4.21.0-0.nightly-2026-06-03-102204

Manual Override Applied

This release was manually Accepted.

Reason: Sporadic flake — only 1/16 blocking job failed (aws-ovn-upgrade-fips-no-nat-instance) due to CI image stream import issue. Different blocking jobs fail each payload. Stream stalled 6.4 days with 5 consecutive rejections. No systemic regression. — https://redhat.enterprise.slack.com/archives/C0AMHBXQW9F/p1780517038605039

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp/release:4.21.0-0.nightly-2026-06-03-102204

Team Approvals:

Tests:

Blocking jobs
- aws-ovn-serial-1of2 Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-aws-ovn-serial-1of2
- aws-ovn-serial-2of2 Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-aws-ovn-serial-2of2
- aws-ovn-single-node-upgrade-4.21-micro Succeeded periodic-ci-openshift-release-main-ci-4.21-e2e-aws-upgrade-ovn-single-node
- aws-ovn-upgrade-4.21-micro-fips Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.21-e2e-aws-ovn-upgrade-fips
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- aws-ovn-upgrade-4.21-micro-fips-no-nat-instance Failed (1 retry) periodic-ci-openshift-release-main-nightly-4.21-e2e-aws-ovn-upgrade-fips-no-nat-instance
  - Attempt 1 Failed
  - Attempt 2 Failed
- azure-ovn-upgrade-4.21-micro Succeeded periodic-ci-openshift-release-main-ci-4.21-e2e-azure-ovn-upgrade
- driver-toolkit Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-aws-driver-toolkit
- fips-scan Succeeded periodic-ci-openshift-release-main-nightly-4.21-fips-payload-scan
- gcp-ovn-rt-upgrade-4.21-minor Succeeded periodic-ci-openshift-release-main-ci-4.21-upgrade-from-stable-4.20-e2e-gcp-ovn-rt-upgrade
- hypershift-ovn-conformance-4.21 Succeeded periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-aws-ovn-conformance
- install-analysis-all Succeeded periodic-ci-openshift-release-main-nightly-4.21-install-analysis-all
- metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-metal-ipi-ovn-bm
- metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-metal-ipi-ovn-ipv6
- microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.21-periodics-e2e-aws-ovn-ocp-conformance
- microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.21-periodics-e2e-aws-ovn-ocp-conformance-serial
- overall-analysis-all Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.21-overall-analysis-all
  - Attempt 1 Failed
  - Attempt 2 Succeeded
Informing jobs
- aws-console Failed periodic-ci-openshift-release-main-nightly-4.21-console-aws
- aws-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.21-periodics-e2e-aws
- aws-csi Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-aws-csi
- aws-ovn Succeeded periodic-ci-openshift-release-main-ci-4.21-e2e-aws-ovn
- aws-ovn-cgroupsv2 Failed periodic-ci-openshift-release-main-nightly-4.21-e2e-aws-ovn-cgroupsv2
- aws-ovn-fips Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-aws-ovn-fips
- aws-ovn-single-node Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-aws-ovn-single-node
- aws-ovn-single-node-csi Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-aws-ovn-single-node-csi
- aws-ovn-single-node-serial Failed periodic-ci-openshift-release-main-nightly-4.21-e2e-aws-ovn-single-node-serial
- aws-ovn-single-node-upgrade-minor Succeeded periodic-ci-openshift-release-main-nightly-4.21-upgrade-from-stable-4.20-e2e-aws-upgrade-ovn-single-node
- aws-ovn-upgrade-out-of-change Succeeded periodic-ci-openshift-release-main-ci-4.21-e2e-aws-ovn-upgrade-out-of-change
- aws-upi Failed periodic-ci-openshift-release-main-nightly-4.21-e2e-aws-ovn-upi
- azure-control-plane-machine-set-operator Failed periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.21-periodics-e2e-azure
- azure-csi Failed periodic-ci-openshift-release-main-nightly-4.21-e2e-azure-csi
- azure-ovn Succeeded periodic-ci-openshift-release-main-ci-4.21-e2e-azure-ovn
- azure-ovn-serial Succeeded periodic-ci-openshift-release-main-ci-4.21-e2e-azure-ovn-serial
- azure-ovn-upgrade-out-of-change Failed periodic-ci-openshift-release-main-ci-4.21-e2e-azure-ovn-upgrade-out-of-change
- cnv Succeeded periodic-ci-openshift-release-main-cnv-nightly-4.21-deploy-azure-kubevirt-ovn
