Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.20.0-okd-scos.ec.0

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.19.0-okd-scos.ec.10 (changes) - Success
• 4.19.0-okd-scos.ec.8 - Failed

Upgrades to:

• 4.20.0-okd-scos.ec.1 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.19.0-okd-scos.ec.8

Created: 2025-05-14 01:31:09 +0000 UTC

Image Digest: sha256:6c628a6a34b3c59108e06483824ba5a837cab620853fb07954d940ce2d6635aa

Release 4.20.0-okd-scos.ec.0 was created from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-05-13-101530

Components

• Kubectl 1.32.1
• Kubernetes upgraded from 1.32.3 to 1.32.4
• Kubernetes Tests upgraded from 1.32.3 to 1.32.4
• CentOS Stream CoreOS upgraded from 9.0.20250407-0 to 9.0.20250509-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
CloudDualStackNodeIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DisableKubeletCloudCredentialProviders (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIProviderOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiVCenters (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CPMSMachineNamePrefix (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ConsolePluginContentSecurityPolicy (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
GatewayAPI (6 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
GatewayAPIController (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
MetricsCollectionProfiles (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OnClusterBuild (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
RouteExternalCertificate (19 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ServiceAccountTokenNodeBinding (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
MachineAPIMigration (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
DualReplica (0 tests)	Disabled	Disabled	Enabled	Enabled	Disabled (Changed)	Disabled (Changed)
ShortCertRotation (0 tests)	Disabled	Disabled	Disabled (Changed)	Disabled (Changed)	Disabled	Disabled
AWSDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureMultiDisk (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesvSphere (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NewOLMOwnSingleNamespace (0 tests)				Enabled (New)		Enabled (New)

New images

• aws-karpenter-provider-aws git 68ae0c26 sha256:9cc774e9297bb2c246bbb54d164fc28ad6842711f8cf17fbaf2f5f8ba5bd71bf
• openstack-resource-controller git d00bab2b sha256:35ccd68c356a39e2b76c3a14bd1bdcb2d037a530d5cd16fab452cb9e6803d1ce

Rebuilt images without code change

• aws-cloud-controller-manager git 425c1c5b sha256:d194499adf5d6a805370724b367fa6ef51e63ae29c7b175aa8aeaffdb6dc21c9
• aws-ebs-csi-driver git d686e7d1 sha256:366e48db006da3fe6d91eaf0105df151bd0cdf55ed0f0caabe55ce618e97cb79
• aws-pod-identity-webhook git b0a16d53 sha256:bfc746182270141ec4f06150eb70f5a9235c52b5c15439a7bc2bc3b1f0795c74
• azure-cluster-api-controllers git 2c931b4a sha256:d1d1c6ccbf5a70c10952ea4f0bec980ec629ced20cc67570cd7ce9abcca71595
• azure-workload-identity-webhook git 892d3c4d sha256:870c1cd676fe68d2451ec1f76e7d5e5f9b2b4f2568b874472f353c9e6383deb9
• baremetal-machine-controllers git f7a78954 sha256:f384527ee5cc9671af5c0cf9757b4275f27961f0788532b0b169fa0c78a4e53f
• cluster-autoscaler-operator git 227f7537 sha256:1644754c5eb0480f6d8722a2490bea05c003bf7706dfb1bfdea6c7fd8004142d
• cluster-baremetal-operator git f64a5c1d sha256:d999a68e7bd726e46d3cfeecc24c0f5551a35f7bc90b71d2c13d71d7aa8e6569
• cluster-bootstrap git 8fde9c52 sha256:8b296b4c0ed4553438ba2ec1dd04a243649363092501364c97f00aa3e0887ad1
• cluster-capi-controllers git 7e2de8d3 sha256:3c5ff441df2b0c0804d47864194edce867f7fd2af698d5e3ce7f439a2499c9cb
• cluster-csi-snapshot-controller-operator git cf99de97 sha256:33bfe98f9a0fd89cad130d8452465793eb60b2c5bb776a46ec4454de13d9817c
• cluster-dns-operator git 65981306 sha256:48b5b9fe3e90b352369a637b974e52cde7c8a258af6cbc2a6ac99268d0aef38b
• cluster-kube-storage-version-migrator-operator git 4e514049 sha256:0a70e25fbaf2f3490d6ec4441262b6264219c3192e5a21082e62be1f8fd08b8c
• cluster-openshift-apiserver-operator git 5f66a3e1 sha256:db8733af3537d3b76f31326c5eb56a8521080c5ac0f26ffa4853c37778a0a059
• cluster-openshift-controller-manager-operator git 0ab30996 sha256:94504ba931c782b2be25eb1d841519dc824efcac7fd290ce7ffc93dc2e60a4b3
• cluster-policy-controller git 74852478 sha256:7f2fcd1d757d27e2f6643cc1db34a1d1573047aed7c1f256c3431a52395f90a0
• cluster-samples-operator git 4cb29197 sha256:fef8da17e89034a15d6998444aa8947ff05001952f5c81aeda86f69d6522bd6d
• cluster-update-keys git c1c56b4c sha256:61d51bdc9cab9a33d207ebe1406b932ba0b563b4a74735bd80fb272c8ab79241
• configmap-reloader git 9bfbde86 sha256:5bded5aca479fdb655c390ab51b5e802d1730e7766efd9d8bd53a678273798f1
• coredns git 7a1451db sha256:92d32cbbd90a710252ef500d4a4408ca18967fe488ea317d5bf06a58482c4531
• csi-driver-manila git 68986f5b sha256:93dd2ea32cb949aad8d3e5b2291e0fd0efd92131dd2e9164f8e0518625de2d62
• csi-external-attacher git a8175e39 sha256:f212c2c8ddaa6e7ab2cda239556414101975ebc168d7706406e31981163420f0
• csi-external-provisioner git 9db1cdb1 sha256:f30a4aacbca14bae6af1ac6cbbd2494ee90c2ac2db25f36f38c3c4f20a0c7fb6
• csi-external-snapshotter git ac82cafc sha256:0328950466bdb78d6190b313893d5eb341c39338ae01a35362542934180d5f99
• csi-livenessprobe git ca514478 sha256:5992b5b9b06f06ca67613220d216f0411fa61370a535faaf4206ff2f814e3dc6
• csi-node-driver-registrar git d18edb3a sha256:c902b561868730db5574ec0eb0689834fe62ba8817ee3728e5125ddb6f972390
• csi-snapshot-controller git ac82cafc sha256:9db9d1acbcb4649ed3ca197f51e4b9c5783c7bc1b0bbb22106db096eecd2a4ec
• docker-builder git f2e5d601 sha256:5604ff131eefc3772eeb80244e9d1b844cf298bbd7df3dfdc2738581df0af132
• docker-registry git 59376a75 sha256:2b06ceff904f4ab481c1104627820b341e792ea8d1026a29a9c0b41e400a6e33
• driver-toolkit git 686fdac5 sha256:7cb54fcc29533a3d17cdfaaf96d37d8f76282ceacbfc8b3e9348e72f51859694
• egress-router-cni git 85353bb9 sha256:19b3586e32453636d875d41047ae82a6c435c005535f602c3704502794526b49
• gcp-cloud-controller-manager git d8d3aeba sha256:48f99e5cf63abb30afd59c1b226fab074a2f7e301945abda5d44923ffb969018
• gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:6ed3aba95e34d5bea616c7cfcace9f1813c0feec9dbbbe9ecc15fd2649a3af12
• haproxy-router git b41f9d05 sha256:52dcbb7ce2f21f22e9fa3d732a064186215af0e278b6aad0840f3f1ff1c07282
• ibm-cloud-controller-manager git 7422aab2 sha256:655ce7b63118c1a3188b06dcbec883f302c266e859e6d008cad46758ab2ce8f4
• ibmcloud-cluster-api-controllers git 0453d282 sha256:74bccda67938388c0ab5108b26596b7d538a202f1fc78327c5168370522072da
• ibmcloud-machine-controllers git 989bd874 sha256:3a1509a0e23d4f3deaddcde5a881df2f9e339a75da70176b408a7f03c0b5923e
• ironic-machine-os-downloader git dbe19772 sha256:ff005578de4053339355e0a66e597fc2fb15611fa15fcd04b988a29f8d06f66c
• ironic-static-ip-manager git fcd9564e sha256:4d61d98e31738cb5ccc9239b799a4d57f100b3086699525af5ff8ea4ed0a2bc1
• kube-metrics-server git 037a0e7e sha256:51a36ef908b5da19a47e93d657d89ea8ec0925c6495366b9cc8375ed8013c8d3
• kube-rbac-proxy git 59127756 sha256:7c6be4768d3c15090299d78568dbd6b5a85d9559147cf26c254e13f300408111
• kube-state-metrics git c3da3b5f sha256:6a3391d27f75c53616918a2bbb6d152a4bb7f5665bf39c238351b66a0ab0cc0b
• kube-storage-version-migrator git 4c521b09 sha256:12a16836db2b077deedfc22db8f599bc7882c83cdd7f2ddb4656663d1ca561fb
• kubevirt-cloud-controller-manager git 3f4542ec sha256:45d623bccf7f00e97cb5886e4fe2403c3c3aba2f5d99d22391e25251356ef0d2
• libvirt-machine-controllers git a336f0b5 sha256:429eeb96c6ac01b8ef60f48a67b9f94519788a36e2e4c2b930b3935a56ba8d00
• multus-admission-controller git 0b1b812e sha256:dc8c921411cb99929c8c66892c9df80190fc72d6fde11193023024dfed819385
• multus-networkpolicy git 6fffe5d7 sha256:cd368df5b988e522c26523dc1ec1844f668c9c02ddac9423420aeddfdc1b94fe
• multus-route-override-cni git 391c1b03 sha256:cadc1e187c5f8a69e90bfd0887e2b1a228553eff36e2c9faecf5672da31300ac
• multus-whereabouts-ipam-cni git 45624b63 sha256:0447afd29a9ab55543195af292b40cdb959e4fe865d903a09431cbe929c3f8c1
• network-metrics-daemon git 5ec8c6bd sha256:085c840dc8f9a69090fd18da84b32e0a0679685d8a4eb604c2aeb9d802e887fa
• nutanix-cloud-controller-manager git db1f264a sha256:51280481090f561be6ea7926a350e77ac7af881794999e6e0da01722dc2e5ab1
• nutanix-machine-controllers git a26db5a0 sha256:2e73165accb5788a172776077e6e7db41cc9d56e6ac02205aae22e72ed5ee290
• oauth-apiserver git 75914068 sha256:7907eedb7e2cfe73690655186b201c1877a205b1557db16f7d15cd08381a9d05
• oauth-proxy git 3d12ccbe sha256:14b7ff793eb43b4fa1124dd4304ac02559b9678781985fbd118a65d4addce1e7
• openshift-apiserver git 85f6eb27 sha256:b330daf689152eec552def1cff4b5bae8c94ee4311ba9d23e023acea99d82f0d
• openshift-state-metrics git 3106bcc3 sha256:00a7a7acd8ef3aeade223b2a2706181794477a20b2115c997510a28638587f11
• openstack-cinder-csi-driver git 68986f5b sha256:37f1b59889f5f3dd504450355e73ef5a9a90f37975da14c9edd4a1c36225b44c
• openstack-cloud-controller-manager git 68986f5b sha256:81a8b73168806ba8311951262d92bc3f82c8412de9acb3f0a86dcd4a0db75b39
• openstack-cluster-api-controllers git cc76099b sha256:ccff013ec5974d76b592b10ec7fe83ae8807f1ef4357509f9461fcc39d13e8b2
• openstack-machine-api-provider git 848bf658 sha256:1880ea14361c0264c012cf1f012d37f51bed110ee42843c66283076e235e7d6a
• ovirt-csi-driver git 1db726a9 sha256:b9c92bc4244bb4bc41ffa9b5f38fd389c44d93e997cec681894bde9b46710b54
• powervs-block-csi-driver git f681413d sha256:d4771a03c496e1c9d34b07053b62d198c0a084d49e0592b1178fdea41c70da3a
• powervs-block-csi-driver-operator git 059d95c2 sha256:befdc4279c3858de07c8edda1179bf2806a13080dc2e759a87a2864856b8d83e
• powervs-machine-controllers git 87f8e306 sha256:11338a88c440ee44a632abfc644fa11133f6f48ecb1cd38e5dbeafa537cfa846
• prom-label-proxy git 7184f58d sha256:0ffd8ac9baba9e5ba3803ad034f5ce1a3014c6c2c6552926cbe00889ccb933d9
• prometheus git 7935baed sha256:a5e9ea9ffcb1b1474cec30a4af3e4c7b64c44bb90c7492ec6ee48bca2f443093
• route-controller-manager git bc97534a sha256:e82cd706071fb4d21153e12c6e8503b528e55af9bc7807fc30609f5280868ac9
• thanos git 95f7bb21 sha256:18f0fa5fa4607ad5932879763c5d3253b56f4b91ea196841a79fc62def230105
• vsphere-cloud-controller-manager git 2c21c8ce sha256:5d2321883f2be330a325d4f39309e46c61ed8d2bdc272d342590030c3227bc0b
• vsphere-cluster-api-controllers git 8c61ba3d sha256:9684ae4c3b6dbde37237b0cd4fc1c5661335ba285296f5ea73755fa18137b684

