4.21.0-ec.2

Download the installer for your operating system or run

oc adm release extract --tools quay.io/openshift-release-dev/ocp-release:4.21.0-ec.2-s390x

Team Approvals:

No tests for this release

Upgrades from:

Untested upgrades: 4.20.0, 4.21.0-ec.0

Changes from 4.21.0-ec.1

Created: 2025-10-22 07:58:12 +0000 UTC

Image Digest: sha256:b2c7c943dc0623669fef0870fe5764a389f859b4d0688c3b1346c233f2ea288c

Components

Kubectl 1.33.3
Kubernetes upgraded from 1.33.5 to 1.34.1
Kubernetes Tests 1.33.4
Red Hat Enterprise Linux CoreOS upgraded from 9.6.20250925-0 to 9.6.20251017-0

The CoreOS links above are for the base CoreOS layer used to build the OpenShift node image and do not contain OpenShift components. This is normally only useful to devs working closely with the CoreOS team. For info about the node image, see the Node Image Info section.

FeatureGate Changes

FeatureGate	Default Hypershift	Default SelfManagedHA	DevPreviewNoUpgrade Hypershift	DevPreviewNoUpgrade SelfManagedHA	TechPreviewNoUpgrade Hypershift	TechPreviewNoUpgrade SelfManagedHA
IngressControllerLBSubnetsAWS (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
NodeSwap (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
SetEIPForNLBIngressController (0 tests)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)	Unconditionally Enabled (Changed)
ExternalOIDCWithUIDAndExtraClaimMappings (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ManagedBootImagesAzure (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ManagedBootImagesvSphere (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
PreconfiguredUDNAddresses (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
VolumeAttributesClass (0 tests)	Enabled (Changed)	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
ExternalOIDC (0 tests)	Enabled	Enabled (Changed)	Enabled	Enabled	Enabled	Enabled
EventTTL (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)
ManagedBootImagesCPMS (0 tests)			Enabled (New)	Enabled (New)	Enabled (New)	Enabled (New)

Removed images

ovirt-csi-driver
ovirt-csi-driver-operator

Rebuilt images without code change

cluster-openshift-controller-manager-operator git da1e14c4 sha256:1e86822c165f407752efbdb36d3cbf7ac4c93dae8cb587118db910da37162c6e
csi-external-snapshot-metadata git 24faebef sha256:dff6e754873be8e9147e451620e07bd21a09e3e51f119e10d4bfa6beb5b4cc6a
driver-toolkit git 5c53d757 sha256:770d95086895a34b148299879392fd6647340dbaf33c91cd67cc0c1574127ebb
egress-router-cni git 5e0f8d1b sha256:31f4b29dbacf42770bd98c83cecb7e74f3888491f217f9b92f17a62af2ed0ad2
keepalived-ipfailover git 9fd8d256 sha256:14bb0411d9fa6a1c8516d321e8944c5b7d41b0903e28eef3b8c34c1b5d3953fc
kube-rbac-proxy git b9134351 sha256:c8bb72ae618e418cea5b142141fe81bd924aa3ccf791db3bd5adbea7ebee401e
kubevirt-cloud-controller-manager git 3f4542ec sha256:cd8d8b8eecae86b3e3b0546a3d2e018129b60cf608c2ba378a7e22e3963e1f40
kubevirt-csi-driver git 8b8dd30e sha256:5e06f6babb5d39e05abf8c5bdc7e0d5e43f8cc5972f8e71b5a6a828cdf885cdf
libvirt-machine-controllers git a336f0b5 sha256:b0de38385690ac0827fc3a751e54a43d810019d2596619b361d2a3c3253cd53d
metallb-frr git fc0fe74f sha256:3dd828b7a683a3cd6bc324c56f3c6157b3f2af0e434a229fb6719a973487c798
multus-cni git cf0f68ec sha256:a83374690923b1c7b82eefddba7ba0d19e1239cdfe5893499292b42ca8cdee81
multus-cni-microshift git cf0f68ec sha256:2a49dbf21952dd2a2fcfdc0ac62f4947cc061dadad3ea94a855b3ff0b8823a7b
multus-networkpolicy git ef99d3d4 sha256:60116e155544947e80c41ed55a3809dc82c4b057be7aef148e129b42f0a44d4e
multus-route-override-cni git 391c1b03 sha256:4ffe62e48da429d3ab27cc146c43a842486d36b8166e997d5852b0b0008e5944
multus-whereabouts-ipam-cni git 43c89591 sha256:f3459bc08d357a4050213c0cb8616ba52d8ddfcfc9378ac6a1feecc63a171807
network-metrics-daemon git b81340a9 sha256:25c4d64ad457f92fa31b262959735c69321b4ebc3e817156e569936a119a3e03
oauth-proxy git 6649cb8a sha256:eae1f832c76f9cd636eec90e1be38bdc906383f22b93ecfc932dba60c83195f9
oauth-server git 81098796 sha256:62ae79cb7dd55ec88bd4fdb3544d91105dc225348290130d65c0f10345d01038
openshift-controller-manager git 15fc552a sha256:ee766ba891144c8c2c45108fe9c16a7e7259cb2433e6b917e4b8a5b5eb3defc0
openstack-resource-controller git bf0d2c88 sha256:f366abc4ae4041ea11e702c2e5f40d1d6524357f992f6f89ff65b69237325de3
prometheus-node-exporter git e72c0718 sha256:22fe027750e2448c7d2adb197609aac1ddd9d4fd1e4b2d5bfb6adc481c6a962f
telemeter git 0634eee9 sha256:ee97087b781741f1fd6237af847d8a2a4602834a5d5060d0cd94b5c40e13cdd3
thanos git 6ea20ffa sha256:e9b061aef539ebc1807cfbafd85c60f81c33a6179e472bdf7f18aa16d5a1483a

agent-installer-api-server

NO-ISSUE: [master] Bump OCP versions: 4.16, 4.12, 4.18, 4.20, 4.19, 4.17 #8134
AGENT-1303: Allow InfraEnv registration to use late binding #8059
NO-ISSUE: Update Konflux references #8128
NO-ISSUE: bump ocp dockerfile base image to 4.21 #8110
MGMT-20588: Align kube descheduler activation CR with OVE needs #7960
NO-ISSUE: Update Konflux references #8050
ACM-25137: Remove the SERVICE_EL8_IMAGE env vars #8108
MGMT-21725: Update Renovate for legacy EL8 Dockerfiles #8090
OCPBUGS-62580: Fix edge jobs to be consistent with ART for 4.21 #8104
NO-ISSUE: [master] Bump OCP versions: 4.19 #8095
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.16, 4.19, 4.18 #8089
NO-ISSUE: [master] Bump OCP versions: 4.17, 4.19, 4.20, 4.15, 4.14 #8084
Full changelog

agent-installer-csr-approver, agent-installer-orchestrator

NO-ISSUE: Update Konflux references #1299
MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1289
OCPBUGS-62361: Updating ose-agent-installer-orchestrator-container image to be consistent with ART for 4.21 #1276
OCPBUGS-62398: Updating ose-agent-installer-csr-approver-container image to be consistent with ART for 4.21 #1277
NO-ISSUE: Update Konflux references #1283
Full changelog

agent-installer-node-agent

MGMT-21724: Update Renovate for legacy EL8 Dockerfiles #1148
OCPBUGS-62390: Bump dockerfile images to 4.21 #1147
NO-ISSUE: Update konflux pipelines to use a remote pipeline #1118
Full changelog

agent-installer-utils

OCPBUGS-62986: Update Konflux references #177
OCPBUGS-62958: Update Konflux references #168
OCPBUGS-62905: Dockerfile cleanup #174
OCPBUGS-62347: Updating ose-agent-installer-utils-container image to be consistent with ART for 4.21 #165
OCPBUGS-62704: remove hardcoded versions from iso_builder #171
AGENT-1336: Add release label to build #170
OCPBUGS-62646: Update Konflux references #167
OCPBUGS-62645: Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 0697723 #146
AGENT-1258: Build PipelineRun changes for Konflux #155
Full changelog

apiserver-network-proxy

OCPBUGS-62355: Updating ose-apiserver-network-proxy-container image to be consistent with ART for 4.21 #86
Full changelog

aws-cloud-controller-manager, aws-cluster-api-controllers, aws-ebs-csi-driver, aws-ebs-csi-driver-operator, aws-machine-controllers, aws-pod-identity-webhook, azure-cloud-controller-manager, azure-cloud-node-manager, azure-cluster-api-controllers, azure-disk-csi-driver, azure-disk-csi-driver-operator, azure-file-csi-driver, azure-file-csi-driver-operator, azure-machine-controllers, azure-workload-identity-webhook, csi-driver-manila, csi-driver-manila-operator, csi-driver-nfs, gcp-cloud-controller-manager, gcp-cluster-api-controllers, gcp-machine-controllers, gcp-pd-csi-driver, gcp-pd-csi-driver-operator, hyperkube, ironic, ironic-agent, ironic-machine-os-downloader, ironic-static-ip-manager, kube-proxy, machine-image-customization-controller, nutanix-cloud-controller-manager, nutanix-machine-controllers, pod, powervs-block-csi-driver, powervs-block-csi-driver-operator, powervs-cloud-controller-manager, powervs-machine-controllers, vsphere-cloud-controller-manager, vsphere-cluster-api-controllers, vsphere-csi-driver, vsphere-csi-driver-operator, vsphere-csi-driver-syncer, vsphere-problem-detector

OCPSTRAT-2371: Update to Kubernetes v1.34.1 #2484
OCPBUGS-62608: Updating openshift-enterprise-pod-container image to be consistent with ART for 4.21 #2481
OCPBUGS-60610: UPSTREAM: 134199: Promote regression-issue-74839 to 1.4 #2472
OCPBUGS-43994: UPSTREAM: <carry>: kube-apiserver: wire through isTerminating into handler chain #2477
Full changelog

aws-karpenter-provider-aws

OCPBUGS-62388: Updating aws-karpenter-provider-aws-container image to be consistent with ART for 4.21 #15
Full changelog

aws-kms-encryption-provider

OCPBUGS-62458: Updating aws-kms-encryption-provider-container image to be consistent with ART for 4.21 #31
Full changelog

azure-kms-encryption-provider

OCPBUGS-62405: Updating azure-kms-encryption-provider-container image to be consistent with ART for 4.21 #23
Full changelog

azure-service-operator

OCPBUGS-62368: Updating ose-azure-service-operator-container image to be consistent with ART for 4.21 #13
Full changelog

baremetal-cluster-api-controllers

OCPBUGS-62565: Updating ose-baremetal-cluster-api-controllers-container image to be consistent with ART for 4.21 #53
Full changelog

