4.19.0-ec.5

PullSpec:

quay.io/openshift-release-dev/ocp-release:4.19.0-ec.5-multi

Team Approvals:

Tests:

Informing jobs
- e2e-aws-ovn-multi-x-ax Succeeded periodic-ci-openshift-multiarch-master-nightly-4.19-ocp-e2e-aws-ovn-multi-x-ax
- e2e-aws-ovn-multi-x-x Succeeded (1 retries) periodic-ci-openshift-multiarch-master-nightly-4.19-ocp-e2e-aws-ovn-multi-x-x

Upgrades from:

Untested upgrades: 4.18.10, 4.18.6, 4.18.7, 4.18.8, 4.18.9, 4.19.0-ec.0, 4.19.0-ec.1, 4.19.0-ec.2, 4.19.0-ec.3, 4.19.0-ec.4

Changes from 4.19.0-ec.4

Created: 2025-04-22 19:51:56 +0000 UTC

Image Digest: sha256:bc5134008d6329563abe65f955a31a4cf1023ad4d6619a1468e913b501b45a21

Release 4.19.0-ec.5 was created from quay.io/openshift-release-dev/ocp-release-nightly@sha256:b952d24298b404b569b53ab5bf526d08e01a5b6c577fb1d5ce87020c80ae59e0

Components

Kubectl 1.32.1
Kubernetes 1.32.3
Kubernetes Tests upgraded from 1.32.2 to 1.32.3
Red Hat Enterprise Linux CoreOS upgraded from 419.96.202503251418-0 to 419.96.202504111813-0 (diff)

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
VSphereControlPlaneMachineSet (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereStaticIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ClusterAPIInstallIBMCloud (0 tests)	Disabled	Disabled	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)	Enabled (Changed)
NewOLMPreflightPermissionChecks (0 tests)				Enabled (New)		Enabled (New)

