5.0.0-0.ci-2026-04-25-111452

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release-5:5.0.0-0.ci-2026-04-25-111452

Team Approvals:

Tests:

Blocking jobs
- aggregated-aws-ovn-upgrade-5.0-major Succeeded periodic-ci-openshift-release-main-ci-5.0-upgrade-from-stable-4.22-e2e-aws-ovn-upgrade
- aggregated-azure-ovn-upgrade-5.0-major Succeeded periodic-ci-openshift-release-main-ci-5.0-upgrade-from-stable-4.22-e2e-azure-ovn-upgrade
- aggregated-gcp-ovn-upgrade-5.0-micro Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-gcp-ovn-upgrade
- hypershift-e2e-aks Succeeded periodic-ci-openshift-hypershift-release-5.0-periodics-e2e-aks
- hypershift-e2e-aws Succeeded periodic-ci-openshift-hypershift-release-5.0-periodics-e2e-aws-ovn
Async jobs
- claude-payload-agent Succeeded periodic-ci-openshift-release-main-claude-payload-agent

Upgrades from:

Upgrades to:

5.0.0-0.ci-2026-04-25-231452 (changes) - S S F S
5.0.0-0.ci-2026-04-25-171452 (changes) - S F F S

Loading changelog, this may take a while ...

Changes from 4.22.0-0.ci-2026-04-25-050454

Created: 2026-04-25 11:16:49 +0000 UTC

Image Digest: sha256:6a859d8b859f554e1832a5d555885f3205bb6747315e3d3622a893eae78bc1e6

Components

Kubectl 1.35.2
Kubernetes 1.35.3
Kubernetes Tests 1.35.1
Red Hat Enterprise Linux CoreOS 10.2.20260423-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
UserNamespacesPodSecurityStandards (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
UserNamespacesSupport (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
OpenShiftPodSecurityAdmission (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled

