4.20.0-0.okd-scos-2025-05-15-221535

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-05-15-221535

Team Approvals:

Tests:

Blocking jobs
- aws Succeeded periodic-ci-openshift-release-master-okd-scos-4.20-e2e-aws-ovn
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-master-okd-scos-4.20-e2e-aws-ovn-techpreview
Informing jobs
- aws-upgrade Succeeded periodic-ci-openshift-release-master-okd-scos-4.20-e2e-aws-ovn-upgrade
- aws-upgrade-minor Succeeded periodic-ci-openshift-release-master-okd-scos-4.20-upgrade-from-okd-scos-4.19-e2e-aws-ovn-upgrade
- vsphere Succeeded periodic-ci-openshift-release-master-okd-scos-4.20-e2e-vsphere-ovn

Upgrades from:

Upgrades to:

4.20.0-0.okd-scos-2025-05-16-101536 (changes) - Success

Changes from 4.19.0-0.okd-scos-2025-05-15-062109

Created: 2025-05-15 22:15:53 +0000 UTC

Image Digest: sha256:5347205fe20f938f0be471dceb32ce5273d074ab7798a5d204e4e0c5483ca4f1

Components

Kubectl 1.32.1
Kubernetes 1.32.4
Kubernetes Tests 1.32.4
CentOS Stream CoreOS upgraded from 9.0.20250507-0 to 9.0.20250515-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
BareMetalLoadBalancer (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CloudDualStackNodeIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DisableKubeletCloudCredentialProviders (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIProviderOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereDriverConfiguration (5 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiVCenters (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ProcMountType (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesPodSecurityStandards (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesSupport (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
AWSDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureMultiDisk (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesvSphere (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

New images

aws-karpenter-provider-aws git 68ae0c26 sha256:9cc774e9297bb2c246bbb54d164fc28ad6842711f8cf17fbaf2f5f8ba5bd71bf
openstack-resource-controller git 35841895 sha256:12b6f809fc4f8011a4c64d15031d7ecfbfe5e999b696e05af4833066df5f354f

