5.1.0-0.ci-2026-10-23-150028

Download the installer for your operating system or run

oc adm release extract --tools quay-proxy.ci.openshift.org/openshift/ci:rc_payload__5.1.0-0.ci-2026-10-23-150028

Qualifiers (status api): None

Tests:

Blocking jobs
- aggregated-aws-ovn-upgrade-5.1-major Failed (2 retries) periodic-ci-openshift-release-main-ci-5.1-upgrade-from-stable-5.0-e2e-aws-ovn-upgrade
- aggregated-azure-ovn-upgrade-5.1-major Failed (2 retries) periodic-ci-openshift-release-main-ci-5.1-upgrade-from-stable-5.0-e2e-azure-ovn-upgrade
- aggregated-gcp-ovn-upgrade-5.1-micro Failed (2 retries) periodic-ci-openshift-release-main-ci-5.1-e2e-gcp-ovn-upgrade
- hypershift-e2e-aks Succeeded periodic-ci-openshift-hypershift-release-5.1-periodics-e2e-aks
- hypershift-e2e-aws Succeeded (1 retry) periodic-ci-openshift-hypershift-release-5.1-periodics-e2e-aws-ovn
  - Attempt 1 Failed
  - Attempt 2 Succeeded
Async jobs
- claude-payload-agent Succeeded periodic-ci-openshift-release-main-claude-payload-agent

Upgrades from:

5.1.0-0.ci-2026-10-22-150000 - F F F S F S
5.0.0-0.ci-2026-10-23-065032 (changes) - F F F F F F

Loading changelog, this may take a while ...

Changes from 5.1.0-0.ci-2026-10-22-150000

Created: 2026-10-23 15:00:32 +0000 UTC

Image Digest: sha256:71d76355b7cfcd13c1b7aad5bc4318d3697703f04adddedc69c27380d122041c

Components

Kubectl 1.36.2
Kubernetes 1.37.1
Kubernetes Tests 1.36.2
Red Hat Enterprise Linux CoreOS upgraded from 10.2.20261019-0 to 10.2.20261022-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
KMSEncryption (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled
OLMLifecycleAndCompatibility (0 tests)	Disabled	Enabled	Disabled	Disabled	Disabled	Disabled (Changed)	Disabled	Enabled

Rebuilt images without code change

cluster-cloud-controller-manager-operator git 9ca11878 sha256:19f3cf1b9c2b935d1a09e5bf656cfdc18f36048de8a0163f5091b26a47f349c6
cluster-control-plane-machine-set-operator git 8ca6b258 sha256:1bbc7cb0601ac06f4be7e38b26a955f08bc26f85fc67ed2d136cb525660cfbf5
cluster-network-operator git d5e0bbf1 sha256:530cd46d8a10cebcd4a3405a5122f3c1588aa2c8d0340ee70f101af8c0c424e8
nutanix-cluster-api-controllers git 44157e32 sha256:09872fdb47fe8c1eaa2c1091a073ad77806ae1fffe580840ce862bf28b12ec85
rhel-coreos git 62965e80 sha256:5b930079624bebf308608d57c0333f6d6ba49d3258cb6625370d89252131361a
rhel-coreos-10 git 62965e80 sha256:9a57e5f5c5159212cc774c42f1562ecf70698c7d8b6bc01da6d6e9c907833b7b
rhel-coreos-10-extensions git 62965e80 sha256:87e1ad03ad44adb2bd2535cdc3cb3a311aba84726ee5d8dbd7da85bea9a739a5
rhel-coreos-extensions git 62965e80 sha256:fd3b441a91413771c5a1f6ec0fbf76ad3bbeb44626e80ef3d6f7bd18b81347c9

agent-installer-ui

Update GH actions to @v7 (#4127) #4127
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, gcp-pd-csi-driver-operator, openstack-cinder-csi-driver-operator