baremetal-installer, installer, installer-artifacts

OCPBUGS-62085: Update the RHCOS 4.21 bootimage metadata #9998
OKD-237: Remove fcos references #9970
OSASINFRA-3915: openstack: Start setting CredentialsMode #9734
NO-JIRA: shiftstack: Update OWNERS #9994
OCPBUGS-62125: baremetal: set baremetalhost architecture #9987
OCPBUGS-60752: Add MTU validation for networkConfig #9919
OCPBUGS-62907: AGENT-1269: Use agent-installer-ui image from release #9995
OCPBUGS-62430: None: Allow IPv6 Primary DualStack installs on platforms None and External #9983
OCPBUGS-41567: Clean up baremetal bootstrap systemd dependencies #8986
OCPBUGS-62452: Updating ose-installer-container image to be consistent with ART for 4.21 #9980
OCPBUGS-62471: Updating ose-baremetal-installer-container image to be consistent with ART for 4.21 #9981
OCPBUGS-60538: Update assisted-service dependencies #9956
CORS-4256: Add PSC Endpoint to the installconfig #9991
OCPBUGS-62514: Updating ose-installer-artifacts-container image to be consistent with ART for 4.21 #9984
SPLAT-2511: vSphere - do not block on vSphere >7.0.2, allow 9 #9963
CORS-4078: allow toggling AWS client logging #9976
OCPBUGS-62363: Set agent-extract-tui start timeout #9975
no-jira: Revert “Merge pull request #9939 from barbacbd/CORS-4058-release-4.21” #9974
CORS-4078: bump AWS SDK v2 max backoff duration to 300s #9966
CORS-4107: Update default release image to 4.21 #9954
OCPBUGS-61514: Add check for gcp firewall deletion permission #9935
Full changelog

baremetal-machine-controllers

OCPBUGS-62365: Updating baremetal-machine-controller-container image to be consistent with ART for 4.21 #237
Full changelog

baremetal-operator

OCPBUGS-61349, OCPBUGS-62112: Merge upstream #432
OCPBUGS-62460: Updating ose-baremetal-operator-container image to be consistent with ART for 4.21 #433
Full changelog

baremetal-runtimecfg

OCPBUGS-62581: Updating ose-baremetal-runtimecfg-container image to be consistent with ART for 4.21 #370
Full changelog

cli, cli-artifacts, deployer, tools

NO-JIRA: adm upgrade status: capture testcase for OCPBUGS-60768 #2081
OCPBUGS-62445: prevent crash when rootDeviceHints format is invalid #2109
NO-JIRA: Update shellescape and sspi to newer versions #2116
NO-JIRA: Remove myself from update approvers, add Hongkai #2112
OCPBUGS-62550: Updating ose-cli-artifacts-container image to be consistent with ART for 4.21 #2111
OCPBUGS-61491: Update code to retrieve ICSP instead of ICP #2095
OCPBUGS-62362: Updating ose-tools-container image to be consistent with ART for 4.21 #2108
OCPBUGS-62548: Updating openshift-enterprise-deployer-container image to be consistent with ART for 4.21 #2110
NO-JIRA: Updating openshift-enterprise-cli-container image to be consistent with ART for 4.21 #2107
Full changelog

cloud-credential-operator

CCO-644: Upgrade msgraph-sdk-go v1.86.0 #924
CCO-435: Migrate away from deprecated ioutil package. #920
OCPBUGS-62495: Updating ose-cloud-credential-operator-container image to be consistent with ART for 4.21 #923
Full changelog

cloud-network-config-controller

OCPBUGS-55625: Retrieve subnet from vnet subnets.addressPrefixes field #179
OCPBUGS-62437: Updating ose-cloud-network-config-controller-container image to be consistent with ART for 4.21 #181
Full changelog

cluster-authentication-operator

OCPBUGS-62447: Updating ose-cluster-authentication-operator-container image to be consistent with ART for 4.21 #793
API-1835: test/oauth-server-staticresource: adds a test to show which input resources are required to run the operator and the staticResourceController #790
NO-JIRA: Update OIDC e2e test to expect admission-time validation error of invalid CEL expression #797
API-1835: fix integration tests #795
Full changelog

cluster-autoscaler

OCPBUGS-62383: Updating ose-vertical-pod-autoscaler-container image to be consistent with ART for 4.21 #383
OCPBUGS-62477: Updating atomic-openshift-cluster-autoscaler-container image to be consistent with ART for 4.21 #384
NO-JIRA: Remove OWNERS automation preamble #382
Full changelog

cluster-autoscaler-operator

OCPBUGS-62589: Updating ose-cluster-autoscaler-operator-container image to be consistent with ART for 4.21 #354
AUTOSCALE-384: Add “cordon node before terminating” option to cluster autoscaler resource #356
Full changelog

cluster-baremetal-operator

OCPBUGS-61477: Enable runtime extraction of aarch64 images #508
OCPBUGS-62577: Updating ose-cluster-baremetal-operator-container image to be consistent with ART for 4.21 #507
Full changelog

cluster-bootstrap

OCPBUGS-62558: Updating ose-cluster-bootstrap-container image to be consistent with ART for 4.21 #120
Full changelog

cluster-capi-controllers

OCPBUGS-62579: Updating ose-cluster-api-container image to be consistent with ART for 4.21 #249
Full changelog

cluster-capi-operator

OCPCLOUD-2999: AWSMachine status conversion and syncing #372
OCPCLOUD-3104: manifests-gen: re-enable conversion, validating and mutating webhook configurations #389
OCPCLOUD-3104: Fix v1beta2 condition setting #385
OCPCLOUD-2709: Implement MAPI2CAPI conversion of loadbalancers #348
OCPBUGS-62570: Updating ose-cluster-capi-operator-container image to be consistent with ART for 4.21 #357
OCPCLOUD-2995: Machine status conversion and syncing #365
NO-JIRA: hack/test.sh use eval for starting ginkgo so GINKO_EXTRA_ARGS having whitespaces works #380
OCPCLOUD-2641: Validate creation of Machine API Machines #368
OCPBUGS-62620: kubeconfig controller: do not error on token secret not yet populated #373
NO-JIRA: lint: add aliases for machine api’s and controller-runtime log #367
OCPCLOUD-2992: refactor: split machine migration testing into multiple files #364
NO-JIRA: machine_sync: assorted fixes #370
Full changelog

cluster-cloud-controller-manager-operator

OCPBUGS-62585: Updating ose-cluster-cloud-controller-manager-operator-container image to be consistent with ART for 4.21 #414
OCPBUGS-51305: ccm: disable unused secure-serving port and webhook #415
Full changelog

cluster-config-api

OCPBUGS-63311: config/v1/types_cluster_version: Tighten force and rollback warnings #2539
CORENET-6005: network, virt: graduate preconfigured UDN addresses feature gate #2496
MCO-1861: Promote ManagedBootImagesvSphere feature gate to default #2529
MCO-1873: promote ManagedBootImagesAzure to default #2526
OCPBUGS-60457: payload-command: remove authentication CR from hypershift payload #2523
OCPSTRAT-2371: Update to Kubernetes v1.34.1 #2427
CNTRLPLANE-1576: add event-ttl configuration to kube-apiserver #2520
CNTRLPLANE-1614: add event-ttl feature gate #2525
: promote InsightConfigAPI and OnDemandDataGather to v1 #2448
Switch to slices stable sort on manifest merging #2524
Use separate serialization linting config for Machine API provider types #2522
Add initial AI api-review configuration #2489
Support AMD SEV-SNP on AWS #2424
MCO-1805: MCO-1806: Add ManagedBootImagesCPMS feature gate & CPMS type to ManagedBootImages API #2396
OCPBUGS-62482: Updating ose-cluster-config-api-container image to be consistent with ART for 4.21 #2513
OCPBUGS-55649: Remove SetEIPForNLBIngressController feature gate #2501
OCPBUGS-61382, STOR-2533: move VolumeAttributesClass to GA #2471
Promote BYO OIDC features #2454
OCPBUGS-55673: Remove IngressControllerLBSubnetsAWS featuregate #2400
OCPBUGS-62068: NodeSwap Feature Gate usage to be removed #2494
Full changelog

cluster-config-operator

OCPBUGS-62330: Updating ose-cluster-config-operator-container image to be consistent with ART for 4.21 #450
Full changelog

cluster-control-plane-machine-set-operator

OCPBUGS-62588: Updating ose-cluster-control-plane-machine-set-operator-container image to be consistent with ART for 4.21 #369
Full changelog

cluster-csi-snapshot-controller-operator

Updating ose-cluster-csi-snapshot-controller-operator-container image to be consistent with ART for 4.21 #245
Full changelog

cluster-dns-operator

NE-2138: Bump cluster-dns-operator to Kubernetes 1.33 for 4.21 #448
Full changelog

cluster-etcd-operator

OCPBUGS-63240: [TNF] Fix job controller startup reliability with retry and degraded status #1500
OCPEDGE-1885, OCPEDGE-2088: Updated state transitions & tests for TNF setup job #1481
OCPBUGS-60273: Ensure revision.json persists on ungraceful shutdown #1494
NO-JIRA: use scrapeClass for service monitors #1497
NO-JIRA: add runbook urls for alerting rules #1496
NO-JIRA: feat: update the ip parsing for the nodes #1479
OCPEDGE-2183: Updating Quorum detection logic to absolve TNF of quorum loss reports. #1483
NO-JIRA: remove etcd-backup-server from static pod lists #1492
CNTRLPLANE-1315: Add OpenShift Tests Extension (OTE) for cluster-etcd-operator #1488
OCPBUGS-62518: Updating cluster-etcd-operator-container image to be consistent with ART for 4.21 #1489
And 1 elided commits (e.g. from squash or rebase merges)
Full changelog

cluster-image-registry-operator

OCPBUGS-62573: Updating ose-cluster-image-registry-operator-container image to be consistent with ART for 4.21 #1256
Full changelog

cluster-ingress-operator

NE-1334: Enhancement to add brew and stage secrets for pre-release image testing #1291
OCPBUGS-43919: desiredWildcardDNSRecord: Check for nil LB field #1189
OCPBUGS-62400: Updating ose-cluster-ingress-operator-container image to be consistent with ART for 4.21 #1286
NE-1334: Script to install ossm pre-release operator and run GWAPI e2e tests #1283
Full changelog

cluster-kube-apiserver-operator

OCPSTRAT-2371: Update to Kubernetes v1.34.1 #1939
OCPNODE-3758: alpha/beta apis for DRA should not be enabled in 1.34 #1932
OCPBUGS-60045: Bump library-go to latest master #1928
OCPBUGS-62450: Updating ose-cluster-kube-apiserver-operator-container image to be consistent with ART for 4.21 #1931
NO-JIRA: Add priority field to prevent early shutdown #1915
NO-ISSUE: Use scrapeClass for service monitors #1930
OCPSTRAT-2371: MutatingAdmissionPolicy e2es depend on both v1alpha1 and v1beta1 of admissionregistration.k8s.io being served in k8 1.34 #1927
Full changelog

cluster-kube-cluster-api-operator

OCPBUGS-57562: Updating ose-cluster-kube-cluster-api-operator-container image to be consistent with ART for 4.20 #58
Full changelog

cluster-kube-controller-manager-operator

OCPSTRAT-2371: Update to Kubernetes v1.34.1 #888
no-jira: Add priority field to prevent early shutdown #865
CNTRLPLANE-1544: Enable user namespaces for the operator #886
NO-ISSUE: Use scrapeClass for service monitors #880
OCPBUGS-62408: Updating ose-cluster-kube-controller-manager-operator-container image to be consistent with ART for 4.21 #885
Full changelog

cluster-kube-scheduler-operator

OCPSTRAT-2371: Update to Kubernetes v1.34.1 #583
no-jira: Add priority field to prevent early shutdown #572
CNTRLPLANE-1544: manifests: Align user namespaces for the operator #581
CNTRLPLANE-1544: Enable user namespace for the operator #580
OCPBUGS-62609: Updating ose-cluster-kube-scheduler-operator-container image to be consistent with ART for 4.21 #579
NO-ISSUE: Use scrapeClass for service monitors #578
Full changelog

cluster-kube-storage-version-migrator-operator

OCPBUGS-62444: Updating ose-cluster-kube-storage-version-migrator-operator-container image to be consistent with ART for 4.21 #132
Full changelog

