4.22.0-0.okd-scos-nightly-2026-03-25-062053

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:4.22.0-0.okd-scos-nightly-2026-03-25-062053

Team Approvals:

Tests:

Blocking jobs
- aws Pending (1 retry) periodic-ci-openshift-release-main-okd-scos-4.22-e2e-aws-ovn
  - Attempt 1 Failed
  - Attempt 2 Pending
Informing jobs
- agent-single-node-ipv6 Succeeded periodic-ci-openshift-release-main-okd-scos-4.22-e2e-agent-single-node-ipv6
- aws-ovn-techpreview Pending (1 retry) periodic-ci-openshift-release-main-okd-scos-4.22-e2e-aws-ovn-techpreview
  - Attempt 1 Failed
  - Attempt 2 Pending
- aws-upgrade Pending (1 retry) periodic-ci-openshift-release-main-okd-scos-4.22-e2e-aws-ovn-upgrade
  - Attempt 1 Failed
  - Attempt 2 Pending
- aws-upgrade-minor Failed periodic-ci-openshift-release-main-okd-scos-4.22-upgrade-from-okd-scos-4.21-e2e-aws-ovn-upgrade
- gcp Failed periodic-ci-openshift-release-main-okd-scos-4.22-e2e-gcp
- vsphere Failed periodic-ci-openshift-release-main-okd-scos-4.22-e2e-vsphere-ovn

Upgrades from:

Loading changelog, this may take a while ...

Changes from 4.22.0-0.okd-scos-nightly-2026-03-13-092255

Created: 2026-03-25 06:21:02 +0000 UTC

Image Digest: sha256:48ad4d7dc9609d0fcd3017284e2199862ef2c6d7581b93d2d383a770b685316c

Components

Kubectl upgraded from 1.34.1 to 1.35.2
Kubernetes upgraded from 1.35.1 to 1.35.2
Kubernetes Tests 1.34.1
CentOS Stream CoreOS 10 10.0.20260310-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
MachineConfigNodes (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PinnedImages (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NewOLMOwnSingleNamespace (0 tests)	Disabled	Disabled (Changed)	Disabled	Enabled	Disabled	Disabled (Changed)	Disabled	Enabled
AWSEuropeanSovereignCloudInstall (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
NewOLMConfigAPI (0 tests)				Enabled (New)				Enabled (New)
NoOverlayMode (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)
TLSAdherence (0 tests)			Enabled (New)	Enabled (New)			Enabled (New)	Enabled (New)

Rebuilt images without code change

agent-installer-csr-approver git c3de3904 sha256:40cefc66e55010c6fbde0ec4b2efad8569c296132409c429b550d8aa6cf24745
agent-installer-node-agent git dd12f4a8 sha256:bc444862b2bf8baff1cf71a217985ba2022738775952143b8552674183726f00
agent-installer-orchestrator git c3de3904 sha256:b7c97ea68678b8f3e35f8111501878cb246674b983e94817cf22e5473f4a9b0d
aws-cluster-api-controllers git 2d7aa679 sha256:b89f358b2dc82ac9851a4b313c290ef4e7a0f3a950b300ff409f5b92e2aac5cd
azure-cluster-api-controllers git 104ebbd2 sha256:7bdfd15e9dfd79797198da1b9554181502d0fbc97289d508dcc51a9fed2ff76d
azure-disk-csi-driver git 950b1622 sha256:4fc75cf11ca8c6dbe7ea373b1140fa1dec716bde4a9483dd2a1abcf69832a84b
azure-file-csi-driver git c481e92b sha256:0de86f2d1082b4b1d03fa37fdfb9c01fb3683e7269a6ff9fe8302afe9b517e8c
azure-service-operator git 17e57462 sha256:c9f1426849d47bc09432150cf3450474f1e184e38db04d75afd62200cb66ca07
azure-workload-identity-webhook git d71abde3 sha256:2a92b2ced928ebb5b890d27ee0933faa079a57388837a2e723dc588ec7878e0b
baremetal-cluster-api-controllers git ad4eb8a5 sha256:186cbc9095290c20d60663c2c265ad3548042614c37dea55120b32e34536b00b
cluster-openshift-controller-manager-operator git 8e04fd3a sha256:de2272ce7ff3cbef709970faa9a1262aef600c0e6dcff698360e06d38a1c4403
container-networking-plugins git 747ad66c sha256:9b354f2e9be6bd3caa73ca3cf16db3eba0023e9a29092a65fe110104ba4c5c9a
coredns git 0dded2d2 sha256:47731d57e262ab91e59a24fa1dba4f995f847ad2bf5107b8dbd415a2ac93ac11
csi-driver-nfs git e9f24940 sha256:8bb437d8e3e4546cb234840aecca4de003ee614cda4af09cb49a95adef37b609
docker-builder git 711f2e68 sha256:80eb56456489e6a83e8d999a59fcf63fb5542e68a882b070cc8008b8ef2648d9
egress-router-cni git 5e0f8d1b sha256:33890aeac2bca57e7a6a4a052caf3205e537bafa417ada84e932e0cba0b2a996
etcd git d8d67b8c sha256:4942fb2b252ddcb27a91e2c4540de93b9e762ca792d1738958130ecadffd0d8c
gcp-cluster-api-controllers git 37085d52 sha256:e9366a80a628be3a8b4c59c6a72b884afcde054250b4524c1fdb5aa6b2465143
ibm-cloud-controller-manager git d9222a1c sha256:692ec0da2badf6c28c3c1b04f2ca9a0eacedbb869d68b7386498accce16d68e9
ironic-agent git 0336e638 sha256:17385b04799e448e7940a7f504f9ebbdcb1c251457755062a2b0af5519722ad8
kube-state-metrics git 6fa06eac sha256:dc0cd463c718eb5eb3f040e6282750da04574ce8e9581f04b9b1df4da4985e91
machine-os-images git d819e02d sha256:a3b230d307d9906125b42a8a73af9f0e303a23471e88d3f4926cca27fe282b9e
multus-route-override-cni git 08af4127 sha256:61c392719df58240132494181c878ff95788d8d164007e3ef3a7a811a1c06cf7
multus-whereabouts-ipam-cni git d691040e sha256:409721a39933aa72400f2491901320a9af1f94aa859c4a86bffef7c978caf942
network-interface-bond-cni git 297eeb43 sha256:d33ecbffa0b7724d562c03b3985e7790e8d47bbcc047169039b2062e56a0d6a1
network-tools git a6bcd3cd sha256:04a5b3ae55bd0cd19e1bf5a90e3914b6ae8c52f4ff2b49d1c45961a94b49d9c2
openshift-apiserver git 56aa2d96 sha256:92404f7697fd731862d6f6caa9eeafc477b4875f6da9d32d8dd985b47befd2bc
openshift-controller-manager git 26d20fea sha256:33935b0202fff90b9732362b39b25ca1ccf1e85d571ef69524c0906db9347c2f
prometheus git 9b96528f sha256:c01138b81836bf358cee1101dbf16d5af04842e8f4be7d0fe38b850d3d1e1b8a
vsphere-cluster-api-controllers git f12e5051 sha256:8b889f78e31a104e63e45bfa1e8b6e6d08016126aba2c7d095ddb583dfa10c83
vsphere-csi-driver git e5c5c1ea sha256:cab32fd2f2b2364dd175b4301a43631a342881c71c7c00cae6969d9a7448b35d
vsphere-csi-driver-syncer git e5c5c1ea sha256:fe30f7d8a3e5cd4d82e64436dc2dc435f2d3c43cdafdd922be937962b5777098

