4.19.25

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.19.25-x86_64

Team Approvals:

Accepted
- QE

Tests:

Blocking jobs
- upgrade Succeeded (1 retry) periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- upgrade-minor Succeeded periodic-ci-openshift-release-main-stable-4.y-e2e-aws-ovn-upgrade
Informing jobs
- aws-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.19-e2e-aws-ovn-serial
- aws-ovn-single-node-upgrade-4.19-micro Succeeded (1 retry) periodic-ci-openshift-release-main-ci-4.19-e2e-aws-upgrade-ovn-single-node
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- aws-ovn-upgrade-4.19-micro-fips Succeeded periodic-ci-openshift-release-main-nightly-4.19-e2e-aws-ovn-upgrade-fips
- azure-ovn-upgrade-4.19-micro Failed (1 retry) periodic-ci-openshift-release-main-ci-4.19-e2e-azure-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Failed
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.19-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.19-fips-payload-scan
- gcp-ovn-rt-upgrade-4.19-minor Succeeded periodic-ci-openshift-release-main-ci-4.19-upgrade-from-stable-4.18-e2e-gcp-ovn-rt-upgrade
- hypershift-aks-conformance-4.19 Succeeded periodic-ci-openshift-hypershift-release-4.19-periodics-e2e-azure-aks-ovn-conformance
- hypershift-aws-ovn-conformance-4.19 Succeeded (1 retry) periodic-ci-openshift-hypershift-release-4.19-periodics-e2e-aws-ovn-conformance
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- metal-ipi-ovn-bm Succeeded (2 retries) periodic-ci-openshift-release-main-nightly-4.19-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.19-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.19-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.19-periodics-e2e-aws-ovn-ocp-conformance-serial

Upgrades from:

Untested upgrades: 4.18.23, 4.18.24, 4.18.25, 4.18.27, 4.18.29, 4.18.30, 4.18.31, 4.19.10, 4.19.11, 4.19.12, 4.19.14, 4.19.15, 4.19.16, 4.19.17, 4.19.19, 4.19.20, 4.19.21, 4.19.3, 4.19.4, 4.19.5, 4.19.6, 4.19.7, 4.19.9

Upgrades to:

Loading changelog, this may take a while ...

Changes from 4.19.18

Created: 2026-02-26 09:07:45 +0000 UTC

Image Digest: sha256:02dc35500ba334f341cccbd671471d0941417d135c958a357fb17de61c3ec743

Components

Kubectl 1.32.1
Kubernetes upgraded from 1.32.9 to 1.32.12
Kubernetes Tests 1.32.8
Red Hat Enterprise Linux CoreOS upgraded from 9.6.20251027-0 to 9.6.20260225-1

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
StreamingCollectionEncodingToJSON (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
StreamingCollectionEncodingToProtobuf (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled

