4.20.0-0.nightly-multi-2025-07-03-021133

PullSpec:

quay.io/openshift-release-dev/ocp-release-nightly@sha256:c62f0682a9e275d22728c3ae90c6f1ac4fd56d70e8bf45b8aaa435b331376c9d

Team Approvals:

Tests:

Blocking jobs
- e2e-aws-ovn-multi-x-ax Succeeded (1 retries) periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-aws-ovn-multi-x-ax
- e2e-aws-ovn-multi-x-x Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-aws-ovn-multi-x-x
- install-analysis-multi-p-p Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-install-analysis-all-multi-p-p
Informing jobs
- e2e-aws-ovn-minor-upgrade-multi-x-ax Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-upgrade-from-stable-4.19-ocp-e2e-aws-ovn-upgrade-multi-x-ax
- e2e-aws-ovn-multi-a-a Succeeded (1 retries) periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-aws-ovn-multi-a-a
- e2e-aws-ovn-nightly-upgrade-multi-x-ax Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-aws-ovn-upgrade-multi-x-ax
- e2e-aws-ovn-nightly-upgrade-multi-x-x Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-upgrade-aws-ovn-multi-x-x
- e2e-aws-ovn-sno-multi-a-a Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-aws-ovn-sno-multi-a-a
- e2e-aws-ovn-techpreview-multi-a-a Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-aws-ovn-techpreview-multi-a-a
- e2e-aws-ovn-techpreview-serial-multi-a-a Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-aws-ovn-techpreview-serial-multi-a-a
- e2e-azure-ovn-multi-a-a Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-azure-ovn-multi-a-a
- e2e-azure-ovn-multi-x-ax Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-azure-ovn-multi-x-ax
- e2e-gcp-ovn-multi-a-a Failed periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-gcp-ovn-multi-a-a
- e2e-gcp-ovn-multi-x-ax Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-gcp-ovn-multi-x-ax
- e2e-minor-upgrade-azure-ovn-multi-a-a Failed periodic-ci-openshift-multiarch-master-nightly-4.20-upgrade-from-stable-4.19-ocp-e2e-upgrade-azure-ovn-multi-a-a
- e2e-minor-upgrade-azure-ovn-multi-x-ax Failed periodic-ci-openshift-multiarch-master-nightly-4.20-upgrade-from-stable-4.19-ocp-e2e-upgrade-azure-ovn-multi-x-ax
- e2e-minor-upgrade-gcp-ovn-multi-a-a Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-upgrade-from-stable-4.19-ocp-e2e-upgrade-gcp-ovn-multi-a-a
- e2e-minor-upgrade-gcp-ovn-multi-x-ax Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-upgrade-from-stable-4.19-ocp-e2e-upgrade-gcp-ovn-multi-x-ax
- e2e-nightly-upgrade-aws-ovn-multi-a-a Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-upgrade-aws-ovn-multi-a-a
- e2e-nightly-upgrade-azure-ovn-multi-a-a Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-upgrade-azure-ovn-multi-a-a
- e2e-nightly-upgrade-azure-ovn-multi-x-ax Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-upgrade-azure-ovn-multi-x-ax
- e2e-nightly-upgrade-gcp-ovn-multi-x-ax Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-upgrade-gcp-ovn-multi-x-ax
- e2e-ovn-remote-libvirt-multi-p-p Failed periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-ovn-remote-libvirt-multi-p-p
- e2e-ovn-remote-libvirt-multi-z-z Failed periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-ovn-remote-libvirt-multi-z-z
- e2e-ovn-serial-aws-multi-a-a Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-ovn-serial-aws-multi-a-a
- e2e-serial-aws-ovn-multi-x-ax Failed periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-e2e-serial-aws-ovn-multi-x-ax
- heavy-build-ovn-remote-libvirt-multi-p-p Succeeded periodic-ci-openshift-multiarch-master-nightly-4.20-ocp-heavy-build-ovn-remote-libvirt-multi-p-p

Upgrades from:

4.20.0-0.nightly-multi-2025-07-02-142604 (changes) - S S S S S S
4.19.0-0.nightly-multi-2025-07-02-121645 - S F F S S

Upgrades to:

4.20.0-0.nightly-multi-2025-07-04-002519 (changes) - S S S S S S
4.20.0-0.nightly-multi-2025-07-03-165024 (changes) - S F F S S S S S
4.20.0-0.nightly-multi-2025-07-03-085527 (changes) - S S S S S S

Changes from 4.19.0-0.nightly-multi-2025-07-02-121645

Created: 2025-07-03 02:12:23 +0000 UTC

Image Digest: sha256:e835add1d1e2a59ec99c375c6b28b341645a38f53a15035eb7ee6abb139cddb8

Components

Kubectl 1.32.1
Kubernetes 1.32.5
Kubernetes Tests 1.32.5
Red Hat Enterprise Linux CoreOS 9.6.20250701-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
BareMetalLoadBalancer (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
CloudDualStackNodeIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
DisableKubeletCloudCredentialProviders (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineAPIProviderOpenStack (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MultiArchInstallAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MultiArchInstallGCP (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NodeDisruptionPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PlatformOperators (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
PrivateHostedZoneAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SELinuxChangePolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereDriverConfiguration (5 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereMultiVCenters (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ValidatingAdmissionPolicy (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
MachineConfigNodes (13 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
OpenShiftPodSecurityAdmission (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
PinnedImages (5 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ProcMountType (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
RouteAdvertisements (11 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesPodSecurityStandards (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
UserNamespacesSupport (1 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VSphereMultiNetworks (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
SigstoreImageVerificationPKI (0 tests)	Disabled	Disabled	Enabled	Enabled	Enabled (Changed)	Enabled (Changed)
AWSDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AWSServiceLBNetworkSecurityGroup (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureDedicatedHosts (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
AzureMultiDisk (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
BootImageSkewEnforcement (0 tests)			Enabled (New)	Enabled (New)
ImageModeStatusReporting (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesAzure (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesvSphere (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
MutatingAdmissionPolicy (0 tests)
NewOLMWebhookProviderOpenshiftServiceCA (0 tests)				Enabled (New)		Enabled (New)
PreconfiguredUDNAddresses (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
StoragePerformantSecurityPolicy (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
VSphereMixedNodeEnv (0 tests)			Enabled (New)	Enabled (New)

Rebuilt images without code change

aws-cloud-controller-manager git 425c1c5b sha256:1c26fd2466ff8ee1c855abe966e2cacc3e2495f676d9ae24bf3664d2ea358489
aws-kms-encryption-provider git 088dcaf7 sha256:c5908b405240ef70dd301809693d477b8b87099d3dfd9fee34eac3cd1c5a12e9
cloud-network-config-controller git 98ae311b sha256:a50886d025fc21d1c28ad782945e2303b53ed4c8023e2f6dee2e836d6cfcc4ea
cluster-bootstrap git 8fde9c52 sha256:942e82093b272eacbca6a631e06723b7a7f1a0eee6071110810880da5fbf2d88
cluster-control-plane-machine-set-operator git 1dbf0c7a sha256:3985ca84e3c206b08cc38267bd59d585ba50f24b672de81a1aafe8ce52121949
cluster-dns-operator git 65981306 sha256:784f83064a1bda3966273bc2a35f70109b9b38fce5687b0b09190757c2574a09
cluster-kube-cluster-api-operator git 3ec30377 sha256:ebfc104ca671871e5d8937dc4819370d381d4ffa55e79388bde0fa9364c2b14f
cluster-policy-controller git 74852478 sha256:fcdc4c61d68d7d72bad121f8b8da0630aa82d8337321ab69389733172bd27664
container-networking-plugins git b09f487c sha256:6690d65c4cbcfeae32f17f609f28e503950bd22ae3780af8e050749c2f761857
containernetworking-plugins-microshift git b09f487c sha256:e237c1cba2689ab4737a2f50908edf442a2b960a0dd2d059fa08925ba768fc4a
egress-router-cni git 85353bb9 sha256:e63ba650e7f8a86b23faa67c6d09b5155c22dbbf24fe04743ae1188d232d856a
etcd git a5421dfe sha256:75fd9058d0484af6060ca90bf62e46095fb778b726e3c65e4e50a848ba6f6d04
haproxy-router git b41f9d05 sha256:0ff954a356beca07e8590b421b8de1ab1e05904a1b27533fdbe0c8e67d09d678
ibm-vpc-block-csi-driver git 176b6ef1 sha256:6e6e354b5cc766b97d40bc8836f4d166d0b7afd62fa619ca549fb460d816eb44
ibmcloud-machine-controllers git 989bd874 sha256:751e7328139ebaf452c8c3dca56622bf9b3028be97d3ff791852c37f47b3982b
kubevirt-cloud-controller-manager git 3f4542ec sha256:11bf06d6559aa31c093ec303eddafde73156cd8b5bedb0ba19a7c202737e6ee3
libvirt-machine-controllers git a336f0b5 sha256:8d61f718d9295f6b99e730e16ed4128883896731e973745a2c5505999be86398
multus-cni git cf0f68ec sha256:4cda74cd86add3a2a68dd01ef223acfee89bfaaa01dbecd25aba9f505243604b
multus-cni-microshift git cf0f68ec sha256:7a41d85d09400d44a9bfce947403519267758f2f94bacd61c9ead8c26f1d1062
multus-route-override-cni git 391c1b03 sha256:e60327d37dd9da939a6f1f6bff9d4768193e445a91ad2d07d7978525ae1ea24a
multus-whereabouts-ipam-cni git 45624b63 sha256:721903f63082aa9c942c36183f5bfaf7ebd264b02f0337c3cf57e70ec2f81b0f
network-metrics-daemon git 5ec8c6bd sha256:2e2c81d6983dcc9735b7d3b4a2398287643dfb493d6d6b5161eadcf70d20d974
nutanix-cloud-controller-manager git db1f264a sha256:470c6e254d20c94e7bc65d57841aa25e7b0e8e87f8bcd9157d0dca98af2a93df
oauth-apiserver git 75914068 sha256:9f2373ce1a24cd3144bd9398585e575aeab90a3dd084a22518bc7368c73b903b
ovirt-csi-driver git 1db726a9 sha256:3aff9854574e3df3123669a3636121399d7054ed169e7bb66f91b684460e93ce
ovirt-csi-driver-operator git 76db379d sha256:4439bc6e6b5cf21b63921991e1cb6ec588fd09cc25f55df1e2ca738907390f9a
prometheus-alertmanager git a2346ca5 sha256:50e6945c8b49ab3e4ad201706a478e77bc0b2a5f15c9b6b83a6569d86ee791e5
route-controller-manager git bc97534a sha256:e491a7de9a8e2bd259358ee822c1a62c0052e7088c7d4ad7f540a1b9353a17f0
service-ca-operator git 4dfa6916 sha256:28f7f9b591ba5a8e73c7a348690ae109eac30f55d394ec07da0ce38feb785c40

agent-installer-api-server

MGMT-20464: Fix NFD detection of NVIDIA GPUs #7696
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update Konflux references (#1156) #1156
MGMT-20868: Trust also system certs (#1145) #1145
NO-ISSUE: CVE-2025-30204 Update openshift-online/ocm-sdk-go to v0.1.467 (#1152) #1152
NO-ISSUE: Update Konflux references (#1149) #1149
MGMT-20858: apply-tag migration (#1143) #1143
NO-ISSUE: Update Konflux references (#1139) #1139
ACM-21380: Make ACM builds multi-arch (#1136) #1136
NO-ISSUE: Update Konflux references (#1131) #1131
NO-ISSUE: Update Konflux references (#1130) #1130
NO-ISSUE: Add konflux service account migration (#1129) #1129
NO-ISSUE: Modify Konflux YAMLs to ocm-2.15 (#1126) #1126
MGMT-11622: assisted-installer controller: operator status should be logged (#1079) #1079
Use rsync over cp to set up networking files for first boot (#1123) #1123
Konflux build pipeline service account migration for assisted-installer-controller-acm-ds-main (#1108) #1108
Konflux build pipeline service account migration for assisted-installer-ds-main (#1110) #1110
Konflux build pipeline service account migration for assisted-installer-controller-ds-main (#1109) #1109
Konflux build pipeline service account migration for assisted-installer-acm-ds-main (#1107) #1107
MGMT-20567: Enable HTTP endpoint for MCO ignition (#1117) #1117
NO-ISSUE: Update Konflux references (#1114) #1114
Full changelog

agent-installer-node-agent

MGMT-20025: Route inventory deleted when route without next hop interface (#999) #999
NO-ISSUE: Update module github.com/golangci/golangci-lint to v1.64.8 (#1037) #1037
MGMT-18518: Linter fixes & renovate config for linter and golang (#1031) #1031
MGMT-20868: Trust also system certs (#1029) #1029
NO-ISSUE: CVE-2025-30204 Update openshift-online/ocm-sdk-go to v0.1.467 (#1036) #1036
NO-ISSUE: Update Konflux references (#1033) #1033
MGMT-20858: apply tags migration (#1027) #1027
MGMT-18993: When installing a node configured with a bond interface comprising of (#1021) #1021
Revert “NO ISSUE: Test (#1015)” (#1016) #1015
NO-ISSUE: Update Konflux references (#1013) #1013
ACM-21380: Make ACM builds multi-arch (#1017) #1017
NO ISSUE: Test (#1015) #1015
NO-ISSUE: Modify Konflux YAMLs to ocm-2.15 (#1009) #1009
NO-ISSUE: Update Konflux references (#1003) #1003
NO-ISSUE: Update Konflux references (#1002) #1002
Konflux build pipeline service account migration for assisted-installer-agent-acm-ds-main (#992) #992
NO-ISSUE: Update Konflux references (#984) #984
Full changelog

agent-installer-utils

OCPBUGS-58226: OVE ISOBuilder works only if and when the script is ex… #120
NO-ISSUE: Bump the 4.xx dependencies #119
OCPBUGS-57679: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.20 #116
OCPBUGS-57862: Update operators list in ISOBuilder #117
OCPBUGS-57346: Bump iso-builder appliance dependency #114
NO-ISSUE: Enable ‘q’ and ‘c’ hotkeys for quit and configure network #107
OCPBUGS-57297: Update mtv-operator to version used in 4.19 catalog #111
ART-13079: append .0 to go.mod version #105
OCPBUGS-56934: Disable ESC key on checks page #102
OCPBUGS-56977: OVE isobuilder fails on CentOS Stream 9 due to missing… #103
OCPBUGS-56880: Log error from nmtui and change modal background #101
OCPBUGS-56546: ISOBuilder- Remove default password for nodes #96
AGENT-1195: bump appliance to 936210 #98
OCPBUGS-56223: Fix nmtui redirection after quit #93
OCPBUGS-56147: Add operator CRs post-install in OVE build script #94
OCPBUGS-56210: OVE builder: Remove RHEL9 image from additionalImages #91
OCPBUGS-56112: configure the channel for each OLM operators #89
OCPBUGS-55769: Use internal image registry #78
AGENT-1195: bump appliance image to 4042ba #86
OCPBUGS-55708: Include RHEL 9 guest image to support VM launches via … #84
Full changelog

apiserver-network-proxy

ART-13079: append .0 to go.mod version #78
Full changelog

aws-cluster-api-controllers

OCPBUGS-53003: Remove references to master branch #551
OCPBUGS-55947: Update manifests to remove reliance on v1beta1 admission registration #549
Full changelog

aws-ebs-csi-driver

OCPBUGS-57707: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.20 #288
ART-12521: update go mod dependency for konflux #285
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, csi-driver-manila-operator, openstack-cinder-csi-driver-operator

