# 4.21.19

Created: 2026-06-04 13:38:39 +0000 UTC

Image Digest: `sha256:ff686a31f4e7a8d8a495bd4cbc344d35e9cd6a3c09cbd4dae41e12caf8935c3f`


## Changes from 4.21.18

### Components

* Kubectl 1.34.1
* Kubernetes 1.34.8
* Kubernetes Tests 1.34.1
* Red Hat Enterprise Linux CoreOS 10.2.20260521-0



### FeatureGate Changes
| FeatureGate | Default<br/>Hypershift | Default<br/>SelfManagedHA | DevPreviewNoUpgrade<br/>Hypershift | DevPreviewNoUpgrade<br/>SelfManagedHA | TechPreviewNoUpgrade<br/>Hypershift | TechPreviewNoUpgrade<br/>SelfManagedHA  |
| :------ | :---: | :---: | :---: | :---: | :---: | :---:  |
| GatewayAPIWithoutOLM <br/> (0 tests)|  |  |  |  |  |   |


### Rebuilt images without code change

* [baremetal-installer](https://github.com/openshift/installer) git [3f855c5b](https://github.com/openshift/installer/commit/3f855c5bbfa977e040bfe98776299a6afa798674) `sha256:5fd4168586e99df1c975ad67a71ca072205a14255fa20e62799f38cbcf1332a9`
* [cli](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:c58647f89fbccb4a7f9f51060ec7e7722406e84181d7c70ffc0978ac31714ede`
* [cli-artifacts](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:92d41d6879a7cd4e7e956b92c7a549656f690276bbb62e528d8ab2e6156f4abe`
* [deployer](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:8e4bad6259c8f29b59cacd592175934a5f865ff2686c52da8062310ed6331029`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:b93e4ddaf1968b21fdb3081853f43443f7bc8ed80339dc1325262bb8c4c53687`
* [etcd](https://github.com/openshift/etcd) git [806f690e](https://github.com/openshift/etcd/commit/806f690e1f140e0aea2eb05ef5f288b756b62895) `sha256:af428f4c752e6cbaecc265e9e75720b7661bcaf0db9b76c7b4dc2d9be115b8b3`
* [hyperkube](https://github.com/openshift/kubernetes) git [eab2218b](https://github.com/openshift/kubernetes/commit/eab2218b931d0c20740d6259df59f242abf32ef7) `sha256:5b091b458eb6a4d87c4de9f558596e50fede0074e5e2bafb3788583ec29d233a`
* [installer](https://github.com/openshift/installer) git [3f855c5b](https://github.com/openshift/installer/commit/3f855c5bbfa977e040bfe98776299a6afa798674) `sha256:c66f607cdf73ec4b590c9c0b070a9a48dfd57e84531d019984080faebfa88b05`
* [ironic](https://github.com/openshift/ironic-image) git [6e93d7a0](https://github.com/openshift/ironic-image/commit/6e93d7a042c96f1db6307549d348da8f6f89b06a) `sha256:a948a0a61737c1dcbbafbd87d2a62e8b5ccec6eb3c9b49d6462874928d121901`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [707c2262](https://github.com/openshift/ironic-rhcos-downloader/commit/707c226243ac401f2994952fe0e55823511111b0) `sha256:61b8a9797df9587a0b7140bc611842a6bc01e0649bbb87411722f60b3fa1c03a`
* [machine-os-images](https://github.com/openshift/machine-os-images) git [e9019e5f](https://github.com/openshift/machine-os-images/commit/e9019e5f819c44726e9ff5e1ec8fdfad9fb314fd) `sha256:8f0fdbd9c462f718ddca0541403de9683674214c7ff5af539126790b13d291f4`
* [monitoring-plugin](https://github.com/openshift/monitoring-plugin) git [462c7889](https://github.com/openshift/monitoring-plugin/commit/462c78890ffb636e05d91d41ca718bb3c81da4cf) `sha256:4a24c6ae177f075a6dc5e14c02e3f81f1e4cdc420eec9230c9d11fc9c5af946f`
* [must-gather](https://github.com/openshift/must-gather) git [eeb267f4](https://github.com/openshift/must-gather/commit/eeb267f4b7f8016f13d12866013cad43c7403482) `sha256:df22d73ab16e500da51b540ea917fe864298b106f368595494a41c9248c70c32`
* [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:184d598aa8851e5a29f85aef21b8431cfedca3a5b15a302124b044ce5d87f963`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [268037d7](https://github.com/openshift/networking-console-plugin/commit/268037d76fd97d29f39eae2f25f0a2b2910cb30e) `sha256:f42efd0ef0fe5ea9ccb251d72046ac1c0776c3fe479c703b32f6d25f51a227ae`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [d586f851](https://github.com/openshift/ovn-kubernetes/commit/d586f851c25d8f7cd04840cda79a0a6a98ea8485) `sha256:66a0a71a79c532c7a5b7cb5b015557b433545c9b8b34a3f6f4369369a40eeb5b`
* [rhel-coreos](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:0a0882041f7215c38566088b47ffebd3f317f7d3d9b477df9fb08129f2a78a23`
* [rhel-coreos-10](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:7dd9c33f8d266d18cdd9a17a329e6c0164a5e5ed9aae7f1ba84ded66bd2c465f`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:d7d891f534109314ecc806ddba31031598dccfd9cea3a12afc8cfaa49c3234c7`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:ba9e4557afc0efc788b81c37596a725cc23bf10f856c4f771d3f384519edc968`
* [tests](https://github.com/openshift/origin) git [c2da98a5](https://github.com/openshift/origin/commit/c2da98a5a8f0e23886ac536fbeb81140e798fb71) `sha256:975671b5ace98fc1cf4b7ecba59dad8957e044e35265fd3797d81bd2a42afdd2`
* [tools](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:29cc17768aa5fccc02d6dc755717fedcd5280abc0f7383b54728b27d2da8a05d`


