5.0.0-0.nightly-2026-05-02-230249

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release-5:5.0.0-0.nightly-2026-05-02-230249

Team Approvals:

Tests:

Blocking jobs
- aggregated-aws-ovn-single-node-upgrade-5.0-micro Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-aws-upgrade-ovn-single-node
- aggregated-aws-ovn-upgrade-5.0-micro-fips Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-upgrade-fips
- aggregated-azure-ovn-upgrade-5.0-micro Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-azure-ovn-upgrade
- aggregated-gcp-ovn-rt-upgrade-5.0-major Succeeded periodic-ci-openshift-release-main-ci-5.0-upgrade-from-stable-4.22-e2e-gcp-ovn-rt-upgrade
- aggregated-hypershift-ovn-conformance-5.0 Succeeded periodic-ci-openshift-hypershift-release-5.0-periodics-e2e-aws-ovn-conformance
- aws-ovn-serial-1of2 Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-serial-1of2
- aws-ovn-serial-2of2 Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-serial-2of2
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-aws-ovn-techpreview
- aws-ovn-techpreview-serial-1of3 Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-aws-ovn-techpreview-serial-1of3
- aws-ovn-techpreview-serial-2of3 Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-aws-ovn-techpreview-serial-2of3
- aws-ovn-techpreview-serial-3of3 Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-aws-ovn-techpreview-serial-3of3
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-5.0-fips-payload-scan
- install-analysis-all Succeeded periodic-ci-openshift-release-main-nightly-5.0-install-analysis-all
- metal-ipi-ovn-ipv4 Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ipi-ovn-ipv4
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ipi-ovn-ipv6
- overall-analysis-all Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-5.0-overall-analysis-all
  - Attempt 1 Failed
  - Attempt 2 Succeeded
Informing jobs
- aggregated-hypershift-aks-conformance-5.0 Succeeded periodic-ci-openshift-hypershift-release-5.0-periodics-e2e-azure-aks-ovn-conformance
- aws-console Failed periodic-ci-openshift-release-main-nightly-5.0-console-aws
- aws-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-5.0-periodics-e2e-aws
- aws-csi Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-csi
- aws-ovn Failed periodic-ci-openshift-release-main-ci-5.0-e2e-aws-ovn
- aws-ovn-cgroupsv2 Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-cgroupsv2
- aws-ovn-fips Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-fips
- aws-ovn-single-node Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-single-node
- aws-ovn-single-node-csi Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-single-node-csi
- aws-ovn-single-node-serial Failed periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-single-node-serial
- aws-ovn-single-node-techpreview Failed periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-single-node-techpreview
- aws-ovn-single-node-techpreview-serial Failed periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-single-node-techpreview-serial
- aws-ovn-single-node-upgrade-major Succeeded periodic-ci-openshift-release-main-nightly-5.0-upgrade-from-stable-4.22-e2e-aws-upgrade-ovn-single-node
- aws-ovn-upgrade-5.0-micro-fips-no-nat-instance Failed periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-upgrade-fips-no-nat-instance
- aws-ovn-upgrade-out-of-change Failed periodic-ci-openshift-release-main-ci-5.0-e2e-aws-ovn-upgrade-out-of-change
- aws-upi Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-upi
- azure-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-5.0-periodics-e2e-azure
- azure-csi Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-azure-csi
- azure-ovn Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-azure-ovn
- azure-ovn-serial Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-azure-ovn-serial
- azure-ovn-techpreview Failed periodic-ci-openshift-release-main-ci-5.0-e2e-azure-ovn-techpreview
- azure-ovn-techpreview-serial Failed periodic-ci-openshift-release-main-ci-5.0-e2e-azure-ovn-techpreview-serial
- azure-ovn-upgrade-out-of-change Failed periodic-ci-openshift-release-main-ci-5.0-e2e-azure-ovn-upgrade-out-of-change
- cnv Failed periodic-ci-openshift-release-main-cnv-nightly-5.0-deploy-azure-kubevirt-ovn
- driver-toolkit Failed (2 retries) periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-driver-toolkit
- gcp-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-5.0-periodics-e2e-gcp
- gcp-ovn Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-gcp-ovn
- gcp-ovn-csi Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-gcp-ovn-csi
- gcp-ovn-rt Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-gcp-ovn-rt
- gcp-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-gcp-ovn-serial
- gcp-ovn-techpreview Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-gcp-ovn-techpreview
- gcp-ovn-techpreview-serial Failed periodic-ci-openshift-release-main-ci-5.0-e2e-gcp-ovn-techpreview-serial
- gcp-ovn-upgrade-5.0-major Failed periodic-ci-openshift-release-main-ci-5.0-upgrade-from-stable-4.22-e2e-gcp-ovn-upgrade
- gcp-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-gcp-ovn-upgrade
- hypershift-kubevirt-ovn-conformance-5.0 Failed periodic-ci-openshift-hypershift-release-5.0-periodics-e2e-azure-kubevirt-ovn
- metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ipi-ovn-dualstack
- metal-ipi-ovn-dualstack-techpreview Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ipi-ovn-dualstack-techpreview
- metal-ipi-ovn-ipv6-techpreview Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ipi-ovn-ipv6-techpreview
- metal-ipi-ovn-serial Failed periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ipi-ovn-serial-ipv4
- metal-ipi-ovn-serial-virtualmedia-1of2 Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ipi-ovn-serial-virtualmedia-1of2
- metal-ipi-ovn-serial-virtualmedia-2of2 Failed periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ipi-ovn-serial-virtualmedia-2of2
- metal-ipi-ovn-techpreview Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ipi-ovn-techpreview
- metal-ipi-ovn-upgrade Failed periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ipi-ovn-upgrade
- metal-ipi-ovn-upgrade-major Succeeded periodic-ci-openshift-release-main-nightly-5.0-upgrade-from-stable-4.22-e2e-metal-ipi-ovn-upgrade
- metal-ipi-serial-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ipi-serial-ovn-ipv6
- metal-ipi-serial-ovn-dualstack Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ipi-serial-ovn-dualstack
- metal-ipi-upgrade-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ipi-upgrade-ovn-ipv6
- metal-ipi-upgrade-ovn-ipv6-major Succeeded periodic-ci-openshift-release-main-nightly-5.0-upgrade-from-stable-4.22-e2e-metal-ipi-upgrade-ovn-ipv6
- metal-ovn-single-node-recert-cluster-rename Failed periodic-ci-openshift-release-main-nightly-5.0-metal-ovn-single-node-recert-cluster-rename
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-5.0-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-5.0-periodics-e2e-aws-ovn-ocp-conformance-serial
- openshift-dedicated-gcp-conformance Failed periodic-ci-openshift-release-main-nightly-5.0-e2e-osd-ccs-gcp
- ovn-proxy Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-aws-ovn-proxy
- ovn-single-node-live-iso Failed periodic-ci-openshift-release-main-nightly-5.0-e2e-metal-ovn-single-node-live-iso
- qe-perfscale Succeeded periodic-ci-openshift-eng-ocp-qe-perfscale-ci-main-aws-5.0-nightly-x86-payload-control-plane-6nodes
- rosa-classic-sts-conformance Failed (1 retry) periodic-ci-openshift-release-main-nightly-5.0-e2e-rosa-sts-ovn
  - Attempt 1 Failed
  - Attempt 2 Failed
- telco5g Failed periodic-ci-openshift-release-main-nightly-5.0-e2e-telco5g
- telcov10n-metal-single-node-spoke Failed periodic-ci-openshift-kni-eco-ci-cd-main-nightly-5.0-telcov10n-metal-single-node-spoke
- telcov10n-metal-single-node-spoke-kpis Failed periodic-ci-openshift-kni-eco-ci-cd-main-nightly-5.0-telcov10n-metal-single-node-spoke-kpis
- upgrade-analysis-all Failed (2 retries) periodic-ci-openshift-release-main-nightly-5.0-upgrade-analysis-all
- vsphere-ovn Failed periodic-ci-openshift-release-main-nightly-5.0-e2e-vsphere-ovn
- vsphere-ovn-csi Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-vsphere-ovn-csi
- vsphere-ovn-serial Failed periodic-ci-openshift-release-main-nightly-5.0-e2e-vsphere-ovn-serial
- vsphere-ovn-techpreview Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-vsphere-ovn-techpreview
- vsphere-ovn-techpreview-serial Failed periodic-ci-openshift-release-main-nightly-5.0-e2e-vsphere-ovn-techpreview-serial
- vsphere-ovn-upgrade-major Failed periodic-ci-openshift-release-main-ci-5.0-upgrade-from-stable-4.22-e2e-vsphere-ovn-upgrade
- vsphere-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-5.0-e2e-vsphere-ovn-upgrade
- vsphere-ovn-upi Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-vsphere-ovn-upi
- vsphere-ovn-upi-serial Failed periodic-ci-openshift-release-main-nightly-5.0-e2e-vsphere-ovn-upi-serial
- vsphere-static-ovn Succeeded periodic-ci-openshift-release-main-nightly-5.0-e2e-vsphere-static-ovn
Async jobs
- claude-payload-agent Succeeded periodic-ci-openshift-release-main-claude-payload-agent

Upgrades from:

5.0.0-0.nightly-2026-04-30-083209 (changes) - S S S F F S S F F S
4.22.0-0.nightly-2026-05-02-122653 - S F F S S S

Upgrades to:

5.0.0-0.nightly-2026-05-03-052816 (changes) - S S S S S F S S S S

Loading changelog, this may take a while ...

