# 4.20.0-okd-scos.13

Created: 2025-12-15 05:30:33 +0000 UTC

Image Digest: `sha256:6289527b6936205604c959f15d8a392b1314d0a59814fb363eba21ff30c5a75e`

Promoted from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-12-14-182205


## Changes from 4.20.0-okd-scos.12

### Components

* Kubectl 1.33.3
* Kubernetes 1.33.6
* Kubernetes Tests 1.33.4
* CentOS Stream CoreOS 10.0.20251023-0


### Rebuilt images without code change

* [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator) git [aa455c04](https://github.com/openshift/cluster-openshift-controller-manager-operator/commit/aa455c043152123595c2b4f72e02279aad9dd48a) `sha256:de2b50ed9b1a6e95fd3fd68d1bf8567391b88dd6a408eff87e98a6d12ab1d84e`


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/6ce70bd6d29f2f0b72884d3cc896c6bbae258b95)

* [OCPBUGS-66431](https://issues.redhat.com/browse/OCPBUGS-66431): Add Konflux PipelineRun params required by release pipeline [#206](https://github.com/openshift/agent-installer-utils/pull/206)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/cb0b70c71609b094c4949b2dc3e6213efb28c056...6ce70bd6d29f2f0b72884d3cc896c6bbae258b95)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/cc82f30cd640577297f66b5df80f0e08c55fd3fa)

* [OCPBUGS-66231](https://issues.redhat.com/browse/OCPBUGS-66231): Use separate tmpfs for ostree checkout on live ISO [#10140](https://github.com/openshift/installer/pull/10140)
* [Full changelog](https://github.com/openshift/installer/compare/0576db3156d4e371a7255f3b19a883c9d2f05b24...cc82f30cd640577297f66b5df80f0e08c55fd3fa)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/dc61926008ad5333863dd1ae2902b95aed6dceaa)

* [OCPBUGS-66241](https://issues.redhat.com/browse/OCPBUGS-66241): Fall back to simpler behavior, if setsid,ps,pkill are not installed [#2158](https://github.com/openshift/oc/pull/2158)
* [Full changelog](https://github.com/openshift/oc/compare/0963a015e8051f256030f1af5895d5640530fa23...dc61926008ad5333863dd1ae2902b95aed6dceaa)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/fb7482e49c790206e370494221b7b02dc50bfd84)

* [OCPBUGS-66204](https://issues.redhat.com/browse/OCPBUGS-66204): Implement ClosedClientConnectionPolicy field [#1314](https://github.com/openshift/cluster-ingress-operator/pull/1314)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/21bea5b51e3729694c91343b130da3b0d36da230...fb7482e49c790206e370494221b7b02dc50bfd84)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/698e349cb60e84967bf93345d1b0802dd15ccc1a)

* [OCPBUGS-66412](https://issues.redhat.com/browse/OCPBUGS-66412): Fix whereabouts-token-watcher DaemonSet improvements [#2850](https://github.com/openshift/cluster-network-operator/pull/2850)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/c49c5e776b44dbac0dcba4897ca0ce803928693e...698e349cb60e84967bf93345d1b0802dd15ccc1a)


### [console](https://github.com/openshift/console/tree/5f07ad2930130fd041b2114e0eb3f78ad75ad2be)

* [OCPBUGS-67221](https://issues.redhat.com/browse/OCPBUGS-67221): Disallowed Pipelines-plugin Pipelines navigation section [#15833](https://github.com/openshift/console/pull/15833)
* [Full changelog](https://github.com/openshift/console/compare/77175da338f4d424063647c8eea0612248f1c801...5f07ad2930130fd041b2114e0eb3f78ad75ad2be)


### [haproxy-router](https://github.com/openshift/router/tree/db8d384266051ef06b67883aaa83674bc6c9f1ae)

* [OCPBUGS-66204](https://issues.redhat.com/browse/OCPBUGS-66204): Add option abortonclose to HAProxy configuration template [#695](https://github.com/openshift/router/pull/695)
* [Full changelog](https://github.com/openshift/router/compare/96bfd2164c7885df9019ce9eeb79d506bd7e871b...db8d384266051ef06b67883aaa83674bc6c9f1ae)