Rebuilt images without code change

agent-installer-csr-approver git 0de29205 sha256:81e881ceb06c30f13d7b624dcfeb805938f0fcb4f4db42568ce65749bead7e35
agent-installer-node-agent git 1753a85e sha256:f6c96c390a7e699904acca2e7e5129251bb9acd69a93cdba56d945801f474f9a
agent-installer-orchestrator git 0de29205 sha256:c7deb2d3ec233fc37bc70c1633a298a267b50685b89e62e2a33f7a5c95d38910
apiserver-network-proxy git 77213cc5 sha256:81b0e907ec57074cde1bbb2dddb248e7f7e2a4f950dc246520a6cbb43ca662ed
aws-cloud-controller-manager git 425c1c5b sha256:f7ca34a66cd025c60aa9c1b082af34db5fe3a47b1605e9c856a24b59ae87ebbb
aws-cluster-api-controllers git 0a740b04 sha256:635bf21f0b033f24d3bd5e625e364fa23c66ae87c8eb6b2a1b3cba624e6ab729
aws-karpenter-provider-aws git 68ae0c26 sha256:4d4e580d060e61774ff444c016108a34a3880b12647507fc50c21f25462229a8
aws-pod-identity-webhook git b0a16d53 sha256:7bc46c7fd91521e2ee9fe3085f2f87693331c360da2e16b22795c3c72dcb4581
azure-cloud-controller-manager git 7109d6b4 sha256:4c83327df7c431e2707d2023cac970631e3343cf31962ab26939797d628dad35
azure-cloud-node-manager git 7109d6b4 sha256:badc1819953ffe65771329837615b0b22251ea8a3e899e536302f752ee92fc3a
azure-cluster-api-controllers git 2e2909cf sha256:b7ad1644f37edc21f3f20d84089eb12c8eaf5b207f1695109a24a9099e523eb4
azure-disk-csi-driver git 466334d4 sha256:d96ca0e6f078128dc87c84439aaa08dd26489b96fa61043899a2df5fd512013b
azure-file-csi-driver git 8970409a sha256:9b68e8b3ae538996237b6873df1718f5e875b993bb70b12fe24a42a04586110e
azure-kms-encryption-provider git 20a9ba53 sha256:b3fef46c8c922118ee13e1edb919e04711ed74f28bb4e607ce45453eab69302f
azure-service-operator git 0ae129b4 sha256:462434e9502036feb9f9e87fb01fba37dab18f5a66ee177691394da2abfc4515
azure-workload-identity-webhook git e5c6c44c sha256:50a2191a4bb7b03609d0c2a0837ec74ddbd1650f3916398e61e9a07946da10e4
baremetal-cluster-api-controllers git 06a66db1 sha256:4e50e93c512a66b18afa5801e78a3a9a43ade263c94e422c752d3eae340d5fbe
baremetal-machine-controllers git f7a78954 sha256:51ca3f9c2ddb06f8b214cc467ee5324d0fb8d552f0c304e420646db1edbce5e1
baremetal-operator git f4e49d5f sha256:c41dd6b8aa4abec78e60e48c7c1994fa5369e897b581c3ad41cc5fda36b0be52
baremetal-runtimecfg git 2f969c7a sha256:2b5937ae540b55372b9252f982be710664a67885bbede6ea15d5de9a920c8045
cluster-baremetal-operator git acb33d2c sha256:07b6c3820f9b00522979767e26d7add0a1fdcbd182ab5c2fdf4ebf87fdcccad1
cluster-bootstrap git 8fde9c52 sha256:5b939b2c215c435cfdd9127d917578cada4acc845b100909793e7010d8378281
cluster-capi-controllers git 479f0c4e sha256:eddecda6e7610840eb1e462397271d8b9e2690045f5a054d574ebf4c4a813965
cluster-capi-operator git cf9e6e9b sha256:3367205bcfe5416a5175832764f1ce5b57dc1796a9ad5a9beb6df8408a570397
cluster-config-operator git 96607b59 sha256:8c6731ec89ecc64dac9bb354e336c6d7bd4ff34b05b6d788e59a6ea6cf4046e4
cluster-control-plane-machine-set-operator git 1dbf0c7a sha256:5bf0fdd3117bea5554054b58171682277aa29c7db975174cc6061c72e9b02f3a
cluster-csi-snapshot-controller-operator git cf99de97 sha256:849c7c8030ab254cc4453e64bf1f8b98ea4351e52ee32c75d0eca5bf653572ab
cluster-dns-operator git 65981306 sha256:50bcc8acc5ff4dac0c0c8ad337243dbfdd476517f1d70843438ad616f6b72103
cluster-image-registry-operator git 3335b120 sha256:e2cbfed51972f835e97f94d7c72db08ba418b45cd4db9c68ca2b714c6189fb07
cluster-kube-cluster-api-operator git 3ec30377 sha256:0fc9d5553763068351d2f66729cdd0b2ad83203db88e626765e043f11307ad64
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:9f745785b5961ca1d28c266f1ab439638e5c84707572fbd5e9d30c95e99ec6b4
cluster-olm-operator git efb91390 sha256:97a92c57587252c60757ef83cdc2b9f65cf7bb14bb1f4481ad7410835ea3ed85
cluster-openshift-apiserver-operator git 5f66a3e1 sha256:a166dd4031a8729b41e5dab01b97326ecb02a11487743e2d2781646a9fc57ccc
cluster-openshift-controller-manager-operator git 0ab30996 sha256:995d4bdd7f40a61dfa9c7b9dc880109cd34eb1fb7b9f105d53696d83439a0cd0
cluster-policy-controller git 74852478 sha256:00034a965d6c6c23529c116bcc371c0cd7c9c06c09fa106de7f26687e567e7c9
cluster-storage-operator git 47fff364 sha256:1d8feacc4d574dc51309f2f4d9069b24b2ee179bb7e231a156df5491da2e537e
