# 4.19.0-okd-scos.9

Created: 2025-07-22 21:15:33 +0000 UTC

Image Digest: `sha256:0fa945e7da83979a17f2c0c8271218a373fb18d8be2305956bcaf7267d9d520c`

Promoted from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-07-22-132224


## Changes from 4.19.0-okd-scos.7

### Components

* Kubectl 1.32.1
* Kubernetes 1.32.6
* Kubernetes Tests upgraded from 1.32.5 to 1.32.6
* CentOS Stream CoreOS upgraded from 9.0.20250611-0 to 9.0.20250713-0


### New images

* [aws-karpenter-provider-aws](https://github.com/openshift/aws-karpenter-provider-aws) git [b37141b0](https://github.com/openshift/aws-karpenter-provider-aws/commit/b37141b051bdf790eb7e8f45b95f6bd7dc8140f4) `sha256:ec94a7b2d6c7cd96ae6e240c07735a08b450a33bbd1d103d9c9d218636276b24`


### Rebuilt images without code change

* [cluster-autoscaler-operator](https://github.com/openshift/cluster-autoscaler-operator) git [227f7537](https://github.com/openshift/cluster-autoscaler-operator/commit/227f7537c3b459d4940522809df60b2dfca738ed) `sha256:f539eb3cfebd4801084621a6fa0d07b64a946c98abd0a0aa60ed9bc4c406753e`
* [stream-coreos](https://github.com/openshift/os) git [334ed7c6](https://github.com/openshift/os/commit/334ed7c68677a737579fe0f4f9eaa74ca67ea817) `sha256:351e6041a064cd2a50941b2223b8d45ac65e98a0a5a0aa7a70ae07257b808c75`
* [stream-coreos-extensions](https://github.com/openshift/os) git [334ed7c6](https://github.com/openshift/os/commit/334ed7c68677a737579fe0f4f9eaa74ca67ea817) `sha256:60ffd1d27bf4a6b8b5f60d83d02a8ef71fddfb08eb27d49ed73939699c715ef4`


### [aws-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-aws/tree/778bbd27922126b112451f54f57b439f6a28951b)

* [OCPBUGS-59241](https://issues.redhat.com/browse/OCPBUGS-59241), [OCPBUGS-59242](https://issues.redhat.com/browse/OCPBUGS-59242): bump github.com/golang/glog to v1.2.5 [#558](https://github.com/openshift/cluster-api-provider-aws/pull/558)
* [Full changelog](https://github.com/openshift/cluster-api-provider-aws/compare/802452086a937fc7ac01e26542a05c697b363933...778bbd27922126b112451f54f57b439f6a28951b)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/249d7428c51fe85cabdab6394c4aed86fc24d398)

* [OCPBUGS-56963](https://issues.redhat.com/browse/OCPBUGS-56963): Make swift containers removal not fatal for UPI. [#9765](https://github.com/openshift/installer/pull/9765)
* [Full changelog](https://github.com/openshift/installer/compare/5551ca303f8a657f4525157ef156369252f1eb4f...249d7428c51fe85cabdab6394c4aed86fc24d398)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/f4e49d5f3b0a2a3ee7a2cc7716bc8d70f33f3506)

* [OCPBUGS-59133](https://issues.redhat.com/browse/OCPBUGS-59133): Unblock BMH direct deletion when detached annotation is present [#423](https://github.com/openshift/baremetal-operator/pull/423)
* [OCPBUGS-56765](https://issues.redhat.com/browse/OCPBUGS-56765): Make firmware update handle only a subset of `Spec.Updates` [#420](https://github.com/openshift/baremetal-operator/pull/420)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/aa46a5a6144b865dbcdb8af35d13a790377542d4...f4e49d5f3b0a2a3ee7a2cc7716bc8d70f33f3506)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/cf9e6e9bf7f28ac52ea7b2f0af6b0b80cd7c32b9)

