# 4.21.21

Created: 2026-06-18 13:15:16 +0000 UTC

Image Digest: `sha256:11de57ab23578da11ece5d9dc954c7c647890f607beb9e4c9bb00bf86d2e363f`

Promoted from quay.io/openshift-release-dev/ocp-release-nightly@sha256:53552b5dff49705da827cefee8947bfd381b53a998b1152ebd9327b7856a51c1


## Changes from 4.21.20

### Components

* Kubectl 1.34.1
* Kubernetes 1.34.8
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260521-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| GatewayAPIWithoutOLM <br/> (0 tests)| Disabled| Disabled| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled<br/>(Changed)| Enabled<br/>(Changed) |


### Rebuilt images without code change

* [agent-installer-api-server](https://github.com/openshift/assisted-service) git [f32dfdad](https://github.com/openshift/assisted-service/commit/f32dfdad38c833c22168710bf7814dc7e8cb4c2f) `sha256:925eb26c7a8badf5514652b73a8ab8ec8f09e183a783b09f904d89b820ead835`
* [agent-installer-ui](https://github.com/openshift-assisted/assisted-installer-ui) git [0b264c7f](https://github.com/openshift-assisted/assisted-installer-ui/commit/0b264c7f6c227a2ea4d1392879bce555d087dac0) `sha256:83824d73df7158e723b51a952821330d98b5c3510dbef760ad1c5fc2f3b29fa3`
* [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [dc0bd090](https://github.com/openshift/agent-installer-utils/commit/dc0bd0906fc9868a65cc9488a7dbdd0f35ca4a23) `sha256:29a22a7cc309f3edd91dd3bf65ff7fa3376951484175affc805f3d89859c0088`
* [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [45061e97](https://github.com/openshift/azure-file-csi-driver/commit/45061e97a5e2b20b01cd55fee97e5dac43fd79e4) `sha256:5da788fada2dd262923584ba23b1e0151be15be754bb16cc94e7716cfef35917`
* [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [898663be](https://github.com/openshift/cluster-node-tuning-operator/commit/898663be14bcd0bc62287636409e19c4048a01cd) `sha256:806f59bfd2bd2a16783e8a0d0c0fb781f19d26083dc8846fd9b05064bd9f8ecb`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:948bf141c1ba39cbb2c8d867c4ff18c9d91717d790deac54233b5abd57a17c4a`
* [ironic](https://github.com/openshift/ironic-image) git [438aadfd](https://github.com/openshift/ironic-image/commit/438aadfd7cae61a6c21b3c07aa8bfa55194834a3) `sha256:84f5e1c0f0a63293c2be6dd8a051b950d31fdbe357306f45592792866786bde6`
* [ironic-agent](https://github.com/openshift/ironic-agent-image) git [ff276c00](https://github.com/openshift/ironic-agent-image/commit/ff276c00e345b9cb9298ce9dbdd7f19a8b14dbce) `sha256:be7ddf59ab88b0ddbcf1b883f3552206f575f617d9dc7f275865eca430eb420b`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [707c2262](https://github.com/openshift/ironic-rhcos-downloader/commit/707c226243ac401f2994952fe0e55823511111b0) `sha256:28595e93e102a4a8ce9ee6f78640dd8dad6015e73c9b3f894d70c6cab9d55446`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [7d29b155](https://github.com/openshift/machine-os-images/commit/7d29b155d3374427a69fa2ebfa4884d55ff76e0f) `sha256:a6a9e2319f588009aa26f3c16f4bd46844148716a523d02dab20561dd3bd7dff`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:693ed715688e95567326feaeb17877a3123f18fb428dfead808e77a75252fcbd`
* [rhel-coreos](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:678fb3e62266fc6037ee26f5d09e558faa2de33738d8b97db4b1b55e74fab5c8`
* [rhel-coreos-10](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:1e1097f80c9bf4ba2236756fd543296743db4ea9dbb859d7a231cf9f1b812bff`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:5547c5785a0f90d30ce2482c4cf7304183c7a9ab21c401dd38d6984aa1b09d26`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:edfefaf11ea6e62525074f8fe1b33957c9c231dc88248b91caad715059bb6087`
* [tools](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:4b4a9b9100c67d72d5bc52fa04af46e5d6ef8383287874ff94a2af08944d5dc3`


### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/1d5163811da9ec9eaeea69c252c9495889f624a9)

* [OCPBUGS-85041](https://issues.redhat.com/browse/OCPBUGS-85041): add --copy-network when manual network config is detected [#1446](https://github.com/openshift/assisted-installer-agent/pull/1446)
* [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e57138265957c81b33d3ac13078d35f6ca07069d...1d5163811da9ec9eaeea69c252c9495889f624a9)


### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/3f37185a7aca5332edd421081fbea98af8b1a527)

* [OCPBUGS-81986](https://issues.redhat.com/browse/OCPBUGS-81986): Bump go-jose/v4 to 4.1.4 [#10598](https://github.com/openshift/installer/pull/10598)
* [Full changelog](https://github.com/openshift/installer/compare/00ea78b6eb2bb53dd279bcbe7723ff84767685d5...3f37185a7aca5332edd421081fbea98af8b1a527)


### [cluster-config-api](https://github.com/openshift/api/tree/253fff21f708fa7efd5ee65a4c30d6bde1e61cc8)

* [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297): Promote GatewayAPIWithoutOLM feature gate to TechPreview [#2873](https://github.com/openshift/api/pull/2873)
* [Full changelog](https://github.com/openshift/api/compare/1d79f30d4668393dc34e9b423ec6904645503c58...253fff21f708fa7efd5ee65a4c30d6bde1e61cc8)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/356e3777400d549d9b3194c74c716eb2290baefc)

