# 4.20.0-okd-scos.5

Created: 2025-10-13 05:30:35 +0000 UTC

Image Digest: `sha256:f9d52dc8ba441f84ac3b3f9110454a6e8888b2b084cf7243b397cdb293b1d42c`

Promoted from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-10-09-035058


## Changes from 4.20.0-okd-scos.4

### Components

* Kubectl 1.33.3
* Kubernetes 1.33.4
* Kubernetes Tests 1.33.3
* CentOS Stream CoreOS upgraded from 10.0.20251001-0 to 10.0.20251003-0


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/9f4ddbde3733d8fd48e2f10259bb0e998b491113)

* [OCPBUGS-62803](https://issues.redhat.com/browse/OCPBUGS-62803): Skip rpm-ostree local rebase if no PIS [#5340](https://github.com/openshift/machine-config-operator/pull/5340)
* [OCPBUGS-62095](https://issues.redhat.com/browse/OCPBUGS-62095): CRI-O: set hard/soft file descriptor ulimits to `1048576` [#5308](https://github.com/openshift/machine-config-operator/pull/5308)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/58f14fc5d33718cc2c6c38e51e05147a8303aba1...9f4ddbde3733d8fd48e2f10259bb0e998b491113)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/01ff0202a20511964933851a9cdf0fe954240c80)

* [OCPBUGS-62811](https://issues.redhat.com/browse/OCPBUGS-62811): for incompatible test add func to wait builder and deployer SA creation by OCP controller [#503](https://github.com/openshift/operator-framework-operator-controller/pull/503)
* [OCPBUGS-62722](https://issues.redhat.com/browse/OCPBUGS-62722): (cherry-pick) Fix truncate large error messages and unhandle changes for crd upgrade safety in status conditions [#496](https://github.com/openshift/operator-framework-operator-controller/pull/496)
* [OCPBUGS-61705](https://issues.redhat.com/browse/OCPBUGS-61705): Revert "Handle service-ca cert availability/rotation" [#474](https://github.com/openshift/operator-framework-operator-controller/pull/474)
* [OCPBUGS-61563](https://issues.redhat.com/browse/OCPBUGS-61563): [OTE] Update webhook ote tests to use latest webhook-operator [#469](https://github.com/openshift/operator-framework-operator-controller/pull/469)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/1544a1b71476f28889220d37ecafb74f5653e8bd...01ff0202a20511964933851a9cdf0fe954240c80)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/92bb5ee88ec3fa492d2dde06357baae9a6ccc822)

* [OCPBUGS-61453](https://issues.redhat.com/browse/OCPBUGS-61453): [4.20] allow default network -> localnet on the same node for any localnet subnet [#2751](https://github.com/openshift/ovn-kubernetes/pull/2751)
* [OCPBUGS-62336](https://issues.redhat.com/browse/OCPBUGS-62336): Fix EgressIP controller deadlock by sorting node locks lexicographically [#2770](https://github.com/openshift/ovn-kubernetes/pull/2770)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/74b1c90eb97bea68bf708d47f28fce7de9adc7b9...92bb5ee88ec3fa492d2dde06357baae9a6ccc822)