cluster-machine-approver

OCPBUGS-62583: NO-JIRA: Updating ose-cluster-machine-approver-container image to be consistent with ART for 4.21 #277
Full changelog

cluster-monitoring-operator

OCPBUGS-62276: add tls configuration for the monitoring plugin deployment #2706
NO-JIRA: [bot] Synchronize versions of the downstream components #2705
OCPBUGS-62972: enhance case 66736 #2708
NO-ISSUE: Update jsonnet dependencies #2696
OCPBUGS-62160: Remove AlertManager endpoints when disabled #2684
NO-JIRA: [bot] Synchronize versions of the downstream components #2703
MON-4395: Bump prometheus-operator to v0.86.0 #2698
NO-ISSUE: set openshift-state-metrics as default container #2693
OCPBUGS-61661: Remove cluster from non-multicluster dashboards #2679
MON-4384: adding Blackwell GPU device to accelerators configmap #2689
NO-ISSUE: chore: remove image locations in assets #2683
NO-ISSUE: [bot] Update jsonnet dependencies #2687
NO-ISSUE: chore: remove mentions of prometheus Adapter #2682
OCPBUGS-15430: remove Kubernetes API alerting rules #2671
NO-JIRA: chore: bump jsonnet dependencies #2649
Full changelog

cluster-network-operator

CORENET-6423: api, l2udn: subnets must be masked #2808
CORENET-6311: Skip running _stackmanager for libreswan 5.3+ #2787
OCPBUGS-62457: Updating cluster-network-operator-container image to be consistent with ART for 4.21 #2807
OCPBUGS-54806: Add recording rules for UDN telemetry #2697
OCPBUGS-61215: Tweak iptables-alerter to try to avoid crictl bug #2802
Full changelog

cluster-node-tuning-operator

NO-ISSUE: pkg/metrics/server: Log bind address #1411
OCPBUGS-62839: E2E: Add test cases related to schedulable control plane nodes #1405
OCPBUGS-62835: E2E: llc: make sure to remove any trailing newspaces #1407
OCPBUGS-62153: E2E: skip SMT disabled test when L3 cache spans entire NUMA node #1397
OCPBUGS-62605: e2e: refactor GetSMTLevel to remove Gomega assertions #1399
OCPBUGS-62578: Updating cluster-node-tuning-operator-container image to be consistent with ART for 4.21 #1391
Full changelog

cluster-olm-operator

OPRUN-4207: Update feature-gate processing to support disabled features #144
NO-ISSUE: Remove conditionals for cp-manifests use #142
OPRUN-4079: Use helm to generate manifests #140
Full changelog

cluster-openshift-apiserver-operator

OCPBUGS-62500: Updating ose-cluster-openshift-apiserver-operator-container image to be consistent with ART for 4.21 #626
Full changelog

cluster-policy-controller

OCPBUGS-62440: Updating ose-cluster-policy-controller-container image to be consistent with ART for 4.21 #169
Full changelog

cluster-samples-operator

OCPBUGS-62409: Updating ose-cluster-samples-operator-container image to be consistent with ART for 4.21 #651
Full changelog

cluster-storage-operator

STOR-2523: Add hypershift managed-by labels for csi driver operators #627
OCPBUGS-62669: Move metrics to vsphere driver #625
OCPBUGS-60637: remove static value for runAsUser in securityContext #619
OCPBUGS-62421: Updating ose-cluster-storage-operator-container image to be consistent with ART for 4.21 #624
OCPBUGS-62172: Add app label to Manila deployment #628
OCPBUGS-61112: add Azure Disk CSI driver SA name to CredentialsRequest #618
STOR-2297: remove oVirt code from CSO #617
Full changelog

cluster-update-keys

OCPBUGS-62464: Updating ose-cluster-update-keys-container image to be consistent with ART for 4.21 #86
Full changelog

cluster-version-operator

OCPBUGS-61872: Add ClusterVersionOperator manifests to TechPreviewNoUpgrade clusters #1232
OCPBUGS-62861: temporarily disable metrics auth for hypershift clusters #1243
OTA-1627: pkg/cincinnati: Centralize release metadata parsing #1231
NO-JIRA: Move myself to emeritus #1239
OCPBUGS-62416: Updating cluster-version-operator-container image to be consistent with ART for 4.21 #1237
OTA-1585: test: Rename an existing test to comply with the OTE integration guide #1235
Full changelog

configmap-reloader

OCPBUGS-62503: Updating configmap-reload-container image to be consistent with ART for 4.21 #74
Full changelog

console

OCPBUGS-62593: Updating openshift-enterprise-console-container image to be consistent with ART for 4.21 #15542
CONSOLE-4615: Update DefaultList to use ResourceDataView #15560
OCPBUGS-61660: Fix Bare Metal Hosts nav item #15609
CONSOLE-4603: Migrate enzyme “packages/console-dynamic-plugin-sdk” unit tests to Re… #15540
OCPBUGS-61767: Duplicate CRs are shown as Operand instances in operator uninstallation modal #15557
CONSOLE-4820: Migrate olmv0 to dynamic #15566
OCPBUGS-33879: use tenancy path for project scoped status card #15585
OCPBUGS-62947: bump dompurify to latest #15586
CONSOLE-4819: Migrate container-security to dynamic #15565
CONSOLE-4602: Migrate enzyme “packages/console-app” unit tests to React Testing Library #15514
OCPBUGS-60603: Add bearer token file configuration to oc-environment script #15521
OCPBUGS-62315: Correct the width of the cluster config toolbar filter input #15546
CONSOLE-4795, CONSOLE-4797, CONSOLE-4801: Migrate some static extensions to dynamic #15552
CONSOLE-4804: Migrate TopologyCreateConnector to dynamic #15549
CONSOLE-4800: Migrate HorizontalNavTab to dynamic #15553
OCPBUGS-59529: Prevent the topology context menu items from truncating #15524
CONSOLE-4798: Migrate StorageClassProvisioner to dynamic #15550
OPRUN-4086: Add ClusterCatalog controller #15466
NO-JIRA: chore(OWNERS): remove Mylanos from OWNERS #15559
CONSOLE-4332: Update the secrets forms to use PF components #15513
OCPBUGS-62313: Returning from any Secret Create page does not return to secret page #15543
CONSOLE-4684: Refactor machine-set modals #15484
OCPBUGS-62281: InsecureSkipVerify to true for results proxy endpoint in off-cluster #14888
CONSOLE-4808: update resource-log.cy.ts #15539
And 2 elided commits (e.g. from squash or rebase merges)
Full changelog

console-operator

OCPBUGS-59939: Bumped to latest console-operator version #1055
OCPBUGS-62512: Updating openshift-enterprise-console-operator-container image to be consistent with ART for 4.21 #1050
OCPBUGS-61432: fix(oidc): fix OIDCClientSecretGet condition #1052
Full changelog

container-networking-plugins, containernetworking-plugins-microshift

no-jira: Update OWNERS #204
Full changelog

coredns

NO-JIRA: Updating coredns-container image to be consistent with ART for 4.21 #154
Full changelog

csi-external-attacher

OCPBUGS-61394: UPSTREAM: 682: Skip VolumeAttachments of other drivers #88
Full changelog

csi-external-provisioner

OCPBUGS-62541: Updating csi-provisioner-container image to be consistent with ART for 4.21 #116
Full changelog

csi-external-resizer

OCPBUGS-62504: Updating ose-csi-external-resizer-container image to be consistent with ART for 4.21 #178
Full changelog

csi-external-snapshotter, csi-snapshot-controller

OCPBUGS-62423: Updating ose-csi-snapshot-controller-container image to be consistent with ART for 4.21 #188
Full changelog

csi-livenessprobe

OCPBUGS-62403: Updating csi-livenessprobe-container image to be consistent with ART for 4.21 #77
Full changelog

csi-node-driver-registrar

OCPBUGS-60108: update log level verbosity to not clutter logs #86
OCPBUGS-62506: Updating csi-node-driver-registrar-container image to be consistent with ART for 4.21 #85
Full changelog

docker-builder

OCPBUGS-62340: Updating openshift-enterprise-builder-container image to be consistent with ART for 4.21 #481
Full changelog

docker-registry

OCPBUGS-62576: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.21 #448
Full changelog

etcd

OCPBUGS-62338: Updating ose-etcd-container image to be consistent with ART for 4.21 #342
Full changelog

gcp-workload-identity-federation-webhook

OCPBUGS-62591: Updating gcp-workload-identity-federation-webhook-container image to be consistent with ART for 4.21 #10
Full changelog

haproxy-router

OCPBUGS-62501: Updating ose-haproxy-router-base-container image to be consistent with ART for 4.21 #679
OCPBUGS-62555: Updating openshift-enterprise-haproxy-router-container image to be consistent with ART for 4.21 #680
Full changelog

hypershift

OCPBUGS-63172: control-plane-operator/…/ingress-operator/deployment: Declare a metrics port #7052
OCPBUGS-63215: fix: hosted cluster CRD compatibility with ocp 4.15 #7069
CNTRLPLANE-1673: feat(claude): add /test-tag-pipeline command #7062
NO-JIRA: Configure team marketplace for openshift-eng/ai-helpers plugins #7068
OCPBUGS-63194: fix(konflux): correct ADDITIONAL_BASE_IMAGES parameter typo in tag pipeline #7064
OCPBUGS-61881: Red Hat Konflux update hypershift-gomaxprocs-webhook #7063
OCPBUGS-63194: fix(konflux): fix tag pipeline EC failures #7060
OCPBUGS-55751: Fix Konflux tag pipeline template variable substitution #6910
CNTRLPLANE-1620: feat(gomaxprocs-webhook): introduce admission webhook to auto-set GOMAXPROCS #6994
OCPBUGS-63148: bump Konflux build images #7055
CNTRLPLANE-1615: Add repo metrics tool for tracking AI-assisted commits #6983
CNTRLPLANE-980: feat(api): Validation for hc.status.configuration.authentication status #6883
OCPBUGS-61829: resolve initContainer permission issue after node reboot #6990
NO-JIRA: test: update external-oidc e2e tests to dynamically determine tests to run #6924
NO-JIRA: migrate renovate config #7029
CNTRLPLANE-1643: implement multi-branch strategy with security-focused release management #7023
CNTRLPLANE-1641: update Tekton tasks to latest trusted versions #6998
OCPBUGS-62172: Add OpenStack node drivers to allowed non-read-only root filesystem containers #6946
OCPBUGS-62863: feat(cmd): collect ServiceMonitor and PodMonitor resources in dump #6970
NO-JIRA: chore(ai): add ability for jira-solve to save a plan spec first #6995
CNTRLPLANE-1493: Add Claude command for automated Konflux task updates #6921
CNTRLPLANE-1484: Expose cluster autoscaler metrics in HCP #6902
CNTRLPLANE-1582: Prevent azure cluster destroy command from deleting managed/main resource group #6956
CNTRLPLANE-1543: fix(aws): use clean image for placeholder nodes #6935
CNTRLPLANE-1468: feat(install): add command line argument for ImagePullPolicy configuration #6875
NO-JIRA: feat(claude): add e2e-analyze command for CI failure analysis #6737
CNTRLPLANE-1374: feat(azure): add setup scripts for self-managed Azure hosted clusters #6752
NO-JIRA: chore(ai): configure all agents to inherit model configuration #6906
CNTRLPLANE-1332: docs(azure): add self-managed Azure HyperShift overview guide #6948
CNTRLPLANE-1432: Make PSA test conditional on OpenShiftPodSecurityAdmission feature gate #6923
CNTRLPLANE-1581: feat(azure): relax API to make externalDNS optional for self-managed clusters #6951
OCPBUGS-62446: fix(hcco): add retry mechanism for HCP retrieval to handle transient connectivity issues #6918
NO-JIRA: docs(jira-solve): require godoc comments and unit tests for new functions #6957
OCPBUGS-60637: feat(cpo): add UID security context to CSO deployment #6786
OCPBUGS-62407: chore(build): update container images to 4.21 #6936
NO-JIRA: Add openstack-reviewers, openstack-approvers #6911
GCP-96: add GCPPlatform feature gate #6929
CNTRLPLANE-1332: docs(readme): correct spelling mistake #6943
CNTRLPLANE-1332: docs(azure): add self-managed cluster setup documentation #6808
OCPBUGS-61245: Fix driver-config ConfigMap content flapping due to random ordering #6907
CNTRLPLANE-1545: docs(commands): improve jira-solve command with logical commit organization #6937
NO-JIRA: chore(ci): update Konflux Tekton tasks to latest trusted versions #6928
OCPBUGS-62328: Add missing svc-kubeconfig mount to CAPO Deployment #6909
OCPBUGS-62324: Fix test-e2e annotations flag parsing #6908
AUTOSCALE-322: fix karpenter token secret leak #6790
CNTRLPLANE-980: feat(api): add hc.status.configuration.authentication status field #6261
NO-JIRA: fix(e2e): extend ValidateHostedClusterConditions timeout #6913
KFLUXSPRT-5246: update base images from RHEL9 ELS to UBI9 minimal 9.4 #6916
OCPBUGS-62172: Add Manila, Cinder to list of pods allowed readOnlyRootFileSystem=false #6885
NO-JIRA: fix(test): support external oidc settings on non-aws platform #6754
NO-JIRA: chore(ai): ensure jira-solve run make pre-commit #6901
Full changelog

