Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.21.0-okd-scos.ec.0

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Failed (2 retries) release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.20.0-okd-scos.ec.16 - F F F

---

Changes from 4.20.0-okd-scos.ec.16

Created: 2025-09-23 14:13:37 +0000 UTC

Image Digest: sha256:d3aadc3fb1bdd21a36b846d47f8082990c8306a32e27eae02099537a4ecf80c2

Release 4.21.0-okd-scos.ec.0 was created from registry.ci.openshift.org/origin/release-scos:4.21.0-0.okd-scos-2025-09-22-083455

Components

• Kubectl 1.33.3
• Kubernetes upgraded from 1.33.4 to 1.33.5
• Kubernetes Tests upgraded from 1.33.3 to 1.33.4
• CentOS Stream CoreOS 10.0.20250827-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
InsightsConfigAPI (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPClusterHostedDNSInstall (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
CBORServingAndStorage (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClientsAllowCBOR (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClientsPreferCBOR (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ClusterAPIMachineManagementVSphere (0 tests)			Enabled (New)	Enabled (New)

Rebuilt images without code change

• cloud-network-config-controller git 467e50fe sha256:e8e0b74656219fe49a344e278827a20b7fbbf018ae33757c2bb9da5bd4ba5efa
• multus-networkpolicy git ef99d3d4 sha256:be6dd1a247ca54c251d73fd9585c0e7272748df0593dd4fb43479f2ff1799ac2

agent-installer-api-server

• NO-ISSUE: [master] Bump OCP versions: 4.13 (#8052) #8052
• MGMT-21609: Drop EL8 support in master / release-ocm-2.15 (#8040) #8040
• NO-ISSUE: [master] Bump OCP versions: 4.16, 4.18 (#8047) #8047
• MGMT-21320: VM disk defined with 100GB but not eligible for installation (#7931) #7931
• NO-ISSUE: [master] Bump OCP versions: 4.20, 4.19 (#8042) #8042
• MGMT-21704: add index on host infra env (#7995) #7995
• MGMT-21318: Create feature gate to allow installing TNF using the API (#7892) #7892
• MGMT-21419: Fix Day 2 worker TLS validation by using internal API endpoint for HTTPS connections (#7942) #7942
• NO-ISSUE: [master] Bump OCP versions: 4.12, 4.20, 4.17 (#8028) #8028
• MGMT-21482: Fix module dependencies (#7936) #7936
• NO-ISSUE: Update Konflux references (#8010) #8010
• NO-ISSUE: pin gotestsum to v1.12.3 (#8016) #8016
• MGMT-20830: Support for serving an OVE image (ISO) with an embedded custom ignition - impl (#7981) #7981
• MGMT-20239: Adjust SortHosts to prioritize GPU hosts for worker role assignment (#7957) #7957
• Use host rather than cluster when determining TANG servers to validate (#7982) #7982
• NO-ISSUE: [master] Bump OCP versions: 4.19, 4.20 (#7993) #7993
• Fix the nmstate example (#7992) #7992
• MGMT-20830: enhancement doc (#7978) #7978
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• chore(KONFLUX-6210): fix and set name and cpe label for assisted-installer-ds-main (#1247) #1247
• NO-ISSUE: Update Konflux references (#1256) #1256
• chore(KONFLUX-6210): fix and set name and cpe label for assisted-installer-controller-ds-main (#1246) #1246
• MGMT-20756: assisted installer naive string concatenation for partition finding (#1214) #1214
• NO-ISSUE: Update Konflux references (#1242) #1242
• Full changelog

agent-installer-node-agent

• chore(KONFLUX-6210): fix and set name and cpe label for assisted-installer-agent-ds-main (#1111) #1111
• Full changelog

agent-installer-utils

• OCPBUGS-61956: Disable Konflux go.mod PR updates #163
• OCPBUGS-61875: Add 4.21 config #160
• AGENT-1258: Red Hat Konflux kflux-prd-rh02 update ove-ui-iso #154
• AGENT-1258: Red Hat Konflux kflux-prd-rh02 purge agent-installer-utils #153
• Full changelog

aws-cluster-api-controllers

• NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.1 (9c17049) into main #569
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• NO-JIRA: Centralize injection of hosted-kubeconfig volume #311
• NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 #429
• OCPBUGS-54385: Avoid informer resync #432
• NO-JIRA: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.21 #427
• NO-JIRA: Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.21 #425
• NO-JIRA: azure-disk, azure-file sync code de-duplication #303
• Full changelog

azure-machine-controllers

• NO-JIRA: Update OWNERS #162
• Full changelog

baremetal-installer, installer, installer-artifacts

• CORS-4058: Migrate AWS Destroy to SDK v2 #9939
• OCPBUGS-61353: Generated Redacted nutanix config for operator #9931
• CORS-3550: add ability to opt out of the sigstore signing requirement #9940
• CORS-4162: Remove GCPClusterHostedDNSInstall featuregate #9944
• OCPBUGS-61490: Update code to retrieve ICSP instead of ICP #9933
• MGMT-21586: Add an option in image-based installation to specify architecture #9934
• SPLAT-2430: Update vSphere version validations for 7 EOL and VCF 9 #9914
• OCPBUGS-61373: Fix shellcheck issues in bootstrap #9929
• OCPBUGS-61373: Fix agent shellcheck issues #9928
• no-jira: Fix logging and error messages #9917
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-59311: pkg/…/inspect: Add support for context.Context #2100
• WRKLDS-593: oc adm must-gather: Improve cleanup order #2080
• NO-JIRA: Add tchap as reviewer in oc #2099
• NO-JIRA: oc adm groups sync: Use client.Unbind #2094
• OCPBUGS-61063: pkg/cli/admin/upgrade/recommend: Enable precheck and accept gates #2088
• OCPBUGS-52936: oc adm policy: Only initialize UserClient if built-in OAuth is enabled #2090
• OCPBUGS-61311: Introduce auto-open-browser flag for external OIDC issuer login #2089
• NO-ISSUE: pkg/cli/admin/upgrade/recommend/examples/4.19.0-okd-scos.16: Add OKD example #2093
• OCPBUGS-59951: oc adm must-gather: Wrap gather in a session #2087
• NO-JIRA: Add some warnings into excluded list #2092
• OCPBUGS-56691: Rely on overall available disk space of the mounted volume #2084
• Full changelog

cloud-credential-operator

• OCPBUGS-61475: set cloud-credential-operator as default-container #914
• Full changelog

cluster-authentication-operator

• OCPBUGS-57444: set appropriate rolling update settings #789
• NO-JIRA: om: fix integration testing #788
• Full changelog

cluster-capi-controllers

• OCPBUGS-57605: Updating ose-cluster-api-container image to be consistent with ART for 4.20 #242
• Full changelog

cluster-capi-operator

• OCPCLOUD-3162: conversion: do not set ignition version on AWSMachine #363
• NO-JIRA: use go workspaces #358
• OCPCLOUD-2714: Add VAPs to prevent setting of CAPI fields that are not supported by MAPI #334
• No-JIRA: increased timeout #354
• NO-JIRA: Adds AGENTS.md #349
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-cloud-controller-manager-operator

