# 4.21.0-okd-scos.ec.7

Created: 2025-11-10 05:00:34 +0000 UTC

Image Digest: `sha256:11dd83c5f1dc0e719892291d852144f4deba104f0feb658efae9546b680f0d21`

Promoted from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2025-11-09-154603


## Changes from 4.21.0-okd-scos.ec.6

### Components

* Kubectl 1.34.1
* Kubernetes 1.34.1
* Kubernetes Tests 1.34.1
* CentOS Stream CoreOS 10.0.20251023-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| BootImageSkewEnforcement <br/> (0 tests)| Disabled| Disabled| Enabled| Enabled| Enabled<br/>(Changed)| Enabled<br/>(Changed) |
| CRDCompatibilityRequirementOperator <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |
| ClusterAPIMachineManagement <br/> (0 tests)|  |  | Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New)| Enabled<br/>(New) |


### Rebuilt images without code change

* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [5c53d757](https://github.com/openshift/driver-toolkit/commit/5c53d757ae380994b89701a98d8b61912154aca7) `sha256:d6fa75a37c5dd5a57ad8b3cedfdc6bddba8a467df9a8371a62c3ca0e1d9cb921`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/f8758cef30567b662d1d9338119ce19330c435b5)

* [AGENT-1248](https://issues.redhat.com/browse/AGENT-1248): Create configmap containing operator manifests [#7818](https://github.com/openshift/assisted-service/pull/7818)
* [ACM-2554](https://issues.redhat.com/browse/ACM-2554): inject imagePullSecrets when available under k8s-mode [#8196](https://github.com/openshift/assisted-service/pull/8196)
* NO-ISSUE: [master] Bump OCP versions: 4.16, 4.19, 4.17 [#8249](https://github.com/openshift/assisted-service/pull/8249)
* NO-ISSUE: [master] Bump OCP versions: 4.20, 4.18 [#8247](https://github.com/openshift/assisted-service/pull/8247)
* [MGMT-22042](https://issues.redhat.com/browse/MGMT-22042): add cve-automation github app to owners_aliases [#8243](https://github.com/openshift/assisted-service/pull/8243)
* [MGMT-22066](https://issues.redhat.com/browse/MGMT-22066): Enable TNA clusters support by default [#8242](https://github.com/openshift/assisted-service/pull/8242)
* [MGMT-21904](https://issues.redhat.com/browse/MGMT-21904): Improve Duplicate certificate Detection used by the infrastructure operator [#8233](https://github.com/openshift/assisted-service/pull/8233)
* [ACM-25980](https://issues.redhat.com/browse/ACM-25980): Introduce PreprovisioningImage finalizer [#8221](https://github.com/openshift/assisted-service/pull/8221)
* [Full changelog](https://github.com/openshift/assisted-service/compare/53571e1b19b7090f444d7315efa546569af0cc22...f8758cef30567b662d1d9338119ce19330c435b5)


### [agent-installer-utils](https://github.com/openshift/agent-installer-utils/tree/9cefd6c9fa38a7ce070810b88a147b9b6af3e242)

* [OCPBUGS-64745](https://issues.redhat.com/browse/OCPBUGS-64745): Update mtv-operator channel name [#194](https://github.com/openshift/agent-installer-utils/pull/194)
* [AGENT-1302](https://issues.redhat.com/browse/AGENT-1302): Read template from .template path [#156](https://github.com/openshift/agent-installer-utils/pull/156)
* [OCPBUGS-63704](https://issues.redhat.com/browse/OCPBUGS-63704): Removed unneeded params from Makefile [#192](https://github.com/openshift/agent-installer-utils/pull/192)
* [Full changelog](https://github.com/openshift/agent-installer-utils/compare/d7c8b24192df63bffc85f78d4124127036d97a3e...9cefd6c9fa38a7ce070810b88a147b9b6af3e242)


### [aws-cloud-controller-manager](https://github.com/openshift/cloud-provider-aws/tree/42c152ff23f7a0aad4731b8a539cde5f662b3374)

* [SPLAT-2337](https://issues.redhat.com/browse/SPLAT-2337): tests/ote: Introduce openshift test extension binary [#117](https://github.com/openshift/cloud-provider-aws/pull/117)
* [Full changelog](https://github.com/openshift/cloud-provider-aws/compare/27f0449461cd77dea5e3706af6e7caf9e9f4dca4...42c152ff23f7a0aad4731b8a539cde5f662b3374)


### [aws-ebs-csi-driver](https://github.com/openshift/aws-ebs-csi-driver/tree/57eebffcc8abbbbb6edcf3b536b769d97e31819c)

* [STOR-2597](https://issues.redhat.com/browse/STOR-2597), [STOR-2627](https://issues.redhat.com/browse/STOR-2627): Rebase aws-ebs-csi-driver to v1.48.0 for OCP 4.21 [#294](https://github.com/openshift/aws-ebs-csi-driver/pull/294)
* [Full changelog](https://github.com/openshift/aws-ebs-csi-driver/compare/4b04d8a25010af932f35e719cc5c3db80603fbe0...57eebffcc8abbbbb6edcf3b536b769d97e31819c)


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/e74ce80040ae089abf437016b14c08afbd2a984e)

* [STOR-2523](https://issues.redhat.com/browse/STOR-2523): Add hypershift managed-by labels for csi driver operators [#446](https://github.com/openshift/csi-operator/pull/446)
* [Full changelog](https://github.com/openshift/csi-operator/compare/9816f9223f6ad5fdb000b2127a6154e03fd3c7a6...e74ce80040ae089abf437016b14c08afbd2a984e)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/fd30059c803000a2525b808658891f24303fddb1)