cluster-update-keys git 0ea36f0a sha256:4f0fedc81216936ddcd15b760fc13a0eefaca7ffe7ba0deba555ee9938091514
configmap-reloader git a2a48a3a sha256:70adb64d0431740d944c5f05bd91133bd5f3352c7e7667ca80738319c96e5621
console-operator git 034e4865 sha256:4d3cd696a49a36d23ea57a03ba48602a78c0589f02557cfc341c7fd8ae7806c3
container-networking-plugins git b09f487c sha256:80d8357c5fc3eab5cb1f093e59798f70f131fd78e449e8d3c2f018a1c1554444
containernetworking-plugins-microshift git b09f487c sha256:b81a55ad2817606b428f0f1dccabd1e0ea9de0ecadeecb64208faa75f7019bcf
coredns git 4f649314 sha256:af991f387d2abc921c5e41bf5108d9187a29ef39b73a19c2129baae4ae8036d2
csi-driver-nfs git 2eb5c109 sha256:3164f27f8e05a1707140ca68b6a7e7a452fdd604d0e3508df977f4b403ca384b
csi-external-attacher git a8175e39 sha256:d35cdd2e2dbd2532534e4a3dd72a2458d4540e764090e03086583c716dbf2c5f
csi-external-provisioner git 9db1cdb1 sha256:c8a977dbb8e261aaae999dd78a888c052c233b5fa0c927589c9fc068ff7aec18
csi-external-resizer git ac275c3a sha256:950c2046c180f44c12b0aab78b3a16d54f9690a177b4ac10b9e079007b03a6d5
csi-external-snapshotter git 580c6960 sha256:833d3b63a089f3428b3603e0c5aa395cb583515ddcd60ed85ac1b9d3a72b51bb
csi-livenessprobe git ca514478 sha256:257b8b8a9b12cc77cf8bab563d6f594e6fd80434b77aa68daaf9f0a2708b2345
csi-node-driver-registrar git fa578445 sha256:ff056e96f53365650de804acdd2dc9b5c44a793115fbbf0a5b765ff62b893cc5
csi-snapshot-controller git 580c6960 sha256:8686a92ec05f19bb5b9005c07aa508381c8336e8b117f4a66f58dfe855b1fb9a
docker-registry git b1d09765 sha256:9fbd0a565cf749cb69cebfffe98ce96b14d03666137400c4f12a68e9e525cf03
driver-toolkit git 686fdac5 sha256:7b90fe002528098941040998e1ce38c81eee4e16c4032bab397c6549bd75ba11
egress-router-cni git 85353bb9 sha256:74549acb4bb2798cd37cd12f11bf8c7aeef1e806808878241a3267e3f40bb55d
gcp-cloud-controller-manager git d8d3aeba sha256:e5eac6fa2e8cb899edf3ea501d3f0fe46c26cd06f424391c7ff88bcc0cd84cdf
gcp-cluster-api-controllers git c8b865a1 sha256:6766e9fbd75e0c1ae392eeb2645e256c79a6f8c5c393eb7297d30ebde6d9fc1d
gcp-machine-controllers git 4fd69cf5 sha256:ff8b8ccc0e56a414eb80101486f904170ca0090ecf4334090769d565be05836c
gcp-pd-csi-driver-operator git 44c74f24 sha256:7e1f7620b46a4f4287c4ac4d9438c9e439703ba449ff5122f7c767bf27fba194
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:a268e2ba398012c78caf58f254e5ad2e580481bd8bbd1ca64470340faaafbc2a
ibm-cloud-controller-manager git 7422aab2 sha256:280aa8c9055d9bb5e7a9ea50996b3bd782cf8818551e0825f74b99a2062058f8
ibm-vpc-block-csi-driver git 176b6ef1 sha256:16bd14530164d8c5a9de368ce9d506292b451619b62758c992689583fd917e70
ibm-vpc-block-csi-driver-operator git 3dfcfa12 sha256:a0664f6d415c93d8c791a2b1ceab24204eb5bcb102255f0dc82e5e8440cea024
ibmcloud-cluster-api-controllers git 940ac1c2 sha256:9aa22302af859f08faeda51ee0e18a15271013b3950080f74b40da42b7cba593
ibmcloud-machine-controllers git 989bd874 sha256:130dc6abeb0961c8bd25e797da902a33064b79f4ebd51c81a2328e58c8a002f6
insights-runtime-exporter git 0bee2d9b sha256:f2fbdc6ff8ebb75e98a5bf3aa8254bda5810a53cb36b515aa044e506829bc6cf
insights-runtime-extractor git 0bee2d9b sha256:59f0fdb04c5505431c81dccc6db5f277452be119bc06df3b958833e4ce1c41f4
ironic-machine-os-downloader git dacba7d7 sha256:811f46eafe91292ff88d2a420b7a109d35c65e32f9c9ef56abcb421200d84d5f
ironic-static-ip-manager git fcd9564e sha256:d4210c22bcb93f270cae401cba154ed7edc2d263c1dbb701da48bdcfb8cfcf43
keepalived-ipfailover git b42e7cf2 sha256:43c80dfc530d2e1406d7acd256ad7abfdfde216c7cc1a874bcba956fa94b6ce5
kube-metrics-server git 037a0e7e sha256:72680032d1b74a6e8ec21ab4f4919496602f01b594e76be6ac3fa0603f4fe78e
kube-rbac-proxy git 59127756 sha256:f4ca53c3983376f4a539c1139b87d3f9526db1d8ec8a362d73c9e0af46142e30
kube-state-metrics git c3da3b5f sha256:519ba889aae7d4ff7ee7fe30b879531a961fbc749b87f938ced18fdb0d202dc1
kube-storage-version-migrator git fdef30c8 sha256:c8d635e15298e747a516b0f05a9c6ba0aa526b8926bfcc08500ef5c40d049200
kubevirt-cloud-controller-manager git 3f4542ec sha256:0213bac1130f2d781ca40d90e3844824c5f46e4458c55aa7f828def71e51d31f
kubevirt-csi-driver git f535e9a1 sha256:29f1e221e947a7bc6c0085b4885d78f2e9e47ffa1be0e324241e2819e02ca94b
