Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.20.0-okd-scos.8

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable
  • upgrade-minor Succeeded (1 retries) release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-stable

Upgrades from:

• 4.20.0-okd-scos.7 (changes) - Success
• 4.20.0-okd-scos.6 (changes) - Failed
• 4.20.0-okd-scos.5 - Failed
• 4.20.0-okd-scos.4 (changes) - Success
• 4.20.0-okd-scos.3 (changes) - Success
• 4.20.0-okd-scos.2 (changes) - Success
• 4.20.0-okd-scos.1 (changes) - Success
• 4.20.0-okd-scos.0 (changes) - Success
• 4.19.0-okd-scos.19 (changes) - Failed Success

---

Changes from 4.20.0-okd-scos.5

Created: 2025-11-10 05:30:33 +0000 UTC

Image Digest: sha256:2b69eb4e3c7110bd4dff8dfa66bc79436b549829adc59602ac8f8f83b82749d1

Release 4.20.0-okd-scos.8 was created from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-11-09-100633

Components

• Kubectl 1.33.3
• Kubernetes upgraded from 1.33.4 to 1.33.5
• Kubernetes Tests upgraded from 1.33.3 to 1.33.4
• CentOS Stream CoreOS upgraded from 10.0.20251003-0 to 10.0.20251023-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
AWSDualStackInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
AzureDualStackInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
GCPDualStackInstall (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
OpenShiftPodSecurityAdmission (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Enabled	Enabled

