4.19.0-ec.4

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.19.0-ec.4-x86_64

Team Approvals:

Accepted
- QE

Tests:

Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-ovn-serial
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial Succeeded periodic-ci-openshift-release-master-ci-4.19-e2e-aws-ovn-techpreview-serial
- driver-toolkit Failed (2 retries) periodic-ci-openshift-release-master-nightly-4.19-e2e-aws-driver-toolkit
- fips-scan Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.19-fips-payload-scan
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.19-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.19-periodics-e2e-aws-ovn-ocp-conformance-serial
- rosa-classic-sts-conformance Failed (2 retries) periodic-ci-openshift-release-master-nightly-4.19-e2e-rosa-sts-ovn

Upgrades from:

Untested upgrades: 4.18.6, 4.18.7, 4.19.0-ec.0, 4.19.0-ec.1, 4.19.0-ec.2, 4.19.0-ec.3

Loading changelog, this may take a while ...

Changes from 4.19.0-ec.3

Created: 2025-03-31 07:58:36 +0000 UTC

Image Digest: sha256:1e9baecce90105b4c0aa695dadc2fac7e4b9fd54e0d2ede90e143e57df8e424a

Components

Kubectl 1.32.1
Kubernetes upgraded from 1.32.2 to 1.32.3
Kubernetes Tests 1.32.2
Red Hat Enterprise Linux CoreOS upgraded from 419.96.202503032242-0 to 419.96.202503251418-0 (diff)

FeatureGate Changes

FeatureGate	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
DualReplica (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
DyanmicServiceEndpointIBMCloud (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GatewayAPIController (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
SELinuxChangePolicy (0 tests)	Enabled (New)	Enabled (New)
SELinuxMount (6 tests)	Enabled (New)	Enabled (New)
ShortCertRotation (0 tests)	Enabled (New)	Enabled (New)
VSphereConfigurableMaxAllowedBlockVolumesPerNode (0 tests)	Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