agent-installer-api-server

• MGMT-20324: Fix day2 add hosts with P/Z CPU architectures #7527
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• Konflux build pipeline service account migration for assisted-installer-controller-acm-ds-main (#1108) #1108
• Konflux build pipeline service account migration for assisted-installer-ds-main (#1110) #1110
• Konflux build pipeline service account migration for assisted-installer-controller-ds-main (#1109) #1109
• Konflux build pipeline service account migration for assisted-installer-acm-ds-main (#1107) #1107
• MGMT-20567: Enable HTTP endpoint for MCO ignition (#1117) #1117
• NO-ISSUE: Update Konflux references (#1114) #1114
• MGMT-20534: Move getting Node replicas into waitForNodes (#1113) #1113
• MGMT-20479: Update assisted-installer to allow TNA Clusters (#1106) #1106
• NO-ISSUE: Update Konflux references (#1112) #1112
• NO-ISSUE: Apply konflux migration (#1105) #1105
• NO-ISSUE: Update Konflux references (#1103) #1103
• NO-ISSUE: Update Konflux references (#1095) #1095
• Full changelog

agent-installer-node-agent

• Konflux build pipeline service account migration for assisted-installer-agent-acm-ds-main (#992) #992
• NO-ISSUE: Update Konflux references (#984) #984
• NO-ISSUE: Update assisted-service’s version (#997) #997
• MGMT-20296: Modify RegisterHostConflict log (#990) #990
• NO-ISSUE: Update Konflux references (#976) #976
• Full changelog

agent-installer-utils

• OCPBUGS-55769: Use internal image registry #78
• AGENT-1195: bump appliance image to 4042ba #86
• OCPBUGS-55708: Include RHEL 9 guest image to support VM launches via … #84
• NO-ISSUE: Update ISOBuilder appliance image SHA #83
• NO-ISSUE: ISOBuilder: Add support for default CatalogSource naming #79
• OCPBUGS-55515: Include cnv operator in ISO builder script #80
• OCPBUGS-55623: update to go.mod #81
• NO-ISSUE: ISOBuilder-Add support-tools image for oc debug #77
• NO-ISSUE: ISOBuilder- Update README.md #76
• NO-ISSUE: ISOBuilder: Add Clean targets. #69
• AGENT-1161: Update ISOBuilder dependencies #75
• AGENT-1154: Dev docs for ISOBuilder #74
• NO-ISSUE: Remove extra doneFunc() call #73
• AGENT-1188: Add MBR to El Torito ISO to support USB boot alongside VM #72
• NO-ISSUE: ISOBuilder: Use libpod registry #71
• AGENT-1114: Check connectivity to rendezvous node and improvements #64
• Full changelog

apiserver-network-proxy

• OCPBUGS-52573: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.19 #74
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-55947: Update manifests to remove reliance on v1beta1 admission registration #549
• OCPBUGS-54567: UPSTREAM: 5374: add marketType field validation #548
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• STOR-2408: Bump OLM metadata to 4.20 #382
• OCPBUGS-50493: Use 127.0.0.1 for healtz http-endpoints #364
• NO-JIRA: build only needed cmd in container image #329
• OCPBUGS-54382: Correct ASH driver inject env config #376
• Full changelog

aws-machine-controllers

• OCPBUGS-55720: Update machine-api-operator pkg with fixes #127
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-55162: UPSTREAM: 8920: Fix azure stack hub volume detach failed #142
• OCPBUGS-51090: Fix panic for GetZoneByNodeName on Azure Stack #141
• Full changelog

azure-disk-csi-driver

• NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #103
• OCPBUGS-55494: Correct max data disk count table for L family v4 #105
• OCPBUGS-54382, OCPBUGS-55162: Fix ASH azure disk regression issues #104
• Full changelog

azure-file-csi-driver

• OCPBUGS-54897: UPSTREAM: 2515: allow deleting cross-subscription snapshots #92
• Full changelog

azure-machine-controllers

• OCPBUGS-54617: Update eviction policy for Spot VMs from Deallocate to Delete #138
• Full changelog

azure-service-operator

• OCPBUGS-55334: Updating ose-azure-service-operator-container image to be consistent with ART for 4.19 #8
• Full changelog

baremetal-cluster-api-controllers

• Remove ipam-controller-manager deployment #43
• Add metal3 infra group to IPAM manager RBAC #42
• Remove IPAM deployment #39
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-53107: Set appropriate KillMode for systemd services #9562
• OCPBUGS-55683: Pre-create password files for agent installer OVE #9679
• OCPEDGE-1673: [TNF] Render secret manifests from fencing credentials block. #9635
• OCPBUGS-47719: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9693
• OCPBUGS-55817: add Lsv4 and Lasv4 series as tested #9696
• OCPBUGS-55772: Add support for Azure TDX confidential VM type #9691
• no-jira: add jcpowermac to nutanix review/approve groups #9697
• CORS-3960, OCPBUGS-55952: Remove Terraform Build Artifacts #9667
• no-jira: add PeaceRebel (Bipin) to coreos approvers & reviewers list #9687
• OCPBUGS-54502: ensure ctrplane nodes can access bootstrap MCS #9689
• OCPBUGS-54566: Apply defaults then validate confidentialCompute #9637
• OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
• no-jira: fixes to get shellcheck to pass #9669
• OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
• OCPEDGE-1707: Add Disable Certificate Verification API #9640
• no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
• OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
• CORS-3633: Fail the install when there are expired certs #9225
• CORS-3960: Remove Terraform from Dockerfiles #9673
• OCPBUGS-55492: sort zone slices extracted from map of byo subnets #9662
• no-jira: IBI nmstate unit test fix #9680
• OCPBUGS-55324: fix nil field access when describing security groups #9676
• OCPBUGS-52203: Find GCP KMS keys #9597
• CORS-3855: Remove ARO build flag from installer #9124
• OCPBUGS-54902: Custom-DNS: Update Kubeconfig and Infra CR based on private or public cluster #9656
• NO-JIRA: Update SCOS 4.19 bootimage metadata to 9.0.20250411-0 #9657
• CORS-3870: validate duplicate AZs if no subnet roles at all or only for subnets of the same role #9663
• CORS-3864, CORS-3959: CAPI AzureStack Support, Take II #9666
• OCPEDGE-1749: [TNF] Updated bare-metal init sequence to detach control-plane nodes in Two Node OpenShift. #9661
• Revert “Merge pull request #9645 from patrickdillon/azurestack-mark-iii” #9665
• CORS-3864, CORS-3959: CAPI-based AzureStack Installs #9645
• CORS-3870: add validations for subnets field with AWS API #9599
• CORS-3871, CORS-3872, CORS-3873: place the cluster components on the assigned byo subnets if any #9633
• CORS-3278: IBMCloud: Remove IBM Cloud TF provider #9649
• OCPBUGS-54606: convert OVNKubernetes networkType to correct format #9653
• CORS-3936: Add support for public-only networking #9544
• CORS-3278: IBMCloud: Add DestroyBootstrap for leftover CAPI resources #9636
• CORS-3854: Enable option to set boot diagnostics #9125
• CORS-3278: Switch IBMCloud to CAPI #9652
• CORS-3867: fix CRD descriptor to mention required BootstrapNode role #9655
• CORS-3886: azure: Set use managed identity to false #9648
• OCPBUGS-54319: oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x #9608
• AGENT-1159: agent docs update #9627
• Full changelog

baremetal-operator

• OCPBUGS-55717: Merge upstream #414
• METAL-998: Merge upstream #413
• Full changelog

baremetal-runtimecfg

• NO-ISSUE: Add emy as reviewer #346
• OPNET-629: Use HAProxy monitor endpoint instead of API #343
• OCPBUGS-48469: Pass in platform as a optional parameter to runtimecfg cmds #345
• Full changelog

cli, cli-artifacts, deployer, tools

• NO-JIRA: make ‘oc status’ compatible with bare kube #1947
• OCPBUGS-53106: Get installer image from configMap for node-image command #2005
• OCPBUGS-52164: Add the generation of initrd.addrsize and generic.ins file for ABI Day2 Artifacts #2007
• NO-JIRA: adm release new: simplify writePayload #2008
• COS-3023: Fixing rpmdiff permissions when running in container #2006
• Full changelog

cloud-credential-operator

• OCPBUGS-53429: Render: configure proxy on bootstrap static pod #855
• OCPBUGS-55777: Sync OpenStack CA Bundles from legacy location #850
• OCPBUGS-54829: golang.org/x/net v0.38.0 #851
• OCPBUGS-55204: Revert “Merge pull request #848 from jstuever/OCPBUGS-53429” #854
• OCPBUGS-53429: Render: configure proxy on bootstrap static pod #848
• Full changelog

cloud-network-config-controller

• OCPBUGS-45891: Increase API call timeout to 30 second #168
• CNTRLPLANE-112: Remove ARO HCP MIv2 authentication from CNCC #169
• CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #166
• OSASINFRA-3755: Prefer CA cert from credentials secret #167
• Full changelog

cluster-authentication-operator

• OCPBUGS-51203: fix logo not being correctly aligned in Webkit #758
• Full changelog

cluster-autoscaler

• OCPBUGS-54231: Fix cool down status condition to trigger scale down #355
• OCPCLOUD-2835: rebase on upstream 1.32.0 release #340
• Full changelog

cluster-capi-operator

• OCPBUGS-55985: fix: machine: propagate non-authoritative deletion #290
• OCPBUGS-55947: Should not use v1beta1 of the AdmissionRegistration API group #289
• OCPBUGS-54970, OCPBUGS-55349: Ensure CAPI machine when machine authority is CAPI #288
• NO-JIRA: Prevent caching CAPI objects across namespaces #285
• METAL-966: Reapply “Merge pull request #175 from honza/add-metal3” #284
• OCPCLOUD-2648: Machine sync controller deletion logic #278
• OCPCLOUD-2713: Handle credential fields in both mapi2capi and capi2mapi #282
• OCPCLOUD-2564: add migration controllers #268
• OCPBUGS-54972: Revert #175 “METAL-966: Add metal3 provider” #283
• OCPCLOUD-2880: label selector and labels conversion, fixes to sync controllers and conversions #281
• METAL-966: Add metal3 provider #175
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-54427: Add rbac leases rbac for cloud-provider on Azure stack hub #387
• Full changelog

cluster-config-api

• Remove upstream on-by-default cloud feature gates (CloudDualStackNodeIPs, DisableKubeletCloudCredentialProviders) #2249
• SPLAT-2168: introduce AWSDedicatedHosts feature gate #2291
• OCPBUGS-55666: Remove MachineAPIProviderOpenStack feature gate #2307
• MCO-1657: FeatureGate for Bootimage updates for the vSphere platform #2301
• SPLAT-2072: Removed VSphereMultiVCenters feature gate #2231
• SPLAT-2158: Azure Multi Disk feature gate #2289
• README: Add criteria for featuregate test result windows and flake handling #2302
• Move from JoelSpeed/kal to kubernetes-sigs/kube-api-linter #2297
• OCPBUGS-48286: feature-gates - enable ServiceAccountTokenNodeBinding #2139
• OPRUN-3766: Add FeatureFlag for OLMv1 Single/OwnNamespace #2264
• MCO-1518: Create V1 MachineConfigNodes API & deploy V1 MCN CRDs #2255
• Fix broken ControlPlaneMachineSet integration tests #2296
• OAPE-148: Promote CPMSMachineNamePrefix feature gate to default feature set #2254
• features: remove ShortCertRotation from DevPreviewNoUpgrade #2270
• NE-2017: Enable GatewayAPIController featuregate in Default featureset #2284
• OCPCLOUD-2914: Add MAPI to CAPI migration to TechPreview #2279
• OCPEDGE-1775: Enable separation of conflicting enum values, and drop DualReplica to DevPreview #2283
• OAPE-92: Promote RouteExternalCertificate feature gate to default feature set #2268
• CONSOLE-4523: Lift Featuregate for the ConsolePlugin ContentSecurityPolicy API #2275
• MON-4071: GA MetricsCollectionProfiles #2286
• CNTRLPLANE-332: Add uid and extra claim mappings for external OIDC configuration #2234
• Promote OnClusterBuild featuregate to default #2192
• trt-2080: check devlopment start date for latest release #2285
• NE-2009: Re-enable GatewayAPI featuregate in Default featureset #2281
• TRT-2081: Revert #2261 “NE-2009: Enable GatewayAPI featuregate in Default featureset” #2277
• Temporarily pin feature-gate-analyzer to 4.19 #2276
• image/v1/types: improve documentation #2240
• NE-2009: Enable GatewayAPI featuregate in Default featureset #2261
• Full changelog

cluster-config-operator

• OCPEDGE-1833: feat: bump api dep to pull in change in DualReplica #439
• OCPBUGS-52744: Bump golang.org/x/crypto #433
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-55017: Wait for operators to be stable for 2 minutes before accepting cluster is stable #358
• OAPE-163: Extend E2E tests for MachineNamePrefix when the field is reset #355
• Full changelog

cluster-etcd-operator

• OCPBUGS-55111: Remove ‘meta’ keyword from pcs resource create command #1417
• OCPEDGE-1773: Fix arbiter field in install-config #1409
• OCPBUGS-53512: fix CVE-2025-30204 #1412
• OCPBUGS-54222: increase etcdGRPCRequestsSlow duration #1402
• Full changelog

cluster-image-registry-operator

• OSASINFRA-3747: Prefer CA cert from credentials secret #1190
• Full changelog

cluster-ingress-operator

• CNTRLPLANE-112: Remove ARO HCP MIv2 Authentication for Ingress Operator #1222
• CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cluster-ingress #1191
• NE-2009: Relax pod bound validating admission rule for HyperShift #1221
• NE-1969: Set Degraded=True if unmanaged Gateway API CRDs exist #1205
• NE-1957: Add Gateway API DNS Feature e2e tests #1213
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects - reapply #1831
• OCPBUGS-52466: bump library-go to bring in updated audit policies #1837
• OCPBUGS-55274: Change validity / refresh for some certs which should not be affected by dev cycle rotation change #1832
• Revert “OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects” #1830
• OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects #1759
• CNTRLPLANE-347: Issue short lived certificates if ShortCertRotation featuregate is enabled #1823
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-45390: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.19 #56
• ACM-14968: Modified readme for cert-manager changes. #55
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-54945: Bump library-go #838
• Full changelog