• SPLAT-2341: Add feature gate support in the cloud-config sync controller #400
• Full changelog

cluster-config-api

• remove unused feature gate InsightsConfigAPI #2474
• OCPBUGS-61689: Add ‘AGE’ print column to MachineConfigNode object #2476
• NO-JIRA: tooling: add crdify generator to run crdify against CRD changes #2472
• Update controller-tools to latest on fork #2478
• Monitoring API: Add Metric server config #2322
• CNTRLPLANE-5: Add CBOR feature gate #2235
• NO-JIRA: New rules about CO’s conditions #2469
• apiservers.config.openshift.io: remove spec.tlsSecurityProfile GoDoc caveats #2467
• SPLAT-2482: create new featuregate for ClusterAPIMachineManagementVSphere #2466
• MCO-1675: Update API for Status Reporting needs (REBASED) #2442
• CORS-3993: Promote GCPClusterHostedDNS to Default #2300
• Adjust typos #2243
• Update schema checker to avoid incorrect new required fields checks #2470
• Full changelog

cluster-control-plane-machine-set-operator

• MCO-1866: Ignore boot image differences while reconciling Provider Configs #368
• Full changelog

cluster-dns-operator

• NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #449
• Full changelog

cluster-ingress-operator

• OCPBUGS-55673: Remove IngressControllerLBSubnetsAWS featuregate #1242
• NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #1281
• NE-2139: Kubernetes to 1.33.4 and controller-runtime to 0.21 #1279
• NO-JIRA: Add davidesalerno to OWNERS #1278
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-15430: move alerting rules from CMO over #1922
• Re-apply “OCPBUGS-57049: certrotation: move test case name outside of AutoRegenerateAfterOfflineExpiry” #1910
• OCPSTRAT-2371: promote MutatingAdmissionPolicy to v1beta1 for > 1.34.0 #1921
• Full changelog

cluster-kube-controller-manager-operator

• WRKLDS-1556: Remove –cloud-provider=external from KCM #862
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-61301: Add readonlyRootFilesystem #575
• Full changelog

cluster-machine-approver

• NO-JIRA: set machine-approver-controller as default container #278
• Full changelog

cluster-monitoring-operator

• NO-ISSUE: update Go dependencies #2674
• MON-4346: Bump Go to 1.24 #2655
• NO-JIRA: [bot] Synchronize versions of the downstream components #2673
• OCPBUGS-60161: Add mcd_local_unsupported_packages metric from MCO to telemetry #2638
• NO-ISSUE: Updating cluster-monitoring-operator-container image to be consistent with ART for 4.21 #2662
• MON-4344: chore: port the test suite over from openshift-tests-private #2635
• MON-4371: chore(prometheus): enable use-uncached-io feature flag #2637
• NO-JIRA: [bot] Synchronize versions of the downstream components #2668
• OCPBUGS-61113: add flag --watch-referenced-objects-in-all-namespaces to prometheus-operator #2657
• NO-JIRA: [bot] Synchronize versions of the downstream components #2663
• Full changelog

cluster-network-operator

• OCPBUGS-61561: Relax label req. of DPU/DPU Host/Smart NIC #2786
• Revert “OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes” #2796
• OCPBUGS-61196: Add a ValidatingAdmissionPolicy blocking ServiceCIDR changes #2605
• Full changelog

cluster-node-tuning-operator

• NO-JIRA:e2e: set of fixes/changes to ovs pinning testing (#1390) #1390
• Full changelog

cluster-olm-operator

• NO-ISSUE: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.21 #138
• OCPBUGS-61873: Update RBAC to update/patch/delete what we create #139
• Full changelog

cluster-policy-controller

• NO-JIRA: scc allocation controller: Use server-side apply #165
• Full changelog

cluster-storage-operator

• OCPBUGS-61175: Add RBAC rule to let manila-csi-driver-operator manage NetworkPolicy #615
• SPLAT-2467: Updated VPD alerts to reflect current vSphere support #612
• Full changelog

console

• OCPBUGS-61535: Cancel PVC creation redirect user to last visited page instead of PVC list #15502
• CONSOLE-4764: Add tech preview feature flag support #15477
• CONSOLE-4715: Migrate the Enzyme test tests root directory and remove tests… #15462
• NO-JIRA: Update CHANGELOG based on 4.18 plugin SDK package release #15517
• CONSOLE-4760: update CRD list to use ResourceDataView #15469
• CONSOLE-3769: Install @openshift/dynamic-plugin-sdk #15509
• OCPBUGS-60084: Help dropdown should be closed automatically after tour model opened #15483
• OCPBUGS-55401: PVC shows negative Available space in OpenShift Console on RHOCP 4 #15315
• OCPBUGS-59634: Fix the events search input width, and incorporate PF Toolbar component #15501
• NO-JIRA: Update README.md with instructions for logging out kube:admin in local #15482
• NO-JIRA: chore(OWNERS): remove logonoff from reviewers #15505
• CONSOLE-4710: use useOverlay to launch ErrorModal #15475
• OCPBUGS-61087: Updation of label from edit label doesn’t work #15460
• OCPBUGS-61519: Fix improper DescriptionList refactor #15495
• OCPBUGS-59972: Add validation and type guards on healthHandler calls to prevent errors #15470
• CONSOLE-4756: Convert more files to TypeScript #15472
• OCPBUGS-61458: fix MachineSet YAML template #15478
• OCPBUGS-58118: fix namespace path generation for non-namespaced resources #15467
• OCPBUGS-61183: cluster in workload identity mode is not applied with the token-auth-… #15459
• OCPBUGS-61133: Fix catalog search relevance scoring, so that operators with attribute.keywords are displayed and remove unnecessary metadataName from calculation #15444
• OCPBUGS-61468: i18n upload/download routine task for OCP version 4.20 #15476
• CONSOLE-4727: Update OWNERS files across the repo #15461
• CONSOLE-4598: Migrate enzyme tests/components/utils unit tests to React Testing… #15442
• OCPBUGS-61393: Change default tab size from 4 to 2 #15474
• CONSOLE-4635: Refactor PDBActionFactory to hook form and cleanup. #15285
• And 5 elided commits (e.g. from squash or rebase merges)
• Full changelog

console-operator

• OCPBUGS-61726: Revert “OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition” #1046
• OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1041
• OCPBUGS-61483: Update DEFAULT_DOC_URL to point to OpenShift Container Platform 4.21 #1044
• OCPBUGS-61383: Update QuickStarts typo and doc link #1042
• OCPBUGS-60863: Rename Dockerfile to Dockerfile.ocp #1039
• Full changelog

coredns

• NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #153
• Full changelog

csi-external-attacher

• NO-JIRA: Updating csi-attacher-container image to be consistent with ART for 4.21 #87
• Full changelog

csi-external-snapshot-metadata

• NO-JIRA: Updating csi-external-snapshot-metadata-container image to be consistent with ART for 4.21 #5
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• NO-JIRA: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.21 #187
• Full changelog

docker-registry

• OCPBUGS-60845: update OWNERS #447
• Full changelog

driver-toolkit

• Updating the OWNERS file. (#175) #175
• Updating driver-toolkit-container image to be consistent with ART for 4.21 (#172) #172
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-61006: Adjust vendoring to use go.work to get rid of the symlink #91
• Full changelog

gcp-machine-controllers

• no-jira: Machine Api Operator GCP must search for the GCP Custom Endpoints Installer feature gate #128
• Full changelog

gcp-pd-csi-driver-operator

• NO-JIRA: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.21 #151
• CORS-4201: Search for the feature gate for GCP Custom Endpoints #150
• Full changelog

