# 4.21.8

Created: 2026-03-26 15:00:10 +0000 UTC

Image Digest: `sha256:940b384ee0fe2d29e0aa2317c338c132887b08350732d4959a1fbc5febf9e733`


## Changes from 4.21.2

### Components

* Kubectl 1.34.1
* Kubernetes upgraded from 1.34.2 to 1.34.5
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS upgraded from 9.6.20260210-0 to 9.6.20260324-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| IngressControllerDynamicConfigurationManager <br/> (0 tests)| Disabled| Disabled| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed) |
| KMSEncryptionProvider <br/> (0 tests)| Disabled| Disabled| Enabled| Enabled| Disabled<br/>(Changed)| Disabled<br/>(Changed) |
| KMSEncryption <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [1574e1fa](https://github.com/openshift/assisted-service/commit/1574e1fa7ee0118e3c2a6ca9653f4c38e6c888ac) `sha256:ee64c1f14ae6605b2988fdd63ad68c827606846c0d9071479f99df7a7c498175`
* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [e5713826](https://github.com/openshift/assisted-installer-agent/commit/e57138265957c81b33d3ac13078d35f6ca07069d) `sha256:a1fc109a7e87cc7e8431d04a5fe3873e1ac5240a574ee0e740967a854b71d5a4`
* [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui) git [479a68f3](https://github.com/openshift-assisted/assisted-installer-ui/commit/479a68f329b4c4088a999a6f4f1c4a078a9b4e93) `sha256:011860a4fda804e011836f4e81593397fdfd231bd0a4ab8886fd2ae1996aeeff`
* [apiserver-network-proxy](https://github.com/openshift/apiserver-network-proxy) git [35ba137a](https://github.com/openshift/apiserver-network-proxy/commit/35ba137ab96d01f0b8df729ff5ad93ac2fdad800) `sha256:8ec79e4c20daedfe28db8df9b2bdd852de25496292c327c2418a44e5b3613c4e`
* [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws) git [10ceef5e](https://github.com/openshift/cluster-api-provider-aws/commit/10ceef5e6f6d0cb79a3345de4fd8851f6300205c) `sha256:a96927776251c7c9d795aecbaf4f235407ea5bb309bd64081d20e6a310f369a6`
* [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver) git [57eebffc](https://github.com/openshift/aws-ebs-csi-driver/commit/57eebffcc8abbbbb6edcf3b536b769d97e31819c) `sha256:f53a3256cbd70eb305c61d40ce29e5a8566e4967cb44e33d1f36e7d5f07f6d64`
* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [ff9c8d4e](https://github.com/openshift/aws-karpenter-provider-aws/commit/ff9c8d4e8fdc55d3e60c6add0942c018826ae870) `sha256:2ddb2c0c4359f73ba6c7e341695a393511e1a8541838ebd51f3b3c8159b7b363`
* [aws-kms-encryption-provider](https://github.com/openshift/aws-encryption-provider) git [19e7b623](https://github.com/openshift/aws-encryption-provider/commit/19e7b623429799c9c549690a1b5ab499844411f9) `sha256:33739b6a8bdad8c353b5d9aff06b1f0e407fe64ee1cd20d034d868c04d5efe5b`
* [aws-machine-controllers](https://github.com/openshift/machine-api-provider-aws) git [938565c9](https://github.com/openshift/machine-api-provider-aws/commit/938565c9f796fba385c0978a5ae1cc0a79f0f857) `sha256:c140b667eb73e5bb4aa27c5f563d8a4526c25e7dc8fa4a7abbe83fb6e13f118c`
* [aws-pod-identity-webhook](https://github.com/openshift/aws-pod-identity-webhook) git [5cd42ed1](https://github.com/openshift/aws-pod-identity-webhook/commit/5cd42ed1e5151f45f0134593e9cfebdb6517b385) `sha256:d875b1090cafec788acf8b2955bbd075be077c0b842fcc08b34702b21cdd1a02`
* [azure-cloud-controller-manager](https://github.com/openshift/cloud-provider-azure) git [83b3f9ec](https://github.com/openshift/cloud-provider-azure/commit/83b3f9ec7df408c3d53d5f8e6fe84e0bdd4398e8) `sha256:5d1fa3e454e8bc2199ed716e063cfd65906aca3f5a36cefad3b8befe602ecd71`
* [azure-cloud-node-manager](https://github.com/openshift/cloud-provider-azure) git [83b3f9ec](https://github.com/openshift/cloud-provider-azure/commit/83b3f9ec7df408c3d53d5f8e6fe84e0bdd4398e8) `sha256:3131e924d40b58fb182bc7c16c774e9d8d78d9cea6dc8f41a99637d1a96515a2`
* [azure-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-azure) git [5d6af81d](https://github.com/openshift/cluster-api-provider-azure/commit/5d6af81d7ab9b289c3def6c0350313118d63923a) `sha256:ce0ba8221e9f68135757918591f717c3ef4f07f9f312c16ae426adc307f6527c`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [c77d75f9](https://github.com/openshift/azure-file-csi-driver/commit/c77d75f90b7f84dfc25ba3439bc5eff87c3a2755) `sha256:4cace59669892d23bae437a9c2ce2f795e4bb000692c4bca874bdb2d10e9206c`
* [azure-kms-encryption-provider](https://github.com/openshift/azure-kubernetes-kms) git [fe1d311b](https://github.com/openshift/azure-kubernetes-kms/commit/fe1d311ba5aadc40b5f48d47d43175157a73c881) `sha256:d7b7cffeb9d9324f88730ce9de336e3d70e9e73f15a3575b1f6f151baf2e6434`
* [azure-machine-controllers](https://github.com/openshift/machine-api-provider-azure) git [b8b8cb1c](https://github.com/openshift/machine-api-provider-azure/commit/b8b8cb1c5af7d2a3ef9a4a99a0739a2166a7932c) `sha256:f9a66e9fcf482a5eb1e58b8b74a2e549c5eeed45f1324837754ed708c14ff3bc`
* [azure-service-operator](https://github.com/openshift/azure-service-operator) git [17e57462](https://github.com/openshift/azure-service-operator/commit/17e574628ee7ef8aa694cfc0ab5e5232b651fbf8) `sha256:1616623dfe5bdc7a3ed919746c7301921366c7f16143926750625316063d9a44`
* [azure-workload-identity-webhook](https://github.com/openshift/azure-workload-identity) git [3f2a6e0d](https://github.com/openshift/azure-workload-identity/commit/3f2a6e0d1ea68af321f9674b0b097939be7d2014) `sha256:5cb8daef420d2981b4f43fb59d42d3844ee0dbbe35d6855babb02dab04d09eda`
* [baremetal-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-metal3) git [659138fe](https://github.com/openshift/cluster-api-provider-metal3/commit/659138fef3abd4c71b0b01fa1279146745699a5a) `sha256:9c3a4ddab523f78c6593d4154b634aeb0ce419f4ef0cc4f13950db585bdcc29f`
* [baremetal-machine-controllers](https://github.com/openshift/cluster-api-provider-baremetal) git [4e6a729c](https://github.com/openshift/cluster-api-provider-baremetal/commit/4e6a729c5ac8fde8859db5830def262dfdee28ea) `sha256:e9fb72d8f975c112596e29cd920186e557a33c1245b3833e4554ef73b2d3a642`
* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [dec12ba6](https://github.com/openshift/cluster-autoscaler-operator/commit/dec12ba632a4810b4ff43a9172f462a1dd291e44) `sha256:2a936cdd7827ae8bdf3976349dfc10847975d52ff6550cec13c80cdf4c41d97e`
* [cluster-bootstrap](https://github.com/openshift/cluster-bootstrap) git [dc0d4a5c](https://github.com/openshift/cluster-bootstrap/commit/dc0d4a5cdaf8a7477cab584208dc99352f46efe2) `sha256:5deb4077965620a4ed0c30bb192185965ce5b6c385b7d645a4064659367daccb`
* [cluster-capi-controllers](https://github.com/openshift/cluster-api) git [a957484a](https://github.com/openshift/cluster-api/commit/a957484acb353220da0d3062867168d24494a2b6) `sha256:f898bee3061baedaadd7797c7ca12339590055f1f796ece01edcc9b45d2b0eca`
* [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator) git [80728a61](https://github.com/openshift/cluster-capi-operator/commit/80728a61725bb6ec7f4515c2ac2b3a249f3c5742) `sha256:f8106b4cbf89fdeeaa32ddd07d1f2b615b2cdaa889a231f96646005f7a7015c0`
* [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator) git [6148c0cc](https://github.com/openshift/cluster-cloud-controller-manager-operator/commit/6148c0cca626bcf0bfebcc6dd0c77a41944cba87) `sha256:255f0657551058d38fe9fc3dd1bde83f96ac7d72e7dabb1ff09369c55da44940`
* [cluster-config-operator](https://github.com/openshift/cluster-config-operator) git [1eb450a3](https://github.com/openshift/cluster-config-operator/commit/1eb450a3a2456f6e3fe3d727208b5f7b0dd35aba) `sha256:6b0fc7c14e4daa819569bb67c8915bd043ae1d2b39145c49de3c12ad4ca9f103`
* [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator) git [2dde33fb](https://github.com/openshift/cluster-control-plane-machine-set-operator/commit/2dde33fb94aae47b460a5f6a672d06c9ee4225d8) `sha256:54008ea62db81461cfe041ff51480816e3c40bc1600c07fec5b90d6a0635461e`
* [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator) git [43ad01e8](https://github.com/openshift/cluster-csi-snapshot-controller-operator/commit/43ad01e88038be54792f16f0d692b96da1244404) `sha256:ec927e2c686f92562046f28675678a80aeedc974128b7af28d8756a7c1f1e592`
* [cluster-dns-operator](https://github.com/openshift/cluster-dns-operator) git [41a53fed](https://github.com/openshift/cluster-dns-operator/commit/41a53fed36e6e99c7c9ceb3a699c3547ee5d9bb9) `sha256:941249ee2dd637ac9309621afa155161543599257f37c132708cb7646aa6295f`
* [cluster-image-registry-operator](https://github.com/openshift/cluster-image-registry-operator) git [b2dfc3bb](https://github.com/openshift/cluster-image-registry-operator/commit/b2dfc3bba3dfd8dba90918a4a3be74deb3c548dd) `sha256:74c948dc43777de9d36a49cb9f7108defcd0f69b4002348504cf0243c6928916`
* [cluster-kube-controller-manager-operator](https://github.com/openshift/cluster-kube-controller-manager-operator) git [395de967](https://github.com/openshift/cluster-kube-controller-manager-operator/commit/395de96705749de9c6a5f25747b9d5c3d5f65a8f) `sha256:02af08741547d30648c8d180a6b9431fe81f1215bcb8b62b9df59efae8f1745e`
* [cluster-kube-storage-version-migrator-operator](https://github.com/openshift/cluster-kube-storage-version-migrator-operator) git [8a42beeb](https://github.com/openshift/cluster-kube-storage-version-migrator-operator/commit/8a42beebd580bd2e241aa6d93860c09e907f2407) `sha256:02874ef814fc7ac6a608fba34b4659f3c9694b29841e6e4376706665817e2532`
* [cluster-machine-approver](https://github.com/openshift/cluster-machine-approver) git [d864813c](https://github.com/openshift/cluster-machine-approver/commit/d864813cd3ab01c0f975b2bf41e9046948f0afa1) `sha256:468dd8f93bdf263f2607511384e92b9468f4a50517fcdd8fb1dc575d0b4dc34f`
* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [2617a201](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/2617a201bb3607192a9f82faa18384676f611e3c) `sha256:4d7380cc4e819d24c26f37288975d7ed9a17b613f4f411e2a8c583b584d718fd`