Changes from 4.22.0-0.nightly-2026-05-02-122653

Created: 2026-05-02 23:04:48 +0000 UTC

Image Digest: sha256:e56ee31394c242c84ed7684fa44cf1915fb02d53f8f1ecdbaba5588fba729c2c

Components

Kubectl 1.35.2
Kubernetes upgraded from 1.35.4 to 1.35.3
Kubernetes Tests 1.35.1
Red Hat Enterprise Linux CoreOS 10.2.20260423-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
ConsolePluginContentSecurityPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DRAPartitionableDevices (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
KMSEncryptionProvider (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
UserNamespacesPodSecurityStandards (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
UserNamespacesSupport (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
OpenShiftPodSecurityAdmission (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled

Rebuilt images without code change

agent-installer-api-server git aed50cb7 sha256:bea0a672917863b66bb5eaf97954e949a60884993c2fe5ee304c783ca21b7884
apiserver-network-proxy git 5e33c228 sha256:548f34bc559b3bbe36656c213204a7027398c86532f223af15644b4967a21076
aws-ebs-csi-driver git 0927af1c sha256:0270ca7d52d1a9d4e60577ac8aebb0dd8857342921ee7b5d8ba46c7badc9f57c
aws-karpenter-provider-aws git f0be9c72 sha256:e7e2be7ed5b0eab11c1144b970421a80f931aa60245f40a60ea6146db6aaead1
aws-kms-encryption-provider git 19e7b623 sha256:b173a96a70cc66244995bca5e1649781d63443121cf7c11be1b0fbd39e00dd6b
aws-node-termination-handler git 341ed3a0 sha256:4efb0f31eae953ced06e346ce543370492febfedb946c3e9cb6b11a70ad72c7b
aws-pod-identity-webhook git 82088287 sha256:8d03e76c8095cf17e99624ad245a1c7c46e5ae671f5ac54de2618d2896389875
azure-kms-encryption-provider git 99b9a3a3 sha256:c692c806bdaed5e5b2d1d0b931fcb40c6adfd666c339d37a2c0cb93d12a89ce8
baremetal-machine-controllers git 8d863b95 sha256:59ca9366ce02d24548d9fad9907e5c23285e25fb500a30cead0edfcee1289846
baremetal-operator git c5e50489 sha256:2b0b887da57621d6678a3d9ac46cf6e3d376a8074be28860c1910c85de8330de
baremetal-runtimecfg git dca8cb1b sha256:bb2d66e0162800e01135749675c534b661a46c5104eb2a62be3def3b9e84ec72
cloud-network-config-controller git 2d69ad95 sha256:4be15d1b80be75bbf69bcf711323f0e55bb65433fe2ad40bb5d9ddfe50f6f734
cluster-autoscaler-operator git 260ea1b5 sha256:f811553b9f9b28f515d2e861563fa312a4a418289e51ac45dfa7c9028c50e40b
cluster-csi-snapshot-controller-operator git 108f37f0 sha256:eb6329a9fd818c105e20b8d60c6a961a6030ea5f5c7192c74e558a625210b751
cluster-dns-operator git 3d214118 sha256:cdc1f0a4006a0b714ae8ebc68dd7e37697fa697966305e5fd7f2f3ecf7ed762b
cluster-node-tuning-operator git 3d98f7ee sha256:40b30ac47beee0964f737d930f2bb5aef702e11b584abc5d88e05c93c388d08e
cluster-olm-operator git d131450b sha256:83dc0726d3437ed49981b0577b9c1518488eb4d8e4171fd647467b9070bcec0e
cluster-storage-operator git 8dfdf2ef sha256:cb82f32206c1636b5c690fe4304b177f32b78c283ab334b994e94bf77ef5e954
cluster-update-keys git 3b5c59cc sha256:0e88c143e969be4828b5306693f5b6c276a16fef4ad192d4a09ec55f20761924
configmap-reloader git 94e41c4c sha256:6a1b4a10ea24c645ffce5f5beb9fd9d98b997da7363e62290daf89a998cd8d64
container-networking-plugins git 747ad66c sha256:61a2a68cb7f259e3a57e95ca75e7f91d3d34d24eeda1b5310403901fd3784e65
containernetworking-plugins-microshift git 747ad66c sha256:12943ba669bad24ae74176906654bd96b46827714f7e0bb46db338d920215ede
coredns git 0dded2d2 sha256:304935bdd611c30672df711b3a2ef97166a103adbf8b001cdf5e4f4522da5271
csi-external-attacher git 98b1f4ac sha256:2a9e42e8c60b2715691d1f4d37439bce4af483c5ede267b89a7c0a418fc86cbd
csi-external-provisioner git f90c06a3 sha256:0cf9ae6248c707122a8874c76dcf1b1d150cbe9ec78a1a3f9799f26a41c9d007
csi-external-resizer git 4e74a4aa sha256:7cd283900c4eb3571e64a15043181d67811d4389520c0f5f238e28b9b0441b29
csi-external-snapshot-metadata git 76523185 sha256:69aa064b64c2c73b174b67436db915bf6cca05396f05a1f906f42161acac71a1
csi-external-snapshotter git d1bc3ffa sha256:a361c27879faf85a4e8bfa098d595caa0a44d6fe4fc71405bf0e3246f2490499
csi-livenessprobe git 4d5e959a sha256:1e334e899e20932cd5527a2d7d15543532072c23bbdf58af7b87c604b72c8141
csi-node-driver-registrar git cf174b30 sha256:6ffd9ac55faf1d36397812208dd73a0316c5496505e8958e03995859d5966b93
csi-snapshot-controller git d1bc3ffa sha256:2fb9d63f94d6f17f4ddd326d2dd8f78b041b8001747117919eb87e30a6a150f4
docker-builder git fcd4ce2d sha256:8dfbb334c5b7ebed3d71a2b19d8ad6b7567be65e7f75c3a305534a40ce547153
driver-toolkit git 7aa4007a sha256:c55e786beac7b6ce41d7adb857570675256509da6dc9b0ba3d9a426fd42cce55
etcd git d8d67b8c sha256:6882d74201420e837a156e304e218221df55703e4b5931250430c81a52a6c44a