Rebuilt images without code change

apiserver-network-proxy git 5e33c228 sha256:569def91228722eeade770a403c8b164caa0913292c8303791c135d28579ceae
aws-ebs-csi-driver git 0927af1c sha256:1c7e1d08985b92c4829b0869a0e65a1acf8c5d9804cc6aff858ff7b6f7410beb
aws-karpenter-provider-aws git f0be9c72 sha256:9ca20ef24f74387ad4b3dbee26f36a2d290f8f9e4042b2152d2622c47cca3816
aws-kms-encryption-provider git 19e7b623 sha256:39ae927925293bb9891bb58bd34e76eb5b90184925aea5ee7f058e28354db1f9
aws-node-termination-handler git 341ed3a0 sha256:4884a6c1ff63452e8f26a6bd7dfe8a494fc65a477aa18e918873fa12f504ee15
aws-pod-identity-webhook git 82088287 sha256:8a2a05cc89c3be761c97971f8996c43d7e69622844397652ff6f4c06d9d81d88
azure-kms-encryption-provider git 99b9a3a3 sha256:34d66599def37537523da822da5680d3742dd6f835bcbfd291f7dff193d77b9a
azure-workload-identity-webhook git 81a256e6 sha256:c85fb50fc3f971b1d7d14cf35caccf4ab786b52980e129e7893d6c47e9fe08d3
baremetal-cluster-api-controllers git ad4eb8a5 sha256:8e7f76b35c2370cfb37a235f515b24f06ca27b888a026927575e446f033a9ef4
baremetal-machine-controllers git 8d863b95 sha256:8b289eb4738aaeb234deda4c7af0256382c1400b670c62dd74898ee6987e01ae
baremetal-operator git c5e50489 sha256:a4f24c8d4509d015f238d234d850e827a6bb61cc281e29e6e34249b6e24197a8
baremetal-runtimecfg git dca8cb1b sha256:7fac0ea8fa82e871e2c55205a37f64a02406755970b82a4f5275a6a79b786ada
cloud-network-config-controller git 2d69ad95 sha256:d0d1b31a0e54c77f374a5f54b6bb1361d83377229b95a244d0860b5500c9fcb8
cluster-autoscaler git 05bcec5a sha256:8ebd84461a1a9c78ae57833a93ad7a5c67aaa27581ea4d41d30ba5367d5f0ca9
cluster-autoscaler-operator git 260ea1b5 sha256:ed1f4526735afcf59946405e303052409854552eba4d6b8f8d2bf8116a09008d
cluster-bootstrap git e6be0fdf sha256:279a07296341d3bdec03de296656056619bb3a1dedaaca4783c1a32a92783588
cluster-csi-snapshot-controller-operator git 108f37f0 sha256:2684b28f78d8bbb1cd31dfe129ab495e177be80bd0726695cbfb3415f3896e38
cluster-dns-operator git 3d214118 sha256:6e4d44952c40a8e161804d83021f9f1bf0b97229d4d551c8c87f5987edb8616c
cluster-node-tuning-operator git 3d98f7ee sha256:0d1bbda4bf76089a1494c6d7a0f01bd0e95d44d16780d83794a1e6d35e7cf2df
cluster-olm-operator git d131450b sha256:4252123cfbbd246f710c7f785dedd04fff81bec50301364d0521be5a7d503286
cluster-storage-operator git 8dfdf2ef sha256:b514bfb6b0086edb8d5e06b1bba7fe2f12a18f3ca32e8e57d062aec03b574807
cluster-update-keys git 3b5c59cc sha256:9bf60f6093440bad8cae2cac624fd2ad0e7930676ac5fc2a1eba923a2c2ade2a
configmap-reloader git 94e41c4c sha256:608bcdd23ae51e514034133d30899308c31192ac0366c3bb35cbcd9273d48d54
container-networking-plugins git 747ad66c sha256:241e48a83082249504e2d070f076eca311c59ad20174cc3f63ac405c4e4a028e
containernetworking-plugins-microshift git 747ad66c sha256:326b5594a15fc8ebe227f5a165c99f07422afc74e3352e315c2abda9faf6d2c3
coredns git 0dded2d2 sha256:e6c9b7001d498b0e654eb1ef79ef62c74a8fccdcdb08a8ad83fb4b22ddcb96ec
csi-driver-manila git fd31b5da sha256:d2920fb9c4163dae45d0fb5c457127768420225ccee74538ccf7ac8aba465251
csi-driver-nfs git e9f24940 sha256:29c7312692bcc7798f9a6c60514d1b36aa14c362d148aa70f3bc8e8588e70668
csi-external-attacher git 98b1f4ac sha256:002608ad23cdea20d45abd669f64aec09b2db17df1098b1da9eb561eadd0125c
csi-external-provisioner git f90c06a3 sha256:88a550c5641db1f78ad07be4fc9f1d323b56b8527f53662bac99ea8268457969
csi-external-resizer git 4e74a4aa sha256:0616d570ab5dff739f8549b5d96501802687c6a04baf0626bb24bd2622aa08a6
csi-external-snapshot-metadata git 76523185 sha256:6c16e948019c7e2ce56f2ad54ebe622f47dc93c7d5ae0cff7cfb0db0c62db91f
csi-external-snapshotter git d1bc3ffa sha256:dd6af3b6e68d56f7f98c4b49be2c587f427fd7cdff0137b7a007dbfee8d14c4f
csi-livenessprobe git 4d5e959a sha256:a5e32129b5a43757bda4133007627c462abfd807cef8f00cdacd26b380e3e07a
csi-node-driver-registrar git cf174b30 sha256:aa2456a842f51bd732d49c22d6b3a2963c51354282ed3b4aa9f43af15b5c6cc6
csi-snapshot-controller git d1bc3ffa sha256:d2d9aef4c8627016046125543ee75828af504e7e4767d0f0b47700542720443f
docker-builder git fcd4ce2d sha256:40dea7530b9a902a7ac90d0f39f8c9750c858605d8fc00e229d1a2fd8e091616
docker-registry git c3fa7db0 sha256:00ad8cf616ef2aa8ad7fabe2628ad50c470ab926c79659a30443b90b73afb5dd
driver-toolkit git 7aa4007a sha256:890fab88f3defb596ce82b2c675dee6999604922c63ebdfb3b084f4db6ea74c3
gcp-pd-csi-driver git 2ba11740 sha256:f0037a4cea933144ecb0814afbb49674636d30bc404eaa786bbdb7a803e34e2a
gcp-pd-csi-driver-operator git 6b00096f sha256:9d95b2ee3753d03dd6007a605363bbe4cc83580d4c1f81e188c284a8b7a452b9
gcp-workload-identity-federation-webhook git d7675f31 sha256:87732f50c8cf60c1d295abcbe8ba4533f6e2f82e0f6348e4fd34bc805021b35b
haproxy-router git 89639077 sha256:2e8f9c773adab42f2805b6a8bd60045c81485ef684e7559bd177edc865aeea30
ibm-vpc-block-csi-driver git aa40cd7e sha256:fbbae47c61115eb7ff95f9d131fb99499139905053e3f20b94e704103e7a0f5b
ibm-vpc-block-csi-driver-operator git f859eac9 sha256:376c8f847199362b2a6746fdcea3eb8bdccab5155b08eb7708f3151a41b2e838
insights-runtime-exporter git 70256457 sha256:2a912ecce815e2a07a9bdfcd9ec340c6c4685c458a21ce442c7373cebf2a9329
insights-runtime-extractor git 70256457 sha256:4c74c271033319ee52072e7f0b9101d7a6a257350c8dee0589bfd21010b25eaf
ironic git 437c88a9 sha256:1083a1b4f8fb1e417e8d42013ff1c25a7be21df832f31cd779d4ee584bcf4024
ironic-machine-os-downloader git 9953d2b7 sha256:11dccbb7c6be1b783372bcd387cbb6848aa1f379443c74690b0e41b0828af94a
ironic-static-ip-manager git a379d09f sha256:ffa314db221e3019e5e11fd24eeac99dbcabcac908a8777ec220b2f9daf27352
keepalived-ipfailover git edb8b1e6 sha256:6822b246000d278d2f13cea6fa77086c8354eaef7304c0912d38c823aa758e83
kube-metrics-server git 38c16c46 sha256:a80042df42666f9b0ab37923971b41bb29af1fb366f1eafc0a78d1d2b38d511e
kube-rbac-proxy git d12e2746 sha256:521117a5f1e25071e61261cbd6426b6fc18fc1a9613b5a30233622d63579ccf8
kube-state-metrics git 6fa06eac sha256:e69cdbe6239dccd022066a96ae722c0488229b5145b5f22501f2c09985c2ea9e
kube-storage-version-migrator git 72835e43 sha256:89e225e7625353d6bdc9a75417be9a2af4d4c743c0d0856109d2c3c8c5bdbc11
kubevirt-csi-driver git 771b562d sha256:65f43cb5928073289b36c68ed68421f3e261fc53edc8d6b2284d4b9b98180c30
machine-image-customization-controller git eacc65f2 sha256:ca8d4fa9afe5a69d86d650b21e1ea160729a77d5f9c7d715051574e64a890893
machine-os-images git df9a652c sha256:da837ca458c427994ed6cd8708c6dabfcbd3d79f145f47145042a873dee57787
multus-admission-controller git 16ba7ef8 sha256:caa5d7940db16073c75017fd8a1f5faccc3f87149130da109d575395e0ab8370
multus-cni git b4ec7d82 sha256:4ffc8db3a6b20d77b29dc7792d44de4cce7cd999436febd6b401ad6b635554c5
multus-cni-microshift git b4ec7d82 sha256:880e12697549e44c274041251860092e61b5315ba4401520dbd716964d2df071
multus-route-override-cni git 08af4127 sha256:528e4647bce3e71e71dbc94d15b2c897bed702d82afc878ca2a0a0c7dd78ff78
multus-whereabouts-ipam-cni git d691040e sha256:107423b35e6a2d3ca370e9a026372811cb5f53c88b55aa58ee7463290111c0f0
network-interface-bond-cni git 297eeb43 sha256:b090d7eee88519a4972ad76282808b9fa6617f82c746d33110baa674eb88807d
network-metrics-daemon git 5b233ea1 sha256:b288ee7c9a3ed30910e501e1eeece870e0c89a17086db5f5361c53bfac866251
network-tools git 5c4b905c sha256:9db154892d1fd520041b29c60f8eaaec90bc10592315cd08142033f578a735a8
oauth-proxy git 714292f5 sha256:97cbcec5d357e6c4621f6e6c12efdb012a72bd3033ffc9af6fe6e19e889c7def
oc-mirror git ca5eebdc sha256:67384779a6315cfc93cf25ff0eee8b894a64cd3bc93ddfc318448adbf6c09e76
openshift-controller-manager git 26d20fea sha256:41f8775b2acc1718b2ae9ca94d44fcd012dae747abf8c676fe64df8c11fb3a79
openshift-state-metrics git e71e0996 sha256:e3be2868e25803047f73885cc586c080d4daf2f04710c2cc039f2be1a5097fe8
openstack-cinder-csi-driver git fd31b5da sha256:e9b036964dfa1d42662ad21894544627e8e581ed763d9c92151b0b68c6576df7
openstack-cloud-controller-manager git fd31b5da sha256:8660617b65ec68cd2e962d53fab6d408c8804c2cca4f3fafc625efee28ef1e89
openstack-cluster-api-controllers git 74cb5b08 sha256:8e12b622399628e6ee2cab5e23cdff9825fa4000a08533fd80fc25c0077dd850
openstack-machine-api-provider git 8a8c354b sha256:9f0a71ca94ce68c6d09442a85092e014ce7483dadc023304664f15bde647b03d
openstack-resource-controller git cbea7a9c sha256:0c99279c2ffd6d5ce68aec1c674c921a856a6beba77de8061462eb9a6648c1bc
powervs-block-csi-driver-operator git a56f9e95 sha256:67d699a5ad6b5f5c6a93dbb0c90f26775c73538b22e164df66d002391ecfe638
powervs-machine-controllers git e88cf81d sha256:6190e0a3959f460dcaf15cfd83451597977452c29c3b009eeb9c9031d3da6452
prom-label-proxy git c4c99a30 sha256:3af2fb0ddb60c4f5eaac2875eab2872e42b68621f112eaa1e73c260546b8b1cd
prometheus git e1e35591 sha256:9fbc8f7aacf16063c2df1d91e1be5ca6d1831ffb9c03e57e40668136166aa46f
prometheus-config-reloader git 70e38466 sha256:64bdb044c734f9e9791bd23c70f9bb1e9736ede396c526b75b79501a4650021f
prometheus-operator git 70e38466 sha256:ff72e56d0709f86e191059d12e6516349852fd4ca427ab8e9936b1b88526978e
prometheus-operator-admission-webhook git 70e38466 sha256:b16c877f6e14091b86d437a875b29cdf672e62ca20b2b1d7812f47fcf2be0638
rhel-coreos git f41264dc sha256:a02f8d59e503ac4b7b353d5949cff542f8565512965354ceb8bbfcccc020dcac
rhel-coreos-extensions git f41264dc sha256:db901030fdd21c3c922b40fe97612dd1a21130455f3baea1e9db3d8c7bcd6e78
telemeter git d6c7dd49 sha256:37685e3b33d8f42193071c40f7e27d2a5ebe2a40850edbe91c6c4da5b4c47c72
thanos git 5d9d0f38 sha256:5633ba61170553112727642e4a0362d727eaeff1780153acb6954d870003b236
volume-data-source-validator git 8e176cec sha256:fc4da91bd51fc5d917dcbaebd03c0b738dc71f609d1134572274e11fb489d258
vsphere-csi-driver git cf21e121 sha256:b45922026cc1ca68a2d353a6006a4b67d2386fe26e831605fdb8dded86a9c34e
vsphere-csi-driver-syncer git cf21e121 sha256:6cd2d80fe46b8e4502a86d7dd50618996cefb2921ad550bf7658ec769e59bfab
vsphere-problem-detector git 842aed3d sha256:96a44573f63fda081023cab18a19f19aa2e80670c8a067a8d2828795bbae0637

