Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.19.0-okd-scos.ec.8

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.19.0-okd-scos.ec.7 - Success
• 4.18.0-okd-scos.ec.3 (changes) - Success

---

Loading changelog, this may take a while ...

Changes from 4.19.0-okd-scos.ec.7

Created: 2025-04-10 10:05:38 +0000 UTC

Image Digest: sha256:3a5e4e0614ba724ce3b12f4ab72d06d68b7e4ac29558bdb32eb9bd0df6468d1e

Release 4.19.0-okd-scos.ec.8 was created from registry.ci.openshift.org/origin/release-scos:4.19.0-0.okd-scos-2025-04-10-062204

Components

• Kubectl 1.32.1
• Kubernetes 1.32.3
• Kubernetes Tests 1.32.3
• CentOS Stream CoreOS upgraded from 9.0.20250402-0 to 9.0.20250407-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
VSphereControlPlaneMachineSet (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereStaticIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NewOLMPreflightPermissionChecks (0 tests)				Enabled (New)		Enabled (New)

Rebuilt images without code change

• apiserver-network-proxy git 0e116160 sha256:0a71a0fdf106595a07daa7f82b00af4ab1368fc1b294ebbaa7b8fe30ca082730
• azure-file-csi-driver git 9399f4eb sha256:1340dbad13357eb2e368a679acdeefd657145336171916a41ae1cb7fc084c0bb
• azure-kms-encryption-provider git 372d6f2c sha256:f3a2e23f96cb81f4a567886a157f9d017cbf6a4a48ce23cc707cb4cf5faeb118
• cluster-kube-storage-version-migrator-operator git 4e514049 sha256:a058affc8bf5d3458c641f011b003f7e962dcb8239b8da493800c6571962eeb7
• cluster-policy-controller git 74852478 sha256:ee207eb9c4fe9bf7f3c0fb7fc58bcb6953c3963b0e827ac0dc9811622a54803f
• cluster-update-keys git c1c56b4c sha256:5561ccb55773896b880d6051759fe3502d978306b1402ed06081420f5bdff265
• ibm-cloud-controller-manager git 7422aab2 sha256:8dcd1095d0d82a65fedd71bd927d1dcfa58783b3ee7a4875da0302b624f8e19f

agent-installer-api-server

• MGMT-20207: avoid adding system CA bundle to AdditionalTrustBundle #7448
• MGMT-20009: Change OCP 4.19 to the default version #7506
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.19 (#957) #957
• NO-ISSUE: Update Konflux references (#1090) #1090
• Full changelog

agent-installer-utils

• NO-ISSUE: ISOBuilder: Appliance tweaks #70
• AGENT-1138: Skip release image checks for interactive disconnected #52
• NO-ISSUE: ISOBuilder: idempotency and efficiency #66
• NO-ISSUE: ISOBuilder: Support –dir param #68
• NO-ISSUE: ISOBuilder: Update operators list #67
• Full changelog

aws-cluster-api-controllers

• ART-12521: update go mod dependency for konflux #545
• Full changelog

azure-cluster-api-controllers

• ART-12521: update go mod dependency for konflux #334
• Full changelog

baremetal-cluster-api-controllers

• Find Nodes by hostname #38
• Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

• OCPBUGS-53439: fix inconsistent subnet role name for bootstrap node #9650
• NO-JIRA: fix the platform test assertions to check expected err message #9639
• OCPBUGS-43990: Filter out excess CA certs when adding node #9641
• NO-JIRA: add Roshan-R to CoreOS approvers and reviewers #9642
• OCPEDGE-1506: Add Platform based validation to fencing credentials #9624
• CORS-3908: Update gcp cloud provider config map to include new endpoints #9600
• SPLAT-2121: vsphere - if no host group found, append not found #9638
• OCPBUGS-54541: Update RHCOS 4.19 bootimage metadata to 9.6.20250402-0 #9632
• OCPBUGS-46601: IBM Cloud Bump IBM Cloud CAPI #9623
• Full changelog

cli, cli-artifacts, deployer, tools

• COS-3023: pkg/cli/admin/release/info: support generating RPM diffs #1966
• Full changelog

cluster-autoscaler

• NO-JIRA: improve nodes listing in ClusterAPI provider #354
• Full changelog

cluster-config-api

• SPLAT-2078: Removed VSphereStaticIPs feature gate #2232
• OPRUN-3780: Add feature flag for NewOLMPreflightPermissionCheck #2242
• SPLAT-2079: Removed VSphereControlPlaneMachineSet feature gate #2236
• MCO-1630: Generate v1 crds for PIS #2257
• Full changelog

