4.22.0-0.okd-scos-2026-02-11-212649

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:4.22.0-0.okd-scos-2026-02-11-212649

Team Approvals:

Tests:

Blocking jobs
- aws Succeeded periodic-ci-openshift-release-main-okd-scos-4.22-e2e-aws-ovn
Informing jobs
- aws-upgrade Succeeded (1 retries) periodic-ci-openshift-release-main-okd-scos-4.22-e2e-aws-ovn-upgrade
- aws-upgrade-minor Failed periodic-ci-openshift-release-main-okd-scos-4.22-upgrade-from-okd-scos-4.21-e2e-aws-ovn-upgrade

Upgrades from:

Upgrades to:

4.22.0-0.okd-scos-2026-02-12-092649 (changes) - Success

Changes from 4.21.0-0.okd-scos-2026-02-10-205057

Created: 2026-02-11 21:35:49 +0000 UTC

Image Digest: sha256:b38fc0d5bfe4a037e7ae4a779f8b9bffe98e035d0ee8d324d53e5588f04dfe4d

Components

Kubectl 1.34.1
Kubernetes 1.34.2
Kubernetes Tests 1.34.1
CentOS Stream CoreOS 10 upgraded from 10.0.20260203-0 to 10.0.20260211-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AdditionalRoutingCapabilities (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AdminNetworkPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AlibabaPlatform (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkDiagnosticsConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkLiveMigration (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NetworkSegmentation (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PreconfiguredUDNAddresses (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ProcMountType (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
RouteAdvertisements (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
TranslateStreamCloseWebsocketRequests (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VolumeAttributesClass (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (New)	Unconditionally Enabled (New)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ManagedBootImagesCPMS (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (New)	Enabled (New)	Enabled	Enabled
MutableCSINodeAllocatableCount (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (New)	Enabled (New)	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (New)	Enabled (New)	Enabled	Enabled
NewOLMOwnSingleNamespace (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled		Enabled (New)	Disabled	Enabled
IngressControllerDynamicConfigurationManager (0 tests)	Disabled	Disabled	Enabled	Enabled			Enabled (Changed)	Enabled (Changed)
KMSEncryptionProvider (0 tests)	Disabled	Disabled	Enabled	Enabled			Disabled (Changed)	Disabled (Changed)
NewOLMBoxCutterRuntime (0 tests)	Disabled	Disabled	Disabled	Enabled (Changed)			Disabled	Enabled (Changed)
CRIOCredentialProviderConfig (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ClusterAPIComputeInstall (0 tests)			Enabled (New)	Enabled (New)
ClusterAPIControlPlaneInstall (0 tests)			Enabled (New)	Enabled (New)
ClusterUpdateAcceptRisks (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ConfigurablePKI (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
DRAPartitionableDevices (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
EVPN (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
ExternalOIDCWithUpstreamParity (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
GatewayAPIWithoutOLM (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
KMSEncryption (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
NetworkConnect (0 tests)			Enabled (New)	Enabled (New)

Rebuilt images without code change

aws-kms-encryption-provider git 19e7b623 sha256:de1563a2a9e62d89ccf6d7ced2172264f653e825f33932370ed2ad1b7b123dde
azure-service-operator git 17e57462 sha256:9fb4a8b3bccc97c60855d2a41920a15fbd09c6c210ed12a4132d945992b60ee7
cluster-bootstrap git dc0d4a5c sha256:d96a079b99fcfa3eed1db56835d8cda49beb4f9968efd3c2e8bdce33c4c9dd9c
cluster-kube-cluster-api-operator git aec49344 sha256:309029e91ada7135ca267fa83c80d26f4285d0a909b9427bc882b9f80c69c0ab
cluster-policy-controller git 8b775487 sha256:a3d192540ad0e2c2fd607b9bd6d3b015b581be4af75f5403979d76ecf2819eaf
container-networking-plugins git 747ad66c sha256:1c0c1af77cf28daff8147d056aea5a711f3df9f085171281959c96d9b5554b35
containernetworking-plugins-microshift git 747ad66c sha256:eae5a60b80d0b7731afd046cddeda75720b9efa5ef303c9f3fe4d5a87cd82f40
egress-router-cni git 5e0f8d1b sha256:154fd7ee60e01502ee9cf3d3109fd64ea6bb14a48c6dcc7bce2ab63d5950fce9
gcp-cloud-controller-manager git 8732386c sha256:8c179f0d94f096315249cea06aa56cce2541208e0586f456dc257cf6f1004ff6
ibm-cloud-controller-manager git c566572b sha256:ec9d70700aa13013c1f5f4e71327608c8b72ed544163e10cdf433c327cb1393e
keepalived-ipfailover git 4d151b91 sha256:7f5b13c3e0dc38502d089746f213d3cbf2f9422c5471f2c3f823974edc83e8be
kubevirt-csi-driver git 9e2dbddf sha256:46b30383b5ee723d3aa8b2994ad8d7e81309259baaf366d36048b1c9116371d4
libvirt-machine-controllers git 76effeca sha256:5f1782949621ddbd5f7f37032c6e94d4a865c352513b8248a85e09b229f8b9ff
multus-cni git 93556f99 sha256:d09912c26abd081fafc111b0f2d028b72065128d14b91db45b941e5db93ec85e
multus-cni-microshift git 93556f99 sha256:8545d270b03bea4fc18e1232959fad4ac3fecd8d62f0641498c9471196b3638f
multus-route-override-cni git 08af4127 sha256:b443ed662101d3fb868a21a8dee09cc2f969620dd061907ea5dd82d9a66246e9
multus-whereabouts-ipam-cni git d691040e sha256:39fc5d4ced23e56abaa972c0615d923cbc9b8630feed2b0d009e93873da0cde7
network-interface-bond-cni git 297eeb43 sha256:a752182dc3d80e85493d3b8a3f55c7f97e0c627883df09f5ee250d29cfee1f12
oauth-server git 3ab74506 sha256:a5d236bce0ef30bc8212c75335624933ddbc13fd6c47f2afab11f0809ffd8a2e

agent-installer-api-server

MGMT-22385: Skip ip= kernel args for Day2 iSCSI/multipath with unknown network #8837
NO-ISSUE: Update setup-envtest version to release-0.22 #8856
MGMT-22885: Implement third-party CNI backend support #8797
NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #8850
NO-ISSUE: Update operator bundle channel to ocm-2.17 #8847
MGMT-23115: add FIPS feature usage tracking #8845
MGMT-23077: Revert “MGMT-21038: Prevent from inventory set host RequestedHostname directly” #8840
OCPEDGE-2367: Add support for platform none and external on TNA clusters topology #8830
MGMT-22731: Add To Renovate Tool - Update UBI-minimal Version Automatically #8802
MGMT-22523: Bump AMD DeviceConfig driver version to 6.4.3 #8823
MGMT-23000: Fix when a BMH is paused in non-converged flow #8812
MGMT-22287: Remove OCP 4.12 support from assisted-service #8794
MGMT-21038: Prevent from inventory set host RequestedHostname directly #7962
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.14, 4.21 #8816
ACM-29153: Upgrade hive to e33d70 #8807
MGMT-21756: enable FIPS 140-3 crypto module in Go builds #8755
NO-ISSUE: [master] Bump OCP versions: 4.20 #8801
MGMT-22583: Implement Swagger Definitions for 3rd Party CNI / No CNI #8717
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.20, 4.19, 4.13 #8795
NO-ISSUE: Clarify release images needed for ironic agent image #8778
NO-ISSUE: upgrade to 1.25 #8769
NO-ISSUE: [master] Bump OCP versions: 4.12, 4.18, 4.21, 4.16, 4.20 #8767
NO-ISSUE: Add parameter for pod disruption budget in openshift template #8765
MGMT-20701: host re-registration improvement #8737
MGMT-22189: Fix primary_ip_stack migration #8760
MGMT-22584: Create Enhancement Document for 3rd Party CNI / No CNI Support in Assisted Installer #8594
MGMT-22131: transitioning red hat operator base image to ubi minimal #8711
MGMT-22553: Partial cluster updates fail with false validation errors on dual-stack clusters #8704
MGMT-22297: fallback path for add-ntp-sources.sh #8742
NO-ISSUE: Update CONTRIBUTING.md #8745
MGMT-22189: Order dual-stack networks when fetching from DB #8488
MGMT-22656: Remove serviceMesh & kserve from DataScienceCluster spec #8741
NO-ISSUE: Add cpe label #8739
NO-ISSUE: bumping go version on branch master to v1.25 to solve CVE-2025-58183 #8708
AGENT-1407: add support for InternalReleaseImage related resources #8600
NO-ISSUE: [master] Bump OCP versions: 4.21 #8733
MGMT-16090: upgrade assisted-service postgresql from 12 to 13 #8602
MGMT-20499: Always generate iSCSI NIC reapply manifest for day2 host support #8705
NO-ISSUE: [master] Bump OCP versions: 4.17 #8725
MGMT-22278: Skip deleting spoke resources for an uninstalled agent #8608
MGMT-22186: Add kata runtime class to Assisted installer #8140
ACM-27859: Allow PreprovisioningImage finalizer to be removed once BMH finishes deprovisioning #8604
MGMT-20323: Prefer bootable disks for installation #8701
NO-ISSUE: add to owners_aliases #8703
MGMT-22545: Fix YAML marshaling for Kubernetes types in disconnected ignition #8619
OCPBUGS-68355: Fix Day-2 CSR approval race condition #8622
MGMT-22423: Fix race condition in ensureOwnerRef causing spec.installed to remain false #8621
ACM-27290: Fix policy.json not generated for InfraEnv mirror registry config #8609
ACM-27906: Fix container-image-availability check to use mirrored registries in disconnected environments #8611
NO-ISSUE: [master] Bump OCP versions: 4.21, 4.20 #8612
MGMT-22458: CVE-2025-65637 Bump github.com/go-openapi/loads, github.com/go-openapi/analysis, github.com/go-openapi/validate to fix CVE-2025-65637 through introducers update (models module) #8596
NO-ISSUE: Fix golangci-lint branch #8572
MGMT-22159: Add NFD operator to the list of OSC operator dependencies #8292
MGMT-22320: Expose GPU data in Agent CR inventory #8495
NO-ISSUE: Fix list bundle validation to check for feature incompatibilities #8571
MGMT-22273: reduce log amount #8565
MGMT-22396: CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 through indirect dependency conversion #8555
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-22731: Add To Renovate Tool - Update UBI-minimal Version Automatically #1487
NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #1498
Revert “NO-ISSUE: test for FF ACM 2.17” #1496
NO-ISSUE: test for FF ACM 2.17 #1495
ACM-29166: Upgrade hive to e33d70 #1491
MGMT-22499: CVE-2025-66506 Bump github.com/sigstore/fulcio to v1.8.3 using replace directive #1484
MGMT-22532: CVE-2025-52881 Bump github.com/opencontainers/selinux to v1.13.0 using replace directive #1483
MGMT-22393: CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 using replace directive #1474
NO-ISSUE: upgrade go to 1.25 #1466
MGMT-22653: bump the required minimal go version to 1.24 #1459
NO-ISSUE: Add cpe label #1457
MGMT-22131: transitioning red hat operator base image to ubi minimal #1444
ACM-25812: bumping go version on branch master #1446
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-node-agent

MGMT-23123: fix bootkube.logs missing from bootstrap logs on success #1320
MGMT-22731: Add To Renovate Tool - Update UBI-minimal Version Automatically #1309
NO-ISSUE: Modify Konflux YAMLs to ocm-2.17 #1318
ACM-29167: Upgrade hive to e33d70 #1311
MGMT-22131: transitioning red hat operator base image to ubi minimal #1288
MGMT-22395: CVE-2024-25621 Bump github.com/containerd/containerd to v1.7.29 through indirect dependency conversion #1302
NO-ISSUE: Bump mockery to a go 1.25 compatible version #1295
NO-ISSUE: upgrade go to 1.25 #1289
NO-ISSUE: Add cpe label #1278
MGMT-21739: Skip log collection for non-existent services #1230
NO-ISSUE: add to owners_aliases #1268
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-ui