Rebuilt images without code change

apiserver-network-proxy git 1e82311c sha256:459fd535ae9406aab27eb7627df0ad446d83a4b8e653cf3216ea33c48ec97878
aws-cloud-controller-manager git 425c1c5b sha256:d194499adf5d6a805370724b367fa6ef51e63ae29c7b175aa8aeaffdb6dc21c9
aws-kms-encryption-provider git 088dcaf7 sha256:f72fe6509e7dd8626628d4d1dcb45e7d44076c30419a7da20df1ac00c0de23dd
aws-pod-identity-webhook git b0a16d53 sha256:bfc746182270141ec4f06150eb70f5a9235c52b5c15439a7bc2bc3b1f0795c74
azure-cloud-controller-manager git 7109d6b4 sha256:811c18fba50caf4ffe8835ef11750300074e92e9a2b8a25ee552326036b12290
azure-cloud-node-manager git 7109d6b4 sha256:8a498e60c31adbc43cdef009bd59fe58661fd3f1b3deb5b38f22998ccfa58105
azure-cluster-api-controllers git 2c931b4a sha256:d1d1c6ccbf5a70c10952ea4f0bec980ec629ced20cc67570cd7ce9abcca71595
azure-service-operator git 0ae129b4 sha256:e579cd32e3574d4eb6fbc8d64b21b8585d59212ffb720d9a7e1d5edf39016fab
azure-workload-identity-webhook git 892d3c4d sha256:870c1cd676fe68d2451ec1f76e7d5e5f9b2b4f2568b874472f353c9e6383deb9
baremetal-cluster-api-controllers git 9e7170f2 sha256:615aa5fb2bf41a03536725076ff2a6bede6641ae3dca360bb73a63692d003129
baremetal-machine-controllers git f7a78954 sha256:f384527ee5cc9671af5c0cf9757b4275f27961f0788532b0b169fa0c78a4e53f
cloud-network-config-controller git 98ae311b sha256:ac211f428a37bb18a598d6dff1d6bba046e5d9a5bf4ae570a6a7640ee854d1a1
cluster-authentication-operator git ceeb021d sha256:70f0421c3129ebdd9800864f69f1c469d3c01301593374ce69e3ef25f2418eff
cluster-autoscaler git f746d442 sha256:c81941c2cc5307d7cf6014b752407af17dc8b8aacdafd352e13d7447f953f49e
cluster-autoscaler-operator git 227f7537 sha256:1644754c5eb0480f6d8722a2490bea05c003bf7706dfb1bfdea6c7fd8004142d
cluster-baremetal-operator git f64a5c1d sha256:d999a68e7bd726e46d3cfeecc24c0f5551a35f7bc90b71d2c13d71d7aa8e6569
cluster-bootstrap git 8fde9c52 sha256:8b296b4c0ed4553438ba2ec1dd04a243649363092501364c97f00aa3e0887ad1
cluster-cloud-controller-manager-operator git 7ddcbe3d sha256:903d0bb847c04c0181db7f8ae21d07c0864520c8222a849baf627fd82f411a90
cluster-config-operator git 96607b59 sha256:778f0b46e85ebe5b6a9a1a93273e28e4f44aa17f6f8db6ed3ed04e29215f6fc9
cluster-control-plane-machine-set-operator git 1dbf0c7a sha256:1ae1e550d261d9b2530fc1baae6c2a6362e5f50e8c2c7b2d7b69d31d6bc40988
cluster-csi-snapshot-controller-operator git cf99de97 sha256:33bfe98f9a0fd89cad130d8452465793eb60b2c5bb776a46ec4454de13d9817c
cluster-dns-operator git 65981306 sha256:48b5b9fe3e90b352369a637b974e52cde7c8a258af6cbc2a6ac99268d0aef38b
cluster-image-registry-operator git 85ac017f sha256:5f2027da908ba06c95f69c5bcf981bd71ce57a7a40f2e307348481fe16b189a6
cluster-kube-cluster-api-operator git 3ec30377 sha256:f7dfe20ea3ec9b035b33aefb9f8c1dc34ae56a5221ebb772b6b4bf72c7287450
cluster-kube-controller-manager-operator git cec410b7 sha256:40ab2f0ad2035f24a33b6a18c0fc7fc9b9cbd28b40874a5ec9918156579399f8
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:0a70e25fbaf2f3490d6ec4441262b6264219c3192e5a21082e62be1f8fd08b8c
cluster-openshift-apiserver-operator git 5f66a3e1 sha256:db8733af3537d3b76f31326c5eb56a8521080c5ac0f26ffa4853c37778a0a059
cluster-openshift-controller-manager-operator git 0ab30996 sha256:94504ba931c782b2be25eb1d841519dc824efcac7fd290ce7ffc93dc2e60a4b3
cluster-policy-controller git 74852478 sha256:7f2fcd1d757d27e2f6643cc1db34a1d1573047aed7c1f256c3431a52395f90a0
cluster-samples-operator git 4cb29197 sha256:fef8da17e89034a15d6998444aa8947ff05001952f5c81aeda86f69d6522bd6d
cluster-update-keys git c1c56b4c sha256:61d51bdc9cab9a33d207ebe1406b932ba0b563b4a74735bd80fb272c8ab79241
configmap-reloader git 9bfbde86 sha256:5bded5aca479fdb655c390ab51b5e802d1730e7766efd9d8bd53a678273798f1
container-networking-plugins git b09f487c sha256:1d8d31f195705a060e45426de7e661780dd8f46c0be25adb5cabcdd6af524b25
containernetworking-plugins-microshift git b09f487c sha256:fd5556b6112ed583de1906b78e528f9a70c7f0c6a4592860e106c71aa7120ada
coredns git 7a1451db sha256:92d32cbbd90a710252ef500d4a4408ca18967fe488ea317d5bf06a58482c4531
csi-driver-nfs git 2eb5c109 sha256:15d87ea1619957ed8daa6ea0b4b4425b5db57af1bb90e556d44a3adc57026ae4
csi-external-attacher git a8175e39 sha256:f212c2c8ddaa6e7ab2cda239556414101975ebc168d7706406e31981163420f0
csi-external-provisioner git 9db1cdb1 sha256:f30a4aacbca14bae6af1ac6cbbd2494ee90c2ac2db25f36f38c3c4f20a0c7fb6
csi-external-resizer git cca04e39 sha256:d09a4eb90b433b40b71cc30e3bdca2bd559960a91a842cabd6c3c38ca3d8fa05
csi-external-snapshotter git ac82cafc sha256:0328950466bdb78d6190b313893d5eb341c39338ae01a35362542934180d5f99
csi-livenessprobe git ca514478 sha256:5992b5b9b06f06ca67613220d216f0411fa61370a535faaf4206ff2f814e3dc6
csi-node-driver-registrar git d18edb3a sha256:c902b561868730db5574ec0eb0689834fe62ba8817ee3728e5125ddb6f972390
csi-snapshot-controller git ac82cafc sha256:9db9d1acbcb4649ed3ca197f51e4b9c5783c7bc1b0bbb22106db096eecd2a4ec
docker-builder git f2e5d601 sha256:5604ff131eefc3772eeb80244e9d1b844cf298bbd7df3dfdc2738581df0af132
docker-registry git 59376a75 sha256:2b06ceff904f4ab481c1104627820b341e792ea8d1026a29a9c0b41e400a6e33
driver-toolkit git 686fdac5 sha256:7cb54fcc29533a3d17cdfaaf96d37d8f76282ceacbfc8b3e9348e72f51859694
egress-router-cni git 85353bb9 sha256:19b3586e32453636d875d41047ae82a6c435c005535f602c3704502794526b49
etcd git a5421dfe sha256:15fc1f05ffde70b2074ab733ec7fadef29b40580820ae6e4483b23a621ccfccb
gcp-cloud-controller-manager git d8d3aeba sha256:48f99e5cf63abb30afd59c1b226fab074a2f7e301945abda5d44923ffb969018
gcp-cluster-api-controllers git 8fba88aa sha256:cb2aba13004d2e70c6106497a268e3d2e07dc66a9b911f94d4920cf6dc69e087
gcp-pd-csi-driver git 3aeac35b sha256:bb5235c2d8ffb54a33b8277b5e64319fb64256e41a11180587364f4e3739cffb
gcp-pd-csi-driver-operator git 44c74f24 sha256:8becb493ea2a7b6c1aa2c4f0fc146fe91bd62eb0ca38cb079117883b9c27ee6b
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:6ed3aba95e34d5bea616c7cfcace9f1813c0feec9dbbbe9ecc15fd2649a3af12
