4.22.0

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.22.0

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial-1of2 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-serial-1of2
- aws-ovn-serial-2of2 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-ovn-serial-2of2
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial-1of3 Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview-serial-1of3
- aws-ovn-techpreview-serial-2of3 Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview-serial-2of3
- aws-ovn-techpreview-serial-3of3 Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-aws-ovn-techpreview-serial-3of3
- driver-toolkit Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.22-e2e-aws-driver-toolkit
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.22-fips-payload-scan
- metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.22-e2e-metal-ipi-ovn-ipv6

Upgrades from:

Untested upgrades: 4.21.10, 4.21.12, 4.21.13, 4.21.14, 4.21.16, 4.22.0-ec.4, 4.22.0-rc.0, 4.22.0-rc.1

Upgrades to:

5.0.0-ec.3 (changes) - Failed
4.22.1 (changes) - S S S S S S F S S S S

Loading changelog, this may take a while ...

Changes from 4.22.0-rc.3

Created: 2026-06-04 22:31:25 +0000 UTC

Image Digest: sha256:283887f2860a745387608d106e70e5be2314df2497ee08c69e7bc669ca091340

Components

Kubectl 1.35.2
Kubernetes upgraded from 1.35.4 to 1.35.5
Kubernetes Tests 1.35.1
Red Hat Enterprise Linux CoreOS upgraded from 10.2.20260423-0 to 10.2.20260521-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
EVPN (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled

Rebuilt images without code change

agent-installer-csr-approver git a9bfcccd sha256:5d79cecf43e71d7e8652e99ed90fb0b8719b60d7ce37a7d5193684ab5bcf127a
agent-installer-node-agent git f562f353 sha256:7e0288a42652b22a4343d1fe3ea895808a3cbce531c560f9cc2124c31b6322a0
agent-installer-orchestrator git a9bfcccd sha256:23dd60ed42d592454cda3b0d3c52eacc2e5dc4b5ae5d175d24f294f57cb09508
apiserver-network-proxy git 5e33c228 sha256:2c45d0b5e0cf01dcb077fa735c1ad9caede6abe857e58d1e1990f0cd12e974b3
aws-karpenter-provider-aws git f0be9c72 sha256:6fde6ed1b1b9a0989ad3e5a8b092c39d01616277f948ba7f2222428cc657b3e3
aws-kms-encryption-provider git 19e7b623 sha256:10c1618b64a42c008038ae80a9de2bf5e2dd2e59e66913dd086b093241143585
aws-node-termination-handler git 341ed3a0 sha256:a72adc52502e5fca5bdc45ed298d6a676dfd8389907fee35dd10d2af66960c8f
aws-pod-identity-webhook git 82088287 sha256:8016aed8c28caa1dc90e73c1d9ccb86a9cb40a216bbf396fd3b3bb4b20c7fdd5
azure-cloud-controller-manager git 4c7a7646 sha256:562c79d416d8f5d8bb166efd7ea410333c3bfe98cc0bb2385f5448a87428d751
azure-cloud-node-manager git 4c7a7646 sha256:5a27d9c579decbf735538046cba9e5651cfe767ae5986072a94f7eaf71c4ec53
azure-cluster-api-controllers git a6ffab6a sha256:ee4835e9b4daab912343794241da54467121f0ab85f01e9b18afab9e02d5d1f7
azure-file-csi-driver git 403f856e sha256:f5be83e560ea5cb330681d1136c3a8a9b55d74e0647d17ae6aa5ade1ccf51a8f
azure-kms-encryption-provider git 99b9a3a3 sha256:6f3198de3c6e287415a038bbbcd49b67f8d6f49993ef4eafdbc3db1d66c337cf
azure-machine-controllers git 69d04909 sha256:d6663c3ae50f1031e6ce82befe9a17caccdf3b7870a7eaeadf21c4e574ab78ab
azure-service-operator git b44d4444 sha256:514abe3327047afb40dfcea456c22f0870c72e752d9268db9d565358683dbf3d
azure-workload-identity-webhook git a8fb3bf1 sha256:9d6706dc6c0950ccef8ed51798ccd7b92aecd6af023f0b2cb87426454fb10ea7
baremetal-cluster-api-controllers git ad4eb8a5 sha256:7db6ab61803e8e95695357d7a757bed0b6c2990ed11cd02a367182907ac5128e
baremetal-machine-controllers git 8d863b95 sha256:b8b16d4c1db2e86f0c6594557fbdddf035b517ecaf83d2dce7971f0bd855d9c7
baremetal-operator git c5e50489 sha256:ee12440b968d658d822e93125da49ea33e91d400f0d038d92ecfdc884cc42b48
baremetal-runtimecfg git dca8cb1b sha256:a4fbc1f99ec517f34be5335feac128c1d1f56addfe36d96b4705b70ee6a2fd78
cloud-credential-operator git c23bddf5 sha256:c30049a990a360d453bdd14dea406fc57ed8b23810c547b454baf9001ccb4fd6
cloud-network-config-controller git 2d69ad95 sha256:2fdc7a1aa3b8a30501e9e640e50ff87045e48b63a4d36a1cd9c616a9b0464ba9
cluster-autoscaler git 521e545f sha256:1e96943fd13d19e0f8078ce75e19f6bc1142bef31aa1d3191a84a09ef058cafa
cluster-autoscaler-operator git 260ea1b5 sha256:39c074611b3dbe3c6942085a086eef8d5c2e0d5f0a0aa499ac61c71e96615de0
cluster-bootstrap git e6be0fdf sha256:4ac329d80e4b1807496b0f70a7298cdbae50164e76fdfbd948c3a20ecee75ca9
cluster-capi-controllers git f1718df9 sha256:eb59b721df7c0f4c2bc932db14411ed726ec596d539eba29807938402d6e288a
cluster-cloud-controller-manager-operator git 1eccfe33 sha256:c7b8032204fa282aaa2ae2daac3e849af7be2f649f9e3a0e34e0862fa79b2456
cluster-config-operator git e0c2428e sha256:a75978720d831066ccc076e40cc2890bc1d2995e1bb8bb48a9568fcdeb4467ba
cluster-control-plane-machine-set-operator git b2e26b93 sha256:5219a90c4ebe770cd22a5d75be4da0eda1433eaf3ea3261cbb79c040105d4d1b