MGMT-22544: update latest doc version to 4.20 (#3392) #3392
Bump axios from 1.12.2 to 1.13.5 (#3389) #3389
Make lint:all serial instead of parallel (#3400) #3400
fix: prevent form submission on cluster details step for existing clusters (#3372) #3372
fix major.minor version extraction (#3377) #3377
NO-ISSUE: Localise validation messages (#3379) #3379
Fix Infinite Loader while Getting Empty Versions List (#3378) #3378
Bump preact from 10.26.9 to 10.28.2 (#3356) #3356
Bump lodash-es from 4.17.21 to 4.17.23 (#3364) #3364
Bump lodash from 4.17.21 to 4.17.23 (#3365) #3365
OCPBUGS-74421 | OVE UI: Fix rendezvousIP field name in error message (#3376) #3376
MGMT-22941: ABI: add version dropdown (#3370) #3370
Do not delete disconnected cluster/infraenv. (#3368) #3368
MGMT-21058: Expose BareMetalHost (BMH) Status and Events in the Assisted Installer / CIM Console (#3363) #3363
Clean up git conflict artefacts (#3325) #3325
MGMT-21991: Add Primary IPv6 Support-cim (#3346) #3346
Stop using deprecate Modal component in CIM (#3343) #3343
Add additional new fields to the above the sea UI (#3337) #3337
MGMT-20673: Improve OpenShift AI bundle requirements tooltip (#3352) #3352
Fix React 18 types (#3361) #3361
MGMT-22746: Add chatbot app (#3350) #3350
Refactor LabelsField component (#3354) #3354
Use PF Dropdown component for namespace select (#3345) #3345
Make Cisco Intersight URL editable in CIM config modal (#3357) #3357
Fix mass hostname change content alignment (#3344) #3344
Adapt PrismCode for dark mode (#3348) #3348
Fix FileUpload component (#3355) #3355
Assisted Installer OVE UI shows transient blank page with Technology Preview spinner (#3341) #3341
API/Ingress IP fields lack character limit (#3342) #3342
Use conversationId from props for feedback. (#3336) #3336
use old release process (#3333) #3333
MGMT-20727: Cisco Intersight URL should be configurable (#3332) #3332
MGMT-22465: Merge the contents of releases/v2.17-cim into master (#3319) #3319
change ABI above sea level iso size (#3322) #3322
Openshift AI Bundle on SNO enables ODF and LVM which are uncompatible (#3320) #3320
remove external platforms field from below sea level UI (#3316) #3316
Fix Cluster summary styling (#3216) #3216
Bump js-yaml from 4.1.0 to 4.1.1 (#3310) #3310
provides parameters for the GET /v2/operators/bundles route (#3306) #3306
Bump mdast-util-to-hast from 13.2.0 to 13.2.1 (#3287) #3287
Bump zx from 7.2.3 to 8.8.5 (#3273) #3273
Bump js-yaml from 4.1.0 to 4.1.1 (#3264) #3264
Full changelog

agent-installer-utils

OCPBUGS-76367: Include additional operators in OVE config #252
OCPBUGS-76343: Add lso operator to appliance config #249
OCPBUGS-74933: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 2f3015a #221
OCPBUGS-74932: Update Konflux references #219
OCPBUGS-74242: Increase Konflux build pipeline memory #242
AGENT-1313: enable MCO IRI registry #232
OCPBUGS-71231: bump github.com/sirupsen/logrus to v1.9.3 #233
OCPBUGS-72420: Increase capabilities passed via buildah #229
NO-ISSUE: Add 4.22 isobuilder configs #213
AGENT-1334: Examples of golden snapshot and release for OVE ISO image #202
NO-ISSUE:Updating ose-agent-installer-utils-container image to be consistent with ART for 4.22 #216
OCPBUGS-69438: Remove operator manifests; now applied by assisted-installer #211
OCPBUGS-69406: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 20eb21c #210
OCPBUGS-69405: Update Konflux references #209
Full changelog

apiserver-network-proxy

OCPBUGS-69889: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.22 #88
Full changelog

aws-cloud-controller-manager

TRT-2536: UPSTREAM: <carry>: Fix OTE list tests when SingleReplica #125
Full changelog

aws-cluster-api-controllers

NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #586
OCPBUGS-70053: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.22 #585
Full changelog

aws-ebs-csi-driver

OCPBUGS-74521: UPSTREAM: 2806, 2816: Remove VolumeAttributesClass FeatureGate #300
OCPBUGS-69918: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.22 #296
OCPBUGS-69918: UPSTREAM: <carry>: do not require license in OCP files (follow-up) #298
OCPBUGS-69918: UPSTREAM: <carry>: do not require license in OCP files #297
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-74971: Fix azure-disk secret namespace/name args #502
OCPBUGS-74521: Remove VolumeAttributesClass FeatureGate #503
STOR-2523: hypershift: Add desired-version annotation to controller Deployments and use DeploymentVersionController in csi driver operators #457
OCPBUGS-70304: Fix azure-file secret namespace/name #500
OCPBUGS-66113: Some containers do not have readOnlyRootFilesystem #476
OCPBUGS-70085: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.22 #483
OCPBUGS-70339: deploy prometheus role and binding on hypershift guest #488
OCPBUGS-63698: fix(azure): add token-minter for self-managed hosted clusters #461
OCPBUGS-69739: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.22 #480
OCPBUGS-69907: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.22 #482
OCPBUGS-69710: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.22 #479
NO-JIRA: Add /sniff-test claude command #486
OCPBUGS-69883: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.22 #481
OCPBUGS-69982: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.22 #484
OCPBUGS-69695: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.22 #478
STOR-2543: add VAC manifest for tests in AWS EBS #475
STOR-1945: STOR-2056: Add SupportedSizeRange for azurefile-nfs #477
Full changelog

aws-karpenter-provider-aws

AUTOSCALE-485: rebase to 1.8.6 #25
AUTOSCALE-293: partially ignore drift on ec2nodeclass userdata field #21
Full changelog

aws-machine-controllers

SPLAT-2558: Add AWS Dedicated Host support #160
OCPBUGS-72390: Fix reconciler consistency checks in Update and Exists #162
OCPBUGS-69950: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.22 #161
Full changelog

aws-pod-identity-webhook

OCPBUGS-74165: Fix GOTOOLCHAIN env var #211
CCO-728: merge upstream changes v0.6.11 #209
OCPBUGS-69825: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.22 #208
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-65654: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (765f435) into main #152
Full changelog

azure-cluster-api-controllers

OCPBUGS-53004: Remove references to master branch #336
OCPCLOUD-3101: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.22.0 (4523016) into master #350
NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #358
OCPBUGS-69934: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.22 #356
Full changelog

azure-disk-csi-driver

OCPBUGS-69754: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.22 #119
Full changelog

azure-file-csi-driver

OCPBUGS-70304: UPSTREAM: 2940: fix: optionally skip reading the config from the API #114
OCPBUGS-70060: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.22 #111
OCPBUGS-70060: fix failing unit tests in azure-file-csi-driver #112
Full changelog

azure-kms-encryption-provider

OCPBUGS-69961: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.22 #26
OCPBUGS-62405: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.21 #23
Full changelog

azure-machine-controllers

OCPCLOUD-3252: Add AGENTS configuration #181
OCPBUGS-69864: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.22 #179
Full changelog

azure-workload-identity-webhook

CCO-729: merge upstream changes #42
OCPBUGS-69895: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.22 #41
Full changelog

baremetal-cluster-api-controllers

Revert “NO-JIRA: Add manifests verify target” #60
NO-JIRA: UPSTREAM: <carry>: Do not ignore files in vendor #59
NO-JIRA: Add manifests verify target #57
OCPBUGS-69724: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.22 #56
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-56846: validate azure user-assigned identity existence #10220
CORS-4055: migrate CCO permission check to AWS SDK v2 #10262
OCPBUGS-63065: Expand Azure userTags to support Azure Government Cloud #10015
OCPBUGS-55407: set DNS zone for Azure Stack Hub private clusters #10233
CORS-4302: Add N4A instance types to accepted in Installer #10292
CORS-4142: ensure lbType is NLB when dual-stack is configured #10256
MCO-2031: OS Image Stream to install-config schema #10192
CORS-4055: migrate EC2 API calls to AWS SDK v2 #10244
OCPBUGS-60162: reject byo vpc/subnets with CAPI owned cluster tag #9913
OCPBUGS-41570: Ensure correct mask for bootstrap external IP #8987
OCPEDGE-2276: Add support for platform None and External in TNA clusters #10286
OCPEDGE-2276: Add support for platform None in TNA (Two-Node Arbiter) clusters #10236
CORS-4055: migrate credential provider check to AWS SDK v2 #10261
CORS-4328: configure AWS CCM NodeIPFamilies for dual-stack support #10257
CORS-4055, CORS-4078: migrate ELB/ELBv2 API calls to AWS SDK v2 #10258
OCPBUGS-74631: Add validation to reject userProvisionedDNS on Azure Stack Hub #10279
CORS-4055: migrate default region check to AWS SDK v2 #10267
OCPBUGS-74625: gcp: skip AI zones #10269
CORS-4055: migrate IAM API calls to AWS SDK v2 #10245
CORS-4055: migrate S3 API calls to AWS SDK v2 #10242
OCPBUGS-63305: Make SimulatePrincipalPolicy optional #10081
OCPBUGS-67816: Revert storage account API version for client #10224
OCPBUGS-74078: add support for NVIDIA H100 and H200 enabled machine series #10234
CORS-4299, CORS-4300: Allow N4A Instance Types in the installer #10211
no-jira: add trace-config Claude command for installconfig field usage analysis #10190
AGENT-1309: Increase disk size requirements for master and SNO #10254
OSDOCS-17769: Add AWS m7 instance types #10246
CORS-4073: validate instance type support IPv6 in dual-stack #10238
OCPBUGS-74363: Remove region option for the GCP Private Service Connect Endpoint #10249
NO-JIRA: use v2 config for go-lint #10240
AGENT-1425: Fix stale dependency in agent-register-infraenv #10237
AGENT-1309: Modify NoRegistryClusterInstall storage requirements #10176
OCPBUGS-56770: Honor user-specified bootDiagnostics on Azure Stack Hub #10223
OCPBUGS-63028: filtering only PEs from cluster list #10193
CORS-4075, CORS-4113: Install-config and Infra manifest updates for DualStack for AWS and Azure #10207
OCPBUGS-72525: add newly detected instance types for Azure during 4.21 regression test #10202
OCPBUGS-69735: handle SSH rule deletion for Azure private #10213
OCPBUGS-69734: Fix destroy bootstrap command for Azure #10212
NO-JIRA: add user Rolv-Apneseth to coreos-maintainers and coreos-reviewers #10206
OCPBUGS-69923: ensure deterministic zone ordering for control plane machines #10188
NO-JIRA: Add angelcerveraroldan to coreos approvers and reviewers #10209
OCPBUGS-72577: bump default channel to stable-4.22 for main(4.22) branch #10205
OCPBUGS-71232: Fix nil pointer exception in azure mapiImage #10200
OCPBUGS-70013: Updating ose-installer-container image to be consistent with ART for 4.22 #10182
no-jira: Platform Experts Claude Command #10186
no-jira: Add barbacbd for gcp owners #10189
OCPBUGS-70021: Updating ose-baremetal-installer-container image to be consistent with ART for 4.22 #10183
OCPBUGS-70047: Updating ose-installer-artifacts-container image to be consistent with ART for 4.22 #10184
no-jira: Fix linting issues for golangci-lint v2 #10138
NO-JIRA: remove pod-infra-container-image flag from kubelet #10145
OCPBUGS-69870: rename “var-ostree\x2dcontainer.mount” to something more computer-friendly #10171
OCPBUGS-69840: PowerVC: fix PostProvision #10175
OCPBUGS-69434, SPLAT-2584: Added ability to install different IPAM version when in TP. #10169
OCPBUGS-65859: Fix set-hostname dependency for interactive console services #10118
OCPBUGS-17667: Validate vCenter datacenters in failure domain topology #10086
OCPBUGS-61344: skip deleting snapshots managed by AWS Backup service #9964
OCPBUGS-62870: installing into GCP Shared VPC with minimal permissions #10157
OCPBUGS-64775: use CAPZ to provision ssh rule #10162
OCPBUGS-66295: Fix ignition warning about agent-extract-tui.service #10146
AGENT-1357: remove AgentWorkflowTypeInstallInteractiveDisconnected workflow #10020
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

baremetal-machine-controllers

NO-ISSUE: Synchronize OWNERS with CAPM3 #241
OCPBUGS-69896: Updating baremetal-machine-controller-container image to be consistent with ART for 4.22 #240
Full changelog