haproxy-router git b41f9d05 sha256:52dcbb7ce2f21f22e9fa3d732a064186215af0e278b6aad0840f3f1ff1c07282
ibm-cloud-controller-manager git 7422aab2 sha256:655ce7b63118c1a3188b06dcbec883f302c266e859e6d008cad46758ab2ce8f4
ibm-vpc-block-csi-driver git 176b6ef1 sha256:c08e603543629fe5a3fc526d78449ccaf779ef270778753d715db2304c46c7f4
ibm-vpc-block-csi-driver-operator git 3dfcfa12 sha256:68846ffaf0cfc8274ca2573876893dd9e440372096dd2d615709d71a528043f5
ibmcloud-cluster-api-controllers git 0453d282 sha256:74bccda67938388c0ab5108b26596b7d538a202f1fc78327c5168370522072da
ibmcloud-machine-controllers git 989bd874 sha256:3a1509a0e23d4f3deaddcde5a881df2f9e339a75da70176b408a7f03c0b5923e
insights-runtime-exporter git 0bee2d9b sha256:eba1c9262fbc7685a93bada2a8ec65c1476ac473d88379a57d20b6e3eeca1f97
insights-runtime-extractor git 0bee2d9b sha256:cabb9dc8d1e050090f12ba97be5b4419afdef85bd66b11c1d4fad4dcc4b8c416
installer-etcd-artifacts git a5421dfe sha256:f2d44cc6e0c831ded7e6b42e867f9e7224349986ec4845ba299447fdf7b2b5ca
ironic-machine-os-downloader git dbe19772 sha256:ff005578de4053339355e0a66e597fc2fb15611fa15fcd04b988a29f8d06f66c
ironic-static-ip-manager git fcd9564e sha256:4d61d98e31738cb5ccc9239b799a4d57f100b3086699525af5ff8ea4ed0a2bc1
kube-metrics-server git 037a0e7e sha256:51a36ef908b5da19a47e93d657d89ea8ec0925c6495366b9cc8375ed8013c8d3
kube-rbac-proxy git 59127756 sha256:7c6be4768d3c15090299d78568dbd6b5a85d9559147cf26c254e13f300408111
kube-state-metrics git c3da3b5f sha256:6a3391d27f75c53616918a2bbb6d152a4bb7f5665bf39c238351b66a0ab0cc0b
kube-storage-version-migrator git 4c521b09 sha256:12a16836db2b077deedfc22db8f599bc7882c83cdd7f2ddb4656663d1ca561fb
kubevirt-cloud-controller-manager git 3f4542ec sha256:45d623bccf7f00e97cb5886e4fe2403c3c3aba2f5d99d22391e25251356ef0d2
kubevirt-csi-driver git e3027025 sha256:3c5de75f8cbe5623b3d596c72c9e00cadf66f849d157075189d16fd6401320f6
libvirt-machine-controllers git a336f0b5 sha256:429eeb96c6ac01b8ef60f48a67b9f94519788a36e2e4c2b930b3935a56ba8d00
machine-image-customization-controller git 7d066746 sha256:44b0222098097ecd9e8b94f7a281065f89eeeb85d9b3f860faff5a4522d0092e
metallb-frr git 5076dbc4 sha256:5a8c05e9256a8a62ee4eb2cecbd4709aff5888866e68680af5a9213333cc032f
multus-admission-controller git 0b1b812e sha256:dc8c921411cb99929c8c66892c9df80190fc72d6fde11193023024dfed819385
multus-cni git cf0f68ec sha256:a3dd2a57f2b6a7a5e80ff740d8331294f9dacad5f561edf5cebc56f17141a71e
multus-cni-microshift git cf0f68ec sha256:d66a18d0100c770a389daaa45ce29048ef6ca6d997f689e0154a9191146d04eb
multus-networkpolicy git 6fffe5d7 sha256:cd368df5b988e522c26523dc1ec1844f668c9c02ddac9423420aeddfdc1b94fe
multus-route-override-cni git 391c1b03 sha256:cadc1e187c5f8a69e90bfd0887e2b1a228553eff36e2c9faecf5672da31300ac
multus-whereabouts-ipam-cni git 45624b63 sha256:0447afd29a9ab55543195af292b40cdb959e4fe865d903a09431cbe929c3f8c1
must-gather git 463c03ca sha256:3f07a4eaf68ad4cfc7311d2cb0653eace9191d0e16dfcadb444066c0865b76e6
network-metrics-daemon git 5ec8c6bd sha256:085c840dc8f9a69090fd18da84b32e0a0679685d8a4eb604c2aeb9d802e887fa
nutanix-cloud-controller-manager git db1f264a sha256:51280481090f561be6ea7926a350e77ac7af881794999e6e0da01722dc2e5ab1
nutanix-machine-controllers git a26db5a0 sha256:2e73165accb5788a172776077e6e7db41cc9d56e6ac02205aae22e72ed5ee290
oauth-apiserver git 75914068 sha256:7907eedb7e2cfe73690655186b201c1877a205b1557db16f7d15cd08381a9d05
oauth-proxy git 3d12ccbe sha256:14b7ff793eb43b4fa1124dd4304ac02559b9678781985fbd118a65d4addce1e7
openshift-apiserver git 85f6eb27 sha256:b330daf689152eec552def1cff4b5bae8c94ee4311ba9d23e023acea99d82f0d
openshift-state-metrics git 3106bcc3 sha256:00a7a7acd8ef3aeade223b2a2706181794477a20b2115c997510a28638587f11
openstack-cluster-api-controllers git cc76099b sha256:ccff013ec5974d76b592b10ec7fe83ae8807f1ef4357509f9461fcc39d13e8b2
openstack-machine-api-provider git 848bf658 sha256:1880ea14361c0264c012cf1f012d37f51bed110ee42843c66283076e235e7d6a
ovirt-csi-driver git 1db726a9 sha256:b9c92bc4244bb4bc41ffa9b5f38fd389c44d93e997cec681894bde9b46710b54
ovirt-csi-driver-operator git 76db379d sha256:61627ebc18066bc27015a3b3226bbbaa7f4b416b4eeab796b26f836e772d0035
powervs-block-csi-driver git f681413d sha256:d4771a03c496e1c9d34b07053b62d198c0a084d49e0592b1178fdea41c70da3a
powervs-block-csi-driver-operator git 059d95c2 sha256:befdc4279c3858de07c8edda1179bf2806a13080dc2e759a87a2864856b8d83e
powervs-cloud-controller-manager git ef83f3f5 sha256:8b1b75df9a6814650c62cb26ff4f44867c5c6a376bebdc5c6bb3fad87bc1c6dd
powervs-machine-controllers git 87f8e306 sha256:11338a88c440ee44a632abfc644fa11133f6f48ecb1cd38e5dbeafa537cfa846
prometheus git 7935baed sha256:a5e9ea9ffcb1b1474cec30a4af3e4c7b64c44bb90c7492ec6ee48bca2f443093
prometheus-alertmanager git a2346ca5 sha256:f6e72634198443bbe2e01d128f14331ee5eb3e6b0492e7a67f9dca8ffa15fe2c
prometheus-config-reloader git b8debb4c sha256:331b0253819203abd6a4be6ec384bb1927e36924deef72cdb0eed5e6a568bc64
prometheus-node-exporter git c90542d8 sha256:ca41bc30311d76398beebfb9a9c98021f54cf65c9f2a527366f93485447d95a6
prometheus-operator git b8debb4c sha256:0a0c74c5c41f716c6919c0ba4f48dc969a3cf0f335bab3a5f684cfee417839b4
prometheus-operator-admission-webhook git b8debb4c sha256:b7bb41bfcfa81460ae5f69fe3bbd1f813b2a2d4e4c9cfe84e6f37077b71ba77f
route-controller-manager git bc97534a sha256:e82cd706071fb4d21153e12c6e8503b528e55af9bc7807fc30609f5280868ac9
service-ca-operator git 4dfa6916 sha256:fcf488b8c7351d174471f6792bcb65729e72bf76e299313f0a433fe6da849fb2
telemeter git cffdabd4 sha256:532227707b2f77aff95f4161b4e06585a09e3673ca09777b55cc51019e210c09
thanos git 95f7bb21 sha256:18f0fa5fa4607ad5932879763c5d3253b56f4b91ea196841a79fc62def230105
vsphere-cloud-controller-manager git 2c21c8ce sha256:5d2321883f2be330a325d4f39309e46c61ed8d2bdc272d342590030c3227bc0b
vsphere-cluster-api-controllers git 8c61ba3d sha256:9684ae4c3b6dbde37237b0cd4fc1c5661335ba285296f5ea73755fa18137b684
vsphere-csi-driver-operator git c2b41c36 sha256:9055ad963a68f432f9ec24122e6719cdbd6871caafad7017f650a483f9ac8552