agent-installer-api-server

MGMT-23553: Automate events table bloat cleanup #10140
MGMT-23665: fixing CVE-2026-33186 #10173
NO-ISSUE: Allow restoring soft deleted hosts #10185
NO-ISSUE: [master] Bump OCP versions: 4.20, 4.21, 4.22, 4.18 #10201
NO-ISSUE: Bump go modules and linters #10181
MGMT-23861: Revert MGMT-22385 for oci iscsi day2 #10170
ACM-32996: Missing nil check in BMACReconciler causes controller panic #10164
MGMT-23920: 4.22 SNO doesn’t support 4 cpu cores node #10153
NO-ISSUE: add shay23bra to owners #10163
NO-ISSUE: [master] Bump OCP versions: 4.13, 4.19 #10162
NO-ISSUE: Remove urlAuth from credentials endpoint #10161
MCO-2223: Add osImageStream install-config overrides #10156
NO-ISSUE: [master] Bump OCP versions: 4.21 #10152
NO-ISSUE: [master] Bump OCP versions: 4.22, 4.18, 4.20 #10146
OCPBUGS-79576: Mark raw FC/iSCSI multipath members as ineligible #10142
OCPBUGS-83401: Fix IRI patcher feature check #10141
MGMT-23227: Skip host operator validation for day2 clusters #10029
ACM-32735: Add better API docs to CRDs #10124
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: upgrade go.opentelemetry.io/otel/sdk to … #2097
MGMT-23789: CVE-2026-34986 Bump github.com/go-jose/go-jose/v4 to v4.1.4 through indirect dependency conversion #2081
Full changelog