ibm-cloud-controller-manager

OCPBUGS-62342: Updating ose-ibm-cloud-controller-manager-container image to be consistent with ART for 4.21 #86
Full changelog

ibm-vpc-block-csi-driver

Updating ose-ibm-vpc-block-csi-driver-container image to be consistent with ART for 4.21 #112
Full changelog

ibm-vpc-block-csi-driver-operator

OCPBUGS-62375: Updating ose-ibm-vpc-block-csi-driver-operator-container image to be consistent with ART for 4.21 #156
Full changelog

ibmcloud-cluster-api-controllers

OCPBUGS-62486: Updating ose-ibmcloud-cluster-api-controllers-container image to be consistent with ART for 4.21 #130
Full changelog

ibmcloud-machine-controllers

OCPBUGS-62491: Updating ose-ibmcloud-machine-controllers-container image to be consistent with ART for 4.21 #71
Full changelog

insights-operator

CCXDEV-15577: retry mechanism for network error #1161
NO-JIRA: remove CRD manifests #1156
CCXDEV-15551: Decouple CRD storage specs #1157
OCPBUGS-60870: The Gather Job did not check the current configuration before running #1154
OCPBUGS-61893: set extractor as default container #1141
OCPBUGS-62215: operator is not set as degraded when failed #1151
Full changelog

insights-runtime-exporter, insights-runtime-extractor

OCPBUGS-62351: Updating ose-insights-runtime-exporter-container image to be consistent with ART for 4.21 #53
OCPBUGS-62433: Updating ose-insights-runtime-extractor-container image to be consistent with ART for 4.21 #54
Full changelog

kube-metrics-server

OCPBUGS-62397: Updating ose-kube-metrics-server-container image to be consistent with ART for 4.21 #47
Full changelog

kube-state-metrics

OCPBUGS-62356: Updating kube-state-metrics-container image to be consistent with ART for 4.21 #125
Full changelog

kube-storage-version-migrator

OCPBUGS-62566: Updating ose-kube-storage-version-migrator-container image to be consistent with ART for 4.21 #234
Full changelog

machine-api-operator

OCPBUGS-62333: Updating ose-machine-api-operator-container image to be consistent with ART for 4.21 #1421
Full changelog

machine-config-operator

OCPBUGS-62376: Updating ose-machine-config-operator-container image to be consistent with ART for 4.21 #5316
OCPBUGS-52302: MCO-1713: Update MachineConfigNode resource to include on cluster image mode fields #5282
OCPBUGS-54682: Fix - NetworkManager restart or crash renders br-ex unusable #5304
OCPNODE-3747: Disable Swap mode in Kubelet and enable drop-in directory #5294
OCPEDGE-2188: embed fencing validator into TNF MCO #5285
NO-JIRA: shiftstack: Update OWNERS #5334
OCPBUGS-62510: Skip rpm-ostree local rebase if no PIS #5333
OCPBUGS-62493: Only fire OSImageURLOverridden and set metrics on changes #5319
MCO-1844: Remove MissingMachineConfig Alert #5261
MCO-1685: Add mco-sanitize utility main logic #5303
OCPBUGS-59968: Cert Controller should live fetch SAN IPs during cert rotation #5245
OCPBUGS-62341: Ensure the node passed to RunCordonOrUncordon comes from the latest updated state #5305
OCPBUGS-60805: configure-ovs: work around a Cisco switch issue #5274
MCO-408: Add OpenShift-native access to change logLevel for MachineConfigOperator components #5291
OCPBUGS-42303: Networking: reset ovn-remote config and allow ovnkube controller to s… #5123
Full changelog

machine-os-images

OCPBUGS-61477: Acquire aarch64 ISO at runtime #67
OCPBUGS-56049: Force rebuild for OCP 4.21 #66
OCPBUGS-62596: Updating ose-machine-os-images-container image to be consistent with ART for 4.21 #69
Full changelog

monitoring-plugin

OU-1033: close the first dropdown when deselecting incident #599
OU-1032: resolve stale Redux state bug in incidents time range calculation #598
OCPBUGS-63056, OCPBUGS-63061: Improve alignment with console SDK #600
OU-1030: revert most of my previous changes & avoid flickering when chang… #596
OU-995: automation monitoring testing namespace level #594
OU-1024: Add translations for all strings in Incidents page #570
OU-1022: recalculate incident x values when filtering #589
OU-1011: Display determistic start and end dates #585
OU-999: automation monitoring plugin image injection and kubevirt installation cleanup working #590
OCPBUGS-62276: allow additional TLS config #580
OCPBUGS-62454: Updating monitoring-plugin-container image to be consistent with ART for 4.21 #566
OU-1011: Render short-lived incidents and alerts #581
OU-1016: avoid displaying stale alerts data when selecting another incident detail #573
OBSINTA-789: Sort alerts by start time #577
NO-JIRA: fix handle empty queries when removing incident filters #574
NO-JIRA: Fix tooltip vertical position #576
OU-986: automation removing uncaught exception #575
OBSINTA-789: Fix alert loading and processing #569
OU-1025: keep alerts populated for the incident, when the graph is hidden… #572
NO-JIRA: chore: add unit test command and dependencies #571
OBSINTA-857: Cypress add SKIP_ALL_INSTALL #568
NO-JIRA: fix hermetic builds #564
OBSINTA-858: Cypress incidents incident traversing robustness #556
OBSINTA-858: Cypress incidents mocking metric name change workaround #553
COO-1134: fix: update vulnerable dependencies #561
NO-JIRA: Update .gitignore (Cypress specific) #558
OU-1011: REVERT add a 5 minute to the first alert timestamp #559
Full changelog

multus-admission-controller

OCPBUGS-62412: Updating ose-multus-admission-controller-container image to be consistent with ART for 4.21 #110
Full changelog

must-gather

OSSM-10530: add Istio/Gateway API gather scripts #503
OCPBUGS-62551: Updating ose-must-gather-container image to be consistent with ART for 4.21 #507
Full changelog

network-interface-bond-cni

OCPBUGS-62415: Updating ose-network-interface-bond-cni-container image to be consistent with ART for 4.21 #97
Full changelog

network-tools

OCPBUGS-62553: Updating ose-network-tools-container image to be consistent with ART for 4.21 #162
NO-JIRA:Add two new team members #163
NO-JIRA: Add Marty P to bug tooling #161
Full changelog

networking-console-plugin

CNV-60063: fixing the Create ClusterUserDefinedNetwork form appearance #280
CNV-62168: Typos in Networking Pages #277
CNV-56937: Hiding the option to create cluster user defined networks or non-priv users, allowing the option to create CUDN for users with access not just admin #284
CNV-56937: Hiding the option to create cluster user defined networks or non-priv users #283
CNV-61569: Mark OVN K8s secondary localnet as deprecated #282
OCPBUGS-62442: Updating networking-console-plugin-container image to be consistent with ART for 4.21 #279
CNV-70018: fix null error #278
Full changelog

oauth-apiserver

OCPBUGS-62612: (bugfix): useroauthaccesstokens: cast delete validation object to correct type for admission #148
Full changelog

oc-mirror

CLID-460: Adds a column with the actual implemented logic #1288
CLID-443: add mandatory –v1/–v2 flag #1284
OCPBUGS-60571: reject configurations with duplicated keys and/or entries #1275
CLID-430: migration to containers/container-libs #1255
OCPBUGS-55489: removes unintended exec permissions #1285
OCPBUGS-56398: Removes the clean up of logs directory #1289
OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 (missing files of pr 1280) #1283
OCPBUGS-62478: Updating oc-mirror-plugin-container image to be consistent with ART for 4.21 #1280
OCPBUGS-60929: generate the archive only after mirroring #1272
Full changelog

olm-catalogd, olm-operator-controller

NO-ISSUE: UPSTREAM: <carry>: fix cases 81696 and 74618 for product code changes #528
OPRUN-4181: UPSTREAM: <carry>: support singleown cases in disconnected #524
NO-ISSUE: Synchronize From Upstream Repositories #526
OPRUN-4194: Update OCP catalogs to v4.21 #518
NO-ISSUE: Synchronize From Upstream Repositories #523
OPRUN-4197: Upgrade OCP image from 4.20 to 4.21 #517
OPRUN-4134: Add 2 new tests for Single/Own Namespace install mode support #502
OPRUN-4199: [Default Catalog Tests] - Change logic to get ocp images from openshift/catalogd/manifests.yaml #521
OCPBUGS-62517: Synchronize from upstream #519
OPRUN-4176: Consolidate build API #514
OPRUN-4156: UPSTREAM: <carry>: support webhook case in disconnected #508
NO-ISSUE: Synchronize From Upstream Repositories #512
OPRUN-4176: Update does-not-exist and simple install to work i… #510
NO-ISSUE: Clean up cp-manifests #511
NO-ISSUE: Synchronize From Upstream Repositories #506
NO-ISSUE: UPSTREAM: <carry>: check kubeconfig only run-test and run-suite #507
NO-ISSUE: Fix VERSION replacement in catalog bindata #505
NO-ISSUE: Synchronize From Upstream Repositories #498
OCPBUGS-62753: for incompatible test add func to wait SA creation #501
NO-ISSUE: Synchronize From Upstream Repositories #497
OPRUN-4169: OTE building controller image #483
OPRUN-4080: Remove kustomize manifests from images and repo #494
NO-ISSUE: Synchronize From Upstream Repositories #493
OCPBUGS-62372: Updating ose-olm-catalogd-container image to be consistent with ART for 4.21 #491
NO-ISSUE: Synchronize From Upstream Repositories #492
OCPBUGS-62370: Updating ose-olm-operator-controller-container image to be consistent with ART for 4.21 #490
OCPQE-30671: UPSTREAM: <carry>: migrate more cases from tests-private #488
NO-ISSUE: Synchronize From Upstream Repositories #489
Full changelog