haproxy-router

• OCPBUGS-60257: fix extra space in haproxy template #676
• OCPBUGS-57896: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.20 #660
• OCPBUGS-57845: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.20 #659
• NO-JIRA: Add bentito (btofel@redhat.com) to OWNERS #675
• OCPBUGS-61224: Revert Prevent startup failures due to name resolution” #672
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-61554: Bump 1.33.5 #2459
• OCPBUGS-61754: UPSTREAM: <carry>: Add retries for GetCurrentResourceVersion. #2467
• OCPBUGS-61222: Do not remove PVC ClaimRef to fix flaky VAC test #2452
• OCPBUGS-58313: apiserver library go bump #2457
• NO-JIRA: UPSTREAM: 133682: Increase port-forward broken connection detection client timeout #2428
• Full changelog

hypershift

• OCPBUGS-61776: fix(ignition-server): Don’t delete user-managed cert secrets #6836
• OCPBUGS-61894: Enable VolumeAttributesClass runtime config #6855
• CNTRLPLANE-1452: docs(ci): add documentation for checking CI status #6849
• OCPBUGS-61438: fix(security): harden konnectivity-agent DaemonSet security context #6835
• OCPBUGS-61828: refactor FeatureGate status check #6862
• OCPBUGS-61329: skip EnsureReadOnlyRootFilesystemTmpDirMount check for kubevirt HCP pods #6842
• OCPBUGS-61825: test(e2e,kubevirt): skip break-glass-credentials on kubevirt #6856
• OCPBUGS-61862: ci: Remove the MCE 2.10 konflux pipeline #6848
• OCPBUGS-61719: fix: propagate AWSLoadBalancerTargetNodesAnnotation to… #6823
• OCPBUGS-61334: fix(kas): Set correct container port in postStart handler, 2 #6824
• OCPBUGS-61177: ci: use common MCE konflux pipeline #6743
• NO-JIRA: Update Branch Tasks Docs #6840
• OCPBUGS-56249: fix lint-fix Makefile rule #6151
• OCPBUGS-61048: test(e2e): add autoscaler deployment verification to autoscaling test #6779
• OCPBUGS-61687: fix(capi-provider): use single replica deployment for aws and azure #6807
• fix(disable-psa): disable PSA check for 4.20 #6831
• OCPBUGS-61482: fix(proxy): ensure URLs have scheme before proxy resolution #6789
• OCPBUGS-61587: fix(oauth): oauth-openshift deployment should be HA #6802
• CNTRLPLANE-1277: Enable TestCreateClusterCustomConfig for Azure #6706
• Revert “OCPBUGS-61334: fix(kas): Set correct container port in postStart handler” #6805
• OCPBUGS-60185: resolve MIRRORED_RELEASE_IMAGE flapping #6751
• OCPBUGS-61499: fix(control-plane): remove resource limits from kube-controller-manager #6785
• CNTRLPLANE-1364: feat: enable global pull secret for AWS #6736
• OCPBUGS-61334: fix(kas): Set correct container port in postStart handler #6773
• NO-JIRA: fix karpenter metric validation in e2e #6714
• NO-JIRA: chore(AI): add claude agents for different SMEs #6787
• OCPBUGS-61329: test(e2e): skip kubevirt pods in EnsureReadOnlyRootFilesystem #6770
• OCPBUGS-61462: temporarily use v4.20 catalogs #6782
• NO-JIRA: add permissions to role policy #6783
• Full changelog

insights-operator

• feat: update DataGather condition when gathering job fails (#1131) #1131
• fix: correct feature gate for InsightsDataGather (#1137) #1137
• Updating ose-insights-operator-container image to be consistent with ART for 4.21 (#1136) #1136
• OCPBUGS-61798: Run missing make update (#1140) #1140
• fix: Update error message for missing SCA certificates (#1134) #1134
• chore(OWNERS): add katarina (#1133) #1133
• fix: add missing permissions for replicasets and events (#1123) #1123
• Full changelog

ironic

• OKD-283: fixing OKD ironic-image errors and metal3 pod crashes (centos9) #688
• OCPBUGS-61459: sync with Ironic changes, including the local RPC revert #687
• METAL-1528: Use custom directories in the runironic-proxy script #679
• Full changelog

kube-state-metrics

• NO-ISSUE: [bot] Bump openshift/kube-state-metrics to v2.17.0 #124
• Full changelog

machine-api-operator

• OCPBUGS-61728: Fixed multi nic e2e to wait for node removal after machineset tests #1417
• OCPBUGS-61728: Adjusted machine e2e tests to wait for nodes to clean up #1415
• NO-JIRA: Update OWNERS_ALIASES #1414
• Full changelog

machine-config-operator

• MCO-1840: Remove MCN CRD cleanup cronjob #5234
• OCPBUGS-60120: Add nil/null checks to image registry secret decode #5253
• NO-ISSUE: Add delays to reduce TestOSBuildController failures #5239
• MCO-1808: MCO-1790: Implement Azure boot image updates #5202
• OCPBUGS-61695: Override NMState service definition #5284
• OCPBUGS-60161: Add mcd_local_unsupported_packages recording rule #5242
• CORS-4170: Extending in-cluster DNS support to Azure #5216
• OCPBUGS-60537: Machine-config controller should actively manage cordon while draining #5276
• Full changelog

monitoring-plugin

• NO-JIRA: Login validation for all session flows #544
• OU-833: fix 2 bugs for incidents page #539
• NO-JIRA: Cypress Testsuite – Enhance Session Management #536
• OBSINTA-463: Rename the cluster health metrics #514
• OBSINTA-789: Update layout and labels #534
• OU-863: fix step calculation to fix non existent data gaps #535
• RHINENG-20701: fix utc timestamps in chart tooltips #531
• OBSINTA-798: Cypress Incident Tests – Query Mocking #521
• NO-JIRA: set rules as silenced if all alerts are silenced #533
• RHINENG-20667: silenced alerts for chart and table #530
• OU-658: Major Refactor + Adding Namespace dropdown to admin pages #483
• NO-JIRA: automation - fix monitoring-plugin injection #532
• NO-JIRA: Update build-image.sh #528
• OU-671: Add Patternfly Theming to Perses #522
• RHINENG-20424: fix clear filter bug with incident selected #527
• OU-783: Fit the alerts timeline to the actual data timespan #529
• Full changelog

network-tools

• OCPBUGS-53196: Update references of master to main #160
• Full changelog

networking-console-plugin

• Merge #273
• CNV-59876: use correct name space when switching tabs #276
• OCPBUGS-61531: show VM network menu only on admin #275
• OCPBUGS-61548: use console extension to render same nad actions #274
• CNV-59629: set default MTU visible in form and yaml #272
• CNV-68685: add primary UDN label info to VirtualMachine network creation form #271
• Full changelog

oauth-apiserver

• OCPBUGS-61754: Bump openshift/kubernetes-apiserver for consistent list etcd retries. #146
• Full changelog

oc-mirror

• Adding r4f4 and Prashanth684 as approvers and removing contributors who are not working with oc-mirror anymore. (#1264) #1264
• ocpbugs-60999: fix issue when using full true in m2m (#1256) #1256
• OCPBUGS-61386: fixes permissions on rebuilt catalog (#1257) #1257
• Full changelog