libvirt-machine-controllers git a336f0b5 sha256:cbaab58e507625f962047cd000900e342655e87d2b84d3eaa9d207d5c88e5ac5
machine-api-operator git dd012686 sha256:aeee3526e7f3d1be5143baeab9f3382b5179fda463ffe6c5deca5566e0313fa9
machine-image-customization-controller git 7d066746 sha256:560917ec35c4e2db558f8877d534bebef22b31dd1cdbfafb5c3a61ef76de08c6
machine-os-images git 32b5f16c sha256:129f2a426934aa1d6d8397a70004bcfca1dfa99bb291656bf6783df495d2cd4c
multus-admission-controller git 381c36ba sha256:d03e10e8d00bd53b0bc525201313a73d8adb5b18ac99e0f8da8d03488e5da0b2
multus-cni git cf0f68ec sha256:b44b4848d48ec22fd426b5755939a789bfba9b677c614871854194d5ec8f52d9
multus-cni-microshift git cf0f68ec sha256:9be4e6fe6e3ce6fcc3acbd45bf6784f8b9a2c3da5180b60e7d33e40cdb4af29b
multus-route-override-cni git 391c1b03 sha256:2eb89228134d48daaacc51a93369300d92067e467cb11bb93172b00d7df51137
multus-whereabouts-ipam-cni git 0e1112ce sha256:5f43938f0d00a9556390e1d950792f4ac6d9c84cf51e528750d600b11bb9267e
network-interface-bond-cni git fd8f506d sha256:df17b6e6a70884f7d0d05add407c53dfc5074cc30d507251d776545899720d0d
network-metrics-daemon git 89e48826 sha256:5c4b6ad3b2a099ec33cf78181e0d96bff5b4c45ccbc07221e7d5cd48c74e4a82
nutanix-cloud-controller-manager git db1f264a sha256:4ac1301fcb85e96fd5d88b6027f2ebf018cb735a8e692511d313de64c602cbe9
nutanix-machine-controllers git a26db5a0 sha256:a4d9eb2512d672a7c9a49d661cb4fd92935c8ab083e740d2a4bec2b21801c311
oauth-proxy git f74e8e00 sha256:1bc6f7ef3af372b8e198180c1b6bf8f5ef3bb8ff4508829a000bd589df3e75d6
oauth-server git eafa143a sha256:2dd220540c3d930cd8565277122cb62a50968b0b57faa40493a411cef9e966e7
openshift-controller-manager git 5b3063ff sha256:a79a03ef2d44b873ff5f93c1ac46903139bb62902f1aa8f32599fac1299c444e
openshift-state-metrics git c604f81c sha256:d9d1e7dcd68a3fb3432072b07dad81b42e4d034f481cce4e1dec0561bb7d47ed
openstack-resource-controller git d00bab2b sha256:0855f07a7b39071cd60edd3852def1cffc424dff77dd315af5032ddc8a3a309f
ovirt-csi-driver git 1db726a9 sha256:a11067b6924129213792f5da1e0fbf900690c15f1986ec845eae0e22ed535650
powervs-block-csi-driver git f681413d sha256:a9782b938c2d6c1c68bf86f3122affb5a391f7762846729b72f1db85bd5fa701
powervs-block-csi-driver-operator git 059d95c2 sha256:6dd4b2fafa3e65fc44eb52e71ed3f80cdfbafbf513ebebfbcc73bec6a8e5ad18
powervs-cloud-controller-manager git ef83f3f5 sha256:70c80806906efa331daa1b12d0d817bceba9d4a711baa9322058a43ae833e892
powervs-machine-controllers git ff6e9a8e sha256:bbf0cc170b3bd37187542161ccfbc8d84e683a242742094f84e62d4f28790d57
prom-label-proxy git 13666465 sha256:4abc36b98a4e0da4d12061b901a6c72aa60ab45dcb746d9c7fafa3ba50924081
prometheus git 396601b6 sha256:39f979b9f2b0ae5587e454c5dc2c9e4f7a6117f702e075b4269abebf35a8af54
prometheus-config-reloader git 69f2cb92 sha256:696063f8364904e21ba7c64804a58f3c61ce9da4539bc015584a53caf76297cf
prometheus-node-exporter git c90542d8 sha256:dbeb41699be2baa2ec0ddaa49012da1ca4892b4c6906f27c1f7026f1e76f2bbd
prometheus-operator git 69f2cb92 sha256:67395cefe0408d550d489ab2f4dbf2418b3a55a17fa01a0de0a9a8df0a30e801
prometheus-operator-admission-webhook git 69f2cb92 sha256:5183bd6d995deb560588f735a90fb14ad8e96d5e1a84f749b8777cc703c22f16
rhel-coreos git e97898c8 sha256:2313bbf186db068d941baef479f9758a6ba44dff9f6d47079627aeed3a15674f
rhel-coreos-extensions git e97898c8 sha256:6c25847549b4bfbfe5274021bc00c57b761fe2735804660de9362d221d39da6e
route-controller-manager git bc97534a sha256:d4a3b7b8110cadf48da5229a916d40b1c90fa1b9e1753adb05bf4be4333e2065
service-ca-operator git 4dfa6916 sha256:00eb0ce15a7919b63f1376e11b4112d08e8a8b2288d96965e183473cc7645a2e
telemeter git d72f1570 sha256:f78db829eed5768a10267058d25430b4e5d99ebef4a8569346b5e839aa2c8f35
thanos git 95f7bb21 sha256:9fff71cbce33407c9ad1dd83646ea5b46f02211e2ae78cd22f2867c057e0cf23
vsphere-cloud-controller-manager git 2c21c8ce sha256:b6d17691f58ab8bd8d00674c2b1275b592e98b48aae8bf6cba96532048e084ae
vsphere-cluster-api-controllers git f33d67f8 sha256:a6cc7e9e676fa20ef35ac2a90e1171bf17356f98cd39fe783f8775422116a388
vsphere-csi-driver-operator git c2b41c36 sha256:1ed4237901137686ccefb893a2d6412dcd6359ee3cdc6b0ccf036743e4be6e20

