Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.21.0-ec.1-x86_64

Team Approvals:

Tests:

• Informing jobs
  • aws-ovn-serial-1of2 Failed (1 retries) periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-serial-1of2
  • aws-ovn-serial-2of2 Succeeded (1 retries) periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-ovn-serial-2of2
  • aws-ovn-techpreview Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview
  • aws-ovn-techpreview-serial-1of3 Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview-serial-1of3
  • aws-ovn-techpreview-serial-2of3 Succeeded (1 retries) periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview-serial-2of3
  • aws-ovn-techpreview-serial-3of3 Failed (1 retries) periodic-ci-openshift-release-master-ci-4.21-e2e-aws-ovn-techpreview-serial-3of3
  • driver-toolkit Failed (2 retries) periodic-ci-openshift-release-master-nightly-4.21-e2e-aws-driver-toolkit
  • fips-scan Failed (2 retries) periodic-ci-openshift-release-master-nightly-4.21-fips-payload-scan
  • metal-ipi-ovn-bm Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-bm
  • metal-ipi-ovn-ipv6 Succeeded periodic-ci-openshift-release-master-nightly-4.21-e2e-metal-ipi-ovn-ipv6
  • microshift-ovn-conformance-parallel Succeeded periodic-ci-openshift-microshift-release-4.21-periodics-e2e-aws-ovn-ocp-conformance
  • microshift-ovn-conformance-serial Succeeded periodic-ci-openshift-microshift-release-4.21-periodics-e2e-aws-ovn-ocp-conformance-serial
  • rosa-classic-sts-conformance Failed (1 retries) periodic-ci-openshift-release-master-nightly-4.21-e2e-rosa-sts-ovn

Upgrades from:

---

Loading changelog, this may take a while ...

Changes from 4.21.0-ec.0

Created: 2025-09-30 19:23:53 +0000 UTC

Image Digest: sha256:db8ee32fa253e1dcd5977a9c75d426f251139b5372f960688e6bdbcf9da8ded7

Components

• Kubectl 1.33.3
• Kubernetes upgraded from 1.33.4 to 1.33.5
• Kubernetes Tests upgraded from 1.33.3 to 1.33.4
• Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250904-0 to 9.6.20250925-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
InsightsConfigAPI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPClusterHostedDNSInstall (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
CBORServingAndStorage (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClientsAllowCBOR (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClientsPreferCBOR (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIMachineManagementVSphere (0 tests)			Enabled (New)	Enabled (New)

Rebuilt images without code change

• apiserver-network-proxy git 11b24a2c sha256:24900a98b647ea86c5e187fd8f7825b85e4b6000fead78c6305b7364fefda76f
• aws-ebs-csi-driver git a8ef205c sha256:19110148b7701e26b1c1be1ba61f3ded54592bb6ab6fb355edb9766c8e42ad43
• aws-karpenter-provider-aws git b37141b0 sha256:eae22dd994d47234db71c8f56215da3035735bcb6688a2464edb1cef22232d57
• aws-kms-encryption-provider git 088dcaf7 sha256:ab7f38fbae4300d624ca046fece3dee31776715a1d40f360189827a07acfbaec
• aws-machine-controllers git d1cc300e sha256:32dbc0ca28be619a54933fdeac14450ce4972742b7fe47ca553804b456cdddb3
• aws-pod-identity-webhook git a2ecb150 sha256:ba53f25b0765ec7d9b4b98525c94747c3cd6e153fb6a871f356657fdbd7b1e51
• azure-file-csi-driver git 45d505bc sha256:72f6f7ca8ad2efd31125738332a5b1bde41ad8db8ab783de778590a574ef97d6
• azure-kms-encryption-provider git ea0b9944 sha256:93ed340b318ee81866d97594e05c27573e5fdb5d0eb76d3f2eaea2d9918d6054
• azure-workload-identity-webhook git 88b18175 sha256:07495667740d452ecea1d39c6f6599bf6db0c908a72a24aa2316f52bed86630f
• baremetal-cluster-api-controllers git f782ba74 sha256:d6718f15d08e70b797f2490028d3c543f9a367da0bd95686e5f337e6fc0c4234
• baremetal-machine-controllers git fb678fec sha256:fd574865e050665b955fd13150709b9d4a84576299da05f90047f2e8ee654d18
• baremetal-runtimecfg git 6553765e sha256:65118803a938e1918999b093fd3297b4ba4773b4dbc91fbca00b1edd8fbb1660
• cloud-network-config-controller git 467e50fe sha256:e7158da12247c859071a049717cdb33f5a04c98e570d0df561854f3e8c4d848a
• cluster-autoscaler git d883d0e6 sha256:d464339561226cf68148189fbad13f6220e58c0ed753ec44c2fd4d2b71b5739c
• cluster-autoscaler-operator git 147e5a7f sha256:aeaf1cd8ab8eaabce76d4282eb1f98e8e07e0ea7d07b92518d12a936273d728a
• cluster-bootstrap git 74abc555 sha256:d73fda9446facc5a4a47dc83d35ecaec3d2be0ed9aede1918b2e2c1c98ee48a1
• cluster-config-operator git 657754e2 sha256:83e18686102b472012635ea647dd6114b6c91fee94ed7473aa74560dc82362ea
• cluster-image-registry-operator git b04c7c12 sha256:f4be675e373c9854d0c496faf4ef11e08454980ba6ebe5502b4de471c600a778
• cluster-kube-storage-version-migrator-operator git 8f8e9471 sha256:8a01f4559f0185c44fe99f9e829cef61c939d8f275cc6a5ab378bd00f0c53767
• cluster-update-keys git c40e7b9b sha256:8a4b494fe0183f9f3c22584c7d7efd182aea8796b61c92df235f015e2e41e82f
• cluster-version-operator git b21fbd24 sha256:f1e99ba66370612006a1d631c184facd9229e054accd7d4e68e6c040106be3e5
• configmap-reloader git 2438d7c8 sha256:82d0c560dd3d3690075d0f095e56080ee7007deebf83b1ea47b91e7da226e9ee
• container-networking-plugins git 184a9601 sha256:7ee4a6bfa6e7ad18144361ea28e46d75a8b9f4630d940f4f556145e004b3f874
• containernetworking-plugins-microshift git 184a9601 sha256:2b816c84b9e083efc96450a851ae9a7313182c3cd8be08964000a628531e74fc
• csi-driver-manila git c4fe3e8a sha256:25a7e61563a46185f0a1c161443bfd8d0049d73206386e027ce8e5de1ddafd9a
• csi-driver-nfs git 1abaf844 sha256:52bff2f6c4c5ddd9212381f210f1f4f179da7f494cf6b2b8d43b98c065c09a55
• csi-external-provisioner git 81fca036 sha256:a118fbe6efa685505c76df1b6c574c95490673d6f9aeebe4e465f58e45cad915
• csi-livenessprobe git 1d6d6b27 sha256:11a52078089192ba6f875da3db35cc1df74e9ae04d74c49f5d7a2b2a916eb963
• csi-node-driver-registrar git 3a2c732e sha256:0daca28f914ec54f381bff8138289e998616934e66a6b148330afd828555f7b0
• docker-builder git ff595e4b sha256:3359dfc490cde974e528d0ecf5a70511833db4463bfce98c88a5d8dd69586a8b
• egress-router-cni git 5e0f8d1b sha256:bc90d168f617a9dc8ec79b44385c84571c216b7b4ef54509001548ef2ba2a6ab
• etcd git 9c065d4d sha256:23d69849b9abe777e625ce6339349978cd8763f9e26023b5014a3b4ba30c6b53
• gcp-pd-csi-driver git 500ab5d3 sha256:868074a74d97ac8543be475efcf72dbef63cb837a89fe3766a56258b56df1cf9
• gcp-workload-identity-federation-webhook git b36788ed sha256:903e5c90ca1351a1da3edae9cf1451bfcdd1a2cabdae119c99596ec9a7f8602f
• ibm-vpc-block-csi-driver git 19801353 sha256:2d5b8b23e8586c1b450fedad600f34ca0d37dc1d37e94a34bd02912495b8bd3c
• ibm-vpc-block-csi-driver-operator git 21f405cc sha256:c4abe584fda57909efc466f621f6f1a10380f4cc27d7fdd936014380b724d232
• insights-runtime-exporter git 3d378369 sha256:d7ddbf51b4fb0a2da0203d6f0a03b16fc978c6ebe6a5bce3fe92449dd8d9a6ca
• insights-runtime-extractor git 3d378369 sha256:88e53b90a052faa07a388f6247ef6128d28f45ed76181e3aba8dacafaa3d8969
• ironic-machine-os-downloader git 6c92e542 sha256:f3b20401d70b96514cefc3eb8096afbef887ffc27211e3574ca07b721bf1ae2b
• ironic-static-ip-manager git fa5b8b8b sha256:9a759a2c5c497eb489f2ca14a64718ce6a6fe7ca7199751bb0bcf330f800e484
• keepalived-ipfailover git 9fd8d256 sha256:a595e051b3513c6c6052ce35cd81acc26768d193cbdd2432e4a9654309af1082
• kube-metrics-server git cfa5ee9f sha256:df0d6f151c34c9d98348173e1968a41b6594c62562d639235f2a939ee9dbaf94
• kube-rbac-proxy git b9134351 sha256:3d732aa48d32245cdfa4d9d9a52a346c8cc0b26603abd08f371a45c04c722bb5
• kube-storage-version-migrator git 0f8a4eb8 sha256:074ab07e4a277ac3b3709050b972f1acc763371e0ea2596bb58b6f34d7e46134
• kubevirt-cloud-controller-manager git 3f4542ec sha256:7bdc494f4ef748e766ffb65c2d547d220050bb569eb5d7eca2674bbac7b678b7
• kubevirt-csi-driver git 8b8dd30e sha256:70ffb706585c2499b88bc014a9c837a2a798605d8122398b0a7ad945f7b6a463
• libvirt-machine-controllers git a336f0b5 sha256:e09732aa005f9dfc5ae40ba3a6719f5f53e884fb08eb9a4e90ce1e31662e974f
• machine-image-customization-controller git 20f6d615 sha256:8ebebf5d3ce446a46f988dc48a4c1c037aaa9edc176bed439ab082dae35cfd3a
• machine-os-images git 64bfec79 sha256:0ada027806b5db0b48a81155009f142c84262d2f4d52d7f2879940841e297d0d
• metallb-frr git fc0fe74f sha256:41e41ca5cf8f018b49c67fcd8bb56da54fbd1b60d9ce4482a26148362bcc4efc
• multus-admission-controller git fc73c803 sha256:6ac59c707b3500776fdf9fc98aed1f96ab717967093116581aec2dfa284822dd
• multus-cni git cf0f68ec sha256:ad1a2155685788cf2d40cae534331c42dd67f449f915d786a8c6675ff4179d02
• multus-cni-microshift git cf0f68ec sha256:885afa33b297767f7cd28a548dae60946b606297ffa9f3f6c9fddbbf8b967f87
• multus-networkpolicy git ef99d3d4 sha256:c412b1710eb9cc1a8608fd7dd7566033770f0585ab12a91ba12e39925b8a625b
• multus-route-override-cni git 391c1b03 sha256:6159bd95e681deb499c45c828655531b47b2f6a208d3b86f8ecacb83445dad70
• multus-whereabouts-ipam-cni git 43c89591 sha256:03be06679fc1805f26e88b254af5c5b256eeae86815d1ed2c0cf647545eba4b8
• must-gather git f0c64742 sha256:481f13f1ad180f6d58021969d12153a4a19072b6328de279ca4a8da10cbcf0d7
• network-interface-bond-cni git dd3c4d0b sha256:42b617a441b0fede473dce24d7fd8e1dbadf661486b87f257367c1878508e27b
• network-metrics-daemon git b81340a9 sha256:5f2a9780786bfea100bacdec949111d56148bbac7b9b9ad88617358d7209867d
• oauth-proxy git 6649cb8a sha256:8e33b9d76f1c105dcfefbde35d1791d4ff185e941eb7914f44b4b28f922c37f0
• oauth-server git 81098796 sha256:15b53d4216e65617c402c34838a59209ae4a5416ef4d6e5f751a57f95a541511
• openshift-state-metrics git b04e2ef0 sha256:0d16b01a71e8ddc0c7ca75bc0f1a49e66d988480c2120c2f2b3a49bbe53b4b0e
• openstack-cinder-csi-driver git c4fe3e8a sha256:7e1fc0bc033e382f1a55b340e99d01545767b1d3a05167e4b96826924ef8d6f7
• openstack-cloud-controller-manager git c4fe3e8a sha256:0e482544cafe185b0a7ad191cecaf7b3e1fc828ff7b25632afcb8818950cdfa2
• openstack-cluster-api-controllers git 30944900 sha256:9ae37de2d73be60dd8052453f3be99fe04b6d15fde6bc12a06b789823e528260
• openstack-machine-api-provider git 5085f184 sha256:934c78a119397679758f29289139dcbaa5284b9e7bdfc7785490c211f64d374c
• openstack-resource-controller git bf0d2c88 sha256:4b3aa4c750982617c415914251dea7b0bf5d98bfc8ebde29f686ccb83535b825
• ovirt-csi-driver git 1db726a9 sha256:63b5dc0e53e09d87941cdff55bd4934d59dd7c7cdd474aa2a378bde347c42460
• ovirt-csi-driver-operator git 76db379d sha256:4e259047b6cc68d6a91bb0bfda4483fc95d1f09aee8a49be8d3a473aa756eaed
• powervs-block-csi-driver-operator git 319efc99 sha256:6b2d9fde6f0d907f94b62098a4769e713557b58b653fa834c2d2ed1ed0dd34a9
• powervs-cloud-controller-manager git 2424e8dd sha256:1dd5983bcb920d656d5dc9f6d851c57d64d9a98198730bd18f849c1367ac31e6
• powervs-machine-controllers git f011b3c7 sha256:ce2dc6c2da909c058ddbd94427a450cd5c9f07c25012db04513dcdea09ad361f
• prometheus-alertmanager git 419f2843 sha256:f0f24d4ff45d2f39d69ee0a4c6f7841f1fb17ef8e56ade54ee908c0d8fab6157
• prometheus-config-reloader git e2bd260c sha256:dc2245e139e4332349d940b8a21aa07a255538aa8d5bbe13ffcff07b8b6a9c38
• prometheus-operator git e2bd260c sha256:437cebdc65013878fe8d4a89106b223cdf2a3b34aca7d4db93d1b795aaa22f53
• prometheus-operator-admission-webhook git e2bd260c sha256:acd9b0b55a2eeefc7f6d73fb056ec271fd901f5210d49703ae8d84009ef55fc2
• volume-data-source-validator git 0e61642f sha256:3eea4e045e0aa5065344e558b27d98268a6e4ad3ba9cd826ba118de9e04ec78d
• vsphere-csi-driver-operator git 5cd04d61 sha256:2d1bebaa2e4ee62f89d969cf320a89fdaf8fd3ac0284e41d3f849e406198fbd8
• vsphere-problem-detector git 9d55c028 sha256:0912573c489d1e14c35194aa5ce50084383352f184148efff185e88361e30bf6