agent-installer-api-server

MGMT-23446: TNA none platform on 4.19 (block for 4.21 and lower) #10013
MGMT-23045: toggle metal3 integration #9933
OCPBUGS-78989: Gate customDeploy on PreprovisioningImage having correct ISO #10032
MGMT-23339: Add url to release image comparison for Kube API versions #10030
MGMT-23550: Add feature usage for new CNI types #10027
NO-ISSUE: add skipper skill #10014
MGMT-23432: add third parties CNI support to KUBE API mode #10015
NO-ISSUE: [master] Bump OCP versions: 4.21 #10023
NO-ISSUE: Add Go workspace files to .gitignore #10000
Full changelog

agent-installer-ui

chore(deps): update dependency start-server-and-test to v2.1.5 (#3484) #3484
Set customManifestsUpdated when users remove a manifest (#3482) #3482
Red Hat Konflux update assisted-ui-chatbot-saas-main (#3478) #3478
MGMT-23515: Use Network type support level (#3465) #3465
Red Hat Konflux purge assisted-installer-chatbot-main (#3477) #3477
fix(deps): update dependency @patternfly/react-core to v6.4.1 (#3438) #3438
chore(deps): update dependency nodemon to v3.1.14 (#3435) #3435
chore(deps): update dependency @vitejs/plugin-react-swc to v3.11.0 (#3444) #3444
chore(deps): update dependency @openapitools/openapi-generator-cli to v2.30.2 (#3442) #3442
chore(deps): update dependency @redhat-cloud-services/frontend-components to v7.1.1 (#3470) #3470
fix(deps): update dependency @patternfly/react-code-editor to v6.4.1 (#3437) #3437
fix(deps): update dependency @patternfly/react-table to v6.4.1 (#3440) #3440
chore(deps): update dependency @redhat-cloud-services/frontend-components-config to v6.7.54 (#3406) #3406
chore(deps): update dependency @sentry/browser to v7.120.4 (#3443) #3443
chore(deps): update dependency eslint to v8.57.1 (#3432) #3432
chore(deps): update dependency axios to v1.13.6 (#3431) #3431
chore(deps): update dependency @types/node to v18.19.130 (#3429) #3429
chore(deps): update dependency @types/lodash to v4.17.24 (#3428) #3428
Bump ajv from 6.12.6 to 6.14.0 (#3411) #3411
chore(deps): update dependency prettier to v2.8.8 (#3436) #3436
chore(deps): update dependency msw to v1.3.5 (#3434) #3434
chore(deps): update dependency eslint-config-prettier to v8.10.2 (#3433) #3433
chore(deps): update dependency @types/react-redux to v7.1.34 (#3430) #3430
chore(deps): update dependency @types/eslint to v8.56.12 (#3427) #3427
chore(deps): update dependency @tsconfig/recommended to v1.0.13 (#3426) #3426
Bump flatted from 3.3.1 to 3.4.2 (#3469) #3469
fix validations for NTP and Proxy in above sea level ABI flow (#3464) #3464
Add identifiers and checked state attribute to custom manifests switch (#3466) #3466
MGMT-23516: Left navigation menu is cut off (#3463) #3463
UI doesnt save the data filled by the user (#3452) #3452
fix ISO file name (#3462) #3462
Tech Preview badge should appear at the end of the line (#3461) #3461
AGENT-1136: Add USER_AUTH_TOKEN support to disconnected UI proxy (#3454) #3454
Bump rollup from 4.50.1 to 4.59.0 (#3421) #3421
Bump immutable from 3.8.2 to 3.8.3 (#3451) #3451
MGMT-23131: Third-Party CNI Support (#3457) #3457
Fix CVE-2026-27904: Bumping minimatch to latest versions via yarn resolutions (#3459) #3459
Full changelog

aws-cloud-controller-manager

OCPBUGS-69888, OCPBUGS-76344, OCPCLOUD-3276: Merge https://github.com/kubernetes/cloud-provider-aws:master (ea961d6) into main #131
Full changelog