Rebuilt images without code change

• agent-installer-node-agent git 62dc63f1 sha256:a96459dabf4da0a1314311846fc887e51e60c146cf4b426ed223508c4e0bff2d
• apiserver-network-proxy git 11b24a2c sha256:9ce6148e535bad573b7f436d42f77858fcb727f58be9b5d37d5065c290aaa11c
• aws-cloud-controller-manager git bb88da16 sha256:90f7e82a288882eb3702e59bb27fc70ada9d0234e87e2f99be4458328b05b88d
• aws-ebs-csi-driver git a8ef205c sha256:9c3ea5ce5988392414bd4707344914575c07c3ea43186601625649afbde28c58
• aws-karpenter-provider-aws git b37141b0 sha256:6ed83a36228d9cdcde7668059128b42322472cda4a1fbaba0e4b7b5f33c016b7
• aws-kms-encryption-provider git 088dcaf7 sha256:9401b995d9ffda05f5381a597408c22aebc618b703d5f3d669ad993acbea944b
• aws-pod-identity-webhook git a2ecb150 sha256:c579d6b69ccbad5cab9b548cea621254531a52542b7498249033f0ea38b46a3a
• azure-cloud-controller-manager git d469d04e sha256:ed7c5058ba31676e6666b758ff75e8d386ec3bef13e56823da8ba81dcdab975b
• azure-cloud-node-manager git d469d04e sha256:00c391c9e588a1cc74061077e6e0d0a235706a68049798dab13a8a80b1e66fc7
• azure-cluster-api-controllers git cb8b5b6a sha256:104e14f67f8f4d2953cc9e9ae156e0da26ed2ee0512a29eabe53bb34237fd734
• azure-disk-csi-driver git 0b8e4d22 sha256:4926d1382529baa38ecbe0c2ceb7139616536f07b11814223c82f05ae9e3205b
• azure-file-csi-driver git 45d505bc sha256:75ab8929c5a8653df81a3fa0e0e796d070614ab86943782eb222c38d3722f53c
• azure-kms-encryption-provider git ea0b9944 sha256:276d6c1b986777c8deee2576842bd684117af694c08dfa2f217c503138423642
• azure-service-operator git 6e2f3626 sha256:a8fdce0b73f869ab1f186f1d8f13557680fbb7450a9b21c1034d7dc4208bc642
• azure-workload-identity-webhook git 88b18175 sha256:36c67587fdf05630b16047797b425a4c3ff3862a3d30786d09f44d26f4f00790
• baremetal-cluster-api-controllers git f782ba74 sha256:661ea4549a91dcaf845e7edf45523ecfb64f60ba1b02e80158b6f8d43484c44b
• baremetal-machine-controllers git fb678fec sha256:90d23f9c4b32330d1ec25e8ca2529e7318724a6ee18e1ecc303378600aa74ce8
• baremetal-runtimecfg git 6553765e sha256:5edb6a5c1737e1c0745bd5ff920621bb1036d0b6e4683c3ef9fc5818eaac06bf
• cluster-autoscaler git d883d0e6 sha256:3d7bb243bd2e37f128ea1f53fa5b62d518d18765289fe73bee57df4a7685c8e8
• cluster-bootstrap git 74abc555 sha256:67939f69b7d2973715f5e3acecfee0537dcc12341ebe155a59c0fa785c684dde
• cluster-capi-controllers git de1db297 sha256:48fc107d0e77fd853eafe544d93261a50bbd4919f09a532b0561a1504d85d820
• cluster-config-operator git 657754e2 sha256:e037e4d7d1a4e143df7769a50290c797e0885971129d20604d998fe3fb613b33
• cluster-control-plane-machine-set-operator git 0bbafe24 sha256:a229e2686ca49b128e815fb7d11d75b7a4d068501986cd817a3840624926fae8
• cluster-image-registry-operator git b04c7c12 sha256:3069bc81135a34dfe62a425169470d9a98f0ca6192817051002e0757603732fc
• cluster-olm-operator git e4917368 sha256:d6f466f907f1ac625b55bd183252bdab38ecc0dd71756fd2478089975a5dd2fa
• cluster-update-keys git c40e7b9b sha256:0da5323c7489a84bbd292bd4a502ee597c0a8363a8dd105a1d8eca4d14d86cd7
• configmap-reloader git 2438d7c8 sha256:dd992d6307f56299f201d7bba0481e30d647e5580a3e90eab2fc4bd24eaf31f5
• container-networking-plugins git 184a9601 sha256:9e2b9a11f2db387f816ff6ca1d401d5118d7f87742339585633a1124237b6af6
• containernetworking-plugins-microshift git 184a9601 sha256:879ba685165e141272dbd5f9d8de8887d49fc701790a8dd14f5d9d3fc67192f2
• coredns git 6f39336e sha256:dcfe5a25898b63ad75c5b8af78e0fc9cc8ec567170e2cc8e4e441967f761b84d
• csi-driver-manila git c4fe3e8a sha256:9653b1636b5e1306532522bcbd32a9a5d4383077ddf425094272a43b7cefc102
• csi-driver-nfs git 1abaf844 sha256:c44d2cc82fd3b2f98b0cc9c9ed3e8299302880be486385158c28c64970c0a480
• csi-external-attacher git 45239149 sha256:ce81973fa79e0699d0c86b8e0717205a4405105e46c8ff12597769456db33ccd
• csi-external-provisioner git 81fca036 sha256:2a82886b3625d782ccf7b33fa4042f47ec95b2ba7b007edcb549310748ec85c9
• csi-external-snapshot-metadata git 693a8264 sha256:6859cbb87d5978cb39f42b478c5a43f6c504699ce4c1212246d5e63d3f7b5616
• csi-external-snapshotter git 42604822 sha256:1f66d53342aaabe609a50ca734838f1239f3681f438d20e45b159fbb866cf720
• csi-livenessprobe git 1d6d6b27 sha256:815d09cdf1cd3c0b8611b00df17a987a962be151e40e02873c44bb0fa90e1f43
• csi-snapshot-controller git 42604822 sha256:788856dd27a37e70bdf7076dd93b0790c1cd63b3dee24aefc9cefb6973074274
• docker-builder git ff595e4b sha256:5c058ce8df96bd96f4c06a9060d4806d529e1cf0d0a17bbbfad8d18f47f63c09
• driver-toolkit git 9d55fd1a sha256:12f4acd1165ab385c0303a1d3c6920b7fb5f7f761e7c2c05cb434e113b6de3d0
• egress-router-cni git 5e0f8d1b sha256:087822adfa5a2e022c49445f9d03c558964b2784963b25c0532c0318aa622f82
• gcp-cloud-controller-manager git f940e72e sha256:953442607f0066380bd75ecde2d2cb0538d655a01aa391c872d4bcffc322d9aa
• gcp-cluster-api-controllers git 65539c71 sha256:b8ead547ea08bbfc8543c97cb047b31f90efcb581066619c1bbb89ecf23a0de1
• gcp-machine-controllers git 01515888 sha256:05a0d3f08e50ab24c7170e48ac6c27606dd15542646d2ad81db6233b4239290b
• gcp-pd-csi-driver git 500ab5d3 sha256:cf87d40e90506edd27a936c12e930e900d7597519e2c5082cddd1a36da3dce9b
• gcp-pd-csi-driver-operator git e0ad050a sha256:a05d3fcf8e64388ab01314193ec0bdb09f59f90caafbbb55e8e49daa58651a9b
• gcp-workload-identity-federation-webhook git b36788ed sha256:de0decbdc3de10b9e024299612b2ed5979bc76a8f5769ccdf8211beb49470fc2
• haproxy-router git 96bfd216 sha256:aa2c8730d15b20297f71426ff7bc9a0eae0ce86b328961a178110cbd3f72fd82
• ibm-cloud-controller-manager git 36ab30f9 sha256:f83f8eda34f712884aa603740d77b0023381cc6d6cb3725e4fa534fbca6c1317
• ibm-vpc-block-csi-driver git 19801353 sha256:70919f212b22fdab83226963e586d7c819084fc41978ec6fe06cb1d84e7e3903
• ibm-vpc-block-csi-driver-operator git 21f405cc sha256:5dcea93f66b49c7281138811a5c6e3df18327a86bc7d519ca4820037cce422ac
• ibmcloud-cluster-api-controllers git 8b6396a4 sha256:8e8e983dea1fc0c7200e0d89985b3cb3af6e74b3377861197ef971442cf6c175
• ibmcloud-machine-controllers git 035805df sha256:487711f8b38cb60badcfc1096ea800c4fd70cf5d2ed9395e12cf26cd4aa708a2
• insights-runtime-exporter git 3d378369 sha256:e375da10cc320cd210248216cd7b5e201a42a654a08fa43cfbdb4e43f9106ce7
• insights-runtime-extractor git 3d378369 sha256:e47f5c9ce4bcb203970b61b91477a1a395745d762da15fa8f1b1041295e42545
• ironic-agent git ce01f3c1 sha256:663564f64eab9d0a4064a2d99db8abcadb08bee020c58c0427544b689396185c
• ironic-machine-os-downloader git 6c92e542 sha256:401c09a52e4d238faf4b42a6fb978fa86a3f3f588755884fa7bc0fe9bbad0cef
• ironic-static-ip-manager git fa5b8b8b sha256:3c4cd99df369158fee1dd173db00ba50d466cc1961325a64e010cb0f5dd46576
• kube-metrics-server git cfa5ee9f sha256:438b8ecfc827c27003f0347fc2d62e0fcd46654719acdfc3b6c04862c7d0b9bb
• kube-rbac-proxy git b9134351 sha256:6d4056bf69022cd09ecf845fb46c1743ad4aaa394b935285d1c5af5dac681f10
• kube-state-metrics git a8c9a5f0 sha256:c762b290a185eadc4e5d0dea5527ea54c23cfd6e1c7c28633565e29f617bdca4
• kube-storage-version-migrator git 0f8a4eb8 sha256:f2654576aa8ae04d5a3199618d74d68c05f5b4d9f14e2cfc09aac9a36df724e7
• kubevirt-cloud-controller-manager git 3f4542ec sha256:609ecb961b89d7a0d0e80bd84862eb4c40c8cd774ee98461da3b2c0aefd01821
• kubevirt-csi-driver git 8b8dd30e sha256:99f246a49fc125ee50f6961b4e7aa3c9fa9b3a357773e22ecf89339ecc43ca7e
• libvirt-machine-controllers git a336f0b5 sha256:dbd435ed9051c1162d9e99c6f98d215adc22a72ff21b9ea7bbc2d5df2ce1ede5
• machine-image-customization-controller git 20f6d615 sha256:44ca69e7b2b541f1fbf037abc1451f5a0d543934c47bf59ec3933f383fd1404d
• machine-os-images git 64bfec79 sha256:12241c14501852a7758b7b36b81062669a3667263d6cd90c5e5851c8f4e5c712
• metallb-frr git fc0fe74f sha256:8d9478439835895210e6bfcc85e8a809602c90c2cb1f59c7429c9bd83e7c22f3
• multus-admission-controller git fc73c803 sha256:65b990776d4b15c5748624dbb354450fc67566f9f553f7ae357e9b7387d09376
• multus-cni git cf0f68ec sha256:b0732bb8f252bbadc68be5499aca48194a0678dba2f4d0d7b7ce995e84e3def7
• multus-cni-microshift git cf0f68ec sha256:ad6ad5731956b2cbfc7d2728cbc4425a66e2a8c1330ce669f8f6c4eba0d794c4
• multus-route-override-cni git 391c1b03 sha256:7b57f6aec40aa42c8a0f7c0733491964f4933b78af3e141cf64ac0cfc3082b86
• multus-whereabouts-ipam-cni git 43c89591 sha256:ec1864b957b8c3b331644d751ff57fdfd97f775ee62f146bfafc25e15c75f032
• must-gather git f0c64742 sha256:e1bcd28cdeefcdd002d99a01e0ffaba0dfffa0c04da3fb5d044e8d61bc00c73a
• network-interface-bond-cni git dd3c4d0b sha256:7bb484b9a66692b86090b142cb7aaffd717ecd825d55c9bcba08b1add44056dc
• network-metrics-daemon git b81340a9 sha256:130bfe900550b1ffb50b66aaa805bd5cf8c2f6b22e275d438c536683d5d0048b
• network-tools git 26d09174 sha256:a5d5049a416b434554d4d9e66753018b9742f59c9f8e76c5f1aa2ae259858b7c
• nutanix-cloud-controller-manager git b575ef15 sha256:fd3b10b440966f635b172c7bbe7e278f08e1631f92f0c833383cf33e59142a0c
• nutanix-machine-controllers git 3200ddef sha256:7ca9e7664ffcf2f1240ab76fff9bd41b390c2dc60a13f1ec44147d06088b2d31
• oauth-proxy git 6649cb8a sha256:30a821f6da55dbbd79d5f4d9b4dd93baaa688c23e8445d4d6c9f5769a752e825
• oauth-server git 81098796 sha256:457b3795d4f69cd5ace36c74e6a1e2780ec1801dcb39d470e825d2f5b06c745c
• openshift-state-metrics git b04e2ef0 sha256:5e89dfeaa8bc31b301e9e9a2dfb793e0374ac967736ff2fe4bc48fb3d12519a1
• openstack-cinder-csi-driver git c4fe3e8a sha256:da96b51814ed0bdab15f946c88ef7f6be9cc676d0640b4827c8f1fbfdd370a1f
• openstack-cloud-controller-manager git c4fe3e8a sha256:9005cdd5dd72d7f02ec2786188d5238ad12f77a6c0c30a571651e79fdb04c80c
• openstack-cluster-api-controllers git 30944900 sha256:8ae1f253ce0c394510865e59033c914cbc4aa2fd25732ebdfa825f5b2e28b553
• openstack-machine-api-provider git 5085f184 sha256:4a9094d035a3e4a20fc983b120b2e26193cdae3c59a3d46ef2c685bbe96b46ba
• openstack-resource-controller git bf0d2c88 sha256:3b158b2918f2e97fdb7497aa4f9cc3249078e8a0b0a45af3fe984d3c4aa489fa
• ovirt-csi-driver git 1db726a9 sha256:c66de1ab2f3f0631983099450467a76488bd0910edbd13b572f8abdfc58ed4db
• ovirt-csi-driver-operator git 76db379d sha256:576090918b92fc03072e32d4a1473e84d3f133f9a80cb530f3e9c64c1d085e3d
• powervs-block-csi-driver git 0693fe5d sha256:2ef1a609c7209981b757a7068a3931cb9e05285e16a37c40c583f7b7b54db418
• powervs-block-csi-driver-operator git 319efc99 sha256:ce74c887dc80ff2b7846a22019b54843b08f095bd4937ff28392aecdfd5dbd4c
• powervs-cloud-controller-manager git 2424e8dd sha256:812b35b38ac31846edb2c95a50aed614542f5eef2248d603f5bb77632d10a6fa
• powervs-machine-controllers git f011b3c7 sha256:b44efdbc9f9962792429e9aca9d9da8a9455a0ca720f49d5000147ea2789b508
• prom-label-proxy git f2529aee sha256:99744f30f04a26f10fa97c9b546ba486ce6132f5c8fc610e13459072391f97b7
• prometheus git af9b2068 sha256:256e7198c12b352a07e533aee9f71715809d0f22de1fb23bb9769b898a062fa7
• prometheus-alertmanager git 419f2843 sha256:9e2e81a8fe8fab112af5ec1e1c44175a3a2b5d9b92100eef6187b37569c8a64a
• prometheus-config-reloader git e2bd260c sha256:aab1f8c7fbe97afd795c9ffa0a89063624b90981b64867a77dae7b31d47d3fed
• prometheus-operator git e2bd260c sha256:d2ed4c0cb8aa214b5c1471071f0baa8474b20f02ea4ee2a52c240e181ec446e5
• prometheus-operator-admission-webhook git e2bd260c sha256:740ba6c9b54de182e1783c6a8c62ac81d90a22b7c8b8cf6ba34ee2eb7057ffea
• route-controller-manager git bf2fa662 sha256:c6ae4a293d19bf8982ae767d91262ffb300bb95451911ff1c939f5d12512029a
• stream-coreos git 63e9aa40 sha256:bd9bf79f31c21decab45aa24fc4081f5db2ded99a926779c42ac92c24ed5a325
• stream-coreos-extensions git 63e9aa40 sha256:1bba9ab4ddcb3cc7a577291b7fdb3bf50f8967087d9b76d0377f45828d9b2372
• telemeter git 4c6036ee sha256:ab1390be3c250364a00f3ae3b57d231026882edcd0fac1d4121f94f8a24fecd5
• thanos git c0951032 sha256:609bacb542cf73dde0b6e680f3a85e51eba1d9dae6e84935444871028ec0b494
• volume-data-source-validator git 0e61642f sha256:8242047efa386101a51b87cc13f3b674359411eae432d04b72601e14fad774e8
• vsphere-cloud-controller-manager git b93eb64f sha256:6926b6eb59fbddde047b818d1b2429d5eedcd3b276c1ec60b220ef1a334f77b3
• vsphere-csi-driver-operator git 5cd04d61 sha256:d42444d17c3e7e1effdf2b4012628f11bb05621954c3f91d5a005c50edc4b072
• vsphere-problem-detector git 9d55c028 sha256:04d1d4afba9beaf8d2946420ae9a33f35ce9ef3132b1d93ffa0460a9d64944a2