### [aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, openstack-cinder-csi-driver-operator](https://github.com/openshift/csi-operator/tree/20bb13fab3865444b7a4ae454dd234391c4d7e49)

* [OCPBUGS-85572](https://issues.redhat.com/browse/OCPBUGS-85572): Add init container for Manila node daemonset [#554](https://github.com/openshift/csi-operator/pull/554)
* [Full changelog](https://github.com/openshift/csi-operator/compare/5f294954dc029e0ed120243c3188af81df89d9e4...20bb13fab3865444b7a4ae454dd234391c4d7e49)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/154ae10f442b7d40f14492c5973cd3459791d00f)

* [OCPBUGS-81982](https://issues.redhat.com/browse/OCPBUGS-81982): Bump go-jose/go-jose/v4@v4.1.4 [#1027](https://github.com/openshift/cloud-credential-operator/pull/1027)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/693d9f3485b21cf128fa379eabd6787737fa56ad...154ae10f442b7d40f14492c5973cd3459791d00f)


### [cluster-config-api](https://github.com/openshift/api/tree/1d79f30d4668393dc34e9b423ec6904645503c58)

* [OCPBUGS-85149](https://issues.redhat.com/browse/OCPBUGS-85149): Backport GatewayAPIWithoutOLM feature gate as disabled [#2864](https://github.com/openshift/api/pull/2864)
* [Full changelog](https://github.com/openshift/api/compare/b66d75611553df4827e899e5eaa4d6321ed9f44c...1d79f30d4668393dc34e9b423ec6904645503c58)


### [cluster-etcd-operator](https://github.com/openshift/cluster-etcd-operator/tree/898d6bd9f6ab96093b8d74e5a7dbfeff9a5cf257)

* [OCPBUGS-84336](https://issues.redhat.com/browse/OCPBUGS-84336): fix(tnf): gate dual-replica setup and keep retrying [#1620](https://github.com/openshift/cluster-etcd-operator/pull/1620)
* [Full changelog](https://github.com/openshift/cluster-etcd-operator/compare/10012737e9b23528357c130184ef4d890ae8ea33...898d6bd9f6ab96093b8d74e5a7dbfeff9a5cf257)


### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/3a861ed50a5755aa9eaf58d4e6c86d02729dd9c0)

* [OCPBUGS-74373](https://issues.redhat.com/browse/OCPBUGS-74373): Remove restriction of unmanaged x-k8s.io [#1446](https://github.com/openshift/cluster-ingress-operator/pull/1446)
* [OCPBUGS-86027](https://issues.redhat.com/browse/OCPBUGS-86027): Fix logging for unmanaged controllers [#1448](https://github.com/openshift/cluster-ingress-operator/pull/1448)
* [OCPBUGS-80759](https://issues.redhat.com/browse/OCPBUGS-80759): Authorization bypass due to improper HTTP/2 path validation [#1441](https://github.com/openshift/cluster-ingress-operator/pull/1441)
* [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/6c70966cd2011f861843e85efb8bf08c3a938fe1...3a861ed50a5755aa9eaf58d4e6c86d02729dd9c0)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/d78172d1fffdcd29cb3ca6626c78ebecc8e2ef78)

