# 4.21.16

Created: 2026-05-14 10:50:57 +0000 UTC

Image Digest: `sha256:5883651d854e5056a10052cc1b4cf319387b7d96f9fa668e385a49659177264b`


## Changes from 4.21.15

### Components

* Kubectl 1.34.1
* Kubernetes upgraded from 1.34.6 to 1.34.7
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260423-0


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [e5713826](https://github.com/openshift/assisted-installer-agent/commit/e57138265957c81b33d3ac13078d35f6ca07069d) `sha256:2e4af264a75a29439a7e56cb5429d302da3d8ed6433769a0b6426814d7ad230d`
* [docker-builder](https://github.com/openshift/builder) git [48fce231](https://github.com/openshift/builder/commit/48fce231bac118a63992f466acc8b29a29e1ddde) `sha256:3ad7e974983ea4c90610bd20854a5cc351b26cd225264c97f57f1ac934adccfb`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:2cacf34a5f292d0a84263140f8061289102108c7905daf01842052e72992bd2c`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [ff276c00](https://github.com/openshift/ironic-agent-image/commit/ff276c00e345b9cb9298ce9dbdd7f19a8b14dbce) `sha256:44253cb9330862adb6a9f442dc3059993f73886b6e57dfe5aab3f43290e25ef6`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [707c2262](https://github.com/openshift/ironic-rhcos-downloader/commit/707c226243ac401f2994952fe0e55823511111b0) `sha256:e76e5178e737eeedbf7f815b26e7cbe3d802ce76a883b51f4cf7a37ca740dc4a`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [9a8e96a6](https://github.com/openshift/machine-os-images/commit/9a8e96a60bb6d8e3c86c2780fd4212e80f5d28e5) `sha256:07a3d3e4f77d952f5c51e508d5cb7c6971d23c700118749ed127109a6242d0b6`
* [metallb-frr](https://github.com/openshift/frr) git [c82bfaad](https://github.com/openshift/frr/commit/c82bfaad01b196e12f00622a9a609d87e0a56701) `sha256:ddc333602ac2457714015ee718a8674e3f6e805fd0589501d4d4d925eb40a191`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [908df025](https://github.com/openshift/monitoring-plugin/commit/908df0253d40b38864d24fc24de17f4598db24ba) `sha256:f22002b11b6d30170e041c2ad2fb69ef5259a45abe062465d77f260d8a627706`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:2ec469bebe6c9dff060fc2a224d97e1d8dabd1e867d9ac6404cb7e2ac36e5cb9`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [268037d7](https://github.com/openshift/networking-console-plugin/commit/268037d76fd97d29f39eae2f25f0a2b2910cb30e) `sha256:e9f3cfabec5b3ddfc5ee87cc8814da85bfd5dc9466b4b69a7128c5290c0fc00b`
* [rhel-coreos-10](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:5645ae8756597fc163f41c651e31c31dc1e698cbb8f694b1da5052489d44c074`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:6e8fc105cbe3387cef1ad98b25a797dd6fc5081d6986b2255d5975b30d1dfa62`
* [tools](https://github.com/openshift/oc) git [9d9df34c](https://github.com/openshift/oc/commit/9d9df34c46c9deba8c291a2a084de5724c0bd820) `sha256:955cbfbcf74e1c27f2ecbbdf024137c9bb886c98a60019f150b3cc3585ad88b3`