agent-installer-node-agent

ACM-31642: fix CVE-2026-33186 #1417
OCPBUGS-63472: add –copy-network when manual network config is detected #1374
MGMT-23790: CVE-2026-34986 Bump github.com/go-jose/go-jose/v4 to v4.1.4 through indirect dependency conversion #1404
NO-ISSUE: Refactor flag Parsing to avoid multiple calls #1401
NO-ISSUE: Refresh RPM lockfiles #1389
MGMT-23300: Ensure /boot dir has enough space during reclaim #1316
Full changelog

agent-installer-ui

chore(deps): update dependency msw to v2.13.5 (#3587) #3587
chore(deps): update dependency @vitejs/plugin-react-swc to v4 (#3553) #3553
chore(deps): update dependency happy-dom to v20.9.0 (#3591) #3591
Add renovate.json (#3637) #3637
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1776962329 (#3588) #3588
chore(deps): update dependency @redhat-cloud-services/eslint-config-redhat-cloud-services to v3.1.0 (#3577) #3577
chore(deps): update dependency @types/uuid to v11 (#3544) #3544
chore(deps): update yarn to v3.8.7 (#3495) #3495
Add cursor rules for imports (#3595) #3595
NO-ISSUE: Cursor rules for comments and variables (#3592) #3592
Add CLAUDE.md (#3632) #3632
Bump uuid from 8.3.2 to 14.0.0 (#3629) #3629
Bump follow-redirects from 1.15.11 to 1.16.0 (#3586) #3586
ACM-30344: ACM Console should support ClusterImageSets with by-digest pullspecs (#3609) #3609
Allow to install SNO topology (#3578) #3578
Support third party CNI in CIM (#3600) #3600
Fix Cisco Intersight editing (#3523) #3523
Pull secret appears editable in draft cluster but changes are not applied (#3597) #3597
fix operators list in ABI below the sea (#3590) #3590
MGMT-23913: Missing breadcrumbs in on-prem Assisted Installer (#3598) #3598
Update build-tools (#3593) #3593
Upgrade lodash to 4.18.1 (#3566) #3566
Bump basic-ftp from 5.2.1 to 5.3.0 (#3594) #3594
OCPBUGS-83428: bump axios to ^1.15.0 for fixing CVE-2026-40175 (#3585) #3585
chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.3.1 (#3568) #3568
chore(deps): update dependency @redhat-cloud-services/tsc-transform-imports to v1.0.58 (#3570) #3570
chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.8.4 (#3569) #3569
MGMT-23090: Support single stack IPv6 (#3414) #3414
NO-ISSUE: Remove orphan files (#3460) #3460
MGMT-23328: remove breadcrumbs for OCM and use logo as a link (#3510) #3510
NO-ISSUE: Update translation files to match new i18next format (#3567) #3567
Full changelog

agent-installer-utils

AGENT-1193: Add mirror-path and registry-cert support for OVE ISO builder #218
OCPBUGS-83575: Remove Konflux cert-preflight test #290
NO-JIRA: Add 4.23 appliance-config #289
NO-JIRA: Add 5.0 appliance-config.yaml for iso_builder #288
Full changelog

aws-cloud-controller-manager

NO-JIRA: Update OWNERS #145
Full changelog

aws-cluster-api-controllers

NO-JIRA: Update OWNERS #599
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-80930: Add VolumeAttributesClass e2e test manifests for Azure disk #538
Full changelog

aws-machine-controllers

SPLAT-2715: Fixed broken test and simplified some logic #182
NO-JIRA: Update OWNERS #183
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

NO-JIRA: Update OWNERS #174
Full changelog

azure-cluster-api-controllers

NO-JIRA: Update OWNERS #376
Full changelog

azure-disk-csi-driver

UPSTREAM: 3569: OCPBUGS-83733: Bump grpc to v1.79.3 #135
Full changelog

azure-file-csi-driver

UPSTREAM: 3023: OCPBUGS-83329: Bump grpc to v1.79.3 #124
Full changelog

azure-machine-controllers

NO-JIRA: Update OWNERS #190
Full changelog

azure-service-operator

OCPBUGS-83613: Bump grpc package for CVE fix #21
OCPBUGS-69898: Updating ose-azure-service-operator-container image to be consistent with ART for 4.22 #16
NO-JIRA: UPSTREAM: <carry>: add openshift/e2e-tests.sh #22
NO-JIRA: Update OWNERS #20
Full changelog

baremetal-installer, installer

no-jira: update to Google Cloud SDK 563.0.0 #10460
MULTIARCH-5824: PowerVS: Fix supported system types retrieval for PowerVS regions #10268
CORS-3933: Add a retry backoff for checking storage in progress #10463
SPLAT-2719: vsphere - remove HostGroup zonal feature gate checks #10497
OCPEDGE-2255: baremetal: reject SNO installation on baremetal platform #10420
OCPBUGS-78932: Improved DHCP network deletion reliability by proactively cleaning up attached network interfaces before retrying deletion #10325
OCPBUGS-83327: PowerVS: update CAPI to v0.12.2 #10488
OCPBUGS-83335: dont save CAPI secrets #10498
AGENT-1417: Add kind verification in InternalReleaseImage check #10332
Full changelog