cluster-csi-snapshot-controller-operator git 108f37f0 sha256:8c48ef51be3741afc825fd1278e96d75add03ff1fe4f232e1024bd690241c728
cluster-dns-operator git 3d214118 sha256:7f8862afcd547bdf814505a4e6866f38fdc093ae2446f1e41a03f92c8284a605
cluster-etcd-operator git 3698b93d sha256:ae420bf3f2b349ccc05838b03801395d6f2fe64d8ee6767bb0410143c6dc95d5
cluster-kube-controller-manager-operator git 95150ed5 sha256:9a9c41beebac5cf2d031a3420efef8e5d549975740b50c6caec430e37241f118
cluster-kube-scheduler-operator git 51ea59ab sha256:01f2810830343befa772106068f1cfc609423c529f9dd1c878f3f1247c422907
cluster-machine-approver git a9edd695 sha256:c699e1f55059bce137d17b07730d87032b89ee5162c4f2d9b7833317d05f995c
cluster-network-operator git e20b9cb9 sha256:cdf9fcc95248ec92bd7e6d1811f1c1dd1593d5134699b4b4cbbd8282cde98ba1
cluster-olm-operator git d131450b sha256:8e983a1474784ed4475b4def0a43b331f7b79a294222b10b959039d1de9af03a
cluster-policy-controller git 44985a13 sha256:5194de1a067f3149d29565db899d26a447d38ce6f1c79fab1ac898721aa8ab7e
cluster-samples-operator git 317b21a9 sha256:93cfd3e6329a6f24f670867e01a30a57b25e16c88cf70b99736650ce2c2e3280
cluster-storage-operator git 8dfdf2ef sha256:1ea3e411bf75efa3c4c1e6193bae20657d7e3f2293e5bf3d2d7073dc0d5393a0
cluster-update-keys git 3b5c59cc sha256:bdc8ba8e9b7881d4e166ef727716a1b6cfb3d44b8286ff82cadc47cbb9f5cdf2
cluster-version-operator git e9c1c39e sha256:16ad36bc9f536cf1dc78a6ed6612b1dd8c1c1e76a40081b935b41f4ef4c247fe
configmap-reloader git 94e41c4c sha256:75ab62df368732f94f42b59f08a5fb8f158e6c5485695c0ce65800e16afd1f65
console-operator git f0619391 sha256:1289393f8b6b84a66f0cf20d16701b5be20e596117f29ab9890ba765a9b71f32
container-networking-plugins git 747ad66c sha256:48439c3024ddf344e1f66488290d0049b2bcc3afb9da951ee045024c6de0ce8b
containernetworking-plugins-microshift git 747ad66c sha256:5d954d7c3e2b610b84d2541448b5585d2283e96d2578a5419b273de7b4e48c98
csi-external-resizer git 4e74a4aa sha256:6e4824d8b009619376eccad4cfca089e6edec9ed0f66de39640bb7d5966265f5
csi-external-snapshot-metadata git 76523185 sha256:88bc45bf890ee6250be38c26613ab7ea8f870d1c562dbd5d56d3ca050e772c06
csi-external-snapshotter git d1bc3ffa sha256:c391d70285ea62232fc434c86e8ed570f1567711c912e1dda5a7379f40569bc2
csi-livenessprobe git 4d5e959a sha256:9afafd9011168685bd382b8a8b2ec2563cb4a0c5b5e6e8ad2da13ebeb568f9b9
csi-node-driver-registrar git cf174b30 sha256:9b8a3c212253498099b01e647d85015c392e06c616e6e0723de81773ce4c0621
csi-snapshot-controller git d1bc3ffa sha256:305536d437c8f12f056bd9fec73c554cfa15371a495827bff9e2e3cc756a4f73
docker-builder git fcd4ce2d sha256:3d54b4340f911fe645205e957b079d6320f3850639c8fd339af7c97775b13616
docker-registry git 9eae44fc sha256:3670f548a67f3038206de10faec7be0f803307fed00c312dd94092ae7c83854a
driver-toolkit git 7aa4007a sha256:87941abc4ee4070fd8deefffa8c47d85e75fbd4d4de959efcce84e085029813b
egress-router-cni git 5e0f8d1b sha256:f9d7345e09351a0529b65125d09d90af5de86289a21307cd8c0efaa330ec47aa
etcd git d8d67b8c sha256:0b78f777a343a0b61637004fbece09209c5b60663baabc5843367734b01b1227
gcp-machine-controllers git 0073bd11 sha256:68d1b43144ee524ffc4e1a2c22846473d3563aacaa4e15c1ddab31383310974c
gcp-workload-identity-federation-webhook git d7675f31 sha256:61d2855b75d6b0f65b46b3b7cf9288b2cd80f4b3e1f21c6cde76584d06f85db0