cluster-csi-snapshot-controller-operator

• STOR-2126: Enable readOnlyFileSystem #229
• STOR-1880: Role and ClusterRole with too wide permissions #235
• Full changelog

cluster-ingress-operator

• OCPBUGS-54650, OCPBUGS-54651, OCPBUGS-54652: desiredSubscription: Specify annotations and SCC #1214
• NE-2009: Move VAP to Default featureset #1216
• OCPBUGS-54568: desiredIstio: Specify priorityClassName #1211
• OCPBUGS-53424: Wait for install plans to enter the “Requires Approval” phase before approving them #1203
• NE-2008: Add GRPC conformance tests #1208
• Full changelog

cluster-kube-apiserver-operator

• MON-4161: add cluster:controlplane_topology:sum recording rule #1829
• Full changelog

cluster-monitoring-operator

• OCPBUGS-54516: provide context-rich and case-sensitive config validation #2584
• Full changelog

cluster-network-operator

• OCPBUGS-53180: Add IPv6 NGINX configuration #2681
• CNF-16707: frr-k8s: Add BGPSessionState CRD #2671
• Full changelog

cluster-node-tuning-operator

• Unblock production image generation (#1319) #1319
• OCPBUGS-54628: Add retry method if we hit jira rate limit (#1313) #1313
• Ignore -server-ose repos in the CI (#1314) #1314
• Full changelog

cluster-olm-operator

• OCPBUGS-54781: Revert #111 “OPRUN-3782: Watch for permissions preflight feature gate” #112
• OPRUN-3782: Watch for permissions preflight feature gate #111
• Full changelog

cluster-samples-operator

• OCPBUGS-54590: Samples Operator should sort failing image imports #627
• OCPBUGS-54589: Adding filter to clusterOperatorInformerEventHandler #626
• OCPBUGS-54591: only update LastTransitionTime if operator status change #625
• Full changelog

cluster-storage-operator

• OSASINFRA-3731: openstack: Consume CA cert from CCO secret #557
• STOR-2126: Enable readOnlyFileSystem #564
• Full changelog

console

• OCPBUGS-54733: fix bug where co-resource-icon–fixed-width can clip #14950
• OCPBUGS-52486: Notification drawer should have keyboard navigation focus when expanded. #14889
• OCPBUGS-54540: fix flaking update-modal test #14937
• OCPBUGS-54684: Remove orphaned notification drawer CSS class #14948
• OCPBUGS-54492: metadata.name field is missing in PDB example YAML #14946
• CONSOLE-4538: Use PF component groups for Error states #14912
• ODC-7720: Further Developer Catalog -> Software Catalog renaming #14911
• CONSOLE-4540: add set as default sc action #14920
• ODC-7778: Include Quick create in Admin perspective guided tour #14850
• CONSOLE-4393, ODC-6775: @types/node pre-merge prep #14932
• OCPBUGS-46526: Add BaseNode in topology folder into Dynamic Plugin SDK #14907
• OCPBUGS-54472: fix position of OpenShift Lightspeed button #14923
• OCPBUGS-54461: Add missing href props to masthead items #14922
• OCPBUGS-53065: Fix regression where normal Pod terminals are unresponsive. #14927
• OCPBUGS-54540: fix flaking update-modal test #14930
• Full changelog

console-operator

• OCPBUGS-45514: Report email_domain to telemetry #971
• CONSOLE-4481: Add junit generation for unit and e2e testing #974
• ART-12521: update go mod dependency for konflux #973
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• ART-12521: update go mod dependency for konflux #320
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• STOR-2251: Rebase external-snapshotter to v8.2.1 for OCP 4.19 #177
• Full changelog

docker-registry

• IR-522: disable aws region check #425
• Full changelog

gcp-pd-csi-driver-operator

• OCPBUGS-54336: Bump library-go #144
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-54426: Fix implementation of ContainsCIDR to allow non-equal addresses #2263
• OCPBUGS-52410: Propagate error when creating CustomResourceStorage instead of panicking #2216
• Full changelog

hypershift

• AUTOSCALE-44: add autonode karpenter drift hcp upgrade e2e test #5870
• OCPBUGS-54602: Set KAS GOMEMLIMIT node label to what OSDFM expects #5975
• NO-JIRA: Add polling for kas-bootstrap kas network requests #5990
• OCPBUGS-53261: Add validation to avoid conflicts between KubeAPI server and NamedCertificates SANs #5875
• OCPBUGS-41853: Add documentation for API Server custom certificate in HCP #6001
• OCPBUGS-54178: Add missing servicemonitors and prometheusrules permissions for non-OVN #5893
• ARO-15695: test/e2e: run EnsureImageRegistryCapabilityDisabled on 4.18 #5984
• NO-JIRA: Add OWNERS to kas-bootstrap #5991
• CNTRLPLANE-233: Add –kas-dns-name CLI flag to consume KubeAPIServerDNSName API #5969
• CNTRLPLANE-334: openshift/api dependency bumps #5971
• NO-JIRA: Enable ppc64le builds #5985
• OSASINFRA-3732: openstack: Sync CA cert to new key #5702
• chore(deps): update golang docker tag to v1.24 #5616
• OCPBUGS-54431: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5942
• NO-JIRA: Sync labels between CPO and RHTAP CPO dockerfile #5966
• OCPBUGS-52983: Add check for expected conditions before running NodePool tests #5970
• Full changelog