csi-snapshot-validation-webhook

Rebuilt images without code change

apiserver-network-proxy git 0e116160 sha256:c5791e7dc5fc54658ff6e0d34295a310126a10cf48a3a50e509f583564f76a34
aws-cloud-controller-manager git 425c1c5b sha256:f7314fcc45b30cb86015b03fe0dd8ea4efec9ea6e9a8df4849098299c549fad5
aws-cluster-api-controllers git cda3c840 sha256:246e622fac571b05bb0fbe0ee003484b0debb587dd8418b0111d61d03953c255
aws-kms-encryption-provider git 088dcaf7 sha256:23dc39cac88b55ea2e2062860fefe948b2dd76dd7a64bd7f4ad0aeeada8893f8
aws-machine-controllers git d5523dc8 sha256:9301dbc5c35c4d3a157d3e9a3e0ea529870a82e51179ce7d9d4ab6e0815cee48
azure-kms-encryption-provider git d4fb1b6d sha256:9b47b10642262cc146d910b6e533d8ef27e8e2263e8c42ecd2b6a7efd61eb948
azure-service-operator git 11ced00e sha256:589c73bbade6ccc7a09258a574fe8c43667b1605e0455df0a77466ce80b9fc1d
baremetal-cluster-api-controllers git 3e052bfb sha256:5a1d69be976e15efdfc76ac357d42d44863d28b847c97ee3b93b4893825b495f
baremetal-machine-controllers git 9abe67f1 sha256:34f7362cbc05d8d12a73be0826e5c7167f6199fe03703a8d2e24d5c87f94df0c
cluster-authentication-operator git eb6de2ec sha256:6bfc1d9775f6d530495d42ca005b37eaa08b6e76979a8ceb81ca799147670c46
cluster-autoscaler-operator git 227f7537 sha256:1ef94bc7c8ddfde656ee3c6e6b0093005f0a90e39ab5249e8355a65c15354855
cluster-kube-cluster-api-operator git 3ec30377 sha256:17806b0f1583df28e8136be74f59428eb116242efd5457196a817c888e905792
cluster-kube-scheduler-operator git 4210c04a sha256:ed9e46317cdf51bc1f557cb06309d6128150ed1befdfa40485fca85c85571b43
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:d05524bd91e945e4b8e2a6ca5a4db3f3a939653088db58e1b9eb745060138aeb
cluster-machine-approver git a52da47f sha256:9dc7ca2ae3d7362ce4cb0df5358e0c2e80ade0f0247dbb7984b0da0fd2993856
cluster-olm-operator git f498726f sha256:2c595bcc7eac3b9ac493effa752aa902852ee47f256f0aa38f365625b07519e5
cluster-openshift-apiserver-operator git 5f66a3e1 sha256:0f375555484803c77d89b8e5a3e6952ade3c63f348e1f573709fcdbe1e4e33d0
cluster-openshift-controller-manager-operator git 0ab30996 sha256:56a445d2fdebee2ffae6e40190ab543d4cf401d2ac996ef7ff14b2bc7e5462f8
configmap-reloader git 9bfbde86 sha256:a7e22f265f2d592d25eda7e68b2d844867016759b5b7e2da18cdbf1a2ced4968
coredns git 7a1451db sha256:72880c00efec22b664c708f822c0911ad99ede8f0cf915696bbcb3c05ee5aa90
csi-driver-nfs git c0632514 sha256:7b47e2a9ffce755eb3c542887a473fe6f1ccfbb86ab44eef106dacf3c2d4a42a
csi-external-snapshotter git 1fc6ee15 sha256:6d820da4e2d2a0af3460da543c7404671dae9757e6e5782f64e89af9728cabcd
csi-livenessprobe git e1566463 sha256:c123bf2cf1c4587e07a520419dc245a157091c4bc514acab05493e043edc4a76
csi-node-driver-registrar git 378f5c1b sha256:0459373a079b57e540718631a768c03192ff07973e50ce440332a216f570bb42
csi-snapshot-controller git 1fc6ee15 sha256:a403e7e23287b4dc77ce28895e31018ac1cde5e4040c6caddcfeea1c208e51d0
docker-registry git 1b1c80a9 sha256:dacd515fe12a7fe674c76fe2698c3326fe1bdd1f643f49e4813b97aa7b55dd15
gcp-cloud-controller-manager git d8d3aeba sha256:c511a92b21cbf30121bbacb1d9d454c1248ce9c7aea180425969f89d78a8d041
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:e4ac234d568806a27faa8fe167a100eb91e6a90f2974f46566009028600aef88
haproxy-router git b41f9d05 sha256:fd8e4e830b2c617da30666d5767803668de904c13c09e22ea9e1d1f747461a29
ibm-cloud-controller-manager git 7422aab2 sha256:328afdd3a45f9f5b40753d4f2e0b1ab455f5937be362fb3b1a512920ed5584a4
ibm-vpc-block-csi-driver git b4596e5f sha256:6ca1664d7f725cfaddb8515a3bcea0ff3f219242c8dde8ad0115d407678b8f23
ibmcloud-cluster-api-controllers git 0453d282 sha256:b865ea5b888a4f9783c85045379e7010066507d0455c5835d615c6f3364b7fa1
ironic-machine-os-downloader git dbe19772 sha256:b694ec323c8d7cac8a288cd07edcadfb8188aed01677086c9979a76264e8a19c
kube-metrics-server git 037a0e7e sha256:ab458b1b4569c4936d450060f14e962a177c357f6cfbd9d0c8db2a0fc0a3c042
kube-rbac-proxy git 59127756 sha256:3bb1e5615fb2641e20024b3a4407bd9ff35de0a1c273b4539efa7432a9bec6ea
kube-state-metrics git c3da3b5f sha256:39a2a4b7b49a3d70b2e52e91bf1dd98f722ea730088c70e65de13dbe56ed909b
kube-storage-version-migrator git 4c521b09 sha256:c584a7c127c931989bbff8e24755afd9f2a03733c3d5e92b6dc9cf083c0544db
kubevirt-cloud-controller-manager git 3f4542ec sha256:fcfceb59e3b606eadc571f993699b310bc996fc568f376e5bd83c05ac32f4aa9
kubevirt-csi-driver git ba2234bd sha256:e0a43e09f4116b5455d9c3adbc3206a511d0f93a67bc365047c646088625a36f
libvirt-machine-controllers git a336f0b5 sha256:807082e5b6dd56a250dd7f232ae7c2703ca589e3b79e57da2f65fbafd3054b0d
machine-image-customization-controller git d7f86005 sha256:1d70ff075827367a1c8c0003377929fb89c22da98f663c02d62c830179dde70a
multus-admission-controller git 0b1b812e sha256:1311b6c449ef646b92971e30781d6c747eab4a33c6f5a0a12f1e543ba8f044dc
multus-route-override-cni git 391c1b03 sha256:6c7f8c72f3ef024ae85b391f9d24be0db46368149d071cd5f3457345f23ecf9d
must-gather git 33763a32 sha256:ad1ab538f1c66c600f052d41b7d38243dff9005219be1f7949b76b9990234fc6
network-interface-bond-cni git f575d888 sha256:8a93b84b943fb648cb56f8f8991ac6a8ac7d8428c1813c081857b0d23c08f733
network-metrics-daemon git 5ec8c6bd sha256:449c6744f1fe26c41adb5f11b61a071e08ad250278844f0d0767099ce648e476
nutanix-machine-controllers git db327bdb sha256:9777abde63c3d4ce75a2d9f5b99ce5fb6287bcb65c2cf582c05b95acdbd3cc6b
oauth-apiserver git 75914068 sha256:1e9eb2db41fdcd21e1e1160504998f5d5f8645eec7ccefc0973a25317697ed03
oauth-proxy git 3d12ccbe sha256:defb4f309de2bfae785523133b84a7ed0f46865c9c581464551ff0adae57e33f
oauth-server git 7c92a059 sha256:4ad264722f2db3cd6dcd46c4a621de7118ff00ebccbb41914f15928d9976939b
openshift-apiserver git 85f6eb27 sha256:518a6af3f1d4d27edf816090a32b8403d38b955e85c513b5715f79be1e6355dd
openshift-controller-manager git ed3eae5d sha256:e36e8a1335139a633dd532791c2592395bbe271f255626be97a7970f362b46b9
openshift-state-metrics git 3106bcc3 sha256:68e2357103a71cf154e385f8e0ad5b9327846ccdf1616d4c761a9a3ec031d17b
openstack-machine-api-provider git d2fce230 sha256:5a7d213a4cb91956e2a10715abdd1ee83e5319ec8fb7f98d1a51c134b8badc71
openstack-resource-controller git d00bab2b sha256:42f6799ffe6bcb2e16e021263d6ac1a6db22d5deead8a8a88ad4816d1120ea21
ovirt-csi-driver git 1db726a9 sha256:e3afc3aab2669b4497ddcd3014f1c65d82f6e2c34667195e5cbab078a9a9c119
ovirt-csi-driver-operator git c5b83033 sha256:81467e7827ff592e5f821b47c1b7c49c2a97aba5f2d37259c7343c33a9f2f344
powervs-cloud-controller-manager git 7c51cd2b sha256:e15cd6cfc37b25005b30cedc09efed27b56ff0089c7f6ce59bcf0298cb63a22e
prom-label-proxy git 7184f58d sha256:7fb0c9e61d55951516e018f6076abc5ce3bbe9740329b55f0534b20566825d48
prometheus-alertmanager git 43131005 sha256:23699dafad40b8d44099de101ddb7a7031ce783898b4a6acd1ed490817f3efc1
prometheus-config-reloader git 3779c1d5 sha256:9bfd1b2d7a0f8a6792afc3eb4a2961d6fd8ec14620b3e25c9cc71f364a8c348f
prometheus-node-exporter git 57a4e998 sha256:0f7da42c3e9c23fd4fd5276dc1c9e21af5758becec293d1dbdc59b275bc9ea13
prometheus-operator git 3779c1d5 sha256:87db64cd98a8fe38d06d4b91e04555a6f44603048b6fb49fbaf7ab4932dc44c1
prometheus-operator-admission-webhook git 3779c1d5 sha256:8073ceea05be94a2fc4f9b715e159885068023aa597fcfa5f26c2e2962670765
rhel-coreos sha256:309fb3060b50e0098deb156a1b42ab96c9b2edbb053d704ace00ef047a3e337f
rhel-coreos-extensions sha256:78dbaf8c98de572d1c010045ac8984c39fb894069bb25f00287dee8fd92cb053
route-controller-manager git bc97534a sha256:1c99bc0f5f97e8c4fd2dfe16da22e787ceab6e53b2d36da6f4b9682c64f0c92f
telemeter git f63fef91 sha256:0c3f231159bc85c561d16401106d651e51d05c06e78d19ca58f9caa1bee0e2e4
vsphere-cloud-controller-manager git 2c21c8ce sha256:b9756db82fef2d4e3884e3dbef705dfc125cfefd976465142de78f4d0a5f23f1
vsphere-cluster-api-controllers git 8c61ba3d sha256:307ca2b8ad86e61ee54aa16604067703e82a75b43a64a37e939548380a36ddfb

