4.23.0-0.okd-scos-nightly-2026-03-09-153314

Download installer and client with:

oc adm release extract --tools registry.ci.openshift.org/origin/release-scos:4.23.0-0.okd-scos-nightly-2026-03-09-153314

Team Approvals:

Tests:

Blocking jobs
- aws Succeeded periodic-ci-openshift-release-main-okd-scos-4.23-e2e-aws-ovn
Informing jobs
- agent-single-node-ipv6 Failed periodic-ci-openshift-release-main-okd-scos-4.23-e2e-agent-single-node-ipv6
- aws-ovn-techpreview Succeeded periodic-ci-openshift-release-main-okd-scos-4.23-e2e-aws-ovn-techpreview
- aws-upgrade Succeeded periodic-ci-openshift-release-main-okd-scos-4.23-e2e-aws-ovn-upgrade
- aws-upgrade-minor Failed periodic-ci-openshift-release-main-okd-scos-4.23-upgrade-from-okd-scos-4.22-e2e-aws-ovn-upgrade
- gcp Succeeded periodic-ci-openshift-release-main-okd-scos-4.23-e2e-gcp
- vsphere Succeeded periodic-ci-openshift-release-main-okd-scos-4.23-e2e-vsphere-ovn

Upgrades from:

4.22.0-0.okd-scos-2026-03-05-105110 - Failed

Loading changelog, this may take a while ...

Changes from 4.22.0-0.okd-scos-2026-03-05-105110

Created: 2026-03-09 15:34:45 +0000 UTC

Image Digest: sha256:026aed6a662f9a3e0cea7e58dfe8882fd30ff56074480db9e8ef5bf442b23fab

Components

Kubectl 1.34.1
Kubernetes 1.34.2
Kubernetes Tests 1.34.1
CentOS Stream CoreOS 10 upgraded from 10.0.20260304-0 to 10.0.20260212-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	OKD Hypershift	OKD SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AdditionalStorageConfig (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementAzure (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementBareMetal (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementGCP (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIMachineManagementPowerVS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIMigrationAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIMigrationOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
InsightsConfig (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled
InsightsOnDemandDataGather (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled
ClusterAPIMachineManagementVSphere (0 tests)	Disabled	Disabled	Enabled	Enabled	Disabled	Disabled	Disabled (Changed)	Disabled (Changed)

Removed images

cluster-kube-cluster-api-operator
installer-altinfra
installer-etcd-artifacts
installer-kube-apiserver-artifacts

