Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.19.0-okd-scos.ec.9

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.19.0-okd-scos.ec.8 - Success
• 4.18.0-okd-scos.ec.3 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.19.0-okd-scos.ec.8

Created: 2025-04-25 18:57:59 +0000 UTC

Image Digest: sha256:7787f64ca7e0dadf641ce1600214f6cc263fd2abbc5c8cf534bda1fdeab39d55

Release 4.19.0-okd-scos.ec.9 was created from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-04-24-123954

Components

• Kubectl 1.32.1
• Kubernetes 1.32.3
• Kubernetes Tests 1.32.3
• CentOS Stream CoreOS upgraded from 9.0.20250407-0 to 9.0.20250419-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ConsolePluginContentSecurityPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
GatewayAPI (6 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
MetricsCollectionProfiles (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OnClusterBuild (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
RouteExternalCertificate (19 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
MachineAPIMigration (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
DualReplica (0 tests)	Disabled	Disabled	Enabled	Enabled	Disabled (Changed)	Disabled (Changed)
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

• cluster-autoscaler-operator git 227f7537 sha256:bf263f8c7fee8a12514cdf9a068026f1722cc181c21cfd8b9ec253121a7005e8
• cluster-openshift-apiserver-operator git 5f66a3e1 sha256:80ef8dfc8fc962acd6c74074927206e8b7539cb42316fba0e5cff71646183016
• docker-builder git f2e5d601 sha256:f9f576b5c04fb63f1fcf94159f2168e20ae2607fb253e2b05e70d2eb30ddee77
• haproxy-router git b41f9d05 sha256:0cbbd3c32e718cccc2c970a165c5923de8628f9f262cfe549925211ec782e718
• insights-runtime-exporter git 3342e1e9 sha256:7dc348af08737dfeb8618d10523f6fd504560c9911fd9d26e718dcb6040aa25a
• insights-runtime-extractor git 3342e1e9 sha256:c1f4a81ce4f01ee18acba6e6ba16da6554b3bea929492634e09d3eec0998c7cb
• kube-storage-version-migrator git 4c521b09 sha256:fdf6c740f707f050316a6586f1e1d6d9b17690a7e53507309cf9469b56e2508f
• openshift-apiserver git 85f6eb27 sha256:8b8894e862326d49b438a89752fe26ba55e9c97b0b750c05c75ad635a2c1db84
• powervs-block-csi-driver git f681413d sha256:493739a84249d4e2d037e3948011a375ef1dc39edc1b3287392fc42c659040e6

agent-installer-api-server

• MGMT-20324: Fix day2 add hosts with P/Z CPU architectures #7527
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• NO-ISSUE: Apply konflux migration (#1105) #1105
• NO-ISSUE: Update Konflux references (#1103) #1103
• NO-ISSUE: Update Konflux references (#1095) #1095
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Update Konflux references (#976) #976
• Full changelog

agent-installer-utils

• NO-ISSUE: ISOBuilder-Add support-tools image for oc debug #77
• NO-ISSUE: ISOBuilder- Update README.md #76
• NO-ISSUE: ISOBuilder: Add Clean targets. #69
• AGENT-1161: Update ISOBuilder dependencies #75
• AGENT-1154: Dev docs for ISOBuilder #74
• NO-ISSUE: Remove extra doneFunc() call #73
• AGENT-1188: Add MBR to El Torito ISO to support USB boot alongside VM #72
• NO-ISSUE: ISOBuilder: Use libpod registry #71
• AGENT-1114: Check connectivity to rendezvous node and improvements #64
• Full changelog

apiserver-network-proxy

• OCPBUGS-52573: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.19 #74
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-54567: UPSTREAM: 5374: add marketType field validation #548
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• NO-JIRA: build only needed cmd in container image #329
• OCPBUGS-54382: Correct ASH driver inject env config #376
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-55162: UPSTREAM: 8920: Fix azure stack hub volume detach failed #142
• OCPBUGS-51090: Fix panic for GetZoneByNodeName on Azure Stack #141
• Full changelog

azure-kms-encryption-provider

• CNTRLPLANE-373: Add Support for UserAssignedIdentityCredential for Kubernetes-KMS #14
• OCPBUGS-45592: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.19 #9
• Full changelog