cli, cli-artifacts, deployer, tools

RFE-3594: Add group membership info #2255
NO-JIRA: claude: Change learn-* agents into skills #2257
NO-JIRA: claude: Improve AGENTS.md and add agents for storing project knowledge #2251
Full changelog

cloud-credential-operator

OCPBUGS-83449: test-ext: hypershift skip CCO metrics endpoint validation #1010
Full changelog

cluster-authentication-operator

NO-JIRA: Update library-go for latest changes #873
CNTRLPLANE-2523: deploy oauth-apiserver in new OIDC mode when authentication type is OIDC #858
NO-JIRA: Add control-plane-approvers to OWNERS #871
Full changelog

cluster-baremetal-operator

OCPBUGS-83612: Fix image-cache to use HTTPS for metal3-state downloads #592
Full changelog

cluster-capi-controllers

OCPCLOUD-3419: Adopt IPAM CRDs on upgrade #274
OCPBUGS-83513: Merge https://github.com/kubernetes-sigs/cluster-api:v1.12.5 (efc7142) into master #275
NO-JIRA: Update OWNERS #278
Full changelog

cluster-capi-operator

NO-JIRA: fix: tolerate not-found upon infra machine deletion #528
NO-JIRA: Update e2e diagnostics #488
OCPCLOUD-3345, OCPCLOUD-3359: Add support for TLS envsubst substitution #519
OCPBUGS-83601: Bump grpc package for CVE fix #523
NO-JIRA: Fix crdcompatibility flakes after webhook creation #525
NO-JIRA: Update OWNERS #522
Full changelog

cluster-cloud-controller-manager-operator

SPLAT-2562: Refactored OTE and added new 3CMO OTE binary #446
OCPBUGS-83399: e2e/ote/ccm-aws fix hairpin traffic on NLB and CLB in EUSC #449
NO-JIRA: Update OWNERS #448
Full changelog

cluster-config-api

OCPBUGS-74525: OCPBUGS-74526: Remove UserNamespacesPodSecurityStandards and UserNamespacesSupport #2762
OCPBUGS-82584: Add labelSelector to MachineSet status for scale subresource #2807
OCPBUGS-83754: fix(config/v1): define constants for authentication types as typed constants #2814
OCPBUGS-83492: Allow :ref suffix in additionalLayerStores path for stargz-store to support lazy image pulling #2806
MON-4037: Add MonitoringPluginConfig to ClusterMonitoring API #2768
fix: small typos in comments in types.go #2804
OCPBUGS-82292: extend supported values for MCN IRI image status field #2800
MON-4036: Add NodeExporterConfig to ClusterMonitoring API #2744
OCPCLOUD-3359: Add component names, manifestSubstitutions, and observedGeneration to CAPI revisions #2786
Full changelog

cluster-config-operator

CNTRLPLANE-1544: manifests: Use restricted-v3 scc for deployment #451
Full changelog

cluster-control-plane-machine-set-operator

NO-JIRA: Update OWNERS #399
Full changelog

cluster-etcd-operator

NO-JIRA: Add control-plane-approvers to OWNERS #1594
Full changelog

cluster-image-registry-operator

NO-JIRA: Add control-plane-approvers to OWNERS #1324
OCPBUGS-83282: Allow longer window before going Degraded #1318
CNTRLPLANE-2660: e2e testing automation: Image Registry network policy #1320
OCPBUGS-66225: ImageConfigController: add inertia before ImageConfigC… #1319
Full changelog

cluster-ingress-operator

OCPBUGS-81192: Fix race condition in internal-to-external LB migration test #1407
NE-2390: Adding AGENTS.md file #1341
OCPBUGS-25739: Fix PDB MaxUnavailable for 2-replica ingress controllers #1380
Full changelog

cluster-kube-apiserver-operator

NO-JIRA: Update library-go changes #2107
OCPBUGS-79663: Allow setting the oauthMetadata when auth type is None #2105
CNTRLPLANE-3228: Implement 5.0 EUS schedule in KAS-O #2101
CNTRLPLANE-2991: Do not configure KAS with Structured Authentication when authentication type is OIDC #2075
CNTRLPLANE-2935: Enable configurable PKI for managed certificate rotation #2051
Full changelog

cluster-kube-controller-manager-operator

NO-JIRA: Add control-plane-approvers to OWNERS #926
Full changelog

cluster-kube-scheduler-operator

NO-JIRA: Add control-plane-approvers to OWNERS #639
OCPBUGS-82503: add /var/run/kubernetes as emptyDir #638
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-51091: schedule migrator pods on control-plane nodes #157
Full changelog

cluster-machine-approver

OCPCLOUD-3347: tls: use centralized TLS profile (unrevert) #292
NO-JIRA: Update OWNERS #296
Full changelog

cluster-monitoring-operator

NO-JIRA: refactor config merging #2890
OCPBUGS-54806: Add telemetry for user-defined networks #2596
CNTRLPLANE-3217: Enable configurable PKI for GRPC TLS certificates #2882
NO-ISSUE: [bot] Update jsonnet dependencies #2878
MON-4115: expose label metrics for jobs and cronjobs #2553
MON-4480: set minimum TLS version for Thanos ruler #2862
MON-4442: Add AGENTS.md to CMO #2761
NO-JIRA: [bot] Synchronize versions of the downstream components #2884
MON-4493: add MetricsServerConfig support to ClusterMonitoring CRD #2809
Full changelog

cluster-network-operator

NO-JIRA: cleanup unused code and refactor for allowlist controller #2846
CORS-4332: Add GCP to the allowed platforms for dual stack #2894
OCPBUGS-82973: Frrk8s tls manifests #2963
KONFLUX-11591: Fix ovn-acl-logging CrashLoopBackOff due to startup race condition #2923
CORENET-6572: only report Progressing for active network rollouts #2937
Full changelog