agent-installer-api-server

• OCPBUGS-63486: Align kube descheduler activation CR with OVE needs #8136
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

agent-installer-utils

• OCPBUGS-64694: Update 4.20 version to 4.20.2 #193
• OCPBUGS-63585: AGENT-1203: Simplify isobuilder #189
• OCPBUGS-63590: Update 4.20 version to 4.20.1 #190
• OCPBUGS-63372: Backport Konflux changes #183
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-61040: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.2 (d3a7da1) into release-4.20 #578
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-63560: Add RBAC ClusterRole and Binding for driver node #456
• OCPBUGS-62688: Add withCABundleDaemonSetHook() to AWS EFS operator #441
• Full changelog

aws-machine-controllers

• OCPBUGS-63136: client: re-use a single file for building the session instead of randomly named files #148
• Full changelog

azure-machine-controllers

• OCPBUGS-63535: Support DataDisks on Azure Stack Hub #165
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-63633: Update the RHCOS 4.20 bootimage metadata to 9.6.20251023-0 #10037
• OCPBUGS-63461: Prevent duplicate noProxy when adding nodes #10028
• OCPBUGS-62920: AGENT-1269: Use agent-installer-ui image from release #10009
• OCPBUGS-62343: [release-4.20] vSphere 7 deprecation #9973
• OCPBUGS-62124: Update the RHCOS 4.20 bootimage metadata #9997
• OCPBUGS-62948: Add an option in image-based installation to specify architecture #9943
• OCPBUGS-62935: Add MTU validation for networkConfig #10010
• OCPBUGS-62846: None: Allow IPv6 Primary DualStack installs on platforms None and External #10005
• Full changelog

cli, cli-artifacts, deployer, tools

• OCPBUGS-64791: Rely on overall available disk space of the mounted volume #2133
• OCPBUGS-64773: oc adm must-gather: Wrap gather in a session #2132
• OCPBUGS-61757: pkg/cli/admin/upgrade/recommend: Enable precheck and accept gates #2097
• Full changelog

cloud-credential-operator

• OCPBUGS-63546: ccoctl: add public-key-file flag to create-all #936
• OCPBUGS-61586: set cloud-credential-operator as default-container #916
• OCPBUGS-61225: ccoctl: aws to use proper issuer url on subsequent runs #912
• Full changelog

cloud-network-config-controller

• OCPBUGS-63542: Change the capacity struct from int to ptrOfInt #185
• Full changelog

cluster-authentication-operator

• OCPBUGS-63319: (bugfix): configure status controller to remove unset versions #802
• OCPBUGS-64668: Update OIDC e2e test to expect admission-time validation error of invalid CEL expression #804
• Full changelog

cluster-autoscaler-operator

• AUTOSCALE-244: Allow cluster-operator service account to patch machinesets/scale subresource #352
• Full changelog

cluster-baremetal-operator

• OCPBUGS-62316: Always have a service for ironic-api port #511
• Full changelog

cluster-capi-operator

• OCPBUGS-62755: kubeconfig controller: do not error on token secret not yet populated #377
• OCPBUGS-61770: Fix conversion of Machines without MachineSet #362
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-63164: ccm: disable unused secure-serving port and webhook #419
• Full changelog

cluster-config-api

• OCPBUGS-62280: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2509
• OCPBUGS-62256: ConsoleLink CRD has incorrect additionalPrinterColumns entry #2508
• OCPBUGS-61977: Add ‘AGE’ print column to MachineConfigNode object #2497
• OCPBUGS-56778: Disable PSA for 4.20 #2475
• Full changelog

cluster-csi-snapshot-controller-operator

• OCPBUGS-62258: add all-egress label to deployments on HCP and IBM #244
• Full changelog

cluster-etcd-operator

• OCPBUGS-62738: CNTRLPLANE-1315:Add OpenShift Tests Extension (OTE) for cluster-etcd-operator #1491
• OCPBUGS-63249: Ensure revision.json persists on ungraceful shutdown #1501
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-64689: Add priority field to prevent early shutdown #1955
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-63173: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.20 #62
• Full changelog

cluster-kube-controller-manager-operator

• OCPBUGS-64684: Add priority field to prevent early shutdown #890
• Full changelog

cluster-kube-scheduler-operator

• OCPBUGS-61544: add readonlyRootFilesystem #576
• Full changelog

cluster-kube-storage-version-migrator-operator

• OCPBUGS-61325: CNTRLPLANE-1306:Fixing arch issue #131
• Full changelog

cluster-machine-approver

• OCPBUGS-63587: port 9193 need to be internal and port 9194 need to have a service #280
• Full changelog

cluster-monitoring-operator

• OCPBUGS-62978: add tls configuration for the monitoring plugin deployment #2718
• OCPBUGS-62829: Remove cluster from non-multicluster dashboards #2701
• OCPBUGS-64577: Fix KSM deny-list typo #2729
• OCPBUGS-63408: chore(prometheus/remotewrite): [release-4.20] clarify that the in-cluster proxy env vars set in prometheus container can be used in all configs that support proxyConfig.proxyFromEnvironment #2721
• OCPBUGS-62979: Remove AlertManager endpoints when disabled #2710
• Full changelog

cluster-network-operator

• OCPBUGS-64733: api, l2udn: subnets must be masked #2823
• OCPBUGS-62678: Tweak iptables-alerter to try to avoid crictl bug #2811
• OCPBUGS-62273: Fix EgressIP stale GARP post reboot + pod restart #2806
• OCPBUGS-61779: Relax label req. of DPU/DPU Host/Smart NIC #2800
• OCPBUGS-61370: Set maxUnavailable 10% on MultiNetworkPolicy DS #2793
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-63010: E2E: Add test cases related to schedulable control plane nodes #1409
• OCPBUGS-62889: E2E: llc: make sure to remove any trailing newspaces #1408
• OCPBUGS-63334: Do not cause kubelet failed dependency by ocp-tuned-one-shot.service #1415
• Full changelog

cluster-openshift-controller-manager-operator

• OCPBUGS-61607: set up openshift-tests-extension for cluster-openshift-controller-manager-operator and add a sanity test #396
• Full changelog

cluster-policy-controller

• OCPBUGS-62053: fix(psalabelsyncer): return an error instead of panic when converting an unknown volume #168
• Full changelog

cluster-samples-operator

• OCPBUGS-63507: references to github.com/sclorg/django-ex.git now also refer to the branch #655
• Full changelog

cluster-storage-operator

• OCPBUGS-62668, OCPBUGS-62993: Move metrics to vsphere driver #630
• Full changelog

cluster-version-operator

• OCPBUGS-63001: Add ClusterVersionOperator manifests to TechPreviewNoUpgrade clusters in 4.20 #1247
• OCPBUGS-62867: temporarily disable metrics auth for hypershift clusters #1244
• Full changelog

console

• OCPBUGS-63616: Preserve path on perspective switch #15650
• OCPBUGS-64809: Never allow OTHER_CATEGORY in categories #15690
• OCPBUGS-63608: Fix catalog search relevance scoring, so that operators with attribute.keywords are displayed and remove unnecessary metadataName from calculation #15648
• OCPBUGS-63470: limit node log length to 1000 lines #15635
• OCPBUGS-63440: Expose prometheus tenancy label path as a proxy #15632
• OCPBUGS-63465: Remove required flag from ‘console.flag/model’ pipelines-plugin extension #15634
• OCPBUGS-63403: Fix Bare Metal Hosts nav item #15628
• OCPBUGS-62644: bump dompurify to latest #15587
• Full changelog