olm-catalogd, olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #480
• NO-ISSUE: Synchronize From Upstream Repositories #479
• OCPQE-29416: Init OLMv1 OTE Framework for tests-private to migrate first case #467
• OPRUN-4076, OPRUN-4078: Replace kustomize config with helm config #475
• NO-ISSUE: add jiazha to approvers #477
• NO-ISSUE: Synchronize From Upstream Repositories #476
• NO-ISSUE: Synchronize From Upstream Repositories #473
• NO-ISSUE: Synchronize From Upstream Repositories #471
• NO-ISSUE: Synchronize From Upstream Repositories #465
• NO-ISSUE: Grant QE approver permissions for OTE contributions #457
• And 3 elided commits (e.g. from squash or rebase merges)
• Full changelog

openshift-apiserver

• OCPBUGS-61768: update pkg/image/OWNERS #555
• OCPBUGS-61754: Bump openshift/kubernetes-apiserver for consistent list etcd retries. #556
• OCPBUGS-61228: Bump Route generation when spec is updated #550
• OCPBUGS-37215: pkg/image: conditionally parse raw image manifest #551
• Full changelog

openshift-controller-manager

• OCPBUGS-61899: CNTRLPLANE-1308: Fix Dockerfile.rhel: Add OTE binary build and packaging #419
• CNTRLPLANE-1308: set up openshift-tests-extension for openshift-controller-manager and add a sanity test #417
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Synchronize From Upstream Repositories #1115
• OCPQE-29415: add testing framework based on OTE and the first tests-private case #1113
• OCPQE-29415: move golangci-lint and go-bindata to new location to fix sync #1114
• OCPQE-29415: add OTE into olmv0 with new location #1108
• NO-ISSUE: Synchronize From Upstream Repositories #1112
• NO-ISSUE: UPSTREAM: <carry>: add jiazha to approvers #1110
• Revert “OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0” #1109
• NO-ISSUE: Updating operator-registry-container image to be consistent with ART for 4.21 #1106
• OCPQE-29415: UPSTREAM: <carry>: add OTE into olmv0 #1105
• NO-ISSUE: set package-server-manager as default container #1104
• NO-ISSUE: Synchronize From Upstream Repositories #1103
• NO-ISSUE: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.21 #1100
• NO-ISSUE: Synchronize From Upstream Repositories #1101
• NO-ISSUE: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.21 #1094
• Full changelog

operator-marketplace

• NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.25.1 #658
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-61065: Adding ovndb-raft-functions.sh to ovnk image #2740
• NO-JIRA: DownStream Merge [08-27-2025] #2736
• Full changelog

powervs-block-csi-driver

• Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.21 #107
• Full changelog

prom-label-proxy

• NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.12.1 #385
• Full changelog

prometheus-node-exporter

• NO-ISSUE: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.21 #170
• Full changelog

service-ca-operator

• OCPBUGS-56599: don’t hotloop on secret creation errors #274
• Full changelog

telemeter

• Updating telemeter-container image to be consistent with ART for 4.21 #565
• Full changelog

tests

• OCPBUGS-61980: Temporarily remove commatrix documentation test for rework #30280
• OCPBUGS-61905: oidc: improve rollout wait times #30274
• OCPSTRAT-2371: image: add busybox to list of allowed images #30281
• CORENET-6418: drop openshift-sdn tests #29085
• OCPEDGE-1483: Add TNF E2E tests for network failure #30110
• OCPBUGS-61196: Skip ServiceCIDR in etcd_storage_path test #30254
• OCPBUGS-61855: Temporarily disable InstallPlanStepAppliedWithWarnings for k8s 1.34 rebase #30275
• OCPBUGS-61398: fix(test): prevent nil pointer dereference in ginkgo test runner #30224
• OCPBUGS-61855: CRD Apply Alert Allowance #30265
• NE-2090: adding one GIE automation test #30189
• OTA-1601: upgrade status: recover checking the updating COs #30154
• NO-JIRA: Allow systemd-coredump test to fail #30261
• OCPSTRAT-2371: Update etcd test data for k8s 1.34 release #30242
• OCPBUGS-61733: Restore retries for port-forward test #30255
• OCPEDGE-2090: Add validation tests for tnf topology effects #30252
• TRT-2275: introduce cluster e2e-analysis sub command for openshift-tests #30211
• MON-4290: add test for must-gather gather_metrics #30054
• OCPBUGS-61193: chore(extended/prometheus): ²⁄₂: make ‘targets auth’ test more lenient and more resilient #30256
• OCPBUGS-57325: update machines scale test #30028
• Trt-2246: network test isolation #30192
• NO-ISSUE: Automated - Update synthetic test data #30244
• NO-JIRA: Remove runbook exceptions for fixed bugs #30246
• trt-2230: Add monitor test annotation #30196
• NO-JIRA: Increase request-timeout to deflake test #30248
• NO-JIRA: Deflake oc observe test by using explicit port number #30247
• OTA-1559: test/extended/cli/adm_upgrade/recommend: TestRiskA PromQL use max_over_time #30160
• NO-JIRA: Add intervals and a test for systemd-coredumps #30222
• CNTRLPLANE-945: oidc: add retry logic for Keycloak route creation #30233
• CNF-18661: Update vendor to include communication matrix bug fix #30232
• CNTRLPLANE-945: images: add keycloak images and use them in ExternalOIDC tests #30221
• NO-JIRA: Migrate new func for non-Job pods readiness helper for OCL from openshift-test-private repo #30193
• NO-ISSUE: test/extended/util/framework: Poll in IsMicroShiftCluster #30161
• OCPBUGS-61538: Skip config-operator checking when featureSet is DevPreviewNoUpgrade #30236
• OCPBUGS-61193: chore(extended/prometheus): make ‘targets auth’ test more lenient and more resilient. #30219
• NO-ISSUE: Automated - Update synthetic test data #30020
• OCPBUGS-61287: Add flaky kubectl logs test to the retry list to clean signal for release #30215
• OCPBUGS-60507: Bump to latest openshift/kubernetes (v1.33.4) #30227
• CNF-18661: update the commatrix vendor version to contain new changes #30220
• Trt-2257: track run options #30195
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

thanos

• Updating ose-thanos-container image to be consistent with ART for 4.21 #164
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-57668: Updating ose-vsphere-cluster-api-controllers-container image to be consistent with ART for 4.20 #59
• NO-JIRA: Update OWNERS #65
• OCPBUGS-61498: UPSTREAM: 3636: VSphereClusterIdentity: ensure namespace in tests exists when not using the default #67
• OCPBUGS-61498: Fix openshift/unit-tests.sh #66
• NO-JIRA: Update OWNERS #63
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.21 #150
• NO-JIRA: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.21 #148
• STOR-2404: Rebase to upstream v3.5.0 for OCP 4.20 #147
• OCPBUGS-57582: Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.20 #146
• OCPBUGS-57570: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.20 #145
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.33.3-1.el10s
• kernel-6.12.0-122.el10
• openshift-kubelet-4.20.0-202508152244.p0.g7b25b18.assembly.stream.el9
• systemd-257-13.el10

Full list (575 packages)