* [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) git [8b775487](https://github.com/openshift/cluster-policy-controller/commit/8b775487512fb543bff470ff1042bd3ac31b29be) `sha256:844be298e741f399551af53193fc1f7a75d20e6c8b42dd38c28b2ef41264aaf4`
* [cluster-samples-operator](https://github.com/openshift/cluster-samples-operator) git [11ed1942](https://github.com/openshift/cluster-samples-operator/commit/11ed1942dbbf7a8334862b3d598a967e9b92aa77) `sha256:1cf439ca0d409ba9e0c6a0e4dfcb55537607bf34c177630f9400780e46f268ab`
* [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator) git [dd362d76](https://github.com/openshift/cluster-storage-operator/commit/dd362d767167a8ac1889d2ee2a719cf68fac0522) `sha256:27d4232fc3af1898543d1313f9267bb54736e527768042b4950ae767d3f51674`
* [cluster-update-keys](https://github.com/openshift/cluster-update-keys) git [b3cae8f2](https://github.com/openshift/cluster-update-keys/commit/b3cae8f22b51d9062d0ceb6ac9cf2f7651b4ce8f) `sha256:2170704d75b9a736b007107189e64a4c74250c0a3ec021d38e24bf531eb9d3dd`
* [configmap-reloader](https://github.com/openshift/configmap-reload) git [16114b8d](https://github.com/openshift/configmap-reload/commit/16114b8de20278b8f4b7a425ece6d35d53214773) `sha256:e03b2d7899811336c530c7d2782ad345dd655a935d091aa25c8df72d696beb86`
* [container-networking-plugins](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:dddd6a5ab06e5fefe5fa16e8be48aa39ebe58d318d9ba6eef889a38263410d1c`
* [containernetworking-plugins-microshift](https://github.com/openshift/containernetworking-plugins) git [747ad66c](https://github.com/openshift/containernetworking-plugins/commit/747ad66caa1109b2b490aebad01af42bd2d738f1) `sha256:949e90a98682ae9d1a9f4802d5feb2d95025ca57a7a87d3bc3ba86cc9c0005bb`
* [coredns](https://github.com/openshift/coredns) git [7486e9e4](https://github.com/openshift/coredns/commit/7486e9e4330c1e41d9a91e4673b7f2782efc112c) `sha256:c569abe94b0c47956d6b0931fc1992c9649fb24292c7885816228c6ca130da1c`
* [csi-driver-manila](https://github.com/openshift/cloud-provider-openstack) git [bf508c06](https://github.com/openshift/cloud-provider-openstack/commit/bf508c062084dc6dec20480f7d173f047ad4f2d6) `sha256:b1244ba3d4f6c4f08cc847c67eb09037cbce5561c0c6363c26bd0389a06f6d78`
* [csi-driver-nfs](https://github.com/openshift/csi-driver-nfs) git [49f2d86f](https://github.com/openshift/csi-driver-nfs/commit/49f2d86fb6172d9d8909ed0f70cb3bc71a4f7c01) `sha256:1e35efc00589abe5ac415090d3580c241f87fc1f2152075028bb9a9a2dfb5f74`
* [csi-external-attacher](https://github.com/openshift/csi-external-attacher) git [344669a2](https://github.com/openshift/csi-external-attacher/commit/344669a2189fecdf5471fdc9a1246dd751cb1afb) `sha256:a8374e8a95724dcbc372099adcdd04a871929cf1433e805f6bb64a9f8f165335`
* [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner) git [f18190fb](https://github.com/openshift/csi-external-provisioner/commit/f18190fb8aa26bdcb4ceb57cdd6cf77b5488ed58) `sha256:28b815c8fa80c4acfaadc4b682ee6c25b9c0970f63788c872047418f9aa4e893`
* [csi-external-resizer](https://github.com/openshift/csi-external-resizer) git [d880a1ec](https://github.com/openshift/csi-external-resizer/commit/d880a1ec6da02dbf61600ec7999266185ca9f784) `sha256:3823617229b7948b2a7347ba1e5fca5f06313f8f2cfb3d4d02c07652f4894ca9`
* [csi-external-snapshot-metadata](https://github.com/openshift/csi-external-snapshot-metadata) git [af250fdb](https://github.com/openshift/csi-external-snapshot-metadata/commit/af250fdbac8af84d9808a2892bfc911c04162115) `sha256:cd95dea4a2532bc93e26f56ee143d9dc2a2378e1ba3e07f085c10f2742705e2a`
* [csi-external-snapshotter](https://github.com/openshift/csi-external-snapshotter) git [9098db0e](https://github.com/openshift/csi-external-snapshotter/commit/9098db0e434e0d986eeadd2ebe69119540a550d1) `sha256:597bffb81128fbaddf428cc068861283530ce52ca20a6cb03e0cbe0badf01eb7`
* [csi-livenessprobe](https://github.com/openshift/csi-livenessprobe) git [78dacb7c](https://github.com/openshift/csi-livenessprobe/commit/78dacb7c661a62c78036c2737401afd3eb6fd04d) `sha256:9df8b58d8a1909593488b3388adce14fbe1275bde2b73ba9290aad53e8d16460`
* [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar) git [d29f3f7a](https://github.com/openshift/csi-node-driver-registrar/commit/d29f3f7a4aed4465e7e40e323bd3c0e0d9871e4c) `sha256:8f8dbac58b57fea272d023aee80634cd79e0c99f70f6197ba958cf5c642d1e52`
* [csi-snapshot-controller](https://github.com/openshift/csi-external-snapshotter) git [9098db0e](https://github.com/openshift/csi-external-snapshotter/commit/9098db0e434e0d986eeadd2ebe69119540a550d1) `sha256:95105056477d87c82e5690647de618af1df00f58a9d0f0c87edab7a185d9857c`
* [docker-registry](https://github.com/openshift/image-registry) git [602f51c7](https://github.com/openshift/image-registry/commit/602f51c795dcdcd71c75f6abfe79dc0424a0476a) `sha256:437f1b1ab57ee9db467c2d04133da4f0ac96b8ac33ab501536e6450368bc9a82`
* [egress-router-cni](https://github.com/openshift/egress-router-cni) git [5e0f8d1b](https://github.com/openshift/egress-router-cni/commit/5e0f8d1b545899fda27c5e1cc8707d33cba1b534) `sha256:da8c4d2048f3af357e7c165c32046ac153db6d61500120c1bd419a52cb2ac6e9`
* [etcd](https://github.com/openshift/etcd) git [806f690e](https://github.com/openshift/etcd/commit/806f690e1f140e0aea2eb05ef5f288b756b62895) `sha256:7d6825b643d6339d5dfc019b8213602015c1d872fe9982f38521900528c7541b`
* [gcp-cloud-controller-manager](https://github.com/openshift/cloud-provider-gcp) git [8732386c](https://github.com/openshift/cloud-provider-gcp/commit/8732386c3ddcb98dae624f7bb925ed0ef8d077d5) `sha256:5760ac8a827b609c26a5b5b80ce4b14458e76326312202a6d6733161f808996b`
* [gcp-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-gcp) git [e2d0c20e](https://github.com/openshift/cluster-api-provider-gcp/commit/e2d0c20eab31c513764507a6d8774de2aef3db2c) `sha256:6b66615f109584402f3d30314c5699f54f4b6cb91a928d96f715355f89f55096`
* [gcp-machine-controllers](https://github.com/openshift/machine-api-provider-gcp) git [91f71c9a](https://github.com/openshift/machine-api-provider-gcp/commit/91f71c9adfd6b715a6ef340bb43ea5e1a8b44245) `sha256:0befe5b9af546d16d0fcd8cac206999942322c44d39ab9a93d4c8355ef362195`
* [gcp-workload-identity-federation-webhook](https://github.com/openshift/gcp-workload-identity-federation-webhook) git [d481e5cb](https://github.com/openshift/gcp-workload-identity-federation-webhook/commit/d481e5cb9323b01964bf143b58403b62fa31e5e7) `sha256:325458a622651dab0dc23a17e62263155bd9c7d345e46afd07bdcaf6af11fbbb`
* [ibm-cloud-controller-manager](https://github.com/openshift/cloud-provider-ibm) git [c566572b](https://github.com/openshift/cloud-provider-ibm/commit/c566572b2cf0120499e81181f1efb1e729e9c418) `sha256:3aed4da4bfad435b6b21d57cf3929f8ffc5367d5036d827299854bcf7a2a1821`
* [ibm-vpc-block-csi-driver-operator](https://github.com/openshift/ibm-vpc-block-csi-driver-operator) git [00bc7407](https://github.com/openshift/ibm-vpc-block-csi-driver-operator/commit/00bc740728d9f8ec86fe04199884108c2a091b58) `sha256:d5c329e832b53c31f7ebe05de6d2654f621445c14dc289a1122e5a292bbcceb2`
* [ibmcloud-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-ibmcloud) git [f7e3ec30](https://github.com/openshift/cluster-api-provider-ibmcloud/commit/f7e3ec30f746add35458fad54dd6bccb97e307bf) `sha256:bea6973d2fb65b690ed7fc3834a9570172c3adf39aa98d684962cfca1112fea5`
* [ibmcloud-machine-controllers](https://github.com/openshift/machine-api-provider-ibmcloud) git [e72a8471](https://github.com/openshift/machine-api-provider-ibmcloud/commit/e72a84714e5fb8c3256def77f7d77ffdc4b9b82e) `sha256:5274f09e48c2db2c44eac0b99f412b44dd81780701c77491108d5b5d4337fb94`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [ff276c00](https://github.com/openshift/ironic-agent-image/commit/ff276c00e345b9cb9298ce9dbdd7f19a8b14dbce) `sha256:4876dadbd06c57e15cd775c66abc1b43d0c6384515d421a7dc343d5e8b65b913`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [707c2262](https://github.com/openshift/ironic-rhcos-downloader/commit/707c226243ac401f2994952fe0e55823511111b0) `sha256:9e858a358fb92850bdcc64f13570c068bdec42a5aee31f20cf9fad2429df449a`
* [ironic-static-ip-manager](https://github.com/openshift/ironic-static-ip-manager) git [b95b05fe](https://github.com/openshift/ironic-static-ip-manager/commit/b95b05fe0ba17255ef61e92d4167ca4c9de789b8) `sha256:a0a5c8f96ce9fa28f3cdb2b28805dee8734e60db6261989f07dab0550bbe52b8`
* [kube-metrics-server](https://github.com/openshift/kubernetes-metrics-server) git [ed76a5e8](https://github.com/openshift/kubernetes-metrics-server/commit/ed76a5e8051caae6519342ae189088b8ddd09979) `sha256:3fc85649117d76ffdec2326d489603ff0a3d65597079e045515e3067f57be529`
* [kube-rbac-proxy](https://github.com/openshift/kube-rbac-proxy) git [cd636680](https://github.com/openshift/kube-rbac-proxy/commit/cd636680e06a55395c26570dff0cb37277014388) `sha256:9f0c8638757e0a9dd8ab7ef40fa069576482338933327f18062ac7c5f3b6172e`
* [kube-state-metrics](https://github.com/openshift/kube-state-metrics) git [cb0aa591](https://github.com/openshift/kube-state-metrics/commit/cb0aa591e89797cc0f45b934b8baeccc3a3b09bf) `sha256:d0a92e4f416c47c72d62dee0ecc495fdc6d533169f385741f86c81c495aa89d0`
* [kube-storage-version-migrator](https://github.com/openshift/kubernetes-kube-storage-version-migrator) git [ce5ff17e](https://github.com/openshift/kubernetes-kube-storage-version-migrator/commit/ce5ff17e9a81ce754567e6dd5053d13409c251e9) `sha256:33fee5e434a5e0fdb673cd0c94ac5b99f966d453731c605adb8240c517f450e0`
* [libvirt-machine-controllers](https://github.com/openshift/cluster-api-provider-libvirt) git [76effeca](https://github.com/openshift/cluster-api-provider-libvirt/commit/76effeca10bccccbc7a514f708122f660cde1183) `sha256:3464fc5bce16ba687fdd92b5e232f95937921634c433265433a04d36a2305da8`
