4.22.0-0.ci-2026-03-06-175610

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.22.0-0.ci-2026-03-06-175610

Team Approvals:

Tests:

Blocking jobs
- aggregated-aws-ovn-upgrade-4.22-minor Succeeded periodic-ci-openshift-release-main-ci-4.22-upgrade-from-stable-4.21-e2e-aws-ovn-upgrade
- aggregated-azure-ovn-upgrade-4.22-minor Succeeded periodic-ci-openshift-release-main-ci-4.22-upgrade-from-stable-4.21-e2e-azure-ovn-upgrade
- aggregated-gcp-ovn-upgrade-4.22-micro Succeeded periodic-ci-openshift-release-main-ci-4.22-e2e-gcp-ovn-upgrade
- hypershift-e2e-aks Succeeded (1 retry) periodic-ci-openshift-hypershift-release-4.22-periodics-e2e-aks
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- hypershift-e2e-aws Succeeded (1 retry) periodic-ci-openshift-hypershift-release-4.22-periodics-e2e-aws-ovn
  - Attempt 1 Failed
  - Attempt 2 Succeeded
Async jobs
- claude-payload-analysis Succeeded periodic-ci-openshift-release-main-claude-payload-analysis

Upgrades from:

Upgrades to:

4.22.0-0.ci-2026-03-07-055610 (changes) - S S F S
4.22.0-0.ci-2026-03-06-235610 (changes) - S F S F S

Loading changelog, this may take a while ...

Changes from 4.22.0-0.ci-2026-03-05-055610

Created: 2026-03-06 17:59:45 +0000 UTC

Image Digest: sha256:4d5a091fd4a23bf19d1e785d7dff55497626ada2a40bc34e4f7721742fc8ed75

Components

Kubectl 1.34.1
Kubernetes upgraded from 1.34.2 to 1.35.1
Kubernetes Tests 1.34.1
Red Hat Enterprise Linux CoreOS 9 8 upgraded from 9.8.20260304-0 to 9.8.20260305-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ExternalOIDCExternalClaimsSourcing (0 tests)			Enabled (New)	Enabled (New)
MachineAPIMigrationVSphere (0 tests)			Enabled (New)	Enabled (New)

Rebuilt images without code change

cluster-authentication-operator git 4e58b322 sha256:e92a1bd5f74de44c7c6a8e140d70ef77b88c8a5d6abb6eb3b2f9ac0d9cf2d5b8
cluster-dns-operator git 2acb1912 sha256:2f81d37387286a40062c9177f3a8219a518b8ae8819500c6c5ea1e1769254315
ovn-kubernetes git eedfcd07 sha256:3b02fa56a0f6b1dd72ec85dded51b3e8da9f95a941c1765923c9dfbd402df9bb
ovn-kubernetes-microshift git eedfcd07 sha256:d80432c5d9ebe293968cb06f7821c9a35047f85ee8c0165f9865ef39dfa34c57

agent-installer-api-server

MGMT-22518: Adding RHOAI application endpoint to the list of known hosts for SNO #9936
OCPBUGS-77552: fix: min supported arbiter disk size should be 50GB #9977
NO-ISSUE: Update InfraEnv CR description #9938
MGMT-22905: Update LSO override for operator deployment #8824
NO-ISSUE: [master] Bump OCP versions: 4.17 #9975
NO-ISSUE: [master] Bump OCP versions: 4.22, 4.14, 4.21 #9968
Full changelog

agent-installer-ui

above sea level QE test fix (#3450) #3450
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

NO-JIRA: Add coderabbit, including instructions #509
STOR-2752: Early chore: update OCP version in OLM metadata #505
Full changelog

azure-cluster-api-controllers

OCPBUGS-77637: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.22 #369
Full changelog

azure-workload-identity-webhook

OCPBUGS-73994: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.22 #43
Full changelog

baremetal-installer, installer, installer-artifacts

no-jira: Bump openshift api #10347
no-jira: OCPBUGS-77255: wait for node-image-overly to restart sshd #10363
OCPBUGS-77683: Add c8g* to tested_instance_types_aarch64 #10356
OCPBUGS-77440: Image in worker machineset is auto-updated when user specifies the osImage #10341
Full changelog