cluster-kube-scheduler-operator

• OCPNODE-3192: enable the scheduler plugin if the feature gate DynamicResourceAllocation is enabled #561
• OCPBUGS-54945: Bump library-go #560
• Full changelog

cluster-machine-approver

• OCPBUGS-19856: Improve log message when searching for node by InternalDNS #269
• No-Jira: ignore test file csr_check_test.go #270
• Full changelog

cluster-monitoring-operator

• NO-JIRA: [bot] Synchronize versions of the downstream components #2600
• MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2549
• NO-JIRA: Synchronize versions of the downstream components #2594
• MON-4207: Bump prometheus-operator to v0.81.0 #2593
• NO-JIRA: [bot] Synchronize versions of the downstream components #2589
• MON-4161: add topology telemetry signals #2588
• MON-4126: set fallbackScrapeProtocol: ‘PrometheusText1.0.0’ as default for all UWM Prometheus targets for backward compatibility with Prometheus v2 until a better migration process is available #2590
• MON-4150: chore: update prometheus-operator go dep #2586
• Full changelog

cluster-network-operator

• OCPBUGS-55488: Remove environment variables related to ARO HCP MIv2 for CNO #2686
• OCPBUGS-55285: bindata,ovn-k,cudn: Validate loclanet topology’s excludeSubnet match specified subnets #2692
• OCPBUGS-40906: Implement IPsec NAT-Traversal encapsulation option #2573
• OCPBUGS-55090: Configures subdirectory based CNI chain loading #2690
• OCPBUGS-54238: Update CSR status condition appropriately #2674
• CORENET-5914: bindata,ovn-k: Update CUDN CRD following localnet support #2678
• SDN-5701: [multus-networkpolicy] Update CRD to the latest v1beta1 #2668
• CNF-16707: frr-k8s: wire the frr-status sidecar container #2687
• CORENET-5856: Update RouteAdvertisements schema #2685
• OCPBUGS-54837: Add missing backendAddressPools read permission on azure #2684
• CORENET-4481: update install-cni script #2676
• SDN-5342: Signer username validation #2560
• Full changelog

cluster-node-tuning-operator

• NO-JIRA:e2e:daemonset: pod phase and events (#1289) #1289
• Fixed rcu_nocbs cpu parsing (#1317) #1317
• Use cpuset.CPUSet for reserved, isolated and offline fields (#1321) #1321
• Make the e2e/basic/modules.go test reentrant (#1322) #1322
• Enhance hugepages validation error message (#1320) #1320
• Bump to k8s 1.32.3 (#1318) #1318
• Full changelog

cluster-olm-operator

• OPRUN-3883: Add network-policy support #117
• OPRUN-3821: Add FeatureFlag for OLMv1 Single/OwnNamespace #110
• OCPBUGS-54877: Increase debug logging level for op-con/catd #114
• OPRUN-3782: Watch for permissions preflight feature gate #113
• Full changelog

cluster-storage-operator

• NO-JIRA: correct cinder operator CredentialsRequest name #577
• OCPBUGS-54491: sync Azure File permissions with upstream docs #576
• STOR-2078: Enable VolumeAttributesClass for GCP-PD #574
• Full changelog

cluster-version-operator

• OTA-1531: [3/x] cvo: read version from release metadata on startup #1188
• OTA-1531: [2/x] cvo: refactor LoadUpdate #1185
• OTA-1531: [1/x] cvo: refactor option processing #1184
• OTA-209: Add sync logic to the CVO configuration controller #1170
• OCPBUGS-53062: add the ports Field into the CVO’s container spec #1180
• NO-JIRA: Makefile: verify -> verify-yaml #1183
• OTA-1403: Add an always passing test case #1172
• NO-JIRA: make verify #1177
• OCPBUGS-23514: Failing=Unknown upon long CO updating #1165
• NO-JIRA: manifests: make template manifests valid YAML #1171
• OTA-1488: Remove USC code #1176
• OTA-1488: Remove DevPreview USC manifests #1175
• NO-JIRA: Fix some issues identified by yamllint #1174
• Full changelog

console

• OCPBUGS-55919: remove 60 day alert from cluster update modal #15045
• CONSOLE-4550: col-sm-6 => GridItem sm={6} #15014
• OCPBUGS-54234: Fix impersonate group action #14915
• OCPBUGS-46385: fix alignment of Getting Started item icons #15025
• CONSOLE-4393: Update to Node.js® v22 #14841
• OCPBUGS-55412: Wrap ListPageHeader action with a div #15008
• OCPBUGS-55323: Add patternfly/react-topology to shared modules list of dynamic plugin sdk #14993
• OCPBUGS-55430: resolve http Context and Client handling #15009
• OCPBUGS-55629: get go mod tidy to pass #15024
• OCPBUGS-53428: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15001
• OCPBUGS-55375: add data-quickstart-id to quick create button #14998
• OCPBUGS-54157: Sample segment sessions #14990
• OCPBUGS-49291: Improving the DevExp for passing the CSP directives to console per flag + Make use of connect-src and object-src directives #14701
• OCPBUGS-53320: Add DEVCONSOLE_PROXY flag #15006
• OCPBUGS-55633: fix bug where Critical Alerts section cannot be collapsed #15015
• OCPBUGS-55414: fix runtime error on MachineConfigPools page #15007
• OCPBUGS-55448: Fix +Add details switch animation regression #15011
• OCPBUGS-55454: Disable web terminal and Shipwright e2e #15012
• OCPBUGS-53443: Check for ACM when hiding switcher #14988
• ODC-7727: Change favourites button defaultName #14996
• CONSOLE-4492: fix: do not render if listpageheader has no props #14995
• OCPBUGS-55252: fix bug where tab underline is missing #14991
• NO-JIRA: Deprecate react-router-dom-v5-compat #14994
• OCPBUGS-54670: Use PF component group for PageHeading #14965
• OCPBUGS-54833: fix spacing of secondary action in notification drawer… #14980
• OCPBUGS-54976: Mark withHandlePromise HOC as Deprecated #14969
• OCPBUGS-54656: Add space between quick start action list items #14940
• OCPBUGS-54601: fix bug where operator appears twice #14983
• OCPBUGS-45514: Add account email to the telemetry #14978
• CONSOLE-4464: Update PatternFly to latest #14979
• OCPBUGS-54657: Expose OdcBaseNode through the dynamic plugin SDK #14955
• OCPBUGS-55047: align spacing after breadrcumb with PatternFly #14972
• OCPBUGS-55018: fix web terminal initialize form style #14974
• CONSOLE-4505: Update i18next package #14881
• OCPBUGS-55084: fix bug where highlighting items from quickstart does … #14976
• CONSOLE-4542: Remove base dl dd dt CSS #14966
• CONSOLE-4541: deprecate VirtualizedTable and ListPageFilter and useLi… #14967
• CONSOLE-4524: Allow Deletion of Identity Providers (IDPs) via OpenShift Web Console #14949
• OCPBUGS-43792: Load extensions in same order as plugins listed in SERVER_FLAGS global #14902
• ODC-7781: Running knative e2e tests from admin view #14952
• OCPBUGS-54669: Enable project selector dropdown on Helm form in admin perspective #14956
• OCPBUGS-54963: Fix visual regression with knative getting started card #14968
• OCPBUGS-54536: Use router link for OLM CSV empty state #14929
• CONSOLE-4492: Use helpText for help text #14964
• OCPBUGS-54878: Align left/right margins of add card items #14963
• CONSOLE-4542: Convert dl, dd, dt to PF DescriptionList #14947
• CONSOLE-4538: Add error reporting link to ErrorBoundary modal #14958
• OCPEDGE-1614: hack: allow DualReplica in control plane topology validation #14934
• OCPBUGS-36658: Fetching taskRuns in PLR details page using PLR UID also #14921
• CONSOLE-4507: Clean up catalog view #14954
• CONSOLE-4520: Further PatternFly 6 bug fixes and cleanup #14945
• CONSOLE-4464: Update PatternFly to 6.2.0 #14953
• OCPBUGS-49870: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14887
• Full changelog

console-operator

• OCPBUGS-55698: Lift FeatureGate by bumping openshift/api #984
• ODC-7780: update quick starts to work in the converged perspective #977
• OCPBUGS-55082: Revert “Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads” #979
• CONSOLE-4523: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #976
• NETOBSERV-2023: Implement a quickstart for netobserv operator #955
• CONSOLE-4481: Add additional CSP test #975
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• OCPBUGS-37212: Upstream sync 15042025 #183
• Full changelog

csi-driver-nfs

• NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #153
• Full changelog

csi-external-resizer

• STOR-2251: Rebase external-resizer to upstream v1.13.2 for OCP 4.19 #169
• OCPBUGS-45706: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.19 #167
• Full changelog

etcd, installer-etcd-artifacts

• ETCD-726: Rebase etcd 3.5.21 openshift 4.19 #324
• Full changelog

gcp-cluster-api-controllers

• ART-12521: update go mod dependency for konflux #240
• Full changelog

gcp-machine-controllers

• OCPBUGS-46387: allow instances with unknown quotas to be created #114
• Full changelog

gcp-pd-csi-driver

• OCPBUGS-39258: UPSTREAM: 2021: Add Attach Limit for Hyperdisk + Gen4 VMs #77
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-53451: enable VolumeAttributesClass #145
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-54208: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2277
• OCPBUGS-54318: UPSTREAM: 131236: RWX tests should create RWX volumes #2279
• OCPBUGS-55945: Bump main 1.32.4 #2292
• TRT-2103: Revert “NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2291
• NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2287
• OCPBUGS-55632: Fix node expansion on older kubelets #2282
• TRT-2066: Use OTE generated labels for skips in test-kubernetes-e2e.sh #2255
• OCPBUGS-37706: allow TLS1.3 or modern profile to be specified #2135
• OCPBUGS-53249: skip UDP LoadBalancer on external #2247
• Full changelog

hypershift

• NO-JIRA: Increase the content width in the upstream docs #6147
• NO-JIRA: cpov2: fix structured authentication configuration serialization #6135
• CNTRLPLANE-269: Remove legacy machine approver and ign server reconciliation code #6133
• OCPBUGS-55913: Fix Job status returning empty reason and message #6134
• CNTRLPLANE-269: Remove DeploymentConfig usage from cpov2 #5724
• OCPBUGS-37323: MarkPersistentFlagRequired does not work since CLI refactoring #5649
• NO-JIRA: Fix minor issues with Azure HC creation doc #6128
• OCPBUGS-55504: Add postStart hook to kube-apiserver container #6074
• CNTRLPLANE-709: Add ability to limit platform specific resources managed by HostedCluster #6039
• CNTRLPLANE-261: Enable pprof in hosted control plane etcd #6003
• CNTRLPLANE-334: Update KASv2 structured authentication configuration #6119
• CNTRLPLANE-334: Update KAS structured authentication configuration generation logic to use new uid and extra field #6073
• OCPBUGS-54483: Add support for registry root entry only in the IDMS/ICSP #6100
• OCPBUGS-55357: Only build main branch components #6078
• CNTRLPLANE-265: Enable staticcheck linter in golangci-lint #5836
• CNTRLPLANE-740: Add DR for HCP using OADP and Hypershift plugin #6077
• NO-JIRA: bump HO supported version to 4.20 #6006
• CNTRLPLANE-798: ho: changes to ref’ed resources triggers HC reconciliation #6103
• HYPBLD-642: konflux build hcp cli #6072
• OCPBUGS-53206: Use a CPO image label to determine whether to run expired cert remediation #5943
• OCPBUGS-55433: Add control plane pull secret reference to control-plane-operator SA #6092
• OCPBUGS-44439: Add proxy trustedCA to ignition config #6053
• OCPBUGS-53082: Skip AWS cleanup check for 4.14 and earlier #6069
• HOSTEDCP-2254: Fix Karpenter deployment restarting #6009
• NO-JIRA: Add e2e flags to test Azure KMS #6076
• CNTRLPLANE-111: Support KMSv2 encryption encryption for ARO HCP, with MIv3 #6048
• NO-JIRA: Azure AKS Docs Updated to set Secrets in Key Vault #5754
• CNTRLPLANE-713: Pass featuregates for ocm and oapi in cpov2 #6071
• HOSTEDCP-2059: Support capacity reservation in NodePool API #5972
• NO-JIRA: Fix hostedcluster_controller unit test for featuregate job #6067
• CNTRLPLANE-713: Pass featuregates to ocm and oapi #6068
• CNTRLPLANE-713: Use feature flags from release payload for control plane workloads #6060
• CNTRLPLANE-711: transition admissionregistration from v1beta1 to v1 #6005
• AUTOSCALE-127: fix e2e autonode drift test #6062
• CNTRLPLANE-112: Enable MIv3 for Ingress #6058
• NO-JIRA: Remove kas from EnsureNoCrashingPods exceptions #5946
• OCPBUGS-54863: Add annotation to configure KAS goaway-chance #6019
• AUTOSCALE-193: Use payload karpenter image if present, otherwise don’t #6029
• NO-JIRA: Red Hat Konflux update hypershift-release-mce-29 #6056
• NO-JIRA: Add cpo container sync to verify job #6051
• OCPBUGS-54867: Use 135 for terminationGracePeriodSeconds for v2 KAS #6021
• OCPBUGS-54810: Don’t check if olm images exist if guest cluster #5982
• OCPBUGS-54819: Update OpenShift apiserver liveness and readiness probe endpoints to … #6016
• NO-JIRA: Add README.md to docs folder #6050
• NO-JIRA: version check csi-snapshot-webhook for EnsureSATokenNotMountedUnlessNecessary #6043
• OCPBUGS-54225: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #5897
• NO-JIRA: Improve API docs for configuration.Image #6034
• Revert “Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure”” #6012
• OCPBUGS-54533: Update DNS names for ovn-kubernetes cp metrics #6007
• OCPBUGS-54763: openstack/cli: only set port security when specified #6036
• NO-JIRA: Bump o/api version to 4.19 tag #6035
• OCPBUGS-54916: Set Azure KMS Configuration to v2 #6027
• OCPBUGS-54309: Drop isIP CEL check #6032
• AUTOSCALE-127: allow karpenter-provider-aws image to be overriden by hcp annotation #5999
• CNTRLPLANE-217: Add E2E to KubeAPIServerDNSName API to cover KAS custom certificate #5968
• STOR-2281: Remove snapshot webhook #6004
• OCPBUGS-54763: openstack: set port security only if explicitly specified #6015
• OCPBUGS-52661: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #5798
• NO-JIRA: Bump CAPZ to v1.19.2 #6018
• NO-JIRA: update konflux references #5987
• OCPBUGS-48540: Mcd proxy #6011
• Full changelog

