Back to index

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.21.0-0.nightly-2025-11-03-191704

Team Approvals:

Tests:

• Blocking jobs
  • aggregated-aws-ovn-single-node-upgrade-4.21-micro Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-aws-upgrade-ovn-single-node
  • aggregated-aws-ovn-upgrade-4.21-micro-fips Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-upgrade-fips
  • aggregated-azure-ovn-upgrade-4.21-micro Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-azure-ovn-upgrade
  • aggregated-gcp-ovn-rt-upgrade-4.21-minor Succeeded periodic-ci-openshift-release-master-ci-4.21-upgrade-from-stable-4.20-e2e-gcp-ovn-rt-upgrade
  • aggregated-hypershift-ovn-conformance-4.21 Succeeded periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-aws-ovn-conformance
  • aws-ovn-serial-1of2 Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-serial-1of2
  • aws-ovn-serial-2of2 Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-serial-2of2
  • aws-ovn-techpreview Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview
  • aws-ovn-techpreview-serial-1of3 Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview-serial-1of3
  • aws-ovn-techpreview-serial-2of3 Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview-serial-2of3
  • aws-ovn-techpreview-serial-3of3 Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview-serial-3of3
  • driver-toolkit Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-driver-toolkit
  • fips-scan Succeeded periodic-ci-openshift-release-master-nightly-4.21-fips-payload-scan
  • install-analysis-all Succeeded periodic-ci-openshift-release-master-nightly-4.21-install-analysis-all
  • metal-ipi-ovn-bm Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-bm
  • metal-ipi-ovn-ipv6 Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-ipv6
  • microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.21-periodics-e2e-aws-ovn-ocp-conformance
  • microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.21-periodics-e2e-aws-ovn-ocp-conformance-serial
  • overall-analysis-all Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.21-overall-analysis-all
  • rosa-classic-sts-conformance Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-rosa-sts-ovn
• Informing jobs
  • agent-compact-ipv4 Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-agent-compact-fips
  • agent-ha-dualstack Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-agent-ha-dualstack-conformance
  • agent-single-node-ipv6 Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-agent-single-node-ipv6-conformance
  • aggregated-hypershift-aks-conformance-4.21 Succeeded periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-azure-aks-ovn-conformance
  • aws-console Failed periodic-ci-openshift-release-master-nightly-4.21-console-aws
  • aws-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.21-periodics-e2e-aws
  • aws-csi Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-csi
  • aws-ovn Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn
  • aws-ovn-cgroupsv2 Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-cgroupsv2
  • aws-ovn-fips Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-fips
  • aws-ovn-single-node Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-single-node
  • aws-ovn-single-node-csi Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-single-node-csi
  • aws-ovn-single-node-serial Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-single-node-serial
  • aws-ovn-single-node-techpreview Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-single-node-techpreview
  • aws-ovn-single-node-techpreview-serial Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-single-node-techpreview-serial
  • aws-ovn-single-node-upgrade-minor Failed periodic-ci-openshift-release-master-nightly-4.21-upgrade-from-stable-4.20-e2e-aws-upgrade-ovn-single-node
  • aws-ovn-upgrade-out-of-change Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-upgrade-out-of-change
  • aws-upi Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-upi
  • azure-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.21-periodics-e2e-azure
  • azure-csi Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-azure-csi
  • azure-ovn Failed periodic-ci-openshift-release-master-ci-4.21-e2e-azure-ovn
  • azure-ovn-serial Failed periodic-ci-openshift-release-master-ci-4.21-e2e-azure-ovn-serial
  • azure-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-azure-ovn-techpreview
  • azure-ovn-techpreview-serial Failed periodic-ci-openshift-release-master-ci-4.21-e2e-azure-ovn-techpreview-serial
  • azure-ovn-upgrade-out-of-change Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-azure-ovn-upgrade-out-of-change
  • cnv Failed periodic-ci-openshift-release-master-cnv-nightly-4.21-deploy-azure-kubevirt-ovn
  • gcp-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.21-periodics-e2e-gcp
  • gcp-ovn Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-gcp-ovn
  • gcp-ovn-csi Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-gcp-ovn-csi
  • gcp-ovn-rt Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-gcp-ovn-rt
  • gcp-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-gcp-ovn-serial
  • gcp-ovn-techpreview Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-gcp-ovn-techpreview
  • gcp-ovn-techpreview-serial Failed periodic-ci-openshift-release-master-ci-4.21-e2e-gcp-ovn-techpreview-serial
  • gcp-ovn-upgrade-4.21-minor Failed periodic-ci-openshift-release-master-ci-4.21-upgrade-from-stable-4.20-e2e-gcp-ovn-upgrade
  • gcp-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-gcp-ovn-upgrade
  • hypershift-kubevirt-ovn-conformance-4.21 Succeeded periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-azure-kubevirt-ovn
  • metal-ipi-ovn-dualstack Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-dualstack
  • metal-ipi-ovn-dualstack-techpreview Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-dualstack-techpreview
  • metal-ipi-ovn-ipv6-techpreview Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-ipv6-techpreview
  • metal-ipi-ovn-serial Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-serial-ipv4
  • metal-ipi-ovn-serial-virtualmedia-1of2 Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-serial-virtualmedia-1of2
  • metal-ipi-ovn-serial-virtualmedia-2of2 Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-serial-virtualmedia-2of2
  • metal-ipi-ovn-techpreview Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-techpreview
  • metal-ipi-ovn-upgrade Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-upgrade
  • metal-ipi-ovn-upgrade-minor Failed periodic-ci-openshift-release-master-nightly-4.21-upgrade-from-stable-4.20-e2e-metal-ipi-ovn-upgrade
  • metal-ipi-serial-ipv6 Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-serial-ovn-ipv6
  • metal-ipi-serial-ovn-dualstack Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-serial-ovn-dualstack
  • metal-ipi-upgrade-ovn-ipv6 Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-upgrade-ovn-ipv6
  • metal-ipi-upgrade-ovn-ipv6-minor Failed periodic-ci-openshift-release-master-nightly-4.21-upgrade-from-stable-4.20-e2e-metal-ipi-upgrade-ovn-ipv6
  • metal-ovn-single-node-recert-cluster-rename Succeeded periodic-ci-openshift-release-master-nightly-4.21-metal-ovn-single-node-recert-cluster-rename
  • openshift-dedicated-aws Failed periodic-ci-openshift-osde2e-main-nightly-4.21-osd-aws
  • openshift-dedicated-gcp-conformance Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-osd-ccs-gcp
  • openshift-dedicated-gcp-osde2e Failed periodic-ci-openshift-osde2e-main-nightly-4.21-osd-gcp
  • ovn-proxy Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-proxy
  • ovn-single-node-live-iso Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ovn-single-node-live-iso
  • qe-perfscale Failed periodic-ci-openshift-eng-ocp-qe-perfscale-ci-main-aws-4.21-nightly-x86-payload-control-plane-6nodes
  • rosa-classic-sts-osde2e Failed periodic-ci-openshift-osde2e-main-nightly-4.21-rosa-classic-sts
  • telco5g Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-telco5g
  • telcov10n-metal-single-node-spoke Succeeded periodic-ci-openshift-kni-eco-ci-cd-main-nightly-4.21-telcov10n-metal-single-node-spoke
  • telcov10n-metal-single-node-spoke-kpis Failed periodic-ci-openshift-kni-eco-ci-cd-main-nightly-4.21-telcov10n-metal-single-node-spoke-kpis
  • upgrade-analysis-all Failed (2 retries) periodic-ci-openshift-release-master-nightly-4.21-upgrade-analysis-all
  • upgrade-minor-ovn Failed periodic-ci-openshift-release-master-ci-4.21-upgrade-from-stable-4.20-e2e-aws-ovn-upgrade
  • vsphere-ovn Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-ovn
  • vsphere-ovn-csi Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-ovn-csi
  • vsphere-ovn-serial Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-ovn-serial
  • vsphere-ovn-techpreview Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-ovn-techpreview
  • vsphere-ovn-techpreview-serial Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-ovn-techpreview-serial
  • vsphere-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-master-ci-4.21-e2e-vsphere-ovn-upgrade
  • vsphere-ovn-upgrade-minor Succeeded periodic-ci-openshift-release-master-ci-4.21-upgrade-from-stable-4.20-e2e-vsphere-ovn-upgrade
  • vsphere-ovn-upi Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-ovn-upi
  • vsphere-ovn-upi-serial Failed periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-ovn-upi-serial
  • vsphere-static-ovn Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-vsphere-static-ovn

Upgrades from:

• 4.21.0-0.nightly-2025-10-30-125804 (changes) - S S S S S S S F F
• 4.20.0-0.nightly-2025-10-30-114955 (changes) - S F F S F F F

Upgrades to:

• 4.21.0-0.nightly-2025-11-05-234508 (changes) - S S S F F S S F F
• 4.21.0-0.nightly-2025-11-05-051217 (changes) - S S P S P S S F F
• 4.21.0-0.nightly-2025-11-04-210426 (changes) - S S S F F F F F F
• 4.21.0-0.nightly-2025-11-04-140119 (changes) - S S S S S S S F F
• 4.21.0-0.nightly-2025-11-04-035632 (changes) - S S S F S F S F F

---

Loading changelog, this may take a while ...

Changes from 4.21.0-0.nightly-2025-09-27-232055

Created: 2025-11-03 19:18:43 +0000 UTC

Image Digest: sha256:a01a33e3530ae751eef797050f8ab6915d4c245f2500eb20b761b2fc2f86430a

Components

• Kubectl upgraded from 1.33.3 to 1.34.1
• Kubernetes upgraded from 1.33.5 to 1.34.1
• Kubernetes Tests upgraded from 1.33.4 to 1.34.1
• Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250925-0 to 9.6.20251027-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
IngressControllerLBSubnetsAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NodeSwap (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SetEIPForNLBIngressController (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ManagedBootImagesAzure (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ManagedBootImagesvSphere (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
PreconfiguredUDNAddresses (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VolumeAttributesClass (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ExternalOIDC (0 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
NewOLMWebhookProviderOpenshiftServiceCA (0 tests)	Disabled	Enabled (Changed)	Disabled	Enabled	Disabled	Enabled
IngressControllerDynamicConfigurationManager (0 tests)	Disabled	Disabled	Enabled	Enabled	Disabled (Changed)	Disabled (Changed)
EventTTL (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesCPMS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MutableCSINodeAllocatableCount (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
OSStreams (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

• agent-installer-ui git a4d9ef93 sha256:d46370a18c2b33525536180697d0abca68aba68f17d70bffd027d9d3986d12a8

Removed images

• ovirt-csi-driver
• ovirt-csi-driver-operator

Rebuilt images without code change

• azure-disk-csi-driver git cbf9908d sha256:754e3a11db8f679d29b69137442a51d93f532cb31161d727d32749222d9c81ce
• csi-external-snapshot-metadata git 24faebef sha256:6faa0e319f8f6a6675ea00596f1aaaaf8d8a0d54132943e5feeaad80655cbcda
• driver-toolkit git 5c53d757 sha256:af9dd0e9e230bcb0c683ae28f6c15e50cd1ff1047b59fb25bfe12524a292f9aa
• egress-router-cni git 5e0f8d1b sha256:bd3fb320695ae465c0c1f62d613a475204fd1d7b35aec08e0fc95c175e770cfb
• gcp-pd-csi-driver-operator git ac94bf2a sha256:085a0c02143721bf8a16e9680d6f89ca53591aac48ad152a5940f56ea84c95d4
• kubevirt-cloud-controller-manager git 3f4542ec sha256:c81f9d7918903ad6040a00f66972a0edd12083c12fefe7a9fa0c20068b9c55b2
• libvirt-machine-controllers git a336f0b5 sha256:ac89a4efcb21137ea47f24f1d880c1cb9ea161722ef0227625337f8fcdf2f545
• multus-cni git cf0f68ec sha256:314857ddf09612b59ea1b75e1ee495d399f116b4810a16661a0f9b9cbd21f20b
• multus-cni-microshift git cf0f68ec sha256:9911528df809594adb3387f01e19d8f3c638744ccef5d8cd888b01e4f42c0d93
• multus-networkpolicy git ef99d3d4 sha256:43de0b7e8c320f9da1d4fdcc87efad7b68cc966f82e3a9d50fbdfa51905ce7bd
• multus-route-override-cni git 391c1b03 sha256:6c80cadfad27b8bae1643fa102611cb5ec4e459fed7b91a16f0c9635a6ffb1eb
• multus-whereabouts-ipam-cni git 43c89591 sha256:9a2cfe236bd5264bd0ce69686b33622bbfdb60844bfe78d226c3fd72d8a3a81b
• powervs-block-csi-driver git 791e12ab sha256:ed901040092b56ec9e5109dc7a035eb96d6c9e598304872659cd71fd52909580
• telemeter git 0634eee9 sha256:4209761ba08a78cab47f42f80ae5fab5ef071817564b07ac88b5b72795bb7588
• thanos git 6ea20ffa sha256:ec4021d1efeb8eac93478d556208834c0aa3181d77c4cf81dbfacca57b615aff
• vsphere-csi-driver git 133442c2 sha256:5e00833f793e194c6b78dc7ceb9a3cbde295f0d469f7f257d5a1aacabca7d47b
• vsphere-csi-driver-syncer git 133442c2 sha256:1220572eac9da322afe530d2996b571ba25efb6af14131a116878b2eabe9e350

agent-installer-api-server

• MGMT-21848: Allow matching host’s disk using byPath #8113
• NO-ISSUE: [master] Bump OCP versions: 4.20, 4.14, 4.16, 4.18 #8219
• MGMT-21230: Use XTS for disk encryption #8115
• MGMT-21870: Add new parameters for bundle routes #8101
• MGMT-22038: Only check TNF version for day-1 bound hosts #8213
• MGMT-22025: Filter out irrelevant RHCOS images in operator deployment scripts #8194
• MGMT-20681: Improve discovery ISO password change script #7683
• MGMT-21624: Fix dual-stack primary IPv6 migrations and update #8145
• NO-ISSUE: [master] Bump OCP versions: 4.13, 4.17, 4.21, 4.19 #8156
• MGMT-21958: Prepare 4.20 stable versions assisted-service upstream #8142
• NO-ISSUE: Update konflux pipelines to use a remote pipeline #8143
• NO-ISSUE: adds example Agent resource to docs #8120
• NO-ISSUE: migrate renovate config #8060
• MGMT-21135: Unexpected Additional Subnet Appears in Machine Network Selection #7953
• MGMT-21810: Support TNF cluster installation using kube-api #8085
• MGMT-21759: Update Assisted Service webhook away from deprecated webhook.Validator API #8135
• MGMT-21859: Move osc operators to supported #8056
• MGMT-19836: Add ClusterID field on HostRoleUpdatedEvent #8111
• MGMT-21624: Add Dual-Stack with primary IPv6 support in Assisted #8026
• NO-ISSUE: [master] Bump OCP versions: 4.16, 4.12, 4.18, 4.20, 4.19, 4.17 #8134
• AGENT-1303: Allow InfraEnv registration to use late binding #8059
• NO-ISSUE: Update Konflux references #8128
• NO-ISSUE: bump ocp dockerfile base image to 4.21 #8110
• MGMT-20588: Align kube descheduler activation CR with OVE needs #7960
• NO-ISSUE: Update Konflux references #8050
• ACM-25137: Remove the SERVICE_EL8_IMAGE env vars #8108
• MGMT-21725: Update Renovate for legacy EL8 Dockerfiles #8090
• OCPBUGS-62580: Fix edge jobs to be consistent with ART for 4.21 #8104
• NO-ISSUE: [master] Bump OCP versions: 4.19 #8095
• NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.18 #8089
• NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.15, 4.14 #8084
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• MGMT-20756: assisted installer naive string concatenation for partiti… #1308
• NO-ISSUE: Update konflux pipelines to use a remote pipeline #1301
• NO-ISSUE: Update Konflux references #1299
• MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1289
• OCPBUGS-62361: Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.21 #1276
• OCPBUGS-62398: Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.21 #1277
• NO-ISSUE: Update Konflux references #1283
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-node-agent