aws-ebs-csi-driver

TRT-2576: Revert #301 “STOR-2766: Rebase to upstream v1.55.0 for OCP 4.22” #303
STOR-2766: Rebase to upstream v1.55.0 for OCP 4.22 #301
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OCPBUGS-77674: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.22 #516
OCPBUGS-77553: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.22 #513
OCPBUGS-77612: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.22 #514
STOR-2884: Add service to generate a TLS cert for EFS operator #522
STOR-2884: Add service to generate a TLS cert for SMB operator #520
NO-JIRA: Inherit any OpenShift global CodeRabbit setting #519
Full changelog

aws-machine-controllers

SPLAT-2700: Added shared tags for BYO DH #181
OCPCLOUD-3283: K8s 1.35 bump #179
CORS-4166: enable IPv6 IMDS endpoint and private DNS configuration for dualstack #177
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPCLOUD-3281: Merge https://github.com/kubernetes-sigs/cloud-provider-azure:master (314ccf1) into main #155
Full changelog

azure-machine-controllers

OCPCLOUD-3280: Bump k8s 1.35 #189
Full changelog

baremetal-installer, installer, installer-artifacts

CORS-4359: feature gate install into EU Sovereign Cloud #10412
OCPBUGS-59514: redacted install config for baremetal #9972
AGENT-1461: Do not discard NMStateConfig when agent-config is on disk for unconfigured-ignition #10393
AGENT-1471: Fix race condition: wait for agent-register-infraenv before showing UI URL #10422
MCO-2116: Generate OSImageStream manifest #10357
AGENT-1136, AGENT-1229: Add auth to unconfigured-ignition #10381
SPLAT-2172: AWS dedicate host support #10079
MCO-2133: Select bootimages based on OSImageStream #10321
CORS-4336: Support for AWS European Sovereign Cloud #10303
OCPBUGS-74390: Allow all instance types in the install config for GCP #10271
no-jira: fix SC2328 shellcheck errors #10413
AGENT-1458: Don’t auto-calculate RendezvousIP in unconfigured-ignition #10405
CORS-4358: aws: add ICMPv6 ingress rule for dual-stack clusters #10408
CORS-4235: Machine Management API Field & Feature Gate #10402
no-jira: bump golangci-lint to v2.10.1 for Go 1.25 support #10397
OCPBUGS-57603: Disallow cross subscription encryption sets #10335
OCPBUGS-64842: Disable LoadBalancer in cloud config when Octavia is unavailable #10326
CORS-4288: docs(azure): Restructure tested VM families with Series-based organization #10314
CORS-4072: dualstack support for AWS #10353
CORS-4355: define required permissions for dualstack install #10371
CORS-3897: Dual stack support for cluster manifest & VNet #10319
CORS-4078: aws: standardize AWS client setup in the destroy code #10340
OCPBUGS-75250: Use correct Project ID with GCP Shared VPC #10297
METAL-1668: simplify BMC CA assets #10243
METAL-1750: baremetal: use q35 machine type with EFI firmware for bootstrap VM #10349
OCPEDGE-2383: feat: update sno minimum to 4vcpu #10283
CNTRLPLANE-2847: bump Go 1.25, openshift/api, and k8s.io dependencies #10376
Full changelog

baremetal-machine-controllers

OCPCLOUD-3346: Bump deps + Add centralized TLS configuration to Metal3Remediation webhook server #248
Full changelog

baremetal-operator

METAL-1720: Merge upstream #467
Full changelog

cli, deployer, tools

MCO-1961: Allow multiple machine-os versions #2157
Revert “TRT-2587: Revert #2219 “CNTRLPLANE-2769: Bump k8s dependencies to 1.35”” #2241
TRT-2587: Revert #2219 “CNTRLPLANE-2769: Bump k8s dependencies to 1.35” #2236
TRT-2585: pkg/cli/admin/release/extract: Support zero-output extraction #2233
OCPBUGS-78701: adm policy add-role-to-user: Fix –dry-run=server #2231
OCPBUGS-77845: Update release extract inclusion to support feature gates and major version #2222
NO-ISSUE: pkg/cli/admin/release/extract: Read manifests into memory #2232
NO-JIRA: Add .coderabbit.yaml and AGENTS.md configurations #2229
CNTRLPLANE-2769: Bump k8s dependencies to 1.35 #2219
NO-JIRA:Fixing manifest ci failure #2228
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cli-artifacts

MCO-1961: Allow multiple machine-os versions #2157
Revert “TRT-2587: Revert #2219 “CNTRLPLANE-2769: Bump k8s dependencies to 1.35”” #2241
TRT-2587: Revert #2219 “CNTRLPLANE-2769: Bump k8s dependencies to 1.35” #2236
TRT-2585: pkg/cli/admin/release/extract: Support zero-output extraction #2233
OCPBUGS-78701: adm policy add-role-to-user: Fix –dry-run=server #2231
OCPBUGS-77845: Update release extract inclusion to support feature gates and major version #2222
NO-ISSUE: pkg/cli/admin/release/extract: Read manifests into memory #2232
NO-JIRA: Add .coderabbit.yaml and AGENTS.md configurations #2229
CNTRLPLANE-2769: Bump k8s dependencies to 1.35 #2219
NO-JIRA:Fixing manifest ci failure #2228
OCPBUGS-64840: image extract: Use Explicit strategy for ICSP/IDMS #2202
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cloud-credential-operator

