviceaccountissuer ginkgo test #2002
NO-JIRA: clean up the OWNER files #2001
NO-JIRA: Add API server stabilization wait to serviceaccountissuer tests #1997
OCPBUGS-62422: deps: Update library-go to update pruner #1994
NO-JIRA: ote: a small cleanup #1995
CNTRLPLANE-2286: Migrating serviceaccountissuer test to ote #1992
CNTRLPLANE-2280: Migrating deprecated_api_test to ote #1990
CNTRLPLANE-2281: Migrating operator_test to ote #1991
OCPBUGS-70323: bump library-go #1986
OCPBUGS-69758: CNTRLPLANE-2222:Migrate go test cert-rotation-tests.go to OTE #1983
CNTRLPLANE-2158: Migrating TestTokenRequestAndReview to ginkgo #1978
NO-JIRA: increases termination timeouts for GCP #1982
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-69964: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.22 #901
OCPBUGS-62422: dep: Update library-go to update pruner #895
OCPBUGS-60568: Use BoundServceAccountTokenVolume dy default #858
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2649: OTE infrastructure #608
OCPBUGS-65941: Add OPERATOR_IMAGE_VERSION to recovery container #600
NO-JIRA: pkg/operator: Remove staleConditions controller #597
NO-JIRA: pkg/operator: Fix wrong ClusterOperator name #596
no-jira: test(TargetConfigController): exercise –tls-cipher-suites and –tls-min-version injection #595
OCPBUGS-62422: deps: Update library-go to update pruner #593
no-jira: refactor(pkg/operator/targetconfigcontroller): code deduplication and improvements #594
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-65984: Prevent AvailableReplicas from dropping to 0 during deployment rollout #138
OCPBUGS-70004: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.22 #136
OCPBUGS-65984: Prevent AvailableReplicas from dropping to 0 during deployment rollout #135
Full changelog

cluster-machine-approver

MON-4476: chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors #288
NO-JIRA: Fix expired test certificate in csr_check_test.go #287
Full changelog

cluster-monitoring-operator

OCPBUGS-69397: Move console control plane health queries to their own… #2778
OCPBUGS-74347: config: add bond device to default node-exporter ignore list #2806
NO-ISSUE: merge case 67008,68958 to node-exporter e2e test #2788
NO-ISSUE: test: TestUserWorkloadWithAlertmanager|TestNetworkPolicy: fix a no-op check #2802
OCPBUGS-67162: update expr for AlertmanagerClusterFailedToSendAlerts to exclude value 0 #2796
NO-JIRA: Upgrade golangci-lint from v1 to v2 #2789
OCPBUGS-66069: Include kube_pod_labels in minimal profile #2777
MON-4470: ship collector:node_scrape_collector_success:avg to Telemetry #2794
NO-JIRA: [bot] Synchronize versions of the downstream components #2791
OCPBUGS-66180: create networkpolicy settings for user workload monitoring #2765
NO-ISSUE: move endpointslice RBAC to Role #2786
MON-4466: enable ethtool collector #2779
NO-ISSUE: add app.kubernetes.io/part-of=openshift-monitoring label to thanos-ruler pod #2787
MON-4343: Reapply “MON-4343: Cleanup deprecate pa config” #2782
NO-ISSUE: remove test case 74734 #2785
OCPBUGS-61088: revert PR #2766 #2769
OCPBUGS-69733: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.22 #2781
MON-4406: watch ClusterMonitoring config resource #2770
NO-JIRA: [bot] Synchronize versions of the downstream components #2780
NO-JIRA: [bot] Synchronize versions of the downstream components #2776
Full changelog

cluster-network-operator

OCPBUGS-60077: Silence ovnkube-lib.sh to avoid mass of logs to collectors #2761
CNF-20883: Align templates frrk8s #2874
OCPBUGS-74401: Remove duplicated openssl parameter #2889
NO-JIRA: Remove references to AdminNetworkPolicy, NetworkSegmentation, RouteAdvertisements and PreconfiguredUDNAddresses featuregates #2891
CORENET-6561: Update the golangci-lint configuration for v2 compatibility and fix all resulting lint issues. #2893
CORENET-6605: avoid flapping Degraded on transient failures #2862
CORENET-6416: drop networkType migration support #2456
CNF-21001: mnp: Set hostname using downward API #2840
CORS-4180: Allow AWS and Azure as platforms that support dual-stack on Day-0 #2804
NO-JIRA: set ovnkube-cluster-manager as default container #2798
OCPBUGS-72411: fix(hypershift): use net.JoinHostPort for URL construction #2871
OCPBUGS-66417: Add kubevirt platform to dual-stack supported platforms #2849
OCPBUGS-49662: Prevent resetting masquerade subnet #2641
Full changelog

cluster-node-tuning-operator

CNF-20755: e2e: Add housekeeping IRQ load balancing tests #1456
CNF-18941: perfprof: enable exec-cpu-affinity by default (annotation) #1426
NO-JIRA: Make changes for migrating to OTE in Dockerfile #1453
OCPBUGS-62632: Do not report Progressing=True during cluster scaleup or node reboot #1447
NO-JIRA: Bump upstream containerfile to 4.22 #1452
OCPBUGS-62496: hypershift:e2e:status: check for duplicated configmap status #1413
OCPBUGS-69802: Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.22 #1450
OCPBUGS-69391: E2E: Granular IRQ functional test cases #1441
Full changelog

cluster-olm-operator

NO-ISSUE: Add pedjak as reviewer and approver #171
OCPBUGS-65505: add resources to clusterOperator relatedObjects #166
OPRUN-4408: Update upgrade message to mention both 4.23 and 5.0 upgrade paths #164
OCPBUGS-69807: Update image locations to be consistent with ART for 4.22 #158
OPRUN-4360: Remove references to operator-framework/catalogd #155
OPRUN-4352: Update to golang 1.25/ocp 4.22 #156
Full changelog

cluster-openshift-apiserver-operator

CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test for Routes #644
CNTRLPLANE-2241: Conditionally add the KMS plugin volume mount to the openshift-apiserver container #641
CNTRLPLANE-2247: Add KMS encryption test target #642
NO-JIRA: update to Kubernetes v1.34.1 #640
OCPBUGS-70035: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.22 #635
Full changelog

cluster-openshift-controller-manager-operator

CNTRLPLANE-2620: propagate global tls config to operand #407
OCPBUGS-70032: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.22 #404
Full changelog

cluster-samples-operator

OCPBUGS-69966: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.22 #671
Full changelog

cluster-storage-operator

TRT-2542: Revert #661 “OCPBUGS-74530: Remove featuregate StoragePerformantSecurityPolicy” #664
OCPBUGS-74530: Remove featuregate StoragePerformantSecurityPolicy #661
OCPBUGS-66212: Remove VSS permissions #649
STOR-2523: hypershift: Add desired-version annotation to operand Deployments and use DeploymentVersionController in CSO #638
OCPBUGS-60159: add vsphere permissions for checking if users is authorized to see metrics #642
OCPBUGS-69978: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.22 #651
OCPBUGS-63698: feat(azure): add HYPERSHIFT_IMAGE env var for token-minter #643
OCPBUGS-62634: Fix deployment controller Progressing=true on node drain #648
OCPBUGS-67012: volume-data-source-validator must use IfNotPresent image pull policy #650
Full changelog

cluster-update-keys

OCPNODE-3978: Second run at expanding the default ClusterImagePolicy for openshift component images #95
TRT-2537: Revert “OCPNODE-3978: Extend the default ClusterImagePolicy for openshift component images” #94
OCPNODE-3978: Extend the default ClusterImagePolicy for openshift component images #75
OCPBUGS-70020: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.22 #91
Full changelog

cluster-version-operator

OCPSTRAT-2485: Introduce feature gate based inclusion/exclusion of manifests #1273
NO-JIRA: More flexible timeout option for oc-cli #1311
OTA-1546: Reconcile cv.spec.desiredUpdate.acceptRisks #1284
NO-JIRA: Add a serial e2e test #1306
TRT-2511: Reapply “OTA-1604: migrate ocp-46922 from otp to cvo repo” #1301
NO-JIRA: Fix linter issues on dot-imports #1304
OTA-1546, OTA-1833: Add OKD feature set filtering logic, Bump openshift/api #1302
NO-JIRA: Fix some lint issues #1299
Revert “OTA-1604: migrate ocp-46922 from otp to cvo repo” #1297
OTA-1787: pkg: Update Upgradeable condition to explicitly mention major version updates #1276
NO-JIRA: hack/build-image.sh: Update Dockerfile reference #1272
OCPBUGS-73929: lib/resourcemerge/core: Reconcile ConfigMap binaryData too #1294
NO-JIRA: Bump to builder:rhel-9-golang-1.25-openshift-4.22 #1293
OTA-1604: migrate ocp-46922 from otp to cvo repo #1279
NO-JIRA: Introduce oc-cli for e2e tests #1267
OTA-1786: pkg/payload/precondition/clusterversion/gianthop: Allow updates to 5.0 #1275
NO-ISSUE: .claude/commands/update-godocs: New command for Go doc updates #1278
NO-ISSUE: OTA-1605 Adding descriptions for building the binary and running the tests #1263
NO-JIRA: Create AGENTS.md file #1268
OCPBUGS-17007: vendor: Update openshift/library-go to get new default TLS configuration #1270
Full changelog

configmap-reloader

OCPBUGS-70038: Updating configmap-reload-container image to be consistent with ART for 4.22 #76
Full changelog