agent-installer-api-server

MGMT-20601: Update pull secret validation (#7656) #7656
MGMT-20465: Limit TNA Clusters to baremetal platform. (#7627) #7627
MGMT-20378: Disable skip MCO reboot for s390x (#7651) #7651
MGMT-20506: Reset preprovisioningimage status after cooldown period (#7628) #7628
NO-ISSUE: [master] Bump OCP versions: 4.18 (#7657) #7657
MGMT-19297: Error when querying /events endpoint with ?host_ids=uuid1,uuid2… (#7445) #7445
MGMT-20366: ironic inspection fails with Networking Connection error using 5050 port when ironic agent image override is used (#7633) #7633
MGMT-20473: Revert “MGMT-20384: Feature flag for AMD GPU supported OCP versions (#7572)” (#7614) #7572
NO-ISSUE: [master] Bump OCP versions: 4.12, 4.17, 4.15, 4.18, 4.14 (#7648) #7648
NO-ISSUE: Renovate config to update linter, go-toolset and tekton files (#7644) #7644
MGMT-14821: Remove multi-arch capability (#7613) #7613
NO-ISSUE: change deprecated keys in kustomization.yaml (#7636) #7636
MGMT-20567: Enable skip MCO reboot for day2 hosts (#7630) #7630
MGMT-20228: Enhancement to allow cancelling day-2 host’s installation (#7492) #7492
MGMT-20468: Add arbiter to cluster’s hyperthreading and disk encryption enums (#7631) #7631
Konflux build pipeline service account migration for assisted-service-rhel9-acm-ds-main (#7609) #7609
MGMT-20272: Cluster attribute finalizing_stage_started_at show wrong value (#7594) #7594
Konflux build pipeline service account migration for assisted-service-saas-main (#7611) #7611
Konflux build pipeline service account migration for assisted-service-rhel8-acm-ds-main (#7608) #7608
OCPBUGS-54319: mirror changes to openshift-installer with oci-eval-user-data (#7619) #7619
NO-ISSUE: Update Konflux references (#7582) #7582
MGMT-20464: Fix NFD detection of NVIDIA GPUs (#7597) #7597
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

