Back to index

Download installer and client with:

oc adm release extract --tools quay.io/okd/scos-release:4.20.0-okd-scos.ec.10

Team Approvals:

Tests:

• Blocking jobs
  • upgrade Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next
  • upgrade-minor Succeeded release-openshift-okd-scos-installer-e2e-aws-upgrade-from-scos-next

Upgrades from:

• 4.20.0-okd-scos.ec.9 - Success
• 4.19.0-okd-scos.9 (changes) - Success

Upgrades to:

• 4.20.0-okd-scos.ec.11 (changes) - F F F

---

Loading changelog, this may take a while ...

Changes from 4.20.0-okd-scos.ec.9

Created: 2025-08-10 03:10:23 +0000 UTC

Image Digest: sha256:bff54d60e8533155ff2257889dc0ea8352bead54a289047126b1f45d2eed98ac

Release 4.20.0-okd-scos.ec.10 was created from registry.ci.openshift.org/origin/release-scos:4.20.0-0.okd-scos-2025-08-06-090541

Components

• Kubectl 1.33.3
• Kubernetes upgraded from 1.33.2 to 1.33.3
• Kubernetes Tests 1.33.2
• CentOS Stream CoreOS 10.0.20250715-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
HardwareSpeed (3 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiDisk (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
DualReplica (4 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
AWSClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPClusterHostedDNSInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
GCPCustomAPIEndpointsInstall (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ImageVolume (7 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
IrreconcilableMachineConfig (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
NoRegistryClusterOperations (0 tests)				Enabled (New)

Rebuilt images without code change

• multus-whereabouts-ipam-cni git 43c89591 sha256:b3c3b9e57b0d86f3900e41aaa2bf2ecf6f5b978f29308040bf4584aaf68e6657

agent-installer-api-server

• MGMT-21063: Use mac address to configure dhcp on kargs (#7888) #7888
• Set AIUI_CHAT_API_URL for podman deployment (#7911) #7911
• MGMT-14822: Add MetalLB operator (#7824) #7824
• NO-ISSUE: [master] Bump OCP versions: 4.20, 4.14 (#7917) #7917
• ACM-22740: Approve CSRs for a host before marking as Done (#7903) #7903
• NO-ISSUE: [master] Bump OCP versions: 4.16, 4.18 (#7904) #7904
• MGMT-20474: New route to provide a detailed list of features (#7862) #7862
• NO-ISSUE: [master] Bump OCP versions: 4.19 (#7902) #7902
• NO-ISSUE: Remove unused variables from cluster monitor loop (#7887) #7887
• MGMT-21266: Report duration of monitored clusters (#7886) #7886
• MGMT-21312: Index hosts by cluster id (#7891) #7891
• MGMT-21287: Remove NHO dependency in SNR (#7889) #7889
• NO-ISSUE: [master] Bump OCP versions: 4.15, 4.17 (#7881) #7881
• MGMT-20726: Allow prefix for PVC and secret naming (#7746) #7746
• MGMT-21252: Make l3_connected_addresses output deterministic (#7879) #7879
• MGMT-20973: Cluster events - filtering deleted hosts ends with an error (#7854) #7854
• MGMT-21253: RefreshSchedulableMastersForcedTrue lead to extra reads from DB (#7880) #7880
• NO-ISSUE: [master] Bump OCP versions: 4.19 (#7875) #7875
• NO-ISSUE: Add NHO and FAR back to the virtualization bundle (#7869) #7869
• Full changelog

agent-installer-node-agent

• MGMT-20141: collecting and uploading ironic-agent logs (#1028) #1028
• Full changelog

agent-installer-utils

• OCPBUGS-60019: Add ISOBuilder Release notes #135
• AGENT-1270: use agent-preinstall-image-builder image for building the ISO #134
• NO-ISSUE: Move mtv-operator back to v2.8 for 4.20 #133
• OCPBUGS-59724: add back NHR and FAR operators #130
• Full changelog

aws-cloud-controller-manager

• OCPCLOUD-2928: Merge https://github.com/kubernetes/cloud-provider-aws:master (b0e098d) into main #106
• Full changelog

aws-cluster-api-controllers

• NO-JIRA: Update OWNERS #561
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

• STOR-2330: Add labels to subscribe openstack cinder and manila CSI driver controllers to NPs #409
• OCPBUGS-57395: Remove stale conditions #406
• Full changelog

aws-machine-controllers

• OCPCLOUD-2935: Bump k8s dependencies to 1.33; go 1.24 #136
• NO-JIRA: Update OWNERS #135
• Full changelog

azure-cluster-api-controllers

• NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.20.2 (2a4b30d) into master #345
• NO-JIRA: Update OWNERS #344
• Full changelog

azure-machine-controllers

• OCPCLOUD-2932: Bump 1.33 #160
• NO-JIRA: Update OWNERS #161
• Full changelog

azure-service-operator

• NO-JIRA: Update OWNERS #10
• Full changelog

baremetal-installer, installer, installer-artifacts

• CORS-4083, CORS-4084, CORS-4085: Add Azure custom-dns support in Tech Preview #9861
• OCPBUGS-59542: Generated Nutanix MachineSets for Autoscaling with Failure Domains #9864
• no-jira: OWNERS: add splat team as approvers #9862
• CORS-3992: skip dns zone validation with custom DNS #9859
• no-jira: Bump openshift/api to get renamed Featuregates #9854
• OCPEDGE-1994: bump(ocp/api): pull in updated DualReplica #9849
• SPLAT-2295: Setup additional disks via machine configs #9706
• OCPBUGS-59630: Update RHCOS 4.20 bootimage metadata to 9.6.20250701-0 #9844
• no-jira: images: bump images to go 1.24 #9850
• CORS-3916, CORS-3920: Use gcp custom endpoints in the installer #9535
• OCPBUGS-59430: Fail install config validation when base domain is invalid #9840
• OCPBUGS-59678: PowerVS Support VPC and TG ids #9818
• OCPBUGS-57732: Catch gcp destroy cases where the operation is nil #9823
• Full changelog

baremetal-operator

• METAL-1380: Sync july 24 #427
• METAL-1238: Add annotation to install metal3 CRDs in hypershift hosted clusters #426
• Full changelog

cli, cli-artifacts, deployer, tools

• OTA-1600: pkg/cli/admin/upgrade/recommend: Don’t error on unaccepted issues when the feature gate is off #2069
• Full changelog

cloud-credential-operator

• OCPBUGS-59889: Add retry logic for Azure federated identity credential creation #878
• CCO-641: update dependencies #887
• NO-JIRA: Drop lleshchi from OWNERS #889
• OCPBUGS-43783: openstack: Set annotation even when credentials mode is unset #873
• OCPBUGS-59402: github.com/golang/glog v1.2.5 #888
• Full changelog

cloud-network-config-controller

• CORENET-5958: Rebase k8s to 1.33 #176
• NO-JIRA: Update OWNERS #177
• Full changelog

cluster-authentication-operator

• AUTH-543, OCPBUGS-57808: (deps): Bump to Go 1.24 and k8s 1.33 #775
• Full changelog

cluster-autoscaler-operator

• AUTOSCALE-125: newPodScaleUpDelay field for CA #349
• Full changelog

cluster-baremetal-operator

• METAL-1508: Change deprecated pointer to ptr #495
• OCPBUGS-53392: Remove webhookport (9447) as HostPort #496
• METAL-1238: Enable CBO to run on hosted clusters #494
• Full changelog

cluster-capi-controllers

• NO-JIRA: Update OWNERS #244
• Full changelog

cluster-capi-operator

• OCPCLOUD-2916: Bump to CAPI v1.10, k8s v1.33, go 1.24 #341
• NO-JIRA: Get openshift/api directory from packages #339
• OCPCLOUD-2979: ingress network policy for metrics #325
• OCPCLOUD-2992: migration e2e for creating machinesets #330
• NO-JIRA: Update OWNERS #335
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-53300: Adds service for cloud-controller-manager #399
• OCPCLOUD-2940: Update dependencies for Kubernetes 1.33 #396
• OCPBUGS-53300: Update service selector to match deployment label #398
• NO-JIRA: Update OWNERS #397
• Full changelog