gcp-pd-csi-driver git 2ba11740 sha256:1890be747b8f99fb64f5df977ee79305132383ebecc1100db87cacb19d1f399b
gcp-workload-identity-federation-webhook git d7675f31 sha256:b039fdbdb890630224fa228a275cd4ab830cc0945cb50cd1d1877ef3aefb26d1
haproxy-router git 89639077 sha256:0c4e07ac6991dc2a181f9d145b69901544bef228436bab5bdf90d0bc60c8408b
ibm-vpc-block-csi-driver git aa40cd7e sha256:b882f8baf0e368166576ba9afd028630ad45c0f63b2044245a0f2b287f23dc30
ibm-vpc-block-csi-driver-operator git f859eac9 sha256:29a7bf99db825ec621f518385e7dafaf1f9931abd85e540dd79e5304ca01c907
insights-runtime-exporter git 70256457 sha256:9ca9fef9a52f7284d9ad3aa18c2a4743f478259ef6445896311cb10e5fa2420e
insights-runtime-extractor git 70256457 sha256:f5fe471b62dd86e59845e28b4d976041f83243f1348c0d1662d50daa3e7aaa5c
ironic-machine-os-downloader git 9953d2b7 sha256:6689addbdd145ce908c5dbf668b29747f478e306277f4073344dcd8b6a79c23d
ironic-static-ip-manager git a379d09f sha256:f5a8ccecd7cc6f9636b5178f4af24d9ade1fb99cb003aa0551842c85f13d7709
keepalived-ipfailover git edb8b1e6 sha256:71afe9e3e96ffb2c3630b6d00beefe35d99e355ca794d05641e9c244aa6ed3cc
kube-metrics-server git 38c16c46 sha256:90f7ef34a1e55b1d214f2e6f974e8e27082ee32acdf4a4fe6102373bed2bc3a2
kube-rbac-proxy git d12e2746 sha256:3482ea3d2b8dce334f07b89086fdb06543d1a1680b4e71f937fbd13a171c42cf
kube-state-metrics git 6fa06eac sha256:43610b326845b29d121161a4c05f399eed4b2821672b579790299e840a994d70
kube-storage-version-migrator git 72835e43 sha256:911294b777071f4ea325c43364f31efd303d3316a5049f1e8071c8b976da3c09
kubevirt-cloud-controller-manager git 76dd5a6f sha256:064c4019efdcf572ea6159ccee1f5b242b2867d7233fdc2fcec2f20987f7847b
kubevirt-csi-driver git 771b562d sha256:c30ea417cbc4af504bae9818978f10c482b17996e885cb762b8ace5def9492d2
machine-image-customization-controller git a43d9c97 sha256:7d42ade9b81f134c123de8be39d25145f862718d942f7741ed661e684ef82fb5
multus-admission-controller git 16ba7ef8 sha256:6b9ff0095899d5c9f0b2dcbaafa8becbc229216648dea6ca1dcda8c20a3e9818
multus-cni git b4ec7d82 sha256:ad8b841522e48c7a8f53f143cc09c442ca4793c799a4712a23188666071e6785
multus-cni-microshift git b4ec7d82 sha256:9e3d2bea43fd760020304e1b77e4d8b22c1effb0c575bb00efda8ce4c73f0ead
multus-route-override-cni git 08af4127 sha256:e39edc3499dc334e1af098c0270da1503b6b5f2ed9ebb3f4afdff6550e422d2b
multus-whereabouts-ipam-cni git d691040e sha256:8566359c8e33a08b45829ab978b8719ac9df460bccc63bcca6b77627c0addb01
network-interface-bond-cni git 297eeb43 sha256:3c26abf710f2affe43675e089d9b2beed6481a31e8129fdf0e39ed18404a54e7
network-metrics-daemon git 5b233ea1 sha256:1c11d29c7c6de458959ac2c66235cdc991e498ad1b14db0433bc778ca617e00a
oauth-proxy git 714292f5 sha256:cfe7ca88686d80c59f2e30ca9db5cd8f1f82f26741238b5196fc340b814d19f8
openshift-state-metrics git e71e0996 sha256:d7e7ecb26154061ce6b3dac710e3fa6fd3cdf4eac51a296f461aabbf1e7bd320
openstack-machine-api-provider git 8a8c354b sha256:401ef9560f94328387cc6776d95c44f351f5ade86f64846cd17870af2d3b5e00
openstack-resource-controller git cbea7a9c sha256:114423647910155812af606dd45eef50b268fd2b82ff9f1798c899d6ae7d9adb
powervs-machine-controllers git e88cf81d sha256:6a15ea6c9627d8172b69a941119596a759280824795d4aef40d9e3bcdf0e49a9
prometheus git e1e35591 sha256:4e8126a8c699d0c93f816109c080f48df46e7334c1458ed01c5e5e4af55f603f
prometheus-config-reloader git 70e38466 sha256:abba5fd8cc4f393ad8488e946cc2016e912a55fcfbe48fd151401bb4e15caa19
prometheus-operator git 70e38466 sha256:36efc75bccd45de7841453b22722b1aab1aebd0ca5339191eebb593ad5c3f1bd
prometheus-operator-admission-webhook git 70e38466 sha256:6165ebc0d4cf0682dd984d972375452ee2b18d414bb2be9911d6f4184624b1f2
rhel-coreos git f41264dc sha256:30a76754d0dadbf30093d12a1d1265e6c29a2851280766fb84e188dc1789d6bc
rhel-coreos-extensions git f41264dc sha256:0eafa1bd4ef6e1e230b0205b4c70093851fa4eb4c5a583b59f6afdd49473ab64
route-controller-manager git 624742d9 sha256:72ed11cb8e060fb72035eed538d7e3a7ca064a8ba19787166a146434f479f4d7
telemeter git d6c7dd49 sha256:2d4c2a545c35488c5f36aaaa026f3cb6306b0bfafbc6c142f26f30245bf444d1
thanos git 5d9d0f38 sha256:9442da91f31456bb484bc4137c39598117049fb30592e8e4e3bd1a83ef82d41c
volume-data-source-validator git 8e176cec sha256:b2495c4a76296d2c3d4746d81ff3149e2346ca4ecd0b9c2318f79b0131227c09
vsphere-csi-driver git cf21e121 sha256:8ddb1d1c1feb09491c120995c564c416b24c145327be2b65fa129b9f29f9e44d
vsphere-csi-driver-syncer git cf21e121 sha256:556ce1fe9b505c1afc980bb9f269bc8c17c8be632598b51a9f8b1eda3f7aca81
vsphere-problem-detector git 842aed3d sha256:aef2839e1950a8fc010c26a20d768da04fe2a189bff62cc7d69b3385087263cf