console-operator

• OCPBUGS-64602: Remove v1alpha1 ConsolePlugin version from CRDs status #1060
• OCPBUGS-61230: pluginOrder field should only contain available plugins #1040
• Full changelog

csi-external-resizer

• OCPBUGS-61546: Requeue PVC over PV creation #172
• Full changelog

csi-node-driver-registrar

• OCPBUGS-62844: update log level verbosity to not clutter logs #87
• Full changelog

docker-registry

• OCPBUGS-61638: update OWNERS #449
• Full changelog

etcd, installer-etcd-artifacts

• OCPBUGS-63474: 4.20 rebase 3.5.24 #347
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• NO-JIRA: enable CBOR tests #2502
• OCPBUGS-63601: UPSTREAM: <carry>: Skip CPU resource status for workload-partitioning #2504
• OCPBUGS-61555: Bump 1.33.5 #2461
• OCPBUGS-61753: UPSTREAM: <carry>: Add retries for GetCurrentResourceVersion. #2469
• OCPBUGS-61720: Do not remove PVC ClaimRef to fix flaky VAC test #2463
• OCPBUGS-61197: UPSTREAM: 133425: Fix SELinux label comparison #2445
• OCPBUGS-61347: UPSTREAM: <carry>: backporting fix for concurrent map iteration and write #2450
• OCPBUGS-61333: Unrevert bump to v1.33.4 #2449
• Full changelog

hypershift

• OCPBUGS-63718: specify SCC annotation for pods in data plane #7132
• OCPBUGS-63128: resolve initContainer permission issue after node reboot #7080
• OCPBUGS-63604: fix(konnectivity): resolve circular dependency causing DNS timeouts and excessive retries #7107
• OCPBUGS-63367: FIPS compliant hypershift binary #7083
• OCPBUGS-62020: fix(security): harden konnectivity-agent DaemonSet security context #6870
• OCPBUGS-62806: Fix driver-config ConfigMap content flapping due to random ordering #6945
• OCPBUGS-63387: fix: routes are not used in case of IBM Cloud #7079
• CNTRLPLANE-1648: Remove main-branch build pipelines from release-4.20 #7050
• OCPSTRAT-2472: Add latest tag to MCE 2.10 build pipeline #6912
• OCPBUGS-62182: fix(kas-bootstrap): increase wait timeouts to avoid KAS startup races #6887
• OCPBUGS-62005: Enable VolumeAttributesClass runtime config #6868
• OCPBUGS-62006: fix(ignition-server): Don’t delete user-managed cert secrets #6869
• OCPBUGS-61863: ci: Use the common MCE konflux pipeline #6847
• OCPBUGS-61066: fix: propagate AWSLoadBalancerTargetNodesAnnotation to HCP #6772
• OCPBUGS-61575: fix(kas): Set correct container port in postStart handler, 2 #6854
• OCPBUGS-61565: [release-4.20] fix(proxy): ensure URLs have scheme before proxy resolution #6791
• OCPBUGS-61746: fix(oauth): oauth-openshift deployment should be HA #6828
• OCPBUGS-56778: fix(kas): Disable PSA enforcement in 4.20 #6830
• CNTRLPLANE-1397: feat(konflux): tag MCE HO images with latest #6784
• OCPBUGS-61670: fix(control-plane): remove resource limits from kube-controller-manager #6804
• OCPBUGS-61667: resolve MIRRORED_RELEASE_IMAGE flapping #6803
• OCPBUGS-61321: rename CCM deployments to align with 4.19 #6768
• OCPBUGS-61322: fix: cleanup old PKI operator deployment during upgrades #6769
• Full changelog

insights-operator

• OCPBUGS-62019: update DataGather condition when gathering job fails #1155
• OCPBUGS-61784: Update error message for missing SCA certificates #1139
• OCPBUGS-61845: add missing permissions for replicasets and events #1144
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

machine-api-operator

• OCPBUGS-61853: Fixed multi nic e2e to wait for node removal after machineset tests #1418
• OCPBUGS-61853: Adjusted machine e2e tests to wait for nodes to clean up #1416
• OCPBUGS-61314: bump openshift/api #1410
• Full changelog

machine-config-operator

• OCPBUGS-64656: Update the OCP base image in Dockerfile to 4.20 reference #5392
• OCPBUGS-63534: Create temporal allow policy #5373
• OCPBUGS-62167: Fix - NetworkManager restart or crash renders br-ex unusable #5353
• OCPBUGS-63127: Ensure the node passed to RunCordonOrUncordon comes from the latest updated state #5349
• OCPBUGS-63337: RHEL10 RT kernel packages filtering #5365
• OCPBUGS-62801: Only fire OSImageURLOverridden and set metrics on changes #5339
• OCPBUGS-62273: Networking: reset ovn-remote config and allow ovnkube controller to s… #5317
• Full changelog

monitoring-plugin

• OCPBUGS-63440: fetch metric labels with tenancy #617
• OCPBUGS-63162: [release-4.20] Improve alignment with console SDK #604
• OCPBUGS-62978: allow additional TLS config #592
• Full changelog

networking-console-plugin

• Hide VirtualMachine networks page in 4.20 release #290
• Full changelog

oauth-apiserver

• OCPBUGS-63052: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #151
• OCPBUGS-61753: Bump openshift/kubernetes-apiserver. #147
• Full changelog

oc-mirror

• OCPBUGS-63030: removes unintended exec permissions #1291
• OCPBUGS-62463: generate the archive only after mirroring #1279
• OCPBUGS-62283: v2/cli: show binary version in output #1276
• And 4 elided commits (e.g. from squash or rebase merges)
• Full changelog

olm-catalogd, olm-operator-controller

• OCPBUGS-61890: 🐛 CRD upgrade safety fixes and ratcheting (#2123) #527
• NO-ISSUE: add jiazha to approvers #513
• Full changelog

openshift-apiserver

• OCPBUGS-61753: Bump openshift/kubernetes-apiserver. #557
• OCPBUGS-61494: ensure cache invalidation after a time #553
• Full changelog

openshift-controller-manager

• OCPBUGS-61900: Fix Dockerfile.rhel: Add OTE binary build and packaging for release-4.20 #420
• OCPBUGS-61790: CNTRLPLANE-1308: set up openshift-tests-extension for openshift-controller-manager and add a sanity test #418
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-61362: [4.20] e2e stability fixes #1077
• Full changelog

operator-marketplace

• OCPBUGS-62216: Remove Expect func so that the test case can use the retry logic #667
• OCPBUGS-61200: Add NetworkPolicy for hypershift #660
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-64590: NetPol & MultiNetPol: Process update only when spec fields and/or related annotation are updated #2841
• OCPBUGS-63696: Fixes OF flows to be VLAN aware as well as add DPU checks for certain features #2837
• OCPBUGS-63007: kubevirt: fix bad release of IPs of live migratable pods #2801
• OCPBUGS-63577: [release-4.20] CORENET-6055: Dockerfile: Unpin OVN and consume the latest from FDP. #2808
• OCPBUGS-63631: Skip Pending pods in EgressIP status updates #2831
• OCPBUGS-62913: Configure sec nic EIPv6 address with NODAD and maximum lifetime #2797
• OCPBUGS-62273: Fix EgressIP stale GARP post reboot + pod restart #2767
• Full changelog

prometheus-node-exporter

• OCPBUGS-63624: bump github.com/prometheus/procfs to v0.16.1 #173
• Full changelog