CCO-788: Remove kube-rbac-proxy container from metrics #983
OCPBUGS-74627: Fix infrastructure resource name filtering in watch predicate #985
CCO-688: test-ext: enable test-extension cases for CI #984
CCO-788: test-ext: Update extend tests to adapt to CCO-788 #981
Full changelog

cluster-authentication-operator

NO-JIRA: OWNERS: add everettraven as reviewer/approver add ibihim as approver #842
CNTRLPLANE-2610: Create network policies for AUTH components #825
CNTRLPLANE-2990: Update CAO to no longer write to the Authentication.spec.webhookTokenAuthenticator field #854
CNTRLPLANE-2996: dependencies: k8s 1.35 rebase #853
CNTRLPLANE-2552: Add support for CEL expression claim mappings for username and groups #850
MON-4473: Migrate Prometheus targets discovering from Endpoints to EndpointsSlices #823
Full changelog

cluster-autoscaler

OCPBUGS-78152: allow clusterapi provider to skip paused resources #409
Full changelog

cluster-autoscaler-operator

OCPBUGS-78797: update rbac to include DRA-related resources #365
MON-4498: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #363
Full changelog

cluster-baremetal-operator

METAL-1734: Add support for centralized tls #572
METAL-1714: Populate complete SANs in Ironic TLS certificate #569
OCPBUGS-69399: Allow ProvisioningCIDR for unmanaged network #553
Full changelog

cluster-capi-controllers

OCPCLOUD-3320: Fix continuous reconciliation of cluster-api manifests #269
Full changelog

cluster-capi-operator

NO-JIRA: Fix malformed VAP #499
NO-JIRA: Instruct agents more forcefully to run tests with make unit #496
OCPCLOUD-3319: Bump controller-runtime to v0.23 #495
OCPCLOUD-3290: Dependency bumps for release 4.22 #491
OCPCLOUD-3184: Implement object schema pruning for compatibility requirements #464
OCPCLOUD-3350: Revision controller #469
Full changelog

cluster-cloud-controller-manager-operator

OCPCLOUD-3287: Update to k8s 1.35.1 dependencies #439
Full changelog

cluster-config-api

Improve feature-gated CEL validation merge semantics #2770
OPRUN-4513: Move OLMv1 Single/Own Namespace support back to TP #2766
CORENET-6390: API changes and feature gate for OVN-Kubernetes no-overlay mode #2537
OPRUN-4466: Add NewOLMConfigAPI feature gate #2756
Add TLS adherence feature gate #2680
TRT-2518: Add variant OS and JobTier to promotion check #2763
MCO-2142: Avoid OSImageStream defaultStream unset #2764
OCPBUGS-74513: OCPBUGS-74519: OCPBUGS-78487: Remove MachineConfigNodes and PinnedImages feature gates and v1alpha1 references #2715
CORS-4348: feature gate for EU Sovereign Cloud support #2740
NO-ISSUE: config/v1alpha1: Drop (Cluster)ImagePolicy since the hard cut to v1 #2760
Full changelog

cluster-config-operator

OCPSTRAT-2876: Teach config operator to filter feature gate manifests by major version inclusion #459
Full changelog

cluster-control-plane-machine-set-operator

OCPCLOUD-3284: Bump to k8s 1.35 and associated deps. #397
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2762: Bump all deps for 4.22 #270
Full changelog

cluster-dns-operator

OCPBUGS-78085: Fix dual-stack service update by preserving IP families #467
NE-2500: Added network policies for DNS #468
OCPBUGS-62178: Dynamically set kube-rbac-proxy TLS args #466
OCPBUGS-14346: Fix when DNS operator reports Degraded #373
Full changelog

cluster-etcd-operator

CNTRLPLANE-2668: Migrating go standard etcd cases to ote #1575
NO-JIRA: add Lance as a reviewer #1576
OCPBUGS-78956: Disable member cache for quorum checker in TNF #1568
OCPBUGS-65626: upgrade library-go to latest changes #1566
OCPBUGS-78930: add tnf jobs to network policy exceptions #1574
ETCD-557: Add e2e Network policy test cases #1543
Revert “OCPBUGS-77947: fix(tnf): do not block on stable revision after external etcd transition” #1572
OCPBUGS-74679: fix: tweaking kubelet resource config to allow automatic fencing recovery #1561
OCPBUGS-70050: Updating cluster-etcd-operator-container image to be consistent with ART for 4.22 #1569
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

IR-350: make metrics server tls configuration file-based #1297
Full changelog

cluster-ingress-operator

OCPBUGS-62627: cluster operator ingress reported Progressing=True wit… #1299
OCPBUGS-62238: configure tls profile for router metrics #1378
NE-2285: Bump to OSSM 3.3.0 and Istio v1.28.4 #1396
OCPBUGS-77457: Respect proxy configuration on gwapi provisioning #1383
NE-2471: Replace OLM-based Istio install with Sail Library #1354
NE-2501: Add RBAC to allow operator to manage network policies #1389
OCPBUGS-78555: Increase Gateway E2E timeout to 5 minutes #1390
NE-2131: tests-extension: Append suite names to OTE test specs to preserve original test names #1387
NE-2418: Add e2e test for haproxy_max_connections metric #1361
NE-2183: Implement GatewayAPI status controller #1294
NE-2131: tests-extension: restore test names and remove metadata tracking #1379
Full changelog

cluster-kube-apiserver-operator

CNTRLPLANE-2992: Update CKASO to use a default webhook authenticator secret when authentication type is not None #2074
OCPBUGS-65626: update library-go to latest #2026
CNTRLPLANE-2223: Migrate TestBoundTokenSignerController to ginkgo #2067
CNTRLPLANE-2622: config tls on check-endpoints container #2058
OCPBUGS-46086: Always set service-account-jwks-uri to LB URL even with custom issuer #1919
OCPBUGS-78146: move event-ttl test to its own suite #2069
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-65626: update library-go to latest #905
MON-4503: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #907
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-65626: update library go to latest #610
MON-4504: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #614
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-65984: Revert TRT-2577: Revert #139 “OCPBUGS-65984: scale migrator deployment” #149
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-monitoring-operator