• NO-ISSUE: migrate renovate config #1123
• MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1148
• OCPBUGS-62390: Bump dockerfile images to 4.21 #1147
• NO-ISSUE: Update konflux pipelines to use a remote pipeline #1118
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-utils

• AGENT-1302: Check for presence of registry instead of WorkflowType #157
• OCPBUGS-63487: AGENT-1203: Simplify isobuilder #173
• : OCPBUGS-63323: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan #181
• OCPBUGS-63322: Update Konflux references #180
• OCPBUGS-62912: Resolve violations detected by registry-standard #175
• OCPBUGS-62986: Update Konflux references #177
• OCPBUGS-62958: Update Konflux references #168
• OCPBUGS-62905: Dockerfile cleanup #174
• OCPBUGS-62347: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.21 #165
• OCPBUGS-62704: remove hardcoded versions from iso_builder #171
• AGENT-1336: Add release label to build #170
• OCPBUGS-62646: Update Konflux references #167
• OCPBUGS-62645: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 0697723 #146
• AGENT-1258: Build PipelineRun changes for Konflux #155
• Full changelog

apiserver-network-proxy

• OCPBUGS-62355: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.21 #86
• Full changelog

aws-cloud-controller-manager

• SPLAT-2337: tests/ote: Introduce openshift test extension binary #117
• OCPCLOUD-3092: Merge https://github.com/kubernetes/cloud-provider-aws:master (bea9adf) into main #112
• OCPBUGS-62354: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.21 #118
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-63046: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.2 (d3a7da1) into main #576
• OCPBUGS-62540: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.21 #575
• Full changelog

aws-ebs-csi-driver

• STOR-2597, STOR-2627: Rebase aws-ebs-csi-driver to v1.48.0 for OCP 4.21 #294
• OCPBUGS-62380: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.21 #292
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• STOR-2523: Add hypershift managed-by labels for csi driver operators #446
• OCPBUGS-62802: Add RBAC ClusterRole and Binding for driver node #443
• NO-JIRA: add ai-helpers claude marketplace #451
• NO-JIRA: Normalize generation of driver metrics RBAC proxy sidecar #380
• OCPBUGS-61436, OCPBUGS-61450, STOR-2600: Bump OLM metadata to 4.21 #430
• OCPBUGS-62404: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.21 #438
• STOR-1945: STOR-2056: add Azure File NFS test manifest #445
• OCPBUGS-62374: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.21 #437
• MULTIARCH-5554: update smb-csi-driver-operator support to add ppc64le #428
• OCPBUGS-62427: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.21 #439
• OCPBUGS-62348: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.21 #436
• OCPBUGS-61955: Add withCABundleDaemonSetHook() to AWS EFS operator #433
• Full changelog

aws-karpenter-provider-aws

• OCPBUGS-62388: Updating aws-karpenter-provider-aws-container image to be consistent with ART for 4.21 #15
• Full changelog

aws-kms-encryption-provider

• OCPBUGS-62458: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.21 #31
• Full changelog

aws-machine-controllers

• OCPCLOUD-3072: Add support for AMD SEV-SNP #141
• OCPBUGS-62395: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.21 #139
• OCPBUGS-38759: client: re-use a single file for building the session instead of randomly named files #140
• Full changelog

aws-pod-identity-webhook

• CCO-664: merge upstream changes #205
• OCPBUGS-62587: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.21 #206
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPCLOUD-3093: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (aa50e43) into main #148
• OCPBUGS-62487: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART for 4.21 #151
• OCPBUGS-62392: Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.21 #150
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-62387: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.21 #352
• Full changelog

azure-file-csi-driver

• OCPBUGS-62547: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.21 #106
• Full changelog

azure-kms-encryption-provider

• OCPBUGS-62405: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.21 #23
• Full changelog

azure-machine-controllers

• OCPBUGS-56664: Support DataDisks on Azure Stack Hub #164
• OCPBUGS-62335: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.21 #163
• Full changelog

azure-service-operator

• OCPBUGS-62368: Updating ose-azure-service-operator-container image to be consistent with ART for 4.21 #13
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-62364: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.21 #39
• CCO-665: Merge upstream changes #40
• Full changelog

baremetal-cluster-api-controllers

• OCPBUGS-62565: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.21 #53
• Full changelog

baremetal-installer, installer, installer-artifacts

• no-jira: Prune unused terraform packages #10051
• OCPBUGS-63711: Remove pending items on gcp no-op #10049
• CORS-4275: Add Windows support #10041
• OCPBUGS-63632: Update RHCOS 4.21 bootimage metadata to 9.6.20251023-0 #10036
• OCPBUGS-57126: Add node-image-pull to the list of services to check their logs in /etc/motd #9962
• OCPBUGS-62136: Eliminate duplicate logs on bootstrap/rendezvous host #9957
• OCPBUGS-60873: Prevent duplicate noProxy when adding nodes #10024
• OCPBUGS-36360: Support certificate authentication with CAPZ #10019
• OCPBUGS-62870: Fix firewall checks #10017
• OCPBUGS-62824, OCPBUGS-62826: Fix console info for interactive agent installer #10003
• OCPBUGS-62085: Update the RHCOS 4.21 bootimage metadata #9998
• OKD-237: Remove fcos references #9970
• OSASINFRA-3915: openstack: Start setting CredentialsMode #9734
• NO-JIRA: shiftstack: Update OWNERS #9994
• OCPBUGS-62125: baremetal: set baremetalhost architecture #9987
• OCPBUGS-60752: Add MTU validation for networkConfig #9919
• OCPBUGS-62907: AGENT-1269: Use agent-installer-ui image from release #9995
• OCPBUGS-62430: None: Allow IPv6 Primary DualStack installs on platforms None and External #9983
• OCPBUGS-41567: Clean up baremetal bootstrap systemd dependencies #8986
• OCPBUGS-62452: Updating ose-installer-container image to be consistent with ART for 4.21 #9980
• OCPBUGS-62471: Updating ose-baremetal-installer-container image to be consistent with ART for 4.21 #9981
• OCPBUGS-60538: Update assisted-service dependencies #9956
• CORS-4256: Add PSC Endpoint to the installconfig #9991
• OCPBUGS-62514: Updating ose-installer-artifacts-container image to be consistent with ART for 4.21 #9984
• SPLAT-2511: vSphere - do not block on vSphere >7.0.2, allow 9 #9963
• CORS-4078: allow toggling AWS client logging #9976
• OCPBUGS-62363: Set agent-extract-tui start timeout #9975
• no-jira: Revert “Merge pull request #9939 from barbacbd/CORS-4058-release-4.21” #9974
• CORS-4078: bump AWS SDK v2 max backoff duration to 300s #9966
• Full changelog

baremetal-machine-controllers

• OCPBUGS-62365: Updating baremetal-machine-controller-container image to be consistent with ART for 4.21 #237
• Full changelog

baremetal-operator

• OCPBUGS-61349, OCPBUGS-62112: Merge upstream #432
• OCPBUGS-62460: Updating ose-baremetal-operator-container image to be consistent with ART for 4.21 #433
• Full changelog

baremetal-runtimecfg

• OCPBUGS-62581: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.21 #370
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-63683: Replace IPv4-mapped IPv6 addresses with valid IPv6 in tests #2123
• NO-JIRA: Add pr-review Claude command and effective-go skills #2120
• NO-ISSUE: pkg/cli/admin/upgrade/recommend: Drop obsolete precheckEnabled knob #2113
• OCPBUGS-62875: Pass dry-run option to all create API calls #2117
• CNTRLPLANE-1676: Update k8s dependencies to 1.34 #2118
• NO-JIRA: Migrate to aws-sdk-go-v2 from archived aws-sdk-go #2114
• NO-JIRA: adm upgrade status: capture testcase for OCPBUGS-60768 #2081
• OCPBUGS-62445: prevent crash when rootDeviceHints format is invalid #2109
• NO-JIRA: Update shellescape and sspi to newer versions #2116
• NO-JIRA: Remove myself from update approvers, add Hongkai #2112
• OCPBUGS-62550: Updating ose-cli-artifacts-container image to be consistent with ART for 4.21 #2111
• OCPBUGS-61491: Update code to retrieve ICSP instead of ICP #2095
• OCPBUGS-62362: Updating ose-tools-container image to be consistent with ART for 4.21 #2108
• OCPBUGS-62548: Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.21 #2110
• NO-JIRA: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.21 #2107
• Full changelog

cloud-credential-operator

• NO-JIRA: docs: token migration to use next-bound-service-account-signing-key #932
• OCPBUGS-63541: ccoctl: add public-key-file flag to create-all #933
• OCPBUGS-63561: ccoctl: use pagination when listing resources in aws #935
• NO-JIRA: Update output directory when extracting issuer URL #925
• CCO-661: Update go modules #930
• OCPBUGS-63238: Ensure ccoctl aws commands use their own region option #931
• CCO-709: Upgrade Kubernetes v1.34 #929
• CCO-644: Upgrade msgraph-sdk-go v1.86.0 #924
• CCO-435: Migrate away from deprecated ioutil package. #920
• OCPBUGS-62495: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.21 #923
• Full changelog

cloud-network-config-controller

• OCPBUGS-60806: Change the capacity struct from int to ptrOfInt #183
• OCPBUGS-55625: Retrieve subnet from vnet subnets.addressPrefixes field #179
• OCPBUGS-62437: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.21 #181
• Full changelog

cluster-authentication-operator

• OCPBUGS-62941: (bugfix): configure status controller to remove unset versions #798
• OCPBUGS-62447: Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.21 #793
• API-1835: test/oauth-server-staticresource: adds a test to show which input resources are required to run the operator and the staticResourceController #790
• NO-JIRA: Update OIDC e2e test to expect admission-time validation error of invalid CEL expression #797
• API-1835: fix integration tests #795
• Full changelog

cluster-autoscaler

• OCPBUGS-60790: refactor cloud provider options #380
• AUTOSCALE-335, AUTOSCALE-336, OCPBUGS-62383, OCPBUGS-62477: 1.34.0 upstream rebase #386
• OCPBUGS-62383: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.21 #383
• OCPBUGS-62477: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.21 #384
• NO-JIRA: Remove OWNERS automation preamble #382
• Full changelog

cluster-autoscaler-operator

• AUTOSCALE-336: Prepare for 4.21 #355
• OCPBUGS-62589: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.21 #354
• AUTOSCALE-384: Add “cordon node before terminating” option to cluster autoscaler resource #356
• Full changelog

cluster-baremetal-operator

• OCPBUGS-61477: Enable runtime extraction of aarch64 images #508
• OCPBUGS-62577: Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.21 #507
• Full changelog

cluster-bootstrap

• OCPBUGS-62558: Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.21 #120
• Full changelog

cluster-capi-controllers

• OCPBUGS-62579: Updating ose-cluster-api-container image to be consistent with ART for 4.21 #249
• Full changelog

cluster-capi-operator

• OCPCLOUD-3104: pkg/util/sync: fix ignoring the Cluster API conversion-data annotation #403
• NO-JIRA: machinesync: improve createOrUpdateCAPIMachine and implement unit tests #396
• OCPCLOUD-3104: sync: allow Cluster API v1beta2 version for ownerrefs and set Cluster v1beta2 ControlPlaneInitialized #391
• OCPCLOUD-2636: Warn users when attempting to change Authoritative API but Synchronized condition is false #398
• OCPCLOUD-2992: machine migration round trip test #366
• OCPCLOUD-2996: Prevent changing .spec.authoritativeAPI on MAPI when Phase Provisioning or is being deleted #388
• OCPCLOUD-2999: AWSMachine status conversion and syncing #372
• OCPCLOUD-3104: manifests-gen: re-enable conversion, validating and mutating webhook configurations #389
• OCPCLOUD-3104: Fix v1beta2 condition setting #385
• OCPCLOUD-2709: Implement MAPI2CAPI conversion of loadbalancers #348
• OCPBUGS-62570: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.21 #357
• OCPCLOUD-2995: Machine status conversion and syncing #365
• NO-JIRA: hack/test.sh use eval for starting ginkgo so GINKO_EXTRA_ARGS having whitespaces works #380
• OCPCLOUD-2641: Validate creation of Machine API Machines #368
• OCPBUGS-62620: kubeconfig controller: do not error on token secret not yet populated #373
• NO-JIRA: lint: add aliases for machine api’s and controller-runtime log #367
• OCPCLOUD-2992: refactor: split machine migration testing into multiple files #364
• NO-JIRA: machine_sync: assorted fixes #370
• Full changelog

cluster-cloud-controller-manager-operator

• SPLAT-2297: Added new cmd flag to launch of vSphere CCM #394
• OCPBUGS-62585: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.21 #414
• OCPBUGS-51305: ccm: disable unused secure-serving port and webhook #415
• Full changelog

cluster-config-api

• Bring KAL up to date and enable new linters #2554
• OCPBUGS-62987: Move DynamicConfigurationManager back to DevPreview #2552
• envtest-releases: add v1.34.1 to index #2553
• MCO-1941: Add OSStream FeatureGate #2549
• hack: switch to /usr/bin/env bash #2551
• CORS-4157: AWS, Azure: Add IPFamily to the PlatformStatus within Infra CR #2499
• codegen: Improve performance of package loading #2543
• Fix use of API_GROUP_VERSIONS running codegen #2530
• STOR-2627: Add MutableCSINodeAllocatableCount to Dev- and TechPreview #2502
• Switch to invoking codegen once in general updates #2540
• route: improve .spec.tls.termination doc #2532
• OPRUN-4156: Promote OLMv1 Webhook support to GA #2491
• OCPBUGS-55192: Add IngressController .spec.domain validation #2308
• OCPBUGS-63311: config/v1/types_cluster_version: Tighten force and rollback warnings #2539
• CORENET-6005: network, virt: graduate preconfigured UDN addresses feature gate #2496
• MCO-1861: Promote ManagedBootImagesvSphere feature gate to default #2529
• MCO-1873: promote ManagedBootImagesAzure to default #2526
• OCPBUGS-60457: payload-command: remove authentication CR from hypershift payload #2523
• OCPSTRAT-2371: Update to Kubernetes v1.34.1 #2427
• CNTRLPLANE-1576: add event-ttl configuration to kube-apiserver #2520
• CNTRLPLANE-1614: add event-ttl feature gate #2525
• : promote InsightConfigAPI and OnDemandDataGather to v1 #2448
• Switch to slices stable sort on manifest merging #2524
• Use separate serialization linting config for Machine API provider types #2522
• Add initial AI api-review configuration #2489
• Support AMD SEV-SNP on AWS #2424
• MCO-1805: MCO-1806: Add ManagedBootImagesCPMS feature gate & CPMS type to ManagedBootImages API #2396
• OCPBUGS-62482: Updating ose-cluster-config-api-container image to be consistent with ART for 4.21 #2513
• OCPBUGS-55649: Remove SetEIPForNLBIngressController feature gate #2501
• OCPBUGS-61382, STOR-2533: move VolumeAttributesClass to GA #2471
• Promote BYO OIDC features #2454
• OCPBUGS-55673: Remove IngressControllerLBSubnetsAWS featuregate #2400
• OCPBUGS-62068: NodeSwap Feature Gate usage to be removed #2494
• Full changelog

cluster-config-operator

• OCPBUGS-62330: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.21 #450
• Full changelog

cluster-control-plane-machine-set-operator

• OCPCLOUD-3084: Bump k8s dependencies to 1.34 #371
• OCPBUGS-62588: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 4.21 #369
• Full changelog

cluster-csi-snapshot-controller-operator

• Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.21 #245
• Full changelog

cluster-dns-operator

• NE-2138: Bump cluster-dns-operator to Kubernetes 1.33 for 4.21 #448
• Full changelog

cluster-etcd-operator

• OCPBUGS-63543: fix: update redfish url validation #1504
• OCPBUGS-63240: [TNF] Fix job controller startup reliability with retry and degraded status #1500
• OCPEDGE-1885, OCPEDGE-2088: Updated state transitions & tests for TNF setup job #1481
• OCPBUGS-60273: Ensure revision.json persists on ungraceful shutdown #1494
• NO-JIRA: use scrapeClass for service monitors #1497
• NO-JIRA: add runbook urls for alerting rules #1496
• NO-JIRA: feat: update the ip parsing for the nodes #1479
• OCPEDGE-2183: Updating Quorum detection logic to absolve TNF of quorum loss reports. #1483
• NO-JIRA: remove etcd-backup-server from static pod lists #1492
• CNTRLPLANE-1315: Add OpenShift Tests Extension (OTE) for cluster-etcd-operator #1488
• OCPBUGS-62518: Updating cluster-etcd-operator-container image to be consistent with ART for 4.21 #1489
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-image-registry-operator