* [AGENT-1302](https://issues.redhat.com/browse/AGENT-1302), [OCPBUGS-61668](https://issues.redhat.com/browse/OCPBUGS-61668): Merge interactive ignition into unconfigured-ignition [#9941](https://github.com/openshift/installer/pull/9941)
* [OCPBUGS-64603](https://issues.redhat.com/browse/OCPBUGS-64603): PowerVC: Validate Manual Load Balancer [#10057](https://github.com/openshift/installer/pull/10057)
* [CORS-4087](https://issues.redhat.com/browse/CORS-4087): Azure UserProvisionedDNS: Set `PrivateDNSZone` within CAPZ's NetworkSpec [#10059](https://github.com/openshift/installer/pull/10059)
* [OCPBUGS-56451](https://issues.redhat.com/browse/OCPBUGS-56451): Provide a way to configure a fallback policy for imageDigestSources [#10050](https://github.com/openshift/installer/pull/10050)
* no-jira:  cleanup old terraform configs & altinfra image [#10053](https://github.com/openshift/installer/pull/10053)
* [OCPBUGS-63386](https://issues.redhat.com/browse/OCPBUGS-63386): Increase agent-installer pre-network-manager timeout [#10029](https://github.com/openshift/installer/pull/10029)
* [Full changelog](https://github.com/openshift/installer/compare/5684032e6958672f98d727fd69d6231eb545f0f2...fd30059c803000a2525b808658891f24303fddb1)


### [cli, cli-artifacts, deployer, tools](https://github.com/openshift/oc/tree/1c5f490b7997ec08b07b0a0cf16a10757622732c)

* [OCPBUGS-63311](https://issues.redhat.com/browse/OCPBUGS-63311): pkg/cli/admin/upgrade: Tighten force warnings [#2125](https://github.com/openshift/oc/pull/2125)
* [Full changelog](https://github.com/openshift/oc/compare/9ae657dff111d36d75300c4823b7aae4b504c7e4...1c5f490b7997ec08b07b0a0cf16a10757622732c)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/ebf2d81f6278deab2fe6deb549269f29c09a42dc)

* [CCO-690](https://issues.redhat.com/browse/CCO-690): Integrate OpenShift Test Extension framework for CCO [#886](https://github.com/openshift/cloud-credential-operator/pull/886)
* [CCO-714](https://issues.redhat.com/browse/CCO-714): Add preserve-existing-roles flag to ccoctl auzre [#922](https://github.com/openshift/cloud-credential-operator/pull/922)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/650842fbd764695c8ece96faa67c22b0f20f8912...ebf2d81f6278deab2fe6deb549269f29c09a42dc)


### [cloud-network-config-controller](https://github.com/openshift/cloud-network-config-controller/tree/da0442ec5ffb0373650a5a257336ead3aca0a188)

* [CORENET-6349](https://issues.redhat.com/browse/CORENET-6349): rebase k8s to 1.34.1 [#187](https://github.com/openshift/cloud-network-config-controller/pull/187)
* [OCPBUGS-63348](https://issues.redhat.com/browse/OCPBUGS-63348): Fix capacity calculation [#184](https://github.com/openshift/cloud-network-config-controller/pull/184)
* [Full changelog](https://github.com/openshift/cloud-network-config-controller/compare/83847568457908f24554c15d5bb5cc4c70dbcdb5...da0442ec5ffb0373650a5a257336ead3aca0a188)


### [cluster-authentication-operator](https://github.com/openshift/cluster-authentication-operator/tree/9bb2c487d97a26fea35b22a145ebc2c066ca97be)

* [CNTRLPLANE-947](https://issues.redhat.com/browse/CNTRLPLANE-947): operator: set oauth-specific relatedObjects dynamically in the operator status [#800](https://github.com/openshift/cluster-authentication-operator/pull/800)
* [Full changelog](https://github.com/openshift/cluster-authentication-operator/compare/a0db9c2c476853177189a456995a647515ea8b88...9bb2c487d97a26fea35b22a145ebc2c066ca97be)


### [cluster-baremetal-operator](https://github.com/openshift/cluster-baremetal-operator/tree/a0a0c738016ba5bf786abf19fe48642653561a40)

* [METAL-1459](https://issues.redhat.com/browse/METAL-1459): add default PrometheusRule deployment for IPE and watch Servicemonitor [#504](https://github.com/openshift/cluster-baremetal-operator/pull/504)
* [METAL-1620](https://issues.redhat.com/browse/METAL-1620): Upgrade Go modules and dependencies [#521](https://github.com/openshift/cluster-baremetal-operator/pull/521)
* [OCPBUGS-61477](https://issues.redhat.com/browse/OCPBUGS-61477): Mount /etc/pki/ca-trust to machine-os-images [#517](https://github.com/openshift/cluster-baremetal-operator/pull/517)
* [Full changelog](https://github.com/openshift/cluster-baremetal-operator/compare/7a27819c8fed53043012f7c3a63eaecc59b8d65f...a0a0c738016ba5bf786abf19fe48642653561a40)


### [cluster-capi-operator](https://github.com/openshift/cluster-capi-operator/tree/4b370644923b8b1bc655cedfaba699815ec86362)

* NO-JIRA: conversion: CAPI2MAPI set openshift labels for zone, region and instance-type [#393](https://github.com/openshift/cluster-capi-operator/pull/393)
* [OCPBUGS-62325](https://issues.redhat.com/browse/OCPBUGS-62325): Updates InfraMachine watch_filters for MachineSync controller [#371](https://github.com/openshift/cluster-capi-operator/pull/371)
* [OCPCLOUD-2640](https://issues.redhat.com/browse/OCPCLOUD-2640): Adds MachineSet VAP test suite [#404](https://github.com/openshift/cluster-capi-operator/pull/404)
* [Full changelog](https://github.com/openshift/cluster-capi-operator/compare/ef85dc990f42ef2b02c40c1b5ec0b6ea95b635ab...4b370644923b8b1bc655cedfaba699815ec86362)