agent-installer-api-server

WIP AGENT-538: Add ability for ABI UI to generate kubeconfig (#7391) #7391
MGMT-20149: Add required sast tasks for Konflux (#7441) #7441
NO-ISSUE: Remove eran ifrach account from OWNERS (#7446) #7446
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.13, 4.18, 4.14 (#7443) #7443
MGMT-20155: Add Node Healthcheck Operator alongside with remediation operators (#7436) #7436
OCPBUGS-53031: Bump oauth2 with v0.26.openshift.1 (#7410) #7410
MGMT-19903: Disable ODF and OpenShift AI Operators for Oracle (OCI) (#7341) #7341
MGMT-20183: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#7430) #7430
aantal-MGMT-19423: replacing HighAvailabilityMode with ControlPlaneCount. Some places like updating cluster params HighAvailabilityMode is still needed for backward compatibility. (#7373) #7373
NO-ISSUE: Update Konflux references (#7406) #7406
NO-ISSUE: Fix setuptools issue (#7415) #7415
NO-ISSUE: [master] Bump OCP versions: 4.15, 4.12 (#7408) #7408
NO-ISSUE: Only get the release image during install if it’s necessary (#7390) #7390
NO-ISSUE: [master] Bump OCP versions: 4.17 (#7400) #7400
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#7398) #7398
NO-ISSUE: [master] Bump OCP versions: 4.18, 4.19 (#7397) #7397
MGMT-19830: Enable installation of OCP clusters in vSphere environments with user-managed LB (#7272) #7272
MGMT-19596: Fixing broken KubeAPI tests (#7383) #7383
NO-ISSUE: Fix bug in MTU validation for CMN - validation should pass if all reports are checked (#7386) #7386
MGMT-19832: Fix time out during cluster last finalizing stage (#7372) #7372
MGMT-20099: add nmstate to /v2/supported-operators (#7378) #7378
MGMT-20022: Handle missing ManagedCluster in non MCE environments (#7348) #7348
NO-ISSUE: [master] Bump OCP versions: 4.16, 4.18, 4.17 (#7380) #7380
MGMT-20095: Remove KMM operator from OpenShift AI NVIDIA bundle (#7376) #7376
MGMT-20010: Bump LSO override to 4.19 (#7366) #7366
MGMT-20043: Modify MTU Validation CMN to support multiple machine networks (#7357) #7357
NO-ISSUE: [master] Bump OCP versions: 4.18 (#7374) #7374
MGMT-19840: Gather operational metrics from installercache (#7281) #7281
MGMT-19939: Allow using the rootfs install method to add nodes (#7325) #7325
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-20149: Add required SAST tasks for Konflux (#1064) #1064
NO-ISSUE: Remove Paul account from OWNERS (#1073) #1073
MGMT-20198: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#1066) #1066
NO-ISSUE: Bump github.com/golang/glog from 1.2.0 to 1.2.4 (#1057) #1057
OCPBUGS-52696, OCPBUGS-52704: Bump crpto to v0.33.openshift.1 (#1053) #1053
NO-ISSUE: Update Konflux references (#1051) #1051
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#1049) #1049
Full changelog

agent-installer-node-agent

NO-ISSUE: Remove eran ifrach account from OWNERS (#947) #947
MGMT-20199: CVE-2025-27144 Bump github.com/go-jose/go-jose/v4 to v4.0.5 (#943) #943
NO-ISSUE: Update Konflux references (#929) #929
NO-ISSUE: Fix Konflux configuration for ocm-2.14 (#926) #926
Full changelog

agent-installer-utils

NO-ISSUE: iso_builder: Run appliance without sudo #54
AGENT-1087: Add logging #50
AGENT-1137: Support both –ocp-version and –release-image-url #49
AGENT-1118: Ensure the correct selinux labels are applied to agent tui files #57
OCPBUGS-45505: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.19 #37
AGENT-1147: Update operators #51
AGENT-1087: Support url in appliance-config.yaml #47
AGENT-1119: agent-setup-tui.service typo fix #48
AGENT-1087: Enable agent installer interactive flow #46
AGENT-464: Refactor UI for Rendezvous node IP entry #42
AGENT-1087: load agent tui #44
AGENT-1087: OVE ISO Builder script improvements #40
AGENT-464: Adds form to agent-tui to enter rendezvous IP address #38
AGENT-1087, AGENT-1118: Add script to generate agent-based installer OVE ISO #39
Full changelog

aws-ebs-csi-driver

OCPBUGS-51722: bump golang.org/x/crypto to v0.35.0 #284
OCPBUGS-46994: CVE-2024-45338: bump golang.org/x/net to v0.33.0 #282
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

STOR-1877: Run operators without root user control #368
STOR-1880: Role and ClusterRole with too wide permissions #367
OCPBUGS-41827: update injector to use a secret rather than an environment variable #357
NO-JIRA: Fixed typo in README.md #348
STOR-2252: Bump all deps #361
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #363
CFE-1132: EFS Access Point Tags Update DAY2 #313
CFE-1131: AWS Tags DAY2 Update #297
Full changelog

aws-pod-identity-webhook

OCPBUGS-52509: github.com/go-jose/go-jose/v4 v4.0.5 #200
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-50969: UPSTREAM: 8504: Fix GovCloud Config #139
Full changelog

azure-cluster-api-controllers

CNTRLPLANE-105: Add new authentication type UserAssignedIdentityCredentials #333
Full changelog

azure-disk-csi-driver

OCPBUGS-51376: Rebase against v1.32.0 #102
OCPBUGS-51768: UPSTREAM: 2903: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #101
Full changelog

azure-file-csi-driver

OCPBUGS-51782: UPSTREAM: 2395: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #88
Full changelog

azure-machine-controllers

CORS-3883: Allow managed identity from other resource groups #133
Full changelog

azure-workload-identity-webhook

OCPBUGS-52508: github.com/go-jose/go-jose/v4 v4.0.5 #26
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