STOR-2331: Add labels to subscribe SMB CSI driver operator and controller to NPs #400
STOR-2330: Add labels to subscribe Azure disk and file CSI driver controllers to NPs #396
OCPBUGS-57768: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.20 #399
OCPBUGS-57739: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.20 #398
OCPBUGS-57700: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.20 #397
OCPBUGS-57565: Updating csi-driver-manila-operator-container image to be consistent with ART for 4.20 #394
STOR-2331: Add labels to subscribe AWS-EFS CSI driver operator to NPs #391
OCPBUGS-57680: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.20 #395
STOR-2477: create-efs-volume: add single-zone support #390
OCPBUGS-57545: Updating ose-smb-csi-driver-operator-container image to be consistent with ART for 4.20 #393
Updating ose-aws-efs-csi-driver-operator-container image to be consistent with ART for 4.20 #392
STOR-2330: Add labels to subscribe AWS-EBS CSI driver controller to NPs #387
NO-JIRA: create-efs-volume: print files to log as a fallback #388
NO-JIRA: Update openstack approvers #385
OCPBUGS-54975: Fix Cinder, Manila driver metrics #379
OCPBUGS-56128: openstack-cinder: Set –with-topology flag for node driver also #383
STOR-2408: Bump OLM metadata to 4.20 #382
Full changelog

aws-karpenter-provider-aws

OCPBUGS-57717: Updating aws-karpenter-provider-aws-container image to be consistent with ART for 4.20 #13
AUTOSCALE-259: migrate upstream karpenter-core dependency to downstream #12
Full changelog

aws-machine-controllers

OCPBUGS-57724: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.20 #133
OCPBUGS-57581: fix: machineset annotation controller: guard on status authoritativeAPI #132
OCPCLOUD-2717: bump openshift/api #131
OCPBUGS-56487: fix: make machineset annotation controller respect paused condition #129
OCPBUGS-55720: Update machine-api-operator pkg with fixes #127
Full changelog

aws-pod-identity-webhook

OCPBUGS-57618: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.20 #204
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-57834: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART for 4.20 #147
OCPBUGS-57720: Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.20 #145
Full changelog

azure-cluster-api-controllers

OCPCLOUD-2920: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.20.1 (e707afb) into master #341
NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api-provider-azure:v1.19.4 (99a359a) into master #338
OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #337
Full changelog

azure-disk-csi-driver

OCPBUGS-57579: Updating ose-azure-disk-csi-driver-container image to be consistent with ART for 4.20 #107
NO-JIRA: NO-JIRA: Update bertinatto from OWNERS #103
Full changelog

azure-file-csi-driver

OCPBUGS-57884: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.20 #98
OCPBUGS-54897: UPSTREAM: 2515: allow deleting cross-subscription snapshots #92
Full changelog

azure-kms-encryption-provider

ART-13079: append .0 to go.mod version #17
Full changelog

azure-machine-controllers

OCPBUGS-57671: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.20 #158
OCPBUGS-55372: Fix regression on ASH with armcompute/v5 #155
OCPBUGS-56380: Fix failure when attempting to modify immutable availabilitySet #148
OCPBUGS-55372: Update virtualmachines service to armcompute/v5 SDK #141
Full changelog

azure-service-operator

OCPBUGS-57694: Updating ose-azure-service-operator-container image to be consistent with ART for 4.20 #9
Full changelog

azure-workload-identity-webhook

OCPBUGS-57692: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.20 #37
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-57555: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.20 #48
OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #44
Full changelog

baremetal-installer, installer, installer-artifacts

OCPEDGE-1740: feat: add arbiter role support to ABI #9780
CORS-4060: Migrate AWS sdk to v2 in infrastructure #9764
OCPBUGS-18658, OCPBUGS-45256: Unify agent install-complete with installer #7678
OCPBUGS-57923: When AWS_PROFILE is invalid ask for credentials #9803
OCPBUGS-57812: Updating ose-installer-container image to be consistent with ART for 4.20 #9799
OCPBUGS-58216: allow to deploy single nodes with UPI #9763
OCPBUGS-57856: Updating ose-installer-artifacts-container image to be consistent with ART for 4.20 #9801
OCPBUGS-57822: Updating ose-baremetal-installer-container image to be consistent with ART for 4.20 #9800
OCPBUGS-41879: vSphere - if regions are the same cannot dup zones #9787
OCPBUGS-18510: Refactor removing loadbalancer in OpenStack. #9724
OCPBUGS-57803: MCO: consider custom AMI for edge compute machine pool #9798
OCPBUGS-57192: Checking for selected PE retrieved data and returning errors for missing values #9785
CORS-4059: migrate gather code AWS SDK v2 #9737
no-jira: Update Generated Files #9784
CORS-3796: Update CVO channel to latest #9790
CORS-3795: Updating the release image to 4.20 #9789
CORS-4057: migrate EC2 quota checking code AWS SDK v2 #9740
OCPBUGS-57535: vSphere - remove unit tests using nip.io #9793
OCPBUGS-57021: Use less permissive access for /var/lib/etcd for SNO #9769
CFE-1119: Removes instances of deprecated experimentalPropagateUserTags #8917
OCPBUGS-56658: Prompt User for AWS Creds when none are found #9751
CORS-3998: Remove base domain from metadata #9711
OCPBUGS-56616: pkg/types/validation: Validate all SSH public keys #9770
OCPBUGS-51299: Set default project and location for KMS key manifest #9767
AGENT-997: Internal dev docs for authentication-authorization #9224
OCPBUGS-57000: Revert “CORS-3883: Remove user-assigned identity from ARM template” #9766
SPLAT-2045: [vsphere] promote multi-nic to default #9493
no-jira: Bump CAPZ Version #9704
NO-JIRA: openstack docs: Fix type of clusterOSImageProperties #9754
OCPBUGS-54885: Validate agent diskEncryption fields #9674
OCPBUGS-54413: Make swift containers removal not fatal for UPI. #9728
OCPBUGS-56808: Remove configv1.GCPServiceEndpointNameTagManager references #9749
no-jira: add unit tests for vsphere VIPS/machinenetworks population #9744
OCPBUGS-56713: update the punctuation #9746
OCPBUGS-54487: Power VS: Provide detailed error when entered VPCName cannot be found #9634
CORS-4066: Remove the function to check if multiarch is enabled/allowed #9750
OCPBUGS-6508: Update Control Plane replica validation for Single Node OpenShift #9048
CORS-3682: log falsy conditions when CAPI infra/machine provisioning failed #9722
MGMT-20702, OCPBUGS-56601: Avoid duplicate machine networks #9743
OCPBUGS-55671: AWS Mutliarch feature gate is enabled by default #9729
OCPBUGS-55672: Remove MultiArchInstallGCP featuregate #9725
OCPBUGS-56645: Update RHCOS 4.20 bootimage metadata to 9.6.20250523-0 #9741
OCPBUGS-56008: Remove unnecessary validation #9739
OCPBUGS-56268: pkg/types/azure: remove SystemAssignedID docs #9717
no-jira: Update team osasinfra #9732
OCPBUGS-56008: don’t expect identity on ASH #9733
OCPBUGS-56008: default Azure to create VM user-assigned identities #9718
NO-JIRA: add the instance types which test PASS #9723
OCPBUGS-55905: Update RHCOS 4.20 bootimage metadata to 9.6.20250513-0 #9720
OCPBUGS-56262: Added better logging for vSphere destroy #9716
OCPBUGS-56079: apply fixes for yaml-lint errors #9708
OCPBUGS-53107: Set appropriate KillMode for systemd services #9562
OCPBUGS-55683: Pre-create password files for agent installer OVE #9679
OCPEDGE-1673: [TNF] Render secret manifests from fencing credentials block. #9635
OCPBUGS-47719: [Nutanix] nil error displayed when setting a not exist value in preloadedOSImageName field #9693
OCPBUGS-55817: add Lsv4 and Lasv4 series as tested #9696
OCPBUGS-55772: Add support for Azure TDX confidential VM type #9691
no-jira: add jcpowermac to nutanix review/approve groups #9697
CORS-3960, OCPBUGS-55952: Remove Terraform Build Artifacts #9667
no-jira: add PeaceRebel (Bipin) to coreos approvers & reviewers list #9687
OCPBUGS-54502: ensure ctrplane nodes can access bootstrap MCS #9689
OCPBUGS-54566: Apply defaults then validate confidentialCompute #9637
OCPBUGS-55722: azure stack: switch cloud provider to standard lb #9686
no-jira: fixes to get shellcheck to pass #9669
OCPBUGS-53116: AWS Destroy use AWS SDK v2 #9644
OCPEDGE-1707: Add Disable Certificate Verification API #9640
no-jira: azure: add tested instance types for CORS-3634 and CORS-3771 #9683
OCPBUGS-45805: Check for nil in case of proxy crash/deleted #9488
Full changelog

baremetal-machine-controllers

OCPBUGS-57693: Updating baremetal-machine-controller-container image to be consistent with ART for 4.20 #236
Full changelog

baremetal-operator

OCPBUGS-57817: Updating ose-baremetal-operator-container image to be consistent with ART for 4.20 #422
OCPBUGS-54629, OCPBUGS-54965: merge upstream #418
OCPBUGS-55717: Merge upstream #414
Full changelog

baremetal-runtimecfg

OCPBUGS-57607: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.20 #350
MGMT-20739: Add control-plane-topology as an arg to dynkeepalived and temporarily add a dummy backend when installing TNF/TNA with assisted-installer #348
OCPBUGS-55971: Re-add ENABLE_NODEIP_DEBUG env var #347
OCPBUGS-57065: iptables: Switch PREROUTING REDIRECT rule to DNAT instead #349
NO-ISSUE: Add emy as reviewer #346
Full changelog

cli, cli-artifacts, deployer, tools

NO-JIRA: Simplify TarEntryCallback #2047
OCPBUGS-55048: Return error in case of error #2049
OCPSTRAT-2147: Upgrade to go 1.24 and OCP 4.20 #2046
OCPBUGS-57635: Revert “OCPBUGS-56691: Rely on overall available disk space of the mounted volume” #2042
OCPBUGS-56691: Rely on overall available disk space of the mounted volume #2028
WRKLDS-1713: Remove schema1 #2037
WRKLDS-1716: oc image serve: Remove as deprecated #2033
OTA-1539: pkg/cli/admin/upgrade/recommend: Add a –quiet option #2023
OTA-1532: pkg/cli/admin/upgrade/recommend: New, feature-gated –accept #2017
OCPBUGS-49897: avoid transfering permissions when copying artifacts from node-joiner pod #2031
OCPBUGS-56598: pkg/cli/admin/mustgather: Include ClusterVersion in fallback inspect #2025
OCPBUGS-55220: Replace colon to hypen in the filename while extracting tar on Windows #2022
NO-JIRA: OCPBUGS-46604: Clarify behavior of since-time flag in oc adm must-gather command #2019
WRKLDS-1103: Adding sos.conf file for default sos config into the tools image #2003
NO-JIRA: make ‘oc status’ compatible with bare kube #1947
Full changelog

cloud-credential-operator

OCPBUGS-53454: ccoctl: only add owned tag to azure resources on create #876
CCO-681: Add network policies with default deny #871
OCPBUGS-57840: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.20 #877
CCO-649: make update-go-dependencies to also update indirects #875
OCPBUGS-57296: Remove duplicate cluster role rules #864
OCPBUGS-57349: Use constant for first parameter of fmt.Errorf #874
CCO-645: Add new clock parameter when using library-go:NewKubeRecorder #872
OCPBUGS-55777: Add missing Role, RoleBinding #860
OCPBUGS-56607: Azure: resolve nil pointer exception when role assignment exists #861
OCPBUGS-53429: Render: configure proxy on bootstrap static pod #855
OCPBUGS-55777: Sync OpenStack CA Bundles from legacy location #850
OCPBUGS-54829: golang.org/x/net v0.38.0 #851
Full changelog

cluster-authentication-operator

CNTRLPLANE-333: Add generation logic for new uid and extra fields in the Authentication CR #763
NO-JIRA: add logging when rendering bootstrap manifests #770
CNTRLPLANE-939: test/e2e-oidc: poll test preconditions for a short time instead of checking once #769
CNTRLPLANE-939: Create separate make rule for e2e oidc tests #768
AUTH-544: Extend e2e test to leverage new functionality #737
Full changelog

cluster-autoscaler

OCPBUGS-57710: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.20 #357
Full changelog

cluster-autoscaler-operator

OCPBUGS-57621: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.20 #346
OCPBUGS-42875: mitigate operator Degraded status flapping #344
OCPBUGS-57041: update cluster provider type early #343
NO-JIRA: Add autoscale members to OWNERS file #345
Full changelog

cluster-baremetal-operator

OCPBUGS-57419: Do not log “new CO status” unnecessarily #481
Revert “METAL-1404: Add annotation to enable CBO install via CVO in Hosted Clusters” #491
OCPBUGS-57591: Golang 1.24 and openshift 4.20 #488
METAL-1404: Add annotation to enable CBO install via CVO in Hosted Clusters #464
METAL-1437: Add (unsupported) overrides for the ironic agent image #483
OCPBUGS-56723: Treat ResourceNotFound as non-fatal #482
NO-ISSUE: Remove inactive OWNERS #480
OCPBUGS-54244: no default for provisioningIP when provisioningInterface is set #476
OCPBUGS-54965: Inform BMO when provisioning network is disabled #473
NO-ISSUE: Makefile: don’t run all linters when running unit tests #475
NO-ISSUE: Silence a bogus error with newer golangci-lint #477
OCPBUGS-52483: Allow provisioningIP when network disabled #466
Full changelog

cluster-capi-controllers

NO-JIRA: Merge https://github.com/kubernetes-sigs/cluster-api:v1.10.2 (5255664) into master #240
OCPCLOUD-2917: Merge https://github.com/kubernetes-sigs/cluster-api:v1.10.1 (647a1b7) into master #238
OCPBUGS-55947: Regenerate manifests to drop v1beta1 admissionregistration usage #236
Full changelog

cluster-capi-operator

NO-JIRA: Remove manifest for validating-webhook-configuration #324
OCPBUGS-57563: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.20 #319
OCPBUGS-56010: Fix compareMAPIMachineSets function #315
OCPBUGS-54705: mapi2capi: Create new machine template when changing MAPI providerSpec #295
OCPBUGS-57013: Fix reset sync status in migration controllers #313
NO-JIRA: Assorted cleanups #312
OCPBUGS-57040: Fix failure to retry unpause #309
OCPBUGS-56604: fix: ensure CAPI machineset is created not paused when authoritative #299
OCPBUGS-56709: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #301
OCPBUGS-56487: fix: watch CAPI resources in the migration controllers #300
OCPCLOUD-2943: MachineSet deletion logic #286
OCPCLOUD-2893: Add related objects to must-gather config #267
OCPBUGS-55985: fix: machine: propagate non-authoritative deletion #290
OCPBUGS-55947: Should not use v1beta1 of the AdmissionRegistration API group #289
Full changelog

cluster-cloud-controller-manager-operator

NO-JIRA: Remove old deployment which is deleted #393
OCPBUGS-56508: Fix config-sync-controller logging #389
Full changelog