console

OCPBUGS-73871: i18n upload/download routine task - 4.21 / 281 (Latest) #15976
OCPBUGS-74974: Use Actions button instead of kebab menu on Subscription details page #15983
CONSOLE-5043: Remove defaultProps from operator-hub-item-details #16003
OCPBUGS-74538: User without access on causes NamespaceBar to reset to All projects when used via dynamic plugin #15996
CONSOLE-5044: TypeScript port of events.jsx #15944
CONSOLE-4987: Conditionally render Guided Tour based on capability and disable it for Console E2E tests #15926
OCPBUGS-74639: Number links for failed pods/nodes on ‘Cluster inventory’ card are not linked to filtered table list #15979
NO-JIRA: Convert useTechPreviewFlagProvider to static function #15960
CONSOLE-5015: Refactor file-input to use PF #15952
OCPBUGS-74137: DataView Pagination page menus : i18n misses #15982
OCPBUGS-74349: Worklodas - Edit pod count and Edit parallelism : Content is in English #15980
CONSOLE-5029: Refactor withDashboardResources in with-dashboard-resources.tsx into … #15927
CONSOLE-5012: Additional modal migrations to overlay pattern #15940
NO-JIRA: Add guidance for avoiding deprecated components #15969
OCPBUGS-74647: Fix referenceFor parameter in SubscriptionDetailsPage #15957
OCPBUGS-65967: Clean up old session cookies to prevent accumulation #15837
CONSOLE-5012: Migrate modals to overlay pattern #15939
OCPBUGS-65828: Reduce log noise from transient async cache failures #15821
OCPBUGS-70329: Auto-linkify URLs in status card alert messages #15880
CONSOLE-5039: Remove useSafetyFirst #15937
CONSOLE-4943: Add Machine Set, MachineConfigPool, and VMs columns to Nodes list view #15909
OCPBUGS-74241: Add null checks to CRB subject #15943
OCPBUGS-72585: Do not resolve disabled catalog type extensions #15908
CONSOLE-5012: Migrate delete modals and PVC modals to overlay pattern #15932
OCPBUGS-74369: Bump lodash to latest #15947
NO-JIRA: Suppress ResizeObserver-related windowError #15958
OCPBUGS-72260: ‘0 of pods’ are shown in Status column on DaemonSets list page. #15928
NO-JIRA: Suppress ResizeObserver-related e2e errors #15950
CONSOLE-5041: Replace testHook with renderHook from RTL #15936
NO-JIRA: SDK post-publish tasks #15942
OCPBUGS-74178: Direct AI agents to AGENTS.md documentation hub #15938
NO-JIRA: Moving the oc and kubectl delete,apply,create commands from deny to ask permissions #15941
NO-JIRA: Prepare for 4.22-prerelease.1 release #15933
CONSOLE-5050: Make shared modules peerDeps in SDK #15934
CONSOLE-3769: Refactor weird getResourceSidebarSamples #15915
CONSOLE-5042: Remove React.FCC #15929
OCPBUGS-70340: Ensure OpenAPI in monaco stays fresh #15890
CONSOLE-4402, CONSOLE-4510: React 18 upgrade - phase 1 #14869
NO-JIRA: Add /pre-push review command for comprehensive local code analysis #15800
OCPBUGS-65891: Follow up on fixing the remaining issues in the multi-group impersonation feature #15916
CONSOLE-4630: @types/react 18 prep work #15893
OCPBUGS-73766: Configure coderabbit.yaml for only major reviews and disable multiple summaries #15919
CONSOLE-5035: cache lazy route components to prevent navigation freeze #15924
CONSOLE-4865: Remove @openshift-console/plugin-shared #15921
NO-JIRA: Update dynamic demo plugin OWNERS and lock files #15920
NO-JIRA: Refactor - consolidate K8s client creation into new function #15897
OCPBUGS-70011: i18n upload/download routine task - 4.21 / 281 #15905
OCPBUGS-69377: Update the perspective name in dev-console guided tour #15852
OCPBUGS-69380: Fixed loaded page no roles error upon render #15878
OCPBUGS-72571: remove “OperatorHub” from OLM integration tests where … #15911
OCPBUGS-69387: update operator details when changing channels #15853
OCPBUGS-70344: change OperatorHub strings to Software Catalog #15891
CONSOLE-4844: merge secret scenarios #15684
CONSOLE-4912: update machine config tests #15759
OCPBUGS-63120: Home -> Overview page returns error during upgrade process #15831
OCPBUGS-62611: Fix editing secrets with mixed text and binary data #15820
OCPBUGS-65946: Fix search component to not pass ALL_NAMESPACES_KEY to… #15789
OCPBUGS-65831: Fix catalog service swapping description and markdownDescription fields #15750
OCPBUGS-68332: Improve VAC field on PVC details page #15843
OCPBUGS-70330: remove support for Windows 8 Live Tiles and IE “standards mode” #15886
OCPBUGS-70324: Revert the console-shared.json to console-shared directory #15885
CONSOLE-4989: bump to react-redux 8 #15854
CONSOLE-3769: Update OpenShift Dynamic Plugin SDK + webpack-related deps #15892
CONSOLE-4969: Configure a coderabbit.yaml file for console repo #15818
NO-JIRA: Fix incorrect syntax for claude settings #15899
CONSOLE-4971: Add AGENTS.md and structured AI documentation #15896
OCPBUGS-66247: make cloudCredentials optional so operators load when … #15803
CONSOLE-3769: Even more openshift/dynamic-plugin-sdk prep work #15778
OCPBUGS-63389: Remove asterisk from Routing label field in alertManager receiver form #15825
CONSOLE-4631, CONSOLE-5005: Manually rewrite remaining namespace/default imports #15884
CONSOLE-4631: Run react/update-react-imports #15872
OCPBUGS-68376: fix routing issues on packageserver PackageManifest de… #15844
CONSOLE-4916: add auto scenario about yaml sidebar #15790
OCPBUGS-65678, OCPBUGS-65765: apiVersion is empty on YAML creation page - Runtime error occurs when create MachineConfig with default yaml from… #15763
OCPBUGS-63159: Prevent the display of events from projects other than the currently selected project #15836
OCPBUGS-63237: There should be no role ARN field as token-auth-aws/azure/gcp=false in csv annotations #15813
OCPBUGS-60426: Fix edit application via Deploy image internal registry doesn’t select correct image stream #15795
NO-JIRA: Add /gen-rtl-tests Claude code slash command for generating React Testing Library tests for React components #15668
CONSOLE-4970: Upgrade Jest from 22 to 30 #15817
CONSOLE-4979: Speed up check-patternfly-modules + add dedupe step to CI #15835
OCPBUGS-67002: fix bug where Installed badge is not fully visible #15828
OCPBUGS-63390: show DASH to routing labels column when receiver doesn’t have routing labels #15824
CONSOLE-4630: Fix 67 react 18 type errors #15779
CONSOLE-4106: Add ClusterExtension creation page #15741
OCPBUGS-62713: Prevent application filter in Topology view from resetting to all applications unexpectedly #15812
NO-JIRA: disable guided tour when cypress is running #15841
And 10 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-62307: Remove orphaned console-conversion-webhook deployment and related resource #1053
OCPBUGS-57468: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #1102
OCPBUGS-72387: Update the downloads manifest #1101
OCPBUGS-72387: Fix PDB blocking node drains during cluster upgrades #1099
CONSOLE-4986: Vendor API changes for GuidedTourFeature capability #1091
NETOBSERV-2296: add missing annotations on netobserv quickstart #1080
OCPBUGS-65496: Add missing relatedObjects + small refactoring #1075
NO-JIRA: Fix claude syntax #1088
OCPBUGS-68367: Add missing console annotation to the quickstart #1082
OCPBUGS-70045: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.22 #1086
CONSOLE-4871: Add AI context documentation files #1077
CM-821, ESO-277, SSCSI-235: Add quickstart guides for secrets management operators #1073
Full changelog

coredns

OCPBUGS-69852: Updating coredns-container image to be consistent with ART for 4.22 #159
NO-JIRA: Add team members to the OWNERS file #162
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-69813: Updating csi-driver-manila-container image to be consistent with ART for 4.22 #369
OCPBUGS-70057: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.22 #360
OCPBUGS-70072: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.22 #358
Full changelog

csi-driver-nfs

NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #167
OCPBUGS-70043: Updating csi-driver-nfs-container image to be consistent with ART for 4.22 #168
Full changelog

csi-external-attacher

OCPBUGS-69744: Updating csi-attacher-container image to be consistent with ART for 4.22 #91
Full changelog

csi-external-provisioner

OCPBUGS-70054: Updating csi-provisioner-container image to be consistent with ART for 4.22 #118
Full changelog

csi-external-resizer

OCPBUGS-70039: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.22 #180
Full changelog

csi-external-snapshot-metadata

OCPBUGS-69720: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.22 #8
Full changelog

csi-external-snapshotter, csi-snapshot-controller

OCPBUGS-66967: UPSTREAM: 1354: UPSTREAM: 1359: Fix for cases where the resource is already present on the cluster #193
OCPBUGS-69979: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.22 #195
OCPBUGS-66967: UPSTREAM: <drop>: bump log level of the group snapshot reconciler #192
OCPBUGS-69721: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.22 #194
Full changelog

csi-livenessprobe

OCPBUGS-69958: Updating csi-livenessprobe-container image to be consistent with ART for 4.22 #78
Full changelog

csi-node-driver-registrar

OCPBUGS-70041: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.22 #92
Full changelog

docker-builder

OCPBUGS-70150: bump buildah to 1.39.7 to fix CVE-2025-52881 #494
OCPBUGS-69871: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.22 #493
Full changelog

docker-registry

IR-350: bump library-go to the latest version #460
IR-350: fix cipher suite configuration conflict with docker distribution #459
OCPBUGS-69762: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.22 #457
Full changelog

driver-toolkit

NO-ISSUE: Support ubi minimal base image #179
OCPBUGS-69699: Updating driver-toolkit-container image to be consistent with ART for 4.22 #178
Full changelog

etcd

OCPBUGS-69868: Updating ose-etcd-container image to be consistent with ART for 4.22 #353
Full changelog

gcp-cluster-api-controllers

OCPBUGS-74913: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0 (1cb204d) into master #261
NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #259
Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.22 #257
Full changelog

gcp-machine-controllers

CORS-4296: Add the N4A machine type #138
OCPBUGS-70052: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.22 #137
OCPCLOUD-3255: Add AGENTS configuration #136
Full changelog

gcp-pd-csi-driver

OCPBUGS-74521: UPSTREAM: 2175: Move VAC storage API to v1 from v1beta1 #97
OCPBUGS-69930: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.22 #87
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-74521: Remove VolumeAttributesClass FeatureGate #168
STOR-2792: STOR-2842: Enable Hyperdisk-balanced High Availability disks #158
STOR-2793: Add volume snapshot class of type images #165
STOR-2543: Add VAC manifest to support tests on GCP PD #160
OCPBUGS-69742: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.22 #159
OCPBUGS-66113: Some containers do not have readOnlyRootFilesystem #157
Full changelog

gcp-workload-identity-federation-webhook

OCPBUGS-69839: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.22 #13
Full changelog

haproxy-router

OCPBUGS-72591: Lower verbosity for parseIPList empty list logging #709
NO-JIRA: hack: update image without push #711
NO-JIRA: add jcmoraisjr to owners #717
OCPBUGS-70068: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.22 #707
OCPBUGS-65482: Fix HAProxy redirect: strip port from Host header #696
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-67200: UPSTREAM: 136202: raise kubelet CSI init backoff to cover ~140s DNS delays #2578
OKD-259: Validate OKD featureset to prevent it from being enabled on OCP clusters #2420
OCPBUGS-73913: UPSTREAM: 135340: cbor: bump limits #2564
OCPBUGS-70170: add label serial for iperf2 testing #2559
OCPBUGS-63045: enable InPlace resize test #2532
NO-ISSUE: Extend k8s suite timeouts for parallel testing load #2497
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