agent-installer-api-server

OCPBUGS-74630: Retry incomplete cluster registration in ABI #8809
Full changelog

agent-installer-utils

OCPBUGS-68295: bump github.com/sirupsen/logrus to v1.9.3 #236
Full changelog

aws-ebs-csi-driver

OCPBUGS-72365: Fix incomplete vendor/ after vendoring #295
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-56898: Fix Cinder, Manila driver metrics #386
OCPBUGS-63559: Add RBAC ClusterRole and Binding for driver node #455
Full changelog

aws-kms-encryption-provider

OCPBUGS-45666: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.19 #27
Full changelog

aws-machine-controllers

OCPBUGS-73729: Fix reconciler consistency checks in Update and Exists #165
Full changelog

azure-machine-controllers

OCPBUGS-65782: Set updateDomainCount to one when faultDomainCount is one #174
OCPBUGS-63578: Support DataDisks on Azure Stack Hub #166
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-73781: pkg/asset/manifests/azure: save cidr blocks #10216
OCPBUGS-74940: Increase agent-installer pre-network-manager timeout #10284
OCPBUGS-74675: [release-4.19] GCP: skip AI zones #10274
OCPBUGS-74629: add support for NVIDIA H100 and H200 enabled machine series #10270
OCPBUGS-66358: Update the RHCOS 4.19 bootimage metadata to 9.6.20260112-0 #10248
OCPBUGS-68296: [4.19] uplift logrus #10165
OCPBUGS-65610: Azure UPI ARM template: use storageAccountId #10151
OCPBUGS-63437: vSphere 7 deprecation #10026
OCPBUGS-66999: Use separate tmpfs for ostree checkout on live ISO #10153
OCPBUGS-65512: Remove pending items on gcp no-op #10074
Revert “OCPBUGS-65587: Update the RHCOS 4.19 bootimage metadata to 9.6.20251113-0” #10094
OCPBUGS-65587: Update the RHCOS 4.19 bootimage metadata to 9.6.20251113-0 #10085
OCPBUGS-63634: Update the RHCOS 4.19 bootimage metadata to 9.6.20251023-0 #10038
OCPBUGS-63702: Prevent duplicate noProxy when adding nodes #10045
Full changelog

cli, cli-artifacts, deployer, tools

OCPBUGS-65757: pkg/cli/admin/upgrade: Tighten force warnings #2146
OCPBUGS-65594: fix(must-gather): do not set node affinity if nodename is set #2143
OCPBUGS-64585: Help with must-gather scheduling through suggesting preferance of nodes #2124
Full changelog