CORS-3918: Send service endpoint overrides to CAPG through cluster spec #9528
OCPBUGS-53465: Update RHCOS 4.19 bootimage metadata to 9.6.20250321-0 #9593
OCPEDGE-1513: Fixed topology logic for 2-node installs and added unit tests #9579
OCPBUGS-53379: Update RHCOS 4.19 bootimage metadata to 9.6.20250319-0 #9582
AGENT-467: show the agent ui url when available #9584
CORS-3861, CORS-3883, CORS-3937: Azure Machine Identity API #9538
AGENT-537: Run agent installer command to create certificates #9574
OCPBUGS-52959: Issue short lived certificates if ShortCertRotation featuregate is enabled #8784
OCPBUGS-53173: PowerVS: remove TF code #9568
no-jira: add dev docs for bumping CAPI provider version #9567
OCPBUGS-53183: Avoid adding duplicate entries to NO_PROXY #9573
SPLAT-2078: Removed VSphereStaticIPs feature gate #9560
OCPBUGS-53280: PowerVS: Re-enable disconnected installs #9551
AGENT-537: Add agent command to generate certificates #9557
OCPBUGS-39146: Validate sgdisk partition start in image based installer config #9541
AGENT-1113: additional refinement for loading the agent UI #9565
SPLAT-2072: Removed VSphereMultiVCenters feature gate #9553
OCPEDGE-1513: feat(topologies): add DualReplica topology mode #9534
OCPBUGS-45692: Modified ova template name to use failure domain name #9300
OCPBUGS-50552: Power VS: Disallow clusterOSImage install-configuration parameter #9417
NO-JIRA: OWNERS: add thuan #9555
OCPBUGS-51209: Changed kernelFileType name from kernel.img to vmlinuz for s390x #9533
OCPBUGS-6271: Adding VIPs Validation for agent based vsphere installation #9532
AGENT-1113: enhance the unconfigured-ignition command to support the interactive workflow #9529
OCPBUGS-33370: Improve baremetal gather error message #9120
OCPBUGS-36553: VSphere: add vips to machinenetwork #9526
OCPBUGS-49737: Custom-DNS: Update master and worker user data secrets #9451
CORS-2508: aws: remove unused autoscaling:DescribeAutoScalingGroups perm #9223
OCPBUGS-51378: Change vsphere conversion govmomi err to be clear #9524
CORS-3278: Bump IBM Cloud CAPI to v0.10.0 #9523
OCPBUGS-44840: Mount the user-ca-bundle into ICC #9227
OCPBUGS-50637: Remove error logging when determining image arch #9531
OCPBUGS-51171: aws: add ec2:ReplaceRoute permission #9525
OCPBUGS-47724: AWS: Copy static MCO resources needed for custom-dns #9489
OCPBUGS-49623: IBMCloud: Missing ca-mon region due to static region list #9421
OCPBUGS-47681: Support regions only available in v2 of the aws sdk #9383
OKD-235: Add stream metadata for scos to be used by OKD #9520
OCPEDGE-1635: Set default values for arbiter #9530
OCPBUGS-39583: Remove tmp directory used for agent pxe files #9527
No-ISSUE: (dep) Bump openshift/api #9522
CORS-3917: Add install config validation for service endpoints #9517
NO-ISSUE: Deduplicate shared IDS to IDMS conversion in installer manifests and imagebased installer #9515
OCPBUGS-51350: PowerVS: Extra network routes for disconnected install #9510
NO-JIRA: bootstrap: add CLUSTER_PROFILE_ANNOTATION variable to auth-api bootstrapping stage #9508
OCPBUGS-50961: Power VS: Log accurate error when deploying Internal with no vpcName #9497
SPLAT-1995: vsphere on destroy remove cns volumes #9425
OCPBUGS-47459: IBMCloud: CAPI add permitted network #9397
OCPBUGS-47652: IBMCloud: Set CAPI boot volumes #9385
CORS-3869: static validation for new vpc.subnets field #9505
OSASINFRA-3695: openstack: Create security group rules in batches #9042
OCPBUGS-46051: IBMCloud: Fix CAPI AZ handling #9415
Full changelog

baremetal-operator

OCPBUGS-53233: Sync mar 18 #403
NO-ISSUE: Upstream Sync Mar 10 #401
OCPBUGS-52215: Bump x/oauth2 to 0.27.0 #400
Full changelog

baremetal-runtimecfg

OCPEDGE-1689: Include Arbiter nodes in the API backends if there is only one master #344
OCPBUGS-48469: Include cloud platform specific parameters to argument list for corednsmonitor #341
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-54168: Use ProxyFromEnvironment when creating HTTP transport #1995
NO-JIRA: debug: suggest nsenter instead of chroot #1991
OCPBUGS-53389: Use fedora image in unit tests instead of centos #1992
OCPBUGS-23514: status: Adjust impact summary for Failing=Unknown #1989
OCPBUGS-52504: pkg/cli/admin/upgrade/recommend: Populate RESTConfig #1987
Full changelog

cloud-credential-operator

NO-JIRA: Report the error when syncing STS secrets #827
OSASINFRA-3657: Add support for storing OpenStack CA bundles #780
OCPBUGS-52505: golang.org/x/oauth2 v0.28.0 #821
CCO-647: Enable readOnlyRootFilesystem on all containers #819
OCPBUGS-52507: github.com/go-jose/go-jose/v4 v4.0.5 #823
NO-JIRA: Add dry-run on aws create-all command #818
NO-JIRA: add example of how to build from source #820
Full changelog

cloud-network-config-controller

OCPBUGS-53201: Revert “CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller” #164
CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #161
SDN-5690: Rebase k8s to 1.32 #163
Full changelog

cluster-autoscaler

OCPBUGS-11115: improve failed machine detection in clusterapi #347
OCPBUGS-11115: make DecreaseTargetSize more accurate #343
OCPBUGS-11115: improve replica counting on openshift #278
Full changelog

cluster-baremetal-operator

OCPBUGS-52216: Bump x/oauth2 to 0.27.0 #463
OCPBUGS-51275: Add new resources to controller relatedObjects #465
OCPBUGS-44839: Mount the user-ca-bundle into ICC #455
Full changelog

cluster-bootstrap

OCPEDGE-1683: feat: add support for arbiter and dual replica: #116
Full changelog

cluster-capi-controllers

OCPCLOUD-2860: Enable propagation of Machine annotations to Nodes #233
OCPCLOUD-2680: Enable machine to node propagation #229
Full changelog

cluster-capi-operator

NO-JIRA: fix: e2e: azure conditionally set identity #276
TRT-2048: Revert “OCPCLOUD-2792: corecluster: set controller level conditions + tests” #273
OCPBUGS-53057: Fix misspelled CAPI IBMPowerVSCluster kind name in corecluster generation logic #266
OCPCLOUD-2858: Bump dependencies to CAPI v1.9.z #270
NO-JIRA: Update TODOs with new Jira issues #269
OCPCLOUD-2718: Add default VolumeSize for MAPI to CAPI conversion #260
OCPCLOUD-2792: corecluster: set controller level conditions + tests #256
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-41827: update injector to use a secret rather than an environment variable #380
Full changelog

