Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.20.0-okd-scos.ec.1

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.20.0-okd-scos.ec.0 - Success
• 4.19.0-okd-scos.ec.10 (changes) - Success

Upgrades to:

• 4.20.0-okd-scos.ec.2 (changes) - Failed Success

---

Loading changelog, this may take a while ...

Changes from 4.20.0-okd-scos.ec.0

Created: 2025-05-20 15:09:40 +0000 UTC

Image Digest: sha256:15ec1f43c854168186e1a09e8399b44018423fca5ce581f6a4936a0504e1db3e

Release 4.20.0-okd-scos.ec.1 was created from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-05-19-221538

Components

• Kubectl 1.32.1
• Kubernetes 1.32.4
• Kubernetes Tests 1.32.4
• CentOS Stream CoreOS upgraded from 9.0.20250509-0 to 9.0.20250515-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
BareMetalLoadBalancer (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereDriverConfiguration (5 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ProcMountType (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesPodSecurityStandards (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesSupport (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
NewOLMWebhookProviderOpenshiftServiceCA (0 tests)				Enabled (New)		Enabled (New)
VSphereMixedNodeEnv (0 tests)			Enabled (New)	Enabled (New)

agent-installer-api-server

• MGMT-20537: Allow any single key in OSImageCACertRef ConfigMap (#7658) #7658
• MGMT-20610: Generate manifests for arbiter hosts for chrony and nic reapply (#7665) #7665
• NO-ISSUE: [master] Bump OCP versions: 4.13, 4.19 (#7672) #7672
• MGMT-20604: Fallback to Static Networking old flow, when auto-dns set to false (#7653) #7653
• NO-ISSUE: Update Konflux references (#7645) #7645
• NO-ISSUE: Allow setting TNA_CLUSTERS_SUPPORT in the template (#7667) #7667
• NO-ISSUE: [master] Bump OCP versions: 4.19, 4.16, 4.17 (#7663) #7663
• MGMT-20601: Update pull secret validation (#7656) #7656
• MGMT-20465: Limit TNA Clusters to baremetal platform. (#7627) #7627
• MGMT-20378: Disable skip MCO reboot for s390x (#7651) #7651
• MGMT-20506: Reset preprovisioningimage status after cooldown period (#7628) #7628
• NO-ISSUE: [master] Bump OCP versions: 4.18 (#7657) #7657
• Full changelog

agent-installer-node-agent

• NO-ISSUE: Update Konflux references (#1002) #1002
• Full changelog

agent-installer-utils

• OCPBUGS-56210: OVE builder: Remove RHEL9 image from additionalImages #91
• OCPBUGS-56112: configure the channel for each OLM operators #89
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-53003: Remove references to master branch #551
• Full changelog

aws-ebs-csi-driver

• ART-12521: update go mod dependency for konflux #285
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #337
• Full changelog

azure-machine-controllers

• OCPBUGS-55372: Update virtualmachines service to armcompute/v5 SDK #141
• Full changelog

baremetal-cluster-api-controllers

• OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #44
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-55905: Update RHCOS 4.20 bootimage metadata to 9.6.20250513-0 #9720
• OCPBUGS-56262: Added better logging for vSphere destroy #9716
• OCPBUGS-56079: apply fixes for yaml-lint errors #9708
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-55220: Replace colon to hypen in the filename while extracting tar on Windows #2022
• NO-JIRA: OCPBUGS-46604: Clarify behavior of since-time flag in oc adm must-gather command #2019
• WRKLDS-1103: Adding sos.conf file for default sos config into the tools image #2003
• Full changelog

cluster-capi-controllers

• OCPCLOUD-2917: Merge https://github.com/kubernetes-sigs/cluster-api:v1.10.1 (647a1b7) into master #238
• OCPBUGS-55947: Regenerate manifests to drop v1beta1 admissionregistration usage #236
• Full changelog

