4.20.0-0.ci-2025-05-16-080517

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.20.0-0.ci-2025-05-16-080517

Team Approvals:

Tests:

Blocking jobs
- aggregated-aws-ovn-upgrade-4.20-minor Succeeded periodic-ci-openshift-release-master-ci-4.20-upgrade-from-stable-4.19-e2e-aws-ovn-upgrade
- aggregated-azure-ovn-upgrade-4.20-minor Succeeded periodic-ci-openshift-release-master-ci-4.20-upgrade-from-stable-4.19-e2e-azure-ovn-upgrade
- aggregated-gcp-ovn-upgrade-4.20-micro Succeeded periodic-ci-openshift-release-master-ci-4.20-e2e-gcp-ovn-upgrade
- hypershift-e2e-aws Succeeded (1 retries) periodic-ci-openshift-hypershift-release-4.20-periodics-e2e-aws-ovn
Informing jobs
- hypershift-e2e-azure Succeeded periodic-ci-openshift-hypershift-release-4.20-periodics-e2e-aks

Upgrades from:

Upgrades to:

4.20.0-0.ci-2025-05-16-140517 (changes) - S S S

Loading changelog, this may take a while ...

Changes from 4.19.0-0.ci-2025-05-16-032906

Created: 2025-05-16 08:05:21 +0000 UTC

Image Digest: sha256:dbbf86c7137b2348611ed0083b5fa81d6d287e0f849a24079aa9b3ba63e4edb9

Components

Kubectl 1.32.1
Kubernetes 1.32.4
Kubernetes Tests 1.32.4
Red Hat Enterprise Linux CoreOS 9.6.20250514-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
BareMetalLoadBalancer (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CloudDualStackNodeIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DisableKubeletCloudCredentialProviders (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIProviderOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereDriverConfiguration (5 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiVCenters (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ProcMountType (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesPodSecurityStandards (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesSupport (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
AWSDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureMultiDisk (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesvSphere (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Rebuilt images without code change

