4.19.0-0.konflux-nightly-arm64-2025-04-16-085020

Download the installer for your operating system or run

oc adm release extract --tools registry.ci.openshift.org/ocp-arm64/konflux-release-arm64:4.19.0-0.konflux-nightly-arm64-2025-04-16-085020

Team Approvals:

No tests for this release

Changes from 4.19.0-0.konflux-nightly-arm64-2025-04-04-113729

Created: 2025-04-16 08:50:27 +0000 UTC

Image Digest: sha256:2d080339428760c61208dc12d0f4953869940328a1542a1de28fd0e6aa0fadfc

Components

Kubectl 1.32.1
Kubernetes 1.32.3
Kubernetes Tests 1.32.3
Red Hat Enterprise Linux CoreOS upgraded from 419.96.202504040259-0 to 9.6.20250411-0

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
VSphereControlPlaneMachineSet (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
VSphereStaticIPs (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NewOLMPreflightPermissionChecks (0 tests)				Enabled (New)		Enabled (New)

Rebuilt images without code change

apiserver-network-proxy git 0e116160 sha256:9447104eec333c175aca2913c53eac1c745368e1d5354b73da4d6e5520175f65
aws-cloud-controller-manager git 425c1c5b sha256:caa79110fdb8bfcb12625fd60d1df811a6ae29d475d9e5083ac1d3d52462fb79
aws-ebs-csi-driver git d686e7d1 sha256:09089ecb941ab7d889f877d2ff1cbeaf8485c0dc27afcbdad231680285b7e228
aws-kms-encryption-provider git 088dcaf7 sha256:77722155d01e899be1248c657a2762a0af1e0a0b7a2433970e9372a06c3fa6ae
aws-machine-controllers git e32142ec sha256:4559044f46e4b569edabaf544ec3ed92a32a1b660477ba9d650cefc9220da672
aws-pod-identity-webhook git b0a16d53 sha256:14d1947c85828099e3b29e8ec5910bc1bae54adc88364e08f5e505a3dc71b2e8
azure-disk-csi-driver git 967f264f sha256:85386eeafdfe292fa08b7bcfa7b9dbe14d313852e223057f45e4e32e32f79ca6
azure-file-csi-driver git 9399f4eb sha256:911d5aa4160d9d34b43a7b87637d3f55ed77625f9b80c16a7d07b545527ccc48
azure-machine-controllers git 5d3ad083 sha256:2efab256842d9dc663f451917a69eda16df203ca243fb6b10979106a2acf6e77
azure-service-operator git 11ced00e sha256:191d869222c42e9410e8d4d00d75aa26d6e408d6fa47c0ea44765eb172c29064
azure-workload-identity-webhook git 892d3c4d sha256:1095cfd00057422df0eb2ab5736cfc5b73b462dfe3134610349cc1a20662094b
baremetal-machine-controllers git f7a78954 sha256:ba4fb563c67c68b4d8ad79a64fe28c62004250361f98775e4a133e12e7807d3c
baremetal-operator git 65791b4f sha256:dd4c8d07dcf6a63cd0d52219912bbfb1ceadcdeb0eadd2ca298e1af5ad03e084
baremetal-runtimecfg git 22c15212 sha256:d44cb3fd2b57c4316b70cd88f916d97a7b8acb3e3764e45aa561be2fda7cd52a
cloud-credential-operator git d66761c0 sha256:4760217407ed486dd7bb7662e6257e6b60cdcb0af60ebdc3ff8fc86fa06f4183
cluster-authentication-operator git 8febe2bd sha256:17a0663bf27ebd1fbecc2de8aca4d36e5a93b64bb76fde385b38579fd62a828a
cluster-autoscaler-operator git 227f7537 sha256:d43ccc4ab2f91ad8803ab87aeaf1e03c2fc57416cecd946b15079ce17f9685da
cluster-baremetal-operator git f64a5c1d sha256:09c00de711a382970dd45bcfc39eb50ebdd082bafa357a7327c1be60be5ab09c
cluster-bootstrap git 8fde9c52 sha256:c900303ebb93b0a457abf535d55489847bdb662c905051196708f5a7ba9e48e7
cluster-capi-controllers git 7e2de8d3 sha256:11b894f47ba956aec7a8be9aec96b2b8f81e701e7310c11ecbaa8b6955ed15ef
cluster-cloud-controller-manager-operator git 09f143bf sha256:b0179d7c2740dcae1bf9935b60bad39c5a2c4b7566e560177d7ad822988f4483
cluster-dns-operator git 65981306 sha256:018a555e09e288509bd4b6150f8fc3fcf4e2c520df978a73d8207348211dec9a
cluster-kube-cluster-api-operator git 3ec30377 sha256:38e6013a47db6609a9943ec0029c87dbb47ef1f824a3862c7a3906c0af167fcf
cluster-kube-storage-version-migrator-operator git 4e514049 sha256:17b62a2cdc83492164de667ecbe290885a473282f06dbfbde5d772904e7f458d