hypershift

CNTRLPLANE-2709: Update Dependabot to use conventional commits #7672
CNTRLPLANE-2703: Disable Renovate dependency updates #7657
OCPBUGS-74988: fix(test): resolve E2E flakes in global-pull-secret-syncer DaemonSet readiness checks #7627
CNTRLPLANE-2214: Migrate STS to AWS SDK v2 #7386
NO-JIRA:Docs: update documentation URL from netlify to pages.dev #7622
GCP-366: add CloudController service account for CCM #7617
NO-JIRA: ci: Improves the isLeaderElectionFailure function: #7589
NO-JIRA: Fix teardown flag timing in e2e tests #7586
CNTRLPLANE-2548: add direct Jira REST API integration to pr-report #7532
OCPSTRAT-2437: add unit test for custom HAProxy image annotation #7458
CNTRLPLANE-1708: Enable EnsureGlobalPullSecret AtLeast Version418 #7624
CNTRLPLANE-418: fix shared ingress AllowedCIDRs to use fc_src for PROXY protocol #7587
AUTOSCALE-535: default block device mappings #7583
OCPBUGS-69447: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7399
GCP-198: add PSC endpoint controller for customer-side management #7603
CNTRLPLANE-2650: docs(ci): add security requirement for Jira agent issues #7626
CNTRLPLANE-2650: docs: add AI-assisted CI jobs documentation #7598
OCPBUGS-62760: Pre-pull images to avoid startup delays and flaky e2e #7382
OCPBUGS-74247: CAPI image overrides aware of registry config #7575
CNTRLPLANE-1137: Add support for external CNI provider Cilium #7423
GCP-176: feat(gcp): add WIF credentials support for control plane op… #7600
NO-JIRA: test(assets): add unit test for CAPI resources file paths #7601
CNTRLPLANE-2580: feat(claude): update /update-konflux-tasks to work without log file #7591
GCP-213: feat(platform): add Google Cloud Platform support with CAPG Deployment #7305
OCPBUGS-62944: forceful termination of instances during HCP AutoNode deletion #7281
NO-JIRA: build: bump Go version to 1.25.3 #7592
CNTRLPLANE-1388: Spot with termination handler #7567
CNTRLPLANE-1892: chore(e2ev2): fixup GCP API checks #7555
NO-JIRA: ci: update build root image to Go 1.25 #7584
CNTRLPLANE-1988: Add Azure support to product CLI for self-managed customers #7407
AUTOSCALE-373: Proper ROSA instance tagging for AutoNode #6939
OCPBUGS-63345: AWS credential metric to distinguish unknown from invalid status #7075
OCPBUGS-74336: feat(cpo): check components have rolled out before setting available #7434
NO-JIRA: chore(deps): weekly dependabot consolidation #7563
OCPBUGS-64576: fix(dump): Fix dump command failure when EC2NodeClass resource is not registered #7147
CNTRLPLANE-2559: feat(contrib): add request serving setup utility #7534
CNV-76520: ci: allow restart of kubevirt-cloud-controller-manager #7469
NO-JIRA: fix(test): shorten scale-from-zero test name to avoid IAM role length limit #7558
OTA-1833: Adopt a new FeatureSet OKD #7557
OCPBUGS-62761: chore(e2e): remove KAS check from capi pod #7485
OCPBUGS-73817: fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment #7480
OCPBUGS-65885: added 1.34 required ELBv2 perms to CCM role #7339
API-1835: Scaffold dynamic informers #7477
CNTRLPLANE-2579: feat(konflux): add script to update pipeline task bundles to latest trusted versions #7553
OCPBUGS-58397: feat(KubeVirt): configure External evictionStrategy on VMs #6380
GCP-197: add GCPPrivateServiceConnect controller for managing Service Attachments for Private Service Connect #7302
NO-JIRA: fix(e2e): TestNodePoolAutoscalingScaleFromZero for 4.20 and later only #7556
CNTRLPLANE-2291: feat(claude): add fix-hypershift-repo-robot-pr command #7438
CNTRLPLANE-2568: Update Konflux Tekton tasks to latest versions #7551
NO-JIRA: test(ingress): add test for clearing LoadBalancerSourceRanges #7544
NO-JIRA: fix(claude): fix Claude Code subagents frontmatter #7550
NO-JIRA: chore(deps): bump github.com/opencontainers/selinux from 1.11.0 to 1.13.0 #7462
OCPBUGS-55399: Add NTO Service and ServiceMonitor #7355
NO-JIRA: test(autoscaling): make GPU annotation optional in scale-from-zero test #7484
OCPBUGS-73914: Update Tekton tasks to pass enterprise contract validation #7535
NO-JIRA: chore(deps): bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 in /hack/tools #7463
NO-JIRA: Add karpenter approvers and reviewers #7488
NO-JIRA: chore(ho): update lower bound version checks for OCP 5 #7472
NO-JIRA: fix(docs): strip markdown links from aggregated documentation #7487
NO-JIRA: chore(deps): bump github-dependencies group with 17 updates #7455
OCPBUGS-73847: fix(cli): use /tags endpoint for all release streams to enable RC filtering #7483
OCPBUGS-67234: fix(hostedcluster): unpause CAPI cluster when deleting paused HostedCluster #7389
OCPBUGS-72258: use InfraStatus.APIPort for custom DNS kubeconfig #7470
API-1835: Scaffold OpenShiftManager controller #7445
CNTRLPLANE-1768: feat(api): add support for graceful service account signing key rotation #7324
OCPBUGS-66205: [kubevirt] Make L3 migration labeling conditional #7308
NO-JIRA: chore(deps): bump Azure SDK and misc-dependencies groups #7464
NO-JIRA: chore(tekton): update Konflux task digests to latest versions #7465
OCPBUGS-70320: enable scale-up from zero with InPlace upgrade #7427
NO-JIRA: Add review process docs to CONTRIBUTING.md #7426
CNTRLPLANE-208: Document needed Azure infrastructure #7361
NO-JIRA: fix(deps): update k8s.io/utils digest to 914a6e7 #7450
NO-JIRA: chore(deps): bump misc-dependencies group with 11 updates #7437
OCPBUGS-72411: fix(cno): use brackets only for IPv6 in server URL #7447
NO-JIRA: chore(konflux): update Tekton tasks to latest versions #7451
OCPBUGS-72397: Fix Konflux EC voilation, update deprecated base … #7442
NO-JIRA: docs(konflux): add IMAGE_RELEASE_PROCESS.md #7432
NO-JIRA: test(e2e): fix AKS e2e test flakiness #7410
CNTRLPLANE-1978: add e2e tests for DataPlaneConnectionAvailable condition #7291
AUTOSCALE-473: Add HostedCluster annotation for karpenter ec2nodeclass instanceProfile #7392
NO-JIRA: fix(awseps): cache local zone ID in non-shared VPC case #7409
OCPBUGS-66211: fix(azure): preserve defaulted values in Infrastructure status #7393
OCPBUGS-69761: fix(ingress): clear LoadBalancerSourceRanges when AllowedCIDRBlocks is removed #7425
GCP-258: Use PullAlways for :latest image tags in control plane components #7313
OCPBUGS-63698: fix(azure): remove CSI secret ownership from hypershift-operator #7157
OCPBUGS-66154: add OAuth certificate configuration doc #7351
OCPBUGS-67224: fix(Portieris): Fix Portieris by mounting emptyDir to ‘./.trust’ work dir #7368
CNTRLPLANE-1622: Enable nodepool autoscaling min zero #6975
CNTRLPLANE-2119: feat(hostedcluster): implement service account signing key rotation #6874
OCPBUGS-66325: fix: ValidAWSIdentityProvider condition not being correctly copied from HCP #7352
NO-JIRA: fix(install): skip IPAM CRDs if they already exist #7363
CNTRLPLANE-1977: Add weekly PR report generation capability #7272
OCPBUGS-68366: CVE-2025-58183 #7374
CNTRLPLANE-2123: feat: update builder images from 4.21 to 4.22 #7317
OCPBUGS-63452: Add finalizer protection to control plane workloads #7258
CNTRLPLANE-2205: feat(aws): enable shared role in e2e #7400
NO-JIRA: chore(azure): bump AKS Kubernetes version to 1.33.0 #7371
CNTRLPLANE-2206: Create tool to aggregate upstream docs into single file for NotebookLM #7367
OCPBUGS-66211: fix(vendor): bump openshift/api dependency to current master #7345
OCPBUGS-66146: Add OADP backup recovery tool for HyperShift clusters #7385
CNTRLPLANE-2221: Add CI infrastructure documentation #7369
CNTRLPLANE-2123: Fix buildah-remote-oci-ta task enterprise contract violation #7396
CNTRLPLANE-2049: Update kube-api-linter dependency #7346
NVIDIA-314: Support Node CIDR Allocation for networkType=Other Using AllocateNodesCIDRs #7278
CNTRLPLANE-2123: feat: update latest supported version from 4.21 to 4.22 #7315
CNTRLPLANE-2205: cmd/aws: fix managed role handling and auto-detect on destroy #7373
CNTRLPLANE-2123: feat: add release-4.21 branch to renovate configuration #7318
NO-JIRA: test: remove network-dependent unit tests for image metadata #7381
OCPBUGS-67233: fix(konflux): update outdated Tekton tasks to pass enterprise contract validation #7372
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-69849: Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.22 #116
Full changelog

ibm-vpc-block-csi-driver-operator

STOR-2852: Enable snapshot tests ibm vpc block csi #160
OCPBUGS-69909: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.22 #159
Full changelog

ibmcloud-cluster-api-controllers

NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #145
OCPBUGS-70027: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.22 #143
Full changelog

ibmcloud-machine-controllers

OCPBUGS-70030: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.22 #74
Full changelog

insights-operator

OCPBUGS-66233: Custom Obfuscation unmarshal #1216
CCXDEV-15561: Improve test coverage 3 #1213
NO-JIRA: update on-demand gathering examples #1212
OCPBUGS-65500: reference ClusterRoles in ClusterOperator #1211
CCXDEV-15778: add event logging for operator version changes #1202
CCXDEV-15589: set limit for gathering interval #1171
OCPBUGS-67001: update dataGather status after job deletion #1201
OCPBUGS-66386: [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1203
CCXDEV-15561: Improve test coverage 2 #1199
OCPBUGS-65582: set Progressing condition on cluster update #1207
CCXDEV-15258: DataGather and InsightsDataGather update to v1 #1159
OCPBUGS-66996: Extends the time for the extractor liveness probe #1198
OCPBUGS-69764: Updating ose-insights-operator-container image to be consistent with ART for 4.22 #1204
CCXDEV-15561: Improve test coverage #1191
Full changelog

insights-runtime-exporter, insights-runtime-extractor

chore: Update JBoss EAP 8.1 runtime samples #61
eap 8.1 test fix #57
Full changelog

ironic

NO-ISSUE: Update requirements.cachito with latest openshift forks commits #783
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #773
ART-14497: Fix ART builds with -minimal #779
NO-ISSUE: Bump openstacksdk version to 4.9.0 #776
OCPBUGS-74579: fix for minimal builds #772
OCPBUGS-74427: Bump eventlet version to latest bugfix #770
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #768
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #762
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #758
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #757
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #755
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #754
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #751
OCPBUGS-70001: Updating ironic-container image to be consistent with ART for 4.22 #752
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #748
Full changelog

ironic-agent

OCPBUGS-74579: fixes for minimal builds #240
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #238
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #237
Updating ironic-agent-container image to be consistent with ART for 4.22 #225
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #223
Full changelog

ironic-machine-os-downloader

OCPBUGS-71233: Export TMPDIR to be available to child processes #111
OCPBUGS-69891: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.22 #110
Full changelog

ironic-static-ip-manager

OCPBUGS-70044: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.22 #56
Full changelog

kube-metrics-server

OCPBUGS-69952: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.22 #48
Full changelog

kube-rbac-proxy

CNTRLPLANE-882: 0.20.2 downstream #131
Full changelog

kube-state-metrics

OCPBUGS-71224: [bot] Bump openshift/kube-state-metrics to v2.18.0 #130
Updating kube-state-metrics-container image to be consistent with ART for 4.22 #126
Full changelog

kube-storage-version-migrator

OCPBUGS-69726: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.22 #235
Full changelog

machine-api-operator

OCPCLOUD-3166: Bump openshift/api #1453
OKD-259: Vendor API and add OKD featureset Specific CRDs #1448
SPLAT-2603: Updated AWS dedicated host id validation pattern #1451
OCPBUGS-64937: vsphere - Cache REST API sessions to prevent excessive vCenter logouts #1432
OCPCLOUD-3222: Adds agents.md #1449
OCPBUGS-69862: Updating ose-machine-api-operator-container image to be consistent with ART for 4.22 #1450
Full changelog