MON-4542: update Prometheus operator CRDS to v0.90.0 #2854
NO-JIRA: update github.com/openshift/library-go #2852
NO-JIRA: change ClusterRolefailed to ClusterRole failed #2853
NO-JIRA: [bot] Synchronize versions of the downstream components #2857
NO-JIRA: [bot] Synchronize versions of the downstream components #2851
NO-JIRA: add unit tests for admission webhook’s TLS configuration #2850
MON-4479: use TLS profile to configure CMO server #2841
NO-JIRA: [bot] Synchronize versions of the downstream components #2849
MON-4535: Add .coderabbit.yaml to reduce review noise #2845
NO-JIRA: [bot] Synchronize versions of the downstream components #2847
OCPBUGS-48578: chore(metrics-server): prefer control-plane nodes and tolerate their taints #2801
OCPBUGS-78221: fix return value format #2846
Full changelog

cluster-network-operator

CORENET-6561: CNO Rebase k8s to 1.35.0 #2887
OCPBUGS-78731: Revert “NVIDIA-554: DPU-host mode: use ConfigMap for OVN feature enablement instead of per-node script gating” #2938
OCPBUGS-77015: wait for patch port to apply drop garp flows #2910
OCPBUGS-70016: Updating cluster-network-operator-container image to be consistent with ART for 4.22 #2863
OCPBUGS-65633: add network-check-target + networking-console-plugin service accounts #2868
CORENET-6871: Handle zero-worker HyperShift clusters in daemonset rollout #2897
Full changelog

cluster-node-tuning-operator

PSAP-2185: Support centralized TLS security profile configuration #1483
CNF-18941: e2e: PP: cover ExecCPUAffinity support in tests #1432
CNF-20404: DRA: disable Kubelet resources and topology managers #1445
OCPBUGS-78470: e2e: fixed flaky test_id:32646 CPU load balancing on cgroupv1 #1457
PSAP-2229: Prevent multiple reboots via MachineConfig creation/update sync #1474
Full changelog

cluster-olm-operator

OPRUN-4502: Use FratureGateNewOLMConfigAPI from openshift/api #180
OPRUN-4502: Add feature-gate for DeploymentConfig #176
Full changelog

cluster-openshift-apiserver-operator

CNTRLPLANE-2619: make checkendpoints use apiserver config #657
NO-JIRA: OWNERS: remove engineers who have left Red Hat #646
NO-JIRA: Disable WatchList feature gate due to the missing support of Project watch #667
Full changelog

cluster-storage-operator

OCPBUGS-78291: Allow azure-disk operator to read VolumeAttributeClasses #683
MON-4509: Migrate Prometheus targets discovering from Endpoints to EndpointSlices #665
MON-4496: metrics: migrate Prometheus SD from Endpoints to EndpointSlices #668
NO-JIRA: Add a comment to sync AWS EBS IAM role into HyperShift #676
Full changelog

cluster-version-operator

NO-JIRA: Try not to block by informing #1356
OCPSTRAT-2876: Allow inclusion/exclusion of manifests based on the OCP major version #1282
TRT-2581: Revert “NO-ISSUE: OTA-1605 Automate OCP-42543” #1353
NO-ISSUE: OTA-1605 Automate OCP-42543 #1309
CNTRLPLANE-2777: refactor(lib/resourcebuilder): generate interface for client instead of their specific types #1344
OTA-1546: Evaluate conditional updates if accept risks change #1348
OTA-1546: Skip an accept-risk case on network-restricted environment #1332
NO-ISSUE: Update fake clientsets to NewClientset #1340
TRT-2569: (fix) hypershift-e2e-aks and hypershift-e2e-aws failing with CVO bootstrap deadlock in ci amd64 payload #1342
Full changelog

console

CONSOLE-5135: add deprecation warning for react-router-dom #16178
OCPBUGS-79462: Skip flaky Data Grid operator E2E tests #16191
CONSOLE-5027: Refactor public/ Directory Components to useK8sWatchResource(s) #15954
OCPBUGS-63391: Replace DataViewTextFilter with existing custom TextFilter #16151
OCPBUGS-73803: Fix incorrect OLMv1 documentation URL #16052
OCPBUGS-74346: Fix useOperatorCatalogCategories hook. #16093
OCPBUGS-78534: Make E2E test create helper idempotent and improve test cleanup #16148
OCPBUGS-66147: Make folder field optional for vsphere #16142
OCPBUGS-77912: Fix TypeError in OLS code import to console #16119
OCPBUGS-44612: Remove useUserPreferenceCompatibility and withUserPreferenceCompatibility #16076
CONSOLE-5073: Bump i18next to latest #16150
CONSOLE-4447: Update SecretFormWrapper modal to use ModalFooterWithAlerts #16167
RFE-7965: add basic auth support for helm repositories #15624
CONSOLE-5094: Add pesudo CSP violation detection to Cypress #16048
NO-JIRA: Update demo plugin README #16166
CONSOLE-5093: Remove support for deprecated extensions #16043
CONSOLE-4447: Remove deprecated modal components and CSS #16126
CONSOLE-5018: Refactor UNSAFE_ class components to FC #16062
CONSOLE-5129: Theme context cleanup #16155
OCPBUGS-78390: Reset pagination page when changing namespace #16138
OCPBUGS-78253: Fix InstallPlan > Components layout issue #16127
CONSOLE-4447: Migrate @console/shared modals to PatternFly v6 Modal components #16079
NO-JIRA: Remove cursor context #16106
CONSOLE-5087: Refactor console-shared-package from Firehose to useK8sWatchResource #16077
CONSOLE-4447: Migrate modal hooks from useModal to useOverlay #16061
CONSOLE-5114: Clean up React Router imports and dependencies #16139
OCPBUGS-78499: Fix curly quote in operator-hub-community-provider-modal #16145
NO-JIRA: Update PageHeading types #16095
NO-JIRA: Add a progress bar when building #16099
CONSOLE-4447: Migrate knative-plugin modals to PatternFly 6 #16065
OCPBUGS-78404: Fix flaky secret integration tests #16140
CONSOLE-4447: Migrate core modals to PatternFly 6 Modal components (part 2) #16123
CONSOLE-4439: Upgrade to React Router 7 #14957
OCPBUGS-78361: Fix flaky popover-status-button integration test #16135
CONSOLE-4447: Migrate core modals to PatternFly v6 modal components (part 1) #16100
And 6 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