cluster-machine-approver git a52da47f sha256:b73ee6c72af86040b0c7b26222ea646181057e08e643736d36f8f50b3cb40b73
cluster-openshift-apiserver-operator git 5f66a3e1 sha256:bf8d0cf23caa60a8d47adfc4ca70bb233ebf8fc2cdb75840c57637f8da9dcfdf
cluster-openshift-controller-manager-operator git 0ab30996 sha256:36d289c76d6fe672d1d2e226de0d4ea3d37f4821f44f96107185ea5ffd31eea6
cluster-policy-controller git 74852478 sha256:4bf7ee0860b80945d34b4886de318c7ce728d79dc861452e04a68509220a06a1
cluster-update-keys git c1c56b4c sha256:b57444560ad4eb9e17acd200fe1a8da7eff6316cab10a7c36f74ce7e3a299250
configmap-reloader git 9bfbde86 sha256:bdef2dc03372100c799fa230528022df909287371365777aa3ec1b52d8daeefd
container-networking-plugins git 7e4193de sha256:7389bbc46488293afb9a08bea8495ddfbdb97ac6afe544e0085ba2f9b2dd0f1e
containernetworking-plugins-microshift git 7e4193de sha256:d48c7c6a28186230200911dcc75d8fff625f2919d6563dd921cc5582709afb34
coredns git 7a1451db sha256:3c575f9d10ff312121972ae51dacbf9d65c5db8a4ececf8bef8db2bb5d7c65c7
csi-external-attacher git a8175e39 sha256:edba77c2e1976d1d7a8549220d078f18392f2f84e330f6da85c490257a0a7aee
csi-external-provisioner git 9db1cdb1 sha256:975d667c6da2af6c28e43bfb58398096359d4340bf2b4a933716740f0a24b8a1
csi-external-resizer git cca04e39 sha256:3f6ed5a618900ec58fb88c77472271e06cb71b31617badcfb14e9b35a1267f4f
csi-livenessprobe git ca514478 sha256:6b02d920cf09b15f51659e174f6d825164e4e82862d530eaba9cfb9ecf523fff
csi-node-driver-registrar git d18edb3a sha256:f531b0590bd3f2ce2d95c761c8defa8e4c699786b74a73c9fd1e0d19de92d223
docker-builder git f2e5d601 sha256:afbfb30ce6e1be2066d999ff941b4331e689e17d7c81dc89f6bc8add9a82f9be
driver-toolkit git 686fdac5 sha256:3a91d5d2c65dbc165c2a918e63ea42400da1081a9a1908b1c27d097c51598de4
egress-router-cni git 85353bb9 sha256:5ccca00800e069554efb7a3e0ce7415c2c4887596eacb3a6630f036c7e26abb7
gcp-cloud-controller-manager git d8d3aeba sha256:28ea9c4a55a423b3fe0ddfd45ca5ed2e7a2987a8e9257c571bd84d6c534b287e
gcp-machine-controllers git bbe62087 sha256:c84c864afd929de4f3f8775cd20abca67275d7aabffa1661e1c4520c5f924b3f
gcp-pd-csi-driver git 0fc515f4 sha256:214600fb3d7b83898579c05972ce9240b0d31ceaa10aa52ee23ba6bbb153eabb
gcp-workload-identity-federation-webhook git fbf4c1b2 sha256:a8408e6781c9674c0bc216178fee64e5a22e208918e8cc7343ceafabf9037dec
haproxy-router git b41f9d05 sha256:94dbae6689c6b855bed41ced8116d108c5e7927620c474fa7f60b543f94adb53
insights-runtime-exporter git 3342e1e9 sha256:d8434d79e8e3ca2f15ddec984596b1fe7a9450b6093296984a6d357c4efc02b2
insights-runtime-extractor git 3342e1e9 sha256:51f21ea461ea4c4782f5f8395bcf330c4beea3779ed05428c37022c75d7efd5b
ironic-agent git ff2e74eb sha256:20135cf5c4d6504b4fa47eb169675074b705e4aa71ee6855511fd609e3832428
ironic-machine-os-downloader git dbe19772 sha256:bd75ac63925a682c009d67c60d0da3eea8a1dfe5abb33ccc9e129de593b1981a
ironic-static-ip-manager git fcd9564e sha256:79fb98663531460c77c1175cf4651a8d9ddf5122d3564088510d870e57d8afef
keepalived-ipfailover git b42e7cf2 sha256:fe560131c80017b495e7f51a68934875eeaa0eecb56b6b6453cfa7c9d5f64293
kube-metrics-server git 037a0e7e sha256:9ef2352f12a96b201b2684235d7e4a040e89fe4a6fe1a40bc7559aae7eade04e
kube-rbac-proxy git 59127756 sha256:67863b7d7c94c21743a64ac5d9deb097c496276fe4123c3a59a8d384f60bfe70
kube-state-metrics git c3da3b5f sha256:9586f24899fd6d39fddf65b52fa0459e44950ae5e6ea89c3536a72ce6c9609ee
kube-storage-version-migrator git 4c521b09 sha256:b3b2d5675306944bc2f8f52b21fe692e9f4713cf8a6cdcaf6c64b0963d272d5b
kubevirt-cloud-controller-manager git 3f4542ec sha256:9254710cb164bc81061938dbb14d999880eb72a9820968b047156e8553f49d5e
libvirt-machine-controllers git a336f0b5 sha256:682dd41b46ac701a4e52bbda5f4991c1ca79e01f478b1de848340a2b62282214