apiserver-network-proxy git 1e82311c sha256:6a33fd22ec2683ddf1c7805a3085d79caa78b9aa5677115d7e89f6bbbc2be252
aws-cloud-controller-manager git 425c1c5b sha256:8036b5d959599e317cea2173420469e4a2299c88807bf98c79cacf7fe293d24f
aws-karpenter-provider-aws git 68ae0c26 sha256:4197f3225985b2fdc620f5bc460d3777c2b603609615be9f5bcd6d28de50c8cc
aws-pod-identity-webhook git b0a16d53 sha256:927f0c2294c1cf1918851b8aa3edff82afa86b45c6f3a9c45e7cf7dc38970ab9
azure-cloud-controller-manager git 7109d6b4 sha256:d4bd25d64e8571b7f8f2ab983d91d5a56ef716aeaec6df41984c4b033f1c3645
azure-cloud-node-manager git 7109d6b4 sha256:0c28126f768b148f98dcf9e956d1e752fb8e9a0cb95abee4117bf9a035351573
azure-cluster-api-controllers git 2c931b4a sha256:010ff3f9b13cfaa6d0f1945249ebb5ea976abf4113a7257497d23ea0b4b06699
azure-kms-encryption-provider git 70c82be8 sha256:ca3bd683766b089e8533bb3f5a78a48c83a702bcc3750062f6fae1b54d86e236
azure-service-operator git 0ae129b4 sha256:7ca1d1bd0fa6b2fa1acf8ea388b0f3200f1e5564ce19eca5529c67ee753e136c
azure-workload-identity-webhook git 892d3c4d sha256:497f11be3255d85aafb33bd53dcfa16f011c23361cbef67eda14b6f096591a67
baremetal-cluster-api-controllers git 9e7170f2 sha256:bb9ce646fdef05df455723398720fe5b4db1816a5de8a3aec5f066be3a011f50
baremetal-machine-controllers git f7a78954 sha256:473ddf9fda7d158fcb91e9e5e99b79c0b034989679804936a69b926a3b5e2bcb
cloud-network-config-controller git 98ae311b sha256:f3ff0e960d86c7235045c88f8528b4d8406a08134355a40dc81a71d7fd5be32b
cluster-authentication-operator git ceeb021d sha256:241ef2f888ed798d6666461ad2b318f2a69bb0acd7bcd6dde40b94ffba53926a
cluster-autoscaler git f746d442 sha256:170bb5e3078045d93779d92d58a0396de8ead9b21a660b33b6953dd06665d362
cluster-autoscaler-operator git 227f7537 sha256:b33f3d54accdabc7f3d275c4141a60e6e0303466ba573bd394d7349c10614405
cluster-baremetal-operator git f64a5c1d sha256:4619b7de7a96b3e0a4eff1c337b96f9f2f6371fef6c16468f763543e038223db
cluster-bootstrap git 8fde9c52 sha256:9f87b67e8e200f44ea84fb3de3eb515e42089ffdc32da5e5be29069a5c159add
cluster-cloud-controller-manager-operator git 7ddcbe3d sha256:bf939e56f832fbc983b6e5bf961d6269fdc849f3bfbb1ceae399acef31ba7802
cluster-config-operator git 96607b59 sha256:cdd755fdc92a550a328fc85123ecdc240f9bf4988d22d6f8b58de169ce8da060
cluster-control-plane-machine-set-operator git 1dbf0c7a sha256:4bb8a2dff784032c5598d809e56131f236dc3ecff69686ab2633f5a41778e40a
cluster-csi-snapshot-controller-operator git cf99de97 sha256:ae533e08698484b040f6172397781a25eb148e9a94702b1fe4d5acf06f25f07d
cluster-dns-operator git 65981306 sha256:f8902e5cc14395ec6e8472be5cf35ae3617a037dfb1e6c7a0da8cc7f1c214e48
cluster-image-registry-operator git 85ac017f sha256:40c242f22eaaac713222e7c854e856fa71a3b9d832c5be5cd3e411496a76d3e3
cluster-kube-cluster-api-operator git 3ec30377 sha256:11a76e611d8761d9b79b9b68e6eb6221cb252dc51f5a4388b44d2d2f77e97e43
cluster-kube-controller-manager-operator git cec410b7 sha256:f78aca0fc61731a00d8e3c7ca268155f3723229ce2c0eb7c2948ce44671588ca
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:28a5a7e63ee063e26934d0b194ee3b9109dfe0073c74fbc388c16d5cdb182df4
cluster-openshift-apiserver-operator git 5f66a3e1 sha256:0da30bf177d5de2768fd94fd729fc9e328195ef1ef14efb49704c71438253508
cluster-openshift-controller-manager-operator git 0ab30996 sha256:45aaf0504582c5426ccdf3f376e90540b97cf2152a40688f06b13f31a3d2f6d6
cluster-policy-controller git 74852478 sha256:4fd668a347db4cb2b253ddb5d13575fa925a173f618dba7b988d3d8d9e2ad3a0
cluster-samples-operator git 4cb29197 sha256:b411e8ae007c3e3927cb5b6f94a2287c4e4436f6ebb660744492528ebf03d3a4
cluster-update-keys git c1c56b4c sha256:6a3366583ddc54f3059d04ae9fb6750c102189d62e2daee211de8325607f27d6
configmap-reloader git 9bfbde86 sha256:3aea0550b9faba818ebca38cff43e5bcceeab62cf83e93f46c04fde6fe901271
container-networking-plugins git b09f487c sha256:6dfc571c4dfb45b35d3d204f033f2c53a856a709bb5e6aa7335f681bd2163cc7
containernetworking-plugins-microshift git b09f487c sha256:a9724611601698dd27e90d8477f86e8d1794670fadf2d5e3c7acd007186796f4
coredns git 7a1451db sha256:c11fba50ecc9b3a1abe69c77362f26885d57b21f70c9d282e02ab55d3b7a3d93
csi-driver-nfs git 2eb5c109 sha256:486daabf2d2dcf893e24c33021f849c6e0b2d6999bbefa1d71ecbdc32704c59e
csi-external-attacher git a8175e39 sha256:c515c7be4424419310773822456eba01bcc6127901f5c15eaeaaa4e2913e770f
csi-external-provisioner git 9db1cdb1 sha256:e0d1cca9d99b24cf885ddbd5bd29a48e5a1b7b825102c43d9a35e8433d0d49c9
csi-external-snapshotter git ac82cafc sha256:19bf038fc95774b80ae43bc87d667e58c3caaa797c3b9e04bb0120acc9fc6811
csi-livenessprobe git ca514478 sha256:a73a8858857f6016bdce68d7c49b890bb9088df9811820e9dfb28e98a8591fa0
csi-node-driver-registrar git d18edb3a sha256:fc2c3026de8026626ff33e09fd68d7906ebfb6386d65537a859fd00332ad42fd
csi-snapshot-controller git ac82cafc sha256:ad01c7d080f7316490a5f6af8a5964a6b4c3af8455ec245457bd0c45cb1c2ca0
docker-builder git f2e5d601 sha256:a3c356d90e1fedd0bf911c76ad5abc0ae6b2cfd85c281247670fab1027a98ccf
docker-registry git 59376a75 sha256:746f6955e74581b8e07ff3bc00da7889a4a044db399e4efb680dfb01f573bfa2
driver-toolkit git 686fdac5 sha256:c81534f7724ef0c577d3e82539afb2ef4d6f662207e26132469a078aa9153a66
egress-router-cni git 85353bb9 sha256:bce07e5d53f3e05efabaa60442bfc5be553aead6820fb5fccc7705900eb862f8
etcd git a5421dfe sha256:e36480a3e0fdaff00ff46ac31c14267cd1a875c80b3675379b06ad6ff17fd6bc
gcp-cloud-controller-manager git d8d3aeba sha256:bf7e59429394b167b65b0d444670233084400fd4e01ed5a653c2acbc0765d46e
gcp-cluster-api-controllers git 8fba88aa sha256:8609a2bb73451a93574e20b31d036e61bc1df928ad90e96423da0fc2cf868311
gcp-pd-csi-driver git 3aeac35b sha256:ffe068646528748674fa8e1803b5832a375bb722419e55f1d248643aa854335b
gcp-pd-csi-driver-operator git 44c74f24 sha256:5dc2d9515e67f923ba3197b465d63ff17b77aba597771109a123dbc9150077da
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:3a64d9d8cd7106b6bd39b54b64337daf2a06d709d8596782f9ebb5f422655603
haproxy-router git b41f9d05 sha256:c05c13c6175ae97453c73d56c906745170d3de66374cd41d37dc7cfe32288d13