Rebuilt images without code change

apiserver-network-proxy git 0e116160 sha256:695615a09774038a5da8fffd76e64e0f4e42643bc3dfaa50eb460fb44f7ceb0f
aws-cloud-controller-manager git 425c1c5b sha256:9a9f7c07451f762155e244880fc5eed664905e8269bd2d41f04192e793594608
aws-kms-encryption-provider git 088dcaf7 sha256:9cf096f63319829b5996aa7f0491937c7782e9ee4b34ce5422d568130e610c02
aws-pod-identity-webhook git b0a16d53 sha256:dcdd4f01966e6473306cd5a395387a6fd841d8feacc55c78fc35f3d035ea4723
azure-disk-csi-driver git 967f264f sha256:255adc19b6391d62b893c67f694d02969a9eeee6534894114b5042bd266a0765
azure-service-operator git 11ced00e sha256:87de47964f5f73b0e95e07afdec233c42b4e1af2f456e102e0a9dcfb2639157f
baremetal-runtimecfg git 22c15212 sha256:3def19acdac460281673bcd1e11d57c47fd8a410ae064309000015b01b712eed
cluster-autoscaler-operator git 227f7537 sha256:43cb90ebef008246d842bdbd0fee3a13542bdc09fc84a68726b9a4ef5bb163ad
cluster-bootstrap git 8fde9c52 sha256:02cd4fbd4da4c3e07162a5c3bc0bacf97e0f8615cd2d7c3890e89350804f9a7f
cluster-capi-controllers git 7e2de8d3 sha256:c8c2038c5defb3b5d28f6f8e4294af7dea4330d4b7270339e9ac110737fce7fb
cluster-cloud-controller-manager-operator git 09f143bf sha256:9dbe0e4287d9afcd0da59aa022235bd88e073fee8174cf982b6530d2b7e63a21
cluster-dns-operator git 65981306 sha256:9a812135359bf27bb8e67d95d0e1d8c816af80e6fc5a806767ccab8ea5002f38
cluster-kube-cluster-api-operator git 3ec30377 sha256:3bb5f822f1c4c08d72999384ad767c08fd3d03e1f2f62b7f52c1b0df88826d83
cluster-kube-controller-manager-operator git 75f30cdb sha256:bea96ad959a644d50a15d13ce898b83c18c3d7789ce88857204f2bc02d625e67
cluster-kube-scheduler-operator git 4210c04a sha256:190f9c9128675da34af40e3c51d79893d87526a8357385162ce5ac1dac364de0
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:bc4ecf31a2b1233395ef706ca6079d7f50dd4c3ea6d48dfd288fe8817484ee82
cluster-machine-approver git a52da47f sha256:47a2384552fe28ee5ce28ef31c48bef3030f104b8d2b912947196234c937b7d6
cluster-openshift-apiserver-operator git 5f66a3e1 sha256:b15c3ffcd58fd0063183841d9131e99dc7e79a6b5c9c9f6e540088e8228ea30e
cluster-openshift-controller-manager-operator git 0ab30996 sha256:c0ea73908853662031e44554967bf13bb33dc59cfb2987245c7b99647e3ffe96
cluster-policy-controller git 74852478 sha256:dcef0e90ce0e94555a056457a5cba6e5ad2167e40ad755b68eeea639903cb011
cluster-update-keys git c1c56b4c sha256:e59bc68b0c553b71d88ec2aa7819289742693f7ff77db798df931cb3a8dc8fa4
configmap-reloader git 9bfbde86 sha256:69ce5f5aa6f87785f58e482e0e9444e16b0cd31bc6710c55dfa2ccad72377d22
coredns git 7a1451db sha256:bf067ade204548f191e9bc4f224d29f9e6970c1f5c07c7a454050639ed5d286e
csi-driver-nfs git c0632514 sha256:486db8257cfea0ae6a8520890786d2523b395c99baf04e170fd3b1d9eca47226
csi-external-resizer git cca04e39 sha256:5e746dec1b47add506022908c47edbe0566a9017d0063b7054a8d2042eb0f9de
driver-toolkit git 686fdac5 sha256:e3389b3121de54a360420c4df6368f6a54cebcf485210918d89c253953de32ff
egress-router-cni git 85353bb9 sha256:fa985fb355ec091f3887fe571e34566d220a5d3a0eecf601699bb71e3f047c8c
gcp-cloud-controller-manager git d8d3aeba sha256:b11f9a69b2c731e3279a72c7f1d54d3e8ce25b220e99d3cb0a1de037953d8a66
gcp-machine-controllers git bbe62087 sha256:ef9450a88b132eec80ade0380ab7579f0624ce5357b87f72303a184d0f426a39
gcp-pd-csi-driver git 0fc515f4 sha256:b62679338832ed343462b9ced51981514dc2ea90717c252bfa40576b50af831a
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:2ebf44d3e03ad98b6c91f1a4f63dd5192a13d5625ff138bc7858f8def9e81b74
haproxy-router git b41f9d05 sha256:cb89f4fbc58164a3b33cd58a3b9fd2aa27419c90dadc25c358e938e345b0c414
ibm-cloud-controller-manager git 7422aab2 sha256:116261f15940fa830aa3817250f2f15922a82d8f4fcd00a24ac4c1cd72c74358
ibmcloud-cluster-api-controllers git 0453d282 sha256:3e3689bd5585434123208c1b8ad40e0b1b99b32b177ca7d6134de5af6b345072
ibmcloud-machine-controllers git 989bd874 sha256:22607bf9bdc354320d683cd2da6ccb11bfc898ae6b695cd35944d001c47abf45
insights-runtime-exporter git 3342e1e9 sha256:f65dc540aa898e54bdcfea80fff8cffa4db25bda3dc6566b413469b114e97c3b
insights-runtime-extractor git 3342e1e9 sha256:2a042fb20ac5e080975e4508fa66811b23422d5794d66a0a2db33dfff4d1d07b
ironic-machine-os-downloader git dbe19772 sha256:fc19ef13474acf3f3a67999de3ea9bf58a064beb2521eceb28c29089c153f7c5
ironic-static-ip-manager git fcd9564e sha256:4726ba6f5137a6af85344f6fa2daaaa56e87c4481abdf4b716680f90f8d54ada
kube-metrics-server git 037a0e7e sha256:083ff8e5a48870a640978af3314fd45103b30fb2a02a84f067ea7d0ac5af58f9
kube-rbac-proxy git 59127756 sha256:c090d04a4f61a455a6e29b361ab6f9b02a9fef23ae93dcfcbca09b7fb180cd66
kube-state-metrics git c3da3b5f sha256:f539c09150eb62893d517bd3897a4245ff5055270105b8e9462ea8a708211d44
kube-storage-version-migrator git 4c521b09 sha256:b5d45f3c6bcb9211958d932517fbae62388a43e9b504a5d8a1bcd22943b211ed
kubevirt-cloud-controller-manager git 3f4542ec sha256:a59653583fcee5d9886b62ce009383da9dea9c38ffcec481b728ae9ea8d4c88f
libvirt-machine-controllers git a336f0b5 sha256:1ee1626b2762586474a25cdd4cc08850aa8342bb3cd272bf9d44bba54f96a43b
machine-image-customization-controller git d7f86005 sha256:ef8867b8ff9b77fde2a5ab238ce68c746e04f36c135808b3838e8694365f6a8d
machine-os-images git c4497f31 sha256:36b4e4657bfeeedc5de0016d154110834f60d3ed0699e9c11e88d3363baf7e40
metallb-frr git c4cf8929 sha256:ba07f0892d0e1818e3c6ee043b98d3ec240afb9b5700a4c398703e85ff539a10
multus-admission-controller git 0b1b812e sha256:f2875f062198a093444f1c0761858049f37d55be1f1f8c1343049aed91675d58
multus-cni git 722e5aa0 sha256:5a6a3f31ddf772ecd9966b2e76d5428d48f0a4ec72f9944d4dabf464bded7591
multus-cni-microshift git 722e5aa0 sha256:8cc0fda08c2bc67829f64ee78d4fa3f3772bc181577a100aa22315b09998cfd0
multus-networkpolicy git 6fffe5d7 sha256:779544ddb68d88b059a59dc718abcb34143293a29ac753240be98f4a74119e31
multus-route-override-cni git 391c1b03 sha256:5b174660c208edf59e7059c2b4ad19488d187c553e37a0f0d3d3a96bed771b1a
must-gather git 33763a32 sha256:87ae42c491696bf4734bc55d0978eea90e00c946b5f5c4d8ec5e2d5697fcb7fa
network-interface-bond-cni git f575d888 sha256:1bff60a4d7ece80320a92cf57d1c816b09a09d0359601f9863c2f304bc4874e7
network-metrics-daemon git 5ec8c6bd sha256:70373ab3e308a9b73d15d0cab92bdf193bd13eab3c3450ff08dbbc3d619c863f
nutanix-cloud-controller-manager git db1f264a sha256:e9e46a84b657b05fa240b5d4ef80b46d96b9b18c9036520cfb3fdcabd872d2df
oauth-apiserver git 75914068 sha256:ddcc9e784cca94d49fc7527ead8231b037fe1e896c2a6409f2c1e34396db6ffa
oauth-proxy git 3d12ccbe sha256:f790b279456703176a4b81c6e19234897178397b7709ebacf7132a5b7df3cea4
oauth-server git 7c92a059 sha256:c2b7bb3532ec91380794bd5d4f0866ba46bc0e40bcf5926a080aba366b6f951c
openshift-apiserver git 85f6eb27 sha256:013c2dce449bbde8bd176d128c408a1917a5847d015871f05a21ed0669c16f92
openshift-state-metrics git 3106bcc3 sha256:b32fdbc4fd37b39bc0218b46ced0f17556f452603516acaadb86c3bb1b312afd
openstack-cluster-api-controllers git cc76099b sha256:b09d5c5dc7f89772e3b2c3039c907f9c25d71bd88567503b2e292681f21a67ce
openstack-resource-controller git d00bab2b sha256:ba46d087ac1aa1379d5d2fc896799a1400ebe9a46f6c5038a853d817e6423b17
operator-framework-tools git 84b340e8 sha256:9890807b320a0723af87a7bc736a62390e564144f266ff98f861c0b0e70f6073
operator-lifecycle-manager git 84b340e8 sha256:4dd055e376569a3df400616836aa3a017029ffa446dbca6e492f1d8acfa224f6
operator-registry git 84b340e8 sha256:c2aa9cd2ed527656f66daa792e1006c0f653d3e9101fa69950be9c8e3beee5a3
ovirt-csi-driver git 1db726a9 sha256:a46d5c297dc6b20fc62a4ae9d66f5c9865a1591ac79b0bb0befa8c364d8cab53
powervs-block-csi-driver git f681413d sha256:f6775c1cde01ad8378dd32c8ebe0cab25954c3fd206649bfda475123a96ab2cc
powervs-cloud-controller-manager git 7c51cd2b sha256:c929d9a7a4a96d74315d4fa99e574fd8d7f0efba211456cc3f9c271b898e9102
prom-label-proxy git 7184f58d sha256:14e8196db21a475c2cfec4e304adbccc1cca641c9c6f64e353cc3bedcd0781ed
prometheus-alertmanager git 43131005 sha256:8bbb63c7c7b7df4afa45e0c3d3ff0ca191d0af310699e27714af1898430f3a2e
prometheus-config-reloader git 3779c1d5 sha256:8c21c5b249cf2bdb2923b41f28262af0bfcfd745d7d3de37048d95519fc4141a
prometheus-node-exporter git 57a4e998 sha256:e8e6e78e029827ed9c371710e99ee9fd326980882c0ce4a968e415ed0330b52e
prometheus-operator git 3779c1d5 sha256:50a0bc232d27637b26d28e1270e5b813d9f2d1fdcd2c802cbd826fc92a4d11ed
prometheus-operator-admission-webhook git 3779c1d5 sha256:7b1bec942610371b39cf9d088d103a7fd8c8172a98686423bcf25995e1beb797
rhel-coreos sha256:64f7917d1725f80a13106a4dccf6ef0996bee19c513e3f2ac3799d02d9537714
rhel-coreos-extensions sha256:7bef1dce8ec09f43154f01091f941f38350ab08f2aee26e7957492a0c391b66f
route-controller-manager git bc97534a sha256:bbe0296df91b607daae972a747e10eef26ceb4827a2e7a57496ec1c2b3620030
thanos git 95f7bb21 sha256:55f0c508b5c4aa0e81094d3e2529f688fb795647ba8c886fa0838cd8f8e1a686
vsphere-cloud-controller-manager git 2c21c8ce sha256:b7d079f1d00fa579eea8fe0096fc7a53b87db191b9c99b2f0e804ef2744e7dc2
vsphere-cluster-api-controllers git 8c61ba3d sha256:6386f04d004169218aa21b624c66cfac726c1ee85f50c11615392a2d611658a3
vsphere-csi-driver git 401a6dca sha256:069920d0cfecd17309f4f732f0a02c79f2596f3bb46e9e8f18d7fc34fd5e0113
vsphere-csi-driver-syncer git 401a6dca sha256:34f26bf0168e8a254a796fcf531d51f40e323682a061c23732bb85a8f8d4a182
vsphere-problem-detector git 3bfca236 sha256:7e828f3c797b13720454f7724b84b962f326d656aef2a397565b510349fbdbc3