Konflux build pipeline service account migration for assisted-installer-controller-acm-ds-main (#1108) #1108
Konflux build pipeline service account migration for assisted-installer-ds-main (#1110) #1110
Konflux build pipeline service account migration for assisted-installer-controller-ds-main (#1109) #1109
Konflux build pipeline service account migration for assisted-installer-acm-ds-main (#1107) #1107
MGMT-20567: Enable HTTP endpoint for MCO ignition (#1117) #1117
NO-ISSUE: Update Konflux references (#1114) #1114
Full changelog

agent-installer-node-agent

NO-ISSUE: Update Konflux references (#1002) #1002
Konflux build pipeline service account migration for assisted-installer-agent-acm-ds-main (#992) #992
NO-ISSUE: Update Konflux references (#984) #984
Full changelog

agent-installer-utils

OCPBUGS-56210: OVE builder: Remove RHEL9 image from additionalImages #91
OCPBUGS-56112: configure the channel for each OLM operators #89
OCPBUGS-55769: Use internal image registry #78
AGENT-1195: bump appliance image to 4042ba #86
OCPBUGS-55708: Include RHEL 9 guest image to support VM launches via … #84
Full changelog

aws-cluster-api-controllers

OCPBUGS-53003: Remove references to master branch #551
OCPBUGS-55947: Update manifests to remove reliance on v1beta1 admission registration #549
Full changelog

aws-ebs-csi-driver

ART-12521: update go mod dependency for konflux #285
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

STOR-2408: Bump OLM metadata to 4.20 #382
Full changelog

aws-machine-controllers

OCPBUGS-55720: Update machine-api-operator pkg with fixes #127
Full changelog

azure-disk-csi-driver

NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #103
Full changelog

azure-file-csi-driver

OCPBUGS-54897: UPSTREAM: 2515: allow deleting cross-subscription snapshots #92
Full changelog

azure-machine-controllers

OCPBUGS-55372: Update virtualmachines service to armcompute/v5 SDK #141
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-56262: Added better logging for vSphere destroy #9716
OCPBUGS-56079: apply fixes for yaml-lint errors #9708
OCPBUGS-53107: Set appropriate KillMode for systemd services #9562
OCPBUGS-55683: Pre-create password files for agent installer OVE #9679
OCPEDGE-1673: [TNF] Render secret manifests from fencing credentials block. #9635
OCPBUGS-47719: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9693
OCPBUGS-55817: add Lsv4 and Lasv4 series as tested #9696
OCPBUGS-55772: Add support for Azure TDX confidential VM type #9691
no-jira: add jcpowermac to nutanix review/approve groups #9697
CORS-3960, OCPBUGS-55952: Remove Terraform Build Artifacts #9667
no-jira: add PeaceRebel (Bipin) to coreos approvers & reviewers list #9687
OCPBUGS-54502: ensure ctrplane nodes can access bootstrap MCS #9689
OCPBUGS-54566: Apply defaults then validate confidentialCompute #9637
OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
no-jira: fixes to get shellcheck to pass #9669
OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
OCPEDGE-1707: Add Disable Certificate Verification API #9640
no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
Full changelog

baremetal-operator

OCPBUGS-55717: Merge upstream #414
Full changelog

baremetal-runtimecfg

NO-ISSUE: Add emy as reviewer #346
Full changelog

cli, cli-artifacts, deployer, tools

NO-JIRA: OCPBUGS-46604: Clarify behavior of since-time flag in oc adm must-gather command #2019
WRKLDS-1103: Adding sos.conf file for default sos config into the tools image #2003
NO-JIRA: make ‘oc status’ compatible with bare kube #1947
Full changelog

cloud-credential-operator

OCPBUGS-53429: Render: configure proxy on bootstrap static pod #855
OCPBUGS-55777: Sync OpenStack CA Bundles from legacy location #850
OCPBUGS-54829: golang.org/x/net v0.38.0 #851
Full changelog

cluster-capi-controllers

OCPCLOUD-2917: Merge https://github.com/kubernetes-sigs/cluster-api:v1.10.1 (647a1b7) into master #238
OCPBUGS-55947: Regenerate manifests to drop v1beta1 admissionregistration usage #236
Full changelog

cluster-capi-operator

OCPCLOUD-2893: Add related objects to must-gather config #267
OCPBUGS-55985: fix: machine: propagate non-authoritative deletion #290
OCPBUGS-55947: Should not use v1beta1 of the AdmissionRegistration API group #289
Full changelog

cluster-config-api

OCPBUGS-55664: remove VSphereDriverConfiguration feature gate #2319
CNTRLPLANE-367: Update Authentication API GoDoc for OIDC-related fields #2314
OCPNODE-2557, OCPNODE-3225: features: set user namespace features on by default #2305
OCPBUGS-55662: Drop BareMetalLoadBalancer feature gate #2312
CCXDEV-14850: align insights DataGather with config #2248
Remove upstream on-by-default cloud feature gates (CloudDualStackNodeIPs, DisableKubeletCloudCredentialProviders) #2249
SPLAT-2168: introduce AWSDedicatedHosts feature gate #2291
OCPBUGS-55666: Remove MachineAPIProviderOpenStack feature gate #2307
MCO-1657: FeatureGate for Bootimage updates for the vSphere platform #2301
SPLAT-2072: Removed VSphereMultiVCenters feature gate #2231
SPLAT-2158: Azure Multi Disk feature gate #2289
README: Add criteria for featuregate test result windows and flake handling #2302
Full changelog