ibm-cloud-controller-manager git 7422aab2 sha256:09f1f2c391c7a82bbda09e401a9728ba95c5bbf6be8952ad5867b79801933799
ibm-vpc-block-csi-driver git 176b6ef1 sha256:0ec8eff03020aca161f6836a73be75c898213c9c642d44dd40f226841fc920a9
ibm-vpc-block-csi-driver-operator git 3dfcfa12 sha256:2b9f4f18dfc6e3e3580a67fc1126f0b8182c7a02701a27a7fa69b41759d1639e
ibmcloud-cluster-api-controllers git 0453d282 sha256:e77a591134fecb8f2d8022a1fc294cb7abf88bbb058b7d94dad0c145deb58872
ibmcloud-machine-controllers git 989bd874 sha256:a4629208d4f32fb84f8335848413ca92ce58b12e4316985100942584a76b564a
insights-runtime-exporter git 0bee2d9b sha256:c0618d868290c347f23dbd5fca8c4227a5029d7712d0e3e2f4f7a6199824a2a1
insights-runtime-extractor git 0bee2d9b sha256:156575efa15edc0ac6a4e70e3a6df81aa057a522eb5c026c53677b68c50fbe3b
installer-etcd-artifacts git a5421dfe sha256:d1807bb6dddd27cd41a702653f1cc4ba44d90e573569fec6b6176b2ed926324d
ironic-machine-os-downloader git dbe19772 sha256:c92e2a3dab33f27a4b52d8191f7dd651b44bf72cba363dc66313b6d49a7ebbcd
ironic-static-ip-manager git fcd9564e sha256:d01c47a0872a0fef4f8648c6496e9ee308b7bb660fe176feb4721db2c395d16a
kube-metrics-server git 037a0e7e sha256:4f6a339bfc1790decd87f41c24d6137509efd0191c516665404d2fc782e8cd62
kube-rbac-proxy git 59127756 sha256:20d7e5bcb9389a8f8454bf2a3cf8b5b7ef763e26bd7eac312d690838a0513cdf
kube-state-metrics git c3da3b5f sha256:544d779f7858bd5955514f6597733f93c89cfc1ae0cadf56359af4a5bc1aa1a7
kube-storage-version-migrator git 4c521b09 sha256:787d641e6e2282f3fd9e64847642cd0b179d35af130bd8e099507cc196bc2f1f
kubevirt-cloud-controller-manager git 3f4542ec sha256:b93fd69c362f0c5c4c46837acfcbff8d59e7486a0325852d3ebc1642a2d365f5
kubevirt-csi-driver git e3027025 sha256:a37c331cdaa6ce880f2ea97e293b40248295547454a6a3d1ba4b37c2ccb468ee
libvirt-machine-controllers git a336f0b5 sha256:fa8a02f2ef5c12902077949fc5434da67bd2cfcb9f89c4324150a8ea71d39098
local-storage-static-provisioner git 2529b85a sha256:a6142ec5f75de303a5e40df680bf7d3a01908126848d280d1a4378884719ef2a
machine-image-customization-controller git 7d066746 sha256:a6f12ea847dbd335196db1cb347098022511782cb0a849ca5397a20a9cc4e364
metallb-frr git 5076dbc4 sha256:24637a8ad0eff1cb650901dbaf070b2d12f7cf3821a67bf43ed4a49cf983af71
multus-admission-controller git 0b1b812e sha256:55a30b8fa715c957a7edd3c7b17738ec6210fdd423854956052c748d541d95b0
multus-cni git cf0f68ec sha256:ec4005a7bcede9544535884083fcb1a74f4babac9e00e55f58e0c94b6f911015
multus-cni-microshift git cf0f68ec sha256:3fc7d3e44127eef6ff240ce8be2334c5c2ef2a76036d42d4caedb58a7f6381cf
multus-networkpolicy git 6fffe5d7 sha256:fd8c8ff7d4d04cc210c5933c9d071be040e2ba4fdedb592ab6aeca8ff1689bc6
multus-route-override-cni git 391c1b03 sha256:c568ce5465de670939ce5ab6097a5bf46af42b4c96bc08d9911307974b8a9d2f
multus-whereabouts-ipam-cni git 45624b63 sha256:9aa9c87a2cc5cb774041405879d2463b62b87a7c3a1cc9f4cc4ee2899336478a
must-gather git 463c03ca sha256:72b6d67be00f7b3b2f2e00ac24632b102079b7d2c4f4f1effd38295b199fa19f
network-metrics-daemon git 5ec8c6bd sha256:ee24aa285edd00fed2ed475d571d6e75412a2ff5d3337d69fff772c12bd19c4c
nutanix-machine-controllers git a26db5a0 sha256:b553c07f9013bb69ddeb295a56c8ab9143336cfcf89f72719df398c42bf4e201
oauth-apiserver git 75914068 sha256:284cb976ac30a61ae9b2ced0d6cd33502fdfc1fe360ac68b505d5f75d16a5abd
oauth-proxy git 3d12ccbe sha256:48eaa83bb6e0866184534ebc2d907630808425b3f5a250369849403fd3400e18
openshift-apiserver git 85f6eb27 sha256:1e0f13cb7330e1ca208855b04bf842095e5726608bba8e580295f7951f3c2510
openshift-state-metrics git 3106bcc3 sha256:1823fef01ece956d7801af03581824759ae3d03c682e7414dd4587a4ea4bde8f
openstack-cluster-api-controllers git cc76099b sha256:bdc7da7e809bc280cde9ddecd4b136fb6659676521443816fe0c3fdc327063ea
openstack-machine-api-provider git 848bf658 sha256:138d6f427dc80fb497cf85d6f4e76135e61a94105df45999996b8be50292bb02
ovirt-csi-driver-operator git 76db379d sha256:1c97e7ae19871582c390fdeb7c892b5dd95dfaa0fd9cecffca7989b0d92a905a
powervs-block-csi-driver git f681413d sha256:7fbac5a2b673abb43086d5684d2e40d62a6145ce379b5c4e0670311eea0f1825
powervs-block-csi-driver-operator git 059d95c2 sha256:e6a0d0e77d0dafb4ca8dbc01ce70c89ead478049485c39ed22fc84b4cc38b899
powervs-cloud-controller-manager git ef83f3f5 sha256:429b10754e0a201b5c489fcbec12f2dbffeed7cfb8717cba9fdf38bdfc836143
powervs-machine-controllers git 87f8e306 sha256:7c4a2a0d790cb3d05f40db877a22ff1c6c07109d044b7f47726373b5622f42bf
prometheus git 7935baed sha256:a59ddb48b15476cdb5d2d4635cd32464ec8b26fb069ea0f462205736fbcb6451
prometheus-alertmanager git a2346ca5 sha256:490436647370636d660db6691e1a4a0c19a78d0288ce71fe7e120ca65d058655
prometheus-config-reloader git b8debb4c sha256:08f0410b0bd62a170ba6f6d986b509662ea0f4f9e77ec43f314e52b09d55526d
prometheus-node-exporter git c90542d8 sha256:44b3b44c2d9de2837780fd5a18bc8a2b1026f62b2cbfbcf3e3b796b0f40411f4
prometheus-operator git b8debb4c sha256:8432ea24790000410006ba3671b83558f7b43fbae019fd3ddc2758f6865c499e
prometheus-operator-admission-webhook git b8debb4c sha256:77d447d18da23564bf631079f2899a3090ad819463ea58b6153182b09c81e946
rhel-coreos sha256:c513f341589b9b4d5b04574c0b83e6d03862b75c4960003663cb1b8407291dbf
rhel-coreos-extensions sha256:26901ec6f19bdfc9d1651d9fca8d2d7c5747c0faf7c844e65e0608da8568dbc0
route-controller-manager git bc97534a sha256:aaf0ff6e293140efc6404c6dd2d78282876041656d1ae4b1b92ae4f2e401b9dc
service-ca-operator git 4dfa6916 sha256:5c712f856949c94498eca78d44bdd62677fb557c12f6e0685f6cb90d04f6e99d
telemeter git cffdabd4 sha256:cdedfa2a0df958c1fea2924ad9b876edbb9b9045e981382d1026fc6117803f33
thanos git 95f7bb21 sha256:f4e14a8a75f8c7244a3a092afe17907f8e41c4ad2f051518aeb7b2c2619683cb
vsphere-cloud-controller-manager git 2c21c8ce sha256:82abfe44a5a72400fcdd8283a34163c43d0e2981b22d5744e4e71e7763e7d0e2
vsphere-cluster-api-controllers git 8c61ba3d sha256:bb6066c249e9a26ef4512904427a51a8f103be119c301e6a5e8f6a4e95f4541a
vsphere-csi-driver-operator git c2b41c36 sha256:864f26ac8e97db5de10da52df4e71a395d7599c69229ac47fd4d97828f50ea7d