cloud-credential-operator

OCPBUGS-74547: Resolve nil pointer exception in hasResourceTags #971
OCPBUGS-65799: ccoctl azure: retry custom role creation on consistency errors #949
OCPBUGS-65478: ccoctl: use pagination when listing resources in aws #946
OCPBUGS-63547: ccoctl: add public-key-file flag to create-all #937
Full changelog

cloud-network-config-controller

OCPBUGS-65513: Fix capacity calculation #190
OCPBUGS-63753: Change the capacity struct from int to ptrOfInt #186
Full changelog

cluster-authentication-operator

OCPBUGS-65602: set appropriate rolling update settings #809
Full changelog

cluster-autoscaler

OCPBUGS-63676: update node info processors to include unschedulable nodes #392
OCPBUGS-63603: refactor cloud provider options #388
OCPBUGS-63455: Fixes histograms becoming empty after loaded from checkpoints #395
Full changelog

cluster-autoscaler-operator

OCPBUGS-73954: Add rbac for volumeattachments #359
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-63165: ccm: disable unused secure-serving port and webhook #420
Full changelog

cluster-config-api

OCPBUGS-68378: Add HTTPKeepAliveTimeout to IngressController API #2627
OWNERS: update approvers/reviewers #2624
OCPBUGS-66984: Introduce ClosedClientConnectionPolicy to IngressController API #2616
CNTRLPLANE-1979: Promote streaming list encoding to Default #2597
NO-JIRA: Promote streaming list encoding to Default on Hypershift. #2559
Full changelog

cluster-etcd-operator

OCPBUGS-74628: Add priority field to prevent early shutdown #1539
Full changelog

cluster-ingress-operator

OCPBUGS-65723: IngressOperator not exposing some metrics for degraded… #1308
OCPBUGS-68378: Implement HTTPKeepAliveTimeout tuning option #1323
NO-JIRA: Add new NID team members to OWNERS [release-4.19] #1318
OCPBUGS-66984: Implement ClosedClientConnectionPolicy field #1320
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-74628: Add priority field to prevent early shutdown #1959
OCPBUGS-65525: OpenShift cluster got degraded after rotating the kube-apiserver-service-network-signer cert #1964
Revert “[release-4.19] OCPBUGS-65560: Optimistically update Kube Server and Client CA bundles” #1963
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-64687: Add priority field to prevent early shutdown #893
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-74628: Add priority field to prevent early shutdown #609
Full changelog

cluster-machine-approver

OCPBUGS-63586: port 9193 need to be internal and port 9194 need to have a service #281
Full changelog

cluster-monitoring-operator

OCPBUGS-67167: Add the collection of MTV migration metrics #2773
OCPBUGS-67003: make CMO Upgradeable=false if invalid Prometheus externalLabels are used #2775
OCPBUGS-62830: Remove cluster from non-multicluster dashboards #2760
OCPBUGS-63236: Remove AlertManager endpoints when disabled #2716
OCPBUGS-64578: Fix KSM deny-list typo #2730
Full changelog

cluster-network-operator

OCPBUGS-70328: Tweak iptables-alerter to try to avoid crictl bug #2867
OCPBUGS-57134: whereabouts-config is a reserved name for user interaction. #2719
OCPBUGS-63447, OCPBUGS-63448: Annotate whereabouts-controller #2822
Full changelog

cluster-node-tuning-operator

OCPBUGS-73797: PPC: ghw: filter out namespaces dir #1455
Full changelog

cluster-samples-operator

OCPBUGS-63510: references to github.com/sclorg/django-ex.git now also refer to the branch #656
Full changelog

cluster-version-operator

OCPBUGS-70181: OCPBUGS-70181: Unify capitalization when comparing architectures for available updates #1291
NO-ISSUE: hongkai becomes an approver release-4.19 #1285
OCPBUGS-70296: add the ports Field into the CVO’s container spec #1283
Full changelog

console

OCPBUGS-74464: Bump lodash to latest #15964
OCPBUGS-74341: Do not resolve disabled catalog type extensions #15945
OCPBUGS-70335: OpenShift Console can only show user name instead of full name as the display name #15888
OCPBUGS-72399: Fix Helm chart installation with CA/TLS certificates #15898
OCPBUGS-70135: Update client initialization in checkPackageManifestHandler #15877
OCPBUGS-69677: Spread operand details across 2 col #15859
OCPBUGS-69860: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15866
OCPBUGS-62725: Fixes namespace-scoped operators that were not showing as installed when viewing OperatorHub in “All Projects” mode #15816
OCPBUGS-67361: Disallowed Pipelines-plugin Pipelines navigation section #15839
OCPBUGS-66245: The number of Quick Starts item is wrong #15793
OCPBUGS-66179: Fix unnecessary rerenders with pod-connect #15784
OCPBUGS-62438: Updation of label from edit label doesn’t work #15547
OCPBUGS-65930: Preserve query string in perspective switch + remove dev console folks from reviewers #15760
OCPBUGS-63703: Fix dynamic form spacing and layout issues #15706
OCPBUGS-64834: Preserve path on perspective switch #15697
OCPBUGS-64849: HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … #15698
OCPBUGS-64746: Fix Bare Metal Hosts nav item #15687
OCPBUGS-63588: Expose prometheus tenancy label path as a proxy #15645
OCPBUGS-63607: limit node log length to 1000 lines #15647
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-64812: Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.31 into release-4.19 #335
Full changelog

