# 4.21.21 Created: 2026-06-18 13:22:02 +0000 UTC Image Digest: `sha256:fd193bcd1042c3f17c33e7668d7b9866b915ac07075e6c2e35b0fe396bfd9a51` ## Changes from 4.21.20 ### Components * Kubectl 1.34.1 * Kubernetes 1.34.8 * Kubernetes Tests 1.34.1 * Red Hat Enterprise Linux CoreOS 10.2.20260521-0 ### FeatureGate Changes | FeatureGate | Default
Hypershift | Default
SelfManagedHA | DevPreviewNoUpgrade
Hypershift | DevPreviewNoUpgrade
SelfManagedHA | TechPreviewNoUpgrade
Hypershift | TechPreviewNoUpgrade
SelfManagedHA | | :------ | :---: | :---: | :---: | :---: | :---: | :---: | | GatewayAPIWithoutOLM
(0 tests)| Disabled| Disabled| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed)| Enabled
(Changed) | ### Rebuilt images without code change * [agent-installer-api-server](https://github.com/openshift/assisted-service) git [f32dfdad](https://github.com/openshift/assisted-service/commit/f32dfdad38c833c22168710bf7814dc7e8cb4c2f) `sha256:ec6e3caaad9567c2c0e423880f2e7b15f45c8596ee792b784f7fcca05ea28f66` * [agent-installer-utils](https://github.com/openshift/agent-installer-utils) git [dc0bd090](https://github.com/openshift/agent-installer-utils/commit/dc0bd0906fc9868a65cc9488a7dbdd0f35ca4a23) `sha256:08681a7e9dae6792a5897594769beaf151bf52e489378a133886313f8dac398f` * [azure-file-csi-driver](https://github.com/openshift/azure-file-csi-driver) git [45061e97](https://github.com/openshift/azure-file-csi-driver/commit/45061e97a5e2b20b01cd55fee97e5dac43fd79e4) `sha256:865891f674c073eb479be00ea69d4a24546dea11bf1e123b3358dc0dad2836c6` * [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator) git [898663be](https://github.com/openshift/cluster-node-tuning-operator/commit/898663be14bcd0bc62287636409e19c4048a01cd) `sha256:e3be367267b6667ac1429e9f8dd26835aefa03b22a1dad51a8116ac41ee91e84` * [driver-toolkit](https://github.com/openshift/driver-toolkit) git [f0ae9d12](https://github.com/openshift/driver-toolkit/commit/f0ae9d12ca7e3adf594ae34e394b1ea003daa4ad) `sha256:f31992f179936b6b55311d2c673b09ed29a27baa8a28ece8859d6d04d09ad81e` * [ironic](https://github.com/openshift/ironic-image) git [438aadfd](https://github.com/openshift/ironic-image/commit/438aadfd7cae61a6c21b3c07aa8bfa55194834a3) `sha256:6a4410c46718fe6010fad0d6c6b578a2347e61c687da6fa8e6f9220c18085c38` * [ironic-agent](https://github.com/openshift/ironic-agent-image) git [ff276c00](https://github.com/openshift/ironic-agent-image/commit/ff276c00e345b9cb9298ce9dbdd7f19a8b14dbce) `sha256:93b12271a9cbb5386c49bde23a4fd0c418410ade915b89501b67976638f1b394` * [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [707c2262](https://github.com/openshift/ironic-rhcos-downloader/commit/707c226243ac401f2994952fe0e55823511111b0) `sha256:8106794a91fc7f08da90c997df3f00b9044782e81b6cda20580b17367588df15` * [machine-os-images](https://github.com/openshift/machine-os-images) git [7d29b155](https://github.com/openshift/machine-os-images/commit/7d29b155d3374427a69fa2ebfa4884d55ff76e0f) `sha256:1fa798e8929bf9ca5a0248df695a7bd9e4a9800fa3a49aa6c711f5460452303b` * [network-tools](https://github.com/openshift/network-tools) git [d6717e45](https://github.com/openshift/network-tools/commit/d6717e453a098d551c9e2d2868e1f5317c41e688) `sha256:f2031994576d4640f55cf0febf09b4f03ba9eaeaf433c1266a636a1fe2357de7` * [rhel-coreos](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:f04188bc1ca01d5664cb7dae3a3d5ebf36f72a69f636f7b077325633fc178649` * [rhel-coreos-10](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:0a06a8a49a940f7d492287ca64f200689f05a251785d8cbbe082b588fb803c37` * [rhel-coreos-10-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:46c9d8ce880d0d0d7b6443b65b39d4cc88edf1b21768bb17b236de020e7fe49b` * [rhel-coreos-extensions](https://github.com/openshift/os) git [10f1a2e7](https://github.com/openshift/os/commit/10f1a2e738aa55fff22dbe0346609e83a5f6eb90) `sha256:588e42491a86c3d245de39e0263e149b74e79c4515f63d4669e40ebe11a05247` * [tools](https://github.com/openshift/oc) git [fdf8daba](https://github.com/openshift/oc/commit/fdf8dabaedf6cf89f60547f57cc5f5f3e8d8798b) `sha256:6a1c00c60c999234bd4ccd8131ba9ea9d6875bdfb889dccf8db5948d41238110` ### [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent/tree/1d5163811da9ec9eaeea69c252c9495889f624a9) * [OCPBUGS-85041](https://issues.redhat.com/browse/OCPBUGS-85041): add --copy-network when manual network config is detected [#1446](https://github.com/openshift/assisted-installer-agent/pull/1446) * [Full changelog](https://github.com/openshift/assisted-installer-agent/compare/e57138265957c81b33d3ac13078d35f6ca07069d...1d5163811da9ec9eaeea69c252c9495889f624a9) ### [baremetal-installer, installer, installer-artifacts](https://github.com/openshift/installer/tree/3f37185a7aca5332edd421081fbea98af8b1a527) * [OCPBUGS-81986](https://issues.redhat.com/browse/OCPBUGS-81986): Bump go-jose/v4 to 4.1.4 [#10598](https://github.com/openshift/installer/pull/10598) * [Full changelog](https://github.com/openshift/installer/compare/00ea78b6eb2bb53dd279bcbe7723ff84767685d5...3f37185a7aca5332edd421081fbea98af8b1a527) ### [cluster-config-api](https://github.com/openshift/api/tree/253fff21f708fa7efd5ee65a4c30d6bde1e61cc8) * [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297): Promote GatewayAPIWithoutOLM feature gate to TechPreview [#2873](https://github.com/openshift/api/pull/2873) * [Full changelog](https://github.com/openshift/api/compare/1d79f30d4668393dc34e9b423ec6904645503c58...253fff21f708fa7efd5ee65a4c30d6bde1e61cc8) ### [cluster-ingress-operator](https://github.com/openshift/cluster-ingress-operator/tree/356e3777400d549d9b3194c74c716eb2290baefc) * [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297): Replace OLM-based Istio install with Sail Library [#1442](https://github.com/openshift/cluster-ingress-operator/pull/1442) * [OCPBUGS-86718](https://issues.redhat.com/browse/OCPBUGS-86718): Add configuration override for X-SSL strip [#1471](https://github.com/openshift/cluster-ingress-operator/pull/1471) * [Full changelog](https://github.com/openshift/cluster-ingress-operator/compare/f7a3395618f0925fbe626b18cc8173d19ab30dac...356e3777400d549d9b3194c74c716eb2290baefc) ### [console](https://github.com/openshift/console/tree/c09a410a1301c74a489d3771df7174e5ea6c734f) * [OCPBUGS-88358](https://issues.redhat.com/browse/OCPBUGS-88358): Allow VolumeSnapshot restore when parent PVC is deleted [#16602](https://github.com/openshift/console/pull/16602) * [Full changelog](https://github.com/openshift/console/compare/aa0cc6404fb385d57ad596e7f01f9a40472c3134...c09a410a1301c74a489d3771df7174e5ea6c734f) ### [haproxy-router](https://github.com/openshift/router/tree/dc4c01d494f572773a05e82bffd19c2cdaf8dce9) * [OCPBUGS-86718](https://issues.redhat.com/browse/OCPBUGS-86718): Strip X-SSL-* headers for plain HTTP [#795](https://github.com/openshift/router/pull/795) * [Full