baremetal-operator

Bug OCPBUGS-75006: BMO fails to start servicing despite updates to HFC spec #457
OCPBUGS-65571: Fix deletion hang when aborting inspection during power-off #447
NO-ISSUE: Fix invalidDNSNameinvalidipv6 test for Go 1.24+ #448
OCPBUGS-70265: Fix errors.As usage for NoDataInSecretError #444
NO-ISSUE: Merge upstream #442
OCPBUGS-70018: Updating ose-baremetal-operator-container image to be consistent with ART for 4.22 #441
METAL-1693: Add “merge-upstream” slash command #437
OCPBUGS-65571: Abort inspection/cleaning before powering off during deletion #438
Full changelog

baremetal-runtimecfg

OCPBUGS-42805: Add node caching with Kubernetes watch API to reduce API load #374
NO-ISSUE: Add agents.md and slash command for reviewing #375
MGMT-22546: Fix TNA and TNF dummy ip for ipv6 #369
NO-ISSUE: Migrate away from deprecated ioutil #373
OCPBUGS-69812: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.22 #376
Full changelog

cli, cli-artifacts, deployer, tools

Revert “CNTRLPLANE-2656: Fixing oc client cases for microshift and metal ipv6 profiles” #2198
CNTRLPLANE-2656: Fixing oc client cases for microshift and metal ipv6 profiles #2192
OCPBUGS-74543: expose: Fix labels not being added to route #2189
Revert “CNTRLPLANE-2656:Migrating oc cli tests to ote” #2191
CNTRLPLANE-2656: Migrating oc cli tests to ote #2181
OSDOCS-18071: Updating CLI docs templates to include a required abstract/short description #2190
OCPBUGS-73893: Fix unit test failure by updating ruby version to 3.3 #2184
NO-ISSUE: add SecurityContext to node image creation and monitor containers #2139
CNTRLPLANE-2167: Adding oc ote sanity test #2180
CNTRLPLANE-2167: Integrate OpenShift Test Extension (OTE) into oc #2177
CNTRLPLANE-2167: Integrate OpenShift Test Extension (OTE) into oc #2176
OCPBUGS-64619: oc login: Respect insecure flag from kubeconfig #2134
NO-JIRA: Bump library-go to update selinux and x/crypto #2169
OCPBUGS-70063: Updating ose-cli-artifacts-container image to be consistent with ART for 4.22 #2168
OCPBUGS-70061: Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.22 #2167
OCPBUGS-69894: Updating ose-tools-container image to be consistent with ART for 4.22 #2166
OCPBUGS-69835: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.22 #2164
NO-JIRA: Bump docker/docker to 28.5.2 to drop containerd/containerd dependency #2162
Full changelog

cloud-credential-operator

CCO-813: Update kubernetes v1.35 and golang v1.25 #967
OCPBUGS-74384: Resolve nil pointer exception in hasResourceTags #966
CCO-805: Ability to use featureGates #962
OCPBUGS-71221: test-ext: remove kubernetes module dependency #957
OCPBUGS-70033: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.22 #956
Full changelog

cloud-network-config-controller

CORENET-6500: fix lint job and linting failures #201
OCPBUGS-69998: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.22 #196
OCPBUGS-45056, OCPBUGS-57447: Refrain from adding Egress IP to public LB backend pool #180
Full changelog

cluster-authentication-operator

CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test for AUTH #834
CNTRLPLANE-2241: Conditionally add the KMS plugin volume mount to the oauth-apiserver container #827
CNTRLPLANE-2589: Migrate serial e2e tests to Ginkgo framework #828
CNTRLPLANE-2247: Add KMS encryption test target #829
CNTRLPLANE-2589: Migrate RouterCerts e2e test to Ginkgo framework #826
CNTRLPLANE-2589: OTE infrastructure #822
API-1835: test/oauth-server-payloadConfigController: adds a test to show which input resources are required to run the operator and the payloadConfigController #786
OCPBUGS-70005: Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.22 #819
API-1835: adds an integration test for the oauth-server deployment controller #784
CNTRLPLANE-2196: set up openshift-tests-extension for cluster-authentication-operator #816
Full changelog

cluster-autoscaler

OCPBUGS-66405: Pick upstream commits to Fix VPA recommender concurrent access panic #403
AUTOSCALE-482, AUTOSCALE-483: 1.35.0 Upstream rebase #401
OCPBUGS-74005: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.22 #399
OCPBUGS-70023: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.22 #397
OCPBUGS-69928: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.22 #396
Full changelog

cluster-autoscaler-operator

AUTOSCALE-483: Prepare for 4.22 #361
OCPBUGS-69828: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.22 #358
Full changelog

cluster-baremetal-operator

OCPBUGS-72548: Fix ironic-proxy service routing for port 6385 #546
OCPBUGS-71233: Fix libguestfs /tmp access in machine-os-downloader init container #549
OCPBUGS-70157: Add sharedVolumeMount to machine-os-downloader init container #540
OCPBUGS-67216: Remove the writable ironic CA cert volume mount at /certs/ca/ironic path, ironic will use the writable /conf mount if needed #535
NO-ISSUE: Add AGENTS.md #538
OCPBUGS-69769: Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.22 #537
Full changelog

cluster-capi-controllers

OCPBUGS-74426: CAPI IPAM CRDs override storage version to v1beta1 #263
NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #261
OCPBUGS-69810: Updating ose-cluster-api-container image to be consistent with ART for 4.22 #258
OCPBUGS-69434: openshift: CAPI IPAM TechPreviewNoUpgrade: set webhooks failurepolicy: Ignore #256
Full changelog

cluster-capi-operator

OCPCLOUD-3327: Rewrite manifests-gen to support upgrade safety #434
NO-JIRA: Fix NetworkPolicy for openshift-capi-operator namespace #453
OCPCLOUD-3327: Fix up related objects #452
OCPBUGS-74295: Move installer controller to independent manager #447
NO-JIRA: fix: e2e: workaround for flakes caused by OCPBUGS-74571, until it is fixed #449
OCPBUGS-61949: Remove references to cluster-api-operator image #384
OCPCLOUD-3315: Add AWS CPUOptions to conversion #438
OCPCLOUD-3017: add SHARD_ARGS #442
OCPCLOUD-2566: tests with VAP msgs #386
NO-JIRA: Fix AWS fuzz tests by constraining Volume throughput to int32 range #441
OCPCLOUD-3263: CAPI MachineSet creation validation #437
OCPBUGS-69737: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.22 #436
NO-JIRA: Update openshift/api #439
OCPCLOUD-3172: machinesetsync: refactor to a generalized differ which can work independent of types #382
OCPCLOUD-2640: CAPI Machine creation validation #412
NO-JIRA: Write provider version to openshift/provider-version.mk #424
OCPCLOUD-3105: make use of sigs.k8s.io/cluster-api’s v1beta2 #428
OCPBUGS-63524: fix: e2e: CAPI creation issue/scale-down wait issue/machine nodeRef comparison issue #429
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-16728: Add admission policy to deny changing an AWS LB type on an existing service #362
OCPBUGS-69820: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.22 #430
Full changelog

cluster-config-api

NE-2480: Add featuregate for Gateway API without OLM #2691
Feature gate CVO application of CompatibilityRequirement CRD #2701
Update integration test timeout and make parallel where possible #2702
STOR-2878: Graduate MutableCSINodeAllocatableCount to GA #2673
OCPBUGS-67232: Move DynamicConfigurationManager back to TPNU #2621
OCPNODE-4078: Add DRAPartitionableDevices to TechPreviewNoUpgrade #2694
OCPBUGS-74521: Remove VolumeAttributesClass FeatureGate #2675
MON-4031: Add prometheusOperatorConfig API #2481
Remove graduated SDN feature gates #2672
OCPNODE-3863: Add CRIOCredentialProviderConfig API #2557
add Insights capability to Insights CRDs #2682
CodeRabbit should not be looking at openapi generated content #2688
MCO-1931: Promote ManagedBootImagesCPMS feature gate to the Default featureset #2679
OCPBUGS-74527: Remove ProcMountType #2676
OCPBUGS-55654: Remove AlibabaPlatform FeatureGate #2671
Re-enable NewOLMBoxcutterRuntime featuregate in TPNU #2659
OCPBUGS-68343: Introduce KMSEncryption feature gate #2669
Fix payload CRD/FetaureGate ordering #2667
OCPEDGE-2084: Add PacemakerStatus CRD for two-node fencing #2544
OCPBUGS-56851: make multiline comments for oidc one line for better crd gen and better oc explain description format #2655
no-jira: Validate AWS resource tag keys with aws: prefix #2183
NO-JIRA: Fix Infrastructure PlatformType comment #2660
OCPEDGE-2084: chore(tools): bump controller-tools with XValidation ordering fix #2658
Update KAL to latest and configure new linters #2662
OCPCLOUD-2998: Add synchronizedAPI to Machine and MachineSet status #2642
CORENET-6609: Add EVPN featuregate #2649
OCPBUGS-73855: Permit other machine managers when skew enforcement is in Automatic mode #2648
CONSOLE-4986: Add Guided Tour capability flag to Console API and vendor it into console-operator #2644
OCPCLOUD-3166: machine-api: disallow unsetting authoritativeAPI #2091
Add insights v1 to payload #2632
CNTRLPLANE-1750: Add FeatureGate: ConfigurablePKI #2545
NO-JIRA: update TLS security profile documentation for clarity and consistency #2595
OPRUN-4226: [OLMv1]: Promote NewOLMOwnSingleNamespace to GA #2527 #2527
SPLAT-2603: Added support for legacy AWS dedicated hosts #2643
Extend ClusterVersion for accepted risks #2360
CNTRLPLANE-311: adding auth config missing fields to API #2487
NO-JIRA: Rename ImagePolicy nested types to prevent PKI collision #2626
Reapply “Merge pull request #2448 from opokornyy/CCXDEV-15259-io-v1” #2631
OCPBUGS-70025: Updating ose-cluster-config-api-container image to be consistent with ART for 4.22 #2634
Add configuration for coderabbit #2635
DevPreview: NetworkConnect feature gate #2629
OCPCLOUD-3164: Add CompatibilityRequirement #2479
Disable the statusoptional linter #2633
Migrate away from deprecated ioutil #2603
OKD-259: Support an “OKD” featureset to be enabled by default on OKD clusters #2451
NO-JIRA: remove beta enabled TranslateStreamCloseWebsocketRequests feature from gates #2613
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-config-operator

OKD-320: Migrate to OKD featureset for OKD clusters #462
OKD-259: Allow the OKD feature set to upgrade #461
CNTRLPLANE-2272: Refactor tests-ext initialization to improve error handling #457
OCPBUGS-69859: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.22 #456
Full changelog

cluster-control-plane-machine-set-operator

TRT-2542: Revert Fix framework initialization #391
OCPBUGS-74343: Fix framework initialization #384
OCPBUGS-74512: Remove CPMSMachineNamePrefix feature gate #387
NO-JIRA: mockgen deprecated: use uber-go/mock instead #374
OCPBUGS-74478: Bump openshift/api to get latest AWSMachineProviderConfig type #385
OCPBUGS-67230: Fix Makefile to use vendor mode #377
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2523: Add desired-version annotation to controller Deployment and use DeploymentVersionController in csi-snapshot-controller-operator #251
OCPBUGS-73791: Re-add serving cert volume mount to hypershift guest cluster manifest #264
OCPBUGS-66390: Set client throttling parameters #261
OCPBUGS-69854: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.22 #262
Full changelog

cluster-dns-operator

NE-2414: Use trafficDistribution: PreferSameNode for openshift-dns Service #457
Full changelog

cluster-etcd-operator

OCPEDGE-2097: Add pacemaker health check for ExternalEtcd clusters #1487
OCPEDGE-2231: [TNF] feat: Allow podman-etcd and kubelet resource-agent to restart on start failure #1513
NO-JIRA: [TNF] disable etcd member management after etcd handover #1534
OCPBUGS-66152: split grpc requests slow into read/write alerts #1532
OCPBUGS-73857: Prefer to remove members where they have another healthy machine in the same failure domain index #1528
OCPBUGS-68371: fix bootstrap race condition #1524
OCPBUGS-38659: bump inertia from 5-10 minutes #1531
OCPBUGS-38659: configure inertia for all controllers #1527
OCPBUGS-60588: [TNF] support restore for pacemaker-managed etcd #1521
OCPBUGS-62422: deps: Update library-go to update pruner #1526
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