docker-builder

OCPBUGS-66993: bump buildah to 1.39.7 to fix CVE-2025-52881 #497
OCPBUGS-65624: BuildConfig inline Dockerfile fails with heredoc syntax #485
Full changelog

etcd

OCPBUGS-74602: 4.19 rebase 3.5.26 #360
OCPBUGS-63476: 4.19 rebase 3.5.24 #348
Full changelog

gcp-pd-csi-driver

OCPBUGS-68307: Update logrus to 1.9.3 #88
OCPBUGS-62116: UPSTREAM: 2054: Fix Hyperdisk Resize That Requires Iops/Throughput Adjustment #82
Full changelog

haproxy-router

OCPBUGS-66984: Add option abortonclose to HAProxy configuration template #701
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-76518: Rebase v1.32.12 #2592
OCPBUGS-65552: Rebase v1.32.10 #2515
OCPBUGS-59651: Fix Concurrentmap Iteration #2509
Full changelog

hypershift

OCPBUGS-72393: Fix Konflux EC voilation, nginx image deprecated #7440
CNV-70889: use csi-resizer image from release provider #7102
OCPBUGS-65829: The Containerfile in the repo has hypershift-no-cgo, but the published image quay.io/hypershift/hypershift-operator:latest doesn’t #7256
CNTRLPLANE-1709: feat: Backport Customer Global Pull Secret to OpenShift 4.19.z #7316
OCPBUGS-69415: test: remove unit tests that depend on network communication [release-4.19] #7395
OCPBUGS-65693: specify SCC annotation for pods in data plane #7255
OCPBUGS-62959: fix(cvo): support image overrides annotation for CVO deployment #7065
OCPBUGS-64817: Add CPO hotfix arm64 builds #7195
OCPBUGS-63129: resolve initContainer permission issue after node reboot #7145
OCPBUGS-63636: [release-4.19] fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7110
Full changelog

insights-operator

OCPBUGS-75902: [bugfix] The ConfigMap value for StoragePath is ignored on basic routine #1224
OCPBUGS-66202: Add filtering to add other possible pod status to QEMU gatherer #1190
OCPBUGS-66058: [bugfix] The archive’s records may include files whose names are out of bounds #1183
OCPBUGS-66061: QEMU logs are not gathered if there are pending status virt-launcher pods #1184
Full changelog

ironic

OCPBUGS-77028: Update ironic hash for 4.19 with heartbeat inspection fix #797
OCPBUGS-69785: Bump eventlet version to 0.33.1-7 #759
OCPBUGS-65572: Include Handle HTTP 400 and 409 race condition in Redfish power opera… #724
Full changelog

ironic-agent

OCPBUGS-69783: Bump eventlet version to 0.33.1-7 #229
OCPBUGS-67304: Include Test advertised ip reachability before assigning it #224
Full changelog

machine-config-operator

OCPBUGS-77240: Fix MCN conditions not updating during OCL sync #5693
OCPBUGS-77071: Machine-config controller should not log about non-existent pull-secret changes #5674
OCPBUGS-76831: machine-config-daemon: openshift: Exposure of Sensitive Data in Log Files in the Machine Configuration Daemon. [openshift-4] #5658
OCPBUGS-76362: Update AMI script and list #5640
OCPBUGS-43435: After OCL is enabled few phases in MCN are not updating as expected #5606
OCPBUGS-71210: MCP is not correctly degraded when a pivotError happens #5532
OCPBUGS-70325: Remove log exposing kubeconfig #5526
OCPBUGS-67264: cherry pick to few fixes that needed for missing services and configuration #5490
OCPBUGS-67198: Fix cleanup in TestInstallRPMAndCheckMCDMetrics to decrease risk of test failures due to interference #5496
OCPBUGS-64922: Update timing of MCN desired config spec update to align with node annotation setting #5439
OCPBUGS-65839: Remove –mount directives #5430
OCPBUGS-62168: Fix - NetworkManager restart or crash renders br-ex unusable #5352
OCPBUGS-64844: Create temporal allow policy #5398
Full changelog