- gcp-control-plane-machine-set-operator Succeeded periodic-ci-openshift-cluster-control-plane-machine-set-operator-release-4.21-periodics-e2e-gcp
- gcp-ovn Succeeded periodic-ci-openshift-release-main-ci-4.21-e2e-gcp-ovn
- gcp-ovn-csi Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-gcp-ovn-csi
- gcp-ovn-rt Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-gcp-ovn-rt
- gcp-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-gcp-ovn-serial
- gcp-ovn-upgrade-4.21-minor Succeeded periodic-ci-openshift-release-main-ci-4.21-upgrade-from-stable-4.20-e2e-gcp-ovn-upgrade
- gcp-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.21-e2e-gcp-ovn-upgrade
- hypershift-aks-conformance-4.21 Succeeded periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-azure-aks-ovn-conformance
- hypershift-kubevirt-ovn-conformance-4.21 Failed periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-azure-kubevirt-ovn
- metal-ipi-ovn-dualstack Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-metal-ipi-ovn-dualstack
- metal-ipi-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-metal-ipi-ovn-serial-ipv4
- metal-ipi-ovn-serial-virtualmedia-1of2 Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-metal-ipi-ovn-serial-virtualmedia-1of2
- metal-ipi-ovn-serial-virtualmedia-2of2 Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-metal-ipi-ovn-serial-virtualmedia-2of2
- metal-ipi-ovn-upgrade Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-metal-ipi-ovn-upgrade
- metal-ipi-ovn-upgrade-minor Succeeded periodic-ci-openshift-release-main-nightly-4.21-upgrade-from-stable-4.20-e2e-metal-ipi-ovn-upgrade
- metal-ipi-serial-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-metal-ipi-serial-ovn-ipv6
- metal-ipi-serial-ovn-dualstack Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-metal-ipi-serial-ovn-dualstack
- metal-ipi-upgrade-ovn-ipv6 Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-metal-ipi-upgrade-ovn-ipv6
- metal-ipi-upgrade-ovn-ipv6-minor Succeeded periodic-ci-openshift-release-main-nightly-4.21-upgrade-from-stable-4.20-e2e-metal-ipi-upgrade-ovn-ipv6
- metal-ovn-single-node-recert-cluster-rename Succeeded periodic-ci-openshift-release-main-nightly-4.21-metal-ovn-single-node-recert-cluster-rename
- openshift-dedicated-gcp-conformance Failed periodic-ci-openshift-release-main-nightly-4.21-e2e-osd-ccs-gcp
- ovn-proxy Succeeded (1 retry) periodic-ci-openshift-release-main-nightly-4.21-e2e-aws-ovn-proxy
  - Attempt 1 Failed
  - Attempt 2 Succeeded
- ovn-single-node-live-iso Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-metal-ovn-single-node-live-iso
- qe-perfscale Failed periodic-ci-openshift-eng-ocp-qe-perfscale-ci-main-aws-4.21-nightly-x86-payload-control-plane-6nodes
- rosa-classic-sts-conformance Failed (1 retry) periodic-ci-openshift-release-main-nightly-4.21-e2e-rosa-sts-ovn
  - Attempt 1 Failed
  - Attempt 2 Failed
- telcov10n-metal-single-node-spoke Failed periodic-ci-openshift-kni-eco-ci-cd-main-nightly-4.21-telcov10n-metal-single-node-spoke
- telcov10n-metal-single-node-spoke-kpis Failed periodic-ci-openshift-kni-eco-ci-cd-main-nightly-4.21-telcov10n-metal-single-node-spoke-kpis
- upgrade-analysis-all Failed (2 retries) periodic-ci-openshift-release-main-nightly-4.21-upgrade-analysis-all
- upgrade-minor-ovn Succeeded periodic-ci-openshift-release-main-ci-4.21-upgrade-from-stable-4.20-e2e-aws-ovn-upgrade
- vsphere-ovn Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-vsphere-ovn
- vsphere-ovn-csi Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-vsphere-ovn-csi
- vsphere-ovn-serial Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-vsphere-ovn-serial
- vsphere-ovn-upgrade-micro Succeeded periodic-ci-openshift-release-main-ci-4.21-e2e-vsphere-ovn-upgrade
- vsphere-ovn-upgrade-minor Succeeded periodic-ci-openshift-release-main-ci-4.21-upgrade-from-stable-4.20-e2e-vsphere-ovn-upgrade
- vsphere-ovn-upi Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-vsphere-ovn-upi
- vsphere-ovn-upi-serial Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-vsphere-ovn-upi-serial
- vsphere-static-ovn Succeeded periodic-ci-openshift-release-main-nightly-4.21-e2e-vsphere-static-ovn
Async jobs
- claude-payload-agent Succeeded periodic-ci-openshift-release-main-claude-payload-agent-no-slack

