# 4.22.5

Created: 2026-07-10 20:59:43 +0000 UTC

Image Digest: `sha256:0f3aa806fc9082f5c3abfc864d51ffad150cd313ecc84c46d40dc9684375487d`


## Changes from 4.22.4

### Components

* Kubectl 1.35.2
* Kubernetes 1.35.5
* Kubernetes Tests 1.35.1
* Red Hat Enterprise Linux CoreOS 10.2 upgraded from 10.2.20260630-0 to 10.2.20260708-0


### Rebuilt images without code change

* [agent-installer-node-agent](https://github.com/openshift/assisted-installer-agent) git [753d625f](https://github.com/openshift/assisted-installer-agent/commit/753d625f3417752aabb1cf7088f311da4ec43da3) `sha256:dd9a3a1a244d131a917209254aa3d1794afe9c5ff70f8e8c8bae2841ce078f1c`
* [docker-builder](https://github.com/openshift/builder) git [fcd4ce2d](https://github.com/openshift/builder/commit/fcd4ce2d96613a27bd1ab7f53ff47225976c4ba9) `sha256:e515976dfa9a9475586de8ee2f8d0eb0f2da3e5d723945a36824e63f33601c63`
* [driver-toolkit](https://github.com/openshift/driver-toolkit) git [7aa4007a](https://github.com/openshift/driver-toolkit/commit/7aa4007a8601bf4bb23b696f580c022f58877223) `sha256:eb33c1c0dda55cf88cbcc773c8bac28f06b4c7bf4f18e9506fa9727e48dd0abe`
* [ironic](https://github.com/openshift/ironic-image) git [6984e875](https://github.com/openshift/ironic-image/commit/6984e87571f14d42463e10acee6bae32f9294534) `sha256:f542f02f15333f7bacf69e2a52969128bb7fe7f3b34e32458295f7f5d2237e2f`
* [ironic-machine-os-downloader](https://github.com/openshift/ironic-rhcos-downloader) git [9953d2b7](https://github.com/openshift/ironic-rhcos-downloader/commit/9953d2b77da077c28f9486a5d965a43149ce30c1) `sha256:7a88dbb3962dfbcb962ddd90336c3cba6c21a81f9a012461762d5106e6ca7857`
* [metallb-frr](https://github.com/openshift/frr) git [843347fd](https://github.com/openshift/frr/commit/843347fdc9460e0fd064d68a003eae5459cac1fa) `sha256:09aa8ef6a37fcaf5c39c43fa9237ccb81c716d1ff6d26c819433cfc385aa1409`
* [network-tools](https://github.com/openshift/network-tools) git [5c4b905c](https://github.com/openshift/network-tools/commit/5c4b905c09ccd6edadb2ff359f45b70ed334f948) `sha256:12c50e0918d55567f410f1df805d7ba0c74ef295790337ab3eeb15d755ae314c`
* [networking-console-plugin](https://github.com/openshift/networking-console-plugin) git [25392430](https://github.com/openshift/networking-console-plugin/commit/25392430212ebb716e63aaafd7eb3bb77dded5f7) `sha256:19806eaf4ffdbac27b36071dad5444e17a6707fb37c45e190ac65abc346b33e0`
* [ovn-kubernetes](https://github.com/openshift/ovn-kubernetes) git [8d3b38cd](https://github.com/openshift/ovn-kubernetes/commit/8d3b38cdbe7005e2f8443dc02b0e94b65a8f05e9) `sha256:08c7413ed0426377eefa9fdbcb8a9a9c5951a6a18fe1d61f043098c5980accc4`
* [ovn-kubernetes-microshift](https://github.com/openshift/ovn-kubernetes) git [8d3b38cd](https://github.com/openshift/ovn-kubernetes/commit/8d3b38cdbe7005e2f8443dc02b0e94b65a8f05e9) `sha256:4e5dec518d4194dd33359de70b48828f5ef0e55c9bce06ff057dd7f6b9921664`
* [rhel-coreos](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:b7d345536dfeefeaac83b3bebc5cfa052dc072db129dbd47643879c9176e3637`
* [rhel-coreos-10](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:93a70535ac220d05675359e5bb10f1e3aadfc2662c461134ae687e79e6d08a8b`
* [rhel-coreos-10-extensions](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:1dcea828fb860bc2a3fc04de6543b6f187b2c9303710dc511a6b2b4d26589d1a`
* [rhel-coreos-extensions](https://github.com/openshift/os) git [f41264dc](https://github.com/openshift/os/commit/f41264dc5f1c1f0a389787ecc5aaec573d485b8e) `sha256:43e4f6a22ad8e05cb6292ef8239bde7b8abfbfbd54383cea7f2f545f9c2a52e0`
* [tests](https://github.com/openshift/origin) git [c3ca9662](https://github.com/openshift/origin/commit/c3ca9662f45445c8546f2a39aabaa4a88578c9d4) `sha256:07cf772a70b2d8f5fe58248e80a56191850a93e54f52323bdfd855a2ca9a2990`
* [thanos](https://github.com/openshift/thanos) git [8938facd](https://github.com/openshift/thanos/commit/8938facdb517ad9fb2b0d94eaa3a3f5858f314f1) `sha256:c7999a4635cbf45db6555712605d29949401d41f0a9054c1d9544dacce5b99ba`
* [tools](https://github.com/openshift/oc) git [062bc544](https://github.com/openshift/oc/commit/062bc5449c4987c92c76da4d315ef4969c22d638) `sha256:e9882e0d9e5e7aceab343f9dd8ca71de1218205bba32cc301bb47fd062885e4c`