agent-installer-api-server

NO-ISSUE: Allow setting TNA_CLUSTERS_SUPPORT in the template (#7667) #7667
NO-ISSUE: [master] Bump OCP versions: 4.19, 4.16, 4.17 (#7663) #7663
MGMT-20601: Update pull secret validation (#7656) #7656
MGMT-20465: Limit TNA Clusters to baremetal platform. (#7627) #7627
MGMT-20378: Disable skip MCO reboot for s390x (#7651) #7651
MGMT-20506: Reset preprovisioningimage status after cooldown period (#7628) #7628
NO-ISSUE: [master] Bump OCP versions: 4.18 (#7657) #7657
MGMT-19297: Error when querying /events endpoint with ?host_ids=uuid1,uuid2… (#7445) #7445
MGMT-20366: ironic inspection fails with Networking Connection error using 5050 port when ironic agent image override is used (#7633) #7633
MGMT-20473: Revert “MGMT-20384: Feature flag for AMD GPU supported OCP versions (#7572)” (#7614) #7572
NO-ISSUE: [master] Bump OCP versions: 4.12, 4.17, 4.15, 4.18, 4.14 (#7648) #7648
NO-ISSUE: Renovate config to update linter, go-toolset and tekton files (#7644) #7644
MGMT-14821: Remove multi-arch capability (#7613) #7613
NO-ISSUE: change deprecated keys in kustomization.yaml (#7636) #7636
MGMT-20567: Enable skip MCO reboot for day2 hosts (#7630) #7630
MGMT-20228: Enhancement to allow cancelling day-2 host’s installation (#7492) #7492
MGMT-20468: Add arbiter to cluster’s hyperthreading and disk encryption enums (#7631) #7631
Konflux build pipeline service account migration for assisted-service-rhel9-acm-ds-main (#7609) #7609
MGMT-20272: Cluster attribute finalizing_stage_started_at show wrong value (#7594) #7594
Konflux build pipeline service account migration for assisted-service-saas-main (#7611) #7611
Konflux build pipeline service account migration for assisted-service-rhel8-acm-ds-main (#7608) #7608
OCPBUGS-54319: mirror changes to openshift-installer with oci-eval-user-data (#7619) #7619
NO-ISSUE: Update Konflux references (#7582) #7582
MGMT-20464: Fix NFD detection of NVIDIA GPUs (#7597) #7597
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Konflux build pipeline service account migration for assisted-installer-controller-acm-ds-main (#1108) #1108
Konflux build pipeline service account migration for assisted-installer-ds-main (#1110) #1110
Konflux build pipeline service account migration for assisted-installer-controller-ds-main (#1109) #1109
Konflux build pipeline service account migration for assisted-installer-acm-ds-main (#1107) #1107
MGMT-20567: Enable HTTP endpoint for MCO ignition (#1117) #1117
NO-ISSUE: Update Konflux references (#1114) #1114
Full changelog