azure-machine-controllers

• OCPBUGS-54617: Update eviction policy for Spot VMs from Deallocate to Delete #138
• Full changelog

baremetal-cluster-api-controllers

• Remove ipam-controller-manager deployment #43
• Add metal3 infra group to IPAM manager RBAC #42
• Remove IPAM deployment #39
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-52203: Find GCP KMS keys #9597
• CORS-3855: Remove ARO build flag from installer #9124
• OCPBUGS-54902: Custom-DNS: Update Kubeconfig and Infra CR based on private or public cluster #9656
• NO-JIRA: Update SCOS 4.19 bootimage metadata to 9.0.20250411-0 #9657
• CORS-3870: validate duplicate AZs if no subnet roles at all or only for subnets of the same role #9663
• CORS-3864, CORS-3959: CAPI AzureStack Support, Take II #9666
• OCPEDGE-1749: [TNF] Updated bare-metal init sequence to detach control-plane nodes in Two Node OpenShift. #9661
• Revert “Merge pull request #9645 from patrickdillon/azurestack-mark-iii” #9665
• CORS-3864, CORS-3959: CAPI-based AzureStack Installs #9645
• CORS-3870: add validations for subnets field with AWS API #9599
• CORS-3871, CORS-3872, CORS-3873: place the cluster components on the assigned byo subnets if any #9633
• CORS-3278: IBMCloud: Remove IBM Cloud TF provider #9649
• OCPBUGS-54606: convert OVNKubernetes networkType to correct format #9653
• CORS-3936: Add support for public-only networking #9544
• CORS-3278: IBMCloud: Add DestroyBootstrap for leftover CAPI resources #9636
• CORS-3854: Enable option to set boot diagnostics #9125
• CORS-3278: Switch IBMCloud to CAPI #9652
• CORS-3867: fix CRD descriptor to mention required BootstrapNode role #9655
• CORS-3886: azure: Set use managed identity to false #9648
• OCPBUGS-54319: oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x #9608
• AGENT-1159: agent docs update #9627
• Full changelog

baremetal-runtimecfg

• OPNET-629: Use HAProxy monitor endpoint instead of API #343
• OCPBUGS-48469: Pass in platform as a optional parameter to runtimecfg cmds #345
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-52164: Add the generation of initrd.addrsize and generic.ins file for ABI Day2 Artifacts #2007
• NO-JIRA: adm release new: simplify writePayload #2008
• COS-3023: Fixing rpmdiff permissions when running in container #2006
• Full changelog

cloud-credential-operator

• OCPBUGS-55204: Revert “Merge pull request #848 from jstuever/OCPBUGS-53429” #854
• OCPBUGS-53429: Render: configure proxy on bootstrap static pod #848
• Full changelog

cloud-network-config-controller

• OCPBUGS-45891: Increase API call timeout to 30 second #168
• CNTRLPLANE-112: Remove ARO HCP MIv2 authentication from CNCC #169
• CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #166
• OSASINFRA-3755: Prefer CA cert from credentials secret #167
• Full changelog

cluster-authentication-operator

• OCPBUGS-51203: fix logo not being correctly aligned in Webkit #758
• Full changelog

cluster-autoscaler

• OCPCLOUD-2835: rebase on upstream 1.32.0 release #340
• Full changelog

cluster-capi-operator

• METAL-966: Reapply “Merge pull request #175 from honza/add-metal3” #284
• OCPCLOUD-2648: Machine sync controller deletion logic #278
• OCPCLOUD-2713: Handle credential fields in both mapi2capi and capi2mapi #282
• OCPCLOUD-2564: add migration controllers #268
• OCPBUGS-54972: Revert #175 “METAL-966: Add metal3 provider” #283
• OCPCLOUD-2880: label selector and labels conversion, fixes to sync controllers and conversions #281
• METAL-966: Add metal3 provider #175
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-54427: Add rbac leases rbac for cloud-provider on Azure stack hub #387
• Full changelog