• NetworkManager-1:1.54.0-1.el10
• NetworkManager-cloud-setup-1:1.54.0-1.el10
• NetworkManager-libnm-1:1.54.0-1.el10
• NetworkManager-ovs-1:1.54.0-1.el10
• NetworkManager-tui-1:1.54.0-1.el10
• WALinuxAgent-udev-2.13.1.1-2.el10
• aardvark-dns-2:1.16.0-2.el10
• acl-2.3.2-4.el10
• adcli-0.9.2-9.el10
• afterburn-5.9.0-1.el10
• afterburn-dracut-5.9.0-1.el10
• alternatives-1.30-2.el10
• amd-gpu-firmware-20250812-19.el10
• amd-ucode-firmware-20250812-19.el10
• atheros-firmware-20250812-19.el10
• attr-2.5.2-5.el10
• audit-4.0.3-4.el10
• audit-libs-4.0.3-4.el10
• audit-rules-4.0.3-4.el10
• authselect-1.5.0-8.el10
• authselect-libs-1.5.0-8.el10
• avahi-libs-0.9~rc2-2.el10
• basesystem-11-22.el10
• bash-5.2.26-6.el10
• bash-completion-1:2.11-16.el10
• bind-libs-32:9.18.33-5.el10
• bind-license-32:9.18.33-5.el10
• bind-utils-32:9.18.33-5.el10
• binutils-2.41-58.el10
• binutils-gold-2.41-58.el10
• bootc-1.5.1-2.el10
• bootupd-0.2.28-2.el10
• brcmfmac-firmware-20250812-19.el10
• bsdtar-3.7.7-4.el10
• bubblewrap-0.10.0-3.el10
• bzip2-1.0.8-25.el10
• bzip2-libs-1.0.8-25.el10
• c-ares-1.25.0-6.el10
• ca-certificates-2024.2.69_v8.0.303-102.3.el10
• catatonit-5:0.2.1-1.el10
• centos-gpg-keys-10.0-10.el10
• centos-release-cloud-1-1.el10s
• centos-release-nfv-common-1-5.el10s
• centos-release-virt-common-1-1.el10s
• centos-stream-release-10.0-10.el10
• centos-stream-repos-10.0-10.el10
• checkpolicy-3.9-1.el10
• chrony-4.6.1-2.el10
• cifs-utils-7.2-1.el10
• cirrus-audio-firmware-20250812-19.el10
• clevis-21-8.el10
• clevis-dracut-21-8.el10
• clevis-luks-21-8.el10
• clevis-pin-tpm2-0.5.3-8.el10
• clevis-systemd-21-8.el10
• cloud-utils-growpart-0.33-11.el10
• composefs-1.0.8-1.el10
• composefs-libs-1.0.8-1.el10
• conmon-3:2.1.13-1.el10
• conmon-rs-0.6.6-2.el10s
• console-login-helper-messages-0.21.3-10.el10
• console-login-helper-messages-issuegen-0.21.3-10.el10
• console-login-helper-messages-profile-0.21.3-10.el10
• container-selinux-4:2.240.0-1.el10
• containers-common-5:0.64.0-4.el10
• containers-common-extra-5:0.64.0-4.el10
• coreos-installer-0.24.0-1.el10
• coreos-installer-bootinfra-0.24.0-1.el10
• coreutils-9.5-6.el10
• coreutils-common-9.5-6.el10
• cpio-2.15-3.el10
• cracklib-2.9.11-8.el10
• cracklib-dicts-2.9.11-8.el10
• cri-o-1.33.3-1.el10s
• cri-tools-1.33.0-2.el10s
• criu-3.19-9.el10
• criu-libs-3.19-9.el10
• crun-1.23-1.el10
• crypto-policies-20250804-1.git2ca4115.el10
• crypto-policies-scripts-20250804-1.git2ca4115.el10
• cryptsetup-2.7.5-2.el10
• cryptsetup-libs-2.7.5-2.el10
• curl-8.12.1-2.el10
• cyrus-sasl-gssapi-2.1.28-27.el10
• cyrus-sasl-lib-2.1.28-27.el10
• dbus-1:1.14.10-5.el10
• dbus-broker-36-4.el10
• dbus-common-1:1.14.10-5.el10
• dbus-libs-1:1.14.10-5.el10
• dbus-tools-1:1.14.10-5.el10
• device-mapper-10:1.02.206-3.el10
• device-mapper-event-10:1.02.206-3.el10
• device-mapper-event-libs-10:1.02.206-3.el10
• device-mapper-libs-10:1.02.206-3.el10
• device-mapper-multipath-0.9.9-11.el10
• device-mapper-multipath-libs-0.9.9-11.el10
• device-mapper-persistent-data-1.1.0-2.el10
• diffutils-3.10-8.el10
• dmidecode-1:3.6-3.el10
• dnf-4.20.0-18.el10
• dnf-data-4.20.0-18.el10
• dnsmasq-2.90-4.el10
• dosfstools-4.2-12.el10
• dracut-107-3.el10
• dracut-network-107-3.el10
• dracut-squash-107-3.el10
• duktape-2.7.0-10.el10
• e2fsprogs-1.47.1-4.el10
• e2fsprogs-libs-1.47.1-4.el10
• efi-filesystem-6-6.el10
• efibootmgr-18-8.el10
• efivar-libs-39-3.el10
• elfutils-debuginfod-client-0.193-1.el10
• elfutils-default-yama-scope-0.193-1.el10
• elfutils-libelf-0.193-1.el10
• elfutils-libs-0.193-1.el10
• erofs-utils-1.8.10-1.el10
• ethtool-2:6.15-1.el10
• expat-2.7.1-1.el10
• file-5.45-8.el10
• file-libs-5.45-8.el10
• filesystem-3.18-17.el10
• findutils-1:4.10.0-5.el10
• firewalld-filesystem-2.3.1-1.el10
• flashrom-1.3.0-8.el10
• flatpak-session-helper-1.16.0-6.el10
• fstrm-0.6.1-12.el10
• fuse-common-3.16.2-5.el10
• fuse-libs-2.9.9-25.el10
• fuse3-3.16.2-5.el10
• fuse3-libs-3.16.2-5.el10
• fwupd-1.9.31-1.el10
• fwupd-efi-1.6-3.el10
• fwupd-plugin-flashrom-1.9.31-1.el10
• gawk-5.3.0-6.el10
• gawk-all-langpacks-5.3.0-6.el10
• gdbm-1:1.23-14.el10
• gdbm-libs-1:1.23-14.el10
• geolite2-city-20191217-14.el10
• geolite2-country-20191217-14.el10
• gettext-envsubst-0.22.5-6.el10
• gettext-libs-0.22.5-6.el10
• gettext-runtime-0.22.5-6.el10
• git-core-2.47.3-1.el10
• glib2-2.80.4-8.el10
• glibc-2.39-54.el10
• glibc-common-2.39-54.el10
• glibc-gconv-extra-2.39-54.el10
• glibc-minimal-langpack-2.39-54.el10
• gmp-1:6.2.1-12.el10
• gnupg2-2.4.5-2.el10
• gnupg2-smime-2.4.5-2.el10
• gnutls-3.8.10-2.el10
• gobject-introspection-1.79.1-6.el10
• gpgme-1.23.2-6.el10
• grep-3.11-10.el10
• groff-base-1.23.0-10.el10
• grub2-common-1:2.12-26.el10
• grub2-efi-x64-1:2.12-26.el10
• grub2-pc-1:2.12-26.el10
• grub2-pc-modules-1:2.12-26.el10
• grub2-tools-1:2.12-26.el10
• grub2-tools-minimal-1:2.12-26.el10
• gssproxy-0.9.2-10.el10
• gzip-1.13-3.el10
• hostname-3.23-14.el10
• hwdata-0.379-10.6.el10
• ignition-2.22.0-1.el10
• ignition-grub-2.22.0-1.el10
• ima-evm-utils-1.6.2-3.el10
• info-7.1-6.el10
• inih-58-3.el10
• initscripts-service-10.26-2.el10
• intel-audio-firmware-20250812-19.el10
• intel-gpu-firmware-20250812-19.el10
• ipcalc-1.0.3-12.el10
• iproute-6.14.0-2.el10
• iproute-tc-6.14.0-2.el10
• iptables-libs-1.8.11-11.el10
• iptables-nft-1.8.11-11.el10
• iputils-20240905-4.el10
• irqbalance-2:1.9.4-5.el10
• iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
• isns-utils-libs-0.103-1.el10
• jansson-2.14-3.el10
• jose-14-102.el10
• jq-1.7.1-11.el10
• json-c-0.18-3.el10
• json-glib-1.8.0-5.el10
• kbd-2.6.4-7.el10
• kbd-legacy-2.6.4-7.el10
• kbd-misc-2.6.4-7.el10