metallb-frr

OCPBUGS-66055: Dockerfile: unpin FRR rpm #113
Full changelog

monitoring-plugin

OU-1233: monitoring testing on release-4.19 branch - fix #785
OU-1233: automation task - main into 419 and alerting conditional filtering #772
OCPBUGS-74166: fix: update qs vulnerable dependency #737
OU-1157: remove random multiplication #706
OU-1131: Merge main into release-4.19 #693
OCPBUGS-66388: Time range and Refresh interval dropdown button lack of unique identifier #671
OU-863: [release-4.19]: Fix step calculation for metric explorer 4.19 #655
OCPBUGS-63531: [release-4.19] Improve alignment with console SDK #647
OCPBUGS-63588: [release-4.19] allow tenancy access to metrics tags #618
OU-1060: remove troubleshooting panel links from non-admin #629
Full changelog

multus-networkpolicy

OCPBUGS-77158: Fix modified vendor/ and go.sum after vendoring #82
Full changelog

must-gather

OCPBUGS-59487: network: Gather OVN-Kubernetes CUDN CRs #499
Full changelog

network-tools

NO-JIRA: fix prefetch-dependencies step failure #166
Full changelog

networking-console-plugin

OCPBUGS-41199: Fix NAD creation using default namespace instead of selected one #351
CNV-76277: Fix name generator with unprofessional names #318
Full changelog

oauth-apiserver

NO-JIRA: (chore): update OWNERS file #169
OCPBUGS-61760: bump kubernetes-apiserver to pick up loopback certificate expiration update #152
Full changelog

oc-mirror

OCPBUGS-66410: fix: return only requested version #1323
OCPBUGS-65968: Remove empty status field from generated IDMS/ITMS files #1318
OCPBUGS-64683: removes unintended exec permissions #1307
Full changelog

olm-catalogd, olm-operator-controller

OCPBUGS-63405, OPRUN-4216: Port CRD upgrade safety carry from 4.20 without bumping deps #543
Full changelog

openshift-apiserver

OCPBUGS-66920: Add ValidatingAdmissionPolicy and check for omissions next time. #588
OCPBUGS-61662: Adding validation directly and calling existing library-go validation #576
OCPBUGS-65962: pkg/image: conditionally parse raw image manifest #582
NO-JIRA: add .0 to go version #583
OCPBUGS-65863: update pkg/image/OWNERS #578
OCPBUGS-61759: bump kubernetes-apiserver to pick up loopback certificate expiration update #569
OCPBUGS-57043: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.19 #564
Full changelog

openstack-cluster-api-controllers

OCPBUGS-64815: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into release-4.19 #370
Full changelog

openstack-machine-api-provider

OCPBUGS-76791: Fix make test #158
OCPBUGS-74586: Revendor CAPO #151
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-76587: Remove the collect-profiles job #1229
OCPBUGS-64925: Fix TOCTOU race condition in ensureInstallPlan (#3682) #1145
Full changelog

operator-marketplace

OCPBUGS-73882: Increase default catalog polling interval to 4h (240m) #706
Full changelog

ovirt-csi-driver-operator

OCPBUGS-68321: Bump github.com/sirupsen/logrus to v1.9.3 #149
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-74269: release-4.19 fix(localnet, ipamless): Prevent LSP deletion on sync #2942
OCPBUGS-70345: Branch Sync release-4.20 to release-4.19 [12-31-2025] #2915
OCPBUGS-66139: Branch Sync release-4.20 to release-4.19 [12-03-2025] #2890
CORENET-6055, OCPBUGS-65658, OCPBUGS-65909, OCPBUGS-65956: Branch Sync release-4.20 to release-4.19 [11-26-2025] #2872
OCPBUGS-64854: Fix stale EIP assignments during failover and controller restart #2848
OCPBUGS-64645: kubevirt: fix bad release of IPs of live migratable pods #2842
OCPBUGS-63660: Skip Pending pods in EgressIP status updates #2834
Full changelog

prometheus-alertmanager

OCPBUGS-73759: Include go-verify-deps expected files in gitignore #111
Full changelog

tests

OCPBUGS-74201: Unrevert TLS tests with fixes #30707
OCPBUGS-67146: Fix MachineConfigNode test in two-node fencing clusters #30590
OCPBUGS-67365: Updated the upgrade duration limit to 100 minutes for ppc64le #30606
OCPBUGS-63727: CNTRLPLANE-1767:fix(disruption): Using correct internal LB of apiserver for monitor test on ARO and Baremetal Hypershift #30440
OCPBUGS-63609: Migrate OCP-32383 to upstream #30429
OCPBUGS-63637: Add imagestream update dryrun test #30432
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-68315: CVE-2025-65637: Bump github.com/sirupsen/logrus to v1.9.3 #155
Full changelog

vsphere-problem-detector

OCPBUGS-66198: Fixed logic for vSphere compute cluster permission #198
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 16)

View changelog in Markdown or change previous release:

Source code for this page located on github