cluster-config-api

• OCPCLOUD-2914: Add MAPI to CAPI migration to TechPreview #2279
• OCPEDGE-1775: Enable separation of conflicting enum values, and drop DualReplica to DevPreview #2283
• OAPE-92: Promote RouteExternalCertificate feature gate to default feature set #2268
• CONSOLE-4523: Lift Featuregate for the ConsolePlugin ContentSecurityPolicy API #2275
• MON-4071: GA MetricsCollectionProfiles #2286
• CNTRLPLANE-332: Add uid and extra claim mappings for external OIDC configuration #2234
• Promote OnClusterBuild featuregate to default #2192
• trt-2080: check devlopment start date for latest release #2285
• NE-2009: Re-enable GatewayAPI featuregate in Default featureset #2281
• TRT-2081: Revert #2261 “NE-2009: Enable GatewayAPI featuregate in Default featureset” #2277
• Temporarily pin feature-gate-analyzer to 4.19 #2276
• image/v1/types: improve documentation #2240
• NE-2009: Enable GatewayAPI featuregate in Default featureset #2261
• Full changelog

cluster-config-operator

• OCPBUGS-52744: Bump golang.org/x/crypto #433
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-55017: Wait for operators to be stable for 2 minutes before accepting cluster is stable #358
• OAPE-163: Extend E2E tests for MachineNamePrefix when the field is reset #355
• Full changelog

cluster-etcd-operator

• OCPEDGE-1773: Fix arbiter field in install-config #1409
• OCPBUGS-53512: fix CVE-2025-30204 #1412
• OCPBUGS-54222: increase etcdGRPCRequestsSlow duration #1402
• Full changelog

cluster-image-registry-operator

• OSASINFRA-3747: Prefer CA cert from credentials secret #1190
• Full changelog

cluster-ingress-operator

• CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication for Ingress Operator #1222
• CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-ingress #1191
• NE-2009: Relax pod bound validating admission rule for HyperShift #1221
• NE-1969: Set Degraded=True if unmanaged Gateway API CRDs exist #1205
• NE-1957: Add Gateway API DNS Feature e2e tests #1213
• Full changelog

cluster-kube-apiserver-operator

• Revert “OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects” #1830
• OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects #1759
• CNTRLPLANE-347: Issue short lived certificates if ShortCertRotation featuregate is enabled #1823
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-45390: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.19 #56
• ACM-14968: Modified readme for cert-manager changes. #55
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-54945: Bump library-go #838
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-54945: Bump library-go #560
• Full changelog

cluster-monitoring-operator

• NO-JIRA: Synchronize versions of the downstream components #2594
• MON-4207: Bump prometheus-operator to v0.81.0 #2593
• NO-JIRA: [bot] Synchronize versions of the downstream components #2589
• MON-4161: add topology telemetry signals #2588
• MON-4126: set fallbackScrapeProtocol: ‘PrometheusText1.0.0’ as default for all UWM Prometheus targets for backward compatibility with Prometheus v2 until a better migration process is available #2590
• MON-4150: chore: update prometheus-operator go dep #2586
• Full changelog

cluster-network-operator

• OCPBUGS-55090: Configures subdirectory based CNI chain loading #2690
• OCPBUGS-54238: Update CSR status condition appropriately #2674
• CORENET-5914: bindata,ovn-k: Update CUDN CRD following localnet support #2678
• SDN-5701: [multus-networkpolicy] Update CRD to the latest v1beta1 #2668
• CNF-16707: frr-k8s: wire the frr-status sidecar container #2687
• CORENET-5856: Update RouteAdvertisements schema #2685
• OCPBUGS-54837: Add missing backendAddressPools read permission on azure #2684
• CORENET-4481: update install-cni script #2676
• SDN-5342: Signer username validation #2560
• Full changelog

cluster-node-tuning-operator

• Use cpuset.CPUSet for reserved, isolated and offline fields (#1321) #1321
• Make the e2e/basic/modules.go test reentrant (#1322) #1322
• Enhance hugepages validation error message (#1320) #1320
• Bump to k8s 1.32.3 (#1318) #1318
• Full changelog

cluster-olm-operator

• OCPBUGS-54877: Increase debug logging level for op-con/catd #114
• OPRUN-3782: Watch for permissions preflight feature gate #113
• Full changelog