### [cluster-config-api](https://github.com/openshift/api/tree/621beb45a6110d86add26c090d677fe19b712807)

* [OCPCLOUD-3214](https://issues.redhat.com/browse/OCPCLOUD-3214): Add ClusterAPIMachineManagement feature gate [#2563](https://github.com/openshift/api/pull/2563)
* [OCPCLOUD-3164](https://issues.redhat.com/browse/OCPCLOUD-3164): Add CRDCompatibilityRequirementOperator feature gate [#2565](https://github.com/openshift/api/pull/2565)
* Create shared global parser/universe in codegen [#2558](https://github.com/openshift/api/pull/2558)
* [MCO-1962](https://issues.redhat.com/browse/MCO-1962): Move skew enforcement feature gate to tech preview [#2561](https://github.com/openshift/api/pull/2561)
* [OCPBUGS-63311](https://issues.redhat.com/browse/OCPBUGS-63311): config/v1/types_cluster_version: Fix "images that comes" typo [#2560](https://github.com/openshift/api/pull/2560)
* Bring KAL up to date and enable new linters [#2554](https://github.com/openshift/api/pull/2554)
* [Full changelog](https://github.com/openshift/api/compare/1b67472a2ba8e5bfd3614c272ce6a090b49498e4...621beb45a6110d86add26c090d677fe19b712807)


### [cluster-control-plane-machine-set-operator](https://github.com/openshift/cluster-control-plane-machine-set-operator/tree/2220a43d9352e2f57c53e348ca61acb7209b79e7)

* [OCPCLOUD-3042](https://issues.redhat.com/browse/OCPCLOUD-3042): Create cluster-control-plane-machine-set-operator-ext command [#372](https://github.com/openshift/cluster-control-plane-machine-set-operator/pull/372)
* [Full changelog](https://github.com/openshift/cluster-control-plane-machine-set-operator/compare/344babe6a957f1606c677b009939302659264dfb...2220a43d9352e2f57c53e348ca61acb7209b79e7)


### [cluster-csi-snapshot-controller-operator](https://github.com/openshift/cluster-csi-snapshot-controller-operator/tree/68bc492ef823e2ab6754d926c3c2c69108676888)

* [STOR-2523](https://issues.redhat.com/browse/STOR-2523): Add hypershift managed-by labels for `csi-snapshot-controller` operand [#250](https://github.com/openshift/cluster-csi-snapshot-controller-operator/pull/250)
* [Full changelog](https://github.com/openshift/cluster-csi-snapshot-controller-operator/compare/b022cf72ba3b4e982626d6d0b80bd53064bbe6ee...68bc492ef823e2ab6754d926c3c2c69108676888)


### [cluster-kube-apiserver-operator](https://github.com/openshift/cluster-kube-apiserver-operator/tree/dd7bd0d9889da8ee28ed8f7ddf53a36e3d2d4372)

* [CNTRLPLANE-1721](https://issues.redhat.com/browse/CNTRLPLANE-1721): Create separate Go module for test extension [#1953](https://github.com/openshift/cluster-kube-apiserver-operator/pull/1953)
* [Full changelog](https://github.com/openshift/cluster-kube-apiserver-operator/compare/151f2be4e47cc3826b266b16066829f3f4e16a98...dd7bd0d9889da8ee28ed8f7ddf53a36e3d2d4372)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/85ce8635536ab132fcf618de81a379ad7fff8cca)

* [TRT-2395](https://issues.redhat.com/browse/TRT-2395): Revert "OCPBUGS-61088: create networkpolicy settings for in-cluster monitoring" [#2738](https://github.com/openshift/cluster-monitoring-operator/pull/2738)
* NO-JIRA: [bot] Synchronize versions of the downstream components [#2728](https://github.com/openshift/cluster-monitoring-operator/pull/2728)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/e3f7168eb38ce068443c685b8311412b7f3d753d...85ce8635536ab132fcf618de81a379ad7fff8cca)


### [cluster-network-operator](https://github.com/openshift/cluster-network-operator/tree/05d6f46ffb2cd54b72aa4c864a0a5fb82d3fa7c2)

* NO-JIRA: add wiki link for using ./hack/run-locally.sh [#2824](https://github.com/openshift/cluster-network-operator/pull/2824)
* [OCPBUGS-63743](https://issues.redhat.com/browse/OCPBUGS-63743): Rename transit subnet flags [#2828](https://github.com/openshift/cluster-network-operator/pull/2828)
* [Full changelog](https://github.com/openshift/cluster-network-operator/compare/aec3a2086170d69b4ee3ec129f9c8e9cde5acb32...05d6f46ffb2cd54b72aa4c864a0a5fb82d3fa7c2)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/0714fc07c0c3b6dc17f192f619c0fe89971fbf66)

* [OCPBUGS-62836](https://issues.redhat.com/browse/OCPBUGS-62836): E2E: Pass pull secret path to pull cnf-tests [#1402](https://github.com/openshift/cluster-node-tuning-operator/pull/1402)
* [OCPBUGS-63190](https://issues.redhat.com/browse/OCPBUGS-63190): e2e:hugepages: changing tests to use hugepages-allocator tool [#1400](https://github.com/openshift/cluster-node-tuning-operator/pull/1400)
* [OCPBUGS-63724](https://issues.redhat.com/browse/OCPBUGS-63724): e2e:llc: skip test when no BM worker is found [#1419](https://github.com/openshift/cluster-node-tuning-operator/pull/1419)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/be65dc63b504cdd483e0fd4b95d473b71a738d3b...0714fc07c0c3b6dc17f192f619c0fe89971fbf66)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/5efb87811979bbabdee48bb206aff0fbda4d8d5f)

* [OCPBUGS-63617](https://issues.redhat.com/browse/OCPBUGS-63617): Update both disable and enable lists when enabling/disabling features [#148](https://github.com/openshift/cluster-olm-operator/pull/148)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/39ffd1b8f70dc4c75ab6eb9a04889343e28c964f...5efb87811979bbabdee48bb206aff0fbda4d8d5f)


