Back to index

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.21.0-ec.2-aarch64

Team Approvals:

Tests:

• Informing jobs
  • aws-ovn-arm64 Succeeded (1 retries) periodic-ci-openshift-multiarch-master-nightly-4.21-ocp-e2e-aws-ovn-arm64
  • ovn-upgrade Succeeded periodic-ci-openshift-multiarch-master-nightly-4.21-ocp-e2e-upgrade-aws-ovn-arm64

Upgrades from:

• 4.21.0-ec.1 - Success

---

Loading changelog, this may take a while ...

Changes from 4.21.0-ec.1

Created: 2025-10-22 07:55:16 +0000 UTC

Image Digest: sha256:0dd6daa56e0a6aa8760c419fa6529a46703fb2b32fe14973de9d39e0bccd0bde

Components

• Kubectl 1.33.3
• Kubernetes upgraded from 1.33.5 to 1.34.1
• Kubernetes Tests 1.33.4
• Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250925-0 to 9.6.20251017-0

  The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
IngressControllerLBSubnetsAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NodeSwap (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SetEIPForNLBIngressController (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ManagedBootImagesAzure (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ManagedBootImagesvSphere (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
PreconfiguredUDNAddresses (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VolumeAttributesClass (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ExternalOIDC (0 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
EventTTL (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesCPMS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

• ovirt-csi-driver
• ovirt-csi-driver-operator

Rebuilt images without code change

• azure-disk-csi-driver git cbf9908d sha256:60c91c911f57eaf6a3daf6f139cef61c8c2c4f29b2cb0379510c8748b3893711
• cluster-openshift-controller-manager-operator git da1e14c4 sha256:514cc12de72e3db4281975dfe18aaea026eb0f0f35dfebc21204b859dff63a19
• csi-external-snapshot-metadata git 24faebef sha256:0c7fae0f98f29f06e61c3c709fdc75646b054c60aa83daa9b998d9605539f6e1
• driver-toolkit git 5c53d757 sha256:36ff0975c43b34d92f723b43c688335f4155bf794a6f22211281f048cac9b6cb
• egress-router-cni git 5e0f8d1b sha256:280fcad5a0995e1008df8aa9f6da5172a1deb46f65ffac834d9bb5d9ba2265bc
• gcp-pd-csi-driver-operator git ac94bf2a sha256:342a74abe77f202c75e1b91304ebbb48e74a349e8368ddb56ba03fca51055f69
• keepalived-ipfailover git 9fd8d256 sha256:ceec59ffa0bd6a5d37c81161be057c8138245391b563bbff943bf58bce1b144a
• kube-rbac-proxy git b9134351 sha256:aaf25c001f1ca459d0c1d8ae9636bf81b2701be9bca1ef8a863ffff05811cb31
• kubevirt-cloud-controller-manager git 3f4542ec sha256:3909f5deefd8afbd185b31dfcbfbaa43679714c281dc2e590f578dcd15d29900
• kubevirt-csi-driver git 8b8dd30e sha256:c7994cb1a4426669549befdcdb6f0fda7dbd3912f2891c5f8b518cfcfb8041c2
• libvirt-machine-controllers git a336f0b5 sha256:427ec00b82dbce60b09c1c140643e0ae2b4ff35cccbd5292f6789b8d1330bf9f
• metallb-frr git fc0fe74f sha256:8366f32494a042d9d96bf63069332a3633b1cfdfe495864b9973b901eb58594e
• multus-cni git cf0f68ec sha256:cb726d3efffa263a728ebbda95a94a8b8a862405f098be71666657997e55d935
• multus-cni-microshift git cf0f68ec sha256:f707cb71fefd09001955c5f2834513e7b428f3909e060c222a804cd42da617df
• multus-networkpolicy git ef99d3d4 sha256:46524ff1a6ea07542890577106e0b83bc8273977756a6b866a1bdf40d259edf1
• multus-route-override-cni git 391c1b03 sha256:a8c0cdf10fdb3f6d72419afb7d21df43e95b5f1d3324897aa4e2a336f426549d
• multus-whereabouts-ipam-cni git 43c89591 sha256:d0ad60ae46882fb4ee92e52782edae70f52b2042b3e0e3731c45823220bfbecc
• network-metrics-daemon git b81340a9 sha256:f0d23c3ff31ed1b8ba49b566e2d8cb93a6a987a0cc5c38936eebcd2092927b74
• oauth-proxy git 6649cb8a sha256:efdfbce3b8bd700c6881cf6e04dcb8241a154382a27e693bb59382f58aac1913
• oauth-server git 81098796 sha256:f114c6ce616753d9e8e2de824521bea950d2fa0103e3fc0eaa73acee09312040
• openshift-controller-manager git 15fc552a sha256:3c22d81313c48c698e87df6b55212b86d001aaacada0464d71f9fc14228d53d7
• openstack-resource-controller git bf0d2c88 sha256:4b7626c16fd559e6ede3bb75be4524a04497f9ba605c2939cdc68b0639dfe693
• prometheus-node-exporter git e72c0718 sha256:9d1d0067df9d957cc1c68fdca77cab6305b28c76364f3cea19f26019c4b10c83
• telemeter git 0634eee9 sha256:d09ea423a312628339934f5d09d1d69661e1bf732ff5edab3585da3bfde0314d
• thanos git 6ea20ffa sha256:9cd4b5f7aab83b51b51543d8c11e62797d3417b12551130f5a850b87c055225f

agent-installer-api-server

• NO-ISSUE: [master] Bump OCP versions: 4.16, 4.12, 4.18, 4.20, 4.19, 4.17 #8134
• AGENT-1303: Allow InfraEnv registration to use late binding #8059
• NO-ISSUE: Update Konflux references #8128
• NO-ISSUE: bump ocp dockerfile base image to 4.21 #8110
• MGMT-20588: Align kube descheduler activation CR with OVE needs #7960
• NO-ISSUE: Update Konflux references #8050
• ACM-25137: Remove the SERVICE_EL8_IMAGE env vars #8108
• MGMT-21725: Update Renovate for legacy EL8 Dockerfiles #8090
• OCPBUGS-62580: Fix edge jobs to be consistent with ART for 4.21 #8104
• NO-ISSUE: [master] Bump OCP versions: 4.19 #8095
• NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.18 #8089
• NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.15, 4.14 #8084
• Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

• NO-ISSUE: Update Konflux references #1299
• MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1289
• OCPBUGS-62361: Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.21 #1276
• OCPBUGS-62398: Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.21 #1277
• NO-ISSUE: Update Konflux references #1283
• Full changelog

agent-installer-node-agent

• MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1148
• OCPBUGS-62390: Bump dockerfile images to 4.21 #1147
• NO-ISSUE: Update konflux pipelines to use a remote pipeline #1118
• Full changelog

agent-installer-utils

• OCPBUGS-62986: Update Konflux references #177
• OCPBUGS-62958: Update Konflux references #168
• OCPBUGS-62905: Dockerfile cleanup #174
• OCPBUGS-62347: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.21 #165
• OCPBUGS-62704: remove hardcoded versions from iso_builder #171
• AGENT-1336: Add release label to build #170
• OCPBUGS-62646: Update Konflux references #167
• OCPBUGS-62645: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 0697723 #146
• AGENT-1258: Build PipelineRun changes for Konflux #155
• Full changelog

apiserver-network-proxy

• OCPBUGS-62355: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.21 #86
• Full changelog

aws-cloud-controller-manager

• OCPBUGS-62354: Updating ose-aws-cloud-controller-manager-container image to be consistent with ART for 4.21 #118
• Full changelog

aws-cluster-api-controllers

• OCPBUGS-63046: Merge https://github.com/kubernetes-sigs/cluster-api-provider-aws:v2.9.2 (d3a7da1) into main #576
• OCPBUGS-62540: Updating ose-aws-cluster-api-controllers-container image to be consistent with ART for 4.21 #575
• Full changelog

aws-ebs-csi-driver

• OCPBUGS-62380: Updating ose-aws-ebs-csi-driver-container image to be consistent with ART for 4.21 #292
• Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, openstack-cinder-csi-driver-operator

• OCPBUGS-62404: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.21 #438
• STOR-1945: STOR-2056: add Azure File NFS test manifest #445
• OCPBUGS-62374: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.21 #437
• MULTIARCH-5554: update smb-csi-driver-operator support to add ppc64le #428
• OCPBUGS-62427: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.21 #439
• OCPBUGS-62348: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.21 #436
• OCPBUGS-61955: Add withCABundleDaemonSetHook() to AWS EFS operator #433
• Full changelog

aws-karpenter-provider-aws

• OCPBUGS-62388: Updating aws-karpenter-provider-aws-container image to be consistent with ART for 4.21 #15
• Full changelog

aws-kms-encryption-provider

• OCPBUGS-62458: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.21 #31
• Full changelog

aws-machine-controllers

• OCPBUGS-62395: Updating ose-machine-api-provider-aws-container image to be consistent with ART for 4.21 #139
• OCPBUGS-38759: client: re-use a single file for building the session instead of randomly named files #140
• Full changelog

aws-pod-identity-webhook

• OCPBUGS-62587: Updating ose-aws-pod-identity-webhook-container image to be consistent with ART for 4.21 #206
• Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

• OCPBUGS-62487: Updating ose-azure-cloud-controller-manager-container image to be consistent with ART for 4.21 #151
• OCPBUGS-62392: Updating ose-azure-cloud-node-manager-container image to be consistent with ART for 4.21 #150
• Full changelog

azure-cluster-api-controllers

• OCPBUGS-62387: Updating ose-azure-cluster-api-controllers-container image to be consistent with ART for 4.21 #352
• Full changelog

azure-file-csi-driver

• OCPBUGS-62547: Updating ose-azure-file-csi-driver-container image to be consistent with ART for 4.21 #106
• Full changelog

azure-kms-encryption-provider

• OCPBUGS-62405: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.21 #23
• Full changelog

azure-machine-controllers

• OCPBUGS-62335: Updating ose-machine-api-provider-azure-container image to be consistent with ART for 4.21 #163
• Full changelog

azure-service-operator

• OCPBUGS-62368: Updating ose-azure-service-operator-container image to be consistent with ART for 4.21 #13
• Full changelog

azure-workload-identity-webhook

• OCPBUGS-62364: Updating ose-azure-workload-identity-webhook-container image to be consistent with ART for 4.21 #39
• CCO-665: Merge upstream changes #40
• Full changelog

baremetal-cluster-api-controllers

• OCPBUGS-62565: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.21 #53
• Full changelog