Sync Dockerfile.ocp image #1127
Full changelog

gcp-machine-controllers

OCPCLOUD-3279: Rebase to Kube 1.35 for Machine API Provider GCP #145
Full changelog

gcp-pd-csi-driver

STOR-2751: Rebase to upstream v1.24.1 for OCP 4.22 #98
Full changelog

gcp-pd-csi-driver-operator

STOR-2762: Bump all deps for 4.22 #175
Full changelog

haproxy-router

OCPBUGS-62238: configure TLS profile for metrics endpoint #748
NO-JIRA: Do not install weak dependencies such as logrotate #687
NE-2418: Add haproxy_max_connections metric #728
OCPBUGS-75009: sort list of map entries on DCM #738
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-78504: unflake HPAConfigurableTolerance test #2631
UPSTREAM: <carry>: OCPBUGS-39360: Fix ClusterIsIPv6() detection for dual-stack v6-primary clusters #2603
NO-JIRA: UPSTREAM: <carry>: Add jacobsee and jubittajohn to DOWNSTREAM_OWNERS #2630
OCPBUGS-77866: Bump 1.35.2 to master #2612
Full changelog

hypershift

CNTRLPLANE-3046: feat(ci): add monitoring and alerting for ARC runners #8044
CNTRLPLANE-3049: split verify checks into individual GitHub Actions workflows #8049
OCPBUGS-79352: fix(oapi): force WatchList feature gate to disabled for openshift-apiserver #8035
OCPBUGS-79071: Fix AWSEndpointService private-router teardown stuck on active VPC Endpoint connections #8030
CNTRLPLANE-3041: Override ARO/HCP 4.20 CPO with Azure Pod Identity backport #8025
CNTRLPLANE-3054: Apply init task 0.3 migration to fix broken Konflux pipelines #8053
OCPBUGS-70301: force-remove karpenter finalizer when guest KAS is down #7939
CNTRLPLANE-3047: fix(ci): use community fork token for checkout credential helper #8050
CNTRLPLANE-2788: validate memory quantity in KubeVirt nodepool create #7884
NO-JIRA: chore(ci): update Konflux Tekton tasks to latest versions #8048
CNTRLPLANE-3048: refactor gh-actions-runner pipelines and improve CEL triggers #8045
OCPBUGS-79369: Add Konflux archived PipelineRun skill and update task discovery #8043
CNTRLPLANE-3047: add workflow to sync hypershift-community fork #8042
NO-JIRA: chore(claude): add restructure-commits plugin command #7927
CNTRLPLANE-2986: feat(ci): Add self-hosted GitHub Actions runners for HyperShift #7980
NO-JIRA: fix(ci): pass –upgrade-versions to konflux task update skill #8036
CNTRLPLANE-2998: Migrate SQS to AWS SDK v2 #8015
NO-JIRA: refactor(oadp): unify backup/restore e2e test with platform auto-detection #7971
OCPBUGS-78996: fix(test): create SQS queue dynamically in spot termination handler e2e test #8007
CNTRLPLANE-2049: fix(api): audit and improve GCP API validation rules #8003
CNTRLPLANE-2081: Migrate RAM and ARN to AWS SDK v2 #7986
OCPBUGS-78778: fix(cpo): Don’t remove HCP Ingress from routes when CapabilityRoute is disabled #8001
NO-JIRA: Disable parent ownership for api subdir #8009
NO-JIRA: fix(api): replace CEL url() validators with regex to fix CRD cost budget #8004
OCPBUGS-78544: Update base images to address multiple CVEs flagged by MSFT security scans #7983
OCPBUGS-78705: Bootstrap CVO manifests should be filtered based on feature-set annotation #7984
NO-JIRA: fix(api): extend kubeapilinter scope to all non-vendor API types #8002
NO-JIRA: build(e2e): include hypershift binary in Dockerfile.e2e #7919
CNTRLPLANE-2925: add NodePool.Status.NodesInfo for node version distribution #7917
OCPSTRAT-2336: Adjust karpenter API to OpenShift conventions #7952
OCPBUGS-78539: chore(e2e): add temporary crash toleration for dns-operator #7978
CNTRLPLANE-2172: fix(e2e): register Azure private platform e2e flags #7977
NO-JIRA: chore(owners): require api-approvers approval for api/ changes #7972
Update Kube API Linter config for new APIs #7982
NO-JIRA: add .gitattributes to collapse generated files in PR diffs #7918
CNTRLPLANE-2910: feat(cpo): add Azure workload identity webhook as KAS sidecar #7867
CNTRLPLANE-2077: refactor(cleanzones): migrate AWS SDK from v1 to v2 #7960
CNTRLPLANE-2219: feat(aws): migrate ec2 to AWS SDK v2 #7871
GCP-440: Fix GCP boot image discovery from CoreOS stream metadata #7881
NO-JIRA: fix(oadp): correct Agent platform API group in backup/restore resources #7974
OCPBUGS-78356: fix(sharedingress): coalesce HAProxy reloads to prevent reload storms #7945
CNTRLPLANE-2172: fix(operator): accept Azure as valid private-platform value #7968
NO-JIRA: Rename cilium directory to v1.15.1 #7888
OCPBUGS-70354: add serviceAccount to global-pull-secret-syncer #7439
NO-JIRA: feat(e2e): add OIDC IAM fix and NodePool validation to backup/restore #7837
CNTRLPLANE-2172: feat(install): register Azure private platform flags #7912
CNTRLPLANE-2978: Add Azure CPO override for OCP 4.20 #7955
OCPBUGS-65687: fix(cpo): prevent informer creation for inaccessible resource types #7819
GCP-441: correct CCM crash toleration key to match pod label #7926
CNTRLPLANE-2916: conditionally create openshift-ingress network policy based on route labeling #7872
NO-JIRA: chore: add .git/ to .dockerignore #7944
NO-JIRA: fix(test): add aws-node-termination-handler to safe-evict audited list #7816
NO-JIRA: test(scheduler): add pair loss recovery unit coverage #7848
OCPBUGS-67262: fix(e2e): Use NodePool replicas as authoritative source for expected node count instead of CountAvailableNodes #7378
OCPBUGS-77160: include NMStateConfig in Agent platform OADP backup resources #7847
AUTOSCALE-571: fix(karpenter): select existing private subnets for default OpenshiftEC2NodeClass #7933
OCPBUGS-78198: fix(catalogs): update catalog image version cap to 4.21 #7915
OCPBUGS-78184: fix(hostedcluster): Remove referenced resource annotations regardless of hcp status #7913
CNTRLPLANE-2203: reintroduce ControlPlaneConnectionAvailable condition with conformance fix #7746
OCPBUGS-78185: Fix deadlock when changing release image during initial provisioning #7910
CNTRLPLANE-634: Make external-dns interval and AWS zones cache duration configurable #7931
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