cluster-config-api

OCPBUGS-55465: Drop on-by-default ValidatingAdmissionPolicy featuregate #2306
STOR-2370: Add featuregates for storage performant security policies #2382
CNTRLPLANE-72: remove RoleBindingRestriction CRD from payload #2138
OCPBUGS-34194: Modify api description for join, transit and masquerade subnets #2320
OCPBUGS-57828: Updating ose-cluster-config-api-container image to be consistent with ART for 4.20 #2375
NO-JIRA: Fix typos in the doc about clusterversion.spec.channel #2371
MCO-1524: Promote PinnedImageSet feature gate to default feature set #2269
MCO-1064: Promote MachineConfigNode feature gate to default #2288
Adding feature gate for image mode status reporting #2373
OCPNODE-3008: Add v1 type ClusterImagePolicy and ImagePolicy #2310
OCPBUGS-55663: Remove NodeDisruptionPolicy featuregate #2359
Register MutatingAdmissionPolicy in feature gates #2349
WRKLDS-1676: OCM config: Remove obsolete fields #2364
OCPBUGS-55652: Remove PrivateHostedZoneAWS feature gate #2338
CNTRLPLANE-337: authentication: oidc: make username claim mapping required #2352
NO-ISSUE: Remove redundant image stream #2358
Promote RouteAdvertisements feature gate to default feature set #2225
MCO-1671: Add feature gates for azure boot image updates & skew management #2353
SPLAT-2137: FG for Service Type LB NLB with Security Group #2354
OCPBUGS-56725: Add max length validation for apiserver namedCertificates #2342
Remove DataGather state print column #2350
OCPBUGS-44462: Remove PlatformOperators from feature list #2333
CORENET-6004: Add PreconfiguredUDNAddresses featuregate #2348
OCPCLOUD-2717: Deprecate DeleteOnTermination for EBS volumes #2341
SPLAT-2175: introduce AzureDedicatedHosts feature gate #2293
OCPBUGS-52556: Revert v1alpha1 removal #2343
SPLAT-2044: [vsphere] promote multi-nic to default #2204
OCPBUGS-55671: Remove MultiArchInstallAWS featuregate #2336
CNTRLPLANE-371: Remove SELinuxChangePolicy gate #2334
OCPNODE-3262: promote featuregate SigstoreImageVerificationPKI to techpreview #2328
OCPBUGS-55672: Remove MultiArchInstallGCP featuregate #2332
CORS-4041: Remove the TagManager from the GCP Custom Endpoints #2323
SPLAT-2213: Added vSphere mixed node env feature gate #2326
OCPBUGS-56382: Fix validation for Resource field in MOSB API #2327
OPRUN-3860: Add NewOLMWebhookProviderOpenshiftServiceCA feature gate #2324
OCPBUGS-55664: remove VSphereDriverConfiguration feature gate #2319
CNTRLPLANE-367: Update Authentication API GoDoc for OIDC-related fields #2314
OCPNODE-2557, OCPNODE-3225: features: set user namespace features on by default #2305
OCPBUGS-55662: Drop BareMetalLoadBalancer feature gate #2312
CCXDEV-14850: align insights DataGather with config #2248
Remove upstream on-by-default cloud feature gates (CloudDualStackNodeIPs, DisableKubeletCloudCredentialProviders) #2249
SPLAT-2168: introduce AWSDedicatedHosts feature gate #2291
OCPBUGS-55666: Remove MachineAPIProviderOpenStack feature gate #2307
MCO-1657: FeatureGate for Bootimage updates for the vSphere platform #2301
SPLAT-2072: Removed VSphereMultiVCenters feature gate #2231
SPLAT-2158: Azure Multi Disk feature gate #2289
README: Add criteria for featuregate test result windows and flake handling #2302
Full changelog

cluster-config-operator

OCPBUGS-57187: featuregates: always complete featuregates when feature set is CustomNoUpgrade #440
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2340: Subscribe to Network Policies for csi-snapshot-controller + operator #238
OCPBUGS-57655: Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.20 #237
Full changelog

cluster-etcd-operator

OCPBUGS-57372: Wait for 2 cp nodes before starting TNF jobs #1431
CNTRLPLANE-806: Explicitly use podman-etcd from two-node-ha extension #1438
CNTRLPLANE-805: Add TNF pacemaker fencing setup #1421
OCPBUGS-57779: feat: update logic to list arbiter nodes #1435
OCPEDGE-1920: Comply with OCP pod standards for TNF jobs #1430
NO-JIRA: remove grafana-dashboard-etcd #1429
OCPBUGS-56199: increase tnf job timeouts #1426
CNTRLPLANE-340: Issue shorter certs when ShortCertRotation feature gate is set #1315
OCPBUGS-55757: adjust alerts according to platform #1422
OCPBUGS-55111: Remove ‘meta’ keyword from pcs resource create command #1417
Full changelog

cluster-image-registry-operator

NO-JIRA: Set ownership annotation for image-registry-ca CA bundle #1225
OCPBUGS-57577: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.20 #1226
OCPSTRAT-1076: Add readonlyRootFilesystem #1215
OCPBUGS-56606: bump github.com/golang-jwt/jwt #1212
OCPBUGS-56361: bump golang.org/x/oauth2 to the latest version #1206
Full changelog

cluster-ingress-operator

OCPBUGS-55652: Removed PrivateHostedZoneAWS from component #1230
OCPBUGS-54745: status: Conditionally add CRDs to relatedObjects #1217
OCPBUGS-55317: Check capabilities before watching OLM resource #1232
Full changelog

cluster-kube-apiserver-operator

OCPBUGS-58158: Enable watch termination grace period #1862
NO-JIRA: Enable watch termination grace period #1846
OCPBUGS-56551: certregenerationcontroller: start configInformers again #1853
OCPBUGS-55465: Stop serving admissionregistration.k8s.io/v1beta1. #1836
CNTRLPLANE-79: Disable oauth admission plugins #1810
NO-JIRA: remove unused yaml #1856
NO-JIRA: Enable MutatingAdmissionPolicy group version #1854
NO-JIRA: Use new PSS annotation #1833
OCPBUGS-55013: SCC: add hostmount-anyuid-v2 #1834
OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects - reapply #1831
OCPBUGS-52466: bump library-go to bring in updated audit policies #1837
OCPBUGS-55274: Change validity / refresh for some certs which should not be affected by dev cycle rotation change #1832
Full changelog

cluster-kube-controller-manager-operator

Revert “Revert “CNTRLPLANE-343: certrotationcontroller: use minutes instead of days when FeatureShortCertRotation is enabled”” #843
Revert “CNTRLPLANE-343: certrotationcontroller: use minutes instead of days when FeatureShortCertRotation is enabled” #842
CNTRLPLANE-343: certrotationcontroller: use minutes instead of days when FeatureShortCertRotation is enabled #817
WRKLDS-954: pkg/operator: Remove expired conditional resources #839
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-57855: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.20 #566
OCPNODE-3192: enable the scheduler plugin if the feature gate DynamicResourceAllocation is enabled #561
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-57807: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.20 #124
Full changelog

cluster-machine-approver

OCPBUGS-19856: Improve log message when searching for node by InternalDNS #269
No-Jira: ignore test file csr_check_test.go #270
Full changelog

cluster-monitoring-operator

OCPBUGS-57184: chore(alerts): adjust PrometheusPossibleNarrowSelectors description and add link to to-be-added runbook #2608
NO-JIRA: [bot] Synchronize versions of the downstream components #2607
NO-JIRA: [bot] Synchronize versions of the downstream components #2606
OCPBUGS-18282: provide more context in externalLabels unmarshalling error #2605
NO-JIRA: metrics-client-ca: set owner annotation #2602
OCPBUGS-18282: prevent use of reserved labels keys in Prometheus externalLabels #2604
MON-4242: chore(metrics-server): allow setting log verbosity #2599
NO-JIRA: [bot] Synchronize versions of the downstream components #2603
OCPBUGS-33691: mixin: longer rate interval for Alertmanager[Cluster]FailedToSendAlerts #2598
NO-JIRA: [bot] Synchronize versions of the downstream components #2600
MON-4200: disable –auto-gomemlimit for Prometheus on SNO until we can ensure it won’t result in excessive CPU usage #2549
Full changelog

cluster-network-operator

OCPBUGS-55763: stop frr from listening for incoming connection in the bgp daemon #2708
CNF-18237: Align frrk8s manifests to upstream #2730
CNF-18236: FRRK8s webhook: webhook liveness / readiness from metrics to webhook #2716
NO-JIRA: remove unused clusterrolebinding default-account-cluster-network-operator #2725
OCPBUGS-56086: Validate NAD name and spec only in multus admission controller #2718
CORENET-5704: Consume latest vendoring from ocp api repo #2720
OCPBUGS-56878: whereabouts-config is a reserved name for user interaction. #2707
CNTRLPLANE-341: Issue shorter certificates when ShortRotation featuregate is enabled #2556
OCPBUGS-56051: Configure the terminationMessagePolicy for all containers deployed in HyperShift #2709
OCPBUGS-51093, OCPBUGS-55157: Pass ‘–gateway-mode’ flag for ovnkube-cluster-manager #2696
OCPBUGS-55488: Remove environment variables related to ARO HCP MIv2 for CNO #2686
Full changelog

cluster-node-tuning-operator

OCPBUGS-52853: Do not add iommu.passthrough to ARM by default (#1354) #1354
gather-sysinfo: update debug-tools to v0.2.3 (#1347) #1347
Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.20 (#1338) #1338
Bump golangci-lint to 1.64.8 (#1339) #1339
e2e: llc: initial tests for cpu allocation (#1308) #1308
Set minimum TLS 1.3 for metrics and webhook servers (#1325) #1325
Change /master to /control-plane node label (#1327) #1327
NO-JIRA: E2E: Additional Functional tests for align cpus by UncoreCache Feature (#1324) #1324
Update performance_profile.md (#1329) #1329
fix: stop referencing non existing git references in go.mod (#1332) #1332
e2e: arm: fix ginkgo doesn’t recognize kernelPageSize suite (#1330) #1330
E2E: use 4 cpus for reserved from available cpus (#1326) #1326
Add NetworkPolicy k8s resources (#1323) #1323
OCPBUGS-55989: E2E: Functional tests for align cpus by UncoreCache Feature (#1302) #1302
NO-JIRA:e2e:daemonset: pod phase and events (#1289) #1289
Full changelog

cluster-olm-operator

OCPBUGS-57601: Updating ose-cluster-olm-operator-container image to be consistent with ART for 4.20 #124
OCPSTRAT-1976: Add readonlyRootFilesystem #120
OCPBUGS-56903: fix: report correct next version when incompatible operators are installed #123
OCPBUGS-56813: fix olm.maxOpenShiftVersion float parsing #121
OPRUN-3904: Add static network policies to govern namespace and controller pod #118
OPRUN-3861: Webhook support feature flag #119
OPRUN-3883: Add network-policy support #117
Full changelog

cluster-openshift-apiserver-operator

NO-JIRA: operator: annotate image-import-ca configmap with owner #616
Full changelog

cluster-openshift-controller-manager-operator

WRKLDS-844: sync: Use more descriptive variable name #390
WRKLDS-844: pkg/operator: Split OCM/RCM status conditions #387
WRKLDS-954: pkg/operator: Remove expired conditional resources #388
WRKLDS-1676: ocm deployment: Add POD_NAME #386
WRKLDS-1676: controller manager config: Set leaderElection.name #385
Full changelog

cluster-samples-operator

OCPBUGS-57745: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.20 #643
NO-JIRA: cleanup hello-openshift yaml #642
Full changelog

cluster-storage-operator

STOR-2340: Add Network Policies and subscriptions for CSO and VPD #589
STOR-2330: Add labels to subscribe Azure disk and file CSI driver operators to NPs #587
STOR-2330: Add labels to subscribe GCP PD CSI driver operator to NPs #591
Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.20 #588
STOR-2330: Add labels to subscribe AWS-EBS CSI driver operator to NPs #584
STOR-2330: Network Policies for CSI drivers and operators #579
OSASINFRA-3675: Add credentialRequest for manila namespace #573
OCPBUGS-56201: improve message template for PodStartupStorageOperationsFailing alert #583
NO-JIRA: Update openstack approvers #581
OCPBUGS-54491: sync Azure File permissions with upstream docs #2 #578
Full changelog

cluster-update-keys

OCPBUGS-57820: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.20 #73
Full changelog

cluster-version-operator

OCPBUGS-57756: Updating cluster-version-operator-container image to be consistent with ART for 4.20 #1204
OTA-1531: [⁶⁄₆] cvo: use early gate checker to avoid delayed initialization #1196
NO-JIRA: test: remove unnecessary integration tests layers #1202
NO-JIRA: tests: fix make integration-test target #1203
NO-JIRA: Add myself as an approver #1201
OCPBUGS-56114: Fix ImplicitlyEnabledCapabilities #1191
OTA-1531: [5/x] cvo: read cluster FeatureGate early #1190
OTA-1403: Update and Verify Test Metadata Using Makefile #1179
OTA-1531: [4/x] cvo: extract config informer creation #1189
OTA-1010: Add a new version of GetImplicitlyEnabledCapabilities #1133
OTA-1531: [3/x] cvo: read version from release metadata on startup #1188
OTA-1531: [2/x] cvo: refactor LoadUpdate #1185
OTA-1531: [1/x] cvo: refactor option processing #1184
OTA-209: Add sync logic to the CVO configuration controller #1170
OCPBUGS-53062: add the ports Field into the CVO’s container spec #1180
NO-JIRA: Makefile: verify -> verify-yaml #1183
Full changelog

configmap-reloader

OCPBUGS-57846: Updating configmap-reload-container image to be consistent with ART for 4.20 #72
MON-4257: Bump configmap-reload to v0.15.0 #71
ART-13079: append .0 to go.mod version #67
Full changelog

console

OCPBUGS-55815: Breadcrumb Link fixed in Explore-type-sidebar.tsx #15219
OCPBUGS-57954: Remove deprecated link for Red Hat Marketplace webpage #15199
CONSOLE-4596: Migrate enzyme tests/components/cluster-settings unit tests to RTL #15143
NO-JIRA: Remove locale files and service-binding-plugin #15208
OCPBUGS-58166: only show the correlation masthead in admin #15210
OCPBUGS-58050: fix missing form styles in Create PVC page + Clone PVC… #15205
OCPBUGS-57898: Incorrect i18n translations in 4.19 batch #15194
OCPBUGS-56699: ContainerResource metric data for HPAs isn’t visible i… #15198
NO-JIRA: Update Console plugin SDK changelogs #15211
WTO-324: Fix for WTO regular user tests #15048
CONSOLE-4595: Remove network-policies component in console-app #15125
OCPBUGS-56629: Update QuickStartEmptyState link #15190
OCPBUGS-57746: customize actions in default resource page #15185
OCPBUGS-49709: Add the ability to launch multiple modals with useModal hook #15139
CONSOLE-4577: Move “Software Catalog” nav item from “Home” to “Ecosystem” nav section #15169
OCPBUGS-57503: Default to unordered plugins list #15182
CONSOLE-4619: Create ExternalLinkButton component and use it #15177
CONSOLE-4550: Remove Bootstrap Grid from console #15155
OCPBUGS-55828: Edit paralelism modal has unresponsive decrease button in the number spinner #15126
OCPBUGS-49709: Fix webpack build warnings for dynamic-core-api exports #15149
OCPBUGS-56629: use EmptyState for quick starts empty state #15081
OCPBUGS-56050: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console. #15170
OCPBUGS-57174: Percent sign on creating HPA page doesn’t align in the center of outer box. #15162
OCPBUGS-56174: ConfigMap form stuck after making input errors. #15166
OCPBUGS-56845: OpenShift console PVC clone cannot use B as the unit #15163
OCPBUGS-57205: i18n upload/download routine task - Sprint 270 #15158
OCPBUGS-56186: Add Select project field in import forms #15150
OCPBUGS-57074: Incorrect property name requests in ContainerSpec.resources type #15148
OCPBUGS-57087: Update Dockerfile.dev to use latest build images #15129
OCPBUGS-43792: Follow-on fix. Add new “plugins-order” flag to bridge cli args #14981
OCPBUGS-56985: Getting “Oh no something went wrong” error message in web console. #15147
CONSOLE-4550: Remove usage of Bootstrap grid in Console #15119
OCPBUGS-56999: Cannot read properties of undefined (reading ‘node-role.kubernetes.io/master’) error while accessing node logs from console #15122
OCPBUGS-57147: Disable tests A-02-TC02 and A-02-TC05 #15146
OCPBUGS-56804: clarify verbiage for Lightspeed hide button #15144
OCPBUGS-56050: Cannot read properties of undefined (reading ‘filter’) error while accessing nodes from console #15121
OCPBUGS-56044: fix VirtualizedTable runtime error if sortColumn is no… #15112
OCPBUGS-56986: Fix runtime error when navigating alert actions #15118
OCPBUGS-49709: Add useOverlay hook to dynamic plugin SDK and deprecate useModal hook #14707
OCPBUGS-56179: Add isAllNamespacesKey function to dynamic plugin API #15066
OCPBUGS-56707: fix bug where Roles list was displaying invalid data f… #15115
OCPBUGS-56917, OCPBUGS-56922: Remove ExternalLink and Timestamp reexport #15110
OCPBUGS-56889: Add flags in console static plugin for all the components of this epic #15101
OCPBUGS-56700: UI for search by label is distorted in topology #15090
OCPBUGS-55431: Add initialization link annotation support to csv anno… #15020
OCPBUGS-54185: Helm resource list error in console #15084
OCPBUGS-56439: Remove duplicate sinkUri code #15085
OCPBUGS-56137: Added developer getting started card in Admin project overview page #15079
OCPBUGS-52842: Fix TypeError Cannot read properties of null (reading ‘metadata’) #15092
OCPBUGS-56628: Fix regression with drawers and modals #15080
OCPBUGS-56087: Opening Edit Secret modal and saving without changes throws error #15058
ODC-7722: Remove service binding plugin #15035
OCPBUGS-55456: Fix and enable web terminal tests #15082
OCPBUGS-54726: Layout of Welcome to the new OpenShift experience! buttons is wonky on mobile #14951
OCPBUGS-56353: Initialize log package #15069
ODC-7797: Expose PodRingSet via Dynamic Plugin SDK #15068
OCPBUGS-55806: fix bug where AlertItem is missing info icon #15052
ODC-7782: Test adjustments to perspective merge #14970
OCPBUGS-54434: Update vSphere configuration form to support CM YAML f… #15065
OCPBUGS-49291: Set proper type for the CSP field for the serverconfig #15064
OCPBUGS-56410: Recognize Detached BMH status #15056
ODC-7786: Add flags in console static plugin for all the components of this epic #14992
OCPBUGS-54195: Enable pipeline tests by installing operator version 1.17 #14903
CONSOLE-3644: app.jsx -> app.tsx #14997
OCPBUGS-55368: [knative] Self-provisioner user can not access or create event sources via ODC #15017
OCPBUGS-55208: Should show default OpenShift Logo for a theme when there is not custom logo set for the theme. #14999
OCPBUGS-56245: Remove dead code for deployment and deployment config #15054
OCPBUGS-37977: Refresh console TLS certs at runtime #14971
OCPBUGS-55419: improve description of the custom logos CLI args #15003
CONSOLE-4572: classnames -> react-styles #15050
OCPBUGS-55808: fix cy.createProject command #15026
OCPBUGS-55896: Refactor Kebab+ActionsMenu to use PF #15028
OCPBUGS-56039: Update supported languages in Internationalization docs #15046
OCPBUGS-55919: remove 60 day alert from cluster update modal #15045
CONSOLE-4550: col-sm-6 => GridItem sm={6} #15014
OCPBUGS-54234: Fix impersonate group action #14915
OCPBUGS-46385: fix alignment of Getting Started item icons #15025
CONSOLE-4393: Update to Node.js® v22 #14841
OCPBUGS-55412: Wrap ListPageHeader action with a div #15008
OCPBUGS-55323: Add patternfly/react-topology to shared modules list of dynamic plugin sdk #14993
OCPBUGS-55430: resolve http Context and Client handling #15009
OCPBUGS-55629: get go mod tidy to pass #15024
OCPBUGS-53428: HorizontalPodAutoscalers via console require CPU resource limit even though HPAs use requests for scaling #15001
OCPBUGS-55375: add data-quickstart-id to quick create button #14998
OCPBUGS-54157: Sample segment sessions #14990
OCPBUGS-49291: Improving the DevExp for passing the CSP directives to console per flag + Make use of connect-src and object-src directives #14701
OCPBUGS-53320: Add DEVCONSOLE_PROXY flag #15006
OCPBUGS-55633: fix bug where Critical Alerts section cannot be collapsed #15015
Full changelog