baremetal-installer, installer, installer-artifacts

• OCPBUGS-62085: Update the RHCOS 4.21 bootimage metadata #9998
• OKD-237: Remove fcos references #9970
• OSASINFRA-3915: openstack: Start setting CredentialsMode #9734
• NO-JIRA: shiftstack: Update OWNERS #9994
• OCPBUGS-62125: baremetal: set baremetalhost architecture #9987
• OCPBUGS-60752: Add MTU validation for networkConfig #9919
• OCPBUGS-62907: AGENT-1269: Use agent-installer-ui image from release #9995
• OCPBUGS-62430: None: Allow IPv6 Primary DualStack installs on platforms None and External #9983
• OCPBUGS-41567: Clean up baremetal bootstrap systemd dependencies #8986
• OCPBUGS-62452: Updating ose-installer-container image to be consistent with ART for 4.21 #9980
• OCPBUGS-62471: Updating ose-baremetal-installer-container image to be consistent with ART for 4.21 #9981
• OCPBUGS-60538: Update assisted-service dependencies #9956
• CORS-4256: Add PSC Endpoint to the installconfig #9991
• OCPBUGS-62514: Updating ose-installer-artifacts-container image to be consistent with ART for 4.21 #9984
• SPLAT-2511: vSphere - do not block on vSphere >7.0.2, allow 9 #9963
• CORS-4078: allow toggling AWS client logging #9976
• OCPBUGS-62363: Set agent-extract-tui start timeout #9975
• no-jira: Revert “Merge pull request #9939 from barbacbd/CORS-4058-release-4.21” #9974
• CORS-4078: bump AWS SDK v2 max backoff duration to 300s #9966
• CORS-4107: Update default release image to 4.21 #9954
• OCPBUGS-61514: Add check for gcp firewall deletion permission #9935
• Full changelog

baremetal-machine-controllers

• OCPBUGS-62365: Updating baremetal-machine-controller-container image to be consistent with ART for 4.21 #237
• Full changelog

baremetal-operator

• OCPBUGS-61349, OCPBUGS-62112: Merge upstream #432
• OCPBUGS-62460: Updating ose-baremetal-operator-container image to be consistent with ART for 4.21 #433
• Full changelog

baremetal-runtimecfg

• OCPBUGS-62581: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.21 #370
• Full changelog

cli, cli-artifacts, deployer, tools

• NO-JIRA: adm upgrade status: capture testcase for OCPBUGS-60768 #2081
• OCPBUGS-62445: prevent crash when rootDeviceHints format is invalid #2109
• NO-JIRA: Update shellescape and sspi to newer versions #2116
• NO-JIRA: Remove myself from update approvers, add Hongkai #2112
• OCPBUGS-62550: Updating ose-cli-artifacts-container image to be consistent with ART for 4.21 #2111
• OCPBUGS-61491: Update code to retrieve ICSP instead of ICP #2095
• OCPBUGS-62362: Updating ose-tools-container image to be consistent with ART for 4.21 #2108
• OCPBUGS-62548: Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.21 #2110
• NO-JIRA: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.21 #2107
• Full changelog

cloud-credential-operator

• CCO-644: Upgrade msgraph-sdk-go v1.86.0 #924
• CCO-435: Migrate away from deprecated ioutil package. #920
• OCPBUGS-62495: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.21 #923
• Full changelog

cloud-network-config-controller

• OCPBUGS-55625: Retrieve subnet from vnet subnets.addressPrefixes field #179
• OCPBUGS-62437: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.21 #181
• Full changelog

cluster-authentication-operator

• OCPBUGS-62447: Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.21 #793
• API-1835: test/oauth-server-staticresource: adds a test to show which input resources are required to run the operator and the staticResourceController #790
• NO-JIRA: Update OIDC e2e test to expect admission-time validation error of invalid CEL expression #797
• API-1835: fix integration tests #795
• Full changelog

cluster-autoscaler

• OCPBUGS-62383: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.21 #383
• OCPBUGS-62477: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.21 #384
• NO-JIRA: Remove OWNERS automation preamble #382
• Full changelog

cluster-autoscaler-operator

• OCPBUGS-62589: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.21 #354
• AUTOSCALE-384: Add “cordon node before terminating” option to cluster autoscaler resource #356
• Full changelog

cluster-baremetal-operator

• OCPBUGS-61477: Enable runtime extraction of aarch64 images #508
• OCPBUGS-62577: Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.21 #507
• Full changelog

cluster-bootstrap

• OCPBUGS-62558: Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.21 #120
• Full changelog

cluster-capi-controllers

• OCPBUGS-62579: Updating ose-cluster-api-container image to be consistent with ART for 4.21 #249
• Full changelog

cluster-capi-operator

• OCPCLOUD-2999: AWSMachine status conversion and syncing #372
• OCPCLOUD-3104: manifests-gen: re-enable conversion, validating and mutating webhook configurations #389
• OCPCLOUD-3104: Fix v1beta2 condition setting #385
• OCPCLOUD-2709: Implement MAPI2CAPI conversion of loadbalancers #348
• OCPBUGS-62570: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.21 #357
• OCPCLOUD-2995: Machine status conversion and syncing #365
• NO-JIRA: hack/test.sh use eval for starting ginkgo so GINKO_EXTRA_ARGS having whitespaces works #380
• OCPCLOUD-2641: Validate creation of Machine API Machines #368
• OCPBUGS-62620: kubeconfig controller: do not error on token secret not yet populated #373
• NO-JIRA: lint: add aliases for machine api’s and controller-runtime log #367
• OCPCLOUD-2992: refactor: split machine migration testing into multiple files #364
• NO-JIRA: machine_sync: assorted fixes #370
• Full changelog

cluster-cloud-controller-manager-operator

• OCPBUGS-62585: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.21 #414
• OCPBUGS-51305: ccm: disable unused secure-serving port and webhook #415
• Full changelog

cluster-config-api

• OCPBUGS-63311: config/v1/types_cluster_version: Tighten force and rollback warnings #2539
• CORENET-6005: network, virt: graduate preconfigured UDN addresses feature gate #2496
• MCO-1861: Promote ManagedBootImagesvSphere feature gate to default #2529
• MCO-1873: promote ManagedBootImagesAzure to default #2526
• OCPBUGS-60457: payload-command: remove authentication CR from hypershift payload #2523
• OCPSTRAT-2371: Update to Kubernetes v1.34.1 #2427
• CNTRLPLANE-1576: add event-ttl configuration to kube-apiserver #2520
• CNTRLPLANE-1614: add event-ttl feature gate #2525
• : promote InsightConfigAPI and OnDemandDataGather to v1 #2448
• Switch to slices stable sort on manifest merging #2524
• Use separate serialization linting config for Machine API provider types #2522
• Add initial AI api-review configuration #2489
• Support AMD SEV-SNP on AWS #2424
• MCO-1805: MCO-1806: Add ManagedBootImagesCPMS feature gate & CPMS type to ManagedBootImages API #2396
• OCPBUGS-62482: Updating ose-cluster-config-api-container image to be consistent with ART for 4.21 #2513
• OCPBUGS-55649: Remove SetEIPForNLBIngressController feature gate #2501
• OCPBUGS-61382, STOR-2533: move VolumeAttributesClass to GA #2471
• Promote BYO OIDC features #2454
• OCPBUGS-55673: Remove IngressControllerLBSubnetsAWS featuregate #2400
• OCPBUGS-62068: NodeSwap Feature Gate usage to be removed #2494
• Full changelog

cluster-config-operator

• OCPBUGS-62330: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.21 #450
• Full changelog

cluster-control-plane-machine-set-operator

• OCPBUGS-62588: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 4.21 #369
• Full changelog

cluster-csi-snapshot-controller-operator

• Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.21 #245
• Full changelog

cluster-dns-operator

• NE-2138: Bump cluster-dns-operator to Kubernetes 1.33 for 4.21 #448
• Full changelog

cluster-etcd-operator

• OCPBUGS-63240: [TNF] Fix job controller startup reliability with retry and degraded status #1500
• OCPEDGE-1885, OCPEDGE-2088: Updated state transitions & tests for TNF setup job #1481
• OCPBUGS-60273: Ensure revision.json persists on ungraceful shutdown #1494
• NO-JIRA: use scrapeClass for service monitors #1497
• NO-JIRA: add runbook urls for alerting rules #1496
• NO-JIRA: feat: update the ip parsing for the nodes #1479
• OCPEDGE-2183: Updating Quorum detection logic to absolve TNF of quorum loss reports. #1483
• NO-JIRA: remove etcd-backup-server from static pod lists #1492
• CNTRLPLANE-1315: Add OpenShift Tests Extension (OTE) for cluster-etcd-operator #1488
• OCPBUGS-62518: Updating cluster-etcd-operator-container image to be consistent with ART for 4.21 #1489
• And 1 elided commits (e.g. from squash or rebase merges)
• Full changelog

cluster-image-registry-operator

• OCPBUGS-62573: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.21 #1256
• Full changelog

cluster-ingress-operator

• NE-1334: Enhancement to add brew and stage secrets for pre-release image testing #1291
• OCPBUGS-43919: desiredWildcardDNSRecord: Check for nil LB field #1189
• OCPBUGS-62400: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.21 #1286
• NE-1334: Script to install ossm pre-release operator and run GWAPI e2e tests #1283
• Full changelog

cluster-kube-apiserver-operator

• OCPSTRAT-2371: Update to Kubernetes v1.34.1 #1939
• OCPNODE-3758: alpha/beta apis for DRA should not be enabled in 1.34 #1932
• OCPBUGS-60045: Bump library-go to latest master #1928
• OCPBUGS-62450: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.21 #1931
• NO-JIRA: Add priority field to prevent early shutdown #1915
• NO-ISSUE: Use scrapeClass for service monitors #1930
• OCPSTRAT-2371: MutatingAdmissionPolicy e2es depend on both v1alpha1 and v1beta1 of admissionregistration.k8s.io being served in k8 1.34 #1927
• Full changelog

cluster-kube-cluster-api-operator

• OCPBUGS-57562: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.20 #58
• Full changelog

cluster-kube-controller-manager-operator

• OCPSTRAT-2371: Update to Kubernetes v1.34.1 #888
• no-jira: Add priority field to prevent early shutdown #865
• CNTRLPLANE-1544: Enable user namespaces for the operator #886
• NO-ISSUE: Use scrapeClass for service monitors #880
• OCPBUGS-62408: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.21 #885
• Full changelog

cluster-kube-scheduler-operator

• OCPSTRAT-2371: Update to Kubernetes v1.34.1 #583
• no-jira: Add priority field to prevent early shutdown #572
• CNTRLPLANE-1544: manifests: Align user namespaces for the operator #581
• CNTRLPLANE-1544: Enable user namespace for the operator #580
• OCPBUGS-62609: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.21 #579
• NO-ISSUE: Use scrapeClass for service monitors #578
• Full changelog

cluster-kube-storage-version-migrator-operator

• OCPBUGS-62444: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.21 #132
• Full changelog

cluster-machine-approver

• OCPBUGS-62583: NO-JIRA: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.21 #277
• Full changelog

cluster-monitoring-operator

• OCPBUGS-62276: add tls configuration for the monitoring plugin deployment #2706
• NO-JIRA: [bot] Synchronize versions of the downstream components #2705
• OCPBUGS-62972: enhance case 66736 #2708
• NO-ISSUE: Update jsonnet dependencies #2696
• OCPBUGS-62160: Remove AlertManager endpoints when disabled #2684
• NO-JIRA: [bot] Synchronize versions of the downstream components #2703
• MON-4395: Bump prometheus-operator to v0.86.0 #2698
• NO-ISSUE: set openshift-state-metrics as default container #2693
• OCPBUGS-61661: Remove cluster from non-multicluster dashboards #2679
• MON-4384: adding Blackwell GPU device to accelerators configmap #2689
• NO-ISSUE: chore: remove image locations in assets #2683
• NO-ISSUE: [bot] Update jsonnet dependencies #2687
• NO-ISSUE: chore: remove mentions of prometheus Adapter #2682
• OCPBUGS-15430: remove Kubernetes API alerting rules #2671
• NO-JIRA: chore: bump jsonnet dependencies #2649
• Full changelog