service-ca-operator

• OCPBUGS-61966: don’t hotloop on secret creation errors #275
• Full changelog

tests

• OCPBUGS-64598: Updated the upgrade duration limit to 100 minutes for ppc64le #30451
• OCPBUGS-64593: [release-4.20] NO-JIRA: Filter preconfiguredIPs based on cluster IP family support #30415
• OCPBUGS-63725: CNTRLPLANE-1766:fix(disruption): Using correct internal LB of apiserver for monitor test on ARO and Baremetal Hypershift #30439
• OCPBUGS-63171: Add imagestream update dryrun test #30389
• OCPBUGS-63513: Migrate OCP-32383 to upstream #30423
• OCPBUGS-62841: fix(test): prevent nil pointer dereference in ginkgo test runner #30350
• OCPBUGS-46422: Skip ServiceCIDR in etcd_storage_path test (4.20) #30257
• OCPBUGS-62695: cherry-pick 30270 to release-4.20 #30335
• OCPBUGS-62231: network test isolation and reduced parallelization to protect cpu #30300
• Revert “[release-4.20] OCPBUGS-62140:OCPSTRAT-2045:Automating OCPSTRAT-2045 feature in upstream” #30303
• OCPBUGS-62140: OCPSTRAT-2045:Automating OCPSTRAT-2045 feature in upstream #30299
• OCPBUGS-61757: test/extended/cli/adm_upgrade/recommend: Enable precheck and accept #30260
• OCPBUGS-62075: Temporarily remove commatrix documentation test for rework #30287
• OCPBUGS-62007: oidc: improve rollout wait times #30284
• CNF-18661: Update vendor with communication matrix bug fixes on 4.20 #30271
• OCPBUGS-61734: Restore retries for flaky port foward test #30266
• OCPBUGS-61540: chore(extended/prometheus): ²⁄₂: make ‘targets auth’ test more lenient and more resilient #30263
• OCPBUGS-61744: update machines scale test #30258
• OCPBUGS-61732: [release-4.20] CNTRLPLANE-945: oidc: add retry logic for Keycloak route creation #30251
• OCPBUGS-61731: [release-4.20] CNTRLPLANE-945: images: add keycloak images and use them in ExternalOIDC tests #30250
• OCPBUGS-61600: Skip config-operator checking when featureSet is DevPreviewNoUpgrade #30245
• OCPBUGS-61540: chore(extended/prometheus): make ‘targets auth’ test more lenient and more resilient. #30237
• OCPBUGS-61478: Add flaky kubectl logs test to the retry list to clean signal for release #30231
• OCPBUGS-61333: Bump to latest openshift/kubernetes (v1.33.4) #30228
• OCPBUGS-61286: Mark etcd net overload logging test as a flake #30214
• CNTRLPLANE-1306: Enable OTE for cluster-kube-storage-version-migrator-operator #30213
• CNTRLPLANE-945: [release-4.20] CNTRLPLANE-945: improve logging, add startup probe to Keycloak Deployment #30204
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-61647: Fix unit tests #68
• NO-JIRA: Update OWNERS #63
• Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

• STOR-2404: Rebase to upstream v3.5.0 for OCP 4.20 #147
• OCPBUGS-57582: Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.20 #146
• OCPBUGS-57570: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.20 #145
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.33.4-1.el10s
• kernel-6.12.0-142.el10
• openshift-kubelet-4.20.0-202509232257.p2.ge0d4216.assembly.stream.el9
• systemd-257-16.el10

Full list (575 packages)