openshift-apiserver

OCPBUGS-62516: Updating ose-openshift-apiserver-container image to be consistent with ART for 4.21 #560
Full changelog

openshift-state-metrics

OCPBUGS-62431: Updating openshift-state-metrics-container image to be consistent with ART for 4.21 #126
Full changelog

openstack-cinder-csi-driver, openstack-cloud-controller-manager

OCPBUGS-62544: Updating ose-openstack-cloud-controller-manager-container image to be consistent with ART for 4.21 #352
OCPBUGS-62575: Updating ose-openstack-cinder-csi-driver-container image to be consistent with ART for 4.21 #350
NO-JIRA: shiftstack: Update OWNERS #353
Full changelog

openstack-cinder-csi-driver-operator

OCPBUGS-62404: Updating ose-openstack-cinder-csi-driver-operator-container image to be consistent with ART for 4.21 #438
STOR-1945: STOR-2056: add Azure File NFS test manifest #445
OCPBUGS-62374: Updating ose-azure-file-csi-driver-operator-container image to be consistent with ART for 4.21 #437
MULTIARCH-5554: update smb-csi-driver-operator support to add ppc64le #428
OCPBUGS-62427: Updating ose-azure-disk-csi-driver-operator-container image to be consistent with ART for 4.21 #439
OCPBUGS-62348: Updating ose-aws-ebs-csi-driver-operator-container image to be consistent with ART for 4.21 #436
OCPBUGS-61955: Add withCABundleDaemonSetHook() to AWS EFS operator #433
Full changelog

openstack-cluster-api-controllers

OCPBUGS-62567: Updating openstack-cluster-api-controllers-container image to be cons… #379
NO-JIRA: Fix internal vendoring #378
NO-JIRA: shiftstack: Update OWNERS #377
Full changelog

openstack-machine-api-provider

OCPBUGS-62473: Updating ose-machine-api-provider-openstack-container image to be consistent with ART for 4.21 #138
NO-JIRA: shiftstack: Update OWNERS #139
Full changelog

operator-framework-tools, operator-lifecycle-manager, operator-registry

OCPQE-30741: support opm cases #1121
OCPQE-30781: support hypershift binary #1119
OCPQE-30679: migrate more cases from tests-private to make layout #1118
OCPQE-29415: correct suite name #1117
OCPQE-29415: enhance filters to add more suites #1116
Full changelog

operator-marketplace

OPRUN-4198: Upgrade deps to have compatible k8s version #676
OPRUN-4198: upgraded github.com/openshift/api, github.com/openshift/library-go and ginkgo #677
NO-ISSUE: Update Dockerfile.okd to use OCP image 4.21 #678
OCPBUGS-62384: Updating marketplace-operator-container image to be consistent with ART for 4.21 #674
NO-ISSUE: Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.2 #661
Full changelog

ovn-kubernetes, ovn-kubernetes-microshift

CORENET-6160: DownStream Merge [10-10-2025] #2798
OCPBUGS-62545: Updating ose-ovn-kubernetes-container image to be consistent with ART for 4.21 #2771
CORENET-6055: Dockerfile: Unpin OVN and consume the latest from FDP. #2721
OCPBUGS-42303, OCPBUGS-56783: DownStream Merge [10-08-2025] #2790
OCPBUGS-62574: Updating ose-ovn-kubernetes-base-container image to be consistent with ART for 4.21 #2756
OCPBUGS-60468: DownStream Merge [09-23-2025] #2762
Full changelog

prom-label-proxy

OCPBUGS-62508: Updating prom-label-proxy-container image to be consistent with ART for 4.21 #386
Full changelog

prometheus

NO-ISSUE: [bot] Bump openshift/prometheus to v3.6.0 #278
NO-JIRA: update Prometheus to v3.6.0 #277
OCPBUGS-62401: Updating golang-github-prometheus-prometheus-container image to be consistent with ART for 4.21 #274
Full changelog

prometheus-alertmanager

OCPBUGS-62428: Updating golang-github-prometheus-alertmanager-container image to be consistent with ART for 4.21 #107
Full changelog

prometheus-config-reloader, prometheus-operator, prometheus-operator-admission-webhook

NO-JIRA: Bump openshift/prometheus-operator to v0.86.1 #345
MON-4395: Bump openshift/prometheus-operator to v0.86.0 #344
OCPBUGS-62448: Updating prometheus-config-reloader-container image to be consistent with ART for 4.21 #341
OCPBUGS-62542: Updating prometheus-operator-container image to be consistent with ART for 4.21 #342
Updating prometheus-operator-admission-webhook-container image to be consistent with ART for 4.21 #340
Full changelog

rhel-coreos, rhel-coreos-extensions

NO-JIRA: update the okd repo for 4.21 #1862
NO-JIRA: OWNERS: switch to joelcapitao #1861
Full changelog

route-controller-manager

OCPBUGS-62586: Updating ose-route-controller-manager-container image to be consistent with ART for 4.21 #65
NE-2169: Move annotations and metrics to a constants file #66
Full changelog

service-ca-operator

OCPBUGS-62377: Updating ose-service-ca-operator-container image to be consistent with ART for 4.21 #276
OCPBUGS-63124: Fix e2e-aws-operator e2e test failures #281
Full changelog

tests

MULTIARCH-5391: Add Disruptive ImageStreamImportMode Tests into a Disruptive Suite #30239
OCPBUGS-62359: Check more operatorsProgressing #30367
TRT-2275: some enhancement for e2e-analysis #30276
OCPBUGS-63149: revert https://github.com/openshift/origin/pull/30054 #30386
NO-JIRA: Combine global and command args in BackgroundRC #30382
NO-JIRA: MCO add GetAlerts to the Monitor thanos struct #30379
NO-JIRA: enhance-waitnodeready-util #30377
OCPBUGS-63040: Add imagestream update dryrun test #30357
OCPEDGE-1565: [TNF] Add double node failure recovery test #30370
NO-JIRA: implement WithoutKubeconf method to clear config path #30371
NO-JIRA: oc adm upgrade status: Record err and outputs #30151
NO-JIRA:I Fixing race condtion #30360
OCPBUGS-62552: Updating openshift-enterprise-tests-container image to be consistent with ART for 4.21 #30327
NO-JIRA: init lease-checker namespaces #30373
NO-JIRA: generate unique namespace names for UDN tests #30348
NO-JIRA: update namespace privilege check to use PSA label #30355
OCPBUGS-56281: gatewayapicontroller: Clean up resources when done #29900
NO-JIRA: another attempt at disabling blank issues #30369
NO-JIRA: Make it clear that we do not monitor GH issues #30368
NO-JIRA: Update OWNERS for compat_otp #30361
NO-ISSUE: Add webhook image for the olmv1 tests #30356
OTA-1637: ClusterOperators should not go Progressing only for cluster scaling #30297
OCPBUGS-60593: Skip oauth test for external control plane topology #30200
TRT-2351: Revert “NO-JIRA: Improve case execution time” #30363
TRT-2349: Revert “make TLS registry tests required” #30358
OCPNODE-3238: Add SigstoreImageVerificationPKI image policy validation tests #30315
TRT-2346: Fix not initializing adminRESTConfig #30345
OCPBUGS-60853: make TLS registry tests required #29074
TRT-1854: remove upstream annotation framework #30340
NO-JIRA: Filter preconfiguredIPs based on cluster IP family support #30338
NO-JIRA: Improve case execution time #30329
CORENET-6363: Add PreconfiguredUDNAddresses duplicate IP detection tests #30197
OCPBUGS-62701: Revert TRT-1854: remove upstream annotation framework #30337
Revert “Revert “NO-JIRA: Add olm into the known operator set”” #30325
NO-JIRA: BugFix- don’t modify finalArgs in Template func #30328
OCPNODE-3659: Not fail upgrade checks if all nodes are ready #30318
OCPBUGS-62249: Tweak Endpoints admission test for upcoming change #30304
MCO-1828: Remove pathological test in disruptive #30272
OCPBUGS-61196: Add test that the ServiceCIDR API is blocked #30234
NO-JIRA: oc adm upgrade status: Skip test in multihop update jobs #30150
MCO-1865: Update MCO tests to be in only one test suite each #30309
OCPBUGS-62474: CNTRLPLANE-1308: Enable OTE for OCM and OCM Operator #30270
TRT-1854: remove upstream annotation framework #30305
Revert “NO-JIRA: Add olm into the known operator set” #30313
NO-JIRA: Add olm into the known operator set #30308
MCO-1875: Bump timeout for vSphereBootimageUpdate tests #30288
NO-ISSUE: Automated - Update synthetic test data #30277
Full changelog

volume-data-source-validator

OCPBUGS-62367: Updating volume-data-source-validator-container image to be consistent with ART for 4.21 #5
Full changelog

Node Image Info

Loading node image info, this may take a while ...

Package List

cri-o-1.34.1-4.rhaos4.21.git5780ac7.el9
kernel-5.14.0-570.55.1.el9_6
openshift-kubelet-4.21.0-202510171627.p2.g96593f3.assembly.stream.el9
systemd-252-51.el9_6.2

Full list (539 packages)