cluster-config-api

• OCPNODE-3006: add back SigstoreImageVerification to techPreview #2406
• MCO-1759: Add NonReconcilableMC Feature Gate #2429
• Update crd-schema.json to release 1.33 branch #2436
• Update KAL to include omitzero functionality on optional fields #2431
• OCPNODE-3372: Update defaultRuntime doc to show options and set default to crun #2370
• CORS-4155: Add Feature gate and update Infrastructure CR for Azure Cluster Hosted DNS #2404
• SPLAT-2346: Moving VSphereMultiDisk FeatureGate to GA #2428
• features: add installer replacement feature gates #2423
• Remove “techpreview” filter on verify job #2422
• Update KAL to latest #2420
• OCPNODE-3006: Add clusterimgepolicy/imagepolicy to payload #2384
• AGENT-1262: add NoRegistryClusterOperations feature gate #2417
• OCPBUGS-55661: Remove HardwareSpeed featuregate #2416
• OCPNODE-3121: Make FeatureGateImageVolume TechPreview #2403
• OCPEDGE-1875: feat: promote tnf from devpreview to techpreview #2413
• Full changelog

cluster-config-operator

• OCPEDGE-1876: bump(o/api,k8s/api,go-version) #445
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-59919: Prevent activation of CPMS with deletionTimestamp #364
• OCPBUGS-59919: Fix authoritativeAPI recreate loop #365
• OCPCLOUD-2937: Bump k8s dependencies to 1.33; go 1.24 #360
• NO-JIRA: Update OWNERS #361
• Full changelog

cluster-csi-snapshot-controller-operator

• STOR-2465: Add ExternalSnapshotMetadata CRD #239
• STOR-2394: Bump all deps for 4.20 #240
• Full changelog

cluster-etcd-operator

• NO-JIRA: create dedicated cluster-wide informer #1457
• ETCD-590: start to refactor the probe injection #1456
• OCPBUGS-57859: Updating cluster-etcd-operator-container image to be consistent with ART for 4.20 #1452
• NO-JIRA: Migrate bindata to go:embed #1445
• OCPBUGS-44570: add missing informer syncs #1449
• NO-JIRA: Update owners file #1451
• Full changelog

cluster-ingress-operator

• OCPBUGS-59894: Update GatewayAPI test to check if deployment has 1 or more pod #1250
• NE-2108: docs - correct Istio version format in ossm-overrides.md #1253
• NE-2108: Add OSSM channel and version override annotations #1246
• NE-2104: desiredIstio: Enable GIE if InferencePool found #1245
• OCPBUGS-59839: desiredIstio: Delete trustBundleName #1243
• NE-2022: Bump to OSSM 3.0.1 and Istio 1.24.4 #1227
• Full changelog

cluster-kube-apiserver-operator

• OCPBUGS-59527: certrotationcontroller: extend node-system-admin-signer lifetime #1872
• OCPBUGS-59626: operator: don’t react to events all namespaces #1874
• OCPNODE-2559: SCC: add nested-podman and restricted-v3 #1847
• NO-JIRA: Add negative tests of GOAWAY-chance #1882
• OCPBUGS-44842: Set not-before/not-after annotations #1873
• OCPBUGS-50489: Add missing service ports to apiserver service #1875
• Full changelog

cluster-kube-controller-manager-operator

• NO-JIRA: targetconfigcontroller: set description for csr-controller-ca #851
• OCPBUGS-53290: Missing endpoint slices for open ports the operator uses #848
• RFE-4154: Fix readonly filesystem error when kcm trying to mkdir on /etc/kubern… #847
• Full changelog

cluster-machine-approver

• NO-JIRA: Fix some lints and nits #273
• OCPCLOUD-2939: Bump k8s 1.33 #272
• NO-JIRA: Update OWNERS #274
• Full changelog

cluster-monitoring-operator

• MON-4299: chore(thanos): replace CLI args that will disappear in future versions #2626
• OCPBUGS-58475: Enforce secure TLS settings in CMO #2618
• OCPBUGS-57215: operator: increase wait time till degraded to max 4 times 5m #2624
• Full changelog

cluster-network-operator

• NO-JIRA: Update CNO reviewers/approvers #2756
• CORENET-6228: Allow network-node-identity to be enabled for IBMCloud PlatformType #2755
• NO-JIRA: remove PersistentIPsForVirt FG #2759
• CORENET-6127: ovn-k: Enable OVN-K feature when PreconfiguredUDNAddresses is enabled #2734
• OCPBUGS-59134, OCPBUGS-59135: Annotate whereabouts-controller #2749
• NO-JIRA: deprecate exportloopref #2750
• Full changelog

cluster-node-tuning-operator

• CNF-16638: Disable RPS by default (#1370) #1370
• Sync the upstream and downstream Containerfiles (#1368) #1368
• machineconfig: log kernelType (#1366) #1366
• feat: add arbiter role to default pinning gen (#1364) #1364
• Full changelog

cluster-olm-operator

• OPRUN-4034: Handle CustomNoUpgrade better #134
• OCPBUGS-58992: Bump helm to v3.18.4 #132
• OPRUN-4026: Add support for all NoUpgrades #131
• Full changelog

cluster-openshift-apiserver-operator

• : NO-JIRA: Bump to Go 1.24 and k8s 1.33 #620
• Full changelog

cluster-policy-controller

• CNTRLPLANE-1054: rebase k8s (1.33.2), openshift (4.20) and other underlying dependencies #164
• Full changelog

cluster-storage-operator

• STOR-2330: Add labels to subscribe ibm-vpc-block CSI driver operator to NPs #599
• OCPBUGS-60064: hypershift: add app label to csdriveroperators running in HCP #603
• STOR-2330: Add labels to subscribe openstack cinder and manila CSI driver operators to NPs #601
• STOR-2330: Add RBAC rule to let ibm-vpc-block-csi-driver-operator manage NetworkPolicy #602
• STOR-2394: Bump all deps for 4.20 #598
• Full changelog

cluster-version-operator

• OCPBUGS-57585: CVO protects /metrics with authorization #1215
• OTA-1480: Add readonlyRootFilesystem #1208
• NO-JIRA: Generate junitfile for unit tests #1217
• OTA-1578: Disable ResourceReconciliationIssues condition #1216
• Full changelog

console

• CONSOLE-4688: Dropdown -> ConsoleSelect #15284
• CONSOLE-4616: add additionalPrinterColumns to CustomResource list page #15350
• OCPBUGS-44972: Make sure CSP violations are only reported to telemetry once per day per browser #14778
• CONSOLE-4703: Remove routes component in console #15343
• OCPBUGS-60056: update timestamp unit test to be more stable #15356
• ODC-7811: enzyme -> RTL: webterminal-plugin #15352
• CONSOLE-4617: add additionalPrinterColumns to CustomResource details page #15336
• OCPBUGS-60010: Fix i18n string for event stream #15351
• CONSOLE-4705: Convert some files to TypeScript #15348
• CONSOLE-4688: Use PF instead of noSelection Dropdown #15342
• OCPBUGS-59563: Resolving API Version Conflicts in Tekton Pipeline Runs #15307
• OCPBUGS-59215: switch to dev perspective for /dev-monitoring #15268
• OCPBUGS-59725: Refactor RegistryPollIntervalModal #15337
• OCPBUGS-55946: Move ACM perspective back to perspective selector. #15310
• CONSOLE-4704: Update ThemeContext type #15339
• OCPBUGS-57481: fix: Fix negative CPU util graphs #15332
• OCPBUGS-58469: Fix hot reload in GlobalConfigPage component #15287
• OCPBUGS-59196: fix runtime exception in CreateYAMLInner #15341
• CONSOLE-4699: Update dynamic demo plugin e2e tests #15319
• CONSOLE-4608: Drop createModalLauncher from helm-plugin and use useOverlay hook instead #15303
• ODC-7802: Remove custom Drawer and Tabs from web-terminal #15077
• ODC-7620: Use PF isLoading in CreateProjectModal #15318
• OCPBUGS-57466: Default name is comprised of ‘-’ on ‘Add to favorites’ page when language is Korean/Japanese/Chinese. #15314
• OCPBUGS-56248: Improve Console plugin API doc gen script #15167
• OCPBUGS-56466: The warning msg ‘CPU and memory resource requests must be set’ still shows up after deployment has resource requests set. #15117
• CONSOLE-4669: Refactor Alertmanager forms to only use PatternFly comp… #15275
• OCPBUGS-59771: Move alertmanager settings route #15325
• NO-JIRA: Update README.md by adding removing co-disabled styling #15323
• CONSOLE-4700: Address tech debt in TogglePlay and ButtonBar #15308
• OCPBUGS-57654: Updating openshift-enterprise-console-container image to be consistent with ART for 4.20 #15186
• ODC-7803: Add custom icons in import flow #15242
• OCPBUGS-59231: PipelinesList: increase width of ns column #15311
• Full changelog