### [cluster-openshift-controller-manager-operator](https://github.com/openshift/cluster-openshift-controller-manager-operator/tree/8f2a66a7509925c2f1f97f6376d7fadfed0df5c5)

* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): Enable user namespaces for the operands [#400](https://github.com/openshift/cluster-openshift-controller-manager-operator/pull/400)
* [Full changelog](https://github.com/openshift/cluster-openshift-controller-manager-operator/compare/f90be06b151168ff43d53cb5e5ff0c2d2df80186...8f2a66a7509925c2f1f97f6376d7fadfed0df5c5)


### [cluster-storage-operator](https://github.com/openshift/cluster-storage-operator/tree/0c5bde968b3ea0cb77767e70da447ca9b12e6b32)

* [SPLAT-2525](https://issues.redhat.com/browse/SPLAT-2525): Removed VCF9 alert now that it has been tested. [#640](https://github.com/openshift/cluster-storage-operator/pull/640)
* [Full changelog](https://github.com/openshift/cluster-storage-operator/compare/2647d9e33f87c4dd88fc4706c386896124ffc7b0...0c5bde968b3ea0cb77767e70da447ca9b12e6b32)


### [cluster-version-operator](https://github.com/openshift/cluster-version-operator/tree/8529b7d0df2a76d7d29563d45c560fddb6619cf7)

* [OCPBUGS-64732](https://issues.redhat.com/browse/OCPBUGS-64732): lib/resourcemerge: Add support for hostUsers flag [#1257](https://github.com/openshift/cluster-version-operator/pull/1257)
* NO-JIRA: Clean up unused Dockerfile and Dockerfile.rhel7 [#1254](https://github.com/openshift/cluster-version-operator/pull/1254)
* [OCPBUGS-63311](https://issues.redhat.com/browse/OCPBUGS-63311): vendor: Update openshift/api to get new ClusterVersion force Godocs [#1251](https://github.com/openshift/cluster-version-operator/pull/1251)
* [OCPBUGS-14246](https://issues.redhat.com/browse/OCPBUGS-14246): Adding runbook URL for ClusterVersionOperatorDown [#1250](https://github.com/openshift/cluster-version-operator/pull/1250)
* [Full changelog](https://github.com/openshift/cluster-version-operator/compare/420e6d07d80f501cbed3d5ce6f6596323d4fdce5...8529b7d0df2a76d7d29563d45c560fddb6619cf7)


### [console](https://github.com/openshift/console/tree/3f38b677b15cefd1babca96e44a48604b952a931)

* [CONSOLE-4772](https://issues.redhat.com/browse/CONSOLE-4772): Update list pages to use DataView in Workloads Tab [#15653](https://github.com/openshift/console/pull/15653)
* [CONSOLE-4840](https://issues.redhat.com/browse/CONSOLE-4840): Remove `Page/*` and `GlobalConfig` [#15674](https://github.com/openshift/console/pull/15674)
* [OCPBUGS-64700](https://issues.redhat.com/browse/OCPBUGS-64700), [OCPBUGS-64701](https://issues.redhat.com/browse/OCPBUGS-64701): Upgrading Helm to 3.18.5 [#15682](https://github.com/openshift/console/pull/15682)
* [OCPBUGS-63610](https://issues.redhat.com/browse/OCPBUGS-63610): Convert standalone terminal route to extension [#15672](https://github.com/openshift/console/pull/15672)
* [CONSOLE-4858](https://issues.redhat.com/browse/CONSOLE-4858): Fix min-length cycles [#15688](https://github.com/openshift/console/pull/15688)
* [OCPBUGS-63388](https://issues.redhat.com/browse/OCPBUGS-63388): fix breadcrumb link to ImageStream page [#15661](https://github.com/openshift/console/pull/15661)
* [CONSOLE-4840](https://issues.redhat.com/browse/CONSOLE-4840): Remove `FeatureFlag/Model` and `ModelDefinition` [#15671](https://github.com/openshift/console/pull/15671)
* [CONSOLE-4841](https://issues.redhat.com/browse/CONSOLE-4841): Move CSP from plugin to redux store + some sdk adoption prep work [#15633](https://github.com/openshift/console/pull/15633)
* [CONSOLE-4857](https://issues.redhat.com/browse/CONSOLE-4857): Merge image pull secret scenario [#15678](https://github.com/openshift/console/pull/15678)
* [CONSOLE-4725](https://issues.redhat.com/browse/CONSOLE-4725): follow-on fix to remove counts from Role and Binding filters [#15652](https://github.com/openshift/console/pull/15652)
* [CONSOLE-4719](https://issues.redhat.com/browse/CONSOLE-4719): Update Home nav section pages to use DataView [#15656](https://github.com/openshift/console/pull/15656)
* [CONSOLE-4721](https://issues.redhat.com/browse/CONSOLE-4721): Update Helm nav section to use ConsoleDataView [#15646](https://github.com/openshift/console/pull/15646)
* [OCPBUGS-62108](https://issues.redhat.com/browse/OCPBUGS-62108): Lack Chinese/Japanese/Korean translations for 'On/Off' switch button on editor setting modal of yaml page. [#15664](https://github.com/openshift/console/pull/15664)
* [CNV-64586](https://issues.redhat.com/browse/CNV-64586): show default storageclass for VMs info [#15405](https://github.com/openshift/console/pull/15405)
* [CONSOLE-4839](https://issues.redhat.com/browse/CONSOLE-4839): Remove/hardcode `PostFormSubmissionAction` [#15637](https://github.com/openshift/console/pull/15637)
* [OCPBUGS-44235](https://issues.redhat.com/browse/OCPBUGS-44235): Fix Helm chart installation with CA/TLS certificates [#15607](https://github.com/openshift/console/pull/15607)
* [OCPBUGS-63339](https://issues.redhat.com/browse/OCPBUGS-63339): HPA Form View in RHOCP Web Console Incorrectly Requires Both CPU and … [#15626](https://github.com/openshift/console/pull/15626)
* [CONSOLE-4820](https://issues.redhat.com/browse/CONSOLE-4820): Redistribute OLMv0 CSS [#15644](https://github.com/openshift/console/pull/15644)
* [CONSOLE-4834](https://issues.redhat.com/browse/CONSOLE-4834): Clean up unused types in metal3 [#15666](https://github.com/openshift/console/pull/15666)
* [CONSOLE-4410](https://issues.redhat.com/browse/CONSOLE-4410): Use webpack 5 support for share scope init and access [#15525](https://github.com/openshift/console/pull/15525)
* [Full changelog](https://github.com/openshift/console/compare/bed7e7c2c9f28dff28e6d806e215cb011abb49ea...3f38b677b15cefd1babca96e44a48604b952a931)