cluster-storage-operator

• NO-JIRA: correct cinder operator CredentialsRequest name #577
• OCPBUGS-54491: sync Azure File permissions with upstream docs #576
• STOR-2078: Enable VolumeAttributesClass for GCP-PD #574
• Full changelog

cluster-version-operator

• NO-JIRA: make verify #1177
• OCPBUGS-23514: Failing=Unknown upon long CO updating #1165
• NO-JIRA: manifests: make template manifests valid YAML #1171
• OTA-1488: Remove USC code #1176
• OTA-1488: Remove DevPreview USC manifests #1175
• NO-JIRA: Fix some issues identified by yamllint #1174
• Full changelog

console

• OCPBUGS-54833: fix spacing of secondary action in notification drawer… #14980
• OCPBUGS-54976: Mark withHandlePromise HOC as Deprecated #14969
• OCPBUGS-54656: Add space between quick start action list items #14940
• OCPBUGS-54601: fix bug where operator appears twice #14983
• OCPBUGS-45514: Add account email to the telemetry #14978
• CONSOLE-4464: Update PatternFly to latest #14979
• OCPBUGS-54657: Expose OdcBaseNode through the dynamic plugin SDK #14955
• OCPBUGS-55047: align spacing after breadrcumb with PatternFly #14972
• OCPBUGS-55018: fix web terminal initialize form style #14974
• CONSOLE-4505: Update i18next package #14881
• OCPBUGS-55084: fix bug where highlighting items from quickstart does … #14976
• CONSOLE-4542: Remove base dl dd dt CSS #14966
• CONSOLE-4541: deprecate VirtualizedTable and ListPageFilter and useLi… #14967
• CONSOLE-4524: Allow Deletion of Identity Providers (IDPs) via OpenShift Web Console #14949
• OCPBUGS-43792: Load extensions in same order as plugins listed in SERVER_FLAGS global #14902
• ODC-7781: Running knative e2e tests from admin view #14952
• OCPBUGS-54669: Enable project selector dropdown on Helm form in admin perspective #14956
• OCPBUGS-54963: Fix visual regression with knative getting started card #14968
• OCPBUGS-54536: Use router link for OLM CSV empty state #14929
• CONSOLE-4492: Use helpText for help text #14964
• OCPBUGS-54878: Align left/right margins of add card items #14963
• CONSOLE-4542: Convert dl, dd, dt to PF DescriptionList #14947
• CONSOLE-4538: Add error reporting link to ErrorBoundary modal #14958
• OCPEDGE-1614: hack: allow DualReplica in control plane topology validation #14934
• OCPBUGS-36658: Fetching taskRuns in PLR details page using PLR UID also #14921
• CONSOLE-4507: Clean up catalog view #14954
• CONSOLE-4520: Further PatternFly 6 bug fixes and cleanup #14945
• CONSOLE-4464: Update PatternFly to 6.2.0 #14953
• OCPBUGS-49870: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14887
• Full changelog

console-operator

• ODC-7780: update quick starts to work in the converged perspective #977
• OCPBUGS-55082: Revert “Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads” #979
• CONSOLE-4523: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #976
• NETOBSERV-2023: Implement a quickstart for netobserv operator #955
• CONSOLE-4481: Add additional CSP test #975
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• OCPBUGS-37212: Upstream sync 15042025 #183
• Full changelog

csi-driver-nfs

• NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #153
• Full changelog

etcd, installer-etcd-artifacts

• ETCD-726: Rebase etcd 3.5.21 openshift 4.19 #324
• Full changelog

gcp-cluster-api-controllers

• ART-12521: update go mod dependency for konflux #240
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-39258: UPSTREAM: 2021: Add Attach Limit for Hyperdisk + Gen4 VMs #77
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-53451: enable VolumeAttributesClass #145
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-37706: allow TLS1.3 or modern profile to be specified #2135
• OCPBUGS-53249: skip UDP LoadBalancer on external #2247
• Full changelog