ibm-vpc-block-csi-driver-operator

• OCPBUGS-54482: Bump library-go #142
• Full changelog

insights-operator

• CCXDEV-9905: Introduce a new config option for storing archives to persistent volume (#1070) #1070
• Full changelog

kubevirt-csi-driver

• OCPBUGS-50562: Ensure unpublish works for volumes carried over upgrades #58
• Full changelog

machine-api-operator

• SPLAT-2051: implement e2e tests for vSphere multi network #1347
• SPLAT-2118: Update tests-extensions to pick up new vendor filtering #1351
• Full changelog

machine-config-operator

• OCPBUGS-53425: Make mtu-migration run after wait-for-primary-ip #4932
• OCPBUGS-54611: pkg/operator/status: Drop kubelet skew guard #4970
• OCPBUGS-54384: kubelet-service: narrow down restorecon path #4857
• OCPBUGS-54175: Add /etc/docker/certs.d to template #4933
• MCO-1587: Add runbook for ExtremelyHighIndividualControlPlaneMemory #4976
• OCPBUGS-49737: GCP: Include the gcp-routes.service for all GCP installs #4969
• Full changelog

nutanix-machine-controllers

• OCPCLOUD-2842: Update dependencies to k8s 1.32 #90
• OCPBUGS-54317: fixing CVE-2025-22868 #97
• OCPBUGS-53245: Fix link-local addresses being added to machine #100
• Full changelog

oc-mirror

• CLID-352: images: add integration tests image (#1124) #1124
• OCPBUGS-49880: cli: return distinct error codes depending on failure (#1062) #1062
• Full changelog

olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #306
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• CORENET-5382: unpin libreswan version #2498
• OCPBUGS-49994: [DownstreamMerge] 7th april #2509
• CORENET-5666, OCPBUGS-43004, OCPBUGS-54199: Downstream Merge 2025-04-02 #2505
• Full changelog

powervs-machine-controllers

• OCPBUGS-54620: CVE-2025-30204: github.com/golang-jwt/jwt allows excessive memory allocation during header parsing #112
• Full changelog

prometheus

• MON-4199: chore: update to v3.2.1 #246
• Full changelog

stream-coreos, stream-coreos-extensions

• NO-JIRA: Initial rhel 10 variant #1786
• NO-JIRA: Add Roshan-R to the OWNERS file #1792
• NO-JIRA: extensions-ocp-rhel-9.6.yaml: add back in rhel-9.6-server-ose-4.19 repo #1791
• COS-2902: Add C10s variant #1498
• OCPBUGS-52293: extensions: make rhel-9.4-appstream global #1784
• NO-JIRA: Switch layered build to treefile-apply, drain get-ocp-repo.sh #1780
• Full changelog

telemeter

• SWATCH-3413: Add acm_capacity_effective_cpu_cores:sum recording rule #554
• Full changelog

tests

• MCO-1523: PinnedImageSet v1alpha1 Testing #29599
• SDN-5217: Add tests for OVN-K default pod network route advertisement #29419
• NO-JIRA: add api error rate observed by kubelet, kcm, and scheduler #29070
• TRT-2049: Track Watch Counts via Audit Events #29628
• OAPE-91: Route ExternalCertificate: Skip e2e jobs for bare metal platform #29651
• OCPBUGS-18865: Reapply “kube-apiserver disruption incluster monitors” #29282
• NO-ISSUE: Automated - Update synthetic test data #29600
• OCPBUGS-53279: add failure case to skip in testPodSandboxCreation() #29631
• CNTRLPLANE-371: Use endpointslices in idling tests instead of deprecated endpoints #29647
• Full changelog