### [console-operator](https://github.com/openshift/console-operator/tree/4cb3c653864ca70464906b906fb90ffa32e7ded0)

* NO-JIRA: Add /ci-prep Claude code command [#1063](https://github.com/openshift/console-operator/pull/1063)
* [OCPBUGS-64601](https://issues.redhat.com/browse/OCPBUGS-64601): Remove SVM console instance if v1alpha1 ConsolePlugin version in present in the CRDs status [#1061](https://github.com/openshift/console-operator/pull/1061)
* [Full changelog](https://github.com/openshift/console-operator/compare/96fca61803ec4d60e83b0f32a3d18d118f80f3c1...4cb3c653864ca70464906b906fb90ffa32e7ded0)


### [csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager](https://github.com/openshift/cloud-provider-openstack/tree/e9f682c030887cb8c3fc7fd8d17251c5fc037c6f)

* [OCPBUGS-64810](https://issues.redhat.com/browse/OCPBUGS-64810): Merge https://github.com/kubernetes/cloud-provider-openstack:release-1.34 into main [#346](https://github.com/openshift/cloud-provider-openstack/pull/346)
* [Full changelog](https://github.com/openshift/cloud-provider-openstack/compare/f0f7a14152fba5ce86346c58ac282f55dc380231...e9f682c030887cb8c3fc7fd8d17251c5fc037c6f)


### [csi-external-attacher](https://github.com/openshift/csi-external-attacher/tree/344669a2189fecdf5471fdc9a1246dd751cb1afb)

* [STOR-2586](https://issues.redhat.com/browse/STOR-2586): Rebase to v4.10.0 for OCP 4.21 [#89](https://github.com/openshift/csi-external-attacher/pull/89)
* [Full changelog](https://github.com/openshift/csi-external-attacher/compare/8d440867f9983c59c3c54f1e382542d71126d3d3...344669a2189fecdf5471fdc9a1246dd751cb1afb)


### [csi-external-provisioner](https://github.com/openshift/csi-external-provisioner/tree/f18190fb8aa26bdcb4ceb57cdd6cf77b5488ed58)

* [STOR-2586](https://issues.redhat.com/browse/STOR-2586): Rebase to v6.0.0 for OCP 4.21 [#117](https://github.com/openshift/csi-external-provisioner/pull/117)
* [Full changelog](https://github.com/openshift/csi-external-provisioner/compare/bc47159f8350f5b167896459914ec8659cbb3b1b...f18190fb8aa26bdcb4ceb57cdd6cf77b5488ed58)


### [csi-external-resizer](https://github.com/openshift/csi-external-resizer/tree/d880a1ec6da02dbf61600ec7999266185ca9f784)

* [STOR-2586](https://issues.redhat.com/browse/STOR-2586): Rebase to v2.0.0 for OCP 4.21 [#179](https://github.com/openshift/csi-external-resizer/pull/179)
* [Full changelog](https://github.com/openshift/csi-external-resizer/compare/9d1d059b7310751b1ded1cf55b6e5b61e90375ff...d880a1ec6da02dbf61600ec7999266185ca9f784)


### [csi-node-driver-registrar](https://github.com/openshift/csi-node-driver-registrar/tree/d29f3f7a4aed4465e7e40e323bd3c0e0d9871e4c)

* [STOR-2586](https://issues.redhat.com/browse/STOR-2586): Rebase to v2.15.0 for OCP 4.21 [#84](https://github.com/openshift/csi-node-driver-registrar/pull/84)
* [Full changelog](https://github.com/openshift/csi-node-driver-registrar/compare/71080e3e777fe19e2b68a95012102c52026585da...d29f3f7a4aed4465e7e40e323bd3c0e0d9871e4c)


### [hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod](https://github.com/openshift/kubernetes/tree/891f5bb0306166d5625b89fc8dc86bbc8c85f549)

* [OCPBUGS-57477](https://issues.redhat.com/browse/OCPBUGS-57477): UPSTREAM: 133392: test: add retry to getMetricsFromNode [#2401](https://github.com/openshift/kubernetes/pull/2401)
* [STOR-2534](https://issues.redhat.com/browse/STOR-2534): UPSTREAM: &lt;drop&gt;: Disable volume group snapshot tests [#2507](https://github.com/openshift/kubernetes/pull/2507)
* [TRT-2113](https://issues.redhat.com/browse/TRT-2113): Remove annotation framework in favor of environment selectors [#2393](https://github.com/openshift/kubernetes/pull/2393)
* [Full changelog](https://github.com/openshift/kubernetes/compare/9ca60866127994f08fe5ce2b237ef0f3357986de...891f5bb0306166d5625b89fc8dc86bbc8c85f549)