NetworkManager-1:1.52.0-7.el9_6
NetworkManager-cloud-setup-1:1.52.0-7.el9_6
NetworkManager-libnm-1:1.52.0-7.el9_6
NetworkManager-ovs-1:1.52.0-7.el9_6
NetworkManager-team-1:1.52.0-7.el9_6
NetworkManager-tui-1:1.52.0-7.el9_6
WALinuxAgent-udev-2.7.0.6-11.el9_6.1
aardvark-dns-2:1.14.0-1.el9
acl-2.3.1-4.el9
adcli-0.9.2-1.el9
afterburn-5.7.0-1.el9
afterburn-dracut-5.7.0-1.el9
alternatives-1.24-2.el9
attr-2.5.1-3.el9
audit-3.1.5-4.el9
audit-libs-3.1.5-4.el9
authselect-1.2.6-3.el9
authselect-libs-1.2.6-3.el9
avahi-libs-0.8-22.el9_6.1
basesystem-11-13.el9
bash-5.1.8-9.el9
bash-completion-1:2.11-5.el9
bind-libs-32:9.16.23-31.el9_6
bind-license-32:9.16.23-31.el9_6
bind-utils-32:9.16.23-31.el9_6
binutils-2.35.2-63.el9
binutils-gold-2.35.2-63.el9
bootc-1.1.6-3.el9_6
bootupd-0.2.27-4.el9_6
bsdtar-3.5.3-6.el9_6
bubblewrap-0.4.1-8.el9_5
bzip2-1.0.8-10.el9_5
bzip2-libs-1.0.8-10.el9_5
c-ares-1.19.1-2.el9_4
ca-certificates-2024.2.69_v8.0.303-91.4.el9_4
checkpolicy-3.6-1.el9
chrony-4.6.1-1.el9
cifs-utils-7.1-2.el9
clevis-21-208.el9
clevis-dracut-21-208.el9
clevis-luks-21-208.el9
clevis-systemd-21-208.el9
cloud-utils-growpart-0.33-1.el9
composefs-1.0.8-1.el9
composefs-libs-1.0.8-1.el9
conmon-3:2.1.12-1.el9
conmon-rs-0.6.6-0.rhaos4.18.el9.1
console-login-helper-messages-0.21.3-1.el9
console-login-helper-messages-issuegen-0.21.3-1.el9
console-login-helper-messages-profile-0.21.3-1.el9
container-selinux-4:2.237.0-2.el9_6
containernetworking-plugins-1:1.6.2-2.el9_6
containers-common-2:1-117.el9_6
coreos-installer-0.24.0-3.el9_6
coreos-installer-bootinfra-0.24.0-3.el9_6
coreutils-8.32-39.el9
coreutils-common-8.32-39.el9
cpio-2.13-16.el9
cracklib-2.9.6-27.el9
cracklib-dicts-2.9.6-27.el9
cri-o-1.34.1-4.rhaos4.21.git5780ac7.el9
cri-tools-1.34.0-2.el9
criu-3.19-1.el9
criu-libs-3.19-1.el9
crun-1.23.1-2.el9_6
crypto-policies-20250128-1.git5269e22.el9
crypto-policies-scripts-20250128-1.git5269e22.el9
cryptsetup-2.7.2-3.el9_6.1
cryptsetup-libs-2.7.2-3.el9_6.1
curl-7.76.1-31.el9_6.1
cyrus-sasl-gssapi-2.1.27-21.el9
cyrus-sasl-lib-2.1.27-21.el9
dbus-1:1.12.20-8.el9
dbus-broker-28-7.el9
dbus-common-1:1.12.20-8.el9
dbus-libs-1:1.12.20-8.el9
device-mapper-9:1.02.202-6.el9
device-mapper-event-9:1.02.202-6.el9
device-mapper-event-libs-9:1.02.202-6.el9
device-mapper-libs-9:1.02.202-6.el9
device-mapper-multipath-0.8.7-35.el9_6.1
device-mapper-multipath-libs-0.8.7-35.el9_6.1
device-mapper-persistent-data-1.1.0-1.el9
diffutils-3.7-12.el9
dnf-4.14.0-25.el9
dnf-data-4.14.0-25.el9
dnsmasq-2.85-17.el9_6
dosfstools-4.2-3.el9
dracut-057-88.git20250311.el9_6
dracut-network-057-88.git20250311.el9_6
dracut-squash-057-88.git20250311.el9_6
e2fsprogs-1.46.5-7.el9
e2fsprogs-libs-1.46.5-7.el9
elfutils-debuginfod-client-0.192-6.el9_6
elfutils-default-yama-scope-0.192-6.el9_6
elfutils-libelf-0.192-6.el9_6
elfutils-libs-0.192-6.el9_6
ethtool-2:6.11-1.el9
expat-2.5.0-5.el9_6
file-5.39-16.el9
file-libs-5.39-16.el9
filesystem-3.16-5.el9
findutils-1:4.8.0-7.el9
firewalld-filesystem-1.3.4-9.el9_5
fstrm-0.6.1-3.el9
fuse-2.9.9-17.el9
fuse-common-3.10.2-9.el9
fuse-libs-2.9.9-17.el9
fuse-overlayfs-1.14-1.el9
fuse3-3.10.2-9.el9
fuse3-libs-3.10.2-9.el9
fwupd-1.9.26-1.el9
gawk-5.1.0-6.el9
gawk-all-langpacks-5.1.0-6.el9
gdbm-libs-1:1.23-1.el9
gdisk-1.0.7-5.el9
geolite2-city-20191217-6.el9
geolite2-country-20191217-6.el9
git-core-2.47.3-1.el9_6
glib2-2.68.4-16.el9_6.2
glibc-2.34-168.el9_6.23
glibc-common-2.34-168.el9_6.23
glibc-gconv-extra-2.34-168.el9_6.23
glibc-minimal-langpack-2.34-168.el9_6.23
glusterfs-6.0-57.4.el9
glusterfs-client-xlators-6.0-57.4.el9
glusterfs-fuse-6.0-57.4.el9
glusterfs-libs-6.0-57.4.el9
gmp-1:6.2.0-13.el9
gnupg2-2.3.3-4.el9
gnutls-3.8.3-6.el9_6.2
gobject-introspection-1.68.0-11.el9
gpgme-1.15.1-6.el9
grep-3.6-5.el9
groff-base-1.22.4-10.el9
gssproxy-0.8.4-7.el9
gzip-1.12-1.el9
hostname-3.23-6.el9
hwdata-0.348-9.18.el9
ignition-2.21.0-4.rhaos4.19.el9
ignition-grub-2.21.0-4.rhaos4.19.el9
ima-evm-utils-1.5-3.el9
info-6.7-15.el9
inih-49-6.el9
initscripts-service-10.11.8-4.el9
ipcalc-1.0.0-5.el9
iproute-6.11.0-1.el9
iproute-tc-6.11.0-1.el9
iptables-libs-1.8.10-11.el9_5
iptables-nft-1.8.10-11.el9_5
iputils-20210202-11.el9_6.3
iscsi-initiator-utils-6.2.1.9-1.gita65a472.el9
iscsi-initiator-utils-iscsiuio-6.2.1.9-1.gita65a472.el9
isns-utils-libs-0.101-4.el9
jansson-2.14-1.el9
jose-14-1.el9
jq-1.6-17.el9_6.2
json-c-0.14-11.el9
json-glib-1.6.6-1.el9
kbd-2.4.0-11.el9
kbd-legacy-2.4.0-11.el9
kbd-misc-2.4.0-11.el9
kernel-5.14.0-570.55.1.el9_6
kernel-core-5.14.0-570.55.1.el9_6
kernel-modules-5.14.0-570.55.1.el9_6
kernel-modules-core-5.14.0-570.55.1.el9_6
kernel-modules-extra-5.14.0-570.55.1.el9_6
kexec-tools-2.0.29-5.el9_6.2
keyutils-1.6.3-1.el9
keyutils-libs-1.6.3-1.el9
kmod-28-10.el9
kmod-libs-28-10.el9
kpartx-0.8.7-35.el9_6.1
krb5-libs-1.21.1-8.el9_6
less-590-5.el9
libacl-2.3.1-4.el9
libaio-0.3.111-13.el9
libarchive-3.5.3-6.el9_6
libassuan-2.5.5-3.el9
libatomic-11.5.0-5.el9_5
libattr-2.5.1-3.el9
libbasicobjects-0.1.1-53.el9
libblkid-2.37.4-21.el9
libbpf-2:1.5.0-1.el9
libbrotli-1.0.9-7.el9_5
libcap-2.48-9.el9_2
libcap-ng-0.8.2-7.el9
libcbor-0.7.0-5.el9
libcollection-0.7.0-53.el9
libcom_err-1.46.5-7.el9
libcomps-0.1.18-1.el9
libcurl-7.76.1-31.el9_6.1
libdaemon-0.14-23.el9
libdb-5.3.28-57.el9_6
libdhash-0.5.0-53.el9
libdnf-0.69.0-13.el9
libdnf-plugin-subscription-manager-1.29.45.1-1.el9_6
libeconf-0.4.1-4.el9
libedit-3.1-38.20210216cvs.el9
libev-4.33-6.el9
libevent-2.1.12-8.el9_4
libfdisk-2.37.4-21.el9
libffi-3.4.2-8.el9
libfido2-1.13.0-2.el9
libgcc-11.5.0-5.el9_5
libgcrypt-1.10.0-11.el9
libgomp-11.5.0-5.el9_5
libgpg-error-1.42-5.el9
libgudev-237-1.el9
libgusb-0.3.8-2.el9
libibverbs-54.0-1.el9
libicu-67.1-10.el9_6
libidn2-2.3.0-7.el9
libini_config-1.3.1-53.el9
libipa_hbac-2.9.6-4.el9_6.2
libjcat-0.1.6-3.el9
libjose-14-1.el9
libkcapi-1.4.0-2.el9
libkcapi-hmaccalc-1.4.0-2.el9
libksba-1.5.1-7.el9
libldb-4.21.3-14.el9_6
libluksmeta-9-12.el9
libmaxminddb-1.5.2-4.el9
libmicrohttpd-1:0.9.72-5.el9
libmnl-1.0.4-16.el9_4
libmodulemd-2.13.0-2.el9
libmount-2.37.4-21.el9
libndp-1.9-1.el9
libnet-1.2-7.el9
libnetfilter_conntrack-1.0.9-1.el9
libnfnetlink-1.0.1-23.el9_5
libnfsidmap-1:2.5.4-34.el9
libnftnl-1.2.6-4.el9_4
libnghttp2-1.43.0-6.el9
libnl3-3.11.0-1.el9
libnl3-cli-3.11.0-1.el9
libnvme-1.11.1-1.el9
libpath_utils-0.2.1-53.el9
libpcap-14:1.10.0-4.el9
libpkgconf-1.7.3-10.el9
libpsl-0.21.1-5.el9
libpwquality-1.4.4-8.el9
libref_array-0.1.5-53.el9
librepo-1.14.5-2.el9
libreport-filesystem-2.15.2-6.el9
librhsm-0.0.3-9.el9
libseccomp-2.5.2-2.el9
libselinux-3.6-3.el9
libselinux-utils-3.6-3.el9
libsemanage-3.6-5.el9_6
libsepol-3.6-2.el9
libsigsegv-2.13-4.el9
libslirp-4.4.0-8.el9
libsmartcols-2.37.4-21.el9
libsmbclient-4.21.3-14.el9_6
libsolv-0.7.24-3.el9
libss-1.46.5-7.el9
libssh-0.10.4-15.el9_6
libssh-config-0.10.4-15.el9_6
libsss_certmap-2.9.6-4.el9_6.2
libsss_idmap-2.9.6-4.el9_6.2
libsss_nss_idmap-2.9.6-4.el9_6.2
libsss_sudo-2.9.6-4.el9_6.2
libstdc++-11.5.0-5.el9_5
libtalloc-2.4.2-1.el9
libtasn1-4.16.0-9.el9
libtdb-1.4.12-1.el9
libteam-1.31-16.el9_1
libtevent-0.16.1-1.el9
libtirpc-1.3.3-9.el9
libtool-ltdl-2.4.6-46.el9
libunistring-0.9.10-15.el9
liburing-2.5-1.el9
libusbx-1.0.26-1.el9
libuser-0.63-16.el9
libutempter-1.2.1-6.el9
libuuid-2.37.4-21.el9
libuv-1:1.42.0-2.el9_4
libverto-0.3.2-3.el9
libverto-libev-0.3.2-3.el9
libwbclient-4.21.3-14.el9_6
libxcrypt-4.4.18-3.el9
libxml2-2.9.13-12.el9_6