• OCPBUGS-62573: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.21 #1256
• Full changelog

cluster-ingress-operator

• NE-1334: Enhancement to add brew and stage secrets for pre-release image testing #1291
• OCPBUGS-43919: desiredWildcardDNSRecord: Check for nil LB field #1189
• OCPBUGS-62400: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.21 #1286
• NE-1334: Script to install ossm pre-release operator and run GWAPI e2e tests #1283
• Full changelog

cluster-kube-apiserver-operator

• CNTRLPLANE-1544: scc: Grant authenticated users use of restricted-v3 #1944
• CNTRLPLANE-1544: Enable user namespace for the operator #1934
• CNTRLPLANE-1616: add event-ttl config observer #1938
• CNTRLPLANE-1544: scc: restricted-v3: Fix runAsUser range #1947
• NO-JIRA: Update the deprecated API usage alerts for 1.34 #1946
• OCPSTRAT-2371: Update to Kubernetes v1.34.1 #1939
• OCPNODE-3758: alpha/beta apis for DRA should not be enabled in 1.34 #1932
• OCPBUGS-60045: Bump library-go to latest master #1928
• OCPBUGS-62450: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.21 #1931
• NO-JIRA: Add priority field to prevent early shutdown #1915
• NO-ISSUE: Use scrapeClass for service monitors #1930
• OCPSTRAT-2371: MutatingAdmissionPolicy e2es depend on both v1alpha1 and v1beta1 of admissionregistration.k8s.io being served in k8 1.34 #1927
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-57562: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.20 #58
• Full changelog

cluster-kube-controller-manager-operator

• OCPSTRAT-2371: Update to Kubernetes v1.34.1 #888
• no-jira: Add priority field to prevent early shutdown #865
• CNTRLPLANE-1544: Enable user namespaces for the operator #886
• NO-ISSUE: Use scrapeClass for service monitors #880
• OCPBUGS-62408: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.21 #885
• Full changelog

cluster-kube-scheduler-operator

• OCPSTRAT-2371: Update to Kubernetes v1.34.1 #583
• no-jira: Add priority field to prevent early shutdown #572
• CNTRLPLANE-1544: manifests: Align user namespaces for the operator #581
• CNTRLPLANE-1544: Enable user namespace for the operator #580
• OCPBUGS-62609: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.21 #579
• NO-ISSUE: Use scrapeClass for service monitors #578
• Full changelog

cluster-kube-storage-version-migrator-operator

• OCPBUGS-62444: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.21 #132
• Full changelog

cluster-machine-approver

• OCPBUGS-63519: port 9193 need to be internal and port 9194 need to have a service #279
• OCPBUGS-62583: NO-JIRA: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.21 #277
• Full changelog

cluster-monitoring-operator

• NO-JIRA: [bot] Synchronize versions of the downstream components #2728
• OCPBUGS-62310: Fix KSM deny-list typo #2677
• NO-JIRA: [bot] Synchronize versions of the downstream components #2712
• NO-JIRA: clarify ExternalLabels doc #2691
• MON-4398: Enable UTF-8 by default in admission-webhook #2704
• OCPBUGS-45671: chore(prometheus/remotewrite): clarify that the in-cluster proxy env vars set in prometheus container can be used in all configs that support proxyConfig.proxyFromEnvironment #2717
• MON-4383: feat(auto_docs_examples): adjust and add more examples #2573
• MON-4408: chore: make test/monitoring a seperate module to keep managing deps in root go.mod simple #2714
• OCPBUGS-62276: add tls configuration for the monitoring plugin deployment #2706
• NO-JIRA: [bot] Synchronize versions of the downstream components #2705
• OCPBUGS-62972: enhance case 66736 #2708
• NO-ISSUE: Update jsonnet dependencies #2696
• OCPBUGS-62160: Remove AlertManager endpoints when disabled #2684
• NO-JIRA: [bot] Synchronize versions of the downstream components #2703
• MON-4395: Bump prometheus-operator to v0.86.0 #2698
• NO-ISSUE: set openshift-state-metrics as default container #2693
• OCPBUGS-61661: Remove cluster from non-multicluster dashboards #2679
• MON-4384: adding Blackwell GPU device to accelerators configmap #2689
• NO-ISSUE: chore: remove image locations in assets #2683
• NO-ISSUE: [bot] Update jsonnet dependencies #2687
• NO-ISSUE: chore: remove mentions of prometheus Adapter #2682
• OCPBUGS-15430: remove Kubernetes API alerting rules #2671
• NO-JIRA: chore: bump jsonnet dependencies #2649
• Full changelog

cluster-network-operator

• OCPBUGS-60032: Configure CVO to delete default-account role binding #2758
• SPLAT-2503: Fixed “null” value for vSphere api and ingress VIP in UPI scenario #2795
• CORENET-6423: api, l2udn: subnets must be masked #2808
• CORENET-6311: Skip running _stackmanager for libreswan 5.3+ #2787
• OCPBUGS-62457: Updating cluster-network-operator-container image to be consistent with ART for 4.21 #2807
• OCPBUGS-54806: Add recording rules for UDN telemetry #2697
• OCPBUGS-61215: Tweak iptables-alerter to try to avoid crictl bug #2802
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-63724: e2e:llc: skip test when no BM worker is found #1419
• OCPBUGS-60218: PPC: ghw: filter out namespaces dir #1403
• NO-ISSUE: pkg/metrics/server: Log client-CA-bundle handling #1412
• NO-JIRA: Address false reports of bootcmdline conflicts #1371
• NO-JIRA: Fix support for nvidia-smi #1410
• OCPBUGS-62940: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1414
• NO-ISSUE: pkg/metrics/server: Log bind address #1411
• OCPBUGS-62839: E2E: Add test cases related to schedulable control plane nodes #1405
• OCPBUGS-62835: E2E: llc: make sure to remove any trailing newspaces #1407
• OCPBUGS-62153: E2E: skip SMT disabled test when L3 cache spans entire NUMA node #1397
• OCPBUGS-62605: e2e: refactor GetSMTLevel to remove Gomega assertions #1399
• OCPBUGS-62578: Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.21 #1391
• Full changelog

cluster-olm-operator

• OCPBUGS-62173: Add TLS config observer to update opcon/catd #145
• OPRUN-4157: Update openshift/api to latest master for WebHook GA #146
• OPRUN-4207: Update feature-gate processing to support disabled features #144
• NO-ISSUE: Remove conditionals for cp-manifests use #142
• OPRUN-4079: Use helm to generate manifests #140
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-62500: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.21 #626
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-62494: Updating ose-cluster-openshift-controller-manager-operator-container image to be consistent with ART for 4.21 #399
• Full changelog

cluster-policy-controller

• OCPBUGS-62440: Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.21 #169
• Full changelog

cluster-samples-operator

• OCPBUGS-63481: references to github.com/sclorg/django-ex.git now also refer to the branch #654
• OCPBUGS-62409: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.21 #651
• Full changelog

cluster-storage-operator

• NO-JIRA: Remove ibm-cloud-managed-cleanup yaml #586
• STOR-2560: Add readOnlyRootFilesystem to hypershift and ibm-cloud-managed #629
• NO-JIRA: Update OCP documentation links to latest versions #636
• STOR-2523: Add hypershift managed-by labels for csi driver operators #627
• OCPBUGS-62669: Move metrics to vsphere driver #625
• OCPBUGS-60637: remove static value for runAsUser in securityContext #619
• OCPBUGS-62421: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.21 #624
• OCPBUGS-62172: Add app label to Manila deployment #628
• OCPBUGS-61112: add Azure Disk CSI driver SA name to CredentialsRequest #618
• STOR-2297: remove oVirt code from CSO #617
• Full changelog

cluster-update-keys

• OCPBUGS-62464: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.21 #86
• Full changelog

cluster-version-operator

• OTA-1585: test: Include the compressed tests binary in the CVO container image #1236
• NO-JIRA: Clean up code to remove ReconciliationIssues #1253
• OTA-1585: Add conformance test suites to the CVO tests extension #1238
• OCPBUGS-61872: Add ClusterVersionOperator manifests to TechPreviewNoUpgrade clusters #1232
• OCPBUGS-62861: temporarily disable metrics auth for hypershift clusters #1243
• OTA-1627: pkg/cincinnati: Centralize release metadata parsing #1231
• NO-JIRA: Move myself to emeritus #1239
• OCPBUGS-62416: Updating cluster-version-operator-container image to be consistent with ART for 4.21 #1237
• OTA-1585: test: Rename an existing test to comply with the OTE integration guide #1235
• Full changelog

configmap-reloader

• OCPBUGS-62503: Updating configmap-reload-container image to be consistent with ART for 4.21 #74
• Full changelog

console

• CONSOLE-4601: Migration of tests from Enzyme to React Testing Library #15510
• OCPBUGS-63471: Render a button if there is 1 action #15636
• OCPBUGS-63382: Display missing environment var values and correct styling #15625
• CONSOLE-4835: Migrate topology to dynamic #15617
• CONSOLE-4630: Add children prop to some places #15548
• NO-JIRA: reintroduce load bearing import cycles #15651
• OCPBUGS-63707: Never allow OTHER_CATEGORY in categories #15660
• OCPBUGS-60937: Updated PromQL to include component specific namespace #15438
• OCPBUGS-62296: Preserve path on perspective switch #15541
• CONSOLE-4837: Migrate console-app to dynamic #15620
• OCPBUGS-62939: “View events” and ‘View all events’ point to the same page on ‘Overview’->‘Activity’ card. #15606
• CONSOLE-4718: Update Administrator nav section to use ConsoleDataView #15567
• CONSOLE-4838: Make DataView component work with arbitrary data objects #15622
• CONSOLE-4604: Migrate enzyme packages/console-shared unit tests to React Testing Li… #15581
• OCPBUGS-61509: Fix “operator installing” hint in operator details panel #15480
• CONSOLE-4836: Migrate console-demo-plugin to dynamic-demo-plugin #15618
• OCPBUGS-61870: Automatically redirect all-namespaces catalog to default namespace #15584
• OCPBUGS-63433: Turn on fContentSecurityPolicyEnabled by default #15630
• OCPBUGS-63384: Fix eslint warnings and prevent future ones #15629
• OCPBUGS-62937: Add telemetry events #15602
• OCPBUGS-62483: limit node log length to 1000 lines #15597
• OCPBUGS-63429: Expose prometheus tenancy label path as a proxy #15621
• CONSOLE-4724: Update Compute nav section to use ResourceDataView #15604
• OCPBUGS-60636: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15583
• CONSOLE-4761: Add sort select field with Relevance, A-Z, Z-A options #15580
• CONSOLE-3637: Bump rjsf to 4.x #15551
• CONSOLE-4725: Update User Management list pages to use ResourceDataView #15579
• OCPBUGS-63059: DRY up RTL configure #15615
• CONSOLE-4776: Migrate enzyme packages/container-security unit tests to React Testin… #15611
• OCPBUGS-62156: Unique “key” prop warning in the UserPreferencePage #15534
• CONSOLE-4821: Remove gitops-plugin #15576
• OCPBUGS-62593: Updating openshift-enterprise-console-container image to be consistent with ART for 4.21 #15542
• CONSOLE-4615: Update DefaultList to use ResourceDataView #15560
• OCPBUGS-61660: Fix Bare Metal Hosts nav item #15609
• CONSOLE-4603: Migrate enzyme “packages/console-dynamic-plugin-sdk” unit tests to Re… #15540
• OCPBUGS-61767: Duplicate CRs are shown as Operand instances in operator uninstallation modal #15557
• CONSOLE-4820: Migrate olmv0 to dynamic #15566
• OCPBUGS-33879: use tenancy path for project scoped status card #15585
• OCPBUGS-62947: bump dompurify to latest #15586
• CONSOLE-4819: Migrate container-security to dynamic #15565
• CONSOLE-4602: Migrate enzyme “packages/console-app” unit tests to React Testing Library #15514
• OCPBUGS-60603: Add bearer token file configuration to oc-environment script #15521
• OCPBUGS-62315: Correct the width of the cluster config toolbar filter input #15546
• CONSOLE-4795, CONSOLE-4797, CONSOLE-4801: Migrate some static extensions to dynamic #15552
• CONSOLE-4804: Migrate TopologyCreateConnector to dynamic #15549
• CONSOLE-4800: Migrate HorizontalNavTab to dynamic #15553
• OCPBUGS-59529: Prevent the topology context menu items from truncating #15524
• CONSOLE-4798: Migrate StorageClassProvisioner to dynamic #15550
• OPRUN-4086: Add ClusterCatalog controller #15466
• NO-JIRA: chore(OWNERS): remove Mylanos from OWNERS #15559
• CONSOLE-4332: Update the secrets forms to use PF components #15513
• OCPBUGS-62313: Returning from any Secret Create page does not return to secret page #15543
• CONSOLE-4684: Refactor machine-set modals #15484
• OCPBUGS-62281: InsecureSkipVerify to true for results proxy endpoint in off-cluster #14888
• CONSOLE-4808: update resource-log.cy.ts #15539
• And 3 elided commits (e.g. from squash or rebase merges)
• Full changelog

console-operator

• OCPBUGS-61432: Revert “#1052 fix(oidc): fix OIDCClientSecretGet condition” #1058
• OCPBUGS-59939: Bumped to latest console-operator version #1055
• OCPBUGS-62512: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.21 #1050
• OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1052
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• no-jira: Update OWNERS #204
• Full changelog