* [machine-api-operator](https://github.com/openshift/machine-api-operator) git [83936dde](https://github.com/openshift/machine-api-operator/commit/83936ddec5de0d3c9e6db44e541e0abac2b60b6c) `sha256:4a2df10affb337cbccba27dd9b1852e78e09ba3d17502163c0a6674f27c9e241`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [9a8e96a6](https://github.com/openshift/machine-os-images/commit/9a8e96a60bb6d8e3c86c2780fd4212e80f5d28e5) `sha256:9e4fa9a713ebc6667e6324a550ee18e31f01446508128eb31f9683edfe595d70`
* [metallb-frr](https://github.com/openshift/frr) git [c82bfaad](https://github.com/openshift/frr/commit/c82bfaad01b196e12f00622a9a609d87e0a56701) `sha256:cc14d63aa68f8a506a65d1af5f319ff30f99eb2613086b973cd93c758c1c42f9`
* [multus-admission-controller](https://github.com/openshift/multus-admission-controller) git [d95feb67](https://github.com/openshift/multus-admission-controller/commit/d95feb67adfb97346849c79e36b6a9d404296ae9) `sha256:b7e889e0b5878e125ee704eae0ab5a37e4b9d32a49e3d00171dd4fb77469a866`
* [multus-cni](https://github.com/openshift/multus-cni) git [93556f99](https://github.com/openshift/multus-cni/commit/93556f99405e29900c5445f7bbf7c70b8935e339) `sha256:0f8dbfb8a31773a05e84a98aa16bf781424c21fa0706b6864b175d490176732a`
* [multus-cni-microshift](https://github.com/openshift/multus-cni) git [93556f99](https://github.com/openshift/multus-cni/commit/93556f99405e29900c5445f7bbf7c70b8935e339) `sha256:589c14232f169ebf2c7146f3e979802cc33d8a2ed743a6ddf1a58b5cafa0d894`
* [multus-route-override-cni](https://github.com/openshift/route-override-cni) git [08af4127](https://github.com/openshift/route-override-cni/commit/08af4127c77976510cad1c096d9aca977d8ae5af) `sha256:42f291d4665c7b21ea39400543fb98f6f9d6b01645c8f8e5aaec15b96abf9922`
* [multus-whereabouts-ipam-cni](https://github.com/openshift/whereabouts-cni) git [d691040e](https://github.com/openshift/whereabouts-cni/commit/d691040e509bb20c26b5e8366c0d6f3bb45a5e02) `sha256:fefa9c3ad8f10240816a0aa17240c99fa7907df162fdd8b63a47575a24a70ff7`
* [must-gather](https://github.com/openshift/must-gather) git [b4b434c4](https://github.com/openshift/must-gather/commit/b4b434c427ddde3dafd8518d1aa754e49b7bfef1) `sha256:b5e7057308015f9243cbb509998ce4b5c9b2a5d668bb2c001f93b5cf1510b36a`
* [network-interface-bond-cni](https://github.com/openshift/bond-cni) git [297eeb43](https://github.com/openshift/bond-cni/commit/297eeb4320e07b18d559bc373b665479c760e8c7) `sha256:49cbd2fe2f0fffdbf57623172b044a444ad219dad2b77997060d28ff6ebe2e22`
* [network-metrics-daemon](https://github.com/openshift/network-metrics-daemon) git [844fa588](https://github.com/openshift/network-metrics-daemon/commit/844fa588c4200b8ff768d1916d63f1d4c1db2daf) `sha256:1d4b6fbc5ee7087e26e0b72f35a858a35f5cc4f92cf85fae43615797edb55920`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:abb194dcb20754742c41a3898ad41db9764c65ec4edfc17ab42745d773384f03`
* [nutanix-cloud-controller-manager](https://github.com/openshift/cloud-provider-nutanix) git [33b7bec6](https://github.com/openshift/cloud-provider-nutanix/commit/33b7bec6fe27b8d126982a70b4579112cd67052b) `sha256:f83ae172191a8237a40f99d72512e30482e10d680b2a9f454fa97ead298f4ae5`
* [nutanix-machine-controllers](https://github.com/openshift/machine-api-provider-nutanix) git [b15a665c](https://github.com/openshift/machine-api-provider-nutanix/commit/b15a665cd9c12c5a7d2ac81b5330b6f446c3a8be) `sha256:c09ebaafbb32efdd27dc5128bde6c2f31f84aab8d4a3dac9d30b841006018af8`
* [oauth-apiserver](https://github.com/openshift/oauth-apiserver) git [71c41b2d](https://github.com/openshift/oauth-apiserver/commit/71c41b2d8abb0c6ad90dca286baf5d03c1340646) `sha256:d8535d25c2a32da2db455135ce213d02ccd6f0575d7f5eee471a43606017c858`
* [oauth-proxy](https://github.com/openshift/oauth-proxy) git [7f518c02](https://github.com/openshift/oauth-proxy/commit/7f518c02931f8c5c1c3aa5d2192a905f973b2b34) `sha256:b4d3c808bc21aa9c67d1736d02393f0440120326b7d6b62a02a85ccce10a5d99`
* [openshift-apiserver](https://github.com/openshift/openshift-apiserver) git [64dea074](https://github.com/openshift/openshift-apiserver/commit/64dea074d6b457e1fae3598cea0bb72493d2cab8) `sha256:5389c181d302742e9b95c79ad4d5bb7ab482e669a49825b6373309b862ef160d`
* [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager) git [438d52e7](https://github.com/openshift/openshift-controller-manager/commit/438d52e79d691e016d66eabfe9a53c84229db40c) `sha256:78c0903ed5702a04d50605009391fa1efe98d4ccc7603bfc35e89e9edab1f49c`
* [openshift-state-metrics](https://github.com/openshift/openshift-state-metrics) git [ab605a4b](https://github.com/openshift/openshift-state-metrics/commit/ab605a4bf1c6cd5a6c58f245fb67ce648caebfa8) `sha256:cb97638c5c22ee999b4f9d8b13489951b8cda86594b74681afecf9916acaec19`
* [openstack-cinder-csi-driver](https://github.com/openshift/cloud-provider-openstack) git [bf508c06](https://github.com/openshift/cloud-provider-openstack/commit/bf508c062084dc6dec20480f7d173f047ad4f2d6) `sha256:5d52d5e88d25a2be8f1a3cf8f8952cf72470a3c94dbef1e0bb29a8a9578e40c0`
* [openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack) git [bf508c06](https://github.com/openshift/cloud-provider-openstack/commit/bf508c062084dc6dec20480f7d173f047ad4f2d6) `sha256:b2ac2a0c0dcdcabfa699db8759298fbde4142b68f078b381eabb7bcd7a089294`
* [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack) git [e1c0f2f9](https://github.com/openshift/cluster-api-provider-openstack/commit/e1c0f2f9e2e70843d5c42dfe3bddf70530a97b0f) `sha256:7e4b9537f8c8a1891fecc513dc2cfa08443469dde6687045e1af87eb150e40d3`
* [openstack-resource-controller](https://github.com/openshift/openstack-resource-controller) git [70f5ad34](https://github.com/openshift/openstack-resource-controller/commit/70f5ad34915041c82ad0a8ed6ea64bd8859d1e72) `sha256:a64c9869038a115dda5054d331b0e322b1fb3b8fb255f5f04d86935cd0a6ac28`
* [powervs-block-csi-driver](https://github.com/openshift/ibm-powervs-block-csi-driver) git [791e12ab](https://github.com/openshift/ibm-powervs-block-csi-driver/commit/791e12aba9ab7c4fed1e5f9554e5b9ec86342e1a) `sha256:61ddba56cc83ca796e1feb6c7e5eb7fee1dba7afdf3191b51c88caddf0bacf9f`
* [powervs-block-csi-driver-operator](https://github.com/openshift/ibm-powervs-block-csi-driver-operator) git [e22228ae](https://github.com/openshift/ibm-powervs-block-csi-driver-operator/commit/e22228ae9f53298e7520d9ae2b9230b2d5dd4cff) `sha256:acdd1b65985db99ac059eeae2d59fe9c219a389013c68861fb699bd5406c921a`
* [powervs-cloud-controller-manager](https://github.com/openshift/cloud-provider-powervs) git [969a04e9](https://github.com/openshift/cloud-provider-powervs/commit/969a04e9dcb4cdde10e3038a9e28d2e27548918d) `sha256:e36e5c8074a810d9fee61ba7a1f395d8d1c9f6a10069f211ba70e4784fbd32f6`
* [powervs-machine-controllers](https://github.com/openshift/machine-api-provider-powervs) git [551974ef](https://github.com/openshift/machine-api-provider-powervs/commit/551974ef93dedb1b9677a778e1533391448e0c56) `sha256:77d792182598b501a6199ae5dc6d7fa3d856e22c5bde2d256e9d5fc13fda178b`
* [prom-label-proxy](https://github.com/openshift/prom-label-proxy) git [610c11b5](https://github.com/openshift/prom-label-proxy/commit/610c11b59dd17f1d6dc35b62ca1d0602b5c0f494) `sha256:1e17135e36b04ec71afd62c092cc60c4106f004b6c869b5a31da61ceac09fba2`
* [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager) git [3dbe0b64](https://github.com/openshift/prometheus-alertmanager/commit/3dbe0b64ae3b9439b888be65a32431c7bf0d6806) `sha256:acb8e0e250d6ed11d75f9e9295947eceb592b159931fee8e3af94ba2ec8464c0`
* [prometheus-node-exporter](https://github.com/openshift/node_exporter) git [39d72873](https://github.com/openshift/node_exporter/commit/39d728735779afef886bc10a8bc7cf72f54d51a0) `sha256:4e1204013986e4b796aee633d2f7dfb3ea040aaf9930e7094192baf88bf1783b`
* [service-ca-operator](https://github.com/openshift/service-ca-operator) git [e9622ba1](https://github.com/openshift/service-ca-operator/commit/e9622ba18c86bf24aceab0c19fdcb87339c14f44) `sha256:369053797b7a1812fe0bd9d44900cd479701ceb99efb3cbdbf091e710b709513`
* [telemeter](https://github.com/openshift/telemeter) git [a54acdfe](https://github.com/openshift/telemeter/commit/a54acdfeb2d62c79516d099e37f3319205c903a7) `sha256:adb9f2d773e253c4f43ba1b512162bc3e51c7893776bf31a0c790f172364fa71`
* [thanos](https://github.com/openshift/thanos) git [6ea20ffa](https://github.com/openshift/thanos/commit/6ea20ffaa35b7b31fe7ef9a99287bdd4a1c1e4e8) `sha256:30e6938f5f2008f88c6cbbd91367bafc78f96e9d287e550a66d891092804b5be`
* [volume-data-source-validator](https://github.com/openshift/volume-data-source-validator) git [8b929332](https://github.com/openshift/volume-data-source-validator/commit/8b9293323cf8fdce93824e37168573ca3f73de3a) `sha256:89062f5d63c8822a0d7f94ba0ea7610099d8c9d7da0bddcbd720e7794aaed84c`
* [vsphere-cloud-controller-manager](https://github.com/openshift/cloud-provider-vsphere) git [f69584d6](https://github.com/openshift/cloud-provider-vsphere/commit/f69584d6ed7411504b0fff77eb36d0fd64f0fd5e) `sha256:270254b9bccdb89d5c9e09875cd0cd060d4ee0441fb676caa6c10680313a3991`
* [vsphere-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-vsphere) git [6626b299](https://github.com/openshift/cluster-api-provider-vsphere/commit/6626b2998e29189d1ff031c0a589f9c3413feac4) `sha256:64d5adfbdd09beac9a6329ac628c90e16b462f79d1ee35096dfa4f458cf792e3`
* [vsphere-csi-driver](https://github.com/openshift/vmware-vsphere-csi-driver) git [5e680186](https://github.com/openshift/vmware-vsphere-csi-driver/commit/5e680186a305e1e0a11950630f7addcb1aa19e0e) `sha256:28c156af1adb938f46006741cf6f21eb737c6d682751f332a4afa0054e83bc12`
* [vsphere-csi-driver-syncer](https://github.com/openshift/vmware-vsphere-csi-driver) git [5e680186](https://github.com/openshift/vmware-vsphere-csi-driver/commit/5e680186a305e1e0a11950630f7addcb1aa19e0e) `sha256:0fe7e35fe6901b7a3eca041b80a728d7f2a4ca9f4f5ab323fa599be0698380d5`
* [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector) git [a35d685a](https://github.com/openshift/vsphere-problem-detector/commit/a35d685a88aca94ed1d805c1079ebf14dfb81c9d) `sha256:117845d34f8ff40aeb51cf865281a8d3544601d057f6e250dad278f6856e58bb`