---

View changelog in Markdown or change previous release: 4.19.0-okd-scos.ec.74.19.0-okd-scos.ec.64.19.0-okd-scos.ec.54.19.0-okd-scos.ec.44.19.0-okd-scos.ec.34.19.0-okd-scos.ec.24.19.0-okd-scos.ec.14.19.0-okd-scos.ec.04.18.0-okd-scos.ec.34.18.0-okd-scos.ec.24.18.0-okd-scos.ec.14.18.0-okd-scos.ec.04.17.0-okd-scos.ec.44.17.0-okd-scos.ec.34.17.0-okd-scos.ec.24.17.0-okd-scos.ec.14.17.0-okd-scos.ec.04.17.0-0.okd-scos-2024-09-30-1017394.17.0-0.okd-scos-2024-09-26-2248284.17.0-0.okd-scos-2024-09-24-1048284.17.0-0.okd-scos-2024-08-21-100712───4.20.0-0.okd-scos-2025-04-01-203412───4.19.0-0.okd-scos-2025-04-19-1239544.19.0-0.okd-scos-2025-04-19-0012214.19.0-0.okd-scos-2025-04-18-1212214.19.0-0.okd-scos-2025-04-18-0012214.19.0-0.okd-scos-2025-04-17-0918544.19.0-0.okd-scos-2025-04-16-2116584.19.0-0.okd-scos-2025-04-16-0622164.19.0-0.okd-scos-2025-04-15-1822154.19.0-0.okd-scos-2025-04-15-0622144.19.0-0.okd-scos-2025-04-14-182213───4.18.0-0.okd-scos-2025-04-19-0707264.18.0-0.okd-scos-2025-04-18-0922124.18.0-0.okd-scos-2025-04-17-2122124.18.0-0.okd-scos-2025-04-17-0922124.18.0-0.okd-scos-2025-04-16-2119144.18.0-0.okd-scos-2025-04-16-0708304.18.0-0.okd-scos-2025-04-15-1908294.18.0-0.okd-scos-2025-04-15-0708294.18.0-0.okd-scos-2025-04-14-1908294.18.0-0.okd-scos-2025-04-14-070829───4.17.0-0.okd-scos-2025-02-25-0904554.17.0-0.okd-scos-2025-02-24-2104554.17.0-0.okd-scos-2025-02-24-0904544.17.0-0.okd-scos-2025-02-23-2104544.17.0-0.okd-scos-2025-02-22-211215───4.16.0-0.okd-scos-2025-01-06-1432414.16.0-0.okd-scos-2025-01-04-1456004.16.0-0.okd-scos-2025-01-04-0142364.16.0-0.okd-scos-2025-01-03-1342364.16.0-0.okd-scos-2025-01-03-0142364.16.0-0.okd-scos-2024-12-17-0222464.16.0-0.okd-scos-2024-11-24-1100454.16.0-0.okd-scos-2024-11-23-1818454.16.0-0.okd-scos-2024-11-23-0618454.16.0-0.okd-scos-2024-11-22-1818454.16.0-0.okd-scos-2024-11-22-061845───4.15.0-0.okd-scos-2024-12-16-1913164.15.0-0.okd-scos-2024-01-18-1035224.15.0-0.okd-scos-2024-01-17-2235214.15.0-0.okd-scos-2024-01-17-1035204.15.0-0.okd-scos-2024-01-16-223519───4.15.0-0.okd-2025-04-03-2126204.15.0-0.okd-2025-04-02-1800124.15.0-0.okd-2025-03-28-1148024.15.0-0.okd-2025-03-26-0131074.15.0-0.okd-2025-03-25-1331074.15.0-0.okd-2024-03-27-1109014.15.0-0.okd-2024-03-26-2309014.15.0-0.okd-2024-03-23-1640104.15.0-0.okd-2024-03-23-0440104.15.0-0.okd-2024-03-22-164010───4.3.0-0.okd-2025-04-09-1531174.3.0-0.okd-2021-08-03-2048314.3.0-0.okd-2021-03-22-1309504.3.0-0.okd-2021-02-02-2356544.3.0-0.okd-2021-02-02-1747534.3.0-0.okd-2021-01-28-0046514.3.0-0.okd-2021-01-18-145029───4.18.0-okd-scos.84.18.0-okd-scos.74.18.0-okd-scos.64.18.0-okd-scos.54.18.0-okd-scos.44.18.0-okd-scos.34.18.0-okd-scos.24.18.0-okd-scos.14.18.0-okd-scos.04.17.0-okd-scos.34.17.0-okd-scos.24.17.0-okd-scos.14.17.0-okd-scos.04.16.0-okd-scos.14.16.0-okd-scos.04.16.0-0.okd-scos-2024-09-24-1517474.16.0-0.okd-scos-2024-08-21-1556134.15.0-0.okd-scos-2024-01-18-223523───4.15.0-0.okd-2024-03-10-0101164.15.0-0.okd-2024-02-23-1634104.15.0-0.okd-2024-02-10-0355344.15.0-0.okd-2024-01-27-070424

Source code for this page located on github