### [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui/tree/495e850ffeeb304e2f7bdff8dcd86f9c54ee7873)

* [OCPBUGS-85261](https://issues.redhat.com/browse/OCPBUGS-85261): [release-4.21] OCPBUGS-84147 | [Below the sea UI] Leaky Abstraction: Transient 500 errors exposed during host binding process (#3684) [#3684](https://github.com/openshift-assisted/assisted-installer-ui/pull/3684)
* Remove 2 node arbiter option from the control plane dropdown option (#3680) [#3680](https://github.com/openshift-assisted/assisted-installer-ui/pull/3680)
* [OCPBUGS-84608](https://issues.redhat.com/browse/OCPBUGS-84608), [OCPBUGS-84830](https://issues.redhat.com/browse/OCPBUGS-84830), [OCPBUGS-84993](https://issues.redhat.com/browse/OCPBUGS-84993), [OCPBUGS-85009](https://issues.redhat.com/browse/OCPBUGS-85009), [OCPBUGS-85039](https://issues.redhat.com/browse/OCPBUGS-85039): Bump axios to ^1.15.1 (#3690) [#3690](https://github.com/openshift-assisted/assisted-installer-ui/pull/3690)
* [MGMT-24152](https://issues.redhat.com/browse/MGMT-24152): UI allows editing pull secret in draft cluster (#3674) [#3674](https://github.com/openshift-assisted/assisted-installer-ui/pull/3674)
* [Full changelog](https://github.com/openshift-assisted/assisted-installer-ui/compare/15bd67325593aaaf1048128f3d7a4d41e12b6ddb...495e850ffeeb304e2f7bdff8dcd86f9c54ee7873)


### [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider/tree/887615ffa8a595ee3693e92fa56db4dd30f20f73)

* [OCPBUGS-80711](https://issues.redhat.com/browse/OCPBUGS-80711): Bump google.golang.org/grpc to v1.79.3 [#40](https://github.com/openshift/aws-encryption-provider/pull/40)
* [Full changelog](https://github.com/openshift/aws-encryption-provider/compare/19e7b623429799c9c549690a1b5ab499844411f9...887615ffa8a595ee3693e92fa56db4dd30f20f73)


### [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure/tree/ebf58aac3fc6746fe2037f2166f1226b73b424f4)

* [OCPBUGS-80740](https://issues.redhat.com/browse/OCPBUGS-80740): Bump google.golang.org/grpc to v1.79.3 [#383](https://github.com/openshift/cluster-api-provider-azure/pull/383)
* [Full changelog](https://github.com/openshift/cluster-api-provider-azure/compare/5d6af81d7ab9b289c3def6c0350313118d63923a...ebf58aac3fc6746fe2037f2166f1226b73b424f4)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/aed3ad0d7780188dbfb7ae67a5d69118b7d74556)

* [OCPBUGS-85285](https://issues.redhat.com/browse/OCPBUGS-85285): check for node name in waitForDiskManagedByTobeRemoved [#147](https://github.com/openshift/azure-disk-csi-driver/pull/147)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/97fcceba8ad49fcf07dad02b83f1b0da3949aeb4...aed3ad0d7780188dbfb7ae67a5d69118b7d74556)


### [azure-service-operator](https://github.com/openshift/azure-service-operator/tree/5e84c83176d7630f70802b35cb10cdf2b60fd6d3)

* [OCPBUGS-80713](https://issues.redhat.com/browse/OCPBUGS-80713): Bump google.golang.org/grpc to v1.79.3 [#28](https://github.com/openshift/azure-service-operator/pull/28)
* [Full changelog](https://github.com/openshift/azure-service-operator/compare/482c3a3f0b4e2668f092553585d15c3024016c4e...5e84c83176d7630f70802b35cb10cdf2b60fd6d3)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/9a415c497e70d5234c473325cf17aeef78c03544)

* [OCPBUGS-84225](https://issues.redhat.com/browse/OCPBUGS-84225): ibmcloud: bump vpc-go-sdk and capibm [#10514](https://github.com/openshift/installer/pull/10514)
* [Full changelog](https://github.com/openshift/installer/compare/a8bea03c72112c0f859af3694676da9483baec99...9a415c497e70d5234c473325cf17aeef78c03544)


### [cluster-capi-controllers](https://github.com/openshift/cluster-api/tree/9dd5eba07922bb84bf1ec2b16cbbedd6ad195874)

* [OCPBUGS-80749](https://issues.redhat.com/browse/OCPBUGS-80749): Bump google.golang.org/grpc to v1.79.3 [#293](https://github.com/openshift/cluster-api/pull/293)
* [Full changelog](https://github.com/openshift/cluster-api/compare/a957484acb353220da0d3062867168d24494a2b6...9dd5eba07922bb84bf1ec2b16cbbedd6ad195874)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/0fb275ca52c86245ce8914cede6c6724cbb31316)