console-operator

OCPBUGS-57630: Update downloads deployment configuration to use master node selector #1005
OCPBUGS-57129: Revert adding Console capability into SVM #1004
OCPBUGS-57519: Revert #981 “CONSOLE-4523, OCPBUGS-57468: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads” #994
OCPBUGS-57129: Add missing Console capability annotation #992
CONSOLE-4523, OCPBUGS-57468: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #981
ODC-7790: Remove ODO download link #987
OCPBUGS-52556: Revert v1alpha1 removal #990
OCPBUGS-43792: Add plugins order to console config #980
OCPBUGS-55698: Lift FeatureGate by bumping openshift/api #984
Full changelog

coredns

ART-13079: append .0 to go.mod version #132
Full changelog

csi-driver-manila, openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-57798: Rebase main onto release-1.33 #329
NO-JIRA: OWNERS: Update team osasinfra #326
OCPBUGS-56028: [cinder-csi-plugin] Don’t report topology capability when –with-topology=False #325
Full changelog

csi-driver-nfs

NO-JIRA: Merge https://github.com/kubernetes-csi/csi-driver-nfs:master into main #154
OCPBUGS-57851: Updating csi-driver-nfs-container image to be consistent with ART for 4.20 #157
NO-JIRA: OWNERS: Update team osasinfra #155
Full changelog

csi-external-attacher

OCPBUGS-57569: Updating csi-attacher-container image to be consistent with ART for 4.20 #85
Full changelog

csi-external-provisioner

OCPBUGS-57915: Updating csi-provisioner-container image to be consistent with ART for 4.20 #114
Full changelog

csi-external-resizer

OCPBUGS-57847: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.20 #170
Full changelog

csi-external-snapshotter, csi-snapshot-controller

Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.20 #179
OCPBUGS-57552: Updating ose-csi-external-snapshotter-container image to be consistent with ART for 4.20 #178
Full changelog

csi-livenessprobe

OCPBUGS-57738: Updating csi-livenessprobe-container image to be consistent with ART for 4.20 #74
Full changelog

csi-node-driver-registrar

OCPBUGS-57849: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.20 #81
Full changelog

docker-builder

OCPBUGS-57676: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.20 #472
OCPBUGS-56106: S2I build cpu limits observed by assemble are limited to 1 cpu #470
Full changelog

docker-registry

OCPBUGS-57583: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.20 #435
OCPBUGS-56483: bump jwt and oauth dependencies #427
Full changelog

driver-toolkit

Updating driver-toolkit-container image to be consistent with ART for 4.20 (#170) #170
fix: Use VERSION_ID for RHEL minor version (#168) #168
Full changelog

gcp-cloud-controller-manager

OCPBUGS-57575: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.20 #81
Full changelog

gcp-cluster-api-controllers

OCPCLOUD-2918: Merge https://github.com/kubernetes-sigs/cluster-api-provider-gcp:v1.10.0 (6518ef9) into master #245
OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #242
Full changelog

gcp-machine-controllers

OCPBUGS-57867: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.20 #121
OCPBUGS-46387: allow instances with unknown quotas to be created #114
Full changelog

gcp-pd-csi-driver

OCPBUGS-57712: Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.20 #78
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-57568: Updating ose-gcp-pd-csi-driver-operator-container image to be consistent with ART for 4.20 #146
Full changelog

gcp-workload-identity-federation-webhook

OCPBUGS-57909: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.20 #8
Full changelog

hyperkube, kube-proxy, pod

OCPBUGS-55678: Fix flake caused by invalid detection of active policies in VAP integration tests #2346
NO-JIRA: UPSTREAM: <carry>: Update rebase.sh to handle go versions major.minor.patch #2319
TRT-2097: UPSTREAM: <carry>: Fix up kube test suite definitions for OTE #2330
Revert “TRT-2068: Reintroduce removal of non-suite annotation rules, and fix topology selector” #2329
TRT-2068: Reintroduce removal of non-suite annotation rules, and fix topology selector #2322
OCPNODE-3010: openshift-hack: enable userns e2e tests #2239
TRT-2141: Revert #2299 “TRT-1854: remove annotation rules that don’t relate to suites” #2318
TRT-1854: remove annotation rules that don’t relate to suites #2299
OCPBUGS-56436: Bump 4.20 1.32.5 #2308
CNTRLPLANE-179: apiserver library go bump #2285
OCPBUGS-55944: UPSTREAM: <carry>: unrevert: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2295
OCPBUGS-55631: UPSTREAM: 131495: Handle unsupported node expansion for RWX volumes #2288
NO-JIRA: Fix generation of test names #2296
OCPBUGS-54208: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2277
OCPBUGS-54318: UPSTREAM: 131236: RWX tests should create RWX volumes #2279
OCPBUGS-55945: Bump main 1.32.4 #2292
TRT-2103: Revert “NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated.” #2291
NO-JIRA: UPSTREAM: <carry>: Mark admissionregistration.k8s.io/v1beta1 as deprecated. #2287
OCPBUGS-55632: Fix node expansion on older kubelets #2282
TRT-2066: Use OTE generated labels for skips in test-kubernetes-e2e.sh #2255
Full changelog

hypershift

OCPSTRAT-2173: Revert “Merge pull request #6227 from sjenning/hcco-empty-client-secret” #6365
CNTRLPLANE-1046: Fix hack/tools go module name and bump golangci-lint to last v1 minor #6361
Update github.com/openshift/cluster-api-provider-agent/api digest to 899af65 #5803
ACM-21713: fix(konflux): go-toolset runs as default(1001) #6360
NO-JIRA: Run validate conditions after ho upgrade test #6351
NO-JIRA: Update ROSA envs #6326
OCPBUGS-58200: Drop version history length #6329
OCPBUGS-58031: AKS: HCP operator should set Shared ClusterServiceLoadBalancerHealthProbeMode #6314
ACM-21713: adding .git in .dockerignore to fix version info #6317
OCPBUGS-56701: Fix LookupDefaultOCPVersion to use the supported-versions ConfigMap to find a default release image #6297
CNTRLPLANE-777: Update manifest.go to use latest oc committed code #6316
OCPBUGS-56430: Fix restarting prometheus Sts after HCP restoration #6322
HOSTEDCP-2253: doc/aws-autoNode: initial deployment guide #5443
OCPBUGS-49812: Sanitize PowerVS image name to comply with updated naming standards #6249
CNTRLPLANE-902: New metrics for HCP Azure #6180
NO-JIRA: Add Azure DNS Zone Clean-up Instructions #6312
CORENET-6094: CNO: add FRR-k8s image #6290
METAL-1404: Allow enabling capabilities and make baremetal capability opt-in by default on hosted clusters #6158
OCPBUGS-57497: Revert “Add proxy trustedCA to ignition config” #6288
OCPBUGS-57115: Update PSA from v1beta1 to v1 #6287
MGMT-20801: Enable disabling of Insights capability #6246
CNTRLPLANE-983: Enable codespell in verify and fix all spelling mistakes #6262
NO-JIRA: Add misspell to golangci-lint #6253
CNV-61396: set kubevirt cis rbac valid only for kubevirt platform #6254
CNTRLPLANE-942: update KAS bootstrapping to get RBR from CAO #6137
AUTOSCALE-119: Add pod monitors to karpenter components #6206
OCPBUGS-45265: Don’t use /version for haproxy health checks #6202
CNTRLPLANE-374: hcco: handle post-install creation of OIDC client secrets #6227
OCPBUGS-56861: Remove CapacityReservation validation that requires aws access #6248
CNTRLPLANE-977: Update Konflux references #6217
OCPBUGS-55892: make image registry managed identity optional #6127
CNV-61396: Sync RBAC for expansion support in kubevirt CSI driver #6226
OCPBUGS-57125: Support deserializing monitoring manifests when RHOBS enabled #6238
OCPBUGS-56966: Fix ignition server route getting constantly recreated #6225
OCPBUGS-57125: Support RHOBS when loading cpov2 monitoring manifests by replacing the API group #6228
OCPBUGS-53259: Reuse hosted cluster release and metadata providers #6095
OCPBUGS-54720: HCP payload doesn’t respect multiple mirrors #6222
ARO-15626: Disallow users from setting .spec.managementState to Removed in the image registry operator config on Azure #6013
NO-JIRA: cpo/oidc: remove validation functions that use default CEL compiler #6221
NO-JIRA: Create test fixtures for all resources in TestControlPlaneComponents #6216
OCPBUGS-42938: Support proxy authentication when user/pass is included in URL #6207
OCPBUGS-30260: Allow setting target node selector for control plane router #3946
OCPBUGS-56930: test/e2e: fix version gate checks on minor upgrade #6219
NO-JIRA: Follow up PR from #6192 #6204
MGMT-20682: Enable disabling of openshift-samples capability #6197
OCPBUGS-56430: Add DR operations after HC restoration #6195
CNTRLPLANE-936: fix(tekton): drop multiarch builds on PR #6223
CNTRLPLANE-844: Delete legacy unused DeploymentConfig code #6210
CNTRLPLANE-206: Add NetworkPolicy to shared-ingress #6173
WRKLDS-1676: ocm: Make config compatible with library-go #6203
NO-JIRA: Fix documentation field name for KubeAPIServerDNSName #6220
OCPBUGS-56814: PodSecurityConfiguration Kas config render from gate #6213
OCPBUGS-56777: Move EnsurePSANotPrivileged to AtLeast(t, Version420) #6211
AUTOSCALE-266: Refactor karpenter-operator and karpenter into v2 components #6187
CNTRLPLANE-201: feat(shared-ingress): Bump ubi10 out of beta #6200
OCPBUGS-56492: Fix CatalogSource image check when unauthorized #6192
CNTRLPLANE-931: update konflux references #6188
NO-JIRA: Add unit test for reconciling components with a WithManifestAdapter for SA #6191
NO-JIRA: Fix serviceaccounts with custom adapter not getting pull-secret #6185
OCPBUGS-56457: Do not validate OCP API Server SANS if PKI reconciliation is disabled #6171
CNTRLPLANE-905: feat(shared-ingress): add arm64 builds #6175
CNTRLPLANE-810: Increase imageContentSources slice length validation #6166
CNTRLPLANE-914: chore(deps): update konflux references #6165
CNTRLPLANE-905: Red Hat Konflux update hypershift-shared-ingress-main #6174
CNTRLPLANE-201: feat(shared-ingress): Add el10 Containerfile #6168
NO-JIRA: Remove ControlPlaneV2 API featuregate #6169
NO-JIRA: Move ControlPlaneComponent CRD installation to the CLI #6167
WRKLDS-1676: ocm config: Update leaderElection.name #6156
CNTRLPLANE-844: Refactor CAPI provider/manager into v2 #6159
CNTRLPLANE-844: Refactor ControlPlaneOperator into v2 component #6148
CNTRLPLANE-844: Remove DeploymentConfig usage #6157
NO-JIRA: Fix TestHostedClusterWatchesEverythingItCreates not working locally #6149
NO-JIRA: Keep checking for rollouts during upgrade HO test for five minutes #6097
OCPBUGS-56205: Switch back to rh catalog #6154
OCPBUGS-56164: Fix HyperShift Operator Enterprise contract konflux pipeline #6138
OCPBUGS-56011: Configure ClusterServiceLoadBalancerHealthProbeMode a… #6099
CNTRLPLANE-565: Remove NodePool CapacityReservation API featuregate #6132
CNTRLPLANE-645: Rename NodeCount flag to Replicas #6094
CNTRLPLANE-844: Remove unused DeploymentConfig references #6146
NO-JIRA: test/setup: use case-sensitive prometheusK8s in monitoring config #6150
NO-JIRA: Increase the content width in the upstream docs #6147
NO-JIRA: cpov2: fix structured authentication configuration serialization #6135
CNTRLPLANE-269: Remove legacy machine approver and ign server reconciliation code #6133
OCPBUGS-55913: Fix Job status returning empty reason and message #6134
CNTRLPLANE-269: Remove DeploymentConfig usage from cpov2 #5724
OCPBUGS-37323: MarkPersistentFlagRequired does not work since CLI refactoring #5649
NO-JIRA: Fix minor issues with Azure HC creation doc #6128
OCPBUGS-55504: Add postStart hook to kube-apiserver container #6074
CNTRLPLANE-709: Add ability to limit platform specific resources managed by HostedCluster #6039
CNTRLPLANE-261: Enable pprof in hosted control plane etcd #6003
CNTRLPLANE-334: Update KASv2 structured authentication configuration #6119
CNTRLPLANE-334: Update KAS structured authentication configuration generation logic to use new uid and extra field #6073
OCPBUGS-54483: Add support for registry root entry only in the IDMS/ICSP #6100
OCPBUGS-55357: Only build main branch components #6078
CNTRLPLANE-265: Enable staticcheck linter in golangci-lint #5836
CNTRLPLANE-740: Add DR for HCP using OADP and Hypershift plugin #6077
NO-JIRA: bump HO supported version to 4.20 #6006
CNTRLPLANE-798: ho: changes to ref’ed resources triggers HC reconciliation #6103
Full changelog

ibm-cloud-controller-manager

OCPCLOUD-2925: Merge https://github.com/IBM-Cloud/cloud-provider-ibm:release-1.33 (1ccdaca) into main #80
OCPBUGS-57678: Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 4.20 #81
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-57701: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.20 #145
Full changelog