agent-installer-api-server

MGMT-20324: Fix day2 add hosts with P/Z CPU architectures #7527
MGMT-20207: avoid adding system CA bundle to AdditionalTrustBundle #7448
MGMT-20009: Change OCP 4.19 to the default version #7506
NO-ISSUE: Change node-maintenance operator namespace to avoid conflict with node-healthcheck operator #7491
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update Konflux references (#1095) #1095
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.19 (#957) #957
NO-ISSUE: Update Konflux references (#1090) #1090
MGMT-20153: Fix ostree race between node-image-pull and installing to rootfs (#1076) #1076
OCPBUGS-53720: Bump jwt to 4.5.2 (#1080) #1080
NO-ISSUE: Update Konflux references (#1082) #1082
MGMT-19421: remove all references of HighAvailabilityMode and the command line argument –high-availability-mode (#1081) #1081
Full changelog

agent-installer-node-agent

OCPBUGS-53712: golang-jwt/jwt/v4 to 4.5.2 (#956) #956
NO-ISSUE: Update Konflux references (#959) #959
OCPBUGS-52994: Update to latest ghw version (#936) #936
MGMT-20227: Skip Motherboard serial if set to “-” (#955) #955
MGMT-20149: Add required sast tasks for Konflux (#942) #942
Full changelog

agent-installer-utils

NO-ISSUE: Remove extra doneFunc() call #73
AGENT-1188: Add MBR to El Torito ISO to support USB boot alongside VM #72
NO-ISSUE: ISOBuilder: Use libpod registry #71
AGENT-1114: Check connectivity to rendezvous node and improvements #64
NO-ISSUE: ISOBuilder: Appliance tweaks #70
AGENT-1138: Skip release image checks for interactive disconnected #52
NO-ISSUE: ISOBuilder: idempotency and efficiency #66
NO-ISSUE: ISOBuilder: Support –dir param #68
NO-ISSUE: ISOBuilder: Update operators list #67
AGENT-1155: Support release image url with sha digst #65
NO-ISSUE: ISOBuilder: Make sudo optional #63
NO-ISSUE: ISOBuilder: Restructured to resolve right image ref #62
AGENT-1150: Move setup-agent-tui.sh into ignition file #59
NO-ISSUE: iso_builder: add ssh key file flag #53
AGENT-1151: Use internal appliance registry #58
NO-ISSUE: iso_builder: Remove support for rendezvousIP #61
NO-ISSUE: iso_builder: Revert “Merge pull request #54 from pawanpinjarkar/run-appliance-with… #60
Full changelog

aws-cluster-api-controllers

OCPBUGS-54567: UPSTREAM: 5374: add marketType field validation #548
ART-12521: update go mod dependency for konflux #545
OCPBUGS-53728: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.2 (79ae3d0) into master #544
OCPCLOUD-2855: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.8.1 (49c75ac) into master #542
Full changelog

aws-ebs-csi-driver

STOR-2253: Rebase to upstream v1.39.0 for OCP 4.19 #283
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

OSASINFRA-3652: openstack-cinder: Use new –with-topology flag #345
STOR-2126: Enable readOnlyFileSystem #370
OCPBUGS-54447: Enable required driver services #369
OCPBUGS-54180: Disable remove-not-ready-taint for azure disk csi driver #371
OCPBUGS-54230: Bump library-go #372
Full changelog

aws-machine-controllers

OCPBUGS-52454: Add spotMarketRequest on marketType spot #126
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-51090: Fix panic for GetZoneByNodeName on Azure Stack #141
Full changelog

azure-cluster-api-controllers

ART-12521: update go mod dependency for konflux #334
Full changelog

azure-file-csi-driver

OCPBUGS-52654: Rebase to v1.32.0 #90
Full changelog

azure-kms-encryption-provider

OCPBUGS-53496: bump golang-jwt v4 #10
Full changelog

azure-machine-controllers

OCPBUGS-31515: Re-reconcile machine on NIC provisioning failure #132
Full changelog