* [OCPBUGS-86809](https://issues.redhat.com/browse/OCPBUGS-86809): Requeue PerformanceStatus update when status write fails [#1524](https://github.com/openshift/cluster-node-tuning-operator/pull/1524)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/a6f7d8ab2efb5e37d848620d5fc8db37a3cf5d58...d78172d1fffdcd29cb3ca6626c78ebecc8e2ef78)


### [console](https://github.com/openshift/console/tree/402882702875b34bb4872c051808a35a67880346)

* [OCPBUGS-85674](https://issues.redhat.com/browse/OCPBUGS-85674): Prevent binary secret data corruption when editing [#16448](https://github.com/openshift/console/pull/16448)
* [OCPBUGS-79459](https://issues.redhat.com/browse/OCPBUGS-79459): CVE-2026-29063 Immutable.js: Improperly Controlled Mod… [#16503](https://github.com/openshift/console/pull/16503)
* [OCPBUGS-86427](https://issues.redhat.com/browse/OCPBUGS-86427): Fix Shipwright detail pages crashing with React error #310 [#16487](https://github.com/openshift/console/pull/16487)
* [OCPBUGS-86314](https://issues.redhat.com/browse/OCPBUGS-86314): Show empty state instead of 403 error for users without projects [#16478](https://github.com/openshift/console/pull/16478)
* [Full changelog](https://github.com/openshift/console/compare/28c6e026e4cc49aa470f755ae01a1acb4cd2935d...402882702875b34bb4872c051808a35a67880346)


### [console-operator](https://github.com/openshift/console-operator/tree/aee1a79b48a86e0feaef8ac72b5ec3c124429859)

* [NETOBSERV-2296](https://issues.redhat.com/browse/NETOBSERV-2296): add missing annotations on netobserv quickstart [#1096](https://github.com/openshift/console-operator/pull/1096)
* [Full changelog](https://github.com/openshift/console-operator/compare/4393afe88810c9db76fc6da1821787449e666ef4...aee1a79b48a86e0feaef8ac72b5ec3c124429859)


### [hypershift](https://github.com/openshift/hypershift/tree/d345a6af0fb9c22d2058ac98994afbcb41e24f6f)

* [OCPBUGS-86416](https://issues.redhat.com/browse/OCPBUGS-86416): add Konflux pipeline definitions for CPO 4.21 [#8607](https://github.com/openshift/hypershift/pull/8607)
* [OCPBUGS-86477](https://issues.redhat.com/browse/OCPBUGS-86477): [release-4.21] add CP pull-secret watches for in-place propagation [#8583](https://github.com/openshift/hypershift/pull/8583)
* [Full changelog](https://github.com/openshift/hypershift/compare/b5bc1c2f89e9cdbd5d0d1b1374674f5bcd45b76b...d345a6af0fb9c22d2058ac98994afbcb41e24f6f)


### [kube-state-metrics](https://github.com/openshift/kube-state-metrics/tree/0efd2f822814f9965ef6dc14b68f24eebcaca40d)

* Fix for OCPBUGS-81988: CVE-2026-34986 bump github.com/go-jose/go-jose [#143](https://github.com/openshift/kube-state-metrics/pull/143)
* [Full changelog](https://github.com/openshift/kube-state-metrics/compare/ce6f3742ed123b671acd6de4d3605c3a7f644cf8...0efd2f822814f9965ef6dc14b68f24eebcaca40d)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/340c3847f293b8914ebef26d1e9b0a8ce2d2abd5)

* [OCPBUGS-86576](https://issues.redhat.com/browse/OCPBUGS-86576): Verify extension packages are installed [#6090](https://github.com/openshift/machine-config-operator/pull/6090)
* [OCPBUGS-84481](https://issues.redhat.com/browse/OCPBUGS-84481): MCS fallback to latest v3 [#5883](https://github.com/openshift/machine-config-operator/pull/5883)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/5aabf7ccb1f54f0c889a87b1670827f9b2d23461...340c3847f293b8914ebef26d1e9b0a8ce2d2abd5)


### [oc-mirror](https://github.com/openshift/oc-mirror/tree/f9812811fdc23a9baa72f075afe566caddfe2280)

* Fix for OCPBUGS-81971: CVE-2026-34986 github.com/go-jose/go-jose/v4 [#1426](https://github.com/openshift/oc-mirror/pull/1426)
* [Full changelog](https://github.com/openshift/oc-mirror/compare/994deebef2836ca75003dd15372f7110d2448fa6...f9812811fdc23a9baa72f075afe566caddfe2280)