### [hypershift](https://github.com/openshift/hypershift/tree/7e919e276ff99be4dec5050778e77c099dffc239)

* [OCPBUGS-64763](https://issues.redhat.com/browse/OCPBUGS-64763): MCE 2.11 konflux pipeline [#7189](https://github.com/openshift/hypershift/pull/7189)
* [GCP-152](https://issues.redhat.com/browse/GCP-152): feat:(gcp)Add basic GCP platform recognition support [#7137](https://github.com/openshift/hypershift/pull/7137)
* [OCPBUGS-64817](https://issues.redhat.com/browse/OCPBUGS-64817): Update 4.19 control-plane-operator image overrides [#7196](https://github.com/openshift/hypershift/pull/7196)
* [CNTRLPLANE-1850](https://issues.redhat.com/browse/CNTRLPLANE-1850): test(e2e): add N-3 and N-4 release image flags [#7159](https://github.com/openshift/hypershift/pull/7159)
* [CORENET-6484](https://issues.redhat.com/browse/CORENET-6484): Restart ovnkube-control-plane pods when restart-date annotation is set [#7100](https://github.com/openshift/hypershift/pull/7100)
* [OCPBUGS-63613](https://issues.redhat.com/browse/OCPBUGS-63613): Fix --image-generation flag being ignored in Azure cluster creation [#7108](https://github.com/openshift/hypershift/pull/7108)
* [OCPBUGS-56444](https://issues.redhat.com/browse/OCPBUGS-56444): feat: Promote ExternalOIDCWithUIDAndExtraClaimMappings feature to GA for Hypershift [#6025](https://github.com/openshift/hypershift/pull/6025)
* [OCPBUGS-60457](https://issues.redhat.com/browse/OCPBUGS-60457): test(e2e): Revert "Workaround for external oidc tests to bypass the teardown" [#6979](https://github.com/openshift/hypershift/pull/6979)
* [CNTRLPLANE-408](https://issues.redhat.com/browse/CNTRLPLANE-408): feat(api) add imagetype to AWS nodepool api [#6746](https://github.com/openshift/hypershift/pull/6746)
* [GCP-114](https://issues.redhat.com/browse/GCP-114): add API types and CRD infrastructure for GCP Private Service Connect (PSC) [#7131](https://github.com/openshift/hypershift/pull/7131)
* [OCPBUGS-63594](https://issues.redhat.com/browse/OCPBUGS-63594): fix(konnectivity): bind health server to localhost to prevent external exposure [#7106](https://github.com/openshift/hypershift/pull/7106)
* [GCP-120](https://issues.redhat.com/browse/GCP-120): feat(cli): add support for GCP cluster creation and destruction [#7146](https://github.com/openshift/hypershift/pull/7146)
* And 1 elided commits (e.g. from squash or rebase merges)
* [Full changelog](https://github.com/openshift/hypershift/compare/7916f3f968a804eff1ffd5b83dd1af04aaec4e4a...7e919e276ff99be4dec5050778e77c099dffc239)


### [insights-operator](https://github.com/openshift/insights-operator/tree/cb14df1950d420784099e08ba5450974be236dba)

* [OCPBUGS-63747](https://issues.redhat.com/browse/OCPBUGS-63747): [bugfix] The archive's records may include files whose names are out of bounds [#1168](https://github.com/openshift/insights-operator/pull/1168)
* [OCPBUGS-63396](https://issues.redhat.com/browse/OCPBUGS-63396): Add filtering to add other possible pod status to QEMU gatherer [#1167](https://github.com/openshift/insights-operator/pull/1167)
* [Full changelog](https://github.com/openshift/insights-operator/compare/b414946202b350698cb388b5aa32260716735d84...cb14df1950d420784099e08ba5450974be236dba)


### [ironic](https://github.com/openshift/ironic-image/tree/3577b40a40dba9b9d31a92fc8a54b12ee4bf3f63)

* NO-ISSUE: Update requirements.cachito with latest openshift forks commits [#709](https://github.com/openshift/ironic-image/pull/709)
* NO-ISSUE: Add project changes section only if we change something [#712](https://github.com/openshift/ironic-image/pull/712)
* NO-ISSUE: Documented prerequisites for building ironic-image locally [#710](https://github.com/openshift/ironic-image/pull/710)
* [Full changelog](https://github.com/openshift/ironic-image/compare/679e491fe1e6ba4925431fdab40c19519ec4db34...3577b40a40dba9b9d31a92fc8a54b12ee4bf3f63)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/a30ba903caabfae104ecddad6e133095321c8441)

* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#208](https://github.com/openshift/ironic-agent-image/pull/208)
* NO-ISSUE: Update requirements.cachito with latest ironic-python-agent [#205](https://github.com/openshift/ironic-agent-image/pull/205)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/fb9c1e1faa73605e7bd52d509bba60d40151e5e1...a30ba903caabfae104ecddad6e133095321c8441)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/9db4a3763037fd4f354a79718341b4d877149062)

* [OCPBUGS-63734](https://issues.redhat.com/browse/OCPBUGS-63734): Fix error reporting on OS image failure [#5385](https://github.com/openshift/machine-config-operator/pull/5385)
* NO-ISSUE: Split extended directory [#5394](https://github.com/openshift/machine-config-operator/pull/5394)
* [MCO-1933](https://issues.redhat.com/browse/MCO-1933): Pick up openshift/kubernetes 1.34 rebase updates [#5380](https://github.com/openshift/machine-config-operator/pull/5380)
* [MCO-1886](https://issues.redhat.com/browse/MCO-1886): add the missing service to the expose ports 22623 and 22624 [#5371](https://github.com/openshift/machine-config-operator/pull/5371)
* [MCO-1228](https://issues.redhat.com/browse/MCO-1228): MCO-1728: Calculate MCP updated machine counts using MCN properties [#5141](https://github.com/openshift/machine-config-operator/pull/5141)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/a43523ef4c49e31e74e9ce9dec1c5178da666984...9db4a3763037fd4f354a79718341b4d877149062)