agent-installer-api-server

• MGMT-20192: add possibility to disable image service #7955
• And 21 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• NO-ISSUE: Update Konflux references #1265
• And 5 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-node-agent

• chore(KONFLUX-6210): fix and set name and cpe label for assisted-installer-agent-ds-main (#1111) #1111
• Full changelog

agent-installer-utils

• OCPBUGS-61946: Include only final ISO in OVE UI container image #162
• OCPBUGS-61956: Disable Konflux go.mod PR updates #163
• OCPBUGS-61875: Add 4.21 config #160
• AGENT-1258: Red Hat Konflux kflux-prd-rh02 update ove-ui-iso #154
• AGENT-1258: Red Hat Konflux kflux-prd-rh02 purge agent-installer-utils #153
• Full changelog

aws-cloud-controller-manager

• NO-JIRA: Update OWNERS #116
• Full changelog

aws-cluster-api-controllers

• NO-JIRA: Update OWNERS #567
• NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.1 (9c17049) into main #569
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-60637: add runAsUser hook for operator deployment controller #431
• NO-JIRA: Centralize injection of hosted-kubeconfig volume #311
• NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 #429
• OCPBUGS-54385: Avoid informer resync #432
• NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 #427
• NO-JIRA: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.21 #425
• NO-JIRA: azure-disk, azure-file sync code de-duplication #303
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• NO-JIRA: Update OWNERS #149
• Full changelog

azure-cluster-api-controllers

• NO-JIRA: Update OWNERS #351
• Full changelog

azure-disk-csi-driver

• NO-JIRA: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.21 #110
• Full changelog

azure-machine-controllers

• NO-JIRA: Update OWNERS #162
• Full changelog

azure-service-operator

• NO-JIRA: Update OWNERS #12
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-62293: Set default for PrivateDNSZone Project ID #9967
• CORS-4078: disable rate limiter for AWS SDK v2 #9958
• OCPBUGS-61901: Update explain for Publish #9950
• no-jira: OWNERS: switch to joelcapitao #9951
• OCPBUGS-61935: Wildcards not reliable for copying container files #9948
• CORS-4058: Migrate AWS Destroy to SDK v2 #9939
• OCPBUGS-61353: Generated Redacted nutanix config for operator #9931
• CORS-3550: add ability to opt out of the sigstore signing requirement #9940
• CORS-4162: Remove GCPClusterHostedDNSInstall featuregate #9944
• OCPBUGS-61490: Update code to retrieve ICSP instead of ICP #9933
• MGMT-21586: Add an option in image-based installation to specify architecture #9934
• SPLAT-2430: Update vSphere version validations for 7 EOL and VCF 9 #9914
• OCPBUGS-61373: Fix shellcheck issues in bootstrap #9929
• OCPBUGS-61373: Fix agent shellcheck issues #9928
• no-jira: Fix logging and error messages #9917
• Full changelog

baremetal-operator

• NO-ISSUE: Merge upstream #430
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-59311: oc adm must-gather: Add support for context #2105
• OCPBUGS-59311: pkg/…/inspect: Add support for context.Context #2100
• WRKLDS-593: oc adm must-gather: Improve cleanup order #2080
• NO-JIRA: Add tchap as reviewer in oc #2099
• NO-JIRA: oc adm groups sync: Use client.Unbind #2094
• OCPBUGS-61063: pkg/cli/admin/upgrade/recommend: Enable precheck and accept gates #2088
• OCPBUGS-52936: oc adm policy: Only initialize UserClient if built-in OAuth is enabled #2090
• OCPBUGS-61311: Introduce auto-open-browser flag for external OIDC issuer login #2089
• NO-ISSUE: pkg/cli/admin/upgrade/recommend/examples/4.19.0-okd-scos.16: Add OKD example #2093
• OCPBUGS-59951: oc adm must-gather: Wrap gather in a session #2087
• NO-JIRA: Add some warnings into excluded list #2092
• OCPBUGS-56691: Rely on overall available disk space of the mounted volume #2084
• Full changelog

cloud-credential-operator

• OCPBUGS-62184: aws: remove endpoint overrides for s3 and cf clients #921
• CCO-692: Migrate to aws-ask-go-v2 #905
• OCPBUGS-61475: set cloud-credential-operator as default-container #914
• Full changelog

cluster-authentication-operator

• OCPBUGS-57444: set appropriate rolling update settings #789
• NO-JIRA: om: fix integration testing #788
• Full changelog

cluster-baremetal-operator

• OCPBUGS-60498: Always have a service for ironic-api port #510
• Full changelog

cluster-capi-controllers

• NO-JIRA: Update OWNERS #246
• OCPBUGS-57605: Updating ose-cluster-api-container image to be consistent with ART for 4.20 #242
• Full changelog

cluster-capi-operator

• OCPCLOUD-2992: Enable MAPI machine synchronized e2e tests (re-enable after OCPBUGS-54703 fix) #359
• NO-JIRA: Update OWNERS #353
• OCPCLOUD-3162: conversion: do not set ignition version on AWSMachine #363
• NO-JIRA: use go workspaces #358
• OCPCLOUD-2714: Add VAPs to prevent setting of CAPI fields that are not supported by MAPI #334
• No-JIRA: increased timeout #354
• NO-JIRA: Adds AGENTS.md #349
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-60385: Add Microsoft.Network/publicIPAddresses/delete permission #416
• NO-JIRA: Update OWNERS #413
• OCPBUGS-54490: Add Azure permissions for Private Link Service operations #417
• SPLAT-2341: Add feature gate support in the cloud-config sync controller #400
• Full changelog

cluster-config-api

• OCPBUGS-59939: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2507
• OCPBUGS-59940: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2506
• (bugfix): crdify generator returns aggregated error when validations fail #2493
• MCO-1669: add BootImageSkewEnforcement API #2357
• remove unused feature gate InsightsConfigAPI #2474
• OCPBUGS-61689: Add ‘AGE’ print column to MachineConfigNode object #2476
• NO-JIRA: tooling: add crdify generator to run crdify against CRD changes #2472
• Update controller-tools to latest on fork #2478
• Monitoring API: Add Metric server config #2322
• CNTRLPLANE-5: Add CBOR feature gate #2235
• NO-JIRA: New rules about CO’s conditions #2469
• apiservers.config.openshift.io: remove spec.tlsSecurityProfile GoDoc caveats #2467
• SPLAT-2482: create new featuregate for ClusterAPIMachineManagementVSphere #2466
• MCO-1675: Update API for Status Reporting needs (REBASED) #2442
• CORS-3993: Promote GCPClusterHostedDNS to Default #2300
• Adjust typos #2243
• Update schema checker to avoid incorrect new required fields checks #2470
• config/v1/cluster_operator improve documentation #2344
• Update NodeSwap with owner and doc blurb. #2053
• Full changelog

cluster-control-plane-machine-set-operator

• NO-JIRA: Update OWNERS #367
• MCO-1866: Ignore boot image differences while reconciling Provider Configs #368
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-62247: add all-egress label to deployments on HCP and IBM #243
• Full changelog

cluster-dns-operator

• NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #449
• Full changelog

cluster-etcd-operator

• NO-JIRA: Use secure cipher suites #1477
• Full changelog

cluster-ingress-operator

• OCPBUGS-55649: Remove SetEIPForNLBIngressController feature gate #1280
• OCPBUGS-55673: Remove IngressControllerLBSubnetsAWS featuregate #1242
• NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #1281
• NE-2139: Kubernetes to 1.33.4 and controller-runtime to 0.21 #1279
• NO-JIRA: Add davidesalerno to OWNERS #1278
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-15430: move alerting rules from CMO over #1922
• Re-apply “OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry” #1910
• OCPSTRAT-2371: promote MutatingAdmissionPolicy to v1beta1 for > 1.34.0 #1921
• Full changelog

cluster-kube-cluster-api-operator

• NO-JIRA: Update OWNERS #60
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-62255: Throttle resourcesynccontroller on pairs with dual writers. #881
• WRKLDS-1556: Remove –cloud-provider=external from KCM #862
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-61301: Add readonlyRootFilesystem #575
• Full changelog

cluster-machine-approver

• NO-JIRA: Update OWNERS #276
• NO-JIRA: set machine-approver-controller as default container #278
• Full changelog

cluster-monitoring-operator

• OCPBUGS-62109: test: remove image registry e2e tests #2681
• NO-ISSUE: update Go dependencies #2674
• MON-4346: Bump Go to 1.24 #2655
• NO-JIRA: [bot] Synchronize versions of the downstream components #2673
• OCPBUGS-60161: Add mcd_local_unsupported_packages metric from MCO to telemetry #2638
• NO-ISSUE: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.21 #2662
• MON-4344: chore: port the test suite over from openshift-tests-private #2635
• MON-4371: chore(prometheus): enable use-uncached-io feature flag #2637
• NO-JIRA: [bot] Synchronize versions of the downstream components #2668
• OCPBUGS-61113: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2657
• NO-JIRA: [bot] Synchronize versions of the downstream components #2663
• Full changelog

cluster-network-operator

• OCPBUGS-42303: Add drop flows for GARP #2801
• OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes #2797
• OCPBUGS-61561: Relax label req. of DPU/DPU Host/Smart NIC #2786
• Revert “OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes” #2796
• OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes #2605
• OCPBUGS-60421: Set maxUnavailable 10% on MultiNetworkPolicy DS #2785
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-62091: E2E: Add function to check control plane nodes are schedulable. #1396
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-olm-operator

• NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.21 #138
• OCPBUGS-61873: Update RBAC to update/patch/delete what we create #139
• Full changelog

cluster-openshift-apiserver-operator

• NO-JIRA: Bump library go rm co dep #625
• Full changelog

cluster-openshift-controller-manager-operator

• CNTRLPLANE-1307: set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test #395
• Full changelog

cluster-policy-controller

• OCPBUGS-57191: fix(psalabelsyncer): return an error instead of panic when converting an unknown volume #167
• NO-JIRA: scc allocation controller: Use server-side apply #165
• Full changelog

cluster-samples-operator

• OCPBUGS-62061: Re-sync OCP Samples Library for OCP 4.21 - 22Sep2025 #650
• Full changelog

cluster-storage-operator

• OCPBUGS-60637: HyperShift deployments should reflect user id security context #616
• OCPBUGS-62121: add all-egress label to deployments on HCP and IBM #621
• OCPBUGS-61175: Add RBAC rule to let manila-csi-driver-operator manage NetworkPolicy #615
• SPLAT-2467: Updated VPD alerts to reflect current vSphere support #612
• Full changelog

console

• CONSOLE-4799: update tests/app/debug-pod.cy.ts #15530
• CONSOLE-4802: Migrate KebabActions to dynamic #15535
• CONSOLE-3769: Add @openshift/dynamic-plugin-sdk to core and internal pkg deps #15518
• OCPBUGS-61536: Fix incorrect handling of vSphere settings #15481
• OCPBUGS-61937: Add Missing Periods to Error Messages and update try again button link #15511
• NO-JIRA: Remove yarn-generate from post-install script #15373
• CONSOLE-4796: Migrate some Dashboards extensions to dynamic #15526
• OCPBUGS-61535: Cancel PVC creation redirect user to last visited page instead of PVC list #15502
• CONSOLE-4764: Add tech preview feature flag support #15477
• CONSOLE-4715: Migrate the Enzyme test tests root directory and remove tests… #15462
• NO-JIRA: Update CHANGELOG based on 4.18 plugin SDK package release #15517
• CONSOLE-4760: update CRD list to use ResourceDataView #15469
• CONSOLE-3769: Install @openshift/dynamic-plugin-sdk #15509
• OCPBUGS-60084: Help dropdown should be closed automatically after tour model opened #15483
• OCPBUGS-55401: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15315
• OCPBUGS-59634: Fix the events search input width, and incorporate PF Toolbar component #15501
• NO-JIRA: Update README.md with instructions for logging out kube:admin in local #15482
• NO-JIRA: chore(OWNERS): remove logonoff from reviewers #15505
• CONSOLE-4710: use useOverlay to launch ErrorModal #15475
• OCPBUGS-61087: Updation of label from edit label doesn’t work #15460
• OCPBUGS-61519: Fix improper DescriptionList refactor #15495
• OCPBUGS-59972: Add validation and type guards on healthHandler calls to prevent errors #15470
• CONSOLE-4756: Convert more files to TypeScript #15472
• OCPBUGS-61458: fix MachineSet YAML template #15478
• OCPBUGS-58118: fix namespace path generation for non-namespaced resources #15467
• OCPBUGS-61183: cluster in workload identity mode is not applied with the token-auth-… #15459
• OCPBUGS-61133: Fix catalog search relevance scoring, so that operators with attribute.keywords are displayed and remove unnecessary metadataName from calculation #15444
• OCPBUGS-61468: i18n upload/download routine task for OCP version 4.20 #15476
• CONSOLE-4727: Update OWNERS files across the repo #15461
• CONSOLE-4598: Migrate enzyme tests/components/utils unit tests to React Testing… #15442
• OCPBUGS-61393: Change default tab size from 4 to 2 #15474
• CONSOLE-4635: Refactor PDBActionFactory to hook form and cleanup. #15285
• And 6 elided commits (e.g. from squash or rebase merges)
• Full changelog

console-operator

• CONSOLE-4765, CONSOLE-4767: Automate console tech preview flag via cluster FeatureSet, Grant console service account watch permissions for ClusterCatalogs #1043
• OCPBUGS-61726: Revert “OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition” #1046
• OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1041
• OCPBUGS-61483: Update DEFAULT_DOC_URL to point to OpenShift Container Platform 4.21 #1044
• OCPBUGS-61383: Update QuickStarts typo and doc link #1042
• OCPBUGS-60863: Rename Dockerfile to Dockerfile.ocp #1039
• Full changelog

coredns

• NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #153
• Full changelog

csi-external-attacher

• NO-JIRA: Updating csi-attacher-container image to be consistent with ART for 4.21 #87
• Full changelog

csi-external-resizer

• OCPBUGS-61547: Requeue PVC over PV creation #173
• Full changelog

csi-external-snapshot-metadata

• NO-JIRA: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.21 #5
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• NO-JIRA: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.21 #187
• Full changelog

docker-registry

• OCPBUGS-60845: update OWNERS #447
• Full changelog

driver-toolkit

• Updating the OWNERS file. (#175) #175
• Updating driver-toolkit-container image to be consistent with ART for 4.21 (#172) #172
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-61006: Adjust vendoring to use go.work to get rid of the symlink #91
• Full changelog

gcp-cluster-api-controllers

• NO-JIRA: Update OWNERS #248
• Full changelog

gcp-machine-controllers

• NO-JIRA: Update OWNERS #129
• no-jira: Machine Api Operator GCP must search for the GCP Custom Endpoints Installer feature gate #128
• Full changelog

gcp-pd-csi-driver-operator

• NO-JIRA: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.21 #151
• CORS-4201: Search for the feature gate for GCP Custom Endpoints #150
• Full changelog

haproxy-router

• OCPBUGS-49769: Validate the key and cert content before accepting #669
• NE-2137: Bump router k8s libraries to 0.33.4 #671
• OCPBUGS-60257: fix extra space in haproxy template #676
• OCPBUGS-57896: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.20 #660
• OCPBUGS-57845: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.20 #659
• NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #675
• OCPBUGS-61224: Revert Prevent startup failures due to name resolution” #672
• Full changelog

hyperkube, kube-proxy, pod

• OCPBUGS-61554: Bump 1.33.5 #2459
• OCPBUGS-61754: UPSTREAM: <carry>: Add retries for GetCurrentResourceVersion. #2467
• OCPBUGS-61222: Do not remove PVC ClaimRef to fix flaky VAC test #2452
• OCPBUGS-58313: apiserver library go bump #2457
• NO-JIRA: UPSTREAM: 133682: Increase port-forward broken connection detection client timeout #2428
• Full changelog

hypershift

• NO-JIRA: chore(ai): let jira-solve show the executed command in the PR desc #6898
• OCPBUGS-61936: fix(capi-provider): wait for infrastructure resource before startup #6860
• OCPBUGS-62224: fix(e2e): add stabilization wait in GlobalPullSecret test to reduce flakiness #6892
• CNTRLPLANE-1478: chore: add AI directory paths to OWNERS file #6884
• NO-JIRA: chore(ai): add claude slash command jira solve #6882
• OCPBUGS-62099: make TestAutoscalingBalancing more robust #6877
• OCPBUGS-61850: fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races #6843
• NO-JIRA: ci(dev-cluster): Fix dev token secret annotation #6876
• OCPBUGS-62056: test(e2e): fix flaky EnsureOAPIMountsTrustBundle with retry logic #6872
• OCPBUGS-62128: hcco: sync watched resource types to availability-prober #6879
• CNTRLPLANE-1331: Get self-managed Azure working again #6703
• OCPBUGS-59885: [e2e][KubeVirt] Ignore KubeVirtNodesLiveMigratable Condition on HC #6826
• CNTRLPLANE-1455: docs(contribute): consolidate contributing guide; refresh PR template; add landing page #6866
• OCPBUGS-61776: fix(ignition-server): Don’t delete user-managed cert secrets #6836
• OCPBUGS-61894: Enable VolumeAttributesClass runtime config #6855
• CNTRLPLANE-1452: docs(ci): add documentation for checking CI status #6849
• OCPBUGS-61438: fix(security): harden konnectivity-agent DaemonSet security context #6835
• OCPBUGS-61828: refactor FeatureGate status check #6862
• OCPBUGS-61329: skip EnsureReadOnlyRootFilesystemTmpDirMount check for kubevirt HCP pods #6842
• OCPBUGS-61825: test(e2e,kubevirt): skip break-glass-credentials on kubevirt #6856
• OCPBUGS-61862: ci: Remove the MCE 2.10 konflux pipeline #6848
• OCPBUGS-61719: fix: propagate AWSLoadBalancerTargetNodesAnnotation to… #6823
• OCPBUGS-61334: fix(kas): Set correct container port in postStart handler, 2 #6824
• OCPBUGS-61177: ci: use common MCE konflux pipeline #6743
• NO-JIRA: Update Branch Tasks Docs #6840
• OCPBUGS-56249: fix lint-fix Makefile rule #6151
• OCPBUGS-61048: test(e2e): add autoscaler deployment verification to autoscaling test #6779
• OCPBUGS-61687: fix(capi-provider): use single replica deployment for aws and azure #6807
• fix(disable-psa): disable PSA check for 4.20 #6831
• OCPBUGS-61482: fix(proxy): ensure URLs have scheme before proxy resolution #6789
• OCPBUGS-61587: fix(oauth): oauth-openshift deployment should be HA #6802
• CNTRLPLANE-1277: Enable TestCreateClusterCustomConfig for Azure #6706
• Revert “OCPBUGS-61334: fix(kas): Set correct container port in postStart handler” #6805
• OCPBUGS-60185: resolve MIRRORED_RELEASE_IMAGE flapping #6751
• OCPBUGS-61499: fix(control-plane): remove resource limits from kube-controller-manager #6785
• CNTRLPLANE-1364: feat: enable global pull secret for AWS #6736
• OCPBUGS-61334: fix(kas): Set correct container port in postStart handler #6773
• NO-JIRA: fix karpenter metric validation in e2e #6714
• NO-JIRA: chore(AI): add claude agents for different SMEs #6787
• OCPBUGS-61329: test(e2e): skip kubevirt pods in EnsureReadOnlyRootFilesystem #6770
• OCPBUGS-61462: temporarily use v4.20 catalogs #6782
• NO-JIRA: add permissions to role policy #6783
• CNTRLPLANE-1385: docs: add MCP setup guide for Cursor with sample config #6775
• CNTRLPLANE-1383: docs(aro-e2e): add ARO HCP e2e artifacts navigation guide and Cursor rule #6774
• OCPBUGS-61218: test(e2e): add control plane component rollout validation to upgrade test #6767
• Full changelog