ibm-vpc-block-csi-driver-operator git f859eac9 sha256:10747c63d6d250091db36326ef6b14e1307d1ff2593df2b6eb47d96f9bc71828
ibmcloud-cluster-api-controllers git 03b143d5 sha256:4dbff92ae32e21acdc705b868cf11563252a13c7c95b4250cc81c1e2cbb26f22
ibmcloud-machine-controllers git 46b8c72c sha256:a62bf71c611dae4590cfdb7fccef1b9637ee6b9bbc161d6fb28e70252e7b6948
insights-runtime-exporter git 70256457 sha256:a27734671bb9000087e4283249d710eff4b8a36582e011b448762a217add1b12
insights-runtime-extractor git 70256457 sha256:0e3dfd74158cccd6997bcc333ba5a935522738436e9a3278d0acc555617d363b
ironic git f934d2cd sha256:d21e2ced996d21acd9036c1ea5195e238778f8650866b7b5d6946a7d342b994d
ironic-agent git 0336e638 sha256:5fd33ddf23d469c177aebe888b3fb484fbdbe872168919ccad8f6ef879534f37
ironic-machine-os-downloader git 9953d2b7 sha256:746481f63477ce3e2844813bff0efea3d158ff27051c0dfa87f7c3dd27f5f3a4
ironic-static-ip-manager git a379d09f sha256:089019993fda1911b485da454ec01420b092f25aac3f216d882c546a06878a56
keepalived-ipfailover git edb8b1e6 sha256:7d21309c80ff71c71f618170b3cd25a0deb0283b28ead1187dff4369c6cab31d
kube-metrics-server git 38c16c46 sha256:668eded1d7275aeccc83d95f6c6a7217d8ec9af501df617aa6c5bc623bb3197e
kube-rbac-proxy git d12e2746 sha256:482b260c9ed6b71530baafcaaed97e0b766a5ff9a03442ac12b60efe36a442b6
kube-state-metrics git 6fa06eac sha256:570b982b149a31958fac2c84cb2fec577b5ecd466def3845078b3bdc09a314cb
kube-storage-version-migrator git 72835e43 sha256:a7abedcab26d21bcf2e173a1f5c9c5981d906dde3dd7fab9d53aa7a0e6428507
kubevirt-cloud-controller-manager git 76dd5a6f sha256:7062d50b9587ccb2971ac766b8f668c6d5143dd097410c484895267ed25e3ce7
kubevirt-csi-driver git 771b562d sha256:1341ae96d8cb8cc037d29ef46bfd7ad1e9457960388b672ca7683bf81e059bf0
machine-image-customization-controller git a43d9c97 sha256:8af5aa530aa4718d10bf6c7cb5ecf46ecc2d04388f66ed4ea42f0cf146923840
multus-cni git b4ec7d82 sha256:c29c2d172af6c2a8eec35b4996c546652890670bee279349ac21874bd3efb8f4
multus-cni-microshift git b4ec7d82 sha256:180f0ea11339d6aacfc67a58100c55c2bf522eef902b7a6e72f331c72b82a463
multus-networkpolicy git 834a093f sha256:9b4bd1c18aa05904c90034c0533c39e2240cbea727bf80733c823defef30d4f5
multus-route-override-cni git 08af4127 sha256:2b9dc6813a7672a1acf94ef152bfe58ce8f9ff193a9a4eeb8a62118c70537db7
multus-whereabouts-ipam-cni git d691040e sha256:1a6ab4c94b3e0aef545aabb3a2efa16fc5f6df951e295bd4ede8cd5ad7b4ea82
must-gather git 8554213f sha256:8abf29a77b29ae50fb5634048353451f53dd2c32a5f0b20afb6bfb23e20b29fc
network-interface-bond-cni git 297eeb43 sha256:c3220adbb87a3bbbb109f426a8d4b2f9fa6768b57fea86ed5e7d84dab0948d25
network-metrics-daemon git 5b233ea1 sha256:b8dc5279788e87edb9c510cf2d2a6c01d48e1223b73eee65f1360653bc18414a
network-tools git 5c4b905c sha256:96c1df8f11a21e30e52345e10d7c1b157ad3eacc4897240fc10a589f58ae993a
nutanix-cloud-controller-manager git 8e75679a sha256:d15868625534a6562cbb1c182a3b3debfdf54f92f2b2d1e810d09860916d947a
nutanix-machine-controllers git 60559fdd sha256:45108dac00d6dc0f48bd62f9bd3d342760aaee7cd875e3702348b0ed59443831
oauth-apiserver git 4c002a91 sha256:e667aecf6081d5c54274c08ffdae0d0a89a308896be45177d1d10ff0a7d28ce4
oauth-server git 6c6e9627 sha256:be4d7501f93298c67df790096b88bd6f20a278cfe3e9990e9d6f005d82f78679
