4.23.0-0.ci-2026-06-03-033730

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.23.0-0.ci-2026-06-03-033730

Team Approvals:

Tests:

Informing jobs
- aws-ovn-upgrade-4.23-minor Succeeded periodic-ci-openshift-release-main-ci-4.23-upgrade-from-stable-4.22-e2e-aws-ovn-upgrade
- azure-ovn-upgrade-4.23-minor Succeeded periodic-ci-openshift-release-main-ci-4.23-upgrade-from-stable-4.22-e2e-azure-ovn-upgrade
- gcp-ovn-upgrade-4.23-micro Succeeded periodic-ci-openshift-release-main-ci-4.23-e2e-gcp-ovn-upgrade
- hypershift-e2e-aks Succeeded periodic-ci-openshift-hypershift-release-4.23-periodics-e2e-aks
- hypershift-e2e-aws Failed (1 retry) periodic-ci-openshift-hypershift-release-4.23-periodics-e2e-aws-ovn
  - Attempt 1 Failed
  - Attempt 2 Failed

Upgrades from:

Upgrades to:

4.23.0-0.ci-2026-06-03-093730 (changes) - F F F S S

Changes from 4.23.0-0.ci-2026-06-02-140104

Created: 2026-06-03 03:37:38 +0000 UTC

Image Digest: sha256:a9d268345c30a461b5f69b835083fa32b1111368c5cabf23258b33151ec24631

Components

Kubectl 1.35.2
Kubernetes 1.35.3
Kubernetes Tests 1.35.1
Red Hat Enterprise Linux CoreOS upgraded from 9.8.20260528-0 to 9.8.20260602-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

Rebuilt images without code change

rhel-coreos git f41264dc sha256:e2b383dd393ab034bebac81d60cf141a2dadbfe5b5da6a9add2634f901c8757e
rhel-coreos-extensions git f41264dc sha256:80e61c725396978019d6e64c2987f51ced5f84466ad0b873bddcb173f7a1bcee

agent-installer-api-server

MGMT-23738: Flaky test: “Move Agent to another infraenv” fails with Kubernetes conflict error #10319
NO-ISSUE: [master] Bump OCP versions: 4.16 #10423
MGMT-19732: Add ntp_sources field for exclusive NTP configuration #10408
Full changelog

baremetal-installer, installer

MCO-2200: Add day-0 dual streams support for ABI install flow #10481
Full changelog

cluster-authentication-operator

CNTRLPLANE-3364: remove the old go lib std tests #906
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-42837: Do not set Degraded=True on transient errors #436
Full changelog

cluster-config-api

Update getLatestReleases to ignore non OCP releases #2868
Full changelog

cluster-dns-operator

OCPBUGS-77532: Fix premature node schedulability marking in taint checking #470
Full changelog

cluster-ingress-operator

OCPBUGS-85676: Harden CRD permission RBAC in operator ClusterRole #1454
Full changelog

cluster-monitoring-operator

MON-4526: manifests: merge ThanosQuerierConfig from ClusterMonitoring CRD #2924
Full changelog

cluster-olm-operator

OPRUN-4627: override catalog tag to 4.x when RELEASE_VERSION is 4.x and catalogd.yaml pins v5.0 #210
Full changelog

console

OCPBUGS-86755: use a clip path instead of overlapping triangles #16520
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPBUGS-86229: apiserver: cache etcd storage monitors to avoid recreating clients on each metrics scrape #2674
Full changelog

hypershift

OCPBUGS-43444: Allow kubevirt-csi storageclass default to be changed by user #8597
CNTRLPLANE-3510: Enable additional golangci-lint linters #8567
OCPBUGS-86306: Stop controllers fighting over HCP status #8562
Full changelog

ibm-vpc-block-csi-driver-operator

NO-ISSUE: Bump google.golang.org/grpc to v1.79.3 #172
Full changelog

installer-artifacts

OCPBUGS-85352: aws: fix Route 53 resource leak during cluster destroy in China regions #10544
MCO-2200: Add day-0 dual streams support for ABI install flow #10481
Full changelog

keepalived-ipfailover

OCPSTRAT-3113: Set DEFAULT:PQ crypto-policies to RHEL9 base image #230
Full changelog

machine-config-operator

OCPBUGS-86041: update IsSNO helper function to correctly access the cluster’s topology #6110
OCPBUGS-83619: Add version guard for OSStream rendering #6111
NO-ISSUE: Lower IRI deletion log verbosity #6119
OCPBUGS-86179: Update ImageModeStatusReporting MCP machine count tests to be resilient on SNO topology #6089
OCPBUGS-86800: Update AMI Whitelist #6108
Full changelog

networking-console-plugin

OCPBUGS-54248: Fix empty state Create button links #423
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #741
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #1311
Full changelog

tests

NO-JIRA: Clarify why Envoy pods have no CPU or memory limit #31145
TRT-2673: Filter NoExecuteTaintManager disruption from backend-disruption.json #31248
OCPBUGS-86221: update authentication operator conditions to no longer expect WellKnownReadyProgressing #31236
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

NO-ISSUE: Bump spdystream to v0.5.1 #181
Full changelog

vsphere-problem-detector

OCPBUGS-79057: Fixed compute cluster permission logic for single fd with read-only custom resourcepool #220
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 16)

View changelog in Markdown or change previous release:

Source code for this page located on github