4.21.0-0.nightly-2025-10-17-012128

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.21.0-0.nightly-2025-10-17-012128

Team Approvals:

Tests:

Blocking jobs
- aggregated-aws-ovn-single-node-upgrade-4.21-micro Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-aws-upgrade-ovn-single-node
- aggregated-aws-ovn-upgrade-4.21-micro-fips Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-upgrade-fips
- aggregated-azure-ovn-upgrade-4.21-micro Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-azure-ovn-upgrade
- aggregated-gcp-ovn-rt-upgrade-4.21-minor Succeeded periodic-ci-openshift-release-master-ci-4.21-upgrade-from-stable-4.20-e2e-gcp-ovn-rt-upgrade
- aggregated-hypershift-ovn-conformance-4.21 Failed (2 retries) periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-aws-ovn-conformance
- aws-ovn-serial-1of2 Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-serial-1of2
- aws-ovn-serial-2of2 Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-serial-2of2
- aws-ovn-techpreview Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial-1of3 Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview-serial-1of3
- aws-ovn-techpreview-serial-2of3 Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview-serial-2of3
- aws-ovn-techpreview-serial-3of3 Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview-serial-3of3
- driver-toolkit Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.21-fips-payload-scan
- install-analysis-all Succeeded periodic-ci-openshift-release-master-nightly-4.21-install-analysis-all
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.21-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.21-periodics-e2e-aws-ovn-ocp-conformance-serial
- overall-analysis-all Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.21-overall-analysis-all
- rosa-classic-sts-conformance Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-rosa-sts-ovn
Informing jobs
- agent-compact-ipv4 Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-agent-compact-fips
- agent-ha-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-agent-ha-dualstack-conformance
- agent-single-node-ipv6 Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-agent-single-node-ipv6-conformance
- aws-console Failed periodic-ci-openshift-release-master-nightly-4.21-console-aws
- aws-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.21-periodics-e2e-aws
- aws-csi Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-csi
- aws-ovn Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn
- aws-ovn-cgroupsv2 Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-cgroupsv2
- aws-ovn-fips Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-fips
- aws-ovn-single-node Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-single-node
- aws-ovn-single-node-csi Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-single-node-csi
- aws-ovn-single-node-serial Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-single-node-serial
- aws-ovn-single-node-techpreview Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-single-node-techpreview
- aws-ovn-single-node-techpreview-serial Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-single-node-techpreview-serial
- aws-ovn-single-node-upgrade-minor Failed periodic-ci-openshift-release-master-nightly-4.21-upgrade-from-stable-4.20-e2e-aws-upgrade-ovn-single-node
- aws-ovn-upgrade-out-of-change Failed periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-upgrade-out-of-change
- aws-upi Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-upi
- azure-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.21-periodics-e2e-azure
- azure-csi Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-azure-csi
- azure-ovn Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-azure-ovn
- azure-ovn-serial Failed periodic-ci-openshift-release-master-ci-4.21-e2e-azure-ovn-serial
- azure-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-azure-ovn-techpreview
- azure-ovn-techpreview-serial Failed periodic-ci-openshift-release-master-ci-4.21-e2e-azure-ovn-techpreview-serial
- azure-ovn-upgrade-out-of-change Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-azure-ovn-upgrade-out-of-change
- cnv Failed periodic-ci-openshift-release-master-cnv-nightly-4.21-deploy-azure-kubevirt-ovn
- gcp-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.21-periodics-e2e-gcp
- gcp-ovn Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-gcp-ovn
- gcp-ovn-csi Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-gcp-ovn-csi
- gcp-ovn-rt Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-gcp-ovn-rt
- gcp-ovn-serial Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-gcp-ovn-serial
- gcp-ovn-techpreview Failed periodic-ci-openshift-release-master-ci-4.21-e2e-gcp-ovn-techpreview
- gcp-ovn-techpreview-serial Failed periodic-ci-openshift-release-master-ci-4.21-e2e-gcp-ovn-techpreview-serial
- gcp-ovn-upgrade-4.21-minor Failed periodic-ci-openshift-release-master-ci-4.21-upgrade-from-stable-4.20-e2e-gcp-ovn-upgrade
- gcp-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-gcp-ovn-upgrade
- hypershift-kubevirt-ovn-conformance-4.21 Succeeded periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-azure-kubevirt-ovn
- metal-ipi-ovn-dualstack Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-dualstack
- metal-ipi-ovn-dualstack-techpreview Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-dualstack-techpreview
- metal-ipi-ovn-ipv6-techpreview Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-ipv6-techpreview
- metal-ipi-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-serial-ipv4
- metal-ipi-ovn-serial-virtualmedia-1of2 Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-serial-virtualmedia-1of2
- metal-ipi-ovn-serial-virtualmedia-2of2 Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-serial-virtualmedia-2of2
- metal-ipi-ovn-techpreview Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-techpreview
- metal-ipi-ovn-upgrade Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-upgrade
- metal-ipi-ovn-upgrade-minor Succeeded periodic-ci-openshift-release-master-nightly-4.21-upgrade-from-stable-4.20-e2e-metal-ipi-ovn-upgrade
- metal-ipi-serial-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-serial-ovn-ipv6
- metal-ipi-serial-ovn-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-serial-ovn-dualstack
- metal-ipi-upgrade-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-upgrade-ovn-ipv6
- metal-ipi-upgrade-ovn-ipv6-minor Succeeded periodic-ci-openshift-release-master-nightly-4.21-upgrade-from-stable-4.20-e2e-metal-ipi-upgrade-ovn-ipv6
- metal-ovn-single-node-recert-cluster-rename Succeeded periodic-ci-openshift-release-master-nightly-4.21-metal-ovn-single-node-recert-cluster-rename
- openshift-dedicated-aws Failed periodic-ci-openshift-osde2e-main-nightly-4.21-osd-aws
- openshift-dedicated-gcp-conformance Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-osd-ccs-gcp
- openshift-dedicated-gcp-osde2e Failed periodic-ci-openshift-osde2e-main-nightly-4.21-osd-gcp
- ovn-proxy Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-proxy
- ovn-single-node-live-iso Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ovn-single-node-live-iso
- qe-perfscale Succeeded periodic-ci-openshift-eng-ocp-qe-perfscale-ci-main-aws-4.21-nightly-x86-payload-control-plane-6nodes
- rosa-classic-sts-osde2e Failed periodic-ci-openshift-osde2e-main-nightly-4.21-rosa-classic-sts
- telco5g Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-telco5g
- telcov10n-metal-single-node-spoke Failed periodic-ci-openshift-kni-eco-ci-cd-main-nightly-4.21-telcov10n-metal-single-node-spoke
- telcov10n-metal-single-node-spoke-kpis Succeeded periodic-ci-openshift-kni-eco-ci-cd-main-nightly-4.21-telcov10n-metal-single-node-spoke-kpis
- upgrade-analysis-all Failed (2 retries) periodic-ci-openshift-release-master-nightly-4.21-upgrade-analysis-all
- upgrade-minor-ovn Succeeded periodic-ci-openshift-release-master-ci-4.21-upgrade-from-stable-4.20-e2e-aws-ovn-upgrade
- vsphere-ovn Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-ovn
- vsphere-ovn-csi Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-ovn-csi
- vsphere-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-ovn-serial
- vsphere-ovn-techpreview Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-ovn-techpreview
- vsphere-ovn-techpreview-serial Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-ovn-techpreview-serial
- vsphere-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-vsphere-ovn-upgrade
- vsphere-ovn-upgrade-minor Succeeded periodic-ci-openshift-release-master-ci-4.21-upgrade-from-stable-4.20-e2e-vsphere-ovn-upgrade
- vsphere-ovn-upi Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-ovn-upi
- vsphere-ovn-upi-serial Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-ovn-upi-serial
- vsphere-static-ovn Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-static-ovn

Upgrades from:

4.21.0-0.nightly-2025-10-15-101012 (changes) - S S S F S S S S S
4.20.0-0.nightly-2025-10-15-110252 - S S F S F S S

Upgrades to:

4.21.0-0.nightly-2025-10-18-225958 (changes) - S S S F F S S S S
4.21.0-0.nightly-2025-10-18-173738 (changes) - F F F S F F F F F F S F F
4.21.0-0.nightly-2025-10-18-101134 (changes) - S S S F F F S S S
4.21.0-0.nightly-2025-10-18-025910 (changes) - S S S F F S S S S
4.21.0-0.nightly-2025-10-17-184326 (changes) - F F F F F F F F F F F F S F F

Loading changelog, this may take a while ...

Changes from 4.20.0-0.nightly-2025-10-15-110252

Created: 2025-10-17 01:24:27 +0000 UTC

Image Digest: sha256:a2229a82becc04f934a7d031c34b528388eb1ae5dfe81fde7f622ff80d056ac2

Components

Kubectl 1.33.3
Kubernetes 1.33.5
Kubernetes Tests 1.33.4
Red Hat Enterprise Linux CoreOS upgraded from 9.6.20251013-1 to 9.6.20251015-1

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
IngressControllerLBSubnetsAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
InsightsConfigAPI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NodeSwap (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SetEIPForNLBIngressController (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
GCPClusterHostedDNSInstall (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ManagedBootImagesAzure (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VolumeAttributesClass (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ExternalOIDC (0 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
AWSDualStackInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureDualStackInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
CBORServingAndStorage (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClientsAllowCBOR (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClientsPreferCBOR (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIMachineManagementVSphere (0 tests)			Enabled (New)	Enabled (New)
EventTTL (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPDualStackInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesCPMS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

agent-installer-ui git 1a169b33 sha256:4a90efd075c0febff3b2e34c114983d325dad4a18cab5392451e79045d0616ae

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

aws-karpenter-provider-aws git b37141b0 sha256:3872816655def710d4465633397fb8109360aa9cad38359031ce298da8a2217f
cluster-autoscaler-operator git 147e5a7f sha256:3fe32a07ed6aa71f1c77f4331a4b9912de25810d9af314a16fc4eea4d7371245
cluster-bootstrap git 74abc555 sha256:930ceefecfd6a6ed18e9b53a93bc2e4c6692c0e1bd79129fa5413a25f234f8a3
docker-builder git ff595e4b sha256:eb567dbb5c3ee4a3348770426d62f7fb6dd66793ae4b9038b4cec6a06f5f0f19
egress-router-cni git 5e0f8d1b sha256:fec127fb27d24b358c72096cef24ffe7dd0720f59474ebf6686bd75c99d4bb59
kube-rbac-proxy git b9134351 sha256:fa4efde952124fe836b5147a40630998f9b69cf79b3aefc979a118b501f044c7
kubevirt-cloud-controller-manager git 3f4542ec sha256:004bda2fc12405a44929700e4b83f7f42d0c5d13354ff337b93158ef6b4a000e
kubevirt-csi-driver git 8b8dd30e sha256:9e727634c0c0bb78f709e660a0158b89d4bf185143cb889f020a65d60896f989
libvirt-machine-controllers git a336f0b5 sha256:b9a7fab28c508559fa8397d59bb5b7dbed80fc2a2278caadb6b81770bebe11d7
metallb-frr git fc0fe74f sha256:0c0e50388031a024e4c144ddee184f6ca25913d07ea1febea817f82eb2444f06
multus-admission-controller git fc73c803 sha256:89aea326e925a76460da30a3e5fbd584b9655d7ac142ccb753f01fb7a4de364d
multus-cni git cf0f68ec sha256:bbc538a4f8dcdcd5f0dc25a822dabd5acf7ce66abc0f38d1739f769b222bcd0f
multus-cni-microshift git cf0f68ec sha256:554cf8d379d8e42d0f69fe83af7b08f442fc81fc2fe72426068fc33aff5666ea
multus-route-override-cni git 391c1b03 sha256:124db31b4de3baa478b9b9e7caec59f74a421d814e81da223a18d8fbe6e684a7
multus-whereabouts-ipam-cni git 43c89591 sha256:1abe7903ffddda2177b8c4ef3910c21776f3a99a3e62dd6dcefd70915ded140c
network-interface-bond-cni git dd3c4d0b sha256:176166db54ce9bb9e7cdfe10f41894fbdacefa73a333fde4d4573bd15e67b2b9
network-metrics-daemon git b81340a9 sha256:7ada39b8f0be0b570bcf1309e8a06af381f57012ca2fdab44c3b7ec059679036
oauth-proxy git 6649cb8a sha256:22ec3d0f889b83a917bb20dda5430776d11aaceff2779231ebaa1175bd13422d
oauth-server git 81098796 sha256:b72d84cc5a0331fbc0195d021d7e9a933c030c7285e17edac027192977b94cb8
openstack-resource-controller git bf0d2c88 sha256:47fe7b6b1845f924fc0bd8fbe3a52491e53ac0e2641d4f6f0b316d2142bf18cc

agent-installer-api-server

MGMT-20588: Align kube descheduler activation CR with OVE needs #7960
NO-ISSUE: Update Konflux references #8050
ACM-25137: Remove the SERVICE_EL8_IMAGE env vars #8108
MGMT-21725: Update Renovate for legacy EL8 Dockerfiles #8090
OCPBUGS-62580: Fix edge jobs to be consistent with ART for 4.21 #8104
NO-ISSUE: [master] Bump OCP versions: 4.19 #8095
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.18 #8089
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.15, 4.14 #8084
MGMT-20192: add possibility to disable image service #7955
And 26 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1289
OCPBUGS-62361: Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.21 #1276
OCPBUGS-62398: Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.21 #1277
NO-ISSUE: Update Konflux references #1283
NO-ISSUE: Update Konflux references #1265
And 6 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-node-agent

MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1148
OCPBUGS-62390: Bump dockerfile images to 4.21 #1147
NO-ISSUE: Update konflux pipelines to use a remote pipeline #1118
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-utils

