# 4.20.0-ec.0
Created: 2025-05-12 15:09:13 +0000 UTC
Image Digest: `sha256:b5bea7566302a82159c42b9fbf37aef3b819cb5a22a9ffd34081b0a2192a071a`
## Changes from 4.20.0-0.nightly-2025-06-26-111651
### Components
* Kubectl 1.32.1
* Kubernetes upgraded from 1.32.5 to 1.32.3
* Kubernetes Tests upgraded from 1.32.5 to 1.32.3
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250625-0 to 9.6.20250502-0
### FeatureGate Changes
| FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA |
| :------ | :---: | :---: | :---: | :---: | :---: | :---: |
| AWSDedicatedHosts
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| AWSServiceLBNetworkSecurityGroup
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| AzureDedicatedHosts
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| AzureMultiDisk
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| BootImageSkewEnforcement
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ImageModeStatusReporting
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ManagedBootImagesAzure
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| ManagedBootImagesvSphere
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| MutatingAdmissionPolicy
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| NewOLMWebhookProviderOpenshiftServiceCA
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| PreconfiguredUDNAddresses
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| VSphereMixedNodeEnv
(0 tests)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed)| Unconditionally Enabled
(Changed) |
| MachineConfigNodes
(13 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| PinnedImages
(5 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| ProcMountType
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| RouteAdvertisements
(4 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| UserNamespacesPodSecurityStandards
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| UserNamespacesSupport
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| VSphereMultiNetworks
(0 tests)| Disabled
(Changed)| Disabled
(Changed)| Enabled| Enabled| Enabled| Enabled |
| BareMetalLoadBalancer
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| CloudDualStackNodeIPs
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| DisableKubeletCloudCredentialProviders
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MultiArchInstallAWS
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| MultiArchInstallGCP
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| NodeDisruptionPolicy
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| PrivateHostedZoneAWS
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| VSphereDriverConfiguration
(5 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| VSphereMultiVCenters
(0 tests)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| SigstoreImageVerificationPKI
(0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled
(Changed)| Disabled
(Changed) |
| MachineAPIProviderOpenStack
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| PlatformOperators
(0 tests)| | | Enabled
(New)| Enabled
(New)| Enabled
(New)| Enabled
(New) |
| SELinuxChangePolicy
(0 tests)| | | Enabled
(New)| Enabled
(New)| | |
### New images
* [installer-altinfra](https://github.com/openshift/installer) git [71a467e2](https://github.com/openshift/installer/commit/71a467e27d0a681029dcc62b4469f6969ba7550b) `sha256:42d7ced095fc2375910f1a3805a26bbba40330e7e25b651dfde4ec3cd0420efa`
### Rebuilt images without code change
* [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws) git [425c1c5b](https://github.com/openshift/cloud-provider-aws/commit/425c1c5be39628421bdfb63caf25beb169307473) `sha256:81eda26016981ddc388530291ab647c7483750613bbbf660658a613607038f4d`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [088dcaf7](https://github.com/openshift/aws-encryption-provider/commit/088dcaf73f980b977ef4f5d2f99e2a93deb87eef) `sha256:1eddb3adea9c0528d446c48fd92d1064c702d17547ccbc293e6a9eefeea7d168`