cluster-config-api

Migrate DeepCopy and Compatibility gen to Gengo v2 #1776
CCXDEV-10455: update insightsDataGather to v1alpha2 with GathererConfig #2195
API-1843: FeatureGate(d) KMS encryption #2035
CONSOLE-4448, OCPBUGS-53412: Add the ability to specify a second custom logo for PatternFly 6 #2177
MCO-1521: Promote PinnedImageSet to GA #2198
Remove inactive reviewers and ex-Red Hatters from OWNERS, add everettraven #2238
Update KAL and remove patch strategy tags #2241
STOR-2141: add MaxAllowedBlockVolumesPerNode field to VSphereCSIDriverConfigSpec #2190
MCO-1590: Add explicit opt-out & status field for boot image update configuration #2223
API-1689: features: add ShortCertRotation #1977
NE-1954: Introduce GatewayAPIController feature gate #2219
CCXDEV-14850: insights add storage spec #2200
Support SEV_SNP and TDX confidential instance type selection on GCP #2165
OCPBUGS-48641: config/v1/types_cluster_version: Explain image and version both set #2158
OCPEDGE-1512: feat: add dualreplica featuregate #2196
STOR-2267: Add SELinuxMount and SELinuxChangePolicy to DevPreview #2212
Add changes to infrastructure object to contain service endpoints and feature flag added #2078
Full changelog

cluster-config-operator

OCPEDGE-1643: bump: ocp/api ocp/library-go k8s #431
Full changelog

cluster-control-plane-machine-set-operator

OAPE-147: Add E2E tests for MachineNamePrefix with OnDelete update strategy #353
OCPBUGS-52224: Bump to golang.org/x/oauth2@v0.27.0 #352
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2281: Remove csi-snapshot-validation-webhook references #231
OCPBUGS-24588: bump library-go #233
STOR-2252: Bump all deps #228
Full changelog

cluster-dns-operator

OCPBUGS-51193: Add runbook_url for CoreDNSErrorsHigh #426
Full changelog

cluster-etcd-operator

OCPEDGE-1500: Added scaling strategies for TNF #1396
Full changelog

cluster-image-registry-operator

CNTRLPLANE-112: Bump msi-dataplane dependency #1187
CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication #1186
Full changelog

cluster-ingress-operator

NE-1934: Bump to OSSM 3.0 for Gateway API support #1152
CORS-3907: Update ingress operator to with custom endpoints #1197
NE-1953: Add experimental Gateway API group to Validating Admission Policy #1200
NE-1907: Manage OSSM operator subscription manually to ensure a compatible version is installed #1112
NE-1981: Move controller test helpers to dedicated package #1199
NE-1953: Add Validating Admission Policy for Gateway API CRDs #1192
NE-1954: Implement GatewayAPIController feature gate #1198
NE-1936: Bump k8s.io dependencies to v0.32.1 #1184
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-35102: Bump library-go #1824
Full changelog

cluster-kube-controller-manager-operator

STOR-2267: Run SELinux warning controller #834
Full changelog

cluster-monitoring-operator

MON-4188: Add docs for proxy_url alertmanager #2582
NO-JIRA: [bot] Synchronize versions of the downstream components #2577
MON-4189: Updating node-exporter accelerators configmap #2558
MON-4043: Configuring external Alertmangers with proxy_url #2580
MON-4136: set up the PrometheusPossibleNarrowSelectors alert #2554
MON-3960: test: enable back TestTLSSecurityProfileConfiguration and m… #2545
NO-JIRA: chore: versions: kubeRbacProxy’s primary branch isn’t main yet #2574
OU-515: remove old nginx configmap deletion #2575
Full changelog

cluster-network-operator

OCPBUGS-52280: Move to use newer IPsec DaemonSets irrespective of MCP state #2454
CNTRLPLANE-112: Update managed Azure HCP cloud network config #2647
OCPBUGS-52972: Correct namespace ref and cert dir #2665
NO-JIRA: ovn-k: sync EgressService with upstream #2664
OCPBUGS-52361: frr-k8s: rename validatingwebhook name #2659
Full changelog

cluster-node-tuning-operator

CNF-16638: Reduce code duplication of RPS enabled checks (#1301) #1301
Add observedGeneration to Profile status (#1305) #1305
Manage TuneD profiles with the same name and different content (#1216) #1216
OCPBUGS-52352: Treat all aarch64 platforms as equals in tuned (#1303) #1303
NO-JIRA: PPC: unit: test sortTopology for expected output (#1217) #1217
Switch builder image to multi-arch image (#1297) #1297
Full changelog

cluster-policy-controller

CNTRLPLANE-55: Add MinimallySufficientPodSecurityStandard annotation to namespaces #161
Full changelog

cluster-samples-operator

OCPBUGS-54149: Updates to README.md #613
OCPBUGS-52848: Unrevert the revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #609
OCPBUGS-52848: Unrevert the revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #608
OCPBUGS-52848: Revert “OCPBUGS-52346: bump x/oauth2 to version 0.27.0” #606
OCPBUGS-52848: Revert “OCPBUGS-45049: Adding mutex to func createSamples on handler.go” #607
OCPBUGS-52379: relevant references to master renamed in README.md #603
OCPBUGS-52346: bump x/oauth2 to version 0.27.0 #602
OCPBUGS-45049: Adding mutex to func createSamples on handler.go #601
Full changelog

cluster-storage-operator

STOR-1881: Role and ClusterRole with too wide permissions #569
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #568
OCPBUGS-24588: bump library-go #566
STOR-2252: Bump all deps #554
CFE-1131: Added token minter Sidecar for aws-ebs hypershift-deployments #528
Full changelog

cluster-update-keys

NO-JIRA: Updating openshift-ci-release-key for 2 years #70
Full changelog

cluster-version-operator

OTA-1403: Move the CVO CLI Application to a Separate Folder #1169
OTA-209: Add CVOConfiguration controller #1163
OTA-1427: Reconcile all nodes via a special event #1164
OCPBUGS-52258: pkg/cvo/updatepayload: Context around ValidateDirectory calls #1166
NO-JIRA: Use k8s.sets for the fields of ClusterCapabilities #1159
Full changelog