* [OCPBUGS-80753](https://issues.redhat.com/browse/OCPBUGS-80753): Bump google.golang.org/grpc to v1.79.3 [#550](https://github.com/openshift/cluster-capi-operator/pull/550)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/80728a61725bb6ec7f4515c2ac2b3a249f3c5742...0fb275ca52c86245ce8914cede6c6724cbb31316)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/10012737e9b23528357c130184ef4d890ae8ea33)

* [OCPBUGS-84336](https://issues.redhat.com/browse/OCPBUGS-84336): fix(tnf): align Pacemaker kubelet and etcd retry pacing [#1604](https://github.com/openshift/cluster-etcd-operator/pull/1604)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/5c38f917a43058c73479673a05d4e782524a3a41...10012737e9b23528357c130184ef4d890ae8ea33)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/a6f7d8ab2efb5e37d848620d5fc8db37a3cf5d58)

* [OCPBUGS-85016](https://issues.redhat.com/browse/OCPBUGS-85016): e2e: Add irqbalance StartLimitBurst >= 100 config test [#1505](https://github.com/openshift/cluster-node-tuning-operator/pull/1505)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/9782f0fb3824689caeaa9c48a54dd58d39cdedb4...a6f7d8ab2efb5e37d848620d5fc8db37a3cf5d58)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/03bedb913bce9c7deabf7868e5cbefc57cf3490b)

* [OCPBUGS-80769](https://issues.redhat.com/browse/OCPBUGS-80769): Bump google.golang.org/grpc to v1.79.3 [#197](https://github.com/openshift/cluster-olm-operator/pull/197)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/e8a985a1cd375c1d83e951a1586d11203a1204e2...03bedb913bce9c7deabf7868e5cbefc57cf3490b)


### [console](https://github.com/openshift/console/tree/6bedf3939d52ca255bc02924daf69c2f916ce487)

* NO-JIRA: enable multi-architecture yarn builds [#16420](https://github.com/openshift/console/pull/16420)
* [OCPBUGS-85040](https://issues.redhat.com/browse/OCPBUGS-85040): Remove PII from events [#16401](https://github.com/openshift/console/pull/16401)
* [OCPBUGS-84967](https://issues.redhat.com/browse/OCPBUGS-84967): Add bottom pagination to ConsoleDataView for mobile responsiveness [#16396](https://github.com/openshift/console/pull/16396)
* [OCPBUGS-84858](https://issues.redhat.com/browse/OCPBUGS-84858): Fix ConsoleDataView filter order: Name and Label shoul… [#16386](https://github.com/openshift/console/pull/16386)
* [Full changelog](https://github.com/openshift/console/compare/26094cc20bd77a26431e8ce3cebed61f91493557...6bedf3939d52ca255bc02924daf69c2f916ce487)


### [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs/tree/ebfd16d227b3af490f4327a8a040f6c9657a3b01)

* [OCPBUGS-80783](https://issues.redhat.com/browse/OCPBUGS-80783): CVE-2026-33186: bump google.golang.org/grpc v1.79.3 [#176](https://github.com/openshift/csi-driver-nfs/pull/176)
* [Full changelog](https://github.com/openshift/csi-driver-nfs/compare/49f2d86fb6172d9d8909ed0f70cb3bc71a4f7c01...ebfd16d227b3af490f4327a8a040f6c9657a3b01)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/ac55db6fcd6f53ef1c26e3d85c511dbb18bc4d73)

* [OCPBUGS-80785](https://issues.redhat.com/browse/OCPBUGS-80785): Bump google.golang.org/grpc to v1.79.3 [#132](https://github.com/openshift/csi-external-provisioner/pull/132)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/f18190fb8aa26bdcb4ceb57cdd6cf77b5488ed58...ac55db6fcd6f53ef1c26e3d85c511dbb18bc4d73)


### [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp/tree/fe230b8a6407a06e1be9d6994a92ac8c5a43237d)

* [OCPBUGS-80805](https://issues.redhat.com/browse/OCPBUGS-80805): Bump google.golang.org/grpc to v1.79.3 [#287](https://github.com/openshift/cluster-api-provider-gcp/pull/287)
* [Full changelog](https://github.com/openshift/cluster-api-provider-gcp/compare/e2d0c20eab31c513764507a6d8774de2aef3db2c...fe230b8a6407a06e1be9d6994a92ac8c5a43237d)