cluster-openshift-apiserver-operator

NO-JIRA: Update library-go for latest changes #678
Full changelog

cluster-openshift-controller-manager-operator

NO-JIRA: Add control-plane-approvers to OWNERS #427
Full changelog

cluster-policy-controller

NO-JIRA: Add control-plane-approvers to OWNERS #179
Full changelog

cluster-samples-operator

CNF-23044: Migrate away from deprecated ioutil #668
CNTRLPLANE-3176: implements operator tls config compliance #684
Full changelog

cluster-version-operator

OTA-1979: Revert “lightspeed: Add a new image holding Lightspeed skills” #1378
NO-JIRA: how-to: troubleshoot bootstrap CVO #1369
OTA-1965: Add Lightspeed CustomResourceDefinitions #1380
NO-ISSUE: Fix TestOperator_upgradeableSync #1373
OTA-1962: lightspeed: Add a new image holding Lightspeed skills #1376
OTA-1813: Extend alert risk e2e #1371
Full changelog

console

OCPBUGS-84338: Update resolveDynamicModuleMaps to skip unavailable packages #16340
OCPBUGS-84320: Use popover token in QS modal #16339
OCPBUGS-84296: fix Helm list page redirect after upgrade/rollback #16336
NO-JIRA: prepare for 4.22-prerelease.3 sdk publish #16338
CONSOLE-5144, OCPBUGS-81319, OCPBUGS-83823: 4.22 SDK fixes #15655
OCPBUGS-83812: Fix race conditions in OLM descriptors Cypress test #16304
OCPBUGS-83816: Fix race conditions in create-namespace Cypress tests #16306
NO-JIRA: enable multi-architecture yarn builds #16228
OCPBUGS-83813: Fix race conditions in debug pod Cypress tests #16305
OCPBUGS-81668: Fix User Preferences responsive breakpoints bug #16279
OCPBUGS-77864: Add gRPC probe support to container details view #16245
CONSOLE-5176: Refactor RTL Tests from fireEvent to userEvent #16294
OCPBUGS-82504: Re-enable cluster-settings/update-modal.cy.ts e2e test disabled for createRoot adoption #16283
NO-JIRA: Replace deprecated io/ioutil pkg #15902
OCPBUGS-81630: Fix unnecessary error on Node Terminal tab #16263
OCPBUGS-78365: Fix create visual connector in Topology #16241
OCPBUGS-83532: Add empty state visibility check to CRD test #16303
CONSOLE-5204: Merge PR templates #16287
OCPBUGS-82510: Fix web-terminal-adminuser e2e tests broken by createRoot #16284
OCPBUGS-83446: Fix Cypress test timeouts by using correct timeout option #16280
OCPBUGS-83532: Fix race condition in CRD Cypress test #16288
NO-JIRA: enable Cypress Cloud in CI #16277
Full changelog

console-operator

CONSOLE-5204: Add PR template #1141
Full changelog

egress-router-cni

OCPBUGS-83286: Fix swallowed errors in cmdAdd/cmdDel causing empty CNI result #95
NO-JIRA: Update OWNERs file #96
Full changelog

etcd, installer-etcd-artifacts

OCPBUGS-82495: 5.0/4.23 rebase 3.6.10 #368
Full changelog

gcp-cloud-controller-manager

NO-JIRA: Update OWNERS #105
Full changelog

gcp-cluster-api-controllers

NO-JIRA: Update OWNERS #280
Full changelog

gcp-machine-controllers

NO-JIRA: Update OWNERS #157
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPBUGS-78576: Update the csi-driver-host-path version to 1.17.1 #2641
OCPBUGS-81740: UPSTREAM: 138259: Filter out unschedulable nodes in kubectl describe test #2640
Full changelog