OCPBUGS-62626: only report Progressing=True when progressing towards new configuration #1286
NO-JIRA: fix TestImageRegistryRemovedWithImages flake #1288
OCPBUGS-74495: Migrate Azure storage management to new ARM SDK #1281
IR-350: bump library-go to the latest version #1276
OCPBUGS-69751: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.22 #1275
Full changelog

cluster-ingress-operator

NE-2481: bump k8s libraries to v0.35.0 #1356
NE-2434: E2E test for internal LoadBalancer Annotations #1353
OCPBUGS-64565, OCPBUGS-9037: Ensure canary cert matches the default ingress controller’s cert #1334
NE-2395: Fix e2e tests to work on platforms with unmanaged DNS #1342
NE-2374: Add e2e test for Gateway API infrastructure annotations #1331
NE-2435: Bump Gateway API CRDs to v1.4.1 #1343
OCPBUGS-16728: Require Service Deletion for LB Type Updates #1142
NO-JIRA: add jcmoraisjr to owners #1346
OKD-259: Bump openshift/api and add support for OKD featureset specific CRDs #1324
OCPBUGS-65482: Add e2e test for secure redirect port stripping #1316
NE-1743: Add documentation for pre-release script for OSSM testing #1315
OCPBUGS-70212: testGatewayAPIDNS: Fix nil gateway in cleanup #1330
OCPBUGS-70211: Fix logging for unmanaged controllers #1329
OCPBUGS-69954: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.22 #1328
OCPBUGS-65939: Update command to get Konflux index image #1325
OSSM-10865: set trustBundleName in Istio global values #1288
Full changelog

cluster-kube-apiserver-operator

NO-JIRA: Test encryption provider migration #2028
OCPBUGS-70298: remove kube-apiserver user from crb #2012
CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test #2027
CNTRLPLANE-2241: Conditionally add the KMS plugin volume mount to the kube-apiserver container #2015
CNTRLPLANE-2563: update wording for major upgrades #2010
CNTRLPLANE-2648: Migrating user_cors_test to OTE #2011
CNTRLPLANE-2247: Add empty KMS encryption test case for CI job validation #2014
CNTRLPLANE-2585: Migrating user_client_ca_test to ginkgo #2008
OCPBUGS-65807: SCC: allow image volume type for all SCCs #1968
CNTRLPLANE-2492: Migrating user_certs_test to ote #2005
NO-JIRA:Refactor serviceaccountissuer ginkgo test #2002
NO-JIRA: clean up the OWNER files #2001
NO-JIRA: Add API server stabilization wait to serviceaccountissuer tests #1997
OCPBUGS-62422: deps: Update library-go to update pruner #1994
NO-JIRA: ote: a small cleanup #1995
CNTRLPLANE-2286: Migrating serviceaccountissuer test to ote #1992
CNTRLPLANE-2280: Migrating deprecated_api_test to ote #1990
CNTRLPLANE-2281: Migrating operator_test to ote #1991
OCPBUGS-70323: bump library-go #1986
OCPBUGS-69758: CNTRLPLANE-2222:Migrate go test cert-rotation-tests.go to OTE #1983
CNTRLPLANE-2158: Migrating TestTokenRequestAndReview to ginkgo #1978
NO-JIRA: increases termination timeouts for GCP #1982
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-69964: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.22 #901
OCPBUGS-62422: dep: Update library-go to update pruner #895
OCPBUGS-60568: Use BoundServceAccountTokenVolume dy default #858
Full changelog

cluster-kube-scheduler-operator

CNTRLPLANE-2649: OTE infrastructure #608
OCPBUGS-65941: Add OPERATOR_IMAGE_VERSION to recovery container #600
NO-JIRA: pkg/operator: Remove staleConditions controller #597
NO-JIRA: pkg/operator: Fix wrong ClusterOperator name #596
no-jira: test(TargetConfigController): exercise –tls-cipher-suites and –tls-min-version injection #595
OCPBUGS-62422: deps: Update library-go to update pruner #593
no-jira: refactor(pkg/operator/targetconfigcontroller): code deduplication and improvements #594
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-65984: Prevent AvailableReplicas from dropping to 0 during deployment rollout #138
OCPBUGS-70004: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.22 #136
OCPBUGS-65984: Prevent AvailableReplicas from dropping to 0 during deployment rollout #135
Full changelog

cluster-machine-approver

MON-4476: chore: add permissions on endpointslice to Prometheus Role and use serviceDiscoveryRole: EndpointSlice in ServiceMonitors #288
NO-JIRA: Fix expired test certificate in csr_check_test.go #287
Full changelog

cluster-monitoring-operator

NO-ISSUE: test/e2e: add Func suffix to assertion helpers for consistency #2803
OCPBUGS-74673: Fix NodeRAIDDegraded & NodeRAIDDiskFailure alerts #2799
OCPBUGS-69397: Move console control plane health queries to their own… #2778
OCPBUGS-74347: config: add bond device to default node-exporter ignore list #2806
NO-ISSUE: merge case 67008,68958 to node-exporter e2e test #2788
NO-ISSUE: test: TestUserWorkloadWithAlertmanager|TestNetworkPolicy: fix a no-op check #2802
OCPBUGS-67162: update expr for AlertmanagerClusterFailedToSendAlerts to exclude value 0 #2796
NO-JIRA: Upgrade golangci-lint from v1 to v2 #2789
OCPBUGS-66069: Include kube_pod_labels in minimal profile #2777
MON-4470: ship collector:node_scrape_collector_success:avg to Telemetry #2794
NO-JIRA: [bot] Synchronize versions of the downstream components #2791
OCPBUGS-66180: create networkpolicy settings for user workload monitoring #2765
NO-ISSUE: move endpointslice RBAC to Role #2786
MON-4466: enable ethtool collector #2779
NO-ISSUE: add app.kubernetes.io/part-of=openshift-monitoring label to thanos-ruler pod #2787
MON-4343: Reapply “MON-4343: Cleanup deprecate pa config” #2782
NO-ISSUE: remove test case 74734 #2785
OCPBUGS-61088: revert PR #2766 #2769
OCPBUGS-69733: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.22 #2781
MON-4406: watch ClusterMonitoring config resource #2770
NO-JIRA: [bot] Synchronize versions of the downstream components #2780
NO-JIRA: [bot] Synchronize versions of the downstream components #2776
Full changelog

cluster-network-operator

OCPBUGS-60077: Silence ovnkube-lib.sh to avoid mass of logs to collectors #2761
CNF-20883: Align templates frrk8s #2874
OCPBUGS-74401: Remove duplicated openssl parameter #2889
NO-JIRA: Remove references to AdminNetworkPolicy, NetworkSegmentation, RouteAdvertisements and PreconfiguredUDNAddresses featuregates #2891
CORENET-6561: Update the golangci-lint configuration for v2 compatibility and fix all resulting lint issues. #2893
CORENET-6605: avoid flapping Degraded on transient failures #2862
CORENET-6416: drop networkType migration support #2456
CNF-21001: mnp: Set hostname using downward API #2840
CORS-4180: Allow AWS and Azure as platforms that support dual-stack on Day-0 #2804
NO-JIRA: set ovnkube-cluster-manager as default container #2798
OCPBUGS-72411: fix(hypershift): use net.JoinHostPort for URL construction #2871
OCPBUGS-66417: Add kubevirt platform to dual-stack supported platforms #2849
OCPBUGS-49662: Prevent resetting masquerade subnet #2641
Full changelog

cluster-node-tuning-operator

OCPBUGS-74027: AA: E2E: LLC: Add tests related to odd cpus #1458
CNF-20755: e2e: Add housekeeping IRQ load balancing tests #1456
CNF-18941: perfprof: enable exec-cpu-affinity by default (annotation) #1426
NO-JIRA: Make changes for migrating to OTE in Dockerfile #1453
OCPBUGS-62632: Do not report Progressing=True during cluster scaleup or node reboot #1447
NO-JIRA: Bump upstream containerfile to 4.22 #1452
OCPBUGS-62496: hypershift:e2e:status: check for duplicated configmap status #1413
OCPBUGS-69802: Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.22 #1450
OCPBUGS-69391: E2E: Granular IRQ functional test cases #1441
Full changelog

cluster-olm-operator

NO-ISSUE: Bump golangci to v2 #174
NO-ISSUE: Add pedjak as reviewer and approver #171
OCPBUGS-65505: add resources to clusterOperator relatedObjects #166
OPRUN-4408: Update upgrade message to mention both 4.23 and 5.0 upgrade paths #164
OCPBUGS-69807: Update image locations to be consistent with ART for 4.22 #158
OPRUN-4360: Remove references to operator-framework/catalogd #155
OPRUN-4352: Update to golang 1.25/ocp 4.22 #156
Full changelog

cluster-openshift-apiserver-operator

CNTRLPLANE-2247: Adding KMS TestKMSEncryptionOnOff test for Routes #644
CNTRLPLANE-2241: Conditionally add the KMS plugin volume mount to the openshift-apiserver container #641
CNTRLPLANE-2247: Add KMS encryption test target #642
NO-JIRA: update to Kubernetes v1.34.1 #640
OCPBUGS-70035: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.22 #635
Full changelog

cluster-openshift-controller-manager-operator

CNTRLPLANE-2620: propagate global tls config to operand #407
OCPBUGS-70032: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.22 #404
Full changelog

cluster-samples-operator

OCPBUGS-69966: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.22 #671
Full changelog

cluster-storage-operator

TRT-2542: Revert #661 “OCPBUGS-74530: Remove featuregate StoragePerformantSecurityPolicy” #664
OCPBUGS-74530: Remove featuregate StoragePerformantSecurityPolicy #661
OCPBUGS-66212: Remove VSS permissions #649
STOR-2523: hypershift: Add desired-version annotation to operand Deployments and use DeploymentVersionController in CSO #638
OCPBUGS-60159: add vsphere permissions for checking if users is authorized to see metrics #642
OCPBUGS-69978: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.22 #651
OCPBUGS-63698: feat(azure): add HYPERSHIFT_IMAGE env var for token-minter #643
OCPBUGS-62634: Fix deployment controller Progressing=true on node drain #648
OCPBUGS-67012: volume-data-source-validator must use IfNotPresent image pull policy #650
Full changelog

cluster-update-keys

revert ‘OCPNODE-3978: Second run at expanding the default ClusterImagePolicy for openshift component images #96
OCPNODE-3978: Second run at expanding the default ClusterImagePolicy for openshift component images #95
TRT-2537: Revert “OCPNODE-3978: Extend the default ClusterImagePolicy for openshift component images” #94
OCPNODE-3978: Extend the default ClusterImagePolicy for openshift component images #75
OCPBUGS-70020: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.22 #91
Full changelog

cluster-version-operator

OCPSTRAT-2485: Introduce feature gate based inclusion/exclusion of manifests #1273
NO-JIRA: More flexible timeout option for oc-cli #1311
OTA-1546: Reconcile cv.spec.desiredUpdate.acceptRisks #1284
NO-JIRA: Add a serial e2e test #1306
TRT-2511: Reapply “OTA-1604: migrate ocp-46922 from otp to cvo repo” #1301
NO-JIRA: Fix linter issues on dot-imports #1304
OTA-1546, OTA-1833: Add OKD feature set filtering logic, Bump openshift/api #1302
NO-JIRA: Fix some lint issues #1299
Revert “OTA-1604: migrate ocp-46922 from otp to cvo repo” #1297
OTA-1787: pkg: Update Upgradeable condition to explicitly mention major version updates #1276
NO-JIRA: hack/build-image.sh: Update Dockerfile reference #1272
OCPBUGS-73929: lib/resourcemerge/core: Reconcile ConfigMap binaryData too #1294
NO-JIRA: Bump to builder:rhel-9-golang-1.25-openshift-4.22 #1293
OTA-1604: migrate ocp-46922 from otp to cvo repo #1279
NO-JIRA: Introduce oc-cli for e2e tests #1267
OTA-1786: pkg/payload/precondition/clusterversion/gianthop: Allow updates to 5.0 #1275
NO-ISSUE: .claude/commands/update-godocs: New command for Go doc updates #1278
NO-ISSUE: OTA-1605 Adding descriptions for building the binary and running the tests #1263
NO-JIRA: Create AGENTS.md file #1268
OCPBUGS-17007: vendor: Update openshift/library-go to get new default TLS configuration #1270
Full changelog

configmap-reloader

OCPBUGS-70038: Updating configmap-reload-container image to be consistent with ART for 4.22 #76
Full changelog