ibmcloud-cluster-api-controllers

OCPCLOUD-2922: Merge https://github.com/kubernetes-sigs/cluster-api-provider-ibmcloud:v0.11.0 (9369909) into main #113
OCPBUGS-56365: Update manifests to remove dependency on admissionregistration v1beta1 #111
NO-JIRA: Do not gitignore files inside vendor #112
Full changelog

insights-operator

Updating ose-insights-operator-container image to be consistent with ART for 4.20 (#1095) #1095
fix(docs): update new SCA endpoint (#1096) #1096
feat: copy proxy envs from IO pod to gathering pods (#1094) #1094
NO-JIRA: update github.com/openshift/api and openshift/client-go to latest version (#1092) #1092
feat: add Progressing condition (#1090) #1090
OCPBUGS-55805 Enhance insights-runtime-extractor errors (#1085) #1085
OCPBUGS-55804 Report an error when the insights-runtime-extractor is not running (#1086) #1086
feat: update DataGather condition reasons (#1084) #1084
feat: ensure the etc-entitlement-pki secret exists (#1082) #1082
feat: move HTTP status code from condition.Reason to condition.Message (#1083) #1083
feat: add gatheringDisabled condition (#1078) #1078
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-57682: Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.20 #47
OCPBUGS-57773: Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.20 #48
test: Fix JBoss EAP 8.0 version #45
test: Fix JBoss EAP 8.0 version #46
Full changelog

ironic

OCPBUGS-57806: Updating ironic-container image to be consistent with ART for 4.20 #664
OCPBUGS-52427: Bump sushy to include Targets fix #663
METAL-1376: Make sushy support NetworkAdapters #662
Bug OCPBUGS-55434: Bump sushy to include SuperMicro boot device string workaround #659
METAL-1344: Do not install sushy-oem-idrac separately #653
METAL-1345: Install scciclient from source #652
METAL-1264: Update to latest upstream content #655
OCPBUGS-55381: Extract files one-by-one in logwatch #654
Full changelog

ironic-agent

OCPBUGS-56029: Erase software RAID when install_coreos is used #187
OCPBUGS-57663: Updating ironic-agent-container image to be consistent with ART for 4.20 #190
METAL-1264: Update to latest upstream content #186
OCPBUGS-55350: collect the entire journal from the host #184
Full changelog

ironic-machine-os-downloader

OCPBUGS-57687: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.20 #105
ART-13079: append .0 to go.mod version #101
Full changelog

ironic-static-ip-manager

OCPBUGS-57853: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.20 #52
Full changelog

keepalived-ipfailover

OCPBUGS-57572: Updating openshift-enterprise-egress-dns-proxy-container image to be consistent with ART for 4.20 #208
OCPBUGS-57510: Updating openshift-enterprise-base-rhel9-container image to be consistent with ART for 4.20 #207
OCPBUGS-48318: Change default value for OPENSHIFT_HA_VRRP_ID_OFFSET #206
Full changelog

kube-metrics-server

OCPBUGS-57726: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.20 #44
Full changelog

kube-rbac-proxy

NO-JIRA: v0.19.1 #119
Full changelog

kube-state-metrics

OCPBUGS-57686: Updating kube-state-metrics-container image to be consistent with ART for 4.20 #121
Full changelog

kube-storage-version-migrator

Fix verify job failure with build-machinery bump #214
ART-13079: append .0 to go.mod version #212
Full changelog

kubevirt-csi-driver

CNV-61396: Implement volume expansion #61
Full changelog

machine-api-operator

SPLAT-2082: Create e2e for vSphere vm-host zonal feature #1374
Revert “OCPCLOUD-2986,OCPBUGS-56849: fix: controllers: guard on empty .status.authoritativeAPI” #1383
OCPBUGS-56849, OCPCLOUD-2986: fix: controllers: guard on empty .status.authoritativeAPI #1380
NO-JIRA: Make crds-sync module-configuration agnostic #1382
SPLAT-2039: Fixed test logic for hybrid env scenario #1379
OCPBUGS-57018: Fixed test logic for UPI scenario #1375
OCPBUGS-56923: Revert “SPLAT-2082 - Create e2e for vSphere vm-host zonal feature” #1373
SPLAT-2082: Create e2e for vSphere vm-host zonal feature #1369
OCPCLOUD-2717: bump openshift/api #1372
OCPBUGS-56159: correct aws kms permissions #1370
OCPBUGS-55461: Changed machineset tests to be serial #1365
OCPBUGS-55720: fix: use patch for machine/machineset status #1362
OCPBUGS-55461: Fixes machineset paused condition nil pointer #1361
OCPBUGS-55461: Revert “Added skip for when config not multi nic” #1363
Full changelog

machine-config-operator

MCO-1661: Feature Gate handling rework #5029
OCPBUGS-57702: Update images to be consistent with ART #5146
NO-ISSUE: API & client-go version bumps #5142
MCO-1624: Make MCN e2e tests blocking #4972
MCO-1741: Add cloud providers to the kubernetes vendor #5145
OCPBUGS-58180: Add control-plane label for master nodes on legacy clusters #5147
MCO-1719: MVP port of the MCO extended QE test suite #5108
MCO-1282: Remove all code related to the Image Registry workaround Config Map #5093
OCPBUGS-57426: OCPBUGS-57506: Boot image controller should correctly handle marketplace boot images #5122
MCO-1591: Ignition recursive converter #4913
OCPBUGS-57072: configure-ovs: don’t escape : in nmcli output #5106
OCPBUGS-57458: add MachineConfiguration to CO related objects #5124
MCO-1580: MCO-1581: Achieving parity with MCO node disruption frequency #4996
OCPBUGS-56220: Ensure the build controller restarts on upgrade #5100
OCPBUGS-56555: openvswitch3.5-ipsec package not included with ipsec os extension #5112
NO-ISSUE: Add Jetbrains IDEs files to .gitignore #5116
OCPBUGS-55663: Remove NodeDisruptionPolicy featuregate #5092
OCPBUGS-7747: Do not set cpu system reserve below the default value #5046
OCPBUGS-45459: Remove trailing period from hostnames #4966
OCPBUGS-56744: Fix typo in MCN’s MachineConfigNodePinnedImageSetsDegraded message #5099
OCPBUGS-55830: Only update boot disks during GCP boot image updates #5084
OCPBUGS-55365: Regardless of Pool configuration wait on other sub-controllers to Render #5022
OCPBUGS-45621: Fix dynamic-system-reserved-calc.sh when only true parameter is used #4733
NO-JIRA: OWNERS: Update team osasinfra #5066
OCPBUGS-36859: Support NODEIP_HINT in IPI deployments too #4973
OCPBUGS-56446: daemon: fix ostree-finalize-staged race workaround for package mode RHEL workers #5067
OCPBUGS-55681: Give keepalived container chroot cap #5032
NO-JIRA: operator: use component annotation for ownership #5056
OCPBUGS-56211: Boot Image Controller should not degrade when golden configmap is slow to update #5051
OCPBUGS-53390: Fix interrupt state to account for failure correctly #5054
OCPBUGS-55967: Add hot loop detection in the boot image controller #5037
OCPBUGS-55439: scope MCD node listers to current node #5015
OCPBUGS-55770: Compare the osImageURLs for OS validation check #5041
MCO-1654: Add new runbook for KubeletHealthState to alert #5042
OCPBUGS-49728: Adapt MCC to use LayeredNodeState and remove LayeredPoolState #4841
OCPBUGS-54697: error from generateAndValidateRenderedMachineConfig function can be misleading #5033
OCPNODE-3173: Disable OCI artifact mount by default. #5016
OCPBUGS-55597: OWNERS: update owners file with current MCO team members #5024
OCPBUGS-55450: Only populate Status.PinnedImageSets.CurrentGeneration on valid generation value #5023
OCPBUGS-55327: Bugfix Ignition compression merge #5006
OCPBUGS-55262: Use auto=start only for IPsec out connections #5017
OCPBUGS-55713: Revert “OCPBUGS-44757: decrease leases for kubelet on azure” #5030
OCPBUGS-52940: AWS Custom-DNS: Update services that run on control plane nodes #4939
OCPBUGS-41485: Update MCD Log Output to Clarify No Configuration Change #5019
Full changelog

machine-image-customization-controller

OCPBUGS-57848: Update image to be consistent with ART for 4.20 #139
NO-ISSUE: Remove inactive OWNERS, add Riccardo #136
Full changelog

machine-os-images

OCPBUGS-57659: Updating ose-machine-os-images-container image to be consistent with ART for 4.20 #64
OCPBUGS-55810: Dummy change to force a rebuild for 4.20 #62
Full changelog

metallb-frr

Align2006 #98
Full changelog

monitoring-plugin

OU-744: fix: set correct pf color for gradient background on legacy dashboards legend #452
OU-880: fix: allow correct selection of dashboard with same name in different projects #451
OCPBUGS-57813: Updating monitoring-plugin-container image to be consistent with ART for 4.20 #441
OU-814: fix: prevent variable provider cache when dashboard change #448
OU-772: remove troubleshooting panel links from non-admin #447
OU-814: Fix perses dashboard selection #431
NO-JIRA: fixing Makefile to run build-dev-mcp-image #438
NO-JIRA: feat: improve loading state and project dropdown re-rendering #432
NO-JIRA: adjust README.md to refer to build-dev-mcp-image #436
OU-788: [Auto][BVT] - implementing monitoring plugin and monitoring console plugin BVT #435
OU-786 and OU-775: Perses Dropdowns #429
OU-842: fix: override notistack dependency to avoid conflict #422
NO-JIRA: chore: Update OWNERS #420
OU-830: fix: add error boundary to variable dropdown #417
OCPBUGS-56095: “Negative matcher” is checked by default on Create silence page #414
OU-712: fix: add missing alertname field to silence alert #413
OU-794: fix: update monitoring and virtualization routes to avoid overriding console routes #410
OU-774: bound table scroll and column alignment #402
RHINENG-17675: feat: add group id to url params #403
RHINENG-10537: fixed broken delete chip group for incidents filters #401
OU-197: feature: upgrade react router to v5 compat #400
OU-745: Check for CSRF change on each fetch cycle #404
Full changelog

multus-admission-controller

ART-13079: append .0 to go.mod version #94
Full changelog

multus-networkpolicy

Updating ose-multus-networkpolicy-container image to be consistent with ART for 4.20 (#72) #72
Downstream sync 2025-06-19 (#74) #74
Full changelog

must-gather

OCPBUGS-57890: Updating ose-must-gather-container image to be consistent with ART for 4.20 #497
OCPBUGS-52367: Fix collecting IPsec data for upgrade #482
CORENET-5882: network: gather routeadvertisements.k8s.ovn.org #485
Full changelog

network-interface-bond-cni

OCPBUGS-57944: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.20 #76
OCPBUGS-57754: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.20 #73
CNF-17883: Upstream Sync 26052025 #71
OCPBUGS-54229: Upstream sync 07-05-2025 #67
NO-JIRA: Add ci-operator file #68
Full changelog

network-tools

ART-13079: append .0 to go.mod version #145
NO-JIRA: Add aurko, comment jakob, remove nadia #143
NO-JIRA: Fix github epic ID and username matching #142
Full changelog

networking-console-plugin

OCPBUGS-57805: Updating networking-console-plugin-container image to be consistent with ART for 4.20 #252
OCPBUGS-56929: Add fileupload translation #245
OCPBUGS-49386: Fix pod contenxt #246
CNV-61902: fetch description of terms for popovers #244
CNV-61827: fix styling issues #243
CNV-61536: align Modals with PatternFly default #242
CNV-60062: fix links to upstream documentation #241
Full changelog

nutanix-machine-controllers

OCPBUGS-57705: Updating ose-nutanix-machine-controllers-container image to be consistent with ART for 4.20 #103
NO-JIRA: go.keploy.io/server@v0.8.6: checksum mismatch fix #112
Full changelog

oauth-proxy

APPSRE-11869: Fixing CVEs not related to k8s bump #324
OCPBUGS-57487: fix e2e tests #321
Full changelog

oauth-server

Use newer build-machinery-go #177
ART-13079: append .0 to go.mod version #175
OSASINFRA-3534: Bump Gophercloud to v2 #170
Full changelog

oc-mirror

OCPBUGS-57370: v2/defaults Fix rate limiting issues by enabling exponential backoff retries (#1202) #1202
OCPBUGS-52470: Fixes the tag when rebuilt catalog by digest only (#1185) #1185
adds README.md for v2 and rename v1 readme to README_v1.md (#1191) #1191
OCPBUGS-57362: v2/mirror: retry in case of ContextDeadlineExceeded (#1181) #1181
upgrades distribution to v3.0.0 (#1156) #1156
OCPBUGS-57826: Updating oc-mirror-plugin-container image to be consistent with ART for 4.20 (missing files of pr 1189) (#1190) #1190
Updating oc-mirror-plugin-container image to be consistent with ART for 4.20 (#1189) #1189
OCPBUGS-55374: Add console warning if bad umask is detected (#1186) #1186
OCPBUGS-54473: Bug fix - incomplete error messages for helm charts (#1172) #1172
OCPBUGS-57461: v2/operator: add rebuilt catalog to tar file (#1184) #1184
OCPBUGS-57387: v2/archive: fix sanitization of . (#1179) #1179
OCPBUGS-51157: Bug fix for invalid release image does not cause mirro… (#1150) #1150
skips invalid helm image from templates (#1178) #1178
OCPBUGS-55074: deletes cosign tag based signatures (#1169) #1169
adds code to handle signature errors in the archive pkg (#1162) #1162
OCPBUGS-55078: skips signature mirroring for rebuilt operator catalogs (#1154) #1154
OCPBUGS-56009: Bug fix for no release signature found (#1147) #1147
OCPBUGS-56486: v2/config: allow delete and mirror words (#1164) #1164
OCPBUGS-56642: update the Dockerfile to work with the 1.23 go.mod (#1159) #1159
disables the signature verification on operator catalog collection (#1151) #1151
OCPBUGS-55966: v2/archive: print unarchive progress (#1141) #1141
OCPBUGS-54443: v2/cli: always remove past archives before m2d (#1144) #1144
OCPBUGS-56117: Make v2 blockedImages use regular expressions (#1145) #1145
changes the signature mirroring default to disabled (#1143) #1143
OCPBUGS-54587: v2: bump containers/common dep to 0.63.0 (#1138) #1138
CLID-182: Add spinner to release collector mirror to disk or mirror to mirror (#1085) #1085
no-jira: Disable go workspace and build v2 as a binary (#1078) #1078
OCPBUGS-55100: implements registries.d file as specified in containers/image docs (#1131) #1131
OCPBUGS-54220: v2/imgbuilder: use –authfile when set (#1129) #1129
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #394
NO-ISSUE: Synchronize From Upstream Repositories #388
OCPBUGS-55051: Synchronize From Upstream Repositories #384
OPRUN-3957: Synchronize From Upstream Repositories #382
NO-ISSUE: Synchronize From Upstream Repositories #381
NO-ISSUE: Synchronize From Upstream Repositories #380
NO-ISSUE: Synchronize From Upstream Repositories #377
NO-ISSUE: Synchronize From Upstream Repositories #375
NO-ISSUE: Synchronize From Upstream Repositories #367
NO-ISSUE: Synchronize From Upstream Repositories #365
NO-ISSUE: Synchronize From Upstream Repositories #363
NO-ISSUE: Synchronize From Upstream Repositories #359
NO-ISSUE: Synchronize From Upstream Repositories #356
NO-ISSUE: Synchronize From Upstream Repositories #352
NO-ISSUE: Synchronize From Upstream Repositories #346
NO-ISSUE: Synchronize From Upstream Repositories #344
NO-ISSUE: Synchronize From Upstream Repositories #339
NO-ISSUE: Synchronize From Upstream Repositories #337
NO-ISSUE: Synchronize From Upstream Repositories #336
NO-ISSUE: Synchronize From Upstream Repositories #333
NO-ISSUE: Synchronize from upstream #331
Full changelog

openshift-apiserver

NO-JIRA: Add Apache 2.0 License file #523
OCPBUGS-45729: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.19 #486
OCPBUGS-56736: Revert “OCPBUGS-38120: project: run validation function when deleting an object” #519
OCPBUGS-35944: Allow updates to ImageStreams that violate existing LimitRanges #513
OCPBUGS-35855: Wire dry run option to Image API server operations #511
OCPBUGS-38120: project: run validation function when deleting an object #508
OCPBUGS-54458: Fix image reference in TestImageStreamImportQuayIO #509
Full changelog