console-operator

• OCPBUGS-57854: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.20 #996
• OCPBUGS-57736: bump github.com/openshift/client-go #1030
• OCPBUGS-45300: Wire synced OIDC Auth CM to Console #1024
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• OCPBUGS-59568: stop installing rpms that are already in the base image #206
• Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-59650: Rebase main onto release-1.33 #334
• OCPBUGS-58497: CARRY: don’t ignore json files #337
• Full changelog

etcd, installer-etcd-artifacts

• OCPBUGS-57675: Updating ose-etcd-container image to be consistent with ART for 4.20 #334
• Full changelog

gcp-cloud-controller-manager

• NO-JIRA: Update OWNERS #83
• Full changelog

gcp-cluster-api-controllers

• NO-JIRA: Update OWNERS #246
• Full changelog

gcp-machine-controllers

• OCPCLOUD-2931: Update Kubernetes deps to v1.33 #123
• NO-JIRA: Update OWNERS #127
• Full changelog

gcp-pd-csi-driver

• STOR-2396: Rebase to upstream v1.20.0 for OCP 4.20 #79
• Full changelog

gcp-pd-csi-driver-operator

• STOR-2394: Bump all deps for 4.20 #147
• Full changelog

haproxy-router

• OCPBUGS-55506: Prevent startup failures due to name resolution #656
• Full changelog

hyperkube, installer-kube-apiserver-artifacts, kube-proxy, pod

• OCPBUGS-59533: Rebase v1.33.3 to master/4.20 #2369
• OCPBUGS-57666: Adjust durations for PodLifecycleSleepAction e2e tests #2363
• STOR-2481: UPSTREAM: <carry>: Skip SELinux test with Feature:SELinuxMountReadWriteteOncePodOnly #2389
• OCPBUGS-60047: disable slow and flaky tests rather than labeling them #2390
• OCPBUGS-56785: UPSTREAM: 132028: podresources: list: use active pods #2361
• NO-JIRA: UPSTREAM: <drop>: Revert “Bump external snapshotter for vgs tests” #2387
• OCPBUGS-59603: Bump the external-snapshotter for vgs tests #2373
• TRT-2068: Skip specific LoadBalancer test for “none” platform #2383
• TRT-2068: Reintroduce non-suite annotation removal #2331
• Full changelog

hypershift

• OCPBUGS-60064: fix(OCPBUGS-60064): add missing app label to some components #6591
• CNTRLPLANE-1186: update github.com/golang/groupcache digest to 2c02b82 #6389
• CNTRLPLANE-1228: Update registry.access.redhat.com/ubi9/go-toolset docker tag to v1.24.4-1753853351 #6541
• OCPBUGS-58061: Always compress and encode payload in token secret for inplace upgrades #6352
• CNTRLPLANE-1225: feat(konflux): Use hermetic builds for CPO #6595
• CNTRLPLANE-1197: Add EnsureGlobalPullSecret to be executed in 4.19 test suite #6508
• OCPBUGS-59194: fix(OCPBUGS-59194): Allow HCCO to set registry managementState to Removed #6593
• NO-JIRA: feat(azure): Add deletion scripts and cleanup documentation for managed Azure clusters #6560
• OCPBUGS-59886: Add selinux-warning-controller to KCM #6550
• CNTRLPLANE-1116: build(gitlint): add gitlint to verify target #6559
• CORENET-6229: Use networking.advertiseAddress for CNO apiserver override for IBMCloud PlatformType #6553
• OCPBUGS-59736: Add support for generating a SC UID per namespace if SCC are not avalable #6520
• CNTRLPLANE-263: Remove all AzureManaged* CRDs #6518
• CNTRLPLANE-262: Support print operator version in CLI #5821
• CNTRLPLANE-1198, CNTRLPLANE-1199: Bump AllowedCIDRBlocks limit #6556
• NO-JIRA: refactor(azure): extract AKS managed identity setup into separate script #6488
• CNTRLPLANE-1116: Fix CI git commits for run-gitlint #6519
• OCPBUGS-59959: Set explicit FSGroup and RunAsUser for etcd when there’s no SCC #6548
• NO-JIRA: add CLAUDE.md with comprehensive development guidance #6549
• CNTRLPLANE-1191: add sa-token-issuer-private-key-path flag to create cluster aws #6526
• CNTRLPLANE-1184: update registry.access.redhat.com/ubi10/ubi docker tag to v10.0-1752573517 #6343
• OCPBUGS-59927: Fix MCE 2.10 konflux EC violations #6531
• MGMT-20948: Enable Multus Disabling for NetworkType=Other #6358
• NO-JIRA: fix(cmd): match infraID exactly on OIDC provider delete #6538
• NO-JIRA: fix(test/e2e): add KCM leader elect failure msg to isLeaderElectionFailure #6537
• CNTRLPLANE-777: Create an Arm64 NodePool e2e Test for ARO HCP #6509
• CNTRLPLANE-996: feat(cli): Add support for using ROSA managed policies #6467
• CNTRLPLANE-204: feat(shared-ingress): Add reloader sidecar to avoid restarts on config changes #6447
• MGMT-20826: Add CLI validation to ensure Console is disabled when Ingress is disabled #6479
• NO-JIRA: feat(cmd/dump): add CronJobs to dump #6494
• OCPBUGS-53265: Use the image reference for the cache in the image metadata provider #6155
• OCPBUGS-59835: MCE 2.10 konflux #6524
• OCPBUGS-57336: Delete unused AdditionalTrustBundle from CP namespace #6504
• Fix OCPBUGS-54720: HCP payload doesn’t respect multiple #6486
• OCPSTRAT-2173: feat(hcco): add support for hosted OIDC client secrets #6375
• OCPBUGS-43824: Help fix flaky NTO tests #6480
• feat(shared-ingress): Fix Konflux hermetic build config #6503
• CNTRLPLANE-1116: add gitlint support for conventional commit enforcement #6462
• NO-JIRA: feat(contrib): add kubelet config daemonset #6495
• NO-JIRA: Fix a typo in the documentation #6501
• NO-JIRA: increase the pod limit per node in AKS cluster #6487
• NO-JIRA: Add new doc from HCP OADP Plugin #6299
• OCPBUGS-59759: fix(konflux): Add missing backslash for dot escaping #6491
• NO-JIRA: test: replace context.Background/TODO with t.Context in unit tests #6475
• NO-JIRA: Dummy change to shared-ingress Containerfile to trigger a build #6478
• NO-JIRA: test: remove CPOv2 annotation from upgrade test #6485
• OCPBUGS-57316: hypershift version in CLI returns panics for Server Version when HyperShift operator is deployed #6473
• CNTRLPLANE-980: chore(contrib): add ansible playbook for setting up external OIDC #6294
• NO-JIRA: test/e2e: skip kubevirt pods when checking labels, tolerations, and term msg policy #6476
• NO-JIRA: test/e2e: add TerminationMessagePolicyFallbackToLogsOnError check to 4.19 #6291
• CNTRLPLANE-735: Document steps to configure Microsoft backup extension in AKS #6456
• Full changelog