### [agent-installer-csr-approver, agent-installer-orchestrator](https://github.com/openshift/assisted-installer/tree/58cd84e5f90dedf13c846cdbf24608583c260d1c)

* [OCPBUGS-77536](https://issues.redhat.com/browse/OCPBUGS-77536): Fix root partition before copying IRI registry data [#2038](https://github.com/openshift/assisted-installer/pull/2038)
* [Full changelog](https://github.com/openshift/assisted-installer/compare/79093911c4613f9aa916b552a6376f3e38e3cbc1...58cd84e5f90dedf13c846cdbf24608583c260d1c)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/78ce8714080ef537e56d6b199f3a2d1e0dc74f0e)

* [OCPBUGS-78393](https://issues.redhat.com/browse/OCPBUGS-78393): Update Konflux release version to 4.21.5 [#270](https://github.com/openshift/agent-installer-utils/pull/270)
* [OCPBUGS-78188](https://issues.redhat.com/browse/OCPBUGS-78188): Add a flag to provide a custom appliance image [#273](https://github.com/openshift/agent-installer-utils/pull/273)
* [OCPBUGS-78144](https://issues.redhat.com/browse/OCPBUGS-78144): Update to use the 4.21 Catalog [#271](https://github.com/openshift/agent-installer-utils/pull/271)
* [OCPBUGS-77538](https://issues.redhat.com/browse/OCPBUGS-77538): (Backport) Override prefilled rendezvousIP [#263](https://github.com/openshift/agent-installer-utils/pull/263)
* [OCPBUGS-77302](https://issues.redhat.com/browse/OCPBUGS-77302): Remove multiple redhat-operator-index catalogs [#262](https://github.com/openshift/agent-installer-utils/pull/262)
* [OCPBUGS-77236](https://issues.redhat.com/browse/OCPBUGS-77236): Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 2f3015a [#222](https://github.com/openshift/agent-installer-utils/pull/222)
* [OCPBUGS-77220](https://issues.redhat.com/browse/OCPBUGS-77220): Update Konflux references [#251](https://github.com/openshift/agent-installer-utils/pull/251)
* [OCPBUGS-76590](https://issues.redhat.com/browse/OCPBUGS-76590): Update Konflux files to build 4.21.1 [#254](https://github.com/openshift/agent-installer-utils/pull/254)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/b9342b104e95602fcfe67bd11b5ba697d7dbbd8c...78ce8714080ef537e56d6b199f3a2d1e0dc74f0e)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/fdc7f3f15c693593cb573b6bef6f0363256b6f52)

* [OCPCLOUD-3341](https://issues.redhat.com/browse/OCPCLOUD-3341): Updates ecr-credential-provider make target [#134](https://github.com/openshift/cloud-provider-aws/pull/134)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/3365bc9ca5b116c63c1c90130c017f3496a139a1...fdc7f3f15c693593cb573b6bef6f0363256b6f52)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/181ea25a74b12d1641ef2e0021228311e56626de)

* [OCPBUGS-78779](https://issues.redhat.com/browse/OCPBUGS-78779): Fix readonly root fs in Azure init containers [#528](https://github.com/openshift/csi-operator/pull/528)
* [OCPBUGS-78155](https://issues.redhat.com/browse/OCPBUGS-78155): Add only to tags to volume object, if volume is not already tagged [#521](https://github.com/openshift/csi-operator/pull/521)
* [Full changelog](https://github.com/openshift/csi-operator/compare/d3789c528621d54b0d46b40795acd9c635b2982d...181ea25a74b12d1641ef2e0021228311e56626de)


### [azure-disk-csi-driver](https://github.com/openshift/azure-disk-csi-driver/tree/30e9538b918b1a43ea613832a4be305576dcbae4)

* [OCPBUGS-78012](https://issues.redhat.com/browse/OCPBUGS-78012): 4.21 rebase v1.34.2 [#126](https://github.com/openshift/azure-disk-csi-driver/pull/126)
* [Full changelog](https://github.com/openshift/azure-disk-csi-driver/compare/3cfa501e46765e7fcdcd27c129fcb729e324c48d...30e9538b918b1a43ea613832a4be305576dcbae4)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/7d1b7c2bb80b61eb26df7f7e64a5a5e98acb6401)

* [OCPBUGS-79424](https://issues.redhat.com/browse/OCPBUGS-79424): Do not discard NMStateConfig when agent-config is on disk for unconfigured-ignition [#10428](https://github.com/openshift/installer/pull/10428)
* [OCPBUGS-79421](https://issues.redhat.com/browse/OCPBUGS-79421): Fix race condition: wait for agent-register-infraenv before showing UI URL [#10425](https://github.com/openshift/installer/pull/10425)
* no-jira: fix SC2328 shellcheck errors [#10424](https://github.com/openshift/installer/pull/10424)
* [OCPBUGS-77900](https://issues.redhat.com/browse/OCPBUGS-77900): Add c8g* to tested_instance_types_aarch64 [#10366](https://github.com/openshift/installer/pull/10366)
* [OCPBUGS-79375](https://issues.redhat.com/browse/OCPBUGS-79375): Don't auto-calculate RendezvousIP in unconfigured-ignition [#10410](https://github.com/openshift/installer/pull/10410)
* [OCPBUGS-78696](https://issues.redhat.com/browse/OCPBUGS-78696): [release-4.21] : Disable LoadBalancer in cloud config when Octavia is unavailable [#10399](https://github.com/openshift/installer/pull/10399)
* [OCPBUGS-78241](https://issues.redhat.com/browse/OCPBUGS-78241): Increase timeout for waiting control plane [#10383](https://github.com/openshift/installer/pull/10383)
* [OCPBUGS-77504](https://issues.redhat.com/browse/OCPBUGS-77504): fix wavelength zone name regex [#10343](https://github.com/openshift/installer/pull/10343)
* [OCPBUGS-77551](https://issues.redhat.com/browse/OCPBUGS-77551): Increase size of /var/ostreecontainer mount [#10346](https://github.com/openshift/installer/pull/10346)
* [OCPBUGS-73878](https://issues.redhat.com/browse/OCPBUGS-73878): handle SSH rule deletion for Azure private [#10225](https://github.com/openshift/installer/pull/10225)
* [Full changelog](https://github.com/openshift/installer/compare/10d6d4649760ff7d41295912c985893c1bbe7f8e...7d1b7c2bb80b61eb26df7f7e64a5a5e98acb6401)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/9b3a716e8e4809b40f79627dd2a5deb365e088d9)

* [OCPBUGS-65683](https://issues.redhat.com/browse/OCPBUGS-65683): OCPBUGS-78835: PR2774 and PR2793 backports [release-4.21] [#469](https://github.com/openshift/baremetal-operator/pull/469)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/906e2b884ddb89d8361200307f8fb4e6a66d15b5...9b3a716e8e4809b40f79627dd2a5deb365e088d9)


### [baremetal-runtimecfg](https://github.com/openshift/baremetal-runtimecfg/tree/d7e3fc12bd9dc911f0fac4c9a46b814c7be62b14)

* [OCPBUGS-77168](https://issues.redhat.com/browse/OCPBUGS-77168): Install dbus-tools, needed in pkg/monitor/dnsmasqmonitor.go [#383](https://github.com/openshift/baremetal-runtimecfg/pull/383)
* [Full changelog](https://github.com/openshift/baremetal-runtimecfg/compare/8404689ecbcb940e113bfb7141909a6231401fee...d7e3fc12bd9dc911f0fac4c9a46b814c7be62b14)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/56a56a3a76474ed4329fff4fc9958e2c60c3ab3f)

* [OCPBUGS-77486](https://issues.redhat.com/browse/OCPBUGS-77486): Makefile: Strip debugging symbols by default [#2211](https://github.com/openshift/oc/pull/2211)
* [OCPBUGS-77168](https://issues.redhat.com/browse/OCPBUGS-77168): Install subscription-manager in required images [#2208](https://github.com/openshift/oc/pull/2208)
* [Full changelog](https://github.com/openshift/oc/compare/19a2243fe780f1aa9b5c8d80bd413a8721cc2e8c...56a56a3a76474ed4329fff4fc9958e2c60c3ab3f)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/0c51a1b875a53fc5dda059789c3ec8a5d2212114)