• kdump-utils-1.0.54-7.el10
• kernel-6.12.0-122.el10
• kernel-core-6.12.0-122.el10
• kernel-modules-6.12.0-122.el10
• kernel-modules-core-6.12.0-122.el10
• kernel-modules-extra-6.12.0-122.el10
• kernel-modules-extra-matched-6.12.0-122.el10
• kexec-tools-2.0.31-1.el10
• keyutils-1.6.3-5.el10
• keyutils-libs-1.6.3-5.el10
• kmod-31-12.el10
• kmod-libs-31-12.el10
• kpartx-0.9.9-11.el10
• krb5-libs-1.21.3-8.el10
• less-661-3.el10
• libacl-2.3.2-4.el10
• libaio-0.3.111-22.el10
• libarchive-3.7.7-4.el10
• libassuan-2.5.6-6.el10
• libattr-2.5.2-5.el10
• libbasicobjects-0.1.1-58.el10
• libblkid-2.40.2-13.el10
• libbpf-2:1.6.0-3.el10
• libcap-2.69-7.el10
• libcap-ng-0.8.4-6.el10
• libcbor-0.11.0-3.el10
• libcollection-0.7.0-58.el10
• libcom_err-1.47.1-4.el10
• libcomps-0.1.21-3.el10
• libcurl-minimal-8.12.1-2.el10
• libdhash-0.5.0-58.el10
• libdnf-0.73.1-12.el10
• libdnf-plugin-subscription-manager-1.30.10-1.el10
• libdrm-2.4.123-1.el10
• libeconf-0.6.2-4.el10
• libedit-3.1-52.20230828cvs.el10
• libev-4.33-14.el10
• libevent-2.1.12-16.el10
• libfdisk-2.40.2-13.el10
• libffi-3.4.4-10.el10
• libfido2-1.14.0-7.el10
• libgcc-14.3.1-2.1.el10
• libgcrypt-1.11.0-6.el10
• libgomp-14.3.1-2.1.el10
• libgpg-error-1.50-2.el10
• libgudev-238-7.el10
• libgusb-0.4.9-4.el10
• libibverbs-57.0-1.el10
• libicu-74.2-5.el10
• libidn2-2.3.7-3.el10
• libini_config-1.3.1-58.el10
• libipa_hbac-2.11.1-2.el10
• libjcat-0.2.2-2.el10
• libjose-14-102.el10
• libkcapi-1.5.0-3.el10
• libkcapi-hasher-1.5.0-3.el10
• libkcapi-hmaccalc-1.5.0-3.el10
• libksba-1.6.7-2.el10
• libldb-4.22.4-104.el10
• libluksmeta-9-26.el10
• libmaxminddb-1.9.1-4.el10
• libmicrohttpd-1:1.0.0-3.el10
• libmnl-1.0.5-7.el10
• libmodulemd-2.15.0-12.el10
• libmount-2.40.2-13.el10
• libmspack-0.10.1-0.14.alpha.el10
• libndp-1.9-2.el10
• libnet-1.3-7.el10
• libnetfilter_conntrack-1.0.9-12.el10
• libnfnetlink-1.0.2-3.el10
• libnfsidmap-1:2.8.3-0.el10
• libnftnl-1.2.8-3.el10
• libnghttp2-1.64.0-2.el10
• libnl3-3.11.0-1.el10
• libnvme-1.13-1.el10
• libpath_utils-0.2.1-58.el10
• libpcap-14:1.10.4-7.el10
• libpciaccess-0.16-16.el10
• libpkgconf-2.1.0-3.el10
• libpwquality-1.4.5-12.el10
• libref_array-0.1.5-58.el10
• librepo-1.18.0-5.el10
• libseccomp-2.5.6-1.el10
• libsecret-0.21.2-8.el10
• libselinux-3.9-1.el10
• libselinux-utils-3.9-1.el10
• libsemanage-3.9-1.el10
• libsepol-3.9-1.el10
• libsmartcols-2.40.2-13.el10
• libsmbclient-4.22.4-104.el10
• libsolv-0.7.29-8.el10
• libss-1.47.1-4.el10
• libsss_certmap-2.11.1-2.el10
• libsss_idmap-2.11.1-2.el10
• libsss_nss_idmap-2.11.1-2.el10
• libsss_sudo-2.11.1-2.el10
• libstdc++-14.3.1-2.1.el10
• libtalloc-2.4.3-100.el10
• libtasn1-4.20.0-1.el10
• libtdb-1.4.13-100.el10
• libtevent-0.16.2-100.el10
• libtirpc-1.3.5-1.el10
• libtool-ltdl-2.4.7-13.el10
• libunistring-1.1-10.el10
• liburing-2.5-5.el10
• libusb1-1.0.28-1.el10
• libutempter-1.2.1-15.el10
• libuuid-2.40.2-13.el10
• libuv-1:1.51.0-1.el10
• libverto-0.3.2-10.el10
• libverto-libev-0.3.2-10.el10
• libwbclient-4.22.4-104.el10
• libxcrypt-4.4.36-10.el10
• libxkbcommon-1.7.0-4.el10
• libxml2-2.12.5-9.el10
• libxmlb-0.3.15-7.el10
• libxslt-1.1.39-8.el10
• libyaml-0.2.5-16.el10
• libzstd-1.5.5-9.el10
• linux-firmware-20250812-19.el10
• linux-firmware-whence-20250812-19.el10
• lmdb-libs-0.9.32-4.el10
• logrotate-3.22.0-4.el10
• lsof-4.98.0-7.el10
• lua-libs-5.4.6-7.el10
• luksmeta-9-26.el10
• lvm2-10:2.03.32-3.el10
• lvm2-libs-10:2.03.32-3.el10
• lz4-libs-1.9.4-8.el10
• lzo-2.10-14.el10
• makedumpfile-1.7.7-2.el10
• mdadm-4.4-2.el10
• memstrack-0.2.5-6.el10
• microcode_ctl-4:20250812-1.el10
• mokutil-2:0.7.2-1.el10
• mpdecimal-2.5.1-12.el10
• mpfr-4.2.1-5.el10
• mt7xxx-firmware-20250812-19.el10
• nano-8.1-3.el10
• ncurses-6.4-14.20240127.el10
• ncurses-base-6.4-14.20240127.el10
• ncurses-libs-6.4-14.20240127.el10
• net-tools-2.0-0.73.20160912git.el10
• netavark-2:1.16.0-1.el10
• nettle-3.10.1-1.el10
• newt-0.52.24-5.el10
• nfs-utils-1:2.8.3-0.el10
• nftables-1:1.1.1-5.el10
• nmap-ncat-4:7.92-3.el10
• nmstate-2.2.48-1.el10
• npth-1.6-21.el10
• nss-altfiles-2.23.0-5.el10
• numactl-libs-2.0.19-2.el10
• nvidia-gpu-firmware-20250812-19.el10
• nvme-cli-2.13-2.el10
• nxpwireless-firmware-20250812-19.el10
• oniguruma-6.9.9-7.el10
• open-vm-tools-13.0.0-1.el10
• openldap-2.6.9-1.el10
• openshift-clients-4.20.0-202508150943.p0.g1c54ec0.assembly.stream.el9
• openshift-kubelet-4.20.0-202508152244.p0.g7b25b18.assembly.stream.el9
• openssh-9.9p1-11.el10
• openssh-clients-9.9p1-11.el10
• openssh-server-9.9p1-11.el10
• openssl-1:3.5.1-3.el10
• openssl-fips-provider-1:3.5.1-3.el10
• openssl-libs-1:3.5.1-3.el10
• openvswitch-selinux-extra-policy-1.0-36.el10s
• openvswitch3.5-3.5.0-6.el10s
• os-prober-1.81-9.el10
• ose-aws-ecr-image-credential-provider-4.20.0-202508191400.p2.gbb88da1.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.20.0-202507171059.p0.gd469d04.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.20.0-202508130315.p0.g0634bec.assembly.stream.el9
• ostree-2025.4-3.el10
• ostree-grub2-2025.4-3.el10
• ostree-libs-2025.4-3.el10
• p11-kit-0.25.5-7.el10
• p11-kit-server-0.25.5-7.el10
• p11-kit-trust-0.25.5-7.el10
• pam-1.6.1-8.el10
• pam-libs-1.6.1-8.el10
• passt-0^20250512.g8ec1341-2.el10
• passt-selinux-0^20250512.g8ec1341-2.el10
• pciutils-3.13.0-6.el10
• pciutils-libs-3.13.0-6.el10
• pcre2-10.44-1.el10.3
• pcre2-syntax-10.44-1.el10.3
• pcsc-lite-2.2.3-2.el10
• pcsc-lite-ccid-1.6.0-2.el10
• pcsc-lite-libs-2.2.3-2.el10
• perl-AutoLoader-5.74-514.el10
• perl-B-1.89-514.el10
• perl-Carp-1.54-511.el10
• perl-Class-Struct-0.68-514.el10
• perl-Data-Dumper-2.189-512.el10
• perl-Digest-1.20-511.el10