machine-image-customization-controller git d7f86005 sha256:aef430c5e90b90e82443623f06c271a641b855370e5382b5b2c44fe069ee1d4f
machine-os-images git c4497f31 sha256:225deeed1503f7d6279b3e637ef9cef950c19582b2d5336bfc9f01864f11c6f1
multus-admission-controller git 0b1b812e sha256:6fc042eb1437fd9a3f129e565550d75c7a21c9c2b62ba5718ac05029f831a07c
multus-cni git 722e5aa0 sha256:96243a9f66ed2922fc153ac8ce453ad31796770596d6a6fa087628f10e83a351
multus-cni-microshift git 722e5aa0 sha256:935b74437f7e76fbf51e2ec8206fc63acbaafbd33eebbcc21c17bf0bab8bb9cf
multus-networkpolicy git 6fffe5d7 sha256:ddd736bbb5d6d778aaa1a329d7673a6e3d3a16363f9d01e566fd973fdc401940
multus-route-override-cni git 391c1b03 sha256:c36d06d4b330404f3304a4eaa9f05fe8fa856e8000e1a5ef317a9bff4274dc7e
multus-whereabouts-ipam-cni git 45624b63 sha256:5b5d08cc795fc8a149b3ded470dbf682c718d1eccaf85a3d308c995a35a28104
must-gather git 33763a32 sha256:fc1fb239355de3841c8d53181d4d6ee4c35a47e237545fae8f7e371947a09c8a
network-interface-bond-cni git f575d888 sha256:b2baae2961daa98e53e303d83ac29a6ca2d7cfb6849cf3a76cce12c13c6f3dca
network-metrics-daemon git 5ec8c6bd sha256:1f580864f95750443d8dcdbb2d754b0dfc9e0b4f5e4460442434a4d84d8b1cb7
oauth-apiserver git 75914068 sha256:9bad23eae6d467ff32969d9320c786d139aa8f75086738fb8bcf4ce02850b0a1
oauth-proxy git 3d12ccbe sha256:88946d1fd98cfc4f983cab9262990bdf81e68b685bed13a962a4194eb0048e4d
oauth-server git 7c92a059 sha256:a0eb6e9eda92e6b365c34ee9a718a1a8d5ce73b274d0cd508fd053fb1edb7443
openshift-apiserver git 85f6eb27 sha256:640859af3603eff57d15de37588dacaaa856c534ca746b7f763e15af5ab9ca9d
openshift-controller-manager git 49eb6f8a sha256:ca04994432464afdbf3f243d82f8f8fc05b79bcf4b5631d84b4e5bde01093b1e
openshift-state-metrics git 3106bcc3 sha256:a46124e2d8541fb22965cf9264b36940c4bedd14d4d0f80f882ea9b8ec9272b6
openstack-cluster-api-controllers git cc76099b sha256:1491e6bd3d6e116e4b68f56736b874caf06d0d89d9f1929b2eab4a085293ba30
openstack-machine-api-provider git 848bf658 sha256:6b3c57be9df33a638c6781e86b5771ac53b08763ab3e784829d0fbf0b7351de6
openstack-resource-controller git d00bab2b sha256:49aea7f67090fbc772f986fde131fb425ac4cef9dd680d4c6ee015d07e78787f
operator-framework-tools git 84b340e8 sha256:e19308170d55592b1c6d8a7bcb0467f375317abc500cd87e045eb80d79d93b57
operator-lifecycle-manager git 84b340e8 sha256:20ee727a514ff1c6ca31a9a7cfb8c7177f5e2d9d125daaabed28d356a6c3707b
operator-registry git 84b340e8 sha256:cc733788a4095908f1efecf02337d4fc453b8d10a3b0a00e50dcc6d03ab061b4
ovirt-csi-driver git 1db726a9 sha256:737fac5207bd9dfd441ea562011322fb216061ccc829e48ba353e86b70c97dd0
prom-label-proxy git 7184f58d sha256:d6ea0236a8b335374ed0f36534db0601732a06efcb17d4c205dc7e0cc42172e1
prometheus-alertmanager git 43131005 sha256:78e028e9de9df26426a6c66aae6e6c7493a9a2800bd1f0c99a68c86cee166147
prometheus-config-reloader git 3779c1d5 sha256:d9dba93c5dc0f31ff154f4eed80bd86c9ab6d3d1a510ad5f00c826f21bdc1286
prometheus-node-exporter git 57a4e998 sha256:df61a2a463807aeb619cfeeaf720802649689edc5d7ad420261026ad47b92a26
prometheus-operator git 3779c1d5 sha256:3237cee409b9b392290462aac6bebcede248caec39c3f54f7de9d1476b3dcefe
prometheus-operator-admission-webhook git 3779c1d5 sha256:e35440bd09701e5048810016420369ae9650eec91cf959cc3fe150e204d71a82
rhel-coreos sha256:c251707bf4f6ee51eb949aee8bfdc2e658157d9381160c68587e41ea47d90ddd
rhel-coreos-extensions sha256:f1144077eb9bec5b38b1d53a97d84902cef6974c111362246b3aaa1e536a41f4
route-controller-manager git bc97534a sha256:5ca70e5ee00feb34bf433d6f8e5d27d322b7655ba45e1a26c3756617dc59f4f7
thanos git 95f7bb21 sha256:13c1f287bdf4769b5c099be41f9bb08fd47a5afaf10e03511dbede19cb8fa672