ibm-vpc-block-csi-driver

• NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #80
• OCPBUGS-53912: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #81
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-55038: [IBM VPC] set offlineExpansion to false in e2e test manifest #143
• Full changelog

insights-operator

• feat: add gatheringDisabled condition (#1078) #1078
• CCXDEV-15083: Move the Insights runtime extractor feature to GA (#1081) #1081
• feat: remove the upgradeable condition (#1079) #1079
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• Enable FIPS #41
• Full changelog

installer-altinfra

• OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
• no-jira: fixes to get shellcheck to pass #9669
• OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
• OCPEDGE-1707: Add Disable Certificate Verification API #9640
• no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
• OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
• CORS-3633: Fail the install when there are expired certs #9225
• CORS-3960: Remove Terraform from Dockerfiles #9673
• OCPBUGS-55492: sort zone slices extracted from map of byo subnets #9662
• no-jira: IBI nmstate unit test fix #9680
• OCPBUGS-55324: fix nil field access when describing security groups #9676
• OCPBUGS-52203: Find GCP KMS keys #9597
• CORS-3855: Remove ARO build flag from installer #9124
• OCPBUGS-54902: Custom-DNS: Update Kubeconfig and Infra CR based on private or public cluster #9656
• NO-JIRA: Update SCOS 4.19 bootimage metadata to 9.0.20250411-0 #9657
• CORS-3870: validate duplicate AZs if no subnet roles at all or only for subnets of the same role #9663
• CORS-3864, CORS-3959: CAPI AzureStack Support, Take II #9666
• OCPEDGE-1749: [TNF] Updated bare-metal init sequence to detach control-plane nodes in Two Node OpenShift. #9661
• Revert “Merge pull request #9645 from patrickdillon/azurestack-mark-iii” #9665
• CORS-3864, CORS-3959: CAPI-based AzureStack Installs #9645
• CORS-3870: add validations for subnets field with AWS API #9599
• CORS-3871, CORS-3872, CORS-3873: place the cluster components on the assigned byo subnets if any #9633
• CORS-3278: IBMCloud: Remove IBM Cloud TF provider #9649
• OCPBUGS-54606: convert OVNKubernetes networkType to correct format #9653
• CORS-3936: Add support for public-only networking #9544
• CORS-3278: IBMCloud: Add DestroyBootstrap for leftover CAPI resources #9636
• CORS-3854: Enable option to set boot diagnostics #9125
• CORS-3278: Switch IBMCloud to CAPI #9652
• CORS-3867: fix CRD descriptor to mention required BootstrapNode role #9655
• CORS-3886: azure: Set use managed identity to false #9648
• OCPBUGS-54319: oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x #9608
• AGENT-1159: agent docs update #9627
• Full changelog

ironic

• METAL-1264: Update to latest upstream content #655
• OCPBUGS-55381: Extract files one-by-one in logwatch #654
• METAL-1327: Update pkgs ocp419 take2 #651
• Full changelog

ironic-agent

• OCPBUGS-55350: collect the entire journal from the host #184
• OCPBUGS-55315: Delay determining the hostname to put into ignition #182
• Full changelog

keepalived-ipfailover

• OCPBUGS-48318: Change default value for OPENSHIFT_HA_VRRP_ID_OFFSET #206
• Full changelog

kubevirt-csi-driver

• NO-JIRA: Add awels as approver #59
• Full changelog

machine-api-operator

• OCPBUGS-55461: Changed machineset tests to be serial #1365
• OCPBUGS-55720: fix: use patch for machine/machineset status #1362
• OCPBUGS-55461: Fixes machineset paused condition nil pointer #1361
• OCPBUGS-55461: Revert “Added skip for when config not multi nic” #1363
• OCPBUGS-55424: Added skip for when config not multi nic #1358
• OCPBUGS-55461: Fix updateMachineSetStatus nil pointer #1360
• Revert “SPLAT-2180: Added conformance label” #1359
• OCPBUGS-55417: Resync CRDs #1357
• OCPBUGS-55083: Updates GCP CredentialsRequest #1353
• SPLAT-2180: Added conformance label #1354
• OCPBUGS-55025: fix: nodelink use patch to apply machine’s nodeRef #1352
• Full changelog

machine-config-operator

• MCO-1654: Add new runbook for KubeletHealthState to alert #5042
• OCPBUGS-49728: Adapt MCC to use LayeredNodeState and remove LayeredPoolState #4841
• OCPBUGS-54697: error from generateAndValidateRenderedMachineConfig function can be misleading #5033
• OCPNODE-3173: Disable OCI artifact mount by default. #5016
• OCPBUGS-55597: OWNERS: update owners file with current MCO team members #5024
• OCPBUGS-55450: Only populate Status.PinnedImageSets.CurrentGeneration on valid generation value #5023
• OCPBUGS-55327: Bugfix Ignition compression merge #5006
• OCPBUGS-55262: Use auto=start only for IPsec out connections #5017
• OCPBUGS-55713: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5030
• OCPBUGS-52940: AWS Custom-DNS: Update services that run on control plane nodes #4939
• OCPBUGS-41485: Update MCD Log Output to Clarify No Configuration Change #5019
• Revert “NO-ISSUE: debug podman on PIS” #5013
• OCPBUGS-44757: decrease leases for kubelet on azure #5010
• NO-ISSUE: debug podman on PIS #5003
• MCO-1635: Add new runbook for HighOverallControlPlaneMemory to alert #5005
• OCPBUGS-55388: MSBIC should not update windows machinesets #5009
• MCO-1645: API & client-go bumps for MCN V1 API updates #5011
• MCO-1519: Adapt MCO code to use V1 MCN API #4992
• OCPBUGS-50905: Leverage shared node.env for both AWS providerID and hostname units #4999
• OCPBUGS-51273: Don’t crashloop for HAProxy init container #4963
• NO-JIRA: Update Envtest assets to 1.32.1 #5002
• OCPBUGS-44732: Support for br-ex with DHCP and static DNS #4724
• OCPBUGS-55043: Fix PollUntilContextTimeout in syncRenderConfig #4987
• OCPBUGS-55231: MCO should fall back to us-east-1 for AWS bootimages if no region specific-AMI exists #4995
• OCPBUGS-49675, OCPBUGS-55039: In OCL. Usbguard service fails when we install the usbguard extension: IPsec tmpfile.d directives missing when enabling IPsec in OCL #4986
• OCPBUGS-54592: Only populate LastFailedGeneration & LastFailedGenerationError on PIS failure #4983
• OCPBUGS-55234: kubelet: readonly mounts for criometricsproxy #4997
• OCPBUGS-48469: Fix CoreDNS static pod bring-up on cloud platforms #4830
• MCO-1584: Opt-in boot image updates for AWS & GCP by default #4902
• MCO-1615: MCN status update degraded #4977
• MCO-1509: Enable OCL for disconnected workflow #4971
• MCO-1558, OCPBUGS-34745: Add support to rebuild and prune OCL images #4975
• OCPEDGE-1690: add dual-replica templates #4938
• OCPBUGS-53408: wait for build and ensure OS image is actually new #4924
• OCPBUGS-54872: Make sure generation fields in MCN do not have a value of 0 #4982
• MCO-1544: Update MCO code to use MCN’s updated v1alpha1 API #4962
• Full changelog

machine-image-customization-controller

• OCPBUGS-44031: Verify tls while pulling down IPA #131
• Full changelog

machine-os-images

• OCPBUGS-55810: Dummy change to force a rebuild for 4.20 #62
• Full changelog

metallb-frr

• OCPBUGS-55284: OpenShift Only: TEMPORARY: pin FRR version to known working rpm #87
• Syncmetallb 04042025 #81
• Full changelog

monitoring-plugin

• OU-794: fix: update monitoring and virtualization routes to avoid overriding console routes #410
• OU-774: bound table scroll and column alignment #402
• RHINENG-17675: feat: add group id to url params #403
• RHINENG-10537: fixed broken delete chip group for incidents filters #401
• OU-197: feature: upgrade react router to v5 compat #400
• OU-745: Check for CSRF change on each fetch cycle #404
• NO-JIRA: fix(incidents): performance improvements for incidents page #398
• OCPBUGS-48533: Reset variables when making orthongonal selections #394
• OU-765: Don’t break if cluster doesn’t exist #399
• OU-767: Allow filtering by cluster name #396
• OU-750: update the metrics typeahead to look pf-6 native #395
• OCPBUGS-54292: Show column headings on metrics page #397
• OU-760: Requests UX changes post PF-6 #390
• OU-723, OU-729: Add label typeahead #392
• OU-757: Show cluster column heading on acm silences page #393
• OU-703: fix states filter in aggregated row #389
• OU-752: Clear out old queries when loading queries from URL #391
• RHINENG-16773: fixed silence alerts data form not filled with alert details #384
• OU-702: re-add csv button for aggregated alert list #383
• OU-659: PF-6 Migration #380
• OU-678: fix: allow to set refresh interval to off #379
• Full changelog

multus-cni, multus-cni-microshift

• : OCPBUGS-55091: CNI subdirectory chaining for composable CNI chaining #268
• Full changelog

must-gather

• MCO-1648: MCO-1649: Add machineconfignodes and pinnedimagesets to must-gather #487
• Full changelog

network-interface-bond-cni

• OCPBUGS-54229: Upstream sync 07-05-2025 #67
• NO-JIRA: Add ci-operator file #68
• Full changelog

network-tools

• NO-JIRA: Fix github epic ID and username matching #142
• NO-JIRA: Fix JIRA queries #141
• Full changelog

networking-console-plugin

• CNV-57493: Validate if the namespace is configured for a primary UDN #237
• CNV-60065: fix cudn input name #233
• OCPBUGS-49395: adding translations #236
• Upload i18n translations scripts #229
• CNV-59853: remove co-m-table-grid and dropdown-kebab-pf classes #231
• Full changelog

oauth-server

• OSASINFRA-3534: Bump Gophercloud to v2 #170
• CONSOLE-4434, OCPBUGS-43610: update login templates to use PF6 and add validation #169
• Full changelog

oc-mirror

• OCPBUGS-54587: v2: bump containers/common dep to 0.63.0 (#1138) #1138
• CLID-182: Add spinner to release collector mirror to disk or mirror to mirror (#1085) #1085
• no-jira: Disable go workspace and build v2 as a binary (#1078) #1078
• OCPBUGS-55100: implements registries.d file as specified in containers/image docs (#1131) #1131
• OCPBUGS-54220: v2/imgbuilder: use –authfile when set (#1129) #1129
• OCPBUGS-54891: Fix mirroring images with tag&digest in charts (#1133) #1133
• OCPBUGS-54653: delete: continue on errors (#1127) #1127
• OCPBUGS-50617: oc-mirror does not create signature files (#1073) #1073
• CLID-246, CLID-307, CLID-308, CLID-309, CLID-310, CLID-347: feat/adds signatures to the archive (#1119) #1119
• CLID-321: Add annotations to resources generated by oc-mirror v2 (#1086) #1086
• Full changelog