* [OCPBUGS-71222](https://issues.redhat.com/browse/OCPBUGS-71222): test-ext: remove kubernetes module dependency [#958](https://github.com/openshift/cloud-credential-operator/pull/958)
* [OCPBUGS-74545](https://issues.redhat.com/browse/OCPBUGS-74545): Resolve nil pointer exception in hasResourceTags [#969](https://github.com/openshift/cloud-credential-operator/pull/969)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/3fd434e647dba248e1662267971b91e66da082ea...0c51a1b875a53fc5dda059789c3ec8a5d2212114)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/57db2d05e057dc90bae3dc1b0e806b3259d38fc0)

* [OCPBUGS-77154](https://issues.redhat.com/browse/OCPBUGS-77154): Refrain from adding Egress IP to public LB backend pool [#205](https://github.com/openshift/cloud-network-config-controller/pull/205)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/dcdf24f542ab4d65c85a4d63d553cc49085567ea...57db2d05e057dc90bae3dc1b0e806b3259d38fc0)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/d235c0bb7443119e12ec2c8db57035f652f1d871)

* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Bump library-go to get KMS [#847](https://github.com/openshift/cluster-authentication-operator/pull/847)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): carry test assertion [#848](https://github.com/openshift/cluster-authentication-operator/pull/848)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Conditionally add the KMS plugin volume mount to the oauth-apiserver container [#846](https://github.com/openshift/cluster-authentication-operator/pull/846)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Add KMS test scenarios [#844](https://github.com/openshift/cluster-authentication-operator/pull/844)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/e6c52f89298cb0720ce7fb88aced4c35562907e9...d235c0bb7443119e12ec2c8db57035f652f1d871)


### [cluster-autoscaler](https://github.com/openshift/kubernetes-autoscaler/tree/838a5957d0bebc33c7a0a8a7efd4f5dcb4098286)

* [OCPBUGS-78684](https://issues.redhat.com/browse/OCPBUGS-78684): allow clusterapi provider to skip paused resources [#410](https://github.com/openshift/kubernetes-autoscaler/pull/410)
* [OCPBUGS-76296](https://issues.redhat.com/browse/OCPBUGS-76296): Pick upstream commits to Fix VPA recommender concurrent access panic [#404](https://github.com/openshift/kubernetes-autoscaler/pull/404)
* [Full changelog](https://github.com/openshift/kubernetes-autoscaler/compare/73b87353dd524cc63932c58bab555a94d67bff1b...838a5957d0bebc33c7a0a8a7efd4f5dcb4098286)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/e01ffcf3dc86dfea4646ca71a78b17cc9a740d80)

* [OCPBUGS-77418](https://issues.redhat.com/browse/OCPBUGS-77418): Fix ironic-proxy service routing for port 6385 [#560](https://github.com/openshift/cluster-baremetal-operator/pull/560)
* [OCPBUGS-77035](https://issues.redhat.com/browse/OCPBUGS-77035): Update kubebuilder tools to more latest version [#558](https://github.com/openshift/cluster-baremetal-operator/pull/558)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/958e8af67fa66358635cada2a78ea3dc91a432c2...e01ffcf3dc86dfea4646ca71a78b17cc9a740d80)


### [cluster-config-api](https://github.com/openshift/api/tree/b0658d22beea435e3a576165207416842cb2753b)

* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Introduce KMSEncryption feature gate [#2670](https://github.com/openshift/api/pull/2670)
* [OCPBUGS-76408](https://issues.redhat.com/browse/OCPBUGS-76408): Move DynamicConfigurationManager back to TPNU [#2703](https://github.com/openshift/api/pull/2703)
* [Full changelog](https://github.com/openshift/api/compare/d1c4dc4fd37b8e8f6e4992cda4e84167a3f2cb8c...b0658d22beea435e3a576165207416842cb2753b)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/5c38f917a43058c73479673a05d4e782524a3a41)

* [OCPBUGS-77921](https://issues.redhat.com/browse/OCPBUGS-77921): Prefer to remove members where they have another healthy machine in the same failure domain index [#1563](https://github.com/openshift/cluster-etcd-operator/pull/1563)
* [OCPBUGS-77097](https://issues.redhat.com/browse/OCPBUGS-77097): Wait for revision stability before removing etcd members [#1555](https://github.com/openshift/cluster-etcd-operator/pull/1555)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/d584457479db6980f9b4bdfac86b42531651015f...5c38f917a43058c73479673a05d4e782524a3a41)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/c2ed7331f378e499b2092f04ca7aaf8b3a075274)

* [OCPBUGS-77432](https://issues.redhat.com/browse/OCPBUGS-77432), [OCPBUGS-77433](https://issues.redhat.com/browse/OCPBUGS-77433): Ensure canary cert matches the default ingress controller's cert [#1367](https://github.com/openshift/cluster-ingress-operator/pull/1367)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/b62dd27c901d495e6e78b11968872c002cc2416f...c2ed7331f378e499b2092f04ca7aaf8b3a075274)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/8ee10fb411a0c7f0e91b3e6d9e3bd3843a93e882)

* [OCPBUGS-78548](https://issues.redhat.com/browse/OCPBUGS-78548): [release-4.21] : Always set service-account-jwks-uri to LB URL even with custom issuer [#2071](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2071)
* [OCPBUGS-78784](https://issues.redhat.com/browse/OCPBUGS-78784): [4.21] move event-ttl test to its own suite [#2073](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2073)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Bump library-go to get KMS [#2063](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2063)
* [OCPBUGS-77969](https://issues.redhat.com/browse/OCPBUGS-77969): Add support for event-ttl cases and go test cases in Kube API Server Operator [#2066](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2066)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Carry test assertion [#2064](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2064)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Conditionally add the KMS plugin volume mount to the kube-apiserver container [#2061](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2061)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Add KMS test scenarios [#2054](https://github.com/openshift/cluster-kube-apiserver-operator/pull/2054)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/1d68351b053987df54b4e6fef60b480b72cfd714...8ee10fb411a0c7f0e91b3e6d9e3bd3843a93e882)


### [cluster-kube-scheduler-operator](https://github.com/openshift/cluster-kube-scheduler-operator/tree/e60e39de9cdd273dadd341d0f56350f504db9623)

* [CNTRLPLANE-2843](https://issues.redhat.com/browse/CNTRLPLANE-2843): chore: update OWNERS [#619](https://github.com/openshift/cluster-kube-scheduler-operator/pull/619)
* [Full changelog](https://github.com/openshift/cluster-kube-scheduler-operator/compare/7809937c07c5dbfa272bfbe87d99e09104bf3fc9...e60e39de9cdd273dadd341d0f56350f504db9623)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/830f20030a4600916885be7988a5bd5444b7c6ae)

* [OCPBUGS-74425](https://issues.redhat.com/browse/OCPBUGS-74425): Include `kube_pod_labels` in minimal profile [#2797](https://github.com/openshift/cluster-monitoring-operator/pull/2797)
* [OCPBUGS-77908](https://issues.redhat.com/browse/OCPBUGS-77908): [release-4.21] add app.kubernetes.io/part-of=openshift-monitoring label to thanos-ruler pod [#2840](https://github.com/openshift/cluster-monitoring-operator/pull/2840)
* [OCPBUGS-76541](https://issues.redhat.com/browse/OCPBUGS-76541): Fix NodeRAIDDegraded & NodeRAIDDiskFailure alerts [#2815](https://github.com/openshift/cluster-monitoring-operator/pull/2815)
* [OCPBUGS-77271](https://issues.redhat.com/browse/OCPBUGS-77271): AlertingRule: fix duplicate PrometheusRules after MD5-&gt;SHA-224 naming change [#2829](https://github.com/openshift/cluster-monitoring-operator/pull/2829)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/edfb52319f871c7009db54f68e90da0e12021e73...830f20030a4600916885be7988a5bd5444b7c6ae)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/259ea6b026f6663fa720a1e11c913a61122402f9)

* [OCPBUGS-76333](https://issues.redhat.com/browse/OCPBUGS-76333): Silence ovnkube-lib.sh to avoid mass of logs to collectors [#2900](https://github.com/openshift/cluster-network-operator/pull/2900)
* [OCPBUGS-77147](https://issues.redhat.com/browse/OCPBUGS-77147): Add config override for openflow-probe [#2917](https://github.com/openshift/cluster-network-operator/pull/2917)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/0b156e3a60bcf64068c8ddb4f5204f2ca4d9758c...259ea6b026f6663fa720a1e11c913a61122402f9)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/273d20bbc2aa6cff97365f8c58bf888f6a7db245)

* [OCPBUGS-78173](https://issues.redhat.com/browse/OCPBUGS-78173): workloadhints: use IsVM to skip BM-only tests [#1480](https://github.com/openshift/cluster-node-tuning-operator/pull/1480)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/0e275839ec18e436487508b729ed7fcfe41e3875...273d20bbc2aa6cff97365f8c58bf888f6a7db245)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/a1d96ed2e60a60e466245c7c08f001d2a386f274)

* [OCPBUGS-77826](https://issues.redhat.com/browse/OCPBUGS-77826): cluster-olm-operator sets Progressing=True during upgrade [#177](https://github.com/openshift/cluster-olm-operator/pull/177)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/81989478e114b090ec0cfbf9ae7c000f9b876749...a1d96ed2e60a60e466245c7c08f001d2a386f274)


### [cluster-openshift-apiserver-operator](https://github.com/openshift/cluster-openshift-apiserver-operator/tree/52fd1773757b2c3ff497e7db084c3d71cde5478f)

* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Bump library-go to get KMS [#666](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/666)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Conditionally add the KMS plugin volume mount to the openshift-apiserver container [#664](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/664)
* [OCPBUGS-74418](https://issues.redhat.com/browse/OCPBUGS-74418): Add KMS test scenarios [#656](https://github.com/openshift/cluster-openshift-apiserver-operator/pull/656)
* [Full changelog](https://github.com/openshift/cluster-openshift-apiserver-operator/compare/c2d0127291dfe824d9591d4e37ec319a739d988e...52fd1773757b2c3ff497e7db084c3d71cde5478f)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/d37e5a056d5a9c74c2ac2d5551ef39f573c9824a)

* [OCPBUGS-77256](https://issues.redhat.com/browse/OCPBUGS-77256): Implement mTLS authentication and authorization for CVO metrics endpoint [#1326](https://github.com/openshift/cluster-version-operator/pull/1326)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/6fb3e84b9738a7a57a00d72cd6bc6f84d6c8e16e...d37e5a056d5a9c74c2ac2d5551ef39f573c9824a)