* [OCPBUGS-59228](https://issues.redhat.com/browse/OCPBUGS-59228), [OCPBUGS-59229](https://issues.redhat.com/browse/OCPBUGS-59229): fix: clusteroperator: do not update status.relatedobjects if only order changed [#332](https://github.com/openshift/cluster-capi-operator/pull/332)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/23220358f864338ab01ba0eb55d20459c732be64...cf9e6e9bf7f28ac52ea7b2f0af6b0b80cd7c32b9)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/cd86a6772107b5213da2e649530b1a64eb6c2781)

* Revert "[release-4.19] OCPBUGS-58116: certregenerationcontroller: start configInformers again" [#1867](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1867)
* [OCPBUGS-58116](https://issues.redhat.com/browse/OCPBUGS-58116): certregenerationcontroller: start configInformers again [#1861](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1861)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/34bd8a7860802d310b4b0c124dc7975b6fa52773...cd86a6772107b5213da2e649530b1a64eb6c2781)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/61b6637d88503c5ddaace05a3e7a3f0b04d49183)

* [OCPBUGS-52853](https://issues.redhat.com/browse/OCPBUGS-52853): Do not add iommu.passthrough to ARM by default (#1358) [#1358](https://github.com/openshift/cluster-node-tuning-operator/pull/1358)
* [OCPBUGS-58144](https://issues.redhat.com/browse/OCPBUGS-58144): E2E: Additional Functional tests for align cpus by UncoreCache Feature (#1348) [#1348](https://github.com/openshift/cluster-node-tuning-operator/pull/1348)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/174ae084670fb9775fe901053bfc3284facf9afa...61b6637d88503c5ddaace05a3e7a3f0b04d49183)


### [console](https://github.com/openshift/console/tree/5c61972dbe65ef5128889eea1607bd838166cb87)

* [OCPBUGS-59513](https://issues.redhat.com/browse/OCPBUGS-59513): Update model flags when plugins load [#15298](https://github.com/openshift/console/pull/15298)
* [OCPBUGS-58331](https://issues.redhat.com/browse/OCPBUGS-58331): change '/metrics/usage' endpoint to '/api/metrics/usage' [#15273](https://github.com/openshift/console/pull/15273)
* [OCPBUGS-58433](https://issues.redhat.com/browse/OCPBUGS-58433): Add the Origin header to the HeaderBlacklist in the co… [#15246](https://github.com/openshift/console/pull/15246)
* [OCPBUGS-59315](https://issues.redhat.com/browse/OCPBUGS-59315): Not able to launch terminal window from OCP web console due to console plugin conflicts [#15280](https://github.com/openshift/console/pull/15280)
* [OCPBUGS-58217](https://issues.redhat.com/browse/OCPBUGS-58217): fix missing form styles in Create PVC page + Clone PVC… [#15260](https://github.com/openshift/console/pull/15260)
* [OCPBUGS-58183](https://issues.redhat.com/browse/OCPBUGS-58183): ContainerResource metric data for HPAs isn't visible i… [#15213](https://github.com/openshift/console/pull/15213)
* [OCPBUGS-58316](https://issues.redhat.com/browse/OCPBUGS-58316): Implement sessions in openshift authenticator [#15234](https://github.com/openshift/console/pull/15234)
* [Full changelog](https://github.com/openshift/console/compare/eba4145a6a5f25cd3d545551089ca200a10006c6...5c61972dbe65ef5128889eea1607bd838166cb87)


### [console-operator](https://github.com/openshift/console-operator/tree/ef37393645f673f7fd69c44a5cd5fe3f95b153cf)

* [OCPBUGS-58400](https://issues.redhat.com/browse/OCPBUGS-58400): Disable LightSpeed dialog on non amd64 architecture (#1011) [#1011](https://github.com/openshift/console-operator/pull/1011)
* [Full changelog](https://github.com/openshift/console-operator/compare/0cb29273c8b1efec6ca591d5259a69d34e5ce51f...ef37393645f673f7fd69c44a5cd5fe3f95b153cf)