azure-workload-identity-webhook

OCPBUGS-53800: github.com/golang-jwt/jwt/v4 v4.5.2 #30
Full changelog

baremetal-cluster-api-controllers

Find Nodes by hostname #38
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

CORS-3278: IBMCloud: Remove IBM Cloud TF provider #9649
OCPBUGS-54606: convert OVNKubernetes networkType to correct format #9653
CORS-3936: Add support for public-only networking #9544
CORS-3278: IBMCloud: Add DestroyBootstrap for leftover CAPI resources #9636
CORS-3854: Enable option to set boot diagnostics #9125
CORS-3278: Switch IBMCloud to CAPI #9652
CORS-3867: fix CRD descriptor to mention required BootstrapNode role #9655
CORS-3886: azure: Set use managed identity to false #9648
OCPBUGS-54319: oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x #9608
AGENT-1159: agent docs update #9627
OCPBUGS-53439: fix inconsistent subnet role name for bootstrap node #9650
NO-JIRA: fix the platform test assertions to check expected err message #9639
OCPBUGS-43990: Filter out excess CA certs when adding node #9641
NO-JIRA: add Roshan-R to CoreOS approvers and reviewers #9642
OCPEDGE-1506: Add Platform based validation to fencing credentials #9624
CORS-3908: Update gcp cloud provider config map to include new endpoints #9600
SPLAT-2121: vsphere - if no host group found, append not found #9638
OCPBUGS-54541: Update RHCOS 4.19 bootimage metadata to 9.6.20250402-0 #9632
OCPBUGS-46601: IBM Cloud Bump IBM Cloud CAPI #9623
OCPBUGS-43724: Fix Load balancer IP setup #9144
OCPBUGS-54407: Use correct case in path error messages #9615
OCPBUGS-54232: Azure Move BYO VNET SG creation to InfraReady #9603
OCPEDGE-1701: fix: update tnf validation to account for tna install config #9629
OCPBUGS-52473: aarch64 kernel is no longer zipped #9617
NO-JIRA: Add jcapiitao to CoreOS approvers and reviewers #9631
OCPBUGS-53067: Updating the file names in generic.ins file for s390x ABI for pxe Artifacts #9586
NO-JIRA: OWNERS_ALIASES - Add user as coreos-approvers / coreos-reviewers #9628
CORS-3883: Remove user-assigned identity from ARM template #9625
OCPBUGS-53303: Revert: Power VS: Disallow platform.powervs.clusterOSImage in install-config #9577
OCPBUGS-42241: Update to cluster-api-provider-azure release-v1.17.5 #9596
OCPBUGS-53140: Validation for API and Ingress VIPs when using user-managed load balancer #9571
no-jira: Add Johan-Liebert1 to coreos-reviewers and coreos-approvers #9556
CORS-3923, CORS-3927: Support confidential cluster installation on SEV-SNP and TDX nodes on GCP #9395
AGENT-587: Support Nutanix in Agent-based Installer #9537
SPLAT-2000: Added vSphere provisioning mode support for data disks #9439
OCPEDGE-1496: [TNF] Collect pacemaker, pcsd, and corosync logs and journals in installer-masters-gather.sh #9546
OCPBUGS-52356: IBMCloud: Fix CAPI endpoint overrides #9540
OCPEDGE-1505: Enhance Platform none with Fencing Credentials #9521
OSASINFRA-3730: Add support for storing OpenStack CA bundles #9194
OCPBUGS-53258: IBMCloud: Bump TF provider for CIS fix #9589
NO-JIRA: update OWNER_ALIASES for azure and aws #9598
OCPBUGS-53106: Create ConfigMap to reference baremetal-installer image #9563
NO-JIRA: CVE-2025-22868 bump oauth2 pkg to v0.27.0 #9569
Full changelog

baremetal-machine-controllers

METAL-1300: Update CAPB to support disablePowerOff #235
NO-ISSUE: Update OWNERS #233
NO-ISSUE: Update BMO and MAO #232
Full changelog

baremetal-operator

OCPBUGS-54582: Sync apr 2 #410
Full changelog

cli, cli-artifacts, deployer, tools

COS-3023: Fixing rpmdiff permissions when running in container #2006
COS-3023: pkg/cli/admin/release/info: support generating RPM diffs #1966
NO-JIRA: adm release new: simplify writePayload #1997
NO-JIRA: adm release new: simplify no operator error condition #1999
Full changelog

cloud-credential-operator

OCPBUGS-53824: update github.com/golang-jwt/jwt #836
Full changelog

cloud-network-config-controller

CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #166
OSASINFRA-3755: Prefer CA cert from credentials secret #167
Full changelog

cluster-authentication-operator

OCPBUGS-48176: Avoid duplicate OAuth client creation #757
OCPEDGE-1510: feat: add minimum count for DualReplica #761
OCPEDGE-1610: bump(kube,library-go,ocp/api): #759
Full changelog

cluster-autoscaler

NO-JIRA: improve nodes listing in ClusterAPI provider #354
OCPBUGS-11115: refactor findScalableResourceProviderIDs #349
Full changelog

cluster-baremetal-operator

OCPBUGS-53330: Update BMO to latest #468
Full changelog

cluster-capi-operator

OCPCLOUD-2880: label selector and labels conversion, fixes to sync controllers and conversions #281
METAL-966: Add metal3 provider #175
OCPCLOUD-2895: Add AWS networkInterfaceType to conversion #280
OCPCLOUD-2712: Update comments based on Security Group Investigation #279
OCPCLOUD-2716: Handle Machine owner references translation between MAPI and CAPI #271
NO-JIRA: Bump github.com/golang-jwt/jwt to v5.2.2 #275
OCPCLOUD-2647: CAPI to MAPI Machine Synchronisation #265
NO-JIRA: Update version variable in generate-ocp-manifests hook script #277
Full changelog

cluster-config-api

TRT-2081: Revert #2261 “NE-2009: Enable GatewayAPI featuregate in Default featureset” #2277
Temporarily pin feature-gate-analyzer to 4.19 #2276
image/v1/types: improve documentation #2240
NE-2009: Enable GatewayAPI featuregate in Default featureset #2261
SPLAT-2078: Removed VSphereStaticIPs feature gate #2232
OPRUN-3780: Add feature flag for NewOLMPreflightPermissionCheck #2242
SPLAT-2079: Removed VSphereControlPlaneMachineSet feature gate #2236
MCO-1630: Generate v1 crds for PIS #2257
IBMCloud: Add IBM Cloud CAPI install TechPreview FG #2104
NO-ISSUE: tools: bump openshift controller-tools to latest commit #2260
NO ISSUE: Tombstone Spec.PinnedImageSets in MCN v1alpha1 API #2256
OCPNODE-2877: Remove support to configure cgroupsv1 in OCP #2181
Ignore partial manifests when running schemacheck #2251
MCO-1543: Update v1alpha1 MCN API #2201
Full changelog

cluster-config-operator

OCPBUGS-52744: Bump golang.org/x/crypto #433
Full changelog

cluster-control-plane-machine-set-operator

OAPE-163: Extend E2E tests for MachineNamePrefix when the field is reset #355
SPLAT-2079: Removed VSphereControlPlaneMachineset feature gate #354
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2126: Enable readOnlyFileSystem #229
STOR-1880: Role and ClusterRole with too wide permissions #235
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #234
Full changelog