agent-installer-node-agent

NO-ISSUE: Update Konflux references (#1002) #1002
Konflux build pipeline service account migration for assisted-installer-agent-acm-ds-main (#992) #992
NO-ISSUE: Update Konflux references (#984) #984
Full changelog

agent-installer-utils

OCPBUGS-56210: OVE builder: Remove RHEL9 image from additionalImages #91
OCPBUGS-56112: configure the channel for each OLM operators #89
OCPBUGS-55769: Use internal image registry #78
AGENT-1195: bump appliance image to 4042ba #86
OCPBUGS-55708: Include RHEL 9 guest image to support VM launches via … #84
Full changelog

aws-cluster-api-controllers

OCPBUGS-53003: Remove references to master branch #551
OCPBUGS-55947: Update manifests to remove reliance on v1beta1 admission registration #549
Full changelog

aws-ebs-csi-driver

ART-12521: update go mod dependency for konflux #285
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

STOR-2408: Bump OLM metadata to 4.20 #382
Full changelog

aws-machine-controllers

OCPBUGS-55720: Update machine-api-operator pkg with fixes #127
Full changelog

azure-disk-csi-driver

NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #103
Full changelog

azure-file-csi-driver

OCPBUGS-54897: UPSTREAM: 2515: allow deleting cross-subscription snapshots #92
Full changelog

azure-machine-controllers

OCPBUGS-55372: Update virtualmachines service to armcompute/v5 SDK #141
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-56262: Added better logging for vSphere destroy #9716
OCPBUGS-56079: apply fixes for yaml-lint errors #9708
OCPBUGS-53107: Set appropriate KillMode for systemd services #9562
OCPBUGS-55683: Pre-create password files for agent installer OVE #9679
OCPEDGE-1673: [TNF] Render secret manifests from fencing credentials block. #9635
OCPBUGS-47719: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9693
OCPBUGS-55817: add Lsv4 and Lasv4 series as tested #9696
OCPBUGS-55772: Add support for Azure TDX confidential VM type #9691
no-jira: add jcpowermac to nutanix review/approve groups #9697
CORS-3960, OCPBUGS-55952: Remove Terraform Build Artifacts #9667
no-jira: add PeaceRebel (Bipin) to coreos approvers & reviewers list #9687
OCPBUGS-54502: ensure ctrplane nodes can access bootstrap MCS #9689
OCPBUGS-54566: Apply defaults then validate confidentialCompute #9637
OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
no-jira: fixes to get shellcheck to pass #9669
OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
OCPEDGE-1707: Add Disable Certificate Verification API #9640
no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
Full changelog

baremetal-operator

OCPBUGS-55717: Merge upstream #414
Full changelog

baremetal-runtimecfg

NO-ISSUE: Add emy as reviewer #346
Full changelog

cli, cli-artifacts, deployer, tools

NO-JIRA: OCPBUGS-46604: Clarify behavior of since-time flag in oc adm must-gather command #2019
WRKLDS-1103: Adding sos.conf file for default sos config into the tools image #2003
NO-JIRA: make ‘oc status’ compatible with bare kube #1947
Full changelog

cloud-credential-operator

OCPBUGS-53429: Render: configure proxy on bootstrap static pod #855
OCPBUGS-55777: Sync OpenStack CA Bundles from legacy location #850
OCPBUGS-54829: golang.org/x/net v0.38.0 #851
Full changelog

cluster-capi-controllers

OCPCLOUD-2917: Merge https://github.com/kubernetes-sigs/cluster-api:v1.10.1 (647a1b7) into master #238
OCPBUGS-55947: Regenerate manifests to drop v1beta1 admissionregistration usage #236
Full changelog

cluster-capi-operator

OCPCLOUD-2893: Add related objects to must-gather config #267
OCPBUGS-55985: fix: machine: propagate non-authoritative deletion #290
OCPBUGS-55947: Should not use v1beta1 of the AdmissionRegistration API group #289
Full changelog

cluster-config-api

OCPBUGS-55664: remove VSphereDriverConfiguration feature gate #2319
CNTRLPLANE-367: Update Authentication API GoDoc for OIDC-related fields #2314
OCPNODE-2557, OCPNODE-3225: features: set user namespace features on by default #2305
OCPBUGS-55662: Drop BareMetalLoadBalancer feature gate #2312
CCXDEV-14850: align insights DataGather with config #2248
Remove upstream on-by-default cloud feature gates (CloudDualStackNodeIPs, DisableKubeletCloudCredentialProviders) #2249
SPLAT-2168: introduce AWSDedicatedHosts feature gate #2291
OCPBUGS-55666: Remove MachineAPIProviderOpenStack feature gate #2307
MCO-1657: FeatureGate for Bootimage updates for the vSphere platform #2301
SPLAT-2072: Removed VSphereMultiVCenters feature gate #2231
SPLAT-2158: Azure Multi Disk feature gate #2289
README: Add criteria for featuregate test result windows and flake handling #2302
Full changelog