cluster-network-operator

• CORENET-6423: api, l2udn: subnets must be masked #2808
• CORENET-6311: Skip running _stackmanager for libreswan 5.3+ #2787
• OCPBUGS-62457: Updating cluster-network-operator-container image to be consistent with ART for 4.21 #2807
• OCPBUGS-54806: Add recording rules for UDN telemetry #2697
• OCPBUGS-61215: Tweak iptables-alerter to try to avoid crictl bug #2802
• Full changelog

cluster-node-tuning-operator

• NO-ISSUE: pkg/metrics/server: Log bind address #1411
• OCPBUGS-62839: E2E: Add test cases related to schedulable control plane nodes #1405
• OCPBUGS-62835: E2E: llc: make sure to remove any trailing newspaces #1407
• OCPBUGS-62153: E2E: skip SMT disabled test when L3 cache spans entire NUMA node #1397
• OCPBUGS-62605: e2e: refactor GetSMTLevel to remove Gomega assertions #1399
• OCPBUGS-62578: Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.21 #1391
• Full changelog

cluster-olm-operator

• OPRUN-4207: Update feature-gate processing to support disabled features #144
• NO-ISSUE: Remove conditionals for cp-manifests use #142
• OPRUN-4079: Use helm to generate manifests #140
• Full changelog

cluster-openshift-apiserver-operator

• OCPBUGS-62500: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.21 #626
• Full changelog

cluster-policy-controller

• OCPBUGS-62440: Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.21 #169
• Full changelog

cluster-samples-operator

• OCPBUGS-62409: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.21 #651
• Full changelog

cluster-storage-operator

• STOR-2523: Add hypershift managed-by labels for csi driver operators #627
• OCPBUGS-62669: Move metrics to vsphere driver #625
• OCPBUGS-60637: remove static value for runAsUser in securityContext #619
• OCPBUGS-62421: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.21 #624
• OCPBUGS-62172: Add app label to Manila deployment #628
• OCPBUGS-61112: add Azure Disk CSI driver SA name to CredentialsRequest #618
• STOR-2297: remove oVirt code from CSO #617
• Full changelog

cluster-update-keys

• OCPBUGS-62464: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.21 #86
• Full changelog

cluster-version-operator

• OCPBUGS-61872: Add ClusterVersionOperator manifests to TechPreviewNoUpgrade clusters #1232
• OCPBUGS-62861: temporarily disable metrics auth for hypershift clusters #1243
• OTA-1627: pkg/cincinnati: Centralize release metadata parsing #1231
• NO-JIRA: Move myself to emeritus #1239
• OCPBUGS-62416: Updating cluster-version-operator-container image to be consistent with ART for 4.21 #1237
• OTA-1585: test: Rename an existing test to comply with the OTE integration guide #1235
• Full changelog

configmap-reloader

• OCPBUGS-62503: Updating configmap-reload-container image to be consistent with ART for 4.21 #74
• Full changelog

console

• OCPBUGS-62593: Updating openshift-enterprise-console-container image to be consistent with ART for 4.21 #15542
• CONSOLE-4615: Update DefaultList to use ResourceDataView #15560
• OCPBUGS-61660: Fix Bare Metal Hosts nav item #15609
• CONSOLE-4603: Migrate enzyme “packages/console-dynamic-plugin-sdk” unit tests to Re… #15540
• OCPBUGS-61767: Duplicate CRs are shown as Operand instances in operator uninstallation modal #15557
• CONSOLE-4820: Migrate olmv0 to dynamic #15566
• OCPBUGS-33879: use tenancy path for project scoped status card #15585
• OCPBUGS-62947: bump dompurify to latest #15586
• CONSOLE-4819: Migrate container-security to dynamic #15565
• CONSOLE-4602: Migrate enzyme “packages/console-app” unit tests to React Testing Library #15514
• OCPBUGS-60603: Add bearer token file configuration to oc-environment script #15521
• OCPBUGS-62315: Correct the width of the cluster config toolbar filter input #15546
• CONSOLE-4795, CONSOLE-4797, CONSOLE-4801: Migrate some static extensions to dynamic #15552
• CONSOLE-4804: Migrate TopologyCreateConnector to dynamic #15549
• CONSOLE-4800: Migrate HorizontalNavTab to dynamic #15553
• OCPBUGS-59529: Prevent the topology context menu items from truncating #15524
• CONSOLE-4798: Migrate StorageClassProvisioner to dynamic #15550
• OPRUN-4086: Add ClusterCatalog controller #15466
• NO-JIRA: chore(OWNERS): remove Mylanos from OWNERS #15559
• CONSOLE-4332: Update the secrets forms to use PF components #15513
• OCPBUGS-62313: Returning from any Secret Create page does not return to secret page #15543
• CONSOLE-4684: Refactor machine-set modals #15484
• OCPBUGS-62281: InsecureSkipVerify to true for results proxy endpoint in off-cluster #14888
• CONSOLE-4808: update resource-log.cy.ts #15539
• And 2 elided commits (e.g. from squash or rebase merges)
• Full changelog

console-operator

• OCPBUGS-59939: Bumped to latest console-operator version #1055
• OCPBUGS-62512: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.21 #1050
• OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1052
• Full changelog

container-networking-plugins, containernetworking-plugins-microshift

• no-jira: Update OWNERS #204
• Full changelog

coredns

• NO-JIRA: Updating coredns-container image to be consistent with ART for 4.21 #154
• Full changelog

csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, kube-proxy, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

• OCPSTRAT-2371: Update to Kubernetes v1.34.1 #2484
• OCPBUGS-62608: Updating openshift-enterprise-pod-container image to be consistent with ART for 4.21 #2481
• OCPBUGS-60610: UPSTREAM: 134199: Promote regression-issue-74839 to 1.4 #2472
• OCPBUGS-43994: UPSTREAM: <carry>: kube-apiserver: wire through isTerminating into handler chain #2477
• Full changelog

csi-external-attacher

• OCPBUGS-61394: UPSTREAM: 682: Skip VolumeAttachments of other drivers #88
• Full changelog

csi-external-provisioner

• OCPBUGS-62541: Updating csi-provisioner-container image to be consistent with ART for 4.21 #116
• Full changelog

csi-external-resizer

• OCPBUGS-62504: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.21 #178
• Full changelog

csi-external-snapshotter, csi-snapshot-controller

• OCPBUGS-62423: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.21 #188
• Full changelog

csi-livenessprobe

• OCPBUGS-62403: Updating csi-livenessprobe-container image to be consistent with ART for 4.21 #77
• Full changelog

csi-node-driver-registrar

• OCPBUGS-60108: update log level verbosity to not clutter logs #86
• OCPBUGS-62506: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.21 #85
• Full changelog

docker-builder

• OCPBUGS-62340: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.21 #481
• Full changelog

docker-registry

• OCPBUGS-62576: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.21 #448
• Full changelog

etcd

• OCPBUGS-62338: Updating ose-etcd-container image to be consistent with ART for 4.21 #342
• Full changelog

gcp-cloud-controller-manager

• OCPBUGS-62572: Updating ose-gcp-cloud-controller-manager-container image to be consistent with ART for 4.21 #92
• NO-JIRA: Update OWNERS #90
• Full changelog

gcp-cluster-api-controllers

• OCPBUGS-62417: Updating ose-gcp-cluster-api-controllers-container image to be consistent with ART for 4.21 #249
• Full changelog

gcp-machine-controllers

• OCPBUGS-62520: Updating ose-machine-api-provider-gcp-container image to be consistent with ART for 4.21 #130
• Full changelog

gcp-pd-csi-driver

• Updating ose-gcp-pd-csi-driver-container image to be consistent with ART for 4.21 #84
• Full changelog

gcp-workload-identity-federation-webhook

• OCPBUGS-62591: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.21 #10
• Full changelog

haproxy-router

• OCPBUGS-62501: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.21 #679
• OCPBUGS-62555: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.21 #680
• Full changelog

hypershift

• OCPBUGS-63172: control-plane-operator/…/ingress-operator/deployment: Declare a metrics port #7052
• OCPBUGS-63215: fix: hosted cluster CRD compatibility with ocp 4.15 #7069
• CNTRLPLANE-1673: feat(claude): add /test-tag-pipeline command #7062
• NO-JIRA: Configure team marketplace for openshift-eng/ai-helpers plugins #7068
• OCPBUGS-63194: fix(konflux): correct ADDITIONAL_BASE_IMAGES parameter typo in tag pipeline #7064
• OCPBUGS-61881: Red Hat Konflux update hypershift-gomaxprocs-webhook #7063
• OCPBUGS-63194: fix(konflux): fix tag pipeline EC failures #7060
• OCPBUGS-55751: Fix Konflux tag pipeline template variable substitution #6910
• CNTRLPLANE-1620: feat(gomaxprocs-webhook): introduce admission webhook to auto-set GOMAXPROCS #6994
• OCPBUGS-63148: bump Konflux build images #7055
• CNTRLPLANE-1615: Add repo metrics tool for tracking AI-assisted commits #6983
• CNTRLPLANE-980: feat(api): Validation for hc.status.configuration.authentication status #6883
• OCPBUGS-61829: resolve initContainer permission issue after node reboot #6990
• NO-JIRA: test: update external-oidc e2e tests to dynamically determine tests to run #6924
• NO-JIRA: migrate renovate config #7029
• CNTRLPLANE-1643: implement multi-branch strategy with security-focused release management #7023
• CNTRLPLANE-1641: update Tekton tasks to latest trusted versions #6998
• OCPBUGS-62172: Add OpenStack node drivers to allowed non-read-only root filesystem containers #6946
• OCPBUGS-62863: feat(cmd): collect ServiceMonitor and PodMonitor resources in dump #6970
• NO-JIRA: chore(ai): add ability for jira-solve to save a plan spec first #6995
• CNTRLPLANE-1493: Add Claude command for automated Konflux task updates #6921
• CNTRLPLANE-1484: Expose cluster autoscaler metrics in HCP #6902
• CNTRLPLANE-1582: Prevent azure cluster destroy command from deleting managed/main resource group #6956
• CNTRLPLANE-1543: fix(aws): use clean image for placeholder nodes #6935
• CNTRLPLANE-1468: feat(install): add command line argument for ImagePullPolicy configuration #6875
• NO-JIRA: feat(claude): add e2e-analyze command for CI failure analysis #6737
• CNTRLPLANE-1374: feat(azure): add setup scripts for self-managed Azure hosted clusters #6752
• NO-JIRA: chore(ai): configure all agents to inherit model configuration #6906
• CNTRLPLANE-1332: docs(azure): add self-managed Azure HyperShift overview guide #6948
• CNTRLPLANE-1432: Make PSA test conditional on OpenShiftPodSecurityAdmission feature gate #6923
• CNTRLPLANE-1581: feat(azure): relax API to make externalDNS optional for self-managed clusters #6951
• OCPBUGS-62446: fix(hcco): add retry mechanism for HCP retrieval to handle transient connectivity issues #6918
• NO-JIRA: docs(jira-solve): require godoc comments and unit tests for new functions #6957
• OCPBUGS-60637: feat(cpo): add UID security context to CSO deployment #6786
• OCPBUGS-62407: chore(build): update container images to 4.21 #6936
• NO-JIRA: Add openstack-reviewers, openstack-approvers #6911
• GCP-96: add GCPPlatform feature gate #6929
• CNTRLPLANE-1332: docs(readme): correct spelling mistake #6943
• CNTRLPLANE-1332: docs(azure): add self-managed cluster setup documentation #6808
• OCPBUGS-61245: Fix driver-config ConfigMap content flapping due to random ordering #6907
• CNTRLPLANE-1545: docs(commands): improve jira-solve command with logical commit organization #6937
• NO-JIRA: chore(ci): update Konflux Tekton tasks to latest trusted versions #6928
• OCPBUGS-62328: Add missing svc-kubeconfig mount to CAPO Deployment #6909
• OCPBUGS-62324: Fix test-e2e annotations flag parsing #6908
• AUTOSCALE-322: fix karpenter token secret leak #6790
• CNTRLPLANE-980: feat(api): add hc.status.configuration.authentication status field #6261
• NO-JIRA: fix(e2e): extend ValidateHostedClusterConditions timeout #6913
• KFLUXSPRT-5246: update base images from RHEL9 ELS to UBI9 minimal 9.4 #6916
• OCPBUGS-62172: Add Manila, Cinder to list of pods allowed readOnlyRootFileSystem=false #6885
• NO-JIRA: fix(test): support external oidc settings on non-aws platform #6754
• NO-JIRA: chore(ai): ensure jira-solve run make pre-commit #6901
• Full changelog