agent-installer-api-server

MGMT-20324: Fix day2 add hosts with P/Z CPU architectures #7527
MGMT-20207: avoid adding system CA bundle to AdditionalTrustBundle #7448
MGMT-20009: Change OCP 4.19 to the default version #7506
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update Konflux references (#1095) #1095
Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.19 (#957) #957
NO-ISSUE: Update Konflux references (#1090) #1090
Full changelog

agent-installer-utils

AGENT-1161: Update ISOBuilder dependencies #75
AGENT-1154: Dev docs for ISOBuilder #74
NO-ISSUE: Remove extra doneFunc() call #73
AGENT-1188: Add MBR to El Torito ISO to support USB boot alongside VM #72
NO-ISSUE: ISOBuilder: Use libpod registry #71
AGENT-1114: Check connectivity to rendezvous node and improvements #64
NO-ISSUE: ISOBuilder: Appliance tweaks #70
AGENT-1138: Skip release image checks for interactive disconnected #52
NO-ISSUE: ISOBuilder: idempotency and efficiency #66
NO-ISSUE: ISOBuilder: Support –dir param #68
NO-ISSUE: ISOBuilder: Update operators list #67
Full changelog

aws-cluster-api-controllers

OCPBUGS-54567: UPSTREAM: 5374: add marketType field validation #548
ART-12521: update go mod dependency for konflux #545
Full changelog

aws-ebs-csi-driver-operator, azure-disk-csi-driver-operator, azure-file-csi-driver-operator, openstack-cinder-csi-driver-operator

OCPBUGS-54382: Correct ASH driver inject env config #376
Full changelog

azure-cloud-controller-manager, azure-cloud-node-manager

OCPBUGS-51090: Fix panic for GetZoneByNodeName on Azure Stack #141
Full changelog

azure-cluster-api-controllers

ART-12521: update go mod dependency for konflux #334
Full changelog

azure-kms-encryption-provider

OCPBUGS-45592: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.19 #9
Full changelog

baremetal-cluster-api-controllers

Remove ipam-controller-manager deployment #43
Add metal3 infra group to IPAM manager RBAC #42
Remove IPAM deployment #39
Find Nodes by hostname #38
Full changelog