ibm-cloud-controller-manager

• NO-JIRA: Update OWNERS #85
• Full changelog

ibmcloud-cluster-api-controllers

• NO-JIRA: Update OWNERS #126
• Full changelog

ibmcloud-machine-controllers

• NO-JIRA: Update OWNERS #70
• Full changelog

insights-operator

• feat: update DataGather condition when gathering job fails (#1131) #1131
• fix: correct feature gate for InsightsDataGather (#1137) #1137
• Updating ose-insights-operator-container image to be consistent with ART for 4.21 (#1136) #1136
• OCPBUGS-61798: Run missing make update (#1140) #1140
• fix: Update error message for missing SCA certificates (#1134) #1134
• chore(OWNERS): add katarina (#1133) #1133
• fix: add missing permissions for replicasets and events (#1123) #1123
• Full changelog

ironic

• METAL-1446, METAL-1566, METAL-1577: Sync Ironic and Sushy #695
• METAL-1574: Remove temporary dependencies from source #692
• OKD-283: fixing OKD ironic-image errors and metal3 pod crashes (centos9) #688
• OCPBUGS-61459: sync with Ironic changes, including the local RPC revert #687
• METAL-1528: Use custom directories in the runironic-proxy script #679
• Full changelog

ironic-agent

• METAL-1574: Update deps pkgs versions #196
• Full changelog

kube-state-metrics

• NO-ISSUE: [bot] Bump openshift/kube-state-metrics to v2.17.0 #124
• Full changelog

machine-api-operator

• OCPBUGS-61728: Fixed multi nic e2e to wait for node removal after machineset tests #1417
• OCPBUGS-61728: Adjusted machine e2e tests to wait for nodes to clean up #1415
• NO-JIRA: Update OWNERS_ALIASES #1414
• Full changelog

machine-config-operator

• MCO-1685: Add mco-sanitize file processing logic #5298
• MCO-1685: Add mco-sanitize redactor #5295
• OCPBUGS-58198: Fix MCP updated machine count for image mode disabling case #5271
• MCO-1673: Add Component Readiness tests for Azure boot image updates #5257
• MCO-1840: Remove MCN CRD cleanup cronjob #5234
• OCPBUGS-60120: Add nil/null checks to image registry secret decode #5253
• NO-ISSUE: Add delays to reduce TestOSBuildController failures #5239
• MCO-1808: MCO-1790: Implement Azure boot image updates #5202
• OCPBUGS-61695: Override NMState service definition #5284
• OCPBUGS-60161: Add mcd_local_unsupported_packages recording rule #5242
• CORS-4170: Extending in-cluster DNS support to Azure #5216
• OCPBUGS-60537: Machine-config controller should actively manage cordon while draining #5276
• Full changelog

monitoring-plugin

• OU-1011: add a 5 minute to the first alert timestamp #550
• NO-JIRA: automation log and debug mode in headless mode #557
• OU-1015: fix: incidents dropdown stays open fix #554
• NO-JIRA: Update translations for incidents #555
• OBSINTA-795: Data Test Selectors for Incidents Page #545
• NO-JIRA: fix: immer dependency anr patternfly icons import #542
• OU-989: Kubevirt with fixes after namespace level and session handler #543
• NO-JIRA: Improve incidents timeline chart domain and loading UX #551
• OU-1005: upgrade perses plugins #540
• OBSINTA-789: Fix alerts chart empty state #549
• RHINENG-20863: improved fetching logic for incidents #546
• NO-JIRA: Login validation for all session flows #544
• OU-833: fix 2 bugs for incidents page #539
• NO-JIRA: Cypress Testsuite – Enhance Session Management #536
• OBSINTA-463: Rename the cluster health metrics #514
• OBSINTA-789: Update layout and labels #534
• OU-863: fix step calculation to fix non existent data gaps #535
• RHINENG-20701: fix utc timestamps in chart tooltips #531
• OBSINTA-798: Cypress Incident Tests – Query Mocking #521
• NO-JIRA: set rules as silenced if all alerts are silenced #533
• RHINENG-20667: silenced alerts for chart and table #530
• OU-658: Major Refactor + Adding Namespace dropdown to admin pages #483
• NO-JIRA: automation - fix monitoring-plugin injection #532
• NO-JIRA: Update build-image.sh #528
• OU-671: Add Patternfly Theming to Perses #522
• RHINENG-20424: fix clear filter bug with incident selected #527
• OU-783: Fit the alerts timeline to the actual data timespan #529
• OU-727: Filter incidents by max severity over time #526
• Full changelog

network-tools

• OCPBUGS-53196: Update references of master to main #160
• Full changelog

networking-console-plugin

• Merge #273
• CNV-59876: use correct name space when switching tabs #276
• OCPBUGS-61531: show VM network menu only on admin #275
• OCPBUGS-61548: use console extension to render same nad actions #274
• CNV-59629: set default MTU visible in form and yaml #272
• CNV-68685: add primary UDN label info to VirtualMachine network creation form #271
• CNV-68643: fix documentation links #270
• CNV-68676: fix wizard cancel button #269
• Full changelog

nutanix-cloud-controller-manager

• NO-JIRA: Update OWNERS #50
• Full changelog

nutanix-machine-controllers

• NO-JIRA: Update OWNERS #122
• Full changelog

oauth-apiserver

• OCPBUGS-61754: Bump openshift/kubernetes-apiserver for consistent list etcd retries. #146
• Full changelog

oc-mirror

• OCPBUGS-62106: v2/cli: show binary version in output #1273
• And 4 elided commits (e.g. from squash or rebase merges)
• Full changelog

olm-catalogd, olm-operator-controller

• OPRUN-4160: Fix cp-manifests copying of helm charts #482
• OPRUN-4164: Synchronize From Upstream Repositories #487
• OPRUN-4164: Synchronize From Upstream Repositories #484
• NO-ISSUE: Add pedjak and trgeiger as reviewers #463
• NO-ISSUE: Synchronize From Upstream Repositories #480
• NO-ISSUE: Synchronize From Upstream Repositories #479
• OCPQE-29416: Init OLMv1 OTE Framework for tests-private to migrate first case #467
• OPRUN-4076, OPRUN-4078: Replace kustomize config with helm config #475
• NO-ISSUE: add jiazha to approvers #477
• NO-ISSUE: Synchronize From Upstream Repositories #476
• NO-ISSUE: Synchronize From Upstream Repositories #473
• NO-ISSUE: Synchronize From Upstream Repositories #471
• NO-ISSUE: Synchronize From Upstream Repositories #465
• NO-ISSUE: Grant QE approver permissions for OTE contributions #457
• NO-ISSUE: Synchronize From Upstream Repositories #464
• And 3 elided commits (e.g. from squash or rebase merges)
• Full changelog

openshift-apiserver

• OCPBUGS-61768: update pkg/image/OWNERS #555
• OCPBUGS-61754: Bump openshift/kubernetes-apiserver for consistent list etcd retries. #556
• OCPBUGS-61228: Bump Route generation when spec is updated #550
• OCPBUGS-37215: pkg/image: conditionally parse raw image manifest #551
• Full changelog

openshift-controller-manager

• OCPBUGS-61899: CNTRLPLANE-1308: Fix Dockerfile.rhel: Add OTE binary build and packaging #419
• CNTRLPLANE-1308: set up openshift-tests-extension for openshift-controller-manager and add a sanity test #417
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Synchronize From Upstream Repositories #1115
• OCPQE-29415: add testing framework based on OTE and the first tests-private case #1113
• OCPQE-29415: move golangci-lint and go-bindata to new location to fix sync #1114
• OCPQE-29415: add OTE into olmv0 with new location #1108
• NO-ISSUE: Synchronize From Upstream Repositories #1112
• NO-ISSUE: UPSTREAM: <carry>: add jiazha to approvers #1110
• Revert “OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0” #1109
• NO-ISSUE: Updating operator-registry-container image to be consistent with ART for 4.21 #1106
• OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0 #1105
• NO-ISSUE: set package-server-manager as default container #1104
• NO-ISSUE: Synchronize From Upstream Repositories #1103
• NO-ISSUE: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.21 #1100
• NO-ISSUE: Synchronize From Upstream Repositories #1101
• NO-ISSUE: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.21 #1094
• NO-ISSUE: make downstream csv namespace labeler plugin e2e more resilient to race conditions #1092
• NO-ISSUE: Synchronize From Upstream Repositories #1088
• Full changelog

operator-marketplace

• OCPBUGS-62132: Remove Expect func so that the test case can use the retry logic #665
• NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.25.1 #658
• NO-ISSUE: Update CRD version installed via makefile target #648
• NO-ISSUE: Fix hyperlink #651
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-42303, OCPBUGS-58501, OCPBUGS-59657, OCPBUGS-61566: DownStream Merge [09-09-2025] #2750
• OCPBUGS-61065: Adding ovndb-raft-functions.sh to ovnk image #2740
• NO-JIRA: DownStream Merge [08-27-2025] #2736
• Full changelog

powervs-block-csi-driver

• Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.21 #107
• Full changelog

prom-label-proxy

• NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.1 #385
• Full changelog

prometheus

• OCPBUGS-62166: chore(scrape): default to legacy validation/escaping scheme until utf-8 is fully supported by prometheus-operator #272
• Full changelog

prometheus-node-exporter

• NO-ISSUE: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.21 #170
• Full changelog

rhel-coreos, rhel-coreos-extensions

• NO-JIRA: bump version to 4.21 #1860
• Full changelog

route-controller-manager

• NO-JIRA: Add new team members to OWNERS #64
• Full changelog

service-ca-operator

• OCPBUGS-56599: don’t hotloop on secret creation errors #274
• Full changelog

telemeter

• Updating telemeter-container image to be consistent with ART for 4.21 #565
• Full changelog