insights-operator

• CCXDEV-15577: retry mechanism for network error #1161
• NO-JIRA: remove CRD manifests #1156
• CCXDEV-15551: Decouple CRD storage specs #1157
• OCPBUGS-60870: The Gather Job did not check the current configuration before running #1154
• OCPBUGS-61893: set extractor as default container #1141
• OCPBUGS-62215: operator is not set as degraded when failed #1151
• Full changelog

insights-runtime-exporter, insights-runtime-extractor

• OCPBUGS-62351: Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 #53
• OCPBUGS-62433: Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 #54
• Full changelog

ironic

• OCPBUGS-62443: Updating ironic-container image to be consistent with ART for 4.21 #699
• OCPBUGS-62201: Bump ironic to include idrac10 fix #697
• Full changelog

ironic-agent

• OKD-295: Fix broken OKD ironic-agent-image #199
• OCPBUGS-62329: Updating ironic-agent-container image to be consistent with ART for 4.21 #197
• Full changelog

ironic-machine-os-downloader

• OCPBUGS-62357: Updating ironic-rhcos-downloader-container image to be consistent with ART for 4.21 #107
• Full changelog

ironic-static-ip-manager

• OCPBUGS-62511: Updating ironic-static-ip-manager-container image to be consistent with ART for 4.21 #54
• Full changelog

kube-metrics-server

• OCPBUGS-62397: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.21 #47
• Full changelog

kube-state-metrics

• OCPBUGS-62356: Updating kube-state-metrics-container image to be consistent with ART for 4.21 #125
• Full changelog

kube-storage-version-migrator

• OCPBUGS-62566: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.21 #234
• Full changelog

machine-api-operator

• OCPBUGS-62333: Updating ose-machine-api-operator-container image to be consistent with ART for 4.21 #1421
• Full changelog

machine-config-operator

• OCPBUGS-62376: Updating ose-machine-config-operator-container image to be consistent with ART for 4.21 #5316
• OCPBUGS-52302: MCO-1713: Update MachineConfigNode resource to include on cluster image mode fields #5282
• OCPBUGS-54682: Fix - NetworkManager restart or crash renders br-ex unusable #5304
• OCPNODE-3747: Disable Swap mode in Kubelet and enable drop-in directory #5294
• OCPEDGE-2188: embed fencing validator into TNF MCO #5285
• NO-JIRA: shiftstack: Update OWNERS #5334
• OCPBUGS-62510: Skip rpm-ostree local rebase if no PIS #5333
• OCPBUGS-62493: Only fire OSImageURLOverridden and set metrics on changes #5319
• MCO-1844: Remove MissingMachineConfig Alert #5261
• MCO-1685: Add mco-sanitize utility main logic #5303
• OCPBUGS-59968: Cert Controller should live fetch SAN IPs during cert rotation #5245
• OCPBUGS-62341: Ensure the node passed to RunCordonOrUncordon comes from the latest updated state #5305
• OCPBUGS-60805: configure-ovs: work around a Cisco switch issue #5274
• MCO-408: Add OpenShift-native access to change logLevel for MachineConfigOperator components #5291
• OCPBUGS-42303: Networking: reset ovn-remote config and allow ovnkube controller to s… #5123
• Full changelog

machine-image-customization-controller

• METAL-1564: Use available images #147
• OCPBUGS-62505: Updating ose-image-customization-controller-container image to be consistent with ART for 4.21 #148
• Full changelog

machine-os-images

• OCPBUGS-61477: Acquire aarch64 ISO at runtime #67
• OCPBUGS-56049: Force rebuild for OCP 4.21 #66
• OCPBUGS-62596: Updating ose-machine-os-images-container image to be consistent with ART for 4.21 #69
• Full changelog

monitoring-plugin

• OU-1033: close the first dropdown when deselecting incident #599
• OU-1032: resolve stale Redux state bug in incidents time range calculation #598
• OCPBUGS-63056, OCPBUGS-63061: Improve alignment with console SDK #600
• OU-1030: revert most of my previous changes & avoid flickering when chang… #596
• OU-995: automation monitoring testing namespace level #594
• OU-1024: Add translations for all strings in Incidents page #570
• OU-1022: recalculate incident x values when filtering #589
• OU-1011: Display determistic start and end dates #585
• OU-999: automation monitoring plugin image injection and kubevirt installation cleanup working #590
• OCPBUGS-62276: allow additional TLS config #580
• OCPBUGS-62454: Updating monitoring-plugin-container image to be consistent with ART for 4.21 #566
• OU-1011: Render short-lived incidents and alerts #581
• OU-1016: avoid displaying stale alerts data when selecting another incident detail #573
• OBSINTA-789: Sort alerts by start time #577
• NO-JIRA: fix handle empty queries when removing incident filters #574
• NO-JIRA: Fix tooltip vertical position #576
• OU-986: automation removing uncaught exception #575
• OBSINTA-789: Fix alert loading and processing #569
• OU-1025: keep alerts populated for the incident, when the graph is hidden… #572
• NO-JIRA: chore: add unit test command and dependencies #571
• OBSINTA-857: Cypress add SKIP_ALL_INSTALL #568
• NO-JIRA: fix hermetic builds #564
• OBSINTA-858: Cypress incidents incident traversing robustness #556
• OBSINTA-858: Cypress incidents mocking metric name change workaround #553
• COO-1134: fix: update vulnerable dependencies #561
• NO-JIRA: Update .gitignore (Cypress specific) #558
• OU-1011: REVERT add a 5 minute to the first alert timestamp #559
• Full changelog

multus-admission-controller

• OCPBUGS-62412: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.21 #110
• Full changelog

must-gather

• OSSM-10530: add Istio/Gateway API gather scripts #503
• OCPBUGS-62551: Updating ose-must-gather-container image to be consistent with ART for 4.21 #507
• Full changelog

network-interface-bond-cni

• OCPBUGS-62415: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.21 #97
• Full changelog

network-tools

• OCPBUGS-62553: Updating ose-network-tools-container image to be consistent with ART for 4.21 #162
• NO-JIRA:Add two new team members #163
• NO-JIRA: Add Marty P to bug tooling #161
• Full changelog

networking-console-plugin

• CNV-60063: fixing the Create ClusterUserDefinedNetwork form appearance #280
• CNV-62168: Typos in Networking Pages #277
• CNV-56937: Hiding the option to create cluster user defined networks or non-priv users, allowing the option to create CUDN for users with access not just admin #284
• CNV-56937: Hiding the option to create cluster user defined networks or non-priv users #283
• CNV-61569: Mark OVN K8s secondary localnet as deprecated #282
• OCPBUGS-62442: Updating networking-console-plugin-container image to be consistent with ART for 4.21 #279
• CNV-70018: fix null error #278
• Full changelog

oauth-apiserver

• OCPBUGS-62612: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #148
• Full changelog

oc-mirror

• CLID-460: Adds a column with the actual implemented logic #1288
• CLID-443: add mandatory –v1/–v2 flag #1284
• OCPBUGS-60571: reject configurations with duplicated keys and/or entries #1275
• CLID-430: migration to containers/container-libs #1255
• OCPBUGS-55489: removes unintended exec permissions #1285
• OCPBUGS-56398: Removes the clean up of logs directory #1289
• OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 (missing files of pr 1280) #1283
• OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 #1280
• OCPBUGS-60929: generate the archive only after mirroring #1272
• Full changelog

olm-catalogd, olm-operator-controller

• NO-ISSUE: UPSTREAM: <carry>: fix cases 81696 and 74618 for product code changes #528
• OPRUN-4181: UPSTREAM: <carry>: support singleown cases in disconnected #524
• NO-ISSUE: Synchronize From Upstream Repositories #526
• OPRUN-4194: Update OCP catalogs to v4.21 #518
• NO-ISSUE: Synchronize From Upstream Repositories #523
• OPRUN-4197: Upgrade OCP image from 4.20 to 4.21 #517
• OPRUN-4134: Add 2 new tests for Single/Own Namespace install mode support #502
• OPRUN-4199: [Default Catalog Tests] - Change logic to get ocp images from openshift/catalogd/manifests.yaml #521
• OCPBUGS-62517: Synchronize from upstream #519
• OPRUN-4176: Consolidate build API #514
• OPRUN-4156: UPSTREAM: <carry>: support webhook case in disconnected #508
• NO-ISSUE: Synchronize From Upstream Repositories #512
• OPRUN-4176: Update does-not-exist and simple install to work i… #510
• NO-ISSUE: Clean up cp-manifests #511
• NO-ISSUE: Synchronize From Upstream Repositories #506
• NO-ISSUE: UPSTREAM: <carry>: check kubeconfig only run-test and run-suite #507
• NO-ISSUE: Fix VERSION replacement in catalog bindata #505
• NO-ISSUE: Synchronize From Upstream Repositories #498
• OCPBUGS-62753: for incompatible test add func to wait SA creation #501
• NO-ISSUE: Synchronize From Upstream Repositories #497
• OPRUN-4169: OTE building controller image #483
• OPRUN-4080: Remove kustomize manifests from images and repo #494
• NO-ISSUE: Synchronize From Upstream Repositories #493
• OCPBUGS-62372: Updating ose-olm-catalogd-container image to be consistent with ART for 4.21 #491
• NO-ISSUE: Synchronize From Upstream Repositories #492
• OCPBUGS-62370: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.21 #490
• OCPQE-30671: UPSTREAM: <carry>: migrate more cases from tests-private #488
• NO-ISSUE: Synchronize From Upstream Repositories #489
• Full changelog

openshift-apiserver

• OCPBUGS-62516: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.21 #560
• Full changelog

openshift-state-metrics

• OCPBUGS-62431: Updating openshift-state-metrics-container image to be consistent with ART for 4.21 #126
• Full changelog

openstack-cinder-csi-driver, openstack-cloud-controller-manager

• OCPBUGS-62544: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.21 #352
• OCPBUGS-62575: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.21 #350
• NO-JIRA: shiftstack: Update OWNERS #353
• Full changelog

openstack-cluster-api-controllers

• OCPBUGS-62567: Updating openstack-cluster-api-controllers-container image to be cons… #379
• NO-JIRA: Fix internal vendoring #378
• NO-JIRA: shiftstack: Update OWNERS #377
• Full changelog

openstack-machine-api-provider

• OCPBUGS-62473: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.21 #138
• NO-JIRA: shiftstack: Update OWNERS #139
• Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