machine-config-operator

TRT-2543: Revert #5586 “MCO-2065: Move systemctl execs to dbus calls” #5638
OCPBUGS-75916: crio: disable short_name_mode until we introduce ctrcfg api for it #5628
NO-ISSUE: Make TestImagePrunerErrors flexible to registry behavior changes #5613
OCPEDGE-2216: feat: increase reserved memory for tnf masters #5592
MCO-2065: Move systemctl execs to dbus calls #5586
NO-ISSUE: Fix-up AMI update script to work from CI image #5626
NO-ISSUE: Update AMI script and list #5616
MCO-1877: MCO-1879: MCO-1882: MCO-1884: Implement boot image skew enforcement MVP #5428
MCO-1924: MCO-500: Migrate direct runGetOut() to use CommandRunner in the MCD #5546
NO-JIRA: Fix OSImageStream validating admission policies for OKD #5618
MCO-1953: Refactor functionality to grab machines by state for calculating MCP status #5541
OCPBUGS-20561: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5601
MCO-2090: migrate nodedisruptionpolicy tests from the private reposit… #5602
NO-JIRA: Pass TAGS argument to the machine-config-controller image build #5611
AGENT-1395: IRI followup changes #5562
AGENT-1424: Add e2e test for IRI deletion #5608
MCO-2088: Remove wasm extension #5598
OCPBUGS-72555: Restrict CPMS boot image configuration to only AWS, GCP and Azure platforms #5540
NO-ISSUE: Add bootstrap e2e guide #5604
NO-ISSUE: CPMS test should account for skew API #5599
OCPBUGS-74368: Stale operator metrics Service and ServiceMonitor resources need to be deleted #5593
MCO-2059: migrate machineconfignodes from private repo #5589
OCPBUGS-58023: Prevent unnecessary systemd unit disable #5582
NO-ISSUE: Fix e2e ocl intermittent failures #5595
MCO-1182: migrate private test case OCP-87023 #5587
AGENT-1424: add initial e2e tests for the InternalReleaseImage controller #5588
AGENT-1412: Prevent deletion of InternalReleaseImage when in use #5545
OCPBUGS-71238: Consider image mirrors for OSImageStream fetching #5560
NO-ISSUE: Fix Failure Status condition to True when kubeletconfig or container runtime config validation fails #5542
OCPBUGS-62295: Shorten HAProxy timeouts #5312
MCO-2055: migrate bootimages tests #5551
Revert “OCPBUGS-58023: Prevent unnecessary systemd unit disable” #5576
OCPBUGS-73802: Fix up bootstrap-e2e #5563
MCO-2028: Add target OS version detection #5556
NO-JIRA: bump openshift/client-go #5500
NO-ISSUE: Fixes the issue in the test TestKubeletConfigMaxPods when AutoNodeSizing is enabled by default #5555
OCPBUGS-72396: use D-Bus API to list systemd units #5537
OCPBUGS-56717: enable nodeip-configuration for platform external #5475
CORS-4208: set default KUBELET_NODE_IPS for dualstack nodes #5384
OCPBUGS-72553: CPMS boot image config should not override standard MachineSet configuration #5539
OCPBUGS-67229: Set NodeDegraded MCN condition when node state annotation is set to Degraded #5509
OCPBUGS-58023: Prevent unnecessary systemd unit disable #5527
AGENT-1411: fix IRI registry setup file #5543
OCPBUGS-71189: Configure proxy from ControllerConfig #5538
MCO-2047: migrate scale tests from private repository to MCO repository #5533
MCO-650: Implement custom pool booting #5361
MCO-2049: Validate MCP osImageStream reference #5535
NO-ISSUE: Add README for MCO Operator disruptive e2e tests #5522
MCO-2037: Fix timeout during configMap cleanup #5529
AGENT-1411: Preload the registry image when starting the iri-service #5514
NO-JIRA: kubelet: drop pod-infra-container-image usage #5460
OCPBUGS-70259: Enable existing units without content #5520
MCO-2018: Move operator metrics into the controller #5498
MCO-2033: Refactor bootstrap dependency handling #5519
OCPNODE-3973: Default CPU/Memory changes to Workers - AutoSizingReserved #5491
OCPBUGS-69910: Bump OpenShift builder images to 4.22 #5512
OCPBUGS-69674: Skip boot image updates if arch annotation is not found #5508
MCO-1961: Integrate OSImageStream into MCP and sync logic #5476
MCO-2006: Migrate pinned images sets private test cases #5466
OCPBUGS-66209: clusteroperator/machine-config blips Degraded=True in CI jobs #5465
MCO-2015: Use an event based queue in the boot image controller #5479
MCO-1016: Only update when there is an actual controller change #4742
MCO-1961: Rework MC’s OSImageURL merge logic #5488
OCPBUGS-62984: MCP is not correctly degraded when a pivotError happens #5492
OCPBUGS-62828: MCO degraded when an empty pull-secret is configured #5486
AGENT-1391: Use TLS cert for the InternalReleaseImage registry #5483
OCPBUGS-66420: Revert “Default Enablement of Auto Sizing Reserved in OpenShift 4.21” #5489
Full changelog

machine-image-customization-controller

NO-ISSUE: Add AGENTS.md and CLAUDE.md #156
OCPBUGS-70040: Updating ose-image-customization-controller-container image to be consistent with ART for 4.22 #155
Full changelog

machine-os-images

METAL-1720: Add aarch64 symlinks for initramfs #79
NO-ISSUE: Run fetch_image with tracing #68
OCPBUGS-69857: Updating ose-machine-os-images-container image to be consistent with ART for 4.22 #76
NO-ISSUE: Add AGENTS.md file #75
Full changelog

metallb-frr

CNF-20883: Downstream merge 2025-12-30 #118
Full changelog

monitoring-plugin

OU-1205: feat: force rounded dates for consecutive intervals #748
OU-915: create dashboards and rbac #746
OU-1039: add info alert to the Incident page #741
NO-JIRA: fix: update vulnerable dependencies #742
COO-1515: add the cluster-health-analyzer feature #736
OCPBUGS-72604: remove top level dispatch into useEffect #730
NO-JIRA: monitoring testing - metrics - ungraphable for periodics #731
OU-1134: edit perses dashboards automation testing #712
OU-1122: reuse existing handler to set alerts table data #690
NO-JIRA: fix: remove unnecessary package.lock #728
OCPBUGS-70014: Updating monitoring-plugin-container image to be consistent with ART for 4.22 #708
OBSINTA-1062: custom cluster-health-analyzer builds #720
NO-JIRA: metrics automation failing only in periodics - fix click and type timespan #725
NO-JIRA: fix esbuild optional dependencies for cross arch builds #721
OCPBUGS-70314: fix: update qs vulnerable dependency #715
NO-JIRA: metrics automation testing for presubmit and periodic #716
NO-JIRA: feat: use esbuild-loader, add push manifest command to makefile #713
OU-1064: list perses dashboards automation testing #711
NO-JIRA: monitoring automation fixing Core platform change #709
OU-632: Split ALERTS query_range into several requests for Incidents #678
OU-1082: claude slash commands cypress-setup and cypress-run #673
OU-1074: feat: add backport claude command #691
OU-1088: remove random multiplication #696
OU-1073: chore: add contributing guide #694
NO-JIRA: automation - dev user scenarios fixes with namespace level changes #692
OBSINTA-853: Cypress Incidents Remove Flaky Tag #688
OU-1081: allow claude-code to build-images #686
OU-1123: alerts chart in Incidents - set the container height same as char… #689
OBSINTA-858: [Incidents] Commands for AI-Assisted Development of Cypress Tests #621
OBSINTA-853: Incident tests CI: Incorrect MP namespace + Race Condition in Closing Guide Tour #679
OCPBUGS-68373: fix: upgrade node-forge vulnerable dependency #681
NO-ISSUE: expose argument’s default values #665
NO-JIRA: automation monitoring testing stabilization flaky scenarios #684
Full changelog

multus-admission-controller

OCPBUGS-69968: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.22 #113
Full changelog

multus-networkpolicy

OCPBUGS-69727: Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.22 #83
Full changelog

must-gather

OSSM-11290: Collect Istio ZTunnel resources #511
OCPBUGS-70064: Updating ose-must-gather-container image to be consistent with ART for 4.22 #519
Full changelog

network-metrics-daemon

OCPBUGS-69971: Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.22 #140
Full changelog

network-tools

NO-JIRA: Comment submariner team members until they’re ready for OVNK bugs #171
OCPBUGS-70066: Updating ose-network-tools-container image to be consistent with ART for 4.22 #170
Full changelog

networking-console-plugin

CNV-78079: Virtual machine networks page - Other types tab #335
CNV-78079: Virtual machine networks - deletion #343
CNV-78079: Virtual machine networks - details page updates #333
CNV-77540: fix Enable MultiNetworkPolicies lead to invalid URL #339
CNV-78194: update PatternFly to 6.4.0 to align with Console main #336
CNV-70790: Navigation to Project Mapping Before Network Definition Com… #338
CNV-69219: New translations #337
CNV-78079: Virtual machine networks - list updates #329
OCPBUGS-74423: Migrate to npm #331
CNV-77547: add “Make this network available for all projects” option to Virtual machine network Wizard #328
CNV-76711: Remove @openshift-console/plugin-shared package #327
CNV-76879: Allow passing the physical network name via URL parameter in the VM network wizard #326
CNV-76435: CUDN breadcrumb link to page with Project selector #325
OCPBUGS-73548: remove whitelist for allowlist #321
CNV-75831: list all NetworkPolicies in “All projects” #313
CNV-76277: Fix name generator with unprofessional names #315
OCPBUGS-70000: Updating networking-console-plugin-container image to be consistent with ART for 4.22 #312
CNV-76211: Remove deprecated badge from localnet #314
CNV-74685: Fix vm network edit modal #311
CNV-74687: Fixing the title and redirect when deleting a vm network #307
CNV-72230: fix networking links #309
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-69976: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.22 #53
Full changelog

nutanix-machine-controllers

OCPBUGS-69913: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.22 #128
Full changelog

oauth-apiserver

CNTRLPLANE-2260: cmd/oauth-apiserver-tests-ext: Update OTE framework integration #162
OCPBUGS-69818: Updating ose-oauth-apiserver-container image to be consistent with ART for 4.22 #160
CNTRLPLANE-1259: Simplified test infrastructure to single-module architecture #154
Full changelog

oauth-proxy

OCPBUGS-73848: test/e2e - do not use ambiguous container image short names #343
Full changelog

oc-mirror

OCPBUGS-75013: Fix reg config detection for explicit false values #1348
OCPBUGS-73760: fix conversion issue for catalog #1338
OCPBUGS-69745: fix duplicated channel bug in filtered catalogs #1339
CLID-476: Fixes for cross-build errors #1303
OCPBUGS-70024: images: update images to 4.22 #1337
OCPBUGS-70024: Updating oc-mirror-plugin-container image to be consistent with ART for 4.22 #1331
NO-JIRA: Add tests/results-integration to .gitignore #1326
CLID-480: v2: do not invoke v1 make commands #1310
CLID-512: claude: add slash command for ISC generation #1328
NO-JIRA: add adolfo-ab as reviewer #1329
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #632
NO-ISSUE: Synchronize From Upstream Repositories #630
OPRUN-4439: Update test-operator startup script to fix pod probe endpoints #629
NO-ISSUE: add 85889 automation #603
NO-ISSUE: add 83979 automation #602
NO-ISSUE: Synchronize From Upstream Repositories #625
OPRUN-4441: fix(ote): fix SingleOwnNamespace test for Boxcutter runtime compatibility and use as operator-controller dep from root instead of upstream release #628
OCPQE-31553: adjust watchnamespace qe case based on change #623
OPRUN-4439: Fix test operator controller pod probes #614
NO-ISSUE: Synchronize From Upstream Repositories #622
OPRUN-4446: Update preflight auth checks for Boxcutter feature gate #621
OPRUN-4112: Synchronize From Upstream Repositories #615
OPRUN-4403: OPRUN-4403 case for upgrade major version #618
OCPQE-31521: enhance ocp-79770 #616
OPRUN-4063: config watchnamespace api cases #612
NO-ISSUE: Synchronize From Upstream Repositories #610
OPRUN-4385: Remove marketplace index from tests #598
NO-ISSUE: Synchronize From Upstream Repositories #608
TRT-2516: Revert #594 “OCPBUGS-65634: add service account to curl job” #609
OCPBUGS-65634: add service account to curl job #594
NO-ISSUE: Synchronize From Upstream Repositories #601
OCPQE-31296: enhance qe cases to make it more stable #604
NO-ISSUE: Run upstream e2e tests tagged with @catalogd-update #605
NO-ISSUE: Synchronize From Upstream Repositories #597
OPRUN-4350: Update to golang 1.25 and ocp 4.22 #586
OCPQE-31263: update 83026 to specify the clustercatalog #583
OCPQE-30674: migrate bandrade’s OLMv1 test cases to OTE #562
OCPQE-31264: update 80458’s timeout to 180s #579
NO-ISSUE: Synchronize from upstream #581
Full changelog