### [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp/tree/49b8eb1bbdd364b8144dee270a88cace41271e4d)

* [OCPBUGS-80828](https://issues.redhat.com/browse/OCPBUGS-80828): Bump gRPC-Go package for CVE fix [#154](https://github.com/openshift/machine-api-provider-gcp/pull/154)
* [Full changelog](https://github.com/openshift/machine-api-provider-gcp/compare/91f71c9adfd6b715a6ef340bb43ea5e1a8b44245...49b8eb1bbdd364b8144dee270a88cace41271e4d)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/ae1604b0cb7cc72e353d0b8311c6d62c34143661)

* "OCPBUGS-83608: Bump to k8s v1.34.7" [#2647](https://github.com/openshift/kubernetes/pull/2647)
* [Full changelog](https://github.com/openshift/kubernetes/compare/dfffacdf0ad6e9aa75664c7b3167dd2ddbfc17ba...ae1604b0cb7cc72e353d0b8311c6d62c34143661)


### [insights-operator](https://github.com/openshift/insights-operator/tree/2bc8825afccf2456f95d8bfea097a528d072bd11)

* [OCPBUGS-80818](https://issues.redhat.com/browse/OCPBUGS-80818): Bump google.golang.org/grpc to v1.79.3 [#1285](https://github.com/openshift/insights-operator/pull/1285)
* [Full changelog](https://github.com/openshift/insights-operator/compare/687578c31a43faaeb971f99344e2acfd94a8abf6...2bc8825afccf2456f95d8bfea097a528d072bd11)


### [ironic](https://github.com/openshift/ironic-image/tree/6e93d7a042c96f1db6307549d348da8f6f89b06a)

* [OCPBUGS-84853](https://issues.redhat.com/browse/OCPBUGS-84853): Bump pyasn to 0.5.1-5 [#823](https://github.com/openshift/ironic-image/pull/823)
* [OCPBUGS-82298](https://issues.redhat.com/browse/OCPBUGS-82298): Bump sushy hash to include Supermicro ARS-111GL-NHR fix [#840](https://github.com/openshift/ironic-image/pull/840)
* [Full changelog](https://github.com/openshift/ironic-image/compare/d23a6091f362d46421276749a5faa9871dbc20e7...6e93d7a042c96f1db6307549d348da8f6f89b06a)


### [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server/tree/ff4f3e2a6d2b0e8a860831b98733cff152cfddd3)

* [OCPBUGS-80716](https://issues.redhat.com/browse/OCPBUGS-80716): Bump google.golang.org/grpc to v1.79.3 [#61](https://github.com/openshift/kubernetes-metrics-server/pull/61)
* [Full changelog](https://github.com/openshift/kubernetes-metrics-server/compare/ed76a5e8051caae6519342ae189088b8ddd09979...ff4f3e2a6d2b0e8a860831b98733cff152cfddd3)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/66a56d4b66a1f36655a5726a0b60e9bfff538db2)

* [OCPBUGS-85286](https://issues.redhat.com/browse/OCPBUGS-85286): Fix Admin Ack message for azure/vsphere clusters upgrading to 4.22 [#6017](https://github.com/openshift/machine-config-operator/pull/6017)
* [OCPBUGS-85126](https://issues.redhat.com/browse/OCPBUGS-85126): Fix units rollback if update failure [#6008](https://github.com/openshift/machine-config-operator/pull/6008)
* [OCPBUGS-84941](https://issues.redhat.com/browse/OCPBUGS-84941): Fix ssh and password rollbacks [#5987](https://github.com/openshift/machine-config-operator/pull/5987)
* [OCPBUGS-84970](https://issues.redhat.com/browse/OCPBUGS-84970): Fix encapsulated IGN version [#5996](https://github.com/openshift/machine-config-operator/pull/5996)
* [OCPBUGS-84878](https://issues.redhat.com/browse/OCPBUGS-84878): Update AMI Whitelist [#5915](https://github.com/openshift/machine-config-operator/pull/5915)
* [OCPBUGS-84253](https://issues.redhat.com/browse/OCPBUGS-84253): improve JSON unmarshalling for secret decoding [#5877](https://github.com/openshift/machine-config-operator/pull/5877)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/bc74feed8e96d179347b8ee0c102280c050d5e24...66a56d4b66a1f36655a5726a0b60e9bfff538db2)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/f4f439d4ce40c1175188c81591284dcc9fe6facf)

* UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.13 into release-4.21 [#394](https://github.com/openshift/cluster-api-provider-openstack/pull/394)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/e1c0f2f9e2e70843d5c42dfe3bddf70530a97b0f...f4f439d4ce40c1175188c81591284dcc9fe6facf)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/bed9d823d441b1722e023f9f7f9b2cd56f79e2b2)

* [OCPBUGS-80847](https://issues.redhat.com/browse/OCPBUGS-80847), [OCPBUGS-80848](https://issues.redhat.com/browse/OCPBUGS-80848), [OCPBUGS-80849](https://issues.redhat.com/browse/OCPBUGS-80849): Bump google.golang.org/grpc to v1.79.3 for CVE-2026-33186[Release-4.21] [#1289](https://github.com/openshift/operator-framework-olm/pull/1289)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/d7462e05f60c0ad13a2dce6ea516cbc624cae203...bed9d823d441b1722e023f9f7f9b2cd56f79e2b2)


### [prometheus](https://github.com/openshift/prometheus/tree/78974c3bbd559d91e2c9cdd627c9ffdeca4f94f3)

* [OCPBUGS-80855](https://issues.redhat.com/browse/OCPBUGS-80855): Bump google.golang.org/grpc to v1.79.3 [#309](https://github.com/openshift/prometheus/pull/309)
* [Full changelog](https://github.com/openshift/prometheus/compare/59769d912ceab62bf0b7325c505ed463e64ab734...78974c3bbd559d91e2c9cdd627c9ffdeca4f94f3)


### [telemeter](https://github.com/openshift/telemeter/tree/b79b872a65edd845891db70f6c9a184458a178da)

* [OCPBUGS-80868](https://issues.redhat.com/browse/OCPBUGS-80868): Bump google.golang.org/grpc to v1.79.3 [#589](https://github.com/openshift/telemeter/pull/589)
* [OCPBUGS-81817](https://issues.redhat.com/browse/OCPBUGS-81817): [release-1.21] Fix CVE-2026-34986 [#593](https://github.com/openshift/telemeter/pull/593)
* [Full changelog](https://github.com/openshift/telemeter/compare/a54acdfeb2d62c79516d099e37f3319205c903a7...b79b872a65edd845891db70f6c9a184458a178da)


### [tests](https://github.com/openshift/origin/tree/61dad4d6acf7089de0a1dca1aa0aba32bcab03ff)

* [OCPBUGS-84655](https://issues.redhat.com/browse/OCPBUGS-84655): fix openshift/network/third-party suite selecting zero tests [#31091](https://github.com/openshift/origin/pull/31091)
* [OCPBUGS-84978](https://issues.redhat.com/browse/OCPBUGS-84978): Skip image-registry operator tests for Libvirt platform in upgrade jobs. [#31123](https://github.com/openshift/origin/pull/31123)
* [OCPBUGS-84947](https://issues.redhat.com/browse/OCPBUGS-84947): test: add monitortest to detect pods stuck in Pending state [#31117](https://github.com/openshift/origin/pull/31117)
* [OCPBUGS-84947](https://issues.redhat.com/browse/OCPBUGS-84947): Add [Late] test to collect CRI-O goroutine dumps via SIGUSR1 [#31118](https://github.com/openshift/origin/pull/31118)
* [Full changelog](https://github.com/openshift/origin/compare/34379498817f3123c8e43433e7f1b2b7da6be429...61dad4d6acf7089de0a1dca1aa0aba32bcab03ff)


### [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere/tree/3adfe2b56b259b2d27906d8772354f817e338da5)

* [OCPBUGS-80875](https://issues.redhat.com/browse/OCPBUGS-80875): Bump google.golang.org/grpc to v1.79.3 [#102](https://github.com/openshift/cluster-api-provider-vsphere/pull/102)
* [Full changelog](https://github.com/openshift/cluster-api-provider-vsphere/compare/6626b2998e29189d1ff031c0a589f9c3413feac4...3adfe2b56b259b2d27906d8772354f817e338da5)