• OCPQE-30741: support opm cases #1121
• OCPQE-30781: support hypershift binary #1119
• OCPQE-30679: migrate more cases from tests-private to make layout #1118
• OCPQE-29415: correct suite name #1117
• OCPQE-29415: enhance filters to add more suites #1116
• Full changelog

operator-marketplace

• OPRUN-4198: Upgrade deps to have compatible k8s version #676
• OPRUN-4198: upgraded github.com/openshift/api, github.com/openshift/library-go and ginkgo #677
• NO-ISSUE: Update Dockerfile.okd to use OCP image 4.21 #678
• OCPBUGS-62384: Updating marketplace-operator-container image to be consistent with ART for 4.21 #674
• NO-ISSUE: Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.2 #661
• Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

• CORENET-6160: DownStream Merge [10-10-2025] #2798
• OCPBUGS-62545: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.21 #2771
• CORENET-6055: Dockerfile: Unpin OVN and consume the latest from FDP. #2721
• OCPBUGS-42303, OCPBUGS-56783: DownStream Merge [10-08-2025] #2790
• OCPBUGS-62574: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.21 #2756
• OCPBUGS-60468: DownStream Merge [09-23-2025] #2762
• Full changelog

prom-label-proxy

• OCPBUGS-62508: Updating prom-label-proxy-container image to be consistent with ART for 4.21 #386
• Full changelog

prometheus

• NO-ISSUE: [bot] Bump openshift/prometheus to v3.6.0 #278
• NO-JIRA: update Prometheus to v3.6.0 #277
• OCPBUGS-62401: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.21 #274
• Full changelog

prometheus-alertmanager

• OCPBUGS-62428: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.21 #107
• Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

• NO-JIRA: Bump openshift/prometheus-operator to v0.86.1 #345
• MON-4395: Bump openshift/prometheus-operator to v0.86.0 #344
• OCPBUGS-62448: Updating prometheus-config-reloader-container image to be consistent with ART for 4.21 #341
• OCPBUGS-62542: Updating prometheus-operator-container image to be consistent with ART for 4.21 #342
• Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.21 #340
• Full changelog

rhel-coreos, rhel-coreos-extensions

• NO-JIRA: update the okd repo for 4.21 #1862
• NO-JIRA: OWNERS: switch to joelcapitao #1861
• Full changelog

route-controller-manager

• OCPBUGS-62586: Updating ose-route-controller-manager-container image to be consistent with ART for 4.21 #65
• NE-2169: Move annotations and metrics to a constants file #66
• Full changelog

service-ca-operator

• OCPBUGS-62377: Updating ose-service-ca-operator-container image to be consistent with ART for 4.21 #276
• OCPBUGS-63124: Fix e2e-aws-operator e2e test failures #281
• Full changelog

tests

• MULTIARCH-5391: Add Disruptive ImageStreamImportMode Tests into a Disruptive Suite #30239
• OCPBUGS-62359: Check more operatorsProgressing #30367
• TRT-2275: some enhancement for e2e-analysis #30276
• OCPBUGS-63149: revert https://github.com/openshift/origin/pull/30054 #30386
• NO-JIRA: Combine global and command args in BackgroundRC #30382
• NO-JIRA: MCO add GetAlerts to the Monitor thanos struct #30379
• NO-JIRA: enhance-waitnodeready-util #30377
• OCPBUGS-63040: Add imagestream update dryrun test #30357
• OCPEDGE-1565: [TNF] Add double node failure recovery test #30370
• NO-JIRA: implement WithoutKubeconf method to clear config path #30371
• NO-JIRA: oc adm upgrade status: Record err and outputs #30151
• NO-JIRA:I Fixing race condtion #30360
• OCPBUGS-62552: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.21 #30327
• NO-JIRA: init lease-checker namespaces #30373
• NO-JIRA: generate unique namespace names for UDN tests #30348
• NO-JIRA: update namespace privilege check to use PSA label #30355
• OCPBUGS-56281: gatewayapicontroller: Clean up resources when done #29900
• NO-JIRA: another attempt at disabling blank issues #30369
• NO-JIRA: Make it clear that we do not monitor GH issues #30368
• NO-JIRA: Update OWNERS for compat_otp #30361
• NO-ISSUE: Add webhook image for the olmv1 tests #30356
• OTA-1637: ClusterOperators should not go Progressing only for cluster scaling #30297
• OCPBUGS-60593: Skip oauth test for external control plane topology #30200
• TRT-2351: Revert “NO-JIRA: Improve case execution time” #30363
• TRT-2349: Revert “make TLS registry tests required” #30358
• OCPNODE-3238: Add SigstoreImageVerificationPKI image policy validation tests #30315
• TRT-2346: Fix not initializing adminRESTConfig #30345
• OCPBUGS-60853: make TLS registry tests required #29074
• TRT-1854: remove upstream annotation framework #30340
• NO-JIRA: Filter preconfiguredIPs based on cluster IP family support #30338
• NO-JIRA: Improve case execution time #30329
• CORENET-6363: Add PreconfiguredUDNAddresses duplicate IP detection tests #30197
• OCPBUGS-62701: Revert TRT-1854: remove upstream annotation framework #30337
• Revert “Revert “NO-JIRA: Add olm into the known operator set”” #30325
• NO-JIRA: BugFix- don’t modify finalArgs in Template func #30328
• OCPNODE-3659: Not fail upgrade checks if all nodes are ready #30318
• OCPBUGS-62249: Tweak Endpoints admission test for upcoming change #30304
• MCO-1828: Remove pathological test in disruptive #30272
• OCPBUGS-61196: Add test that the ServiceCIDR API is blocked #30234
• NO-JIRA: oc adm upgrade status: Skip test in multihop update jobs #30150
• MCO-1865: Update MCO tests to be in only one test suite each #30309
• OCPBUGS-62474: CNTRLPLANE-1308: Enable OTE for OCM and OCM Operator #30270
• TRT-1854: remove upstream annotation framework #30305
• Revert “NO-JIRA: Add olm into the known operator set” #30313
• NO-JIRA: Add olm into the known operator set #30308
• MCO-1875: Bump timeout for vSphereBootimageUpdate tests #30288
• NO-ISSUE: Automated - Update synthetic test data #30277
• Full changelog

volume-data-source-validator

• OCPBUGS-62367: Updating volume-data-source-validator-container image to be consistent with ART for 4.21 #5
• Full changelog

---

Node Image Info

Loading node image info, this may take a while ...

Package List

• cri-o-1.34.1-4.rhaos4.21.git5780ac7.el9
• kernel-5.14.0-570.55.1.el9_6
• openshift-kubelet-4.21.0-202510171627.p2.g96593f3.assembly.stream.el9
• systemd-252-51.el9_6.2

Full list (551 packages)