### [machine-os-images](https://github.com/openshift/machine-os-images/tree/a5ce081b3cbd889b333f61901fc0ec8fae6a343f)

* [OCPBUGS-61477](https://issues.redhat.com/browse/OCPBUGS-61477): Provide SHA checksum for aarch64 iso [#70](https://github.com/openshift/machine-os-images/pull/70)
* [Full changelog](https://github.com/openshift/machine-os-images/compare/28e97553a97b689d068d5523a7cb2b1a6e53df63...a5ce081b3cbd889b333f61901fc0ec8fae6a343f)


### [metallb-frr](https://github.com/openshift/frr/tree/be6377b44e9c303c42deacdcb7e0d3db77bbd383)

* Dockerfile: unpin FRR rpm [#110](https://github.com/openshift/frr/pull/110)
* [Full changelog](https://github.com/openshift/frr/compare/e10e0cfd561798433a7399711540b29399842691...be6377b44e9c303c42deacdcb7e0d3db77bbd383)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/f3782d042aa9992c3fa4be7c54fb6bbafbacfbde)

* NO-JIRA: Set push as default image-build behavior [#630](https://github.com/openshift/monitoring-plugin/pull/630)
* [COO-1297](https://issues.redhat.com/browse/COO-1297): fix: set translation namespace from environment [#626](https://github.com/openshift/monitoring-plugin/pull/626)
* NO-JIRA: AGENTS.md [#620](https://github.com/openshift/monitoring-plugin/pull/620)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/d0fb01179c00727b12dd4c0e81c07b561e0b26bb...f3782d042aa9992c3fa4be7c54fb6bbafbacfbde)


### [multus-networkpolicy](https://github.com/openshift/multus-networkpolicy/tree/85bd7c6d53b12f8a155edb4113efaec1d232fc9b)

* [OCPBUGS-45980](https://issues.redhat.com/browse/OCPBUGS-45980): Downstream merge 2025-10-29 [#76](https://github.com/openshift/multus-networkpolicy/pull/76)
* [Full changelog](https://github.com/openshift/multus-networkpolicy/compare/ef99d3d4cf1a15abfa55ef71b75c0eaa18a791ce...85bd7c6d53b12f8a155edb4113efaec1d232fc9b)


### [must-gather](https://github.com/openshift/must-gather/tree/ba8e5fcbc4ce554f2871a1455cb32114a6fccc8a)

* [STOR-2691](https://issues.redhat.com/browse/STOR-2691): Collect VolumeAttributesClasses in must-gather [#509](https://github.com/openshift/must-gather/pull/509)
* [Full changelog](https://github.com/openshift/must-gather/compare/ff2a11af23d70278f5332926592a892274464b4e...ba8e5fcbc4ce554f2871a1455cb32114a6fccc8a)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/b7c194938c66362cca417557937a649172b3271d)

* [CNV-70637](https://issues.redhat.com/browse/CNV-70637): Improve MTU validation in VM Networks form [#295](https://github.com/openshift/networking-console-plugin/pull/295)
* [CNV-70637](https://issues.redhat.com/browse/CNV-70637): VirtualMachine networks enhancements [#281](https://github.com/openshift/networking-console-plugin/pull/281)
* [CNV-71649](https://issues.redhat.com/browse/CNV-71649): hide NAD create button for non-admin users [#294](https://github.com/openshift/networking-console-plugin/pull/294)
* [CNV-71915](https://issues.redhat.com/browse/CNV-71915): display the Description field for NetworkAttachmentDefinition [#293](https://github.com/openshift/networking-console-plugin/pull/293)
* [CNV-70776](https://issues.redhat.com/browse/CNV-70776): Problematic suggestion for UDN subnet and a typo [#291](https://github.com/openshift/networking-console-plugin/pull/291)
* [CNV-71585](https://issues.redhat.com/browse/CNV-71585): fix primaryUDN broken link and have red hat docs as default documentation [#292](https://github.com/openshift/networking-console-plugin/pull/292)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/6b846bf5ba7f456c6901eb299d662eacacb8f55e...b7c194938c66362cca417557937a649172b3271d)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/efa9f7a87f75fedf0c0b2adf99e361e0cb17d7e2)

* [CLID-477](https://issues.redhat.com/browse/CLID-477): Add in missing temp GraphDataDir in cincinnati tests [#1304](https://github.com/openshift/oc-mirror/pull/1304)
* [OCPBUGS-61497](https://issues.redhat.com/browse/OCPBUGS-61497): fix: return only requested version [#1299](https://github.com/openshift/oc-mirror/pull/1299)
* NO-JIRA: Changes the dependabot directories [#1301](https://github.com/openshift/oc-mirror/pull/1301)
* [CLID-474](https://issues.redhat.com/browse/CLID-474): add AI configuration [#1298](https://github.com/openshift/oc-mirror/pull/1298)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/6dc33ccc26b8e899726b4717b04e373fc7ab73a1...efa9f7a87f75fedf0c0b2adf99e361e0cb17d7e2)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/5706dc9d910f76fda896ce392eb777712ab9bf7e)

* [OPRUN-4212](https://issues.redhat.com/browse/OPRUN-4212): [OTE]: Add webhook cleanup validation on extension uninstall [#542](https://github.com/openshift/operator-framework-operator-controller/pull/542)
* [OCPBUGS-62942](https://issues.redhat.com/browse/OCPBUGS-62942): Synchronize from Upstream [#546](https://github.com/openshift/operator-framework-operator-controller/pull/546)
* NO-ISSUE: Synchronize From Upstream Repositories [#540](https://github.com/openshift/operator-framework-operator-controller/pull/540)
* [OCPQE-31083](https://issues.redhat.com/browse/OCPQE-31083): Update OwnSingle template to use inline.watchNamespace for QE cases [#541](https://github.com/openshift/operator-framework-operator-controller/pull/541)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/b2e343a5706fb41b81faaf77d489f951c5da31fe...5706dc9d910f76fda896ce392eb777712ab9bf7e)