• perl-Digest-MD5-2.59-6.el10
• perl-DynaLoader-1.56-514.el10
• perl-Encode-4:3.21-511.el10
• perl-Errno-1.38-514.el10
• perl-Exporter-5.78-511.el10
• perl-Fcntl-1.18-514.el10
• perl-File-Basename-2.86-514.el10
• perl-File-Path-2.18-511.el10
• perl-File-Temp-1:0.231.100-512.el10
• perl-File-stat-1.14-514.el10
• perl-FileHandle-2.05-514.el10
• perl-Getopt-Long-1:2.58-3.el10
• perl-Getopt-Std-1.14-514.el10
• perl-HTTP-Tiny-0.088-512.el10
• perl-IO-1.55-514.el10
• perl-IO-Socket-IP-0.42-512.el10
• perl-IO-Socket-SSL-2.085-3.el10
• perl-IPC-Open3-1.22-514.el10
• perl-MIME-Base64-3.16-511.el10
• perl-Mozilla-CA-20231213-5.el10
• perl-NDBM_File-1.17-514.el10
• perl-Net-SSLeay-1.94-8.el10
• perl-POSIX-2.20-514.el10
• perl-PathTools-3.91-512.el10
• perl-Pod-Escapes-1:1.07-511.el10
• perl-Pod-Perldoc-3.28.01-512.el10
• perl-Pod-Simple-1:3.45-511.el10
• perl-Pod-Usage-4:2.03-511.el10
• perl-Scalar-List-Utils-5:1.63-511.el10
• perl-SelectSaver-1.02-514.el10
• perl-Socket-4:2.038-511.el10
• perl-Storable-1:3.32-511.el10
• perl-Symbol-1.09-514.el10
• perl-Term-ANSIColor-5.01-512.el10
• perl-Term-Cap-1.18-511.el10
• perl-Text-ParseWords-3.31-511.el10
• perl-Text-Tabs+Wrap-2024.001-511.el10
• perl-Time-Local-2:1.350-511.el10
• perl-URI-5.27-3.el10
• perl-base-2.27-514.el10
• perl-constant-1.33-512.el10
• perl-if-0.61.000-514.el10
• perl-interpreter-4:5.40.2-514.el10
• perl-libnet-3.15-512.el10
• perl-libs-4:5.40.2-514.el10
• perl-locale-1.12-514.el10
• perl-mro-1.29-514.el10
• perl-overload-1.37-514.el10
• perl-overloading-0.02-514.el10
• perl-parent-1:0.241-512.el10
• perl-podlators-1:5.01-511.el10
• perl-vars-1.05-514.el10
• pigz-2.8-7.el10
• pinentry-1.3.1-1.el10
• pkgconf-2.1.0-3.el10
• pkgconf-m4-2.1.0-3.el10
• pkgconf-pkg-config-2.1.0-3.el10
• podman-6:5.6.0-1.el10
• policycoreutils-3.9-1.el10
• policycoreutils-python-utils-3.9-1.el10
• polkit-125-4.el10
• polkit-libs-125-4.el10
• polkit-pkla-compat-0.1-30.el10
• popt-1.19-8.el10
• procps-ng-4.0.4-8.el10
• protobuf-c-1.5.0-6.el10
• psmisc-23.6-8.el10
• python-unversioned-command-3.12.11-3.el10
• python3-3.12.11-3.el10
• python3-audit-4.0.3-4.el10
• python3-charset-normalizer-3.4.2-1.el10
• python3-cloud-what-1.30.10-1.el10
• python3-dateutil-1:2.9.0.post0-1.el10
• python3-dbus-1.3.2-8.el10
• python3-decorator-5.1.1-12.el10
• python3-distro-1.9.0-5.el10
• python3-dnf-4.20.0-18.el10
• python3-dnf-plugin-versionlock-4.7.0-9.el10
• python3-dnf-plugins-core-4.7.0-9.el10
• python3-gobject-base-3.46.0-7.el10
• python3-gobject-base-noarch-3.46.0-7.el10
• python3-hawkey-0.73.1-12.el10
• python3-idna-3.7-4.el10
• python3-iniparse-0.5-10.el10
• python3-inotify-0.9.6-36.el10
• python3-libcomps-0.1.21-3.el10
• python3-libdnf-0.73.1-12.el10
• python3-librepo-1.18.0-5.el10
• python3-libs-3.12.11-3.el10
• python3-libselinux-3.9-1.el10
• python3-libsemanage-3.9-1.el10
• python3-pip-wheel-23.3.2-7.el10
• python3-policycoreutils-3.9-1.el10
• python3-requests-2.32.4-1.el10
• python3-rpm-4.19.1.1-19.el10
• python3-setools-4.5.1-5.el10
• python3-setuptools-69.0.3-12.el10
• python3-six-1.16.0-16.el10
• python3-subscription-manager-rhsm-1.30.10-1.el10
• python3-systemd-235-11.el10
• python3-urllib3-1.26.19-2.el10
• qemu-guest-agent-18:10.0.0-12.el10
• quota-1:4.09-9.el10
• quota-nls-1:4.09-9.el10
• rdma-core-57.0-1.el10
• readline-8.2-11.el10
• realtek-firmware-20250812-19.el10
• rpcbind-1.2.7-3.el10
• rpm-4.19.1.1-19.el10
• rpm-build-libs-4.19.1.1-19.el10
• rpm-libs-4.19.1.1-19.el10
• rpm-ostree-2025.10-1.el10
• rpm-ostree-libs-2025.10-1.el10
• rpm-plugin-audit-4.19.1.1-19.el10
• rpm-plugin-selinux-4.19.1.1-19.el10
• rpm-plugin-systemd-inhibit-4.19.1.1-19.el10
• rpm-sequoia-1.9.0.1-1.el10
• rpm-sign-libs-4.19.1.1-19.el10
• rsync-3.4.1-2.el10
• samba-client-libs-4.22.4-104.el10
• samba-common-4.22.4-104.el10
• samba-common-libs-4.22.4-104.el10
• sed-4.9-3.el10
• selinux-policy-42.1.7-1.el10
• selinux-policy-targeted-42.1.7-1.el10
• setup-2.14.5-7.el10
• sg3_utils-1.48-7.el10
• sg3_utils-libs-1.48-7.el10
• shadow-utils-2:4.15.0-6.el10
• shadow-utils-subid-2:4.15.0-8.el10
• shared-mime-info-2.3-8.el10
• shim-x64-15.8-5.el10
• skopeo-2:1.20.0-1.el10
• slang-2.3.3-8.el10
• snappy-1.1.10-7.el10
• socat-1.7.4.4-8.el10
• sqlite-libs-3.46.1-4.el10
• ssh-key-dir-0.1.4-9.el10
• sssd-2.11.1-2.el10
• sssd-ad-2.11.1-2.el10
• sssd-client-2.11.1-2.el10
• sssd-common-2.11.1-2.el10
• sssd-common-pac-2.11.1-2.el10
• sssd-ipa-2.11.1-2.el10
• sssd-krb5-2.11.1-2.el10
• sssd-krb5-common-2.11.1-2.el10
• sssd-ldap-2.11.1-2.el10
• sssd-nfs-idmap-2.11.1-2.el10
• sssd-proxy-2.11.1-2.el10
• stalld-1.20.4-1.el10
• strace-6.12-1.el10
• subscription-manager-1.30.10-1.el10
• subscription-manager-rhsm-certificates-20220623-6.el10
• sudo-1.9.15-9.p5.el10
• sudo-python-plugin-1.9.15-9.p5.el10
• systemd-257-13.el10
• systemd-journal-remote-257-13.el10
• systemd-libs-257-13.el10
• systemd-pam-257-13.el10
• systemd-udev-257-13.el10
• tar-2:1.35-7.el10
• tiwilink-firmware-20250812-19.el10
• tmux-3.3a-13.20230918gitb202a2f.el10
• toolbox-0.2-2.el10
• tpm2-tools-5.7-4.el10
• tpm2-tss-4.1.3-5.el10
• tpm2-tss-fapi-4.1.3-5.el10
• tzdata-2025b-2.el10
• unbound-anchor-1.20.0-13.el10
• unbound-libs-1.20.0-13.el10
• userspace-rcu-0.14.0-7.el10
• util-linux-2.40.2-13.el10
• util-linux-core-2.40.2-13.el10
• vim-data-2:9.1.083-5.el10
• vim-minimal-2:9.1.083-5.el10
• virt-what-1.27-3.el10
• which-2.21-44.el10
• xfsprogs-6.11.0-2.el10
• xkeyboard-config-2.41-3.el10
• xmlsec1-1:1.2.39-3.el10
• xmlsec1-openssl-1:1.2.39-3.el10
• xz-1:5.6.2-4.el10
• xz-libs-1:5.6.2-4.el10
• zlib-ng-compat-2.2.3-2.el10
• zram-generator-1.1.2-14.el10
• zstd-1.5.5-9.el10