oc-mirror git ca5eebdc sha256:98c8c137a748e49042751079f4c89fe61167f5f4687ccb70bdb8886aaef09b3c
openshift-apiserver git fbea5220 sha256:ff9f23cec0bc537a1bb810f55ea7087974f38bd9b659cb61143b5b5ee3c766fc
openshift-controller-manager git 26d20fea sha256:7a0abe7be4967ea86932600ce237f0a91bc5c4884952088419e60a2d3d7d403c
openshift-state-metrics git e71e0996 sha256:1daf46ced0b6e4c52ca5191fd9fd5fa6bcfd8435a47c5424ff1e60e922475900
openstack-machine-api-provider git 8a8c354b sha256:0ba94b231c093969329921d0dd692678ec1946cd8239a7c36ac61bdbcd5a4d95
openstack-resource-controller git cbea7a9c sha256:109ba73f51bdcf40b3a33c8aa5e9d9e9ca8edf09bae402ce52fcbe4d93568a44
operator-marketplace git 38da2ef7 sha256:9e4f76f018217c06ae0d9660836e6e9c7f332eb3d2947e40bc63a411a514c246
ovn-kubernetes git 72db5e8d sha256:db7b3857401301aab125d7a5cd51b572d308b7128a017f555e31c7280307dd06
ovn-kubernetes-microshift git 72db5e8d sha256:0bfafdd8708d19724c6ec44e84f572f507462e71ceb023433c6cf2265080b8a8
powervs-block-csi-driver git 02959a8d sha256:98fc45edfa0610a8b57d1062ed8c310083e299aabd4c293d755378da22055dff
powervs-block-csi-driver-operator git 27747821 sha256:d06a0558ee21b1d11de32cc24ee16ddab9a0d9cbe0740bb013d5e1fcb97c0ac8
powervs-cloud-controller-manager git 766c0952 sha256:65b7d3ea274b46a552edb13847de5ee10db3bafc8dc5decef02992ce58d80b80
powervs-machine-controllers git e88cf81d sha256:17151dbba6a336735fce95fddcad66eac2a78e7fb60a938b68a1245bcae557fa
prom-label-proxy git c4c99a30 sha256:8442ffbbb2e319e66a370467d3c3a1b1081c722a71395d794bcabfa60d16bf5e
prometheus-alertmanager git 02dc3e9e sha256:e20f8fd0d540a5bd6be32d0189832bbe10fdeb88579be4f78cc70fc6917bc22e
prometheus-config-reloader git 70e38466 sha256:028703217e08f4210d235d830d432cf71baace90f642dc9284e053a3e7a7a59f
prometheus-node-exporter git 6c4fc012 sha256:998d73da6282b87b1bd2cd58a2cd852034872eb3b022a452d05b4fd2433e0e85
prometheus-operator git 70e38466 sha256:66be934805e7d4d672a5fc2602eb37c55a2783bfe71961e2f8482a23f957084d
prometheus-operator-admission-webhook git 70e38466 sha256:d7bac163e3b837574bedde5ea726fa59210e4130a8d593158ccede778eed5da7
rhel-coreos git f41264dc sha256:6599ea587737de2929740f76233b300f85e9b039dbc4665c88a240a2483ee3e8
rhel-coreos-10 git f41264dc sha256:caf1d88fb6160df369ab2e863cf1624bc966517ca71f739fd9733d741fdf7f57
rhel-coreos-10-extensions git f41264dc sha256:99be0e1fa70cd66aea616dca1007fc004996528682c2dbc438b6c2fbe44c67b4
rhel-coreos-extensions git f41264dc sha256:d1ffa6cc20e3d64dbf036c93efa5d0334c9392d5d8dc5ea7fa871f8d5b2c1cc7
thanos git 5d9d0f38 sha256:9b99e9e1e2242abd942880018e2139cdf34a95fb5dce423aa2e44e0ebd84ff57
volume-data-source-validator git 8e176cec sha256:0fb71b380fd126cfb6fdebd2d4e69dc36ad05e5c0f4fd00db1f74c481b5ed539
vsphere-cloud-controller-manager git 39008107 sha256:f78dd967fdf96160596104be27f96acb8918c150af29011547b83dbfe43f8df6
vsphere-csi-driver git cf21e121 sha256:18cb3005bf544a46cb373a1747fdb96eb0a5a4556e2c9a4ea734e93259cf9b27
vsphere-csi-driver-operator git d3668c9a sha256:369cfe052729c163ec152bbe1c78171fc115b8053c99cfdc8b53f3758605f6c3
vsphere-csi-driver-syncer git cf21e121 sha256:602289f8798d47a1e9dce1e8ada76a05a981d049f7e03d8755dc9e76a3f10945
vsphere-problem-detector git 842aed3d sha256:9415a18dd8bbb59dc4dd594a0ad5b006705d1a3edd026baaaf0926283b96a225