agent-installer-csr-approver, agent-installer-orchestrator

MGMT-23784: CVE-2026-34986 Bump github.com/go-jose/go-jose/v3 to v3.0.5 using replace directive #2121
NO-ISSUE: Modify Konflux YAMLs to backplane-5.0 #2119
ACM-33186: Revert Renovate configuration for Hive updates #2107
NO-ISSUE: upgrade go.opentelemetry.io/otel/sdk to … #2097
MGMT-23789: CVE-2026-34986 Bump github.com/go-jose/go-jose/v4 to v4.1.4 through indirect dependency conversion #2081
Full changelog

agent-installer-node-agent

NO-ISSUE: Modify Konflux YAMLs to backplane-5.0 #1431
ACM-31642: fix CVE-2026-33186 #1417
OCPBUGS-63472: add –copy-network when manual network config is detected #1374
MGMT-23790: CVE-2026-34986 Bump github.com/go-jose/go-jose/v4 to v4.1.4 through indirect dependency conversion #1404
NO-ISSUE: Refactor flag Parsing to avoid multiple calls #1401
NO-ISSUE: Refresh RPM lockfiles #1389
MGMT-23300: Ensure /boot dir has enough space during reclaim #1316
Full changelog

agent-installer-ui

chore(deps): update dependency @reduxjs/toolkit to ^1.9.7 (#3647) #3647
chore(deps): update dependency axios to ^1.15.2 (#3648) #3648
MGMT-24152: UI allows editing pull secret in draft cluster (#3662) #3662
Remove 2 node arbiter option from the control plane dropdown option (#3644) #3644
Bump postcss from 8.5.6 to 8.5.10 (#3641) #3641
Update OWNERS file (#3643) #3643
chore(deps): update konflux references (#3640) #3640
chore(config): migrate config renovate.json (#3639) #3639
MGMT-23800: Upgrade Vite (#3589) #3589
chore(deps): update dependency msw to v2.13.5 (#3587) #3587
chore(deps): update dependency @vitejs/plugin-react-swc to v4 (#3553) #3553
chore(deps): update dependency happy-dom to v20.9.0 (#3591) #3591
Add renovate.json (#3637) #3637
chore(deps): update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.25.8-1776962329 (#3588) #3588
chore(deps): update dependency @redhat-cloud-services/eslint-config-redhat-cloud-services to v3.1.0 (#3577) #3577
chore(deps): update dependency @types/uuid to v11 (#3544) #3544
chore(deps): update yarn to v3.8.7 (#3495) #3495
Add cursor rules for imports (#3595) #3595
NO-ISSUE: Cursor rules for comments and variables (#3592) #3592
Add CLAUDE.md (#3632) #3632
Bump uuid from 8.3.2 to 14.0.0 (#3629) #3629
Bump follow-redirects from 1.15.11 to 1.16.0 (#3586) #3586
ACM-30344: ACM Console should support ClusterImageSets with by-digest pullspecs (#3609) #3609
Allow to install SNO topology (#3578) #3578
Support third party CNI in CIM (#3600) #3600
Fix Cisco Intersight editing (#3523) #3523
Pull secret appears editable in draft cluster but changes are not applied (#3597) #3597
fix operators list in ABI below the sea (#3590) #3590
MGMT-23913: Missing breadcrumbs in on-prem Assisted Installer (#3598) #3598
Update build-tools (#3593) #3593
Upgrade lodash to 4.18.1 (#3566) #3566
Bump basic-ftp from 5.2.1 to 5.3.0 (#3594) #3594
OCPBUGS-83428: bump axios to ^1.15.0 for fixing CVE-2026-40175 (#3585) #3585
chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.3.1 (#3568) #3568
chore(deps): update dependency @redhat-cloud-services/tsc-transform-imports to v1.0.58 (#3570) #3570
chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.8.4 (#3569) #3569
MGMT-23090: Support single stack IPv6 (#3414) #3414
NO-ISSUE: Remove orphan files (#3460) #3460
MGMT-23328: remove breadcrumbs for OCM and use logo as a link (#3510) #3510
NO-ISSUE: Update translation files to match new i18next format (#3567) #3567
Full changelog

agent-installer-utils

AGENT-1476: Configure CI integration and add Prow e2e test to Konflux #245
AGENT-1193: Add mirror-path and registry-cert support for OVE ISO builder #218
OCPBUGS-83575: Remove Konflux cert-preflight test #290
NO-JIRA: Add 4.23 appliance-config #289
NO-JIRA: Add 5.0 appliance-config.yaml for iso_builder #288
Full changelog

aws-cloud-controller-manager

NO-JIRA: Update OWNERS #145
Full changelog

aws-cluster-api-controllers

NO-JIRA: Update manifests generator #604
UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.11.1 (eaa4c99) into main #602
UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.11.0 (815a1b0) into main #600
NO-JIRA: Update OWNERS #599
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OSASINFRA-3675: Rework authentication in Manila CSI Driver Operator #373
OCPBUGS-80930: Add VolumeAttributesClass e2e test manifests for Azure disk #538
Full changelog

aws-machine-controllers

SPLAT-2715: Fixed broken test and simplified some logic #182
NO-JIRA: Update OWNERS #183
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

NO-JIRA: Update OWNERS #174
Full changelog

azure-cluster-api-controllers

NO-JIRA: Update manifests generator #382
OCPBUGS-84694: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.23.1 (dbeb413) into main #380
NO-JIRA: Update OWNERS #376
Full changelog

azure-disk-csi-driver

UPSTREAM: 3569: OCPBUGS-83733: Bump grpc to v1.79.3 #135
Full changelog

azure-file-csi-driver

UPSTREAM: 3023: OCPBUGS-83329: Bump grpc to v1.79.3 #124
Full changelog

azure-machine-controllers

NO-JIRA: Update OWNERS #190
Full changelog

azure-service-operator

OCPBUGS-83613: Bump grpc package for CVE fix #21
OCPBUGS-69898: Updating ose-azure-service-operator-container image to be consistent with ART for 4.22 #16
NO-JIRA: UPSTREAM: <carry>: add openshift/e2e-tests.sh #22
NO-JIRA: Update OWNERS #20
Full changelog

azure-workload-identity-webhook

OCPBUGS-84709: github.com/go-jose/go-jose/v4 v4.1.4 #46
Full changelog

baremetal-cluster-api-controllers

NO-JIRA: Update manifests generator #75
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-84335: vSphere - Missing unit tests to cover polarion workitems #10516
OCPBUGS-84548: add unit tests for Nutanix to replace polarion workitems #10520
no-jira: update to Google Cloud SDK 563.0.0 #10460
MULTIARCH-5824: PowerVS: Fix supported system types retrieval for PowerVS regions #10268
CORS-3933: Add a retry backoff for checking storage in progress #10463
SPLAT-2719: vsphere - remove HostGroup zonal feature gate checks #10497
OCPEDGE-2255: baremetal: reject SNO installation on baremetal platform #10420
OCPBUGS-78932: Improved DHCP network deletion reliability by proactively cleaning up attached network interfaces before retrying deletion #10325
OCPBUGS-83327: PowerVS: update CAPI to v0.12.2 #10488
OCPBUGS-83335: dont save CAPI secrets #10498
AGENT-1417: Add kind verification in InternalReleaseImage check #10332
Full changelog

cli, cli-artifacts, deployer, tools

OTA-1817: Adding unit tests for the extend recommended alerts #2262
OCPBUGS-78768: Skip filter validation for RFC2307 group query when groupUIDAttribute is “dn” #2259
RFE-3594: Add group membership info #2255
NO-JIRA: claude: Change learn-* agents into skills #2257
NO-JIRA: claude: Improve AGENTS.md and add agents for storing project knowledge #2251
Full changelog

cloud-credential-operator

OCPBUGS-84712: github.com/aws/aws-sdk-go-v2/service/s3 v1.97.3 #1021
OCPBUGS-84043: go.opentelemetry.io/otel v1.43.0 #1011
OCPBUGS-84044: github.com/go-jose/go-jose/v4 v4.1.4 #1012
OCPBUGS-83449: test-ext: hypershift skip CCO metrics endpoint validation #1010
Full changelog

cluster-authentication-operator

NO-JIRA: Update library-go for latest changes #873
CNTRLPLANE-2523: deploy oauth-apiserver in new OIDC mode when authentication type is OIDC #858
NO-JIRA: Add control-plane-approvers to OWNERS #871
Full changelog

cluster-autoscaler

OCPBUGS-84130: UPSTREAM: 9458: fix(clusterapi): use kind-aware version discovery for infra references #418
Full changelog

cluster-baremetal-operator

OCPBUGS-82531: Bind the plain HTTP 8080 metrics port to localhost #586
OCPBUGS-83612: Fix image-cache to use HTTPS for metal3-state downloads #592
Full changelog

cluster-bootstrap

NO-JIRA: Add control-plane-approvers to OWNERS #127
Full changelog

cluster-capi-controllers

NO-JIRA: Update manifests generator #287
UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api:v1.12.7 (b5fa593) into master #286
OCPCLOUD-3419: Adopt IPAM CRDs on upgrade #274
OCPBUGS-83513: Merge https://github.com/kubernetes-sigs/cluster-api:v1.12.5 (efc7142) into master #275
NO-JIRA: Update OWNERS #278
Full changelog

cluster-capi-operator

NO-JIRA: bump controller-runtime-common to latest main #540
NO-JIRA: Updates gemini powered skills / agents #542
NO-JIRA: manifests-gen: set scc annotation in providers Deployments spec #524
NO-JIRA: Adds deep review skill #541
NO-JIRA: fix: re-enable setting/diffing httpProtocolIpv6, CAPA now supports it #537
NO-JIRA: fix: conversion: handle HTTPProtocolIPv6, temporarily disable its diffing #531
OCPBUGS-84378: Refactor e2e newAWSMachineTemplate to use mapi2capi #532
OCPBUGS-84340: Fix e2e flake when workers are in us-west-2b #529
NO-JIRA: fix: tolerate not-found upon infra machine deletion #528
NO-JIRA: Update e2e diagnostics #488
OCPCLOUD-3345, OCPCLOUD-3359: Add support for TLS envsubst substitution #519
OCPBUGS-83601: Bump grpc package for CVE fix #523
NO-JIRA: Fix crdcompatibility flakes after webhook creation #525
NO-JIRA: Update OWNERS #522
Full changelog

cluster-cloud-controller-manager-operator

NO-JIRA: fix: add pod annotation: openshift.io/required-scc: hostaccess #450
NO-JIRA: bump controller-runtime-common to latest main #456
SPLAT-2562: Refactored OTE and added new 3CMO OTE binary #446
OCPBUGS-83399: e2e/ote/ccm-aws fix hairpin traffic on NLB and CLB in EUSC #449
NO-JIRA: Update OWNERS #448
Full changelog