Rebuilt images without code change

aws-kms-encryption-provider git 19e7b623 sha256:4e1da0bc2e70224792f90b2ac35ddeb5cae784ef0834062c98de038633e5f232
azure-cloud-controller-manager git 8584b9a8 sha256:79c352813703a7459921ee47e731351653fe9acc4f914e7ac95c758b60e40ac6
azure-cloud-node-manager git 8584b9a8 sha256:628a2a0ef4c8a96e394d5c7a8c9b13c317f27dde06874b31b703d642ca65bfd4
azure-kms-encryption-provider git 99b9a3a3 sha256:da5dff318ae247ab8e6270788c7ea3140252d75a542d37c972d294c5c9f11c09
azure-service-operator git 17e57462 sha256:e879d1646fd86f794c184e97c74330b624d476762c942e8e40a3909750f751a8
azure-workload-identity-webhook git e59e405a sha256:38761a14a623d12d4e90b765ed3e1a6366dc17132891f7255f1ca27317f34ac9
cluster-bootstrap git dc0d4a5c sha256:d3cc5f187f5165b03ce218c6a7d45cd2e4b813060fca55430c9ca86c1b8a1731
cluster-capi-controllers git 109b4e38 sha256:5b457f0b2602859ddb5318b5f1250fc7bdc5c3d4cb252587b9e4f53fd0a79970
cluster-csi-snapshot-controller-operator git 7b633539 sha256:7528c0bac63990d71b4cf4fa22a09c92d2d92ea5099d1c4a9bde5659a4d1c3a8
cluster-policy-controller git 8b775487 sha256:8eb94cc53a27e7f8812035c94857d8aaf636264f455933c207fd1bd73e7b1e2d
container-networking-plugins git 747ad66c sha256:fa855a33b23a3782899ef125cd7319ba6e8ec494124e7b40f90b924e2a7808c1
containernetworking-plugins-microshift git 747ad66c sha256:65f3940d01bcbe4c6402064dd5e4cf810caeb4792445fe897cd11e805feaf2a9
coredns git 9798af85 sha256:6bcb1453ccce0a8e89697fbb4dff26edb83e9c10f39913472a16739a64247631
csi-external-attacher git cb0b279d sha256:06db6ab443acd0d03834d4f58f2afed9545b2f7b40b199773156ca8a37fbf24b
csi-livenessprobe git 966a3bf9 sha256:e14dc79a169b1773eb669b2234c6bff89a047be11c1dede9d2c23dd0d9e67cfe
csi-node-driver-registrar git 65d7aa73 sha256:0ff450e3bda9bb70cb26e70233084a967792b9adbcfdd2aa34816b84b76b2de4
docker-builder git 711f2e68 sha256:da19ba9623806cb6cc9d1319dd66cc6da9bd51d3d1bbaa6669222fce12096d26
docker-registry git d4cce000 sha256:67551e024d83d033d912f79fe2bd9bbd0b405fd54dcb7d4f147282566d0594b2
egress-router-cni git 5e0f8d1b sha256:be0b61cd9997262c0904bfb1bad6b1803ac708f737679345f9805a1e1514727c
etcd git 6a099226 sha256:03d81d03b5b2bea8184f7e7224543c7f80e2502d25afba73ec9c745610c46e6d
hyperkube git 047d9622 sha256:90c7a3057452a081a1fe95362bdf868fe167e550b24966efd3bce6b30f342934
ibm-cloud-controller-manager git c566572b sha256:355b0e675fd0a9381c3eea6db11095268e618cf385bcf1a9bb154e8215b51200
ibmcloud-machine-controllers git 559ea0b3 sha256:00755a69c336ad9cfb29ed09251af89aa0903fb71b55274acb9a13a91222a8dc
ironic-static-ip-manager git a379d09f sha256:4c5881d5c1dcd8a4071476c512362f402fb8bebf9873870c4ad5444dc583a795