coredns

• NO-JIRA: Updating coredns-container image to be consistent with ART for 4.21 #154
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OSASINFRA-3954: Rebase main onto release-1.34 #354
• OCPBUGS-62582: Updating csi-driver-manila-container image to be consistent with ART for 4.21 #351
• OCPBUGS-62544: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.21 #352
• OCPBUGS-62575: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.21 #350
• NO-JIRA: shiftstack: Update OWNERS #353
• Full changelog

csi-driver-nfs

• NO-JIRA:shiftstack: Update OWNERS #162
• OCPBUGS-62509: Updating csi-driver-nfs-container image to be consistent with ART for 4.21 #161
• Full changelog

csi-external-attacher

• OCPBUGS-61394: UPSTREAM: 682: Skip VolumeAttachments of other drivers #88
• Full changelog

csi-external-provisioner

• OCPBUGS-62541: Updating csi-provisioner-container image to be consistent with ART for 4.21 #116
• Full changelog

csi-external-resizer

• OCPBUGS-62504: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.21 #178
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• OCPBUGS-62423: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.21 #188
• Full changelog

csi-livenessprobe

• STOR-2586: Rebase to v2.17.0 for OCP 4.21 #76
• OCPBUGS-62403: Updating csi-livenessprobe-container image to be consistent with ART for 4.21 #77
• Full changelog

csi-node-driver-registrar

• OCPBUGS-60108: update log level verbosity to not clutter logs #86
• OCPBUGS-62506: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.21 #85
• Full changelog

docker-builder

• OCPBUGS-62340: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.21 #481
• Full changelog

docker-registry

• OCPBUGS-62576: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.21 #448
• Full changelog

etcd

• OCPBUGS-63473: 4.21 rebase 3.5.24 #346
• OCPBUGS-62338: Updating ose-etcd-container image to be consistent with ART for 4.21 #342
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-62572: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.21 #92
• NO-JIRA: Update OWNERS #90
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-62417: Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.21 #249
• Full changelog

gcp-machine-controllers

• OCPBUGS-62520: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.21 #130
• Full changelog

gcp-pd-csi-driver

• STOR-2582: Rebase gcp-pd-csi-driver to v1.21.6 for OCP 4.21 #85
• Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.21 #84
• Full changelog

gcp-workload-identity-federation-webhook

• OCPBUGS-62591: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.21 #10
• Full changelog

haproxy-router

• OCPBUGS-62501: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.21 #679
• OCPBUGS-62555: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.21 #680
• Full changelog

hyperkube, kube-proxy, pod

• OCPBUGS-61377: UPSTREAM: <carry>: Re-enable temporarily disabled kuberc tests #2501
• NO-JIRA: enable CBOR tests #2500
• OCPBUGS-62270: UPSTREAM: <carry>: Skip CPU resource status for workload-pinned pods #2490
• OCPSTRAT-2371: Update to Kubernetes v1.34.1 #2484
• OCPBUGS-62608: Updating openshift-enterprise-pod-container image to be consistent with ART for 4.21 #2481
• OCPBUGS-60610: UPSTREAM: 134199: Promote regression-issue-74839 to 1.4 #2472
• OCPBUGS-43994: UPSTREAM: <carry>: kube-apiserver: wire through isTerminating into handler chain #2477
• Full changelog

hypershift

• OCPBUGS-38358: Fix nil pointer dereference in AWS CloudProviderConfig #7129
• OCPBUGS-60637: feat(cpo): enable tests for UID security context in storage components #6934
• OCPBUGS-51136: revert scc annotation for components in kube-system #7130
• OCPBUGS-62060: fix(cmd/destory/aws): detach managed policies before deleting inline policies #7033
• NO-JIRA: fix(ai): fix plugin marketplace name #7127
• CNTRLPLANE-1756: fix(ai-skill): prevent security warning in git-commit-format skill #7125
• CNTRLPLANE-1644: Request serving topology end to end test #7031
• OCPBUGS-62496: fix: delete old profile during replacement #7089
• CNTRLPLANE-1650: chore(tekton): consolidate main branch pipelines #7053
• OCPBUGS-63639: add support for control-plane-operator hotfix builds #7119
• CNTRLPLANE-1687: feat(e2e): add support for azure-workload-identities-file flag #7101
• CNTRLPLANE-1681: chore(deps): update mvdan.cc/unparam digest to 0df0534 #7049
• OCPBUGS-61296: fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7087
• OCPBUGS-51136: specify SCC annotation for pods in data plane #7091
• CNTRLPLANE-1681: chore(deps): update sigs.k8s.io/cluster-api-provider-openstack/orc digest to e4f56a2 #7096
• OCPBUGS-63205: fix(e2e): correct readOnlyRootFilesystem test logic #7076
• NO-JIRA: docs(ai): add reference to AGENTS.md for AI agent guidance #7085
• OCPBUGS-61941: fix(ingress): add LoadBalancerSourceRanges support for external router service #6859
• OCPBUGS-63175: remove NTO Service and ServiceMonitor #7086
• NO-JIRA: fix(ibm): Update version information for Red Hat OpenShift on IBM Cloud #6776
• OCPBUGS-62871: fix(e2e): refactor createHostedCluster to remove deps between option settings #6997
• CNTRLPLANE-475: Enable Azure NodePool API happy path to pick image #6904
• NO-JIRA: Add Claude Code skills and Azure unit tests #7074
• NO-JIRA: refactor(ignitionserver): move lookupMappedImage to shared util package #6778
• GCP-97: Add initial GCP platform support to Hosted Cluster API #6960
• OCPBUGS-63130: fix: routes are not used in case of IBM Cloud #7054
• OCPBUGS-63153: Revert “fix(capi-provider): wait for infrastructure resource before startup” #7057
• CNTRLPLANE-1550, CNTRLPLANE-1552: Implement environment variable override for shared ingress HAProxy image #6989
• OCPBUGS-63049: Make the hypershift CLI binary FIPS-compliant #7032
• OCPBUGS-61164: Add per-pod crash toleration #6958
• OCPBUGS-60472: fix kubevirt, use 100.66.0.0/16 for join subnet #6978
• OCPBUGS-36389: Omit metadata for telemetry remote write and ensure _id label #6208
• OCPBUGS-63172: control-plane-operator/…/ingress-operator/deployment: Declare a metrics port #7052
• OCPBUGS-63215: fix: hosted cluster CRD compatibility with ocp 4.15 #7069
• CNTRLPLANE-1673: feat(claude): add /test-tag-pipeline command #7062
• NO-JIRA: Configure team marketplace for openshift-eng/ai-helpers plugins #7068
• OCPBUGS-63194: fix(konflux): correct ADDITIONAL_BASE_IMAGES parameter typo in tag pipeline #7064
• OCPBUGS-61881: Red Hat Konflux update hypershift-gomaxprocs-webhook #7063
• OCPBUGS-63194: fix(konflux): fix tag pipeline EC failures #7060
• OCPBUGS-55751: Fix Konflux tag pipeline template variable substitution #6910
• CNTRLPLANE-1620: feat(gomaxprocs-webhook): introduce admission webhook to auto-set GOMAXPROCS #6994
• OCPBUGS-63148: bump Konflux build images #7055
• CNTRLPLANE-1615: Add repo metrics tool for tracking AI-assisted commits #6983
• CNTRLPLANE-980: feat(api): Validation for hc.status.configuration.authentication status #6883
• OCPBUGS-61829: resolve initContainer permission issue after node reboot #6990
• NO-JIRA: test: update external-oidc e2e tests to dynamically determine tests to run #6924
• NO-JIRA: migrate renovate config #7029
• CNTRLPLANE-1643: implement multi-branch strategy with security-focused release management #7023
• CNTRLPLANE-1641: update Tekton tasks to latest trusted versions #6998
• OCPBUGS-62172: Add OpenStack node drivers to allowed non-read-only root filesystem containers #6946
• OCPBUGS-62863: feat(cmd): collect ServiceMonitor and PodMonitor resources in dump #6970
• NO-JIRA: chore(ai): add ability for jira-solve to save a plan spec first #6995
• CNTRLPLANE-1493: Add Claude command for automated Konflux task updates #6921
• CNTRLPLANE-1484: Expose cluster autoscaler metrics in HCP #6902
• CNTRLPLANE-1582: Prevent azure cluster destroy command from deleting managed/main resource group #6956
• CNTRLPLANE-1543: fix(aws): use clean image for placeholder nodes #6935
• CNTRLPLANE-1468: feat(install): add command line argument for ImagePullPolicy configuration #6875
• NO-JIRA: feat(claude): add e2e-analyze command for CI failure analysis #6737
• CNTRLPLANE-1374: feat(azure): add setup scripts for self-managed Azure hosted clusters #6752
• NO-JIRA: chore(ai): configure all agents to inherit model configuration #6906
• CNTRLPLANE-1332: docs(azure): add self-managed Azure HyperShift overview guide #6948
• CNTRLPLANE-1432: Make PSA test conditional on OpenShiftPodSecurityAdmission feature gate #6923
• CNTRLPLANE-1581: feat(azure): relax API to make externalDNS optional for self-managed clusters #6951
• OCPBUGS-62446: fix(hcco): add retry mechanism for HCP retrieval to handle transient connectivity issues #6918
• NO-JIRA: docs(jira-solve): require godoc comments and unit tests for new functions #6957
• OCPBUGS-60637: feat(cpo): add UID security context to CSO deployment #6786
• OCPBUGS-62407: chore(build): update container images to 4.21 #6936
• NO-JIRA: Add openstack-reviewers, openstack-approvers #6911
• GCP-96: add GCPPlatform feature gate #6929
• CNTRLPLANE-1332: docs(readme): correct spelling mistake #6943
• CNTRLPLANE-1332: docs(azure): add self-managed cluster setup documentation #6808
• OCPBUGS-61245: Fix driver-config ConfigMap content flapping due to random ordering #6907
• CNTRLPLANE-1545: docs(commands): improve jira-solve command with logical commit organization #6937
• NO-JIRA: chore(ci): update Konflux Tekton tasks to latest trusted versions #6928
• OCPBUGS-62328: Add missing svc-kubeconfig mount to CAPO Deployment #6909
• OCPBUGS-62324: Fix test-e2e annotations flag parsing #6908
• AUTOSCALE-322: fix karpenter token secret leak #6790
• CNTRLPLANE-980: feat(api): add hc.status.configuration.authentication status field #6261
• NO-JIRA: fix(e2e): extend ValidateHostedClusterConditions timeout #6913
• KFLUXSPRT-5246: update base images from RHEL9 ELS to UBI9 minimal 9.4 #6916
• OCPBUGS-62172: Add Manila, Cinder to list of pods allowed readOnlyRootFileSystem=false #6885
• NO-JIRA: fix(test): support external oidc settings on non-aws platform #6754
• Full changelog

ibm-cloud-controller-manager

• OCPCLOUD-3095: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.34 (64b1744) into main #82
• OCPBUGS-62342: Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 4.21 #86
• Full changelog

ibm-vpc-block-csi-driver

• STOR-2589: Rebase to upstream v5.2.19 for OCP 4.21 #113
• Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.21 #112
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-62375: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.21 #156
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-62486: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.21 #130
• Full changelog

ibmcloud-machine-controllers

• OCPBUGS-62491: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.21 #71
• Full changelog

insights-operator

• NO-JIRA: remove trailing commas from ConfigMap example #1166
• OCPBUGS-63015: QEMU logs are not gathered if there are pending status virt-launcher pods #1164
• NO-JIRA: add CLAUDE.md #1162
• CCXDEV-15577: retry mechanism for network error #1161
• NO-JIRA: remove CRD manifests #1156
• CCXDEV-15551: Decouple CRD storage specs #1157
• OCPBUGS-60870: The Gather Job did not check the current configuration before running #1154
• OCPBUGS-61893: set extractor as default container #1141
• OCPBUGS-62215: operator is not set as degraded when failed #1151
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• OCPBUGS-62351: Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 #53
• OCPBUGS-62433: Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 #54
• Full changelog

ironic

• NO-ISSUE: Documented prerequisites for building ironic-image locally #710
• METAL-1597: Fix update workflow #708
• NO-ISSUE: Update ironic and sushy commit #704
• METAL-1597: Install curl-minimal in update workflow #706
• METAL-1597: Automatically update requirements.cachito #705
• METAL-1599: Allow additional PXE file mount point #702
• OCPBUGS-62443: Updating ironic-container image to be consistent with ART for 4.21 #699
• OCPBUGS-62201: Bump ironic to include idrac10 fix #697
• Full changelog

ironic-agent

• METAL-1597: Fix update workflow #204
• METAL-1597: Install curl-minimal in update workflow #202
• METAL-1597: Automatically update requirements.cachito #201
• OKD-297: Fix broken OKD4.20 ironic-agent-image #200
• OKD-295: Fix broken OKD ironic-agent-image #199
• OCPBUGS-62329: Updating ironic-agent-container image to be consistent with ART for 4.21 #197
• Full changelog

ironic-machine-os-downloader

• OCPBUGS-62357: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.21 #107
• Full changelog

ironic-static-ip-manager

• OCPBUGS-62511: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.21 #54
• Full changelog

keepalived-ipfailover

• Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.21 #214
• Full changelog

kube-metrics-server

• OCPBUGS-62397: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.21 #47
• Full changelog

kube-rbac-proxy

• OCPBUGS-62563: Updating kube-rbac-proxy-container image to be consistent with ART for 4.21 #126
• Full changelog

kube-state-metrics

• OCPBUGS-62356: Updating kube-state-metrics-container image to be consistent with ART for 4.21 #125
• Full changelog

kube-storage-version-migrator

• OCPBUGS-62566: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.21 #234
• Full changelog

kubevirt-csi-driver

• OCPBUGS-62564: Updating ose-kubevirt-csi-driver-container image to be consistent with ART for 4.21 #70
• Full changelog

machine-api-operator

• OCPBUGS-63738: Revert “SPLAT-2526: Refactor openshift-tests-ext” #1426
• SPLAT-2526: Refactor openshift-tests-ext #1423
• OCPCLOUD-3072: Support AMD SEV-SNP on AWS #1420
• OCPBUGS-62333: Updating ose-machine-api-operator-container image to be consistent with ART for 4.21 #1421
• Full changelog

machine-config-operator

• MCO-1911: Migrate the mco_password test suite from the private repository to the MCO repository #5374
• MCO-1898: MCS serves image-aware first-boot config #5357
• OCPBUGS-62714: Temporary policy.json for PIS rpm-ostree rebasing #5345
• MCO-1807: Add CPMS support in the MCO’s boot image controller #5332
• OCPNODE-3806: Do not change default PSI setting in MCO #5343
• OCPBUGS-62925: RHEL10 RT kernel packages filtering #5362
• NO-ISSUE: Add AMI update automation script #5351
• OCPBUGS-62376: Updating ose-machine-config-operator-container image to be consistent with ART for 4.21 #5316
• OCPBUGS-52302: MCO-1713: Update MachineConfigNode resource to include on cluster image mode fields #5282
• OCPBUGS-54682: Fix - NetworkManager restart or crash renders br-ex unusable #5304
• OCPNODE-3747: Disable Swap mode in Kubelet and enable drop-in directory #5294
• OCPEDGE-2188: embed fencing validator into TNF MCO #5285
• NO-JIRA: shiftstack: Update OWNERS #5334
• OCPBUGS-62510: Skip rpm-ostree local rebase if no PIS #5333
• OCPBUGS-62493: Only fire OSImageURLOverridden and set metrics on changes #5319
• MCO-1844: Remove MissingMachineConfig Alert #5261
• MCO-1685: Add mco-sanitize utility main logic #5303
• OCPBUGS-59968: Cert Controller should live fetch SAN IPs during cert rotation #5245
• OCPBUGS-62341: Ensure the node passed to RunCordonOrUncordon comes from the latest updated state #5305
• OCPBUGS-60805: configure-ovs: work around a Cisco switch issue #5274
• MCO-408: Add OpenShift-native access to change logLevel for MachineConfigOperator components #5291
• OCPBUGS-42303: Networking: reset ovn-remote config and allow ovnkube controller to s… #5123
• Full changelog