cluster-config-api

OCPNODE-4498: features: drop DRAPartitionableDevices awareness #2828
OCPBUGS-43353: Add pattern validation for registry entries in image config #2787
SPLAT-2649: Added vSphere Day 2 logic to CRDs #2784
OCPBUGS-74506: Remove ConsolePluginSecurityPolicy featuregate #2683
CNTRLPLANE-2711: add vault kms plug configuration api #2805
OCPBUGS-74525: OCPBUGS-74526: Remove UserNamespacesPodSecurityStandards and UserNamespacesSupport #2762
OCPBUGS-82584: Add labelSelector to MachineSet status for scale subresource #2807
OCPBUGS-83754: fix(config/v1): define constants for authentication types as typed constants #2814
OCPBUGS-83492: Allow :ref suffix in additionalLayerStores path for stargz-store to support lazy image pulling #2806
MON-4037: Add MonitoringPluginConfig to ClusterMonitoring API #2768
fix: small typos in comments in types.go #2804
OCPBUGS-82292: extend supported values for MCN IRI image status field #2800
MON-4036: Add NodeExporterConfig to ClusterMonitoring API #2744
OCPCLOUD-3359: Add component names, manifestSubstitutions, and observedGeneration to CAPI revisions #2786
Full changelog

cluster-config-operator

CNTRLPLANE-1544: manifests: Use restricted-v3 scc for deployment #451
Full changelog

cluster-control-plane-machine-set-operator

NO-JIRA: bump controller-runtime-common to latest main #403
NO-JIRA: Update OWNERS #399
Full changelog

cluster-etcd-operator

NO-JIRA: separate grpc from http server #1598
NO-JIRA: fix CI failure #1599
NO-JIRA: Refactor render test validation #1597
NO-JIRA: Add control-plane-approvers to OWNERS #1594
Full changelog

cluster-image-registry-operator

OCPBUGS-63691: replace node-ca shell script with go implementation #1325
IR-486: use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs #1326
NO-JIRA: Add control-plane-approvers to OWNERS #1324
OCPBUGS-83282: Allow longer window before going Degraded #1318
CNTRLPLANE-2660: e2e testing automation: Image Registry network policy #1320
OCPBUGS-66225: ImageConfigController: add inertia before ImageConfigC… #1319
Full changelog

cluster-ingress-operator

OCPBUGS-84551: isFIPSEnabled: Check FIPS_ENABLED env. var. first #1427
OCPBUGS-54702: change default timeout tunnel if using AWS NLB #1349
OCPBUGS-81192: Fix race condition in internal-to-external LB migration test #1407
NE-2390: Adding AGENTS.md file #1341
OCPBUGS-25739: Fix PDB MaxUnavailable for 2-replica ingress controllers #1380
Full changelog

cluster-kube-apiserver-operator

NO-JIRA: Removal of unuse suites #2132
OCPBUGS-76588: operator should not override authentication config serviceAccountIssuer with the default one during the operator initialization #2062
CNTRLPLANE-3327: Migrate TestEncryptionTypeAESCBC to OTE #2122
NO-JIRA: Add control-plane-approvers to OWNERS #2110
CNTRLPLANE-3326: Remove unstable TestBoundTokenOperatorSecretDeletion #2123
NO-JIRA: Update library-go changes #2107
OCPBUGS-79663: Allow setting the oauthMetadata when auth type is None #2105
CNTRLPLANE-3228: Implement 5.0 EUS schedule in KAS-O #2101
CNTRLPLANE-2991: Do not configure KAS with Structured Authentication when authentication type is OIDC #2075
CNTRLPLANE-2935: Enable configurable PKI for managed certificate rotation #2051
Full changelog

cluster-kube-controller-manager-operator

CNTRLPLANE-3107: e2e testing automation Create network network policy test cases #924
NO-JIRA: Add control-plane-approvers to OWNERS #926
Full changelog

cluster-kube-scheduler-operator

NO-JIRA: Add control-plane-approvers to OWNERS #639
OCPBUGS-82503: add /var/run/kubernetes as emptyDir #638
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-62629: update library-go for deployment controller updates #159
NO-JIRA: Add control-plane-approvers to OWNERS #158
OCPBUGS-51091: schedule migrator pods on control-plane nodes #157
Full changelog

cluster-machine-approver

NO-JIRA: bump controller-runtime-common to latest main #302
NO-JIRA: Deploy cluster-machine-approver without host networking #301
NO-JIRA: Migrate away from deprecated ioutil #284
OCPCLOUD-3347: tls: use centralized TLS profile (unrevert) #292
NO-JIRA: Update OWNERS #296
Full changelog

cluster-monitoring-operator

TRT-2649: Revert “MON-4558: enable zoneinfo node-exporter collector via config” #2910
NO-ISSUE: chore(e2e): verify Prometheus Mantine UI is served on port 9090 and refactor ForwardPort helpers #2905
NO-ISSUE: Update AGENTS.md #2899
MON-4563: use AlwaysAllow UnhealthyPodEvictionPolicy option in PDBs #2892
MON-4558: enable zoneinfo node-exporter collector via config #2886
TRT-2644: Revert “MON-4517: Minimal and telemetry CP monitors” #2901
NO-ISSUE: [bot] Update jsonnet dependencies #2894
MON-4492: ClusterMonitoring alertmanagerConfig logic #2889
MON-4517: Minimal and telemetry CP monitors #2814
MON-4560: enable softirqs node-exporter collector via config #2887
NO-JIRA: refactor config merging #2890
OCPBUGS-54806: Add telemetry for user-defined networks #2596
CNTRLPLANE-3217: Enable configurable PKI for GRPC TLS certificates #2882
NO-ISSUE: [bot] Update jsonnet dependencies #2878
MON-4115: expose label metrics for jobs and cronjobs #2553
MON-4480: set minimum TLS version for Thanos ruler #2862
MON-4442: Add AGENTS.md to CMO #2761
NO-JIRA: [bot] Synchronize versions of the downstream components #2884
MON-4493: add MetricsServerConfig support to ClusterMonitoring CRD #2809
Full changelog

cluster-network-operator

OCPBUGS-53187: Update self-referencing URLs from master to main #2984
GCP-430: Wire GCP WIF credentials for CNCC in HyperShift HCP mode #2915
OCPBUGS-65631: Use dedicated service accounts for multus pods #2961
NO-JIRA: cleanup unused code and refactor for allowlist controller #2846
CORS-4332: Add GCP to the allowed platforms for dual stack #2894
OCPBUGS-82973: Frrk8s tls manifests #2963
KONFLUX-11591: Fix ovn-acl-logging CrashLoopBackOff due to startup race condition #2923
CORENET-6572: only report Progressing for active network rollouts #2937
Full changelog

cluster-openshift-apiserver-operator

NO-JIRA: Add control-plane-approvers to OWNERS #677
NO-JIRA: Update library-go for latest changes #678
Full changelog

cluster-openshift-controller-manager-operator

NO-JIRA: Add control-plane-approvers to OWNERS #427
Full changelog

cluster-policy-controller

NO-JIRA: Add control-plane-approvers to OWNERS #179
Full changelog

cluster-samples-operator

CNF-23044: Migrate away from deprecated ioutil #668
CNTRLPLANE-3176: implements operator tls config compliance #684
Full changelog

cluster-version-operator

NO-JIRA: OpenShiftUpdateRiskMightApply: bump pending to 15m from 10m #1372
OTA-1836: chore(deps): Bump general OpenShift dependencies #1377
OTA-1979: Revert “lightspeed: Add a new image holding Lightspeed skills” #1378
NO-JIRA: how-to: troubleshoot bootstrap CVO #1369
OTA-1965: Add Lightspeed CustomResourceDefinitions #1380
NO-ISSUE: Fix TestOperator_upgradeableSync #1373
OTA-1962: lightspeed: Add a new image holding Lightspeed skills #1376
OTA-1813: Extend alert risk e2e #1371
Full changelog