kube-proxy git 047d9622 sha256:08bfa9aaeb72fa222634c9069b5e3e56d9a335e8e91c823ef85e3664f663ce98
kube-state-metrics git 9629a8cb sha256:86f9e539cfc45e13934364b59ef1512ace6d6c9f02ce71056c75bf85999e9835
kubevirt-cloud-controller-manager git 76dd5a6f sha256:4dc3b11eea9e5b999841eead05171990e010e37b63b9ea26c1a5ebb1fd50b00c
kubevirt-csi-driver git 9e2dbddf sha256:c1537386c30e4cc8fa8de2ea177a838fdf1b8738c27ee7d34a25f9eabd180bb6
libvirt-machine-controllers git 76effeca sha256:3de266a98116744e1b9c5960588a58850f430d6c14d7c09c29f0ca97e34b9987
metallb-frr git 074b1797 sha256:61af0b94d5c9a858bcd55ad1f50ce30bbcb456b7e932d9f051bae0b08d5d9e49
multus-admission-controller git ce94b849 sha256:93b0738ae2786dded6c888850ac4840f7ffad9f44b3a6e2964a3f36b76530d73
multus-route-override-cni git 08af4127 sha256:5a8ea877281ff773498a7d8e48eaefe8468d247a66102b450643a6dba26e92bc
multus-whereabouts-ipam-cni git d691040e sha256:d8ed457bd9431131f9fcbd66cdba3f356cfbc9e75c7eafd9080eeff28dfd5f31
network-interface-bond-cni git 297eeb43 sha256:fbeac063dfedda85510d10ae3c1768cd39717944dc8c58e9baa6514717f2cf71
network-tools git 3726e6c9 sha256:50f591ff6c4dfb787c49141f82cb12f768882172a985ffca2a6767a423f92acd
nutanix-cloud-controller-manager git ecf52c51 sha256:96a1ef02347d76993e7ecb91452261141e44d5b74c48933ad0dd1fdcae4c5839
oauth-proxy git 714292f5 sha256:239f9332892c02b9358abdcc9b5ca940a24efb4453131c690c118d82cda85510
openshift-controller-manager git 19ac7137 sha256:0b68440869b1cf72ee67b464948f7ac31c7576c6677095501c62b9c6f7795901
openstack-machine-api-provider git bd549946 sha256:dc85cc4293ef32d255d131254b84af784380ac06b67a747ba0b8ab7a4e82e529
openstack-resource-controller git 6a62845e sha256:ba1d5e18a153d9cb81cbbcbdfcf3996dab548b5764be5cc27deda0d0fc56dbef
pod git 047d9622 sha256:54b8c4e759e6f2141309b6e420724a38791dbc0b8bd5d0f77a33bd65ccdd5624
powervs-cloud-controller-manager git 5ea93179 sha256:50a6dcead6fb948c1a0586d8dbf2676c36df37fbebbe0a53902fa912c249bdc8
powervs-machine-controllers git bc7c3eec sha256:6d08b57cde39bc5b22f7b8734d2d188d4be7b270a25be59fda6591e39433783d
prometheus-node-exporter git b548e3ed sha256:e7240cb24d6d4b47e0b9b422d4c7233ac9a986a7e9a54b1662967c7cb6213885
service-ca-operator git 503e4f5f sha256:e19956b3b66a3b37e17d96d5c9bb1d4136cb98659ddf5c9b3e8541d28de4a53d
thanos git e324870c sha256:6b05caf33043f9b3582f0eb373caff6196c1c5282b2e31453ad78dabda865ab9
vsphere-cloud-controller-manager git b5a89579 sha256:65415b14e5b93ae01389b1bc52d5eb716e7360d74d9b044a63f6538f1c7a1fad
vsphere-csi-driver-operator git 76965635 sha256:52c078734aa22ac411b2e0f10a27ad5c786627bfdc3bca32626c3df9d716d56a