ibm-cloud-controller-manager

• NO-JIRA: Update OWNERS #83
• Full changelog

ibm-vpc-block-csi-driver

• STOR-2393: Rebase to upstream v5.2.16 for OCP 4.20 #102
• Full changelog

ibm-vpc-block-csi-driver-operator

• STOR-2330: Add labels to subscribe ibm-vpc-block CSI driver controller and node pods to NPs #148
• STOR-2394: Bump all deps for 4.20 #147
• Full changelog

ibmcloud-cluster-api-controllers

• NO-JIRA: Update OWNERS #117
• Full changelog

ibmcloud-machine-controllers

• OCPCLOUD-2930: Bump k8s 1.33 #67
• NO-JIRA: Update OWNERS #68
• Full changelog

insights-operator

• feat: add permissions to gather clusterrole (#1106) #1106
• feat: Allow on-demand gathering during initial periodic run (#1109) #1109
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• Liborfuka ocp420 new tests #51
• Sidecar containers test case #44
• test: Fix JBoss EAP 8.0 version #50
• Full changelog

ironic

• METAL-1461: update config to allow Ironic to work with ironic-prometheus-exporter #674
• METAL-1379: Bump ironic to include NIC Firmware Updates #672
• METAL-1414: Use Python 3.12 to build and run ironic #658
• Full changelog

ironic-agent

• METAL-1414: Use python3.12 to build and run ironic-agent #191
• Full changelog

kube-storage-version-migrator

• OCPBUGS-57556: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.20 #222
• Full changelog

machine-api-operator

• SPLAT-2381: Fixed e2e test to generate machines with cluster name prefix #1398
• OCPCLOUD-2980: add ingress/egress network policy v2 #1396
• Revert “OCPCLOUD-2980: add ingress/egress network policy” #1395
• OCPCLOUD-2980: add ingress/egress network policy #1387
• Full changelog

machine-config-operator

• MCO-1777: Run build as an init container for OCL #5200
• MCO-1811: add MachineConfigControllerPoolAlert runbook to alert #5214
• TRT-2232: Revert #5148 “OCPBUGS-58023: Prevent unnecessary systemd unit disable” #5213
• OCPNODE-3522: Generate deterministic order namespacedPolicyJSON #5196
• OCPNODE-3466: Remove containernetworking-plugins directory from crio.conf #5173
• NO-ISSUE: Balance runtime of e2e-gcp-op shards #5203
• OCPBUGS-58023: Prevent unnecessary systemd unit disable #5148
• MCO-1773: Pick up openshift/kubernetes 1.33 rebase updates #5182
• OCPBUGS-59780: ARO clusters cannot scale on upgrade to 4.19 #5195
• OCPBUGS-58443: In OCL for reboot, after applying ssh/file/password based MC the MCP is stuck in updating state #5191
• OCPBUGS-57484, OPNET-681: Support migration to NMState #5064
• OCPNODE-3006: Migrate ClusterImagePolicy/ImagePolicy to v1 #5143
• OCPBUGS-43406: Add workaround fix for static pod race #5185
• MCO-1813: Simplify boot image reconciliation with Go generics #5183
• NO-ISSUE: Split gcp-op into two tests #5197
• MCO-1815: vSphere bootimage update reconciliation should handle bootimage name diverging #5187
• OCPBUGS-58191: fixes image registry secret handling #5171
• OCPBUGS-55971: Enable debug logging for nodeip-configuration #5043
• OCPBUGS-59776: Revert “OCPBUGS-52302: Fix timing of Spec.ConfigVersion.Desired update in MCN” #5190
• OCPBUGS-52302: Fix timing of Spec.ConfigVersion.Desired update in MCN #5121
• OCPBUGS-59672: TestMCNPoolNameCustom should clean up resources properly #5184
• Full changelog

metallb-frr

• OCPBUGS-57696: Updating ose-frr-container image to be consistent with ART for 4.20 #101
• Full changelog

monitoring-plugin

• NO-JIRA: refactor incidents to add typescript #475
• OCPBUGS-55455: feat: add alerting rules tab to dev console #487
• NO-JIRA: automation failed in the periodic job #486
• OU-944: automation refactoring #485
• OU-863: feat: add disconnected to line chart #477
• OU-388: add units selector to the metrics page #480
• OU-939: Fix virt persepective new silence link #472
• OU-594: [Incidents] UI is not embedded in the Alerting section #465
• OU-503: regression automation testing for monitoring alerting #471
• Full changelog

network-metrics-daemon

• Updating ose-network-metrics-daemon-container image to be consistent with ART for 4.20 (#107) #107
• create .snyk file to skip vendor folder (#108) #108
• OCPBUGS-59612: Bump github.com/golang/glog to v1.2.4 (#109) #109
• no-jira: Replace e2e test image (#118) #118
• Full changelog

network-tools

• NO-JIRA:Update OWNERS file #152
• Full changelog

networking-console-plugin

• NO-JIRA: fix(i18n): use right namespace #262
• OCPBUGS-60122: Fix ingress details #258
• CNV-52160: add vm network list #256
• OCPBUGS-49652: Fix requiremenets with no value #254
• Full changelog

nutanix-cloud-controller-manager

• OCPCLOUD-2924: Merge https://github.com/nutanix-cloud-native/cloud-provider-nutanix:main (109de6e) into main #44
• Full changelog

nutanix-machine-controllers

• NO-JIRA: Update OWNERS #118
• Full changelog

oc-mirror

• clid-415: adds a warn message to v1 (#1238) #1238
• Bump the oc-mirror-v2 group in /v2 with 17 updates (#1232) #1232
• OCPBUGS-59949: fixes the result output showing the wrong total (#1236) #1236
• prevents panic when helm chart is nil (#1233) #1233
• OCPBUGS-59646: revert #1220 and print a warning instead (#1228) #1228
• updates dependabot config (#1231) #1231
• OCPBUGS-55114: v2/operator: support manifest lists with one arch (#1140) #1140
• NO-JIRA: OKD compatibility - Allow custom value for SignatureURL (#1165) #1165
• adds build-machinery-go as a tool dependency (#1226) #1226
• OCPBUGS-59714: Detect images from a Helm Chart with an aliased chart dependency (#1038) #1038
• OCPBUGS-52562: Ensure release collection does not include duplicates (#1218) #1218
• OCPBUGS-59396: v2/archive: handle 0b mirror archive files (#1219) #1219
• OCPBUGS-54622: cli/delete: fix workflow mode name output (#1214) #1214
• OCPBUGS-59646: cmd: unpack v2 to $HOME instead of /tmp (#1220) #1220
• Full changelog

olm-catalogd, olm-operator-controller

• NO-ISSUE: Synchronize From Upstream Repositories #411
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• NO-ISSUE: Synchronize From Upstream Repositories #1044
• Full changelog

operator-marketplace

• OPRUN-3888, OPRUN-3889: Upgrade catalog images from 4.19 to 4.20 #650
• OPRUN-3981: Upgrade Go from 1.23 to 1.24.3 and k8s deps to 1.33 for release 4.20 #647
• OPRUN-3981: Update dockerfile to use go 1.24 and OCP image 4.20 #645
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• OCPBUGS-59248: DownStream Merge [07-17-2025] #2676
• Full changelog

powervs-block-csi-driver-operator

• STOR-2394: Bump all deps for 4.20 #85
• Full changelog

prometheus

• MON-4300: update prometheus to 3.5 #260
• OCPBUGS-39089: Clarify prometheus pod NFS warning message #243
• Full changelog

route-controller-manager

• OCPBUGS-59575: Update all dependencies #63
• Full changelog

service-ca-operator

• OCPBUGS-57703: Updating ose-service-ca-operator-container image to be consistent with ART for 4.20 #268
• Full changelog