openshift-controller-manager

OCPBUGS-57918: ignore error failing to find pull/push secrets #397
WRKLDS-1676: cmd: Refactor to use NewControllerCommand #378
OCPBUGS-57198: Make the pull secrets volume mounts in build containers read-only. #387
WRKLDS-1676: pkg/cmd: Add –kubeconfig and –namespace flag #385
WRKLDS-1676: Delete unused pkg/serviceaccounts #381
OCPBUGS-52193: legacy image pull secret rollback controller #380
OCPBUGS-54695: Empty proxy variables are causing issues during the build #373
Full changelog

openshift-state-metrics

OCPBUGS-48747: Dedup *_status metrics for Routes #120
OCPBUGS-57771: Updating openshift-state-metrics-container image to be consistent with ART for 4.20 #125
ART-13079: append .0 to go.mod version #121
Full changelog

openstack-cluster-api-controllers

Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #369
OCPBUGS-57559: Updating openstack-cluster-api-controllers-container image to be consistent with ART for 4.20 #368
Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.12 into main #367
OWNERS: Update team osasinfra #363
Full changelog

openstack-machine-api-provider

OCPBUGS-57823: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.20 #135
NO-JIRA: OWNERS: Update team osasinfra #133
NO-JIRA: Unignore generated files in the vendor directory #134
Full changelog

openstack-resource-controller

NO-JIRA: Update OWNERS_ALIASES #21
OCPBUGS-57814: Updating openstack-resource-controller-container image to be consistent with ART for 4.20 #19
NO-JIRA: Merge https://github.com/k-orc/openstack-resource-controller:release-1.0 into main #18
NO-JIRA: Merge from upstream #17
NO-JIRA: Merge https://github.com/k-orc/openstack-resource-controller:release-1.0 into main #16
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPBUGS-58275: Fix networkpolicy filter for microshift manifests #1031
NO-ISSUE: Synchronize From Upstream Repositories #1029
OCPBUGS-57554: Updating ose-operator-framework-tools-container image to be consistent with ART for 4.20 #1026
OCPBUGS-57595: Updating operator-registry-container image to be consistent with ART for 4.20 #1028
OCPBUGS-57566: Updating operator-lifecycle-manager-container image to be consistent with ART for 4.20 #1027
NO-ISSUE: Synchronize From Upstream Repositories #1024
NO-ISSUE: Synchronize From Upstream Repositories #1016
OCPBUGS-43966, OCPBUGS-57222: Synchronize From Upstream Repositories #1014
NO-ISSUE: Synchronize From Upstream Repositories #1013
OCPBUGS-56467: Synchronize From Upstream Repositories #1005
OPRUN-3903, OPRUN-3906, OPRUN-3923, OPRUN-3926: Add NetworkPolicy support to OLMv0 components #1008
NO-ISSUE: Synchronize From Upstream Repositories #1003
NO-ISSUE: Synchronize From Upstream Repositories #1002
NO-ISSUE: Synchronize From Upstream Repositories #1000
NO-ISSUE: Synchronize From Upstream Repositories #997
OCPBUGS-53161, OPRUN-3880: Synchronize From Upstream Repositories #996
Full changelog

operator-marketplace

OCPBUGS-57711: Updating marketplace-operator-container image to be consistent with ART for 4.20 #641
NO-ISSUE: (cleanup): Update Owner Alias - remove inactive maintainers #631
NO-JIRA: OWNERS: Add camilamacedo86 and tmshort as approvers #632
NO-ISSUE: Bump github.com/operator-framework/api from 0.30.0 to 0.31.0 #627
NO-ISSUE: (CI) - Add check to avoid we upgrade by mistake the go vers… #625
NO-ISSUE: Add dependabot k8s and go library groupings #626
NO-ISSUE: Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 #620
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

OCPBUGS-44481: DownStream Merge [06-10-2025] #2627
OCPBUGS-55098: DownStream Merge [06-04-2025] #2618
Full changelog

powervs-block-csi-driver

OCPBUGS-57598: Updating ose-powervs-block-csi-driver-container image to be consistent with ART for 4.20 #98
MULTIARCH-5572: Rebase ibm-powervs-block-csi-driver with upstream #99
Full changelog

powervs-block-csi-driver-operator

OCPBUGS-57699: Updating ose-powervs-block-csi-driver-operator-container image to be consistent with ART for 4.20 #84
Full changelog

powervs-cloud-controller-manager

OCPBUGS-57857: Updating ose-powervs-cloud-controller-manager-container image to be consistent with ART for 4.20 #86
Full changelog

powervs-machine-controllers

OCPBUGS-57860: Updating ose-powervs-machine-controllers-container image to be consistent with ART for 4.20 #119
NO-ISSUE: Use OS_GIT_VERSION in Makefile when found (for Konflux builds) #118
Full changelog

prom-label-proxy

OCPBUGS-57850: Updating prom-label-proxy-container image to be consistent with ART for 4.20 #383
NO-JIRA: [bot] Bump openshift/prom-label-proxy to v0.11.1 #379
Full changelog

prometheus

OCPBUGS-57729: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.20 #259
MON-4245: chore(image): reduce binary size by excluding unused SD deps #251
MON-4251: update prometheus to v3.3.1 #252
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

OCPBUGS-57881: Updating prometheus-operator-container image to be consistent with ART for 4.20 #334
OCPBUGS-57809: Updating prometheus-config-reloader-container image to be consistent with ART for 4.20 #332
OCPBUGS-57629: Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.20 #331
Full changelog

prometheus-node-exporter

OCPBUGS-57600: Updating golang-github-prometheus-node_exporter-container image to be consistent with ART for 4.20 #168
Full changelog

rhel-coreos, rhel-coreos-extensions

COS-3294: extensions/rhel-10.1: skip crun-wasm dependency due to missing repo #1825
OCPEDGE-1706: [TNF] OCP Two Node with Fencing symlink begone! #1826
COS-3294: extensions/rhel-10.1: drop kernel-rt-kvm package from RHEL 10 builds #1824
Merge #1823
NO-JIRA: faq: add info about querying rpmdb and extensions #1820
NO-JIRA: bump verison to 4.20 #1804
NO-JIRA: c9s/c10s repos: use basearch var for extras repo #1819
NO-JIRA: README.md: add Mermaid diagram #1816
NO-JIRA: tree: delete base compose files, rework README #1811
NO-JIRA: Remove kernel-rt-kvm for cs9 and cs10 #1814
NO-JIRA: tests: fix RHEL 10.1 handling in kernel replace test #1813
Full changelog

telemeter

OCPBUGS-57537: Updating telemeter-container image to be consistent with ART for 4.20 #563
ART-13079: append .0 to go.mod version #559
OCPBUGS-56425: Accept and discard metadata requests over remote write #558
NO-JIRA: README.md: fix command to create an auth token #557
Full changelog

tests

NO-JIRA: upkeep: change to use image shell image #29948
TRT-2068: additional defaults for MicroShift #29904
CNF-17748: Add a comparing between static entry test #29782
OKD-267: Support RFC339 based timestamp layout for reboot tests #29942
OCPBUGS-58036: Fix MCN test on agent compact FIPS jobs #29938
OCPBUGS-57632: Revert “Merge pull request #29808 from Prashanth684/4552-cvo-test” #29926
OCPBUGS-58132: OCPFeatureGate:SigstoreImageVerification use multi arch image for testing #29915
OPNET-582, OPNET-585: Add monitor test for on-prem keepalived #29387
CNF-12146: Add communication matrix test under networking #29633
OCPEDGE-1947: fix: resolve timeout problems during some arbiter tests #29939
NO-JIRA: OVNK BGP: use a config map to allocate EIPs and UDN subnets #29901
OCPBUGS-57517: Remove Python 3.8-ubi8 from Origin #29921
CORENET-5668: Update IPsec e2e test to validate NAT-T encapsulation option #29563
NO-JIRA: We should always run tests where we have no opinion on their gate #29828
OCPBUGS-57892: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.20 #29931
OCPBUGS-57426: Boot image controller should correctly handle marketplace boot images #29919
OCPBUGS-57397: properties should wrap around property #29914
NO-JIRA: auditloganalyzer: update test name, remove duplicated test #29930
TRT-2165: Include select pending alert intervals in spyglass #29925
OCPBUGS-57294: Fix e2e-aws-ovn-image-ecosystem test - Part 2 - remove old nodejs 18,ruby 3.1 ubi9 #29905
OCPBUGS-57421: Add sustaining engineers to owners on image ecosystem #29916
OCPNODE-3330: SigstoreImageVerification uses client-go to create test CRs #29896
MULTIARCH-5391: Add new featuregate test to check if desired.Architecture is set as intended #29808
OCPBUGS-57169: Fix failed tests of e2e-aws-ovn-tls-13 #29872
OCPBUGS-50701: Add test case for checking EgressFirewall DNS names in caps #29898
MCO-1652: Add MCO disruptive suite #29776
OCPBUGS-56786: RouteExternalCertificate : Add fix for None platform type #29868
OCPBUGS-56512: updates ruby to version 3.3 #29832
OCPBUGS-57049: TLS registry: refactor testcase annotations #29327
OCPBUGS-49441: Use different certificates for gRPC interoperability test routes #29757
OCPBUGS-56436: Bump 4.20 1.32.5 #29889
TRT-1854: set network for MicroShift to OVNKubernetes #29887
add smg247 as root approver #29860
OCPBUGS-56037: Stabilize custom MCP cleanup on MCN tests #29874
Revert “OCPNODE-2849: Add testcase to verify removal of cgroupv1 in OCP 4.19” #29886
OCPBUGS-56698: Skip tests modifying cluster/network.config when it is not permitted #29859
OCPBUGS-54412: Do not retry extension-sourced tests #29867
OCPBUGS-35855: Add dry-run server test for imagestreamtag #29834
OCPBUGS-56933: fix deployment rollout wait to wait for desired replicas #29876
SPLAT-2231: Updated tests to work with hybrid environments #29827
MCO-1722: Handle check for Disconnnected Clusters for PIS Testing using curl #29870
OCPBUGS-55830: Only update boot disks during GCP boot image updates tests #29869
Add oceanc80 to olm owners #29864
NO-JIRA: OVNK BGP: workaround OCPBUGS-56488 #29853
OCPBUGS-56743: Poll project deletion to fix flaky behavior #29850
OCPEDGE-1922: feat: rename and move arbiter tests #29846
CNTRLPLANE-353: Add test which verifes that only short duration tests are present #29629
NO-JIRA: ovn, virt, skip ipv6 for secondaries #29858
OCPBUGS-55721, OCPBUGS-55832: Fix RouteExternalCertificate tests for few other on-prem jobs #29764
ODC-7790: Remove ODODownloadsSyncDegraded #29835
NO-JIRA: router: Rename MarshalPrivateKeyToDERFormat to MarshalPrivateKeyToPEMString #29855
NO-JIRA: OVNK: ignore stderr when running commands #29845
NO-JIRA: OVNK BGP: set VRF-Lite timeout #29844
MULTIARCH-5390: tagimportmode: Do not skip tests if the import mode is the same as the import mode of the cluster #29801
OCPBUGS-56381: feat: update test to account for two node fencing #29807
MCO-1652: Add new MCO disruptive suite #29800
NE-2031: Enhancing the gateway controller test cases with two more function #29806
OCPBUGS-55394: Handle Metal CI test cases for PIS #29745
NO-JIRA: ovn, virt: Support proxy when downloading virtctl #29824
OCPBUGS-56196: Check to see if SamplesOperator managementState is Removed #29817
NO-JIRA: TLS registry update #29787
OCPNODE-3138: Add zstd:chunked image test #29713
OCPNODE-2849: Add testcase to verify removal of cgroupv1 in OCP 4.19 #29640
OCPBUGS-56047: OLMv1: Update test bundles [main/release-4.20] #29820
NO-JIRA: tls/violations: add sjenning to OWNERS #29819
NO-JIRA: ovnk, virt: Filter out ipv6 LLA #29816
NO-JIRA: Fix egressIP advertisements tests flake #29803
MCO-1615: Mco node degraded mcn condition #29684
NO-JIRA: Report back source for openshift-tests-extension #29733
TRT-2061: throttle monitor startup refactor #29637
OCPBUGS-55317: Skip GatewayAPIController tests on clusters without OLM capabilities #29784
CORS-3989: set proxy for http transport in router and imageregistry cases #29759
NO-JIRA: Revert: NO-JIRA: support skipping [OCP]FeatureGate… #29796
OCPBUGS-55211: use regular user to create httproute #29697
Revert “Revert “TRT-2049: check for any watch requests”” #29723
CORENET-5854: networking: add VRF-Lite test cases #29669
OCPEDGE-1678: Fix failed etcd test on arbiter ci run #29694
NO-JIRA: update networking owners #29786
NO-JIRA: increase api client timeout to match those allowed by kube-apiserver #29761
NO-JIRA: support skipping [OCP]FeatureGate tests #29760
OCPBUGS-55384: OCPBUGS-55968: Fix PIS tests on SNO & Enable applicable MCN & PIS tests on SNO #29785
OCPNODE-2315: Add nested container test #29781
OCPBUGS-55994: Do not set the MTU when using NetworkAttachementDefinition #29768
NO-JIRA: Test load balancer metrics #29675
NO-JIRA: Fix bearer token exposure in exit condition as well #29575
NO-ISSUE: Automated - Update synthetic test data #29716
TRT-2106: Fix race in MCN test cleanup #29775
OCPBUGS-55785: bump limits #29778
Revert “OCPNODE-2315: Add nested container test” #29779
CNTRLPLANE-371: Update etcd test data for k8s 1.33 release (missing data) #29773
OCPBUGS-55712: (olmv1 tests) Use exponential backoffs for verifyAPIEndpoints #29756
OCPBUGS-55945: Bump main 1.32.4 #29772
CORENET-5875, CORENET-5876, OCPBUGS-55910: Add EgressIP and L2 UDN route advertisements tests #29727
OCPNODE-2315: Add nested container test #29594
NO-JIRA: faultyloadbalancer test: pass instead of skip #29753
OCPBUGS-55902: pkg/monitortestlibrary/allowedalerts: Ignore KubeJobFailingSRE for now #29747
NO-ISSUE: OLMv1: Preflight: Relax checking of error message #29766
CNTRLPLANE-371: Update etcd test data for k8s 1.33 release #29699
OCPBUGS-55785: bump limits #29763
OCPNODE-2999: Add SigstoreImageVerification e2e tests #29652
OKD-243: Skip GatewayAPIController tests for OKD #29742
Full changelog

thanos

OCPBUGS-57564: Updating ose-thanos-container image to be consistent with ART for 4.20 #162
Full changelog

vsphere-cloud-controller-manager

OCPBUGS-56720: gitignore doesn’t ignore certain files in vendor/ #91
Full changelog

vsphere-cluster-api-controllers

OCPCLOUD-2921: Merge https://github.com/kubernetes-sigs/cluster-api-provider-vsphere:v1.13.0 (7cc3899) into master #58
NO-JIRA: Do not gitignore files inside vendor #57
Full changelog

vsphere-csi-driver, vsphere-csi-driver-syncer

OCPBUGS-57582: Updating vmware-vsphere-syncer-container image to be consistent with ART for 4.20 #146
OCPBUGS-57570: Updating ose-vmware-vsphere-csi-driver-container image to be consistent with ART for 4.20 #145
OCPBUGS-55020: UPSTREAM: 3262: Fix panic on DeletedFinalStateUnknown #142
Full changelog

vsphere-csi-driver-operator

OCPBUGS-57708: Updating ose-vmware-vsphere-csi-driver-operator-container image to be consistent with ART for 4.20 #306
Full changelog

vsphere-problem-detector

OCPBUGS-57656: Updating ose-vsphere-problem-detector-container image to be consistent with ART for 4.20 #185
OCPBUGS-53217: replace operator client #182
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Package List

cri-o-1.33.2-2.rhaos4.20.git0da1b7c.el9
kernel-5.14.0-570.25.1.el9_6
openshift-kubelet-4.20.0-202506261944.p0.g02b9b7e.assembly.stream.el9
systemd-252-51.el9_6.1