console

(chores) Add approvers #14895
OCPBUGS-52864: Edit form for key/value secrets should be showing decoded base64 values. #14852
ODC-7773: Add e2e tests for Favorites feature #14802
CONSOLE-4437: Add CSP test to the test-prow-e2e.sh #14858
RHSTOR-6927: Removes LSO static plugin from console #14740
OCPBUGS-53119: Add support for extensibility in SnapshotClass and StorageClass pages #14878
OCPBUGS-52489: Fixed the typo ‘enivornments’ on tour page #14857
CONSOLE-4081: Refactor EditSecret component #14853
OCPBUGS-53030: Fix type-only dynamic module import build warnings for plugins #14861
CONSOLE-3960: Migrate react-helmet to react-helmet-async #14876
CONSOLE-3247: Remove react-measure #14844
OCPBUGS-34737: Disable pipeline ci tests due to failure in task creation #14893
OCPBUGS-53103: Apply plugin-api-changed label to plugin SDK shared modules #14872
ODC-7776: Add getting started alert #14830
ODC-7766: Test updates pertaining to perspective merge #14717
CONSOLE-4515, CONSOLE-4516, CONSOLE-4517: Update react-modal, react-tagsinput #14874
OCPBUGS-53118: Include init containers in readiness count if ready and started is true #14877
CONSOLE-4461: Notification drawer move to Page props, fixing the small overlap on the notification drawer #14723
OCPBUGS-45847: Remove barrel file references in static plugin exposedModules #14683
OCPBUGS-52589: Fix hooks in CaptureTelemetry #14870
CONSOLE-3414: Fix flaky Loading tests #14873
OCPBUGS-53047: Disable guided tour in admin perspective #14866
OCPBUGS-52166: Fix sort function on Access review table #14848
OCPBUGS-52589: update @types/react to v17, use new JSX transform #14864
ODC-7775: Update content in Getting started resources on cluster and project overview page #14829
OCPBUGS-52325: fix Node Logs toolbar layout at mobile #14836
CONSOLE-4430: Content Security Policy E2E testing with Puppeteer & Chrome #14675
CONSOLE-3414: Replace Loading with PF Spinner #14842
ODC-7727: Add hover effect to favourites icon #14839
CONSOLE-4504: set LogViewer theme using console’s theme #14827
OCPBUGS-48491: Namespace is not persisting when switching to developer view from the topology page of admin page #14812
OCPBUGS-49348: Fix Secret form drag and drop issue #14798
OCPBUGS-37101: Remove logoutOpenShift method call #14658
OCPBUGS-52316: enable clicking outside NodeLogs Selects to close them #14826
OCPBUGS-52214: add missing v5 patternfly-addons.scss and patternfly-charts.scss styles #14813
CONSOLE-4409: Update monaco theming and sidebar logic #14835
CONSOLE-4503: Replace custom Banner with PatternFly equivalent #14825
OCPBUGS-52298: Add breadcrumbs to ODC Project details page #14824
OCPBUGS-51372: Filter ‘Name’ on resource list page doesn’t align well when language is set to Chinese/Japanese/Korean #14822
ODC-7727: Favoriting page in the Console admin perspective #14765
OCPBUGS-51355: VolumeSnapshots are not displayed in OpenShift Web Console #14820
CONSOLE-4498: Replace checkboxes with Switch in ResourceLog #14815
OCPBUGS-30973: Remove @ts-ignore comment missed in #14680 #14814
CONSOLE-4496: Replace custom Checkbox filter with PatternFly Switch #14807
OCPBUGS-51037: Update the monitoring topic used by the console team #14781
OCPBUGS-50650: Retain original path when detecting perspective #14810
CONSOLE-4407, CONSOLE-4409: Update monaco and YAML language server, use PF6 CodeEditor #14663
OCPBUGS-51076: Console UI Displays Incorrect Subscription Values #14790
CONSOLE-4399: Added ‘createdTime’ in Jobs.tsx #14786
OCPBUGS-48413: Sorted Links based on OS in CLI #14819
Full changelog

console-operator

NETOBSERV-2029: add netobserv ConsoleCLIDownload #958
OCPBUGS-53164: Add annotations to Enable developer perspective quick start to include in the console quick starts #970
ODC-7723: Add quick start to enable developer perspective #968
CONSOLE-4508: Enable CSP e2e test #969
OCPBUGS-51256: Custom route TLS should be optional when IngressController’s DefaultCertificate is set #965
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-53198: Sync 25-03-2025 #177
OCPBUGS-45272: Ds merge 3/7/25 #175
OCPBUGS-48190: Ds merge 2/5/2025 #173
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

NO-JIRA: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into master #311
Full changelog

csi-external-attacher

OCPBUGS-41719: UPSTREAM: 624: Reorder API calls after successful detach #82
Full changelog

csi-external-provisioner

OCPBUGS-51561: bump golang.org/x/crypto to v0.36.0 #112
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #113
OCPBUGS-49805: Fix the managed-by-label getting populated with invalid value #110
Full changelog

csi-external-resizer

STOR-2251: Rebase external-resizer to upstream v1.13.2 for OCP 4.19 #169
Full changelog

docker-builder

OCPBUGS-43812: Upgraded Kubernetes dependency from 1.28.2 to 1.30.2 #458
Full changelog

driver-toolkit

test/e2e: adapt for layered node image (#167) #167
Full changelog

egress-router-cni

OCPBUGS-53096: Build openshift container based on 4.19 image #89
Full changelog

etcd

OCPBUGS-52181: Ensure cluster id changes during force-new-cluster #313
OCPBUGS-50510: Add configurable option for hardware-related timeout delay #311
OCPBUGS-45488: Updating ose-etcd-container image to be consistent with ART for 4.19 #306
ETCD-717: Rebase etcd 3.5.19 openshift 4.19 #315
Full changelog

gcp-cluster-api-controllers

OCPCLOUD-2856: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.9.0 (b822ce2) into master #239
Full changelog

gcp-machine-controllers

CORS-3906: Update MAPI GCP Provider to use custom GCP endpoints #111
OCPCLOUD-2882, OCPCLOUD-2889: Provision AMD SEV-SNP and Intel TDX confidential instances #110
Full changelog

gcp-pd-csi-driver

STOR-2257: Rebase to upstream v1.17.4 for OCP 4.19 #75
Full changelog

gcp-pd-csi-driver-operator

NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #140
STOR-2252: Bump all deps #139
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-45273: Properly annotate networking skip according to Jira ticket #2235
OCPBUGS-53014: Bump 1.32.3 #2241
TRT-1854: translate test annotations to use: include/exclude CEL, labels, filtering #2215
STOR-2285: UPSTREAM: <carry>: Add volume group snapshot test driver #2232
OCPBUGS-44693: Revert “disable ResilientWatchCacheInitialization feature” #2192
OCPBUGS-52477: Revert #2229: Initialize testContext before enumerating tests #2236
NO-JIRA: Initialize testContext before enumerating tests #2229
UPSTREAM: <carry>: OCPBUGS-45274: Enable PodRejectionStatus test #2231
OCPBUGS-45274: UPSTREAM: 130097: Modify how to check the status #2228
Full changelog