cluster-etcd-operator

CNTRLPLANE-340: Issue shorter certs when ShortCertRotation feature gate is set #1315
OCPBUGS-55757: adjust alerts according to platform #1422
OCPBUGS-55111: Remove ‘meta’ keyword from pcs resource create command #1417
Full changelog

cluster-ingress-operator

OCPBUGS-55317: Check capabilities before watching OLM resource #1232
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-55013: SCC: add hostmount-anyuid-v2 #1834
OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects - reapply #1831
OCPBUGS-52466: bump library-go to bring in updated audit policies #1837
OCPBUGS-55274: Change validity / refresh for some certs which should not be affected by dev cycle rotation change #1832
Full changelog

cluster-kube-scheduler-operator

OCPNODE-3192: enable the scheduler plugin if the feature gate DynamicResourceAllocation is enabled #561
Full changelog

cluster-machine-approver

OCPBUGS-19856: Improve log message when searching for node by InternalDNS #269
No-Jira: ignore test file csr_check_test.go #270
Full changelog

cluster-monitoring-operator

NO-JIRA: [bot] Synchronize versions of the downstream components #2600
MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2549
Full changelog

cluster-network-operator

OCPBUGS-51093, OCPBUGS-55157: Pass ‘–gateway-mode’ flag for ovnkube-cluster-manager #2696
OCPBUGS-55488: Remove environment variables related to ARO HCP MIv2 for CNO #2686
Full changelog

cluster-node-tuning-operator

Add NetworkPolicy k8s resources (#1323) #1323
OCPBUGS-55989: E2E: Functional tests for align cpus by UncoreCache Feature (#1302) #1302
NO-JIRA:e2e:daemonset: pod phase and events (#1289) #1289
Full changelog

cluster-olm-operator

OPRUN-3883: Add network-policy support #117
Full changelog

cluster-storage-operator

OCPBUGS-54491: sync Azure File permissions with upstream docs #2 #578
Full changelog

cluster-version-operator

OTA-1403: Update and Verify Test Metadata Using Makefile #1179
OTA-1531: [4/x] cvo: extract config informer creation #1189
OTA-1010: Add a new version of GetImplicitlyEnabledCapabilities #1133
OTA-1531: [3/x] cvo: read version from release metadata on startup #1188
OTA-1531: [2/x] cvo: refactor LoadUpdate #1185
OTA-1531: [1/x] cvo: refactor option processing #1184
OTA-209: Add sync logic to the CVO configuration controller #1170
OCPBUGS-53062: add the ports Field into the CVO’s container spec #1180
NO-JIRA: Makefile: verify -> verify-yaml #1183
Full changelog

console

OCPBUGS-56245: Remove dead code for deployment and deployment config #15054
OCPBUGS-37977: Refresh console TLS certs at runtime #14971
OCPBUGS-55419: improve description of the custom logos CLI args #15003
CONSOLE-4572: classnames -> react-styles #15050
OCPBUGS-55808: fix cy.createProject command #15026
OCPBUGS-55896: Refactor Kebab+ActionsMenu to use PF #15028
OCPBUGS-56039: Update supported languages in Internationalization docs #15046
OCPBUGS-55919: remove 60 day alert from cluster update modal #15045
CONSOLE-4550: col-sm-6 => GridItem sm={6} #15014
OCPBUGS-54234: Fix impersonate group action #14915
OCPBUGS-46385: fix alignment of Getting Started item icons #15025
CONSOLE-4393: Update to Node.js® v22 #14841
OCPBUGS-55412: Wrap ListPageHeader action with a div #15008
OCPBUGS-55323: Add patternfly/react-topology to shared modules list of dynamic plugin sdk #14993
OCPBUGS-55430: resolve http Context and Client handling #15009
OCPBUGS-55629: get go mod tidy to pass #15024
OCPBUGS-53428: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15001
OCPBUGS-55375: add data-quickstart-id to quick create button #14998
OCPBUGS-54157: Sample segment sessions #14990
OCPBUGS-49291: Improving the DevExp for passing the CSP directives to console per flag + Make use of connect-src and object-src directives #14701
OCPBUGS-53320: Add DEVCONSOLE_PROXY flag #15006
OCPBUGS-55633: fix bug where Critical Alerts section cannot be collapsed #15015
Full changelog

console-operator

OCPBUGS-43792: Add plugins order to console config #980
OCPBUGS-55698: Lift FeatureGate by bumping openshift/api #984
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-56028: [cinder-csi-plugin] Don’t report topology capability when –with-topology=False #325
Full changelog

gcp-machine-controllers

OCPBUGS-46387: allow instances with unknown quotas to be created #114
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPBUGS-55631: UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes #2288
NO-JIRA: Fix generation of test names #2296
OCPBUGS-54208: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2277
OCPBUGS-54318: UPSTREAM: 131236: RWX tests should create RWX volumes #2279
OCPBUGS-55945: Bump main 1.32.4 #2292
TRT-2103: Revert “NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2291
NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2287
OCPBUGS-55632: Fix node expansion on older kubelets #2282
TRT-2066: Use OTE generated labels for skips in test-kubernetes-e2e.sh #2255
Full changelog