openshift-apiserver

Revert “OCPBUGS-72408: block image import from cluster IP addresses” #599
OCPBUGS-72408: block image import from cluster IP addresses #591
OCPBUGS-70049: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.22 #590
Full changelog

openshift-controller-manager

CNTRLPLANE-2620: bump github.com/openshift/library-go #427
OCPBUGS-69696: Updating ose-openshift-controller-manager-container image to be consistent with ART for 4.22 #425
Full changelog

openshift-state-metrics

OCPBUGS-69985: Updating openshift-state-metrics-container image to be consistent with ART for 4.22 #128
Full changelog

openstack-cluster-api-controllers

OCPBUGS-69731: Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.22 #396
NO-JIRA: Sync main with latest upstream (release-0.14) #395
Full changelog

openstack-machine-api-provider

OCPBUGS-70022: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.22 #149
OCPBUGS-67298: Don’t record event for every reconcile #142
Full changelog

openstack-resource-controller

OCPBUGS-70015: Updating openstack-resource-controller-container image to be consistent with ART for 4.22 #25
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #1226
OCPBUGS-76323: OCPQE-31553:remove qe case of testing collect-profiles #1221
NO-ISSUE: UPSTREAM: : migrate bandrade test cases to OTE #1193
OCPBUGS-31547: Remove the collect-profiles job #1215
OCPBUGS-26404: Add retry logic for SNO cluster detection in leader election configuration #1210
OCPQE-31553: continue to adjust case per collect-profiles change #1218
OPRUN-4407: automate OCP-87276 #1212
OCPQE-31558, OCPQE-31559: Update QE test cases to align with the removal of the redhat-marketplace catalog #1217
OCPQE-31553: change to check collect-profile networkpolicy dynamically #1216
OCPBUGS-74389: Synchronize From Upstream Repositories #1206
OPRUN-4414: Integrate APIServer TLS controller into PSM #1205
OPRUN-4415: Synchronize From Upstream Repositories #1202
NO-ISSUE: Synchronize From Upstream Repositories #1201
OPRUN-4416: Remove kube-rbac-proxy from PSM #1190
NO-ISSUE: automate ocp-85743 and ocp-85745 #1197
OCPQE-31468: add missed opm db testdata #1196
OCPQE-31468: recovery missed qe testdata #1194
OCPBUGS-65867: Synchronize From Upstream Repositories #1195
NO-ISSUE: Synchronize From Upstream Repositories #1192
OCPQE-30680: migrate ocp-25674 #1185
NO-ISSUE: UPSTREAM: <carry>: migrate bandrade test cases to OTE #1169
OCPQE-31297: enhance ocp and microshift olm case #1173
NO-ISSUE: Synchronize From Upstream Repositories #1168
OCPQE-30680: migrate OLMv0 test cases to OTE #1166
OPRUN-4351: Update Dockerfiles/CI to use golang 1.25/ocp 4.22 #1178
Updating ose-operator-framework-tools-container image to be consistent with ART for 4.22 #1174
OCPBUGS-69774: Updating operator-registry-container image to be consistent with ART for 4.22 #1177
OCPBUGS-69740: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.22 #1175
Full changelog

operator-marketplace

OPRUN-4456: chore(deps): upgrade Go module dependencies (edge) #724
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 #720
NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1 in the k8s-dependencies group #718
NO-ISSUE: Bump github.com/onsi/gomega from 1.39.0 to 1.39.1 #719
OCPBUGS-65581: marketplace-operator sets Progressing=True during upgrade #713
OPRUN-4410: Add Openshift TLS Profiles support to marketplace-operator #715
NO-ISSUE: Bump github.com/operator-framework/api from 0.37.0 to 0.38.0 #717
OPRUN-4302: Remove marketplace index #698
OCPBUGS-74360: Fix image for the build #714
NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.0 in the k8s-dependencies group #711
NO-ISSUE: Bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 #712
OCPBUGS-74006: Updating marketplace-operator-container image to be consistent with ART for 4.22 #709
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.4 #701
NO-ISSUE: Bump github.com/onsi/gomega from 1.38.3 to 1.39.0 #702
OCPBUGS-69441: Increase default catalog polling interval to 4h (240m) #695
NO-ISSUE: Bump the k8s-dependencies group with 2 updates #697
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 #691
OPRUN-4354: Update to build containers to golang-1.25 #696
NO-ISSUE: update ports on deployment manifests, fix spacing #689
OCPBUGS-69929: Updating marketplace-operator-container image to be consistent with ART for 4.22 #694
NO-ISSUE: Bump github.com/onsi/gomega from 1.38.2 to 1.38.3 #692
NO-ISSUE: Bump github.com/operator-framework/api from 0.36.0 to 0.37.0 #693
NO-ISSUE: Bump the k8s-dependencies group with 3 updates #686
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6168: skip new NetSeg Localnet test #2963
OCPBUGS-69753: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.22 #2907
OCPBUGS-61524, OCPBUGS-66994: DownStream Merge [01-03-2026] #2917
CORENET-6170: Add OCP tests extension #2461
OCPBUGS-70087: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.22 #2913
OCPBUGS-70058: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.22 #2912
OCPBUGS-66235: DownStream Merge [12-19-2025] #2910
CORENET-6356: Bump OVN to 25.09 and 25.09 for OKD #2909
OCPBUGS-66234: DownStream Merge [12-04-2025] #2896
Full changelog

powervs-block-csi-driver

MULTIARCH-5838: Rebase ibm-powervs-block-csi-driver with upstream #109
OCPBUGS-69805: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.22 #108
Full changelog

powervs-block-csi-driver-operator

STOR-2523: Add desired-version annotation to controller Deployment and use DeploymentVersionController in ibm-powervs-block-csi-driver-operator #90
No-JIRA: Update owners #93
OCPBUGS-69906: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.22 #94
Full changelog

powervs-cloud-controller-manager

No-Jira: Bump golang.org/x/crypto to 0.45.0 #90
Full changelog

powervs-machine-controllers

OCPBUGS-70051: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.22 #133
Full changelog

prom-label-proxy

OCPBUGS-70042: Updating prom-label-proxy-container image to be consistent with ART for 4.22 #388
Full changelog

prometheus

OCPBUGS-69956: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.22 #284
Full changelog

prometheus-alertmanager

OCPBUGS-74035: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.22 #112
OCPBUGS-69983: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.22 #109
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-67303: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #358
OCPBUGS-70007: Updating prometheus-config-reloader-container image to be consistent with ART for 4.22 #352
OCPBUGS-70055: Updating prometheus-operator-container image to be consistent with ART for 4.22 #353
OCPBUGS-69832: Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.22 #351
OCPBUGS-67215: [bot] Bump openshift/prometheus-operator to v0.87.1 #349
Full changelog

prometheus-node-exporter

OCPBUGS-69806: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.22 #174
Full changelog

route-controller-manager

OCPBUGS-63449: filter ingress namespace on UnmanagedRoutes metric #71
NO-JIRA: add jcmoraisjr to owners #69
Full changelog

service-ca-operator

CNTRLPLANE-2547: test/e2e: migrate metrics tests for OTE compatibility #305
CNTRLPLANE-2537: test/e2e: migrate headless-stateful-serving-cert-secret-delete-data test for OTE compatibility #304
CNTRLPLANE-2508: test/e2e: migrate vulnerable-legacy-ca-bundle-injection-configmap test for OTE compatibility #303
CNTRLPLANE-2499: test/e2e: migrate ca-bundle-injection-configmap-update test for OTE compatibility #302
CNTRLPLANE-2498: test/e2e: migrate ca-bundle-injection-configmap test for OTE compatibility #301
CNTRLPLANE-2494: test/e2e: migrate serving-cert-secret-delete-data test for OTE compatibility #300
CNTRLPLANE-2491: test/e2e: migrate serving-cert-secret-add-data test for OTE compatibility #299
CNTRLPLANE-2490: test/e2e: migrate serving-cert-secret-modify-bad-tlsCert test for OTE compatibility #298
CNTRLPLANE-2161: test/e2e: migrate serving-cert-annotation test for OTE compatibility #297
OCPBUGS-69911: Updating ose-service-ca-operator-container image to be consistent with ART for 4.22 #296
Full changelog

stream-coreos, stream-coreos-extensions

NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1891
No-JIRA: move the OKD SIG repo to 4.22 #1890
NO-JIRA: OWNERS: add user Rolv-Apneseth #1882
NO-JIRA: Update to track 4.22 and rhel-9.8 #1881
NO-JIRA: rhel-10.1: enable rhel-10.1-fast-datapath #1885
NO-JIRA: packages-openshift: enable rhel-10.1-fast-datapath #1884
OCPNODE-4010: package: add ose-crio-credential-provider #1879
OCPBUGS-70162: extensions/rhel-10.1: Re-enable ipsec #1878
NO-JIRA: drop use of rhel-9.6-appstream-containernetworking repo #1877
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

telemeter

NO-ISSUE: switch http_request_size_bytes to histogram #574
NO-ISSUE: support native histograms #573
NO-ISSUE: update github.com/prometheus/client_golang #572
OCPBUGS-69697: Updating telemeter-container image to be consistent with ART for 4.22 #571
Full changelog