### [hypershift](https://github.com/openshift/hypershift/tree/2a951d0352327e2f4f030595bc3011f3c0c5a809)

* [OCPBUGS-66397](https://issues.redhat.com/browse/OCPBUGS-66397): fix(kas): apply LoadBalancerSourceRanges only for LoadBalancer service type [#7336](https://github.com/openshift/hypershift/pull/7336)
* NO-JIRA: Update expected digest for busybox:latest in TestGetDigest [#7350](https://github.com/openshift/hypershift/pull/7350)
* [Full changelog](https://github.com/openshift/hypershift/compare/a5aab25bedac7d53d90415cf08490acb6d0d7052...2a951d0352327e2f4f030595bc3011f3c0c5a809)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/eecc364b2a4abb6375fd41a9751c047d15aa7f63)

* [OCPBUGS-66934](https://issues.redhat.com/browse/OCPBUGS-66934): Filter out more USB network devices [#221](https://github.com/openshift/ironic-agent-image/pull/221)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/f29e5b702153ecd51ee75cf7b55426075888d7e4...eecc364b2a4abb6375fd41a9751c047d15aa7f63)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/3eb8e48748919195aaa65b415c21b05f6287fc8f)

* [OCPBUGS-65545](https://issues.redhat.com/browse/OCPBUGS-65545), [OCPBUGS-67007](https://issues.redhat.com/browse/OCPBUGS-67007): cherry pick to few fixes that needed for missing services and configuration [#5480](https://github.com/openshift/machine-config-operator/pull/5480)
* [OCPBUGS-67137](https://issues.redhat.com/browse/OCPBUGS-67137): Fix cleanup in `TestInstallRPMAndCheckMCDMetrics` to decrease risk of test failures due to interference [#5478](https://github.com/openshift/machine-config-operator/pull/5478)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/2a29ea49e2625aac5e66e9675de04c2677689c7c...3eb8e48748919195aaa65b415c21b05f6287fc8f)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/68bc2198076b3200a71469eb0b9544e1d363d03a)

* [OCPBUGS-66389](https://issues.redhat.com/browse/OCPBUGS-66389): Time range and Refresh interval dropdown button lack of unique identifier [#668](https://github.com/openshift/monitoring-plugin/pull/668)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/8de67446fade49119c06c1d7c00f9f2b62518b77...68bc2198076b3200a71469eb0b9544e1d363d03a)


### [openstack-cluster-api-controllers](https://github.com/openshift/cluster-api-provider-openstack/tree/3bb292d0c612a59cb78061dc24dc7081c5119894)

* [OCPBUGS-64814](https://issues.redhat.com/browse/OCPBUGS-64814): Fix verify step [#389](https://github.com/openshift/cluster-api-provider-openstack/pull/389)
* [Full changelog](https://github.com/openshift/cluster-api-provider-openstack/compare/30944900c974852654db4125082d616f9be4b1a6...3bb292d0c612a59cb78061dc24dc7081c5119894)


### [tests](https://github.com/openshift/origin/tree/f68cadc88290dd0e813736b75d1c1fe0f9d87a2b)

* [OCPBUGS-66072](https://issues.redhat.com/browse/OCPBUGS-66072): [release-4.20] net(virt) remove virtctl if not correctly retrieved [#30538](https://github.com/openshift/origin/pull/30538)
* [OCPBUGS-64836](https://issues.redhat.com/browse/OCPBUGS-64836): back-port IP & MAC conflict detection e2e tests [#30414](https://github.com/openshift/origin/pull/30414)
* [OCPBUGS-66963](https://issues.redhat.com/browse/OCPBUGS-66963): Fix MachineConfigNode test in two-node fencing clusters [#30540](https://github.com/openshift/origin/pull/30540)
* [OCPBUGS-66365](https://issues.redhat.com/browse/OCPBUGS-66365): update watch request limits for marketplace-operator [#30569](https://github.com/openshift/origin/pull/30569)
* [OCPBUGS-66979](https://issues.redhat.com/browse/OCPBUGS-66979): Revert "OCPNODE-3912: Add a test for NodeSizing default change to OCP 4.20" [#30582](https://github.com/openshift/origin/pull/30582)
* [Full changelog](https://github.com/openshift/origin/compare/11e5d68ef2da023d9add4aaf2feaff48c350e11a...f68cadc88290dd0e813736b75d1c1fe0f9d87a2b)