hypershift

CNTRLPLANE-111: Authenticate to Azure only once in CPO #5862
OCPBUGS-52190: Add konnectivity-proxy sidecar to openshift-oauth-apiserver #5876
NO-JIRA: Make serve-containerised in docs not defaulting to a running Docker container when Podman is installed #5859
OCPBUGS-53263: Fixed cpov2 reconciliation making no-op calls to api-server #5861
OCPBUGS-53462: Check for availability of individual catalog images #5881
NO-JIRA: Improve error output msg for Azure CLI role cmds #5877
STOR-2281: Remove csi-snapshot-validation-webhook #5776
CNTRLPLANE-111: Fix KMS Azure credentials mount path #5857
CNTRLPLANE-348: Konflux tagged releases #5869
OCPBUGS-53407: chore(deps): update konflux references #5846
NO-JIRA: feat(builds): Add area labels and OWNERS #5872
OCPBUGS-52424: Set shutdown watch termination grace period on kube-apiserver #5760
NO-JIRA: Add Azure scheduler doc to mkdocs #5865
CNTRLPLANE-342: Add missing area for support #5864
OCPBUGS-53050: Handle multiple mirror entries for source #5827
OCPBUGS-52331: CPO v2: rollout workloads on any changes to mounted configmaps/secrets #5767
NO-JIRA: openstack: revert OpenStackImageRetentionPolicy + use a unique image name per Hosted Cluster #5853
Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure” #5860
OCPBUGS-53083: e2e: detect leader election failure in restarted pods #5830
CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure #5837
METAL-1240: Fix kube-controller-manager and openshift-route-controller-manager services’ ipFamilies wrt PreferDualStack policy #5829
OSASINFRA-3492: feat(openstack): leverage ORC to manage the release image #5139
CNTRLPLANE-325: rootless containerized builds #5835
CNTRLPLANE-265: Enable gosimple, govet, and errcheck in golangci-lint #5759
CNTRLPLANE-111: Fix Azure KMS SecretProviderClass volume name #5820
NO-JIRA: Bump msi-dataplane dependency #5796
OCPBUGS-52985: filter watch events for HO AWSEndpointService reconciler #5818
NO-JIRA: Update Konflux references #5799
ARO-14354, ARO-14355, ARO-14356: introduce image registry capability behind feature gate #5456
OCPBUGS-52819: CPO Overrides for OCPBUGS-48519 #5808
PODAUTO-324: PODAUTO-325: Allow autonode to run upstream karpenter core e2e tests #5680
OCPBUGS-51364: fix oc patch command on doc #5807
NO-JIRA: Fix-dependabot-bumps #5797
OCPBUGS-52655: Add flag to set etcd storage size #5795
CNTRLPLANE-111: Fix KMS MIv3 Issues #5793
NO-JIRA: Disable GitHub Actions #5812
OCPBUGS-52821: stop using dev mode for loggers #5801
HOSTEDCP-2237: Auto approve Karpenter serving CSRs #5708
OLS-1370: Add full aws permission list and point to it from “getting started” #5746
NO-JIRA: CPOv2 token-minter abstraction #5769
NO-JIRA: test/e2e: skip WaitForImageRollout in executeNodePoolTest on newer releases #5778
OCPBUGS-52323: Make managed-trust-bundle optional #5763
CNV-57648: document how to configure descheduler #5779
NO-JIRA: Remove WI step for cluster-image-registry-operator #5777
OTA-1405: Add the ClusterVersionOperator API #5569
OCPBUGS-52419: e2e: don’t call WaitForImageRollout in executeNodePoolTest #5771
OCPBUGS-50518: Kubernetes API Server apply-bootstrap container does not respect SIGTERM #5475
CNTRLPLANE-263: Remove unused CAPZ CRDs from HyperShift install #5756
NO-JIRA: speed up image builds #5766
NO-JIRA: go.mod updates from Konflux #5761
OSASINFRA-3733: (follow-up) deploy ORC on release payload >= 4.19 #5749
OCPBUGS-52223: refactor aws identity health check into new controller #5751
OCPBUGS-50523: Fix audit-logs container to properly handle SIGTERM #5491
NO-JIRA: Remove issues-exit flag for golangci-lint #5762
CNTRLPLANE-111: Enable MIv3 for CP/CCM in managed Azure HCP #5755
NO-JIRA: Add CPO container sync check to GitHub Actions #5753
OCPBUGS-52226, OCPBUGS-52227: CVE Fix for potential denial of service in upstream libs #5750
NO-JIRA: Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 #5719
HOSTEDCP-2242: [CPOv2 Refactor] Refactor image-registry-operator #5676
Full changelog

ibm-vpc-block-csi-driver-operator

NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #140
STOR-2252: Bump all deps #137
Full changelog

ibmcloud-machine-controllers

OCPBUGS-51864: IBMCloud: MAPI replacing unhealthy CP nodes #61
Full changelog

insights-operator

NO-JIRA: refactor gather commands (#1076) #1076
NO-JIRA: feat: add gatherer name validation to gendocs (#1075) #1075
fix: allow running enabled functions from disabled gatherer (#1077) #1077
Full changelog

insights-runtime-exporter, insights-runtime-extractor

New runtimes tests #40
SB 3.4.3 test app and 3.1.4 app simplified #39
plain-java runtime sample #38
Full changelog

ironic

NO-JIRA: Sync with upstream metal3/main 2025-03-24 #650
METAL-1297: Update ironic-image to the latest commit hash #644
METAL-1299: Do not use openstack packages #645
Full changelog

ironic-agent

METAL-1299: Do not use openstack packages #177
METAL-1297: Update commit hash of ironic-python-agent #176
Full changelog

machine-api-operator

SPLAT-2078: Removed VSphereStaticIPs feature gate #1346
SPLAT-2060: Create e2e tests for vSphere Data Disk feature #1338
OCPCLOUD-2882, OCPCLOUD-2889: support AMD SEV_SNP and TDX confidential computing machines on GCP #1326
Full changelog

machine-config-operator

NO-ISSUE: MCN changes for API validation #4949
OCPNODE-2340: update (Cluster)Imagepolicy PKI config to policy.json #4886
OCPBUGS-52827: Fixing typos for MachineConfigNode #4914
OCPBUGS-51130: In OCL. Cannot install extensions #4870
OCPBUGS-52280, SDN-5330: Add ipsec connect wait service #4854
OCPNODE-2842: Set Upgradeable=False when cluster is on cgroup v1 #4822
“NO-ISSUE: ensure that client configs are not mutable” #4915
MCO-1501: Add support for custom MCPs in MCN #4876
OCPBUGS-53085: Add scc label to arbitor crio-metrics-proxy #4912
OCPBUGS-51150: daemon: ensure ostree-finalize-staged is started before rebooting #4907
OCPBUGS-44185: Race in configure-ovs.sh affects bonding interface configuration. #4609
OCPBUGS-52213: Update ObservedGeneration in KubeletConfig #4900
RHEL-79554: Consolidate OpenStack and PowerVS hostname handling into mco-hostname script #4866
MCO-1485: MCO:1486: MCO-1324: Attempt stub Ignition upgrade #4885
MCO-1537: Add MCDRebootError runbook to prometheus rules #4895
NO-JIRA: Update the MCS iptables debug command in docs #4896
OCPBUGS-43896: add revert logic to OCL path in MCD #4825
MCO-1515: Kube bump to 1.32 #4797
Full changelog