tests

NO-ISSUE: Automated - Update synthetic test data #30694
NO-JIRA: Ignore state transitions on upgrade failures and SNO #30762
SPLAT-2337: CCM-AWS OTE binary and skips #30747
NO-JIRA: Fix discrepancies in use of failure message vs output #30752
OCPEDGE-2166: test(two-node): stablize tnf recovery suite #30716
NO-JIRA: Fix OKD featureset test as it should only run if the current featureset is Default #30757
OCPBUGS-74917, TRT-2504: Claude command to manage watch request limits, split test by operator/component #30750
TRT-2540: Revert #30657 “OCPNODE-3944: Create e2e automation in origin for case OCP-84149” #30761
CNTRLPLANE-2196: reg ote bin for cluster auth operator #30735
NO-JIRA: upkeep: add collection of errors for crio tests #30743
OCPEDGE-1484: [TNF] kubelet disruption test #30290
OKD-259: Test OKD Feature set Against OKD and OCP clusters #30693
OCPNODE-3944: Create e2e automation in origin for case OCP-84149 #30657
OCPEDGE-2355: feat: skip unsupported commatrix tests for two node #30720
OCPEDGE-2274: fix: change arbiter topology test to verify pods do not run on arbiter nodes #30737
OCPQE-31524: Add conditional SCC wait for Kubernetes compatibility #30736
Revert “SPLAT-2337: Added OTE binary for ccm-aws” #30744
SPLAT-2337: Added OTE binary for ccm-aws #30525
NO-JIRA: bump SNO marketplace-operator watch count limit #30738
OCPBUGS-73778: revert LSO networkpolicy cases #30684
STOR-2838: fix OTP AsGuestKubeconf #30721
OCPBUGS-63307: Add/RemoveSigtermProtection event matcher for SigstoreImageVerification tests #30624
TRT-2522: Update optimized builds test to use rpm -qa instead of dnf #30722
NO-JIRA: Replace OCPBUGS-20062 with OCPBUGS-65984 #30554
OCPNODE-3203: Add a test suite for kubeletconfig testing #30648
OCPBUGS-61855: Revert “Temporarily disable InstallPlanStepAppliedWithWarnings alert for k8s 1.34 rebase” #30559
NO-ISSUE: Update boot image manifests for skew API #30712
NE-2376: Remove restriction of unmanaged x-k8s.io #30658
OCPBUGS-74237: Update MCN tests to better handle condition transitions through the “Unknown” state #30705
OTA-1681: remove etcd exceptions #30688
OCPBUGS-74280: Add filter for openshift-copy-to-node ns #30713
OCPBUGS-62929: Check router RBAC before external cert ops #30395
OCPCLOUD-3351: monitortest: add crdversionchecker #30603
OCPBUGS-65674: VsphereConfigurationTestsRollOutTooOften event matcher should use broader regex #30654
OCPSTRAT-2728: add images required for the 1.35 rebase (temporary) #30687
NO-JIRA: Remove exceptions for storage operators #30677
NO-ISSUE: Allow test to tolerate running on minimal images #30695
TRT-2483: feat(ginkgo): add monitor tests to extension test result output #30678
NO-JIRA: Update Networking team lead #30301
OCPEDGE-2303: update test logic for degraded cluster run #30649
NO-JIRA: CO must go Progressing during a minor-level upgrade #30626
OCPBUGS-39026: Remove exception for monitoring operator going degraded during upgrade #30012
NO-JIRA: Fix Pod.Create() to use –local flag for template processing #30686
OCPEDGE-1788: TNF add etcd cold boot recovery tests from graceful node shutdown #30519
NO-JIRA: Replace OCPBUGS-38667 with OCPBUGS-66225 #30551
OCPEDGE-2304: adjust olm test to pass on a degraded run #30664
OCPBUGS-72547: Isolate and reduce parallelism for OrderedNamespaceDeletion tests. #30672
OCPNODE-3823: Migrating test case from Openshift-test-private to origin #30512
NO-JIRA: add the intervals bucket for Netpol tests #30679
NO-ISSUE: Update synthetic test data #30680
NO-JIRA: Remove exceptions for co/machine-config on Available=False #30550
CNTRLPLANE-2167: Add oc-tests-ext to extension binaries #30653
OCPBUGS-69676: update watch request limits for cluster-autoscaler-operator #30656
NO-JIRA: Remove the exception for CO/console’s Available=False #30553
Revert “CNF-18661: add a skip on the commatrix test for the unsupported topology by commatrix” #30670
NO-ISSUE: Fix the PinnedImage test to set imageMinimumGCAge to 1s #30645
OCPBUGS-70170: change iperf2 test to serial from parallel #30671
NO-JIRA: register cluster-node-tuning-operator-test-ext the binary to origin for OTE migration #30598
NE-2056: auto negative tests of gatewayapicontroller #30599
NO-JIRA: Add more output for debegging #30583
NO-JIRA: Skip a ClusterOperator test if a cluster upgrade is blocked #30558
NO-JIRA: Track the total kubelet metrics outage durations with autodl framework #30593
NO-JIRA: Add images that shouldn’t be mirrored to the exception list. #30652
OCPBUGS-66225: Add more exceptions for CO/image-registry’s Degraded=True #30581
OCPBUGS-66065: remove duplicated events before processing lease intervals #30639
OCPBUGS-57665: only run Netpol two at a time #30618
OCPBUGS-70249: Unrevert tls tests with fixes #30536
OCPBUGS-70065: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.22 #30636
OCPBUGS-69400: Ignore repeated TopologyAwareHintsDisabled events #30614
CNF-18661: add a skip on the commatrix test for the unsupported topology by commatrix #30640
CNTRLPLANE-2167: Migrate must-gather cases to origin #30594
NO-JIRA: Remove DennisPeriquet from OWNERS #30650
OCPSTRAT-2728: Update etcd test data for k8s 1.35 release #30605
OCPBUGS-67313: Fix race condition in external binary extraction #30616
OCPBUGS-70134: Fix JSONL parsing to handle stray JSON in test output #30634
TRT-2394: Detect duplicate tests #30498
CNTRLPLANE-947: E2E test adaptations for OIDC #30292
TRT-2418: Add CPU metrics autodl #30609
NO-JIRA: feat: render OTE JSON results in spyglass #30619
NO-JIRA: Increase tolerance of CO’s not reporting Progressing #30602
MCO-2006: move node-filecycle monitor to default #30592
NO-ISSUE: Two more COs report Available=False in a non-upgrade job #30588
CNTRLPLANE-1437: add monitor test for checking default service account in pods (static test name) #30561
NO-JIRA: feat(monitor): track test bucket execution intervals #30615
STOR-2550: add LSO network policy test case #30562
OCPBUGS-63618: BeforeEach was indirectly called in DetermineReleasePayloadImage #30610
CNTRLPLANE-1683: added the OTE binary for cluster-image-registry-operator #30612
OCPBUGS-67211: exculude Flaky tests for openshift/csi test suite #30597
OCPBUGS-65674: VsphereConfigurationTestsRollOutTooOften event matcher should match also dep and ds events #30547
NO-JIRA: Allow group snapshot tests to be re-tried #30607
OCPNODE-3780: Add e2e tests to validate DRA APIs #30462
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

OCPBUGS-69738: Updating ose-thanos-container image to be consistent with ART for 4.22 #166
Full changelog

volume-data-source-validator

OCPBUGS-69897: Updating volume-data-source-validator-container image to be consistent with ART for 4.22 #8
Full changelog

vsphere-cloud-controller-manager

Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.22 #102
Full changelog

vsphere-cluster-api-controllers

NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #80
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-69760: Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.22 #153
OCPBUGS-69746: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.22 #152
Full changelog

vsphere-csi-driver-operator

OCPBUGS-74225: Bump library-go #328
OCPBUGS-74206: fix snapshot config non-deterministic ordering #329
STOR-2840: Declare RWX capability explicitly #324
STOR-2852: Enable snapshot tests for vsphere #321
OCPBUGS-69924: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.22 #320
OCPBUGS-66113: Some containers do not have readOnlyRootFilesystem #319
Full changelog

vsphere-problem-detector

OCPBUGS-74989: GetVCenterHostnames lacks lock protection causing potential data race #209
OCPBUGS-70365: fix concurrent map writes #206
OCPBUGS-69856: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.22 #199
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Package List

cri-o-1.35.0-1.el10s
kernel-6.12.0-192.el10
openshift-kubelet-4.22.0-202601290425.p2.g0a955cc.assembly.stream.el9
systemd-257-21.el10

Full list (480 packages)