• NetworkManager-1:1.52.0-7.el9_6
• NetworkManager-cloud-setup-1:1.52.0-7.el9_6
• NetworkManager-libnm-1:1.52.0-7.el9_6
• NetworkManager-ovs-1:1.52.0-7.el9_6
• NetworkManager-team-1:1.52.0-7.el9_6
• NetworkManager-tui-1:1.52.0-7.el9_6
• WALinuxAgent-udev-2.7.0.6-11.el9_6.1
• aardvark-dns-2:1.14.0-1.el9
• acl-2.3.1-4.el9
• adcli-0.9.2-1.el9
• afterburn-5.7.0-1.el9
• afterburn-dracut-5.7.0-1.el9
• alternatives-1.24-2.el9
• attr-2.5.1-3.el9
• audit-3.1.5-4.el9
• audit-libs-3.1.5-4.el9
• authselect-1.2.6-3.el9
• authselect-libs-1.2.6-3.el9
• avahi-libs-0.8-22.el9_6.1
• basesystem-11-13.el9
• bash-5.1.8-9.el9
• bash-completion-1:2.11-5.el9
• bind-libs-32:9.16.23-31.el9_6
• bind-license-32:9.16.23-31.el9_6
• bind-utils-32:9.16.23-31.el9_6
• binutils-2.35.2-63.el9
• binutils-gold-2.35.2-63.el9
• bootc-1.1.6-3.el9_6
• bootupd-0.2.27-4.el9_6
• bsdtar-3.5.3-6.el9_6
• bubblewrap-0.4.1-8.el9_5
• bzip2-1.0.8-10.el9_5
• bzip2-libs-1.0.8-10.el9_5
• c-ares-1.19.1-2.el9_4
• ca-certificates-2024.2.69_v8.0.303-91.4.el9_4
• checkpolicy-3.6-1.el9
• chrony-4.6.1-1.el9
• cifs-utils-7.1-2.el9
• clevis-21-208.el9
• clevis-dracut-21-208.el9
• clevis-luks-21-208.el9
• clevis-systemd-21-208.el9
• cloud-utils-growpart-0.33-1.el9
• composefs-1.0.8-1.el9
• composefs-libs-1.0.8-1.el9
• conmon-3:2.1.12-1.el9
• conmon-rs-0.6.6-0.rhaos4.18.el9.1
• console-login-helper-messages-0.21.3-1.el9
• console-login-helper-messages-issuegen-0.21.3-1.el9
• console-login-helper-messages-profile-0.21.3-1.el9
• container-selinux-4:2.237.0-2.el9_6
• containernetworking-plugins-1:1.6.2-2.el9_6
• containers-common-2:1-117.el9_6
• coreos-installer-0.24.0-3.el9_6
• coreos-installer-bootinfra-0.24.0-3.el9_6
• coreutils-8.32-39.el9
• coreutils-common-8.32-39.el9
• cpio-2.13-16.el9
• cracklib-2.9.6-27.el9
• cracklib-dicts-2.9.6-27.el9
• cri-o-1.34.1-4.rhaos4.21.git5780ac7.el9
• cri-tools-1.34.0-2.el9
• criu-3.19-1.el9
• criu-libs-3.19-1.el9
• crun-1.23.1-2.el9_6
• crypto-policies-20250128-1.git5269e22.el9
• crypto-policies-scripts-20250128-1.git5269e22.el9
• cryptsetup-2.7.2-3.el9_6.1
• cryptsetup-libs-2.7.2-3.el9_6.1
• curl-7.76.1-31.el9_6.1
• cyrus-sasl-gssapi-2.1.27-21.el9
• cyrus-sasl-lib-2.1.27-21.el9
• dbus-1:1.12.20-8.el9
• dbus-broker-28-7.el9
• dbus-common-1:1.12.20-8.el9
• dbus-libs-1:1.12.20-8.el9
• device-mapper-9:1.02.202-6.el9
• device-mapper-event-9:1.02.202-6.el9
• device-mapper-event-libs-9:1.02.202-6.el9
• device-mapper-libs-9:1.02.202-6.el9
• device-mapper-multipath-0.8.7-35.el9_6.1
• device-mapper-multipath-libs-0.8.7-35.el9_6.1
• device-mapper-persistent-data-1.1.0-1.el9
• diffutils-3.7-12.el9
• dmidecode-1:3.6-1.el9
• dnf-4.14.0-25.el9
• dnf-data-4.14.0-25.el9
• dnsmasq-2.85-17.el9_6
• dosfstools-4.2-3.el9
• dracut-057-88.git20250311.el9_6
• dracut-network-057-88.git20250311.el9_6
• dracut-squash-057-88.git20250311.el9_6
• e2fsprogs-1.46.5-7.el9
• e2fsprogs-libs-1.46.5-7.el9
• efi-filesystem-6-2.el9_0
• efibootmgr-16-12.el9
• efivar-libs-38-3.el9
• elfutils-debuginfod-client-0.192-6.el9_6
• elfutils-default-yama-scope-0.192-6.el9_6
• elfutils-libelf-0.192-6.el9_6
• elfutils-libs-0.192-6.el9_6
• ethtool-2:6.11-1.el9
• expat-2.5.0-5.el9_6
• file-5.39-16.el9
• file-libs-5.39-16.el9
• filesystem-3.16-5.el9
• findutils-1:4.8.0-7.el9
• firewalld-filesystem-1.3.4-9.el9_5
• flashrom-1.2-10.el9
• fstrm-0.6.1-3.el9
• fuse-2.9.9-17.el9
• fuse-common-3.10.2-9.el9
• fuse-libs-2.9.9-17.el9
• fuse-overlayfs-1.14-1.el9
• fuse3-3.10.2-9.el9
• fuse3-libs-3.10.2-9.el9
• fwupd-1.9.26-1.el9
• fwupd-plugin-flashrom-1.9.26-1.el9
• gawk-5.1.0-6.el9
• gawk-all-langpacks-5.1.0-6.el9
• gdbm-libs-1:1.23-1.el9
• gdisk-1.0.7-5.el9
• geolite2-city-20191217-6.el9
• geolite2-country-20191217-6.el9
• gettext-0.21-8.el9
• gettext-libs-0.21-8.el9
• git-core-2.47.3-1.el9_6
• glib2-2.68.4-16.el9_6.2
• glibc-2.34-168.el9_6.23
• glibc-common-2.34-168.el9_6.23
• glibc-gconv-extra-2.34-168.el9_6.23
• glibc-minimal-langpack-2.34-168.el9_6.23
• glusterfs-6.0-57.4.el9
• glusterfs-client-xlators-6.0-57.4.el9
• glusterfs-fuse-6.0-57.4.el9
• glusterfs-libs-6.0-57.4.el9
• gmp-1:6.2.0-13.el9
• gnupg2-2.3.3-4.el9
• gnutls-3.8.3-6.el9_6.2
• gobject-introspection-1.68.0-11.el9
• gpgme-1.15.1-6.el9
• grep-3.6-5.el9
• groff-base-1.22.4-10.el9
• grub2-common-1:2.06-104.el9_6
• grub2-efi-aa64-1:2.06-104.el9_6
• grub2-tools-1:2.06-104.el9_6
• grub2-tools-minimal-1:2.06-104.el9_6
• gssproxy-0.8.4-7.el9
• gzip-1.12-1.el9
• hostname-3.23-6.el9
• hwdata-0.348-9.18.el9
• ignition-2.21.0-4.rhaos4.19.el9
• ignition-grub-2.21.0-4.rhaos4.19.el9
• ima-evm-utils-1.5-3.el9
• info-6.7-15.el9
• inih-49-6.el9
• initscripts-service-10.11.8-4.el9
• ipcalc-1.0.0-5.el9
• iproute-6.11.0-1.el9
• iproute-tc-6.11.0-1.el9
• iptables-libs-1.8.10-11.el9_5
• iptables-nft-1.8.10-11.el9_5
• iputils-20210202-11.el9_6.3
• irqbalance-2:1.9.4-2.el9_6.2
• iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
• iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
• isns-utils-libs-0.101-4.el9
• jansson-2.14-1.el9
• jose-14-1.el9
• jq-1.6-17.el9_6.2
• json-c-0.14-11.el9
• json-glib-1.6.6-1.el9
• kbd-2.4.0-11.el9
• kbd-legacy-2.4.0-11.el9
• kbd-misc-2.4.0-11.el9
• kernel-5.14.0-570.55.1.el9_6
• kernel-core-5.14.0-570.55.1.el9_6
• kernel-modules-5.14.0-570.55.1.el9_6
• kernel-modules-core-5.14.0-570.55.1.el9_6
• kernel-modules-extra-5.14.0-570.55.1.el9_6
• kexec-tools-2.0.29-5.el9_6.2
• keyutils-1.6.3-1.el9
• keyutils-libs-1.6.3-1.el9
• kmod-28-10.el9
• kmod-libs-28-10.el9
• kpartx-0.8.7-35.el9_6.1
• krb5-libs-1.21.1-8.el9_6
• less-590-5.el9
• libacl-2.3.1-4.el9
• libaio-0.3.111-13.el9
• libarchive-3.5.3-6.el9_6
• libassuan-2.5.5-3.el9
• libatomic-11.5.0-5.el9_5
• libattr-2.5.1-3.el9
• libbasicobjects-0.1.1-53.el9
• libblkid-2.37.4-21.el9
• libbpf-2:1.5.0-1.el9
• libbrotli-1.0.9-7.el9_5
• libcap-2.48-9.el9_2
• libcap-ng-0.8.2-7.el9
• libcbor-0.7.0-5.el9
• libcollection-0.7.0-53.el9
• libcom_err-1.46.5-7.el9
• libcomps-0.1.18-1.el9
• libcurl-7.76.1-31.el9_6.1
• libdaemon-0.14-23.el9
• libdb-5.3.28-57.el9_6
• libdhash-0.5.0-53.el9
• libdnf-0.69.0-13.el9
• libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6
• libeconf-0.4.1-4.el9
• libedit-3.1-38.20210216cvs.el9
• libev-4.33-6.el9
• libevent-2.1.12-8.el9_4
• libfdisk-2.37.4-21.el9
• libffi-3.4.2-8.el9
• libfido2-1.13.0-2.el9
• libgcc-11.5.0-5.el9_5
• libgcrypt-1.10.0-11.el9
• libgomp-11.5.0-5.el9_5
• libgpg-error-1.42-5.el9
• libgudev-237-1.el9
• libgusb-0.3.8-2.el9
• libibverbs-54.0-1.el9
• libicu-67.1-10.el9_6
• libidn2-2.3.0-7.el9
• libini_config-1.3.1-53.el9
• libipa_hbac-2.9.6-4.el9_6.2
• libjcat-0.1.6-3.el9
• libjose-14-1.el9
• libkcapi-1.4.0-2.el9
• libkcapi-hmaccalc-1.4.0-2.el9
• libksba-1.5.1-7.el9
• libldb-4.21.3-14.el9_6
• libluksmeta-9-12.el9
• libmaxminddb-1.5.2-4.el9
• libmicrohttpd-1:0.9.72-5.el9
• libmnl-1.0.4-16.el9_4
• libmodulemd-2.13.0-2.el9
• libmount-2.37.4-21.el9
• libndp-1.9-1.el9
• libnet-1.2-7.el9
• libnetfilter_conntrack-1.0.9-1.el9
• libnfnetlink-1.0.1-23.el9_5
• libnfsidmap-1:2.5.4-34.el9
• libnftnl-1.2.6-4.el9_4
• libnghttp2-1.43.0-6.el9
• libnl3-3.11.0-1.el9
• libnl3-cli-3.11.0-1.el9
• libnvme-1.11.1-1.el9
• libpath_utils-0.2.1-53.el9
• libpcap-14:1.10.0-4.el9
• libpkgconf-1.7.3-10.el9
• libpsl-0.21.1-5.el9
• libpwquality-1.4.4-8.el9
• libref_array-0.1.5-53.el9
• librepo-1.14.5-2.el9
• libreport-filesystem-2.15.2-6.el9
• librhsm-0.0.3-9.el9
• libseccomp-2.5.2-2.el9
• libselinux-3.6-3.el9
• libselinux-utils-3.6-3.el9
• libsemanage-3.6-5.el9_6
• libsepol-3.6-2.el9
• libsigsegv-2.13-4.el9
• libslirp-4.4.0-8.el9
• libsmartcols-2.37.4-21.el9
• libsmbclient-4.21.3-14.el9_6
• libsolv-0.7.24-3.el9
• libss-1.46.5-7.el9
• libssh-0.10.4-15.el9_6
• libssh-config-0.10.4-15.el9_6
• libsss_certmap-2.9.6-4.el9_6.2
• libsss_idmap-2.9.6-4.el9_6.2
• libsss_nss_idmap-2.9.6-4.el9_6.2
• libsss_sudo-2.9.6-4.el9_6.2
• libstdc++-11.5.0-5.el9_5
• libtalloc-2.4.2-1.el9
• libtasn1-4.16.0-9.el9
• libtdb-1.4.12-1.el9
• libteam-1.31-16.el9_1
• libtevent-0.16.1-1.el9
• libtirpc-1.3.3-9.el9
• libtool-ltdl-2.4.6-46.el9
• libunistring-0.9.10-15.el9
• liburing-2.5-1.el9