hypershift

CNTRLPLANE-844: Remove DeploymentConfig usage #6157
NO-JIRA: Fix TestHostedClusterWatchesEverythingItCreates not working locally #6149
NO-JIRA: Keep checking for rollouts during upgrade HO test for five minutes #6097
OCPBUGS-56205: Switch back to rh catalog #6154
OCPBUGS-56164: Fix HyperShift Operator Enterprise contract konflux pipeline #6138
OCPBUGS-56011: Configure ClusterServiceLoadBalancerHealthProbeMode a… #6099
CNTRLPLANE-565: Remove NodePool CapacityReservation API featuregate #6132
CNTRLPLANE-645: Rename NodeCount flag to Replicas #6094
CNTRLPLANE-844: Remove unused DeploymentConfig references #6146
NO-JIRA: test/setup: use case-sensitive prometheusK8s in monitoring config #6150
NO-JIRA: Increase the content width in the upstream docs #6147
NO-JIRA: cpov2: fix structured authentication configuration serialization #6135
CNTRLPLANE-269: Remove legacy machine approver and ign server reconciliation code #6133
OCPBUGS-55913: Fix Job status returning empty reason and message #6134
CNTRLPLANE-269: Remove DeploymentConfig usage from cpov2 #5724
OCPBUGS-37323: MarkPersistentFlagRequired does not work since CLI refactoring #5649
NO-JIRA: Fix minor issues with Azure HC creation doc #6128
OCPBUGS-55504: Add postStart hook to kube-apiserver container #6074
CNTRLPLANE-709: Add ability to limit platform specific resources managed by HostedCluster #6039
CNTRLPLANE-261: Enable pprof in hosted control plane etcd #6003
CNTRLPLANE-334: Update KASv2 structured authentication configuration #6119
CNTRLPLANE-334: Update KAS structured authentication configuration generation logic to use new uid and extra field #6073
OCPBUGS-54483: Add support for registry root entry only in the IDMS/ICSP #6100
OCPBUGS-55357: Only build main branch components #6078
CNTRLPLANE-265: Enable staticcheck linter in golangci-lint #5836
CNTRLPLANE-740: Add DR for HCP using OADP and Hypershift plugin #6077
NO-JIRA: bump HO supported version to 4.20 #6006
CNTRLPLANE-798: ho: changes to ref’ed resources triggers HC reconciliation #6103
Full changelog

insights-operator

feat: move HTTP status code from condition.Reason to condition.Message (#1083) #1083
feat: add gatheringDisabled condition (#1078) #1078
Full changelog

ironic

METAL-1344: Do not install sushy-oem-idrac separately #653
METAL-1345: Install scciclient from source #652
METAL-1264: Update to latest upstream content #655
OCPBUGS-55381: Extract files one-by-one in logwatch #654
Full changelog

ironic-agent

METAL-1264: Update to latest upstream content #186
OCPBUGS-55350: collect the entire journal from the host #184
Full changelog

keepalived-ipfailover

OCPBUGS-48318: Change default value for OPENSHIFT_HA_VRRP_ID_OFFSET #206
Full changelog

machine-api-operator

OCPBUGS-56159: correct aws kms permissions #1370
OCPBUGS-55461: Changed machineset tests to be serial #1365
OCPBUGS-55720: fix: use patch for machine/machineset status #1362
OCPBUGS-55461: Fixes machineset paused condition nil pointer #1361
OCPBUGS-55461: Revert “Added skip for when config not multi nic” #1363
Full changelog

machine-config-operator

OCPBUGS-53390: Fix interrupt state to account for failure correctly #5054
OCPBUGS-55967: Add hot loop detection in the boot image controller #5037
OCPBUGS-55439: scope MCD node listers to current node #5015
OCPBUGS-55770: Compare the osImageURLs for OS validation check #5041
MCO-1654: Add new runbook for KubeletHealthState to alert #5042
OCPBUGS-49728: Adapt MCC to use LayeredNodeState and remove LayeredPoolState #4841
OCPBUGS-54697: error from generateAndValidateRenderedMachineConfig function can be misleading #5033
OCPNODE-3173: Disable OCI artifact mount by default. #5016
OCPBUGS-55597: OWNERS: update owners file with current MCO team members #5024
OCPBUGS-55450: Only populate Status.PinnedImageSets.CurrentGeneration on valid generation value #5023
OCPBUGS-55327: Bugfix Ignition compression merge #5006
OCPBUGS-55262: Use auto=start only for IPsec out connections #5017
OCPBUGS-55713: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5030
OCPBUGS-52940: AWS Custom-DNS: Update services that run on control plane nodes #4939
OCPBUGS-41485: Update MCD Log Output to Clarify No Configuration Change #5019
Full changelog

machine-os-images

OCPBUGS-55810: Dummy change to force a rebuild for 4.20 #62
Full changelog

monitoring-plugin

OU-712: fix: add missing alertname field to silence alert #413
OU-794: fix: update monitoring and virtualization routes to avoid overriding console routes #410
OU-774: bound table scroll and column alignment #402
RHINENG-17675: feat: add group id to url params #403
RHINENG-10537: fixed broken delete chip group for incidents filters #401
OU-197: feature: upgrade react router to v5 compat #400
OU-745: Check for CSRF change on each fetch cycle #404
Full changelog

network-interface-bond-cni

OCPBUGS-54229: Upstream sync 07-05-2025 #67
NO-JIRA: Add ci-operator file #68
Full changelog