* [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297): Replace OLM-based Istio install with Sail Library [#1442](https://github.com/openshift/cluster-ingress-operator/pull/1442)
* [OCPBUGS-86718](https://issues.redhat.com/browse/OCPBUGS-86718): Add configuration override for X-SSL strip [#1471](https://github.com/openshift/cluster-ingress-operator/pull/1471)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/f7a3395618f0925fbe626b18cc8173d19ab30dac...356e3777400d549d9b3194c74c716eb2290baefc)


### [console](https://github.com/openshift/console/tree/c09a410a1301c74a489d3771df7174e5ea6c734f)

* [OCPBUGS-88358](https://issues.redhat.com/browse/OCPBUGS-88358): Allow VolumeSnapshot restore when parent PVC is deleted [#16602](https://github.com/openshift/console/pull/16602)
* [Full changelog](https://github.com/openshift/console/compare/aa0cc6404fb385d57ad596e7f01f9a40472c3134...c09a410a1301c74a489d3771df7174e5ea6c734f)


### [haproxy-router](https://github.com/openshift/router/tree/dc4c01d494f572773a05e82bffd19c2cdaf8dce9)

* [OCPBUGS-86718](https://issues.redhat.com/browse/OCPBUGS-86718): Strip X-SSL-* headers for plain HTTP [#795](https://github.com/openshift/router/pull/795)
* [Full changelog](https://github.com/openshift/router/compare/f4c2ba80abb1fb3694a6b2ae0be2e5c898572632...dc4c01d494f572773a05e82bffd19c2cdaf8dce9)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/59524130bbc7ffc63b1c2f7dbd1cd24882e447d3)

* [OCPBUGS-88334](https://issues.redhat.com/browse/OCPBUGS-88334): Skip chrony-wait on first node join [#6178](https://github.com/openshift/machine-config-operator/pull/6178)
* [OCPBUGS-88335](https://issues.redhat.com/browse/OCPBUGS-88335): daemon: don't pull/extract extensions for all OS updates [#6179](https://github.com/openshift/machine-config-operator/pull/6179)
* [OCPBUGS-86998](https://issues.redhat.com/browse/OCPBUGS-86998): configure-ovs: copy lldp mode to br-ex port [#6134](https://github.com/openshift/machine-config-operator/pull/6134)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/507538ada4b9261a9260aef93be7518993dfdcf1...59524130bbc7ffc63b1c2f7dbd1cd24882e447d3)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/f47b7a53457d81d4ecf7e862819454054bb4216d)

* [OCPBUGS-88396](https://issues.redhat.com/browse/OCPBUGS-88396): CVE-2026-44487 bump axios to 1.16.0 [#999](https://github.com/openshift/monitoring-plugin/pull/999)
* [OCPBUGS-84290](https://issues.redhat.com/browse/OCPBUGS-84290): bump follow-redirects to 1.16.0 [#987](https://github.com/openshift/monitoring-plugin/pull/987)
* [OCPBUGS-84828](https://issues.redhat.com/browse/OCPBUGS-84828), [OCPBUGS-84991](https://issues.redhat.com/browse/OCPBUGS-84991), [OCPBUGS-85007](https://issues.redhat.com/browse/OCPBUGS-85007), [OCPBUGS-85037](https://issues.redhat.com/browse/OCPBUGS-85037): Update Axios to v1.15.2 [#982](https://github.com/openshift/monitoring-plugin/pull/982)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/462c78890ffb636e05d91d41ca718bb3c81da4cf...f47b7a53457d81d4ecf7e862819454054bb4216d)


### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/76483af58590e3e73cc713a477b506ff404b604b)

* [OCPBUGS-88313](https://issues.redhat.com/browse/OCPBUGS-88313): Trim subnet input in UDN creation form [#430](https://github.com/openshift/networking-console-plugin/pull/430)
* [Full changelog](https://github.com/openshift/networking-console-plugin/compare/268037d76fd97d29f39eae2f25f0a2b2910cb30e...76483af58590e3e73cc713a477b506ff404b604b)


### [tests](https://github.com/openshift/origin/tree/9a35db21312438c6097d6bb8110e077cc159d629)

* [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297), [OCPBUGS-88320](https://issues.redhat.com/browse/OCPBUGS-88320), [OCPBUGS-88322](https://issues.redhat.com/browse/OCPBUGS-88322), [OCPBUGS-88324](https://issues.redhat.com/browse/OCPBUGS-88324): Backport noOLM Gateway API test coverage and upgrade tests [#31232](https://github.com/openshift/origin/pull/31232)
* [OCPBUGS-88328](https://issues.redhat.com/browse/OCPBUGS-88328): Fix Pod.Create() to use --local flag for template proc… [#31269](https://github.com/openshift/origin/pull/31269)
* [Full changelog](https://github.com/openshift/origin/compare/4cc131780d8ec7338e12105477a46b137b670bcb...9a35db21312438c6097d6bb8110e077cc159d629)


### [vsphere-problem-detector](https://github.com/openshift/vsphere-problem-detector/tree/e4130b0a049c0ced1600ff7c296bf505e5446ddb)

* [OCPBUGS-87097](https://issues.redhat.com/browse/OCPBUGS-87097): Fixed compute cluster permission logic for single fd with read-only custom resourcepool [#222](https://github.com/openshift/vsphere-problem-detector/pull/222)
* [Full changelog](https://github.com/openshift/vsphere-problem-detector/compare/a35d685a88aca94ed1d805c1079ebf14dfb81c9d...e4130b0a049c0ced1600ff7c296bf505e5446ddb)