NetworkManager-1:1.55.91-1.el10
NetworkManager-cloud-setup-1:1.55.91-1.el10
NetworkManager-libnm-1:1.55.91-1.el10
NetworkManager-ovs-1:1.55.91-1.el10
NetworkManager-tui-1:1.55.91-1.el10
WALinuxAgent-udev-2.14.0.1-2.el10
aardvark-dns-2:1.16.0-2.el10
acl-2.3.2-4.el10
afterburn-5.10.0-1.el10
afterburn-dracut-5.10.0-1.el10
alternatives-1.30-2.el10
amd-gpu-firmware-20260107-21.el10
amd-ucode-firmware-20260107-21.el10
attr-2.5.2-5.el10
audit-4.0.3-5.el10
audit-libs-4.0.3-5.el10
audit-rules-4.0.3-5.el10
authselect-1.5.0-8.el10
authselect-libs-1.5.0-8.el10
avahi-libs-0.9~rc2-2.el10
azure-vm-utils-0.7.0-1.el10
basesystem-11-22.el10
bash-5.2.26-6.el10
bash-completion-1:2.11-16.el10
bind-libs-32:9.18.33-13.el10
bind-license-32:9.18.33-13.el10
bind-utils-32:9.18.33-13.el10
bootc-1.12.1-2.el10
bootupd-0.2.32-1.el10
bsdtar-3.7.7-4.el10
bubblewrap-0.10.0-3.el10
bzip2-1.0.8-25.el10
bzip2-libs-1.0.8-25.el10
c-ares-1.34.6-1.el10
ca-certificates-2025.2.80_v9.0.305-102.el10
catatonit-5:0.2.1-1.el10
centos-gpg-keys-10.0-19.el10
centos-release-cloud-1-1.el10s
centos-release-nfv-common-1-5.el10s
centos-release-virt-common-1-1.el10s
centos-stream-release-10.0-19.el10
centos-stream-repos-10.0-19.el10
checkpolicy-3.9-1.el10
chrony-4.8-1.el10
cifs-utils-7.4-1.el10
clevis-21-9.el10
clevis-dracut-21-9.el10
clevis-luks-21-9.el10
clevis-pin-tpm2-0.5.3-9.el10
clevis-systemd-21-9.el10
cloud-utils-growpart-0.33-11.el10
composefs-1.0.8-1.el10
composefs-libs-1.0.8-1.el10
conmon-3:2.1.13-1.el10
conmon-rs-0.6.6-2.el10s
console-login-helper-messages-0.21.3-10.el10
console-login-helper-messages-issuegen-0.21.3-10.el10
console-login-helper-messages-profile-0.21.3-10.el10
container-selinux-4:2.244.0-1.el10
containers-common-5:0.64.0-4.el10
containers-common-extra-5:0.64.0-4.el10
coreos-installer-0.25.0-1.el10
coreos-installer-bootinfra-0.25.0-1.el10
coreutils-9.5-6.el10
coreutils-common-9.5-6.el10
cpio-2.15-3.el10
cracklib-2.9.11-8.el10
cracklib-dicts-2.9.11-8.el10
cri-o-1.35.0-1.el10s
cri-tools-1.35.0-1.el10s
criu-4.2-1.el10
criu-libs-4.2-1.el10
crun-1.25.1-1.el10
crypto-policies-20251127-1.git27c2902.el10
crypto-policies-scripts-20251127-1.git27c2902.el10
cryptsetup-2.8.1-2.el10
cryptsetup-libs-2.8.1-2.el10
curl-8.12.1-4.el10
cyrus-sasl-gssapi-2.1.28-27.el10
cyrus-sasl-lib-2.1.28-27.el10
dbus-1:1.14.10-5.el10
dbus-broker-36-4.el10
dbus-common-1:1.14.10-5.el10
dbus-libs-1:1.14.10-5.el10
dbus-tools-1:1.14.10-5.el10
device-mapper-10:1.02.206-3.el10
device-mapper-event-10:1.02.206-3.el10
device-mapper-event-libs-10:1.02.206-3.el10
device-mapper-libs-10:1.02.206-3.el10
device-mapper-multipath-0.9.9-15.el10
device-mapper-multipath-libs-0.9.9-15.el10
device-mapper-persistent-data-1.3.0-1.el10
diffutils-3.10-8.el10
dmidecode-1:3.6-5.el10
dnf-4.20.0-19.el10
dnf-data-4.20.0-19.el10
dnsmasq-2.90-5.el10
dosfstools-4.2-12.el10
dracut-107-3.el10
dracut-network-107-3.el10
dracut-squash-107-3.el10
duktape-2.7.0-10.el10
e2fsprogs-1.47.1-5.el10
e2fsprogs-libs-1.47.1-5.el10
efi-filesystem-6-6.el10
efibootmgr-18-8.el10
efivar-libs-39-3.el10
elfutils-default-yama-scope-0.194-1.el10
elfutils-libelf-0.194-1.el10
elfutils-libs-0.194-1.el10
erofs-utils-1.8.10-1.el10
ethtool-2:6.15-2.el10
expat-2.7.3-1.el10
file-5.45-8.el10
file-libs-5.45-8.el10
filesystem-3.18-17.el10
findutils-1:4.10.0-5.el10
firewalld-filesystem-2.4.0-1.el10
flatpak-session-helper-1.16.0-9.el10
fstrm-0.6.1-12.el10
fuse-common-3.16.2-5.el10
fuse-libs-2.9.9-25.el10
fuse3-3.16.2-5.el10
fuse3-libs-3.16.2-5.el10
fwupd-1.9.31-1.el10
gawk-5.3.0-6.el10
gdbm-1:1.23-14.el10
gdbm-libs-1:1.23-14.el10
gettext-envsubst-0.22.5-6.el10
gettext-libs-0.22.5-6.el10
gettext-runtime-0.22.5-6.el10
git-core-2.52.0-1.el10
glib2-2.80.4-11.el10
glibc-2.39-99.el10
glibc-common-2.39-99.el10
glibc-gconv-extra-2.39-99.el10
glibc-minimal-langpack-2.39-99.el10
gmp-1:6.2.1-12.el10
gnupg2-2.4.5-3.el10
gnutls-3.8.10-2.el10
gobject-introspection-1.79.1-6.el10
gpgme-1.23.2-6.el10
grep-3.11-10.el10
grub2-common-1:2.12-36.el10
grub2-efi-x64-1:2.12-36.el10
grub2-pc-1:2.12-36.el10
grub2-pc-modules-1:2.12-36.el10
grub2-tools-1:2.12-36.el10
grub2-tools-minimal-1:2.12-36.el10
gssproxy-0.9.2-10.el10
gzip-1.13-3.el10
hostname-3.23-14.el10
hwdata-0.379-10.6.el10
ignition-2.25.1-1.el10
ignition-grub-2.25.1-1.el10
ima-evm-utils-1.6.2-4.el10
info-7.1-6.el10
inih-58-3.el10
intel-gpu-firmware-20260107-21.el10
ipcalc-1.0.3-12.el10
iproute-6.17.0-1.el10
iproute-tc-6.17.0-1.el10
iptables-libs-1.8.11-12.el10
iptables-nft-1.8.11-12.el10
iputils-20240905-5.el10
irqbalance-2:1.9.4-6.el10
iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
isns-utils-libs-0.103-1.el10
jansson-2.14-3.el10
jose-14-102.el10
jq-1.7.1-11.el10
json-c-0.18-3.el10
json-glib-1.8.0-5.el10
kbd-2.6.4-7.el10
kbd-legacy-2.6.4-7.el10
kbd-misc-2.6.4-7.el10
kdump-utils-1.0.58-10.el10
kernel-6.12.0-192.el10
kernel-core-6.12.0-192.el10
kernel-modules-6.12.0-192.el10
kernel-modules-core-6.12.0-192.el10
kernel-modules-extra-6.12.0-192.el10
kexec-tools-2.0.32-3.el10
keyutils-1.6.3-5.el10
keyutils-libs-1.6.3-5.el10
kmod-31-12.el10
kmod-libs-31-12.el10
kpartx-0.9.9-15.el10
krb5-libs-1.21.3-8.el10
less-661-3.el10
libacl-2.3.2-4.el10
libaio-0.3.111-22.el10
libarchive-3.7.7-4.el10
libassuan-2.5.6-6.el10
libattr-2.5.2-5.el10
libbasicobjects-0.1.1-58.el10
libblkid-2.40.2-15.el10
libbpf-2:1.7.0-1.el10
libcap-2.69-7.el10
libcap-ng-0.8.4-6.el10
libcbor-0.11.0-3.el10
libcollection-0.7.0-58.el10
libcom_err-1.47.1-5.el10
libcomps-0.1.21-3.el10
libcurl-minimal-8.12.1-4.el10
libdhash-0.5.0-58.el10
libdnf-0.73.1-12.el10
libdnf-plugin-subscription-manager-1.30.12-1.el10
libdrm-2.4.128-1.el10
libeconf-0.6.2-4.el10
libedit-3.1-52.20230828cvs.el10
libev-4.33-15.el10
libevent-2.1.12-16.el10
libfdisk-2.40.2-15.el10
libffi-3.4.4-10.el10
libfido2-1.14.0-7.el10
libgcc-14.3.1-4.3.el10
libgcrypt-1.11.0-6.el10
libgomp-14.3.1-4.3.el10
libgpg-error-1.50-2.el10
libgudev-238-7.el10
libgusb-0.4.9-4.el10
libibverbs-57.0-2.el10
libicu-74.2-5.el10
libidn2-2.3.7-3.el10
libini_config-1.3.1-58.el10
libipa_hbac-2.12.0-1.el10
libjcat-0.2.2-2.el10
libjose-14-102.el10
libkcapi-1.5.0-3.el10
libkcapi-hasher-1.5.0-3.el10
libkcapi-hmaccalc-1.5.0-3.el10
libksba-1.6.7-2.el10
libldb-4.23.5-100.el10
libluksmeta-10-1.el10
libmaxminddb-1.9.1-4.el10
libmicrohttpd-1:1.0.0-3.el10
libmnl-1.0.5-7.el10
libmodulemd-2.15.0-12.el10
libmount-2.40.2-15.el10
libmspack-0.10.1-0.14.alpha.el10
libndp-1.9-2.el10
libnet-1.3-7.el10
libnetfilter_conntrack-1.0.9-12.el10
libnfnetlink-1.0.2-3.el10
libnfsidmap-1:2.8.3-3.el10
libnftnl-1.3.0-2.el10
libnghttp2-1.64.0-2.el10
libnl3-3.11.0-1.el10
libnvme-1.16.1-2.el10
libpath_utils-0.2.1-58.el10
libpcap-14:1.10.4-7.el10
libpciaccess-0.16-16.el10
libpkgconf-2.1.0-3.el10
libpwquality-1.4.5-12.el10
libref_array-0.1.5-58.el10
librepo-1.19.0-1.el10
libseccomp-2.5.6-1.el10
libselinux-3.9-3.el10
libselinux-utils-3.9-3.el10
libsemanage-3.9-2.el10
libsepol-3.9-1.el10
libsmartcols-2.40.2-15.el10
libsmbclient-4.23.5-100.el10
libsolv-0.7.33-2.el10
libss-1.47.1-5.el10
libsss_certmap-2.12.0-1.el10
libsss_idmap-2.12.0-1.el10
libsss_nss_idmap-2.12.0-1.el10
libsss_sudo-2.12.0-1.el10
libstdc++-14.3.1-4.3.el10
libtalloc-2.4.3-100.el10
libtasn1-4.20.0-1.el10
libtdb-1.4.14-100.el10
libtevent-0.17.1-100.el10
libtirpc-1.3.5-1.el10
libtool-ltdl-2.4.7-13.el10
libunistring-1.1-10.el10
liburing-2.12-1.el10
libusb1-1.0.29-3.el10
libutempter-1.2.1-15.el10
libuuid-2.40.2-15.el10
libuv-1:1.51.0-1.el10
libverto-0.3.2-10.el10
libverto-libev-0.3.2-10.el10
libwbclient-4.23.5-100.el10
libxcrypt-4.4.36-10.el10
libxml2-2.12.5-9.el10
libxmlb-0.3.24-1.el10
libxslt-1.1.39-8.el10
libyaml-0.2.5-16.el10
libzstd-1.5.5-9.el10
linux-firmware-20260107-21.el10
linux-firmware-whence-20260107-21.el10
lmdb-libs-0.9.32-4.el10
logrotate-3.22.0-5.el10
lsof-4.98.0-7.el10
lua-libs-5.4.6-7.el10
luksmeta-10-1.el10
lvm2-10:2.03.32-3.el10
lvm2-libs-10:2.03.32-3.el10
lz4-libs-1.9.4-8.el10
lzo-2.10-14.el10
makedumpfile-1.7.8-1.el10
mdadm-4.4-3.el10
microcode_ctl-4:20251111-1.el10
mokutil-2:0.7.2-4.el10
mpdecimal-2.5.1-12.el10
mpfr-4.2.1-6.el10
nano-8.1-3.el10
ncurses-base-6.4-14.20240127.el10
ncurses-libs-6.4-14.20240127.el10
net-tools-2.0-0.73.20160912git.el10
netavark-2:1.16.0-1.el10
nettle-3.10.1-1.el10
newt-0.52.24-5.el10
nfs-utils-1:2.8.3-3.el10
nftables-1:1.1.5-3.el10
nmap-ncat-4:7.92-5.el10
nmstate-2.2.57-1.el10
npth-1.6-21.el10
nss-altfiles-2.23.0-5.el10
numactl-libs-2.0.19-3.el10
nvidia-gpu-firmware-20260107-21.el10
nvme-cli-2.16-2.el10
oniguruma-6.9.9-7.el10
open-vm-tools-13.0.5-1.el10
openldap-2.6.10-1.el10
openshift-clients-4.22.0-202601310450.p2.g7e80dba.assembly.stream.el9
openshift-kubelet-4.22.0-202601290425.p2.g0a955cc.assembly.stream.el9
openssh-9.9p1-19.el10
openssh-clients-9.9p1-19.el10
openssh-server-9.9p1-19.el10
openssl-1:3.5.5-1.el10
openssl-fips-provider-1:3.5.5-1.el10
openssl-libs-1:3.5.5-1.el10
openvswitch-selinux-extra-policy-1.0-36.el10s
openvswitch3.5-3.5.0-6.el10s
os-prober-1.81-9.el10
ose-aws-ecr-image-credential-provider-4.22.0-202601070821.p2.g3365bc9.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.22.0-202601070821.p2.g8584b9a.assembly.stream.el9
ose-crio-credential-provider-4.22.0-202601152226.p2.g41ac31f.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.22.0-202601070821.p2.g8732386.assembly.stream.el9
ostree-2025.7-1.el10
ostree-grub2-2025.7-1.el10
ostree-libs-2025.7-1.el10
p11-kit-0.26.1-1.el10
p11-kit-trust-0.26.1-1.el10
pam-1.6.1-9.el10
pam-libs-1.6.1-9.el10
passt-0^20251210.gd04c480-2.el10
passt-selinux-0^20251210.gd04c480-2.el10
pciutils-3.13.0-6.el10
pciutils-libs-3.13.0-6.el10
pcre2-10.44-1.el10.3
pcre2-syntax-10.44-1.el10.3
pkgconf-2.1.0-3.el10
pkgconf-m4-2.1.0-3.el10
pkgconf-pkg-config-2.1.0-3.el10
podman-7:5.6.0-2.el10
policycoreutils-3.9-2.el10
policycoreutils-python-utils-3.9-2.el10
polkit-125-4.el10
polkit-libs-125-4.el10
popt-1.19-8.el10
procps-ng-4.0.4-9.el10
protobuf-c-1.5.0-6.el10
psmisc-23.6-8.el10
python3-3.12.12-3.el10
python3-audit-4.0.3-5.el10
python3-charset-normalizer-3.4.2-1.el10
python3-cloud-what-1.30.12-1.el10
python3-dateutil-1:2.9.0.post0-1.el10
python3-dbus-1.3.2-8.el10
python3-decorator-5.1.1-12.el10
python3-distro-1.9.0-5.el10
python3-dnf-4.20.0-19.el10
python3-dnf-plugin-versionlock-4.7.0-10.el10
python3-dnf-plugins-core-4.7.0-10.el10
python3-gobject-base-3.46.0-7.el10
python3-gobject-base-noarch-3.46.0-7.el10
python3-hawkey-0.73.1-12.el10
python3-idna-3.7-4.el10
python3-iniparse-0.5-10.el10
python3-inotify-0.9.6-36.el10
python3-libcomps-0.1.21-3.el10
python3-libdnf-0.73.1-12.el10
python3-librepo-1.19.0-1.el10
python3-libs-3.12.12-3.el10
python3-libselinux-3.9-3.el10
python3-libsemanage-3.9-2.el10
python3-pip-wheel-23.3.2-7.el10
python3-policycoreutils-3.9-2.el10
python3-requests-2.32.4-1.el10
python3-rpm-4.19.1.1-21.el10
python3-setools-4.6.0-2.el10
python3-six-1.16.0-16.el10
python3-subscription-manager-rhsm-1.30.12-1.el10
python3-systemd-235-11.el10
python3-urllib3-1.26.19-3.el10
qemu-guest-agent-18:10.1.0-11.el10
quota-1:4.09-10.el10
quota-nls-1:4.09-10.el10
rdma-core-57.0-2.el10
readline-8.2-11.el10
rpcbind-1.2.7-3.el10
rpm-4.19.1.1-21.el10
rpm-build-libs-4.19.1.1-21.el10
rpm-libs-4.19.1.1-21.el10
rpm-ostree-2026.1-1.el10
rpm-ostree-libs-2026.1-1.el10
rpm-plugin-selinux-4.19.1.1-21.el10
rpm-sequoia-1.9.0.3-1.el10
rpm-sign-libs-4.19.1.1-21.el10
rsync-3.4.1-3.el10
samba-client-libs-4.23.5-100.el10
samba-common-4.23.5-100.el10
samba-common-libs-4.23.5-100.el10
sed-4.9-3.el10
selinux-policy-42.1.15-1.el10
selinux-policy-targeted-42.1.15-1.el10
setup-2.14.5-7.el10
sg3_utils-1.48-7.el10
sg3_utils-libs-1.48-7.el10
shadow-utils-2:4.15.0-9.el10
shadow-utils-subid-2:4.15.0-9.el10
shared-mime-info-2.3-8.el10
shim-x64-15.8-5.el10
skopeo-2:1.20.0-1.el10
slang-2.3.3-8.el10
snappy-1.1.10-7.el10
socat-1.7.4.4-8.el10
sqlite-libs-3.46.1-5.el10
ssh-key-dir-0.1.4-9.el10
sssd-2.12.0-1.el10
sssd-ad-2.12.0-1.el10
sssd-client-2.12.0-1.el10
sssd-common-2.12.0-1.el10
sssd-common-pac-2.12.0-1.el10
sssd-ipa-2.12.0-1.el10
sssd-krb5-2.12.0-1.el10
sssd-krb5-common-2.12.0-1.el10
sssd-ldap-2.12.0-1.el10
sssd-nfs-idmap-2.12.0-1.el10
sssd-proxy-2.12.0-1.el10
stalld-1.26.3-1.el10
strace-6.12-3.el10
subscription-manager-1.30.12-1.el10
subscription-manager-rhsm-certificates-20220623-6.el10
sudo-1.9.17-2.p2.el10
systemd-257-21.el10
systemd-journal-remote-257-21.el10
systemd-libs-257-21.el10
systemd-pam-257-21.el10
systemd-udev-257-21.el10
tar-2:1.35-10.el10
tmux-3.3a-13.20230918gitb202a2f.el10
toolbox-0.3-1.el10
tpm2-tools-5.7-4.el10
tpm2-tss-4.1.3-5.el10
tpm2-tss-fapi-4.1.3-5.el10
tzdata-2025c-1.el10
unbound-anchor-1.20.0-15.el10
unbound-libs-1.20.0-15.el10
userspace-rcu-0.14.0-7.el10
util-linux-2.40.2-15.el10
util-linux-core-2.40.2-15.el10
vim-data-2:9.1.083-6.el10
vim-minimal-2:9.1.083-6.el10
virt-what-1.27-3.el10
which-2.21-44.el10
xfsprogs-6.16.0-1.el10
xmlsec1-1:1.2.39-3.el10
xmlsec1-openssl-1:1.2.39-3.el10
xz-1:5.6.2-4.el10
xz-libs-1:5.6.2-4.el10
zlib-ng-compat-2.2.3-3.el10
zram-generator-1.1.2-14.el10
zstd-1.5.5-9.el10