hypershift

• CNTRLPLANE-713: Pass featuregates for ocm and oapi in cpov2 #6071
• HOSTEDCP-2059: Support capacity reservation in NodePool API #5972
• NO-JIRA: Fix hostedcluster_controller unit test for featuregate job #6067
• CNTRLPLANE-713: Pass featuregates to ocm and oapi #6068
• CNTRLPLANE-713: Use feature flags from release payload for control plane workloads #6060
• CNTRLPLANE-711: transition admissionregistration from v1beta1 to v1 #6005
• AUTOSCALE-127: fix e2e autonode drift test #6062
• CNTRLPLANE-112: Enable MIv3 for Ingress #6058
• NO-JIRA: Remove kas from EnsureNoCrashingPods exceptions #5946
• OCPBUGS-54863: Add annotation to configure KAS goaway-chance #6019
• AUTOSCALE-193: Use payload karpenter image if present, otherwise don’t #6029
• NO-JIRA: Red Hat Konflux update hypershift-release-mce-29 #6056
• NO-JIRA: Add cpo container sync to verify job #6051
• OCPBUGS-54867: Use 135 for terminationGracePeriodSeconds for v2 KAS #6021
• OCPBUGS-54810: Don’t check if olm images exist if guest cluster #5982
• OCPBUGS-54819: Update OpenShift apiserver liveness and readiness probe endpoints to … #6016
• NO-JIRA: Add README.md to docs folder #6050
• NO-JIRA: version check csi-snapshot-webhook for EnsureSATokenNotMountedUnlessNecessary #6043
• OCPBUGS-54225: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #5897
• NO-JIRA: Improve API docs for configuration.Image #6034
• Revert “Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure”” #6012
• OCPBUGS-54533: Update DNS names for ovn-kubernetes cp metrics #6007
• OCPBUGS-54763: openstack/cli: only set port security when specified #6036
• NO-JIRA: Bump o/api version to 4.19 tag #6035
• OCPBUGS-54916: Set Azure KMS Configuration to v2 #6027
• OCPBUGS-54309: Drop isIP CEL check #6032
• AUTOSCALE-127: allow karpenter-provider-aws image to be overriden by hcp annotation #5999
• CNTRLPLANE-217: Add E2E to KubeAPIServerDNSName API to cover KAS custom certificate #5968
• STOR-2281: Remove snapshot webhook #6004
• OCPBUGS-54763: openstack: set port security only if explicitly specified #6015
• OCPBUGS-52661: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #5798
• NO-JIRA: Bump CAPZ to v1.19.2 #6018
• NO-JIRA: update konflux references #5987
• OCPBUGS-48540: Mcd proxy #6011
• Full changelog

ibm-vpc-block-csi-driver

• NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #80
• OCPBUGS-53912: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #81
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-55038: [IBM VPC] set offlineExpansion to false in e2e test manifest #143
• Full changelog

insights-operator

• CCXDEV-15083: Move the Insights runtime extractor feature to GA (#1081) #1081
• feat: remove the upgradeable condition (#1079) #1079
• Full changelog

ironic

• METAL-1327: Update pkgs ocp419 take2 #651
• Full changelog

kubevirt-csi-driver

• NO-JIRA: Add awels as approver #59
• Full changelog

machine-api-operator

• OCPBUGS-55025: fix: nodelink use patch to apply machine’s nodeRef #1352
• Full changelog

machine-config-operator

• OCPBUGS-44732: Support for br-ex with DHCP and static DNS #4724
• OCPBUGS-55043: Fix PollUntilContextTimeout in syncRenderConfig #4987
• OCPBUGS-55231: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #4995
• OCPBUGS-49675, OCPBUGS-55039: In OCL. Usbguard service fails when we install the usbguard extension: IPsec tmpfile.d directives missing when enabling IPsec in OCL #4986
• OCPBUGS-54592: Only populate LastFailedGeneration & LastFailedGenerationError on PIS failure #4983
• OCPBUGS-55234: kubelet: readonly mounts for criometricsproxy #4997
• OCPBUGS-48469: Fix CoreDNS static pod bring-up on cloud platforms #4830
• MCO-1584: Opt-in boot image updates for AWS & GCP by default #4902
• MCO-1615: MCN status update degraded #4977
• MCO-1509: Enable OCL for disconnected workflow #4971
• MCO-1558, OCPBUGS-34745: Add support to rebuild and prune OCL images #4975
• OCPEDGE-1690: add dual-replica templates #4938
• OCPBUGS-53408: wait for build and ensure OS image is actually new #4924
• OCPBUGS-54872: Make sure generation fields in MCN do not have a value of 0 #4982
• MCO-1544: Update MCO code to use MCN’s updated v1alpha1 API #4962
• Full changelog