tests

• OCPBUGS-62227: bump telemetry series limit to 1000 #30302
• OCPERT-151: Migrate new func for Compare structured data instead of string from openshift-test-private repo #30291
• OCPBUGS-61398: fix(ginkgo): avoid nil deref and harden env var setup #30289
• OCPQE-30698: enable OTE for olmv0 #30285
• OTA-1626: Fail CI if alert/ClusterOperatorDegraded is fired #30282
• TRT-2071: Remove annotations and replace with environment selector based test skipping and disablement #30064
• trt-2246: lower parallelism based on worker nodes #30226
• OCPSTRAT-2045: Automating OCPSTRAT-2045 feature in upstream #30067
• OCPBUGS-61980: Temporarily remove commatrix documentation test for rework #30280
• OCPBUGS-61905: oidc: improve rollout wait times #30274
• OCPSTRAT-2371: image: add busybox to list of allowed images #30281
• CORENET-6418: drop openshift-sdn tests #29085
• OCPEDGE-1483: Add TNF E2E tests for network failure #30110
• OCPBUGS-61196: Skip ServiceCIDR in etcd_storage_path test #30254
• OCPBUGS-61855: Temporarily disable InstallPlanStepAppliedWithWarnings for k8s 1.34 rebase #30275
• OCPBUGS-61398: fix(test): prevent nil pointer dereference in ginkgo test runner #30224
• OCPBUGS-61855: CRD Apply Alert Allowance #30265
• NE-2090: adding one GIE automation test #30189
• OTA-1601: upgrade status: recover checking the updating COs #30154
• NO-JIRA: Allow systemd-coredump test to fail #30261
• OCPSTRAT-2371: Update etcd test data for k8s 1.34 release #30242
• OCPBUGS-61733: Restore retries for port-forward test #30255
• OCPEDGE-2090: Add validation tests for tnf topology effects #30252
• TRT-2275: introduce cluster e2e-analysis sub command for openshift-tests #30211
• MON-4290: add test for must-gather gather_metrics #30054
• OCPBUGS-61193: chore(extended/prometheus): ²⁄₂: make ‘targets auth’ test more lenient and more resilient #30256
• OCPBUGS-57325: update machines scale test #30028
• Trt-2246: network test isolation #30192
• NO-ISSUE: Automated - Update synthetic test data #30244
• NO-JIRA: Remove runbook exceptions for fixed bugs #30246
• trt-2230: Add monitor test annotation #30196
• NO-JIRA: Increase request-timeout to deflake test #30248
• NO-JIRA: Deflake oc observe test by using explicit port number #30247
• OTA-1559: test/extended/cli/adm_upgrade/recommend: TestRiskA PromQL use max_over_time #30160
• NO-JIRA: Add intervals and a test for systemd-coredumps #30222
• CNTRLPLANE-945: oidc: add retry logic for Keycloak route creation #30233
• CNF-18661: Update vendor to include communication matrix bug fix #30232
• CNTRLPLANE-945: images: add keycloak images and use them in ExternalOIDC tests #30221
• NO-JIRA: Migrate new func for non-Job pods readiness helper for OCL from openshift-test-private repo #30193
• NO-ISSUE: test/extended/util/framework: Poll in IsMicroShiftCluster #30161
• OCPBUGS-61538: Skip config-operator checking when featureSet is DevPreviewNoUpgrade #30236
• OCPBUGS-61193: chore(extended/prometheus): make ‘targets auth’ test more lenient and more resilient. #30219
• NO-ISSUE: Automated - Update synthetic test data #30020
• OCPBUGS-61287: Add flaky kubectl logs test to the retry list to clean signal for release #30215
• OCPBUGS-60507: Bump to latest openshift/kubernetes (v1.33.4) #30227
• CNF-18661: update the commatrix vendor version to contain new changes #30220
• Trt-2257: track run options #30195
• OCPBUGS-61063: test/extended/cli/adm_upgrade/recommend: Enable precheck and accept #30113
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

thanos

• Updating ose-thanos-container image to be consistent with ART for 4.21 #164
• Full changelog

vsphere-cloud-controller-manager

• NO-JIRA: Update OWNERS #99
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-57668: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.20 #59
• NO-JIRA: Update OWNERS #65
• OCPBUGS-61498: UPSTREAM: 3636: VSphereClusterIdentity: ensure namespace in tests exists when not using the default #67
• OCPBUGS-61498: Fix openshift/unit-tests.sh #66
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.21 #150
• NO-JIRA: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.21 #148
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.34.0-4.rhaos4.21.git941066d.el9
• kernel-5.14.0-570.49.1.el9_6
• openshift-kubelet-4.21.0-202509190529.p2.g5c9df33.assembly.stream.el9
• systemd-252-51.el9_6.2

Full list (564 packages)