baremetal-installer, installer, installer-altinfra, installer-artifacts

CORS-3864, CORS-3959: CAPI-based AzureStack Installs #9645
CORS-3870: add validations for subnets field with AWS API #9599
CORS-3871, CORS-3872, CORS-3873: place the cluster components on the assigned byo subnets if any #9633
CORS-3278: IBMCloud: Remove IBM Cloud TF provider #9649
OCPBUGS-54606: convert OVNKubernetes networkType to correct format #9653
CORS-3936: Add support for public-only networking #9544
CORS-3278: IBMCloud: Add DestroyBootstrap for leftover CAPI resources #9636
CORS-3854: Enable option to set boot diagnostics #9125
CORS-3278: Switch IBMCloud to CAPI #9652
CORS-3867: fix CRD descriptor to mention required BootstrapNode role #9655
CORS-3886: azure: Set use managed identity to false #9648
OCPBUGS-54319: oci-eval-user-data uses dmidecode which is not supported on ppc64le or s390x #9608
AGENT-1159: agent docs update #9627
OCPBUGS-53439: fix inconsistent subnet role name for bootstrap node #9650
NO-JIRA: fix the platform test assertions to check expected err message #9639
OCPBUGS-43990: Filter out excess CA certs when adding node #9641
NO-JIRA: add Roshan-R to CoreOS approvers and reviewers #9642
OCPEDGE-1506: Add Platform based validation to fencing credentials #9624
CORS-3908: Update gcp cloud provider config map to include new endpoints #9600
SPLAT-2121: vsphere - if no host group found, append not found #9638
OCPBUGS-54541: Update RHCOS 4.19 bootimage metadata to 9.6.20250402-0 #9632
OCPBUGS-46601: IBM Cloud Bump IBM Cloud CAPI #9623
Full changelog

cli, cli-artifacts, deployer, tools

COS-3023: Fixing rpmdiff permissions when running in container #2006
COS-3023: pkg/cli/admin/release/info: support generating RPM diffs #1966
Full changelog

cloud-network-config-controller

CNTRLPLANE-112: Add new Azure authentication type for managed Azure HCP for cloud-network-config-controller #166
OSASINFRA-3755: Prefer CA cert from credentials secret #167
Full changelog

cluster-autoscaler

NO-JIRA: improve nodes listing in ClusterAPI provider #354
Full changelog

cluster-capi-operator

OCPCLOUD-2564: add migration controllers #268
OCPBUGS-54972: Revert #175 “METAL-966: Add metal3 provider” #283
OCPCLOUD-2880: label selector and labels conversion, fixes to sync controllers and conversions #281
METAL-966: Add metal3 provider #175
Full changelog

cluster-config-api

TRT-2081: Revert #2261 “NE-2009: Enable GatewayAPI featuregate in Default featureset” #2277
Temporarily pin feature-gate-analyzer to 4.19 #2276
image/v1/types: improve documentation #2240
NE-2009: Enable GatewayAPI featuregate in Default featureset #2261
SPLAT-2078: Removed VSphereStaticIPs feature gate #2232
OPRUN-3780: Add feature flag for NewOLMPreflightPermissionCheck #2242
SPLAT-2079: Removed VSphereControlPlaneMachineSet feature gate #2236
MCO-1630: Generate v1 crds for PIS #2257
Full changelog

cluster-config-operator

OCPBUGS-52744: Bump golang.org/x/crypto #433
Full changelog

cluster-control-plane-machine-set-operator

OAPE-163: Extend E2E tests for MachineNamePrefix when the field is reset #355
Full changelog

cluster-csi-snapshot-controller-operator

STOR-2126: Enable readOnlyFileSystem #229
STOR-1880: Role and ClusterRole with too wide permissions #235
Full changelog

cluster-etcd-operator

OCPBUGS-54222: increase etcdGRPCRequestsSlow duration #1402
Full changelog

cluster-image-registry-operator

OSASINFRA-3747: Prefer CA cert from credentials secret #1190
Full changelog

cluster-ingress-operator

NE-1969: Set Degraded=True if unmanaged Gateway API CRDs exist #1205
NE-1957: Add Gateway API DNS Feature e2e tests #1213
OCPBUGS-54650, OCPBUGS-54651, OCPBUGS-54652: desiredSubscription: Specify annotations and SCC #1214
NE-2009: Move VAP to Default featureset #1216
OCPBUGS-54568: desiredIstio: Specify priorityClassName #1211
OCPBUGS-53424: Wait for install plans to enter the “Requires Approval” phase before approving them #1203
NE-2008: Add GRPC conformance tests #1208
Full changelog

cluster-kube-apiserver-operator

Revert “OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects” #1830
OCPBUGS-43777: certrotationcontroller: run tests which runs deployment and creates projects #1759
CNTRLPLANE-347: Issue short lived certificates if ShortCertRotation featuregate is enabled #1823
MON-4161: add cluster:controlplane_topology:sum recording rule #1829
Full changelog