OCPBUGS-62986: Update Konflux references #177
OCPBUGS-62958: Update Konflux references #168
OCPBUGS-62905: Dockerfile cleanup #174
OCPBUGS-62347: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.21 #165
OCPBUGS-62704: remove hardcoded versions from iso_builder #171
AGENT-1336: Add release label to build #170
OCPBUGS-62646: Update Konflux references #167
OCPBUGS-62645: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 0697723 #146
AGENT-1258: Build PipelineRun changes for Konflux #155
OCPBUGS-61946: Include only final ISO in OVE UI container image #162
OCPBUGS-61956: Disable Konflux go.mod PR updates #163
OCPBUGS-61875: Add 4.21 config #160
AGENT-1258: Red Hat Konflux kflux-prd-rh02 update ove-ui-iso #154
AGENT-1258: Red Hat Konflux kflux-prd-rh02 purge agent-installer-utils #153
AGENT-1286: Red Hat Konflux kflux-prd-rh02 update agent-installer-utils #143
Full changelog

apiserver-network-proxy

OCPBUGS-62355: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.21 #86
Full changelog

aws-cloud-controller-manager

OCPBUGS-62354: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.21 #118
NO-JIRA: Update OWNERS #116
Full changelog

aws-cluster-api-controllers

OCPBUGS-63046: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.2 (d3a7da1) into main #576
OCPBUGS-62540: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.21 #575
NO-JIRA: Update OWNERS #567
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.1 (9c17049) into main #569
Full changelog

aws-ebs-csi-driver

OCPBUGS-62380: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.21 #292
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-62404: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.21 #438
STOR-1945: STOR-2056: add Azure File NFS test manifest #445
OCPBUGS-62374: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.21 #437
MULTIARCH-5554: update smb-csi-driver-operator support to add ppc64le #428
OCPBUGS-62427: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.21 #439
OCPBUGS-62348: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.21 #436
OCPBUGS-61955: Add withCABundleDaemonSetHook() to AWS EFS operator #433
OCPBUGS-60637: add runAsUser hook for operator deployment controller #431
NO-JIRA: Centralize injection of hosted-kubeconfig volume #311
NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 #429
OCPBUGS-54385: Avoid informer resync #432
NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 #427
NO-JIRA: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.21 #425
NO-JIRA: azure-disk, azure-file sync code de-duplication #303
Full changelog

aws-kms-encryption-provider

OCPBUGS-62458: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.21 #31
Full changelog

aws-machine-controllers

OCPBUGS-38759: client: re-use a single file for building the session instead of randomly named files #140
Full changelog

aws-pod-identity-webhook

OCPBUGS-62587: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.21 #206
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-62392: Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.21 #150
NO-JIRA: Update OWNERS #149
Full changelog

azure-cluster-api-controllers

OCPBUGS-62387: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.21 #352
NO-JIRA: Update OWNERS #351
Full changelog

azure-disk-csi-driver

NO-JIRA: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.21 #110
Full changelog

azure-file-csi-driver

OCPBUGS-62547: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.21 #106
Full changelog

azure-kms-encryption-provider

OCPBUGS-62405: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.21 #23
Full changelog

azure-machine-controllers

OCPBUGS-62335: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.21 #163
NO-JIRA: Update OWNERS #162
Full changelog

azure-service-operator

OCPBUGS-62368: Updating ose-azure-service-operator-container image to be consistent with ART for 4.21 #13
NO-JIRA: Update OWNERS #12
Full changelog

azure-workload-identity-webhook

OCPBUGS-62364: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.21 #39
CCO-665: Merge upstream changes #40
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-62565: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.21 #53
Full changelog

baremetal-installer, installer, installer-artifacts

OKD-237: Remove fcos references #9970
OSASINFRA-3915: openstack: Start setting CredentialsMode #9734
NO-JIRA: shiftstack: Update OWNERS #9994
OCPBUGS-62125: baremetal: set baremetalhost architecture #9987
OCPBUGS-60752: Add MTU validation for networkConfig #9919
OCPBUGS-62907: AGENT-1269: Use agent-installer-ui image from release #9995
OCPBUGS-62430: None: Allow IPv6 Primary DualStack installs on platforms None and External #9983
OCPBUGS-41567: Clean up baremetal bootstrap systemd dependencies #8986
OCPBUGS-62452: Updating ose-installer-container image to be consistent with ART for 4.21 #9980
OCPBUGS-62471: Updating ose-baremetal-installer-container image to be consistent with ART for 4.21 #9981
OCPBUGS-60538: Update assisted-service dependencies #9956
CORS-4256: Add PSC Endpoint to the installconfig #9991
OCPBUGS-62514: Updating ose-installer-artifacts-container image to be consistent with ART for 4.21 #9984
SPLAT-2511: vSphere - do not block on vSphere >7.0.2, allow 9 #9963
CORS-4078: allow toggling AWS client logging #9976
OCPBUGS-62363: Set agent-extract-tui start timeout #9975
no-jira: Revert “Merge pull request #9939 from barbacbd/CORS-4058-release-4.21” #9974
CORS-4078: bump AWS SDK v2 max backoff duration to 300s #9966
CORS-4107: Update default release image to 4.21 #9954
OCPBUGS-61514: Add check for gcp firewall deletion permission #9935
OCPBUGS-62293: Set default for PrivateDNSZone Project ID #9967
CORS-4078: disable rate limiter for AWS SDK v2 #9958
OCPBUGS-61901: Update explain for Publish #9950
no-jira: OWNERS: switch to joelcapitao #9951
OCPBUGS-61935: Wildcards not reliable for copying container files #9948
CORS-4058: Migrate AWS Destroy to SDK v2 #9939
OCPBUGS-61353: Generated Redacted nutanix config for operator #9931
CORS-3550: add ability to opt out of the sigstore signing requirement #9940
CORS-4162: Remove GCPClusterHostedDNSInstall featuregate #9944
OCPBUGS-61490: Update code to retrieve ICSP instead of ICP #9933
MGMT-21586: Add an option in image-based installation to specify architecture #9934
SPLAT-2430: Update vSphere version validations for 7 EOL and VCF 9 #9914
OCPBUGS-61373: Fix shellcheck issues in bootstrap #9929
OCPBUGS-61373: Fix agent shellcheck issues #9928
no-jira: Fix logging and error messages #9917
SPLAT-2465: Changed LB VM creation to not be hard coded and use from variables.ps1 #9926
OCPBUGS-61111: Allow user to BYO private zone without specifying name #9922
Full changelog

baremetal-machine-controllers

OCPBUGS-62365: Updating baremetal-machine-controller-container image to be consistent with ART for 4.21 #237
Full changelog

baremetal-operator

OCPBUGS-61349, OCPBUGS-62112: Merge upstream #432
OCPBUGS-62460: Updating ose-baremetal-operator-container image to be consistent with ART for 4.21 #433
NO-ISSUE: Merge upstream #430
Full changelog

baremetal-runtimecfg

OCPBUGS-62581: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.21 #370
Full changelog

cli, cli-artifacts, deployer, tools

NO-JIRA: adm upgrade status: capture testcase for OCPBUGS-60768 #2081
OCPBUGS-62445: prevent crash when rootDeviceHints format is invalid #2109
NO-JIRA: Update shellescape and sspi to newer versions #2116
NO-JIRA: Remove myself from update approvers, add Hongkai #2112
OCPBUGS-62550: Updating ose-cli-artifacts-container image to be consistent with ART for 4.21 #2111
OCPBUGS-61491: Update code to retrieve ICSP instead of ICP #2095
OCPBUGS-62362: Updating ose-tools-container image to be consistent with ART for 4.21 #2108
OCPBUGS-62548: Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.21 #2110
NO-JIRA: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.21 #2107
OCPBUGS-59311: oc adm must-gather: Add support for context #2105
OCPBUGS-59311: pkg/…/inspect: Add support for context.Context #2100
WRKLDS-593: oc adm must-gather: Improve cleanup order #2080
NO-JIRA: Add tchap as reviewer in oc #2099
NO-JIRA: oc adm groups sync: Use client.Unbind #2094
OCPBUGS-61063: pkg/cli/admin/upgrade/recommend: Enable precheck and accept gates #2088
OCPBUGS-52936: oc adm policy: Only initialize UserClient if built-in OAuth is enabled #2090
OCPBUGS-61311: Introduce auto-open-browser flag for external OIDC issuer login #2089
NO-ISSUE: pkg/cli/admin/upgrade/recommend/examples/4.19.0-okd-scos.16: Add OKD example #2093
OCPBUGS-59951: oc adm must-gather: Wrap gather in a session #2087
NO-JIRA: Add some warnings into excluded list #2092
OCPBUGS-56691: Rely on overall available disk space of the mounted volume #2084
Full changelog

cloud-credential-operator

CCO-435: Migrate away from deprecated ioutil package. #920
OCPBUGS-62495: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.21 #923
OCPBUGS-62184: aws: remove endpoint overrides for s3 and cf clients #921
CCO-692: Migrate to aws-ask-go-v2 #905
OCPBUGS-61475: set cloud-credential-operator as default-container #914
OCPBUGS-60078: ccoctl: aws to use proper issuer url on subsequent runs #904
Full changelog

cloud-network-config-controller

OCPBUGS-62437: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.21 #181
Full changelog

cluster-authentication-operator

OCPBUGS-62447: Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.21 #793
API-1835: test/oauth-server-staticresource: adds a test to show which input resources are required to run the operator and the staticResourceController #790
NO-JIRA: Update OIDC e2e test to expect admission-time validation error of invalid CEL expression #797
API-1835: fix integration tests #795
OCPBUGS-57444: set appropriate rolling update settings #789
NO-JIRA: om: fix integration testing #788
Full changelog

cluster-autoscaler

NO-JIRA: Remove OWNERS automation preamble #382
Full changelog

cluster-baremetal-operator

OCPBUGS-61477: Enable runtime extraction of aarch64 images #508
OCPBUGS-62577: Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.21 #507
OCPBUGS-60498: Always have a service for ironic-api port #510
METAL-1449: optionally deploy IPE #490
Full changelog

cluster-capi-controllers

OCPBUGS-62579: Updating ose-cluster-api-container image to be consistent with ART for 4.21 #249
NO-JIRA: Update OWNERS #246
OCPBUGS-57605: Updating ose-cluster-api-container image to be consistent with ART for 4.20 #242
Full changelog

cluster-capi-operator

OCPCLOUD-3104: manifests-gen: re-enable conversion, validating and mutating webhook configurations #389
OCPCLOUD-3104: Fix v1beta2 condition setting #385
OCPCLOUD-2709: Implement MAPI2CAPI conversion of loadbalancers #348
OCPBUGS-62570: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.21 #357
OCPCLOUD-2995: Machine status conversion and syncing #365
NO-JIRA: hack/test.sh use eval for starting ginkgo so GINKO_EXTRA_ARGS having whitespaces works #380
OCPCLOUD-2641: Validate creation of Machine API Machines #368
OCPBUGS-62620: kubeconfig controller: do not error on token secret not yet populated #373
NO-JIRA: lint: add aliases for machine api’s and controller-runtime log #367
OCPCLOUD-2992: refactor: split machine migration testing into multiple files #364
NO-JIRA: machine_sync: assorted fixes #370
OCPCLOUD-2992: Enable MAPI machine synchronized e2e tests (re-enable after OCPBUGS-54703 fix) #359
NO-JIRA: Update OWNERS #353
OCPCLOUD-3162: conversion: do not set ignition version on AWSMachine #363
NO-JIRA: use go workspaces #358
OCPCLOUD-2714: Add VAPs to prevent setting of CAPI fields that are not supported by MAPI #334
No-JIRA: increased timeout #354
NO-JIRA: Adds AGENTS.md #349
OCPBUGS-54703: Fix conversion of Machines without MachineSet #351
OCPCLOUD-2992: migration e2e for deleting machine #345
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-62585: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.21 #414
OCPBUGS-51305: ccm: disable unused secure-serving port and webhook #415
OCPBUGS-60385: Add Microsoft.Network/publicIPAddresses/delete permission #416
NO-JIRA: Update OWNERS #413
OCPBUGS-54490: Add Azure permissions for Private Link Service operations #417
SPLAT-2341: Add feature gate support in the cloud-config sync controller #400
Full changelog

cluster-config-api

MCO-1873: promote ManagedBootImagesAzure to default #2526
OCPBUGS-60457: payload-command: remove authentication CR from hypershift payload #2523
OCPSTRAT-2371: Update to Kubernetes v1.34.1 #2427
CNTRLPLANE-1576: add event-ttl configuration to kube-apiserver #2520
CNTRLPLANE-1614: add event-ttl feature gate #2525
: promote InsightConfigAPI and OnDemandDataGather to v1 #2448
Switch to slices stable sort on manifest merging #2524
Use separate serialization linting config for Machine API provider types #2522
Add initial AI api-review configuration #2489
Support AMD SEV-SNP on AWS #2424
MCO-1805: MCO-1806: Add ManagedBootImagesCPMS feature gate & CPMS type to ManagedBootImages API #2396
OCPBUGS-62482: Updating ose-cluster-config-api-container image to be consistent with ART for 4.21 #2513
OCPBUGS-55649: Remove SetEIPForNLBIngressController feature gate #2501
OCPBUGS-61382, STOR-2533: move VolumeAttributesClass to GA #2471
Promote BYO OIDC features #2454
OCPBUGS-55673: Remove IngressControllerLBSubnetsAWS featuregate #2400
OCPBUGS-62068: NodeSwap Feature Gate usage to be removed #2494
OCPBUGS-59939: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2507
OCPBUGS-59940: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2506
(bugfix): crdify generator returns aggregated error when validations fail #2493
MCO-1669: add BootImageSkewEnforcement API #2357
remove unused feature gate InsightsConfigAPI #2474
OCPBUGS-61689: Add ‘AGE’ print column to MachineConfigNode object #2476
NO-JIRA: tooling: add crdify generator to run crdify against CRD changes #2472
Update controller-tools to latest on fork #2478
Monitoring API: Add Metric server config #2322
CNTRLPLANE-5: Add CBOR feature gate #2235
NO-JIRA: New rules about CO’s conditions #2469
apiservers.config.openshift.io: remove spec.tlsSecurityProfile GoDoc caveats #2467
SPLAT-2482: create new featuregate for ClusterAPIMachineManagementVSphere #2466
MCO-1675: Update API for Status Reporting needs (REBASED) #2442
CORS-3993: Promote GCPClusterHostedDNS to Default #2300
Adjust typos #2243
Update schema checker to avoid incorrect new required fields checks #2470
config/v1/cluster_operator improve documentation #2344
Update NodeSwap with owner and doc blurb. #2053
CORS-4136: Add Feature gates for AWS, Azure and GCP Dual Stack support #2430
Full changelog

cluster-config-operator

OCPBUGS-62330: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.21 #450
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-62588: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 4.21 #369
NO-JIRA: Update OWNERS #367
MCO-1866: Ignore boot image differences while reconciling Provider Configs #368
Full changelog

cluster-csi-snapshot-controller-operator

Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.21 #245
OCPBUGS-62247: add all-egress label to deployments on HCP and IBM #243
Full changelog

cluster-dns-operator

NE-2138: Bump cluster-dns-operator to Kubernetes 1.33 for 4.21 #448
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #449
NO-JIRA: Add davidesalerno to OWNERS #447
Full changelog

cluster-etcd-operator

OCPEDGE-1885, OCPEDGE-2088: Updated state transitions & tests for TNF setup job #1481
OCPBUGS-60273: Ensure revision.json persists on ungraceful shutdown #1494
NO-JIRA: use scrapeClass for service monitors #1497
NO-JIRA: add runbook urls for alerting rules #1496
NO-JIRA: feat: update the ip parsing for the nodes #1479
OCPEDGE-2183: Updating Quorum detection logic to absolve TNF of quorum loss reports. #1483
NO-JIRA: remove etcd-backup-server from static pod lists #1492
CNTRLPLANE-1315: Add OpenShift Tests Extension (OTE) for cluster-etcd-operator #1488
OCPBUGS-62518: Updating cluster-etcd-operator-container image to be consistent with ART for 4.21 #1489
NO-JIRA: Use secure cipher suites #1477
ETCD-590: configure probes based on quota size #1460
NO-JIRA: Add priority field to prevent early shutdown #1476
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