ibm-vpc-block-csi-driver-operator

STOR-2762: Bump all deps for 4.22 #168
Full changelog

ibmcloud-cluster-api-controllers

OCPCLOUD-3296: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.13.1 (93d5b50) into main #142
Full changelog

ibmcloud-machine-controllers

OCPBUGS-77729: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.22 #80
NO-JIRA: Modernize test infrastructure to align with other MAPI providers #82
Full changelog

insights-operator

NO-JIRA: generate gatherer docs #1256
CCXDEV-16094: add config option to disable runtime extractor #1248
CCXDEV-16006: add permission for opentelemetrycollectors #1252
OCPBUGS-78115: Fix string accessor error #1253
Full changelog

insights-runtime-exporter, insights-runtime-extractor

Update OWNERS to remove ‘tremes’ #67
Full changelog

kubevirt-csi-driver

CNV-82343: Add annotation-based fallback for infra VM node ID resolution (#170) #80
Full changelog

machine-api-operator

SPLAT-2680: Changed DHA to require hostAffinity=host #1484
OCPCLOUD-3282, OCPCLOUD-3288: Bump to k8s 1.35 dependencies #1474
NO-JIRA: fix flaky TestReconcile/machine_with_node_likely_to_go_unhealthy#1483 #1483
SPLAT-2680: Fixed MAO to not allow dedicated host configurations for control plane nodes #1477
Full changelog

machine-config-operator

OCPBUGS-78500: Skew enforcement should dynamically handle baremetal clusters #5768
OCPBUGS-79088: OCPBUGS-79357: Skip boot image updates until cluster is stable #5789
OCPBUGS-79361: Update AMI Whitelist #5788
NO-ISSUE: Update AMI collection script for installer changes #5790
OCPBUGS-75200: set default-timeout-stop to 200s globally #5782
MCO-2155: Add stream detection to boot image tests #5784
NO-ISSUE: Revert “extract oc binary from base OS image after build” #5785
OCPBUGS-66104: Fine tune CoreDNS pod configuration to improve performance #5695
MCO-2117: Allow default OSImageStream overrides #5714
OCPBUGS-78595: Fix log substring matching for disruptive test suite jobs #5769
OCPBUGS-74223: Re-order logger setting to eliminate race condition #5691
MCO-2146: do not use OSImageStream in Hypershift #5750
NO-ISSUE: always build golangci-lint from vendor #5772
OCPNODE-3201: Default Enablement of system-reserved-compressible in OpenShift #5408
OCPNODE-3880: Add criocredentialproviderconfig event handler #5487
OCPNODE-4074: Add additional storage configuration support for CRI-O #5666
NO-ISSUE: Increase timeout + interval for OCL test cleanup #5732
MCO-2151: Add stream detection to the boot image controller #5752
NO-ISSUE: Allow setting kubeletconfig log level to zero #5757
OCPBUGS-57473: extract oc binary instead of pulling OS image #5313
OCPBUGS-78107: Disable sandboxed-containers in arm64 10 #5754
MCO-2007: MCO-2096: MCO-2095: MCO-2011: Update MCO dependencies to Kubernetes 1.35 #5603
Full changelog

monitoring-plugin

OBSINTA-993: Tests for incident detection coo 1.4.0 changes #857
OCPBUGS-77113: feat: re enable dev console views #831
NO-JIRA: Incident Detection Tests Stabilization #854
NO-JIRA: switch to core platform page before test case run #837
NO-JIRA: Refactor cypress setup and operator commands #788
NO-JIRA: Add test configuration scenarios overview #745
Full changelog

multus-cni, multus-cni-microshift

OKD-322: Update Dockerfile to work on CentOS/RHEL 10 #275
Full changelog

must-gather

RFE-8344: Add Node Feature Discovery Operator collection script #508
RFE-8932: Included object size with the object count #527
Full changelog

networking-console-plugin

OCPBUGS-78542: Remove useHistory and replace with useNavigate #364
Full changelog

nutanix-cloud-controller-manager

OCPCLOUD-3272: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (9c374cb) into main #54
Full changelog

oauth-apiserver

CNTRLPLANE-2260: cmd: wire up OTE ginkgo suite for tokenreviews #163
Full changelog

oc-mirror

NO-JIRA: Fix build on non-Linux platforms by extracting SysProcAttr into platform-specific files (#1365) #1365
Full changelog

olm-catalogd, olm-operator-controller

OPRUN-4228: Add boxcutter tests #672
OPRUN-4468: Add OTE tests for OLMv1 DeploymentConfig support #662
OCPBUGS-78787: Synchronize from upstream #670
OCPBUGS-65634: UPSTREAM: <carry>: add service account to curl job #653
OPRUN-4063: deployment config cases #654
OCPQE-31265: update OCP-75441 to support multi-arch #668
OPRUN-4509: Synchronize From Upstream Repositories #669
NO-ISSUE: Synchronize From Upstream Repositories #667
NO-ISSUE: Synchronize From Upstream Repositories #665
NO-ISSUE: Synchronize From Upstream Repositories #663
Full changelog