agent-installer-api-server

OCPBUGS-83542: Mark raw FC/iSCSI multipath members as ineligible #10150
OCPBUGS-83511: Fix IRI patcher feature check #10147
Full changelog

agent-installer-ui

fix monted pull secret parsing (#3724) #3724
Allow to install SNO topology (#3721) #3721
OCPBUGS-85230: Ensure follow-redirects pkg resolves to ^1.16.0 (#3705) #3705
OCPBUGS-85265: [release-4.22] OCPBUGS-84038 | [Below the sea UI] Lack of visual feedback (spinner) on disabled “Next” button during background validation (#3703) #3703
OCPBUGS-84318: fix operators list in ABI below the sea (#3645) #3645
Hide internally generated custom manifests on the Cluster Review page (#3700) #3700
OCPBUGS-85199: [release-4.22] OCPBUGS-84147 | [Below the sea UI] Leaky Abstraction: Transient 500 errors exposed during host binding process (#3683) #3683
Remove 2 node arbiter option from the control plane dropdown option (#3702) #3702
OCPBUGS-85220, OCPBUGS-85222, OCPBUGS-85224, OCPBUGS-85226, OCPBUGS-85228: Bump axios to ^1.15.1 (#3693) #3693
Full changelog

agent-installer-utils

OCPBUGS-86042: Filter out link-local IPv6 addresses #306
OCPBUGS-85525: update konflux references #296
Full changelog

aws-cloud-controller-manager

OCPBUGS-83898: UPSTREAM: <drop>: bump google.golang.org/grpc to v1.79.3 #155
Full changelog

aws-cluster-api-controllers

OCPBUGS-84393: Bump github.com/go-jose/go-jose/v4 to 4.1.4 #606
Full changelog

aws-ebs-csi-driver

OCPBUGS-83900: UPSTREAM: 2911: bump google.golang.org/grpc v1.80.0 to fix CVE-2026-33186 #316
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-85532: Add init container for Manila node daemonset #555
OCPBUGS-85116: Mount writable /tmp in SMB CSI driver #550
Full changelog

aws-machine-controllers

OCPBUGS-85125: Fixed broken test and simplified some logic #184
Full changelog

azure-disk-csi-driver

OCPBUGS-85193: check for node name in waitForDiskManagedByTobeRemoved #146
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-85407: PowerVS: Add port 80 security group rule #10548
OCPBUGS-85503: PowerVS: Fix supported system types retrieval #10521
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-85066: Add required-scc annotation to node-joiner pod #2266
Full changelog

cluster-authentication-operator

OCPBUGS-85105: Fix OAuth page showing OKD branding instead of OpenShift #888
OCPBUGS-84954: Fix terminationMessagePolicy on network policy e2e test pods #884
Full changelog

cluster-baremetal-operator

OCPBUGS-85640: Fix webhook to validate the actual admission request object #602
OCPBUGS-84936: Fix webhook server not starting due to missing WithValidator #598
Full changelog

cluster-capi-operator

OCPBUGS-86353: fix: scope webhook to capi namespace, remove unused webhook endpoints #568
NO-JIRA: Allow sustaining engineering to self serve dependency updates #555
OCPBUGS-84942: fix: remove retired Microsoft.ClassicStorage permission #548
Full changelog

cluster-config-api

Promote EVPN Feature Gate to GA #2826
OCPBUGS-85102: Add labelSelector to MachineSet status for scale subresource #2831
Full changelog

cluster-image-registry-operator

OCPBUGS-85342: Fix stale config cache causing incorrect deployment #1342
Full changelog

cluster-ingress-operator

OCPBUGS-86074: Update grpc-go and x/net #1449
OCPBUGS-85024: TestUnsupportedConfigOverride: Ignore featuregate and defaults #1432
OCPBUGS-85064: Allow host network connections to the ingress canary #1433
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-85269: fsync static pod cert and manifest writes for crash durability #2143
OCPBUGS-85260: operator should not override authentication config serviceAccountIssuer with the default one during the operator initialization #2142
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-85570: add PodDisruptionBudget for migrator deployment #174
Full changelog

cluster-monitoring-operator

OCPBUGS-86034: fix: use numeric ports in NetworkPolicies and add enforcement e2e test #2929
Full changelog