OCPBUGS-62573: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.21 #1256
Full changelog

cluster-ingress-operator

NE-1334: Enhancement to add brew and stage secrets for pre-release image testing #1291
OCPBUGS-43919: desiredWildcardDNSRecord: Check for nil LB field #1189
OCPBUGS-62400: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.21 #1286
NE-1334: Script to install ossm pre-release operator and run GWAPI e2e tests #1283
OCPBUGS-55649: Remove SetEIPForNLBIngressController feature gate #1280
OCPBUGS-55673: Remove IngressControllerLBSubnetsAWS featuregate #1242
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #1281
NE-2139: Kubernetes to 1.33.4 and controller-runtime to 0.21 #1279
NO-JIRA: Add davidesalerno to OWNERS #1278
OCPBUGS-60859: Fix logic on gatewayapi test cleanup #1273
Full changelog

cluster-kube-apiserver-operator

OCPSTRAT-2371: Update to Kubernetes v1.34.1 #1939
OCPNODE-3758: alpha/beta apis for DRA should not be enabled in 1.34 #1932
OCPBUGS-60045: Bump library-go to latest master #1928
OCPBUGS-62450: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.21 #1931
NO-JIRA: Add priority field to prevent early shutdown #1915
NO-ISSUE: Use scrapeClass for service monitors #1930
OCPSTRAT-2371: MutatingAdmissionPolicy e2es depend on both v1alpha1 and v1beta1 of admissionregistration.k8s.io being served in k8 1.34 #1927
OCPBUGS-15430: move alerting rules from CMO over #1922
Re-apply “OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry” #1910
OCPSTRAT-2371: promote MutatingAdmissionPolicy to v1beta1 for > 1.34.0 #1921
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-57562: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.20 #58
NO-JIRA: Update OWNERS #60
Full changelog

cluster-kube-controller-manager-operator

OCPSTRAT-2371: Update to Kubernetes v1.34.1 #888
no-jira: Add priority field to prevent early shutdown #865
CNTRLPLANE-1544: Enable user namespaces for the operator #886
NO-ISSUE: Use scrapeClass for service monitors #880
OCPBUGS-62408: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.21 #885
OCPBUGS-62255: Throttle resourcesynccontroller on pairs with dual writers. #881
WRKLDS-1556: Remove –cloud-provider=external from KCM #862
CNTRLPLANE-1275: Fixing arch issue #869
CNTRLPLANE-1275: Fixed hardcode arch issue #866
Full changelog

cluster-kube-scheduler-operator

no-jira: Add priority field to prevent early shutdown #572
CNTRLPLANE-1544: manifests: Align user namespaces for the operator #581
CNTRLPLANE-1544: Enable user namespace for the operator #580
OCPBUGS-62609: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.21 #579
NO-ISSUE: Use scrapeClass for service monitors #578
OCPBUGS-61301: Add readonlyRootFilesystem #575
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-62444: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.21 #132
CNTRLPLANE-1306: Fixing arch issue #130
CNTRLPLANE-1306: Fix arch issue #128
Full changelog

cluster-machine-approver

OCPBUGS-62583: NO-JIRA: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.21 #277
NO-JIRA: Update OWNERS #276
NO-JIRA: set machine-approver-controller as default container #278
Full changelog

cluster-monitoring-operator

OCPBUGS-62276: add tls configuration for the monitoring plugin deployment #2706
NO-JIRA: [bot] Synchronize versions of the downstream components #2705
OCPBUGS-62972: enhance case 66736 #2708
NO-ISSUE: Update jsonnet dependencies #2696
OCPBUGS-62160: Remove AlertManager endpoints when disabled #2684
NO-JIRA: [bot] Synchronize versions of the downstream components #2703
MON-4395: Bump prometheus-operator to v0.86.0 #2698
NO-ISSUE: set openshift-state-metrics as default container #2693
OCPBUGS-61661: Remove cluster from non-multicluster dashboards #2679
MON-4384: adding Blackwell GPU device to accelerators configmap #2689
NO-ISSUE: chore: remove image locations in assets #2683
NO-ISSUE: [bot] Update jsonnet dependencies #2687
NO-ISSUE: chore: remove mentions of prometheus Adapter #2682
OCPBUGS-15430: remove Kubernetes API alerting rules #2671
NO-JIRA: chore: bump jsonnet dependencies #2649
OCPBUGS-62109: test: remove image registry e2e tests #2681
NO-ISSUE: update Go dependencies #2674
MON-4346: Bump Go to 1.24 #2655
NO-JIRA: [bot] Synchronize versions of the downstream components #2673
OCPBUGS-60161: Add mcd_local_unsupported_packages metric from MCO to telemetry #2638
NO-ISSUE: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.21 #2662
MON-4344: chore: port the test suite over from openshift-tests-private #2635
MON-4371: chore(prometheus): enable use-uncached-io feature flag #2637
NO-JIRA: [bot] Synchronize versions of the downstream components #2668
OCPBUGS-61113: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2657
NO-JIRA: [bot] Synchronize versions of the downstream components #2663
OCPBUGS-56568: chore(jsonnet): use prometheus_remote_storage_queue_highest_timestamp_seconds in PrometheusRemoteWriteBehind #2660
OCPBUGS-61135: Revert “MON-4343: Cleanup deprecate pa config” #2658
Full changelog

cluster-network-operator

CORENET-6423: api, l2udn: subnets must be masked #2808
CORENET-6311: Skip running _stackmanager for libreswan 5.3+ #2787
OCPBUGS-62457: Updating cluster-network-operator-container image to be consistent with ART for 4.21 #2807
OCPBUGS-54806: Add recording rules for UDN telemetry #2697
OCPBUGS-61215: Tweak iptables-alerter to try to avoid crictl bug #2802
OCPBUGS-42303: Add drop flows for GARP #2801
OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes #2797
OCPBUGS-61561: Relax label req. of DPU/DPU Host/Smart NIC #2786
Revert “OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes” #2796
OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes #2605
OCPBUGS-60421: Set maxUnavailable 10% on MultiNetworkPolicy DS #2785
CORENET-6327: Update linter #2783
Full changelog

cluster-node-tuning-operator

NO-ISSUE: pkg/metrics/server: Log bind address #1411
OCPBUGS-62839: E2E: Add test cases related to schedulable control plane nodes #1405
OCPBUGS-62835: E2E: llc: make sure to remove any trailing newspaces #1407
OCPBUGS-62153: E2E: skip SMT disabled test when L3 cache spans entire NUMA node #1397
OCPBUGS-62605: e2e: refactor GetSMTLevel to remove Gomega assertions #1399
OCPBUGS-62578: Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.21 #1391
OCPBUGS-62091: E2E: Add function to check control plane nodes are schedulable. #1396
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-olm-operator

NO-ISSUE: Remove conditionals for cp-manifests use #142
OPRUN-4079: Use helm to generate manifests #140
NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.21 #138
OCPBUGS-61873: Update RBAC to update/patch/delete what we create #139
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-62500: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.21 #626
NO-JIRA: Bump library go rm co dep #625
Full changelog

cluster-openshift-controller-manager-operator

CNTRLPLANE-1307: set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test #395
Full changelog

cluster-policy-controller

OCPBUGS-62440: Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.21 #169
OCPBUGS-57191: fix(psalabelsyncer): return an error instead of panic when converting an unknown volume #167
NO-JIRA: scc allocation controller: Use server-side apply #165
Full changelog

cluster-samples-operator

OCPBUGS-62409: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.21 #651
OCPBUGS-62061: Re-sync OCP Samples Library for OCP 4.21 - 22Sep2025 #650
Full changelog

cluster-storage-operator

OCPBUGS-62669: Move metrics to vsphere driver #625
OCPBUGS-60637: remove static value for runAsUser in securityContext #619
OCPBUGS-62421: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.21 #624
OCPBUGS-62172: Add app label to Manila deployment #628
OCPBUGS-61112: add Azure Disk CSI driver SA name to CredentialsRequest #618
STOR-2297: remove oVirt code from CSO #617
OCPBUGS-60637: HyperShift deployments should reflect user id security context #616
OCPBUGS-62121: add all-egress label to deployments on HCP and IBM #621
OCPBUGS-61175: Add RBAC rule to let manila-csi-driver-operator manage NetworkPolicy #615
SPLAT-2467: Updated VPD alerts to reflect current vSphere support #612
OCPBUGS-61161: Fix logging e2e also faster cleanup #611
Full changelog

cluster-update-keys

OCPBUGS-62464: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.21 #86
Full changelog

cluster-version-operator

OCPBUGS-61872: Add ClusterVersionOperator manifests to TechPreviewNoUpgrade clusters #1232
OCPBUGS-62861: temporarily disable metrics auth for hypershift clusters #1243
OTA-1627: pkg/cincinnati: Centralize release metadata parsing #1231
NO-JIRA: Move myself to emeritus #1239
OCPBUGS-62416: Updating cluster-version-operator-container image to be consistent with ART for 4.21 #1237
OTA-1585: test: Rename an existing test to comply with the OTE integration guide #1235
OTA-1531: Rework error handling in FeatureGate processing #1206
NO-JIRA: Extend the development documentation regarding building and publishing a payload image #1227
NO-ISSUE: Update golang version to 1.24 in go.mod #1230
Full changelog

configmap-reloader

OCPBUGS-62503: Updating configmap-reload-container image to be consistent with ART for 4.21 #74
Full changelog

console

OCPBUGS-61767: Duplicate CRs are shown as Operand instances in operator uninstallation modal #15557
CONSOLE-4820: Migrate olmv0 to dynamic #15566
OCPBUGS-33879: use tenancy path for project scoped status card #15585
OCPBUGS-62947: bump dompurify to latest #15586
CONSOLE-4819: Migrate container-security to dynamic #15565
CONSOLE-4602: Migrate enzyme “packages/console-app” unit tests to React Testing Library #15514
OCPBUGS-60603: Add bearer token file configuration to oc-environment script #15521
OCPBUGS-62315: Correct the width of the cluster config toolbar filter input #15546
CONSOLE-4795, CONSOLE-4797, CONSOLE-4801: Migrate some static extensions to dynamic #15552
CONSOLE-4804: Migrate TopologyCreateConnector to dynamic #15549
CONSOLE-4800: Migrate HorizontalNavTab to dynamic #15553
OCPBUGS-59529: Prevent the topology context menu items from truncating #15524
CONSOLE-4798: Migrate StorageClassProvisioner to dynamic #15550
OPRUN-4086: Add ClusterCatalog controller #15466
NO-JIRA: chore(OWNERS): remove Mylanos from OWNERS #15559
CONSOLE-4332: Update the secrets forms to use PF components #15513
OCPBUGS-62313: Returning from any Secret Create page does not return to secret page #15543
CONSOLE-4684: Refactor machine-set modals #15484
OCPBUGS-62281: InsecureSkipVerify to true for results proxy endpoint in off-cluster #14888
CONSOLE-4808: update resource-log.cy.ts #15539
CONSOLE-4799: update tests/app/debug-pod.cy.ts #15530
CONSOLE-4802: Migrate KebabActions to dynamic #15535
CONSOLE-3769: Add @openshift/dynamic-plugin-sdk to core and internal pkg deps #15518
OCPBUGS-61536: Fix incorrect handling of vSphere settings #15481
OCPBUGS-61937: Add Missing Periods to Error Messages and update try again button link #15511
NO-JIRA: Remove yarn-generate from post-install script #15373
CONSOLE-4796: Migrate some Dashboards extensions to dynamic #15526
OCPBUGS-61535: Cancel PVC creation redirect user to last visited page instead of PVC list #15502
CONSOLE-4764: Add tech preview feature flag support #15477
CONSOLE-4715: Migrate the Enzyme test tests root directory and remove tests… #15462
NO-JIRA: Update CHANGELOG based on 4.18 plugin SDK package release #15517
CONSOLE-4760: update CRD list to use ResourceDataView #15469
CONSOLE-3769: Install @openshift/dynamic-plugin-sdk #15509
OCPBUGS-60084: Help dropdown should be closed automatically after tour model opened #15483
OCPBUGS-55401: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15315
OCPBUGS-59634: Fix the events search input width, and incorporate PF Toolbar component #15501
NO-JIRA: Update README.md with instructions for logging out kube:admin in local #15482
NO-JIRA: chore(OWNERS): remove logonoff from reviewers #15505
CONSOLE-4710: use useOverlay to launch ErrorModal #15475
OCPBUGS-61087: Updation of label from edit label doesn’t work #15460
OCPBUGS-61519: Fix improper DescriptionList refactor #15495
OCPBUGS-59972: Add validation and type guards on healthHandler calls to prevent errors #15470
CONSOLE-4756: Convert more files to TypeScript #15472
OCPBUGS-61458: fix MachineSet YAML template #15478
OCPBUGS-58118: fix namespace path generation for non-namespaced resources #15467
OCPBUGS-61183: cluster in workload identity mode is not applied with the token-auth-… #15459
OCPBUGS-61133: Fix catalog search relevance scoring, so that operators with attribute.keywords are displayed and remove unnecessary metadataName from calculation #15444
OCPBUGS-61468: i18n upload/download routine task for OCP version 4.20 #15476
CONSOLE-4727: Update OWNERS files across the repo #15461
CONSOLE-4598: Migrate enzyme tests/components/utils unit tests to React Testing… #15442
OCPBUGS-61393: Change default tab size from 4 to 2 #15474
CONSOLE-4635: Refactor PDBActionFactory to hook form and cleanup. #15285
NO-JIRA: Update plugin SDK CHANGELOG post 4.18 package publish #15463
OCPBUGS-61139: Correct the ordering of Catalog categories to be alphabetized #15454
CONSOLE-4610: Drop use of ceateModalLauncher from Topology package #15446
OCPBUGS-61090: fix typo in update approval strategy label #15452
CONSOLE-4683: Refactor group action factory #15404
And 8 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-59939: Bumped to latest console-operator version #1055
OCPBUGS-62512: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.21 #1050
OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1052
CONSOLE-4765, CONSOLE-4767: Automate console tech preview flag via cluster FeatureSet, Grant console service account watch permissions for ClusterCatalogs #1043
OCPBUGS-61726: Revert “OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition” #1046
OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1041
OCPBUGS-61483: Update DEFAULT_DOC_URL to point to OpenShift Container Platform 4.21 #1044
OCPBUGS-61383: Update QuickStarts typo and doc link #1042
OCPBUGS-60863: Rename Dockerfile to Dockerfile.ocp #1039
OCPBUGS-60782: pluginOrder field should only contain available plugins #1038
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

no-jira: Update OWNERS #204
Full changelog

coredns

NO-JIRA: Updating coredns-container image to be consistent with ART for 4.21 #154
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #153
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-62544: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.21 #352
OCPBUGS-62575: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.21 #350
NO-JIRA: shiftstack: Update OWNERS #353
Full changelog

csi-driver-nfs

NO-JIRA:shiftstack: Update OWNERS #162
OCPBUGS-62509: Updating csi-driver-nfs-container image to be consistent with ART for 4.21 #161
Full changelog

csi-external-attacher

OCPBUGS-61394: UPSTREAM: 682: Skip VolumeAttachments of other drivers #88
NO-JIRA: Updating csi-attacher-container image to be consistent with ART for 4.21 #87
Full changelog