machine-image-customization-controller

• OCPBUGS-44031: Verify tls while pulling down IPA #131
• Full changelog

metallb-frr

• OCPBUGS-55284: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #87
• Syncmetallb 04042025 #81
• Full changelog

monitoring-plugin

• OU-750: update the metrics typeahead to look pf-6 native #395
• OCPBUGS-54292: Show column headings on metrics page #397
• OU-760: Requests UX changes post PF-6 #390
• OU-723, OU-729: Add label typeahead #392
• OU-757: Show cluster column heading on acm silences page #393
• OU-703: fix states filter in aggregated row #389
• OU-752: Clear out old queries when loading queries from URL #391
• RHINENG-16773: fixed silence alerts data form not filled with alert details #384
• OU-702: re-add csv button for aggregated alert list #383
• OU-659: PF-6 Migration #380
• OU-678: fix: allow to set refresh interval to off #379
• Full changelog

multus-cni, multus-cni-microshift

• : OCPBUGS-55091: CNI subdirectory chaining for composable CNI chaining #268
• Full changelog

network-tools

• NO-JIRA: Fix JIRA queries #141
• Full changelog

networking-console-plugin

• CNV-60065: fix cudn input name #233
• OCPBUGS-49395: adding translations #236
• Upload i18n translations scripts #229
• CNV-59853: remove co-m-table-grid and dropdown-kebab-pf classes #231
• Full changelog

oc-mirror

• OCPBUGS-54653: delete: continue on errors (#1127) #1127
• OCPBUGS-50617: oc-mirror does not create signature files (#1073) #1073
• CLID-246, CLID-307, CLID-308, CLID-309, CLID-310, CLID-347: feat/adds signatures to the archive (#1119) #1119
• CLID-321: Add annotations to resources generated by oc-mirror v2 (#1086) #1086
• Full changelog

olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #315
• NO-ISSUE: Synchronize From Upstream Repositories #312
• NO-ISSUE: Synchronize From Upstream Repositories #309
• NO-ISSUE: Synchronize From Upstream Repositories #308
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-52923: Synchronize From Upstream Repositories (with a revert) PR 988 with revert #991
• Full changelog

operator-marketplace

• OPRUN-3835: Update to 4.19 community-operators catalog #621
• NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.4 #618
• NO-ISSUE: Bump github.com/onsi/gomega from 1.36.2 to 1.37.0 #617
• OPRUN-3621: Replace 4.18 image references with 4.19 #579
• NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 #616
• Full changelog

ovirt-csi-driver-operator

• NO-JIRA: Readme update #139
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• CORENET-5389, OCPBUGS-51040, OCPBUGS-54577: [DownstreamMerge] 2025-04-16 #2516
• CORENET-5721, CORENET-5856, OCPBUGS-51317: [DownstreamMerge] 2025-04-14 #2513
• CORENET-5371: Dockerfile: Bump OVS version to 3.5.0-0.9 #2472
• Full changelog

prometheus-alertmanager

• NO-JIRA: Bump openshift/prometheus-alertmanager to v0.28.1 #99
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• MON-4207: Bump openshift/prometheus-operator to v0.81.0 #329
• Full changelog

prometheus-node-exporter

• MON-4204: Use slog for accelerators (and version bump) #164
• Full changelog

service-ca-operator

• CNTRLPLANE-339: Issue short lived certificates if ShortCertRotation featuregate is enabled #245
• Full changelog

stream-coreos, stream-coreos-extensions

• NO-JIRA: manifest-el9-shared: Update comment for composefs=maybe #1805
• OCPEDGE-1704: [TNF] Added symlink to allow for custom pacemaker resource agent in two-node OCP variant #1796
• NO-JIRA: denylist: update iso mpath denials #1798
• NO-JIRA: c10s.repo: use x86_64 extras-common URL for all arch #1797
• COS-3126: overlay.d: replace 25rhcos-azure-udev #1776
• Full changelog

telemeter

• OCPBUGS-50837: Drop nil metrics during elide transform and capture metric for same #556
• OCPBUGS-50837: Check nil metric in elide label #555
• Full changelog