cluster-node-tuning-operator

OCPBUGS-85020: e2e: Add irqbalance StartLimitBurst >= 100 config test #1506
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-85097: e2e network policy tests #687
Full changelog

cluster-openshift-controller-manager-operator

OCPBUGS-86054: e2e network policy tests #436
Full changelog

console

OCPBUGS-86228: Re-enable add-flow-ci.feature e2e tests disabled for createRoot adoption #16468
OCPBUGS-86064: Enable Topology e2e tests #16458
OCPBUGS-83940: bump gRPC-Go to v1.79.3 #16443
OCPBUGS-83416: [release-4.22] CVE-2026-26996 Bump minimatch library #16278
OCPBUGS-85505: Add Suspense boundary to LazyRoutePage for plugin routes #16438
OCPBUGS-85494: Prevent binary secret data corruption when editing #16435
NO-JIRA: enable multi-architecture yarn builds #16415
OCPBUGS-85196: Remove @console imports from SDK dist #16407
OCPBUGS-84843: i18n upload/download routine task - version 4.22 #16382
OCPBUGS-85114: Fix SDK publish workflow for Yarn Berry #16403
Full changelog

coredns

OCPBUGS-86189: [release-4.22] OCPBUGS-83943: Bump gRPC to v1.79.3 to resolve CVE-2026-33186 #185
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

UPSTREAM-SYNC: Sync release-4.22 with upstream release-1.35 #381
OCPBUGS-85241: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.22 #392
OCPBUGS-85239: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.22 #390
OCPBUGS-85240: Updating csi-driver-manila-container image to be consistent with ART for 4.22 #391
Full changelog

csi-driver-nfs

OCPBUGS-83946: CVE-2026-33186: bump google.golang.org/grpc to v1.79.3 #174
Full changelog

csi-external-attacher

OCPBUGS-83947: Bump google.golang.org/grpc to v1.79.3 #107
Full changelog

csi-external-provisioner

OCPBUGS-82033: Bump google.golang.org/grpc to 1.79.3 #133
Full changelog

gcp-cloud-controller-manager

OCPBUGS-83965, OCPBUGS-84447: Update grpc and spdy dependencies #117
Full changelog

gcp-cluster-api-controllers

UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.12.0 (b9b055d) into release-4.22 #294
OCPBUGS-83966: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.11.2 (14609a0) into release-4.22 #293
Full changelog

gcp-pd-csi-driver

OCPBUGS-81649: Bump google.golang.org/grpc to v1.79.3 in release 4.22 #108
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-85023: Add test e2e manifest for images volumeSnapshotClass CSI tests #180
Full changelog

haproxy-router

OCPBUGS-83969: Bump google.golang.org/grpc to v1.79.3 #776
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-85499: Bump Kubernetes v1.35.5 to release-4.22 #2664
OCPBUGS-85415: [release-4.22] Improve WatchList test robustness #2663
OCPBUGS-84640: devicemanager: constrain topology hints to device NUMA nodes #2656
Full changelog

hypershift

OCPBUGS-86354: set limits for aro.openshift.io/swift-nic in request overrides for ARO swift #8564
OCPBUGS-85620: Fix webhook TLS failure after service-ca to self-managed cert migration #8513
OCPBUGS-83836: add missing RBAC for webhook configurations #8295
OCPBUGS-84939: [release-4.22] add CP pull-secret watches for in-place propagation #8408
OCPBUGS-86026: Fix metrics-proxy deployment failure due to dots in volume names #8534
OCPBUGS-85779: Add AWS ISO domains to konnectivity IsCloudAPI #8447
OCPBUGS-85659: Clarify –base-domain flag default behavior #8525
ACM-33601: use the latest ubi9 nginx image #8465
OCPBUGS-78988: bump go builder and ubi images #8457
CNTRLPLANE-2939: Coordinate CRD lifecycle with Cluster CAPI Operator #8442
OCPBUGS-85104: fix, cno, skip cloud-network-config-controller check on non-cloud platforms #8438
NO-JIRA: fix(ci): use PR base SHA for api-lint diff in GHA #8430
OCPBUGS-84841: fix(ingress): set FIPS_ENABLED env var on ingress operator #8388
OCPBUGS-83709: fix(kubevirt): filter link-local addresses from EndpointSlice endpoints #8272
Full changelog