csi-external-provisioner

OCPBUGS-62541: Updating csi-provisioner-container image to be consistent with ART for 4.21 #116
Full changelog

csi-external-resizer

OCPBUGS-62504: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.21 #178
OCPBUGS-61547: Requeue PVC over PV creation #173
Full changelog

csi-external-snapshot-metadata

NO-JIRA: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.21 #5
Full changelog

csi-external-snapshotter, csi-snapshot-controller

OCPBUGS-62423: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.21 #188
NO-JIRA: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.21 #187
Full changelog

csi-livenessprobe

OCPBUGS-62403: Updating csi-livenessprobe-container image to be consistent with ART for 4.21 #77
Full changelog

csi-node-driver-registrar

OCPBUGS-60108: update log level verbosity to not clutter logs #86
OCPBUGS-62506: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.21 #85
Full changelog

docker-registry

OCPBUGS-60845: update OWNERS #447
Full changelog

driver-toolkit

Updating the OWNERS file. (#175) #175
Updating driver-toolkit-container image to be consistent with ART for 4.21 (#172) #172
Full changelog

etcd

OCPBUGS-62338: Updating ose-etcd-container image to be consistent with ART for 4.21 #342
Full changelog

gcp-cloud-controller-manager

OCPBUGS-62572: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.21 #92
NO-JIRA: Update OWNERS #90
OCPBUGS-61006: Adjust vendoring to use go.work to get rid of the symlink #91
Full changelog

gcp-cluster-api-controllers

OCPBUGS-62417: Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.21 #249
NO-JIRA: Update OWNERS #248
Full changelog

gcp-machine-controllers

OCPBUGS-62520: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.21 #130
NO-JIRA: Update OWNERS #129
no-jira: Machine Api Operator GCP must search for the GCP Custom Endpoints Installer feature gate #128
Full changelog

gcp-pd-csi-driver

Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.21 #84
Full changelog

gcp-pd-csi-driver-operator

NO-JIRA: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.21 #151
CORS-4201: Search for the feature gate for GCP Custom Endpoints #150
Full changelog

gcp-workload-identity-federation-webhook

OCPBUGS-62591: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.21 #10
Full changelog

haproxy-router

OCPBUGS-62501: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.21 #679
OCPBUGS-62555: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.21 #680
OCPBUGS-49769: Validate the key and cert content before accepting #669
NE-2137: Bump router k8s libraries to 0.33.4 #671
OCPBUGS-60257: fix extra space in haproxy template #676
OCPBUGS-57896: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.20 #660
OCPBUGS-57845: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.20 #659
NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #675
OCPBUGS-61224: Revert Prevent startup failures due to name resolution” #672
NO-JIRA: Add davidesalerno to OWNERS #670
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-62608: Updating openshift-enterprise-pod-container image to be consistent with ART for 4.21 #2481
OCPBUGS-60610: UPSTREAM: 134199: Promote regression-issue-74839 to 1.4 #2472
OCPBUGS-43994: UPSTREAM: <carry>: kube-apiserver: wire through isTerminating into handler chain #2477
OCPBUGS-61554: Bump 1.33.5 #2459
OCPBUGS-61754: UPSTREAM: <carry>: Add retries for GetCurrentResourceVersion. #2467
OCPBUGS-61222: Do not remove PVC ClaimRef to fix flaky VAC test #2452
OCPBUGS-58313: apiserver library go bump #2457
NO-JIRA: UPSTREAM: 133682: Increase port-forward broken connection detection client timeout #2428
OCPBUGS-60507: Unrevert bump to v1.33.4 #2441
OCPBUGS-56594: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2443
OCPBUGS-61196: UPSTREAM: 133625: Remove patch/update from ServiceCIDR API conformanc… #2444
OCPBUGS-60946: UPSTREAM: 133425: Fix SELinux label comparison #2417
Full changelog

hypershift

OCPBUGS-61881: Red Hat Konflux update hypershift-gomaxprocs-webhook #7063
OCPBUGS-63194: fix(konflux): fix tag pipeline EC failures #7060
OCPBUGS-55751: Fix Konflux tag pipeline template variable substitution #6910
CNTRLPLANE-1620: feat(gomaxprocs-webhook): introduce admission webhook to auto-set GOMAXPROCS #6994
OCPBUGS-63148: bump Konflux build images #7055
CNTRLPLANE-1615: Add repo metrics tool for tracking AI-assisted commits #6983
CNTRLPLANE-980: feat(api): Validation for hc.status.configuration.authentication status #6883
OCPBUGS-61829: resolve initContainer permission issue after node reboot #6990
NO-JIRA: test: update external-oidc e2e tests to dynamically determine tests to run #6924
NO-JIRA: migrate renovate config #7029
CNTRLPLANE-1643: implement multi-branch strategy with security-focused release management #7023
CNTRLPLANE-1641: update Tekton tasks to latest trusted versions #6998
OCPBUGS-62172: Add OpenStack node drivers to allowed non-read-only root filesystem containers #6946
OCPBUGS-62863: feat(cmd): collect ServiceMonitor and PodMonitor resources in dump #6970
NO-JIRA: chore(ai): add ability for jira-solve to save a plan spec first #6995
CNTRLPLANE-1493: Add Claude command for automated Konflux task updates #6921
CNTRLPLANE-1484: Expose cluster autoscaler metrics in HCP #6902
CNTRLPLANE-1582: Prevent azure cluster destroy command from deleting managed/main resource group #6956
CNTRLPLANE-1543: fix(aws): use clean image for placeholder nodes #6935
CNTRLPLANE-1468: feat(install): add command line argument for ImagePullPolicy configuration #6875
NO-JIRA: feat(claude): add e2e-analyze command for CI failure analysis #6737
CNTRLPLANE-1374: feat(azure): add setup scripts for self-managed Azure hosted clusters #6752
NO-JIRA: chore(ai): configure all agents to inherit model configuration #6906
CNTRLPLANE-1332: docs(azure): add self-managed Azure HyperShift overview guide #6948
CNTRLPLANE-1432: Make PSA test conditional on OpenShiftPodSecurityAdmission feature gate #6923
CNTRLPLANE-1581: feat(azure): relax API to make externalDNS optional for self-managed clusters #6951
OCPBUGS-62446: fix(hcco): add retry mechanism for HCP retrieval to handle transient connectivity issues #6918
NO-JIRA: docs(jira-solve): require godoc comments and unit tests for new functions #6957
OCPBUGS-60637: feat(cpo): add UID security context to CSO deployment #6786
OCPBUGS-62407: chore(build): update container images to 4.21 #6936
NO-JIRA: Add openstack-reviewers, openstack-approvers #6911
GCP-96: add GCPPlatform feature gate #6929
CNTRLPLANE-1332: docs(readme): correct spelling mistake #6943
CNTRLPLANE-1332: docs(azure): add self-managed cluster setup documentation #6808
OCPBUGS-61245: Fix driver-config ConfigMap content flapping due to random ordering #6907
CNTRLPLANE-1545: docs(commands): improve jira-solve command with logical commit organization #6937
NO-JIRA: chore(ci): update Konflux Tekton tasks to latest trusted versions #6928
OCPBUGS-62328: Add missing svc-kubeconfig mount to CAPO Deployment #6909
OCPBUGS-62324: Fix test-e2e annotations flag parsing #6908
AUTOSCALE-322: fix karpenter token secret leak #6790
CNTRLPLANE-980: feat(api): add hc.status.configuration.authentication status field #6261
NO-JIRA: fix(e2e): extend ValidateHostedClusterConditions timeout #6913
KFLUXSPRT-5246: update base images from RHEL9 ELS to UBI9 minimal 9.4 #6916
OCPBUGS-62172: Add Manila, Cinder to list of pods allowed readOnlyRootFileSystem=false #6885
NO-JIRA: fix(test): support external oidc settings on non-aws platform #6754
NO-JIRA: chore(ai): ensure jira-solve run make pre-commit #6901
NO-JIRA: chore(ai): let jira-solve show the executed command in the PR desc #6898
OCPBUGS-61936: fix(capi-provider): wait for infrastructure resource before startup #6860
OCPBUGS-62224: fix(e2e): add stabilization wait in GlobalPullSecret test to reduce flakiness #6892
CNTRLPLANE-1478: chore: add AI directory paths to OWNERS file #6884
NO-JIRA: chore(ai): add claude slash command jira solve #6882
OCPBUGS-62099: make TestAutoscalingBalancing more robust #6877
OCPBUGS-61850: fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races #6843
NO-JIRA: ci(dev-cluster): Fix dev token secret annotation #6876
OCPBUGS-62056: test(e2e): fix flaky EnsureOAPIMountsTrustBundle with retry logic #6872
OCPBUGS-62128: hcco: sync watched resource types to availability-prober #6879
CNTRLPLANE-1331: Get self-managed Azure working again #6703
OCPBUGS-59885: [e2e][KubeVirt] Ignore KubeVirtNodesLiveMigratable Condition on HC #6826
CNTRLPLANE-1455: docs(contribute): consolidate contributing guide; refresh PR template; add landing page #6866
OCPBUGS-61776: fix(ignition-server): Don’t delete user-managed cert secrets #6836
OCPBUGS-61894: Enable VolumeAttributesClass runtime config #6855
CNTRLPLANE-1452: docs(ci): add documentation for checking CI status #6849
OCPBUGS-61438: fix(security): harden konnectivity-agent DaemonSet security context #6835
OCPBUGS-61828: refactor FeatureGate status check #6862
OCPBUGS-61329: skip EnsureReadOnlyRootFilesystemTmpDirMount check for kubevirt HCP pods #6842
OCPBUGS-61825: test(e2e,kubevirt): skip break-glass-credentials on kubevirt #6856
OCPBUGS-61862: ci: Remove the MCE 2.10 konflux pipeline #6848
OCPBUGS-61719: fix: propagate AWSLoadBalancerTargetNodesAnnotation to… #6823
OCPBUGS-61334: fix(kas): Set correct container port in postStart handler, 2 #6824
OCPBUGS-61177: ci: use common MCE konflux pipeline #6743
NO-JIRA: Update Branch Tasks Docs #6840
OCPBUGS-56249: fix lint-fix Makefile rule #6151
OCPBUGS-61048: test(e2e): add autoscaler deployment verification to autoscaling test #6779
OCPBUGS-61687: fix(capi-provider): use single replica deployment for aws and azure #6807
fix(disable-psa): disable PSA check for 4.20 #6831
OCPBUGS-61482: fix(proxy): ensure URLs have scheme before proxy resolution #6789
OCPBUGS-61587: fix(oauth): oauth-openshift deployment should be HA #6802
CNTRLPLANE-1277: Enable TestCreateClusterCustomConfig for Azure #6706
Revert “OCPBUGS-61334: fix(kas): Set correct container port in postStart handler” #6805
OCPBUGS-60185: resolve MIRRORED_RELEASE_IMAGE flapping #6751
OCPBUGS-61499: fix(control-plane): remove resource limits from kube-controller-manager #6785
CNTRLPLANE-1364: feat: enable global pull secret for AWS #6736
OCPBUGS-61334: fix(kas): Set correct container port in postStart handler #6773
NO-JIRA: fix karpenter metric validation in e2e #6714
NO-JIRA: chore(AI): add claude agents for different SMEs #6787
OCPBUGS-61329: test(e2e): skip kubevirt pods in EnsureReadOnlyRootFilesystem #6770
OCPBUGS-61462: temporarily use v4.20 catalogs #6782
NO-JIRA: add permissions to role policy #6783
CNTRLPLANE-1385: docs: add MCP setup guide for Cursor with sample config #6775
CNTRLPLANE-1383: docs(aro-e2e): add ARO HCP e2e artifacts navigation guide and Cursor rule #6774
OCPBUGS-61218: test(e2e): add control plane component rollout validation to upgrade test #6767
CNTRLPLANE-203: feat(sharedingress): add Azure Public IP tagging support for router service #6730
OCPBUGS-61219: fix: cleanup old PKI operator deployment during upgrades #6758
OCPBUGS-61282: rename CCM deployments to align with 4.19 #6757
NO-JIRA: fix(api): enhance API NodePool’s API docs #6753
NO-JIRA: chore(tests): validate conditions after executing tests #6738
OCPBUGS-60376: fix token rotation causing Karpenter to stop working #6561
NO-JIRA: contrib: add utility for cleaning roles #5945
CNTRLPLANE-267: Restructure the OWNERS usage in the whole repo #5784
AUTOSCALE-332: allow karpenter-operator to support rhobs monitoring #6704
CNTRLPLANE-1370: feat(supportedversion): add OCP 4.21 support; update e2e constants and tests #6739
NO-JIRA: docs(create-jira-items): document OCPBUGS issue creation and default versions #6741
Full changelog

ibm-cloud-controller-manager

OCPBUGS-62342: Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 4.21 #86
NO-JIRA: Update OWNERS #85
Full changelog

ibm-vpc-block-csi-driver

Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.21 #112
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-62375: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.21 #156
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-62486: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.21 #130
NO-JIRA: Update OWNERS #126
Full changelog

ibmcloud-machine-controllers

OCPBUGS-62491: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.21 #71
NO-JIRA: Update OWNERS #70
Full changelog

insights-operator

NO-JIRA: remove CRD manifests #1156
CCXDEV-15551: Decouple CRD storage specs #1157
OCPBUGS-60870: The Gather Job did not check the current configuration before running #1154
OCPBUGS-61893: set extractor as default container #1141
OCPBUGS-62215: operator is not set as degraded when failed #1151
And 9 elided commits (e.g. from squash or rebase merges)
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-62433: Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 #54
Full changelog

ironic

OCPBUGS-62443: Updating ironic-container image to be consistent with ART for 4.21 #699
OCPBUGS-62201: Bump ironic to include idrac10 fix #697
METAL-1446, METAL-1566, METAL-1577: Sync Ironic and Sushy #695
METAL-1574: Remove temporary dependencies from source #692
OKD-283: fixing OKD ironic-image errors and metal3 pod crashes (centos9) #688
OCPBUGS-61459: sync with Ironic changes, including the local RPC revert #687
METAL-1528: Use custom directories in the runironic-proxy script #679
OCPBUGS-60455: set [json_rpc]port unconditionally #684
Full changelog

ironic-agent

OKD-295: Fix broken OKD ironic-agent-image #199
OCPBUGS-62329: Updating ironic-agent-container image to be consistent with ART for 4.21 #197
METAL-1574: Update deps pkgs versions #196
Full changelog

ironic-machine-os-downloader

OCPBUGS-62357: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.21 #107
Full changelog

ironic-static-ip-manager

OCPBUGS-62511: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.21 #54
Full changelog

keepalived-ipfailover

Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.21 #213
Full changelog

kube-metrics-server

OCPBUGS-62397: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.21 #47
Full changelog

kube-state-metrics

OCPBUGS-62356: Updating kube-state-metrics-container image to be consistent with ART for 4.21 #125
NO-ISSUE: [bot] Bump openshift/kube-state-metrics to v2.17.0 #124
Full changelog

kube-storage-version-migrator

OCPBUGS-62566: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.21 #234
Full changelog