Changed:

cri-o 1.34.4-1.el10s → 1.35.0-1.el10s
cri-tools 1.34.0-2.el10s → 1.35.0-1.el10s
openshift-clients 4.21.0-202601170322.p2.g19a2243.assembly.stream.el9 → 4.22.0-202601310450.p2.g7e80dba.assembly.stream.el9
openshift-kubelet 4.21.0-202601200721.p2.g4d58ab3.assembly.stream.el9 → 4.22.0-202601290425.p2.g0a955cc.assembly.stream.el9
ose-aws-ecr-image-credential-provider 4.21.0-202601070814.p2.g3365bc9.assembly.stream.el9 → 4.22.0-202601070821.p2.g3365bc9.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.21.0-202601070814.p2.g83b3f9e.assembly.stream.el9 → 4.22.0-202601070821.p2.g8584b9a.assembly.stream.el9
ose-crio-credential-provider 4.21.0-202601151825.p2.g41ac31f.assembly.stream.el9 → 4.22.0-202601152226.p2.g41ac31f.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.21.0-202601070814.p2.g8732386.assembly.stream.el9 → 4.22.0-202601070821.p2.g8732386.assembly.stream.el9

Extensions

Full list (111 packages)

NetworkManager-libreswan-1.2.30-1.el10.x86_64
binutils-2.41-60.el10.x86_64
binutils-gold-2.41-60.el10.x86_64
bison-3.8.2-9.el10.x86_64
cmake-filesystem-3.31.8-1.el10.x86_64
cpp-14.3.1-4.3.el10.x86_64
elfutils-debuginfod-client-0.194-1.el10.x86_64
elfutils-libelf-devel-0.194-1.el10.x86_64
flex-2.6.4-19.el10.x86_64
gcc-14.3.1-4.3.el10.x86_64
glibc-devel-2.39-99.el10.x86_64
groff-base-1.23.0-10.el10.x86_64
kernel-6.12.0-192.el10.x86_64
kernel-core-6.12.0-192.el10.x86_64
kernel-devel-6.12.0-192.el10.x86_64
kernel-headers-6.12.0-192.el10.x86_64
kernel-modules-6.12.0-192.el10.x86_64
kernel-modules-extra-6.12.0-192.el10.x86_64
kernel-rt-core-6.12.0-192.el10.x86_64
kernel-rt-devel-6.12.0-192.el10.x86_64
kernel-rt-modules-6.12.0-192.el10.x86_64
kernel-rt-modules-core-6.12.0-192.el10.x86_64
kernel-rt-modules-extra-6.12.0-192.el10.x86_64
krb5-pkinit-1.21.3-8.el10.x86_64
krb5-workstation-1.21.3-8.el10.x86_64
ldns-1.8.3-18.el10.x86_64
libkadm5-1.21.3-8.el10.x86_64
libmpc-1.3.1-7.el10.x86_64
libqb-2.0.8-6.el10.x86_64
libreswan-5.3-3.el10.x86_64
libxcrypt-devel-4.4.36-10.el10.x86_64
libzstd-devel-1.5.5-9.el10.x86_64
lm_sensors-libs-3.6.0-20.el10.x86_64
m4-1.4.19-11.el10.x86_64
make-1:4.4.1-9.el10.x86_64
ncurses-6.4-14.20240127.el10.x86_64
nspr-4.36.0-4.el10.x86_64
nss-3.112.0-4.el10.x86_64
nss-softokn-3.112.0-4.el10.x86_64
nss-softokn-freebl-3.112.0-4.el10.x86_64
nss-sysinit-3.112.0-4.el10.x86_64
nss-tools-3.112.0-4.el10.x86_64
nss-util-3.112.0-4.el10.x86_64
openssl-devel-1:3.5.5-1.el10.x86_64
openvswitch3.5-ipsec-3.5.0-6.el10s.x86_64
pcp-conf-7.0.3-1.el10.x86_64
pcp-libs-7.0.3-1.el10.x86_64
perl-AutoLoader-5.74-514.el10.noarch
perl-B-1.89-514.el10.x86_64
perl-Carp-1.54-511.el10.noarch
perl-Class-Struct-0.68-514.el10.noarch
perl-Data-Dumper-2.189-512.el10.x86_64
perl-Digest-1.20-511.el10.noarch
perl-Digest-MD5-2.59-6.el10.x86_64
perl-DynaLoader-1.56-514.el10.x86_64
perl-Encode-4:3.21-511.el10.x86_64
perl-Errno-1.38-514.el10.x86_64
perl-Exporter-5.78-511.el10.noarch
perl-Fcntl-1.18-514.el10.x86_64
perl-File-Basename-2.86-514.el10.noarch
perl-File-Path-2.18-512.el10.noarch
perl-File-Temp-1:0.231.100-512.el10.noarch
perl-File-stat-1.14-514.el10.noarch
perl-FileHandle-2.05-514.el10.noarch
perl-Getopt-Long-1:2.58-3.el10.noarch
perl-Getopt-Std-1.14-514.el10.noarch
perl-HTTP-Tiny-0.088-512.el10.noarch
perl-IO-1.55-514.el10.x86_64
perl-IO-Socket-IP-0.42-512.el10.noarch
perl-IO-Socket-SSL-2.085-3.el10.noarch
perl-IPC-Open3-1.22-514.el10.noarch
perl-MIME-Base64-3.16-511.el10.x86_64
perl-Mozilla-CA-20231213-5.el10.noarch
perl-NDBM_File-1.17-514.el10.x86_64
perl-Net-SSLeay-1.94-8.el10.x86_64
perl-POSIX-2.20-514.el10.x86_64
perl-PathTools-3.91-512.el10.x86_64
perl-Pod-Escapes-1:1.07-511.el10.noarch
perl-Pod-Perldoc-3.28.01-512.el10.noarch
perl-Pod-Simple-1:3.45-511.el10.noarch
perl-Pod-Usage-4:2.03-511.el10.noarch
perl-Scalar-List-Utils-5:1.63-511.el10.x86_64
perl-SelectSaver-1.02-514.el10.noarch
perl-Socket-4:2.038-511.el10.x86_64
perl-Storable-1:3.32-511.el10.x86_64
perl-Symbol-1.09-514.el10.noarch
perl-Term-ANSIColor-5.01-512.el10.noarch
perl-Term-Cap-1.18-511.el10.noarch
perl-Text-ParseWords-3.31-511.el10.noarch
perl-Text-Tabs+Wrap-2024.001-511.el10.noarch
perl-Time-Local-2:1.350-511.el10.noarch
perl-URI-5.27-3.el10.noarch
perl-base-2.27-514.el10.noarch
perl-constant-1.33-512.el10.noarch
perl-if-0.61.000-514.el10.noarch
perl-interpreter-4:5.40.2-514.el10.x86_64
perl-libnet-3.15-512.el10.noarch
perl-libs-4:5.40.2-514.el10.x86_64
perl-locale-1.12-514.el10.noarch
perl-mro-1.29-514.el10.x86_64
perl-overload-1.37-514.el10.noarch
perl-overloading-0.02-514.el10.noarch
perl-parent-1:0.241-512.el10.noarch
perl-podlators-1:5.01-511.el10.noarch
perl-vars-1.05-514.el10.noarch
protobuf-3.19.6-15.el10.x86_64
python3-openvswitch3.5-3.5.0-6.el10s.x86_64
sysstat-12.7.6-2.el10.x86_64
usbguard-1.1.4-2.el10.x86_64
usbguard-selinux-1.1.4-2.el10.noarch
zlib-ng-compat-devel-2.2.3-3.el10.x86_64

CentOS Stream CoreOS base layer: 10.0.20260203-0

View changelog in Markdown or change previous release:

Source code for this page located on github