cluster-capi-operator

• OCPCLOUD-2893: Add related objects to must-gather config #267
• Full changelog

cluster-config-api

• SPLAT-2213: Added vSphere mixed node env feature gate #2326
• OCPBUGS-56382: Fix validation for Resource field in MOSB API #2327
• OPRUN-3860: Add NewOLMWebhookProviderOpenshiftServiceCA feature gate #2324
• OCPBUGS-55664: remove VSphereDriverConfiguration feature gate #2319
• CNTRLPLANE-367: Update Authentication API GoDoc for OIDC-related fields #2314
• OCPNODE-2557, OCPNODE-3225: features: set user namespace features on by default #2305
• OCPBUGS-55662: Drop BareMetalLoadBalancer feature gate #2312
• CCXDEV-14850: align insights DataGather with config #2248
• Full changelog

cluster-etcd-operator

• CNTRLPLANE-340: Issue shorter certs when ShortCertRotation feature gate is set #1315
• OCPBUGS-55757: adjust alerts according to platform #1422
• Full changelog

cluster-ingress-operator

• OCPBUGS-55317: Check capabilities before watching OLM resource #1232
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-55013: SCC: add hostmount-anyuid-v2 #1834
• Full changelog

cluster-monitoring-operator

• OCPBUGS-33691: mixin: longer rate interval for Alertmanager[Cluster]FailedToSendAlerts #2598
• Full changelog

cluster-network-operator

• OCPBUGS-56051: Configure the terminationMessagePolicy for all containers deployed in HyperShift #2709
• OCPBUGS-51093, OCPBUGS-55157: Pass ‘–gateway-mode’ flag for ovnkube-cluster-manager #2696
• Full changelog

cluster-node-tuning-operator

• E2E: use 4 cpus for reserved from available cpus (#1326) #1326
• Add NetworkPolicy k8s resources (#1323) #1323
• OCPBUGS-55989: E2E: Functional tests for align cpus by UncoreCache Feature (#1302) #1302
• Full changelog

cluster-olm-operator

• OPRUN-3861: Webhook support feature flag #119
• Full changelog

cluster-storage-operator

• OCPBUGS-54491: sync Azure File permissions with upstream docs #2 #578
• Full changelog

cluster-version-operator

• OTA-1531: [5/x] cvo: read cluster FeatureGate early #1190
• OTA-1403: Update and Verify Test Metadata Using Makefile #1179
• OTA-1531: [4/x] cvo: extract config informer creation #1189
• OTA-1010: Add a new version of GetImplicitlyEnabledCapabilities #1133
• Full changelog

console

• OCPBUGS-56410: Recognize Detached BMH status #15056
• ODC-7786: Add flags in console static plugin for all the components of this epic #14992
• OCPBUGS-54195: Enable pipeline tests by installing operator version 1.17 #14903
• CONSOLE-3644: app.jsx -> app.tsx #14997
• OCPBUGS-55368: [knative] Self-provisioner user can not access or create event sources via ODC #15017
• OCPBUGS-55208: Should show default OpenShift Logo for a theme when there is not custom logo set for the theme. #14999
• OCPBUGS-56245: Remove dead code for deployment and deployment config #15054
• OCPBUGS-37977: Refresh console TLS certs at runtime #14971
• OCPBUGS-55419: improve description of the custom logos CLI args #15003
• CONSOLE-4572: classnames -> react-styles #15050
• OCPBUGS-55808: fix cy.createProject command #15026
• OCPBUGS-55896: Refactor Kebab+ActionsMenu to use PF #15028
• OCPBUGS-56039: Update supported languages in Internationalization docs #15046
• Full changelog

console-operator

• OCPBUGS-43792: Add plugins order to console config #980
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-56028: [cinder-csi-plugin] Don’t report topology capability when –with-topology=False #325
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #242
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-55944: UPSTREAM: <carry>: unrevert: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2295
• OCPBUGS-55631: UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes #2288
• NO-JIRA: Fix generation of test names #2296
• Full changelog