Full list (568 packages)

NetworkManager-1:1.52.0-4.el9_6
NetworkManager-cloud-setup-1:1.52.0-4.el9_6
NetworkManager-libnm-1:1.52.0-4.el9_6
NetworkManager-ovs-1:1.52.0-4.el9_6
NetworkManager-team-1:1.52.0-4.el9_6
NetworkManager-tui-1:1.52.0-4.el9_6
WALinuxAgent-udev-2.7.0.6-11.el9
aardvark-dns-2:1.14.0-1.el9
acl-2.3.1-4.el9
adcli-0.9.2-1.el9
afterburn-5.7.0-1.el9
afterburn-dracut-5.7.0-1.el9
alternatives-1.24-2.el9
attr-2.5.1-3.el9
audit-3.1.5-4.el9
audit-libs-3.1.5-4.el9
authselect-1.2.6-3.el9
authselect-libs-1.2.6-3.el9
avahi-libs-0.8-22.el9_6
basesystem-11-13.el9
bash-5.1.8-9.el9
bash-completion-1:2.11-5.el9
bind-libs-32:9.16.23-29.el9_6
bind-license-32:9.16.23-29.el9_6
bind-utils-32:9.16.23-29.el9_6
binutils-2.35.2-63.el9
binutils-gold-2.35.2-63.el9
bootc-1.1.6-3.el9_6
bootupd-0.2.27-3.el9
bsdtar-3.5.3-5.el9_6
bubblewrap-0.4.1-8.el9_5
bzip2-1.0.8-10.el9_5
bzip2-libs-1.0.8-10.el9_5
c-ares-1.19.1-2.el9_4
ca-certificates-2024.2.69_v8.0.303-91.4.el9_4
checkpolicy-3.6-1.el9
chrony-4.6.1-1.el9
cifs-utils-7.1-2.el9
clevis-21-208.el9
clevis-dracut-21-208.el9
clevis-luks-21-208.el9
clevis-systemd-21-208.el9
cloud-utils-growpart-0.33-1.el9
composefs-1.0.8-1.el9
composefs-libs-1.0.8-1.el9
conmon-3:2.1.12-1.el9
conmon-rs-0.6.6-0.rhaos4.18.el9.1
conntrack-tools-1.4.7-4.el9_5
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-4:2.237.0-1.el9_6
containernetworking-plugins-1:1.6.2-2.el9_6
containers-common-2:1-117.el9_6
coreos-installer-0.23.0-1.el9
coreos-installer-bootinfra-0.23.0-1.el9
coreutils-8.32-39.el9
coreutils-common-8.32-39.el9
cpio-2.13-16.el9
cracklib-2.9.6-27.el9
cracklib-dicts-2.9.6-27.el9
cri-o-1.33.2-2.rhaos4.20.git0da1b7c.el9
cri-tools-1.33.0-1.el9
criu-3.19-1.el9
criu-libs-3.19-1.el9
crun-1.21-1.el9_6
crypto-policies-20250128-1.git5269e22.el9
crypto-policies-scripts-20250128-1.git5269e22.el9
cryptsetup-2.7.2-3.el9_5
cryptsetup-libs-2.7.2-3.el9_5
curl-7.76.1-31.el9
cyrus-sasl-gssapi-2.1.27-21.el9
cyrus-sasl-lib-2.1.27-21.el9
dbus-1:1.12.20-8.el9
dbus-broker-28-7.el9
dbus-common-1:1.12.20-8.el9
dbus-libs-1:1.12.20-8.el9
dbus-tools-1:1.12.20-8.el9
device-mapper-9:1.02.202-6.el9
device-mapper-event-9:1.02.202-6.el9
device-mapper-event-libs-9:1.02.202-6.el9
device-mapper-libs-9:1.02.202-6.el9
device-mapper-multipath-0.8.7-35.el9_6.1
device-mapper-multipath-libs-0.8.7-35.el9_6.1
device-mapper-persistent-data-1.1.0-1.el9
diffutils-3.7-12.el9
dmidecode-1:3.6-1.el9
dnf-4.14.0-25.el9
dnf-data-4.14.0-25.el9
dnsmasq-2.85-16.el9_4
dosfstools-4.2-3.el9
dracut-057-88.git20250311.el9_6
dracut-network-057-88.git20250311.el9_6
dracut-squash-057-88.git20250311.el9_6
e2fsprogs-1.46.5-7.el9
e2fsprogs-libs-1.46.5-7.el9
efi-filesystem-6-2.el9_0
efibootmgr-16-12.el9
efivar-libs-38-3.el9
elfutils-debuginfod-client-0.192-6.el9_6
elfutils-default-yama-scope-0.192-6.el9_6
elfutils-libelf-0.192-6.el9_6
elfutils-libs-0.192-6.el9_6
ethtool-2:6.11-1.el9
expat-2.5.0-5.el9_6
file-5.39-16.el9
file-libs-5.39-16.el9
filesystem-3.16-5.el9
findutils-1:4.8.0-7.el9
firewalld-filesystem-1.3.4-9.el9_5
flashrom-1.2-10.el9
fstrm-0.6.1-3.el9
fuse-2.9.9-17.el9
fuse-common-3.10.2-9.el9
fuse-libs-2.9.9-17.el9
fuse-overlayfs-1.14-1.el9
fuse3-3.10.2-9.el9
fuse3-libs-3.10.2-9.el9
fwupd-1.9.26-1.el9
fwupd-plugin-flashrom-1.9.26-1.el9
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.23-1.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
gettext-0.21-8.el9
gettext-libs-0.21-8.el9
git-core-2.47.1-2.el9_6
glib2-2.68.4-16.el9
glibc-2.34-168.el9_6.20
glibc-common-2.34-168.el9_6.20
glibc-gconv-extra-2.34-168.el9_6.20
glibc-minimal-langpack-2.34-168.el9_6.20
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-13.el9
gnupg2-2.3.3-4.el9
gnutls-3.8.3-6.el9
gobject-introspection-1.68.0-11.el9
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
grub2-common-1:2.06-104.el9_6
grub2-efi-x64-1:2.06-104.el9_6
grub2-pc-1:2.06-104.el9_6
grub2-pc-modules-1:2.06-104.el9_6
grub2-tools-1:2.06-104.el9_6
grub2-tools-minimal-1:2.06-104.el9_6
gssproxy-0.8.4-7.el9
gzip-1.12-1.el9
hostname-3.23-6.el9
hwdata-0.348-9.18.el9
ignition-2.21.0-4.rhaos4.19.el9
ignition-grub-2.21.0-4.rhaos4.19.el9
ima-evm-utils-1.5-3.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.8-4.el9
ipcalc-1.0.0-5.el9
iproute-6.11.0-1.el9
iproute-tc-6.11.0-1.el9
iptables-libs-1.8.10-11.el9_5
iptables-nft-1.8.10-11.el9_5
iputils-20210202-11.el9_6.1
irqbalance-2:1.9.4-2.el9
iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
isns-utils-libs-0.101-4.el9
jansson-2.14-1.el9
jose-14-1.el9
jq-1.6-17.el9
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-11.el9
kbd-legacy-2.4.0-11.el9
kbd-misc-2.4.0-11.el9
kernel-5.14.0-570.25.1.el9_6
kernel-core-5.14.0-570.25.1.el9_6
kernel-modules-5.14.0-570.25.1.el9_6
kernel-modules-core-5.14.0-570.25.1.el9_6
kernel-modules-extra-5.14.0-570.25.1.el9_6
kexec-tools-2.0.29-5.el9
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-10.el9
kmod-libs-28-10.el9
kpartx-0.8.7-35.el9_6.1
krb5-libs-1.21.1-8.el9_6
less-590-5.el9
libacl-2.3.1-4.el9
libaio-0.3.111-13.el9
libarchive-3.5.3-5.el9_6
libassuan-2.5.5-3.el9
libattr-2.5.1-3.el9
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-21.el9
libbpf-2:1.5.0-1.el9
libbrotli-1.0.9-7.el9_5
libcap-2.48-9.el9_2
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-7.el9
libcomps-0.1.18-1.el9
libcurl-7.76.1-31.el9
libdaemon-0.14-23.el9
libdb-5.3.28-57.el9_6
libdhash-0.5.0-53.el9
libdnf-0.69.0-13.el9
libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6
libdrm-2.4.123-2.el9
libeconf-0.4.1-4.el9
libedit-3.1-38.20210216cvs.el9
libev-4.33-6.el9
libevent-2.1.12-8.el9_4
libfdisk-2.37.4-21.el9
libffi-3.4.2-8.el9
libfido2-1.13.0-2.el9
libgcc-11.5.0-5.el9_5
libgcrypt-1.10.0-11.el9
libgomp-11.5.0-5.el9_5
libgpg-error-1.42-5.el9
libgudev-237-1.el9
libgusb-0.3.8-2.el9
libibverbs-54.0-1.el9
libicu-67.1-9.el9
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.9.6-4.el9_6.2
libjcat-0.1.6-3.el9
libjose-14-1.el9
libkcapi-1.4.0-2.el9
libkcapi-hmaccalc-1.4.0-2.el9
libksba-1.5.1-7.el9
libldb-4.21.3-5.el9_6
libluksmeta-9-12.el9
libmaxminddb-1.5.2-4.el9
libmicrohttpd-1:0.9.72-5.el9
libmnl-1.0.4-16.el9_4
libmodulemd-2.13.0-2.el9
libmount-2.37.4-21.el9
libmspack-0.10.1-0.7.alpha.el9
libndp-1.9-1.el9
libnet-1.2-7.el9
libnetfilter_conntrack-1.0.9-1.el9
libnetfilter_cthelper-1.0.0-22.el9
libnetfilter_cttimeout-1.0.0-19.el9
libnetfilter_queue-1.0.5-1.el9
libnfnetlink-1.0.1-23.el9_5
libnfsidmap-1:2.5.4-34.el9
libnftnl-1.2.6-4.el9_4
libnghttp2-1.43.0-6.el9
libnl3-3.11.0-1.el9
libnl3-cli-3.11.0-1.el9
libnvme-1.11.1-1.el9
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpciaccess-0.16-7.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.14.5-2.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-9.el9
libseccomp-2.5.2-2.el9
libselinux-3.6-3.el9
libselinux-utils-3.6-3.el9
libsemanage-3.6-5.el9_6
libsepol-3.6-2.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-8.el9
libsmartcols-2.37.4-21.el9
libsmbclient-4.21.3-5.el9_6
libsolv-0.7.24-3.el9
libss-1.46.5-7.el9
libssh-0.10.4-13.el9
libssh-config-0.10.4-13.el9
libsss_certmap-2.9.6-4.el9_6.2
libsss_idmap-2.9.6-4.el9_6.2
libsss_nss_idmap-2.9.6-4.el9_6.2
libsss_sudo-2.9.6-4.el9_6.2
libstdc++-11.5.0-5.el9_5
libtalloc-2.4.2-1.el9
libtasn1-4.16.0-9.el9
libtdb-1.4.12-1.el9
libteam-1.31-16.el9_1
libtevent-0.16.1-1.el9
libtirpc-1.3.3-9.el9
libtool-ltdl-2.4.6-46.el9
libunistring-0.9.10-15.el9
liburing-2.5-1.el9
libusbx-1.0.26-1.el9
libuser-0.63-16.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-21.el9
libuv-1:1.42.0-2.el9_4
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.21.3-5.el9_6
libxcrypt-4.4.18-3.el9
libxcrypt-compat-4.4.18-3.el9
libxml2-2.9.13-9.el9_6
libxmlb-0.3.10-1.el9
libxslt-1.1.34-13.el9_6
libyaml-0.2.5-7.el9
libzstd-1.5.5-1.el9
linux-firmware-20250513-151.1.el9_6
linux-firmware-whence-20250513-151.1.el9_6
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-9.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-4.el9
luksmeta-9-12.el9
lvm2-9:2.03.28-6.el9
lvm2-libs-9:2.03.28-6.el9
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.3-4.el9_5
microcode_ctl-4:20250211-1.20250512.1.el9_6
mokutil-2:0.6.0-4.el9
mpfr-4.1.0-7.el9
nano-5.6.1-7.el9
ncurses-6.2-10.20210508.el9
ncurses-base-6.2-10.20210508.el9
ncurses-libs-6.2-10.20210508.el9
net-tools-2.0-0.64.20160912git.el9
netavark-2:1.14.1-1.el9_6
nettle-3.10.1-1.el9
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-34.el9
nftables-1:1.0.9-3.el9
nmap-ncat-3:7.92-3.el9
nmstate-2.2.45-1.el9_6
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
numactl-libs-2.0.19-1.el9
nvme-cli-2.11-5.el9
oniguruma-6.9.6-1.el9.6
open-vm-tools-12.5.0-1.el9
openldap-2.6.8-4.el9
openshift-clients-4.20.0-202506251042.p0.gea5c720.assembly.stream.el9
openshift-kubelet-4.20.0-202506261944.p0.g02b9b7e.assembly.stream.el9
openssh-8.7p1-45.el9
openssh-clients-8.7p1-45.el9
openssh-server-8.7p1-45.el9
openssl-1:3.2.2-6.el9_5.1
openssl-fips-provider-3.0.7-6.el9_5
openssl-fips-provider-so-3.0.7-6.el9_5
openssl-libs-1:3.2.2-6.el9_5.1
openvswitch-selinux-extra-policy-1.0-39.el9fdp
openvswitch3.5-3.5.0-19.el9fdp
os-prober-1.77-12.el9_5
ose-aws-ecr-image-credential-provider-4.19.0-202506111541.p0.g425c1c5.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.20.0-202506201413.p0.ga151f4d.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.20.0-202506181842.p0.gaabc000.assembly.stream.el9
ostree-2025.1-1.el9
ostree-grub2-2025.1-1.el9
ostree-libs-2025.1-1.el9
p11-kit-0.25.3-3.el9_5
p11-kit-trust-0.25.3-3.el9_5
pam-1.5.1-25.el9_6
passt-0^20250217.ga1e48a0-9.el9_6
passt-selinux-0^20250217.ga1e48a0-9.el9_6
passwd-0.80-12.el9
pciutils-3.7.0-7.el9
pciutils-libs-3.7.0-7.el9
pcre-8.44-4.el9
pcre2-10.40-6.el9
pcre2-syntax-10.40-6.el9
perl-AutoLoader-5.74-481.el9
perl-B-1.80-481.el9
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-481.el9
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-Errno-1.30-481.el9
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-481.el9
perl-File-Basename-2.85-481.el9
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-481.el9
perl-FileHandle-2.03-481.el9
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-481.el9
perl-HTTP-Tiny-0.076-462.el9
perl-IO-1.43-481.el9
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-2.el9
perl-IPC-Open3-1.21-481.el9
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-481.el9
perl-Net-SSLeay-1.94-1.el9
perl-POSIX-1.94-481.el9
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-462.el9
perl-SelectSaver-1.02-481.el9
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-481.el9
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-481.el9
perl-constant-1.33-461.el9
perl-if-0.60.800-481.el9
perl-interpreter-4:5.32.1-481.el9
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-481.el9
perl-mro-1.23-481.el9
perl-overload-1.31-481.el9
perl-overloading-0.02-481.el9
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-481.el9
perl-vars-1.05-481.el9
pigz-2.8-1.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-5:5.4.0-10.el9_6
policycoreutils-3.6-2.1.el9
policycoreutils-python-utils-3.6-2.1.el9
polkit-0.117-13.el9
polkit-libs-0.117-13.el9
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-14.el9
protobuf-c-1.3.3-13.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.21-2.el9_6.1
python3-3.9.21-2.el9_6.1
python3-audit-3.1.5-4.el9
python3-chardet-4.0.0-5.el9
python3-cloud-what-1.29.45.1-1.el9_6
python3-dateutil-1:2.8.1-7.el9
python3-dbus-1.2.18-2.el9
python3-decorator-4.4.2-6.el9
python3-distro-1.5.0-7.el9
python3-dnf-4.14.0-25.el9
python3-dnf-plugin-versionlock-4.3.0-20.el9
python3-dnf-plugins-core-4.3.0-20.el9
python3-gobject-base-3.40.1-6.el9
python3-gobject-base-noarch-3.40.1-6.el9
python3-gpg-1.15.1-6.el9
python3-hawkey-0.69.0-13.el9
python3-idna-2.10-7.el9_4.1
python3-iniparse-0.4-45.el9
python3-inotify-0.9.6-25.el9
python3-libcomps-0.1.18-1.el9
python3-libdnf-0.69.0-13.el9
python3-librepo-1.14.5-2.el9
python3-libs-3.9.21-2.el9_6.1
python3-libselinux-3.6-3.el9
python3-libsemanage-3.6-5.el9_6
python3-pip-wheel-21.3.1-1.el9
python3-policycoreutils-3.6-2.1.el9
python3-pysocks-1.7.1-12.el9
python3-pyyaml-5.4.1-6.el9
python3-requests-2.25.1-9.el9
python3-rpm-4.16.1.3-37.el9
python3-setools-4.4.4-1.el9
python3-setuptools-53.0.0-13.el9
python3-setuptools-wheel-53.0.0-13.el9
python3-six-1.15.0-9.el9
python3-subscription-manager-rhsm-1.29.45.1-1.el9_6
python3-systemd-234-19.el9
python3-urllib3-1.26.5-6.el9
qemu-guest-agent-17:9.1.0-15.el9_6.4
quota-1:4.09-4.el9
quota-nls-1:4.09-4.el9
rdma-core-54.0-1.el9
readline-8.1-4.el9
redhat-release-9.6-0.1.el9
redhat-release-eula-9.6-0.1.el9
rpcbind-1.2.6-7.el9
rpm-4.16.1.3-37.el9
rpm-build-libs-4.16.1.3-37.el9
rpm-libs-4.16.1.3-37.el9
rpm-ostree-2025.6-5.el9_6
rpm-ostree-libs-2025.6-5.el9_6
rpm-plugin-selinux-4.16.1.3-37.el9
rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
rpm-sign-libs-4.16.1.3-37.el9
rsync-3.2.5-3.el9
runc-4:1.2.4-2.el9
samba-client-libs-4.21.3-5.el9_6
samba-common-4.21.3-5.el9_6
samba-common-libs-4.21.3-5.el9_6
sed-4.8-9.el9
selinux-policy-38.1.53-5.el9_6
selinux-policy-targeted-38.1.53-5.el9_6
setup-2.13.7-10.el9
sg3_utils-1.47-10.el9
sg3_utils-libs-1.47-10.el9
shadow-utils-2:4.9-12.el9
shadow-utils-subid-2:4.9-12.el9
shared-mime-info-2.1-5.el9
shim-x64-15.8-4.el9_3
skopeo-2:1.18.1-2.el9_6
slang-2.3.2-11.el9
slirp4netns-1.3.2-1.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-6.el9
sqlite-libs-3.34.1-7.el9_3
squashfs-tools-4.4-10.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.9.6-4.el9_6.2
sssd-ad-2.9.6-4.el9_6.2
sssd-client-2.9.6-4.el9_6.2
sssd-common-2.9.6-4.el9_6.2
sssd-common-pac-2.9.6-4.el9_6.2
sssd-ipa-2.9.6-4.el9_6.2
sssd-krb5-2.9.6-4.el9_6.2
sssd-krb5-common-2.9.6-4.el9_6.2
sssd-ldap-2.9.6-4.el9_6.2
sssd-nfs-idmap-2.9.6-4.el9_6.2
sssd-proxy-2.9.6-4.el9_6.2
stalld-1.19.6-1.el9
strace-6.12-1.el9
subscription-manager-1.29.45.1-1.el9_6
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.5p2-10.el9_6.1
systemd-252-51.el9_6.1
systemd-journal-remote-252-51.el9_6.1
systemd-libs-252-51.el9_6.1
systemd-pam-252-51.el9_6.1
systemd-rpm-macros-252-51.el9_6.1
systemd-udev-252-51.el9_6.1
tar-2:1.34-7.el9
teamd-1.31-16.el9_1
tmux-3.2a-5.el9
toolbox-0.1.2-1.rhaos4.19.el9
tpm2-tools-5.2-4.el9
tpm2-tss-3.2.3-1.el9
tzdata-2025b-1.el9
unbound-libs-1.16.2-18.el9_6
usermode-1.114-6.el9
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-21.el9
util-linux-core-2.37.4-21.el9
vim-minimal-2:8.2.2637-22.el9_6
virt-what-1.27-1.el9
which-2.21-29.el9
xfsprogs-6.4.0-5.el9
xmlsec1-1.2.29-13.el9
xmlsec1-openssl-1.2.29-13.el9
xz-5.2.5-8.el9_0
xz-libs-5.2.5-8.el9_0
yajl-2.1.0-25.el9
zlib-1.2.11-40.el9
zram-generator-0.3.2-7.el9
zstd-1.5.5-1.el9