tests

• OCPBUGS-22413: Add myql-80 to fix known image check test for OKD #29659
• OCPBUGS-54869: bump limits #29700
• OCPBUGS-55214: Fix default cert issuer name for HyperShift in RouteExternalCertificate test case #29698
• OCPEDGE-1680: Fix failed arbiter tests on ci run #29691
• OCPBUGS-54906: Remove [Skipped:Disconnected] from the test name to allow metal ipv6 #29685
• OCPBUGS-54651: resources: Add limit exceptions for Istio #29690
• OCPBUGS-55175: Add cleanup to MCN test #29695
• OCPBUGS-55132: gatewayapicontroller: Increase timeouts #29693
• OCPBUGS-54951: MCO-1520: Reintroduction of MachineConfigNode e2e tests #29683
• OCPBUGS-54869: bump limits #29688
• NE-1970: 5 e2e origin tests for gatewayApiController featureGate #29670
• TRT-2082: Revert “MCO-1520: Add MachineConfigNode e2e tests” #29682
• OCPBUGS-54906: Change the test image to registry.k8s.io/e2e-test-images/agnhost #29672
• OCPEDGE-1675: feat: update some tests to account for the arbiter node #29639
• MCO-1636: skip PIS custom pool checks on SNO cluster #29673
• MCO-1520: Add MachineConfigNode e2e tests #29596
• OCPBUGS-54869: bump limits #29679
• OCPBUGS-54661: Route ExternalCertificate: Fix e2e tests for metal platform #29656
• SPLAT-2060: Registered Machine API tests extension #29579
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-53059: Fix panic issues when LegacyConfig is nil #304
• SPLAT-2072: Removed VSphereMultiVCenters feature gate #300
• STOR-2141: add support for maxAllowedBlockVolumesPerNode #287
• Full changelog

---

View changelog in Markdown or change previous release: 4.19.0-okd-scos.ec.84.19.0-okd-scos.ec.74.19.0-okd-scos.ec.64.19.0-okd-scos.ec.54.19.0-okd-scos.ec.44.19.0-okd-scos.ec.34.19.0-okd-scos.ec.24.19.0-okd-scos.ec.14.19.0-okd-scos.ec.04.18.0-okd-scos.ec.34.18.0-okd-scos.ec.24.18.0-okd-scos.ec.14.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.20.0-0.okd-scos-2025-04-01-203412───4.19.0-0.okd-scos-2025-04-26-1239544.19.0-0.okd-scos-2025-04-26-0039544.19.0-0.okd-scos-2025-04-25-1239544.19.0-0.okd-scos-2025-04-25-0039544.19.0-0.okd-scos-2025-04-24-1239544.19.0-0.okd-scos-2025-04-24-0039544.19.0-0.okd-scos-2025-04-23-1239544.19.0-0.okd-scos-2025-04-23-0039544.19.0-0.okd-scos-2025-04-22-1239544.19.0-0.okd-scos-2025-04-22-0039544.19.0-0.okd-scos-2025-04-17-091854───4.18.0-0.okd-scos-2025-04-26-0907154.18.0-0.okd-scos-2025-04-25-2107154.18.0-0.okd-scos-2025-04-25-0907154.18.0-0.okd-scos-2025-04-24-2107154.18.0-0.okd-scos-2025-04-24-0712524.18.0-0.okd-scos-2025-04-23-191252───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-04-03-2126204.15.0-0.okd-2025-04-02-1800124.15.0-0.okd-2025-03-28-1148024.15.0-0.okd-2025-03-26-0131074.15.0-0.okd-2025-03-25-1331074.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.3.0-0.okd-2025-04-09-1531174.3.0-0.okd-2021-08-03-2048314.3.0-0.okd-2021-03-22-1309504.3.0-0.okd-2021-02-02-2356544.3.0-0.okd-2021-02-02-1747534.3.0-0.okd-2021-01-28-0046514.3.0-0.okd-2021-01-18-145029───4.18.0-okd-scos.94.18.0-okd-scos.84.18.0-okd-scos.74.18.0-okd-scos.64.18.0-okd-scos.54.18.0-okd-scos.44.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github