### [console](https://github.com/openshift/console/tree/680f343ea2b9d198ae861dade4ba8cf329181d5e)

* [OCPBUGS-78927](https://issues.redhat.com/browse/OCPBUGS-78927), [OCPBUGS-78928](https://issues.redhat.com/browse/OCPBUGS-78928): OLM prompts for GCP Workload Identity parameters during Kiali Operato… [#16176](https://github.com/openshift/console/pull/16176)
* [OCPBUGS-78308](https://issues.redhat.com/browse/OCPBUGS-78308): “Import from Git” should not force HTTPS/443 for Git providers (GitHub/GitLab/Bitbucket) [#16050](https://github.com/openshift/console/pull/16050)
* [OCPBUGS-78599](https://issues.redhat.com/browse/OCPBUGS-78599): Migrate InstallPlan components table to PatternFly Table [#16159](https://github.com/openshift/console/pull/16159)
* [OCPBUGS-78599](https://issues.redhat.com/browse/OCPBUGS-78599): Reset pagination page when changing namespace [#16158](https://github.com/openshift/console/pull/16158)
* [OCPBUGS-77029](https://issues.redhat.com/browse/OCPBUGS-77029): Fixed Metrics page React error #306 by exporting QueryBrowser component [#16038](https://github.com/openshift/console/pull/16038)
* [OCPBUGS-77251](https://issues.redhat.com/browse/OCPBUGS-77251): Fix editing secrets with mixed text and binary data [#16060](https://github.com/openshift/console/pull/16060)
* [OCPBUGS-77561](https://issues.redhat.com/browse/OCPBUGS-77561): Fix ConsolePluginStatus icon [#16090](https://github.com/openshift/console/pull/16090)
* [OCPBUGS-75000](https://issues.redhat.com/browse/OCPBUGS-75000): Clean up old session cookies to prevent accumulation [#15985](https://github.com/openshift/console/pull/15985)
* [OCPBUGS-77957](https://issues.redhat.com/browse/OCPBUGS-77957): [CI] Fix the VolumeSnapshot CRUD flaky test failures [#16118](https://github.com/openshift/console/pull/16118)
* [OCPBUGS-77882](https://issues.redhat.com/browse/OCPBUGS-77882): Fix infinite recursion in project access form [#16112](https://github.com/openshift/console/pull/16112)
* [OCPBUGS-65948](https://issues.redhat.com/browse/OCPBUGS-65948): prep for 4.21 GA SDK publish [#16116](https://github.com/openshift/console/pull/16116)
* [OCPBUGS-76385](https://issues.redhat.com/browse/OCPBUGS-76385): Workloads - Edit pod count and Edit parallelism : Content is in English [#16005](https://github.com/openshift/console/pull/16005)
* [OCPBUGS-76387](https://issues.redhat.com/browse/OCPBUGS-76387): DataView Pagination page menus : i18n misses [#16007](https://github.com/openshift/console/pull/16007)
* [OCPBUGS-76386](https://issues.redhat.com/browse/OCPBUGS-76386): i18n upload/download routine task - 4.21 / 281 (Latest) [#16006](https://github.com/openshift/console/pull/16006)
* [OCPBUGS-77430](https://issues.redhat.com/browse/OCPBUGS-77430): run and enforce `yarn dedupe` [#16075](https://github.com/openshift/console/pull/16075)
* [CONSOLE-5011](https://issues.redhat.com/browse/CONSOLE-5011): migrate to yarn berry [#16059](https://github.com/openshift/console/pull/16059)
* [Full changelog](https://github.com/openshift/console/compare/b6fa6c6fc6cfbf207ece287e2fb4d2fdd4381944...680f343ea2b9d198ae861dade4ba8cf329181d5e)


### [console-operator](https://github.com/openshift/console-operator/tree/898badb9b69b19c80eb586e94b501203209aca6e)

* Sync Dockerfile.ocp image [#1126](https://github.com/openshift/console-operator/pull/1126)
* [OCPBUGS-72562](https://issues.redhat.com/browse/OCPBUGS-72562): Add missing relatedObjects + small refactoring [#1090](https://github.com/openshift/console-operator/pull/1090)
* [OCPBUGS-74686](https://issues.redhat.com/browse/OCPBUGS-74686): Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads [#1104](https://github.com/openshift/console-operator/pull/1104)
* [Full changelog](https://github.com/openshift/console-operator/compare/bdf006d0b1f6653b36f2b44a4d3bb16d1a5cb0b5...898badb9b69b19c80eb586e94b501203209aca6e)


### [docker-builder](https://github.com/openshift/builder/tree/48fce231bac118a63992f466acc8b29a29e1ddde)

* [OCPBUGS-70149](https://issues.redhat.com/browse/OCPBUGS-70149): bump buildah to 1.39.7 to fix CVE-2025-52881 [#495](https://github.com/openshift/builder/pull/495)
* [Full changelog](https://github.com/openshift/builder/compare/c0ef8399e6c3d8731b47502e7ed9d8563a481cdc...48fce231bac118a63992f466acc8b29a29e1ddde)


### [driver-toolkit](https://github.com/openshift/driver-toolkit/tree/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad)

* [OCPBUGS-78535](https://issues.redhat.com/browse/OCPBUGS-78535): Support ubi minimal base image [#186](https://github.com/openshift/driver-toolkit/pull/186)
* [OCPBUGS-77887](https://issues.redhat.com/browse/OCPBUGS-77887): Clean up cruft in /var/cache/dnf [#183](https://github.com/openshift/driver-toolkit/pull/183)
* [Full changelog](https://github.com/openshift/driver-toolkit/compare/5c53d757ae380994b89701a98d8b61912154aca7...f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad)


### [gcp-pd-csi-driver](https://github.com/openshift/gcp-pd-csi-driver/tree/0660d93fa9545ded2f6a49f4462de3ed68000232)

* [OCPBUGS-77716](https://issues.redhat.com/browse/OCPBUGS-77716): Support Downward API node name [#101](https://github.com/openshift/gcp-pd-csi-driver/pull/101)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver/compare/a022e754beec5b234f922ee3b7330ea157c852d8...0660d93fa9545ded2f6a49f4462de3ed68000232)


### [gcp-pd-csi-driver-operator](https://github.com/openshift/gcp-pd-csi-driver-operator/tree/ddfc0f93d244d5d9be6d5ab7631f4b1db8bec043)

* [OCPBUGS-77494](https://issues.redhat.com/browse/OCPBUGS-77494): Pass node name to csi-driver container [#173](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/173)
* [OCPBUGS-77310](https://issues.redhat.com/browse/OCPBUGS-77310): Add RBAC permission for node driver to get Node objects [#171](https://github.com/openshift/gcp-pd-csi-driver-operator/pull/171)
* [Full changelog](https://github.com/openshift/gcp-pd-csi-driver-operator/compare/73b5939d71b7e3ded7ce418049dc28a5c3a2bb09...ddfc0f93d244d5d9be6d5ab7631f4b1db8bec043)


### [haproxy-router](https://github.com/openshift/router/tree/5949f713517b3cc158cd78b34d71d5a9084d2e1c)

* [OCPBUGS-79374](https://issues.redhat.com/browse/OCPBUGS-79374): Lower verbosity for parseIPList empty list logging [#752](https://github.com/openshift/router/pull/752)
* [Full changelog](https://github.com/openshift/router/compare/b231c65b5c06c1f74590ca8e77caecc6213beb6a...5949f713517b3cc158cd78b34d71d5a9084d2e1c)


### [hyperkube, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/8b1d67b459cd554cd4b6d878e9bf4d425b3bf9a0)

* [OCPBUGS-77475](https://issues.redhat.com/browse/OCPBUGS-77475): Bump v1.34.5 to release-4.21 [#2601](https://github.com/openshift/kubernetes/pull/2601)
* [OCPBUGS-76516](https://issues.redhat.com/browse/OCPBUGS-76516): Bump v1.34.4 [#2590](https://github.com/openshift/kubernetes/pull/2590)
* [Full changelog](https://github.com/openshift/kubernetes/compare/0df353502309af2497270ddf993bb866e2f2b5a9...8b1d67b459cd554cd4b6d878e9bf4d425b3bf9a0)


### [hypershift](https://github.com/openshift/hypershift/tree/12f76eff41be4731c12021f93b15427137acd7ef)

* [CNTRLPLANE-3006](https://issues.redhat.com/browse/CNTRLPLANE-3006): Azure web identity webhook 4.21 [#7997](https://github.com/openshift/hypershift/pull/7997)
* [OCPBUGS-78957](https://issues.redhat.com/browse/OCPBUGS-78957): fix(hostedcluster): Remove referenced resource annotations regardless of hcp status [#7975](https://github.com/openshift/hypershift/pull/7975)
* [OCPBUGS-78473](https://issues.redhat.com/browse/OCPBUGS-78473): Fix deadlock when changing release image during initial provisioning [#7954](https://github.com/openshift/hypershift/pull/7954)
* [OCPBUGS-78484](https://issues.redhat.com/browse/OCPBUGS-78484): fix(catalogs): update catalog image version cap to 4.21 [#7956](https://github.com/openshift/hypershift/pull/7956)
* [OCPBUGS-77456](https://issues.redhat.com/browse/OCPBUGS-77456): Add dynamic NodePort range validation [#7820](https://github.com/openshift/hypershift/pull/7820)
* [OCPBUGS-77647](https://issues.redhat.com/browse/OCPBUGS-77647): remove resource limits from Agent CAPI provider [#7844](https://github.com/openshift/hypershift/pull/7844)
* [OCPBUGS-78304](https://issues.redhat.com/browse/OCPBUGS-78304): Fix context cancel accumulation in getMirrorFromICSPOrIDMS [#7891](https://github.com/openshift/hypershift/pull/7891)
* [OCPBUGS-78196](https://issues.redhat.com/browse/OCPBUGS-78196): fix(sync-global-pullsecret): compare content ignoring trailing newlines [#7914](https://github.com/openshift/hypershift/pull/7914)
* [CNTRLPLANE-2812](https://issues.redhat.com/browse/CNTRLPLANE-2812): feat(aro): Swift support [#7826](https://github.com/openshift/hypershift/pull/7826)
* [OCPBUGS-77365](https://issues.redhat.com/browse/OCPBUGS-77365): Fix ignition-server pod restarts due to MIRRORED_RELEASE_IMAGE flapping [#7834](https://github.com/openshift/hypershift/pull/7834)
* [OCPBUGS-75930](https://issues.redhat.com/browse/OCPBUGS-75930): [release-4.21] fix(cpo): Correct route labeling logic for HCP router infrastructure [#7641](https://github.com/openshift/hypershift/pull/7641)
* [OCPBUGS-75884](https://issues.redhat.com/browse/OCPBUGS-75884): feat(updates): enable CVO metrics access with RHOBS monitoring flag [#7632](https://github.com/openshift/hypershift/pull/7632)
* fix: OCPBUGS-74104: Fix CVE-2025-58183 [#7545](https://github.com/openshift/hypershift/pull/7545)
* [Full changelog](https://github.com/openshift/hypershift/compare/fde2615dc50859141488d6eed7056c794c1e4bd5...12f76eff41be4731c12021f93b15427137acd7ef)


### [ibm-vpc-block-csi-driver](https://github.com/openshift/ibm-vpc-block-csi-driver/tree/8fe7dafcf238c9416094672e1baf45105622e575)

