Back to index

PullSpec:

quay.io/openshift-release-dev/ocp-release:4.21.16-multi

Team Approvals:

Tests:

• Informing jobs
  • e2e-aws-ovn-multi-a-a Failed (1 retry) periodic-ci-openshift-multiarch-main-nightly-4.21-ocp-e2e-aws-ovn-multi-a-a

    • Attempt 1 Failed
    • Attempt 2 Failed
  • e2e-aws-ovn-multi-x-x Failed (1 retry) periodic-ci-openshift-multiarch-main-nightly-4.21-ocp-e2e-aws-ovn-multi-x-x

    • Attempt 1 Failed
    • Attempt 2 Failed
  • hypershift-e2e-aks-multi-x-ax Failed (1 retry) periodic-ci-openshift-hypershift-release-4.21-periodics-e2e-aks-multi-x-ax

    • Attempt 1 Failed
    • Attempt 2 Failed

Upgrades from:

• 4.22.0-rc.3 (changes) - Failed Failed

---

Loading changelog, this may take a while ...

Changes from 4.21.15

Created: 2026-05-14 10:51:51 +0000 UTC

Image Digest: sha256:c9faacbe19dfd5c5173cd1c8b5328e7b36cded6947ce374c9f44bd131edaae98

Release 4.21.16 was created from quay.io/openshift-release-dev/ocp-release-nightly@sha256:533f4ab7412ac5c307846d025cb1db4dfd1893ea5bd208344c7f717c73871e70

Components

• Kubectl 1.34.1
• Kubernetes upgraded from 1.34.6 to 1.34.7
• Kubernetes Tests 1.34.1
• Red Hat Enterprise Linux CoreOS 10.2.20260423-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