cluster-etcd-operator

OCPBUGS-54222: increase etcdGRPCRequestsSlow duration #1402
OCPEDGE-1498: support updates to external etcd #1399
Full changelog

cluster-image-registry-operator

OSASINFRA-3747: Prefer CA cert from credentials secret #1190
OCPBUGS-45409: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.19 #1196
CNTRLPLANE-112: Authenticate to Azure only once in CPO #1194
Full changelog

cluster-ingress-operator

NE-1957: Add Gateway API DNS Feature e2e tests #1213
OCPBUGS-54650, OCPBUGS-54651, OCPBUGS-54652: desiredSubscription: Specify annotations and SCC #1214
NE-2009: Move VAP to Default featureset #1216
OCPBUGS-54568: desiredIstio: Specify priorityClassName #1211
OCPBUGS-53424: Wait for install plans to enter the “Requires Approval” phase before approving them #1203
NE-2008: Add GRPC conformance tests #1208
NE-1277: status: Add Gateway API objects to relatedObjects #933
NE-1994: Add E2E test for Istio manual deployment #1204
NE-1969: Add “v1” version to OpenShift GatewayClass controller name #1202
Full changelog

cluster-kube-apiserver-operator

Revert “OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects” #1830
OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects #1759
CNTRLPLANE-347: Issue short lived certificates if ShortCertRotation featuregate is enabled #1823
MON-4161: add cluster:controlplane_topology:sum recording rule #1829
MON-4160: operator: add topology metrics #1827
Full changelog

cluster-monitoring-operator

MON-4150: chore: update prometheus-operator go dep #2586
OCPBUGS-54516: provide context-rich and case-sensitive config validation #2584
MON-4149: chore: update library-go #2587
OCPBUGS-54223: Fix opentelemetry processor/receiver/exporter/extensions labels #2583
Full changelog

cluster-node-tuning-operator

Bump to k8s 1.32.3 (#1318) #1318
Unblock production image generation (#1319) #1319
OCPBUGS-54628: Add retry method if we hit jira rate limit (#1313) #1313
Ignore -server-ose repos in the CI (#1314) #1314
CNF-17417: Enhanced utility function for fetching container runtime (#1279) #1279
Obsolete pod label-based matching (#1304) #1304
Revert “e2e: skip RHEL-79032 jira issue in irqbalance (#1312)” (#1315) #1312
Remove pinning of all dependencies (#1309) #1309
e2e: arm: Add kernel page size e2e testing suite (#1307) #1307
e2e: skip RHEL-79032 jira issue in irqbalance (#1312) #1312
Full changelog

cluster-olm-operator

OCPBUGS-54877: Increase debug logging level for op-con/catd #114
OPRUN-3782: Watch for permissions preflight feature gate #113
OCPBUGS-54781: Revert #111 “OPRUN-3782: Watch for permissions preflight feature gate” #112
OPRUN-3782: Watch for permissions preflight feature gate #111
OCPBUGS-54179: Add openshift node selector annotation #109
Full changelog

cluster-samples-operator

OCPBUGS-54590: Samples Operator should sort failing image imports #627
OCPBUGS-54589: Adding filter to clusterOperatorInformerEventHandler #626
OCPBUGS-54591: only update LastTransitionTime if operator status change #625
OCPBUGS-54471: Periodic sync of supported OCP samples #622
OCPBUGS-54479: Periodic sync of OKD samples #621
OCPBUGS-54349: cluster-samples-operator - fix failing unit tests MacBook (ARM chip) #618
OCPBUGS-54216: Update the k8s API version #614
OCPBUGS-54347: add rhdmalone to owners #616
Full changelog

cluster-storage-operator

STOR-2078: Enable VolumeAttributesClass for GCP-PD #574
OSASINFRA-3731: openstack: Consume CA cert from CCO secret #557
STOR-2126: Enable readOnlyFileSystem #564
STOR-1878: Run operators without root user control #570
Full changelog

cluster-version-operator

OTA-1403: Create minimal openshift tests extension #1168
NO-JIRA: Add unit test for renderManifest #1173
Full changelog

console

OCPBUGS-54536: Use router link for OLM CSV empty state #14929
CONSOLE-4492: Use helpText for help text #14964
OCPBUGS-54878: Align left/right margins of add card items #14963
CONSOLE-4542: Convert dl, dd, dt to PF DescriptionList #14947
CONSOLE-4538: Add error reporting link to ErrorBoundary modal #14958
OCPEDGE-1614: hack: allow DualReplica in control plane topology validation #14934
OCPBUGS-36658: Fetching taskRuns in PLR details page using PLR UID also #14921
CONSOLE-4507: Clean up catalog view #14954
CONSOLE-4520: Further PatternFly 6 bug fixes and cleanup #14945
CONSOLE-4464: Update PatternFly to 6.2.0 #14953
OCPBUGS-49870: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14887
OCPBUGS-54733: fix bug where co-resource-icon–fixed-width can clip #14950
OCPBUGS-52486: Notification drawer should have keyboard navigation focus when expanded. #14889
OCPBUGS-54540: fix flaking update-modal test #14937
OCPBUGS-54684: Remove orphaned notification drawer CSS class #14948
OCPBUGS-54492: metadata.name field is missing in PDB example YAML #14946
CONSOLE-4538: Use PF component groups for Error states #14912
ODC-7720: Further Developer Catalog -> Software Catalog renaming #14911
CONSOLE-4540: add set as default sc action #14920
ODC-7778: Include Quick create in Admin perspective guided tour #14850
CONSOLE-4393, ODC-6775: @types/node pre-merge prep #14932
OCPBUGS-46526: Add BaseNode in topology folder into Dynamic Plugin SDK #14907
OCPBUGS-54472: fix position of OpenShift Lightspeed button #14923
OCPBUGS-54461: Add missing href props to masthead items #14922
OCPBUGS-53065: Fix regression where normal Pod terminals are unresponsive. #14927
OCPBUGS-54540: fix flaking update-modal test #14930
OCPBUGS-53167: Re-enable guided tour in admin perspective #14928
CONSOLE-4520: Further base token cleanup and fixes #14909
OCPBUGS-54265: Remove extra div in MultiTabListPage #14906
OCPBUGS-54477: Remove char limit for favourite names #14924
OCPBUGS-47723: always show ‘Plugin available’ button on CSV list no matter plugin enabled or not #14655
NO-JIRA: adding new reference plugin: kuadrant #14361
OCPBUGS-54485: Add dark theme feedback graphic #14925
CONSOLE-4484: Fix Skip to content regression #14918
OCPBUGS-54436: Warning: React.useMemo has a missing dependency #14913
OCPBUGS-54430: Fix shifting play/pause button when loading #14916
OCPBUGS-46404: i18n translations for Export as CSV button #14651
OCPBUGS-52479: Fix OLM e2e tests #14851
OCPBUGS-20230: Prevent yaml editor crash #14676
CONSOLE-4464, ODC-7756: Bump PF6 to latest prereleases #14783
CONSOLE-4501: Add unit test for Timestamp component #14799
CONSOLE-4521: Remove old polyfills #14880
OCPBUGS-52948: Multiple favorite icon on same page #14863
OCPBUGS-53065: Debug pod logs are not accessible when debugging a node via OpenShift Console #14898
CONSOLE-4462: Remove two more overrides #14891
OCPBUGS-53227: fix bug where /k8s/all-namespaces/volumesnapshots 404s #14901
ODC-7770: Remove perspective switcher if only one perspective is present #14762
OCPBUGS-52938: ‘Helm Chart Repository’ name is used in breadcrumb link, details page heading and action names #14890
Full changelog