* [OCPBUGS-77203](https://issues.redhat.com/browse/OCPBUGS-77203): [release-4.21] standardize build paths [#121](https://github.com/openshift/ibm-vpc-block-csi-driver/pull/121)
* [Full changelog](https://github.com/openshift/ibm-vpc-block-csi-driver/compare/ab36dcc19e6063bf55158b59588448151a200170...8fe7dafcf238c9416094672e1baf45105622e575)


### [insights-operator](https://github.com/openshift/insights-operator/tree/a6cc2a3f799e5cf4ca85e631f6b903999f2b2ad6)

* [OCPBUGS-76960](https://issues.redhat.com/browse/OCPBUGS-76960): Extends the time for the extractor liveness probe [#1233](https://github.com/openshift/insights-operator/pull/1233)
* [Full changelog](https://github.com/openshift/insights-operator/compare/599209e2705e68bedfc21f842f5c3f379b8f27c3...a6cc2a3f799e5cf4ca85e631f6b903999f2b2ad6)


### [insights-runtime-exporter, insights-runtime-extractor](https://github.com/openshift/insights-runtime-extractor/tree/cdf2f43554a3a0eb033beb29f8b73d854d05f6f3)

* Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 [#72](https://github.com/openshift/insights-runtime-extractor/pull/72)
* Revert "Bump Go to 1.25" [#73](https://github.com/openshift/insights-runtime-extractor/pull/73)
* Bump Go to 1.25 [#70](https://github.com/openshift/insights-runtime-extractor/pull/70)
* [OCPBUGS-77491](https://issues.redhat.com/browse/OCPBUGS-77491): remove dnf cache from the container images [#64](https://github.com/openshift/insights-runtime-extractor/pull/64)
* Fix EAP 8.1 e2e test [#65](https://github.com/openshift/insights-runtime-extractor/pull/65)
* [Full changelog](https://github.com/openshift/insights-runtime-extractor/compare/015f7b616bdf0cc062b370079eb42685e81ba11d...cdf2f43554a3a0eb033beb29f8b73d854d05f6f3)


### [ironic](https://github.com/openshift/ironic-image/tree/d23a6091f362d46421276749a5faa9871dbc20e7)

* [ART-14497](https://issues.redhat.com/browse/ART-14497): Fix ART builds with -minimal [#809](https://github.com/openshift/ironic-image/pull/809)
* [OCPBUGS-76934](https://issues.redhat.com/browse/OCPBUGS-76934): Bump keystonemiddleware version to 10.9.0-0.20260216145500.557d173 for CVE-2026-22797 fix [#791](https://github.com/openshift/ironic-image/pull/791)
* [OCPBUGS-76474](https://issues.redhat.com/browse/OCPBUGS-76474): Update requirements.cachito for 4.21 with heartbeat inspection fix commit [#785](https://github.com/openshift/ironic-image/pull/785)
* [Full changelog](https://github.com/openshift/ironic-image/compare/f965cba99553ad30fd64d8f35acead196d706ea0...d23a6091f362d46421276749a5faa9871dbc20e7)


### [keepalived-ipfailover](https://github.com/openshift/images/tree/e00f5806587e71188805bab43dad9099524b9059)

* [OCPBUGS-78048](https://issues.redhat.com/browse/OCPBUGS-78048): openshift-enterprise-base: remove subscription-manager, dbus, systemd [#226](https://github.com/openshift/images/pull/226)
* [Full changelog](https://github.com/openshift/images/compare/c4506d8a1bbede077d3e8e7e4dcf2736909d8e89...e00f5806587e71188805bab43dad9099524b9059)


### [kubevirt-cloud-controller-manager](https://github.com/openshift/cloud-provider-kubevirt/tree/1e6fdd6615a55fc449b3e7ad2d6e92a27d30a934)

* [OCPBUGS-76994](https://issues.redhat.com/browse/OCPBUGS-76994): [release-4.21] Sync Upstream 2026-01-27 [#61](https://github.com/openshift/cloud-provider-kubevirt/pull/61)
* [Full changelog](https://github.com/openshift/cloud-provider-kubevirt/compare/daf5fba2d1a1514bcbe67edc0230a06136156094...1e6fdd6615a55fc449b3e7ad2d6e92a27d30a934)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/4bb70e49c9d05690f3a26edc0a6feaf093169cbb)

* [OCPBUGS-79038](https://issues.redhat.com/browse/OCPBUGS-79038): Add annotation-based fallback for infra VM node ID resolution [#83](https://github.com/openshift/kubevirt-csi-driver/pull/83)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/9e2dbddfe27080b834c83ef93503f886ad4189b6...4bb70e49c9d05690f3a26edc0a6feaf093169cbb)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/a2530e2fdbd881f9c3b0cb49f224ead07d797f10)

* [OCPBUGS-79372](https://issues.redhat.com/browse/OCPBUGS-79372): set default-timeout-stop to 200s globally [#5793](https://github.com/openshift/machine-config-operator/pull/5793)
* [OCPBUGS-78800](https://issues.redhat.com/browse/OCPBUGS-78800): Re-order logger setting to eliminate race condition [#5779](https://github.com/openshift/machine-config-operator/pull/5779)
* [OCPBUGS-78528](https://issues.redhat.com/browse/OCPBUGS-78528): Fix e2e iri tests [#5759](https://github.com/openshift/machine-config-operator/pull/5759)
* [OCPBUGS-78201](https://issues.redhat.com/browse/OCPBUGS-78201): kubelet: Less aggressive low memory reservation [#5756](https://github.com/openshift/machine-config-operator/pull/5756)
* [OCPBUGS-77833](https://issues.redhat.com/browse/OCPBUGS-77833): Update AMI Whitelist [#5743](https://github.com/openshift/machine-config-operator/pull/5743)
* [OCPBUGS-77689](https://issues.redhat.com/browse/OCPBUGS-77689): Create admin-ack gates for azure/vsphere clusters upgrading to 4.22 [#5735](https://github.com/openshift/machine-config-operator/pull/5735)
* [OCPBUGS-77577](https://issues.redhat.com/browse/OCPBUGS-77577): Fix failure domain matching during vsphere boot image updates [#5727](https://github.com/openshift/machine-config-operator/pull/5727)
* [OCPBUGS-77534](https://issues.redhat.com/browse/OCPBUGS-77534): Update AMI Whitelist [#5722](https://github.com/openshift/machine-config-operator/pull/5722)
* [OCPBUGS-77354](https://issues.redhat.com/browse/OCPBUGS-77354): Clean up vsphere login error logging [#5705](https://github.com/openshift/machine-config-operator/pull/5705)
* [OCPBUGS-76555](https://issues.redhat.com/browse/OCPBUGS-76555): Remove MCD liveness probe [#5651](https://github.com/openshift/machine-config-operator/pull/5651)
* [OCPBUGS-77072](https://issues.redhat.com/browse/OCPBUGS-77072): mcd_config_drift not working properly [#5675](https://github.com/openshift/machine-config-operator/pull/5675)
* [OCPBUGS-76823](https://issues.redhat.com/browse/OCPBUGS-76823): reduce MCO image size [#5657](https://github.com/openshift/machine-config-operator/pull/5657)
* [OCPBUGS-76833](https://issues.redhat.com/browse/OCPBUGS-76833): Machine-config controller should not log about non-existent pull-secret changes [#5659](https://github.com/openshift/machine-config-operator/pull/5659)
* [OCPBUGS-73805](https://issues.redhat.com/browse/OCPBUGS-73805): Prevent unnecessary systemd unit disable [#5648](https://github.com/openshift/machine-config-operator/pull/5648)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/b59e48e724f57ca773268b4d12fa7e8da656fdda...a2530e2fdbd881f9c3b0cb49f224ead07d797f10)


### [machine-image-customization-controller](https://github.com/openshift/image-customization-controller/tree/65aeb3607f05dd71ec27a4457945ce1e054ea9e9)

* [OCPBUGS-78536](https://issues.redhat.com/browse/OCPBUGS-78536): Return error when network data Secret lacks nmstate key [#171](https://github.com/openshift/image-customization-controller/pull/171)
* [OCPBUGS-77031](https://issues.redhat.com/browse/OCPBUGS-77031): Add IPA messages for console and SSH login [#163](https://github.com/openshift/image-customization-controller/pull/163)
* [OCPBUGS-77490](https://issues.redhat.com/browse/OCPBUGS-77490): Clean up dnf cache to reduce container image size [#164](https://github.com/openshift/image-customization-controller/pull/164)
* [Full changelog](https://github.com/openshift/image-customization-controller/compare/d958f0bf39ee93368c89919b7dbe23363f38493e...65aeb3607f05dd71ec27a4457945ce1e054ea9e9)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/9d65f65fad61b07bc2bc5f69803692f77ff95181)

* [OCPBUGS-78358](https://issues.redhat.com/browse/OCPBUGS-78358): fix for CVE-2025-69873 [#845](https://github.com/openshift/monitoring-plugin/pull/845)
* NO-JIRA: [release-4.21] e2e-monitoring fixing loop on legacy dashboard [#828](https://github.com/openshift/monitoring-plugin/pull/828)
* [OCPBUGS-77227](https://issues.redhat.com/browse/OCPBUGS-77227): [openshift-4.21] CVE-2026-25639 openshift4/ose-monitoring-plugin-rhel9:Axios affected by Denial of Service via __proto__ Key in mergeConfig [#795](https://github.com/openshift/monitoring-plugin/pull/795)
* [OU-1062](https://issues.redhat.com/browse/OU-1062): [release-4.21] feat: mark alert menu active for incidents tab [#761](https://github.com/openshift/monitoring-plugin/pull/761)
* NO-JIRA: [release-4.21] simplify frontend build in Dockerfile.art [#808](https://github.com/openshift/monitoring-plugin/pull/808)
* [OCPBUGS-74909](https://issues.redhat.com/browse/OCPBUGS-74909): fix: update vulnerable dependencies [#751](https://github.com/openshift/monitoring-plugin/pull/751)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/4b2b90bb04e9c73a1c4fa1c62124d07abf455bea...9d65f65fad61b07bc2bc5f69803692f77ff95181)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/e9f2f3c7e81683af3b8cc9a5a3166434c94e0498)

* [OCPBUGS-77489](https://issues.redhat.com/browse/OCPBUGS-77489): Clean up dnf cache [#100](https://github.com/openshift/multus-networkpolicy/pull/100)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/5ed5d2408a35847dabfc843b032ee3eecb4d6ee1...e9f2f3c7e81683af3b8cc9a5a3166434c94e0498)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/0e839893223991122cfb7cf8722ba651727aa9f3)

* [OCPBUGS-77225](https://issues.redhat.com/browse/OCPBUGS-77225): Fix NAD creation using default namespace instead of selected one [#349](https://github.com/openshift/networking-console-plugin/pull/349)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/11492b3193c4ab3ba6494e7fc79a6eb4551616b1...0e839893223991122cfb7cf8722ba651727aa9f3)