### [agent-installer-api-server](https://github.com/openshift/assisted-service/tree/3f47803587d4cb2c4febbec95e7bdda3a5c9eabe)

* [OCPBUGS-93786](https://issues.redhat.com/browse/OCPBUGS-93786): Simplify IRI api dependency [#10539](https://github.com/openshift/assisted-service/pull/10539)
* [Full changelog](https://github.com/openshift/assisted-service/compare/1090e097e9274cbc807cbb0f2586fa592408f4b1...3f47803587d4cb2c4febbec95e7bdda3a5c9eabe)


### [baremetal-operator](https://github.com/openshift/baremetal-operator/tree/e3a3967d14abac2562792d0b47cd7d8cb15e37f2)

* [OCPBUGS-97940](https://issues.redhat.com/browse/OCPBUGS-97940): Add BMH finalizer on PreprovisioningImage [#505](https://github.com/openshift/baremetal-operator/pull/505)
* [Full changelog](https://github.com/openshift/baremetal-operator/compare/c7bddefa772231786ccba9ffb8e750978fb1c5f7...e3a3967d14abac2562792d0b47cd7d8cb15e37f2)


### [cloud-credential-operator](https://github.com/openshift/cloud-credential-operator/tree/c69fe7e078ad2e51f8352af04ff45c54a6a11e1d)

* NO-JIRA: Revert "OCPBUGS-87828: Scope minted AWS IAM policies to cluster-owned resources" [#1059](https://github.com/openshift/cloud-credential-operator/pull/1059)
* [OCPBUGS-87828](https://issues.redhat.com/browse/OCPBUGS-87828): Scope minted AWS IAM policies to cluster-owned resources [#1045](https://github.com/openshift/cloud-credential-operator/pull/1045)
* [Full changelog](https://github.com/openshift/cloud-credential-operator/compare/c23bddf58e561b725ab5eb012252091e7a472084...c69fe7e078ad2e51f8352af04ff45c54a6a11e1d)


### [cluster-cloud-controller-manager-operator](https://github.com/openshift/cluster-cloud-controller-manager-operator/tree/b99c3d88b0e7b125f0340bb5d8e3333fa3940a60)

* [OCPBUGS-94184](https://issues.redhat.com/browse/OCPBUGS-94184): OCPBUGS-65582: [release-4.22] OCPBUGS-65582: manifests: Shift operator Deployment and ClusterOperator after CredentialsRequests [#484](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/484)
* [SPLAT-2794](https://issues.redhat.com/browse/SPLAT-2794): Create OTE Binary and add vSphere hybrid e2e tests [#471](https://github.com/openshift/cluster-cloud-controller-manager-operator/pull/471)
* [Full changelog](https://github.com/openshift/cluster-cloud-controller-manager-operator/compare/f6221889236cf9f2b24359d121c3291f08b74151...b99c3d88b0e7b125f0340bb5d8e3333fa3940a60)


### [cluster-monitoring-operator](https://github.com/openshift/cluster-monitoring-operator/tree/de5b2bd406ec6b9c67bf4ffa4847f3609ff46615)