console

CONSOLE-3769: Phase 2 of using OpenShift Dynamic Plugin SDK #15904
CONSOLE-4990: Migrate from history object to React Router v6/v7 hooks #15956
OCPBUGS-73871: i18n upload/download routine task - 4.21 / 281 (Latest) #15976
OCPBUGS-74974: Use Actions button instead of kebab menu on Subscription details page #15983
CONSOLE-5043: Remove defaultProps from operator-hub-item-details #16003
OCPBUGS-74538: User without access on causes NamespaceBar to reset to All projects when used via dynamic plugin #15996
CONSOLE-5044: TypeScript port of events.jsx #15944
CONSOLE-4987: Conditionally render Guided Tour based on capability and disable it for Console E2E tests #15926
OCPBUGS-74639: Number links for failed pods/nodes on ‘Cluster inventory’ card are not linked to filtered table list #15979
NO-JIRA: Convert useTechPreviewFlagProvider to static function #15960
CONSOLE-5015: Refactor file-input to use PF #15952
OCPBUGS-74137: DataView Pagination page menus : i18n misses #15982
OCPBUGS-74349: Worklodas - Edit pod count and Edit parallelism : Content is in English #15980
CONSOLE-5029: Refactor withDashboardResources in with-dashboard-resources.tsx into … #15927
CONSOLE-5012: Additional modal migrations to overlay pattern #15940
NO-JIRA: Add guidance for avoiding deprecated components #15969
OCPBUGS-74647: Fix referenceFor parameter in SubscriptionDetailsPage #15957
OCPBUGS-65967: Clean up old session cookies to prevent accumulation #15837
CONSOLE-5012: Migrate modals to overlay pattern #15939
OCPBUGS-65828: Reduce log noise from transient async cache failures #15821
OCPBUGS-70329: Auto-linkify URLs in status card alert messages #15880
CONSOLE-5039: Remove useSafetyFirst #15937
CONSOLE-4943: Add Machine Set, MachineConfigPool, and VMs columns to Nodes list view #15909
OCPBUGS-74241: Add null checks to CRB subject #15943
OCPBUGS-72585: Do not resolve disabled catalog type extensions #15908
CONSOLE-5012: Migrate delete modals and PVC modals to overlay pattern #15932
OCPBUGS-74369: Bump lodash to latest #15947
NO-JIRA: Suppress ResizeObserver-related windowError #15958
OCPBUGS-72260: ‘0 of pods’ are shown in Status column on DaemonSets list page. #15928
NO-JIRA: Suppress ResizeObserver-related e2e errors #15950
CONSOLE-5041: Replace testHook with renderHook from RTL #15936
NO-JIRA: SDK post-publish tasks #15942
OCPBUGS-74178: Direct AI agents to AGENTS.md documentation hub #15938
NO-JIRA: Moving the oc and kubectl delete,apply,create commands from deny to ask permissions #15941
NO-JIRA: Prepare for 4.22-prerelease.1 release #15933
CONSOLE-5050: Make shared modules peerDeps in SDK #15934
CONSOLE-3769: Refactor weird getResourceSidebarSamples #15915
CONSOLE-5042: Remove React.FCC #15929
OCPBUGS-70340: Ensure OpenAPI in monaco stays fresh #15890
CONSOLE-4402, CONSOLE-4510: React 18 upgrade - phase 1 #14869
NO-JIRA: Add /pre-push review command for comprehensive local code analysis #15800
OCPBUGS-65891: Follow up on fixing the remaining issues in the multi-group impersonation feature #15916
CONSOLE-4630: @types/react 18 prep work #15893
OCPBUGS-73766: Configure coderabbit.yaml for only major reviews and disable multiple summaries #15919
CONSOLE-5035: cache lazy route components to prevent navigation freeze #15924
CONSOLE-4865: Remove @openshift-console/plugin-shared #15921
NO-JIRA: Update dynamic demo plugin OWNERS and lock files #15920
NO-JIRA: Refactor - consolidate K8s client creation into new function #15897
OCPBUGS-70011: i18n upload/download routine task - 4.21 / 281 #15905
OCPBUGS-69377: Update the perspective name in dev-console guided tour #15852
OCPBUGS-69380: Fixed loaded page no roles error upon render #15878
OCPBUGS-72571: remove “OperatorHub” from OLM integration tests where … #15911
OCPBUGS-69387: update operator details when changing channels #15853
OCPBUGS-70344: change OperatorHub strings to Software Catalog #15891
CONSOLE-4844: merge secret scenarios #15684
CONSOLE-4912: update machine config tests #15759
OCPBUGS-63120: Home -> Overview page returns error during upgrade process #15831
OCPBUGS-62611: Fix editing secrets with mixed text and binary data #15820
OCPBUGS-65946: Fix search component to not pass ALL_NAMESPACES_KEY to… #15789
OCPBUGS-65831: Fix catalog service swapping description and markdownDescription fields #15750
OCPBUGS-68332: Improve VAC field on PVC details page #15843
OCPBUGS-70330: remove support for Windows 8 Live Tiles and IE “standards mode” #15886
OCPBUGS-70324: Revert the console-shared.json to console-shared directory #15885
CONSOLE-4989: bump to react-redux 8 #15854
CONSOLE-3769: Update OpenShift Dynamic Plugin SDK + webpack-related deps #15892
CONSOLE-4969: Configure a coderabbit.yaml file for console repo #15818
NO-JIRA: Fix incorrect syntax for claude settings #15899
CONSOLE-4971: Add AGENTS.md and structured AI documentation #15896
OCPBUGS-66247: make cloudCredentials optional so operators load when … #15803
CONSOLE-3769: Even more openshift/dynamic-plugin-sdk prep work #15778
OCPBUGS-63389: Remove asterisk from Routing label field in alertManager receiver form #15825
CONSOLE-4631, CONSOLE-5005: Manually rewrite remaining namespace/default imports #15884
CONSOLE-4631: Run react/update-react-imports #15872
OCPBUGS-68376: fix routing issues on packageserver PackageManifest de… #15844
CONSOLE-4916: add auto scenario about yaml sidebar #15790
OCPBUGS-65678, OCPBUGS-65765: apiVersion is empty on YAML creation page - Runtime error occurs when create MachineConfig with default yaml from… #15763
OCPBUGS-63159: Prevent the display of events from projects other than the currently selected project #15836
OCPBUGS-63237: There should be no role ARN field as token-auth-aws/azure/gcp=false in csv annotations #15813
OCPBUGS-60426: Fix edit application via Deploy image internal registry doesn’t select correct image stream #15795
NO-JIRA: Add /gen-rtl-tests Claude code slash command for generating React Testing Library tests for React components #15668
CONSOLE-4970: Upgrade Jest from 22 to 30 #15817
CONSOLE-4979: Speed up check-patternfly-modules + add dedupe step to CI #15835
OCPBUGS-67002: fix bug where Installed badge is not fully visible #15828
OCPBUGS-63390: show DASH to routing labels column when receiver doesn’t have routing labels #15824
CONSOLE-4630: Fix 67 react 18 type errors #15779
CONSOLE-4106: Add ClusterExtension creation page #15741
OCPBUGS-62713: Prevent application filter in Topology view from resetting to all applications unexpectedly #15812
NO-JIRA: disable guided tour when cypress is running #15841
And 12 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-62307: Remove orphaned console-conversion-webhook deployment and related resource #1053
OCPBUGS-57468: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #1102
OCPBUGS-72387: Update the downloads manifest #1101
OCPBUGS-72387: Fix PDB blocking node drains during cluster upgrades #1099
CONSOLE-4986: Vendor API changes for GuidedTourFeature capability #1091
NETOBSERV-2296: add missing annotations on netobserv quickstart #1080
OCPBUGS-65496: Add missing relatedObjects + small refactoring #1075
NO-JIRA: Fix claude syntax #1088
OCPBUGS-68367: Add missing console annotation to the quickstart #1082
OCPBUGS-70045: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.22 #1086
CONSOLE-4871: Add AI context documentation files #1077
CM-821, ESO-277, SSCSI-235: Add quickstart guides for secrets management operators #1073
Full changelog

coredns

OCPBUGS-69852: Updating coredns-container image to be consistent with ART for 4.22 #159
NO-JIRA: Add team members to the OWNERS file #162
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-69813: Updating csi-driver-manila-container image to be consistent with ART for 4.22 #369
OCPBUGS-70057: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.22 #360
OCPBUGS-70072: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.22 #358
Full changelog

csi-driver-nfs

NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #167
OCPBUGS-70043: Updating csi-driver-nfs-container image to be consistent with ART for 4.22 #168
Full changelog

csi-external-attacher

OCPBUGS-69744: Updating csi-attacher-container image to be consistent with ART for 4.22 #91
Full changelog

csi-external-provisioner

OCPBUGS-70054: Updating csi-provisioner-container image to be consistent with ART for 4.22 #118
Full changelog

csi-external-resizer

OCPBUGS-70039: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.22 #180
Full changelog

csi-external-snapshot-metadata

OCPBUGS-69720: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.22 #8
Full changelog

csi-external-snapshotter, csi-snapshot-controller

OCPBUGS-66967: UPSTREAM: 1354: UPSTREAM: 1359: Fix for cases where the resource is already present on the cluster #193
OCPBUGS-69979: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.22 #195
OCPBUGS-66967: UPSTREAM: <drop>: bump log level of the group snapshot reconciler #192
OCPBUGS-69721: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.22 #194
Full changelog

csi-livenessprobe

OCPBUGS-69958: Updating csi-livenessprobe-container image to be consistent with ART for 4.22 #78
Full changelog

csi-node-driver-registrar

OCPBUGS-70041: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.22 #92
Full changelog

docker-builder

OCPBUGS-70150: bump buildah to 1.39.7 to fix CVE-2025-52881 #494
OCPBUGS-69871: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.22 #493
Full changelog

docker-registry

IR-350: bump library-go to the latest version #460
IR-350: fix cipher suite configuration conflict with docker distribution #459
OCPBUGS-69762: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.22 #457
Full changelog

driver-toolkit

NO-ISSUE: Support ubi minimal base image #179
OCPBUGS-69699: Updating driver-toolkit-container image to be consistent with ART for 4.22 #178
Full changelog

etcd, installer-etcd-artifacts

OCPBUGS-69868: Updating ose-etcd-container image to be consistent with ART for 4.22 #353
Full changelog

gcp-cluster-api-controllers

OCPBUGS-74913: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.0 (1cb204d) into master #261
NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #259
Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.22 #257
Full changelog

gcp-machine-controllers

CORS-4296: Add the N4A machine type #138
OCPBUGS-70052: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.22 #137
OCPCLOUD-3255: Add AGENTS configuration #136
Full changelog

gcp-pd-csi-driver

OCPBUGS-74521: UPSTREAM: 2175: Move VAC storage API to v1 from v1beta1 #97
OCPBUGS-69930: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.22 #87
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-74521: Remove VolumeAttributesClass FeatureGate #168
STOR-2792: STOR-2842: Enable Hyperdisk-balanced High Availability disks #158
STOR-2793: Add volume snapshot class of type images #165
STOR-2543: Add VAC manifest to support tests on GCP PD #160
OCPBUGS-69742: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.22 #159
OCPBUGS-66113: Some containers do not have readOnlyRootFilesystem #157
Full changelog

gcp-workload-identity-federation-webhook

CCO-730: Revendor upstream changes #14
OCPBUGS-69839: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.22 #13
Full changelog

haproxy-router

NE-2483: bump k8s libraries to v0.35.0 #729
OCPBUGS-72591: Lower verbosity for parseIPList empty list logging #709
NO-JIRA: hack: update image without push #711
NO-JIRA: add jcmoraisjr to owners #717
OCPBUGS-70068: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.22 #707
OCPBUGS-65482: Fix HAProxy redirect: strip port from Host header #696
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPBUGS-67200: UPSTREAM: 136202: raise kubelet CSI init backoff to cover ~140s DNS delays #2578
OKD-259: Validate OKD featureset to prevent it from being enabled on OCP clusters #2420
OCPBUGS-73913: UPSTREAM: 135340: cbor: bump limits #2564
OCPBUGS-70170: add label serial for iperf2 testing #2559
OCPBUGS-63045: enable InPlace resize test #2532
NO-ISSUE: Extend k8s suite timeouts for parallel testing load #2497
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