• NetworkManager-1:1.55.4-1.el10
• NetworkManager-cloud-setup-1:1.55.4-1.el10
• NetworkManager-libnm-1:1.55.4-1.el10
• NetworkManager-ovs-1:1.55.4-1.el10
• NetworkManager-tui-1:1.55.4-1.el10
• WALinuxAgent-udev-2.13.1.1-2.el10
• aardvark-dns-2:1.16.0-2.el10
• acl-2.3.2-4.el10
• adcli-0.9.2-9.el10
• afterburn-5.10.0-1.el10
• afterburn-dracut-5.10.0-1.el10
• alternatives-1.30-2.el10
• amd-gpu-firmware-20250812-19.el10
• amd-ucode-firmware-20250812-19.el10
• atheros-firmware-20250812-19.el10
• attr-2.5.2-5.el10
• audit-4.0.3-4.el10
• audit-libs-4.0.3-4.el10
• audit-rules-4.0.3-4.el10
• authselect-1.5.0-8.el10
• authselect-libs-1.5.0-8.el10
• avahi-libs-0.9~rc2-2.el10
• basesystem-11-22.el10
• bash-5.2.26-6.el10
• bash-completion-1:2.11-16.el10
• bind-libs-32:9.18.33-5.el10
• bind-license-32:9.18.33-5.el10
• bind-utils-32:9.18.33-5.el10
• binutils-2.41-58.el10
• binutils-gold-2.41-58.el10
• bootc-1.8.0-1.el10
• bootupd-0.2.28-2.el10
• brcmfmac-firmware-20250812-19.el10
• bsdtar-3.7.7-4.el10
• bubblewrap-0.10.0-3.el10
• bzip2-1.0.8-25.el10
• bzip2-libs-1.0.8-25.el10
• c-ares-1.25.0-6.el10
• ca-certificates-2025.2.80_v9.0.305-101.el10
• catatonit-5:0.2.1-1.el10
• centos-gpg-keys-10.0-12.el10
• centos-release-cloud-1-1.el10s
• centos-release-nfv-common-1-5.el10s
• centos-release-virt-common-1-1.el10s
• centos-stream-release-10.0-12.el10
• centos-stream-repos-10.0-12.el10
• checkpolicy-3.9-1.el10
• chrony-4.6.1-2.el10
• cifs-utils-7.2-1.el10
• cirrus-audio-firmware-20250812-19.el10
• clevis-21-8.el10
• clevis-dracut-21-8.el10
• clevis-luks-21-8.el10
• clevis-pin-tpm2-0.5.3-8.el10
• clevis-systemd-21-8.el10
• cloud-utils-growpart-0.33-11.el10
• composefs-1.0.8-1.el10
• composefs-libs-1.0.8-1.el10
• conmon-3:2.1.13-1.el10
• conmon-rs-0.6.6-2.el10s
• console-login-helper-messages-0.21.3-10.el10
• console-login-helper-messages-issuegen-0.21.3-10.el10
• console-login-helper-messages-profile-0.21.3-10.el10
• container-selinux-4:2.241.0-1.el10
• containers-common-5:0.64.0-4.el10
• containers-common-extra-5:0.64.0-4.el10
• coreos-installer-0.24.0-1.el10
• coreos-installer-bootinfra-0.24.0-1.el10
• coreutils-9.5-6.el10
• coreutils-common-9.5-6.el10
• cpio-2.15-3.el10
• cracklib-2.9.11-8.el10
• cracklib-dicts-2.9.11-8.el10
• cri-o-1.33.4-1.el10s
• cri-tools-1.33.0-2.el10s
• criu-4.1-1.el10
• criu-libs-4.1-1.el10
• crun-1.24-1.el10
• crypto-policies-20250905-2.gitc7eb7b2.el10
• crypto-policies-scripts-20250905-2.gitc7eb7b2.el10
• cryptsetup-2.8.1-1.el10
• cryptsetup-libs-2.8.1-1.el10
• curl-8.12.1-2.el10
• cyrus-sasl-gssapi-2.1.28-27.el10
• cyrus-sasl-lib-2.1.28-27.el10
• dbus-1:1.14.10-5.el10
• dbus-broker-36-4.el10
• dbus-common-1:1.14.10-5.el10
• dbus-libs-1:1.14.10-5.el10
• dbus-tools-1:1.14.10-5.el10
• device-mapper-10:1.02.206-3.el10
• device-mapper-event-10:1.02.206-3.el10
• device-mapper-event-libs-10:1.02.206-3.el10
• device-mapper-libs-10:1.02.206-3.el10
• device-mapper-multipath-0.9.9-12.el10
• device-mapper-multipath-libs-0.9.9-12.el10
• device-mapper-persistent-data-1.1.0-2.el10
• diffutils-3.10-8.el10
• dmidecode-1:3.6-3.el10
• dnf-4.20.0-18.el10
• dnf-data-4.20.0-18.el10
• dnsmasq-2.90-4.el10
• dosfstools-4.2-12.el10
• dracut-107-3.el10
• dracut-network-107-3.el10
• dracut-squash-107-3.el10
• duktape-2.7.0-10.el10
• e2fsprogs-1.47.1-4.el10
• e2fsprogs-libs-1.47.1-4.el10
• efi-filesystem-6-6.el10
• efibootmgr-18-8.el10
• efivar-libs-39-3.el10
• elfutils-debuginfod-client-0.193-1.el10
• elfutils-default-yama-scope-0.193-1.el10
• elfutils-libelf-0.193-1.el10
• elfutils-libs-0.193-1.el10
• erofs-utils-1.8.10-1.el10
• ethtool-2:6.15-2.el10
• expat-2.7.1-1.el10
• file-5.45-8.el10
• file-libs-5.45-8.el10
• filesystem-3.18-17.el10
• findutils-1:4.10.0-5.el10
• firewalld-filesystem-2.3.1-1.el10
• flashrom-1.3.0-8.el10
• flatpak-session-helper-1.16.0-6.el10
• fstrm-0.6.1-12.el10
• fuse-common-3.16.2-5.el10
• fuse-libs-2.9.9-25.el10
• fuse3-3.16.2-5.el10
• fuse3-libs-3.16.2-5.el10
• fwupd-1.9.31-1.el10
• fwupd-efi-1.6-3.el10
• fwupd-plugin-flashrom-1.9.31-1.el10
• gawk-5.3.0-6.el10
• gawk-all-langpacks-5.3.0-6.el10
• gdbm-1:1.23-14.el10
• gdbm-libs-1:1.23-14.el10
• geolite2-city-20191217-14.el10
• geolite2-country-20191217-14.el10
• gettext-envsubst-0.22.5-6.el10
• gettext-libs-0.22.5-6.el10
• gettext-runtime-0.22.5-6.el10
• git-core-2.47.3-1.el10
• glib2-2.80.4-8.el10
• glibc-2.39-69.el10
• glibc-common-2.39-69.el10
• glibc-gconv-extra-2.39-69.el10
• glibc-minimal-langpack-2.39-69.el10
• gmp-1:6.2.1-12.el10
• gnupg2-2.4.5-2.el10
• gnupg2-smime-2.4.5-2.el10
• gnutls-3.8.10-2.el10
• gobject-introspection-1.79.1-6.el10
• gpgme-1.23.2-6.el10
• grep-3.11-10.el10
• groff-base-1.23.0-10.el10
• grub2-common-1:2.12-29.el10
• grub2-efi-x64-1:2.12-29.el10
• grub2-pc-1:2.12-29.el10
• grub2-pc-modules-1:2.12-29.el10
• grub2-tools-1:2.12-29.el10
• grub2-tools-minimal-1:2.12-29.el10
• gssproxy-0.9.2-10.el10
• gzip-1.13-3.el10
• hostname-3.23-14.el10
• hwdata-0.379-10.6.el10
• ignition-2.24.0-1.el10
• ignition-grub-2.24.0-1.el10
• ima-evm-utils-1.6.2-3.el10
• info-7.1-6.el10
• inih-58-3.el10
• initscripts-service-10.26-2.el10
• intel-audio-firmware-20250812-19.el10
• intel-gpu-firmware-20250812-19.el10
• ipcalc-1.0.3-12.el10
• iproute-6.14.0-2.el10
• iproute-tc-6.14.0-2.el10
• iptables-libs-1.8.11-11.el10
• iptables-nft-1.8.11-11.el10
• iputils-20240905-5.el10
• irqbalance-2:1.9.4-6.el10
• iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
• isns-utils-libs-0.103-1.el10
• jansson-2.14-3.el10
• jose-14-102.el10
• jq-1.7.1-11.el10
• json-c-0.18-3.el10
• json-glib-1.8.0-5.el10
• kbd-2.6.4-7.el10
• kbd-legacy-2.6.4-7.el10
• kbd-misc-2.6.4-7.el10
• kdump-utils-1.0.58-1.el10
• kernel-6.12.0-142.el10
• kernel-core-6.12.0-142.el10
• kernel-modules-6.12.0-142.el10
• kernel-modules-core-6.12.0-142.el10
• kernel-modules-extra-6.12.0-142.el10
• kernel-modules-extra-matched-6.12.0-142.el10
• kexec-tools-2.0.31-1.el10
• keyutils-1.6.3-5.el10
• keyutils-libs-1.6.3-5.el10
• kmod-31-12.el10
• kmod-libs-31-12.el10
• kpartx-0.9.9-12.el10
• krb5-libs-1.21.3-8.el10
• less-661-3.el10
• libacl-2.3.2-4.el10
• libaio-0.3.111-22.el10
• libarchive-3.7.7-4.el10
• libassuan-2.5.6-6.el10
• libattr-2.5.2-5.el10
• libbasicobjects-0.1.1-58.el10
• libblkid-2.40.2-13.el10
• libbpf-2:1.6.0-3.el10
• libcap-2.69-7.el10
• libcap-ng-0.8.4-6.el10
• libcbor-0.11.0-3.el10
• libcollection-0.7.0-58.el10
• libcom_err-1.47.1-4.el10
• libcomps-0.1.21-3.el10
• libcurl-minimal-8.12.1-2.el10
• libdhash-0.5.0-58.el10
• libdnf-0.73.1-12.el10
• libdnf-plugin-subscription-manager-1.30.10-1.el10
• libdrm-2.4.123-1.el10
• libeconf-0.6.2-4.el10
• libedit-3.1-52.20230828cvs.el10
• libev-4.33-14.el10
• libevent-2.1.12-16.el10
• libfdisk-2.40.2-13.el10
• libffi-3.4.4-10.el10
• libfido2-1.14.0-7.el10
• libgcc-14.3.1-2.2.el10
• libgcrypt-1.11.0-6.el10
• libgomp-14.3.1-2.2.el10
• libgpg-error-1.50-2.el10
• libgudev-238-7.el10
• libgusb-0.4.9-4.el10
• libibverbs-57.0-2.el10
• libicu-74.2-5.el10
• libidn2-2.3.7-3.el10
• libini_config-1.3.1-58.el10
• libipa_hbac-2.11.1-3.el10
• libjcat-0.2.2-2.el10
• libjose-14-102.el10
• libkcapi-1.5.0-3.el10
• libkcapi-hasher-1.5.0-3.el10
• libkcapi-hmaccalc-1.5.0-3.el10
• libksba-1.6.7-2.el10
• libldb-4.23.0-101.el10
• libluksmeta-9-26.el10
• libmaxminddb-1.9.1-4.el10
• libmicrohttpd-1:1.0.0-3.el10
• libmnl-1.0.5-7.el10
• libmodulemd-2.15.0-12.el10
• libmount-2.40.2-13.el10
• libmspack-0.10.1-0.14.alpha.el10
• libndp-1.9-2.el10
• libnet-1.3-7.el10
• libnetfilter_conntrack-1.0.9-12.el10
• libnfnetlink-1.0.2-3.el10
• libnfsidmap-1:2.8.3-2.el10
• libnftnl-1.2.8-3.el10
• libnghttp2-1.64.0-2.el10
• libnl3-3.11.0-1.el10
• libnvme-1.15-3.el10
• libpath_utils-0.2.1-58.el10
• libpcap-14:1.10.4-7.el10
• libpciaccess-0.16-16.el10
• libpkgconf-2.1.0-3.el10
• libpwquality-1.4.5-12.el10
• libref_array-0.1.5-58.el10
• librepo-1.18.0-5.el10
• libseccomp-2.5.6-1.el10
• libsecret-0.21.2-8.el10
• libselinux-3.9-1.el10
• libselinux-utils-3.9-1.el10
• libsemanage-3.9-1.el10
• libsepol-3.9-1.el10
• libsmartcols-2.40.2-13.el10
• libsmbclient-4.23.0-101.el10
• libsolv-0.7.29-8.el10
• libss-1.47.1-4.el10
• libsss_certmap-2.11.1-3.el10
• libsss_idmap-2.11.1-3.el10
• libsss_nss_idmap-2.11.1-3.el10
• libsss_sudo-2.11.1-3.el10
• libstdc++-14.3.1-2.2.el10
• libtalloc-2.4.3-100.el10
• libtasn1-4.20.0-1.el10
• libtdb-1.4.14-100.el10
• libtevent-0.17.1-100.el10
• libtirpc-1.3.5-1.el10
• libtool-ltdl-2.4.7-13.el10
• libunistring-1.1-10.el10
• liburing-2.12-1.el10