* [OCPBUGS-93722](https://issues.redhat.com/browse/OCPBUGS-93722): [release-4.22] Prometheus: Information disclosure of Azure OAuth client secret via config API [#2976](https://github.com/openshift/cluster-monitoring-operator/pull/2976)
* [Full changelog](https://github.com/openshift/cluster-monitoring-operator/compare/cc54f3b3fedd7e9e1f62c9addb0f3e69ee8ded69...de5b2bd406ec6b9c67bf4ffa4847f3609ff46615)


### [cluster-node-tuning-operator](https://github.com/openshift/cluster-node-tuning-operator/tree/1b0cc30b10e185774c22e1d210d9b03034909303)

* [OCPBUGS-93924](https://issues.redhat.com/browse/OCPBUGS-93924): Let cri-o manage the GOMAXPROC for burstable pods [#1555](https://github.com/openshift/cluster-node-tuning-operator/pull/1555)
* [Full changelog](https://github.com/openshift/cluster-node-tuning-operator/compare/9553086d2f3b04f929609f225d61fd60daacae8d...1b0cc30b10e185774c22e1d210d9b03034909303)


### [cluster-olm-operator](https://github.com/openshift/cluster-olm-operator/tree/f66065f7ae39fefe3058d72aa100d41d4327a407)

* [OCPBUGS-94187](https://issues.redhat.com/browse/OCPBUGS-94187): Scale to replicas=2 and enable PDB on HighlyAvailable topology [release-4.22] [#215](https://github.com/openshift/cluster-olm-operator/pull/215)
* [Full changelog](https://github.com/openshift/cluster-olm-operator/compare/d131450b2645623089b26353a309015c95c8871c...f66065f7ae39fefe3058d72aa100d41d4327a407)


### [console](https://github.com/openshift/console/tree/f45e09ca1a8cd78b0d461b77e0fd734b1633cea5)

* [OCPBUGS-95580](https://issues.redhat.com/browse/OCPBUGS-95580): Fix unnecessary error on Node Terminal tab [#16696](https://github.com/openshift/console/pull/16696)
* [Full changelog](https://github.com/openshift/console/compare/afed24225ae0dfd69626782d4b3a48116c030986...f45e09ca1a8cd78b0d461b77e0fd734b1633cea5)


### [console-operator](https://github.com/openshift/console-operator/tree/59eb0873d73f1007d4d019bfcb6882f6467d8b05)

* [OCPBUGS-94188](https://issues.redhat.com/browse/OCPBUGS-94188): use ObservedGeneration to determine Progressing status [#1180](https://github.com/openshift/console-operator/pull/1180)
* [Full changelog](https://github.com/openshift/console-operator/compare/07e509a906dd79e190d663fe233c56b3d586b9af...59eb0873d73f1007d4d019bfcb6882f6467d8b05)


### [hypershift](https://github.com/openshift/hypershift/tree/aa2d83b008ba32754aa3dedef335c43c4cb5cbd7)

* [CNTRLPLANE-3749](https://issues.redhat.com/browse/CNTRLPLANE-3749): feat(api,cpo): add observedGeneration to ControlPlaneComponentStatus [#8868](https://github.com/openshift/hypershift/pull/8868)
* [OCPBUGS-93921](https://issues.redhat.com/browse/OCPBUGS-93921): bump catalog image version cap from 4.21 to 4.22 [#8861](https://github.com/openshift/hypershift/pull/8861)
* [Full changelog](https://github.com/openshift/hypershift/compare/115431cac03d6af63d9279089267a4df956921c8...aa2d83b008ba32754aa3dedef335c43c4cb5cbd7)


### [ironic-agent](https://github.com/openshift/ironic-agent-image/tree/fd9f6409fd02f818101a27812d381941fd6a6bef)

* [OCPBUGS-95061](https://issues.redhat.com/browse/OCPBUGS-95061): Replace individual package removal with a single rpm -e loop [#282](https://github.com/openshift/ironic-agent-image/pull/282)
* [OCPBUGS-95061](https://issues.redhat.com/browse/OCPBUGS-95061): Replace dnf remove with rpm -e to prevent dependency removal [#270](https://github.com/openshift/ironic-agent-image/pull/270)
* [Full changelog](https://github.com/openshift/ironic-agent-image/compare/0336e6383c98f4f0c6b35c71e00116d3c3160c43...fd9f6409fd02f818101a27812d381941fd6a6bef)