Rebuilt images without code change

• agent-installer-node-agent git e5713826 sha256:f0a170e8fae9b2494ac09896a6d39944746e6a1ebc02c01b27883d04f1c4943a
• aws-cloud-controller-manager git fdc7f3f1 sha256:2fd3c607524b3cc022e92d98ca7481e2382a0bce81726b21805e0e35c584f517
• aws-cluster-api-controllers git 10ceef5e sha256:59369f7a4b13410201a7eb7affcdf9c0f97e01f12d19cab9067d6b7e328e90e5
• aws-ebs-csi-driver git 57eebffc sha256:d2eec93383289547abf93870d986898df8b40f5dcca12587555f45787b357960
• aws-ebs-csi-driver-operator git 90163f35 sha256:8172345c21cb5a8dcab6d7c8ab68fb930214710442839d2c426e83abeedb3858
• aws-machine-controllers git 938565c9 sha256:82faa70f3adffb8786c22f23ea80e3a2d8c929671d9d342f14e4bdac6e870e9d
• aws-pod-identity-webhook git 5cd42ed1 sha256:190b41bdb05fc8bb646bfd4498373066e0aef8760ec7cc1ae4ddcac7a9f80323
• azure-cloud-controller-manager git 83b3f9ec sha256:9de6025f3b5d5b94288bd2b1b38c584f2ea409d3c510f591333a94d5a64ba570
• azure-cloud-node-manager git 83b3f9ec sha256:890d05ab059678195668cbbb5862fa79864cfbe94d7b7b21c075671abacc97f2
• azure-disk-csi-driver-operator git 90163f35 sha256:0cb7bade7ced5eb3d447c0e6c6263f27851d5a5b3f45c8756c598e83502601fc
• azure-file-csi-driver git 45061e97 sha256:69b77249aed797958a34aeb699da6d5a424352e074899bb6f19239a0200103fe
• azure-file-csi-driver-operator git 90163f35 sha256:4aab8e533c3c14ca163b6c01bd3d6747ea03469fd545a853d18fa51adb710ab3
• azure-machine-controllers git b8b8cb1c sha256:f6c5bc34b721754b991ea9c37a67a20ea28a80a524a28f4f5a18e2e682922cf3
• azure-workload-identity-webhook git 3f2a6e0d sha256:aee28253b25d925ac33ae44898f38649be3e1c40838f73a43f6444e0bc15e05c
• csi-driver-manila git a1234144 sha256:5e08abbd83ae2909d6c9c874a0adca64d3f7f2ba7a1fdc711de1d7936b119113
• csi-driver-manila-operator git 90163f35 sha256:0500b5b60777d4abc284f455adc9ea9b6e0bda6366b79bf366c7a3b226cbb1d2
• docker-builder git 48fce231 sha256:a1deddf7f92242ccd868bec4308fab7d3a2c9640cbbd6f31cce5680f6e5536e4
• driver-toolkit git f0ae9d12 sha256:40339825dbcd26a42b4643626b84526fb64cb18c99a136b1a99ad81a1830bd7a
• gcp-cloud-controller-manager git e27accef sha256:491b34ee30b9efbe945954280e1f1b14652b1344c19902e6710f2a3b2661dc3a
• gcp-pd-csi-driver git 0660d93f sha256:57cc9891635577da3b92af12986b9764419c3ad2799c2a7bd917f0cf68469f6b
• gcp-pd-csi-driver-operator git ddfc0f93 sha256:8c1180074b47ef7eb2140c42f358ab4d7accf9cab305c8eace9b2ae78953eacf
• ibm-cloud-controller-manager git c566572b sha256:45d222a68adfa1986b59bb34d4e92742fe62c893fd9424e4cc9f94c7669f9a52
• ibm-vpc-block-csi-driver git 8fe7dafc sha256:50799974e1b7fabbb2e65ecb28b7be76306120c2e5030c77a540044c6d468f6c
• ibm-vpc-block-csi-driver-operator git 00bc7407 sha256:b996acd1145845780af1488dd4397e90cd74fde49adb576705b360766ae14228
• ibmcloud-cluster-api-controllers git f7e3ec30 sha256:4fb7fd7fed0d5e594140fd563ce303d89f001821e4b701174cd976ef2150cf48
• ibmcloud-machine-controllers git f80ea321 sha256:b09674e755f253eec7e48d51aadf6a714c314ec4838988ae553f87c8db784c1e
• ironic-agent git ff276c00 sha256:454c04674f4448a60f4f7080ac9d18305c492d2bcf0a779e19f2d17c8d511ab7
• ironic-machine-os-downloader git 707c2262 sha256:015b3ae3b0dbfe9486ae067ee916976603ca86ece0be75a97246ceb76a61ef8f
• ironic-static-ip-manager git b95b05fe sha256:2a1a58ebd5a8d42e8b84895b58022555beac98111281917ac41932d49d3c753e
• machine-image-customization-controller git 65aeb360 sha256:d05ce373f26a87893973e11f7e576d05630f4fd1a31b30bd1b89d8e1c1382cc2
• machine-os-images git 9a8e96a6 sha256:10357b7c8d19b9db10fc29a11c49d6c76c4e43eeb7f0a1b80638efe4d8f8ed86
• metallb-frr git c82bfaad sha256:f5e5fdbafc9b121b004b98d2b1e867af31730c2b5cc33053b414787c69412c5a
• monitoring-plugin git 908df025 sha256:581cd92a99b3e7fa041b38dbeeeb8f71ecd33843381b422d1a43dcbae93fb768
• network-tools git d6717e45 sha256:32abe88078e60afbe4a733764f2c22e229c1241d602b743d0f7ff81a363dd0d8
• networking-console-plugin git 268037d7 sha256:a55fc0e42df69881f1536b2aaa39906025f031a4a239d6ad5facb6cd6297f5ff
• nutanix-cloud-controller-manager git 33b7bec6 sha256:37dd989e6a813e6266d42ba8f2f15dc065b1e14477882cafff668952de5acab6
• nutanix-machine-controllers git b15a665c sha256:80cbca55b4d4bd63302835e159eed4664caf9e561e1423f4bb75e84f069d12f4
• powervs-block-csi-driver git 114fe692 sha256:6af8cf8d5d3661e9b4de0af3e904b5a07d1f08804d2976dede4baee00964c94d
• powervs-block-csi-driver-operator git b714ab87 sha256:c1371951865aa8859b32b508a9dc6445e7a2686a2d775e8d09ca2528ac3917b4
• powervs-cloud-controller-manager git 969a04e9 sha256:c69e36c7ffb153c388aada8e88512a49c51ed7cb6680fe0da7658e7a4c55009f
• powervs-machine-controllers git 551974ef sha256:4514eb00032345587261d3fb170557c989b2cd568e4f868dada04f280b64074c
• rhel-coreos-10 git 10f1a2e7 sha256:537f9837617d01940b0b3ef310cb7b5621ac27a07f8593f080a21701bd4a6c09
• rhel-coreos-10-extensions git 10f1a2e7 sha256:10425a2045b909890d439cc5f37b197dd142b1f438b4a05cabddbf0cd1947819
• tools git 9d9df34c sha256:884290db91916e5533e421f83ffc8b38fda54489d7a3f9f763ae827ad3655919
• vsphere-cloud-controller-manager git f69584d6 sha256:b2c78ec5678b72585db5fdb2d180ef9f6bade8ef455881a0f567578ecd6d5401
• vsphere-csi-driver git 69e1c6ed sha256:46fb7e9afd3e945c06d0fae0c4884fb41eba353fa5a4d3a7fd65c7bafe737fa6
• vsphere-csi-driver-operator git d6a19449 sha256:7768dcbbf87adb04285e77c4b3797ed2deaf9bc98129f471d22f0335608cde0a
• vsphere-csi-driver-syncer git 69e1c6ed sha256:8b9b2cd747aa4690c656cc2c942a1c0c1bce3a2915ac626fc58e27f1ded6fbde
• vsphere-problem-detector git a35d685a sha256:62f684fb949b7d98843b42d593d099db621a949ff9043e3bd048f6845c10b8c0