hypershift

• NO-JIRA: Remove ControlPlaneV2 API featuregate #6169
• NO-JIRA: Move ControlPlaneComponent CRD installation to the CLI #6167
• WRKLDS-1676: ocm config: Update leaderElection.name #6156
• CNTRLPLANE-844: Refactor CAPI provider/manager into v2 #6159
• CNTRLPLANE-844: Refactor ControlPlaneOperator into v2 component #6148
• CNTRLPLANE-844: Remove DeploymentConfig usage #6157
• NO-JIRA: Fix TestHostedClusterWatchesEverythingItCreates not working locally #6149
• NO-JIRA: Keep checking for rollouts during upgrade HO test for five minutes #6097
• OCPBUGS-56205: Switch back to rh catalog #6154
• OCPBUGS-56164: Fix HyperShift Operator Enterprise contract konflux pipeline #6138
• OCPBUGS-56011: Configure ClusterServiceLoadBalancerHealthProbeMode a… #6099
• CNTRLPLANE-565: Remove NodePool CapacityReservation API featuregate #6132
• CNTRLPLANE-645: Rename NodeCount flag to Replicas #6094
• CNTRLPLANE-844: Remove unused DeploymentConfig references #6146
• NO-JIRA: test/setup: use case-sensitive prometheusK8s in monitoring config #6150
• Full changelog

ibmcloud-cluster-api-controllers

• OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #111
• NO-JIRA: Do not gitignore files inside vendor #112
• Full changelog

insights-operator

• feat: ensure the etc-entitlement-pki secret exists (#1082) #1082
• feat: move HTTP status code from condition.Reason to condition.Message (#1083) #1083
• Full changelog

ironic

• METAL-1344: Do not install sushy-oem-idrac separately #653
• METAL-1345: Install scciclient from source #652
• Full changelog

ironic-agent

• METAL-1264: Update to latest upstream content #186
• Full changelog

machine-api-operator

• OCPBUGS-56159: correct aws kms permissions #1370
• Full changelog

machine-config-operator

• OCPBUGS-56211: Boot Image Controller should not degrade when golden configmap is slow to update #5051
• OCPBUGS-53390: Fix interrupt state to account for failure correctly #5054
• OCPBUGS-55967: Add hot loop detection in the boot image controller #5037
• OCPBUGS-55439: scope MCD node listers to current node #5015
• OCPBUGS-55770: Compare the osImageURLs for OS validation check #5041
• Full changelog

monitoring-plugin

• OCPBUGS-56095: “Negative matcher” is checked by default on Create silence page #414
• OU-712: fix: add missing alertname field to silence alert #413
• Full changelog

must-gather

• CORENET-5882: network: gather routeadvertisements.k8s.ovn.org #485
• Full changelog

network-tools

• NO-JIRA: Add aurko, comment jakob, remove nadia #143
• Full changelog

networking-console-plugin

• CNV-61536: align Modals with PatternFly default #242
• CNV-60062: fix links to upstream documentation #241
• Full changelog

oc-mirror

• OCPBUGS-54443: v2/cli: always remove past archives before m2d (#1144) #1144
• OCPBUGS-56117: Make v2 blockedImages use regular expressions (#1145) #1145
• changes the signature mirroring default to disabled (#1143) #1143
• Full changelog

olm-catalogd, olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #346
• NO-ISSUE: Synchronize From Upstream Repositories #344
• NO-ISSUE: Synchronize From Upstream Repositories #339
• NO-ISSUE: Synchronize From Upstream Repositories #337
• Full changelog

openstack-resource-controller

• NO-JIRA: Merge https://github.com/k-orc/openstack-resource-controller:release-1.0 into main #16
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Synchronize From Upstream Repositories #1003
• NO-ISSUE: Synchronize From Upstream Repositories #1002
• Full changelog

operator-marketplace

• NO-JIRA: OWNERS: Add camilamacedo86 and tmshort as approvers #632
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• Revert “OCPBUGS-55824: Revert “OCPBUGS-44285, OCPBUGS-37733, OCPBUGS-55824, OCPBUGS-54375: Downstream Merge 7th May 2025”” #2568
• Full changelog

prom-label-proxy

• NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.11.1 #379
• Full changelog

stream-coreos, stream-coreos-extensions

• NO-JIRA: bump verison to 4.20 #1804
• NO-JIRA: c9s/c10s repos: use basearch var for extras repo #1819
• Full changelog