console-operator

NETOBSERV-2023: Implement a quickstart for netobserv operator #955
CONSOLE-4481: Add additional CSP test #975
OCPBUGS-45514: Report email_domain to telemetry #971
CONSOLE-4481: Add junit generation for unit and e2e testing #974
ART-12521: update go mod dependency for konflux #973
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

OCPBUGS-53198: Upstream sync 01-04-2025 #180
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

ART-12521: update go mod dependency for konflux #320
Full changelog

csi-external-attacher

STOR-2251: Rebase external-attacher to v4.8.1 for OCP 4.19 #83
Full changelog

csi-external-provisioner

STOR-2251: Rebase external-provisioner to upstream v5.2.0 for OCP 4.19 #111
Full changelog

csi-external-snapshotter, csi-snapshot-controller

STOR-2251: Rebase external-snapshotter to v8.2.1 for OCP 4.19 #177
STOR-2281: Remove csi-snapshot-validation-webhook #175
Full changelog

csi-livenessprobe

STOR-2251: Rebase livenessprobe to v2.15.0 for OCP 4.19 #71
Full changelog

csi-node-driver-registrar

STOR-2251: Rebase node-driver-registrat to v2.13.0 for OCP 4.19 #78
Full changelog

docker-builder

OCPBUGS-45492: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.19 #467
Full changelog

docker-registry

IR-522: disable aws region check #425
Full changelog

etcd

ETCD-726: Rebase etcd 3.5.21 openshift 4.19 #324
Full changelog

gcp-cluster-api-controllers

ART-12521: update go mod dependency for konflux #240
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-54336: Bump library-go #144
CORS-3911: Add custom endpoint args from infrastructure #141
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-53249: skip UDP LoadBalancer on external #2247
OCPBUGS-54426: Fix implementation of ContainsCIDR to allow non-equal addresses #2263
OCPBUGS-52410: Propagate error when creating CustomResourceStorage instead of panicking #2216
TRT-1854: fix OVNKubernetes network skips #2256
STOR-2285: Update group snapshot test rules #2254
OCPBUGS-54339: UPSTREAM: 129808: e2e: bump port-forward timeout #2257
TRT-1836: UPSTREAM: <carry>: remove old k8s-tests external binary #2178
Full changelog

hypershift

NO-JIRA: Bump o/api version to 4.19 tag #6035
OCPBUGS-54916: Set Azure KMS Configuration to v2 #6027
OCPBUGS-54309: Drop isIP CEL check #6032
AUTOSCALE-127: allow karpenter-provider-aws image to be overriden by hcp annotation #5999
CNTRLPLANE-217: Add E2E to KubeAPIServerDNSName API to cover KAS custom certificate #5968
STOR-2281: Remove snapshot webhook #6004
OCPBUGS-54763: openstack: set port security only if explicitly specified #6015
OCPBUGS-52661: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #5798
NO-JIRA: Bump CAPZ to v1.19.2 #6018
NO-JIRA: update konflux references #5987
OCPBUGS-48540: Mcd proxy #6011
AUTOSCALE-44: add autonode karpenter drift hcp upgrade e2e test #5870
OCPBUGS-54602: Set KAS GOMEMLIMIT node label to what OSDFM expects #5975
NO-JIRA: Add polling for kas-bootstrap kas network requests #5990
OCPBUGS-53261: Add validation to avoid conflicts between KubeAPI server and NamedCertificates SANs #5875
OCPBUGS-41853: Add documentation for API Server custom certificate in HCP #6001
OCPBUGS-54178: Add missing servicemonitors and prometheusrules permissions for non-OVN #5893
ARO-15695: test/e2e: run EnsureImageRegistryCapabilityDisabled on 4.18 #5984
NO-JIRA: Add OWNERS to kas-bootstrap #5991
CNTRLPLANE-233: Add –kas-dns-name CLI flag to consume KubeAPIServerDNSName API #5969
CNTRLPLANE-334: openshift/api dependency bumps #5971
NO-JIRA: Enable ppc64le builds #5985
OSASINFRA-3732: openstack: Sync CA cert to new key #5702
chore(deps): update golang docker tag to v1.24 #5616
OCPBUGS-54431: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5942
NO-JIRA: Sync labels between CPO and RHTAP CPO dockerfile #5966
OCPBUGS-52983: Add check for expected conditions before running NodePool tests #5970
NO-JIRA: test/e2e: output pod name on EnsureHCPPodsAffinitiesAndTolerations failure #5967
OCPBUGS-13292: Add functionality to limit CAPI CRD installation on HO installation #5949
OCPBUGS-54439: Change KASGoMemLimit to a string pointer type #5965
NO-JIRA: Red Hat Konflux update hypershift-operator-main #5974
NO-JIRA: Add doc on SecretProviderClass for managed Azure #5892
OCPBUGS-50562: Sync RBAC for attaching volumes on VM level #5831
CNTRLPLANE-303: [CPOv2 Refactor] Refactor ignition into cpov2 #5868
NO-JIRA: Create token Secret for dev cluster explicitly #5523
OCPBUGS-52984: annotate AWSEndpointServices with HostedClusterAnnotation #5960
OCPBUGS-53403: Remove synced annotations from HCP when they are removed from HC #5879
NO-JIRA: set default expriationDate tag in AWS if not set #5951
NO-JIRA: chore: Remove Azure autorest dependency #5917
CNTRLPLANE-378: Run kas-bootstrap binary for cpov2 #5947
NO-JIRA: Add version check for CAPI flag #5911
ARO-15578: add disable cluster capabilities flag to cluster create cmd #5775
NO-JIRA: chore: Bump CAPZ to v1.19.1 #5916
CNTRLPLANE-378: Move bootstrap apply bash into kas-bootstrap binary #5937
NO-JIRA: Disabling flaking EnsureKubeAPIDNSName E2E test #5939
NO-JIRA: Remove ppc64le from HO tekton files #5924
CNTRLPLANE-366: Create Azure role assignments in the Azure HC CLI #5896
OCPBUGS-53904: bump golang-jwt v4 and v5 #5904
CNTRLPLANE-350: add NodePool minor version compatibility check #5873
NO-JIRA: fix(api): Adjust CRD validation rules to account for ignition server … #5782
ART-11792: update go mod dependency for konflux #5918
CNTRLPLANE-112: Enable MIv3 for azure file csi driver #5915
NO-JIRA: Revert “OCPBUGS-50915: Disable capi machineset preflights” #5910
CNTRLPLANE-112: Fix CNCC RG Permissions & RBAC #5903
NO-JIRA: Remove TODO comment for AzureProviderConfig #5838
OCPBUGS-46379: Kas bootstrap bin #5871
CNTRLPLANE-111: Enable MIv3 for CAPZ #5825
ARO-15229: add e2e tests for image registry capability #5810
CNTRLPLANE-336: [CPOv2 Refactor] Refactor konnectivity-agent into cpov2 #5856
OCPBUGS-50915: Disable capi machineset preflights #5653
Full changelog