console

OCPBUGS-82140: Remove PII from events #16365
NO-JIRA: Align Dockerfile.dev with multi-arch Dockerfile structure #16390
OCPBUGS-79363: Move xterm to its own chunk #16370
NO-JIRA: zsh compatibility for microcopy-review #16389
NO-JIRA: Add fsgreco to frontend reviewers #16381
CONSOLE-5184: Enable ESLint Plugins for React Testing Library #16270
OCPBUGS-84710: Fix ConsoleDataView filter order: Name and Label should appear first #16375
OCPBUGS-84227: i18n upload/download routine task - version 4.22 #16318
OCPBUGS-84230: [release-4.22] - Re-enable cluster-settings/update-modal.cy.ts e2e test disabled for createRoot adoption #16319
OCPBUGS-81522: Reduce dashboard re-renders by memoizing cards and stabilizing prop references #16367
CONSOLE-5203: Remove old QE team from our repos #16312
OCPBUGS-81518: Fix ResourceListDropdown performance on large clusters #16252
OCPBUGS-79067: Fix crash when switching language to English #16366
NO-JIRA: Remove broken entrypoints and unused packages #16357
OCPBUGS-82511: re-enable helm-release.feature #16274
CONSOLE-5227: Upgrade ESLint from v6 to v8 and @typescript-eslint to v8 #16353
OCPBUGS-84338: Update resolveDynamicModuleMaps to skip unavailable packages #16340
OCPBUGS-84320: Use popover token in QS modal #16339
OCPBUGS-84296: fix Helm list page redirect after upgrade/rollback #16336
NO-JIRA: prepare for 4.22-prerelease.3 sdk publish #16338
CONSOLE-5144, OCPBUGS-81319, OCPBUGS-83823: 4.22 SDK fixes #15655
OCPBUGS-83812: Fix race conditions in OLM descriptors Cypress test #16304
OCPBUGS-83816: Fix race conditions in create-namespace Cypress tests #16306
NO-JIRA: enable multi-architecture yarn builds #16228
OCPBUGS-83813: Fix race conditions in debug pod Cypress tests #16305
OCPBUGS-81668: Fix User Preferences responsive breakpoints bug #16279
OCPBUGS-77864: Add gRPC probe support to container details view #16245
CONSOLE-5176: Refactor RTL Tests from fireEvent to userEvent #16294
OCPBUGS-82504: Re-enable cluster-settings/update-modal.cy.ts e2e test disabled for createRoot adoption #16283
NO-JIRA: Replace deprecated io/ioutil pkg #15902
OCPBUGS-81630: Fix unnecessary error on Node Terminal tab #16263
OCPBUGS-78365: Fix create visual connector in Topology #16241
OCPBUGS-83532: Add empty state visibility check to CRD test #16303
CONSOLE-5204: Merge PR templates #16287
OCPBUGS-82510: Fix web-terminal-adminuser e2e tests broken by createRoot #16284
OCPBUGS-83446: Fix Cypress test timeouts by using correct timeout option #16280
OCPBUGS-83532: Fix race condition in CRD Cypress test #16288
NO-JIRA: enable Cypress Cloud in CI #16277
Full changelog

console-operator

CONSOLE-5204: Add PR template #1141
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

UPSTREAM-SYNC: Sync main with latest upstream (release-1.35) #370
OCPBUGS-77578: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.22 #374
OCPBUGS-77755: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.22 #376
OCPBUGS-77592: Updating csi-driver-manila-container image to be consistent with ART for 4.22 #375
Full changelog

csi-driver-nfs

UPSTREAM-SYNC: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #175
UPSTREAM-SYNC: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #170
Full changelog

docker-registry

OCPBUGS-84680: pin cloud.google.com/go/storage to v1.30.1 to fix blob deletion #469
Full changelog

egress-router-cni

OCPBUGS-83286: Fix swallowed errors in cmdAdd/cmdDel causing empty CNI result #95
NO-JIRA: Update OWNERs file #96
Full changelog

gcp-cloud-controller-manager

NO-JIRA: Remove custom vendor scripts in favour of standard tooling #111
NO-JIRA: Update OWNERS #105
Full changelog

gcp-cluster-api-controllers

NO-JIRA: Update manifests generator #285
OCPBUGS-77684: Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.22 #272
NO-JIRA: Update OWNERS #280
Full changelog

gcp-machine-controllers

NO-JIRA: Update OWNERS #157
Full changelog

gcp-pd-csi-driver-operator

STOR-2798: Add test e2e manifest and VolumeSnapshotClass for image volumeSnapshotClass CSI tests #178
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-83502: devicemanager: constrain topology hints to device NUMA nodes #2645
OCPBUGS-78576: Update the csi-driver-host-path version to 1.17.1 #2641
OCPBUGS-81740: UPSTREAM: 138259: Filter out unschedulable nodes in kubectl describe test #2640
Full changelog

hypershift

NO-JIRA: chore(deps): weekly dependabot consolidation #8395
OCPBUGS-83868: prevent IAM resource leaks during cluster destroy #8303
GCP-635: feat(gcp): make JWKS file optional when OIDC issuer URL is provided #8339
OCPBUGS-83757: Remove network dependencies from unit tests #8277
ci(deps): bump actions/setup-go from 5.6.0 to 6.4.0 #8393
OCPBUGS-84508: Fix NLB name parsing for EKS Auto Mode hostnames #8343
AUTOSCALE-615: include Karpenter node vCPUs in billing metric #8265
CNTRLPLANE-3352: Convert GHA callers to use reusable workflows @main #8387
CNTRLPLANE-3342: Extract support/netutil package from support/util #8360
CNTRLPLANE-3352: Add reusable GHA workflow definitions #8386
GCP-410: feat(gcp): add HCCO credential propagation for GCP image registry #7896
OCPBUGS-84551: fix(ingress): set FIPS_ENABLED env var on ingress operator #8375
CNTRLPLANE-3307: add unit tests for Azure Private Link Service controllers #8285
CNTRLPLANE-3160: Drop AutoNodeKarpenter feature gate and promote EC2NodeClass to v1 #8166
NO-JIRA: Improve commit and PR guidance in AGENTS.md #8373
OCPBUGS-83790: change Azure workload identity webhook FailurePolicy from Fail to Ignore #8288
NO-JIRA: chore(deps): weekly dependabot consolidation #8334
NO-JIRA: Add API dependency import restriction tool #8364
SPLAT-2587: aws/ccm: introduce configuration to CCM managed Security Groups for NLB #7460
NO-JIRA: add –max-depth flag to nav order verification #8372
NO-JIRA: Do not import external dependencies into API packages #8355
CNTRLPLANE-3340: Extract support/podspec package from support/util #8354
OCPBUGS-84251: fix(azure): detect and replace stale role assignments on cluster re-creation #8322
OCPBUGS-84236: Guard Infrastructure CR lookup in AWSEndpointServiceReconciler #8315
fix: OCPBUGS-78575: create virt-launcher NetworkPolicy on external infra cluster #8056
CNTRLPLANE-3330: ci: improve unit test speed with sharding and parallelism #8330
CNTRLPLANE-3313: add Etcd Snapshot Backup (Tech Preview) DR documentation #8299
CNTRLPLANE-2834: add e2e test for etcd snapshot backup method on AWS #8231
docs: NO-JIRA: clarify serialization tag behaviour in api/AGENTS.md #8328
OCPBUGS-84248: Remove hardcoded quay.io credentials from EnsureGlobalPullSecret test #8320
NO-JIRA: ci(deps): bump GitHub Actions dependencies #8333
OCPBUGS-77529: clean stale mock files before make generate function #8237
OCPBUGS-79471: fix(test): reduce e2e autorepair flakes from unhealthy node conditions #8278
NO-JIRA: docs: clarify that control plane downgrades are not supported #8314
CNTRLPLANE-2204: improve AllNodesHealthy and AllMachinesReady conditions #8247
GCP-431: feat: Add CNCC support for GCP WIF in HyperShift #7824
OCPBUGS-83410: fix, cno, skip cloud-network-config-controller check on non-cloud platforms #8238
Revert “OCPBUGS-83730: Add *.apps wildcard to base domain Private DNS zone for Azure private clusters” #8301
NO-JIRA: docs: add jira:ready-to-solve to agentic SDLC workflow #8304
OCPBUGS-83397: Fix concurrent CRD reconciliation race #8266
NO-JIRA: MCE 5.0 branch cut #8290
OCPBUGS-83751: add missing RBAC for webhook configurations #8276
OCPBUGS-83730: Add *.apps wildcard to base domain Private DNS zone for Azure private clusters #8273
NO-JIRA: chore: pass COMMIT_HASH build arg to support git worktrees #8279
OCPBUGS-78539: revert temporary crash toleration for dns-operator #7994
CNTRLPLANE-3296: fix: auto-create python venv in Makefile for verify targets #8269
OCPSTRAT-2499: docs(e2e): add AI agent guidance for v2 test framework #8207
AUTOSCALE-490: increase autonode test coverage #7979
OCPBUGS-83604: fix(kubevirt): filter link-local addresses from EndpointSlice endpoints #8264
NO-JIRA: fix(test): set 1h time limit on e2e capacity reservations #8208
NO-JIRA: docs(agents): add CRD API machinery fundamentals and envtest docs #8236
OCPBUGS-83585: Wait for CRD removal in GenerateCRDInstallTest to fix flaky envtest #8261
NO-JIRA: drop redundant api_ux_validation e2e test #8210
CNTRLPLANE-3255: enable CodeRabbit reviews on draft PRs #8250
CNTRLPLANE-635: Enable nilness and unparam checks in golangci-lint #8258
AUTOSCALE-590: karpenter version logging verification #8058
CNTRLPLANE-3259: Add sdminonne, clebs, and Nirshal to core-reviewers #8252
ci(claude): add konflux-build command for manual non-expiring builds #7964
NO-JIRA: fix(e2e): handle uint64 underflow in karpenter version computation for 5.x #8227
CNTRLPLANE-3174: Add unit tests for v2 CPO controller packages #8215
OCPBUGS-83538: fix(metrics-proxy): resolve ports from pods instead of deployments #8221
CNTRLPLANE-3260: fix(ci): split docs-preview into build+deploy to eliminate pwn request #8256
CNTRLPLANE-3203: Add autoscaling documentation for self-managed Azure #8239
NO-JIRA: add ENVTEST_JOBS knob for parallel envtest execution #8243
CNTRLPLANE-3260: ci: harden GitHub Actions workflows #8253
CNTRLPLANE-3214: add envtest suites for HCPEtcdBackup CRD validation #8199
CNTRLPLANE-3254: Sort how-to guides alphabetically and add CI enforcement #8248
OCPBUGS-67228: fix(shared-ingress): bump haproxy to 3.0.5-4.el10_1.1 #7370
CNTRLPLANE-3065: docs: add Agentic Software Development Life Cycle page #8235
OCPCLOUD-3347: feat(machine-approver): add TLS configuration options to deployment manifests #8019
OCPBUGS-83389: fix(supportedversion): normalize OCP 5.x versions for skew and release validation #8225
SREP-4438: refactor(karpenter): tidy Cincinnati version resolution #8206
NO-JIRA: revert: remove .git/ from .dockerignore #8201
CNTRLPLANE-3197: add release-4.22 branch to renovate configuration #8196
CNTRLPLANE-3197: update builder images from 4.22 to 4.23 #8194
CNTRLPLANE-3216: Add codecov.yml validation to make verify #8202
GCP-368: add GCP CCM v2 e2e tests #7840
CNTRLPLANE-3233: ci(gha): add release-4.22 branch to GitHub Actions workflows #8217
And 5 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-cloud-controller-manager