### [hypershift](https://github.com/openshift/hypershift/tree/f12726e238b8f329b6f480cf4027d32ce1f94fa4)

* [OCPBUGS-59547](https://issues.redhat.com/browse/OCPBUGS-59547): Remove code associated with Managed Identity v2 for ARO HCP for 4.19 [#6459](https://github.com/openshift/hypershift/pull/6459)
* [OCPBUGS-59493](https://issues.redhat.com/browse/OCPBUGS-59493): Remove unused jq and rsync rpms [#6457](https://github.com/openshift/hypershift/pull/6457)
* [OCPBUGS-59101](https://issues.redhat.com/browse/OCPBUGS-59101): Configure ClusterServiceLoadBalancerHea… [#6409](https://github.com/openshift/hypershift/pull/6409)
* NO-JIRA: chore(deps): update konflux references [#6383](https://github.com/openshift/hypershift/pull/6383)
* NO-JIRA: [release-4.19] CNTRLPLANE-1042: Disable createClusterNone for azure and scope down verifyResourceGroupLocationsMatch check [#6392](https://github.com/openshift/hypershift/pull/6392)
* [Full changelog](https://github.com/openshift/hypershift/compare/2ba541d94a847b64671a9e1639fa61e27d8136b2...f12726e238b8f329b6f480cf4027d32ce1f94fa4)


### [insights-operator](https://github.com/openshift/insights-operator/tree/8fffce910f39cf33efa97a24a894c84cf3f3d1f6)

* feat: copy proxy envs from IO pod to gathering pods (#1103) [#1103](https://github.com/openshift/insights-operator/pull/1103)
* [Full changelog](https://github.com/openshift/insights-operator/compare/a27774d09621a76c1ec95212c4b8047d0f3b3450...8fffce910f39cf33efa97a24a894c84cf3f3d1f6)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/ae1506cbf8cc9566243ca0319e46d51ace7ba807)

* [OCPBUGS-56750](https://issues.redhat.com/browse/OCPBUGS-56750): Support NODEIP_HINT in IPI deployments too [#5082](https://github.com/openshift/machine-config-operator/pull/5082)
* [OCPBUGS-58894](https://issues.redhat.com/browse/OCPBUGS-58894): Remove podman-etcd machine config source [#5169](https://github.com/openshift/machine-config-operator/pull/5169)
* [OCPBUGS-59208](https://issues.redhat.com/browse/OCPBUGS-59208): Backport QE ported test for OCL component readiness [#5125](https://github.com/openshift/machine-config-operator/pull/5125)
* [OCPBUGS-58820](https://issues.redhat.com/browse/OCPBUGS-58820): Add control-plane label for master nodes on legacy clusters [#5168](https://github.com/openshift/machine-config-operator/pull/5168)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/7df542080017dcd0e57c007ac25af47fd7c800c2...ae1506cbf8cc9566243ca0319e46d51ace7ba807)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/fbca54ef462225e7acdc3488a3a972a63ad86b9c)

* [OU-928](https://issues.redhat.com/browse/OU-928): reset showgraph state when unmounting button [#462](https://github.com/openshift/monitoring-plugin/pull/462)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/da1e4eed5a198ac9265e33132e208d60cf4a8d39...fbca54ef462225e7acdc3488a3a972a63ad86b9c)


### [oauth-proxy](https://github.com/openshift/oauth-proxy/tree/f74e8e006cd47ae9b7cab525796f53af8fb1da9c)

* [OCPBUGS-58836](https://issues.redhat.com/browse/OCPBUGS-58836): 4.19 kube 1.32 [#318](https://github.com/openshift/oauth-proxy/pull/318)
* [Full changelog](https://github.com/openshift/oauth-proxy/compare/3a67eb4a01822fb1e02ad52542fa46176664c1fb...f74e8e006cd47ae9b7cab525796f53af8fb1da9c)