hypershift

CNTRLPLANE-2119: feat(hostedcluster): implement service account signing key rotation #6874
OCPBUGS-66325: fix: ValidAWSIdentityProvider condition not being correctly copied from HCP #7352
NO-JIRA: fix(install): skip IPAM CRDs if they already exist #7363
CNTRLPLANE-1977: Add weekly PR report generation capability #7272
OCPBUGS-68366: CVE-2025-58183 #7374
CNTRLPLANE-2123: feat: update builder images from 4.21 to 4.22 #7317
OCPBUGS-63452: Add finalizer protection to control plane workloads #7258
CNTRLPLANE-2205: feat(aws): enable shared role in e2e #7400
NO-JIRA: chore(azure): bump AKS Kubernetes version to 1.33.0 #7371
CNTRLPLANE-2206: Create tool to aggregate upstream docs into single file for NotebookLM #7367
OCPBUGS-66211: fix(vendor): bump openshift/api dependency to current master #7345
OCPBUGS-66146: Add OADP backup recovery tool for HyperShift clusters #7385
CNTRLPLANE-2221: Add CI infrastructure documentation #7369
CNTRLPLANE-2123: Fix buildah-remote-oci-ta task enterprise contract violation #7396
CNTRLPLANE-2049: Update kube-api-linter dependency #7346
NVIDIA-314: Support Node CIDR Allocation for networkType=Other Using AllocateNodesCIDRs #7278
CNTRLPLANE-2123: feat: update latest supported version from 4.21 to 4.22 #7315
CNTRLPLANE-2205: cmd/aws: fix managed role handling and auto-detect on destroy #7373
CNTRLPLANE-2123: feat: add release-4.21 branch to renovate configuration #7318
NO-JIRA: test: remove network-dependent unit tests for image metadata #7381
OCPBUGS-67233: fix(konflux): update outdated Tekton tasks to pass enterprise contract validation #7372
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-69849: Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.22 #116
Full changelog

ibm-vpc-block-csi-driver-operator

STOR-2852: Enable snapshot tests ibm vpc block csi #160
OCPBUGS-69909: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.22 #159
Full changelog

ibmcloud-cluster-api-controllers

NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #145
OCPBUGS-70027: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.22 #143
Full changelog

ibmcloud-machine-controllers

OCPBUGS-70030: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.22 #74
Full changelog

insights-operator

CCXDEV-15561: Improve test coverage 3 #1213
NO-JIRA: update on-demand gathering examples #1212
OCPBUGS-65500: reference ClusterRoles in ClusterOperator #1211
CCXDEV-15778: add event logging for operator version changes #1202
CCXDEV-15589: set limit for gathering interval #1171
OCPBUGS-67001: update dataGather status after job deletion #1201
OCPBUGS-66386: [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1203
CCXDEV-15561: Improve test coverage 2 #1199
OCPBUGS-65582: set Progressing condition on cluster update #1207
CCXDEV-15258: DataGather and InsightsDataGather update to v1 #1159
OCPBUGS-66996: Extends the time for the extractor liveness probe #1198
OCPBUGS-69764: Updating ose-insights-operator-container image to be consistent with ART for 4.22 #1204
CCXDEV-15561: Improve test coverage #1191
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-76464: remove dnf cache from the container images #62
chore: Update JBoss EAP 8.1 runtime samples #61
eap 8.1 test fix #57
Full changelog

ironic

NO-ISSUE: Update requirements.cachito with latest openshift forks commits #783
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #773
ART-14497: Fix ART builds with -minimal #779
NO-ISSUE: Bump openstacksdk version to 4.9.0 #776
OCPBUGS-74579: fix for minimal builds #772
OCPBUGS-74427: Bump eventlet version to latest bugfix #770
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #768
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #762
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #758
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #757
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #755
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #754
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #751
OCPBUGS-70001: Updating ironic-container image to be consistent with ART for 4.22 #752
NO-ISSUE: Update requirements.cachito with latest openshift forks commits #748
Full changelog

ironic-agent

NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #242
OCPBUGS-74579: fixes for minimal builds #240
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #238
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #237
Updating ironic-agent-container image to be consistent with ART for 4.22 #225
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #223
Full changelog

ironic-machine-os-downloader

OCPBUGS-71233: Export TMPDIR to be available to child processes #111
OCPBUGS-69891: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.22 #110
Full changelog

ironic-static-ip-manager

OCPBUGS-70044: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.22 #56
Full changelog

kube-metrics-server

OCPBUGS-69952: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.22 #48
Full changelog

kube-rbac-proxy

CNTRLPLANE-882: 0.20.2 downstream #131
Full changelog

kube-state-metrics

OCPBUGS-71224: [bot] Bump openshift/kube-state-metrics to v2.18.0 #130
Updating kube-state-metrics-container image to be consistent with ART for 4.22 #126
Full changelog

kube-storage-version-migrator

OCPBUGS-69726: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.22 #235
Full changelog

kubevirt-cloud-controller-manager

NO-JIRA: Upstream Sync - 2026-01-27 #60
Full changelog

machine-api-operator

OCPCLOUD-3166: Bump openshift/api #1453
OKD-259: Vendor API and add OKD featureset Specific CRDs #1448
SPLAT-2603: Updated AWS dedicated host id validation pattern #1451
OCPBUGS-64937: vsphere - Cache REST API sessions to prevent excessive vCenter logouts #1432
OCPCLOUD-3222: Adds agents.md #1449
OCPBUGS-69862: Updating ose-machine-api-operator-container image to be consistent with ART for 4.22 #1450
Full changelog

machine-config-operator

OCPBUGS-74692: Write all units when forcefile exists to recover from systemd unit config drift #5612
OCPBUGS-63699: Remove MCD liveness probe #5623
MCO-1984: Add Component Readiness tests for boot image skew enforcement #5547
TRT-2543: Revert #5586 “MCO-2065: Move systemctl execs to dbus calls” #5638
OCPBUGS-75916: crio: disable short_name_mode until we introduce ctrcfg api for it #5628
NO-ISSUE: Make TestImagePrunerErrors flexible to registry behavior changes #5613
OCPEDGE-2216: feat: increase reserved memory for tnf masters #5592
MCO-2065: Move systemctl execs to dbus calls #5586
NO-ISSUE: Fix-up AMI update script to work from CI image #5626
NO-ISSUE: Update AMI script and list #5616
MCO-1877: MCO-1879: MCO-1882: MCO-1884: Implement boot image skew enforcement MVP #5428
MCO-1924: MCO-500: Migrate direct runGetOut() to use CommandRunner in the MCD #5546
NO-JIRA: Fix OSImageStream validating admission policies for OKD #5618
MCO-1953: Refactor functionality to grab machines by state for calculating MCP status #5541
OCPBUGS-20561: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5601
MCO-2090: migrate nodedisruptionpolicy tests from the private reposit… #5602
NO-JIRA: Pass TAGS argument to the machine-config-controller image build #5611
AGENT-1395: IRI followup changes #5562
AGENT-1424: Add e2e test for IRI deletion #5608
MCO-2088: Remove wasm extension #5598
OCPBUGS-72555: Restrict CPMS boot image configuration to only AWS, GCP and Azure platforms #5540
NO-ISSUE: Add bootstrap e2e guide #5604
NO-ISSUE: CPMS test should account for skew API #5599
OCPBUGS-74368: Stale operator metrics Service and ServiceMonitor resources need to be deleted #5593
MCO-2059: migrate machineconfignodes from private repo #5589
OCPBUGS-58023: Prevent unnecessary systemd unit disable #5582
NO-ISSUE: Fix e2e ocl intermittent failures #5595
MCO-1182: migrate private test case OCP-87023 #5587
AGENT-1424: add initial e2e tests for the InternalReleaseImage controller #5588
AGENT-1412: Prevent deletion of InternalReleaseImage when in use #5545
OCPBUGS-71238: Consider image mirrors for OSImageStream fetching #5560
NO-ISSUE: Fix Failure Status condition to True when kubeletconfig or container runtime config validation fails #5542
OCPBUGS-62295: Shorten HAProxy timeouts #5312
MCO-2055: migrate bootimages tests #5551
Revert “OCPBUGS-58023: Prevent unnecessary systemd unit disable” #5576
OCPBUGS-73802: Fix up bootstrap-e2e #5563
MCO-2028: Add target OS version detection #5556
NO-JIRA: bump openshift/client-go #5500
NO-ISSUE: Fixes the issue in the test TestKubeletConfigMaxPods when AutoNodeSizing is enabled by default #5555
OCPBUGS-72396: use D-Bus API to list systemd units #5537
OCPBUGS-56717: enable nodeip-configuration for platform external #5475
CORS-4208: set default KUBELET_NODE_IPS for dualstack nodes #5384
OCPBUGS-72553: CPMS boot image config should not override standard MachineSet configuration #5539
OCPBUGS-67229: Set NodeDegraded MCN condition when node state annotation is set to Degraded #5509
OCPBUGS-58023: Prevent unnecessary systemd unit disable #5527
AGENT-1411: fix IRI registry setup file #5543
OCPBUGS-71189: Configure proxy from ControllerConfig #5538
MCO-2047: migrate scale tests from private repository to MCO repository #5533
MCO-650: Implement custom pool booting #5361
MCO-2049: Validate MCP osImageStream reference #5535
NO-ISSUE: Add README for MCO Operator disruptive e2e tests #5522
MCO-2037: Fix timeout during configMap cleanup #5529
AGENT-1411: Preload the registry image when starting the iri-service #5514
NO-JIRA: kubelet: drop pod-infra-container-image usage #5460
OCPBUGS-70259: Enable existing units without content #5520
MCO-2018: Move operator metrics into the controller #5498
MCO-2033: Refactor bootstrap dependency handling #5519
OCPNODE-3973: Default CPU/Memory changes to Workers - AutoSizingReserved #5491
OCPBUGS-69910: Bump OpenShift builder images to 4.22 #5512
OCPBUGS-69674: Skip boot image updates if arch annotation is not found #5508
MCO-1961: Integrate OSImageStream into MCP and sync logic #5476
MCO-2006: Migrate pinned images sets private test cases #5466
OCPBUGS-66209: clusteroperator/machine-config blips Degraded=True in CI jobs #5465
MCO-2015: Use an event based queue in the boot image controller #5479
MCO-1016: Only update when there is an actual controller change #4742
MCO-1961: Rework MC’s OSImageURL merge logic #5488
OCPBUGS-62984: MCP is not correctly degraded when a pivotError happens #5492
OCPBUGS-62828: MCO degraded when an empty pull-secret is configured #5486
AGENT-1391: Use TLS cert for the InternalReleaseImage registry #5483
OCPBUGS-66420: Revert “Default Enablement of Auto Sizing Reserved in OpenShift 4.21” #5489
Full changelog

machine-image-customization-controller

OCPBUGS-22175: Add IPA messages for console and SSH login #158
NO-ISSUE: Add AGENTS.md and CLAUDE.md #156
OCPBUGS-70040: Updating ose-image-customization-controller-container image to be consistent with ART for 4.22 #155
Full changelog

machine-os-images

METAL-1720: Add aarch64 symlinks for initramfs #79
NO-ISSUE: Run fetch_image with tracing #68
OCPBUGS-69857: Updating ose-machine-os-images-container image to be consistent with ART for 4.22 #76
NO-ISSUE: Add AGENTS.md file #75
Full changelog

metallb-frr

CNF-20883: Downstream merge 2025-12-30 #118
Full changelog

monitoring-plugin

COO-1562: update acm alerting UI test case #753
OBSINTA-1063: Add incidents e2e command #740
OU-1213: IncidentPage add error state #750
OU-1062: feat: mark alert menu active for incidents tab #754
OU-1205: feat: force rounded dates for consecutive intervals #748
OU-915: create dashboards and rbac #746
OU-1039: add info alert to the Incident page #741
NO-JIRA: fix: update vulnerable dependencies #742
COO-1515: add the cluster-health-analyzer feature #736
OCPBUGS-72604: remove top level dispatch into useEffect #730
NO-JIRA: monitoring testing - metrics - ungraphable for periodics #731
OU-1134: edit perses dashboards automation testing #712
OU-1122: reuse existing handler to set alerts table data #690
NO-JIRA: fix: remove unnecessary package.lock #728
OCPBUGS-70014: Updating monitoring-plugin-container image to be consistent with ART for 4.22 #708
OBSINTA-1062: custom cluster-health-analyzer builds #720
NO-JIRA: metrics automation failing only in periodics - fix click and type timespan #725
NO-JIRA: fix esbuild optional dependencies for cross arch builds #721
OCPBUGS-70314: fix: update qs vulnerable dependency #715
NO-JIRA: metrics automation testing for presubmit and periodic #716
NO-JIRA: feat: use esbuild-loader, add push manifest command to makefile #713
OU-1064: list perses dashboards automation testing #711
NO-JIRA: monitoring automation fixing Core platform change #709
OU-632: Split ALERTS query_range into several requests for Incidents #678
OU-1082: claude slash commands cypress-setup and cypress-run #673
OU-1074: feat: add backport claude command #691
OU-1088: remove random multiplication #696
OU-1073: chore: add contributing guide #694
NO-JIRA: automation - dev user scenarios fixes with namespace level changes #692
OBSINTA-853: Cypress Incidents Remove Flaky Tag #688
OU-1081: allow claude-code to build-images #686
OU-1123: alerts chart in Incidents - set the container height same as char… #689
OBSINTA-858: [Incidents] Commands for AI-Assisted Development of Cypress Tests #621
OBSINTA-853: Incident tests CI: Incorrect MP namespace + Race Condition in Closing Guide Tour #679
OCPBUGS-68373: fix: upgrade node-forge vulnerable dependency #681
NO-ISSUE: expose argument’s default values #665
NO-JIRA: automation monitoring testing stabilization flaky scenarios #684
Full changelog