cluster-kube-controller-manager-operator

OCPBUGS-54945: Bump library-go #838
Full changelog

cluster-kube-scheduler-operator

OCPBUGS-54945: Bump library-go #560
Full changelog

cluster-monitoring-operator

MON-4161: add topology telemetry signals #2588
MON-4126: set fallbackScrapeProtocol: ‘PrometheusText1.0.0’ as default for all UWM Prometheus targets for backward compatibility with Prometheus v2 until a better migration process is available #2590
MON-4150: chore: update prometheus-operator go dep #2586
OCPBUGS-54516: provide context-rich and case-sensitive config validation #2584
Full changelog

cluster-network-operator

OCPBUGS-54837: Add missing backendAddressPools read permission on azure #2684
CORENET-4481: update install-cni script #2676
SDN-5342: Signer username validation #2560
OCPBUGS-53180: Add IPv6 NGINX configuration #2681
CNF-16707: frr-k8s: Add BGPSessionState CRD #2671
Full changelog

cluster-node-tuning-operator

Bump to k8s 1.32.3 (#1318) #1318
Unblock production image generation (#1319) #1319
OCPBUGS-54628: Add retry method if we hit jira rate limit (#1313) #1313
Ignore -server-ose repos in the CI (#1314) #1314
Full changelog

cluster-olm-operator

OCPBUGS-54877: Increase debug logging level for op-con/catd #114
OPRUN-3782: Watch for permissions preflight feature gate #113
OCPBUGS-54781: Revert #111 “OPRUN-3782: Watch for permissions preflight feature gate” #112
OPRUN-3782: Watch for permissions preflight feature gate #111
Full changelog

cluster-samples-operator

OCPBUGS-54590: Samples Operator should sort failing image imports #627
OCPBUGS-54589: Adding filter to clusterOperatorInformerEventHandler #626
OCPBUGS-54591: only update LastTransitionTime if operator status change #625
Full changelog

cluster-storage-operator

STOR-2078: Enable VolumeAttributesClass for GCP-PD #574
OSASINFRA-3731: openstack: Consume CA cert from CCO secret #557
STOR-2126: Enable readOnlyFileSystem #564
Full changelog

cluster-version-operator

OTA-1488: Remove USC code #1176
OTA-1488: Remove DevPreview USC manifests #1175
NO-JIRA: Fix some issues identified by yamllint #1174
Full changelog

console

OCPBUGS-43792: Load extensions in same order as plugins listed in SERVER_FLAGS global #14902
ODC-7781: Running knative e2e tests from admin view #14952
OCPBUGS-54669: Enable project selector dropdown on Helm form in admin perspective #14956
OCPBUGS-54963: Fix visual regression with knative getting started card #14968
OCPBUGS-54536: Use router link for OLM CSV empty state #14929
CONSOLE-4492: Use helpText for help text #14964
OCPBUGS-54878: Align left/right margins of add card items #14963
CONSOLE-4542: Convert dl, dd, dt to PF DescriptionList #14947
CONSOLE-4538: Add error reporting link to ErrorBoundary modal #14958
OCPEDGE-1614: hack: allow DualReplica in control plane topology validation #14934
OCPBUGS-36658: Fetching taskRuns in PLR details page using PLR UID also #14921
CONSOLE-4507: Clean up catalog view #14954
CONSOLE-4520: Further PatternFly 6 bug fixes and cleanup #14945
CONSOLE-4464: Update PatternFly to 6.2.0 #14953
OCPBUGS-49870: Can’t edit deployment (from the private git repository) in RHOCP 4.15 via console #14887
OCPBUGS-54733: fix bug where co-resource-icon–fixed-width can clip #14950
OCPBUGS-52486: Notification drawer should have keyboard navigation focus when expanded. #14889
OCPBUGS-54540: fix flaking update-modal test #14937
OCPBUGS-54684: Remove orphaned notification drawer CSS class #14948
OCPBUGS-54492: metadata.name field is missing in PDB example YAML #14946
CONSOLE-4538: Use PF component groups for Error states #14912
ODC-7720: Further Developer Catalog -> Software Catalog renaming #14911
CONSOLE-4540: add set as default sc action #14920
ODC-7778: Include Quick create in Admin perspective guided tour #14850
CONSOLE-4393, ODC-6775: @types/node pre-merge prep #14932
OCPBUGS-46526: Add BaseNode in topology folder into Dynamic Plugin SDK #14907
OCPBUGS-54472: fix position of OpenShift Lightspeed button #14923
OCPBUGS-54461: Add missing href props to masthead items #14922
OCPBUGS-53065: Fix regression where normal Pod terminals are unresponsive. #14927
Full changelog