libxmlb-0.3.10-1.el9
libyaml-0.2.5-7.el9
libzstd-1.5.5-1.el9
linux-firmware-20250812-151.4.el9_6
linux-firmware-whence-20250812-151.4.el9_6
lmdb-libs-0.9.29-3.el9
logrotate-3.18.0-9.el9
lsof-4.94.0-3.el9
lua-libs-5.4.4-4.el9
luksmeta-9-12.el9
lvm2-9:2.03.28-6.el9
lvm2-libs-9:2.03.28-6.el9
lz4-libs-1.9.3-5.el9
lzo-2.10-7.el9
mdadm-4.3-4.el9_5
mpfr-4.1.0-7.el9
nano-5.6.1-7.el9
ncurses-6.2-10.20210508.el9_6.2
ncurses-base-6.2-10.20210508.el9_6.2
ncurses-libs-6.2-10.20210508.el9_6.2
net-tools-2.0-0.64.20160912git.el9
netavark-2:1.14.1-1.el9_6
nettle-3.10.1-1.el9
newt-0.52.21-11.el9
nfs-utils-1:2.5.4-34.el9
nftables-1:1.0.9-3.el9
nmap-ncat-3:7.92-3.el9
nmstate-2.2.52-1.el9_6
npth-1.6-8.el9
nss-altfiles-2.18.1-20.el9
nvme-cli-2.11-6.el9_6
oniguruma-6.9.6-1.el9.6
openldap-2.6.8-4.el9
openshift-clients-4.21.0-202510110303.p2.g672ff62.assembly.stream.el9
openshift-kubelet-4.21.0-202510171627.p2.g96593f3.assembly.stream.el9
openssh-8.7p1-45.el9
openssh-clients-8.7p1-45.el9
openssh-server-8.7p1-45.el9
openssl-1:3.2.2-6.el9_5.1
openssl-fips-provider-3.0.7-6.el9_5
openssl-fips-provider-so-3.0.7-6.el9_5
openssl-libs-1:3.2.2-6.el9_5.1
openvswitch-selinux-extra-policy-1.0-39.el9fdp
openvswitch3.5-3.5.1-33.el9fdp
ose-aws-ecr-image-credential-provider-4.19.0-202508252101.p2.g425c1c5.assembly.stream.el9
ose-azure-acr-image-credential-provider-4.21.0-202510180155.p2.g1457693.assembly.stream.el9
ose-gcp-gcr-image-credential-provider-4.21.0-202510151957.p2.g0a0890a.assembly.stream.el9
ostree-2025.2-2.el9_6
ostree-libs-2025.2-2.el9_6
p11-kit-0.25.3-3.el9_5
p11-kit-trust-0.25.3-3.el9_5
pam-1.5.1-26.el9_6
passt-0^20250217.ga1e48a0-10.el9_6
passt-selinux-0^20250217.ga1e48a0-10.el9_6
passwd-0.80-12.el9
pciutils-3.7.0-7.el9
pciutils-libs-3.7.0-7.el9
pcre-8.44-4.el9
pcre2-10.40-6.el9
pcre2-syntax-10.40-6.el9
perl-AutoLoader-5.74-481.1.el9_6
perl-B-1.80-481.1.el9_6
perl-Carp-1.50-460.el9
perl-Class-Struct-0.66-481.1.el9_6
perl-Data-Dumper-2.174-462.el9
perl-Digest-1.19-4.el9
perl-Digest-MD5-2.58-4.el9
perl-Encode-4:3.08-462.el9
perl-English-1.11-481.1.el9_6
perl-Errno-1.30-481.1.el9_6
perl-Exporter-5.74-461.el9
perl-Fcntl-1.13-481.1.el9_6
perl-File-Basename-2.85-481.1.el9_6
perl-File-Path-2.18-4.el9
perl-File-Temp-1:0.231.100-4.el9
perl-File-stat-1.09-481.1.el9_6
perl-FileHandle-2.03-481.1.el9_6
perl-Getopt-Long-1:2.52-4.el9
perl-Getopt-Std-1.12-481.1.el9_6
perl-HTTP-Tiny-0.076-462.el9
perl-IO-1.43-481.1.el9_6
perl-IO-Socket-IP-0.41-5.el9
perl-IO-Socket-SSL-2.073-2.el9
perl-IPC-Open3-1.21-481.1.el9_6
perl-MIME-Base64-3.16-4.el9
perl-Mozilla-CA-20200520-6.el9
perl-NDBM_File-1.15-481.1.el9_6
perl-Net-SSLeay-1.94-1.el9
perl-POSIX-1.94-481.1.el9_6
perl-PathTools-3.78-461.el9
perl-Pod-Escapes-1:1.07-460.el9
perl-Pod-Perldoc-3.28.01-461.el9
perl-Pod-Simple-1:3.42-4.el9
perl-Pod-Usage-4:2.01-4.el9
perl-Scalar-List-Utils-4:1.56-462.el9
perl-SelectSaver-1.02-481.1.el9_6
perl-Socket-4:2.031-4.el9
perl-Storable-1:3.21-460.el9
perl-Symbol-1.08-481.1.el9_6
perl-Term-ANSIColor-5.01-461.el9
perl-Term-Cap-1.17-460.el9
perl-Text-ParseWords-3.30-460.el9
perl-Text-Tabs+Wrap-2013.0523-460.el9
perl-Time-Local-2:1.300-7.el9
perl-URI-5.09-3.el9
perl-base-2.27-481.1.el9_6
perl-constant-1.33-461.el9
perl-if-0.60.800-481.1.el9_6
perl-interpreter-4:5.32.1-481.1.el9_6
perl-libnet-3.13-4.el9
perl-libs-4:5.32.1-481.1.el9_6
perl-mro-1.23-481.1.el9_6
perl-overload-1.31-481.1.el9_6
perl-overloading-0.02-481.1.el9_6
perl-parent-1:0.238-460.el9
perl-podlators-1:4.14-460.el9
perl-subs-1.03-481.1.el9_6
perl-vars-1.05-481.1.el9_6
pigz-2.8-1.el9
pkgconf-1.7.3-10.el9
pkgconf-m4-1.7.3-10.el9
pkgconf-pkg-config-1.7.3-10.el9
podman-5:5.4.0-13.el9_6
policycoreutils-3.6-2.1.el9
policycoreutils-python-utils-3.6-2.1.el9
polkit-0.117-13.el9
polkit-libs-0.117-13.el9
polkit-pkla-compat-0.1-21.el9
popt-1.18-8.el9
procps-ng-3.3.17-14.el9
protobuf-c-1.3.3-13.el9
psmisc-23.4-3.el9
publicsuffix-list-dafsa-20210518-3.el9
python-unversioned-command-3.9.21-2.el9_6.2
python3-3.9.21-2.el9_6.2
python3-audit-3.1.5-4.el9
python3-chardet-4.0.0-5.el9
python3-cloud-what-1.29.45.1-1.el9_6
python3-dateutil-1:2.8.1-7.el9
python3-dbus-1.2.18-2.el9
python3-decorator-4.4.2-6.el9
python3-distro-1.5.0-7.el9
python3-dnf-4.14.0-25.el9
python3-dnf-plugin-versionlock-4.3.0-20.el9
python3-dnf-plugins-core-4.3.0-20.el9
python3-gobject-base-3.40.1-6.el9
python3-gobject-base-noarch-3.40.1-6.el9
python3-gpg-1.15.1-6.el9
python3-hawkey-0.69.0-13.el9
python3-idna-2.10-7.el9_4.1
python3-iniparse-0.4-45.el9
python3-inotify-0.9.6-25.el9
python3-libcomps-0.1.18-1.el9
python3-libdnf-0.69.0-13.el9
python3-librepo-1.14.5-2.el9
python3-libs-3.9.21-2.el9_6.2
python3-libselinux-3.6-3.el9
python3-libsemanage-3.6-5.el9_6
python3-pip-wheel-21.3.1-1.el9
python3-policycoreutils-3.6-2.1.el9
python3-pysocks-1.7.1-12.el9
python3-pyyaml-5.4.1-6.el9
python3-requests-2.25.1-10.el9_6
python3-rpm-4.16.1.3-37.el9
python3-setools-4.4.4-1.el9
python3-setuptools-53.0.0-13.el9_6.1
python3-setuptools-wheel-53.0.0-13.el9_6.1
python3-six-1.15.0-9.el9
python3-subscription-manager-rhsm-1.29.45.1-1.el9_6
python3-systemd-234-19.el9
python3-urllib3-1.26.5-6.el9
qemu-guest-agent-17:9.1.0-15.el9_6.9
quota-1:4.09-4.el9
quota-nls-1:4.09-4.el9
readline-8.1-4.el9
redhat-release-9.6-0.1.el9
redhat-release-eula-9.6-0.1.el9
rpcbind-1.2.6-7.el9
rpm-4.16.1.3-37.el9
rpm-build-libs-4.16.1.3-37.el9
rpm-libs-4.16.1.3-37.el9
rpm-ostree-2025.6-5.el9_6
rpm-ostree-libs-2025.6-5.el9_6
rpm-plugin-selinux-4.16.1.3-37.el9
rpm-plugin-systemd-inhibit-4.16.1.3-37.el9
rpm-sign-libs-4.16.1.3-37.el9
rsync-3.2.5-3.el9
runc-4:1.2.4-2.el9
s390utils-base-2:2.36.0-2.el9
s390utils-core-2:2.36.0-2.el9
s390utils-se-data-2:2.36.0-2.el9
samba-client-libs-4.21.3-14.el9_6
samba-common-4.21.3-14.el9_6
samba-common-libs-4.21.3-14.el9_6
sed-4.8-9.el9
selinux-policy-38.1.53-5.el9_6
selinux-policy-targeted-38.1.53-5.el9_6
setup-2.13.7-10.el9
sg3_utils-1.47-10.el9
sg3_utils-libs-1.47-10.el9
shadow-utils-2:4.9-12.el9
shadow-utils-subid-2:4.9-12.el9
shared-mime-info-2.1-5.el9
skopeo-2:1.18.1-2.el9_6
slang-2.3.2-11.el9
slirp4netns-1.3.2-1.el9
snappy-1.1.8-8.el9
socat-1.7.4.1-6.el9_6.1
sqlite-libs-3.34.1-8.el9_6
squashfs-tools-4.4-10.git1.el9
ssh-key-dir-0.1.4-1.el9
sssd-2.9.6-4.el9_6.2
sssd-ad-2.9.6-4.el9_6.2
sssd-client-2.9.6-4.el9_6.2
sssd-common-2.9.6-4.el9_6.2
sssd-common-pac-2.9.6-4.el9_6.2
sssd-ipa-2.9.6-4.el9_6.2
sssd-krb5-2.9.6-4.el9_6.2
sssd-krb5-common-2.9.6-4.el9_6.2
sssd-ldap-2.9.6-4.el9_6.2
sssd-nfs-idmap-2.9.6-4.el9_6.2
sssd-proxy-2.9.6-4.el9_6.2
stalld-1.20.4-1.el9_6
strace-6.12-1.el9
subscription-manager-1.29.45.1-1.el9_6
subscription-manager-rhsm-certificates-20220623-1.el9
sudo-1.9.5p2-10.el9_6.2
systemd-252-51.el9_6.2
systemd-journal-remote-252-51.el9_6.2
systemd-libs-252-51.el9_6.2
systemd-pam-252-51.el9_6.2
systemd-rpm-macros-252-51.el9_6.2
systemd-udev-252-51.el9_6.2
tar-2:1.34-7.el9
teamd-1.31-16.el9_1
tmux-3.2a-5.el9
toolbox-0.1.2-1.rhaos4.19.el9
tpm2-tools-5.2-4.el9
tpm2-tss-3.2.3-1.el9
tzdata-2025b-1.el9
unbound-libs-1.16.2-19.el9_6.1
usermode-1.114-6.el9
userspace-rcu-0.12.1-6.el9
util-linux-2.37.4-21.el9
util-linux-core-2.37.4-21.el9
veritysetup-2.7.2-3.el9_6.1
vim-minimal-2:8.2.2637-22.el9_6.1
virt-what-1.27-1.el9
which-2.21-30.el9_6
xfsprogs-6.4.0-5.el9
xz-5.2.5-8.el9_0
xz-libs-5.2.5-8.el9_0
yajl-2.1.0-25.el9
zlib-1.2.11-40.el9
zram-generator-0.3.2-7.el9
zstd-1.5.5-1.el9