* [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller) git [98ae311b](https://github.com/openshift/cloud-network-config-controller/commit/98ae311b854223a99e258d3c3369455d983de239) `sha256:032309f6379435f07ae06e242af405c9857fec83aafba02ca373909fe821f4c1`
* [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler) git [f746d442](https://github.com/openshift/kubernetes-autoscaler/commit/f746d442e69be1cf82cef1c473ddc0ab8a15d22f) `sha256:bd4ed167d785d20844809cbe05f23434a4f91e79b427e2a39bdf8934dbbf3ebf`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [8fde9c52](https://github.com/openshift/cluster-bootstrap/commit/8fde9c52fbb6b6044785ebae0751000b049fd0ed) `sha256:8bd2fa8e107385dfb7b9278a1734dfb50d630a1bdc2d727eacbb957f3826795e`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [1dbf0c7a](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/1dbf0c7a5d513dedcc18de0ee5fb34e18b8b53f2) `sha256:1693720c4da1931f6243036f1b8fdc4b20bd9f5060db8b860bdea057aa93ff4e`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [65981306](https://github.com/openshift/cluster-dns-operator/commit/659813065170f4e52f80b7a29bbab64bfa9aa172) `sha256:7cf242bf76de28b217e7baecdabc1257e9935a695b11464738c0290818939b26`
* [cluster-kube-cluster-api-operator](https://github.com/openshift/cluster-api-operator) git [3ec30377](https://github.com/openshift/cluster-api-operator/commit/3ec30377ffff951dc9c0fc2257d290e4b4958465) `sha256:cdc909b2e83fc6ef8bd8de011e3e17407545bfa5c754f6864ab5e3c7350e244e`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [4e514049](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/4e51404906f0648304e81414e0d299c52214f7a8) `sha256:8df5a6f0a7f6275b730e90ba8e3d82e961c8ea717d032958b56c10ae73a276ac`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [74852478](https://github.com/openshift/cluster-policy-controller/commit/748524784686a5f397490563882cbfb88f9acd01) `sha256:91c6477955ed65837b850a1d43711195162f5369d35fc01dbd7198dd9b66b1e1`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [c1c56b4c](https://github.com/openshift/cluster-update-keys/commit/c1c56b4cfb93588290de3734031b1a2d556788fc) `sha256:5b34d61f1f91b23196cfb25379c3dccb229a7a3ccc329f1c395a325cd64d3459`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [b09f487c](https://github.com/openshift/containernetworking-plugins/commit/b09f487cf0529098b2065ca169ae85ccec955796) `sha256:487803c692c9a2cc025ae25774c8470c8a3f12fa8fa6b96afc932ef02e5b617d`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [b09f487c](https://github.com/openshift/containernetworking-plugins/commit/b09f487cf0529098b2065ca169ae85ccec955796) `sha256:9633dfa12f4a452253400a00df7d54707d9df5412da12169683cc8f819cc6647`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [85353bb9](https://github.com/openshift/egress-router-cni/commit/85353bb936a289b8b817f7b437afacdf7458c667) `sha256:d92783dc42c498ee1f6a174b07b78006d9409078ec8bc77cef9c370428c6b8c1`
* [etcd](https://github.com/openshift/etcd) git [a5421dfe](https://github.com/openshift/etcd/commit/a5421dfe551a2e9c911a75062a4cdeb7473f5c26) `sha256:44bd6ff654f187b57e1b3b34f614d93121d83760b30f135655c4f228de0bf279`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [fbf4c1b2](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/fbf4c1b2b233806f8233b89abca2795a4cadef14) `sha256:401416caa83bde72817a371ea22e948fe093001b6b1b61b2fd91efa54583fb19`
* [haproxy-router](https://github.com/openshift/router) git [b41f9d05](https://github.com/openshift/router/commit/b41f9d05467fb7b3f6c2dafa6ac4b5e25164c0b6) `sha256:1b898e51c754913b77b2aac5f4ab89f6a784acc1b7dc98c374a4bd35f052fd88`