console-operator

CONSOLE-4523: Add rhel8 and rhel9 oc binaries for Linux OS in CLI downloads #976
NETOBSERV-2023: Implement a quickstart for netobserv operator #955
CONSOLE-4481: Add additional CSP test #975
OCPBUGS-45514: Report email_domain to telemetry #971
CONSOLE-4481: Add junit generation for unit and e2e testing #974
ART-12521: update go mod dependency for konflux #973
Full changelog

csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, hyperkube, ibm-cloud-controller-manager, ibm-vpc-block-csi-driver, ibm-vpc-block-csi-driver-operator, ibmcloud-cluster-api-controllers, ibmcloud-machine-controllers, kube-proxy, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

OCPBUGS-53249: skip UDP LoadBalancer on external #2247
OCPBUGS-54426: Fix implementation of ContainsCIDR to allow non-equal addresses #2263
OCPBUGS-52410: Propagate error when creating CustomResourceStorage instead of panicking #2216
Full changelog

csi-external-snapshotter, csi-snapshot-controller

STOR-2251: Rebase external-snapshotter to v8.2.1 for OCP 4.19 #177
Full changelog

docker-registry

IR-522: disable aws region check #425
Full changelog

etcd

ETCD-726: Rebase etcd 3.5.21 openshift 4.19 #324
Full changelog

gcp-cluster-api-controllers

ART-12521: update go mod dependency for konflux #240
Full changelog

gcp-pd-csi-driver-operator

OCPBUGS-54336: Bump library-go #144
Full changelog

hypershift

OCPBUGS-54225: Bump socks5 proxy, konnectivity proxy, http proxy, token minter memory requests #5897
NO-JIRA: Improve API docs for configuration.Image #6034
Revert “Revert “CNTRLPLANE-112: Enable MIv3 for CNO/CNCC on managed Azure”” #6012
OCPBUGS-54533: Update DNS names for ovn-kubernetes cp metrics #6007
OCPBUGS-54763: openstack/cli: only set port security when specified #6036
NO-JIRA: Bump o/api version to 4.19 tag #6035
OCPBUGS-54916: Set Azure KMS Configuration to v2 #6027
OCPBUGS-54309: Drop isIP CEL check #6032
AUTOSCALE-127: allow karpenter-provider-aws image to be overriden by hcp annotation #5999
CNTRLPLANE-217: Add E2E to KubeAPIServerDNSName API to cover KAS custom certificate #5968
STOR-2281: Remove snapshot webhook #6004
OCPBUGS-54763: openstack: set port security only if explicitly specified #6015
OCPBUGS-52661: KAS-Bump audit-webhook-initial-backoff and TerminationGracePeriodSeconds when audit webhook is enabled #5798
NO-JIRA: Bump CAPZ to v1.19.2 #6018
NO-JIRA: update konflux references #5987
OCPBUGS-48540: Mcd proxy #6011
AUTOSCALE-44: add autonode karpenter drift hcp upgrade e2e test #5870
OCPBUGS-54602: Set KAS GOMEMLIMIT node label to what OSDFM expects #5975
NO-JIRA: Add polling for kas-bootstrap kas network requests #5990
OCPBUGS-53261: Add validation to avoid conflicts between KubeAPI server and NamedCertificates SANs #5875
OCPBUGS-41853: Add documentation for API Server custom certificate in HCP #6001
OCPBUGS-54178: Add missing servicemonitors and prometheusrules permissions for non-OVN #5893
ARO-15695: test/e2e: run EnsureImageRegistryCapabilityDisabled on 4.18 #5984
NO-JIRA: Add OWNERS to kas-bootstrap #5991
CNTRLPLANE-233: Add –kas-dns-name CLI flag to consume KubeAPIServerDNSName API #5969
CNTRLPLANE-334: openshift/api dependency bumps #5971
NO-JIRA: Enable ppc64le builds #5985
OSASINFRA-3732: openstack: Sync CA cert to new key #5702
chore(deps): update golang docker tag to v1.24 #5616
OCPBUGS-54431: Don’t set IgnitionServerTokenExpirationTimestampAnnotation if already set #5942
NO-JIRA: Sync labels between CPO and RHTAP CPO dockerfile #5966
OCPBUGS-52983: Add check for expected conditions before running NodePool tests #5970
Full changelog

insights-operator

feat: remove the upgradeable condition (#1079) #1079
CCXDEV-9905: Introduce a new config option for storing archives to persistent volume (#1070) #1070
Full changelog

ironic

METAL-1327: Update pkgs ocp419 take2 #651
Full changelog

kubevirt-csi-driver

NO-JIRA: Add awels as approver #59
OCPBUGS-50562: Ensure unpublish works for volumes carried over upgrades #58
Full changelog