### [kubevirt-csi-driver](https://github.com/openshift/kubevirt-csi-driver/tree/90f14506c2d4fecfba2c355934bde87e6f101a20)

* [OCPBUGS-83883](https://issues.redhat.com/browse/OCPBUGS-83883): Bump google.golang.org/grpc to v1.79.3 [#107](https://github.com/openshift/kubevirt-csi-driver/pull/107)
* [Full changelog](https://github.com/openshift/kubevirt-csi-driver/compare/771b562d4875296007850a4d3709a7ae1c6ed3e2...90f14506c2d4fecfba2c355934bde87e6f101a20)


### [machine-config-operator](https://github.com/openshift/machine-config-operator/tree/464f0b06a376d8b21e93eb1a3d3064fb69a65c42)

* [OCPBUGS-97904](https://issues.redhat.com/browse/OCPBUGS-97904): Inject proxy into MCC deployment [#6275](https://github.com/openshift/machine-config-operator/pull/6275)
* [OCPBUGS-96145](https://issues.redhat.com/browse/OCPBUGS-96145): Update AMI Whitelist [#6260](https://github.com/openshift/machine-config-operator/pull/6260)
* [Full changelog](https://github.com/openshift/machine-config-operator/compare/c038cef79a7154854bbd66a5a102cc5646c33b9a...464f0b06a376d8b21e93eb1a3d3064fb69a65c42)


### [monitoring-plugin](https://github.com/openshift/monitoring-plugin/tree/f70a2826fd34361285056b2417d3623d9a1c3e59)

* Fix for OCPBUGS-91628: CVE-2026-45736 [#1023](https://github.com/openshift/monitoring-plugin/pull/1023)
* NO-JIRA: fix unit test severitySort and incidents [#1036](https://github.com/openshift/monitoring-plugin/pull/1036)
* Fix for OCPBUGS-94005: CVE-2026-13676 [#1028](https://github.com/openshift/monitoring-plugin/pull/1028)
* [OU-1396](https://issues.redhat.com/browse/OU-1396): [release-4.22]  fix: use replace to set variables to avoid navigation trap [#1019](https://github.com/openshift/monitoring-plugin/pull/1019)
* [Full changelog](https://github.com/openshift/monitoring-plugin/compare/3bd7c2092ee0fe8bbad7fb4006b41ff23755343a...f70a2826fd34361285056b2417d3623d9a1c3e59)


### [network-interface-bond-cni](https://github.com/openshift/bond-cni/tree/5ef2d3205f11fba65e3949c0c57897420a83974a)

* [OCPBUGS-97943](https://issues.redhat.com/browse/OCPBUGS-97943): Update OWNERS for release-4.22 [#119](https://github.com/openshift/bond-cni/pull/119)
* [Full changelog](https://github.com/openshift/bond-cni/compare/297eeb4320e07b18d559bc373b665479c760e8c7...5ef2d3205f11fba65e3949c0c57897420a83974a)


### [olm-catalogd, olm-operator-controller](https://github.com/openshift/operator-framework-operator-controller/tree/b3ab2a7ccf696f6d12eb8cd70ba80bbc827928eb)

* [OCPBUGS-94187](https://issues.redhat.com/browse/OCPBUGS-94187): enable OLMv1 topology-based deployment scaling e2e test [#761](https://github.com/openshift/operator-framework-operator-controller/pull/761)
* [OCPBUGS-94187](https://issues.redhat.com/browse/OCPBUGS-94187): Backport HA topology deployment scaling to release-4.22 [#758](https://github.com/openshift/operator-framework-operator-controller/pull/758)
* [Full changelog](https://github.com/openshift/operator-framework-operator-controller/compare/26b848969eabd4e1899439f40a4346552f08ff38...b3ab2a7ccf696f6d12eb8cd70ba80bbc827928eb)


### [openstack-machine-api-provider](https://github.com/openshift/machine-api-provider-openstack/tree/74bd2dd2e7bc5b93e78b6b204012b6b7d981a4ba)

* [OCPBUGS-97826](https://issues.redhat.com/browse/OCPBUGS-97826): Revendor CAPO [#175](https://github.com/openshift/machine-api-provider-openstack/pull/175)
* [Full changelog](https://github.com/openshift/machine-api-provider-openstack/compare/8a8c354b99ce83e3c05a91358aadec09944c2fce...74bd2dd2e7bc5b93e78b6b204012b6b7d981a4ba)