machine-api-operator

OCPBUGS-62333: Updating ose-machine-api-operator-container image to be consistent with ART for 4.21 #1421
OCPBUGS-61728: Fixed multi nic e2e to wait for node removal after machineset tests #1417
OCPBUGS-61728: Adjusted machine e2e tests to wait for nodes to clean up #1415
NO-JIRA: Update OWNERS_ALIASES #1414
OCPBUGS-60901: bump openshift/api #1407
Full changelog

machine-config-operator

OCPBUGS-54682: Fix - NetworkManager restart or crash renders br-ex unusable #5304
OCPNODE-3747: Disable Swap mode in Kubelet and enable drop-in directory #5294
OCPEDGE-2188: embed fencing validator into TNF MCO #5285
NO-JIRA: shiftstack: Update OWNERS #5334
OCPBUGS-62510: Skip rpm-ostree local rebase if no PIS #5333
OCPBUGS-62493: Only fire OSImageURLOverridden and set metrics on changes #5319
MCO-1844: Remove MissingMachineConfig Alert #5261
MCO-1685: Add mco-sanitize utility main logic #5303
OCPBUGS-59968: Cert Controller should live fetch SAN IPs during cert rotation #5245
OCPBUGS-62341: Ensure the node passed to RunCordonOrUncordon comes from the latest updated state #5305
OCPBUGS-60805: configure-ovs: work around a Cisco switch issue #5274
MCO-408: Add OpenShift-native access to change logLevel for MachineConfigOperator components #5291
OCPBUGS-42303: Networking: reset ovn-remote config and allow ovnkube controller to s… #5123
MCO-1685: Add mco-sanitize file processing logic #5298
MCO-1685: Add mco-sanitize redactor #5295
OCPBUGS-58198: Fix MCP updated machine count for image mode disabling case #5271
MCO-1673: Add Component Readiness tests for Azure boot image updates #5257
MCO-1840: Remove MCN CRD cleanup cronjob #5234
OCPBUGS-60120: Add nil/null checks to image registry secret decode #5253
NO-ISSUE: Add delays to reduce TestOSBuildController failures #5239
MCO-1808: MCO-1790: Implement Azure boot image updates #5202
OCPBUGS-61695: Override NMState service definition #5284
OCPBUGS-60161: Add mcd_local_unsupported_packages recording rule #5242
CORS-4170: Extending in-cluster DNS support to Azure #5216
OCPBUGS-60537: Machine-config controller should actively manage cordon while draining #5276
OCPBUGS-56558: Recheck generatedByControllerVersion annotation prior to deleting a degraded MC #5259
Full changelog

machine-image-customization-controller

METAL-1564: Use available images #147
OCPBUGS-62505: Updating ose-image-customization-controller-container image to be consistent with ART for 4.21 #148
Full changelog

machine-os-images

OCPBUGS-61477: Acquire aarch64 ISO at runtime #67
OCPBUGS-56049: Force rebuild for OCP 4.21 #66
OCPBUGS-62596: Updating ose-machine-os-images-container image to be consistent with ART for 4.21 #69
Full changelog

monitoring-plugin

OU-1032: resolve stale Redux state bug in incidents time range calculation #598
OCPBUGS-63056, OCPBUGS-63061: Improve alignment with console SDK #600
OU-1030: revert most of my previous changes & avoid flickering when chang… #596
OU-995: automation monitoring testing namespace level #594
OU-1024: Add translations for all strings in Incidents page #570
OU-1022: recalculate incident x values when filtering #589
OU-1011: Display determistic start and end dates #585
OU-999: automation monitoring plugin image injection and kubevirt installation cleanup working #590
OCPBUGS-62276: allow additional TLS config #580
OCPBUGS-62454: Updating monitoring-plugin-container image to be consistent with ART for 4.21 #566
OU-1011: Render short-lived incidents and alerts #581
OU-1016: avoid displaying stale alerts data when selecting another incident detail #573
OBSINTA-789: Sort alerts by start time #577
NO-JIRA: fix handle empty queries when removing incident filters #574
NO-JIRA: Fix tooltip vertical position #576
OU-986: automation removing uncaught exception #575
OBSINTA-789: Fix alert loading and processing #569
OU-1025: keep alerts populated for the incident, when the graph is hidden… #572
NO-JIRA: chore: add unit test command and dependencies #571
OBSINTA-857: Cypress add SKIP_ALL_INSTALL #568
NO-JIRA: fix hermetic builds #564
OBSINTA-858: Cypress incidents incident traversing robustness #556
OBSINTA-858: Cypress incidents mocking metric name change workaround #553
COO-1134: fix: update vulnerable dependencies #561
NO-JIRA: Update .gitignore (Cypress specific) #558
OU-1011: REVERT add a 5 minute to the first alert timestamp #559
OU-1011: add a 5 minute to the first alert timestamp #550
NO-JIRA: automation log and debug mode in headless mode #557
OU-1015: fix: incidents dropdown stays open fix #554
NO-JIRA: Update translations for incidents #555
OBSINTA-795: Data Test Selectors for Incidents Page #545
NO-JIRA: fix: immer dependency anr patternfly icons import #542
OU-989: Kubevirt with fixes after namespace level and session handler #543
NO-JIRA: Improve incidents timeline chart domain and loading UX #551
OU-1005: upgrade perses plugins #540
OBSINTA-789: Fix alerts chart empty state #549
RHINENG-20863: improved fetching logic for incidents #546
NO-JIRA: Login validation for all session flows #544
OU-833: fix 2 bugs for incidents page #539
NO-JIRA: Cypress Testsuite – Enhance Session Management #536
OBSINTA-463: Rename the cluster health metrics #514
OBSINTA-789: Update layout and labels #534
OU-863: fix step calculation to fix non existent data gaps #535
RHINENG-20701: fix utc timestamps in chart tooltips #531
OBSINTA-798: Cypress Incident Tests – Query Mocking #521
NO-JIRA: set rules as silenced if all alerts are silenced #533
RHINENG-20667: silenced alerts for chart and table #530
OU-658: Major Refactor + Adding Namespace dropdown to admin pages #483
NO-JIRA: automation - fix monitoring-plugin injection #532
NO-JIRA: Update build-image.sh #528
OU-671: Add Patternfly Theming to Perses #522
RHINENG-20424: fix clear filter bug with incident selected #527
OU-783: Fit the alerts timeline to the actual data timespan #529
OU-727: Filter incidents by max severity over time #526
OU-988: automation - cleanup for all scripts and fix on MP injection #523
RHINENG-20424: Incident ID filter for the Incidents Page #520
OU-897: automation OU-721 and hygiene of existing scripts #519
NO-JIRA: automation - regression testing for metrics - changes #516
RHINENG-20424: improved filters for severity and state #515
OU-501: automation - dashboards legacy and export csv #517
Full changelog

multus-networkpolicy

Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.21 (#75) #75
Full changelog

must-gather

OSSM-10530: add Istio/Gateway API gather scripts #503
OCPBUGS-62551: Updating ose-must-gather-container image to be consistent with ART for 4.21 #507
Full changelog

network-tools

OCPBUGS-62553: Updating ose-network-tools-container image to be consistent with ART for 4.21 #162
NO-JIRA:Add two new team members #163
NO-JIRA: Add Marty P to bug tooling #161
OCPBUGS-53196: Update references of master to main #160
Full changelog

networking-console-plugin

CNV-60063: fixing the Create ClusterUserDefinedNetwork form appearance #280
CNV-62168: Typos in Networking Pages #277
CNV-56937: Hiding the option to create cluster user defined networks or non-priv users, allowing the option to create CUDN for users with access not just admin #284
CNV-56937: Hiding the option to create cluster user defined networks or non-priv users #283
CNV-61569: Mark OVN K8s secondary localnet as deprecated #282
OCPBUGS-62442: Updating networking-console-plugin-container image to be consistent with ART for 4.21 #279
CNV-70018: fix null error #278
Merge #273
CNV-59876: use correct name space when switching tabs #276
OCPBUGS-61531: show VM network menu only on admin #275
OCPBUGS-61548: use console extension to render same nad actions #274
CNV-59629: set default MTU visible in form and yaml #272
CNV-68685: add primary UDN label info to VirtualMachine network creation form #271
CNV-68643: fix documentation links #270
CNV-68676: fix wizard cancel button #269
Full changelog

nutanix-cloud-controller-manager

OCPBUGS-62418: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.21 #51
NO-JIRA: Update OWNERS #50
Full changelog

nutanix-machine-controllers

OCPBUGS-62378: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.21 #123
NO-JIRA: Update OWNERS #122
Full changelog

oauth-apiserver

OCPBUGS-62612: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #148
OCPBUGS-61754: Bump openshift/kubernetes-apiserver for consistent list etcd retries. #146
CNTRLPLANE-5: Bump openshift/kubernetes-apiserver #142
Full changelog

oc-mirror

CLID-443: add mandatory –v1/–v2 flag #1284
OCPBUGS-60571: reject configurations with duplicated keys and/or entries #1275
CLID-430: migration to containers/container-libs #1255
OCPBUGS-55489: removes unintended exec permissions #1285
OCPBUGS-56398: Removes the clean up of logs directory #1289
OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 (missing files of pr 1280) #1283
OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 #1280
OCPBUGS-60929: generate the archive only after mirroring #1272
OCPBUGS-62106: v2/cli: show binary version in output #1273
And 4 elided commits (e.g. from squash or rebase merges)
Full changelog

olm-catalogd, olm-operator-controller

OPRUN-4194: Update OCP catalogs to v4.21 #518
NO-ISSUE: Synchronize From Upstream Repositories #523
OPRUN-4197: Upgrade OCP image from 4.20 to 4.21 #517
OPRUN-4134: Add 2 new tests for Single/Own Namespace install mode support #502
OPRUN-4199: [Default Catalog Tests] - Change logic to get ocp images from openshift/catalogd/manifests.yaml #521
OCPBUGS-62517: Synchronize from upstream #519
OPRUN-4176: Consolidate build API #514
OPRUN-4156: UPSTREAM: <carry>: support webhook case in disconnected #508
NO-ISSUE: Synchronize From Upstream Repositories #512
OPRUN-4176: Update does-not-exist and simple install to work i… #510
NO-ISSUE: Clean up cp-manifests #511
NO-ISSUE: Synchronize From Upstream Repositories #506
NO-ISSUE: UPSTREAM: <carry>: check kubeconfig only run-test and run-suite #507
NO-ISSUE: Fix VERSION replacement in catalog bindata #505
NO-ISSUE: Synchronize From Upstream Repositories #498
OCPBUGS-62753: for incompatible test add func to wait SA creation #501
NO-ISSUE: Synchronize From Upstream Repositories #497
OPRUN-4169: OTE building controller image #483
OPRUN-4080: Remove kustomize manifests from images and repo #494
NO-ISSUE: Synchronize From Upstream Repositories #493
OCPBUGS-62372: Updating ose-olm-catalogd-container image to be consistent with ART for 4.21 #491
NO-ISSUE: Synchronize From Upstream Repositories #492
OCPBUGS-62370: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.21 #490
OCPQE-30671: UPSTREAM: <carry>: migrate more cases from tests-private #488
NO-ISSUE: Synchronize From Upstream Repositories #489
OPRUN-4160: Fix cp-manifests copying of helm charts #482
OPRUN-4164: Synchronize From Upstream Repositories #487
OPRUN-4164: Synchronize From Upstream Repositories #484
NO-ISSUE: Add pedjak and trgeiger as reviewers #463
NO-ISSUE: Synchronize From Upstream Repositories #480
NO-ISSUE: Synchronize From Upstream Repositories #479
OCPQE-29416: Init OLMv1 OTE Framework for tests-private to migrate first case #467
OPRUN-4076, OPRUN-4078: Replace kustomize config with helm config #475
NO-ISSUE: add jiazha to approvers #477
NO-ISSUE: Synchronize From Upstream Repositories #476
NO-ISSUE: Synchronize From Upstream Repositories #473
NO-ISSUE: Synchronize From Upstream Repositories #471
NO-ISSUE: Synchronize From Upstream Repositories #465
NO-ISSUE: Grant QE approver permissions for OTE contributions #457
NO-ISSUE: Synchronize From Upstream Repositories #464
NO-ISSUE: Synchronize From Upstream Repositories #456
OCPBUGS-60868: Revert “Handle service-ca cert availability/rotation” #460
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

openshift-apiserver

OCPBUGS-62516: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.21 #560
OCPBUGS-61768: update pkg/image/OWNERS #555
OCPBUGS-61754: Bump openshift/kubernetes-apiserver for consistent list etcd retries. #556
OCPBUGS-61228: Bump Route generation when spec is updated #550
OCPBUGS-37215: pkg/image: conditionally parse raw image manifest #551
CNTRLPLANE-5: Bump openshift/kubernetes-apiserver #549
OCPBUGS-57474: ensure cache invalidation after a time #547
Full changelog

openshift-controller-manager

OCPBUGS-61899: CNTRLPLANE-1308: Fix Dockerfile.rhel: Add OTE binary build and packaging #419
CNTRLPLANE-1308: set up openshift-tests-extension for openshift-controller-manager and add a sanity test #417
Full changelog

openshift-state-metrics

OCPBUGS-62431: Updating openshift-state-metrics-container image to be consistent with ART for 4.21 #126
Full changelog

openstack-cluster-api-controllers

OCPBUGS-62567: Updating openstack-cluster-api-controllers-container image to be cons… #379
NO-JIRA: Fix internal vendoring #378
NO-JIRA: shiftstack: Update OWNERS #377
Full changelog

openstack-machine-api-provider

OCPBUGS-62473: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.21 #138
NO-JIRA: shiftstack: Update OWNERS #139
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPQE-30741: support opm cases #1121
OCPQE-30781: support hypershift binary #1119
OCPQE-30679: migrate more cases from tests-private to make layout #1118
OCPQE-29415: correct suite name #1117
OCPQE-29415: enhance filters to add more suites #1116
NO-ISSUE: Synchronize From Upstream Repositories #1115
OCPQE-29415: add testing framework based on OTE and the first tests-private case #1113
OCPQE-29415: move golangci-lint and go-bindata to new location to fix sync #1114
OCPQE-29415: add OTE into olmv0 with new location #1108
NO-ISSUE: Synchronize From Upstream Repositories #1112
NO-ISSUE: UPSTREAM: <carry>: add jiazha to approvers #1110
Revert “OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0” #1109
NO-ISSUE: Updating operator-registry-container image to be consistent with ART for 4.21 #1106
OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0 #1105
NO-ISSUE: set package-server-manager as default container #1104
NO-ISSUE: Synchronize From Upstream Repositories #1103
NO-ISSUE: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.21 #1100
NO-ISSUE: Synchronize From Upstream Repositories #1101
NO-ISSUE: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.21 #1094
NO-ISSUE: make downstream csv namespace labeler plugin e2e more resilient to race conditions #1092
NO-ISSUE: Synchronize From Upstream Repositories #1088
Full changelog