machine-api-operator

OCPBUGS-55025: fix: nodelink use patch to apply machine’s nodeRef #1352
SPLAT-2051: implement e2e tests for vSphere multi network #1347
SPLAT-2118: Update tests-extensions to pick up new vendor filtering #1351
Full changelog

machine-config-operator

OCPBUGS-53408: wait for build and ensure OS image is actually new #4924
OCPBUGS-54872: Make sure generation fields in MCN do not have a value of 0 #4982
MCO-1544: Update MCO code to use MCN’s updated v1alpha1 API #4962
OCPBUGS-53425: Make mtu-migration run after wait-for-primary-ip #4932
OCPBUGS-54611: pkg/operator/status: Drop kubelet skew guard #4970
OCPBUGS-54384: kubelet-service: narrow down restorecon path #4857
OCPBUGS-54175: Add /etc/docker/certs.d to template #4933
MCO-1587: Add runbook for ExtremelyHighIndividualControlPlaneMemory #4976
OCPBUGS-49737: GCP: Include the gcp-routes.service for all GCP installs #4969
Full changelog

metallb-frr

Syncmetallb 04042025 #81
Full changelog

monitoring-plugin

OU-678: fix: allow to set refresh interval to off #379
Full changelog

network-tools

NO-JIRA: Fix JIRA queries #141
Full changelog

networking-console-plugin

Upload i18n translations scripts #229
CNV-59853: remove co-m-table-grid and dropdown-kebab-pf classes #231
Full changelog

oc-mirror

CLID-321: Add annotations to resources generated by oc-mirror v2 (#1086) #1086
CLID-352: images: add integration tests image (#1124) #1124
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: Synchronize From Upstream Repositories #312
NO-ISSUE: Synchronize From Upstream Repositories #309
NO-ISSUE: Synchronize From Upstream Repositories #308
NO-ISSUE: Synchronize From Upstream Repositories #306
Full changelog

openstack-cinder-csi-driver, openstack-cloud-controller-manager

ART-12521: update go mod dependency for konflux #320
Full changelog

operator-marketplace

NO-ISSUE: Bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.4 #618
NO-ISSUE: Bump github.com/onsi/gomega from 1.36.2 to 1.37.0 #617
OPRUN-3621: Replace 4.18 image references with 4.19 #579
NO-ISSUE: Bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 #616
Full changelog

ovirt-csi-driver-operator

NO-JIRA: Readme update #139
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-5371: Dockerfile: Bump OVS version to 3.5.0-0.9 #2472
CORENET-5382: unpin libreswan version #2498
OCPBUGS-49994: [DownstreamMerge] 7th april #2509
CORENET-5666, OCPBUGS-43004, OCPBUGS-54199: Downstream Merge 2025-04-02 #2505
Full changelog

prometheus

MON-4199: chore: update to v3.2.1 #246
Full changelog

service-ca-operator

CNTRLPLANE-339: Issue short lived certificates if ShortCertRotation featuregate is enabled #245
Full changelog

telemeter

OCPBUGS-50837: Check nil metric in elide label #555
SWATCH-3413: Add acm_capacity_effective_cpu_cores:sum recording rule #554
Full changelog

tests

TRT-2082: Revert “MCO-1520: Add MachineConfigNode e2e tests” #29682
OCPBUGS-54906: Change the test image to registry.k8s.io/e2e-test-images/agnhost #29672
OCPEDGE-1675: feat: update some tests to account for the arbiter node #29639
MCO-1636: skip PIS custom pool checks on SNO cluster #29673
MCO-1520: Add MachineConfigNode e2e tests #29596
OCPBUGS-54869: bump limits #29679
OCPBUGS-54661: Route ExternalCertificate: Fix e2e tests for metal platform #29656
SPLAT-2060: Registered Machine API tests extension #29579
MCO-1523: PinnedImageSet v1alpha1 Testing #29599
SDN-5217: Add tests for OVN-K default pod network route advertisement #29419
NO-JIRA: add api error rate observed by kubelet, kcm, and scheduler #29070
TRT-2049: Track Watch Counts via Audit Events #29628
OAPE-91: Route ExternalCertificate: Skip e2e jobs for bare metal platform #29651
OCPBUGS-18865: Reapply “kube-apiserver disruption incluster monitors” #29282
NO-ISSUE: Automated - Update synthetic test data #29600
OCPBUGS-53279: add failure case to skip in testPodSandboxCreation() #29631
Full changelog

View changelog in Markdown or change previous release:

Source code for this page located on github