agent-installer-ui

• OCPBUGS-85261: [release-4.21] OCPBUGS-84147 | [Below the sea UI] Leaky Abstraction: Transient 500 errors exposed during host binding process (#3684) #3684
• Remove 2 node arbiter option from the control plane dropdown option (#3680) #3680
• OCPBUGS-84608, OCPBUGS-84830, OCPBUGS-84993, OCPBUGS-85009, OCPBUGS-85039: Bump axios to ^1.15.1 (#3690) #3690
• MGMT-24152: UI allows editing pull secret in draft cluster (#3674) #3674
• Full changelog

aws-kms-encryption-provider

• OCPBUGS-80711: Bump google.golang.org/grpc to v1.79.3 #40
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-80740: Bump google.golang.org/grpc to v1.79.3 #383
• Full changelog

azure-disk-csi-driver

• OCPBUGS-85285: check for node name in waitForDiskManagedByTobeRemoved #147
• Full changelog

azure-service-operator

• OCPBUGS-80713: Bump google.golang.org/grpc to v1.79.3 #28
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-84225: ibmcloud: bump vpc-go-sdk and capibm #10514
• Full changelog

cluster-capi-controllers

• OCPBUGS-80749: Bump google.golang.org/grpc to v1.79.3 #293
• Full changelog

cluster-capi-operator

• OCPBUGS-80753: Bump google.golang.org/grpc to v1.79.3 #550
• Full changelog

cluster-etcd-operator

• OCPBUGS-84336: fix(tnf): align Pacemaker kubelet and etcd retry pacing #1604
• Full changelog

cluster-node-tuning-operator

• OCPBUGS-85016: e2e: Add irqbalance StartLimitBurst >= 100 config test #1505
• Full changelog

cluster-olm-operator

• OCPBUGS-80769: Bump google.golang.org/grpc to v1.79.3 #197
• Full changelog

console

• NO-JIRA: enable multi-architecture yarn builds #16420
• OCPBUGS-85040: Remove PII from events #16401
• OCPBUGS-84967: Add bottom pagination to ConsoleDataView for mobile responsiveness #16396
• OCPBUGS-84858: Fix ConsoleDataView filter order: Name and Label shoul… #16386
• Full changelog

csi-driver-nfs

• OCPBUGS-80783: CVE-2026-33186: bump google.golang.org/grpc v1.79.3 #176
• Full changelog

csi-external-provisioner

• OCPBUGS-80785: Bump google.golang.org/grpc to v1.79.3 #132
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-80805: Bump google.golang.org/grpc to v1.79.3 #287
• Full changelog

gcp-machine-controllers

• OCPBUGS-80828: Bump gRPC-Go package for CVE fix #154
• Full changelog

hyperkube, kube-proxy, pod

• “OCPBUGS-83608: Bump to k8s v1.34.7” #2647
• Full changelog

insights-operator

• OCPBUGS-80818: Bump google.golang.org/grpc to v1.79.3 #1285
• Full changelog

ironic

• OCPBUGS-84853: Bump pyasn to 0.5.1-5 #823
• OCPBUGS-82298: Bump sushy hash to include Supermicro ARS-111GL-NHR fix #840
• Full changelog

kube-metrics-server

• OCPBUGS-80716: Bump google.golang.org/grpc to v1.79.3 #61
• Full changelog

machine-config-operator

• OCPBUGS-85286: Fix Admin Ack message for azure/vsphere clusters upgrading to 4.22 #6017
• OCPBUGS-85126: Fix units rollback if update failure #6008
• OCPBUGS-84941: Fix ssh and password rollbacks #5987
• OCPBUGS-84970: Fix encapsulated IGN version #5996
• OCPBUGS-84878: Update AMI Whitelist #5915
• OCPBUGS-84253: improve JSON unmarshalling for secret decoding #5877
• Full changelog

openstack-cluster-api-controllers

• UPSTREAM-SYNC: Merge https://github.com/kubernetes-sigs/cluster-api-provider-openstack:release-0.13 into release-4.21 #394
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPBUGS-80847, OCPBUGS-80848, OCPBUGS-80849: Bump google.golang.org/grpc to v1.79.3 for CVE-2026-33186[Release-4.21] #1289
• Full changelog

prometheus

• OCPBUGS-80855: Bump google.golang.org/grpc to v1.79.3 #309
• Full changelog

telemeter

• OCPBUGS-80868: Bump google.golang.org/grpc to v1.79.3 #589
• OCPBUGS-81817: [release-1.21] Fix CVE-2026-34986 #593
• Full changelog

tests

• OCPBUGS-84655: fix openshift/network/third-party suite selecting zero tests #31091
• OCPBUGS-84978: Skip image-registry operator tests for Libvirt platform in upgrade jobs. #31123
• OCPBUGS-84947: test: add monitortest to detect pods stuck in Pending state #31117
• OCPBUGS-84947: Add [Late] test to collect CRI-O goroutine dumps via SIGUSR1 #31118
• Full changelog

vsphere-cluster-api-controllers

• OCPBUGS-80875: Bump google.golang.org/grpc to v1.79.3 #102
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...