changelog](https://github.com/openshift/router/compare/f4c2ba80abb1fb3694a6b2ae0be2e5c898572632...dc4c01d494f572773a05e82bffd19c2cdaf8dce9) ### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/59524130bbc7ffc63b1c2f7dbd1cd24882e447d3) * [OCPBUGS-88334](https://issues.redhat.com/browse/OCPBUGS-88334): Skip chrony-wait on first node join [#6178](https://github.com/openshift/machine-config-operator/pull/6178) * [OCPBUGS-88335](https://issues.redhat.com/browse/OCPBUGS-88335): daemon: don't pull/extract extensions for all OS updates [#6179](https://github.com/openshift/machine-config-operator/pull/6179) * [OCPBUGS-86998](https://issues.redhat.com/browse/OCPBUGS-86998): configure-ovs: copy lldp mode to br-ex port [#6134](https://github.com/openshift/machine-config-operator/pull/6134) * [Full changelog](https://github.com/openshift/machine-config-operator/compare/507538ada4b9261a9260aef93be7518993dfdcf1...59524130bbc7ffc63b1c2f7dbd1cd24882e447d3) ### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/f47b7a53457d81d4ecf7e862819454054bb4216d) * [OCPBUGS-88396](https://issues.redhat.com/browse/OCPBUGS-88396): CVE-2026-44487 bump axios to 1.16.0 [#999](https://github.com/openshift/monitoring-plugin/pull/999) * [OCPBUGS-84290](https://issues.redhat.com/browse/OCPBUGS-84290): bump follow-redirects to 1.16.0 [#987](https://github.com/openshift/monitoring-plugin/pull/987) * [OCPBUGS-84828](https://issues.redhat.com/browse/OCPBUGS-84828), [OCPBUGS-84991](https://issues.redhat.com/browse/OCPBUGS-84991), [OCPBUGS-85007](https://issues.redhat.com/browse/OCPBUGS-85007), [OCPBUGS-85037](https://issues.redhat.com/browse/OCPBUGS-85037): Update Axios to v1.15.2 [#982](https://github.com/openshift/monitoring-plugin/pull/982) * [Full changelog](https://github.com/openshift/monitoring-plugin/compare/462c78890ffb636e05d91d41ca718bb3c81da4cf...f47b7a53457d81d4ecf7e862819454054bb4216d) ### [networking-console-plugin](https://github.com/openshift/networking-console-plugin/tree/76483af58590e3e73cc713a477b506ff404b604b) * [OCPBUGS-88313](https://issues.redhat.com/browse/OCPBUGS-88313): Trim subnet input in UDN creation form [#430](https://github.com/openshift/networking-console-plugin/pull/430) * [Full changelog](https://github.com/openshift/networking-console-plugin/compare/268037d76fd97d29f39eae2f25f0a2b2910cb30e...76483af58590e3e73cc713a477b506ff404b604b) ### [tests](https://github.com/openshift/origin/tree/9a35db21312438c6097d6bb8110e077cc159d629) * [OCPBUGS-78330](https://issues.redhat.com/browse/OCPBUGS-78330), [OCPBUGS-82146](https://issues.redhat.com/browse/OCPBUGS-82146), [OCPBUGS-85550](https://issues.redhat.com/browse/OCPBUGS-85550), [OCPBUGS-88295](https://issues.redhat.com/browse/OCPBUGS-88295), [OCPBUGS-88297](https://issues.redhat.com/browse/OCPBUGS-88297), [OCPBUGS-88320](https://issues.redhat.com/browse/OCPBUGS-88320), [OCPBUGS-88322](https://issues.redhat.com/browse/OCPBUGS-88322), [OCPBUGS-88324](https://issues.redhat.com/browse/OCPBUGS-88324): Backport noOLM Gateway API test coverage and upgrade tests [#31232](https://github.com/openshift/origin/pull/31232) * [OCPBUGS-88328](https://issues.redhat.com/browse/OCPBUGS-88328): Fix Pod.Create() to use --local flag for template proc… [#31269](https://github.com/openshift/origin/pull/31269) * [Full changelog](https://github.com/openshift/origin/compare/4cc131780d8ec7338e12105477a46b137b670bcb...9a35db21312438c6097d6bb8110e077cc159d629)