tests

• NO-JIRA: Update image mirroring instructions to avoid using external binary #30060
• TRT-2197: use fixed seed for test ordering #29997
• NO-JIRA: Get enabled featuregates from metrics endpoint #29952
• CORENET-6203: Enable test for LGW L2 #30009
• OPRUN-3964: [olmv1] - Remove test [sig-olmv1][OCPFeatureGate:NewOLM] OLMv1 CRDs should be installed migrated to operator-controller repository/OTE #30036
• OCPBUGS-56506: Don’t check for remote node subnet BGP routes #30029
• OCPNODE-3004: Increase the time to wait until the pod becomes ImagePullBackOff #30030
• OCPBUGS-59218: feat(azure): skip metrics collection for ARO HCP hypershift #30006
• NO-JIRA: Revert “OCPBUGS-55238: spyglass: hide disruption events for localhost” #30034
• TRT-2224: Fix edge case where failures are not counted #30039
• TRT-2163: incluster disruption images #30007
• OCPNODE-3004: Accept ErrImagePull for non-existent image volume test. #30027
• OCPNODE-3454: OCPFeatureGate:SigstoreImageVerification update test on v1 (Cluster)ImagePolicy #29973
• CNTRLPLANE-945: Add tests for ExternalOIDC and ExternalOIDCWithUIDAndExtraClaimMappings features #29917
• OCPNODE-3004: Add ImageVolume e2e tests #30015
• OCPBUGS-59750: Move the legacy container failures #30017
• OPRUN-3768: Add OLMv1 Single/OwnNamespace tests #29998
• OCPBUGS-55238: spyglass: hide disruption events for localhost #29710
• API-1802: chart template: show cert rotation events #29279
• NO-ISSUE: Automated - Update synthetic test data #29802
• OTA-1580: Add basic test for oc adm upgrade status CLI #29954
• Full changelog

thanos

• MON-4299: update to 0.39.2 #163
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.33.1-2.el10s
• kernel-6.12.0-105.el10
• openshift-kubelet-4.20.0-202507171059.p0.gb94367c.assembly.stream.el9
• systemd-257-11.el10

Full list (577 packages)