Extensions

Full list (48 packages)

• NetworkManager-libreswan-1.2.24-2.el10.x86_64
• bison-3.8.2-9.el10.x86_64
• cmake-filesystem-3.30.5-3.el10.x86_64
• cpp-14.3.1-2.1.el10.x86_64
• elfutils-libelf-devel-0.193-1.el10.x86_64
• flex-2.6.4-19.el10.x86_64
• gcc-14.3.1-2.1.el10.x86_64
• glibc-devel-2.39-54.el10.x86_64
• kernel-6.12.0-122.el10.x86_64
• kernel-core-6.12.0-122.el10.x86_64
• kernel-devel-6.12.0-122.el10.x86_64
• kernel-headers-6.12.0-122.el10.x86_64
• kernel-modules-6.12.0-122.el10.x86_64
• kernel-modules-extra-6.12.0-122.el10.x86_64
• kernel-rt-core-6.12.0-122.el10.x86_64
• kernel-rt-devel-6.12.0-122.el10.x86_64
• kernel-rt-modules-6.12.0-122.el10.x86_64
• kernel-rt-modules-core-6.12.0-122.el10.x86_64
• kernel-rt-modules-extra-6.12.0-122.el10.x86_64
• krb5-pkinit-1.21.3-8.el10.x86_64
• krb5-workstation-1.21.3-8.el10.x86_64
• ldns-1.8.3-18.el10.x86_64
• libkadm5-1.21.3-8.el10.x86_64
• libmpc-1.3.1-7.el10.x86_64
• libqb-2.0.8-6.el10.x86_64
• libreswan-5.3-1.el10.x86_64
• libxcrypt-devel-4.4.36-10.el10.x86_64
• libzstd-devel-1.5.5-9.el10.x86_64
• lm_sensors-libs-3.6.0-20.el10.x86_64
• m4-1.4.19-11.el10.x86_64
• make-1:4.4.1-9.el10.x86_64
• nspr-4.36.0-4.el10.x86_64
• nss-3.112.0-4.el10.x86_64
• nss-softokn-3.112.0-4.el10.x86_64
• nss-softokn-freebl-3.112.0-4.el10.x86_64
• nss-sysinit-3.112.0-4.el10.x86_64
• nss-tools-3.112.0-4.el10.x86_64
• nss-util-3.112.0-4.el10.x86_64
• openssl-devel-1:3.5.1-3.el10.x86_64
• openvswitch3.5-ipsec-3.5.0-6.el10s.x86_64
• pcp-conf-6.3.7-5.el10.x86_64
• pcp-libs-6.3.7-5.el10.x86_64
• protobuf-3.19.6-11.el10.x86_64
• python3-openvswitch3.5-3.5.0-6.el10s.x86_64
• sysstat-12.7.6-2.el10.x86_64
• usbguard-1.1.3-6.el10.x86_64
• usbguard-selinux-1.1.3-6.el10.noarch
• zlib-ng-compat-devel-2.2.3-2.el10.x86_64

CentOS Stream CoreOS base layer: 10.0.20250827-0