4.19.0-rc.5

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.19.0-rc.5-aarch64

Team Approvals:

No tests for this release

Upgrades from:

Untested upgrades: 4.18.16, 4.18.17, 4.19.0-ec.0, 4.19.0-ec.1, 4.19.0-ec.2, 4.19.0-ec.3, 4.19.0-ec.4, 4.19.0-ec.5, 4.19.0-rc.0, 4.19.0-rc.1, 4.19.0-rc.2, 4.19.0-rc.3

4.19.0-rc.4 - F F F S

Upgrades to:

4.19.0 (changes) - Success

Loading changelog, this may take a while ...

Changes from 4.19.0-rc.4

Created: 2025-06-04 05:53:17 +0000 UTC

Image Digest: sha256:3f6ca03f8faab3ec06c21cf73ffb5aa807c42d78e4e39bd0810aed76867fe4cf

Components

Kubectl 1.32.1
Kubernetes upgraded from 1.32.4 to 1.32.5
Kubernetes Tests upgraded from 1.32.4 to 1.32.5
Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250526-0 to 9.6.20250530-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
OpenShiftPodSecurityAdmission (0 tests)	Disabled (Changed)	Disabled (Changed)	Enabled	Enabled	Enabled	Enabled

Rebuilt images without code change

agent-installer-api-server git 5b1d4660 sha256:1d183d0dc2f91b028ea230bd252d551549216e7ed0c0751b483e9a3e7233c078
cluster-node-tuning-operator git 7172669c sha256:4df22a14833e559d410f7b5c3df519006c889e9fb63d4482e7feafc1e50ba507
docker-builder git f2e5d601 sha256:de23753a423f4baf82f9af5f392e092b0d2a05249066ad04531ccd7cbfe860af
driver-toolkit git 686fdac5 sha256:58739e57dad22a381a3c57b3f5ed8dc8957012eb9e8120974de12f1f2bd2f728
ironic-machine-os-downloader git dbe19772 sha256:dd0d6d059b0469428571253592b202e16f1f496ffdc51f2ad34c272daa8eb235
machine-os-images git 32b5f16c sha256:38a974cea72888476b1e621707028e5694f7923b8cfa7cda85d2c337091fc1de
monitoring-plugin git 73a8e79b sha256:90b16a1cb863dbee21981377d4c33fb3db645165a60e8d62e21261ad23825346
network-tools git ebd18d14 sha256:05beb48975f3d46f01cf6faff0ad177a2807198917ad15668b6e733614fb0c35
networking-console-plugin git 581812ac sha256:8d14a29b25ccec34181e6958995342574a8f1f6b99e1153201a8c3e58f656f5c
rhel-coreos sha256:74eebe7060a90547a98d3f002d16cf540195f4c17ab523d20b5ca113706ea7d9
rhel-coreos-extensions sha256:f0738991f1a0d0cc8eaa9fe31c0a6510188b42913c72efab535509a5128dd22a
tools git 8f1c8b57 sha256:538cccfb62514b9968b6e548cc5051af4202dcecdd502fc466412114d81b94e3

agent-installer-utils

OCPBUGS-56810: bump appliance to 936210 #99
OCPBUGS-56759: ISOBuilder- Remove default password for nodes #100
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, openstack-cinder-csi-driver-operator

OCPBUGS-56527: openstack-cinder: Set –with-topology flag for node driver also #384
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-56826: update the punctuation #9755
OCPBUGS-56372: Added better logging for vSphere destroy #9719
OCPBUGS-56832: add unit tests for vsphere VIPS/machinenetworks population #9757
OCPBUGS-56811: Update Control Plane replica validation for Single Node OpenShift #9756
MGMT-20702, OCPBUGS-56762: Avoid duplicate machine networks #9745
Full changelog

cloud-credential-operator

OCPBUGS-55903: Render: configure proxy on bootstrap static pod #857
Full changelog

cluster-capi-operator

OCPBUGS-56776: fix: ensure CAPI machineset is created not paused when authoritative #304
OCPBUGS-56714: fix: bump openshift/library-go to fix ValidatingAdmissionPolicyV1 apply in capiinstaller #305
OCPBUGS-56633: fix: watch CAPI resources in the migration controllers #303
OCPBUGS-56722: MachineSet deletion logic #302
Full changelog

cluster-config-api

OCPBUGS-56773: disable psa for 4.19 #2346
OCPBUGS-56761: Revert v1alpha1 removal #2345
Full changelog

cluster-image-registry-operator

OCPBUGS-53872: bump github.com/golang-jwt/jwt #1214
Full changelog

cluster-version-operator

OCPBUGS-56771: Fix ImplicitlyEnabledCapabilities #1199
Full changelog

console

OCPBUGS-56775: Layout of Welcome to the new OpenShift experience! buttons is wonky on mobile #15096
OCPBUGS-56149: Refactor Kebab+ActionsMenu to use PF #15051
Full changelog

console-operator

OCPBUGS-56761: Revert v1alpha1 removal #991
OCPBUGS-55716: Fix issue where console operator orphans custom logo configmaps in openshift-console namespace #985
Full changelog

csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, kube-proxy, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

OCPBUGS-56082: UPSTREAM: 130047: adjusting loopback certificate validity in kube-apiserver #2297
OCPBUGS-56437: Bump 4.19 1.32.5 #2304
Full changelog

hypershift

OCPBUGS-56792: Fix CatalogSource image check when unauthorized #6198
OCPBUGS-56910: util/version: Add Version420 #6215
OCPBUGS-56910: Move EnsurePSANotPrivileged to AtLeast(t, Version420) #6212
CNTRLPLANE-831: feat(konflux): add arm64 builds to cpo pipeline #6182
OCPBUGS-56777: Disable PSA enforcement in 4.19 hosted cluster #6201
Full changelog

insights-operator

feat: ensure the etc-entitlement-pki secret exists (#1087) #1087
Full changelog

machine-config-operator

OCPBUGS-56829: Only update boot disks during GCP boot image updates #5088
OCPBUGS-56445: Boot Image Controller should not degrade when golden configmap is slow to update #5063
Full changelog

oc-mirror

OCPBUGS-56185: [release-4.19] v2: bump containers/common dep to 0.63.0 (#1148) #1148
disables the signature verification on operator catalog collection (#1157) #1157
Full changelog

tests

OCPBUGS-56886: Fix bearer token exposure in exit condition as well #29841
OCPBUGS-56437: Update to kubernetes 1.32.5 #29875
OCPBUGS-56796: Skip failing test [release-4.19] #29865
OCPBUGS-56045: OLMv1: Update test bundles [release-4.19] #29836
Full changelog

Node Image Info

Loading node image info, this may take a while ...