### [oauth-server](https://github.com/openshift/oauth-server/tree/14780f7c67d5929c3db84504d10625710fcf5fe0)

* [OCPBUGS-57282](https://issues.redhat.com/browse/OCPBUGS-57282): Updating oauth-server-container image to be consistent with ART for 4.19 [#183](https://github.com/openshift/oauth-server/pull/183)
* [Full changelog](https://github.com/openshift/oauth-server/compare/6acb955fc87e1d487093217ca949f08eb8dc88c3...14780f7c67d5929c3db84504d10625710fcf5fe0)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/9283907f659b8196cf0a9a45b9c4b0016edb25d5)

* [OCPBUGS-58193](https://issues.redhat.com/browse/OCPBUGS-58193): v2/archive: error d2m when no tar files found (#1200) (#1207) [#1200](https://github.com/openshift/oc-mirror/pull/1200)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/f364aec3fc13fad183ff85ad40b6c861964c483e...9283907f659b8196cf0a9a45b9c4b0016edb25d5)


### [openshift-controller-manager](https://github.com/openshift/openshift-controller-manager/tree/a672407574befa9faf6a56078d6852229701f8c6)

* [OCPBUGS-57951](https://issues.redhat.com/browse/OCPBUGS-57951): ignore error failing to find pull/push secrets [#401](https://github.com/openshift/openshift-controller-manager/pull/401)
* [Full changelog](https://github.com/openshift/openshift-controller-manager/compare/af43fe68a7d862959a797b66307a1277fffbc9df...a672407574befa9faf6a56078d6852229701f8c6)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/8bcf1556a550efa7bb380ec315c077cf29438695)

* [OCPBUGS-59258](https://issues.redhat.com/browse/OCPBUGS-59258): 🐛 add catalog-operator control-plane-specific tolerations to unpack jobs [#1037](https://github.com/openshift/operator-framework-olm/pull/1037)
* [OCPBUGS-58259](https://issues.redhat.com/browse/OCPBUGS-58259): Reduce Frequency of Update Requests for Copied CSVs (#3597) [release-4.19] [#1030](https://github.com/openshift/operator-framework-olm/pull/1030)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/4a6530a4cf4e8e81d8f04923f36dd36023f45902...8bcf1556a550efa7bb380ec315c077cf29438695)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/0ea52bffeb97945c818e3bad8edbb12865c7b93c)

* [OCPBUGS-48709](https://issues.redhat.com/browse/OCPBUGS-48709): DownStream Merge Sync from 4.20 [07-09-2025] [#2660](https://github.com/openshift/ovn-kubernetes/pull/2660)
* [OCPBUGS-59106](https://issues.redhat.com/browse/OCPBUGS-59106): DownStream Merge Sync from 4.20 [06-18-2025] [#2642](https://github.com/openshift/ovn-kubernetes/pull/2642)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/0c8cdc93873c06b07973d147fc704d2224ac2faf...0ea52bffeb97945c818e3bad8edbb12865c7b93c)


### [tests](https://github.com/openshift/origin/tree/bb0d44936a0b231205adfae9a6de4885f6a86209)

* [OCPBUGS-59398](https://issues.redhat.com/browse/OCPBUGS-59398): Skip MCN's node degrade test on 4.19 [#29990](https://github.com/openshift/origin/pull/29990)
* [OCPBUGS-59391](https://issues.redhat.com/browse/OCPBUGS-59391): [release-4.19]: OVNK BGP: Sync ovn-kubernetes bgp e2e tests [#29989](https://github.com/openshift/origin/pull/29989)
* [OCPBUGS-59226](https://issues.redhat.com/browse/OCPBUGS-59226): bump watch count limits [#29982](https://github.com/openshift/origin/pull/29982)
* [OCPBUGS-57886](https://issues.redhat.com/browse/OCPBUGS-57886): Bump 4.19 1.32.6 [#29933](https://github.com/openshift/origin/pull/29933)
* [OCPBUGS-58470](https://issues.redhat.com/browse/OCPBUGS-58470): Update IPsec e2e test to validate NAT-T encapsulation option [#29957](https://github.com/openshift/origin/pull/29957)
* [Full changelog](https://github.com/openshift/origin/compare/bea5f881bec436728f691530b87e78957388bb02...bb0d44936a0b231205adfae9a6de4885f6a86209)