• libusb1-1.0.28-1.el10
• libutempter-1.2.1-15.el10
• libuuid-2.40.2-13.el10
• libuv-1:1.51.0-1.el10
• libverto-0.3.2-10.el10
• libverto-libev-0.3.2-10.el10
• libwbclient-4.23.0-101.el10
• libxcrypt-4.4.36-10.el10
• libxkbcommon-1.7.0-4.el10
• libxml2-2.12.5-9.el10
• libxmlb-0.3.23-1.el10
• libxslt-1.1.39-8.el10
• libyaml-0.2.5-16.el10
• libzstd-1.5.5-9.el10
• linux-firmware-20250812-19.el10
• linux-firmware-whence-20250812-19.el10
• lmdb-libs-0.9.32-4.el10
• logrotate-3.22.0-4.el10
• lsof-4.98.0-7.el10
• lua-libs-5.4.6-7.el10
• luksmeta-9-26.el10
• lvm2-10:2.03.32-3.el10
• lvm2-libs-10:2.03.32-3.el10
• lz4-libs-1.9.4-8.el10
• lzo-2.10-14.el10
• makedumpfile-1.7.7-2.el10
• mdadm-4.4-2.el10
• memstrack-0.2.5-6.el10
• microcode_ctl-4:20250812-1.el10
• mokutil-2:0.7.2-1.el10
• mpdecimal-2.5.1-12.el10
• mpfr-4.2.1-5.el10
• mt7xxx-firmware-20250812-19.el10
• nano-8.1-3.el10
• ncurses-6.4-14.20240127.el10
• ncurses-base-6.4-14.20240127.el10
• ncurses-libs-6.4-14.20240127.el10
• net-tools-2.0-0.73.20160912git.el10
• netavark-2:1.16.0-1.el10
• nettle-3.10.1-1.el10
• newt-0.52.24-5.el10
• nfs-utils-1:2.8.3-2.el10
• nftables-1:1.1.1-5.el10
• nmap-ncat-4:7.92-3.el10
• nmstate-2.2.54-1.el10
• npth-1.6-21.el10
• nss-altfiles-2.23.0-5.el10
• numactl-libs-2.0.19-2.el10
• nvidia-gpu-firmware-20250812-19.el10
• nvme-cli-2.15-2.el10
• nxpwireless-firmware-20250812-19.el10
• oniguruma-6.9.9-7.el10
• open-vm-tools-13.0.0-2.el10
• openldap-2.6.9-1.el10
• openshift-clients-4.20.0-202510212154.p2.g7f1d6f8.assembly.stream.el9
• openshift-kubelet-4.20.0-202509232257.p2.ge0d4216.assembly.stream.el9
• openssh-9.9p1-14.el10
• openssh-clients-9.9p1-14.el10
• openssh-server-9.9p1-14.el10
• openssl-1:3.5.1-5.el10
• openssl-fips-provider-1:3.5.1-5.el10
• openssl-libs-1:3.5.1-5.el10
• openvswitch-selinux-extra-policy-1.0-36.el10s
• openvswitch3.5-3.5.0-6.el10s
• os-prober-1.81-9.el10
• ose-aws-ecr-image-credential-provider-4.20.0-202509051528.p2.gbb88da1.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.20.0-202509051528.p2.gd469d04.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.20.0-202509051528.p2.gf940e72.assembly.stream.el9
• ostree-2025.6-1.el10
• ostree-grub2-2025.6-1.el10
• ostree-libs-2025.6-1.el10
• p11-kit-0.25.10-1.el10
• p11-kit-server-0.25.10-1.el10
• p11-kit-trust-0.25.10-1.el10
• pam-1.6.1-8.el10
• pam-libs-1.6.1-8.el10
• passt-0^20250512.g8ec1341-2.el10
• passt-selinux-0^20250512.g8ec1341-2.el10
• pciutils-3.13.0-6.el10
• pciutils-libs-3.13.0-6.el10
• pcre2-10.44-1.el10.3
• pcre2-syntax-10.44-1.el10.3
• pcsc-lite-2.2.3-2.el10
• pcsc-lite-ccid-1.6.0-2.el10
• pcsc-lite-libs-2.2.3-2.el10
• perl-AutoLoader-5.74-514.el10
• perl-B-1.89-514.el10
• perl-Carp-1.54-511.el10
• perl-Class-Struct-0.68-514.el10
• perl-Data-Dumper-2.189-512.el10
• perl-Digest-1.20-511.el10
• perl-Digest-MD5-2.59-6.el10
• perl-DynaLoader-1.56-514.el10
• perl-Encode-4:3.21-511.el10
• perl-Errno-1.38-514.el10
• perl-Exporter-5.78-511.el10
• perl-Fcntl-1.18-514.el10
• perl-File-Basename-2.86-514.el10
• perl-File-Path-2.18-511.el10
• perl-File-Temp-1:0.231.100-512.el10
• perl-File-stat-1.14-514.el10
• perl-FileHandle-2.05-514.el10
• perl-Getopt-Long-1:2.58-3.el10
• perl-Getopt-Std-1.14-514.el10
• perl-HTTP-Tiny-0.088-512.el10
• perl-IO-1.55-514.el10
• perl-IO-Socket-IP-0.42-512.el10
• perl-IO-Socket-SSL-2.085-3.el10
• perl-IPC-Open3-1.22-514.el10
• perl-MIME-Base64-3.16-511.el10
• perl-Mozilla-CA-20231213-5.el10
• perl-NDBM_File-1.17-514.el10
• perl-Net-SSLeay-1.94-8.el10
• perl-POSIX-2.20-514.el10
• perl-PathTools-3.91-512.el10
• perl-Pod-Escapes-1:1.07-511.el10
• perl-Pod-Perldoc-3.28.01-512.el10
• perl-Pod-Simple-1:3.45-511.el10
• perl-Pod-Usage-4:2.03-511.el10
• perl-Scalar-List-Utils-5:1.63-511.el10
• perl-SelectSaver-1.02-514.el10
• perl-Socket-4:2.038-511.el10
• perl-Storable-1:3.32-511.el10
• perl-Symbol-1.09-514.el10
• perl-Term-ANSIColor-5.01-512.el10
• perl-Term-Cap-1.18-511.el10
• perl-Text-ParseWords-3.31-511.el10
• perl-Text-Tabs+Wrap-2024.001-511.el10
• perl-Time-Local-2:1.350-511.el10
• perl-URI-5.27-3.el10
• perl-base-2.27-514.el10
• perl-constant-1.33-512.el10
• perl-if-0.61.000-514.el10
• perl-interpreter-4:5.40.2-514.el10
• perl-libnet-3.15-512.el10
• perl-libs-4:5.40.2-514.el10
• perl-locale-1.12-514.el10
• perl-mro-1.29-514.el10
• perl-overload-1.37-514.el10
• perl-overloading-0.02-514.el10
• perl-parent-1:0.241-512.el10
• perl-podlators-1:5.01-511.el10
• perl-vars-1.05-514.el10
• pigz-2.8-7.el10
• pinentry-1.3.1-1.el10
• pkgconf-2.1.0-3.el10
• pkgconf-m4-2.1.0-3.el10
• pkgconf-pkg-config-2.1.0-3.el10
• podman-7:5.6.0-2.el10
• policycoreutils-3.9-2.el10
• policycoreutils-python-utils-3.9-2.el10
• polkit-125-4.el10
• polkit-libs-125-4.el10
• polkit-pkla-compat-0.1-30.el10
• popt-1.19-8.el10
• procps-ng-4.0.4-8.el10
• protobuf-c-1.5.0-6.el10
• psmisc-23.6-8.el10
• python-unversioned-command-3.12.11-3.el10
• python3-3.12.11-3.el10
• python3-audit-4.0.3-4.el10
• python3-charset-normalizer-3.4.2-1.el10
• python3-cloud-what-1.30.10-1.el10
• python3-dateutil-1:2.9.0.post0-1.el10
• python3-dbus-1.3.2-8.el10
• python3-decorator-5.1.1-12.el10
• python3-distro-1.9.0-5.el10
• python3-dnf-4.20.0-18.el10
• python3-dnf-plugin-versionlock-4.7.0-9.el10
• python3-dnf-plugins-core-4.7.0-9.el10
• python3-gobject-base-3.46.0-7.el10
• python3-gobject-base-noarch-3.46.0-7.el10
• python3-hawkey-0.73.1-12.el10
• python3-idna-3.7-4.el10
• python3-iniparse-0.5-10.el10
• python3-inotify-0.9.6-36.el10
• python3-libcomps-0.1.21-3.el10
• python3-libdnf-0.73.1-12.el10
• python3-librepo-1.18.0-5.el10
• python3-libs-3.12.11-3.el10
• python3-libselinux-3.9-1.el10
• python3-libsemanage-3.9-1.el10
• python3-pip-wheel-23.3.2-7.el10
• python3-policycoreutils-3.9-2.el10
• python3-requests-2.32.4-1.el10
• python3-rpm-4.19.1.1-20.el10
• python3-setools-4.5.1-5.el10
• python3-setuptools-69.0.3-12.el10
• python3-six-1.16.0-16.el10
• python3-subscription-manager-rhsm-1.30.10-1.el10
• python3-systemd-235-11.el10
• python3-urllib3-1.26.19-2.el10
• qemu-guest-agent-18:10.0.0-12.el10
• quota-1:4.09-9.el10
• quota-nls-1:4.09-9.el10
• rdma-core-57.0-2.el10
• readline-8.2-11.el10
• realtek-firmware-20250812-19.el10
• rpcbind-1.2.7-3.el10
• rpm-4.19.1.1-20.el10
• rpm-build-libs-4.19.1.1-20.el10
• rpm-libs-4.19.1.1-20.el10
• rpm-ostree-2025.11-1.el10
• rpm-ostree-libs-2025.11-1.el10
• rpm-plugin-audit-4.19.1.1-20.el10
• rpm-plugin-selinux-4.19.1.1-20.el10
• rpm-plugin-systemd-inhibit-4.19.1.1-20.el10
• rpm-sequoia-1.9.0.3-1.el10
• rpm-sign-libs-4.19.1.1-20.el10
• rsync-3.4.1-3.el10
• samba-client-libs-4.23.0-101.el10
• samba-common-4.23.0-101.el10
• samba-common-libs-4.23.0-101.el10
• sed-4.9-3.el10
• selinux-policy-42.1.7-1.el10
• selinux-policy-targeted-42.1.7-1.el10
• setup-2.14.5-7.el10
• sg3_utils-1.48-7.el10
• sg3_utils-libs-1.48-7.el10
• shadow-utils-2:4.15.0-8.el10
• shadow-utils-subid-2:4.15.0-8.el10
• shared-mime-info-2.3-8.el10
• shim-x64-15.8-5.el10
• skopeo-2:1.20.0-1.el10
• slang-2.3.3-8.el10
• snappy-1.1.10-7.el10
• socat-1.7.4.4-8.el10
• sqlite-libs-3.46.1-5.el10
• ssh-key-dir-0.1.4-9.el10
• sssd-2.11.1-3.el10
• sssd-ad-2.11.1-3.el10
• sssd-client-2.11.1-3.el10
• sssd-common-2.11.1-3.el10
• sssd-common-pac-2.11.1-3.el10
• sssd-ipa-2.11.1-3.el10
• sssd-krb5-2.11.1-3.el10
• sssd-krb5-common-2.11.1-3.el10
• sssd-ldap-2.11.1-3.el10
• sssd-nfs-idmap-2.11.1-3.el10
• sssd-proxy-2.11.1-3.el10
• stalld-1.20.4-1.el10
• strace-6.12-1.el10
• subscription-manager-1.30.10-1.el10
• subscription-manager-rhsm-certificates-20220623-6.el10
• sudo-1.9.15-9.p5.el10
• sudo-python-plugin-1.9.15-9.p5.el10
• systemd-257-16.el10
• systemd-journal-remote-257-16.el10
• systemd-libs-257-16.el10
• systemd-pam-257-16.el10
• systemd-udev-257-16.el10
• tar-2:1.35-7.el10
• tiwilink-firmware-20250812-19.el10
• tmux-3.3a-13.20230918gitb202a2f.el10
• toolbox-0.2-2.el10
• tpm2-tools-5.7-4.el10
• tpm2-tss-4.1.3-5.el10
• tpm2-tss-fapi-4.1.3-5.el10
• tzdata-2025b-2.el10
• unbound-anchor-1.20.0-13.el10
• unbound-libs-1.20.0-13.el10
• userspace-rcu-0.14.0-7.el10
• util-linux-2.40.2-13.el10
• util-linux-core-2.40.2-13.el10
• vim-data-2:9.1.083-5.el10
• vim-minimal-2:9.1.083-5.el10
• virt-what-1.27-3.el10
• which-2.21-44.el10
• xfsprogs-6.11.0-2.el10
• xkeyboard-config-2.41-3.el10
• xmlsec1-1:1.2.39-3.el10
• xmlsec1-openssl-1:1.2.39-3.el10
• xz-1:5.6.2-4.el10
• xz-libs-1:5.6.2-4.el10
• zlib-ng-compat-2.2.3-2.el10
• zram-generator-1.1.2-14.el10
• zstd-1.5.5-9.el10