### [openshift-apiserver](https://github.com/openshift/openshift-apiserver/tree/6bca7ff2a5adb91ddc8db30b0f5c1c983027b7df)

* [CNTRLPLANE-1722](https://issues.redhat.com/browse/CNTRLPLANE-1722): Create separate Go module for test extension [#571](https://github.com/openshift/openshift-apiserver/pull/571)
* [Full changelog](https://github.com/openshift/openshift-apiserver/compare/42d570e1098bbfee31e3a86b7a5c56417bc77cdb...6bca7ff2a5adb91ddc8db30b0f5c1c983027b7df)


### [operator-framework-tools, operator-lifecycle-manager, operator-registry](https://github.com/openshift/operator-framework-olm/tree/27f2661163c2f8acea5f1f3320dcfa3b942b9e02)

* NO-ISSUE: Synchronize From Upstream Repositories [#1140](https://github.com/openshift/operator-framework-olm/pull/1140)
* [OCPQE-30679](https://issues.redhat.com/browse/OCPQE-30679): Continue migration of OLM v0 test cases from tests-private to tests-extension [#1137](https://github.com/openshift/operator-framework-olm/pull/1137)
* NO-ISSUE: Synchronize From Upstream Repositories [#1135](https://github.com/openshift/operator-framework-olm/pull/1135)
* [Full changelog](https://github.com/openshift/operator-framework-olm/compare/4d2698b29ca486fdc0ef083df25b7bc58a22f483...27f2661163c2f8acea5f1f3320dcfa3b942b9e02)


### [ovn-kubernetes, ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes/tree/07964833fe982d95f6376b7877b0e69279060f82)

* NO-JIRA: DownStream Merge [10-30-2025] [#2838](https://github.com/openshift/ovn-kubernetes/pull/2838)
* [Full changelog](https://github.com/openshift/ovn-kubernetes/compare/f16540770027ce1480bce084b5b916c07677df82...07964833fe982d95f6376b7877b0e69279060f82)


### [prometheus-alertmanager](https://github.com/openshift/prometheus-alertmanager/tree/3dbe0b64ae3b9439b888be65a32431c7bf0d6806)

* NO-JIRA: Bump openshift/prometheus-alertmanager to v0.29.0 [#108](https://github.com/openshift/prometheus-alertmanager/pull/108)
* [Full changelog](https://github.com/openshift/prometheus-alertmanager/compare/ad4aede0b0370bd1cbe4a97909865241845e55b5...3dbe0b64ae3b9439b888be65a32431c7bf0d6806)


### [route-controller-manager](https://github.com/openshift/route-controller-manager/tree/8a69194a461dc33d2ed67a220bca91d384d34df4)

* [NE-2186](https://issues.redhat.com/browse/NE-2186): Propagate ingress labels to routes [#67](https://github.com/openshift/route-controller-manager/pull/67)
* [Full changelog](https://github.com/openshift/route-controller-manager/compare/c337cf413bbbfc2154dc1d3c1bf8007ea1edfbc8...8a69194a461dc33d2ed67a220bca91d384d34df4)


### [service-ca-operator](https://github.com/openshift/service-ca-operator/tree/604991eb2172a8a3c4951af8c776c4f845c99ac6)

* [CNTRLPLANE-1544](https://issues.redhat.com/browse/CNTRLPLANE-1544): controller deployment: Use user namespace [#278](https://github.com/openshift/service-ca-operator/pull/278)
* [Full changelog](https://github.com/openshift/service-ca-operator/compare/87df21ba56cebef9c3ead023ceb8a5b5e4e277d6...604991eb2172a8a3c4951af8c776c4f845c99ac6)


### [tests](https://github.com/openshift/origin/tree/17971f39d07866daab5f89677f57981930249aad)

* NO-JIRA: OVNK BGP: use vrf name instead of table number when fetching routes [#30456](https://github.com/openshift/origin/pull/30456)
* NO-JIRA: oidc: ensure console and cli OIDC clients are available when enabling OIDC [#30406](https://github.com/openshift/origin/pull/30406)
* [TRT-2403](https://issues.redhat.com/browse/TRT-2403): Removed k8s filtering due to annotation change [#30466](https://github.com/openshift/origin/pull/30466)
* [OCPBUGS-62703](https://issues.redhat.com/browse/OCPBUGS-62703): Relax duplicate events detection for Prometheus [#30372](https://github.com/openshift/origin/pull/30372)
* [OCPBUGS-63478](https://issues.redhat.com/browse/OCPBUGS-63478): Check operators for pod deletion [#30457](https://github.com/openshift/origin/pull/30457)
* [OCPBUGS-14246](https://issues.redhat.com/browse/OCPBUGS-14246): Remove exceptions for missing CVO alert runbook URLs [#30454](https://github.com/openshift/origin/pull/30454)
* NO-ISSUE: Automated - Update synthetic test data [#30444](https://github.com/openshift/origin/pull/30444)
* NO-JIRA: Add showInfo flag to control CLI command logging [#30442](https://github.com/openshift/origin/pull/30442)
* NO-JIRA: OWNERS: Add myself, clean up [#30453](https://github.com/openshift/origin/pull/30453)
* [TRT-2257](https://issues.redhat.com/browse/TRT-2257): Restore fixed seed [#30392](https://github.com/openshift/origin/pull/30392)
* [OCPBUGS-55755](https://issues.redhat.com/browse/OCPBUGS-55755): Create intervals when etcd disk metrics are  over upstream recommended thresholds [#30413](https://github.com/openshift/origin/pull/30413)
* [Full changelog](https://github.com/openshift/origin/compare/387947a603b155fae1aef09f9216ba95d3548527...17971f39d07866daab5f89677f57981930249aad)