machine-image-customization-controller

• METAL-1564: Use available images #147
• OCPBUGS-62505: Updating ose-image-customization-controller-container image to be consistent with ART for 4.21 #148
• Full changelog

machine-os-images

• OCPBUGS-61477: Acquire aarch64 ISO at runtime #67
• OCPBUGS-56049: Force rebuild for OCP 4.21 #66
• OCPBUGS-62596: Updating ose-machine-os-images-container image to be consistent with ART for 4.21 #69
• Full changelog

metallb-frr

• OCPBUGS-62371: Bump the root image version #109
• Full changelog

monitoring-plugin

• NO-JIRA: AGENTS.md #620
• NO-JIRA: chore: make dockerfile consistent with konflux, add make podman-cross-build command #619
• OU-1031: Show the alert request error to the user #607
• OBSINTA-777: [Incidents] Regression for Silences #615
• OBSINTA-777: [Incidents] Add filtering regression tests #613
• OU-1036: fetch metric labels from tenancy path when appropriate #608
• OBSINTA-777: [Incidents] Regression for Charts Display #609
• NO-JIRA: Display incidents’ last update time #610
• OBSINTA-777: Tests for Incidents Redux Related Regressions #606
• OBSINTA-858: Improve Cypress Incidents Testing Infrastructure #595
• OU-1033: close the first dropdown when deselecting incident #599
• OU-1032: resolve stale Redux state bug in incidents time range calculation #598
• OCPBUGS-63056, OCPBUGS-63061: Improve alignment with console SDK #600
• OU-1030: revert most of my previous changes & avoid flickering when chang… #596
• OU-995: automation monitoring testing namespace level #594
• OU-1024: Add translations for all strings in Incidents page #570
• OU-1022: recalculate incident x values when filtering #589
• OU-1011: Display determistic start and end dates #585
• OU-999: automation monitoring plugin image injection and kubevirt installation cleanup working #590
• OCPBUGS-62276: allow additional TLS config #580
• OCPBUGS-62454: Updating monitoring-plugin-container image to be consistent with ART for 4.21 #566
• OU-1011: Render short-lived incidents and alerts #581
• OU-1016: avoid displaying stale alerts data when selecting another incident detail #573
• OBSINTA-789: Sort alerts by start time #577
• NO-JIRA: fix handle empty queries when removing incident filters #574
• NO-JIRA: Fix tooltip vertical position #576
• OU-986: automation removing uncaught exception #575
• OBSINTA-789: Fix alert loading and processing #569
• OU-1025: keep alerts populated for the incident, when the graph is hidden… #572
• NO-JIRA: chore: add unit test command and dependencies #571
• OBSINTA-857: Cypress add SKIP_ALL_INSTALL #568
• NO-JIRA: fix hermetic builds #564
• OBSINTA-858: Cypress incidents incident traversing robustness #556
• OBSINTA-858: Cypress incidents mocking metric name change workaround #553
• COO-1134: fix: update vulnerable dependencies #561
• NO-JIRA: Update .gitignore (Cypress specific) #558
• Full changelog

multus-admission-controller

• OCPBUGS-62412: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.21 #110
• Full changelog

must-gather

• OSSM-10530: add Istio/Gateway API gather scripts #503
• OCPBUGS-62551: Updating ose-must-gather-container image to be consistent with ART for 4.21 #507
• Full changelog

network-interface-bond-cni

• OCPBUGS-62415: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.21 #97
• Full changelog

network-metrics-daemon

• OCPBUGS-62414: Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.21 #137
• Full changelog

network-tools

• NO-JIRA: Fix jira ID for new members #164
• OCPBUGS-62553: Updating ose-network-tools-container image to be consistent with ART for 4.21 #162
• NO-JIRA:Add two new team members #163
• NO-JIRA: Add Marty P to bug tooling #161
• Full changelog

networking-console-plugin

• CNV-70637: replace useProjectsWithPrimaryUserDefinedLabel hook for VM networks #287
• CNV-70637: fix selecting multiple projects for VM network #286
• CNV-70637: rename VirtualMachine networks to Virtual Machine Networks #289
• CNV-70637: show VirtualMachine network pages only if nmstate plugin is installed #288
• CNV-70637: SelectTypeahead selection fixes #285
• CNV-60063: fixing the Create ClusterUserDefinedNetwork form appearance #280
• CNV-62168: Typos in Networking Pages #277
• CNV-56937: Hiding the option to create cluster user defined networks or non-priv users, allowing the option to create CUDN for users with access not just admin #284
• CNV-56937: Hiding the option to create cluster user defined networks or non-priv users #283
• CNV-61569: Mark OVN K8s secondary localnet as deprecated #282
• OCPBUGS-62442: Updating networking-console-plugin-container image to be consistent with ART for 4.21 #279
• CNV-70018: fix null error #278
• Full changelog

nutanix-cloud-controller-manager

• OCPBUGS-62418: Updating ose-nutanix-cloud-controller-manager-container image to be consistent with ART for 4.21 #51
• Full changelog

nutanix-machine-controllers

• OCPBUGS-62378: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.21 #123
• Full changelog

oauth-apiserver

• OCPBUGS-62612: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #148
• Full changelog

oauth-proxy

• OCPBUGS-62590: Updating golang-github-openshift-oauth-proxy-container image to be consistent with ART for 4.21 #337
• Full changelog

oauth-server

• OCPBUGS-62391: Updating oauth-server-container image to be consistent with ART for 4.21 #199
• Full changelog

oc-mirror

• no-jira: v2: add golangci-lint v2 config #1295
• CLID-460: Adds a column with the actual implemented logic #1288
• CLID-443: add mandatory –v1/–v2 flag #1284
• OCPBUGS-60571: reject configurations with duplicated keys and/or entries #1275
• CLID-430: migration to containers/container-libs #1255
• OCPBUGS-55489: removes unintended exec permissions #1285
• OCPBUGS-56398: Removes the clean up of logs directory #1289
• OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 (missing files of pr 1280) #1283
• OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 #1280
• OCPBUGS-60929: generate the archive only after mirroring #1272
• Full changelog

olm-catalogd, olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #538
• OCPBUGS-63347: [OTE]: Enhance single/own ns based on review comments ( Follow-Up of: 714977c69 ) #539
• OCPBUGS-63347: Fix flake for single/own ns tests by ensuring uniquess and waiting for k8s cleanups #536
• NO-ISSUE: Update to new feature-gate options in helm #537
• NO-ISSUE: Synchronize From Upstream Repositories #532
• OCPBUGS-63347: Define Default timeouts and apply their usage accross to avoid flakes #535
• NO-ISSUE: UPSTREAM: <carry>: fix cases 81696 and 74618 for product code changes #528
• OPRUN-4181: UPSTREAM: <carry>: support singleown cases in disconnected #524
• NO-ISSUE: Synchronize From Upstream Repositories #526
• OPRUN-4194: Update OCP catalogs to v4.21 #518
• NO-ISSUE: Synchronize From Upstream Repositories #523
• OPRUN-4197: Upgrade OCP image from 4.20 to 4.21 #517
• OPRUN-4134: Add 2 new tests for Single/Own Namespace install mode support #502
• OPRUN-4199: [Default Catalog Tests] - Change logic to get ocp images from openshift/catalogd/manifests.yaml #521
• OCPBUGS-62517: Synchronize from upstream #519
• OPRUN-4176: Consolidate build API #514
• OPRUN-4156: UPSTREAM: <carry>: support webhook case in disconnected #508
• NO-ISSUE: Synchronize From Upstream Repositories #512
• OPRUN-4176: Update does-not-exist and simple install to work i… #510
• NO-ISSUE: Clean up cp-manifests #511
• NO-ISSUE: Synchronize From Upstream Repositories #506
• NO-ISSUE: UPSTREAM: <carry>: check kubeconfig only run-test and run-suite #507
• NO-ISSUE: Fix VERSION replacement in catalog bindata #505
• NO-ISSUE: Synchronize From Upstream Repositories #498
• OCPBUGS-62753: for incompatible test add func to wait SA creation #501
• NO-ISSUE: Synchronize From Upstream Repositories #497
• OPRUN-4169: OTE building controller image #483
• OPRUN-4080: Remove kustomize manifests from images and repo #494
• NO-ISSUE: Synchronize From Upstream Repositories #493
• OCPBUGS-62372: Updating ose-olm-catalogd-container image to be consistent with ART for 4.21 #491
• NO-ISSUE: Synchronize From Upstream Repositories #492
• OCPBUGS-62370: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.21 #490
• OCPQE-30671: UPSTREAM: <carry>: migrate more cases from tests-private #488
• NO-ISSUE: Synchronize From Upstream Repositories #489
• Full changelog

openshift-apiserver

• NO-JIRA: Created an OWNERS file for the tests-extension directory for separate ote scaffold #567
• OCPBUGS-62516: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.21 #560
• Full changelog

openshift-controller-manager

• OCPBUGS-62559: Updating ose-openshift-controller-manager-container image to be consistent with ART for 4.21 #414
• Full changelog

openshift-state-metrics

• OCPBUGS-62431: Updating openshift-state-metrics-container image to be consistent with ART for 4.21 #126
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-62567: Updating openstack-cluster-api-controllers-container image to be cons… #379
• NO-JIRA: Fix internal vendoring #378
• NO-JIRA: shiftstack: Update OWNERS #377
• Full changelog

openstack-machine-api-provider

• OCPBUGS-62473: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.21 #138
• NO-JIRA: shiftstack: Update OWNERS #139
• Full changelog

openstack-resource-controller

• OCPBUGS-62455: Updating openstack-resource-controller-container image to be consistent with ART for 4.21 #22
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Synchronize From Upstream Repositories #1134
• NO-ISSUE: Update verify_commits.sh to use main branch #1127
• OCPQE-30995: Define AI Guide for OLMv0 QE Migration cases #1128
• OCPBUGS-59768: Synchronize From Upstream Repositories #1129
• OCPQE-30680: migrate opm cases to OTE #1126
• OCPQE-30741: support opm cases #1121
• OCPQE-30781: support hypershift binary #1119
• OCPQE-30679: migrate more cases from tests-private to make layout #1118
• OCPQE-29415: correct suite name #1117
• OCPQE-29415: enhance filters to add more suites #1116
• Full changelog

operator-marketplace

• NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.26.0 to 2.27.1 #682
• NO-ISSUE: 🌱 Upgrade dependencies ( github.com/openshift/api, github.com/openshift/library-go and indirect github.com/prometheus/procfs ) #681
• NO-ISSUE: Upgrade OCP dependencies #680
• OPRUN-4198: Upgrade deps to have compatible k8s version #676
• OPRUN-4198: upgraded github.com/openshift/api, github.com/openshift/library-go and ginkgo #677
• NO-ISSUE: Update Dockerfile.okd to use OCP image 4.21 #678
• OCPBUGS-62384: Updating marketplace-operator-container image to be consistent with ART for 4.21 #674
• NO-ISSUE: Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.2 #661
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-50709: DownStream Merge [10-28-2025] #2832
• OCPBUGS-56749: DownStream Merge [10-24-2025] #2829
• OCPBUGS-59552, OCPBUGS-61865, OCPBUGS-62636: DownStream Merge [10-19-2025] #2817
• OCPBUGS-62546: Updating ovn-kubernetes-microshift-container image to be consistent with ART for 4.21 #2772
• CORENET-6160: DownStream Merge [10-10-2025] #2798
• OCPBUGS-62545: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.21 #2771
• CORENET-6055: Dockerfile: Unpin OVN and consume the latest from FDP. #2721
• OCPBUGS-42303, OCPBUGS-56783: DownStream Merge [10-08-2025] #2790
• OCPBUGS-62574: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.21 #2756
• OCPBUGS-60468: DownStream Merge [09-23-2025] #2762
• Full changelog

powervs-block-csi-driver-operator

• STOR-2523: Add hypershift managed-by labels for csi driver operators #89
• OCPBUGS-62373: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.21 #88
• Full changelog

powervs-cloud-controller-manager

• OCPBUGS-62515: Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.21 #88
• Full changelog

powervs-machine-controllers

• OCPBUGS-62519: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.21 #129
• Full changelog

prom-label-proxy

• OCPBUGS-62508: Updating prom-label-proxy-container image to be consistent with ART for 4.21 #386
• Full changelog

prometheus

• NO-ISSUE: [bot] Bump openshift/prometheus to v3.6.0 #278
• NO-JIRA: update Prometheus to v3.6.0 #277
• OCPBUGS-62401: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.21 #274
• Full changelog

prometheus-alertmanager

• OCPBUGS-62428: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.21 #107
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• NO-JIRA: Bump openshift/prometheus-operator to v0.86.1 #345
• MON-4395: Bump openshift/prometheus-operator to v0.86.0 #344
• OCPBUGS-62448: Updating prometheus-config-reloader-container image to be consistent with ART for 4.21 #341
• OCPBUGS-62542: Updating prometheus-operator-container image to be consistent with ART for 4.21 #342
• Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.21 #340
• Full changelog

prometheus-node-exporter

• OCPBUGS-62727: Bump openshift/node_exporter to v1.10.2 #172
• Full changelog

rhel-coreos, rhel-coreos-extensions

• NO-JIRA: update the okd repo for 4.21 #1862
• NO-JIRA: OWNERS: switch to joelcapitao #1861
• Full changelog

route-controller-manager

• OCPBUGS-62586: Updating ose-route-controller-manager-container image to be consistent with ART for 4.21 #65
• NE-2169: Move annotations and metrics to a constants file #66
• Full changelog

service-ca-operator

• TRT-2385: Remove all tests and add fake test that always passes #289
• CNTRLPLANE-1720: Separate OTE scaffold for service-ca-operator #285
• CNTRLPLANE-1720: Separate ote scaffold for test extension #283
• NO-JIRA:Created an OWNERS file for the tests-extension directory #284
• OCPBUGS-62377: Updating ose-service-ca-operator-container image to be consistent with ART for 4.21 #276
• OCPBUGS-63124: Fix e2e-aws-operator e2e test failures #281
• Full changelog