• libusbx-1.0.26-1.el9
• libuser-0.63-16.el9
• libutempter-1.2.1-6.el9
• libuuid-2.37.4-21.el9
• libuv-1:1.42.0-2.el9_4
• libverto-0.3.2-3.el9
• libverto-libev-0.3.2-3.el9
• libwbclient-4.21.3-14.el9_6
• libxcrypt-4.4.18-3.el9
• libxml2-2.9.13-12.el9_6
• libxmlb-0.3.10-1.el9
• libyaml-0.2.5-7.el9
• libzstd-1.5.5-1.el9
• linux-firmware-20250812-151.4.el9_6
• linux-firmware-whence-20250812-151.4.el9_6
• lmdb-libs-0.9.29-3.el9
• logrotate-3.18.0-9.el9
• lsof-4.94.0-3.el9
• lua-libs-5.4.4-4.el9
• luksmeta-9-12.el9
• lvm2-9:2.03.28-6.el9
• lvm2-libs-9:2.03.28-6.el9
• lz4-libs-1.9.3-5.el9
• lzo-2.10-7.el9
• mdadm-4.3-4.el9_5
• mokutil-2:0.6.0-4.el9
• mpfr-4.1.0-7.el9
• nano-5.6.1-7.el9
• ncurses-6.2-10.20210508.el9_6.2
• ncurses-base-6.2-10.20210508.el9_6.2
• ncurses-libs-6.2-10.20210508.el9_6.2
• net-tools-2.0-0.64.20160912git.el9
• netavark-2:1.14.1-1.el9_6
• nettle-3.10.1-1.el9
• newt-0.52.21-11.el9
• nfs-utils-1:2.5.4-34.el9
• nftables-1:1.0.9-3.el9
• nmap-ncat-3:7.92-3.el9
• nmstate-2.2.52-1.el9_6
• npth-1.6-8.el9
• nss-altfiles-2.18.1-20.el9
• numactl-libs-2.0.19-1.el9
• nvme-cli-2.11-6.el9_6
• oniguruma-6.9.6-1.el9.6
• openldap-2.6.8-4.el9
• openshift-clients-4.21.0-202510110303.p2.g672ff62.assembly.stream.el9
• openshift-kubelet-4.21.0-202510171627.p2.g96593f3.assembly.stream.el9
• openssh-8.7p1-45.el9
• openssh-clients-8.7p1-45.el9
• openssh-server-8.7p1-45.el9
• openssl-1:3.2.2-6.el9_5.1
• openssl-fips-provider-3.0.7-6.el9_5
• openssl-fips-provider-so-3.0.7-6.el9_5
• openssl-libs-1:3.2.2-6.el9_5.1
• openvswitch-selinux-extra-policy-1.0-39.el9fdp
• openvswitch3.5-3.5.1-33.el9fdp
• os-prober-1.77-12.el9_5
• ose-aws-ecr-image-credential-provider-4.19.0-202508252101.p2.g425c1c5.assembly.stream.el9
• ose-azure-acr-image-credential-provider-4.21.0-202510180155.p2.g1457693.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider-4.21.0-202510151957.p2.g0a0890a.assembly.stream.el9
• ostree-2025.2-2.el9_6
• ostree-libs-2025.2-2.el9_6
• p11-kit-0.25.3-3.el9_5
• p11-kit-trust-0.25.3-3.el9_5
• pam-1.5.1-26.el9_6
• passt-0^20250217.ga1e48a0-10.el9_6
• passt-selinux-0^20250217.ga1e48a0-10.el9_6
• passwd-0.80-12.el9
• pciutils-3.7.0-7.el9
• pciutils-libs-3.7.0-7.el9
• pcre-8.44-4.el9
• pcre2-10.40-6.el9
• pcre2-syntax-10.40-6.el9
• perl-AutoLoader-5.74-481.1.el9_6
• perl-B-1.80-481.1.el9_6
• perl-Carp-1.50-460.el9
• perl-Class-Struct-0.66-481.1.el9_6
• perl-Data-Dumper-2.174-462.el9
• perl-Digest-1.19-4.el9
• perl-Digest-MD5-2.58-4.el9
• perl-Encode-4:3.08-462.el9
• perl-Errno-1.30-481.1.el9_6
• perl-Exporter-5.74-461.el9
• perl-Fcntl-1.13-481.1.el9_6
• perl-File-Basename-2.85-481.1.el9_6
• perl-File-Path-2.18-4.el9
• perl-File-Temp-1:0.231.100-4.el9
• perl-File-stat-1.09-481.1.el9_6
• perl-FileHandle-2.03-481.1.el9_6
• perl-Getopt-Long-1:2.52-4.el9
• perl-Getopt-Std-1.12-481.1.el9_6
• perl-HTTP-Tiny-0.076-462.el9
• perl-IO-1.43-481.1.el9_6
• perl-IO-Socket-IP-0.41-5.el9
• perl-IO-Socket-SSL-2.073-2.el9
• perl-IPC-Open3-1.21-481.1.el9_6
• perl-MIME-Base64-3.16-4.el9
• perl-Mozilla-CA-20200520-6.el9
• perl-NDBM_File-1.15-481.1.el9_6
• perl-Net-SSLeay-1.94-1.el9
• perl-POSIX-1.94-481.1.el9_6
• perl-PathTools-3.78-461.el9
• perl-Pod-Escapes-1:1.07-460.el9
• perl-Pod-Perldoc-3.28.01-461.el9
• perl-Pod-Simple-1:3.42-4.el9
• perl-Pod-Usage-4:2.01-4.el9
• perl-Scalar-List-Utils-4:1.56-462.el9
• perl-SelectSaver-1.02-481.1.el9_6
• perl-Socket-4:2.031-4.el9
• perl-Storable-1:3.21-460.el9
• perl-Symbol-1.08-481.1.el9_6
• perl-Term-ANSIColor-5.01-461.el9
• perl-Term-Cap-1.17-460.el9
• perl-Text-ParseWords-3.30-460.el9
• perl-Text-Tabs+Wrap-2013.0523-460.el9
• perl-Time-Local-2:1.300-7.el9
• perl-URI-5.09-3.el9
• perl-base-2.27-481.1.el9_6
• perl-constant-1.33-461.el9
• perl-if-0.60.800-481.1.el9_6
• perl-interpreter-4:5.32.1-481.1.el9_6
• perl-libnet-3.13-4.el9
• perl-libs-4:5.32.1-481.1.el9_6
• perl-mro-1.23-481.1.el9_6
• perl-overload-1.31-481.1.el9_6
• perl-overloading-0.02-481.1.el9_6
• perl-parent-1:0.238-460.el9
• perl-podlators-1:4.14-460.el9
• perl-subs-1.03-481.1.el9_6
• perl-vars-1.05-481.1.el9_6
• pigz-2.8-1.el9
• pkgconf-1.7.3-10.el9
• pkgconf-m4-1.7.3-10.el9
• pkgconf-pkg-config-1.7.3-10.el9
• podman-5:5.4.0-13.el9_6
• policycoreutils-3.6-2.1.el9
• policycoreutils-python-utils-3.6-2.1.el9
• polkit-0.117-13.el9
• polkit-libs-0.117-13.el9
• polkit-pkla-compat-0.1-21.el9
• popt-1.18-8.el9
• procps-ng-3.3.17-14.el9
• protobuf-c-1.3.3-13.el9
• psmisc-23.4-3.el9
• publicsuffix-list-dafsa-20210518-3.el9
• python-unversioned-command-3.9.21-2.el9_6.2
• python3-3.9.21-2.el9_6.2
• python3-audit-3.1.5-4.el9
• python3-chardet-4.0.0-5.el9
• python3-cloud-what-1.29.45.1-1.el9_6
• python3-dateutil-1:2.8.1-7.el9
• python3-dbus-1.2.18-2.el9
• python3-decorator-4.4.2-6.el9
• python3-distro-1.5.0-7.el9
• python3-dnf-4.14.0-25.el9
• python3-dnf-plugin-versionlock-4.3.0-20.el9
• python3-dnf-plugins-core-4.3.0-20.el9
• python3-gobject-base-3.40.1-6.el9
• python3-gobject-base-noarch-3.40.1-6.el9
• python3-gpg-1.15.1-6.el9
• python3-hawkey-0.69.0-13.el9
• python3-idna-2.10-7.el9_4.1
• python3-iniparse-0.4-45.el9
• python3-inotify-0.9.6-25.el9
• python3-libcomps-0.1.18-1.el9
• python3-libdnf-0.69.0-13.el9
• python3-librepo-1.14.5-2.el9
• python3-libs-3.9.21-2.el9_6.2
• python3-libselinux-3.6-3.el9
• python3-libsemanage-3.6-5.el9_6
• python3-pip-wheel-21.3.1-1.el9
• python3-policycoreutils-3.6-2.1.el9
• python3-pysocks-1.7.1-12.el9
• python3-pyyaml-5.4.1-6.el9
• python3-requests-2.25.1-10.el9_6
• python3-rpm-4.16.1.3-37.el9
• python3-setools-4.4.4-1.el9
• python3-setuptools-53.0.0-13.el9_6.1
• python3-setuptools-wheel-53.0.0-13.el9_6.1
• python3-six-1.15.0-9.el9
• python3-subscription-manager-rhsm-1.29.45.1-1.el9_6
• python3-systemd-234-19.el9
• python3-urllib3-1.26.5-6.el9
• qemu-guest-agent-17:9.1.0-15.el9_6.9
• quota-1:4.09-4.el9
• quota-nls-1:4.09-4.el9
• readline-8.1-4.el9
• redhat-release-9.6-0.1.el9
• redhat-release-eula-9.6-0.1.el9
• rpcbind-1.2.6-7.el9
• rpm-4.16.1.3-37.el9
• rpm-build-libs-4.16.1.3-37.el9
• rpm-libs-4.16.1.3-37.el9
• rpm-ostree-2025.6-5.el9_6
• rpm-ostree-libs-2025.6-5.el9_6
• rpm-plugin-selinux-4.16.1.3-37.el9
• rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
• rpm-sign-libs-4.16.1.3-37.el9
• rsync-3.2.5-3.el9
• runc-4:1.2.4-2.el9
• samba-client-libs-4.21.3-14.el9_6
• samba-common-4.21.3-14.el9_6
• samba-common-libs-4.21.3-14.el9_6
• sed-4.8-9.el9
• selinux-policy-38.1.53-5.el9_6
• selinux-policy-targeted-38.1.53-5.el9_6
• setup-2.13.7-10.el9
• sg3_utils-1.47-10.el9
• sg3_utils-libs-1.47-10.el9
• shadow-utils-2:4.9-12.el9
• shadow-utils-subid-2:4.9-12.el9
• shared-mime-info-2.1-5.el9
• shim-aa64-15.8-4.el9_3
• skopeo-2:1.18.1-2.el9_6
• slang-2.3.2-11.el9
• slirp4netns-1.3.2-1.el9
• snappy-1.1.8-8.el9
• socat-1.7.4.1-6.el9_6.1
• sqlite-libs-3.34.1-8.el9_6
• squashfs-tools-4.4-10.git1.el9
• ssh-key-dir-0.1.4-1.el9
• sssd-2.9.6-4.el9_6.2
• sssd-ad-2.9.6-4.el9_6.2
• sssd-client-2.9.6-4.el9_6.2
• sssd-common-2.9.6-4.el9_6.2
• sssd-common-pac-2.9.6-4.el9_6.2
• sssd-ipa-2.9.6-4.el9_6.2
• sssd-krb5-2.9.6-4.el9_6.2
• sssd-krb5-common-2.9.6-4.el9_6.2
• sssd-ldap-2.9.6-4.el9_6.2
• sssd-nfs-idmap-2.9.6-4.el9_6.2
• sssd-proxy-2.9.6-4.el9_6.2
• stalld-1.20.4-1.el9_6
• strace-6.12-1.el9
• subscription-manager-1.29.45.1-1.el9_6
• subscription-manager-rhsm-certificates-20220623-1.el9
• sudo-1.9.5p2-10.el9_6.2
• systemd-252-51.el9_6.2
• systemd-journal-remote-252-51.el9_6.2
• systemd-libs-252-51.el9_6.2
• systemd-pam-252-51.el9_6.2
• systemd-rpm-macros-252-51.el9_6.2
• systemd-udev-252-51.el9_6.2
• tar-2:1.34-7.el9
• teamd-1.31-16.el9_1
• tmux-3.2a-5.el9
• toolbox-0.1.2-1.rhaos4.19.el9
• tpm2-tools-5.2-4.el9
• tpm2-tss-3.2.3-1.el9
• tzdata-2025b-1.el9
• unbound-libs-1.16.2-19.el9_6.1
• usermode-1.114-6.el9
• userspace-rcu-0.12.1-6.el9
• util-linux-2.37.4-21.el9
• util-linux-core-2.37.4-21.el9
• vim-minimal-2:8.2.2637-22.el9_6.1
• virt-what-1.27-1.el9
• which-2.21-30.el9_6
• xfsprogs-6.4.0-5.el9
• xz-5.2.5-8.el9_0
• xz-libs-5.2.5-8.el9_0
• yajl-2.1.0-25.el9
• zlib-1.2.11-40.el9
• zram-generator-0.3.2-7.el9
• zstd-1.5.5-1.el9