• NetworkManager-1:1.53.92-1.el10
• NetworkManager-cloud-setup-1:1.53.92-1.el10
• NetworkManager-libnm-1:1.53.92-1.el10
• NetworkManager-ovs-1:1.53.92-1.el10
• NetworkManager-tui-1:1.53.92-1.el10
• WALinuxAgent-udev-2.13.1.1-1.el10
• aardvark-dns-2:1.15.0-1.el10
• acl-2.3.2-4.el10
• adcli-0.9.2-9.el10
• afterburn-5.8.2-1.el10
• afterburn-dracut-5.8.2-1.el10
• alternatives-1.30-2.el10
• amd-gpu-firmware-20250708-18.el10
• amd-ucode-firmware-20250708-18.el10
• atheros-firmware-20250708-18.el10
• attr-2.5.2-5.el10
• audit-4.0.3-4.el10
• audit-libs-4.0.3-4.el10
• audit-rules-4.0.3-4.el10
• authselect-1.5.0-8.el10
• authselect-libs-1.5.0-8.el10
• avahi-libs-0.9~rc2-1.el10
• basesystem-11-22.el10
• bash-5.2.26-6.el10
• bash-completion-1:2.11-16.el10
• bind-libs-32:9.18.33-4.el10
• bind-license-32:9.18.33-4.el10
• bind-utils-32:9.18.33-4.el10
• binutils-2.41-56.el10
• binutils-gold-2.41-56.el10
• bootc-1.3.0-2.el10
• bootupd-0.2.28-2.el10
• brcmfmac-firmware-20250708-18.el10
• bsdtar-3.7.7-3.el10
• bubblewrap-0.10.0-3.el10
• bzip2-1.0.8-25.el10
• bzip2-libs-1.0.8-25.el10
• c-ares-1.25.0-6.el10
• ca-certificates-2024.2.69_v8.0.303-102.3.el10
• catatonit-5:0.2.1-1.el10
• centos-gpg-keys-10.0-9.el10
• centos-release-cloud-1-1.el10s
• centos-release-nfv-common-1-5.el10s
• centos-release-virt-common-1-1.el10s
• centos-stream-release-10.0-9.el10
• centos-stream-repos-10.0-9.el10
• checkpolicy-3.8-1.el10
• chrony-4.6.1-2.el10
• cifs-utils-7.2-1.el10
• cirrus-audio-firmware-20250708-18.el10
• clevis-21-8.el10
• clevis-dracut-21-8.el10
• clevis-luks-21-8.el10
• clevis-pin-tpm2-0.5.3-8.el10
• clevis-systemd-21-8.el10
• cloud-utils-growpart-0.33-11.el10
• composefs-1.0.8-1.el10
• composefs-libs-1.0.8-1.el10
• conmon-3:2.1.13-1.el10
• conmon-rs-0.6.6-2.el10s
• conntrack-tools-1.4.8-3.el10
• console-login-helper-messages-0.21.3-10.el10
• console-login-helper-messages-issuegen-0.21.3-10.el10
• console-login-helper-messages-profile-0.21.3-10.el10
• container-selinux-4:2.239.0-1.el10
• containers-common-5:0.63.0-1.el10
• containers-common-extra-5:0.63.0-1.el10
• coreos-installer-0.24.0-1.el10
• coreos-installer-bootinfra-0.24.0-1.el10
• coreutils-9.5-6.el10
• coreutils-common-9.5-6.el10
• cpio-2.15-3.el10
• cracklib-2.9.11-8.el10
• cracklib-dicts-2.9.11-8.el10
• cri-o-1.33.1-2.el10s
• cri-tools-1.33.0-2.el10s
• criu-3.19-9.el10
• criu-libs-3.19-9.el10
• crun-1.22-1.el10
• crypto-policies-20250714-1.git95bf40e.el10
• crypto-policies-scripts-20250714-1.git95bf40e.el10
• cryptsetup-2.7.5-2.el10
• cryptsetup-libs-2.7.5-2.el10
• curl-8.12.1-2.el10
• cyrus-sasl-gssapi-2.1.28-27.el10
• cyrus-sasl-lib-2.1.28-27.el10
• dbus-1:1.14.10-5.el10
• dbus-broker-36-1.el10
• dbus-common-1:1.14.10-5.el10
• dbus-libs-1:1.14.10-5.el10
• dbus-tools-1:1.14.10-5.el10
• device-mapper-10:1.02.206-3.el10
• device-mapper-event-10:1.02.206-3.el10
• device-mapper-event-libs-10:1.02.206-3.el10
• device-mapper-libs-10:1.02.206-3.el10
• device-mapper-multipath-0.9.9-10.el10
• device-mapper-multipath-libs-0.9.9-10.el10
• device-mapper-persistent-data-1.1.0-2.el10
• diffutils-3.10-8.el10
• dmidecode-1:3.6-3.el10
• dnf-4.20.0-16.el10
• dnf-data-4.20.0-16.el10
• dnsmasq-2.90-4.el10
• dosfstools-4.2-12.el10
• dracut-105-4.el10
• dracut-network-105-4.el10
• dracut-squash-105-4.el10
• duktape-2.7.0-10.el10
• e2fsprogs-1.47.1-4.el10
• e2fsprogs-libs-1.47.1-4.el10
• efi-filesystem-6-6.el10
• efibootmgr-18-8.el10
• efivar-libs-39-3.el10
• elfutils-debuginfod-client-0.193-1.el10
• elfutils-default-yama-scope-0.193-1.el10
• elfutils-libelf-0.193-1.el10
• elfutils-libs-0.193-1.el10
• erofs-utils-1.8.4-3.el10
• ethtool-2:6.11-5.el10
• expat-2.7.1-1.el10
• file-5.45-7.el10
• file-libs-5.45-7.el10
• filesystem-3.18-17.el10
• findutils-1:4.10.0-5.el10
• firewalld-filesystem-2.3.0-2.el10
• flashrom-1.3.0-8.el10
• flatpak-session-helper-1.16.0-5.el10
• fstrm-0.6.1-12.el10
• fuse-common-3.16.2-5.el10
• fuse-libs-2.9.9-25.el10
• fuse3-3.16.2-5.el10
• fuse3-libs-3.16.2-5.el10
• fwupd-1.9.26-3.el10
• fwupd-efi-1.6-3.el10
• fwupd-plugin-flashrom-1.9.26-3.el10
• gawk-5.3.0-6.el10
• gawk-all-langpacks-5.3.0-6.el10
• gdbm-1:1.23-11.el10
• gdbm-libs-1:1.23-11.el10
• geolite2-city-20191217-14.el10
• geolite2-country-20191217-14.el10
• gettext-envsubst-0.22.5-6.el10
• gettext-libs-0.22.5-6.el10
• gettext-runtime-0.22.5-6.el10
• git-core-2.47.3-1.el10
• glib2-2.80.4-4.el10
• glibc-2.39-38.el10
• glibc-common-2.39-38.el10
• glibc-gconv-extra-2.39-38.el10
• glibc-minimal-langpack-2.39-38.el10
• gmp-1:6.2.1-12.el10
• gnupg2-2.4.5-2.el10
• gnupg2-smime-2.4.5-2.el10
• gnutls-3.8.10-1.el10
• gobject-introspection-1.79.1-6.el10
• gpgme-1.23.2-6.el10
• grep-3.11-10.el10
• groff-base-1.23.0-10.el10
• grub2-common-1:2.12-19.el10
• grub2-efi-x64-1:2.12-19.el10
• grub2-pc-1:2.12-19.el10
• grub2-pc-modules-1:2.12-19.el10
• grub2-tools-1:2.12-19.el10
• grub2-tools-minimal-1:2.12-19.el10
• gssproxy-0.9.2-10.el10
• gzip-1.13-3.el10
• hostname-3.23-14.el10
• hwdata-0.379-10.5.el10
• ignition-2.21.0-3.el10
• ignition-grub-2.21.0-3.el10
• ima-evm-utils-1.6.2-2.el10
• info-7.1-6.el10
• inih-58-3.el10
• initscripts-service-10.26-2.el10
• intel-audio-firmware-20250708-18.el10
• intel-gpu-firmware-20250708-18.el10
• ipcalc-1.0.3-12.el10
• iproute-6.14.0-1.el10
• iproute-tc-6.14.0-1.el10
• iptables-libs-1.8.11-9.el10
• iptables-nft-1.8.11-9.el10
• iputils-20240905-3.el10
• irqbalance-2:1.9.4-4.el10
• iscsi-initiator-utils-6.2.1.11-0.git4b3e853.el10
• iscsi-initiator-utils-iscsiuio-6.2.1.11-0.git4b3e853.el10
• isns-utils-libs-0.103-1.el10
• jansson-2.14-3.el10
• jose-14-102.el10
• jq-1.7.1-11.el10
• json-c-0.18-3.el10
• json-glib-1.8.0-5.el10
• kbd-2.6.4-7.el10
• kbd-legacy-2.6.4-7.el10
• kbd-misc-2.6.4-7.el10
• kdump-utils-1.0.54-3.el10
• kernel-6.12.0-105.el10
• kernel-core-6.12.0-105.el10
• kernel-modules-6.12.0-105.el10
• kernel-modules-core-6.12.0-105.el10
• kernel-modules-extra-6.12.0-105.el10
• kexec-tools-2.0.31-1.el10
• keyutils-1.6.3-5.el10
• keyutils-libs-1.6.3-5.el10
• kmod-31-11.el10
• kmod-libs-31-11.el10
• kpartx-0.9.9-10.el10
• krb5-libs-1.21.3-8.el10
• less-661-3.el10
• libacl-2.3.2-4.el10
• libaio-0.3.111-22.el10
• libarchive-3.7.7-3.el10
• libassuan-2.5.6-6.el10
• libattr-2.5.2-5.el10
• libbasicobjects-0.1.1-58.el10
• libblkid-2.40.2-10.el10
• libbpf-2:1.6.0-2.el10
• libcap-2.69-7.el10
• libcap-ng-0.8.4-6.el10
• libcbor-0.11.0-3.el10
• libcollection-0.7.0-58.el10
• libcom_err-1.47.1-4.el10
• libcomps-0.1.21-3.el10
• libcurl-minimal-8.12.1-2.el10
• libdhash-0.5.0-58.el10
• libdnf-0.73.1-12.el10
• libdnf-plugin-subscription-manager-1.30.7-1.el10
• libdrm-2.4.123-1.el10
• libeconf-0.6.2-4.el10
• libedit-3.1-52.20230828cvs.el10
• libev-4.33-14.el10
• libevent-2.1.12-16.el10
• libfdisk-2.40.2-10.el10
• libffi-3.4.4-10.el10
• libfido2-1.14.0-7.el10
• libgcc-14.3.1-2.1.el10
• libgcrypt-1.11.0-6.el10
• libgomp-14.3.1-2.1.el10
• libgpg-error-1.50-2.el10
• libgudev-238-7.el10
• libgusb-0.4.9-4.el10
• libibverbs-57.0-1.el10
• libicu-74.2-4.el10
• libidn2-2.3.7-3.el10
• libini_config-1.3.1-58.el10
• libipa_hbac-2.11.0-3.el10
• libjcat-0.2.2-2.el10
• libjose-14-102.el10
• libkcapi-1.5.0-3.el10
• libkcapi-hasher-1.5.0-3.el10
• libkcapi-hmaccalc-1.5.0-3.el10
• libksba-1.6.7-2.el10
• libldb-4.22.3-101.el10
• libluksmeta-9-26.el10
• libmaxminddb-1.9.1-4.el10
• libmicrohttpd-1:1.0.0-3.el10
• libmnl-1.0.5-7.el10
• libmodulemd-2.15.0-12.el10
• libmount-2.40.2-10.el10
• libmspack-0.10.1-0.14.alpha.el10
• libndp-1.9-2.el10
• libnet-1.3-7.el10
• libnetfilter_conntrack-1.0.9-12.el10
• libnetfilter_cthelper-1.0.1-1.el10
• libnetfilter_cttimeout-1.0.0-27.el10
• libnetfilter_queue-1.0.5-9.el10
• libnfnetlink-1.0.2-3.el10
• libnfsidmap-1:2.8.3-0.el10
• libnftnl-1.2.8-2.el10
• libnghttp2-1.64.0-2.el10
• libnl3-3.11.0-1.el10
• libnvme-1.13-1.el10
• libpath_utils-0.2.1-58.el10
• libpcap-14:1.10.4-7.el10
• libpciaccess-0.16-16.el10
• libpkgconf-2.1.0-3.el10
• libpwquality-1.4.5-12.el10
• libref_array-0.1.5-58.el10
• librepo-1.18.0-5.el10
• libseccomp-2.5.6-1.el10
• libsecret-0.21.2-8.el10
• libselinux-3.8-2.el10
• libselinux-utils-3.8-2.el10
• libsemanage-3.8.1-1.el10
• libsepol-3.8-1.el10
• libsmartcols-2.40.2-10.el10
• libsmbclient-4.22.3-101.el10
• libsolv-0.7.29-8.el10
• libss-1.47.1-4.el10
• libsss_certmap-2.11.0-3.el10
• libsss_idmap-2.11.0-3.el10
• libsss_nss_idmap-2.11.0-3.el10
• libsss_sudo-2.11.0-3.el10
• libstdc++-14.3.1-2.1.el10
• libtalloc-2.4.3-100.el10
• libtasn1-4.20.0-1.el10
• libtdb-1.4.13-100.el10
• libtevent-0.16.2-100.el10