tests

• OCPBUGS-55755: Create intervals when etcd disk metrics are over upstream recommended thresholds #30413
• TRT-2386: Revert “Revert “Merge pull request #30296 from hongkailiu/OTA-1637-reboot”” #30438
• OCPBUGS-63333: Add Dot Net 9.0 to Origin Tests #30401
• STOR-2340: Add e2e tests for storage network policy #30359
• TRT-2373: Revert “Revert “Merge pull request openshift#30269 from hongkailiu/OTA-1626”” #30426
• CNTRLPLANE-1485: fix(disruption): Using correct internal LB of apiserver for monitor test on ARO and Baremetal Hypershift #30307
• TRT-2386: Revert #30296 “OTA-1637: ClusterOperators should not go Progressing only for a node reboot” #30437
• NO-ISSUE: Automated - Update synthetic test data #30416
• OCPBUGS-63201: Updated the upgrade duration limit to 100 minutes for ppc64le #30390
• CNF-18661: Revert “ flake the missing port 9194 and 9193 once the team will fix will remove it” #30430
• OTA-1637: ClusterOperators should not go Progressing only for a node reboot #30296
• CNTRLPLANE-1544: tests: authorization/rbac: Align restricted-v3 rule #30427
• OCPBUGS-57334: Redact bearertoken in TestContext #29912
• OCPBUGS-63383: Fix empty operator name #30407
• OCPBUGS-61376: Isolate HPA tests #30411
• TRT-2373: Revert #30269 “OTA-1626: fail CI if any ClusterOperator takes too long to update” #30425
• OCPBUGS-63519: flake the missing port 9194 and 9193 once the team will fix will remove it #30424
• TRT-2144: Add tcpdump to in cluster disruption monitor test when disruption is … #30177
• NO-JIRA: fix hcpclustername #30422
• NO-ISSUE: Fixing and investigating flakes during overlapping test execution #30410
• CNTRLPLANE-1544: tests: authorization/rbac: Add restricted-v3 scc #30384
• OCPSTRAT-2371: Update to Kubernetes v1.34.1 #30346
• CNF-18661: add a test that should validate the communication matrix ports match the node’s listening ports #30003
• NO-JIRA: known-image-checker: do nothing in WriteContentToStorage #30344
• OTA-1626: fail CI if any ClusterOperator takes too long to update #30269
• NO-JIRA: Extend project deletion timeout #30393
• NO-JIRA: enhance TNF e2e test to handle quick member promotion #30385
• CNTRLPLANE-1662: Migrate OCP-32383 to upstream #30378
• CORENET-6373: ovn-k, virt, preconfigured udn addresses: Test MAC conflict detection #30314
• NO-ISSUE: Automated - Update synthetic test data #30334
• OCPBUGS-56281: gatewayapicontroller: Use dynamic client for OLM #30397
• MULTIARCH-5391: Add Disruptive ImageStreamImportMode Tests into a Disruptive Suite #30239
• OCPBUGS-62359: Check more operatorsProgressing #30367
• TRT-2275: some enhancement for e2e-analysis #30276
• OCPBUGS-63149: revert https://github.com/openshift/origin/pull/30054 #30386
• NO-JIRA: Combine global and command args in BackgroundRC #30382
• NO-JIRA: MCO add GetAlerts to the Monitor thanos struct #30379
• NO-JIRA: enhance-waitnodeready-util #30377
• OCPBUGS-63040: Add imagestream update dryrun test #30357
• OCPEDGE-1565: [TNF] Add double node failure recovery test #30370
• NO-JIRA: implement WithoutKubeconf method to clear config path #30371
• NO-JIRA: oc adm upgrade status: Record err and outputs #30151
• NO-JIRA:I Fixing race condtion #30360
• OCPBUGS-62552: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.21 #30327
• NO-JIRA: init lease-checker namespaces #30373
• NO-JIRA: generate unique namespace names for UDN tests #30348
• NO-JIRA: update namespace privilege check to use PSA label #30355
• OCPBUGS-56281: gatewayapicontroller: Clean up resources when done #29900
• NO-JIRA: another attempt at disabling blank issues #30369
• NO-JIRA: Make it clear that we do not monitor GH issues #30368
• NO-JIRA: Update OWNERS for compat_otp #30361
• NO-ISSUE: Add webhook image for the olmv1 tests #30356
• OTA-1637: ClusterOperators should not go Progressing only for cluster scaling #30297
• OCPBUGS-60593: Skip oauth test for external control plane topology #30200
• TRT-2351: Revert “NO-JIRA: Improve case execution time” #30363
• TRT-2349: Revert “make TLS registry tests required” #30358
• OCPNODE-3238: Add SigstoreImageVerificationPKI image policy validation tests #30315
• TRT-2346: Fix not initializing adminRESTConfig #30345
• OCPBUGS-60853: make TLS registry tests required #29074
• TRT-1854: remove upstream annotation framework #30340
• NO-JIRA: Filter preconfiguredIPs based on cluster IP family support #30338
• NO-JIRA: Improve case execution time #30329
• CORENET-6363: Add PreconfiguredUDNAddresses duplicate IP detection tests #30197
• OCPBUGS-62701: Revert TRT-1854: remove upstream annotation framework #30337
• Revert “Revert “NO-JIRA: Add olm into the known operator set”” #30325
• NO-JIRA: BugFix- don’t modify finalArgs in Template func #30328
• OCPNODE-3659: Not fail upgrade checks if all nodes are ready #30318
• OCPBUGS-62249: Tweak Endpoints admission test for upcoming change #30304
• MCO-1828: Remove pathological test in disruptive #30272
• OCPBUGS-61196: Add test that the ServiceCIDR API is blocked #30234
• NO-JIRA: oc adm upgrade status: Skip test in multihop update jobs #30150
• MCO-1865: Update MCO tests to be in only one test suite each #30309
• OCPBUGS-62474: CNTRLPLANE-1308: Enable OTE for OCM and OCM Operator #30270
• TRT-1854: remove upstream annotation framework #30305
• Revert “NO-JIRA: Add olm into the known operator set” #30313
• Full changelog

volume-data-source-validator

• OCPBUGS-62367: Updating volume-data-source-validator-container image to be consistent with ART for 4.21 #5
• Full changelog

vsphere-cloud-controller-manager

• OCPCLOUD-3087: Merge https://github.com/kubernetes/cloud-provider-vsphere:master (5691b82) into main #97
• OCPBUGS-62571: Updating ose-vsphere-cloud-controller-manager-container image to be consistent with ART for 4.21 #100
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-62332: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.21 #75
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-62344: Fix escaping of password #312
• OCPBUGS-57797: Degrade OCP cluster on storagepolicy sync errors #310
• Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.21 #311
• Full changelog

vsphere-problem-detector

• NO-JIRA: Add cursor command to debug the operator #192
• OCPBUGS-62595: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.21 #191
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.34.1-4.rhaos4.21.git5780ac7.el9
• kernel-5.14.0-570.60.1.el9_6
• openshift-kubelet-4.21.0-202510282026.p2.g9e794b8.assembly.stream.el9
• systemd-252-51.el9_6.2

Full list (564 packages)