NO-JIRA: Update OWNERS #95
Full changelog

ibmcloud-cluster-api-controllers

NO-JIRA: Update manifests generator #159
NO-JIRA: Update OWNERS #156
Full changelog

ibmcloud-machine-controllers

NO-JIRA: Update OWNERS #93
Full changelog

insights-operator

CCXDEV-15561: Improve test coverage 4 #1226
Full changelog

ironic

NO-ISSUE: Update requirements.cachito with latest openshift forks commits #821
OCPBUGS-83618: Bump sushy to latest #838
NO-ISSUE: Fix update requirements workflow #842
NO-ISSUE: Document how to use gerrit change hash for testing #839
OKD-362: Add watchdog to python-requirements.okd #837
Full changelog

ironic-agent

NO-ISSUE: Fix update requirements workflow #252
NO-ISSUE: Document how to use gerrit change hash for testing #250
NO-ISSUE: Update requirements.cachito with latest ironic-python-agent #246
Full changelog

machine-api-operator

NO-JIRA: bump controller-runtime-common to latest main #1493
NO-JIRA: fix: importing nutanix test to in the binary #1491
NO-JIRA: Update OWNERS #1486
Full changelog

machine-config-operator

OCPBUGS-84852: Update AMI Whitelist #5910
OCPBUGS-84150: MachineOSConfig “build was not found” error #5878
OCPBUGS-84699: Custom pool booting must handle matchExpressions in nodeSelector #5899
OCPBUGS-84565: Fix CVE-2026-34986 #5890
OCPBUGS-83871: Support bootloader update #5868
OCPBUGS-84332: Fix ssh and password rollbacks #5884
MCO-2222: /automate-test skill for generating e2e tests from specifications #5864
OCPBUGS-84652: Include RootCA in the temporal CC #5896
OCPBUGS-83492: Auto-append :ref suffix to additionalLayerStores in storage.conf #5888
OCPBUGS-83826: deploy-from-self when skopeo < 1.22.2 #5867
OCPBUGS-84490: Bump image build timeout for status reporting test #5886
MCO-2201: Improve /migrate-tests skill: default labels and ordering verification #5879
OCPBUGS-83859: Fix encapsulated IGN version #5872
MCO-1494: Remove monolithic e2e-ocl test suite #5880
AGENT-1449: Add IRI registry authentication support to MCO #5765
OCPBUGS-84218: Fix units rollback if update failure #5876
OCPBUGS-79425: improve JSON unmarshalling for secret decoding #5813
OCPBUGS-83401: add RootCA cert to the sysContextBuilder certs #5861
OCPBUGS-82500: ClusterHostedDNS on AWS/Azure/GCP: Modify Corefile template to better handle empty record types #5844
MCO-2201: Add Claude /migrate-tests command for MCO test migration #5837
MCO-1908: Migrate Kernel related MCO test-cases #5827
OCPBUGS-83539: Update AMI Whitelist #5851
OCPBUGS-78524: Allow enablement of systemd units with existing files #5846
OCPBUGS-82974: Make IRI registry read-only via environment variable #5845
OCPBUGS-81572: order corosync after OVS configuration on TNF clusters #5834
OCPBUGS-83517: Revert ovs increase CPU priority for Open vSwitch Forwarding Unit #5849
OCPBUGS-63152: Fail wait-for-node-ip if primary IP(s) disappear #5350
Full changelog

machine-os-images

METAL-1786: Include RHEL10 in image #82
Full changelog

metallb-frr

Bump to frr 10 #127
OCPBUGS-82973: Sync 25-3-2026 #128
Full changelog

monitoring-plugin

OU-1341: pass label values to the filter #913
OU-1091: swap monitoring-plugin to use DataView #911
NO-JIRA: update perses and fix vulnerable dependencies #900
TRACING-6030: add RouterProvider to support links in Panels #891
OU-1217: perses customizable dashboards with perses global datasources for tempo and loki #877
OU-1307: don’t fight console to setActiveNamespace #880
Full changelog

multus-networkpolicy

CNF-21001: Remove iptables compatibility commits #108
Full changelog

must-gather

no-jira: chore: address the linting issues in the scripts #525
MG-246: remove redundant oc inspect command and unused resources #537
Full changelog

network-tools

NO-JIRA: Updates to handle changes after migrating to Atlasian cloud #174
Full changelog

networking-console-plugin

CNV-74110: new translations #404
Update dependencies for upcoming Console 4.22 release #371
OCPBUGS-83638: CVE dependency remediation #379
Full changelog

nutanix-cloud-controller-manager

NO-JIRA: Update OWNERS #61
Full changelog

nutanix-machine-controllers

NO-JIRA: Update OWNERS #136
Full changelog

oauth-apiserver

CNTRLPLANE-2516: Add local configuration API for external oidc mode #194
NO-JIRA: Add control-plane-approvers to OWNERS #192
CNTRLPLANE-3226: chore: sync with openshift repositories #189
Full changelog