ibm-vpc-block-csi-driver

OCPBUGS-53912: bump github.com/golang-jwt/jwt/v4 to v4.5.2 #81
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-54482: Bump library-go #142
STOR-2252: Bump all deps for 4.19 #141
Full changelog

insights-operator

feat: remove the upgradeable condition (#1079) #1079
CCXDEV-9905: Introduce a new config option for storing archives to persistent volume (#1070) #1070
chore: add BaiyangZhou to OWNERS file (#1080) #1080
Full changelog

ironic

METAL-1327: Update pkgs ocp419 take2 #651
NO-ISSUE: Update dependencies for OCP 4.19, part 1 #649
Full changelog

ironic-agent

NO-ISSUE: Update dependencies for OCP 4.19 #181
Full changelog

keepalived-ipfailover

OCPBUGS-45700: Updating openshift-enterprise-keepalived-ipfailover-container image to be consistent with ART for 4.19 #205
OCPBUGS-45831: Updating ose-egress-http-proxy-container image to be consistent with ART for 4.19 #204
OCPBUGS-45405: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.19 #201
Full changelog

kubevirt-csi-driver

NO-JIRA: Add awels as approver #59
OCPBUGS-50562: Ensure unpublish works for volumes carried over upgrades #58
OCPBUGS-50562: Ensure volume stays attached through reboots #53
Full changelog

machine-api-operator

SPLAT-2051: implement e2e tests for vSphere multi network #1347
SPLAT-2118: Update tests-extensions to pick up new vendor filtering #1351
OCPBUGS-52464: webhook to validate marketType field #1339
Full changelog

machine-config-operator

OCPBUGS-53408: wait for build and ensure OS image is actually new #4924
OCPBUGS-54872: Make sure generation fields in MCN do not have a value of 0 #4982
MCO-1544: Update MCO code to use MCN’s updated v1alpha1 API #4962
OCPBUGS-53425: Make mtu-migration run after wait-for-primary-ip #4932
OCPBUGS-54611: pkg/operator/status: Drop kubelet skew guard #4970
OCPBUGS-54384: kubelet-service: narrow down restorecon path #4857
OCPBUGS-54175: Add /etc/docker/certs.d to template #4933
MCO-1587: Add runbook for ExtremelyHighIndividualControlPlaneMemory #4976
OCPBUGS-49737: GCP: Include the gcp-routes.service for all GCP installs #4969
OCPBUGS-52656: Update the MCN PIS status of only the primary pool #4948
OCPBUGS-54570: Drop broken feature which statically configures DHCP addresses #4965
CORENET-5524: Modify regex for ipsec showstates command #4959
OCPBUGS-49894: Ensure proxy config exists when reverting from OCL to non-OCL #4833
OCPNODE-3020: Remove cgroupv1 references #4964
MCO-1627: Get rid of setting mcn.Spec.PinnedImageSets field #4960
OCPBUGS-38869: Update desired config in MCN on OCL update #4922
OCPBUGS-46421, OCPBUGS-48675, OCPBUGS-48808: Ensure build job is deleted when rebuild is triggered #4807
MCO-1522: Adapt MCO to use PIS V1 API #4934
OCPBUGS-54161: use the same success criteria for OCL e2e tests #4941
MCO-1579: Bump ignition to 3.5 #4903
Full changelog

monitoring-plugin

OU-678: fix: allow to set refresh interval to off #379
OU-724: remove dependency on deleted image #375
OU-660: Remove console CSS and Align with Patternfly components #362
OCPBUGS-52592: Fix “Export as CSV” #369
Full changelog

multus-whereabouts-ipam-cni

OCPBUGS-54422: Ds merge ⁴⁄₃ #356
OCPBUGS-53397: Upstream sync 20-03-2025 #353
Full changelog

network-tools

NO-JIRA: Fix JIRA queries #141
Full changelog

networking-console-plugin

CNV-58647: update PatternFly Modal to new version #228
CNV-58320: remove console classes which changed styling #227
Full changelog

nutanix-machine-controllers

OCPCLOUD-2842: Update dependencies to k8s 1.32 #90
OCPBUGS-54317: fixing CVE-2025-22868 #97
OCPBUGS-53245: Fix link-local addresses being added to machine #100
Full changelog

oc-mirror

CLID-321: Add annotations to resources generated by oc-mirror v2 (#1086) #1086
CLID-352: images: add integration tests image (#1124) #1124
OCPBUGS-49880: cli: return distinct error codes depending on failure (#1062) #1062
OCPBUGS-52471: Fix OOM at filtering catalogs (#1120) #1120
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #312
NO-ISSUE: Synchronize From Upstream Repositories #309
NO-ISSUE: Synchronize From Upstream Repositories #308
NO-ISSUE: Synchronize From Upstream Repositories #306
NO-ISSUE: Synchronize From Upstream Repositories #305
NO-ISSUE: Synchronize From Upstream Repositories #303
NO-ISSUE: Synchronize From Upstream Repositories #300
Full changelog

openshift-controller-manager

OCPBUGS-50507: Intermittent authentication issues when accessing OpenShift registry #365
Full changelog