• libtirpc-1.3.5-1.el10
• libtool-ltdl-2.4.7-13.el10
• libunistring-1.1-10.el10
• liburing-2.5-5.el10
• libusb1-1.0.28-1.el10
• libutempter-1.2.1-15.el10
• libuuid-2.40.2-10.el10
• libuv-1:1.50.0-1.el10
• libverto-0.3.2-10.el10
• libverto-libev-0.3.2-10.el10
• libwbclient-4.22.3-101.el10
• libxcrypt-4.4.36-10.el10
• libxkbcommon-1.7.0-4.el10
• libxml2-2.12.5-7.el10
• libxmlb-0.3.15-7.el10
• libxslt-1.1.39-7.el10
• libyaml-0.2.5-16.el10
• libzstd-1.5.5-9.el10
• linux-firmware-20250708-18.el10
• linux-firmware-whence-20250708-18.el10
• lmdb-libs-0.9.32-4.el10
• logrotate-3.22.0-4.el10
• lsof-4.98.0-7.el10
• lua-libs-5.4.6-7.el10
• luksmeta-9-26.el10
• lvm2-10:2.03.32-3.el10
• lvm2-libs-10:2.03.32-3.el10
• lz4-libs-1.9.4-8.el10
• lzo-2.10-14.el10
• makedumpfile-1.7.7-1.el10
• mdadm-4.4-2.el10
• memstrack-0.2.5-6.el10
• microcode_ctl-4:20250512-1.el10
• mokutil-2:0.7.2-1.el10
• mpdecimal-2.5.1-12.el10
• mpfr-4.2.1-5.el10
• mt7xxx-firmware-20250708-18.el10
• nano-8.1-3.el10
• ncurses-6.4-14.20240127.el10
• ncurses-base-6.4-14.20240127.el10
• ncurses-libs-6.4-14.20240127.el10
• net-tools-2.0-0.73.20160912git.el10
• netavark-2:1.15.2-1.el10
• nettle-3.10.1-1.el10
• newt-0.52.24-5.el10
• nfs-utils-1:2.8.3-0.el10
• nftables-1:1.1.1-4.el10
• nmap-ncat-4:7.92-3.el10
• nmstate-2.2.48-1.el10
• npth-1.6-21.el10
• nss-altfiles-2.23.0-5.el10
• numactl-libs-2.0.19-1.el10
• nvidia-gpu-firmware-20250708-18.el10
• nvme-cli-2.13-2.el10
• nxpwireless-firmware-20250708-18.el10
• oniguruma-6.9.9-7.el10
• open-vm-tools-12.5.0-1.el10
• openldap-2.6.8-3.el10
• openshift-clients-4.20.0-202507031044.p0.gf0e1051.assembly.stream.el9
• openshift-kubelet-4.20.0-202507171059.p0.gb94367c.assembly.stream.el9
• openssh-9.9p1-9.el10
• openssh-clients-9.9p1-9.el10
• openssh-server-9.9p1-9.el10
• openssl-1:3.5.0-8.el10
• openssl-libs-1:3.5.0-8.el10
• openvswitch-selinux-extra-policy-1.0-36.el10s
• openvswitch3.5-3.5.0-6.el10s
• os-prober-1.81-9.el10
• ose-aws-ecr-image-credential-provider-4.20.0-202507092044.p0.g3408f0c.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.20.0-202507042143.p0.gd469d04.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.20.0-202506181842.p0.gaabc000.assembly.stream.el9
• ostree-2025.3-1.el10
• ostree-grub2-2025.3-1.el10
• ostree-libs-2025.3-1.el10
• p11-kit-0.25.5-7.el10
• p11-kit-server-0.25.5-7.el10
• p11-kit-trust-0.25.5-7.el10
• pam-1.6.1-8.el10
• pam-libs-1.6.1-8.el10
• passt-0^20250415.g8ec1341-1.el10
• passt-selinux-0^20250415.g8ec1341-1.el10
• pciutils-3.13.0-5.el10
• pciutils-libs-3.13.0-5.el10
• pcre2-10.44-1.el10.3
• pcre2-syntax-10.44-1.el10.3
• pcsc-lite-2.2.3-2.el10
• pcsc-lite-ccid-1.6.0-2.el10
• pcsc-lite-libs-2.2.3-2.el10
• perl-AutoLoader-5.74-514.el10
• perl-B-1.89-514.el10
• perl-Carp-1.54-511.el10
• perl-Class-Struct-0.68-514.el10
• perl-Data-Dumper-2.189-512.el10
• perl-Digest-1.20-511.el10
• perl-Digest-MD5-2.59-6.el10
• perl-DynaLoader-1.56-514.el10
• perl-Encode-4:3.21-511.el10
• perl-Errno-1.38-514.el10
• perl-Exporter-5.78-511.el10
• perl-Fcntl-1.18-514.el10
• perl-File-Basename-2.86-514.el10
• perl-File-Path-2.18-511.el10
• perl-File-Temp-1:0.231.100-512.el10
• perl-File-stat-1.14-514.el10
• perl-FileHandle-2.05-514.el10
• perl-Getopt-Long-1:2.58-3.el10
• perl-Getopt-Std-1.14-514.el10
• perl-HTTP-Tiny-0.088-512.el10
• perl-IO-1.55-514.el10
• perl-IO-Socket-IP-0.42-512.el10
• perl-IO-Socket-SSL-2.085-3.el10
• perl-IPC-Open3-1.22-514.el10
• perl-MIME-Base64-3.16-511.el10
• perl-Mozilla-CA-20231213-5.el10
• perl-NDBM_File-1.17-514.el10
• perl-Net-SSLeay-1.94-8.el10
• perl-POSIX-2.20-514.el10
• perl-PathTools-3.91-512.el10
• perl-Pod-Escapes-1:1.07-511.el10
• perl-Pod-Perldoc-3.28.01-512.el10
• perl-Pod-Simple-1:3.45-511.el10
• perl-Pod-Usage-4:2.03-511.el10
• perl-Scalar-List-Utils-5:1.63-511.el10
• perl-SelectSaver-1.02-514.el10
• perl-Socket-4:2.038-511.el10
• perl-Storable-1:3.32-511.el10
• perl-Symbol-1.09-514.el10
• perl-Term-ANSIColor-5.01-512.el10
• perl-Term-Cap-1.18-511.el10
• perl-Text-ParseWords-3.31-511.el10
• perl-Text-Tabs+Wrap-2024.001-511.el10
• perl-Time-Local-2:1.350-511.el10
• perl-URI-5.27-3.el10
• perl-base-2.27-514.el10
• perl-constant-1.33-512.el10
• perl-if-0.61.000-514.el10
• perl-interpreter-4:5.40.2-514.el10
• perl-libnet-3.15-512.el10
• perl-libs-4:5.40.2-514.el10
• perl-locale-1.12-514.el10
• perl-mro-1.29-514.el10
• perl-overload-1.37-514.el10
• perl-overloading-0.02-514.el10
• perl-parent-1:0.241-512.el10
• perl-podlators-1:5.01-511.el10
• perl-vars-1.05-514.el10
• pigz-2.8-7.el10
• pinentry-1.3.1-1.el10
• pkgconf-2.1.0-3.el10
• pkgconf-m4-2.1.0-3.el10
• pkgconf-pkg-config-2.1.0-3.el10
• podman-6:5.5.1-1.el10
• policycoreutils-3.8-2.el10
• policycoreutils-python-utils-3.8-2.el10
• polkit-125-3.el10
• polkit-libs-125-3.el10
• polkit-pkla-compat-0.1-30.el10
• popt-1.19-8.el10
• procps-ng-4.0.4-7.el10
• protobuf-c-1.5.0-6.el10
• psmisc-23.6-8.el10
• python-unversioned-command-3.12.11-2.el10
• python3-3.12.11-2.el10
• python3-audit-4.0.3-4.el10
• python3-charset-normalizer-3.4.2-1.el10
• python3-cloud-what-1.30.7-1.el10
• python3-dateutil-1:2.8.2-15.el10
• python3-dbus-1.3.2-8.el10
• python3-decorator-5.1.1-12.el10
• python3-distro-1.9.0-5.el10
• python3-dnf-4.20.0-16.el10
• python3-dnf-plugin-versionlock-4.7.0-9.el10
• python3-dnf-plugins-core-4.7.0-9.el10
• python3-gobject-base-3.46.0-7.el10
• python3-gobject-base-noarch-3.46.0-7.el10
• python3-hawkey-0.73.1-12.el10
• python3-idna-3.7-4.el10
• python3-iniparse-0.5-10.el10
• python3-inotify-0.9.6-36.el10
• python3-libcomps-0.1.21-3.el10
• python3-libdnf-0.73.1-12.el10
• python3-librepo-1.18.0-5.el10
• python3-libs-3.12.11-2.el10
• python3-libselinux-3.8-2.el10
• python3-libsemanage-3.8.1-1.el10
• python3-pip-wheel-23.3.2-7.el10
• python3-policycoreutils-3.8-2.el10
• python3-requests-2.32.3-2.el10
• python3-rpm-4.19.1.1-17.el10
• python3-setools-4.5.1-4.el10
• python3-setuptools-69.0.3-12.el10
• python3-six-1.16.0-16.el10
• python3-subscription-manager-rhsm-1.30.7-1.el10
• python3-systemd-235-11.el10
• python3-urllib3-1.26.19-2.el10
• qemu-guest-agent-18:10.0.0-7.el10
• quota-1:4.09-9.el10
• quota-nls-1:4.09-9.el10
• rdma-core-57.0-1.el10
• readline-8.2-11.el10
• realtek-firmware-20250708-18.el10
• rpcbind-1.2.7-3.el10
• rpm-4.19.1.1-17.el10
• rpm-build-libs-4.19.1.1-17.el10
• rpm-libs-4.19.1.1-17.el10
• rpm-ostree-2025.9-1.el10
• rpm-ostree-libs-2025.9-1.el10
• rpm-plugin-audit-4.19.1.1-17.el10
• rpm-plugin-selinux-4.19.1.1-17.el10
• rpm-plugin-systemd-inhibit-4.19.1.1-17.el10
• rpm-sequoia-1.9.0.1-1.el10
• rpm-sign-libs-4.19.1.1-17.el10
• rsync-3.4.1-2.el10
• samba-client-libs-4.22.3-101.el10
• samba-common-4.22.3-101.el10
• samba-common-libs-4.22.3-101.el10
• sed-4.9-3.el10
• selinux-policy-40.13.35-1.el10
• selinux-policy-targeted-40.13.35-1.el10
• setup-2.14.5-7.el10
• sg3_utils-1.48-7.el10
• sg3_utils-libs-1.48-7.el10
• shadow-utils-2:4.15.0-6.el10
• shadow-utils-subid-2:4.15.0-6.el10
• shared-mime-info-2.3-8.el10
• shim-x64-15.8-5.el10
• skopeo-2:1.19.0-2.el10
• slang-2.3.3-8.el10
• snappy-1.1.10-7.el10
• socat-1.7.4.4-8.el10
• sqlite-libs-3.46.1-4.el10
• ssh-key-dir-0.1.4-9.el10
• sssd-2.11.0-3.el10
• sssd-ad-2.11.0-3.el10
• sssd-client-2.11.0-3.el10
• sssd-common-2.11.0-3.el10
• sssd-common-pac-2.11.0-3.el10
• sssd-ipa-2.11.0-3.el10
• sssd-krb5-2.11.0-3.el10
• sssd-krb5-common-2.11.0-3.el10
• sssd-ldap-2.11.0-3.el10
• sssd-nfs-idmap-2.11.0-3.el10
• sssd-proxy-2.11.0-3.el10
• stalld-1.19.8-2.el10
• strace-6.12-1.el10
• subscription-manager-1.30.7-1.el10
• subscription-manager-rhsm-certificates-20220623-6.el10
• sudo-1.9.15-9.p5.el10
• sudo-python-plugin-1.9.15-9.p5.el10
• systemd-257-11.el10
• systemd-journal-remote-257-11.el10
• systemd-libs-257-11.el10
• systemd-pam-257-11.el10
• systemd-udev-257-11.el10
• tar-2:1.35-7.el10
• tiwilink-firmware-20250708-18.el10
• tmux-3.3a-13.20230918gitb202a2f.el10
• toolbox-0.1.2-1.el10
• tpm2-tools-5.7-4.el10
• tpm2-tss-4.1.3-5.el10
• tpm2-tss-fapi-4.1.3-5.el10
• tzdata-2025b-1.el10
• unbound-anchor-1.20.0-10.el10
• unbound-libs-1.20.0-10.el10
• userspace-rcu-0.14.0-7.el10
• util-linux-2.40.2-10.el10
• util-linux-core-2.40.2-10.el10
• vim-data-2:9.1.083-5.el10
• vim-minimal-2:9.1.083-5.el10
• virt-what-1.27-3.el10
• which-2.21-44.el10
• xfsprogs-6.11.0-2.el10
• xkeyboard-config-2.41-3.el10
• xmlsec1-1:1.2.39-3.el10
• xmlsec1-openssl-1:1.2.39-3.el10
• xz-1:5.6.2-4.el10
• xz-libs-1:5.6.2-4.el10
• zlib-ng-compat-2.2.3-2.el10
• zram-generator-1.1.2-14.el10
• zstd-1.5.5-9.el10