cluster-etcd-operator

CNTRLPLANE-340: Issue shorter certs when ShortCertRotation feature gate is set #1315
OCPBUGS-55757: adjust alerts according to platform #1422
OCPBUGS-55111: Remove ‘meta’ keyword from pcs resource create command #1417
Full changelog

cluster-ingress-operator

OCPBUGS-55317: Check capabilities before watching OLM resource #1232
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-55013: SCC: add hostmount-anyuid-v2 #1834
OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects - reapply #1831
OCPBUGS-52466: bump library-go to bring in updated audit policies #1837
OCPBUGS-55274: Change validity / refresh for some certs which should not be affected by dev cycle rotation change #1832
Full changelog

cluster-kube-scheduler-operator

OCPNODE-3192: enable the scheduler plugin if the feature gate DynamicResourceAllocation is enabled #561
Full changelog

cluster-machine-approver

OCPBUGS-19856: Improve log message when searching for node by InternalDNS #269
No-Jira: ignore test file csr_check_test.go #270
Full changelog

cluster-monitoring-operator

NO-JIRA: [bot] Synchronize versions of the downstream components #2600
MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2549
Full changelog

cluster-network-operator

OCPBUGS-51093, OCPBUGS-55157: Pass ‘–gateway-mode’ flag for ovnkube-cluster-manager #2696
OCPBUGS-55488: Remove environment variables related to ARO HCP MIv2 for CNO #2686
Full changelog

cluster-node-tuning-operator

Add NetworkPolicy k8s resources (#1323) #1323
OCPBUGS-55989: E2E: Functional tests for align cpus by UncoreCache Feature (#1302) #1302
NO-JIRA:e2e:daemonset: pod phase and events (#1289) #1289
Full changelog

cluster-olm-operator

OPRUN-3883: Add network-policy support #117
Full changelog

cluster-storage-operator

OCPBUGS-54491: sync Azure File permissions with upstream docs #2 #578
Full changelog

cluster-version-operator

OTA-1531: [4/x] cvo: extract config informer creation #1189
OTA-1010: Add a new version of GetImplicitlyEnabledCapabilities #1133
OTA-1531: [3/x] cvo: read version from release metadata on startup #1188
OTA-1531: [2/x] cvo: refactor LoadUpdate #1185
OTA-1531: [1/x] cvo: refactor option processing #1184
OTA-209: Add sync logic to the CVO configuration controller #1170
OCPBUGS-53062: add the ports Field into the CVO’s container spec #1180
NO-JIRA: Makefile: verify -> verify-yaml #1183
Full changelog

console

OCPBUGS-37977: Refresh console TLS certs at runtime #14971
OCPBUGS-55419: improve description of the custom logos CLI args #15003
CONSOLE-4572: classnames -> react-styles #15050
OCPBUGS-55808: fix cy.createProject command #15026
OCPBUGS-55896: Refactor Kebab+ActionsMenu to use PF #15028
OCPBUGS-56039: Update supported languages in Internationalization docs #15046
OCPBUGS-55919: remove 60 day alert from cluster update modal #15045
CONSOLE-4550: col-sm-6 => GridItem sm={6} #15014
OCPBUGS-54234: Fix impersonate group action #14915
OCPBUGS-46385: fix alignment of Getting Started item icons #15025
CONSOLE-4393: Update to Node.js® v22 #14841
OCPBUGS-55412: Wrap ListPageHeader action with a div #15008
OCPBUGS-55323: Add patternfly/react-topology to shared modules list of dynamic plugin sdk #14993
OCPBUGS-55430: resolve http Context and Client handling #15009
OCPBUGS-55629: get go mod tidy to pass #15024
OCPBUGS-53428: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15001
OCPBUGS-55375: add data-quickstart-id to quick create button #14998
OCPBUGS-54157: Sample segment sessions #14990
OCPBUGS-49291: Improving the DevExp for passing the CSP directives to console per flag + Make use of connect-src and object-src directives #14701
OCPBUGS-53320: Add DEVCONSOLE_PROXY flag #15006
OCPBUGS-55633: fix bug where Critical Alerts section cannot be collapsed #15015
Full changelog

console-operator

OCPBUGS-43792: Add plugins order to console config #980
OCPBUGS-55698: Lift FeatureGate by bumping openshift/api #984
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-56028: [cinder-csi-plugin] Don’t report topology capability when –with-topology=False #325
Full changelog

gcp-machine-controllers

OCPBUGS-46387: allow instances with unknown quotas to be created #114
Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

OCPBUGS-55631: UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes #2288
NO-JIRA: Fix generation of test names #2296
OCPBUGS-54208: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2277
OCPBUGS-54318: UPSTREAM: 131236: RWX tests should create RWX volumes #2279
OCPBUGS-55945: Bump main 1.32.4 #2292
TRT-2103: Revert “NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2291
NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2287
OCPBUGS-55632: Fix node expansion on older kubelets #2282
TRT-2066: Use OTE generated labels for skips in test-kubernetes-e2e.sh #2255
Full changelog