tests

• MCO-1615: Mco node degraded mcn condition #29684
• NO-JIRA: Report back source for openshift-tests-extension #29733
• TRT-2061: throttle monitor startup refactor #29637
• OCPBUGS-55317: Skip GatewayAPIController tests on clusters without OLM capabilities #29784
• CORS-3989: set proxy for http transport in router and imageregistry cases #29759
• NO-JIRA: Revert: NO-JIRA: support skipping [OCP]FeatureGate… #29796
• OCPBUGS-55211: use regular user to create httproute #29697
• Revert “Revert “TRT-2049: check for any watch requests”” #29723
• CORENET-5854: networking: add VRF-Lite test cases #29669
• OCPEDGE-1678: Fix failed etcd test on arbiter ci run #29694
• NO-JIRA: update networking owners #29786
• NO-JIRA: increase api client timeout to match those allowed by kube-apiserver #29761
• NO-JIRA: support skipping [OCP]FeatureGate tests #29760
• OCPBUGS-55384: OCPBUGS-55968: Fix PIS tests on SNO & Enable applicable MCN & PIS tests on SNO #29785
• OCPNODE-2315: Add nested container test #29781
• OCPBUGS-55994: Do not set the MTU when using NetworkAttachementDefinition #29768
• NO-JIRA: Test load balancer metrics #29675
• NO-JIRA: Fix bearer token exposure in exit condition as well #29575
• NO-ISSUE: Automated - Update synthetic test data #29716
• Full changelog

vsphere-cluster-api-controllers

• OCPCLOUD-2921: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.13.0 (7cc3899) into master #58
• NO-JIRA: Do not gitignore files inside vendor #57
• Full changelog

vsphere-problem-detector

• OCPBUGS-53217: replace operator client #182
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Unable to show node image info: node image info is still loading, check back later...

View changelog in Markdown or change previous release: 4.20.0-okd-scos.ec.04.19.0-okd-scos.ec.104.19.0-okd-scos.ec.84.19.0-okd-scos.ec.74.19.0-okd-scos.ec.64.19.0-okd-scos.ec.54.19.0-okd-scos.ec.44.19.0-okd-scos.ec.34.19.0-okd-scos.ec.24.19.0-okd-scos.ec.14.19.0-okd-scos.ec.04.18.0-okd-scos.ec.34.18.0-okd-scos.ec.24.18.0-okd-scos.ec.14.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.20.0-0.okd-scos-2025-06-12-0646124.20.0-0.okd-scos-2025-06-11-1846114.20.0-0.okd-scos-2025-06-11-0646104.20.0-0.okd-scos-2025-06-10-1846094.20.0-0.okd-scos-2025-06-10-0646084.20.0-0.okd-scos-2025-06-09-184607───4.19.0-0.okd-scos-2025-06-12-0447434.19.0-0.okd-scos-2025-06-11-1647424.19.0-0.okd-scos-2025-06-11-0447424.19.0-0.okd-scos-2025-06-10-1647424.19.0-0.okd-scos-2025-06-10-0447424.19.0-0.okd-scos-2025-06-09-164742───4.18.0-0.okd-scos-2025-05-27-0825374.18.0-0.okd-scos-2025-05-26-2025374.18.0-0.okd-scos-2025-05-26-0825374.18.0-0.okd-scos-2025-05-23-0333574.18.0-0.okd-scos-2025-05-22-153357───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-05-02-1402244.15.0-0.okd-2025-04-03-2126204.15.0-0.okd-2025-04-02-1800124.15.0-0.okd-2025-03-28-1148024.15.0-0.okd-2025-03-26-0131074.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.3.0-0.okd-2025-04-09-1531174.3.0-0.okd-2021-08-03-2048314.3.0-0.okd-2021-03-22-1309504.3.0-0.okd-2021-02-02-2356544.3.0-0.okd-2021-02-02-1747534.3.0-0.okd-2021-01-28-0046514.3.0-0.okd-2021-01-18-145029───4.19.0-okd-scos.34.19.0-okd-scos.24.19.0-okd-scos.14.19.0-okd-scos.04.18.0-okd-scos.104.18.0-okd-scos.94.18.0-okd-scos.84.18.0-okd-scos.74.18.0-okd-scos.64.18.0-okd-scos.54.18.0-okd-scos.44.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github