network-tools

NO-JIRA: Add aurko, comment jakob, remove nadia #143
NO-JIRA: Fix github epic ID and username matching #142
Full changelog

networking-console-plugin

CNV-61536: align Modals with PatternFly default #242
CNV-60062: fix links to upstream documentation #241
Full changelog

oauth-server

OSASINFRA-3534: Bump Gophercloud to v2 #170
Full changelog

oc-mirror

changes the signature mirroring default to disabled (#1143) #1143
OCPBUGS-54587: v2: bump containers/common dep to 0.63.0 (#1138) #1138
CLID-182: Add spinner to release collector mirror to disk or mirror to mirror (#1085) #1085
no-jira: Disable go workspace and build v2 as a binary (#1078) #1078
OCPBUGS-55100: implements registries.d file as specified in containers/image docs (#1131) #1131
OCPBUGS-54220: v2/imgbuilder: use –authfile when set (#1129) #1129
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #344
NO-ISSUE: Synchronize From Upstream Repositories #339
NO-ISSUE: Synchronize From Upstream Repositories #337
NO-ISSUE: Synchronize From Upstream Repositories #336
NO-ISSUE: Synchronize From Upstream Repositories #333
NO-ISSUE: Synchronize from upstream #331
Full changelog

openshift-controller-manager

OCPBUGS-52193: legacy image pull secret rollback controller #380
OCPBUGS-54695: Empty proxy variables are causing issues during the build #373
Full changelog

openstack-resource-controller

NO-JIRA: Merge https://github.com/k-orc/openstack-resource-controller:release-1.0 into main #16
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #1003
NO-ISSUE: Synchronize From Upstream Repositories #1002
NO-ISSUE: Synchronize From Upstream Repositories #1000
NO-ISSUE: Synchronize From Upstream Repositories #997
OCPBUGS-53161, OPRUN-3880: Synchronize From Upstream Repositories #996
Full changelog

operator-marketplace

NO-JIRA: OWNERS: Add camilamacedo86 and tmshort as approvers #632
NO-ISSUE: Bump github.com/operator-framework/api from 0.30.0 to 0.31.0 #627
NO-ISSUE: (CI) - Add check to avoid we upgrade by mistake the go vers… #625
NO-ISSUE: Add dependabot k8s and go library groupings #626
NO-ISSUE: Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 #620
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

Revert “OCPBUGS-55824: Revert “OCPBUGS-44285, OCPBUGS-37733, OCPBUGS-55824, OCPBUGS-54375: Downstream Merge 7th May 2025”” #2568
OCPBUGS-55824: Revert “OCPBUGS-44285, OCPBUGS-37733, OCPBUGS-55824, OCPBUGS-54375: Downstream Merge 7th May 2025” #2557
OCPBUGS-37733, OCPBUGS-44285, OCPBUGS-54375, OCPBUGS-55824: Downstream Merge 7th May 2025 #2550
CORENET-5975: Dockerfile: Unpin OVS and consume the latest from FDP. #2525
Full changelog

prom-label-proxy

NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.11.1 #379
Full changelog

tests

NO-JIRA: Revert: NO-JIRA: support skipping [OCP]FeatureGate… #29796
OCPBUGS-55211: use regular user to create httproute #29697
Revert “Revert “TRT-2049: check for any watch requests”” #29723
CORENET-5854: networking: add VRF-Lite test cases #29669
OCPEDGE-1678: Fix failed etcd test on arbiter ci run #29694
NO-JIRA: update networking owners #29786
NO-JIRA: increase api client timeout to match those allowed by kube-apiserver #29761
NO-JIRA: support skipping [OCP]FeatureGate tests #29760
OCPBUGS-55384: OCPBUGS-55968: Fix PIS tests on SNO & Enable applicable MCN & PIS tests on SNO #29785
OCPNODE-2315: Add nested container test #29781
OCPBUGS-55994: Do not set the MTU when using NetworkAttachementDefinition #29768
NO-JIRA: Test load balancer metrics #29675
NO-JIRA: Fix bearer token exposure in exit condition as well #29575
NO-ISSUE: Automated - Update synthetic test data #29716
TRT-2106: Fix race in MCN test cleanup #29775
OCPBUGS-55785: bump limits #29778
Revert “OCPNODE-2315: Add nested container test” #29779
CNTRLPLANE-371: Update etcd test data for k8s 1.33 release (missing data) #29773
OCPBUGS-55712: (olmv1 tests) Use exponential backoffs for verifyAPIEndpoints #29756
OCPBUGS-55945: Bump main 1.32.4 #29772
CORENET-5875, CORENET-5876, OCPBUGS-55910: Add EgressIP and L2 UDN route advertisements tests #29727
OCPNODE-2315: Add nested container test #29594
NO-JIRA: faultyloadbalancer test: pass instead of skip #29753
OCPBUGS-55902: pkg/monitortestlibrary/allowedalerts: Ignore KubeJobFailingSRE for now #29747
NO-ISSUE: OLMv1: Preflight: Relax checking of error message #29766
CNTRLPLANE-371: Update etcd test data for k8s 1.33 release #29699
OCPBUGS-55785: bump limits #29763
OCPNODE-2999: Add SigstoreImageVerification e2e tests #29652
OKD-243: Skip GatewayAPIController tests for OKD #29742
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-55020: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #142
Full changelog

vsphere-problem-detector

OCPBUGS-53217: replace operator client #182
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github