### [oauth-server](https://github.com/openshift/oauth-server/tree/2b8183592190365c269ca0c92b1955bbad9a0236)

* [OCPBUGS-77454](https://issues.redhat.com/browse/OCPBUGS-77454): groupmapper: avoid mutating original group users slice when removing user [#213](https://github.com/openshift/oauth-server/pull/213)
* [Full changelog](https://github.com/openshift/oauth-server/compare/3ab74506e64c804a465eb74b74046174a1121dd8...2b8183592190365c269ca0c92b1955bbad9a0236)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/12f1b068e9928aa68e5505fc16fcaaac3dfd27d3)

* [CLID-549](https://issues.redhat.com/browse/CLID-549), [OCPBUGS-78458](https://issues.redhat.com/browse/OCPBUGS-78458): Update Dockerfile.tests to run Go integration tests [#1371](https://github.com/openshift/oc-mirror/pull/1371)
* [OCPBUGS-77222](https://issues.redhat.com/browse/OCPBUGS-77222): Fix registriesd "unknown userid" failure for arbitrary UIDs [#1358](https://github.com/openshift/oc-mirror/pull/1358)
* [OCPBUGS-76126](https://issues.redhat.com/browse/OCPBUGS-76126): Fix reg config detection for explicit false values [#1349](https://github.com/openshift/oc-mirror/pull/1349)
* [OCPBUGS-74981](https://issues.redhat.com/browse/OCPBUGS-74981): fix conversion issue for catalog [#1346](https://github.com/openshift/oc-mirror/pull/1346)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/520cd16bfe17c495b197dbb0c09afdaf6700a8c7...12f1b068e9928aa68e5505fc16fcaaac3dfd27d3)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/d0f315fc0008290ca7d6d908ba1d2465907fc7de)

* [OCPBUGS-79059](https://issues.redhat.com/browse/OCPBUGS-79059): update OCP-75441 to support multi-arch[release-4.21] [#671](https://github.com/openshift/operator-framework-operator-controller/pull/671)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/dfc0e537df7af5f9785b90da40e77a268d345c6a...d0f315fc0008290ca7d6d908ba1d2465907fc7de)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/b1fdb10f47f3bdb5c2902fac1d53bfa98c3a88ab)

* [OCPBUGS-76789](https://issues.redhat.com/browse/OCPBUGS-76789): Fix make test [#156](https://github.com/openshift/machine-api-provider-openstack/pull/156)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/0660da1219da8fd3bc449fe94b063552189b841a...b1fdb10f47f3bdb5c2902fac1d53bfa98c3a88ab)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/c859a9b75e743b5899ba1e7a2adbcc85633a7d64)

* [OCPBUGS-79380](https://issues.redhat.com/browse/OCPBUGS-79380): enhance case to make it pass per test bundle change [#1263](https://github.com/openshift/operator-framework-olm/pull/1263)
* [OCPBUGS-78558](https://issues.redhat.com/browse/OCPBUGS-78558): Re-Apply Fix admin context race condition in parallel tests [#1261](https://github.com/openshift/operator-framework-olm/pull/1261)
* [OCPBUGS-77712](https://issues.redhat.com/browse/OCPBUGS-77712): Update NetworkPolicy egress to support HyperShift custom API ports [#1246](https://github.com/openshift/operator-framework-olm/pull/1246)
* [OCPBUGS-77067](https://issues.redhat.com/browse/OCPBUGS-77067): Remove the collect-profiles info from the microshift kustomization file [#1234](https://github.com/openshift/operator-framework-olm/pull/1234)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/ced1896bd762f97651c69213256728348331e024...c859a9b75e743b5899ba1e7a2adbcc85633a7d64)


### [operator-marketplace](https://github.com/operator-framework/operator-marketplace/tree/efb1a1ea40bc1ed3a439812cfdaa3013b80e96ce)

* [OCPBUGS-77580](https://issues.redhat.com/browse/OCPBUGS-77580): Update NetworkPolicy egress to support HyperShift custom API ports [#729](https://github.com/operator-framework/operator-marketplace/pull/729)
* [Full changelog](https://github.com/operator-framework/operator-marketplace/compare/7c1eba6b75e8e458ef5d676c8fee086489824f9b...efb1a1ea40bc1ed3a439812cfdaa3013b80e96ce)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/010f7c2967b53f6c1be8286078cd4ae0dd65beae)

* [OCPBUGS-78771](https://issues.redhat.com/browse/OCPBUGS-78771): Branch Sync release-4.22 to release-4.21 [03-11-2026] [#3050](https://github.com/openshift/ovn-kubernetes/pull/3050)
* [OCPBUGS-76472](https://issues.redhat.com/browse/OCPBUGS-76472): OCPBUGS-72532: Branch Sync release-4.22 to release-4.21 [12-19-2025] [#3022](https://github.com/openshift/ovn-kubernetes/pull/3022)
* [OCPBUGS-77147](https://issues.redhat.com/browse/OCPBUGS-77147): Minimize ACLs by combining ipBlocks into single ACL [#2995](https://github.com/openshift/ovn-kubernetes/pull/2995)
* [OCPBUGS-77309](https://issues.redhat.com/browse/OCPBUGS-77309): Clear stale conntrack UDP entries for nodePorts [#3002](https://github.com/openshift/ovn-kubernetes/pull/3002)
* [OCPBUGS-77046](https://issues.redhat.com/browse/OCPBUGS-77046), [OCPBUGS-77086](https://issues.redhat.com/browse/OCPBUGS-77086): [release-4.21] combined backport PR for 2 escalations [#2984](https://github.com/openshift/ovn-kubernetes/pull/2984)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/190e114128b9f358d1d6a700c464797d4c3e36af...010f7c2967b53f6c1be8286078cd4ae0dd65beae)


### [prometheus](https://github.com/openshift/prometheus/tree/59769d912ceab62bf0b7325c505ed463e64ab734)

* [OCPBUGS-78581](https://issues.redhat.com/browse/OCPBUGS-78581): [release-4.21] chore(kubernetes): deduplicate warning logs from the API [#298](https://github.com/openshift/prometheus/pull/298)
* [Full changelog](https://github.com/openshift/prometheus/compare/ac9443d270b96912311ede64da160f839278bb65...59769d912ceab62bf0b7325c505ed463e64ab734)


### [prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook](https://github.com/openshift/prometheus-operator/tree/3de9763f36128ffa8b25a63c9447f6d64114c270)

* [OCPBUGS-77295](https://issues.redhat.com/browse/OCPBUGS-77295): backport upstream fix to reconcile resources with inconsistent status [#365](https://github.com/openshift/prometheus-operator/pull/365)
* [OCPBUGS-74477](https://issues.redhat.com/browse/OCPBUGS-74477): Validate `webhookURL` secret for `MSTeams` receiver in `AlertmanagerConfig` CRD [#359](https://github.com/openshift/prometheus-operator/pull/359)
* [Full changelog](https://github.com/openshift/prometheus-operator/compare/4889ec9a591e78f50916a9ffedf4499c6fc63259...3de9763f36128ffa8b25a63c9447f6d64114c270)


### [rhel-coreos, rhel-coreos-10, rhel-coreos-10-extensions, rhel-coreos-extensions](https://github.com/openshift/os/tree/83a448067f52b8e70b2fe26d8a1deeab41fe4348)

* - [release-4.21] extensions: Add rhel-9.6-server-ose-4.21 [#1914](https://github.com/openshift/os/pull/1914)
* NO-JIRA: [release-4.21] extensions: Fix repo name to match 4.21 [#1913](https://github.com/openshift/os/pull/1913)
* [COS-3946](https://issues.redhat.com/browse/COS-3946): Backport rhel-10.2 support to release-4.21 branch [#1898](https://github.com/openshift/os/pull/1898)
* NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches [#1889](https://github.com/openshift/os/pull/1889)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/os/compare/e8f5a55a31574c1d1e415b23e939e20ddcfcc399...83a448067f52b8e70b2fe26d8a1deeab41fe4348)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/559b7122d1a0cad4ff475b496c2896b39eed8c08)

* [OCPBUGS-76641](https://issues.redhat.com/browse/OCPBUGS-76641): filter ingress namespace on UnmanagedRoutes metric [#73](https://github.com/openshift/route-controller-manager/pull/73)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/8a69194a461dc33d2ed67a220bca91d384d34df4...559b7122d1a0cad4ff475b496c2896b39eed8c08)


### [tests](https://github.com/openshift/origin/tree/47530573ae526a48dff70a294e26c31eb5ebff1a)

* [OCPBUGS-79365](https://issues.redhat.com/browse/OCPBUGS-79365): Verify etc pod should start with oom_score_adj as system-node-critical [#30916](https://github.com/openshift/origin/pull/30916)
* [OCPBUGS-78485](https://issues.redhat.com/browse/OCPBUGS-78485): run resource request/limit check early [#30879](https://github.com/openshift/origin/pull/30879)
* [OCPBUGS-78192](https://issues.redhat.com/browse/OCPBUGS-78192): Exclude disruption during NoExecuteTaintManager serial tests [#30857](https://github.com/openshift/origin/pull/30857)
* [OCPBUGS-78064](https://issues.redhat.com/browse/OCPBUGS-78064): Update optimized builds test to use rpm -qa instead of dnf [#30856](https://github.com/openshift/origin/pull/30856)
* [OCPBUGS-78064](https://issues.redhat.com/browse/OCPBUGS-78064): Allow test to tolerate running on minimal images [#30852](https://github.com/openshift/origin/pull/30852)
* [OCPBUGS-77823](https://issues.redhat.com/browse/OCPBUGS-77823): add the missing namespace from managed openshift [#30838](https://github.com/openshift/origin/pull/30838)
* [OCPBUGS-77826](https://issues.redhat.com/browse/OCPBUGS-77826): Remove exception for monitoring OLM Progression condition [#30839](https://github.com/openshift/origin/pull/30839)
* [OCPBUGS-77097](https://issues.redhat.com/browse/OCPBUGS-77097): Add test for CPMS OnDelete strategy with full master replacement [#30802](https://github.com/openshift/origin/pull/30802)
* : OCPBUGS-76856:cert tests: mark TLS registry test as informing [#30779](https://github.com/openshift/origin/pull/30779)
* [OCPBUGS-76529](https://issues.redhat.com/browse/OCPBUGS-76529): Fix flakiness in MutableCSINodeAllocatableCount test [#30772](https://github.com/openshift/origin/pull/30772)
* [OCPBUGS-76955](https://issues.redhat.com/browse/OCPBUGS-76955): co/kube-storage-version-migrator reports Available=False in a non-upgrade job [#30740](https://github.com/openshift/origin/pull/30740)
* [Full changelog](https://github.com/openshift/origin/compare/6708c9503223318f3e09a1be4151c3cb12cf56cd...47530573ae526a48dff70a294e26c31eb5ebff1a)


### [vsphere-csi-driver-operator](https://github.com/openshift/vmware-vsphere-csi-driver-operator/tree/d6a19449cc5d49541221d48d62c67d7a48142d19)

* [OCPBUGS-74701](https://issues.redhat.com/browse/OCPBUGS-74701): Fix update of stable-generation annotation [#330](https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/330)
* [Full changelog](https://github.com/openshift/vmware-vsphere-csi-driver-operator/compare/57c19630194a26e9e2338b0ba8a32e8922e74259...d6a19449cc5d49541221d48d62c67d7a48142d19)