olm-catalogd

• NO-ISSUE: Synchronize From Upstream Repositories #336
• NO-ISSUE: Synchronize From Upstream Repositories #333
• NO-ISSUE: Synchronize from upstream #331
• NO-ISSUE: Synchronize From Upstream Repositories #322
• NO-ISSUE: Synchronize From Upstream Repositories #315
• NO-ISSUE: Synchronize From Upstream Repositories #312
• NO-ISSUE: Synchronize From Upstream Repositories #309
• NO-ISSUE: Synchronize From Upstream Repositories #308
• NO-ISSUE: Synchronize From Upstream Repositories #306
• NO-ISSUE: Synchronize From Upstream Repositories #305
• NO-ISSUE: Synchronize From Upstream Repositories #303
• NO-ISSUE: Synchronize From Upstream Repositories #300
• NO-ISSUE: Synchronize From Upstream Repositories #299
• NO-ISSUE: Synchronize From Upstream Repositories #298
• NO-ISSUE: Synchronize From Upstream Repositories through PR1871 #294
• OCPBUGS-23055: Synchronize From Upstream Repositories through PR1811 #290
• NO-ISSUE: Synchronize From Upstream Repositories #285
• NO-ISSUE: Synchronize From Upstream Repositories #282
• NO-ISSUE: Synchronize From Upstream Repositories #279
• NO-ISSUE: Synchronize From Upstream Repositories #278
• NO-ISSUE: Synchronize From Upstream Repositories #277
• NO-ISSUE: Synchronize From Upstream Repositories #276
• OPRUN-3722: Synchronize From Upstream Repositories #273
• NO-ISSUE: Synchronize From Upstream Repositories #271
• NO-ISSUE: Synchronize From Upstream Repositories #270
• NO-ISSUE: Synchronize From Upstream Repositories #266
• NO-ISSUE: Manual Synchronize from upstream #224
• NO-ISSUE: (Manual) Synchronize From Upstream Repositories #216
• NO-ISSUE: (Manual) Synchronize From Upstream Repositories #214
• NO-ISSUE: Synchronize From Upstream Repositories #212
• NO-ISSUE: Synchronize From Upstream Repositories #210
• NO-ISSUE: Synchronize From Upstream Repositories #209
• NO-ISSUE: Synchronize From Upstream Repositories #207
• NO-ISSUE: Synchronize From Upstream Repositories #205
• NO-ISSUE: Synchronize From Upstream Repositories #204
• NO-ISSUE: Synchronize From Upstream Repositories #203
• NO-ISSUE: Synchronize From Upstream Repositories #202
• NO-ISSUE: Synchronize From Upstream Repositories #199
• NO-ISSUE: Synchronize From Upstream Repositories #195
• NO-ISSUE: Synchronize From Upstream Repositories #193
• NO-ISSUE: Synchronize From Upstream Repositories #189
• NO-ISSUE: Synchronize From Upstream Repositories #190
• NO-ISSUE: Synchronize From Upstream Repositories #188
• NO-ISSUE: Synchronize From Upstream Repositories #187
• NO-ISSUE: Synchronize From Upstream Repositories #184
• NO-ISSUE: Synchronize From Upstream Repositories #183
• NO-ISSUE: Synchronize From Upstream Repositories #182
• NO-ISSUE: Synchronize From Upstream Repositories #181
• NO-ISSUE: Synchronize From Upstream Repositories #179
• NO-ISSUE: Synchronize From Upstream Repositories #178
• NO-ISSUE: Synchronize From Upstream Repositories #177
• NO-ISSUE: Synchronize From Upstream Repositories #176
• NO-ISSUE: Synchronize From Upstream Repositories #175
• NO-ISSUE: Synchronize From Upstream Repositories #174
• NO-ISSUE: Synchronize From Upstream Repositories #173
• NO-ISSUE: Synchronize From Upstream Repositories #172
• NO-ISSUE: Synchronize From Upstream Repositories #171
• NO-ISSUE: Synchronize From Upstream Repositories #170
• NO-ISSUE: Synchronize From Upstream Repositories #169
• NO-ISSUE: Synchronize From Upstream Repositories #168
• NO-ISSUE: Synchronize From Upstream Repositories #167
• NO-ISSUE: Synchronize From Upstream Repositories #165
• NO-ISSUE: Synchronize From Upstream Repositories #164
• NO-ISSUE: Synchronize From Upstream Repositories #163
• NO-ISSUE: Synchronize From Upstream Repositories #162
• NO-ISSUE: Synchronize From Upstream Repositories #161
• NO-ISSUE: Synchronize From Upstream Repositories #160
• NO-ISSUE: Synchronize From Upstream Repositories #158
• NO-ISSUE: Synchronize From Upstream Repositories #153
• NO-ISSUE: Synchronize From Upstream Repositories #150
• NO-ISSUE: Synchronize From Upstream Repositories #149
• NO-ISSUE: Synchronize From Upstream Repositories #147
• NO-ISSUE: Synchronize From Upstream Repositories #145
• NO-ISSUE: Synchronize From Upstream Repositories #144
• NO-ISSUE: Synchronize From Upstream Repositories #143
• NO-ISSUE: Synchronize From Upstream Repositories #141
• NO-ISSUE: Synchronize From Upstream Repositories #140
• NO-ISSUE: Synchronize From Upstream Repositories #139
• NO-ISSUE: Synchronize From Upstream Repositories #138
• NO-ISSUE: Synchronize From Upstream Repositories #137
• NO-ISSUE: Synchronize From Upstream Repositories #135
• NO-ISSUE: Synchronize From Upstream Repositories #133
• NO-ISSUE: Synchronize From Upstream Repositories #132
• NO-ISSUE: Synchronize From Upstream Repositories #131
• NO-ISSUE: Synchronize From Upstream Repositories #130
• NO-ISSUE: Synchronize From Upstream Repositories #129
• NO-ISSUE: Synchronize From Upstream Repositories #128
• NO-ISSUE: Synchronize From Upstream Repositories #127
• NO-ISSUE: Synchronize From Upstream Repositories #126
• NO-ISSUE: Synchronize From Upstream Repositories #125
• NO-ISSUE: Synchronize From Upstream Repositories #124
• NO-ISSUE: Synchronize From Upstream Repositories #123
• NO-ISSUE: Synchronize From Upstream Repositories #121
• NO-ISSUE: Synchronize From Upstream Repositories #119
• NO-ISSUE: Synchronize From Upstream Repositories #118
• NO-ISSUE: Synchronize From Upstream Repositories #117
• NO-ISSUE: Synchronize From Upstream Repositories #115
• OCPBUGS-36471: Synchronize From Upstream Repositories #114
• NO-ISSUE: Synchronize From Upstream Repositories #111
• NO-ISSUE: Synchronize From Upstream Repositories #110
• NO-ISSUE: Synchronize From Upstream Repositories #109
• NO-ISSUE: Synchronize From Upstream Repositories #108
• NO-ISSUE: Synchronize From Upstream Repositories #107
• NO-ISSUE: Synchronize From Upstream Repositories #106
• NO-ISSUE: Synchronize From Upstream Repositories #104
• NO-ISSUE: Synchronize From Upstream Repositories #103
• NO-ISSUE: Synchronize From Upstream Repositories #102
• NO-ISSUE: Synchronize From Upstream Repositories #101
• NO-ISSUE: Synchronize From Upstream Repositories #99
• OCPBUGS-31459: Synchronize From Upstream Repositories #97
• OPRUN-3268: Add pointer to tooling README for downstreaming info #94
• OCPBUGS-31285: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 #89
• NO-ISSUE: Synchronize From Upstream Repositories #92
• NO-ISSUE: UPSTREAM: <carry>: update owners #91
• NO-ISSUE: Synchronize From Upstream Repositories #90
• NO-ISSUE: Synchronize From Upstream Repositories #88
• OCPBUGS-31285: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.16 #86
• NO-ISSUE: Synchronize From Upstream Repositories #87
• NO-ISSUE: Synchronize From Upstream Repositories #84
• NO-ISSUE: Synchronize From Upstream Repositories #83
• NO-ISSUE: Synchronize From Upstream Repositories #82
• NO-ISSUE: Synchronize From Upstream Repositories #81
• NO-ISSUE: Synchronize From Upstream Repositories #80
• NO-ISSUE: Synchronize From Upstream Repositories #79
• NO-ISSUE: Synchronize From Upstream Repositories #78
• NO-ISSUE: Synchronize From Upstream Repositories #77
• NO-ISSUE: Synchronize From Upstream Repositories #76
• NO-ISSUE: Synchronize From Upstream Repositories #75
• NO-ISSUE: Synchronize From Upstream Repositories #74
• NO-ISSUE: Synchronize From Upstream Repositories #73
• NO-ISSUE: Synchronize From Upstream Repositories #72
• NO-ISSUE: Synchronize From Upstream Repositories #70
• NO-ISSUE: Synchronize From Upstream Repositories #67
• NO-ISSUE: Synchronize From Upstream Repositories #66
• NO-ISSUE: Synchronize From Upstream Repositories #65
• NO-ISSUE: Synchronize From Upstream Repositories #64
• NO-ISSUE: Synchronize From Upstream Repositories #63
• NO-ISSUE: Synchronize From Upstream Repositories #62
• NO-ISSUE: Synchronize From Upstream Repositories #61
• NO-ISSUE: Synchronize From Upstream Repositories #60
• NO-ISSUE: Synchronize From Upstream Repositories #59
• OCPBUGS-24795: Updating ose-olm-operator-controller-container image to be consistent with ART #51
• NO-ISSUE: Synchronize From Upstream Repositories #56
• NO-ISSUE: Synchronize From Upstream Repositories #55
• NO-ISSUE: Synchronize From Upstream Repositories #54
• NO-ISSUE: Synchronize From Upstream Repositories #53
• NO-ISSUE: Synchronize From Upstream Repositories #50
• NO-ISSUE: Synchronize From Upstream Repositories #49
• NO-ISSUE: Synchronize From Upstream Repositories #48
• NO-ISSUE: Synchronize From Upstream Repositories #47
• NO-ISSUE: Synchronize From Upstream Repositories #46
• NO-ISSUE: Synchronize From Upstream Repositories #41
• NO-ISSUE: UPSTREAM: <drop>: Remove GH activities #44
• OPRUN-3081: UPSTREAM: <carry>: Drop commitchecker #37
• OPRUN-3075: Update to Upstream v0.7.0 #31
• OCPBUGS-20505: Bump golang.org/x/net to v0.17.0 #28
• OCPBUGS-19096: UPSTREAM: <carry>: Updating ose-olm-operator-controller images to be consistent with ART #27
• Update to upstream v0.3.0 #25
• Add commitchecker #24
• UPSTREAM: <carry>: add manifests to image #23
• UPSTREAM: <carry>: add namespace management annotation #22
• UPSTREAM: 290: Remove Resource Limits (#290) #21
• UPSTREAM: <carry>: add scheduling preference/priorityClass annotations #20
• Update main to upstream commit 83d0403 #19
• UPSTREAM: <carry>: add USER to openshift dockerfile #18
• Updating ose-olm-operator-controller images to be consistent with ART #17
• UPSTREAM: <carry>: use image placeholders #16
• Update to upstream main commit 98b6a9e #15
• UPSTREAM: <carry>: conditionally rename manifests #13
• UPSTREAM: <carry>: align dockerfile and manifests for bin target #14
• UPSTREAM: <carry>: precision target manifest verification #12
• Update to upstream main commit 3d30ad0 #5
• UPSTREAM: <carry>: ci-operator #1
• Full changelog

olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #336
• NO-ISSUE: Synchronize From Upstream Repositories #333
• NO-ISSUE: Synchronize from upstream #331
• NO-ISSUE: Synchronize From Upstream Repositories #322
• NO-ISSUE: Synchronize From Upstream Repositories #315
• NO-ISSUE: Synchronize From Upstream Repositories #312
• NO-ISSUE: Synchronize From Upstream Repositories #309
• NO-ISSUE: Synchronize From Upstream Repositories #308
• Full changelog

openshift-controller-manager

• OCPBUGS-52193: legacy image pull secret rollback controller #380
• OCPBUGS-54695: Empty proxy variables are causing issues during the build #373
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Synchronize From Upstream Repositories #1000
• NO-ISSUE: Synchronize From Upstream Repositories #997
• OCPBUGS-53161, OPRUN-3880: Synchronize From Upstream Repositories #996
• NO-ISSUE: Synchronize From Upstream Repositories #994
• OCPBUGS-52923: pin go-jose/v4@v4.0.5 #993
• OCPBUGS-52923: Synchronize From Upstream Repositories (with a revert) PR 988 with revert #991
• Full changelog

operator-marketplace

• NO-ISSUE: Bump github.com/operator-framework/api from 0.30.0 to 0.31.0 #627
• NO-ISSUE: (CI) - Add check to avoid we upgrade by mistake the go vers… #625
• NO-ISSUE: Add dependabot k8s and go library groupings #626
• NO-ISSUE: Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 #620
• OPRUN-3835: Update to 4.19 community-operators catalog #621
• NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.4 #618
• NO-ISSUE: Bump github.com/onsi/gomega from 1.36.2 to 1.37.0 #617
• OPRUN-3621: Replace 4.18 image references with 4.19 #579
• NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 #616
• Full changelog

ovirt-csi-driver-operator

• NO-JIRA: Readme update #139
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-55824: Revert “OCPBUGS-44285, OCPBUGS-37733, OCPBUGS-55824, OCPBUGS-54375: Downstream Merge 7th May 2025” #2557
• OCPBUGS-37733, OCPBUGS-44285, OCPBUGS-54375, OCPBUGS-55824: Downstream Merge 7th May 2025 #2550
• CORENET-5975: Dockerfile: Unpin OVS and consume the latest from FDP. #2525
• OCPBUGS-51165, OCPBUGS-52278: Downstream Merge 28th april 2025 #2522
• CORENET-5786: Downstream merge 2025-04-25 #2521
• CORENET-5389, OCPBUGS-51040, OCPBUGS-54577: [DownstreamMerge] 2025-04-16 #2516
• CORENET-5721, CORENET-5856, OCPBUGS-51317: [DownstreamMerge] 2025-04-14 #2513
• CORENET-5371: Dockerfile: Bump OVS version to 3.5.0-0.9 #2472
• Full changelog

powervs-cloud-controller-manager

• No-Jira: Update packages in go.mod #85
• Full changelog

prometheus-alertmanager

• NO-JIRA: Bump openshift/prometheus-alertmanager to v0.28.1 #99
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• MON-4207: Bump openshift/prometheus-operator to v0.81.0 #329
• Full changelog

prometheus-node-exporter

• MON-4204: Use slog for accelerators (and version bump) #164
• Full changelog

service-ca-operator

• OCPBUGS-55057: Don’t check featuregates on operand #263
• CNTRLPLANE-339: Issue short lived certificates if ShortCertRotation featuregate is enabled #245
• Full changelog

stream-coreos, stream-coreos-extensions

• NO-JIRA: README.md: add Mermaid diagram #1816
• NO-JIRA: tree: delete base compose files, rework README #1811
• NO-JIRA: Remove kernel-rt-kvm for cs9 and cs10 #1814
• NO-JIRA: tests: fix RHEL 10.1 handling in kernel replace test #1813
• NO-JIRA: Delete obsolete files #1809
• NO-JIRA: Bump fedora-coreos-config #1759
• NO-JIRA: manifest-el9-shared: Update comment for composefs=maybe #1805
• OCPEDGE-1704: [TNF] Added symlink to allow for custom pacemaker resource agent in two-node OCP variant #1796
• NO-JIRA: denylist: update iso mpath denials #1798
• NO-JIRA: c10s.repo: use x86_64 extras-common URL for all arch #1797
• COS-3126: overlay.d: replace 25rhcos-azure-udev #1776
• Full changelog