• NetworkManager-1:1.52.0-7.el9_6
• NetworkManager-cloud-setup-1:1.52.0-7.el9_6
• NetworkManager-libnm-1:1.52.0-7.el9_6
• NetworkManager-ovs-1:1.52.0-7.el9_6
• NetworkManager-team-1:1.52.0-7.el9_6
• NetworkManager-tui-1:1.52.0-7.el9_6
• WALinuxAgent-udev-2.7.0.6-11.el9_6.1
• aardvark-dns-2:1.14.0-1.el9
• acl-2.3.1-4.el9
• adcli-0.9.2-1.el9
• afterburn-5.7.0-1.el9
• afterburn-dracut-5.7.0-1.el9
• alternatives-1.24-2.el9
• attr-2.5.1-3.el9
• audit-3.1.5-4.el9
• audit-libs-3.1.5-4.el9
• authselect-1.2.6-3.el9
• authselect-libs-1.2.6-3.el9
• avahi-libs-0.8-22.el9_6.1
• basesystem-11-13.el9
• bash-5.1.8-9.el9
• bash-completion-1:2.11-5.el9
• bind-libs-32:9.16.23-31.el9_6
• bind-license-32:9.16.23-31.el9_6
• bind-utils-32:9.16.23-31.el9_6
• binutils-2.35.2-63.el9
• binutils-gold-2.35.2-63.el9
• bootc-1.1.6-3.el9_6
• bootupd-0.2.27-4.el9_6
• bsdtar-3.5.3-6.el9_6
• bubblewrap-0.4.1-8.el9_5
• bzip2-1.0.8-10.el9_5
• bzip2-libs-1.0.8-10.el9_5
• c-ares-1.19.1-2.el9_4
• ca-certificates-2024.2.69_v8.0.303-91.4.el9_4
• checkpolicy-3.6-1.el9
• chrony-4.6.1-1.el9
• cifs-utils-7.1-2.el9
• clevis-21-208.el9
• clevis-dracut-21-208.el9
• clevis-luks-21-208.el9
• clevis-systemd-21-208.el9
• cloud-utils-growpart-0.33-1.el9
• composefs-1.0.8-1.el9
• composefs-libs-1.0.8-1.el9
• conmon-3:2.1.12-1.el9
• conmon-rs-0.6.6-0.rhaos4.18.el9.1
• console-login-helper-messages-0.21.3-1.el9
• console-login-helper-messages-issuegen-0.21.3-1.el9
• console-login-helper-messages-profile-0.21.3-1.el9
• container-selinux-4:2.237.0-2.el9_6
• containernetworking-plugins-1:1.6.2-2.el9_6
• containers-common-2:1-117.el9_6
• coreos-installer-0.24.0-3.el9_6
• coreos-installer-bootinfra-0.24.0-3.el9_6
• coreutils-8.32-39.el9
• coreutils-common-8.32-39.el9
• cpio-2.13-16.el9
• cracklib-2.9.6-27.el9
• cracklib-dicts-2.9.6-27.el9
• cri-o-1.34.1-4.rhaos4.21.git5780ac7.el9
• cri-tools-1.34.0-2.el9
• criu-3.19-1.el9
• criu-libs-3.19-1.el9
• crun-1.23.1-2.el9_6
• crypto-policies-20250128-1.git5269e22.el9
• crypto-policies-scripts-20250128-1.git5269e22.el9
• cryptsetup-2.7.2-3.el9_6.1
• cryptsetup-libs-2.7.2-3.el9_6.1
• curl-7.76.1-31.el9_6.1
• cyrus-sasl-gssapi-2.1.27-21.el9
• cyrus-sasl-lib-2.1.27-21.el9
• dbus-1:1.12.20-8.el9
• dbus-broker-28-7.el9
• dbus-common-1:1.12.20-8.el9
• dbus-libs-1:1.12.20-8.el9
• dbus-tools-1:1.12.20-8.el9
• device-mapper-9:1.02.202-6.el9
• device-mapper-event-9:1.02.202-6.el9
• device-mapper-event-libs-9:1.02.202-6.el9
• device-mapper-libs-9:1.02.202-6.el9
• device-mapper-multipath-0.8.7-35.el9_6.1
• device-mapper-multipath-libs-0.8.7-35.el9_6.1
• device-mapper-persistent-data-1.1.0-1.el9
• diffutils-3.7-12.el9
• dmidecode-1:3.6-1.el9
• dnf-4.14.0-25.el9
• dnf-data-4.14.0-25.el9
• dnsmasq-2.85-17.el9_6
• dosfstools-4.2-3.el9
• dracut-057-88.git20250311.el9_6
• dracut-network-057-88.git20250311.el9_6
• dracut-squash-057-88.git20250311.el9_6
• e2fsprogs-1.46.5-7.el9
• e2fsprogs-libs-1.46.5-7.el9
• efi-filesystem-6-2.el9_0
• efibootmgr-16-12.el9
• efivar-libs-38-3.el9
• elfutils-debuginfod-client-0.192-6.el9_6
• elfutils-default-yama-scope-0.192-6.el9_6
• elfutils-libelf-0.192-6.el9_6
• elfutils-libs-0.192-6.el9_6
• ethtool-2:6.11-1.el9
• expat-2.5.0-5.el9_6
• file-5.39-16.el9
• file-libs-5.39-16.el9
• filesystem-3.16-5.el9
• findutils-1:4.8.0-7.el9
• firewalld-filesystem-1.3.4-9.el9_5
• flashrom-1.2-10.el9
• fstrm-0.6.1-3.el9
• fuse-2.9.9-17.el9
• fuse-common-3.10.2-9.el9
• fuse-libs-2.9.9-17.el9
• fuse-overlayfs-1.14-1.el9
• fuse3-3.10.2-9.el9
• fuse3-libs-3.10.2-9.el9
• fwupd-1.9.26-1.el9
• fwupd-plugin-flashrom-1.9.26-1.el9
• gawk-5.1.0-6.el9
• gawk-all-langpacks-5.1.0-6.el9
• gdbm-libs-1:1.23-1.el9
• gdisk-1.0.7-5.el9
• geolite2-city-20191217-6.el9
• geolite2-country-20191217-6.el9
• gettext-0.21-8.el9
• gettext-libs-0.21-8.el9
• git-core-2.47.3-1.el9_6
• glib2-2.68.4-16.el9_6.2
• glibc-2.34-168.el9_6.23
• glibc-common-2.34-168.el9_6.23
• glibc-gconv-extra-2.34-168.el9_6.23
• glibc-minimal-langpack-2.34-168.el9_6.23
• glusterfs-6.0-57.4.el9
• glusterfs-client-xlators-6.0-57.4.el9
• glusterfs-fuse-6.0-57.4.el9
• glusterfs-libs-6.0-57.4.el9
• gmp-1:6.2.0-13.el9
• gnupg2-2.3.3-4.el9
• gnutls-3.8.3-6.el9_6.2
• gobject-introspection-1.68.0-11.el9
• gpgme-1.15.1-6.el9
• grep-3.6-5.el9
• groff-base-1.22.4-10.el9
• grub2-common-1:2.06-104.el9_6
• grub2-efi-x64-1:2.06-104.el9_6
• grub2-pc-1:2.06-104.el9_6
• grub2-pc-modules-1:2.06-104.el9_6
• grub2-tools-1:2.06-104.el9_6
• grub2-tools-minimal-1:2.06-104.el9_6
• gssproxy-0.8.4-7.el9
• gzip-1.12-1.el9
• hostname-3.23-6.el9
• hwdata-0.348-9.18.el9
• ignition-2.21.0-4.rhaos4.19.el9
• ignition-grub-2.21.0-4.rhaos4.19.el9
• ima-evm-utils-1.5-3.el9
• info-6.7-15.el9
• inih-49-6.el9
• initscripts-service-10.11.8-4.el9
• ipcalc-1.0.0-5.el9
• iproute-6.11.0-1.el9
• iproute-tc-6.11.0-1.el9
• iptables-libs-1.8.10-11.el9_5
• iptables-nft-1.8.10-11.el9_5
• iputils-20210202-11.el9_6.3
• irqbalance-2:1.9.4-2.el9_6.2
• iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
• iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
• isns-utils-libs-0.101-4.el9
• jansson-2.14-1.el9
• jose-14-1.el9
• jq-1.6-17.el9_6.2
• json-c-0.14-11.el9
• json-glib-1.6.6-1.el9
• kbd-2.4.0-11.el9
• kbd-legacy-2.4.0-11.el9
• kbd-misc-2.4.0-11.el9
• kernel-5.14.0-570.60.1.el9_6
• kernel-core-5.14.0-570.60.1.el9_6
• kernel-modules-5.14.0-570.60.1.el9_6
• kernel-modules-core-5.14.0-570.60.1.el9_6
• kernel-modules-extra-5.14.0-570.60.1.el9_6
• kexec-tools-2.0.29-5.el9_6.2
• keyutils-1.6.3-1.el9
• keyutils-libs-1.6.3-1.el9
• kmod-28-10.el9
• kmod-libs-28-10.el9
• kpartx-0.8.7-35.el9_6.1
• krb5-libs-1.21.1-8.el9_6
• less-590-5.el9
• libacl-2.3.1-4.el9
• libaio-0.3.111-13.el9
• libarchive-3.5.3-6.el9_6
• libassuan-2.5.5-3.el9
• libattr-2.5.1-3.el9
• libbasicobjects-0.1.1-53.el9
• libblkid-2.37.4-21.el9
• libbpf-2:1.5.0-1.el9
• libbrotli-1.0.9-7.el9_5
• libcap-2.48-9.el9_2
• libcap-ng-0.8.2-7.el9
• libcbor-0.7.0-5.el9
• libcollection-0.7.0-53.el9
• libcom_err-1.46.5-7.el9
• libcomps-0.1.18-1.el9
• libcurl-7.76.1-31.el9_6.1
• libdaemon-0.14-23.el9
• libdb-5.3.28-57.el9_6
• libdhash-0.5.0-53.el9
• libdnf-0.69.0-13.el9
• libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6
• libdrm-2.4.123-2.el9
• libeconf-0.4.1-4.el9
• libedit-3.1-38.20210216cvs.el9
• libev-4.33-6.el9
• libevent-2.1.12-8.el9_4
• libfdisk-2.37.4-21.el9
• libffi-3.4.2-8.el9
• libfido2-1.13.0-2.el9
• libgcc-11.5.0-5.el9_5
• libgcrypt-1.10.0-11.el9
• libgomp-11.5.0-5.el9_5
• libgpg-error-1.42-5.el9
• libgudev-237-1.el9
• libgusb-0.3.8-2.el9
• libibverbs-54.0-1.el9
• libicu-67.1-10.el9_6
• libidn2-2.3.0-7.el9
• libini_config-1.3.1-53.el9
• libipa_hbac-2.9.6-4.el9_6.2
• libjcat-0.1.6-3.el9
• libjose-14-1.el9
• libkcapi-1.4.0-2.el9
• libkcapi-hmaccalc-1.4.0-2.el9
• libksba-1.5.1-7.el9
• libldb-4.21.3-14.el9_6
• libluksmeta-9-12.el9
• libmaxminddb-1.5.2-4.el9
• libmicrohttpd-1:0.9.72-5.el9
• libmnl-1.0.4-16.el9_4
• libmodulemd-2.13.0-2.el9
• libmount-2.37.4-21.el9
• libmspack-0.10.1-0.7.alpha.el9
• libndp-1.9-1.el9
• libnet-1.2-7.el9
• libnetfilter_conntrack-1.0.9-1.el9
• libnfnetlink-1.0.1-23.el9_5
• libnfsidmap-1:2.5.4-34.el9
• libnftnl-1.2.6-4.el9_4
• libnghttp2-1.43.0-6.el9
• libnl3-3.11.0-1.el9
• libnl3-cli-3.11.0-1.el9
• libnvme-1.11.1-1.el9
• libpath_utils-0.2.1-53.el9
• libpcap-14:1.10.0-4.el9
• libpciaccess-0.16-7.el9
• libpkgconf-1.7.3-10.el9
• libpsl-0.21.1-5.el9
• libpwquality-1.4.4-8.el9
• libref_array-0.1.5-53.el9
• librepo-1.14.5-2.el9
• libreport-filesystem-2.15.2-6.el9
• librhsm-0.0.3-9.el9
• libseccomp-2.5.2-2.el9
• libselinux-3.6-3.el9
• libselinux-utils-3.6-3.el9
• libsemanage-3.6-5.el9_6
• libsepol-3.6-2.el9
• libsigsegv-2.13-4.el9
• libslirp-4.4.0-8.el9
• libsmartcols-2.37.4-21.el9
• libsmbclient-4.21.3-14.el9_6
• libsolv-0.7.24-3.el9
• libss-1.46.5-7.el9
• libssh-0.10.4-15.el9_6
• libssh-config-0.10.4-15.el9_6
• libsss_certmap-2.9.6-4.el9_6.2
• libsss_idmap-2.9.6-4.el9_6.2
• libsss_nss_idmap-2.9.6-4.el9_6.2
• libsss_sudo-2.9.6-4.el9_6.2
• libstdc++-11.5.0-5.el9_5
• libtalloc-2.4.2-1.el9
• libtasn1-4.16.0-9.el9
• libtdb-1.4.12-1.el9
• libteam-1.31-16.el9_1
• libtevent-0.16.1-1.el9
• libtirpc-1.3.3-9.el9
• libtool-ltdl-2.4.6-46.el9
• libunistring-0.9.10-15.el9
• liburing-2.5-1.el9
• libusbx-1.0.26-1.el9
• libuser-0.63-16.el9
• libutempter-1.2.1-6.el9
• libuuid-2.37.4-21.el9
• libuv-1:1.42.0-2.el9_4
• libverto-0.3.2-3.el9
• libverto-libev-0.3.2-3.el9
• libwbclient-4.21.3-14.el9_6
• libxcrypt-4.4.18-3.el9
• libxcrypt-compat-4.4.18-3.el9
• libxml2-2.9.13-12.el9_6
• libxmlb-0.3.10-1.el9
• libxslt-1.1.34-13.el9_6
• libyaml-0.2.5-7.el9
• libzstd-1.5.5-1.el9
• linux-firmware-20250812-151.4.el9_6
• linux-firmware-whence-20250812-151.4.el9_6
• lmdb-libs-0.9.29-3.el9
• logrotate-3.18.0-9.el9
• lsof-4.94.0-3.el9
• lua-libs-5.4.4-4.el9
• luksmeta-9-12.el9
• lvm2-9:2.03.28-6.el9
• lvm2-libs-9:2.03.28-6.el9
• lz4-libs-1.9.3-5.el9
• lzo-2.10-7.el9
• mdadm-4.3-4.el9_5
• microcode_ctl-4:20250211-1.20250512.1.el9_6
• mokutil-2:0.6.0-4.el9
• mpfr-4.1.0-7.el9
• nano-5.6.1-7.el9
• ncurses-6.2-10.20210508.el9_6.2
• ncurses-base-6.2-10.20210508.el9_6.2
• ncurses-libs-6.2-10.20210508.el9_6.2
• net-tools-2.0-0.64.20160912git.el9
• netavark-2:1.14.1-1.el9_6
• nettle-3.10.1-1.el9
• newt-0.52.21-11.el9
• nfs-utils-1:2.5.4-34.el9
• nftables-1:1.0.9-3.el9
• nmap-ncat-3:7.92-3.el9
• nmstate-2.2.54-1.el9_6
• npth-1.6-8.el9
• nss-altfiles-2.18.1-20.el9
• numactl-libs-2.0.19-1.el9
• nvme-cli-2.11-6.el9_6
• oniguruma-6.9.6-1.el9.6
• open-vm-tools-12.5.0-1.el9_6.2
• openldap-2.6.8-4.el9
• openshift-clients-4.21.0-202510241153.p2.g18719cc.assembly.stream.el9
• openshift-kubelet-4.21.0-202510282026.p2.g9e794b8.assembly.stream.el9
• openssh-8.7p1-45.el9
• openssh-clients-8.7p1-45.el9
• openssh-server-8.7p1-45.el9
• openssl-1:3.2.2-6.el9_5.1
• openssl-fips-provider-3.0.7-6.el9_5
• openssl-fips-provider-so-3.0.7-6.el9_5
• openssl-libs-1:3.2.2-6.el9_5.1
• openvswitch-selinux-extra-policy-1.0-39.el9fdp
• openvswitch3.5-3.5.2-51.el9fdp
• os-prober-1.77-12.el9_5
• ose-aws-ecr-image-credential-provider-4.21.0-202510282354.p2.g27f0449.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.21.0-202510180155.p2.g1457693.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.21.0-202510151957.p2.g0a0890a.assembly.stream.el9
• ostree-2025.2-2.el9_6
• ostree-grub2-2025.2-2.el9_6
• ostree-libs-2025.2-2.el9_6
• p11-kit-0.25.3-3.el9_5
• p11-kit-trust-0.25.3-3.el9_5
• pam-1.5.1-26.el9_6
• passt-0^20250217.ga1e48a0-10.el9_6
• passt-selinux-0^20250217.ga1e48a0-10.el9_6
• passwd-0.80-12.el9
• pciutils-3.7.0-7.el9
• pciutils-libs-3.7.0-7.el9
• pcre-8.44-4.el9
• pcre2-10.40-6.el9
• pcre2-syntax-10.40-6.el9
• perl-AutoLoader-5.74-481.1.el9_6
• perl-B-1.80-481.1.el9_6
• perl-Carp-1.50-460.el9
• perl-Class-Struct-0.66-481.1.el9_6
• perl-Data-Dumper-2.174-462.el9
• perl-Digest-1.19-4.el9
• perl-Digest-MD5-2.58-4.el9
• perl-Encode-4:3.08-462.el9
• perl-Errno-1.30-481.1.el9_6
• perl-Exporter-5.74-461.el9
• perl-Fcntl-1.13-481.1.el9_6
• perl-File-Basename-2.85-481.1.el9_6
• perl-File-Path-2.18-4.el9
• perl-File-Temp-1:0.231.100-4.el9
• perl-File-stat-1.09-481.1.el9_6
• perl-FileHandle-2.03-481.1.el9_6
• perl-Getopt-Long-1:2.52-4.el9
• perl-Getopt-Std-1.12-481.1.el9_6
• perl-HTTP-Tiny-0.076-462.el9
• perl-IO-1.43-481.1.el9_6
• perl-IO-Socket-IP-0.41-5.el9
• perl-IO-Socket-SSL-2.073-2.el9
• perl-IPC-Open3-1.21-481.1.el9_6
• perl-MIME-Base64-3.16-4.el9
• perl-Mozilla-CA-20200520-6.el9
• perl-NDBM_File-1.15-481.1.el9_6
• perl-Net-SSLeay-1.94-1.el9
• perl-POSIX-1.94-481.1.el9_6
• perl-PathTools-3.78-461.el9
• perl-Pod-Escapes-1:1.07-460.el9
• perl-Pod-Perldoc-3.28.01-461.el9
• perl-Pod-Simple-1:3.42-4.el9
• perl-Pod-Usage-4:2.01-4.el9
• perl-Scalar-List-Utils-4:1.56-462.el9
• perl-SelectSaver-1.02-481.1.el9_6
• perl-Socket-4:2.031-4.el9
• perl-Storable-1:3.21-460.el9
• perl-Symbol-1.08-481.1.el9_6
• perl-Term-ANSIColor-5.01-461.el9
• perl-Term-Cap-1.17-460.el9
• perl-Text-ParseWords-3.30-460.el9
• perl-Text-Tabs+Wrap-2013.0523-460.el9
• perl-Time-Local-2:1.300-7.el9
• perl-URI-5.09-3.el9
• perl-base-2.27-481.1.el9_6
• perl-constant-1.33-461.el9
• perl-if-0.60.800-481.1.el9_6
• perl-interpreter-4:5.32.1-481.1.el9_6
• perl-libnet-3.13-4.el9
• perl-libs-4:5.32.1-481.1.el9_6
• perl-mro-1.23-481.1.el9_6
• perl-overload-1.31-481.1.el9_6
• perl-overloading-0.02-481.1.el9_6
• perl-parent-1:0.238-460.el9
• perl-podlators-1:4.14-460.el9
• perl-subs-1.03-481.1.el9_6
• perl-vars-1.05-481.1.el9_6
• pigz-2.8-1.el9
• pkgconf-1.7.3-10.el9
• pkgconf-m4-1.7.3-10.el9
• pkgconf-pkg-config-1.7.3-10.el9
• podman-5:5.4.0-13.el9_6
• policycoreutils-3.6-2.1.el9
• policycoreutils-python-utils-3.6-2.1.el9
• polkit-0.117-13.el9
• polkit-libs-0.117-13.el9
• polkit-pkla-compat-0.1-21.el9
• popt-1.18-8.el9
• procps-ng-3.3.17-14.el9
• protobuf-c-1.3.3-13.el9
• psmisc-23.4-3.el9
• publicsuffix-list-dafsa-20210518-3.el9
• python-unversioned-command-3.9.21-2.el9_6.2
• python3-3.9.21-2.el9_6.2
• python3-audit-3.1.5-4.el9
• python3-chardet-4.0.0-5.el9
• python3-cloud-what-1.29.45.1-1.el9_6
• python3-dateutil-1:2.8.1-7.el9
• python3-dbus-1.2.18-2.el9
• python3-decorator-4.4.2-6.el9
• python3-distro-1.5.0-7.el9
• python3-dnf-4.14.0-25.el9
• python3-dnf-plugin-versionlock-4.3.0-20.el9
• python3-dnf-plugins-core-4.3.0-20.el9
• python3-gobject-base-3.40.1-6.el9
• python3-gobject-base-noarch-3.40.1-6.el9
• python3-gpg-1.15.1-6.el9
• python3-hawkey-0.69.0-13.el9
• python3-idna-2.10-7.el9_4.1
• python3-iniparse-0.4-45.el9
• python3-inotify-0.9.6-25.el9
• python3-libcomps-0.1.18-1.el9
• python3-libdnf-0.69.0-13.el9
• python3-librepo-1.14.5-2.el9
• python3-libs-3.9.21-2.el9_6.2
• python3-libselinux-3.6-3.el9
• python3-libsemanage-3.6-5.el9_6
• python3-pip-wheel-21.3.1-1.el9
• python3-policycoreutils-3.6-2.1.el9
• python3-pysocks-1.7.1-12.el9
• python3-pyyaml-5.4.1-6.el9
• python3-requests-2.25.1-10.el9_6
• python3-rpm-4.16.1.3-37.el9
• python3-setools-4.4.4-1.el9
• python3-setuptools-53.0.0-13.el9_6.1
• python3-setuptools-wheel-53.0.0-13.el9_6.1
• python3-six-1.15.0-9.el9
• python3-subscription-manager-rhsm-1.29.45.1-1.el9_6
• python3-systemd-234-19.el9
• python3-urllib3-1.26.5-6.el9
• qemu-guest-agent-17:9.1.0-15.el9_6.9
• quota-1:4.09-4.el9
• quota-nls-1:4.09-4.el9
• rdma-core-54.0-1.el9
• readline-8.1-4.el9
• redhat-release-9.6-0.1.el9
• redhat-release-eula-9.6-0.1.el9
• rpcbind-1.2.6-7.el9
• rpm-4.16.1.3-37.el9
• rpm-build-libs-4.16.1.3-37.el9
• rpm-libs-4.16.1.3-37.el9
• rpm-ostree-2025.6-5.el9_6
• rpm-ostree-libs-2025.6-5.el9_6
• rpm-plugin-selinux-4.16.1.3-37.el9
• rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
• rpm-sign-libs-4.16.1.3-37.el9
• rsync-3.2.5-3.el9
• runc-4:1.2.4-2.el9
• samba-client-libs-4.21.3-14.el9_6
• samba-common-4.21.3-14.el9_6
• samba-common-libs-4.21.3-14.el9_6
• sed-4.8-9.el9
• selinux-policy-38.1.53-5.el9_6
• selinux-policy-targeted-38.1.53-5.el9_6
• setup-2.13.7-10.el9
• sg3_utils-1.47-10.el9
• sg3_utils-libs-1.47-10.el9
• shadow-utils-2:4.9-12.el9
• shadow-utils-subid-2:4.9-12.el9
• shared-mime-info-2.1-5.el9
• shim-x64-15.8-4.el9_3
• skopeo-2:1.18.1-2.el9_6
• slang-2.3.2-11.el9
• slirp4netns-1.3.2-1.el9
• snappy-1.1.8-8.el9
• socat-1.7.4.1-6.el9_6.1
• sqlite-libs-3.34.1-8.el9_6
• squashfs-tools-4.4-10.git1.el9
• ssh-key-dir-0.1.4-1.el9
• sssd-2.9.6-4.el9_6.2
• sssd-ad-2.9.6-4.el9_6.2
• sssd-client-2.9.6-4.el9_6.2
• sssd-common-2.9.6-4.el9_6.2
• sssd-common-pac-2.9.6-4.el9_6.2
• sssd-ipa-2.9.6-4.el9_6.2
• sssd-krb5-2.9.6-4.el9_6.2
• sssd-krb5-common-2.9.6-4.el9_6.2
• sssd-ldap-2.9.6-4.el9_6.2
• sssd-nfs-idmap-2.9.6-4.el9_6.2
• sssd-proxy-2.9.6-4.el9_6.2
• stalld-1.20.4-1.el9_6
• strace-6.12-1.el9
• subscription-manager-1.29.45.1-1.el9_6
• subscription-manager-rhsm-certificates-20220623-1.el9
• sudo-1.9.5p2-10.el9_6.2
• systemd-252-51.el9_6.2
• systemd-journal-remote-252-51.el9_6.2
• systemd-libs-252-51.el9_6.2
• systemd-pam-252-51.el9_6.2
• systemd-rpm-macros-252-51.el9_6.2
• systemd-udev-252-51.el9_6.2
• tar-2:1.34-7.el9
• teamd-1.31-16.el9_1
• tmux-3.2a-5.el9
• toolbox-0.1.2-1.rhaos4.19.el9
• tpm2-tools-5.2-4.el9
• tpm2-tss-3.2.3-1.el9
• tzdata-2025b-1.el9
• unbound-libs-1.16.2-19.el9_6.1
• usermode-1.114-6.el9
• userspace-rcu-0.12.1-6.el9
• util-linux-2.37.4-21.el9
• util-linux-core-2.37.4-21.el9
• vim-minimal-2:8.2.2637-22.el9_6.1
• virt-what-1.27-1.el9
• which-2.21-30.el9_6
• xfsprogs-6.4.0-5.el9
• xmlsec1-1.2.29-13.el9
• xmlsec1-openssl-1.2.29-13.el9
• xz-5.2.5-8.el9_0
• xz-libs-5.2.5-8.el9_0
• yajl-2.1.0-25.el9
• zlib-1.2.11-40.el9
• zram-generator-0.3.2-7.el9
• zstd-1.5.5-1.el9