baremetal-operator

NO-ISSUE: Merge upstream #465
Full changelog

cloud-network-config-controller

CORENET-6562: CNCC rebase k8s to 1.35.0 #202
Full changelog

cluster-autoscaler

OCPBUGS-77631: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.22 #408
Full changelog

cluster-capi-controllers

OCPBUGS-73976: Updating ose-cluster-api-container image to be consistent with ART for 4.22 #262
Full changelog

cluster-capi-operator

NO-JIRA: improve unit test performance and CI flakiness #487
Full changelog

cluster-config-api

NO-ISSUE: Update dev go image #2735
Add CodeRabbit inheritance for org-wide rules #2746
CNTRLPLANE-2522: features: add ExternalOIDCExternalClaimsSourcing feature gate #2743
MCO-2142: OSImageStream.spec.defaultStream validation #2736
CNTRLPLANE-2550: Add support for CEL expression claim mappings for username and groups #2719
NO-JIRA: Add MachineAPIMigrationVSphere feature gate for DevPreview #2739
CNTRLPLANE-1752: Add PKI API to config.openshift.io/v1alpha1 #2645
Full changelog

cluster-csi-snapshot-controller-operator

OCPBUGS-77601: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.22 #269
Full changelog

cluster-etcd-operator

OCPBUGS-76331: fix: truncate job names to respect k8s 63-char limit #1554
Full changelog

cluster-ingress-operator

OCPBUGS-74508: Remove the GatewayAPI feature gate #1366
NO-JIRA: enable inheritance on coderabbit #1373
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-77509: Add support for event-ttl cases and go test cases in Kube API Server Operator #2060
Full changelog

cluster-monitoring-operator

NO-JIRA: fix wrong string formatter in tests #2839
Full changelog

cluster-network-operator

OCPBUGS-76500: Add config override for openflow-probe #2916
Full changelog

cluster-samples-operator

MON-4508: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #673
OCPBUGS-77918: Periodic sync of supported OCP samples #667
OCPBUGS-77879: update kubernetes api to v0.35.2 #676
Full changelog

cluster-version-operator

OTA-1546: Generate riskConditions in a better way #1324
NO-JIRA: Allow for risks only desired update #1335
Full changelog

console

CONSOLE-4990: Replace history object navigation with useNavigate hook #15959
CONSOLE-5030: Refactor remaining firehose impacted components #16039
CONSOLE-4945: Add Disk, Network, CPU and VM counts to node overview #16000
OCPBUGS-77415: Fix infinite recursion in project access form #16069
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-74506: Remove ConsolePluginSecurityPolicy featuregate #1108
Full changelog

driver-toolkit

OCPBUGS-77868: Clean up cruft in /var/cache/dnf #182
Full changelog

gcp-pd-csi-driver

OCPBUGS-77632: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.22 #100
Full changelog

haproxy-router

NE-2468: Migrate away from deprecated ioutil #693
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPSTRAT-2728: Rebase to 1.35 #2523
Full changelog

hypershift

GCP-441: tolerate 1 restart for GCP CCM token-minter race condition #7865
NO-JIRA: chore(deps): weekly dependabot consolidation #7863
OCPBUGS-77477: fix(awsutil): handle smithy errors in AWSErrorCode #7827
SREP-3855: unpause leaked child objects on deleting clusters (OCPBUGS-77530) #7861
CNTRLPLANE-2218: feat(aws): migrate ELB/ELBV2 to AWS SDK v2 #7825
OCPBUGS-77621: fix(nodepool): preserve ignition-reached annotation on token secret after restore #7851
OCPBUGS-76337: feat(scale-from-zero): add DescribeInstanceTypes IAM permission #7648
GCP-391: Add ImageRegistry GSA field and IAM binding for Image Registry Operator #7828
CNTRLPLANE-2801: fix(router): deploy router services for private ARO and remove KAS/OAPI dependencies #7845
CNTRLPLANE-2842: Fix context cancel accumulation in getMirrorFromICSPOrIDMS #7846
CNTRLPLANE-2801: api: remove redundant kubebuilder enum marker from KeyVaultAccess field #7835
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-77728: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.22 #151
Full changelog

insights-operator

CCXDEV-15776: install config update #1229
CCXDEV-15641: gather machineconfig size #1240
Full changelog