telemeter

• OCPBUGS-50837: Drop nil metrics during elide transform and capture metric for same #556
• OCPBUGS-50837: Check nil metric in elide label #555
• Full changelog

tests

• TRT-2106: Fix race in MCN test cleanup #29775
• OCPBUGS-55785: bump limits #29778
• Revert “OCPNODE-2315: Add nested container test” #29779
• CNTRLPLANE-371: Update etcd test data for k8s 1.33 release (missing data) #29773
• OCPBUGS-55712: (olmv1 tests) Use exponential backoffs for verifyAPIEndpoints #29756
• OCPBUGS-55945: Bump main 1.32.4 #29772
• CORENET-5875, CORENET-5876, OCPBUGS-55910: Add EgressIP and L2 UDN route advertisements tests #29727
• OCPNODE-2315: Add nested container test #29594
• NO-JIRA: faultyloadbalancer test: pass instead of skip #29753
• OCPBUGS-55902: pkg/monitortestlibrary/allowedalerts: Ignore KubeJobFailingSRE for now #29747
• NO-ISSUE: OLMv1: Preflight: Relax checking of error message #29766
• CNTRLPLANE-371: Update etcd test data for k8s 1.33 release #29699
• OCPBUGS-55785: bump limits #29763
• OCPNODE-2999: Add SigstoreImageVerification e2e tests #29652
• OKD-243: Skip GatewayAPIController tests for OKD #29742
• OCPBUGS-55510: Update node selection in MCN scope test for two-node Openshift #29744
• OCPBUGS-55392: Exclude imagestream import mode toggle tests for SNO #29715
• OCPBUGS-55441: Fix MCN tests for two-node clusters & add more logs to scope tests #29732
• OCPBUGS-54700: aws/edge: prevent test using unschedulable nodes #29655
• TRT-2092: Fix default cert issuer name in RouteExternalCertificate test case #29735
• OCPBUGS-42044: [build] Ensure Git Clone Does Not Run Privileged #29686
• OCPBUGS-54869: bump limits #29722
• OPRUN-3783: OLMv1: Add support for preflight permissions checks (fixed) #29730
• TRT-2092: Fix default cert issuer name for Managed Service cluster (ROSA classic) in RouteExternalCertificate test case #29731
• TRT-2091: Revert #29714 “OPRUN-3782: OLMv1: Add support for preflight permissions checks” #29726
• OPRUN-3782: OLMv1: Add support for preflight permissions checks #29714
• MCO-1646: API & client-go bumps for MCN V1 API updates #29717
• NO ISSUE: Temporarily skip PinnedImageSet tests on SNO & metal #29721
• Revert “TRT-2049: check for any watch requests” #29719
• MCO-1519: Adapt MCN tests to use V1 API #29701
• OPRUN-3692: Olmv1-catalogd tests for API endpoints #29580
• TRT-2049: check for any watch requests #29674
• NO-ISSUE: Automated - Update synthetic test data #29677
• OCPBUGS-55342: Skip Hypershift for MachineConfigNodes and PinnedImages tests #29712
• NO-JIRA: Revert “Add monitortest for elevated etcd disk fsync intervals” #29648
• TRT-2043: look for high latency audit requests #29571
• OCPBUGS-22413: Add myql-80 to fix known image check test for OKD #29659
• OCPBUGS-54869: bump limits #29700
• OCPBUGS-55214: Fix default cert issuer name for HyperShift in RouteExternalCertificate test case #29698
• OCPEDGE-1680: Fix failed arbiter tests on ci run #29691
• OCPBUGS-54906: Remove [Skipped:Disconnected] from the test name to allow metal ipv6 #29685
• OCPBUGS-54651: resources: Add limit exceptions for Istio #29690
• OCPBUGS-55175: Add cleanup to MCN test #29695
• OCPBUGS-55132: gatewayapicontroller: Increase timeouts #29693
• OCPBUGS-54951: MCO-1520: Reintroduction of MachineConfigNode e2e tests #29683
• OCPBUGS-54869: bump limits #29688
• NE-1970: 5 e2e origin tests for gatewayApiController featureGate #29670
• TRT-2082: Revert “MCO-1520: Add MachineConfigNode e2e tests” #29682
• OCPBUGS-54906: Change the test image to registry.k8s.io/e2e-test-images/agnhost #29672
• OCPEDGE-1675: feat: update some tests to account for the arbiter node #29639
• MCO-1636: skip PIS custom pool checks on SNO cluster #29673
• MCO-1520: Add MachineConfigNode e2e tests #29596
• OCPBUGS-54869: bump limits #29679
• OCPBUGS-54661: Route ExternalCertificate: Fix e2e tests for metal platform #29656
• SPLAT-2060: Registered Machine API tests extension #29579
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• OCPBUGS-55020: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #142
• Full changelog

vsphere-csi-driver-operator

• OCPBUGS-53059: Fix panic issues when LegacyConfig is nil #304
• SPLAT-2072: Removed VSphereMultiVCenters feature gate #300
• STOR-2141: add support for maxAllowedBlockVolumesPerNode #287
• Full changelog

vsphere-problem-detector

• OCPBUGS-52964: improve datastore check messages #181
• Full changelog

---

Node Image Info

Package List

• cri-o-1.32.2-1.el9s
• kernel-5.14.0-582.el9
• openshift-kubelet-4.19.0-202505051914.p0.gf6cfe0c.assembly.stream.el9
• systemd-252-53.el9

Full list (569 packages)