hypershift

OCPBUGS-84248: Remove hardcoded quay.io credentials from EnsureGlobalPullSecret test #8320
NO-JIRA: ci(deps): bump GitHub Actions dependencies #8333
OCPBUGS-77529: clean stale mock files before make generate function #8237
OCPBUGS-79471: fix(test): reduce e2e autorepair flakes from unhealthy node conditions #8278
NO-JIRA: docs: clarify that control plane downgrades are not supported #8314
CNTRLPLANE-2204: improve AllNodesHealthy and AllMachinesReady conditions #8247
GCP-431: feat: Add CNCC support for GCP WIF in HyperShift #7824
OCPBUGS-83410: fix, cno, skip cloud-network-config-controller check on non-cloud platforms #8238
Revert “OCPBUGS-83730: Add *.apps wildcard to base domain Private DNS zone for Azure private clusters” #8301
NO-JIRA: docs: add jira:ready-to-solve to agentic SDLC workflow #8304
OCPBUGS-83397: Fix concurrent CRD reconciliation race #8266
NO-JIRA: MCE 5.0 branch cut #8290
OCPBUGS-83751: add missing RBAC for webhook configurations #8276
OCPBUGS-83730: Add *.apps wildcard to base domain Private DNS zone for Azure private clusters #8273
NO-JIRA: chore: pass COMMIT_HASH build arg to support git worktrees #8279
OCPBUGS-78539: revert temporary crash toleration for dns-operator #7994
CNTRLPLANE-3296: fix: auto-create python venv in Makefile for verify targets #8269
OCPSTRAT-2499: docs(e2e): add AI agent guidance for v2 test framework #8207
AUTOSCALE-490: increase autonode test coverage #7979
OCPBUGS-83604: fix(kubevirt): filter link-local addresses from EndpointSlice endpoints #8264
NO-JIRA: fix(test): set 1h time limit on e2e capacity reservations #8208
NO-JIRA: docs(agents): add CRD API machinery fundamentals and envtest docs #8236
OCPBUGS-83585: Wait for CRD removal in GenerateCRDInstallTest to fix flaky envtest #8261
NO-JIRA: drop redundant api_ux_validation e2e test #8210
CNTRLPLANE-3255: enable CodeRabbit reviews on draft PRs #8250
CNTRLPLANE-635: Enable nilness and unparam checks in golangci-lint #8258
AUTOSCALE-590: karpenter version logging verification #8058
CNTRLPLANE-3259: Add sdminonne, clebs, and Nirshal to core-reviewers #8252
ci(claude): add konflux-build command for manual non-expiring builds #7964
NO-JIRA: fix(e2e): handle uint64 underflow in karpenter version computation for 5.x #8227
CNTRLPLANE-3174: Add unit tests for v2 CPO controller packages #8215
OCPBUGS-83538: fix(metrics-proxy): resolve ports from pods instead of deployments #8221
CNTRLPLANE-3260: fix(ci): split docs-preview into build+deploy to eliminate pwn request #8256
CNTRLPLANE-3203: Add autoscaling documentation for self-managed Azure #8239
NO-JIRA: add ENVTEST_JOBS knob for parallel envtest execution #8243
CNTRLPLANE-3260: ci: harden GitHub Actions workflows #8253
CNTRLPLANE-3214: add envtest suites for HCPEtcdBackup CRD validation #8199
CNTRLPLANE-3254: Sort how-to guides alphabetically and add CI enforcement #8248
OCPBUGS-67228: fix(shared-ingress): bump haproxy to 3.0.5-4.el10_1.1 #7370
CNTRLPLANE-3065: docs: add Agentic Software Development Life Cycle page #8235
OCPCLOUD-3347: feat(machine-approver): add TLS configuration options to deployment manifests #8019
OCPBUGS-83389: fix(supportedversion): normalize OCP 5.x versions for skew and release validation #8225
SREP-4438: refactor(karpenter): tidy Cincinnati version resolution #8206
NO-JIRA: revert: remove .git/ from .dockerignore #8201
CNTRLPLANE-3197: add release-4.22 branch to renovate configuration #8196
CNTRLPLANE-3197: update builder images from 4.22 to 4.23 #8194
CNTRLPLANE-3216: Add codecov.yml validation to make verify #8202
GCP-368: add GCP CCM v2 e2e tests #7840
CNTRLPLANE-3233: ci(gha): add release-4.22 branch to GitHub Actions workflows #8217
And 3 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-cloud-controller-manager

NO-JIRA: Update OWNERS #95
Full changelog

ibmcloud-cluster-api-controllers

NO-JIRA: Update OWNERS #156
Full changelog

ibmcloud-machine-controllers

NO-JIRA: Update OWNERS #93
Full changelog

insights-operator

CCXDEV-15561: Improve test coverage 4 #1226
Full changelog

installer-artifacts

no-jira: update to Google Cloud SDK 563.0.0 #10460
MULTIARCH-5824: PowerVS: Fix supported system types retrieval for PowerVS regions #10268
CORS-3933: Add a retry backoff for checking storage in progress #10463
SPLAT-2719: vsphere - remove HostGroup zonal feature gate checks #10497
OCPEDGE-2255: baremetal: reject SNO installation on baremetal platform #10420
OCPBUGS-78932: Improved DHCP network deletion reliability by proactively cleaning up attached network interfaces before retrying deletion #10325
OCPBUGS-83327: PowerVS: update CAPI to v0.12.2 #10488
OCPBUGS-83335: dont save CAPI secrets #10498
AGENT-1417: Add kind verification in InternalReleaseImage check #10332
Full changelog

ironic-agent

NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #246
Full changelog

machine-api-operator

NO-JIRA: Update OWNERS #1486
Full changelog

machine-config-operator

OCPBUGS-84218: Fix units rollback if update failure #5876
OCPBUGS-79425: improve JSON unmarshalling for secret decoding #5813
OCPBUGS-83401: add RootCA cert to the sysContextBuilder certs #5861
OCPBUGS-82500: ClusterHostedDNS on AWS/Azure/GCP: Modify Corefile template to better handle empty record types #5844
MCO-2201: Add Claude /migrate-tests command for MCO test migration #5837
MCO-1908: Migrate Kernel related MCO test-cases #5827
OCPBUGS-83539: Update AMI Whitelist #5851
OCPBUGS-78524: Allow enablement of systemd units with existing files #5846
OCPBUGS-82974: Make IRI registry read-only via environment variable #5845
OCPBUGS-81572: order corosync after OVS configuration on TNF clusters #5834
OCPBUGS-83517: Revert ovs increase CPU priority for Open vSwitch Forwarding Unit #5849
OCPBUGS-63152: Fail wait-for-node-ip if primary IP(s) disappear #5350
Full changelog

metallb-frr

OCPBUGS-82973: Sync 25-3-2026 #128
Full changelog

monitoring-plugin

TRACING-6030: add RouterProvider to support links in Panels #891
OU-1217: perses customizable dashboards with perses global datasources for tempo and loki #877
OU-1307: don’t fight console to setActiveNamespace #880
Full changelog

multus-networkpolicy

CNF-21001: Remove iptables compatibility commits #108
Full changelog

must-gather

MG-246: remove redundant oc inspect command and unused resources #537
Full changelog

networking-console-plugin

Update dependencies for upcoming Console 4.22 release #371
OCPBUGS-83638: CVE dependency remediation #379
Full changelog