Changed:

cri-o 1.34.0-4.rhaos4.21.git941066d.el9 → 1.34.1-4.rhaos4.21.git5780ac7.el9
cri-tools 1.34.0-1.el9 → 1.34.0-2.el9
iputils 20210202-11.el9_6.1 → 20210202-11.el9_6.3
kernel 5.14.0-570.49.1.el9_6 → 5.14.0-570.55.1.el9_6
kernel-core 5.14.0-570.49.1.el9_6 → 5.14.0-570.55.1.el9_6
kernel-modules 5.14.0-570.49.1.el9_6 → 5.14.0-570.55.1.el9_6
kernel-modules-core 5.14.0-570.49.1.el9_6 → 5.14.0-570.55.1.el9_6
kernel-modules-extra 5.14.0-570.49.1.el9_6 → 5.14.0-570.55.1.el9_6
libssh 0.10.4-13.el9 → 0.10.4-15.el9_6
libssh-config 0.10.4-13.el9 → 0.10.4-15.el9_6
nmstate 2.2.48-2.el9_6 → 2.2.52-1.el9_6
openshift-clients 4.21.0-202509251154.p2.gabe2393.assembly.stream.el9 → 4.21.0-202510110303.p2.g672ff62.assembly.stream.el9
openshift-kubelet 4.21.0-202509190529.p2.g5c9df33.assembly.stream.el9 → 4.21.0-202510171627.p2.g96593f3.assembly.stream.el9
ose-azure-acr-image-credential-provider 4.21.0-202509221901.p2.g69f6a48.assembly.stream.el9 → 4.21.0-202510180155.p2.g1457693.assembly.stream.el9
ose-gcp-gcr-image-credential-provider 4.21.0-202509221503.p2.gb27a2f9.assembly.stream.el9 → 4.21.0-202510151957.p2.g0a0890a.assembly.stream.el9
s390utils-base 2:2.33.1-2.el9 → 2:2.36.0-2.el9
s390utils-core 2:2.33.1-2.el9 → 2:2.36.0-2.el9
s390utils-se-data 2:2.33.1-2.el9 → 2:2.36.0-2.el9
vim-minimal 2:8.2.2637-22.el9_6 → 2:8.2.2637-22.el9_6.1

Extensions

Full list (143 packages)

NetworkManager-libreswan-1.2.24-1.el9.s390x
bison-3.7.4-5.el9.s390x
capstone-4.0.2-10.el9.s390x
corosync-3.1.9-2.el9_6.s390x
corosynclib-3.1.9-2.el9_6.s390x
cpp-11.5.0-5.el9_5.s390x
elfutils-libelf-devel-0.192-6.el9_6.s390x
fence-agents-all-4.10.0-86.el9_6.9.s390x
fence-agents-amt-ws-4.10.0-86.el9_6.9.noarch
fence-agents-apc-4.10.0-86.el9_6.9.noarch
fence-agents-apc-snmp-4.10.0-86.el9_6.9.noarch
fence-agents-bladecenter-4.10.0-86.el9_6.9.noarch
fence-agents-brocade-4.10.0-86.el9_6.9.noarch
fence-agents-cisco-mds-4.10.0-86.el9_6.9.noarch
fence-agents-cisco-ucs-4.10.0-86.el9_6.9.noarch
fence-agents-common-4.10.0-86.el9_6.9.noarch
fence-agents-drac5-4.10.0-86.el9_6.9.noarch
fence-agents-eaton-snmp-4.10.0-86.el9_6.9.noarch
fence-agents-emerson-4.10.0-86.el9_6.9.noarch
fence-agents-eps-4.10.0-86.el9_6.9.noarch
fence-agents-heuristics-ping-4.10.0-86.el9_6.9.noarch
fence-agents-hpblade-4.10.0-86.el9_6.9.noarch
fence-agents-ibmblade-4.10.0-86.el9_6.9.noarch
fence-agents-ifmib-4.10.0-86.el9_6.9.noarch
fence-agents-ilo-moonshot-4.10.0-86.el9_6.9.noarch
fence-agents-ilo-mp-4.10.0-86.el9_6.9.noarch
fence-agents-ilo-ssh-4.10.0-86.el9_6.9.noarch
fence-agents-ilo2-4.10.0-86.el9_6.9.noarch
fence-agents-intelmodular-4.10.0-86.el9_6.9.noarch
fence-agents-ipdu-4.10.0-86.el9_6.9.noarch
fence-agents-ipmilan-4.10.0-86.el9_6.9.noarch
fence-agents-kdump-4.10.0-86.el9_6.9.s390x
fence-agents-mpath-4.10.0-86.el9_6.9.noarch
fence-agents-redfish-4.10.0-86.el9_6.9.s390x
fence-agents-rhevm-4.10.0-86.el9_6.9.noarch
fence-agents-rsa-4.10.0-86.el9_6.9.noarch
fence-agents-rsb-4.10.0-86.el9_6.9.noarch
fence-agents-sbd-4.10.0-86.el9_6.9.noarch
fence-agents-scsi-4.10.0-86.el9_6.9.noarch
fence-agents-vmware-rest-4.10.0-86.el9_6.9.noarch
fence-agents-vmware-soap-4.10.0-86.el9_6.9.noarch
fence-agents-wti-4.10.0-86.el9_6.9.noarch
fence-agents-zvm-4.10.0-86.el9_6.9.s390x
flex-2.6.4-9.el9.s390x
gcc-11.5.0-5.el9_5.s390x
glibc-devel-2.34-168.el9_6.23.s390x
glibc-headers-2.34-168.el9_6.23.s390x
gnutls-dane-3.8.3-6.el9_6.2.s390x
gnutls-utils-3.8.3-6.el9_6.2.s390x
ipmitool-1.8.18-27.el9.s390x
kata-containers-3.17.0-4.rhaos4.19.el9.s390x
kernel-5.14.0-570.55.1.el9_6.s390x
kernel-core-5.14.0-570.55.1.el9_6.s390x
kernel-devel-5.14.0-570.55.1.el9_6.s390x
kernel-headers-5.14.0-570.55.1.el9_6.s390x
kernel-modules-5.14.0-570.55.1.el9_6.s390x
kernel-modules-extra-5.14.0-570.55.1.el9_6.s390x
krb5-pkinit-1.21.1-8.el9_6.s390x
krb5-workstation-1.21.1-8.el9_6.s390x
ldns-1.7.1-12.el9.s390x
libasan-11.5.0-5.el9_5.s390x
libfdt-1.6.0-7.el9.s390x
libkadm5-1.21.1-8.el9_6.s390x
libknet1-1.28-1.el9.s390x
libknet1-compress-bzip2-plugin-1.28-1.el9.s390x
libknet1-compress-lz4-plugin-1.28-1.el9.s390x
libknet1-compress-lzma-plugin-1.28-1.el9.s390x
libknet1-compress-lzo2-plugin-1.28-1.el9.s390x
libknet1-compress-plugins-all-1.28-1.el9.s390x
libknet1-compress-zlib-plugin-1.28-1.el9.s390x
libknet1-compress-zstd-plugin-1.28-1.el9.s390x
libknet1-crypto-nss-plugin-1.28-1.el9.s390x
libknet1-crypto-openssl-plugin-1.28-1.el9.s390x
libknet1-crypto-plugins-all-1.28-1.el9.s390x
libknet1-plugins-all-1.28-1.el9.s390x
libmpc-1.2.1-4.el9.s390x
libnozzle1-1.28-1.el9.s390x
libpng-2:1.6.37-12.el9.s390x
libqb-2.0.8-1.el9.s390x
libreswan-5.2-1.el9fdp.s390x
libubsan-11.5.0-5.el9_5.s390x
libwsman1-2.6.8-23.el9.s390x
libxcrypt-devel-4.4.18-3.el9.s390x
libxslt-1.1.34-13.el9_6.s390x
libzstd-devel-1.5.5-1.el9.s390x
lm_sensors-libs-3.6.0-10.el9.s390x
m4-1.4.19-1.el9.s390x
make-1:4.3-8.el9.s390x
net-snmp-libs-1:5.9.1-17.el9.s390x
net-snmp-utils-1:5.9.1-17.el9.s390x
nspr-4.36.0-4.el9_4.s390x
nss-3.112.0-4.el9_4.s390x
nss-softokn-3.112.0-4.el9_4.s390x
nss-softokn-freebl-3.112.0-4.el9_4.s390x
nss-sysinit-3.112.0-4.el9_4.s390x
nss-tools-3.112.0-4.el9_4.s390x
nss-util-3.112.0-4.el9_4.s390x
openssl-devel-1:3.2.2-6.el9_5.1.s390x
openvswitch3.5-ipsec-3.5.1-33.el9fdp.s390x
openwsman-python3-2.6.8-23.el9.s390x
pacemaker-2.1.9-1.2.el9_6.s390x
pacemaker-cli-2.1.9-1.2.el9_6.s390x
pacemaker-cluster-libs-2.1.9-1.2.el9_6.s390x
pacemaker-libs-2.1.9-1.2.el9_6.s390x
pacemaker-schemas-2.1.9-1.2.el9_6.noarch
pcp-conf-6.3.7-1.el9_6.s390x
pcp-libs-6.3.7-1.el9_6.s390x
pcs-0.11.9-2.el9_6.1.s390x
perl-TimeDate-1:2.33-6.el9.noarch
pixman-0.40.0-6.el9_3.s390x
protobuf-3.14.0-16.el9.s390x
python3-cffi-1.14.5-5.el9.s390x
python3-cryptography-36.0.1-5.el9_6.s390x
python3-lxml-4.6.5-3.el9.s390x
python3-openvswitch3.5-3.5.1-33.el9fdp.s390x
python3-ply-3.11-14.el9.noarch
python3-pycparser-2.20-6.el9.noarch
python3-pycurl-7.43.0.6-8.el9.s390x
python3-pyparsing-2.4.7-9.el9.noarch
python3-tornado-6.4.2-2.el9_6.2.s390x
qemu-img-17:9.1.0-15.el9_6.9.s390x
qemu-kvm-common-17:9.1.0-15.el9_6.9.s390x
qemu-kvm-core-17:9.1.0-15.el9_6.9.s390x
redhat-logos-90.5-1.el9_6.1.s390x
resource-agents-4.10.0-71.el9_6.11.s390x
ruby-3.0.7-165.el9_5.s390x
ruby-default-gems-3.0.7-165.el9_5.noarch
ruby-libs-3.0.7-165.el9_5.s390x
rubygem-bigdecimal-3.0.0-165.el9_5.s390x
rubygem-bundler-2.2.33-165.el9_5.noarch
rubygem-io-console-0.5.7-165.el9_5.s390x
rubygem-json-2.5.1-165.el9_5.s390x
rubygem-psych-3.3.2-165.el9_5.s390x
rubygem-rdoc-6.3.4.1-165.el9_5.noarch
rubygem-rexml-3.2.5-165.el9_5.noarch
rubygems-3.2.33-165.el9_5.noarch
sbd-1.5.2-1.el9.s390x
sysstat-12.5.4-9.el9.s390x
telnet-1:0.17-85.el9.s390x
usbguard-1.0.0-16.el9.s390x
usbguard-selinux-1.0.0-16.el9.noarch
virtiofsd-1.13.2-1.el9_6.s390x
zlib-devel-1.2.11-40.el9.s390x

Red Hat Enterprise Linux CoreOS base layer: 9.6.20251017-0

View changelog in Markdown or change previous release:

Source code for this page located on github