• NetworkManager-1:1.52.0-7.el9_6
• NetworkManager-cloud-setup-1:1.52.0-7.el9_6
• NetworkManager-libnm-1:1.52.0-7.el9_6
• NetworkManager-ovs-1:1.52.0-7.el9_6
• NetworkManager-team-1:1.52.0-7.el9_6
• NetworkManager-tui-1:1.52.0-7.el9_6
• WALinuxAgent-udev-2.7.0.6-11.el9_6.1
• aardvark-dns-2:1.14.0-1.el9
• acl-2.3.1-4.el9
• adcli-0.9.2-1.el9
• afterburn-5.7.0-1.el9
• afterburn-dracut-5.7.0-1.el9
• alternatives-1.24-2.el9
• attr-2.5.1-3.el9
• audit-3.1.5-4.el9
• audit-libs-3.1.5-4.el9
• authselect-1.2.6-3.el9
• authselect-libs-1.2.6-3.el9
• avahi-libs-0.8-22.el9_6.1
• basesystem-11-13.el9
• bash-5.1.8-9.el9
• bash-completion-1:2.11-5.el9
• bind-libs-32:9.16.23-31.el9_6
• bind-license-32:9.16.23-31.el9_6
• bind-utils-32:9.16.23-31.el9_6
• binutils-2.35.2-63.el9
• binutils-gold-2.35.2-63.el9
• bootc-1.1.6-3.el9_6
• bootupd-0.2.27-4.el9_6
• bsdtar-3.5.3-6.el9_6
• bubblewrap-0.4.1-8.el9_5
• bzip2-1.0.8-10.el9_5
• bzip2-libs-1.0.8-10.el9_5
• c-ares-1.19.1-2.el9_4
• ca-certificates-2024.2.69_v8.0.303-91.4.el9_4
• checkpolicy-3.6-1.el9
• chrony-4.6.1-1.el9
• cifs-utils-7.1-2.el9
• clevis-21-208.el9
• clevis-dracut-21-208.el9
• clevis-luks-21-208.el9
• clevis-systemd-21-208.el9
• cloud-utils-growpart-0.33-1.el9
• composefs-1.0.8-1.el9
• composefs-libs-1.0.8-1.el9
• conmon-3:2.1.12-1.el9
• conmon-rs-0.6.6-0.rhaos4.18.el9.1
• console-login-helper-messages-0.21.3-1.el9
• console-login-helper-messages-issuegen-0.21.3-1.el9
• console-login-helper-messages-profile-0.21.3-1.el9
• container-selinux-4:2.237.0-2.el9_6
• containernetworking-plugins-1:1.6.2-2.el9_6
• containers-common-2:1-117.el9_6
• coreos-installer-0.24.0-3.el9_6
• coreos-installer-bootinfra-0.24.0-3.el9_6
• coreutils-8.32-39.el9
• coreutils-common-8.32-39.el9
• cpio-2.13-16.el9
• cracklib-2.9.6-27.el9
• cracklib-dicts-2.9.6-27.el9
• cri-o-1.34.0-4.rhaos4.21.git941066d.el9
• cri-tools-1.34.0-1.el9
• criu-3.19-1.el9
• criu-libs-3.19-1.el9
• crun-1.23.1-2.el9_6
• crypto-policies-20250128-1.git5269e22.el9
• crypto-policies-scripts-20250128-1.git5269e22.el9
• cryptsetup-2.7.2-3.el9_6.1
• cryptsetup-libs-2.7.2-3.el9_6.1
• curl-7.76.1-31.el9_6.1
• cyrus-sasl-gssapi-2.1.27-21.el9
• cyrus-sasl-lib-2.1.27-21.el9
• dbus-1:1.12.20-8.el9
• dbus-broker-28-7.el9
• dbus-common-1:1.12.20-8.el9
• dbus-libs-1:1.12.20-8.el9
• dbus-tools-1:1.12.20-8.el9
• device-mapper-9:1.02.202-6.el9
• device-mapper-event-9:1.02.202-6.el9
• device-mapper-event-libs-9:1.02.202-6.el9
• device-mapper-libs-9:1.02.202-6.el9
• device-mapper-multipath-0.8.7-35.el9_6.1
• device-mapper-multipath-libs-0.8.7-35.el9_6.1
• device-mapper-persistent-data-1.1.0-1.el9
• diffutils-3.7-12.el9
• dmidecode-1:3.6-1.el9
• dnf-4.14.0-25.el9
• dnf-data-4.14.0-25.el9
• dnsmasq-2.85-17.el9_6
• dosfstools-4.2-3.el9
• dracut-057-88.git20250311.el9_6
• dracut-network-057-88.git20250311.el9_6
• dracut-squash-057-88.git20250311.el9_6
• e2fsprogs-1.46.5-7.el9
• e2fsprogs-libs-1.46.5-7.el9
• efi-filesystem-6-2.el9_0
• efibootmgr-16-12.el9
• efivar-libs-38-3.el9
• elfutils-debuginfod-client-0.192-6.el9_6
• elfutils-default-yama-scope-0.192-6.el9_6
• elfutils-libelf-0.192-6.el9_6
• elfutils-libs-0.192-6.el9_6
• ethtool-2:6.11-1.el9
• expat-2.5.0-5.el9_6
• file-5.39-16.el9
• file-libs-5.39-16.el9
• filesystem-3.16-5.el9
• findutils-1:4.8.0-7.el9
• firewalld-filesystem-1.3.4-9.el9_5
• flashrom-1.2-10.el9
• fstrm-0.6.1-3.el9
• fuse-2.9.9-17.el9
• fuse-common-3.10.2-9.el9
• fuse-libs-2.9.9-17.el9
• fuse-overlayfs-1.14-1.el9
• fuse3-3.10.2-9.el9
• fuse3-libs-3.10.2-9.el9
• fwupd-1.9.26-1.el9
• fwupd-plugin-flashrom-1.9.26-1.el9
• gawk-5.1.0-6.el9
• gawk-all-langpacks-5.1.0-6.el9
• gdbm-libs-1:1.23-1.el9
• gdisk-1.0.7-5.el9
• geolite2-city-20191217-6.el9
• geolite2-country-20191217-6.el9
• gettext-0.21-8.el9
• gettext-libs-0.21-8.el9
• git-core-2.47.3-1.el9_6
• glib2-2.68.4-16.el9_6.2
• glibc-2.34-168.el9_6.23
• glibc-common-2.34-168.el9_6.23
• glibc-gconv-extra-2.34-168.el9_6.23
• glibc-minimal-langpack-2.34-168.el9_6.23
• glusterfs-6.0-57.4.el9
• glusterfs-client-xlators-6.0-57.4.el9
• glusterfs-fuse-6.0-57.4.el9
• glusterfs-libs-6.0-57.4.el9
• gmp-1:6.2.0-13.el9
• gnupg2-2.3.3-4.el9
• gnutls-3.8.3-6.el9_6.2
• gobject-introspection-1.68.0-11.el9
• gpgme-1.15.1-6.el9
• grep-3.6-5.el9
• groff-base-1.22.4-10.el9
• grub2-common-1:2.06-104.el9_6
• grub2-efi-x64-1:2.06-104.el9_6
• grub2-pc-1:2.06-104.el9_6
• grub2-pc-modules-1:2.06-104.el9_6
• grub2-tools-1:2.06-104.el9_6
• grub2-tools-minimal-1:2.06-104.el9_6
• gssproxy-0.8.4-7.el9
• gzip-1.12-1.el9
• hostname-3.23-6.el9
• hwdata-0.348-9.18.el9
• ignition-2.21.0-4.rhaos4.19.el9
• ignition-grub-2.21.0-4.rhaos4.19.el9
• ima-evm-utils-1.5-3.el9
• info-6.7-15.el9
• inih-49-6.el9
• initscripts-service-10.11.8-4.el9
• ipcalc-1.0.0-5.el9
• iproute-6.11.0-1.el9
• iproute-tc-6.11.0-1.el9
• iptables-libs-1.8.10-11.el9_5
• iptables-nft-1.8.10-11.el9_5
• iputils-20210202-11.el9_6.1
• irqbalance-2:1.9.4-2.el9_6.2
• iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
• iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
• isns-utils-libs-0.101-4.el9
• jansson-2.14-1.el9
• jose-14-1.el9
• jq-1.6-17.el9_6.2
• json-c-0.14-11.el9
• json-glib-1.6.6-1.el9
• kbd-2.4.0-11.el9
• kbd-legacy-2.4.0-11.el9
• kbd-misc-2.4.0-11.el9
• kernel-5.14.0-570.49.1.el9_6
• kernel-core-5.14.0-570.49.1.el9_6
• kernel-modules-5.14.0-570.49.1.el9_6
• kernel-modules-core-5.14.0-570.49.1.el9_6
• kernel-modules-extra-5.14.0-570.49.1.el9_6
• kexec-tools-2.0.29-5.el9_6.2
• keyutils-1.6.3-1.el9
• keyutils-libs-1.6.3-1.el9
• kmod-28-10.el9
• kmod-libs-28-10.el9
• kpartx-0.8.7-35.el9_6.1
• krb5-libs-1.21.1-8.el9_6
• less-590-5.el9
• libacl-2.3.1-4.el9
• libaio-0.3.111-13.el9
• libarchive-3.5.3-6.el9_6
• libassuan-2.5.5-3.el9
• libattr-2.5.1-3.el9
• libbasicobjects-0.1.1-53.el9
• libblkid-2.37.4-21.el9
• libbpf-2:1.5.0-1.el9
• libbrotli-1.0.9-7.el9_5
• libcap-2.48-9.el9_2
• libcap-ng-0.8.2-7.el9
• libcbor-0.7.0-5.el9
• libcollection-0.7.0-53.el9
• libcom_err-1.46.5-7.el9
• libcomps-0.1.18-1.el9
• libcurl-7.76.1-31.el9_6.1
• libdaemon-0.14-23.el9
• libdb-5.3.28-57.el9_6
• libdhash-0.5.0-53.el9
• libdnf-0.69.0-13.el9
• libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6
• libdrm-2.4.123-2.el9
• libeconf-0.4.1-4.el9
• libedit-3.1-38.20210216cvs.el9
• libev-4.33-6.el9
• libevent-2.1.12-8.el9_4
• libfdisk-2.37.4-21.el9
• libffi-3.4.2-8.el9
• libfido2-1.13.0-2.el9
• libgcc-11.5.0-5.el9_5
• libgcrypt-1.10.0-11.el9
• libgomp-11.5.0-5.el9_5
• libgpg-error-1.42-5.el9
• libgudev-237-1.el9
• libgusb-0.3.8-2.el9
• libibverbs-54.0-1.el9
• libicu-67.1-10.el9_6
• libidn2-2.3.0-7.el9
• libini_config-1.3.1-53.el9
• libipa_hbac-2.9.6-4.el9_6.2
• libjcat-0.1.6-3.el9
• libjose-14-1.el9
• libkcapi-1.4.0-2.el9
• libkcapi-hmaccalc-1.4.0-2.el9
• libksba-1.5.1-7.el9
• libldb-4.21.3-14.el9_6
• libluksmeta-9-12.el9
• libmaxminddb-1.5.2-4.el9
• libmicrohttpd-1:0.9.72-5.el9
• libmnl-1.0.4-16.el9_4
• libmodulemd-2.13.0-2.el9
• libmount-2.37.4-21.el9
• libmspack-0.10.1-0.7.alpha.el9
• libndp-1.9-1.el9
• libnet-1.2-7.el9
• libnetfilter_conntrack-1.0.9-1.el9
• libnfnetlink-1.0.1-23.el9_5
• libnfsidmap-1:2.5.4-34.el9
• libnftnl-1.2.6-4.el9_4
• libnghttp2-1.43.0-6.el9
• libnl3-3.11.0-1.el9
• libnl3-cli-3.11.0-1.el9
• libnvme-1.11.1-1.el9
• libpath_utils-0.2.1-53.el9
• libpcap-14:1.10.0-4.el9
• libpciaccess-0.16-7.el9
• libpkgconf-1.7.3-10.el9
• libpsl-0.21.1-5.el9
• libpwquality-1.4.4-8.el9
• libref_array-0.1.5-53.el9
• librepo-1.14.5-2.el9
• libreport-filesystem-2.15.2-6.el9
• librhsm-0.0.3-9.el9
• libseccomp-2.5.2-2.el9
• libselinux-3.6-3.el9
• libselinux-utils-3.6-3.el9
• libsemanage-3.6-5.el9_6
• libsepol-3.6-2.el9
• libsigsegv-2.13-4.el9
• libslirp-4.4.0-8.el9
• libsmartcols-2.37.4-21.el9
• libsmbclient-4.21.3-14.el9_6
• libsolv-0.7.24-3.el9
• libss-1.46.5-7.el9
• libssh-0.10.4-13.el9
• libssh-config-0.10.4-13.el9
• libsss_certmap-2.9.6-4.el9_6.2
• libsss_idmap-2.9.6-4.el9_6.2
• libsss_nss_idmap-2.9.6-4.el9_6.2
• libsss_sudo-2.9.6-4.el9_6.2
• libstdc++-11.5.0-5.el9_5
• libtalloc-2.4.2-1.el9
• libtasn1-4.16.0-9.el9
• libtdb-1.4.12-1.el9
• libteam-1.31-16.el9_1
• libtevent-0.16.1-1.el9
• libtirpc-1.3.3-9.el9
• libtool-ltdl-2.4.6-46.el9
• libunistring-0.9.10-15.el9
• liburing-2.5-1.el9
• libusbx-1.0.26-1.el9
• libuser-0.63-16.el9
• libutempter-1.2.1-6.el9
• libuuid-2.37.4-21.el9
• libuv-1:1.42.0-2.el9_4
• libverto-0.3.2-3.el9
• libverto-libev-0.3.2-3.el9
• libwbclient-4.21.3-14.el9_6
• libxcrypt-4.4.18-3.el9
• libxcrypt-compat-4.4.18-3.el9
• libxml2-2.9.13-12.el9_6
• libxmlb-0.3.10-1.el9
• libxslt-1.1.34-13.el9_6
• libyaml-0.2.5-7.el9
• libzstd-1.5.5-1.el9
• linux-firmware-20250812-151.4.el9_6
• linux-firmware-whence-20250812-151.4.el9_6
• lmdb-libs-0.9.29-3.el9
• logrotate-3.18.0-9.el9
• lsof-4.94.0-3.el9
• lua-libs-5.4.4-4.el9
• luksmeta-9-12.el9
• lvm2-9:2.03.28-6.el9
• lvm2-libs-9:2.03.28-6.el9
• lz4-libs-1.9.3-5.el9
• lzo-2.10-7.el9
• mdadm-4.3-4.el9_5
• microcode_ctl-4:20250211-1.20250512.1.el9_6
• mokutil-2:0.6.0-4.el9
• mpfr-4.1.0-7.el9
• nano-5.6.1-7.el9
• ncurses-6.2-10.20210508.el9_6.2
• ncurses-base-6.2-10.20210508.el9_6.2
• ncurses-libs-6.2-10.20210508.el9_6.2
• net-tools-2.0-0.64.20160912git.el9
• netavark-2:1.14.1-1.el9_6
• nettle-3.10.1-1.el9
• newt-0.52.21-11.el9
• nfs-utils-1:2.5.4-34.el9
• nftables-1:1.0.9-3.el9
• nmap-ncat-3:7.92-3.el9
• nmstate-2.2.48-2.el9_6
• npth-1.6-8.el9
• nss-altfiles-2.18.1-20.el9
• numactl-libs-2.0.19-1.el9
• nvme-cli-2.11-6.el9_6
• oniguruma-6.9.6-1.el9.6
• open-vm-tools-12.5.0-1.el9
• openldap-2.6.8-4.el9
• openshift-clients-4.21.0-202509251154.p2.gabe2393.assembly.stream.el9
• openshift-kubelet-4.21.0-202509190529.p2.g5c9df33.assembly.stream.el9
• openssh-8.7p1-45.el9
• openssh-clients-8.7p1-45.el9
• openssh-server-8.7p1-45.el9
• openssl-1:3.2.2-6.el9_5.1
• openssl-fips-provider-3.0.7-6.el9_5
• openssl-fips-provider-so-3.0.7-6.el9_5
• openssl-libs-1:3.2.2-6.el9_5.1
• openvswitch-selinux-extra-policy-1.0-39.el9fdp
• openvswitch3.5-3.5.1-33.el9fdp
• os-prober-1.77-12.el9_5
• ose-aws-ecr-image-credential-provider-4.19.0-202508252101.p2.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.21.0-202509221901.p2.g69f6a48.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.21.0-202509221503.p2.gb27a2f9.assembly.stream.el9
• ostree-2025.2-2.el9_6
• ostree-grub2-2025.2-2.el9_6
• ostree-libs-2025.2-2.el9_6
• p11-kit-0.25.3-3.el9_5
• p11-kit-trust-0.25.3-3.el9_5
• pam-1.5.1-26.el9_6
• passt-0^20250217.ga1e48a0-10.el9_6
• passt-selinux-0^20250217.ga1e48a0-10.el9_6
• passwd-0.80-12.el9
• pciutils-3.7.0-7.el9
• pciutils-libs-3.7.0-7.el9
• pcre-8.44-4.el9
• pcre2-10.40-6.el9
• pcre2-syntax-10.40-6.el9
• perl-AutoLoader-5.74-481.1.el9_6
• perl-B-1.80-481.1.el9_6
• perl-Carp-1.50-460.el9
• perl-Class-Struct-0.66-481.1.el9_6
• perl-Data-Dumper-2.174-462.el9
• perl-Digest-1.19-4.el9
• perl-Digest-MD5-2.58-4.el9
• perl-Encode-4:3.08-462.el9
• perl-Errno-1.30-481.1.el9_6
• perl-Exporter-5.74-461.el9
• perl-Fcntl-1.13-481.1.el9_6
• perl-File-Basename-2.85-481.1.el9_6
• perl-File-Path-2.18-4.el9
• perl-File-Temp-1:0.231.100-4.el9
• perl-File-stat-1.09-481.1.el9_6
• perl-FileHandle-2.03-481.1.el9_6
• perl-Getopt-Long-1:2.52-4.el9
• perl-Getopt-Std-1.12-481.1.el9_6
• perl-HTTP-Tiny-0.076-462.el9
• perl-IO-1.43-481.1.el9_6
• perl-IO-Socket-IP-0.41-5.el9
• perl-IO-Socket-SSL-2.073-2.el9
• perl-IPC-Open3-1.21-481.1.el9_6
• perl-MIME-Base64-3.16-4.el9
• perl-Mozilla-CA-20200520-6.el9
• perl-NDBM_File-1.15-481.1.el9_6
• perl-Net-SSLeay-1.94-1.el9
• perl-POSIX-1.94-481.1.el9_6
• perl-PathTools-3.78-461.el9
• perl-Pod-Escapes-1:1.07-460.el9
• perl-Pod-Perldoc-3.28.01-461.el9
• perl-Pod-Simple-1:3.42-4.el9
• perl-Pod-Usage-4:2.01-4.el9
• perl-Scalar-List-Utils-4:1.56-462.el9
• perl-SelectSaver-1.02-481.1.el9_6
• perl-Socket-4:2.031-4.el9
• perl-Storable-1:3.21-460.el9
• perl-Symbol-1.08-481.1.el9_6
• perl-Term-ANSIColor-5.01-461.el9
• perl-Term-Cap-1.17-460.el9
• perl-Text-ParseWords-3.30-460.el9
• perl-Text-Tabs+Wrap-2013.0523-460.el9
• perl-Time-Local-2:1.300-7.el9
• perl-URI-5.09-3.el9
• perl-base-2.27-481.1.el9_6
• perl-constant-1.33-461.el9
• perl-if-0.60.800-481.1.el9_6
• perl-interpreter-4:5.32.1-481.1.el9_6
• perl-libnet-3.13-4.el9
• perl-libs-4:5.32.1-481.1.el9_6
• perl-mro-1.23-481.1.el9_6
• perl-overload-1.31-481.1.el9_6
• perl-overloading-0.02-481.1.el9_6
• perl-parent-1:0.238-460.el9
• perl-podlators-1:4.14-460.el9
• perl-subs-1.03-481.1.el9_6
• perl-vars-1.05-481.1.el9_6
• pigz-2.8-1.el9
• pkgconf-1.7.3-10.el9
• pkgconf-m4-1.7.3-10.el9
• pkgconf-pkg-config-1.7.3-10.el9
• podman-5:5.4.0-13.el9_6
• policycoreutils-3.6-2.1.el9
• policycoreutils-python-utils-3.6-2.1.el9
• polkit-0.117-13.el9
• polkit-libs-0.117-13.el9
• polkit-pkla-compat-0.1-21.el9
• popt-1.18-8.el9
• procps-ng-3.3.17-14.el9
• protobuf-c-1.3.3-13.el9
• psmisc-23.4-3.el9
• publicsuffix-list-dafsa-20210518-3.el9
• python-unversioned-command-3.9.21-2.el9_6.2
• python3-3.9.21-2.el9_6.2
• python3-audit-3.1.5-4.el9
• python3-chardet-4.0.0-5.el9
• python3-cloud-what-1.29.45.1-1.el9_6
• python3-dateutil-1:2.8.1-7.el9
• python3-dbus-1.2.18-2.el9
• python3-decorator-4.4.2-6.el9
• python3-distro-1.5.0-7.el9
• python3-dnf-4.14.0-25.el9
• python3-dnf-plugin-versionlock-4.3.0-20.el9
• python3-dnf-plugins-core-4.3.0-20.el9
• python3-gobject-base-3.40.1-6.el9
• python3-gobject-base-noarch-3.40.1-6.el9
• python3-gpg-1.15.1-6.el9
• python3-hawkey-0.69.0-13.el9
• python3-idna-2.10-7.el9_4.1
• python3-iniparse-0.4-45.el9
• python3-inotify-0.9.6-25.el9
• python3-libcomps-0.1.18-1.el9
• python3-libdnf-0.69.0-13.el9
• python3-librepo-1.14.5-2.el9
• python3-libs-3.9.21-2.el9_6.2
• python3-libselinux-3.6-3.el9
• python3-libsemanage-3.6-5.el9_6
• python3-pip-wheel-21.3.1-1.el9
• python3-policycoreutils-3.6-2.1.el9
• python3-pysocks-1.7.1-12.el9
• python3-pyyaml-5.4.1-6.el9
• python3-requests-2.25.1-10.el9_6
• python3-rpm-4.16.1.3-37.el9
• python3-setools-4.4.4-1.el9
• python3-setuptools-53.0.0-13.el9_6.1
• python3-setuptools-wheel-53.0.0-13.el9_6.1
• python3-six-1.15.0-9.el9
• python3-subscription-manager-rhsm-1.29.45.1-1.el9_6
• python3-systemd-234-19.el9
• python3-urllib3-1.26.5-6.el9
• qemu-guest-agent-17:9.1.0-15.el9_6.9
• quota-1:4.09-4.el9
• quota-nls-1:4.09-4.el9
• rdma-core-54.0-1.el9
• readline-8.1-4.el9
• redhat-release-9.6-0.1.el9
• redhat-release-eula-9.6-0.1.el9
• rpcbind-1.2.6-7.el9
• rpm-4.16.1.3-37.el9
• rpm-build-libs-4.16.1.3-37.el9
• rpm-libs-4.16.1.3-37.el9
• rpm-ostree-2025.6-5.el9_6
• rpm-ostree-libs-2025.6-5.el9_6
• rpm-plugin-selinux-4.16.1.3-37.el9
• rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
• rpm-sign-libs-4.16.1.3-37.el9
• rsync-3.2.5-3.el9
• runc-4:1.2.4-2.el9
• samba-client-libs-4.21.3-14.el9_6
• samba-common-4.21.3-14.el9_6
• samba-common-libs-4.21.3-14.el9_6
• sed-4.8-9.el9
• selinux-policy-38.1.53-5.el9_6
• selinux-policy-targeted-38.1.53-5.el9_6
• setup-2.13.7-10.el9
• sg3_utils-1.47-10.el9
• sg3_utils-libs-1.47-10.el9
• shadow-utils-2:4.9-12.el9
• shadow-utils-subid-2:4.9-12.el9
• shared-mime-info-2.1-5.el9
• shim-x64-15.8-4.el9_3
• skopeo-2:1.18.1-2.el9_6
• slang-2.3.2-11.el9
• slirp4netns-1.3.2-1.el9
• snappy-1.1.8-8.el9
• socat-1.7.4.1-6.el9_6.1
• sqlite-libs-3.34.1-8.el9_6
• squashfs-tools-4.4-10.git1.el9
• ssh-key-dir-0.1.4-1.el9
• sssd-2.9.6-4.el9_6.2
• sssd-ad-2.9.6-4.el9_6.2
• sssd-client-2.9.6-4.el9_6.2
• sssd-common-2.9.6-4.el9_6.2
• sssd-common-pac-2.9.6-4.el9_6.2
• sssd-ipa-2.9.6-4.el9_6.2
• sssd-krb5-2.9.6-4.el9_6.2
• sssd-krb5-common-2.9.6-4.el9_6.2
• sssd-ldap-2.9.6-4.el9_6.2
• sssd-nfs-idmap-2.9.6-4.el9_6.2
• sssd-proxy-2.9.6-4.el9_6.2
• stalld-1.20.4-1.el9_6
• strace-6.12-1.el9
• subscription-manager-1.29.45.1-1.el9_6
• subscription-manager-rhsm-certificates-20220623-1.el9
• sudo-1.9.5p2-10.el9_6.2
• systemd-252-51.el9_6.2
• systemd-journal-remote-252-51.el9_6.2
• systemd-libs-252-51.el9_6.2
• systemd-pam-252-51.el9_6.2
• systemd-rpm-macros-252-51.el9_6.2
• systemd-udev-252-51.el9_6.2
• tar-2:1.34-7.el9
• teamd-1.31-16.el9_1
• tmux-3.2a-5.el9
• toolbox-0.1.2-1.rhaos4.19.el9
• tpm2-tools-5.2-4.el9
• tpm2-tss-3.2.3-1.el9
• tzdata-2025b-1.el9
• unbound-libs-1.16.2-19.el9_6.1
• usermode-1.114-6.el9
• userspace-rcu-0.12.1-6.el9
• util-linux-2.37.4-21.el9
• util-linux-core-2.37.4-21.el9
• vim-minimal-2:8.2.2637-22.el9_6
• virt-what-1.27-1.el9
• which-2.21-30.el9_6
• xfsprogs-6.4.0-5.el9
• xmlsec1-1.2.29-13.el9
• xmlsec1-openssl-1.2.29-13.el9
• xz-5.2.5-8.el9_0
• xz-libs-5.2.5-8.el9_0
• yajl-2.1.0-25.el9
• zlib-1.2.11-40.el9
• zram-generator-0.3.2-7.el9
• zstd-1.5.5-1.el9