Changed:

cri-o 1.32.6-2.rhaos4.19.git8e1af22.el9 → 1.33.2-2.rhaos4.20.git0da1b7c.el9
cri-tools 1.32.0-2.el9 → 1.33.0-1.el9
openshift-clients 4.19.0-202506301438.p0.g298429b.assembly.stream.el9 → 4.20.0-202506251042.p0.gea5c720.assembly.stream.el9
openshift-kubelet 4.19.0-202507010638.p0.g106d040.assembly.stream.el9 → 4.20.0-202506261944.p0.g02b9b7e.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.19.0-202506111541.p0.g7109d6b.assembly.stream.el9 → 4.20.0-202506201413.p0.ga151f4d.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.19.0-202506111541.p0.gd8d3aeb.assembly.stream.el9 → 4.20.0-202506181842.p0.gaabc000.assembly.stream.el9

Extensions

Full list (162 packages)

NetworkManager-libreswan-1.2.24-1.el9.x86_64
bison-3.7.4-5.el9.x86_64
capstone-4.0.2-10.el9.x86_64
corosync-3.1.9-2.el9_6.x86_64
corosynclib-3.1.9-2.el9_6.x86_64
cpp-11.5.0-5.el9_5.x86_64
crun-wasm-1.8.5-5.rhaos4.14.el9.x86_64
daxctl-libs-78-2.el9.x86_64
edk2-ovmf-20241117-2.el9.noarch
elfutils-libelf-devel-0.192-6.el9_6.x86_64
fence-agents-all-4.10.0-86.el9_6.4.x86_64
fence-agents-amt-ws-4.10.0-86.el9_6.4.noarch
fence-agents-apc-4.10.0-86.el9_6.4.noarch
fence-agents-apc-snmp-4.10.0-86.el9_6.4.noarch
fence-agents-bladecenter-4.10.0-86.el9_6.4.noarch
fence-agents-brocade-4.10.0-86.el9_6.4.noarch
fence-agents-cisco-mds-4.10.0-86.el9_6.4.noarch
fence-agents-cisco-ucs-4.10.0-86.el9_6.4.noarch
fence-agents-common-4.10.0-86.el9_6.4.noarch
fence-agents-drac5-4.10.0-86.el9_6.4.noarch
fence-agents-eaton-snmp-4.10.0-86.el9_6.4.noarch
fence-agents-emerson-4.10.0-86.el9_6.4.noarch
fence-agents-eps-4.10.0-86.el9_6.4.noarch
fence-agents-heuristics-ping-4.10.0-86.el9_6.4.noarch
fence-agents-hpblade-4.10.0-86.el9_6.4.noarch
fence-agents-ibmblade-4.10.0-86.el9_6.4.noarch
fence-agents-ifmib-4.10.0-86.el9_6.4.noarch
fence-agents-ilo-moonshot-4.10.0-86.el9_6.4.noarch
fence-agents-ilo-mp-4.10.0-86.el9_6.4.noarch
fence-agents-ilo-ssh-4.10.0-86.el9_6.4.noarch
fence-agents-ilo2-4.10.0-86.el9_6.4.noarch
fence-agents-intelmodular-4.10.0-86.el9_6.4.noarch
fence-agents-ipdu-4.10.0-86.el9_6.4.noarch
fence-agents-ipmilan-4.10.0-86.el9_6.4.noarch
fence-agents-kdump-4.10.0-86.el9_6.4.x86_64
fence-agents-mpath-4.10.0-86.el9_6.4.noarch
fence-agents-redfish-4.10.0-86.el9_6.4.x86_64
fence-agents-rhevm-4.10.0-86.el9_6.4.noarch
fence-agents-rsa-4.10.0-86.el9_6.4.noarch
fence-agents-rsb-4.10.0-86.el9_6.4.noarch
fence-agents-sbd-4.10.0-86.el9_6.4.noarch
fence-agents-scsi-4.10.0-86.el9_6.4.noarch
fence-agents-vmware-rest-4.10.0-86.el9_6.4.noarch
fence-agents-vmware-soap-4.10.0-86.el9_6.4.noarch
fence-agents-wti-4.10.0-86.el9_6.4.noarch
fence-virt-4.10.0-86.el9_6.4.x86_64
flex-2.6.4-9.el9.x86_64
fmt-9.1.0-1.el9.x86_64
gcc-11.5.0-5.el9_5.x86_64
glibc-devel-2.34-168.el9_6.20.x86_64
glibc-headers-2.34-168.el9_6.20.x86_64
gnutls-dane-3.8.3-6.el9.x86_64
gnutls-utils-3.8.3-6.el9.x86_64
ipmitool-1.8.18-27.el9.x86_64
ipxe-roms-qemu-20200823-9.git4bd064de.el9_0.noarch
kata-containers-3.13.0-1.rhaos4.19.el9.x86_64
kernel-5.14.0-570.25.1.el9_6.x86_64
kernel-core-5.14.0-570.25.1.el9_6.x86_64
kernel-devel-5.14.0-570.25.1.el9_6.x86_64
kernel-headers-5.14.0-570.25.1.el9_6.x86_64
kernel-modules-5.14.0-570.25.1.el9_6.x86_64
kernel-modules-extra-5.14.0-570.25.1.el9_6.x86_64
kernel-rt-core-5.14.0-570.25.1.el9_6.x86_64
kernel-rt-devel-5.14.0-570.25.1.el9_6.x86_64
kernel-rt-kvm-5.14.0-570.25.1.el9_6.x86_64
kernel-rt-modules-5.14.0-570.25.1.el9_6.x86_64
kernel-rt-modules-core-5.14.0-570.25.1.el9_6.x86_64
kernel-rt-modules-extra-5.14.0-570.25.1.el9_6.x86_64
krb5-pkinit-1.21.1-8.el9_6.x86_64
krb5-workstation-1.21.1-8.el9_6.x86_64
ldns-1.7.1-12.el9.x86_64
libfdt-1.6.0-7.el9.x86_64
libkadm5-1.21.1-8.el9_6.x86_64
libknet1-1.28-1.el9.x86_64
libknet1-compress-bzip2-plugin-1.28-1.el9.x86_64
libknet1-compress-lz4-plugin-1.28-1.el9.x86_64
libknet1-compress-lzma-plugin-1.28-1.el9.x86_64
libknet1-compress-lzo2-plugin-1.28-1.el9.x86_64
libknet1-compress-plugins-all-1.28-1.el9.x86_64
libknet1-compress-zlib-plugin-1.28-1.el9.x86_64
libknet1-compress-zstd-plugin-1.28-1.el9.x86_64
libknet1-crypto-nss-plugin-1.28-1.el9.x86_64
libknet1-crypto-openssl-plugin-1.28-1.el9.x86_64
libknet1-crypto-plugins-all-1.28-1.el9.x86_64
libknet1-plugins-all-1.28-1.el9.x86_64
libmpc-1.2.1-4.el9.x86_64
libnozzle1-1.28-1.el9.x86_64
libpmem-1.12.1-1.el9.x86_64
libpng-2:1.6.37-12.el9.x86_64
libqb-2.0.8-1.el9.x86_64
librdmacm-54.0-1.el9.x86_64
libreswan-5.2-1.el9fdp.x86_64
libwsman1-2.6.8-23.el9.x86_64
libxcrypt-devel-4.4.18-3.el9.x86_64
libzstd-devel-1.5.5-1.el9.x86_64
lld-17.0.6-1.el9.x86_64
lld-libs-17.0.6-1.el9.x86_64
llvm-17.0.6-5.el9.x86_64
llvm-libs-17.0.6-5.el9.x86_64
lm_sensors-libs-3.6.0-10.el9.x86_64
m4-1.4.19-1.el9.x86_64
make-1:4.3-8.el9.x86_64
ndctl-libs-78-2.el9.x86_64
net-snmp-libs-1:5.9.1-17.el9.x86_64
net-snmp-utils-1:5.9.1-17.el9.x86_64
nspr-4.35.0-17.el9_2.x86_64
nss-3.101.0-10.el9_2.x86_64
nss-softokn-3.101.0-10.el9_2.x86_64
nss-softokn-freebl-3.101.0-10.el9_2.x86_64
nss-sysinit-3.101.0-10.el9_2.x86_64
nss-tools-3.101.0-10.el9_2.x86_64
nss-util-3.101.0-10.el9_2.x86_64
openssl-devel-1:3.2.2-6.el9_5.1.x86_64
openvswitch3.5-ipsec-3.5.0-19.el9fdp.x86_64
openwsman-python3-2.6.8-23.el9.x86_64
pacemaker-2.1.9-1.2.el9_6.x86_64
pacemaker-cli-2.1.9-1.2.el9_6.x86_64
pacemaker-cluster-libs-2.1.9-1.2.el9_6.x86_64
pacemaker-libs-2.1.9-1.2.el9_6.x86_64
pacemaker-schemas-2.1.9-1.2.el9_6.noarch
pcp-conf-6.3.7-1.el9_6.x86_64
pcp-libs-6.3.7-1.el9_6.x86_64
pcs-0.11.9-2.el9_6.1.x86_64
perl-TimeDate-1:2.33-6.el9.noarch
pixman-0.40.0-6.el9_3.x86_64
protobuf-3.14.0-16.el9.x86_64
python3-cffi-1.14.5-5.el9.x86_64
python3-cryptography-36.0.1-4.el9.x86_64
python3-lxml-4.6.5-3.el9.x86_64
python3-openvswitch3.5-3.5.0-19.el9fdp.x86_64
python3-ply-3.11-14.el9.noarch
python3-pycparser-2.20-6.el9.noarch
python3-pycurl-7.43.0.6-8.el9.x86_64
python3-pyparsing-2.4.7-9.el9.noarch
python3-tornado-6.4.2-2.el9_6.2.x86_64
qemu-img-17:9.1.0-15.el9_6.4.x86_64
qemu-kvm-common-17:9.1.0-15.el9_6.4.x86_64
qemu-kvm-core-17:9.1.0-15.el9_6.4.x86_64
redhat-logos-90.5-1.el9_6.1.x86_64
resource-agents-4.10.0-71.el9_6.5.x86_64
ruby-3.0.7-165.el9_5.x86_64
ruby-default-gems-3.0.7-165.el9_5.noarch
ruby-libs-3.0.7-165.el9_5.x86_64
rubygem-bigdecimal-3.0.0-165.el9_5.x86_64
rubygem-bundler-2.2.33-165.el9_5.noarch
rubygem-io-console-0.5.7-165.el9_5.x86_64
rubygem-json-2.5.1-165.el9_5.x86_64
rubygem-psych-3.3.2-165.el9_5.x86_64
rubygem-rdoc-6.3.4.1-165.el9_5.noarch
rubygem-rexml-3.2.5-165.el9_5.noarch
rubygems-3.2.33-165.el9_5.noarch
sbd-1.5.2-1.el9.x86_64
seabios-bin-1.16.3-4.el9.noarch
seavgabios-bin-1.16.3-4.el9.noarch
spdlog-1.13.0-1.rhaos4.14.el9.x86_64
sysstat-12.5.4-9.el9.x86_64
telnet-1:0.17-85.el9.x86_64
usbguard-1.0.0-16.el9.x86_64
usbguard-selinux-1.0.0-16.el9.noarch
virtiofsd-1.13.0-1.el9.x86_64
wasmedge-0.14.0-2.rhaos4.20.el9.x86_64
zlib-devel-1.2.11-40.el9.x86_64

Red Hat Enterprise Linux CoreOS base layer: 9.6.20250701-0

View changelog in Markdown or change previous release:

Source code for this page located on github