hypershift

GCP-386: feat(gcp): enable DNS delegation for hosted cluster ingress via DNSEndpoint #7702
NO-JIRA: ci: fix bug in leader election detection #7696
GCP-308: test: verify control plane workloads have resource requests #7623
OCPBUGS-60707: Fix user-ca-bundle cleanup when additionalTrustBundle is removed #6900
CNTRLPLANE-2736: Rename review-agent-single-pr to address-review-comments #7709
CNTRLPLANE-2215: feat(aws): migrate S3 to AWS SDK v2 #7678
NO-JIRA: test(nodepool): add unit tests for scale-from-zero annotations #7688
OCPBUGS-55151: Move proxy certificate validation from metrics collector to reconcile loop #7536
CNTRLPLANE-418: Aro swift private #7613
CNTRLPLANE-2700: docs: add HCP networking requirements documentation #7654
CNTRLPLANE-2675: chore(cpo): move infrastructure reconciliation to infra package #7658
GCP-216: feat(nodepool): add GCP platform support #7631
GCP-199: add DNS management to Control Plane Operator #7639
AUTOSCALE-492: karpenter-ignition controller #7582
OCPBUGS-66966: loop over node-pool conditions updating in order #7325
SREP-715: New option to dump data plane content through the kube API server service exposed in HCP namespaces #6533
OCPBUGS-74620: test(e2e): increase default node ready timeout to 45 minutes #7629
OCPBUGS-74498: Add UserAgent telemetry to CPO Azure SDK clients #7620
OCPBUGS-74931: fix(hcco): gate image registry workaround to pre-4.20 releases #7634
NO-JIRA: docs(aws): add AWS PrivateLink architecture documentation #7645
NO-JIRA: chore(ai): Add skills for dev workflow #7636
CNTRLPLANE-2709: Update Dependabot to use conventional commits #7672
CNTRLPLANE-2703: Disable Renovate dependency updates #7657
OCPBUGS-74988: fix(test): resolve E2E flakes in global-pull-secret-syncer DaemonSet readiness checks #7627
CNTRLPLANE-2214: Migrate STS to AWS SDK v2 #7386
NO-JIRA:Docs: update documentation URL from netlify to pages.dev #7622
GCP-366: add CloudController service account for CCM #7617
NO-JIRA: ci: Improves the isLeaderElectionFailure function: #7589
NO-JIRA: Fix teardown flag timing in e2e tests #7586
CNTRLPLANE-2548: add direct Jira REST API integration to pr-report #7532
OCPSTRAT-2437: add unit test for custom HAProxy image annotation #7458
CNTRLPLANE-1708: Enable EnsureGlobalPullSecret AtLeast Version418 #7624
CNTRLPLANE-418: fix shared ingress AllowedCIDRs to use fc_src for PROXY protocol #7587
AUTOSCALE-535: default block device mappings #7583
OCPBUGS-69447: feat(updates): enable CVO metrics access with RHOBS monitoring flag #7399
GCP-198: add PSC endpoint controller for customer-side management #7603
CNTRLPLANE-2650: docs(ci): add security requirement for Jira agent issues #7626
CNTRLPLANE-2650: docs: add AI-assisted CI jobs documentation #7598
OCPBUGS-62760: Pre-pull images to avoid startup delays and flaky e2e #7382
OCPBUGS-74247: CAPI image overrides aware of registry config #7575
CNTRLPLANE-1137: Add support for external CNI provider Cilium #7423
GCP-176: feat(gcp): add WIF credentials support for control plane op… #7600
NO-JIRA: test(assets): add unit test for CAPI resources file paths #7601
CNTRLPLANE-2580: feat(claude): update /update-konflux-tasks to work without log file #7591
GCP-213: feat(platform): add Google Cloud Platform support with CAPG Deployment #7305
OCPBUGS-62944: forceful termination of instances during HCP AutoNode deletion #7281
NO-JIRA: build: bump Go version to 1.25.3 #7592
CNTRLPLANE-1388: Spot with termination handler #7567
CNTRLPLANE-1892: chore(e2ev2): fixup GCP API checks #7555
NO-JIRA: ci: update build root image to Go 1.25 #7584
CNTRLPLANE-1988: Add Azure support to product CLI for self-managed customers #7407
AUTOSCALE-373: Proper ROSA instance tagging for AutoNode #6939
OCPBUGS-63345: AWS credential metric to distinguish unknown from invalid status #7075
OCPBUGS-74336: feat(cpo): check components have rolled out before setting available #7434
NO-JIRA: chore(deps): weekly dependabot consolidation #7563
OCPBUGS-64576: fix(dump): Fix dump command failure when EC2NodeClass resource is not registered #7147