Changed:

• NetworkManager 1:1.52.0-5.el9_6 → 1:1.52.0-7.el9_6
• NetworkManager-cloud-setup 1:1.52.0-5.el9_6 → 1:1.52.0-7.el9_6
• NetworkManager-libnm 1:1.52.0-5.el9_6 → 1:1.52.0-7.el9_6
• NetworkManager-ovs 1:1.52.0-5.el9_6 → 1:1.52.0-7.el9_6
• NetworkManager-team 1:1.52.0-5.el9_6 → 1:1.52.0-7.el9_6
• NetworkManager-tui 1:1.52.0-5.el9_6 → 1:1.52.0-7.el9_6
• container-selinux 4:2.237.0-1.el9_6 → 4:2.237.0-2.el9_6
• coreos-installer 0.23.0-1.el9 → 0.24.0-3.el9_6
• coreos-installer-bootinfra 0.23.0-1.el9 → 0.24.0-3.el9_6
• cri-o 1.33.4-3.rhaos4.20.git4d2f569.el9 → 1.34.0-4.rhaos4.21.git941066d.el9
• cri-tools 1.33.0-1.el9 → 1.34.0-1.el9
• crun 1.22-1.el9_6 → 1.23.1-2.el9_6
• dnsmasq 2.85-16.el9_4 → 2.85-17.el9_6
• gnutls 3.8.3-6.el9 → 3.8.3-6.el9_6.2
• irqbalance 2:1.9.4-2.el9 → 2:1.9.4-2.el9_6.2
• kernel 5.14.0-570.39.1.el9_6 → 5.14.0-570.49.1.el9_6
• kernel-core 5.14.0-570.39.1.el9_6 → 5.14.0-570.49.1.el9_6
• kernel-modules 5.14.0-570.39.1.el9_6 → 5.14.0-570.49.1.el9_6
• kernel-modules-core 5.14.0-570.39.1.el9_6 → 5.14.0-570.49.1.el9_6
• kernel-modules-extra 5.14.0-570.39.1.el9_6 → 5.14.0-570.49.1.el9_6
• libldb 4.21.3-7.el9_6 → 4.21.3-14.el9_6
• libsmbclient 4.21.3-7.el9_6 → 4.21.3-14.el9_6
• libwbclient 4.21.3-7.el9_6 → 4.21.3-14.el9_6
• linux-firmware 20250716-151.3.el9_6 → 20250812-151.4.el9_6
• linux-firmware-whence 20250716-151.3.el9_6 → 20250812-151.4.el9_6
• openshift-clients 4.20.0-202509011459.p2.ga434281.assembly.stream.el9 → 4.21.0-202509251154.p2.gabe2393.assembly.stream.el9
• openshift-kubelet 4.20.0-202509011459.p2.ga237dcb.assembly.stream.el9 → 4.21.0-202509190529.p2.g5c9df33.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.20.0-202507171059.p0.gd469d04.assembly.stream.el9 → 4.21.0-202509221901.p2.g69f6a48.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.20.0-202509011459.p2.gf940e72.assembly.stream.el9 → 4.21.0-202509221503.p2.gb27a2f9.assembly.stream.el9
• ostree 2025.1-1.el9 → 2025.2-2.el9_6
• ostree-grub2 2025.1-1.el9 → 2025.2-2.el9_6
• ostree-libs 2025.1-1.el9 → 2025.2-2.el9_6
• podman 5:5.4.0-12.el9_6 → 5:5.4.0-13.el9_6
• qemu-guest-agent 17:9.1.0-15.el9_6.7 → 17:9.1.0-15.el9_6.9
• samba-client-libs 4.21.3-7.el9_6 → 4.21.3-14.el9_6
• samba-common 4.21.3-7.el9_6 → 4.21.3-14.el9_6
• samba-common-libs 4.21.3-7.el9_6 → 4.21.3-14.el9_6
• stalld 1.19.8-2.el9_6 → 1.20.4-1.el9_6
• sudo 1.9.5p2-10.el9_6.1 → 1.9.5p2-10.el9_6.2
• systemd 252-51.el9_6.1 → 252-51.el9_6.2
• systemd-journal-remote 252-51.el9_6.1 → 252-51.el9_6.2
• systemd-libs 252-51.el9_6.1 → 252-51.el9_6.2
• systemd-pam 252-51.el9_6.1 → 252-51.el9_6.2
• systemd-rpm-macros 252-51.el9_6.1 → 252-51.el9_6.2
• systemd-udev 252-51.el9_6.1 → 252-51.el9_6.2