Upgrades from:

4.21.0-0.nightly-2026-05-28-110248 - S S F S S S F F F S S S
4.20.0-0.nightly-2026-05-29-013708 (changes) - S S S S S S S

Upgrades to:

4.22.0-0.nightly-2026-06-04-081002 (changes) - S F S S F S S
4.22.0-0.nightly-2026-06-04-020726 (changes) - F S S S S S S S
4.21.0-0.nightly-2026-06-04-022429 (changes) - S F S S S S S S S S S

Loading changelog, this may take a while ...

Changes from 4.21.0-0.nightly-2026-05-28-110248

Created: 2026-06-03 10:23:52 +0000 UTC

Image Digest: sha256:d9469984be4681149a26dd0b198a3ae0cdc3e73efdd4938cab925e135231b1ce

Components

Kubectl 1.34.1
Kubernetes 1.34.8
Kubernetes Tests 1.34.1
Red Hat Enterprise Linux CoreOS 10.2.20260521-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
GatewayAPIWithoutOLM (0 tests)

Rebuilt images without code change

baremetal-installer git 3f855c5b sha256:cd6914edf791c08c02368210fb46c22577ca25902f6f407082ce823e315b222b
cli git fdf8daba sha256:a1007fb96e5991606e054cb2a45cb6296ec0ec1898ec89a3e5d3ccaacb1be33d
cli-artifacts git fdf8daba sha256:59eac72519b86759591da6697edc35c28d6298bd8c2342e1c1eaf769914af483
deployer git fdf8daba sha256:0e140b0b7d6f6f2694d92910bb2e80ac56eff11dfd45dd9928bd0094da7a681c
driver-toolkit git f0ae9d12 sha256:86231cc8acbdb2ccf6be986d998965e9f9d028b2023738b78863a9be202957ba
etcd git 806f690e sha256:fc4787f69db199e7642c5cf5188cffac3762a479b65a2e234ae07db89a295b98
hyperkube git eab2218b sha256:95ecc9b2e6efbdea01353946364ad49d20a23959893c3756e4c55ec2766bb52c
installer git 3f855c5b sha256:986342bb24d12257f9634226011ade58544b6d46c93a1b02469d64d4e8ce3661
ironic git 6e93d7a0 sha256:9b5af789b750ccab96d964d77de718ba2730605daee93f917f5fdb097d09af7f
ironic-machine-os-downloader git 707c2262 sha256:379c674108feac980a6f2c38b69796a5442bf5d92ac524f8aa6fe96617973d36
machine-os-images git e9019e5f sha256:93928c0cea8d8a41996cf07a9346a96d9ee529b0f6585d5e2cc9e68d4b862ad7
monitoring-plugin git 462c7889 sha256:a973776feb3261a622dbeb9f15241b13a95b183a4e650ef2268be470d5ad349f
must-gather git eeb267f4 sha256:2761831a5f31cee9cb2aa94cb66940d9342b5ea971cc3da6823038c735c9eb8f
network-tools git d6717e45 sha256:71c9a49f4e933d3b070c5c94944df9c43f6088559d6fe5b614dc685fdfa3d720
networking-console-plugin git 268037d7 sha256:15431ce7bcdca6fc22478bd918b0b18f0c3ad0a776f35e4e3147930976f6f810