multus-admission-controller

OCPBUGS-69968: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.22 #113
Full changelog

multus-networkpolicy

OCPBUGS-69727: Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.22 #83
Full changelog

must-gather

OSSM-11290: Collect Istio ZTunnel resources #511
OCPBUGS-70064: Updating ose-must-gather-container image to be consistent with ART for 4.22 #519
Full changelog

network-metrics-daemon

OCPBUGS-69971: Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.22 #140
Full changelog

network-tools

NO-JIRA: Comment submariner team members until they’re ready for OVNK bugs #171
OCPBUGS-70066: Updating ose-network-tools-container image to be consistent with ART for 4.22 #170
Full changelog

networking-console-plugin

CNV-78079: Virtual machine networks page - Other types tab #335
CNV-78079: Virtual machine networks - deletion #343
CNV-78079: Virtual machine networks - details page updates #333
CNV-77540: fix Enable MultiNetworkPolicies lead to invalid URL #339
CNV-78194: update PatternFly to 6.4.0 to align with Console main #336
CNV-70790: Navigation to Project Mapping Before Network Definition Com… #338
CNV-69219: New translations #337
CNV-78079: Virtual machine networks - list updates #329
OCPBUGS-74423: Migrate to npm #331
CNV-77547: add “Make this network available for all projects” option to Virtual machine network Wizard #328
CNV-76711: Remove @openshift-console/plugin-shared package #327
CNV-76879: Allow passing the physical network name via URL parameter in the VM network wizard #326
CNV-76435: CUDN breadcrumb link to page with Project selector #325
OCPBUGS-73548: remove whitelist for allowlist #321
CNV-75831: list all NetworkPolicies in “All projects” #313
CNV-76277: Fix name generator with unprofessional names #315
OCPBUGS-70000: Updating networking-console-plugin-container image to be consistent with ART for 4.22 #312
CNV-76211: Remove deprecated badge from localnet #314
CNV-74685: Fix vm network edit modal #311
CNV-74687: Fixing the title and redirect when deleting a vm network #307
CNV-72230: fix networking links #309
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-69976: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.22 #53
Full changelog

nutanix-machine-controllers

OCPBUGS-69913: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.22 #128
Full changelog

oauth-apiserver

CNTRLPLANE-2260: cmd/oauth-apiserver-tests-ext: Update OTE framework integration #162
OCPBUGS-69818: Updating ose-oauth-apiserver-container image to be consistent with ART for 4.22 #160
CNTRLPLANE-1259: Simplified test infrastructure to single-module architecture #154
Full changelog

oauth-proxy

OCPBUGS-73848: test/e2e - do not use ambiguous container image short names #343
Full changelog

oc-mirror

OCPBUGS-75013: Fix reg config detection for explicit false values #1348
OCPBUGS-73760: fix conversion issue for catalog #1338
OCPBUGS-69745: fix duplicated channel bug in filtered catalogs #1339
CLID-476: Fixes for cross-build errors #1303
OCPBUGS-70024: images: update images to 4.22 #1337
OCPBUGS-70024: Updating oc-mirror-plugin-container image to be consistent with ART for 4.22 #1331
NO-JIRA: Add tests/results-integration to .gitignore #1326
CLID-480: v2: do not invoke v1 make commands #1310
CLID-512: claude: add slash command for ISC generation #1328
NO-JIRA: add adolfo-ab as reviewer #1329
Full changelog

olm-catalogd, olm-operator-controller

OPRUN-4441: fix(ote): Fix up own-namespace invalid configuration test #634
NO-ISSUE: Synchronize From Upstream Repositories #633
NO-ISSUE: Synchronize From Upstream Repositories #632
NO-ISSUE: Synchronize From Upstream Repositories #630
OPRUN-4439: Update test-operator startup script to fix pod probe endpoints #629
NO-ISSUE: add 85889 automation #603
NO-ISSUE: add 83979 automation #602
NO-ISSUE: Synchronize From Upstream Repositories #625
OPRUN-4441: fix(ote): fix SingleOwnNamespace test for Boxcutter runtime compatibility and use as operator-controller dep from root instead of upstream release #628
OCPQE-31553: adjust watchnamespace qe case based on change #623
OPRUN-4439: Fix test operator controller pod probes #614
NO-ISSUE: Synchronize From Upstream Repositories #622
OPRUN-4446: Update preflight auth checks for Boxcutter feature gate #621
OPRUN-4112: Synchronize From Upstream Repositories #615
OPRUN-4403: OPRUN-4403 case for upgrade major version #618
OCPQE-31521: enhance ocp-79770 #616
OPRUN-4063: config watchnamespace api cases #612
NO-ISSUE: Synchronize From Upstream Repositories #610
OPRUN-4385: Remove marketplace index from tests #598
NO-ISSUE: Synchronize From Upstream Repositories #608
TRT-2516: Revert #594 “OCPBUGS-65634: add service account to curl job” #609
OCPBUGS-65634: add service account to curl job #594
NO-ISSUE: Synchronize From Upstream Repositories #601
OCPQE-31296: enhance qe cases to make it more stable #604
NO-ISSUE: Run upstream e2e tests tagged with @catalogd-update #605
NO-ISSUE: Synchronize From Upstream Repositories #597
OPRUN-4350: Update to golang 1.25 and ocp 4.22 #586
OCPQE-31263: update 83026 to specify the clustercatalog #583
OCPQE-30674: migrate bandrade’s OLMv1 test cases to OTE #562
OCPQE-31264: update 80458’s timeout to 180s #579
NO-ISSUE: Synchronize from upstream #581
Full changelog

openshift-apiserver

Revert “OCPBUGS-72408: block image import from cluster IP addresses” #599
OCPBUGS-72408: block image import from cluster IP addresses #591
OCPBUGS-70049: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.22 #590
Full changelog

openshift-controller-manager

CNTRLPLANE-2620: bump github.com/openshift/library-go #427
OCPBUGS-69696: Updating ose-openshift-controller-manager-container image to be consistent with ART for 4.22 #425
Full changelog

openshift-state-metrics

OCPBUGS-74036: Updating openshift-state-metrics-container image to be consistent with ART for 4.22 #129
OCPBUGS-69985: Updating openshift-state-metrics-container image to be consistent with ART for 4.22 #128
Full changelog

openstack-cluster-api-controllers

OCPBUGS-69731: Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.22 #396
NO-JIRA: Sync main with latest upstream (release-0.14) #395
Full changelog

openstack-machine-api-provider

OCPBUGS-70022: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.22 #149
OCPBUGS-67298: Don’t record event for every reconcile #142
Full changelog

openstack-resource-controller

OCPBUGS-70015: Updating openstack-resource-controller-container image to be consistent with ART for 4.22 #25
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: UPSTREAM:<carry>: automate OCP-40945 #1209
NO-ISSUE: Synchronize From Upstream Repositories #1226
OCPBUGS-76323: OCPQE-31553:remove qe case of testing collect-profiles #1221
NO-ISSUE: UPSTREAM: : migrate bandrade test cases to OTE #1193
OCPBUGS-31547: Remove the collect-profiles job #1215
OCPBUGS-26404: Add retry logic for SNO cluster detection in leader election configuration #1210
OCPQE-31553: continue to adjust case per collect-profiles change #1218
OPRUN-4407: automate OCP-87276 #1212
OCPQE-31558, OCPQE-31559: Update QE test cases to align with the removal of the redhat-marketplace catalog #1217
OCPQE-31553: change to check collect-profile networkpolicy dynamically #1216
OCPBUGS-74389: Synchronize From Upstream Repositories #1206
OPRUN-4414: Integrate APIServer TLS controller into PSM #1205
OPRUN-4415: Synchronize From Upstream Repositories #1202
NO-ISSUE: Synchronize From Upstream Repositories #1201
OPRUN-4416: Remove kube-rbac-proxy from PSM #1190
NO-ISSUE: automate ocp-85743 and ocp-85745 #1197
OCPQE-31468: add missed opm db testdata #1196
OCPQE-31468: recovery missed qe testdata #1194
OCPBUGS-65867: Synchronize From Upstream Repositories #1195
NO-ISSUE: Synchronize From Upstream Repositories #1192
OCPQE-30680: migrate ocp-25674 #1185
NO-ISSUE: UPSTREAM: <carry>: migrate bandrade test cases to OTE #1169
OCPQE-31297: enhance ocp and microshift olm case #1173
NO-ISSUE: Synchronize From Upstream Repositories #1168
OCPQE-30680: migrate OLMv0 test cases to OTE #1166
OPRUN-4351: Update Dockerfiles/CI to use golang 1.25/ocp 4.22 #1178
Updating ose-operator-framework-tools-container image to be consistent with ART for 4.22 #1174
OCPBUGS-69774: Updating operator-registry-container image to be consistent with ART for 4.22 #1177
OCPBUGS-69740: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.22 #1175
Full changelog

operator-marketplace

OPRUN-4456: chore(deps): upgrade Go module dependencies (edge) #724
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 #720
NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1 in the k8s-dependencies group #718
NO-ISSUE: Bump github.com/onsi/gomega from 1.39.0 to 1.39.1 #719
OCPBUGS-65581: marketplace-operator sets Progressing=True during upgrade #713
OPRUN-4410: Add Openshift TLS Profiles support to marketplace-operator #715
NO-ISSUE: Bump github.com/operator-framework/api from 0.37.0 to 0.38.0 #717
OPRUN-4302: Remove marketplace index #698
OCPBUGS-74360: Fix image for the build #714
NO-ISSUE: Bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.0 in the k8s-dependencies group #711
NO-ISSUE: Bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 #712
OCPBUGS-74006: Updating marketplace-operator-container image to be consistent with ART for 4.22 #709
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.4 #701
NO-ISSUE: Bump github.com/onsi/gomega from 1.38.3 to 1.39.0 #702
OCPBUGS-69441: Increase default catalog polling interval to 4h (240m) #695
NO-ISSUE: Bump the k8s-dependencies group with 2 updates #697
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 #691
OPRUN-4354: Update to build containers to golang-1.25 #696
NO-ISSUE: update ports on deployment manifests, fix spacing #689
OCPBUGS-69929: Updating marketplace-operator-container image to be consistent with ART for 4.22 #694
NO-ISSUE: Bump github.com/onsi/gomega from 1.38.2 to 1.38.3 #692
NO-ISSUE: Bump github.com/operator-framework/api from 0.36.0 to 0.37.0 #693
NO-ISSUE: Bump the k8s-dependencies group with 3 updates #686
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6168: skip new NetSeg Localnet test #2963
OCPBUGS-69753: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.22 #2907
OCPBUGS-61524, OCPBUGS-66994: DownStream Merge [01-03-2026] #2917
CORENET-6170: Add OCP tests extension #2461
OCPBUGS-70087: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.22 #2913
OCPBUGS-70058: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.22 #2912
OCPBUGS-66235: DownStream Merge [12-19-2025] #2910
CORENET-6356: Bump OVN to 25.09 and 25.09 for OKD #2909
OCPBUGS-66234: DownStream Merge [12-04-2025] #2896
Full changelog

powervs-block-csi-driver

MULTIARCH-5838: Rebase ibm-powervs-block-csi-driver with upstream #109
OCPBUGS-69805: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.22 #108
Full changelog

powervs-block-csi-driver-operator

STOR-2523: Add desired-version annotation to controller Deployment and use DeploymentVersionController in ibm-powervs-block-csi-driver-operator #90
No-JIRA: Update owners #93
OCPBUGS-69906: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.22 #94
Full changelog