operator-marketplace

OPRUN-4198: Upgrade deps to have compatible k8s version #676
OPRUN-4198: upgraded github.com/openshift/api, github.com/openshift/library-go and ginkgo #677
NO-ISSUE: Update Dockerfile.okd to use OCP image 4.21 #678
OCPBUGS-62384: Updating marketplace-operator-container image to be consistent with ART for 4.21 #674
NO-ISSUE: Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.2 #661
OCPBUGS-62132: Remove Expect func so that the test case can use the retry logic #665
NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.25.1 #658
NO-ISSUE: Update CRD version installed via makefile target #648
NO-ISSUE: Fix hyperlink #651
OCPBUGS-60669: Add NetworkPolicy for hypershift #656
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-62545: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.21 #2771
CORENET-6055: Dockerfile: Unpin OVN and consume the latest from FDP. #2721
OCPBUGS-42303, OCPBUGS-56783: DownStream Merge [10-08-2025] #2790
OCPBUGS-62574: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.21 #2756
OCPBUGS-60468: DownStream Merge [09-23-2025] #2762
OCPBUGS-42303, OCPBUGS-58501, OCPBUGS-59657, OCPBUGS-61566: DownStream Merge [09-09-2025] #2750
OCPBUGS-61065: Adding ovndb-raft-functions.sh to ovnk image #2740
NO-JIRA: DownStream Merge [08-27-2025] #2736
Full changelog

powervs-block-csi-driver

Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.21 #107
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-62373: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.21 #88
Full changelog

powervs-cloud-controller-manager

OCPBUGS-62515: Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.21 #88
Full changelog

powervs-machine-controllers

OCPBUGS-62519: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.21 #129
Full changelog

prom-label-proxy

OCPBUGS-62508: Updating prom-label-proxy-container image to be consistent with ART for 4.21 #386
NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.1 #385
Full changelog

prometheus

NO-ISSUE: [bot] Bump openshift/prometheus to v3.6.0 #278
NO-JIRA: update Prometheus to v3.6.0 #277
OCPBUGS-62401: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.21 #274
OCPBUGS-62166: chore(scrape): default to legacy validation/escaping scheme until utf-8 is fully supported by prometheus-operator #272
NO-JIRA: [bot] sync rh-manifest.txt #261
OCPBUGS-56568: chore: compute highestTimestamp at queryManager level #262
Full changelog

prometheus-alertmanager

OCPBUGS-62428: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.21 #107
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-JIRA: Bump openshift/prometheus-operator to v0.86.1 #345
MON-4395: Bump openshift/prometheus-operator to v0.86.0 #344
OCPBUGS-62448: Updating prometheus-config-reloader-container image to be consistent with ART for 4.21 #341
OCPBUGS-62542: Updating prometheus-operator-container image to be consistent with ART for 4.21 #342
Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.21 #340
Full changelog

prometheus-node-exporter

NO-ISSUE: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.21 #170
Full changelog

rhel-coreos, rhel-coreos-extensions

NO-JIRA: update the okd repo for 4.21 #1862
NO-JIRA: OWNERS: switch to joelcapitao #1861
NO-JIRA: bump version to 4.21 #1860
Full changelog

route-controller-manager

OCPBUGS-62586: Updating ose-route-controller-manager-container image to be consistent with ART for 4.21 #65
NE-2169: Move annotations and metrics to a constants file #66
NO-JIRA: Add new team members to OWNERS #64
Full changelog

service-ca-operator

OCPBUGS-62377: Updating ose-service-ca-operator-container image to be consistent with ART for 4.21 #276
OCPBUGS-63124: Fix e2e-aws-operator e2e test failures #281
OCPBUGS-56599: don’t hotloop on secret creation errors #274
Full changelog

telemeter

Updating telemeter-container image to be consistent with ART for 4.21 #565
Full changelog

tests

OCPBUGS-63149: revert https://github.com/openshift/origin/pull/30054 #30386
NO-JIRA: Combine global and command args in BackgroundRC #30382
NO-JIRA: MCO add GetAlerts to the Monitor thanos struct #30379
NO-JIRA: enhance-waitnodeready-util #30377
OCPBUGS-63040: Add imagestream update dryrun test #30357
OCPEDGE-1565: [TNF] Add double node failure recovery test #30370
NO-JIRA: implement WithoutKubeconf method to clear config path #30371
NO-JIRA: oc adm upgrade status: Record err and outputs #30151
NO-JIRA:I Fixing race condtion #30360
OCPBUGS-62552: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.21 #30327
NO-JIRA: init lease-checker namespaces #30373
NO-JIRA: generate unique namespace names for UDN tests #30348
NO-JIRA: update namespace privilege check to use PSA label #30355
OCPBUGS-56281: gatewayapicontroller: Clean up resources when done #29900
NO-JIRA: another attempt at disabling blank issues #30369
NO-JIRA: Make it clear that we do not monitor GH issues #30368
NO-JIRA: Update OWNERS for compat_otp #30361
NO-ISSUE: Add webhook image for the olmv1 tests #30356
OTA-1637: ClusterOperators should not go Progressing only for cluster scaling #30297
OCPBUGS-60593: Skip oauth test for external control plane topology #30200
TRT-2351: Revert “NO-JIRA: Improve case execution time” #30363
TRT-2349: Revert “make TLS registry tests required” #30358
OCPNODE-3238: Add SigstoreImageVerificationPKI image policy validation tests #30315
TRT-2346: Fix not initializing adminRESTConfig #30345
OCPBUGS-60853: make TLS registry tests required #29074
TRT-1854: remove upstream annotation framework #30340
NO-JIRA: Filter preconfiguredIPs based on cluster IP family support #30338
NO-JIRA: Improve case execution time #30329
CORENET-6363: Add PreconfiguredUDNAddresses duplicate IP detection tests #30197
OCPBUGS-62701: Revert TRT-1854: remove upstream annotation framework #30337
Revert “Revert “NO-JIRA: Add olm into the known operator set”” #30325
NO-JIRA: BugFix- don’t modify finalArgs in Template func #30328
OCPNODE-3659: Not fail upgrade checks if all nodes are ready #30318
OCPBUGS-62249: Tweak Endpoints admission test for upcoming change #30304
MCO-1828: Remove pathological test in disruptive #30272
OCPBUGS-61196: Add test that the ServiceCIDR API is blocked #30234
NO-JIRA: oc adm upgrade status: Skip test in multihop update jobs #30150
MCO-1865: Update MCO tests to be in only one test suite each #30309
OCPBUGS-62474: CNTRLPLANE-1308: Enable OTE for OCM and OCM Operator #30270
TRT-1854: remove upstream annotation framework #30305
Revert “NO-JIRA: Add olm into the known operator set” #30313
NO-JIRA: Add olm into the known operator set #30308
MCO-1875: Bump timeout for vSphereBootimageUpdate tests #30288
NO-ISSUE: Automated - Update synthetic test data #30277
OCPBUGS-62227: bump telemetry series limit to 1000 #30302
OCPERT-151: Migrate new func for Compare structured data instead of string from openshift-test-private repo #30291
OCPBUGS-61398: fix(ginkgo): avoid nil deref and harden env var setup #30289
OCPQE-30698: enable OTE for olmv0 #30285
OTA-1626: Fail CI if alert/ClusterOperatorDegraded is fired #30282
TRT-2071: Remove annotations and replace with environment selector based test skipping and disablement #30064
trt-2246: lower parallelism based on worker nodes #30226
OCPSTRAT-2045: Automating OCPSTRAT-2045 feature in upstream #30067
OCPBUGS-61980: Temporarily remove commatrix documentation test for rework #30280
OCPBUGS-61905: oidc: improve rollout wait times #30274
OCPSTRAT-2371: image: add busybox to list of allowed images #30281
CORENET-6418: drop openshift-sdn tests #29085
OCPEDGE-1483: Add TNF E2E tests for network failure #30110
OCPBUGS-61196: Skip ServiceCIDR in etcd_storage_path test #30254
OCPBUGS-61855: Temporarily disable InstallPlanStepAppliedWithWarnings for k8s 1.34 rebase #30275
OCPBUGS-61398: fix(test): prevent nil pointer dereference in ginkgo test runner #30224
OCPBUGS-61855: CRD Apply Alert Allowance #30265
NE-2090: adding one GIE automation test #30189
OTA-1601: upgrade status: recover checking the updating COs #30154
NO-JIRA: Allow systemd-coredump test to fail #30261
OCPSTRAT-2371: Update etcd test data for k8s 1.34 release #30242
OCPBUGS-61733: Restore retries for port-forward test #30255
OCPEDGE-2090: Add validation tests for tnf topology effects #30252
TRT-2275: introduce cluster e2e-analysis sub command for openshift-tests #30211
MON-4290: add test for must-gather gather_metrics #30054
OCPBUGS-61193: chore(extended/prometheus): ²⁄₂: make ‘targets auth’ test more lenient and more resilient #30256
OCPBUGS-57325: update machines scale test #30028
Trt-2246: network test isolation #30192
NO-ISSUE: Automated - Update synthetic test data #30244
NO-JIRA: Remove runbook exceptions for fixed bugs #30246
trt-2230: Add monitor test annotation #30196
NO-JIRA: Increase request-timeout to deflake test #30248
NO-JIRA: Deflake oc observe test by using explicit port number #30247
OTA-1559: test/extended/cli/adm_upgrade/recommend: TestRiskA PromQL use max_over_time #30160
NO-JIRA: Add intervals and a test for systemd-coredumps #30222
CNTRLPLANE-945: oidc: add retry logic for Keycloak route creation #30233
CNF-18661: Update vendor to include communication matrix bug fix #30232
CNTRLPLANE-945: images: add keycloak images and use them in ExternalOIDC tests #30221
NO-JIRA: Migrate new func for non-Job pods readiness helper for OCL from openshift-test-private repo #30193
NO-ISSUE: test/extended/util/framework: Poll in IsMicroShiftCluster #30161
OCPBUGS-61538: Skip config-operator checking when featureSet is DevPreviewNoUpgrade #30236
OCPBUGS-61193: chore(extended/prometheus): make ‘targets auth’ test more lenient and more resilient. #30219
NO-ISSUE: Automated - Update synthetic test data #30020
OCPBUGS-61287: Add flaky kubectl logs test to the retry list to clean signal for release #30215
OCPBUGS-60507: Bump to latest openshift/kubernetes (v1.33.4) #30227
CNF-18661: update the commatrix vendor version to contain new changes #30220
Trt-2257: track run options #30195
OCPBUGS-61063: test/extended/cli/adm_upgrade/recommend: Enable precheck and accept #30113
NO-JIRA: Fix Node NotReady intervals being left open when a node is deleted #30188
OCPBUGS-61194: Mark etcd net overload logging test as a flake #30210
CORENET-5329: revert primary udn test workaround from virt tests #29386
CNTRLPLANE-945: improve logging, add startup probe to Keycloak Deployment #30184
CNTRLPLANE-1306: Enable OTE for cluster-kube-storage-version-migrator-operator #30199
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

Updating ose-thanos-container image to be consistent with ART for 4.21 #164
Full changelog

volume-data-source-validator

OCPBUGS-62367: Updating volume-data-source-validator-container image to be consistent with ART for 4.21 #5
Full changelog

vsphere-cloud-controller-manager

NO-JIRA: Update OWNERS #99
Full changelog

vsphere-cluster-api-controllers

OCPBUGS-62332: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.21 #75
OCPBUGS-57668: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.20 #59
NO-JIRA: Update OWNERS #65
OCPBUGS-61498: UPSTREAM: 3636: VSphereClusterIdentity: ensure namespace in tests exists when not using the default #67
OCPBUGS-61498: Fix openshift/unit-tests.sh #66
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.21 #150
NO-JIRA: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.21 #148
Full changelog

vsphere-csi-driver-operator

Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.21 #311
Full changelog

vsphere-problem-detector

OCPBUGS-62595: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.21 #191
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Package List

cri-o-1.34.1-4.rhaos4.21.git5780ac7.el9
kernel-5.14.0-570.55.1.el9_6
openshift-kubelet-4.21.0-202510080354.p2.g00e7ec7.assembly.stream.el9
systemd-252-51.el9_6.2

Full list (564 packages)