ovn-kubernetes git d586f851 sha256:cca0b3dee61807f87bf4474fcd08615500b2f08f358468af95b981923611815e
rhel-coreos git 10f1a2e7 sha256:168b617776225d55be48ac094d2a6cf59f94316bb40b166674b2d827b5ffef5c
rhel-coreos-10 git 10f1a2e7 sha256:0127f4e1801e714f775b1333306d22a51497fe5c913c1768d0a23f28ec889ed4
rhel-coreos-10-extensions git 10f1a2e7 sha256:c9b2e5df4ddad39020bc73fadf822184502d8de6752ea66923a377864872faa9
rhel-coreos-extensions git 10f1a2e7 sha256:2edb94b594cd07a6a7292b48ca9d50189ea8f46fc853b36526fda6666b5a5f2a
tests git c2da98a5 sha256:6c818b8025c2a5370eb18b4ec1627f10b9f58e5f108432e552be1850a0d69c67
tools git fdf8daba sha256:f04d483a5457fffcbe045e168990ee48946f91c1915d04e408f5be19eab62429

agent-installer-ui

prefill staticip on ove below the sea (#3769) #3769
Custom manifests are broken in local Assisted UI (#3770) #3770
Full changelog

cloud-credential-operator

OCPBUGS-81982: Bump go-jose/go-jose/v4@v4.1.4 #1027
Full changelog

cluster-config-api

OCPBUGS-85149: Backport GatewayAPIWithoutOLM feature gate as disabled #2864
Full changelog

cluster-etcd-operator

OCPBUGS-84336: fix(tnf): gate dual-replica setup and keep retrying #1620
Full changelog

cluster-ingress-operator

OCPBUGS-74373: Remove restriction of unmanaged x-k8s.io #1446
OCPBUGS-86027: Fix logging for unmanaged controllers #1448
Full changelog

cluster-node-tuning-operator

OCPBUGS-86809: Requeue PerformanceStatus update when status write fails #1524
Full changelog

console

OCPBUGS-85674: Prevent binary secret data corruption when editing #16448
OCPBUGS-79459: CVE-2026-29063 Immutable.js: Improperly Controlled Mod… #16503
OCPBUGS-86427: Fix Shipwright detail pages crashing with React error #310 #16487
Full changelog

kube-state-metrics

Fix for OCPBUGS-81988: CVE-2026-34986 bump github.com/go-jose/go-jose #143
Full changelog

machine-config-operator

OCPBUGS-86576: Verify extension packages are installed #6090
Full changelog

oc-mirror

Fix for OCPBUGS-81971: CVE-2026-34986 github.com/go-jose/go-jose/v4 #1426
Full changelog

powervs-cloud-controller-manager

OCPBUGS-80854: bump google.golang.org/grpc to v1.79.3 to fix CVE-2026-33186 #98
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: too many concurrent oc adm release info --rpmdb/--rpmdb-diff operations (limit 16)

View changelog in Markdown or change previous release:

Source code for this page located on github