Changed:

• cri-o 1.34.0-4.rhaos4.21.git941066d.el9 → 1.34.1-4.rhaos4.21.git5780ac7.el9
• cri-tools 1.34.0-1.el9 → 1.34.0-2.el9
• iputils 20210202-11.el9_6.1 → 20210202-11.el9_6.3
• kernel 5.14.0-570.49.1.el9_6 → 5.14.0-570.55.1.el9_6
• kernel-core 5.14.0-570.49.1.el9_6 → 5.14.0-570.55.1.el9_6
• kernel-modules 5.14.0-570.49.1.el9_6 → 5.14.0-570.55.1.el9_6
• kernel-modules-core 5.14.0-570.49.1.el9_6 → 5.14.0-570.55.1.el9_6
• kernel-modules-extra 5.14.0-570.49.1.el9_6 → 5.14.0-570.55.1.el9_6
• libssh 0.10.4-13.el9 → 0.10.4-15.el9_6
• libssh-config 0.10.4-13.el9 → 0.10.4-15.el9_6
• nmstate 2.2.48-2.el9_6 → 2.2.52-1.el9_6
• openshift-clients 4.21.0-202509251154.p2.gabe2393.assembly.stream.el9 → 4.21.0-202510110303.p2.g672ff62.assembly.stream.el9
• openshift-kubelet 4.21.0-202509190529.p2.g5c9df33.assembly.stream.el9 → 4.21.0-202510171627.p2.g96593f3.assembly.stream.el9
• ose-azure-acr-image-credential-provider 4.21.0-202509221901.p2.g69f6a48.assembly.stream.el9 → 4.21.0-202510180155.p2.g1457693.assembly.stream.el9
• ose-gcp-gcr-image-credential-provider 4.21.0-202509221503.p2.gb27a2f9.assembly.stream.el9 → 4.21.0-202510151957.p2.g0a0890a.assembly.stream.el9
• vim-minimal 2:8.2.2637-22.el9_6 → 2:8.2.2637-22.el9_6.1

Extensions

Full list (144 packages)

• NetworkManager-libreswan-1.2.24-1.el9.aarch64
• bison-3.7.4-5.el9.aarch64
• corosync-3.1.9-2.el9_6.aarch64
• corosynclib-3.1.9-2.el9_6.aarch64
• cpp-11.5.0-5.el9_5.aarch64
• crun-wasm-1.8.5-5.rhaos4.14.el9.aarch64
• elfutils-libelf-devel-0.192-6.el9_6.aarch64
• fence-agents-all-4.10.0-86.el9_6.9.aarch64
• fence-agents-amt-ws-4.10.0-86.el9_6.9.noarch
• fence-agents-apc-4.10.0-86.el9_6.9.noarch
• fence-agents-apc-snmp-4.10.0-86.el9_6.9.noarch
• fence-agents-bladecenter-4.10.0-86.el9_6.9.noarch
• fence-agents-brocade-4.10.0-86.el9_6.9.noarch
• fence-agents-cisco-mds-4.10.0-86.el9_6.9.noarch
• fence-agents-cisco-ucs-4.10.0-86.el9_6.9.noarch
• fence-agents-common-4.10.0-86.el9_6.9.noarch
• fence-agents-drac5-4.10.0-86.el9_6.9.noarch
• fence-agents-eaton-snmp-4.10.0-86.el9_6.9.noarch
• fence-agents-emerson-4.10.0-86.el9_6.9.noarch
• fence-agents-eps-4.10.0-86.el9_6.9.noarch
• fence-agents-heuristics-ping-4.10.0-86.el9_6.9.noarch
• fence-agents-hpblade-4.10.0-86.el9_6.9.noarch
• fence-agents-ibmblade-4.10.0-86.el9_6.9.noarch
• fence-agents-ifmib-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo-moonshot-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo-mp-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo-ssh-4.10.0-86.el9_6.9.noarch
• fence-agents-ilo2-4.10.0-86.el9_6.9.noarch
• fence-agents-intelmodular-4.10.0-86.el9_6.9.noarch
• fence-agents-ipdu-4.10.0-86.el9_6.9.noarch
• fence-agents-ipmilan-4.10.0-86.el9_6.9.noarch
• fence-agents-kdump-4.10.0-86.el9_6.9.aarch64
• fence-agents-mpath-4.10.0-86.el9_6.9.noarch
• fence-agents-redfish-4.10.0-86.el9_6.9.aarch64
• fence-agents-rhevm-4.10.0-86.el9_6.9.noarch
• fence-agents-rsa-4.10.0-86.el9_6.9.noarch
• fence-agents-rsb-4.10.0-86.el9_6.9.noarch
• fence-agents-sbd-4.10.0-86.el9_6.9.noarch
• fence-agents-scsi-4.10.0-86.el9_6.9.noarch
• fence-agents-vmware-rest-4.10.0-86.el9_6.9.noarch
• fence-agents-vmware-soap-4.10.0-86.el9_6.9.noarch
• fence-agents-wti-4.10.0-86.el9_6.9.noarch
• flex-2.6.4-9.el9.aarch64
• fmt-9.1.0-1.el9.aarch64
• gcc-11.5.0-5.el9_5.aarch64
• glibc-devel-2.34-168.el9_6.23.aarch64
• gnutls-dane-3.8.3-6.el9_6.2.aarch64
• gnutls-utils-3.8.3-6.el9_6.2.aarch64
• ipmitool-1.8.18-27.el9.aarch64
• kernel-5.14.0-570.55.1.el9_6.aarch64
• kernel-64k-core-5.14.0-570.55.1.el9_6.aarch64
• kernel-64k-modules-5.14.0-570.55.1.el9_6.aarch64
• kernel-64k-modules-core-5.14.0-570.55.1.el9_6.aarch64
• kernel-64k-modules-extra-5.14.0-570.55.1.el9_6.aarch64
• kernel-core-5.14.0-570.55.1.el9_6.aarch64
• kernel-devel-5.14.0-570.55.1.el9_6.aarch64
• kernel-headers-5.14.0-570.55.1.el9_6.aarch64
• kernel-modules-5.14.0-570.55.1.el9_6.aarch64
• kernel-modules-extra-5.14.0-570.55.1.el9_6.aarch64
• krb5-pkinit-1.21.1-8.el9_6.aarch64
• krb5-workstation-1.21.1-8.el9_6.aarch64
• ldns-1.7.1-12.el9.aarch64
• libasan-11.5.0-5.el9_5.aarch64
• libkadm5-1.21.1-8.el9_6.aarch64
• libknet1-1.28-1.el9.aarch64
• libknet1-compress-bzip2-plugin-1.28-1.el9.aarch64
• libknet1-compress-lz4-plugin-1.28-1.el9.aarch64
• libknet1-compress-lzma-plugin-1.28-1.el9.aarch64
• libknet1-compress-lzo2-plugin-1.28-1.el9.aarch64
• libknet1-compress-plugins-all-1.28-1.el9.aarch64
• libknet1-compress-zlib-plugin-1.28-1.el9.aarch64
• libknet1-compress-zstd-plugin-1.28-1.el9.aarch64
• libknet1-crypto-nss-plugin-1.28-1.el9.aarch64
• libknet1-crypto-openssl-plugin-1.28-1.el9.aarch64
• libknet1-crypto-plugins-all-1.28-1.el9.aarch64
• libknet1-plugins-all-1.28-1.el9.aarch64
• libmpc-1.2.1-4.el9.aarch64
• libnozzle1-1.28-1.el9.aarch64
• libqb-2.0.8-1.el9.aarch64
• libreswan-5.2-1.el9fdp.aarch64
• libubsan-11.5.0-5.el9_5.aarch64
• libwsman1-2.6.8-23.el9.aarch64
• libxcrypt-devel-4.4.18-3.el9.aarch64
• libxslt-1.1.34-13.el9_6.aarch64
• libzstd-devel-1.5.5-1.el9.aarch64
• lld-17.0.6-1.el9.aarch64
• lld-libs-17.0.6-1.el9.aarch64
• llvm-17.0.6-5.el9.aarch64
• llvm-libs-17.0.6-5.el9.aarch64
• lm_sensors-libs-3.6.0-10.el9.aarch64
• m4-1.4.19-1.el9.aarch64
• make-1:4.3-8.el9.aarch64
• net-snmp-libs-1:5.9.1-17.el9.aarch64
• net-snmp-utils-1:5.9.1-17.el9.aarch64
• nspr-4.36.0-4.el9_4.aarch64
• nss-3.112.0-4.el9_4.aarch64
• nss-softokn-3.112.0-4.el9_4.aarch64
• nss-softokn-freebl-3.112.0-4.el9_4.aarch64
• nss-sysinit-3.112.0-4.el9_4.aarch64
• nss-tools-3.112.0-4.el9_4.aarch64
• nss-util-3.112.0-4.el9_4.aarch64
• openssl-devel-1:3.2.2-6.el9_5.1.aarch64
• openvswitch3.5-ipsec-3.5.1-33.el9fdp.aarch64
• openwsman-python3-2.6.8-23.el9.aarch64
• pacemaker-2.1.9-1.2.el9_6.aarch64
• pacemaker-cli-2.1.9-1.2.el9_6.aarch64
• pacemaker-cluster-libs-2.1.9-1.2.el9_6.aarch64
• pacemaker-libs-2.1.9-1.2.el9_6.aarch64
• pacemaker-schemas-2.1.9-1.2.el9_6.noarch
• pcp-conf-6.3.7-1.el9_6.aarch64
• pcp-libs-6.3.7-1.el9_6.aarch64
• pcs-0.11.9-2.el9_6.1.aarch64
• perl-TimeDate-1:2.33-6.el9.noarch
• protobuf-3.14.0-16.el9.aarch64
• python3-cffi-1.14.5-5.el9.aarch64
• python3-cryptography-36.0.1-5.el9_6.aarch64
• python3-lxml-4.6.5-3.el9.aarch64
• python3-openvswitch3.5-3.5.1-33.el9fdp.aarch64
• python3-ply-3.11-14.el9.noarch
• python3-pycparser-2.20-6.el9.noarch
• python3-pycurl-7.43.0.6-8.el9.aarch64
• python3-pyparsing-2.4.7-9.el9.noarch
• python3-tornado-6.4.2-2.el9_6.2.aarch64
• redhat-logos-90.5-1.el9_6.1.aarch64
• resource-agents-4.10.0-71.el9_6.11.aarch64
• ruby-3.0.7-165.el9_5.aarch64
• ruby-default-gems-3.0.7-165.el9_5.noarch
• ruby-libs-3.0.7-165.el9_5.aarch64
• rubygem-bigdecimal-3.0.0-165.el9_5.aarch64
• rubygem-bundler-2.2.33-165.el9_5.noarch
• rubygem-io-console-0.5.7-165.el9_5.aarch64
• rubygem-json-2.5.1-165.el9_5.aarch64
• rubygem-psych-3.3.2-165.el9_5.aarch64
• rubygem-rdoc-6.3.4.1-165.el9_5.noarch
• rubygem-rexml-3.2.5-165.el9_5.noarch
• rubygems-3.2.33-165.el9_5.noarch
• sbd-1.5.2-1.el9.aarch64
• spdlog-1.13.0-1.rhaos4.14.el9.aarch64
• sysstat-12.5.4-9.el9.aarch64
• telnet-1:0.17-85.el9.aarch64
• usbguard-1.0.0-16.el9.aarch64
• usbguard-selinux-1.0.0-16.el9.noarch
• wasmedge-0.14.0-2.rhaos4.19.el9.aarch64
• zlib-devel-1.2.11-40.el9.aarch64

Red Hat Enterprise Linux CoreOS base layer: 9.6.20251017-0