oauth-server

CNTRLPLANE-3226: chore: sync with openshift repositories #221
Full changelog

oc-mirror

CLID-592: pkg/cli: add unit tests for environment setup #1391
Full changelog

olm-catalogd, olm-operator-controller

OCPBUGS-62517: Synchronize from Upstream Repositories #710
NO-ISSUE: UPSTREAM: <carry>: remove dead e2e registry push job and related variables #711
OPRUN-4587: Make OTE local output easier to read #704
NO-ISSUE: Synchronize From Upstream Repositories #707
NO-ISSUE: Synchronize From Upstream Repositories #706
NO-ISSUE: Synchronize From Upstream Repositories #701
OPRUN-4574: UPSTREAM: <carry>: Disable upstream TLSProfile tests #702
OPRUN-4577: OTE: Simplify by remove option to configure tests to run outside of OCP #703
OPRUN-4572: Expand OTE docs with more comprehensive details #697
OCPBUGS-77972, OCPBUGS-81452: Synchronize From Upstream Repositories #696
Full changelog

openshift-apiserver

OCPBUGS-38120: Ensure Project delete requests are passed through admission #632
NO-JIRA: Add control-plane-approvers to OWNERS #630
OCPBUGS-74511: remove RouteExternalCertificate feature gate #604
CNTRLPLANE-3226: Sync with openshift apiserver 4.22 kubernetes 1.34.1 #629
Full changelog

openshift-controller-manager

NO-JIRA: Add control-plane-approvers to OWNERS #438
Full changelog

openstack-cluster-api-controllers

UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.14 into main #390
NO-JIRA: Update manifests generator #411
OCPBUGS-77542: Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.22 #399
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #1282
NO-ISSUE: Synchronize From Upstream Repositories #1279
Full changelog

operator-marketplace

NO-ISSUE: Bump the k8s-dependencies group across 1 directory with 3 updates #741
NO-ISSUE: Bump github.com/operator-framework/operator-lifecycle-manager from 0.41.0 to 0.42.0 #740
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

NO-JIRA: DownStream Merge [04-27-2026] #3159
NO-JIRA: OTE: run EVPN external traffic tests which use random subnet for VTEP #3148
OCPBUGS-84037: OTE: tolerate missing OpenShift CRDs on MicroShift #3150
CORENET-6537: OTE: Add external container support to infra provider #2975
NO-JIRA: openshift tests: demote to informing #3131
Full changelog

powervs-block-csi-driver

MULTIARCH-6066: Rebase branch with upstream #126
Full changelog

powervs-cloud-controller-manager

OCPBUGS-83391: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.35 (e48649f) into main #83
Full changelog

prom-label-proxy

NO-ISSUE: [bot] Bump openshift/prom-label-proxy to v0.13.0 #394
Full changelog

prometheus-alertmanager

NO-ISSUE: Bump openshift/prometheus-alertmanager to v0.32.0 #129
NO-ISSUE: update OWNERS #130
Full changelog

prometheus-node-exporter

NO-JIRA: [bot] Bump openshift/node_exporter to v1.11.1 #177
Full changelog

rhel-coreos-10, rhel-coreos-10-extensions

OCPBUGS-82523: post-process: Remove workaround for openvswitch additional group #1926
- [release-4.21] extensions: Add rhel-9.6-server-ose-4.21 #1914
NO-JIRA: [release-4.21] extensions: Fix repo name to match 4.21 #1913
COS-3946: Backport rhel-10.2 support to release-4.21 branch #1898
NO-JIRA: rhaos-pkgs-match-openshift: exclude known package mismatches #1889
NO-JIRA: Remove (commented) WASM mentions #1888
OCPBUGS-72560: package: add ose-crio-credential-provider #1880
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

service-ca-operator

NO-JIRA: Add control-plane-approvers to OWNERS #345
NO-JIRA: controller/servingcerts: Align log verbosity #323
Full changelog

tests

OCPBUGS-84809: Disable particular CSI tests if CSI driver is removed #31107
NO-JIRA: check jobname for upgrade #31106
OCPBUGS-84520: remove openshift-catalogd exemption from terminationMessagePolicy monitor #31100
OCPNODE-2994: Add ArtifactVolume tests and register artifact image #31017
NO-ISSUE: add QSEs as approvers #31087
SPLAT-2562: Added 3CMO OTE binary to extensionBinary list #31004
OCPCLOUD-3429: Ignore excessive image volume events from CAPI operator #31093
TRT-2622: copy OTE attrs to junit properties #31052
OCPBUGS-83580: Skip dev fuse test on runc runtime #31044
SREP-4676: add exception for managed cluster namespaces #31082
OCPBUGS-84257: fix openshift/network/third-party suite selecting zero tests #31084
TRT-2084: comment bugs filed for terminationMessage exemptions #31079
OCPBUGS-84504: retry transient kubeconfig read failures in GetClientConfig #31080
TRT-2565: Add simple benchmark for risk analysis HTTP requests #30965
NO-JIRA: Fix ListImages JSON parsing when extension binaries emit log lines #31009
OCPBUGS-84255: Fix project name error during wait #31062
NO-JIRA: Skip network policy cases on microshift and hypershift #31075
OCPBUGS-79544: test: add monitortest to detect pods stuck in Pending state #31045
OCPBUGS-79544: Add [Late] test to collect CRI-O goroutine dumps via SIGUSR1 #31013
NO-ISSUE: Automated - Update synthetic test data #31063
OCPBUGS-82072, OCPBUGS-82077: fix: skip unused tests for two node #30998
OCPBUGS-82144: Remove EnsureMemberRemoved from graceful shutdown test #30981
OCPEDGE-2381: Validate no WAL corruption when both nodes shutdown gracefully #30925
SPLAT-2562: Added VVCDO OTE binary to extensionBinary list #31014
NO-JIRA: harden watch loop to prevent thread exhaustion #30956
OCPBUGS-84244: cache kube client instance #30997
OCPBUGS-83281: Fix Gateway cleanup in parallel e2e test workers #31023
OCPBUGS-84237: skip on BM which has insufficient host #31002
OCPBUGS-83405: remove unnecessary exceptions from monitoring test #30924
NO-ISSUE: baremetal: update OWNERS #31055
OTA-1977: Skip test case updateLifecycle if the worker pool is paused #31040
OCPBUGS-82160: Skip image-registry operator tests for Libvirt platform in upgrade jobs. #31001
OCPEDGE-2284: Rename two_node directory to edge_topologies #30623
OCPBUGS-83402: Bump oc request-timeout to deflake tests #31008
OCPBUGS-82304: Add sleep to give cvo time to reconcile #30988
OCPBUGS-63307: Move imagepolicy test to disruptive long-running suite #31043
NO-JIRA: OVNK BGP: allow max unavailability for NNCPs on VRF-Lite test case #31037
OCPBUGS-83801: skip serial and disruptive cases from suite #31042
TRT-2635: coderabbit: enable request changes workflow #31047
TRT-2084: terminationmessagepolicy: correctly fail on violations #30993
OCPBUGS-84036: CNTRLPLANE-2751:Adding e2e network policy cases for config-operator #30995
OCPEDGE-2510: fix(two-node): bump node replacement timeouts for new node installer pods #31005
OCPBUGS-81476: Fix timeout in PinnedImages GC test #30962
OCPBUGS-63307: honor firstTimestamp annotation value #31021
no-jira: test/monitoring: increase load balancer readiness and curl connection timeout #30994
NO-JIRA: Fix UpgradeTargetPayloadImagePullSpec #31025
OCPSTRAT-3082: TLS propagation test #30801
NO-JIRA: OVNK BGP: improve debug and increase NNCP timeout for VRF-Lite test case #31022
OCPBUGS-83286: Fix case-sensitive error matching in Whereabouts IP allocation test #31012
OCPBUGS-83267: Use upgrades.Skippable for Gateway API upgrade test skip logic #31000
OCPEDGE-2381: Add test to verify for backup container exists when etcd crashes #30922
STOR-2807: Add e2e test to verify CSI driver operators use service CA signed certificates #30980
OCPEDGE-2381: Verify etc pod should start with oom_score_adj as system-node-critical #30982
Full changelog

vsphere-cloud-controller-manager

NO-JIRA: Update OWNERS #119
Full changelog

vsphere-cluster-api-controllers

NO-JIRA: Update manifests generator #100
NO-JIRA: Update OWNERS #96
Full changelog

vsphere-csi-driver-operator

SPLAT-2562: Created OTE extension with tests for hybrid env #335
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 16)

View changelog in Markdown or change previous release:

Source code for this page located on github