nutanix-cloud-controller-manager

NO-JIRA: Update OWNERS #61
Full changelog

nutanix-cluster-api-controllers

NO-JIRA: Update OWNERS #9
Full changelog

nutanix-machine-controllers

NO-JIRA: Update OWNERS #136
Full changelog

oauth-apiserver

CNTRLPLANE-3226: chore: sync with openshift repositories #189
Full changelog

oauth-server

CNTRLPLANE-3226: chore: sync with openshift repositories #221
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #706
NO-ISSUE: Synchronize From Upstream Repositories #701
OPRUN-4574: UPSTREAM: <carry>: Disable upstream TLSProfile tests #702
OPRUN-4577: OTE: Simplify by remove option to configure tests to run outside of OCP #703
OPRUN-4572: Expand OTE docs with more comprehensive details #697
OCPBUGS-77972, OCPBUGS-81452: Synchronize From Upstream Repositories #696
Full changelog

openshift-apiserver

OCPBUGS-74511: remove RouteExternalCertificate feature gate #604
CNTRLPLANE-3226: Sync with openshift apiserver 4.22 kubernetes 1.34.1 #629
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #1279
Full changelog

operator-marketplace

NO-ISSUE: Bump the k8s-dependencies group across 1 directory with 3 updates #741
NO-ISSUE: Bump github.com/operator-framework/operator-lifecycle-manager from 0.41.0 to 0.42.0 #740
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-84037: OTE: tolerate missing OpenShift CRDs on MicroShift #3150
CORENET-6537: OTE: Add external container support to infra provider #2975
NO-JIRA: openshift tests: demote to informing #3131
Full changelog

powervs-block-csi-driver

MULTIARCH-6066: Rebase branch with upstream #126
Full changelog

powervs-cloud-controller-manager

OCPBUGS-83391: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.35 (e48649f) into main #83
Full changelog

prometheus-alertmanager

NO-ISSUE: Bump openshift/prometheus-alertmanager to v0.32.0 #129
NO-ISSUE: update OWNERS #130
Full changelog

prometheus-node-exporter

NO-JIRA: [bot] Bump openshift/node_exporter to v1.11.1 #177
Full changelog

rhel-coreos-10, rhel-coreos-10-extensions

OCPBUGS-82523: post-process: Remove workaround for openvswitch additional group #1926
- [release-4.21] extensions: Add rhel-9.6-server-ose-4.21 #1914
NO-JIRA: [release-4.21] extensions: Fix repo name to match 4.21 #1913
COS-3946: Backport rhel-10.2 support to release-4.21 branch #1898
NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1889
NO-JIRA: Remove (commented) WASM mentions #1888
OCPBUGS-72560: package: add ose-crio-credential-provider #1880
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

service-ca-operator

NO-JIRA: controller/servingcerts: Align log verbosity #323
Full changelog

tests

OCPBUGS-82072, OCPBUGS-82077: fix: skip unused tests for two node #30998
OCPBUGS-82144: Remove EnsureMemberRemoved from graceful shutdown test #30981
OCPEDGE-2381: Validate no WAL corruption when both nodes shutdown gracefully #30925
SPLAT-2562: Added VVCDO OTE binary to extensionBinary list #31014
NO-JIRA: harden watch loop to prevent thread exhaustion #30956
OCPBUGS-84244: cache kube client instance #30997
OCPBUGS-83281: Fix Gateway cleanup in parallel e2e test workers #31023
OCPBUGS-84237: skip on BM which has insufficient host #31002
OCPBUGS-83405: remove unnecessary exceptions from monitoring test #30924
NO-ISSUE: baremetal: update OWNERS #31055
OTA-1977: Skip test case updateLifecycle if the worker pool is paused #31040
OCPBUGS-82160: Skip image-registry operator tests for Libvirt platform in upgrade jobs. #31001
OCPEDGE-2284: Rename two_node directory to edge_topologies #30623
OCPBUGS-83402: Bump oc request-timeout to deflake tests #31008
OCPBUGS-82304: Add sleep to give cvo time to reconcile #30988
OCPBUGS-63307: Move imagepolicy test to disruptive long-running suite #31043
NO-JIRA: OVNK BGP: allow max unavailability for NNCPs on VRF-Lite test case #31037
OCPBUGS-83801: skip serial and disruptive cases from suite #31042
TRT-2635: coderabbit: enable request changes workflow #31047
TRT-2084: terminationmessagepolicy: correctly fail on violations #30993
OCPBUGS-84036: CNTRLPLANE-2751:Adding e2e network policy cases for config-operator #30995
OCPEDGE-2510: fix(two-node): bump node replacement timeouts for new node installer pods #31005
OCPBUGS-81476: Fix timeout in PinnedImages GC test #30962
OCPBUGS-63307: honor firstTimestamp annotation value #31021
no-jira: test/monitoring: increase load balancer readiness and curl connection timeout #30994
NO-JIRA: Fix UpgradeTargetPayloadImagePullSpec #31025
OCPSTRAT-3082: TLS propagation test #30801
NO-JIRA: OVNK BGP: improve debug and increase NNCP timeout for VRF-Lite test case #31022
OCPBUGS-83286: Fix case-sensitive error matching in Whereabouts IP allocation test #31012
OCPBUGS-83267: Use upgrades.Skippable for Gateway API upgrade test skip logic #31000
OCPEDGE-2381: Add test to verify for backup container exists when etcd crashes #30922
STOR-2807: Add e2e test to verify CSI driver operators use service CA signed certificates #30980
OCPEDGE-2381: Verify etc pod should start with oom_score_adj as system-node-critical #30982
Full changelog

vsphere-cloud-controller-manager

NO-JIRA: Update OWNERS #119
Full changelog

vsphere-cluster-api-controllers

NO-JIRA: Update OWNERS #96
Full changelog

vsphere-csi-driver-operator

SPLAT-2562: Created OTE extension with tests for hybrid env #335
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 16)

View changelog in Markdown or change previous release:

Source code for this page located on github