hypershift

CNTRLPLANE-844: Remove DeploymentConfig usage #6157
NO-JIRA: Fix TestHostedClusterWatchesEverythingItCreates not working locally #6149
NO-JIRA: Keep checking for rollouts during upgrade HO test for five minutes #6097
OCPBUGS-56205: Switch back to rh catalog #6154
OCPBUGS-56164: Fix HyperShift Operator Enterprise contract konflux pipeline #6138
OCPBUGS-56011: Configure ClusterServiceLoadBalancerHealthProbeMode a… #6099
CNTRLPLANE-565: Remove NodePool CapacityReservation API featuregate #6132
CNTRLPLANE-645: Rename NodeCount flag to Replicas #6094
CNTRLPLANE-844: Remove unused DeploymentConfig references #6146
NO-JIRA: test/setup: use case-sensitive prometheusK8s in monitoring config #6150
NO-JIRA: Increase the content width in the upstream docs #6147
NO-JIRA: cpov2: fix structured authentication configuration serialization #6135
CNTRLPLANE-269: Remove legacy machine approver and ign server reconciliation code #6133
OCPBUGS-55913: Fix Job status returning empty reason and message #6134
CNTRLPLANE-269: Remove DeploymentConfig usage from cpov2 #5724
OCPBUGS-37323: MarkPersistentFlagRequired does not work since CLI refactoring #5649
NO-JIRA: Fix minor issues with Azure HC creation doc #6128
OCPBUGS-55504: Add postStart hook to kube-apiserver container #6074
CNTRLPLANE-709: Add ability to limit platform specific resources managed by HostedCluster #6039
CNTRLPLANE-261: Enable pprof in hosted control plane etcd #6003
CNTRLPLANE-334: Update KASv2 structured authentication configuration #6119
CNTRLPLANE-334: Update KAS structured authentication configuration generation logic to use new uid and extra field #6073
OCPBUGS-54483: Add support for registry root entry only in the IDMS/ICSP #6100
OCPBUGS-55357: Only build main branch components #6078
CNTRLPLANE-265: Enable staticcheck linter in golangci-lint #5836
CNTRLPLANE-740: Add DR for HCP using OADP and Hypershift plugin #6077
NO-JIRA: bump HO supported version to 4.20 #6006
CNTRLPLANE-798: ho: changes to ref’ed resources triggers HC reconciliation #6103
Full changelog

insights-operator

feat: move HTTP status code from condition.Reason to condition.Message (#1083) #1083
feat: add gatheringDisabled condition (#1078) #1078
Full changelog

installer-altinfra

OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
no-jira: fixes to get shellcheck to pass #9669
OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
OCPEDGE-1707: Add Disable Certificate Verification API #9640
no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
Full changelog

ironic

METAL-1344: Do not install sushy-oem-idrac separately #653
METAL-1345: Install scciclient from source #652
METAL-1264: Update to latest upstream content #655
OCPBUGS-55381: Extract files one-by-one in logwatch #654
Full changelog

ironic-agent

METAL-1264: Update to latest upstream content #186
OCPBUGS-55350: collect the entire journal from the host #184
Full changelog

keepalived-ipfailover

OCPBUGS-48318: Change default value for OPENSHIFT_HA_VRRP_ID_OFFSET #206
Full changelog

machine-api-operator

OCPBUGS-56159: correct aws kms permissions #1370
OCPBUGS-55461: Changed machineset tests to be serial #1365
OCPBUGS-55720: fix: use patch for machine/machineset status #1362
OCPBUGS-55461: Fixes machineset paused condition nil pointer #1361
OCPBUGS-55461: Revert “Added skip for when config not multi nic” #1363
Full changelog

machine-config-operator

OCPBUGS-53390: Fix interrupt state to account for failure correctly #5054
OCPBUGS-55967: Add hot loop detection in the boot image controller #5037
OCPBUGS-55439: scope MCD node listers to current node #5015
OCPBUGS-55770: Compare the osImageURLs for OS validation check #5041
MCO-1654: Add new runbook for KubeletHealthState to alert #5042
OCPBUGS-49728: Adapt MCC to use LayeredNodeState and remove LayeredPoolState #4841
OCPBUGS-54697: error from generateAndValidateRenderedMachineConfig function can be misleading #5033
OCPNODE-3173: Disable OCI artifact mount by default. #5016
OCPBUGS-55597: OWNERS: update owners file with current MCO team members #5024
OCPBUGS-55450: Only populate Status.PinnedImageSets.CurrentGeneration on valid generation value #5023
OCPBUGS-55327: Bugfix Ignition compression merge #5006
OCPBUGS-55262: Use auto=start only for IPsec out connections #5017
OCPBUGS-55713: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5030
OCPBUGS-52940: AWS Custom-DNS: Update services that run on control plane nodes #4939
OCPBUGS-41485: Update MCD Log Output to Clarify No Configuration Change #5019
Full changelog

machine-os-images

OCPBUGS-55810: Dummy change to force a rebuild for 4.20 #62
Full changelog

monitoring-plugin

OU-712: fix: add missing alertname field to silence alert #413
OU-794: fix: update monitoring and virtualization routes to avoid overriding console routes #410
OU-774: bound table scroll and column alignment #402
RHINENG-17675: feat: add group id to url params #403
RHINENG-10537: fixed broken delete chip group for incidents filters #401
OU-197: feature: upgrade react router to v5 compat #400
OU-745: Check for CSRF change on each fetch cycle #404
Full changelog

network-interface-bond-cni

OCPBUGS-54229: Upstream sync 07-05-2025 #67
NO-JIRA: Add ci-operator file #68
Full changelog

network-tools

NO-JIRA: Add aurko, comment jakob, remove nadia #143
NO-JIRA: Fix github epic ID and username matching #142
Full changelog