Changed:

• cri-o 1.34.0-4.rhaos4.21.git941066d.el9 → 1.34.1-4.rhaos4.21.git5780ac7.el9
• cri-tools 1.34.0-1.el9 → 1.34.0-2.el9
• iputils 20210202-11.el9_6.1 → 20210202-11.el9_6.3
• kernel 5.14.0-570.49.1.el9_6 → 5.14.0-570.60.1.el9_6
• kernel-core 5.14.0-570.49.1.el9_6 → 5.14.0-570.60.1.el9_6
• kernel-modules 5.14.0-570.49.1.el9_6 → 5.14.0-570.60.1.el9_6
• kernel-modules-core 5.14.0-570.49.1.el9_6 → 5.14.0-570.60.1.el9_6
• kernel-modules-extra 5.14.0-570.49.1.el9_6 → 5.14.0-570.60.1.el9_6
• libssh 0.10.4-13.el9 → 0.10.4-15.el9_6
• libssh-config 0.10.4-13.el9 → 0.10.4-15.el9_6
• nmstate 2.2.48-2.el9_6 → 2.2.54-1.el9_6
• open-vm-tools 12.5.0-1.el9 → 12.5.0-1.el9_6.2
• openshift-clients 4.21.0-202509251154.p2.gabe2393.assembly.stream.el9 → 4.21.0-202510241153.p2.g18719cc.assembly.stream.el9
• openshift-kubelet 4.21.0-202509190529.p2.g5c9df33.assembly.stream.el9 → 4.21.0-202510282026.p2.g9e794b8.assembly.stream.el9
• openvswitch3.5 3.5.1-33.el9fdp → 3.5.2-51.el9fdp
• ose-aws-ecr-image-credential-provider 4.19.0-202508252101.p2.g425c1c5.assembly.stream.el9 → 4.21.0-202510282354.p2.g27f0449.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.21.0-202509221901.p2.g69f6a48.assembly.stream.el9 → 4.21.0-202510180155.p2.g1457693.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.21.0-202509221503.p2.gb27a2f9.assembly.stream.el9 → 4.21.0-202510151957.p2.g0a0890a.assembly.stream.el9
• vim-minimal 2:8.2.2637-22.el9_6 → 2:8.2.2637-22.el9_6.1

Extensions

Full list (162 packages)

• NetworkManager-libreswan-1.2.24-1.el9.x86_64
• bison-3.7.4-5.el9.x86_64
• capstone-4.0.2-10.el9.x86_64
• corosync-3.1.9-2.el9_6.x86_64
• corosynclib-3.1.9-2.el9_6.x86_64
• cpp-11.5.0-5.el9_5.x86_64
• crun-wasm-1.8.5-5.rhaos4.14.el9.x86_64
• daxctl-libs-78-2.el9.x86_64
• edk2-ovmf-20241117-2.el9_6.1.noarch
• elfutils-libelf-devel-0.192-6.el9_6.x86_64
• fence-agents-all-4.10.0-86.el9_6.9.x86_64
• fence-agents-amt-ws-4.10.0-86.el9_6.9.noarch
• fence-agents-apc-4.10.0-86.el9_6.9.noarch
• fence-agents-apc-snmp-4.10.0-86.el9_6.9.noarch
• fence-agents-bladecenter-4.10.0-86.el9_6.9.noarch
• fence-agents-brocade-4.10.0-86.el9_6.9.noarch
• fence-agents-cisco-mds-4.10.0-86.el9_6.9.noarch
• fence-agents-cisco-ucs-4.10.0-86.el9_6.9.noarch
• fence-agents-common-4.10.0-86.el9_6.9.noarch
• fence-agents-drac5-4.10.0-86.el9_6.9.noarch
• fence-agents-eaton-snmp-4.10.0-86.el9_6.9.noarch
• fence-agents-emerson-4.10.0-86.el9_6.9.noarch
• fence-agents-eps-4.10.0-86.el9_6.9.noarch
• fence-agents-heuristics-ping-4.10.0-86.el9_6.9.noarch
• fence-agents-hpblade-4.10.0-86.el9_6.9.noarch
• fence-agents-ibmblade-4.10.0-86.el9_6.9.noarch
• fence-agents-ifmib-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo-moonshot-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo-mp-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo-ssh-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo2-4.10.0-86.el9_6.9.noarch
• fence-agents-intelmodular-4.10.0-86.el9_6.9.noarch
• fence-agents-ipdu-4.10.0-86.el9_6.9.noarch
• fence-agents-ipmilan-4.10.0-86.el9_6.9.noarch
• fence-agents-kdump-4.10.0-86.el9_6.9.x86_64
• fence-agents-mpath-4.10.0-86.el9_6.9.noarch
• fence-agents-redfish-4.10.0-86.el9_6.9.x86_64
• fence-agents-rhevm-4.10.0-86.el9_6.9.noarch
• fence-agents-rsa-4.10.0-86.el9_6.9.noarch
• fence-agents-rsb-4.10.0-86.el9_6.9.noarch
• fence-agents-sbd-4.10.0-86.el9_6.9.noarch
• fence-agents-scsi-4.10.0-86.el9_6.9.noarch
• fence-agents-vmware-rest-4.10.0-86.el9_6.9.noarch
• fence-agents-vmware-soap-4.10.0-86.el9_6.9.noarch
• fence-agents-wti-4.10.0-86.el9_6.9.noarch
• fence-virt-4.10.0-86.el9_6.9.x86_64
• flex-2.6.4-9.el9.x86_64
• fmt-9.1.0-1.el9.x86_64
• gcc-11.5.0-5.el9_5.x86_64
• glibc-devel-2.34-168.el9_6.23.x86_64
• glibc-headers-2.34-168.el9_6.23.x86_64
• gnutls-dane-3.8.3-6.el9_6.2.x86_64
• gnutls-utils-3.8.3-6.el9_6.2.x86_64
• ipmitool-1.8.18-27.el9.x86_64
• ipxe-roms-qemu-20200823-9.git4bd064de.el9_0.noarch
• kata-containers-3.17.0-4.rhaos4.20.el9.x86_64
• kernel-5.14.0-570.60.1.el9_6.x86_64
• kernel-core-5.14.0-570.60.1.el9_6.x86_64
• kernel-devel-5.14.0-570.60.1.el9_6.x86_64
• kernel-headers-5.14.0-570.60.1.el9_6.x86_64
• kernel-modules-5.14.0-570.60.1.el9_6.x86_64
• kernel-modules-extra-5.14.0-570.60.1.el9_6.x86_64
• kernel-rt-core-5.14.0-570.60.1.el9_6.x86_64
• kernel-rt-devel-5.14.0-570.60.1.el9_6.x86_64
• kernel-rt-kvm-5.14.0-570.60.1.el9_6.x86_64
• kernel-rt-modules-5.14.0-570.60.1.el9_6.x86_64
• kernel-rt-modules-core-5.14.0-570.60.1.el9_6.x86_64
• kernel-rt-modules-extra-5.14.0-570.60.1.el9_6.x86_64
• krb5-pkinit-1.21.1-8.el9_6.x86_64
• krb5-workstation-1.21.1-8.el9_6.x86_64
• ldns-1.7.1-12.el9.x86_64
• libfdt-1.6.0-7.el9.x86_64
• libkadm5-1.21.1-8.el9_6.x86_64
• libknet1-1.28-1.el9.x86_64
• libknet1-compress-bzip2-plugin-1.28-1.el9.x86_64
• libknet1-compress-lz4-plugin-1.28-1.el9.x86_64
• libknet1-compress-lzma-plugin-1.28-1.el9.x86_64
• libknet1-compress-lzo2-plugin-1.28-1.el9.x86_64
• libknet1-compress-plugins-all-1.28-1.el9.x86_64
• libknet1-compress-zlib-plugin-1.28-1.el9.x86_64
• libknet1-compress-zstd-plugin-1.28-1.el9.x86_64
• libknet1-crypto-nss-plugin-1.28-1.el9.x86_64
• libknet1-crypto-openssl-plugin-1.28-1.el9.x86_64
• libknet1-crypto-plugins-all-1.28-1.el9.x86_64
• libknet1-plugins-all-1.28-1.el9.x86_64
• libmpc-1.2.1-4.el9.x86_64
• libnozzle1-1.28-1.el9.x86_64
• libpmem-1.12.1-1.el9.x86_64
• libpng-2:1.6.37-12.el9.x86_64
• libqb-2.0.8-1.el9.x86_64
• librdmacm-54.0-1.el9.x86_64
• libreswan-5.2-1.el9fdp.x86_64
• libwsman1-2.6.8-23.el9.x86_64
• libxcrypt-devel-4.4.18-3.el9.x86_64
• libzstd-devel-1.5.5-1.el9.x86_64
• lld-17.0.6-1.el9.x86_64
• lld-libs-17.0.6-1.el9.x86_64
• llvm-17.0.6-5.el9.x86_64
• llvm-libs-17.0.6-5.el9.x86_64
• lm_sensors-libs-3.6.0-10.el9.x86_64
• m4-1.4.19-1.el9.x86_64
• make-1:4.3-8.el9.x86_64
• ndctl-libs-78-2.el9.x86_64
• net-snmp-libs-1:5.9.1-17.el9.x86_64
• net-snmp-utils-1:5.9.1-17.el9.x86_64
• nspr-4.36.0-4.el9_4.x86_64
• nss-3.112.0-4.el9_4.x86_64
• nss-softokn-3.112.0-4.el9_4.x86_64
• nss-softokn-freebl-3.112.0-4.el9_4.x86_64
• nss-sysinit-3.112.0-4.el9_4.x86_64
• nss-tools-3.112.0-4.el9_4.x86_64
• nss-util-3.112.0-4.el9_4.x86_64
• openssl-devel-1:3.2.2-6.el9_5.1.x86_64
• openvswitch3.5-ipsec-3.5.2-51.el9fdp.x86_64
• openwsman-python3-2.6.8-23.el9.x86_64
• pacemaker-2.1.9-1.2.el9_6.x86_64
• pacemaker-cli-2.1.9-1.2.el9_6.x86_64
• pacemaker-cluster-libs-2.1.9-1.2.el9_6.x86_64
• pacemaker-libs-2.1.9-1.2.el9_6.x86_64
• pacemaker-schemas-2.1.9-1.2.el9_6.noarch
• pcp-conf-6.3.7-1.el9_6.x86_64
• pcp-libs-6.3.7-1.el9_6.x86_64
• pcs-0.11.9-2.el9_6.1.x86_64
• perl-TimeDate-1:2.33-6.el9.noarch
• pixman-0.40.0-6.el9_3.x86_64
• protobuf-3.14.0-16.el9.x86_64
• python3-cffi-1.14.5-5.el9.x86_64
• python3-cryptography-36.0.1-5.el9_6.x86_64
• python3-lxml-4.6.5-3.el9.x86_64
• python3-openvswitch3.5-3.5.2-51.el9fdp.x86_64
• python3-ply-3.11-14.el9.noarch
• python3-pycparser-2.20-6.el9.noarch
• python3-pycurl-7.43.0.6-8.el9.x86_64
• python3-pyparsing-2.4.7-9.el9.noarch
• python3-tornado-6.4.2-2.el9_6.2.x86_64
• qemu-img-17:9.1.0-15.el9_6.9.x86_64
• qemu-kvm-common-17:9.1.0-15.el9_6.9.x86_64
• qemu-kvm-core-17:9.1.0-15.el9_6.9.x86_64
• redhat-logos-90.5-1.el9_6.1.x86_64
• resource-agents-4.10.0-71.el9_6.11.x86_64
• ruby-3.0.7-165.el9_5.x86_64
• ruby-default-gems-3.0.7-165.el9_5.noarch
• ruby-libs-3.0.7-165.el9_5.x86_64
• rubygem-bigdecimal-3.0.0-165.el9_5.x86_64
• rubygem-bundler-2.2.33-165.el9_5.noarch
• rubygem-io-console-0.5.7-165.el9_5.x86_64
• rubygem-json-2.5.1-165.el9_5.x86_64
• rubygem-psych-3.3.2-165.el9_5.x86_64
• rubygem-rdoc-6.3.4.1-165.el9_5.noarch
• rubygem-rexml-3.2.5-165.el9_5.noarch
• rubygems-3.2.33-165.el9_5.noarch
• sbd-1.5.2-1.el9.x86_64
• seabios-bin-1.16.3-4.el9.noarch
• seavgabios-bin-1.16.3-4.el9.noarch
• spdlog-1.13.0-1.rhaos4.14.el9.x86_64
• sysstat-12.5.4-9.el9.x86_64
• telnet-1:0.17-85.el9.x86_64
• usbguard-1.0.0-16.el9.x86_64
• usbguard-selinux-1.0.0-16.el9.noarch
• virtiofsd-1.13.2-1.el9_6.x86_64
• wasmedge-0.14.0-2.rhaos4.20.el9.x86_64
• zlib-devel-1.2.11-40.el9.x86_64

Red Hat Enterprise Linux CoreOS base layer: 9.6.20251027-0