• NetworkManager-1:1.53.3-1.el9
• NetworkManager-cloud-setup-1:1.53.3-1.el9
• NetworkManager-libnm-1:1.53.3-1.el9
• NetworkManager-ovs-1:1.53.3-1.el9
• NetworkManager-team-1:1.53.3-1.el9
• NetworkManager-tui-1:1.53.3-1.el9
• WALinuxAgent-udev-2.7.0.6-13.el9
• aardvark-dns-2:1.14.0-3.el9
• acl-2.3.1-4.el9
• adcli-0.9.2-1.el9
• afterburn-5.7.0-1.el9
• afterburn-dracut-5.7.0-1.el9
• alternatives-1.24-2.el9
• attr-2.5.1-3.el9
• audit-3.1.5-7.el9
• audit-libs-3.1.5-7.el9
• authselect-1.2.6-3.el9
• authselect-libs-1.2.6-3.el9
• avahi-libs-0.8-21.el9
• basesystem-11-13.el9
• bash-5.1.8-9.el9
• bash-completion-1:2.11-5.el9
• bind-libs-32:9.16.23-28.el9
• bind-license-32:9.16.23-28.el9
• bind-utils-32:9.16.23-28.el9
• binutils-2.35.2-63.el9
• binutils-gold-2.35.2-63.el9
• bootc-1.1.7-1.el9
• bootupd-0.2.27-3.el9
• bsdtar-3.5.3-4.el9
• bubblewrap-0.4.1-8.el9
• bzip2-1.0.8-10.el9
• bzip2-libs-1.0.8-10.el9
• c-ares-1.19.1-2.el9
• ca-certificates-2024.2.69_v8.0.303-91.4.el9
• centos-gpg-keys-9.0-26.el9
• centos-release-cloud-1-1.el9s
• centos-release-nfv-common-1-5.el9s
• centos-release-virt-common-1-4.el9s
• centos-stream-release-9.0-26.el9
• centos-stream-repos-9.0-26.el9
• checkpolicy-3.6-1.el9
• chrony-4.6.1-1.el9
• cifs-utils-7.2-1.el9
• clevis-21-208.el9
• clevis-dracut-21-208.el9
• clevis-luks-21-208.el9
• clevis-systemd-21-208.el9
• cloud-utils-growpart-0.33-1.el9
• composefs-1.0.8-1.el9
• composefs-libs-1.0.8-1.el9
• conmon-3:2.1.13-1.el9
• conmon-rs-0.6.6-2.el9s
• conntrack-tools-1.4.7-4.el9
• console-login-helper-messages-0.21.3-1.el9
• console-login-helper-messages-issuegen-0.21.3-1.el9
• console-login-helper-messages-profile-0.21.3-1.el9
• container-selinux-4:2.237.0-1.el9
• containernetworking-plugins-1:1.7.1-1.el9
• containers-common-2:1-130.el9
• coreos-installer-0.24.0-1.el9
• coreos-installer-bootinfra-0.24.0-1.el9
• coreutils-8.32-39.el9
• coreutils-common-8.32-39.el9
• cpio-2.13-16.el9
• cracklib-2.9.6-27.el9
• cracklib-dicts-2.9.6-27.el9
• cri-o-1.32.2-1.el9s
• cri-tools-1.32.0-2.el9s
• criu-3.19-1.el9
• criu-libs-3.19-1.el9
• crun-1.21-1.el9
• crypto-policies-20250128-1.git5269e22.el9
• crypto-policies-scripts-20250128-1.git5269e22.el9
• cryptsetup-2.7.2-3.el9
• cryptsetup-libs-2.7.2-3.el9
• curl-7.76.1-31.el9
• cyrus-sasl-gssapi-2.1.27-21.el9
• cyrus-sasl-lib-2.1.27-21.el9
• dbus-1:1.12.20-8.el9
• dbus-broker-28-7.el9
• dbus-common-1:1.12.20-8.el9
• dbus-libs-1:1.12.20-8.el9
• dbus-tools-1:1.12.20-8.el9
• device-mapper-9:1.02.202-6.el9
• device-mapper-event-9:1.02.202-6.el9
• device-mapper-event-libs-9:1.02.202-6.el9
• device-mapper-libs-9:1.02.202-6.el9
• device-mapper-multipath-0.8.7-37.el9
• device-mapper-multipath-libs-0.8.7-37.el9
• device-mapper-persistent-data-1.1.0-1.el9
• diffutils-3.7-12.el9
• dmidecode-1:3.6-1.el9
• dnf-4.14.0-29.el9
• dnf-data-4.14.0-29.el9
• dnsmasq-2.85-16.el9
• dosfstools-4.2-3.el9
• dracut-057-87.git20250311.el9
• dracut-network-057-87.git20250311.el9
• dracut-squash-057-87.git20250311.el9
• e2fsprogs-1.46.5-7.el9
• e2fsprogs-libs-1.46.5-7.el9
• efi-filesystem-6-2.el9
• efibootmgr-16-12.el9
• efivar-libs-38-3.el9
• elfutils-debuginfod-client-0.193-1.el9
• elfutils-default-yama-scope-0.193-1.el9
• elfutils-libelf-0.193-1.el9
• elfutils-libs-0.193-1.el9
• ethtool-2:6.11-1.el9
• expat-2.5.0-4.el9
• file-5.39-16.el9
• file-libs-5.39-16.el9
• filesystem-3.16-5.el9
• findutils-1:4.8.0-7.el9
• firewalld-filesystem-1.3.4-9.el9
• flashrom-1.2-10.el9
• fstrm-0.6.1-3.el9
• fuse-2.9.9-17.el9
• fuse-common-3.10.2-9.el9
• fuse-libs-2.9.9-17.el9
• fuse-overlayfs-1.14-1.el9
• fuse3-3.10.2-9.el9
• fuse3-libs-3.10.2-9.el9
• fwupd-1.9.26-1.el9
• fwupd-plugin-flashrom-1.9.26-1.el9
• gawk-5.1.0-6.el9
• gawk-all-langpacks-5.1.0-6.el9
• gdbm-libs-1:1.23-1.el9
• gdisk-1.0.7-5.el9
• geolite2-city-20191217-6.el9
• geolite2-country-20191217-6.el9
• gettext-0.21-8.el9
• gettext-libs-0.21-8.el9
• git-core-2.47.1-1.el9
• glib2-2.68.4-16.el9
• glibc-2.34-188.el9
• glibc-common-2.34-188.el9
• glibc-gconv-extra-2.34-188.el9
• glibc-minimal-langpack-2.34-188.el9
• glusterfs-6.0-57.4.el9
• glusterfs-client-xlators-6.0-57.4.el9
• glusterfs-fuse-6.0-57.4.el9
• glusterfs-libs-6.0-57.4.el9
• gmp-1:6.2.0-13.el9
• gnupg2-2.3.3-4.el9
• gnutls-3.8.3-6.el9
• gobject-introspection-1.68.0-11.el9
• gpgme-1.15.1-6.el9
• grep-3.6-5.el9
• groff-base-1.22.4-10.el9
• grub2-common-1:2.06-105.el9
• grub2-efi-x64-1:2.06-105.el9
• grub2-pc-1:2.06-105.el9
• grub2-pc-modules-1:2.06-105.el9
• grub2-tools-1:2.06-105.el9
• grub2-tools-minimal-1:2.06-105.el9
• gssproxy-0.8.4-7.el9
• gzip-1.12-1.el9
• hostname-3.23-6.el9
• hwdata-0.348-9.18.el9
• ignition-2.21.0-1.el9
• ignition-grub-2.21.0-1.el9
• ima-evm-utils-1.6.2-1.el9
• info-6.7-15.el9
• inih-49-6.el9
• initscripts-service-10.11.8-4.el9
• ipcalc-1.0.0-5.el9
• iproute-6.11.0-1.el9
• iproute-tc-6.11.0-1.el9
• iptables-libs-1.8.10-11.el9
• iptables-nft-1.8.10-11.el9
• iputils-20210202-11.el9
• irqbalance-2:1.9.4-2.el9
• iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
• iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
• isns-utils-libs-0.101-4.el9
• jansson-2.14-1.el9
• jose-14-1.el9
• jq-1.6-17.el9
• json-c-0.14-11.el9
• json-glib-1.6.6-1.el9
• kbd-2.4.0-11.el9
• kbd-legacy-2.4.0-11.el9
• kbd-misc-2.4.0-11.el9
• kernel-5.14.0-582.el9
• kernel-core-5.14.0-582.el9
• kernel-modules-5.14.0-582.el9
• kernel-modules-core-5.14.0-582.el9
• kernel-modules-extra-5.14.0-582.el9
• kexec-tools-2.0.29-7.el9
• keyutils-1.6.3-1.el9
• keyutils-libs-1.6.3-1.el9
• kmod-28-10.el9
• kmod-libs-28-10.el9
• kpartx-0.8.7-37.el9
• krb5-libs-1.21.1-6.el9
• less-590-5.el9
• libacl-2.3.1-4.el9
• libaio-0.3.111-13.el9
• libarchive-3.5.3-4.el9
• libassuan-2.5.5-3.el9
• libattr-2.5.1-3.el9
• libbasicobjects-0.1.1-53.el9
• libblkid-2.37.4-21.el9
• libbpf-2:1.5.0-1.el9
• libbrotli-1.0.9-7.el9
• libcap-2.48-9.el9
• libcap-ng-0.8.2-7.el9
• libcbor-0.7.0-5.el9
• libcollection-0.7.0-53.el9
• libcom_err-1.46.5-7.el9
• libcomps-0.1.18-1.el9
• libcurl-7.76.1-31.el9
• libdaemon-0.14-23.el9
• libdb-5.3.28-55.el9
• libdhash-0.5.0-53.el9
• libdnf-0.69.0-14.el9
• libdnf-plugin-subscription-manager-1.29.45-1.el9
• libdrm-2.4.123-2.el9
• libeconf-0.4.1-4.el9
• libedit-3.1-38.20210216cvs.el9
• libev-4.33-6.el9
• libevent-2.1.12-8.el9
• libfdisk-2.37.4-21.el9
• libffi-3.4.2-8.el9
• libfido2-1.13.0-2.el9
• libgcc-11.5.0-5.el9
• libgcrypt-1.10.0-11.el9
• libgomp-11.5.0-5.el9
• libgpg-error-1.42-5.el9
• libgudev-237-1.el9
• libgusb-0.3.8-2.el9
• libibverbs-54.0-1.el9
• libicu-67.1-9.el9
• libidn2-2.3.0-7.el9
• libini_config-1.3.1-53.el9
• libipa_hbac-2.9.6-4.el9
• libjcat-0.1.6-3.el9
• libjose-14-1.el9
• libkcapi-1.4.0-2.el9
• libkcapi-hmaccalc-1.4.0-2.el9
• libksba-1.5.1-7.el9
• libldb-4.21.3-3.el9
• libluksmeta-9-12.el9
• libmaxminddb-1.5.2-4.el9
• libmicrohttpd-1:0.9.72-5.el9
• libmnl-1.0.4-16.el9
• libmodulemd-2.13.0-2.el9
• libmount-2.37.4-21.el9
• libmspack-0.10.1-0.7.alpha.el9
• libndp-1.9-1.el9
• libnet-1.2-7.el9
• libnetfilter_conntrack-1.0.9-1.el9
• libnetfilter_cthelper-1.0.0-22.el9
• libnetfilter_cttimeout-1.0.0-19.el9
• libnetfilter_queue-1.0.5-1.el9
• libnfnetlink-1.0.1-23.el9
• libnfsidmap-1:2.5.4-37.el9
• libnftnl-1.2.6-4.el9
• libnghttp2-1.43.0-6.el9
• libnl3-3.11.0-1.el9
• libnl3-cli-3.11.0-1.el9
• libnvme-1.11.1-1.el9
• libpath_utils-0.2.1-53.el9
• libpcap-14:1.10.0-4.el9
• libpciaccess-0.16-7.el9
• libpkgconf-1.7.3-10.el9
• libpsl-0.21.1-5.el9
• libpwquality-1.4.4-8.el9
• libref_array-0.1.5-53.el9
• librepo-1.14.5-2.el9
• libreport-filesystem-2.15.2-6.el9
• libseccomp-2.5.2-2.el9
• libselinux-3.6-3.el9
• libselinux-utils-3.6-3.el9
• libsemanage-3.6-5.el9
• libsepol-3.6-3.el9
• libsigsegv-2.13-4.el9
• libslirp-4.4.0-8.el9
• libsmartcols-2.37.4-21.el9
• libsmbclient-4.21.3-3.el9
• libsolv-0.7.24-3.el9
• libss-1.46.5-7.el9
• libssh-0.10.4-13.el9
• libssh-config-0.10.4-13.el9
• libsss_certmap-2.9.6-4.el9
• libsss_idmap-2.9.6-4.el9
• libsss_nss_idmap-2.9.6-4.el9
• libsss_sudo-2.9.6-4.el9
• libstdc++-11.5.0-5.el9
• libtalloc-2.4.2-1.el9
• libtasn1-4.16.0-9.el9
• libtdb-1.4.12-1.el9
• libteam-1.31-16.el9
• libtevent-0.16.1-1.el9
• libtirpc-1.3.3-9.el9
• libtool-ltdl-2.4.6-46.el9
• libunistring-0.9.10-15.el9
• liburing-2.5-1.el9
• libusbx-1.0.26-1.el9
• libuser-0.63-16.el9
• libutempter-1.2.1-6.el9
• libuuid-2.37.4-21.el9
• libuv-1:1.42.0-2.el9
• libverto-0.3.2-3.el9
• libverto-libev-0.3.2-3.el9
• libwbclient-4.21.3-3.el9
• libxcrypt-4.4.18-3.el9
• libxcrypt-compat-4.4.18-3.el9
• libxml2-2.9.13-9.el9
• libxmlb-0.3.10-1.el9
• libxslt-1.1.34-12.el9
• libyaml-0.2.5-7.el9
• libzstd-1.5.5-1.el9
• linux-firmware-20250314-151.el9
• linux-firmware-whence-20250314-151.el9
• lmdb-libs-0.9.29-3.el9
• logrotate-3.18.0-9.el9
• lsof-4.94.0-3.el9
• lua-libs-5.4.4-4.el9
• luksmeta-9-12.el9
• lvm2-9:2.03.28-6.el9
• lvm2-libs-9:2.03.28-6.el9
• lz4-libs-1.9.3-5.el9
• lzo-2.10-7.el9
• mdadm-4.3-4.el9
• microcode_ctl-4:20250211-1.el9
• mokutil-2:0.7.2-1.el9
• mpfr-4.1.0-7.el9
• nano-5.6.1-7.el9
• ncurses-6.2-10.20210508.el9
• ncurses-base-6.2-10.20210508.el9
• ncurses-libs-6.2-10.20210508.el9
• net-tools-2.0-0.64.20160912git.el9
• netavark-2:1.14.0-1.el9
• nettle-3.10.1-1.el9
• newt-0.52.21-11.el9
• nfs-utils-1:2.5.4-37.el9
• nftables-1:1.0.9-3.el9
• nmap-ncat-3:7.92-3.el9
• nmstate-2.2.44-1.el9
• npth-1.6-8.el9
• nss-altfiles-2.18.1-20.el9
• numactl-libs-2.0.19-1.el9
• nvme-cli-2.11-5.el9
• oniguruma-6.9.6-1.el9.6
• open-vm-tools-12.5.0-1.el9
• openldap-2.6.8-4.el9
• openshift-clients-4.19.0-202505011457.p0.ge468aa6.assembly.stream.el9
• openshift-kubelet-4.19.0-202505051914.p0.gf6cfe0c.assembly.stream.el9
• openssh-8.7p1-45.el9
• openssh-clients-8.7p1-45.el9
• openssh-server-8.7p1-45.el9
• openssl-1:3.5.0-1.el9
• openssl-libs-1:3.5.0-1.el9
• openvswitch-selinux-extra-policy-1.0-36.el9s
• openvswitch3.5-3.5.0-18.el9s
• os-prober-1.77-12.el9
• ose-aws-ecr-image-credential-provider-4.19.0-202505011457.p0.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.19.0-202505011457.p0.g7109d6b.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.19.0-202505011457.p0.gd8d3aeb.assembly.stream.el9
• ostree-2025.2-1.el9
• ostree-grub2-2025.2-1.el9
• ostree-libs-2025.2-1.el9
• p11-kit-0.25.3-3.el9
• p11-kit-trust-0.25.3-3.el9
• pam-1.5.1-23.el9
• passt-0^20250320.g32f6212-1.el9
• passt-selinux-0^20250320.g32f6212-1.el9
• passwd-0.80-12.el9
• pciutils-3.7.0-7.el9
• pciutils-libs-3.7.0-7.el9
• pcre-8.44-4.el9
• pcre2-10.40-6.el9
• pcre2-syntax-10.40-6.el9
• perl-AutoLoader-5.74-481.el9
• perl-B-1.80-481.el9
• perl-Carp-1.50-460.el9
• perl-Class-Struct-0.66-481.el9
• perl-Data-Dumper-2.174-462.el9
• perl-Digest-1.19-4.el9
• perl-Digest-MD5-2.58-4.el9
• perl-Encode-4:3.08-462.el9
• perl-Errno-1.30-481.el9
• perl-Exporter-5.74-461.el9
• perl-Fcntl-1.13-481.el9
• perl-File-Basename-2.85-481.el9
• perl-File-Path-2.18-4.el9
• perl-File-Temp-1:0.231.100-4.el9
• perl-File-stat-1.09-481.el9
• perl-FileHandle-2.03-481.el9
• perl-Getopt-Long-1:2.52-4.el9
• perl-Getopt-Std-1.12-481.el9
• perl-HTTP-Tiny-0.076-462.el9
• perl-IO-1.43-481.el9
• perl-IO-Socket-IP-0.41-5.el9
• perl-IO-Socket-SSL-2.073-2.el9
• perl-IPC-Open3-1.21-481.el9
• perl-MIME-Base64-3.16-4.el9
• perl-Mozilla-CA-20200520-6.el9
• perl-NDBM_File-1.15-481.el9
• perl-Net-SSLeay-1.94-1.el9
• perl-POSIX-1.94-481.el9
• perl-PathTools-3.78-461.el9
• perl-Pod-Escapes-1:1.07-460.el9
• perl-Pod-Perldoc-3.28.01-461.el9
• perl-Pod-Simple-1:3.42-4.el9
• perl-Pod-Usage-4:2.01-4.el9
• perl-Scalar-List-Utils-4:1.56-462.el9
• perl-SelectSaver-1.02-481.el9
• perl-Socket-4:2.031-4.el9
• perl-Storable-1:3.21-460.el9
• perl-Symbol-1.08-481.el9
• perl-Term-ANSIColor-5.01-461.el9
• perl-Term-Cap-1.17-460.el9
• perl-Text-ParseWords-3.30-460.el9
• perl-Text-Tabs+Wrap-2013.0523-460.el9
• perl-Time-Local-2:1.300-7.el9
• perl-URI-5.09-3.el9
• perl-base-2.27-481.el9
• perl-constant-1.33-461.el9
• perl-if-0.60.800-481.el9
• perl-interpreter-4:5.32.1-481.el9
• perl-libnet-3.13-4.el9
• perl-libs-4:5.32.1-481.el9
• perl-mro-1.23-481.el9
• perl-overload-1.31-481.el9
• perl-overloading-0.02-481.el9
• perl-parent-1:0.238-460.el9
• perl-podlators-1:4.14-460.el9
• perl-subs-1.03-481.el9
• perl-vars-1.05-481.el9
• pigz-2.5-4.el9
• pkgconf-1.7.3-10.el9
• pkgconf-m4-1.7.3-10.el9
• pkgconf-pkg-config-1.7.3-10.el9
• podman-5:5.4.0-7.el9
• policycoreutils-3.6-3.el9
• policycoreutils-python-utils-3.6-3.el9
• polkit-0.117-13.el9
• polkit-libs-0.117-13.el9
• polkit-pkla-compat-0.1-21.el9
• popt-1.18-8.el9
• procps-ng-3.3.17-14.el9
• protobuf-c-1.3.3-13.el9
• psmisc-23.4-3.el9
• publicsuffix-list-dafsa-20210518-3.el9
• python-unversioned-command-3.9.21-2.el9
• python3-3.9.21-2.el9
• python3-audit-3.1.5-7.el9
• python3-chardet-4.0.0-5.el9
• python3-cloud-what-1.29.45-1.el9
• python3-dateutil-1:2.8.1-7.el9
• python3-dbus-1.2.18-2.el9
• python3-decorator-4.4.2-6.el9
• python3-distro-1.5.0-7.el9
• python3-dnf-4.14.0-29.el9
• python3-dnf-plugin-versionlock-4.3.0-21.el9
• python3-dnf-plugins-core-4.3.0-21.el9
• python3-gobject-base-3.40.1-6.el9
• python3-gobject-base-noarch-3.40.1-6.el9
• python3-gpg-1.15.1-6.el9
• python3-hawkey-0.69.0-14.el9
• python3-idna-2.10-7.el9.1
• python3-iniparse-0.4-45.el9
• python3-inotify-0.9.6-25.el9
• python3-libcomps-0.1.18-1.el9
• python3-libdnf-0.69.0-14.el9
• python3-librepo-1.14.5-2.el9
• python3-libs-3.9.21-2.el9
• python3-libselinux-3.6-3.el9
• python3-libsemanage-3.6-5.el9
• python3-pip-wheel-21.3.1-1.el9
• python3-policycoreutils-3.6-3.el9
• python3-pysocks-1.7.1-12.el9
• python3-pyyaml-5.4.1-6.el9
• python3-requests-2.25.1-9.el9
• python3-rpm-4.16.1.3-37.el9
• python3-setools-4.4.4-1.el9
• python3-setuptools-53.0.0-14.el9
• python3-setuptools-wheel-53.0.0-14.el9
• python3-six-1.15.0-9.el9
• python3-subscription-manager-rhsm-1.29.45-1.el9
• python3-systemd-234-19.el9
• python3-urllib3-1.26.5-6.el9
• qemu-guest-agent-17:9.1.0-19.el9
• quota-1:4.09-4.el9
• quota-nls-1:4.09-4.el9
• rdma-core-54.0-1.el9
• readline-8.1-4.el9
• rpcbind-1.2.6-7.el9
• rpm-4.16.1.3-37.el9
• rpm-build-libs-4.16.1.3-37.el9
• rpm-libs-4.16.1.3-37.el9
• rpm-ostree-2025.7-2.el9
• rpm-ostree-libs-2025.7-2.el9
• rpm-plugin-selinux-4.16.1.3-37.el9
• rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
• rpm-sign-libs-4.16.1.3-37.el9
• rsync-3.2.5-3.el9
• runc-4:1.3.0-1.el9
• samba-client-libs-4.21.3-3.el9
• samba-common-4.21.3-3.el9
• samba-common-libs-4.21.3-3.el9
• sed-4.8-9.el9
• selinux-policy-38.1.56-1.el9
• selinux-policy-targeted-38.1.56-1.el9
• setup-2.13.7-10.el9
• sg3_utils-1.47-10.el9
• sg3_utils-libs-1.47-10.el9
• shadow-utils-2:4.9-12.el9
• shadow-utils-subid-2:4.9-12.el9
• shared-mime-info-2.1-5.el9
• shim-x64-15-15.el8_2
• skopeo-2:1.18.1-3.el9
• slang-2.3.2-11.el9
• slirp4netns-1.3.2-1.el9
• snappy-1.1.8-8.el9
• socat-1.7.4.1-6.el9
• sqlite-libs-3.34.1-7.el9
• squashfs-tools-4.4-10.git1.el9
• ssh-key-dir-0.1.4-1.el9
• sssd-2.9.6-4.el9
• sssd-ad-2.9.6-4.el9
• sssd-client-2.9.6-4.el9
• sssd-common-2.9.6-4.el9
• sssd-common-pac-2.9.6-4.el9
• sssd-ipa-2.9.6-4.el9
• sssd-krb5-2.9.6-4.el9
• sssd-krb5-common-2.9.6-4.el9
• sssd-ldap-2.9.6-4.el9
• sssd-nfs-idmap-2.9.6-4.el9
• sssd-proxy-2.9.6-4.el9
• stalld-1.19.6-1.el9
• strace-6.12-1.el9
• subscription-manager-1.29.45-1.el9
• subscription-manager-rhsm-certificates-20220623-1.el9
• sudo-1.9.5p2-12.el9
• systemd-252-53.el9
• systemd-journal-remote-252-53.el9
• systemd-libs-252-53.el9
• systemd-pam-252-53.el9
• systemd-rpm-macros-252-53.el9
• systemd-udev-252-53.el9
• tar-2:1.34-7.el9
• teamd-1.31-16.el9
• tmux-3.2a-5.el9
• toolbox-0.1.1-1.el9
• tpm2-tools-5.2-6.el9
• tpm2-tss-3.2.3-1.el9
• tzdata-2025b-1.el9
• unbound-libs-1.16.2-17.el9
• usermode-1.114-6.el9
• userspace-rcu-0.12.1-6.el9
• util-linux-2.37.4-21.el9
• util-linux-core-2.37.4-21.el9
• vim-minimal-2:8.2.2637-21.el9
• virt-what-1.27-1.el9
• which-2.21-29.el9
• xfsprogs-6.4.0-5.el9
• xmlsec1-1.2.29-13.el9
• xmlsec1-openssl-1.2.29-13.el9
• xz-5.2.5-8.el9
• xz-libs-5.2.5-8.el9
• yajl-2.1.0-25.el9
• zlib-1.2.11-41.el9
• zram-generator-0.3.2-7.el9
• zstd-1.5.5-1.el9