Extensions

Full list (48 packages)

• NetworkManager-libreswan-1.2.24-2.el10.x86_64
• bison-3.8.2-9.el10.x86_64
• cmake-filesystem-3.30.5-3.el10.x86_64
• cpp-14.3.1-2.1.el10.x86_64
• elfutils-libelf-devel-0.193-1.el10.x86_64
• flex-2.6.4-19.el10.x86_64
• gcc-14.3.1-2.1.el10.x86_64
• glibc-devel-2.39-38.el10.x86_64
• kernel-6.12.0-105.el10.x86_64
• kernel-core-6.12.0-105.el10.x86_64
• kernel-devel-6.12.0-105.el10.x86_64
• kernel-headers-6.12.0-105.el10.x86_64
• kernel-modules-6.12.0-105.el10.x86_64
• kernel-modules-extra-6.12.0-105.el10.x86_64
• kernel-rt-core-6.12.0-105.el10.x86_64
• kernel-rt-devel-6.12.0-105.el10.x86_64
• kernel-rt-modules-6.12.0-105.el10.x86_64
• kernel-rt-modules-core-6.12.0-105.el10.x86_64
• kernel-rt-modules-extra-6.12.0-105.el10.x86_64
• krb5-pkinit-1.21.3-8.el10.x86_64
• krb5-workstation-1.21.3-8.el10.x86_64
• ldns-1.8.3-18.el10.x86_64
• libkadm5-1.21.3-8.el10.x86_64
• libmpc-1.3.1-7.el10.x86_64
• libqb-2.0.8-6.el10.x86_64
• libreswan-5.3-1.el10.x86_64
• libxcrypt-devel-4.4.36-10.el10.x86_64
• libzstd-devel-1.5.5-9.el10.x86_64
• lm_sensors-libs-3.6.0-20.el10.x86_64
• m4-1.4.19-11.el10.x86_64
• make-1:4.4.1-9.el10.x86_64
• nspr-4.36.0-1.el10.x86_64
• nss-3.112.0-1.el10.x86_64
• nss-softokn-3.112.0-1.el10.x86_64
• nss-softokn-freebl-3.112.0-1.el10.x86_64
• nss-sysinit-3.112.0-1.el10.x86_64
• nss-tools-3.112.0-1.el10.x86_64
• nss-util-3.112.0-1.el10.x86_64
• openssl-devel-1:3.5.0-8.el10.x86_64
• openvswitch3.5-ipsec-3.5.0-6.el10s.x86_64
• pcp-conf-6.3.7-5.el10.x86_64
• pcp-libs-6.3.7-5.el10.x86_64
• protobuf-3.19.6-11.el10.x86_64
• python3-openvswitch3.5-3.5.0-6.el10s.x86_64
• sysstat-12.7.6-2.el10.x86_64
• usbguard-1.1.3-6.el10.x86_64
• usbguard-selinux-1.1.3-6.el10.noarch
• zlib-ng-compat-devel-2.2.3-2.el10.x86_64

CentOS Stream CoreOS base layer: 10.0.20250715-0