* [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver) git [176b6ef1](https://github.com/openshift/ibm-vpc-block-csi-driver/commit/176b6ef1136c45b8e3cb24a48458a251deca99bc) `sha256:b615ec16f282445b1f1aed7418ac545119c1eaa9e4f2cc9d4a66f3743802896b`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [989bd874](https://github.com/openshift/machine-api-provider-ibmcloud/commit/989bd87446d6fcbb2d7db20c90224621fac6ddb4) `sha256:a9bcb5e17256fa77be5e7b3a1d0e965d6d076eb2361c9a00d272957b5e34e0b1`
* [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt) git [3f4542ec](https://github.com/openshift/cloud-provider-kubevirt/commit/3f4542ecd17fb0e47da4c6d9bceb076b98fb314b) `sha256:b833f2a5a7b805f43581afbf167a072f39357d41c7f968d86a8d063e14f83268`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [a336f0b5](https://github.com/openshift/cluster-api-provider-libvirt/commit/a336f0b5f7ee99c418aaab3d511707bd0064bd56) `sha256:fd23f5afd0be71797fcbfa0bb53976fdaede050ea71cd32f242c7bc708e5b682`
* [multus-cni](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:25055391761d64bb85f6b06ee0b90fd02c096a0c829ba927ef026b34344c0de3`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [cf0f68ec](https://github.com/openshift/multus-cni/commit/cf0f68ec2b5fe9bc72d0da325e02cf63968747fe) `sha256:e4168167d032c0e76c5940df1e3a8decacb5f65415e6627eb2cf620eebe386a4`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [391c1b03](https://github.com/openshift/route-override-cni/commit/391c1b0361e17c5718508810f0bdb6ff66ae6e81) `sha256:485084df9d8605e56e458dd31898d1f4ebab9e46e124ae94a1648e633f55c57b`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [45624b63](https://github.com/openshift/whereabouts-cni/commit/45624b6383012d7b69409635daa8e4d455da6e16) `sha256:fb5c1aa88b24f257a970f6cf79d5151a43d807fd855eb88e1a0d97ffdb306e20`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [5ec8c6bd](https://github.com/openshift/network-metrics-daemon/commit/5ec8c6bde236feab19525c2d84f7d55f430f9e2b) `sha256:f22d42e8e9b22f8090f78046209d1fd6232109965245bc54d79d9de5b835172b`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [db1f264a](https://github.com/openshift/cloud-provider-nutanix/commit/db1f264a7b04784e5f671e61cda0609695e555bb) `sha256:0d26261027ee0b47237745116b2ad1246f47b035bb6676182833f1fbd3d8e059`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [75914068](https://github.com/openshift/oauth-apiserver/commit/75914068d66a8b5502906526942c2423bec86f7a) `sha256:37866e2d2beda5bcc53633231ca36e0726ca48336eb630b958c96256edeb4b30`
* [ovirt-csi-driver](https://github.com/openshift/ovirt-csi-driver) git [1db726a9](https://github.com/openshift/ovirt-csi-driver/commit/1db726a940d5ec150fd185a215f1368990653082) `sha256:636ff442f304fdbb22f1b2dee1e0f2e1308b2ca528280387b690ddaa4c48296c`
* [ovirt-csi-driver-operator](https://github.com/openshift/ovirt-csi-driver-operator) git [76db379d](https://github.com/openshift/ovirt-csi-driver-operator/commit/76db379d075fdae94ca604f3fa83b0612b36ef8d) `sha256:3ee426ea9f866ffecdb8f5acd88828bd168e9d81a18c1b997f46e1ab26ac7352`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [f681413d](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/f681413d902e6634afd9d4ae80fd3b6e915f6585) `sha256:e0ee864624bf0867481eb8481e49f3cbdbf20a64178d4c1dda4a76968042452f`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [a2346ca5](https://github.com/openshift/prometheus-alertmanager/commit/a2346ca5bd71f535399435cd70a8e9519e521c4b) `sha256:bc17e26da9cd64b89c7c7a143e1e0bf25fe364b644bda97ad67ab79767fa5ae5`
* [route-controller-manager](https://github.com/openshift/route-controller-manager) git [bc97534a](https://github.com/openshift/route-controller-manager/commit/bc97534a12a7a6bac096e4ed488b29535c8d4f33) `sha256:a86d4da1ec72394e91afe4f27c6e2b2482e0fba38700b3fd3633f12d3c5f0c90`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [4dfa6916](https://github.com/openshift/service-ca-operator/commit/4dfa6916f984d0fd7188380edc88b250738f07f7) `sha256:f427dd81a8bf5c2c4db98829840ac787079d429ca8567d5d1a5f365c671056ec`