networking-console-plugin

CNV-61536: align Modals with PatternFly default #242
CNV-60062: fix links to upstream documentation #241
Full changelog

oauth-server

OSASINFRA-3534: Bump Gophercloud to v2 #170
Full changelog

oc-mirror

changes the signature mirroring default to disabled (#1143) #1143
OCPBUGS-54587: v2: bump containers/common dep to 0.63.0 (#1138) #1138
CLID-182: Add spinner to release collector mirror to disk or mirror to mirror (#1085) #1085
no-jira: Disable go workspace and build v2 as a binary (#1078) #1078
OCPBUGS-55100: implements registries.d file as specified in containers/image docs (#1131) #1131
OCPBUGS-54220: v2/imgbuilder: use –authfile when set (#1129) #1129
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #339
NO-ISSUE: Synchronize From Upstream Repositories #337
NO-ISSUE: Synchronize From Upstream Repositories #336
NO-ISSUE: Synchronize From Upstream Repositories #333
NO-ISSUE: Synchronize from upstream #331
Full changelog

openshift-controller-manager

OCPBUGS-52193: legacy image pull secret rollback controller #380
OCPBUGS-54695: Empty proxy variables are causing issues during the build #373
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

NO-ISSUE: Synchronize From Upstream Repositories #1003
NO-ISSUE: Synchronize From Upstream Repositories #1002
NO-ISSUE: Synchronize From Upstream Repositories #1000
NO-ISSUE: Synchronize From Upstream Repositories #997
OCPBUGS-53161, OPRUN-3880: Synchronize From Upstream Repositories #996
Full changelog

operator-marketplace

NO-JIRA: OWNERS: Add camilamacedo86 and tmshort as approvers #632
NO-ISSUE: Bump github.com/operator-framework/api from 0.30.0 to 0.31.0 #627
NO-ISSUE: (CI) - Add check to avoid we upgrade by mistake the go vers… #625
NO-ISSUE: Add dependabot k8s and go library groupings #626
NO-ISSUE: Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 #620
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

Revert “OCPBUGS-55824: Revert “OCPBUGS-44285, OCPBUGS-37733, OCPBUGS-55824, OCPBUGS-54375: Downstream Merge 7th May 2025”” #2568
OCPBUGS-55824: Revert “OCPBUGS-44285, OCPBUGS-37733, OCPBUGS-55824, OCPBUGS-54375: Downstream Merge 7th May 2025” #2557
OCPBUGS-37733, OCPBUGS-44285, OCPBUGS-54375, OCPBUGS-55824: Downstream Merge 7th May 2025 #2550
CORENET-5975: Dockerfile: Unpin OVS and consume the latest from FDP. #2525
Full changelog

prom-label-proxy

NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.11.1 #379
Full changelog

stream-coreos, stream-coreos-extensions

NO-JIRA: bump verison to 4.20 #1804
NO-JIRA: c9s/c10s repos: use basearch var for extras repo #1819
NO-JIRA: README.md: add Mermaid diagram #1816
NO-JIRA: tree: delete base compose files, rework README #1811
NO-JIRA: Remove kernel-rt-kvm for cs9 and cs10 #1814
NO-JIRA: tests: fix RHEL 10.1 handling in kernel replace test #1813
Full changelog

tests

OCPBUGS-55211: use regular user to create httproute #29697
Revert “Revert “TRT-2049: check for any watch requests”” #29723
CORENET-5854: networking: add VRF-Lite test cases #29669
OCPEDGE-1678: Fix failed etcd test on arbiter ci run #29694
NO-JIRA: update networking owners #29786
NO-JIRA: increase api client timeout to match those allowed by kube-apiserver #29761
NO-JIRA: support skipping [OCP]FeatureGate tests #29760
OCPBUGS-55384: OCPBUGS-55968: Fix PIS tests on SNO & Enable applicable MCN & PIS tests on SNO #29785
OCPNODE-2315: Add nested container test #29781
OCPBUGS-55994: Do not set the MTU when using NetworkAttachementDefinition #29768
NO-JIRA: Test load balancer metrics #29675
NO-JIRA: Fix bearer token exposure in exit condition as well #29575
NO-ISSUE: Automated - Update synthetic test data #29716
TRT-2106: Fix race in MCN test cleanup #29775
OCPBUGS-55785: bump limits #29778
Revert “OCPNODE-2315: Add nested container test” #29779
CNTRLPLANE-371: Update etcd test data for k8s 1.33 release (missing data) #29773
OCPBUGS-55712: (olmv1 tests) Use exponential backoffs for verifyAPIEndpoints #29756
OCPBUGS-55945: Bump main 1.32.4 #29772
CORENET-5875, CORENET-5876, OCPBUGS-55910: Add EgressIP and L2 UDN route advertisements tests #29727
OCPNODE-2315: Add nested container test #29594
NO-JIRA: faultyloadbalancer test: pass instead of skip #29753
OCPBUGS-55902: pkg/monitortestlibrary/allowedalerts: Ignore KubeJobFailingSRE for now #29747
NO-ISSUE: OLMv1: Preflight: Relax checking of error message #29766
CNTRLPLANE-371: Update etcd test data for k8s 1.33 release #29699
OCPBUGS-55785: bump limits #29763
OCPNODE-2999: Add SigstoreImageVerification e2e tests #29652
OKD-243: Skip GatewayAPIController tests for OKD #29742
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-55020: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #142
Full changelog

vsphere-problem-detector

OCPBUGS-53217: replace operator client #182
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github