ibm-cloud-controller-manager

OCPBUGS-83973: Upgrade grpc for CVE-2026-33186 #105
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-83974: Bump google.golang.org/grpc to v1.79.3 #147
Full changelog

insights-operator

OCPBUGS-86013: add trusted-ca-bundle to gatherin job #1290
OCPBUGS-83976: Bump google.golang.org/grpc to v1.79.3 #1287
Full changelog

machine-api-operator

OCPBUGS-85102: Populate status label selector for scale subresource #1497
Full changelog

machine-config-operator

OCPBUGS-85341: Apply password only if changes exist #6053
OCPBUGS-86047: Manually uncordoned nodes are not automatically re-cordoned #6060
OCPBUGS-85124: use --delete-if-present for karg removal #6007
OCPBUGS-85626: only check password hash in /etc/shadow #6042
OCPBUGS-85651: BareMetal skew e2e fails patching provisioning CR after CBO webhook fix #6047
OCPBUGS-85198: Add terminationMessagePolicy to build pod containers #6012
OCPBUGS-85481: Add fix for ossImagestream status #6026
OCPBUGS-84813: Include RootCA in the temporal CC #5904
OCPBUGS-84406: Fix CVE-2026-34986 #5986
OCPBUGS-85156: Bootloader update attempt should be conditional #6011
OCPBUGS-84693: prom rules: add alert for nodes using runc #5998
Full changelog

machine-os-images

OCPBUGS-85477: Force rebuild for OCP 4.22 #88
Full changelog

metallb-frr

OCPBUGS-84960: [release-4.22]: Bump to frr10 #130
Full changelog

monitoring-plugin

OU-1360: reset queries when namespace changes in dev perspective #934
OU-1366: prevent namespace and project desync #935
OCPBUGS-85088: Sync Main to 4.22 #916
Full changelog

multus-admission-controller

OCPBUGS-85569: Bump Go version to 1.25.0 for ML-KEM/PQC support #116
Full changelog

networking-console-plugin

CNV-74110: new translations #407
Full changelog

oauth-proxy

OCPBUGS-86213: Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART for 4.22 #366
Full changelog

olm-catalogd, olm-operator-controller

OCPBUGS-85059: fix(test): drop blocking namespace-deletion wait between both-watch-modes scenarios #714
Full changelog

openstack-cluster-api-controllers

UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.14 into release-4.22 #409
OCPBUGS-84994: Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.22 #410
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-84411, OCPBUGS-84412: Update github.com/go-jose/go-jose/v4 to v4.1.4 [release-4.22] #1292
Full changelog

prometheus

OCPBUGS-86248: fix: TLS client cert rotation when no CA is configured #313
OCPBUGS-84010: bump google.golang.org/grpc to v1.79.3 [release-4.22] #310
Full changelog

route-controller-manager

OCPBUGS-86184: OCPBUGS-83892: Update grpc-go and x/net #90
Full changelog

service-ca-operator

OCPBUGS-84953: e2e network policy tests #353
Full changelog

telemeter

OCPBUGS-84021: update google.golang.org/grpc #605
Full changelog

tests

OCPBUGS-85655: Validate no WAL corruption when both nodes shutdown gracefully #31174
OCPBUGS-85515: Verify dynamic revision bump for etcd during kernel crash #31166
OCPBUGS-85339: Add e2e tests for KubeletEnsureSecretPulledImages feature gate #31148
OCPBUGS-85089: Allow OVN-Kubernetes CIDROverlap pathological events #31141
OCPBUGS-85122: Add ArtifactVolume tests and register artifact image #31108
OCPBUGS-84944: Fix timeout in PinnedImages GC test #31115
OCPBUGS-84946: skip on BM which has insufficient host #31116
OCPBUGS-84958: Optimize NetworkPolicy reconciliation test to reduce timeout #31119
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-84028: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.15.3 (e917f8e) into release-4.22 #108
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 16)

View changelog in Markdown or change previous release:

Source code for this page located on github