machine-os-images

NO-JIRA: Change to new host #54
Full changelog

metallb-frr

Align to upstream #79
Syncoperator03032025 #78
Full changelog

monitoring-plugin

OU-700: don’t show metrics links in acm perspective #367
COO-768: add plugin proxy to perses proxy path #365
COO-759: update datasource whenerver the csrf token changes #363
RHINENG-12634: incident utils typescript conversion #359
CNV-55987: Aggregated alerts #348
COO-684: add mui/material as is required as peer dependency #360
OU-681: fix typo in the predefined metrics list #358
OU-499: remove deprecated components #356
Full changelog

multus-cni, multus-cni-microshift

TRT-2057: Properly structure empty CNI result #267
OCPBUGS-54153: Ds merge ³⁄₂₄ #264
OCPBUGS-53087: Tolerate issues writing network status annotation on CNI ADD #263
Full changelog

multus-networkpolicy

Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.19 (#67) #67
OCPBUGS-44354: Sync 20250204 (#66) #66
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-52415: replace entrypoint #349
Full changelog

network-tools

NO-JIRA: Add Peng #138
Full changelog

networking-console-plugin

add adam to the approves #223
CNV-56305: upgrade Network UI to PatternFly 6 #221
CNV-58015: fix delete label row #224
Upgrade dockerfile for node 18 and 4.19 #222
Full changelog

nutanix-cloud-controller-manager

OCPCLOUD-2847: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (1771fdb) into main #42
Full changelog

oc-mirror

OCPBUGS-52960: v2: fix setting version during build (#1109) #1109
OCPBUGS-52978: delete: fix typo in –help output (#1115) #1115
OCPBUGS-52969: remove TechPreview mentions of v2 in –help (#1110) #1110
OCPBUGS-52588: fix: error when no related image was found (#1105) #1105
OCPBUGS-50680: v2/operator: refactor operator FilteredCollector (#1093) #1093
no-jira: v2/manifest/oci-manifest: refactor and dedup the code (#1098) #1098
v2: filter wrapcheck warnings for oc-mirror (#1104) #1104
OCPBUGS-51328: Fix CVE-2025-27144 (#1097) #1097
CLID-325: adds cpu and memory profiling (#1100) #1100
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #299
NO-ISSUE: Synchronize From Upstream Repositories #298
NO-ISSUE: Synchronize From Upstream Repositories through PR1871 #294
OCPBUGS-23055: Synchronize From Upstream Repositories through PR1811 #290
NO-ISSUE: Synchronize From Upstream Repositories #285
Full changelog

openstack-cluster-api-controllers

Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #361
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #360
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #986
NO-ISSUE: Synchronize From Upstream Repositories #984
NO-ISSUE: Synchronize From Upstream Repositories #966
NO-ISSUE: Update DOWNSTREAM owners files #973
OCPBUGS-42526: Ensure that PSA label is latest instead of pinning versions #972
Full changelog

operator-marketplace

OPRUN-3818: Bump sigs.k8s.io/controller-runtime from 0.20.2 to 0.20.3 #611
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.23.0 #605
NO-ISSUE: Bump github.com/onsi/gomega from 1.36.1 to 1.36.2 #608
NO-ISSUE: Upgrade github.com/operator-framework/api from v0.23.0 to v0.30.0 and github.com/prometheus/client_golang v1.21.0 => v1.21.1 #598
NO-ISSUE: Add dependabot to help keep the project maintained #599
OCPBUGS-52340: Ensure that PSA label is latest instead of pinning versions #600
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-48678: Update OVN to FDP25.A.1 24.09.2-41 #2493
Full changelog

powervs-block-csi-driver

MULTIARCH-5364: Rebase ibm-powervs-block-csi-driver with upstream #97
Full changelog

powervs-block-csi-driver-operator

STOR-2252: Bump all deps #81
Full changelog

powervs-machine-controllers

OCPBUGS-53309: Update dependencies to k8s 1.32 #110
Full changelog

prometheus

OCPBUGS-53025: Scraping: Bump cache iteration after error to avoid false duplicate detection. #245
Full changelog

service-ca-operator

OCPBUGS-48171: Update go 1.23 and ocp 4.19 #254
Full changelog

tests

OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.redhat.com to redhat.com #29618
CNTRLPLANE-5: Fix decoding of CBOR data in etcd test #29614
SDN-5768: virt, udn: use l2bridge binding #29439
OCPBUGS-52358: Fix egress firewall tests by updating the URL from docs.openshift.com to docs.redhat.com after docs migration #29604
CNTRLPLANE-5: Decode CBOR data in etcd test #29601
MCO-1594: updates for ManagedBootImageStatus #29598
SDN-4168: Fix IPsec tests for monitor failures #29437
TRT-2026: validate that the binary extraction was successful via existence check #29595
OSD-26270: re-enabled managed-upgrade-operator test by removing exclusion #29585
NO-ISSUE: Automated - Update synthetic test data #29570
NO-ISSUE: replace hardcoded ClusterVersionCapability string in olmv1 tests #29577
TRT-1575: Fail the test when an expected operator goes to degraded #29566
OCPBUGS-52578: Use payload pullspec for image info test #29586
OCPBUGS-51373: use non-fake boot image for patch #29574
Full changelog

thanos

MON-4139: feat: replace github.com/prometheus/prometheu dep with one having an xtra check in the parser to help identify le/quantile selectors misuses in Prometheus v3 #158
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #141
OCPBUGS-51973, OCPBUGS-52808: CVE-2025-22869: bump golang.org/x/crypto to v0.35.0 #140
OCPBUGS-46317, OCPBUGS-46331, OCPBUGS-47367, OCPBUGS-47437: bump golang.org/x/net to v0.33.0 #138
Full changelog

vsphere-csi-driver-operator

NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #298
STOR-2252: Bump all deps #296
Full changelog

vsphere-problem-detector

SPLAT-1801: Add support for host groups #175
No-JIRA: Update owners #178
STOR-2252: Bump all deps #177
NO-JIRA: NO-JIRA: Remove bertinatto from OWNERS #179
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github