CNTRLPLANE-2559: feat(contrib): add request serving setup utility #7534
CNV-76520: ci: allow restart of kubevirt-cloud-controller-manager #7469
NO-JIRA: fix(test): shorten scale-from-zero test name to avoid IAM role length limit #7558
OTA-1833: Adopt a new FeatureSet OKD #7557
OCPBUGS-62761: chore(e2e): remove KAS check from capi pod #7485
OCPBUGS-73817: fix: add hypershift.openshift.io/nodepool-globalps-enabled label to be ignored in cluster-autoscaler deployment #7480
OCPBUGS-65885: added 1.34 required ELBv2 perms to CCM role #7339
API-1835: Scaffold dynamic informers #7477
CNTRLPLANE-2579: feat(konflux): add script to update pipeline task bundles to latest trusted versions #7553
OCPBUGS-58397: feat(KubeVirt): configure External evictionStrategy on VMs #6380
GCP-197: add GCPPrivateServiceConnect controller for managing Service Attachments for Private Service Connect #7302
NO-JIRA: fix(e2e): TestNodePoolAutoscalingScaleFromZero for 4.20 and later only #7556
CNTRLPLANE-2291: feat(claude): add fix-hypershift-repo-robot-pr command #7438
CNTRLPLANE-2568: Update Konflux Tekton tasks to latest versions #7551
NO-JIRA: test(ingress): add test for clearing LoadBalancerSourceRanges #7544
NO-JIRA: fix(claude): fix Claude Code subagents frontmatter #7550
NO-JIRA: chore(deps): bump github.com/opencontainers/selinux from 1.11.0 to 1.13.0 #7462
OCPBUGS-55399: Add NTO Service and ServiceMonitor #7355
NO-JIRA: test(autoscaling): make GPU annotation optional in scale-from-zero test #7484
OCPBUGS-73914: Update Tekton tasks to pass enterprise contract validation #7535
NO-JIRA: chore(deps): bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 in /hack/tools #7463
NO-JIRA: Add karpenter approvers and reviewers #7488
NO-JIRA: chore(ho): update lower bound version checks for OCP 5 #7472
NO-JIRA: fix(docs): strip markdown links from aggregated documentation #7487
NO-JIRA: chore(deps): bump github-dependencies group with 17 updates #7455
OCPBUGS-73847: fix(cli): use /tags endpoint for all release streams to enable RC filtering #7483
OCPBUGS-67234: fix(hostedcluster): unpause CAPI cluster when deleting paused HostedCluster #7389
OCPBUGS-72258: use InfraStatus.APIPort for custom DNS kubeconfig #7470
API-1835: Scaffold OpenShiftManager controller #7445
CNTRLPLANE-1768: feat(api): add support for graceful service account signing key rotation #7324
OCPBUGS-66205: [kubevirt] Make L3 migration labeling conditional #7308
NO-JIRA: chore(deps): bump Azure SDK and misc-dependencies groups #7464
NO-JIRA: chore(tekton): update Konflux task digests to latest versions #7465
OCPBUGS-70320: enable scale-up from zero with InPlace upgrade #7427
NO-JIRA: Add review process docs to CONTRIBUTING.md #7426
CNTRLPLANE-208: Document needed Azure infrastructure #7361
NO-JIRA: fix(deps): update k8s.io/utils digest to 914a6e7 #7450
NO-JIRA: chore(deps): bump misc-dependencies group with 11 updates #7437
OCPBUGS-72411: fix(cno): use brackets only for IPv6 in server URL #7447
NO-JIRA: chore(konflux): update Tekton tasks to latest versions #7451
OCPBUGS-72397: Fix Konflux EC voilation, update deprecated base … #7442
NO-JIRA: docs(konflux): add IMAGE_RELEASE_PROCESS.md #7432
NO-JIRA: test(e2e): fix AKS e2e test flakiness #7410
CNTRLPLANE-1978: add e2e tests for DataPlaneConnectionAvailable condition #7291
AUTOSCALE-473: Add HostedCluster annotation for karpenter ec2nodeclass instanceProfile #7392
NO-JIRA: fix(awseps): cache local zone ID in non-shared VPC case #7409
OCPBUGS-66211: fix(azure): preserve defaulted values in Infrastructure status #7393
OCPBUGS-69761: fix(ingress): clear LoadBalancerSourceRanges when AllowedCIDRBlocks is removed #7425
GCP-258: Use PullAlways for :latest image tags in control plane components #7313
OCPBUGS-63698: fix(azure): remove CSI secret ownership from hypershift-operator #7157
OCPBUGS-66154: add OAuth certificate configuration doc #7351
OCPBUGS-67224: fix(Portieris): Fix Portieris by mounting emptyDir to ‘./.trust’ work dir #7368
CNTRLPLANE-1622: Enable nodepool autoscaling min zero #6975
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github