Changed:

• afterburn 5.9.0-1.el10 → 5.10.0-1.el10
• afterburn-dracut 5.9.0-1.el10 → 5.10.0-1.el10
• ca-certificates 2024.2.69_v8.0.303-102.3.el10 → 2025.2.80_v9.0.305-101.el10
• centos-gpg-keys 10.0-11.el10 → 10.0-12.el10
• centos-stream-release 10.0-11.el10 → 10.0-12.el10
• centos-stream-repos 10.0-11.el10 → 10.0-12.el10
• criu 3.19-9.el10 → 4.1-1.el10
• criu-libs 3.19-9.el10 → 4.1-1.el10
• ignition 2.23.0-1.el10 → 2.24.0-1.el10
• ignition-grub 2.23.0-1.el10 → 2.24.0-1.el10
• iputils 20240905-4.el10 → 20240905-5.el10
• irqbalance 2:1.9.4-5.el10 → 2:1.9.4-6.el10
• kdump-utils 1.0.54-7.el10 → 1.0.58-1.el10
• kernel 6.12.0-136.el10 → 6.12.0-142.el10
• kernel-core 6.12.0-136.el10 → 6.12.0-142.el10
• kernel-modules 6.12.0-136.el10 → 6.12.0-142.el10
• kernel-modules-core 6.12.0-136.el10 → 6.12.0-142.el10
• kernel-modules-extra 6.12.0-136.el10 → 6.12.0-142.el10
• kernel-modules-extra-matched 6.12.0-136.el10 → 6.12.0-142.el10
• libgcc 14.3.1-2.1.el10 → 14.3.1-2.2.el10
• libgomp 14.3.1-2.1.el10 → 14.3.1-2.2.el10
• libnvme 1.13-1.el10 → 1.15-3.el10
• libstdc++ 14.3.1-2.1.el10 → 14.3.1-2.2.el10
• nmstate 2.2.52-1.el10 → 2.2.54-1.el10
• nvme-cli 2.13-2.el10 → 2.15-2.el10
• open-vm-tools 13.0.0-1.el10 → 13.0.0-2.el10
• openshift-clients 4.20.0-202509051528.p2.ga434281.assembly.stream.el9 → 4.20.0-202510212154.p2.g7f1d6f8.assembly.stream.el9
• policycoreutils 3.9-1.el10 → 3.9-2.el10
• policycoreutils-python-utils 3.9-1.el10 → 3.9-2.el10
• python3-policycoreutils 3.9-1.el10 → 3.9-2.el10
• rsync 3.4.1-2.el10 → 3.4.1-3.el10
• systemd 257-13.el10 → 257-16.el10
• systemd-journal-remote 257-13.el10 → 257-16.el10
• systemd-libs 257-13.el10 → 257-16.el10
• systemd-pam 257-13.el10 → 257-16.el10
• systemd-udev 257-13.el10 → 257-16.el10

Extensions

Full list (48 packages)

• NetworkManager-libreswan-1.2.27-3.el10.x86_64
• bison-3.8.2-9.el10.x86_64
• cmake-filesystem-3.31.8-1.el10.x86_64
• cpp-14.3.1-2.2.el10.x86_64
• elfutils-libelf-devel-0.193-1.el10.x86_64
• flex-2.6.4-19.el10.x86_64
• gcc-14.3.1-2.2.el10.x86_64
• glibc-devel-2.39-69.el10.x86_64
• kernel-6.12.0-142.el10.x86_64
• kernel-core-6.12.0-142.el10.x86_64
• kernel-devel-6.12.0-142.el10.x86_64
• kernel-headers-6.12.0-142.el10.x86_64
• kernel-modules-6.12.0-142.el10.x86_64
• kernel-modules-extra-6.12.0-142.el10.x86_64
• kernel-rt-core-6.12.0-142.el10.x86_64
• kernel-rt-devel-6.12.0-142.el10.x86_64
• kernel-rt-modules-6.12.0-142.el10.x86_64
• kernel-rt-modules-core-6.12.0-142.el10.x86_64
• kernel-rt-modules-extra-6.12.0-142.el10.x86_64
• krb5-pkinit-1.21.3-8.el10.x86_64
• krb5-workstation-1.21.3-8.el10.x86_64
• ldns-1.8.3-18.el10.x86_64
• libkadm5-1.21.3-8.el10.x86_64
• libmpc-1.3.1-7.el10.x86_64
• libqb-2.0.8-6.el10.x86_64
• libreswan-5.3-1.el10.x86_64
• libxcrypt-devel-4.4.36-10.el10.x86_64
• libzstd-devel-1.5.5-9.el10.x86_64
• lm_sensors-libs-3.6.0-20.el10.x86_64
• m4-1.4.19-11.el10.x86_64
• make-1:4.4.1-9.el10.x86_64
• nspr-4.36.0-4.el10.x86_64
• nss-3.112.0-4.el10.x86_64
• nss-softokn-3.112.0-4.el10.x86_64
• nss-softokn-freebl-3.112.0-4.el10.x86_64
• nss-sysinit-3.112.0-4.el10.x86_64
• nss-tools-3.112.0-4.el10.x86_64
• nss-util-3.112.0-4.el10.x86_64
• openssl-devel-1:3.5.1-5.el10.x86_64
• openvswitch3.5-ipsec-3.5.0-6.el10s.x86_64
• pcp-conf-6.3.7-5.el10.x86_64
• pcp-libs-6.3.7-5.el10.x86_64
• protobuf-3.19.6-11.el10.x86_64
• python3-openvswitch3.5-3.5.0-6.el10s.x86_64
• sysstat-12.7.6-2.el10.x86_64
• usbguard-1.1.3-6.el10.x86_64
• usbguard-selinux-1.1.3-6.el10.noarch
• zlib-ng-compat-devel-2.2.3-2.el10.x86_64

CentOS Stream CoreOS base layer: 10.0.20251023-0