NetworkManager-1:1.52.0-7.el9_6
NetworkManager-cloud-setup-1:1.52.0-7.el9_6
NetworkManager-libnm-1:1.52.0-7.el9_6
NetworkManager-ovs-1:1.52.0-7.el9_6
NetworkManager-team-1:1.52.0-7.el9_6
NetworkManager-tui-1:1.52.0-7.el9_6
WALinuxAgent-udev-2.7.0.6-11.el9_6.1
aardvark-dns-2:1.14.0-1.el9
acl-2.3.1-4.el9
adcli-0.9.2-1.el9
afterburn-5.7.0-1.el9
afterburn-dracut-5.7.0-1.el9
alternatives-1.24-2.el9
attr-2.5.1-3.el9
audit-3.1.5-4.el9
audit-libs-3.1.5-4.el9
authselect-1.2.6-3.el9
authselect-libs-1.2.6-3.el9
avahi-libs-0.8-22.el9_6.1
basesystem-11-13.el9
bash-5.1.8-9.el9
bash-completion-1:2.11-5.el9
bind-libs-32:9.16.23-31.el9_6
bind-license-32:9.16.23-31.el9_6
bind-utils-32:9.16.23-31.el9_6
binutils-2.35.2-63.el9
binutils-gold-2.35.2-63.el9
bootc-1.1.6-3.el9_6
bootupd-0.2.27-4.el9_6
bsdtar-3.5.3-6.el9_6
bubblewrap-0.4.1-8.el9_5
bzip2-1.0.8-10.el9_5
bzip2-libs-1.0.8-10.el9_5
c-ares-1.19.1-2.el9_4
ca-certificates-2024.2.69_v8.0.303-91.4.el9_4
checkpolicy-3.6-1.el9
chrony-4.6.1-1.el9
cifs-utils-7.1-2.el9
clevis-21-208.el9
clevis-dracut-21-208.el9
clevis-luks-21-208.el9
clevis-systemd-21-208.el9
cloud-utils-growpart-0.33-1.el9
composefs-1.0.8-1.el9
composefs-libs-1.0.8-1.el9
conmon-3:2.1.12-1.el9
conmon-rs-0.6.6-0.rhaos4.18.el9.1
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-4:2.237.0-2.el9_6
containernetworking-plugins-1:1.6.2-2.el9_6
containers-common-2:1-117.el9_6
coreos-installer-0.24.0-3.el9_6
coreos-installer-bootinfra-0.24.0-3.el9_6
coreutils-8.32-39.el9
coreutils-common-8.32-39.el9
cpio-2.13-16.el9
cracklib-2.9.6-27.el9
cracklib-dicts-2.9.6-27.el9
cri-o-1.34.1-4.rhaos4.21.git5780ac7.el9
cri-tools-1.34.0-2.el9
criu-3.19-1.el9
criu-libs-3.19-1.el9
crun-1.23.1-2.el9_6
crypto-policies-20250128-1.git5269e22.el9
crypto-policies-scripts-20250128-1.git5269e22.el9
cryptsetup-2.7.2-3.el9_6.1
cryptsetup-libs-2.7.2-3.el9_6.1
curl-7.76.1-31.el9_6.1
cyrus-sasl-gssapi-2.1.27-21.el9
cyrus-sasl-lib-2.1.27-21.el9
dbus-1:1.12.20-8.el9
dbus-broker-28-7.el9
dbus-common-1:1.12.20-8.el9
dbus-libs-1:1.12.20-8.el9
dbus-tools-1:1.12.20-8.el9
device-mapper-9:1.02.202-6.el9
device-mapper-event-9:1.02.202-6.el9
device-mapper-event-libs-9:1.02.202-6.el9
device-mapper-libs-9:1.02.202-6.el9
device-mapper-multipath-0.8.7-35.el9_6.1
device-mapper-multipath-libs-0.8.7-35.el9_6.1
device-mapper-persistent-data-1.1.0-1.el9
diffutils-3.7-12.el9
dmidecode-1:3.6-1.el9
dnf-4.14.0-25.el9
dnf-data-4.14.0-25.el9
dnsmasq-2.85-17.el9_6
dosfstools-4.2-3.el9
dracut-057-88.git20250311.el9_6
dracut-network-057-88.git20250311.el9_6
dracut-squash-057-88.git20250311.el9_6
e2fsprogs-1.46.5-7.el9
e2fsprogs-libs-1.46.5-7.el9
efi-filesystem-6-2.el9_0
efibootmgr-16-12.el9
efivar-libs-38-3.el9
elfutils-debuginfod-client-0.192-6.el9_6
elfutils-default-yama-scope-0.192-6.el9_6
elfutils-libelf-0.192-6.el9_6
elfutils-libs-0.192-6.el9_6
ethtool-2:6.11-1.el9
expat-2.5.0-5.el9_6
file-5.39-16.el9
file-libs-5.39-16.el9
filesystem-3.16-5.el9
findutils-1:4.8.0-7.el9
firewalld-filesystem-1.3.4-9.el9_5
flashrom-1.2-10.el9
fstrm-0.6.1-3.el9
fuse-2.9.9-17.el9
fuse-common-3.10.2-9.el9
fuse-libs-2.9.9-17.el9
fuse-overlayfs-1.14-1.el9
fuse3-3.10.2-9.el9
fuse3-libs-3.10.2-9.el9
fwupd-1.9.26-1.el9
fwupd-plugin-flashrom-1.9.26-1.el9
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.23-1.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
gettext-0.21-8.el9
gettext-libs-0.21-8.el9
git-core-2.47.3-1.el9_6
glib2-2.68.4-16.el9_6.2
glibc-2.34-168.el9_6.23
glibc-common-2.34-168.el9_6.23
glibc-gconv-extra-2.34-168.el9_6.23
glibc-minimal-langpack-2.34-168.el9_6.23
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-13.el9
gnupg2-2.3.3-4.el9
gnutls-3.8.3-6.el9_6.2
gobject-introspection-1.68.0-11.el9
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-104.el9_6
grub2-efi-x64-1:2.06-104.el9_6
grub2-pc-1:2.06-104.el9_6
grub2-pc-modules-1:2.06-104.el9_6
grub2-tools-1:2.06-104.el9_6
grub2-tools-minimal-1:2.06-104.el9_6
gssproxy-0.8.4-7.el9
gzip-1.12-1.el9
hostname-3.23-6.el9
hwdata-0.348-9.18.el9
ignition-2.21.0-4.rhaos4.19.el9
ignition-grub-2.21.0-4.rhaos4.19.el9
ima-evm-utils-1.5-3.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.8-4.el9
ipcalc-1.0.0-5.el9
iproute-6.11.0-1.el9
iproute-tc-6.11.0-1.el9
iptables-libs-1.8.10-11.el9_5
iptables-nft-1.8.10-11.el9_5
iputils-20210202-11.el9_6.3
irqbalance-2:1.9.4-2.el9_6.2
iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
isns-utils-libs-0.101-4.el9
jansson-2.14-1.el9
jose-14-1.el9
jq-1.6-17.el9_6.2
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-11.el9
kbd-legacy-2.4.0-11.el9
kbd-misc-2.4.0-11.el9
kernel-5.14.0-570.55.1.el9_6
kernel-core-5.14.0-570.55.1.el9_6
kernel-modules-5.14.0-570.55.1.el9_6
kernel-modules-core-5.14.0-570.55.1.el9_6
kernel-modules-extra-5.14.0-570.55.1.el9_6
kexec-tools-2.0.29-5.el9_6.2
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-10.el9
kmod-libs-28-10.el9
kpartx-0.8.7-35.el9_6.1
krb5-libs-1.21.1-8.el9_6
less-590-5.el9
libacl-2.3.1-4.el9
libaio-0.3.111-13.el9
libarchive-3.5.3-6.el9_6
libassuan-2.5.5-3.el9
libattr-2.5.1-3.el9
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-21.el9
libbpf-2:1.5.0-1.el9
libbrotli-1.0.9-7.el9_5
libcap-2.48-9.el9_2
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-7.el9
libcomps-0.1.18-1.el9
libcurl-7.76.1-31.el9_6.1
libdaemon-0.14-23.el9
libdb-5.3.28-57.el9_6
libdhash-0.5.0-53.el9
libdnf-0.69.0-13.el9
libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6
libdrm-2.4.123-2.el9
libeconf-0.4.1-4.el9
libedit-3.1-38.20210216cvs.el9
libev-4.33-6.el9
libevent-2.1.12-8.el9_4
libfdisk-2.37.4-21.el9
libffi-3.4.2-8.el9
libfido2-1.13.0-2.el9
libgcc-11.5.0-5.el9_5
libgcrypt-1.10.0-11.el9
libgomp-11.5.0-5.el9_5
libgpg-error-1.42-5.el9
libgudev-237-1.el9
libgusb-0.3.8-2.el9
libibverbs-54.0-1.el9
libicu-67.1-10.el9_6
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.9.6-4.el9_6.2
libjcat-0.1.6-3.el9
libjose-14-1.el9
libkcapi-1.4.0-2.el9
libkcapi-hmaccalc-1.4.0-2.el9
libksba-1.5.1-7.el9
libldb-4.21.3-14.el9_6
libluksmeta-9-12.el9
libmaxminddb-1.5.2-4.el9
libmicrohttpd-1:0.9.72-5.el9
libmnl-1.0.4-16.el9_4
libmodulemd-2.13.0-2.el9
libmount-2.37.4-21.el9
libmspack-0.10.1-0.7.alpha.el9
libndp-1.9-1.el9
libnet-1.2-7.el9
libnetfilter_conntrack-1.0.9-1.el9
libnfnetlink-1.0.1-23.el9_5
libnfsidmap-1:2.5.4-34.el9
libnftnl-1.2.6-4.el9_4
libnghttp2-1.43.0-6.el9
libnl3-3.11.0-1.el9
libnl3-cli-3.11.0-1.el9
libnvme-1.11.1-1.el9
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpciaccess-0.16-7.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.14.5-2.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-9.el9
libseccomp-2.5.2-2.el9
libselinux-3.6-3.el9
libselinux-utils-3.6-3.el9
libsemanage-3.6-5.el9_6
libsepol-3.6-2.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-8.el9
libsmartcols-2.37.4-21.el9
libsmbclient-4.21.3-14.el9_6
libsolv-0.7.24-3.el9
libss-1.46.5-7.el9
libssh-0.10.4-13.el9
libssh-config-0.10.4-13.el9
libsss_certmap-2.9.6-4.el9_6.2
libsss_idmap-2.9.6-4.el9_6.2
libsss_nss_idmap-2.9.6-4.el9_6.2
libsss_sudo-2.9.6-4.el9_6.2
libstdc++-11.5.0-5.el9_5
libtalloc-2.4.2-1.el9
libtasn1-4.16.0-9.el9
libtdb-1.4.12-1.el9
libteam-1.31-16.el9_1
libtevent-0.16.1-1.el9
libtirpc-1.3.3-9.el9
libtool-ltdl-2.4.6-46.el9
libunistring-0.9.10-15.el9
liburing-2.5-1.el9
libusbx-1.0.26-1.el9
libuser-0.63-16.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-21.el9
libuv-1:1.42.0-2.el9_4
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.21.3-14.el9_6
libxcrypt-4.4.18-3.el9
libxcrypt-compat-4.4.18-3.el9
libxml2-2.9.13-12.el9_6
libxmlb-0.3.10-1.el9
libxslt-1.1.34-13.el9_6
libyaml-0.2.5-7.el9
libzstd-1.5.5-1.el9
linux-firmware-20250812-151.4.el9_6
linux-firmware-whence-20250812-151.4.el9_6
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-9.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-4.el9
luksmeta-9-12.el9
lvm2-9:2.03.28-6.el9
lvm2-libs-9:2.03.28-6.el9
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.3-4.el9_5
microcode_ctl-4:20250211-1.20250512.1.el9_6
mokutil-2:0.6.0-4.el9
mpfr-4.1.0-7.el9
nano-5.6.1-7.el9
ncurses-6.2-10.20210508.el9_6.2
ncurses-base-6.2-10.20210508.el9_6.2
ncurses-libs-6.2-10.20210508.el9_6.2
net-tools-2.0-0.64.20160912git.el9
netavark-2:1.14.1-1.el9_6
nettle-3.10.1-1.el9
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-34.el9
nftables-1:1.0.9-3.el9
nmap-ncat-3:7.92-3.el9
nmstate-2.2.52-1.el9_6
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-libs-2.0.19-1.el9
nvme-cli-2.11-6.el9_6
oniguruma-6.9.6-1.el9.6
open-vm-tools-12.5.0-1.el9_6.2
openldap-2.6.8-4.el9
openshift-clients-4.21.0-202510110303.p2.g672ff62.assembly.stream.el9
openshift-kubelet-4.21.0-202510080354.p2.g00e7ec7.assembly.stream.el9
openssh-8.7p1-45.el9
openssh-clients-8.7p1-45.el9
openssh-server-8.7p1-45.el9
openssl-1:3.2.2-6.el9_5.1
openssl-fips-provider-3.0.7-6.el9_5
openssl-fips-provider-so-3.0.7-6.el9_5
openssl-libs-1:3.2.2-6.el9_5.1
openvswitch-selinux-extra-policy-1.0-39.el9fdp
openvswitch3.5-3.5.1-33.el9fdp
os-prober-1.77-12.el9_5
ose-aws-ecr-image-credential-provider-4.19.0-202508252101.p2.g425c1c5.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.21.0-202510011456.p2.g7659e06.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.21.0-202510151957.p2.g0a0890a.assembly.stream.el9
ostree-2025.2-2.el9_6
ostree-grub2-2025.2-2.el9_6
ostree-libs-2025.2-2.el9_6
p11-kit-0.25.3-3.el9_5
p11-kit-trust-0.25.3-3.el9_5
pam-1.5.1-26.el9_6
passt-0^20250217.ga1e48a0-10.el9_6
passt-selinux-0^20250217.ga1e48a0-10.el9_6
passwd-0.80-12.el9
pciutils-3.7.0-7.el9
pciutils-libs-3.7.0-7.el9
pcre-8.44-4.el9
pcre2-10.40-6.el9
pcre2-syntax-10.40-6.el9
perl-AutoLoader-5.74-481.1.el9_6
perl-B-1.80-481.1.el9_6
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-481.1.el9_6
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-481.1.el9_6
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-481.1.el9_6
perl-File-Basename-2.85-481.1.el9_6
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-481.1.el9_6
perl-FileHandle-2.03-481.1.el9_6
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-481.1.el9_6
perl-HTTP-Tiny-0.076-462.el9
perl-IO-1.43-481.1.el9_6
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-2.el9
perl-IPC-Open3-1.21-481.1.el9_6
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-481.1.el9_6
perl-Net-SSLeay-1.94-1.el9
perl-POSIX-1.94-481.1.el9_6
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-462.el9
perl-SelectSaver-1.02-481.1.el9_6
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-481.1.el9_6
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-481.1.el9_6
perl-constant-1.33-461.el9
perl-if-0.60.800-481.1.el9_6
perl-interpreter-4:5.32.1-481.1.el9_6
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-481.1.el9_6
perl-mro-1.23-481.1.el9_6
perl-overload-1.31-481.1.el9_6
perl-overloading-0.02-481.1.el9_6
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-481.1.el9_6
perl-vars-1.05-481.1.el9_6
pigz-2.8-1.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-5:5.4.0-13.el9_6
policycoreutils-3.6-2.1.el9
policycoreutils-python-utils-3.6-2.1.el9
polkit-0.117-13.el9
polkit-libs-0.117-13.el9
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-14.el9
protobuf-c-1.3.3-13.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.21-2.el9_6.2
python3-3.9.21-2.el9_6.2
python3-audit-3.1.5-4.el9
python3-chardet-4.0.0-5.el9
python3-cloud-what-1.29.45.1-1.el9_6
python3-dateutil-1:2.8.1-7.el9
python3-dbus-1.2.18-2.el9
python3-decorator-4.4.2-6.el9
python3-distro-1.5.0-7.el9
python3-dnf-4.14.0-25.el9
python3-dnf-plugin-versionlock-4.3.0-20.el9
python3-dnf-plugins-core-4.3.0-20.el9
python3-gobject-base-3.40.1-6.el9
python3-gobject-base-noarch-3.40.1-6.el9
python3-gpg-1.15.1-6.el9
python3-hawkey-0.69.0-13.el9
python3-idna-2.10-7.el9_4.1
python3-iniparse-0.4-45.el9
python3-inotify-0.9.6-25.el9
python3-libcomps-0.1.18-1.el9
python3-libdnf-0.69.0-13.el9
python3-librepo-1.14.5-2.el9
python3-libs-3.9.21-2.el9_6.2
python3-libselinux-3.6-3.el9
python3-libsemanage-3.6-5.el9_6
python3-pip-wheel-21.3.1-1.el9
python3-policycoreutils-3.6-2.1.el9
python3-pysocks-1.7.1-12.el9
python3-pyyaml-5.4.1-6.el9
python3-requests-2.25.1-10.el9_6
python3-rpm-4.16.1.3-37.el9
python3-setools-4.4.4-1.el9
python3-setuptools-53.0.0-13.el9_6.1
python3-setuptools-wheel-53.0.0-13.el9_6.1
python3-six-1.15.0-9.el9
python3-subscription-manager-rhsm-1.29.45.1-1.el9_6
python3-systemd-234-19.el9
python3-urllib3-1.26.5-6.el9
qemu-guest-agent-17:9.1.0-15.el9_6.9
quota-1:4.09-4.el9
quota-nls-1:4.09-4.el9
rdma-core-54.0-1.el9
readline-8.1-4.el9
redhat-release-9.6-0.1.el9
redhat-release-eula-9.6-0.1.el9
rpcbind-1.2.6-7.el9
rpm-4.16.1.3-37.el9
rpm-build-libs-4.16.1.3-37.el9
rpm-libs-4.16.1.3-37.el9
rpm-ostree-2025.6-5.el9_6
rpm-ostree-libs-2025.6-5.el9_6
rpm-plugin-selinux-4.16.1.3-37.el9
rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
rpm-sign-libs-4.16.1.3-37.el9
rsync-3.2.5-3.el9
runc-4:1.2.4-2.el9
samba-client-libs-4.21.3-14.el9_6
samba-common-4.21.3-14.el9_6
samba-common-libs-4.21.3-14.el9_6
sed-4.8-9.el9
selinux-policy-38.1.53-5.el9_6
selinux-policy-targeted-38.1.53-5.el9_6
setup-2.13.7-10.el9
sg3_utils-1.47-10.el9
sg3_utils-libs-1.47-10.el9
shadow-utils-2:4.9-12.el9
shadow-utils-subid-2:4.9-12.el9
shared-mime-info-2.1-5.el9
shim-x64-15.8-4.el9_3
skopeo-2:1.18.1-2.el9_6
slang-2.3.2-11.el9
slirp4netns-1.3.2-1.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-6.el9_6.1
sqlite-libs-3.34.1-8.el9_6
squashfs-tools-4.4-10.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.9.6-4.el9_6.2
sssd-ad-2.9.6-4.el9_6.2
sssd-client-2.9.6-4.el9_6.2
sssd-common-2.9.6-4.el9_6.2
sssd-common-pac-2.9.6-4.el9_6.2
sssd-ipa-2.9.6-4.el9_6.2
sssd-krb5-2.9.6-4.el9_6.2
sssd-krb5-common-2.9.6-4.el9_6.2
sssd-ldap-2.9.6-4.el9_6.2
sssd-nfs-idmap-2.9.6-4.el9_6.2
sssd-proxy-2.9.6-4.el9_6.2
stalld-1.20.4-1.el9_6
strace-6.12-1.el9
subscription-manager-1.29.45.1-1.el9_6
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.5p2-10.el9_6.2
systemd-252-51.el9_6.2
systemd-journal-remote-252-51.el9_6.2
systemd-libs-252-51.el9_6.2
systemd-pam-252-51.el9_6.2
systemd-rpm-macros-252-51.el9_6.2
systemd-udev-252-51.el9_6.2
tar-2:1.34-7.el9
teamd-1.31-16.el9_1
tmux-3.2a-5.el9
toolbox-0.1.2-1.rhaos4.19.el9
tpm2-tools-5.2-4.el9
tpm2-tss-3.2.3-1.el9
tzdata-2025b-1.el9
unbound-libs-1.16.2-19.el9_6.1
usermode-1.114-6.el9
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-21.el9
util-linux-core-2.37.4-21.el9
vim-minimal-2:8.2.2637-22.el9_6.1
virt-what-1.27-1.el9
which-2.21-30.el9_6
xfsprogs-6.4.0-5.el9
xmlsec1-1.2.29-13.el9
xmlsec1-openssl-1.2.29-13.el9
xz-5.2.5-8.el9_0
xz-libs-5.2.5-8.el9_0
yajl-2.1.0-25.el9
zlib-1.2.11-40.el9
zram-generator-0.3.2-7.el9
zstd-1.5.5-1.el9