openstack-machine-api-provider

OCPBUGS-77724: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.22 #161
Full changelog

openstack-resource-controller

OCPBUGS-77719: Updating openstack-resource-controller-container image to be consistent with ART for 4.22 #26
UPSTREAM-SYNC: Sync main with upstream (release-1.0) #27
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-79397: Fix SA restore resourceVersion conflict error #1264
OCPBUGS-77179: Synchronize From Upstream Repositories #1260
NO-ISSUE: remove etcd dependency from failing cases #1241
OCPQE-31468: verify images command log pollution #1262
OCPBUGS-78557: Re-Apply Fix admin context race condition in parallel tests #1259
OPRUN-4415: automate OCP-87188: Central TLS Profile Consistency #1207
TRT-2580: Revert “OCPBUGS-78557: Fix admin context race condition in parallel tests” #1258
OCPQE-31804: Fix admin context race condition in parallel tests #1256
NO-ISSUE: Synchronize From Upstream Repositories #1255
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

NO-JIRA: DownStream Merge [02-27-2026] #3011
Full changelog

powervs-block-csi-driver

OCPBUGS-77586: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.22 #115
MULTIARCH-6015: Rebase ibm-powervs-block-csi-driver with upstream #116
OCPBUGS-77586: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.22 #118
MULTIARCH-6016: Upgrade golangci-lint version to support go1.25 #117
Full changelog

powervs-block-csi-driver-operator

STOR-2762: Bump all deps for 4.22 #104
Full changelog

powervs-machine-controllers

NO-JIRA: Add damdo to approvers list in OWNERS file #141
OCPBUGS-77745: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.22 #139
Full changelog

prometheus-alertmanager

NO-ISSUE: [bot] Bump openshift/prometheus-alertmanager to v0.31.1 #127
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

MON-4542: bump v0.90.0 #377
NO-JIRA: Update v0.89.0 #374
Full changelog

service-ca-operator

CNTRLPLANE-3038: test/e2e: migrate validatingwebhook-ca-bundle-injection to OTE serial suite #336
CNTRLPLANE-3035: test/e2e: migrate mutatingwebhook-ca-bundle-injection to OTE serial suite #335
CNTRLPLANE-3034: test/e2e: migrate crd-ca-bundle-injection to OTE serial suite #334
CNTRLPLANE-3033: test/e2e: migrate apiservice-ca-bundle-injection to OTE serial suite #332
CNTRLPLANE-3015: test/e2e: restore operator config after forced rotation #331
CNTRLPLANE-3009: test/e2e: migrate forced-ca-rotation to OTE serial-disruptive suite #330
CNTRLPLANE-3000: test/e2e: migrate time-based-ca-rotation test for OTE compatibility #308
NO-JIRA: bump Go to 1.25 and update dependencies #328
CNTRLPLANE-2549: test/e2e: add control plane stabilization wait after CA rotation #325
CNTRLPLANE-2549: test/e2e: migrate refresh-CA test for OTE compatibility #306
Full changelog

tests

NO-JIRA: remove extra character #30920
OCPEDGE-2447: increase precondition cluster health timeout to 10m #30893
OCPNODE-3751: Add automated tests for kubelet LimitedSwap drop-in configuration for CNV #30795
MCO-2155: add osstream exclusion for mco bootimage tests #30918
TRT-2539: Fix output capture in ginkgo RunSpec to capture stdout/stderr #30769
NE-2498: add new DCM e2e tests #30741
NO-ISSUE: test/e2e/upgrade: Raise default update-ack timeout to 10m #30917
TRT-2506: Add OS version info to ClusterData #30827
NE-2292: Tests for gatewayAPIWithoutOLM featuregate graduation #30905
OCPEDGE-2381: Verify etc pod should start with oom_score_adj as system-node-critical #30867
NO-JIRA: remove test exception for Insights operator #30849
NE-2292: Skip OLM tests when GatewayAPIWithoutOLM enabled #30896
NO-JIRA: Remove TNF node replacement test #30901
OCPBUGS-78384: changed http to https for three places to reduce test false positives and false negatives #30872
CNTRLPLANE-2999: Revert PR #30746: TLS 1.3 test causing instability in 4.22 #30895
NO-JIRA: Add a singleton instance for list of nodes #30830
OCPNODE-3932: Add automated tests for non-CNV swap configuration #30807
OCPBUGS-78016: Fix double counting of pod restart events #30862
CNTRLPLANE-2449: test(sig-builds][Feature:Builds]): ignore watchapi.Bookmark as they are synthetic and used only for signaling sync completion #30885
OCPBUGS-77281: Add exception for GCE CSI driver images #30870
OCPBUGS-77002: Remove temporarily skip of MCO tests creating custom MCPs in RHEL10 suites #30845
CNTRLPLANE-2549: monitortests: treat Thanos collection failure as flake in disruptive suites #30877
OCPBUGS-76334: Add TLS 1.3 (Modern profile) support to TestTLSDefaults #30746
OCPNODE-4093: Update readme to include long running test information #30791
OCPBUGS-48186: Add kubelet and CRI-O panic detection invariant test #30243
OCPBUGS-38666, OCPBUGS-38750, OCPBUGS-62623: Remove DNS test exceptions #30865
OCPBUGS-77991: suppress podman build - URLs #30851
SPLAT-2672: ote/ccm-aws removing binary while migrating to CCCMO #30869
OCPBUGS-8933: run resource request/limit check early #30874
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

thanos

NO-JIRA: Bump to v0.41.0 #173
Full changelog

vsphere-csi-driver-operator

STOR-2882: add feature gate for checking platform type is vsphere #331
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github