Extensions

Full list (162 packages)

• NetworkManager-libreswan-1.2.24-1.el9.x86_64
• bison-3.7.4-5.el9.x86_64
• capstone-4.0.2-10.el9.x86_64
• corosync-3.1.9-2.el9_6.x86_64
• corosynclib-3.1.9-2.el9_6.x86_64
• cpp-11.5.0-5.el9_5.x86_64
• crun-wasm-1.8.5-5.rhaos4.14.el9.x86_64
• daxctl-libs-78-2.el9.x86_64
• edk2-ovmf-20241117-2.el9.noarch
• elfutils-libelf-devel-0.192-6.el9_6.x86_64
• fence-agents-all-4.10.0-86.el9_6.9.x86_64
• fence-agents-amt-ws-4.10.0-86.el9_6.9.noarch
• fence-agents-apc-4.10.0-86.el9_6.9.noarch
• fence-agents-apc-snmp-4.10.0-86.el9_6.9.noarch
• fence-agents-bladecenter-4.10.0-86.el9_6.9.noarch
• fence-agents-brocade-4.10.0-86.el9_6.9.noarch
• fence-agents-cisco-mds-4.10.0-86.el9_6.9.noarch
• fence-agents-cisco-ucs-4.10.0-86.el9_6.9.noarch
• fence-agents-common-4.10.0-86.el9_6.9.noarch
• fence-agents-drac5-4.10.0-86.el9_6.9.noarch
• fence-agents-eaton-snmp-4.10.0-86.el9_6.9.noarch
• fence-agents-emerson-4.10.0-86.el9_6.9.noarch
• fence-agents-eps-4.10.0-86.el9_6.9.noarch
• fence-agents-heuristics-ping-4.10.0-86.el9_6.9.noarch
• fence-agents-hpblade-4.10.0-86.el9_6.9.noarch
• fence-agents-ibmblade-4.10.0-86.el9_6.9.noarch
• fence-agents-ifmib-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo-moonshot-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo-mp-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo-ssh-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo2-4.10.0-86.el9_6.9.noarch
• fence-agents-intelmodular-4.10.0-86.el9_6.9.noarch
• fence-agents-ipdu-4.10.0-86.el9_6.9.noarch
• fence-agents-ipmilan-4.10.0-86.el9_6.9.noarch
• fence-agents-kdump-4.10.0-86.el9_6.9.x86_64
• fence-agents-mpath-4.10.0-86.el9_6.9.noarch
• fence-agents-redfish-4.10.0-86.el9_6.9.x86_64
• fence-agents-rhevm-4.10.0-86.el9_6.9.noarch
• fence-agents-rsa-4.10.0-86.el9_6.9.noarch
• fence-agents-rsb-4.10.0-86.el9_6.9.noarch
• fence-agents-sbd-4.10.0-86.el9_6.9.noarch
• fence-agents-scsi-4.10.0-86.el9_6.9.noarch
• fence-agents-vmware-rest-4.10.0-86.el9_6.9.noarch
• fence-agents-vmware-soap-4.10.0-86.el9_6.9.noarch
• fence-agents-wti-4.10.0-86.el9_6.9.noarch
• fence-virt-4.10.0-86.el9_6.9.x86_64
• flex-2.6.4-9.el9.x86_64
• fmt-9.1.0-1.el9.x86_64
• gcc-11.5.0-5.el9_5.x86_64
• glibc-devel-2.34-168.el9_6.23.x86_64
• glibc-headers-2.34-168.el9_6.23.x86_64
• gnutls-dane-3.8.3-6.el9_6.2.x86_64
• gnutls-utils-3.8.3-6.el9_6.2.x86_64
• ipmitool-1.8.18-27.el9.x86_64
• ipxe-roms-qemu-20200823-9.git4bd064de.el9_0.noarch
• kata-containers-3.17.0-4.rhaos4.19.el9.x86_64
• kernel-5.14.0-570.49.1.el9_6.x86_64
• kernel-core-5.14.0-570.49.1.el9_6.x86_64
• kernel-devel-5.14.0-570.49.1.el9_6.x86_64
• kernel-headers-5.14.0-570.49.1.el9_6.x86_64
• kernel-modules-5.14.0-570.49.1.el9_6.x86_64
• kernel-modules-extra-5.14.0-570.49.1.el9_6.x86_64
• kernel-rt-core-5.14.0-570.49.1.el9_6.x86_64
• kernel-rt-devel-5.14.0-570.49.1.el9_6.x86_64
• kernel-rt-kvm-5.14.0-570.49.1.el9_6.x86_64
• kernel-rt-modules-5.14.0-570.49.1.el9_6.x86_64
• kernel-rt-modules-core-5.14.0-570.49.1.el9_6.x86_64
• kernel-rt-modules-extra-5.14.0-570.49.1.el9_6.x86_64
• krb5-pkinit-1.21.1-8.el9_6.x86_64
• krb5-workstation-1.21.1-8.el9_6.x86_64
• ldns-1.7.1-12.el9.x86_64
• libfdt-1.6.0-7.el9.x86_64
• libkadm5-1.21.1-8.el9_6.x86_64
• libknet1-1.28-1.el9.x86_64
• libknet1-compress-bzip2-plugin-1.28-1.el9.x86_64
• libknet1-compress-lz4-plugin-1.28-1.el9.x86_64
• libknet1-compress-lzma-plugin-1.28-1.el9.x86_64
• libknet1-compress-lzo2-plugin-1.28-1.el9.x86_64
• libknet1-compress-plugins-all-1.28-1.el9.x86_64
• libknet1-compress-zlib-plugin-1.28-1.el9.x86_64
• libknet1-compress-zstd-plugin-1.28-1.el9.x86_64
• libknet1-crypto-nss-plugin-1.28-1.el9.x86_64
• libknet1-crypto-openssl-plugin-1.28-1.el9.x86_64
• libknet1-crypto-plugins-all-1.28-1.el9.x86_64
• libknet1-plugins-all-1.28-1.el9.x86_64
• libmpc-1.2.1-4.el9.x86_64
• libnozzle1-1.28-1.el9.x86_64
• libpmem-1.12.1-1.el9.x86_64
• libpng-2:1.6.37-12.el9.x86_64
• libqb-2.0.8-1.el9.x86_64
• librdmacm-54.0-1.el9.x86_64
• libreswan-5.2-1.el9fdp.x86_64
• libwsman1-2.6.8-23.el9.x86_64
• libxcrypt-devel-4.4.18-3.el9.x86_64
• libzstd-devel-1.5.5-1.el9.x86_64
• lld-17.0.6-1.el9.x86_64
• lld-libs-17.0.6-1.el9.x86_64
• llvm-17.0.6-5.el9.x86_64
• llvm-libs-17.0.6-5.el9.x86_64
• lm_sensors-libs-3.6.0-10.el9.x86_64
• m4-1.4.19-1.el9.x86_64
• make-1:4.3-8.el9.x86_64
• ndctl-libs-78-2.el9.x86_64
• net-snmp-libs-1:5.9.1-17.el9.x86_64
• net-snmp-utils-1:5.9.1-17.el9.x86_64
• nspr-4.36.0-4.el9_4.x86_64
• nss-3.112.0-4.el9_4.x86_64
• nss-softokn-3.112.0-4.el9_4.x86_64
• nss-softokn-freebl-3.112.0-4.el9_4.x86_64
• nss-sysinit-3.112.0-4.el9_4.x86_64
• nss-tools-3.112.0-4.el9_4.x86_64
• nss-util-3.112.0-4.el9_4.x86_64
• openssl-devel-1:3.2.2-6.el9_5.1.x86_64
• openvswitch3.5-ipsec-3.5.1-33.el9fdp.x86_64
• openwsman-python3-2.6.8-23.el9.x86_64
• pacemaker-2.1.9-1.2.el9_6.x86_64
• pacemaker-cli-2.1.9-1.2.el9_6.x86_64
• pacemaker-cluster-libs-2.1.9-1.2.el9_6.x86_64
• pacemaker-libs-2.1.9-1.2.el9_6.x86_64
• pacemaker-schemas-2.1.9-1.2.el9_6.noarch
• pcp-conf-6.3.7-1.el9_6.x86_64
• pcp-libs-6.3.7-1.el9_6.x86_64
• pcs-0.11.9-2.el9_6.1.x86_64
• perl-TimeDate-1:2.33-6.el9.noarch
• pixman-0.40.0-6.el9_3.x86_64
• protobuf-3.14.0-16.el9.x86_64
• python3-cffi-1.14.5-5.el9.x86_64
• python3-cryptography-36.0.1-5.el9_6.x86_64
• python3-lxml-4.6.5-3.el9.x86_64
• python3-openvswitch3.5-3.5.1-33.el9fdp.x86_64
• python3-ply-3.11-14.el9.noarch
• python3-pycparser-2.20-6.el9.noarch
• python3-pycurl-7.43.0.6-8.el9.x86_64
• python3-pyparsing-2.4.7-9.el9.noarch
• python3-tornado-6.4.2-2.el9_6.2.x86_64
• qemu-img-17:9.1.0-15.el9_6.9.x86_64
• qemu-kvm-common-17:9.1.0-15.el9_6.9.x86_64
• qemu-kvm-core-17:9.1.0-15.el9_6.9.x86_64
• redhat-logos-90.5-1.el9_6.1.x86_64
• resource-agents-4.10.0-71.el9_6.6.x86_64
• ruby-3.0.7-165.el9_5.x86_64
• ruby-default-gems-3.0.7-165.el9_5.noarch
• ruby-libs-3.0.7-165.el9_5.x86_64
• rubygem-bigdecimal-3.0.0-165.el9_5.x86_64
• rubygem-bundler-2.2.33-165.el9_5.noarch
• rubygem-io-console-0.5.7-165.el9_5.x86_64
• rubygem-json-2.5.1-165.el9_5.x86_64
• rubygem-psych-3.3.2-165.el9_5.x86_64
• rubygem-rdoc-6.3.4.1-165.el9_5.noarch
• rubygem-rexml-3.2.5-165.el9_5.noarch
• rubygems-3.2.33-165.el9_5.noarch
• sbd-1.5.2-1.el9.x86_64
• seabios-bin-1.16.3-4.el9.noarch
• seavgabios-bin-1.16.3-4.el9.noarch
• spdlog-1.13.0-1.rhaos4.14.el9.x86_64
• sysstat-12.5.4-9.el9.x86_64
• telnet-1:0.17-85.el9.x86_64
• usbguard-1.0.0-16.el9.x86_64
• usbguard-selinux-1.0.0-16.el9.noarch
• virtiofsd-1.13.2-1.el9_6.x86_64
• wasmedge-0.14.0-2.rhaos4.19.el9.x86_64
• zlib-devel-1.2.11-40.el9.x86_64

Red Hat Enterprise Linux CoreOS base layer: 9.6.20250925-0