STOR-3176: Support TLS Groups in operators for kube-rbac-proxy sidecar #651
Full changelog

azure-cluster-api-controllers

OCPBUGS-129622: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:release-1.27 (8c829ce) into main #420
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-130398: PowerVC: Support non admin user #10966
Full changelog

cluster-authentication-operator

TRT-3040: Revert #1001 “CNTRLPLANE-4787: Add support for External OIDC proxy” #1038
Full changelog

cluster-baremetal-operator

OCPBUGS-115068: Validate Provisioning fields passed to containers #653
Full changelog

cluster-capi-operator

OCPCLOUD-3704: Enable CRD Compatibility Checker e2e tests on External topology #688
OCPCLOUD-3724: Enable proxy injection for capi-controllers #692
Full changelog

cluster-config-api

CNTRLPLANE-4390: Remove OpenShiftPodSecurityAdmission feature gate from Default feature set. #3035
CNTRLPLANE-4771: Graduate KMSEncryption to GA #3100
Full changelog

cluster-config-operator

OCPEDGE-2990: Report supported topology evaluations #522
Full changelog

console

NO-JIRA: migrate to ESM only + migrate to oxfmt #17408
Full changelog

coredns

OCPBUGS-125770: validate DNS requests before unpacking #217
Full changelog

gcp-cloud-controller-manager

Revert “OCPCLOUD-3677: Merge https://github.com/kubernetes/cloud-provider-gcp/tree/master (05550ad) into main” #175
Full changelog

hypershift

CNTRLPLANE-2042: test(e2e): add cross-cluster backup restore coverage for AWS #9979
NO-JIRA: ci(deps): bump actions/create-github-app-token from 1.12.0 to 3.3.0 #10087
OCPBUGS-132561: Fix Azure role-assignment cleanup in CI #10061
CNTRLPLANE-4662: docs(aws): add managed DNS how-to #9943
OCPBUGS-132796: Filter nonstandard AZ subnets from AWS endpoints #10080
OCPCLOUD-3704: enable CRD compatibility requirements for preview clusters #9871
OCPBUGS-130965: CVO upgrades stuck in Upgradeable=False (ResourceDeletesInProgress) #10037
NO-JIRA: build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.44.0 to 1.45.0 #9661
GCP-1221: Manage GCP worker firewall rules in CPO #9640
CNTRLPLANE-4193: feat: add initialKMSKeyARN for StorageClass KMS encryption #9147
Full changelog

insights-operator

OCPBUGS-132789: Gate ingress secret bindings on Ingress capability #1403
Full changelog

machine-config-operator

OCPBUGS-126565: OCPBUGS-127021: Enable readOnlyRootFilesystem: true for machine-config-controller container #6573
OPNET-818: on-prem: BGP VIP static pods follow platform pod conventions #6673
Full changelog

monitoring-plugin

OU-1428: alert management list page #1345
OCPBUGS-131104, OCPBUGS-131955, OCPBUGS-131960, OCPBUGS-131970, OCPBUGS-131984, OCPBUGS-132028: Upgrade vulnerable dependencies #1328
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OPRUN-4798: Synchronize From Upstream Repositories #1377
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

NO-JIRA: Add arkadeepsen, martinkennelly and pperiyasamy to OWNERS file #3570
Full changelog

prometheus

NO-ISSUE: [bot] Bump openshift/prometheus to v3.15.1 #405
Full changelog

tests

OCPBUGS-130621: Isolate LDAP group sync test resources #31730
OCPBUGS-132757: Further optimize oc must gather tests to improve efficiency #31282
NO-JIRA: Fix CPU partitioning test isolation #31777
NO-JIRA: add host-network-connection-integrity monitor test #31785
NO-JIRA: cli: accept both error: invalid/Invalid image name casing in oc run tests #31791
OCPBUGS-123644: Allow etcd probe error due to tls config change #31789
OCPBUGS-130780: stop expecting OAuth X-XSS-Protection header #31788
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: failed to fetch RPM list for stream rhel-coreos: failed to get release info for quay-proxy.ci.openshift.org/openshift/ci@sha256:71d76355b7cfcd13c1b7aad5bc4318d3697703f04adddedc69c27380d122041c: could not get release info for quay-proxy.ci.openshift.org/openshift/ci@sha256:71d76355b7cfcd13c1b7aad5bc4318d3697703f04adddedc69c27380d122041c: could not run oc command: error: unable to access the source layer sha256:135b8ab315f98caffbf1950010dd8fe4616da89b153c570e081a9418a07074bb: received unexpected HTTP status: 503 Service Unavailable

View changelog in Markdown or change previous release:

Source code for this page located on github