powervs-cloud-controller-manager

No-Jira: Bump golang.org/x/crypto to 0.45.0 #90
Full changelog

powervs-machine-controllers

OCPBUGS-70051: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.22 #133
Full changelog

prom-label-proxy

OCPBUGS-70042: Updating prom-label-proxy-container image to be consistent with ART for 4.22 #388
Full changelog

prometheus

OCPBUGS-69956: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.22 #284
Full changelog

prometheus-alertmanager

OCPBUGS-74035: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.22 #112
OCPBUGS-69983: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.22 #109
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-67303: Validate webhookURL secret for MSTeams receiver in AlertmanagerConfig CRD #358
OCPBUGS-70007: Updating prometheus-config-reloader-container image to be consistent with ART for 4.22 #352
OCPBUGS-70055: Updating prometheus-operator-container image to be consistent with ART for 4.22 #353
OCPBUGS-69832: Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.22 #351
OCPBUGS-67215: [bot] Bump openshift/prometheus-operator to v0.87.1 #349
Full changelog

prometheus-node-exporter

OCPBUGS-69806: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.22 #174
Full changelog

route-controller-manager

OCPBUGS-20536: bump library-go version #70
NE-2484: bump k8s libraries to v0.35.0 and cr to v0.23.1 #72
OCPBUGS-63449: filter ingress namespace on UnmanagedRoutes metric #71
NO-JIRA: add jcmoraisjr to owners #69
Full changelog

service-ca-operator

CNTRLPLANE-2547: test/e2e: migrate metrics tests for OTE compatibility #305
CNTRLPLANE-2537: test/e2e: migrate headless-stateful-serving-cert-secret-delete-data test for OTE compatibility #304
CNTRLPLANE-2508: test/e2e: migrate vulnerable-legacy-ca-bundle-injection-configmap test for OTE compatibility #303
CNTRLPLANE-2499: test/e2e: migrate ca-bundle-injection-configmap-update test for OTE compatibility #302
CNTRLPLANE-2498: test/e2e: migrate ca-bundle-injection-configmap test for OTE compatibility #301
CNTRLPLANE-2494: test/e2e: migrate serving-cert-secret-delete-data test for OTE compatibility #300
CNTRLPLANE-2491: test/e2e: migrate serving-cert-secret-add-data test for OTE compatibility #299
CNTRLPLANE-2490: test/e2e: migrate serving-cert-secret-modify-bad-tlsCert test for OTE compatibility #298
CNTRLPLANE-2161: test/e2e: migrate serving-cert-annotation test for OTE compatibility #297
OCPBUGS-69911: Updating ose-service-ca-operator-container image to be consistent with ART for 4.22 #296
Full changelog

stream-coreos, stream-coreos-extensions

NO-JIRA: extensions: add a label for extensions image discovery #1894
COS-3900: Start using rhel-10.2 #1892
NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1891
No-JIRA: move the OKD SIG repo to 4.22 #1890
NO-JIRA: OWNERS: add user Rolv-Apneseth #1882
NO-JIRA: Update to track 4.22 and rhel-9.8 #1881
NO-JIRA: rhel-10.1: enable rhel-10.1-fast-datapath #1885
NO-JIRA: packages-openshift: enable rhel-10.1-fast-datapath #1884
OCPNODE-4010: package: add ose-crio-credential-provider #1879
OCPBUGS-70162: extensions/rhel-10.1: Re-enable ipsec #1878
NO-JIRA: drop use of rhel-9.6-appstream-containernetworking repo #1877
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

telemeter

SREP-3493: ROSA HCP billing for control planes #577
OCPBUGS-73928: Updating telemeter-container image to be consistent with ART for 4.22 #575
NO-ISSUE: switch http_request_size_bytes to histogram #574
NO-ISSUE: support native histograms #573
NO-ISSUE: update github.com/prometheus/client_golang #572
OCPBUGS-69697: Updating telemeter-container image to be consistent with ART for 4.22 #571
Full changelog

tests

OCPBUGS-76327: Fix flakiness in MutableCSINodeAllocatableCount test #30766
NO-JIRA: ote: fix duplicated topology label on SingleReplica #30759
NO-ISSUE: Automated - Update synthetic test data #30694
NO-JIRA: Ignore state transitions on upgrade failures and SNO #30762
SPLAT-2337: CCM-AWS OTE binary and skips #30747
NO-JIRA: Fix discrepancies in use of failure message vs output #30752
OCPEDGE-2166: test(two-node): stablize tnf recovery suite #30716
NO-JIRA: Fix OKD featureset test as it should only run if the current featureset is Default #30757
OCPBUGS-74917, TRT-2504: Claude command to manage watch request limits, split test by operator/component #30750
TRT-2540: Revert #30657 “OCPNODE-3944: Create e2e automation in origin for case OCP-84149” #30761
CNTRLPLANE-2196: reg ote bin for cluster auth operator #30735
NO-JIRA: upkeep: add collection of errors for crio tests #30743
OCPEDGE-1484: [TNF] kubelet disruption test #30290
OKD-259: Test OKD Feature set Against OKD and OCP clusters #30693
OCPNODE-3944: Create e2e automation in origin for case OCP-84149 #30657
OCPEDGE-2355: feat: skip unsupported commatrix tests for two node #30720
OCPEDGE-2274: fix: change arbiter topology test to verify pods do not run on arbiter nodes #30737
OCPQE-31524: Add conditional SCC wait for Kubernetes compatibility #30736
Revert “SPLAT-2337: Added OTE binary for ccm-aws” #30744
SPLAT-2337: Added OTE binary for ccm-aws #30525
NO-JIRA: bump SNO marketplace-operator watch count limit #30738
OCPBUGS-73778: revert LSO networkpolicy cases #30684
STOR-2838: fix OTP AsGuestKubeconf #30721
OCPBUGS-63307: Add/RemoveSigtermProtection event matcher for SigstoreImageVerification tests #30624
TRT-2522: Update optimized builds test to use rpm -qa instead of dnf #30722
NO-JIRA: Replace OCPBUGS-20062 with OCPBUGS-65984 #30554
OCPNODE-3203: Add a test suite for kubeletconfig testing #30648
OCPBUGS-61855: Revert “Temporarily disable InstallPlanStepAppliedWithWarnings alert for k8s 1.34 rebase” #30559
NO-ISSUE: Update boot image manifests for skew API #30712
NE-2376: Remove restriction of unmanaged x-k8s.io #30658
OCPBUGS-74237: Update MCN tests to better handle condition transitions through the “Unknown” state #30705
OTA-1681: remove etcd exceptions #30688
OCPBUGS-74280: Add filter for openshift-copy-to-node ns #30713
OCPBUGS-62929: Check router RBAC before external cert ops #30395
OCPCLOUD-3351: monitortest: add crdversionchecker #30603
OCPBUGS-65674: VsphereConfigurationTestsRollOutTooOften event matcher should use broader regex #30654
OCPSTRAT-2728: add images required for the 1.35 rebase (temporary) #30687
NO-JIRA: Remove exceptions for storage operators #30677
NO-ISSUE: Allow test to tolerate running on minimal images #30695
TRT-2483: feat(ginkgo): add monitor tests to extension test result output #30678
NO-JIRA: Update Networking team lead #30301
OCPEDGE-2303: update test logic for degraded cluster run #30649
NO-JIRA: CO must go Progressing during a minor-level upgrade #30626
OCPBUGS-39026: Remove exception for monitoring operator going degraded during upgrade #30012
NO-JIRA: Fix Pod.Create() to use –local flag for template processing #30686
OCPEDGE-1788: TNF add etcd cold boot recovery tests from graceful node shutdown #30519
NO-JIRA: Replace OCPBUGS-38667 with OCPBUGS-66225 #30551
OCPEDGE-2304: adjust olm test to pass on a degraded run #30664
OCPBUGS-72547: Isolate and reduce parallelism for OrderedNamespaceDeletion tests. #30672
OCPNODE-3823: Migrating test case from Openshift-test-private to origin #30512
NO-JIRA: add the intervals bucket for Netpol tests #30679
NO-ISSUE: Update synthetic test data #30680
NO-JIRA: Remove exceptions for co/machine-config on Available=False #30550
CNTRLPLANE-2167: Add oc-tests-ext to extension binaries #30653
OCPBUGS-69676: update watch request limits for cluster-autoscaler-operator #30656
NO-JIRA: Remove the exception for CO/console’s Available=False #30553
Revert “CNF-18661: add a skip on the commatrix test for the unsupported topology by commatrix” #30670
NO-ISSUE: Fix the PinnedImage test to set imageMinimumGCAge to 1s #30645
OCPBUGS-70170: change iperf2 test to serial from parallel #30671
NO-JIRA: register cluster-node-tuning-operator-test-ext the binary to origin for OTE migration #30598
NE-2056: auto negative tests of gatewayapicontroller #30599
NO-JIRA: Add more output for debegging #30583
NO-JIRA: Skip a ClusterOperator test if a cluster upgrade is blocked #30558
NO-JIRA: Track the total kubelet metrics outage durations with autodl framework #30593
NO-JIRA: Add images that shouldn’t be mirrored to the exception list. #30652
OCPBUGS-66225: Add more exceptions for CO/image-registry’s Degraded=True #30581
OCPBUGS-66065: remove duplicated events before processing lease intervals #30639
OCPBUGS-57665: only run Netpol two at a time #30618
OCPBUGS-70249: Unrevert tls tests with fixes #30536
OCPBUGS-70065: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.22 #30636
OCPBUGS-69400: Ignore repeated TopologyAwareHintsDisabled events #30614
CNF-18661: add a skip on the commatrix test for the unsupported topology by commatrix #30640
CNTRLPLANE-2167: Migrate must-gather cases to origin #30594
NO-JIRA: Remove DennisPeriquet from OWNERS #30650
OCPSTRAT-2728: Update etcd test data for k8s 1.35 release #30605
OCPBUGS-67313: Fix race condition in external binary extraction #30616
OCPBUGS-70134: Fix JSONL parsing to handle stray JSON in test output #30634
TRT-2394: Detect duplicate tests #30498
CNTRLPLANE-947: E2E test adaptations for OIDC #30292
TRT-2418: Add CPU metrics autodl #30609
NO-JIRA: feat: render OTE JSON results in spyglass #30619
NO-JIRA: Increase tolerance of CO’s not reporting Progressing #30602
MCO-2006: move node-filecycle monitor to default #30592
NO-ISSUE: Two more COs report Available=False in a non-upgrade job #30588
CNTRLPLANE-1437: add monitor test for checking default service account in pods (static test name) #30561
NO-JIRA: feat(monitor): track test bucket execution intervals #30615
STOR-2550: add LSO network policy test case #30562
OCPBUGS-63618: BeforeEach was indirectly called in DetermineReleasePayloadImage #30610
CNTRLPLANE-1683: added the OTE binary for cluster-image-registry-operator #30612
OCPBUGS-67211: exculude Flaky tests for openshift/csi test suite #30597
OCPBUGS-65674: VsphereConfigurationTestsRollOutTooOften event matcher should match also dep and ds events #30547
NO-JIRA: Allow group snapshot tests to be re-tried #30607
OCPNODE-3780: Add e2e tests to validate DRA APIs #30462
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

OCPBUGS-69738: Updating ose-thanos-container image to be consistent with ART for 4.22 #166
Full changelog

volume-data-source-validator

OCPBUGS-69897: Updating volume-data-source-validator-container image to be consistent with ART for 4.22 #8
Full changelog

vsphere-cloud-controller-manager

Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.22 #102
Full changelog

vsphere-cluster-api-controllers

NO-JIRA: UPSTREAM: <carry>: Add manifests verify target #80
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-69760: Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.22 #153
OCPBUGS-69746: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.22 #152
Full changelog

vsphere-csi-driver-operator

OCPBUGS-74225: Bump library-go #328
OCPBUGS-74206: fix snapshot config non-deterministic ordering #329
STOR-2840: Declare RWX capability explicitly #324
STOR-2852: Enable snapshot tests for vsphere #321
OCPBUGS-69924: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.22 #320
OCPBUGS-66113: Some containers do not have readOnlyRootFilesystem #319
Full changelog

vsphere-problem-detector

OCPBUGS-74989: GetVCenterHostnames lacks lock protection causing potential data race #209
OCPBUGS-70365: fix concurrent map writes #206
OCPBUGS-69856: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.22 #199
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github