ironic

METAL-1749: Uplift setuptools to remove python-wheel deps #804
METAL-1748: Drop genisoimage in favor of xorriso #803
Full changelog

ironic-agent

METAL-1749: Uplift setuptools to remove python-wheel deps #245
Full changelog

keepalived-ipfailover

ART-14594: Update Dockerfile for centos 10 base #223
Full changelog

kube-state-metrics

OCPBUGS-77616: Updating kube-state-metrics-container image to be consistent with ART for 4.22 #134
Full changelog

libvirt-machine-controllers

OCPBUGS-77868: Clean up cruft in /var/cache/dnf #309
Full changelog

machine-config-operator

MCO-2145: Disable skew enforcement on SNO clusters #5739
MCO-2138: migrate multi-stream test cases from the private tests repo… #5701
OCPBUGS-77625: Update ose-machine-config-operator-container image to be consistent with ART for 4.22 #5730
Full changelog

monitoring-plugin

OU-1242: dont autofill rename #820
Full changelog

multus-networkpolicy

downstream sync 2026-02-23 #97
ds: disable DependaBot downstream #96
Full changelog

must-gather

OCPBUGS-77832: Updating ose-must-gather-container image to be consistent with ART for 4.22 #528
Full changelog

networking-console-plugin

OCPBUGS-77868: Clean up cruft in /var/cache/dnf #360
Full changelog

oc-mirror

CLID-197: Add TargetRepo, TargetTag to additionalImages #1327
OCPBUGS-77726: Updating oc-mirror-plugin-container image to be consistent with ART for 4.22 #1364
OCPBUGS-77726: Updating oc-mirror-plugin-container image to be consistent with ART for 4.22 (missing files from ART PR 1364 ) #1366
Full changelog

olm-catalogd, olm-operator-controller

OCPQE-31707: serviceAccount validation unified across all runtimes to enhance cases #656
NO-ISSUE: Synchronize From Upstream Repositories #655
NO-ISSUE: Synchronize From Upstream Repositories #651
Full changelog

openstack-cluster-api-controllers

OCPCLOUD-3321, OSASINFRA-3980: Migrate asset generation to ocp-manifests #386
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPQE-31607: update 43101 for FIPS enabled cluster #1249
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-77597: Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.22 #371
Full changelog

rhel-coreos, rhel-coreos-extensions

NO-JIRA: extensions: Add rhel-9.8-server-ose-4.22 #1910
Full changelog

rhel-coreos-10, rhel-coreos-10-extensions

NO-JIRA: extensions: Add rhel-9.8-server-ose-4.22 #1910
NO-JIRA: tests: add openshift tag #1906
COS-3912: denylist: drop rhcos.network.init-interfaces-test #1900
NO-JIRA: OWNERS: Add angelcerveraroldan #1883
NO-JIRA: Rename extensions/Dockerfile to Containerfile #1896
NO-JIRA: packages-openshift: Fix repo versions #1895
NO-JIRA: extensions: add a label for extensions image discovery #1894
COS-3900: Start using rhel-10.2 #1892
NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1891
No-JIRA: move the OKD SIG repo to 4.22 #1890
NO-JIRA: OWNERS: add user Rolv-Apneseth #1882
NO-JIRA: Update to track 4.22 and rhel-9.8 #1881
NO-JIRA: rhel-10.1: enable rhel-10.1-fast-datapath #1885
NO-JIRA: packages-openshift: enable rhel-10.1-fast-datapath #1884
OCPNODE-4010: package: add ose-crio-credential-provider #1879
OCPBUGS-70162: extensions/rhel-10.1: Re-enable ipsec #1878
NO-JIRA: drop use of rhel-9.6-appstream-containernetworking repo #1877
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

tests

CNTRLPLANE-2202: Check for debug pod (regardless of ns) in default service account monitor test #30815
CORENET-6169, CORENET-6864: remove some duplicate ovnk test cases #30820
Full changelog

thanos

OCPBUGS-77547: Updating ose-thanos-container image to be consistent with ART for 4.22 #170
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-77563: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.22 #164
Full changelog

vsphere-csi-driver-operator

OCPBUGS-77629: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.22 #333
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github