openstack-machine-api-provider

OSASINFRA-3746: Consume CA cert from CCO secret #131
Full changelog

operator-marketplace

NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.4 #618
NO-ISSUE: Bump github.com/onsi/gomega from 1.36.2 to 1.37.0 #617
OPRUN-3621: Replace 4.18 image references with 4.19 #579
NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 #616
Full changelog

ovirt-csi-driver-operator

NO-JIRA: Readme update #139
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-5371: Dockerfile: Bump OVS version to 3.5.0-0.9 #2472
CORENET-5382: unpin libreswan version #2498
OCPBUGS-49994: [DownstreamMerge] 7th april #2509
CORENET-5666, OCPBUGS-43004, OCPBUGS-54199: Downstream Merge 2025-04-02 #2505
OCPBUGS-45410: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.19 #2379
OCPBUGS-45741: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.19 #2380
OCPBUGS-54245, SDN-5772: Downstream merge 2025-03-21 #2501
Full changelog

powervs-block-csi-driver-operator

NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #83
Full changelog

powervs-machine-controllers

OCPBUGS-54620: CVE-2025-30204: github.com/golang-jwt/jwt allows excessive memory allocation during header parsing #112
Full changelog

prometheus

MON-4199: chore: update to v3.2.1 #246
Full changelog

service-ca-operator

CNTRLPLANE-339: Issue short lived certificates if ShortCertRotation featuregate is enabled #245
Full changelog

telemeter

SWATCH-3413: Add acm_capacity_effective_cpu_cores:sum recording rule #554
Full changelog

tests

TRT-2082: Revert “MCO-1520: Add MachineConfigNode e2e tests” #29682
OCPBUGS-54906: Change the test image to registry.k8s.io/e2e-test-images/agnhost #29672
OCPEDGE-1675: feat: update some tests to account for the arbiter node #29639
MCO-1636: skip PIS custom pool checks on SNO cluster #29673
MCO-1520: Add MachineConfigNode e2e tests #29596
OCPBUGS-54869: bump limits #29679
OCPBUGS-54661: Route ExternalCertificate: Fix e2e tests for metal platform #29656
SPLAT-2060: Registered Machine API tests extension #29579
MCO-1523: PinnedImageSet v1alpha1 Testing #29599
SDN-5217: Add tests for OVN-K default pod network route advertisement #29419
NO-JIRA: add api error rate observed by kubelet, kcm, and scheduler #29070
TRT-2049: Track Watch Counts via Audit Events #29628
OAPE-91: Route ExternalCertificate: Skip e2e jobs for bare metal platform #29651
OCPBUGS-18865: Reapply “kube-apiserver disruption incluster monitors” #29282
NO-ISSUE: Automated - Update synthetic test data #29600
OCPBUGS-53279: add failure case to skip in testPodSandboxCreation() #29631
CNTRLPLANE-371: Use endpointslices in idling tests instead of deprecated endpoints #29647
OAPE-91: Add E2E tests for Route ExternalCertificate feature #29499
OCPBUGS-53249: feat: support platform type external #29623
MCO-1631: Remove “[sig-arch][Early] CRDs for openshift.io should have a status in the CRD schema” #29643
TRT-1854: add synthetic test to check for presence of “Skipped” annotations in OTE tests #29606
OCPBUGS-53014: Bump to kubernetes 1.32.3 #29612
NE-1968: add e2e tests for FeatureGate GatewayAPI #29597
NO-ISSUE: Clean up MachineConfiguration fixture apply #29626
NO-ISSUE: Wait for MachineConfiguration status to be upto date #29625
TRT-2052: Fix broken intervals charts #29616
NO-JIRA: Alert intervals should have the display flag for charting #29624
Full changelog

vsphere-csi-driver-operator

STOR-2141: add support for maxAllowedBlockVolumesPerNode #287
STOR-2245: add manifest-topology.yaml for topology related feature and test #302
OCPBUGS-44374: Bump library-go #301
Full changelog

CoreOS Package Diff

Red Hat Enterprise Linux CoreOS upgraded from 419.96.202503251418-0 to 419.96.202504111813-0

Changed:

bind-libs 32:9.16.23-24.el9_5.3 → 32:9.16.23-28.el9_6
bind-license 32:9.16.23-24.el9_5.3 → 32:9.16.23-28.el9_6
bind-utils 32:9.16.23-24.el9_5.3 → 32:9.16.23-28.el9_6
grub2-common 1:2.06-101.el9_6 → 1:2.06-104.el9_6
grub2-efi-x64 1:2.06-101.el9_6 → 1:2.06-104.el9_6
grub2-pc 1:2.06-101.el9_6 → 1:2.06-104.el9_6
grub2-pc-modules 1:2.06-101.el9_6 → 1:2.06-104.el9_6
grub2-tools 1:2.06-101.el9_6 → 1:2.06-104.el9_6
grub2-tools-minimal 1:2.06-101.el9_6 → 1:2.06-104.el9_6
kernel 5.14.0-570.9.1.el9_6 → 5.14.0-570.12.1.el9_6
kernel-core 5.14.0-570.9.1.el9_6 → 5.14.0-570.12.1.el9_6
kernel-modules 5.14.0-570.9.1.el9_6 → 5.14.0-570.12.1.el9_6
kernel-modules-core 5.14.0-570.9.1.el9_6 → 5.14.0-570.12.1.el9_6
kernel-modules-extra 5.14.0-570.9.1.el9_6 → 5.14.0-570.12.1.el9_6
openshift-clients 4.19.0-202503211410.p0.g33cbfe1.assembly.stream.el9 → 4.19.0-202504110145.p0.gbeeaf09.assembly.stream.el9
openshift-kubelet 4.19.0-202503250607.p0.gd365efd.assembly.stream.el9 → 4.19.0-202504100822.p0.gc9e894a.assembly.stream.el9
openvswitch-selinux-extra-policy 1.0-36.el9fdp → 1.0-39.el9fdp
ose-azure-acr-image-credential-provider 4.19.0-202503051509.p0.gcc04736.assembly.stream.el9 → 4.19.0-202504111744.p0.g8e579f3.assembly.stream.el9
rpm-ostree 2025.5-1.el9 → 2025.6-5.el9_6
rpm-ostree-libs 2025.5-1.el9 → 2025.6-5.el9_6

Removed:
openvswitch3.4 3.4.0-30.el9fdp

Added:
openvswitch3.5 3.5.0-0.9.el9fdp
python3-dnf-plugin-versionlock 4.3.0-20.el9

View changelog in Markdown or change previous release:

Source code for this page located on github