Changed:

• NetworkManager 1:1.53.1-1.el9 → 1:1.53.3-1.el9
• NetworkManager-cloud-setup 1:1.53.1-1.el9 → 1:1.53.3-1.el9
• NetworkManager-libnm 1:1.53.1-1.el9 → 1:1.53.3-1.el9
• NetworkManager-ovs 1:1.53.1-1.el9 → 1:1.53.3-1.el9
• NetworkManager-team 1:1.53.1-1.el9 → 1:1.53.3-1.el9
• NetworkManager-tui 1:1.53.1-1.el9 → 1:1.53.3-1.el9
• WALinuxAgent-udev 2.7.0.6-12.el9 → 2.7.0.6-13.el9
• audit 3.1.5-4.el9 → 3.1.5-7.el9
• audit-libs 3.1.5-4.el9 → 3.1.5-7.el9
• bootc 1.1.6-3.el9 → 1.1.7-1.el9
• container-selinux 3:2.236.0-1.el9 → 4:2.237.0-1.el9
• containernetworking-plugins 1:1.6.2-1.el9 → 1:1.7.1-1.el9
• coreos-installer 0.23.0-1.el9 → 0.24.0-1.el9
• coreos-installer-bootinfra 0.23.0-1.el9 → 0.24.0-1.el9
• crun 1.20-2.el9 → 1.21-1.el9
• dnf 4.14.0-25.el9 → 4.14.0-29.el9
• dnf-data 4.14.0-25.el9 → 4.14.0-29.el9
• elfutils-debuginfod-client 0.192-5.el9 → 0.193-1.el9
• elfutils-default-yama-scope 0.192-5.el9 → 0.193-1.el9
• elfutils-libelf 0.192-5.el9 → 0.193-1.el9
• elfutils-libs 0.192-5.el9 → 0.193-1.el9
• glibc 2.34-184.el9 → 2.34-188.el9
• glibc-common 2.34-184.el9 → 2.34-188.el9
• glibc-gconv-extra 2.34-184.el9 → 2.34-188.el9
• glibc-minimal-langpack 2.34-184.el9 → 2.34-188.el9
• grub2-common 1:2.06-94.el9 → 1:2.06-105.el9
• grub2-efi-x64 1:2.06-94.el9 → 1:2.06-105.el9
• grub2-pc 1:2.06-94.el9 → 1:2.06-105.el9
• grub2-pc-modules 1:2.06-94.el9 → 1:2.06-105.el9
• grub2-tools 1:2.06-94.el9 → 1:2.06-105.el9
• grub2-tools-minimal 1:2.06-94.el9 → 1:2.06-105.el9
• kernel 5.14.0-576.el9 → 5.14.0-582.el9
• kernel-core 5.14.0-576.el9 → 5.14.0-582.el9
• kernel-modules 5.14.0-576.el9 → 5.14.0-582.el9
• kernel-modules-core 5.14.0-576.el9 → 5.14.0-582.el9
• kernel-modules-extra 5.14.0-576.el9 → 5.14.0-582.el9
• kexec-tools 2.0.29-6.el9 → 2.0.29-7.el9
• libdnf 0.69.0-13.el9 → 0.69.0-14.el9
• libnfsidmap 1:2.5.4-34.el9 → 1:2.5.4-37.el9
• mokutil 2:0.6.0-4.el9 → 2:0.7.2-1.el9
• nfs-utils 1:2.5.4-34.el9 → 1:2.5.4-37.el9
• nmstate 2.2.43-1.el9 → 2.2.44-1.el9
• openshift-clients 4.19.0-202504052142.p0.g1719de8.assembly.stream.el9 → 4.19.0-202505011457.p0.ge468aa6.assembly.stream.el9
• openshift-kubelet 4.19.0-202504081639.p0.ge15f4f8.assembly.stream.el9 → 4.19.0-202505051914.p0.gf6cfe0c.assembly.stream.el9
• openssl 1:3.2.2-7.el9 → 1:3.5.0-1.el9
• openssl-libs 1:3.2.2-7.el9 → 1:3.5.0-1.el9
• openvswitch3.5 3.5.0-15.el9s → 3.5.0-18.el9s
• ose-aws-ecr-image-credential-provider 4.19.0-202503041513.p0.g425c1c5.assembly.stream.el9 → 4.19.0-202505011457.p0.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.19.0-202503051509.p0.gcc04736.assembly.stream.el9 → 4.19.0-202505011457.p0.g7109d6b.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.19.0-202503041513.p0.gd8d3aeb.assembly.stream.el9 → 4.19.0-202505011457.p0.gd8d3aeb.assembly.stream.el9
• podman 5:5.4.0-5.el9 → 5:5.4.0-7.el9
• policycoreutils 3.6-2.1.el9 → 3.6-3.el9
• policycoreutils-python-utils 3.6-2.1.el9 → 3.6-3.el9
• python3-audit 3.1.5-4.el9 → 3.1.5-7.el9
• python3-dnf 4.14.0-25.el9 → 4.14.0-29.el9
• python3-hawkey 0.69.0-13.el9 → 0.69.0-14.el9
• python3-libdnf 0.69.0-13.el9 → 0.69.0-14.el9
• python3-policycoreutils 3.6-2.1.el9 → 3.6-3.el9
• qemu-guest-agent 17:9.1.0-17.el9 → 17:9.1.0-19.el9
• runc 4:1.2.6-1.el9 → 4:1.3.0-1.el9
• selinux-policy 38.1.53-2.el9 → 38.1.56-1.el9
• selinux-policy-targeted 38.1.53-2.el9 → 38.1.56-1.el9
• sudo 1.9.5p2-10.el9 → 1.9.5p2-12.el9
• systemd 252-51.el9 → 252-53.el9
• systemd-journal-remote 252-51.el9 → 252-53.el9
• systemd-libs 252-51.el9 → 252-53.el9
• systemd-pam 252-51.el9 → 252-53.el9
• systemd-rpm-macros 252-51.el9 → 252-53.el9
• systemd-udev 252-51.el9 → 252-53.el9
• tpm2-tools 5.2-4.el9 → 5.2-6.el9

Added:

• ignition-grub 2.21.0-1.el9

Extensions

Full list (64 packages)

• NetworkManager-libreswan-1.2.24-1.el9.x86_64
• bison-3.7.4-5.el9.x86_64
• capstone-4.0.2-10.el9.x86_64
• cpp-11.5.0-5.el9.x86_64
• daxctl-libs-78-2.el9.x86_64
• edk2-ovmf-20241117-3.el9.noarch
• elfutils-libelf-devel-0.193-1.el9.x86_64
• flex-2.6.4-9.el9.x86_64
• gcc-11.5.0-5.el9.x86_64
• glibc-devel-2.34-188.el9.x86_64
• glibc-headers-2.34-188.el9.x86_64
• ipxe-roms-qemu-20200823-9.git4bd064de.el9.noarch
• kata-containers-2.5.2-1.el9s.x86_64
• kernel-5.14.0-582.el9.x86_64
• kernel-core-5.14.0-582.el9.x86_64
• kernel-devel-5.14.0-582.el9.x86_64
• kernel-headers-5.14.0-582.el9.x86_64
• kernel-modules-5.14.0-582.el9.x86_64
• kernel-modules-extra-5.14.0-582.el9.x86_64
• kernel-rt-core-5.14.0-582.el9.x86_64
• kernel-rt-devel-5.14.0-582.el9.x86_64
• kernel-rt-modules-5.14.0-582.el9.x86_64
• kernel-rt-modules-core-5.14.0-582.el9.x86_64
• kernel-rt-modules-extra-5.14.0-582.el9.x86_64
• krb5-pkinit-1.21.1-6.el9.x86_64
• krb5-workstation-1.21.1-6.el9.x86_64
• ldns-1.7.1-12.el9.x86_64
• libfdt-1.6.0-7.el9.x86_64
• libkadm5-1.21.1-6.el9.x86_64
• libmpc-1.2.1-4.el9.x86_64
• libpmem-1.12.1-1.el9.x86_64
• libpng-2:1.6.37-12.el9.x86_64
• libqb-2.0.8-1.el9.x86_64
• librdmacm-54.0-1.el9.x86_64
• libreswan-4.15-8.el9.x86_64
• libxcrypt-devel-4.4.18-3.el9.x86_64
• libzstd-devel-1.5.5-1.el9.x86_64
• lm_sensors-libs-3.6.0-10.el9.x86_64
• m4-1.4.19-1.el9.x86_64
• make-1:4.3-8.el9.x86_64
• ndctl-libs-78-2.el9.x86_64
• nspr-4.35.0-17.el9.x86_64
• nss-3.101.0-10.el9.x86_64
• nss-softokn-3.101.0-10.el9.x86_64
• nss-softokn-freebl-3.101.0-10.el9.x86_64
• nss-sysinit-3.101.0-10.el9.x86_64
• nss-tools-3.101.0-10.el9.x86_64
• nss-util-3.101.0-10.el9.x86_64
• openssl-devel-1:3.5.0-1.el9.x86_64
• openvswitch3.5-ipsec-3.5.0-18.el9s.x86_64
• pcp-conf-6.3.7-1.el9.x86_64
• pcp-libs-6.3.7-1.el9.x86_64
• pixman-0.40.0-6.el9.x86_64
• protobuf-3.14.0-16.el9.x86_64
• python3-openvswitch3.5-3.5.0-18.el9s.x86_64
• qemu-img-17:9.1.0-19.el9.x86_64
• qemu-kvm-common-17:9.1.0-19.el9.x86_64
• qemu-kvm-core-17:9.1.0-19.el9.x86_64
• seabios-bin-1.16.3-4.el9.noarch
• seavgabios-bin-1.16.3-4.el9.noarch
• sysstat-12.5.4-9.el9.x86_64
• usbguard-1.0.0-16.el9.x86_64
• usbguard-selinux-1.0.0-16.el9.noarch
• zlib-devel-1.2.11-41.el9.x86_64

CentOS Stream CoreOS base layer: 9.0.20250509-0