Changed:

cri-o 1.33.5-3.rhaos4.20.gitd0ea985.el9 → 1.34.1-4.rhaos4.21.git5780ac7.el9
cri-tools 1.33.0-1.el9 → 1.34.0-2.el9
kernel 5.14.0-570.54.1.el9_6 → 5.14.0-570.55.1.el9_6
kernel-core 5.14.0-570.54.1.el9_6 → 5.14.0-570.55.1.el9_6
kernel-modules 5.14.0-570.54.1.el9_6 → 5.14.0-570.55.1.el9_6
kernel-modules-core 5.14.0-570.54.1.el9_6 → 5.14.0-570.55.1.el9_6
kernel-modules-extra 5.14.0-570.54.1.el9_6 → 5.14.0-570.55.1.el9_6
nmstate 2.2.48-2.el9_6 → 2.2.52-1.el9_6
openshift-clients 4.20.0-202509051528.p2.ga434281.assembly.stream.el9 → 4.21.0-202510110303.p2.g672ff62.assembly.stream.el9
openshift-kubelet 4.20.0-202509232257.p2.ge0d4216.assembly.stream.el9 → 4.21.0-202510080354.p2.g00e7ec7.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.20.0-202509051528.p2.gd469d04.assembly.stream.el9 → 4.21.0-202510011456.p2.g7659e06.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.20.0-202509051528.p2.gf940e72.assembly.stream.el9 → 4.21.0-202510151957.p2.g0a0890a.assembly.stream.el9

Extensions

Full list (162 packages)

NetworkManager-libreswan-1.2.24-1.el9.x86_64
bison-3.7.4-5.el9.x86_64
capstone-4.0.2-10.el9.x86_64
corosync-3.1.9-2.el9_6.x86_64
corosynclib-3.1.9-2.el9_6.x86_64
cpp-11.5.0-5.el9_5.x86_64
crun-wasm-1.8.5-5.rhaos4.14.el9.x86_64
daxctl-libs-78-2.el9.x86_64
edk2-ovmf-20241117-2.el9.noarch
elfutils-libelf-devel-0.192-6.el9_6.x86_64
fence-agents-all-4.10.0-86.el9_6.9.x86_64
fence-agents-amt-ws-4.10.0-86.el9_6.9.noarch
fence-agents-apc-4.10.0-86.el9_6.9.noarch
fence-agents-apc-snmp-4.10.0-86.el9_6.9.noarch
fence-agents-bladecenter-4.10.0-86.el9_6.9.noarch
fence-agents-brocade-4.10.0-86.el9_6.9.noarch
fence-agents-cisco-mds-4.10.0-86.el9_6.9.noarch
fence-agents-cisco-ucs-4.10.0-86.el9_6.9.noarch
fence-agents-common-4.10.0-86.el9_6.9.noarch
fence-agents-drac5-4.10.0-86.el9_6.9.noarch
fence-agents-eaton-snmp-4.10.0-86.el9_6.9.noarch
fence-agents-emerson-4.10.0-86.el9_6.9.noarch
fence-agents-eps-4.10.0-86.el9_6.9.noarch
fence-agents-heuristics-ping-4.10.0-86.el9_6.9.noarch
fence-agents-hpblade-4.10.0-86.el9_6.9.noarch
fence-agents-ibmblade-4.10.0-86.el9_6.9.noarch
fence-agents-ifmib-4.10.0-86.el9_6.9.noarch
fence-agents-ilo-moonshot-4.10.0-86.el9_6.9.noarch
fence-agents-ilo-mp-4.10.0-86.el9_6.9.noarch
fence-agents-ilo-ssh-4.10.0-86.el9_6.9.noarch
fence-agents-ilo2-4.10.0-86.el9_6.9.noarch
fence-agents-intelmodular-4.10.0-86.el9_6.9.noarch
fence-agents-ipdu-4.10.0-86.el9_6.9.noarch
fence-agents-ipmilan-4.10.0-86.el9_6.9.noarch
fence-agents-kdump-4.10.0-86.el9_6.9.x86_64
fence-agents-mpath-4.10.0-86.el9_6.9.noarch
fence-agents-redfish-4.10.0-86.el9_6.9.x86_64
fence-agents-rhevm-4.10.0-86.el9_6.9.noarch
fence-agents-rsa-4.10.0-86.el9_6.9.noarch
fence-agents-rsb-4.10.0-86.el9_6.9.noarch
fence-agents-sbd-4.10.0-86.el9_6.9.noarch
fence-agents-scsi-4.10.0-86.el9_6.9.noarch
fence-agents-vmware-rest-4.10.0-86.el9_6.9.noarch
fence-agents-vmware-soap-4.10.0-86.el9_6.9.noarch
fence-agents-wti-4.10.0-86.el9_6.9.noarch
fence-virt-4.10.0-86.el9_6.9.x86_64
flex-2.6.4-9.el9.x86_64
fmt-9.1.0-1.el9.x86_64
gcc-11.5.0-5.el9_5.x86_64
glibc-devel-2.34-168.el9_6.23.x86_64
glibc-headers-2.34-168.el9_6.23.x86_64
gnutls-dane-3.8.3-6.el9_6.2.x86_64
gnutls-utils-3.8.3-6.el9_6.2.x86_64
ipmitool-1.8.18-27.el9.x86_64
ipxe-roms-qemu-20200823-9.git4bd064de.el9_0.noarch
kata-containers-3.17.0-4.rhaos4.19.el9.x86_64
kernel-5.14.0-570.55.1.el9_6.x86_64
kernel-core-5.14.0-570.55.1.el9_6.x86_64
kernel-devel-5.14.0-570.55.1.el9_6.x86_64
kernel-headers-5.14.0-570.55.1.el9_6.x86_64
kernel-modules-5.14.0-570.55.1.el9_6.x86_64
kernel-modules-extra-5.14.0-570.55.1.el9_6.x86_64
kernel-rt-core-5.14.0-570.55.1.el9_6.x86_64
kernel-rt-devel-5.14.0-570.55.1.el9_6.x86_64
kernel-rt-kvm-5.14.0-570.55.1.el9_6.x86_64
kernel-rt-modules-5.14.0-570.55.1.el9_6.x86_64
kernel-rt-modules-core-5.14.0-570.55.1.el9_6.x86_64
kernel-rt-modules-extra-5.14.0-570.55.1.el9_6.x86_64
krb5-pkinit-1.21.1-8.el9_6.x86_64
krb5-workstation-1.21.1-8.el9_6.x86_64
ldns-1.7.1-12.el9.x86_64
libfdt-1.6.0-7.el9.x86_64
libkadm5-1.21.1-8.el9_6.x86_64
libknet1-1.28-1.el9.x86_64
libknet1-compress-bzip2-plugin-1.28-1.el9.x86_64
libknet1-compress-lz4-plugin-1.28-1.el9.x86_64
libknet1-compress-lzma-plugin-1.28-1.el9.x86_64
libknet1-compress-lzo2-plugin-1.28-1.el9.x86_64
libknet1-compress-plugins-all-1.28-1.el9.x86_64
libknet1-compress-zlib-plugin-1.28-1.el9.x86_64
libknet1-compress-zstd-plugin-1.28-1.el9.x86_64
libknet1-crypto-nss-plugin-1.28-1.el9.x86_64
libknet1-crypto-openssl-plugin-1.28-1.el9.x86_64
libknet1-crypto-plugins-all-1.28-1.el9.x86_64
libknet1-plugins-all-1.28-1.el9.x86_64
libmpc-1.2.1-4.el9.x86_64
libnozzle1-1.28-1.el9.x86_64
libpmem-1.12.1-1.el9.x86_64
libpng-2:1.6.37-12.el9.x86_64
libqb-2.0.8-1.el9.x86_64
librdmacm-54.0-1.el9.x86_64
libreswan-5.2-1.el9fdp.x86_64
libwsman1-2.6.8-23.el9.x86_64
libxcrypt-devel-4.4.18-3.el9.x86_64
libzstd-devel-1.5.5-1.el9.x86_64
lld-17.0.6-1.el9.x86_64
lld-libs-17.0.6-1.el9.x86_64
llvm-17.0.6-5.el9.x86_64
llvm-libs-17.0.6-5.el9.x86_64
lm_sensors-libs-3.6.0-10.el9.x86_64
m4-1.4.19-1.el9.x86_64
make-1:4.3-8.el9.x86_64
ndctl-libs-78-2.el9.x86_64
net-snmp-libs-1:5.9.1-17.el9.x86_64
net-snmp-utils-1:5.9.1-17.el9.x86_64
nspr-4.36.0-4.el9_4.x86_64
nss-3.112.0-4.el9_4.x86_64
nss-softokn-3.112.0-4.el9_4.x86_64
nss-softokn-freebl-3.112.0-4.el9_4.x86_64
nss-sysinit-3.112.0-4.el9_4.x86_64
nss-tools-3.112.0-4.el9_4.x86_64
nss-util-3.112.0-4.el9_4.x86_64
openssl-devel-1:3.2.2-6.el9_5.1.x86_64
openvswitch3.5-ipsec-3.5.1-33.el9fdp.x86_64
openwsman-python3-2.6.8-23.el9.x86_64
pacemaker-2.1.9-1.2.el9_6.x86_64
pacemaker-cli-2.1.9-1.2.el9_6.x86_64
pacemaker-cluster-libs-2.1.9-1.2.el9_6.x86_64
pacemaker-libs-2.1.9-1.2.el9_6.x86_64
pacemaker-schemas-2.1.9-1.2.el9_6.noarch
pcp-conf-6.3.7-1.el9_6.x86_64
pcp-libs-6.3.7-1.el9_6.x86_64
pcs-0.11.9-2.el9_6.1.x86_64
perl-TimeDate-1:2.33-6.el9.noarch
pixman-0.40.0-6.el9_3.x86_64
protobuf-3.14.0-16.el9.x86_64
python3-cffi-1.14.5-5.el9.x86_64
python3-cryptography-36.0.1-5.el9_6.x86_64
python3-lxml-4.6.5-3.el9.x86_64
python3-openvswitch3.5-3.5.1-33.el9fdp.x86_64
python3-ply-3.11-14.el9.noarch
python3-pycparser-2.20-6.el9.noarch
python3-pycurl-7.43.0.6-8.el9.x86_64
python3-pyparsing-2.4.7-9.el9.noarch
python3-tornado-6.4.2-2.el9_6.2.x86_64
qemu-img-17:9.1.0-15.el9_6.9.x86_64
qemu-kvm-common-17:9.1.0-15.el9_6.9.x86_64
qemu-kvm-core-17:9.1.0-15.el9_6.9.x86_64
redhat-logos-90.5-1.el9_6.1.x86_64
resource-agents-4.10.0-71.el9_6.6.x86_64
ruby-3.0.7-165.el9_5.x86_64
ruby-default-gems-3.0.7-165.el9_5.noarch
ruby-libs-3.0.7-165.el9_5.x86_64
rubygem-bigdecimal-3.0.0-165.el9_5.x86_64
rubygem-bundler-2.2.33-165.el9_5.noarch
rubygem-io-console-0.5.7-165.el9_5.x86_64
rubygem-json-2.5.1-165.el9_5.x86_64
rubygem-psych-3.3.2-165.el9_5.x86_64
rubygem-rdoc-6.3.4.1-165.el9_5.noarch
rubygem-rexml-3.2.5-165.el9_5.noarch
rubygems-3.2.33-165.el9_5.noarch
sbd-1.5.2-1.el9.x86_64
seabios-bin-1.16.3-4.el9.noarch
seavgabios-bin-1.16.3-4.el9.noarch
spdlog-1.13.0-1.rhaos4.14.el9.x86_64
sysstat-12.5.4-9.el9.x86_64
telnet-1:0.17-85.el9.x86_64
usbguard-1.0.0-16.el9.x86_64
usbguard-selinux-1.0.0-16.el9.noarch
virtiofsd-1.13.2-1.el9_6.x86_64
wasmedge-0.14.0-2.rhaos4.19.el9.x86_64
zlib-devel-1.2.11-40.el9.x86_64

Red Hat Enterprise Linux CoreOS base layer: 9.6.20251015-1

View changelog in Markdown or change previous release:

Source code for this page located on github